diff --git a/.gitattributes b/.gitattributes
index 05b1a132398..1e9bf994ead 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -2,3 +2,5 @@
 **/ModuleBindings/** linguist-generated=true eol=lf
 /docs/llms/** linguist-generated=true
 /docs/llms/*-details.json linguist-generated=false
+/tools/stack-bench/** text eol=lf
+/tools/stack-bench/**/*.woff2 -text -diff
diff --git a/codex-plugin/plugins/spacetimedb/skills/typescript-client/SKILL.md b/codex-plugin/plugins/spacetimedb/skills/typescript-client/SKILL.md
index 3a31183133f..62f86ff36fc 100644
--- a/codex-plugin/plugins/spacetimedb/skills/typescript-client/SKILL.md
+++ b/codex-plugin/plugins/spacetimedb/skills/typescript-client/SKILL.md
@@ -18,7 +18,7 @@ Generated bindings convert snake_case names to camelCase, including row fields:
 ## React: main.tsx
 
 ```typescript
-import React, { useEffect, useMemo } from 'react';
+import React, { useMemo } from 'react';
 import ReactDOM from 'react-dom/client';
 import { SpacetimeDBProvider } from 'spacetimedb/react';
 import { DbConnection } from './module_bindings';
@@ -30,6 +30,7 @@ function Root() {
     DbConnection.builder()
       .withUri(SPACETIMEDB_URI)
       .withDatabaseName(MODULE_NAME)
+      // Reuse the token issued on the previous connection.
       .withToken(localStorage.getItem('auth_token') || undefined),
     []
   );
@@ -46,6 +47,7 @@ ReactDOM.createRoot(document.getElementById('root')!).render(<Root />);
 ## React: App.tsx
 
 ```typescript
+import { useEffect } from 'react';
 import { useTable, useSpacetimeDB } from 'spacetimedb/react';
 import { DbConnection, tables } from './module_bindings';
 
@@ -53,7 +55,7 @@ function App() {
   const { isActive, identity: myIdentity, token, getConnection } = useSpacetimeDB();
   const conn = getConnection() as DbConnection | null;
 
-  // Save auth token
+  // Persist the issued token for the next page load.
   useEffect(() => { if (token) localStorage.setItem('auth_token', token); }, [token]);
 
   // Subscribe when connected. Prefer typed query builders over raw SQL
diff --git a/codex-plugin/plugins/spacetimedb/skills/typescript-server/SKILL.md b/codex-plugin/plugins/spacetimedb/skills/typescript-server/SKILL.md
index c9f2e7343fd..ba24bf781d5 100644
--- a/codex-plugin/plugins/spacetimedb/skills/typescript-server/SKILL.md
+++ b/codex-plugin/plugins/spacetimedb/skills/typescript-server/SKILL.md
@@ -98,6 +98,10 @@ Every column is a `t` builder value:
 
 Modifiers: `.primaryKey()`, `.autoInc()`, `.unique()`, `.index('btree')`, `.default(value)`.
 
+`.primaryKey()` and `.unique()` apply to one column. For uniqueness across
+multiple columns, use a surrogate key, the multi-column index below, and a
+reducer that rejects an existing index match before inserting.
+
 Use `.default(value)` only for a newly appended migration-safe field. Do not put defaults on primary-key, unique, or auto-increment columns.
 
 Optional columns: `nickname: t.option(t.string())`
@@ -130,7 +134,9 @@ export { default } from './schema';   // re-export the schema for the module ent
 
 ## Reducers
 
-Reducers are created with `spacetimedb.reducer(...)`; the export name becomes the reducer name:
+Reducers are created with `spacetimedb.reducer(...)`. An exported `signUp`
+becomes `signUp` in generated clients and `sign_up` in `spacetime call` and
+`describe`:
 
 ```typescript
 export const createEntity = spacetimedb.reducer(
@@ -278,9 +284,22 @@ const Shape = t.enum('Shape', {
 A client subscribing to a view receives only the rows it returns. Use a per-user view
 (keyed on `ctx.sender`) for per-viewer access control: deleting a row it depends on
 (e.g. a membership row) automatically drops the rows it was exposing from that client.
+Use index accessors in views. Do not scan a whole table with `.iter()` when an
+indexed lookup can select the required rows.
 
 `t.row(...)` and `t.object(...)` return schema builders, not TypeScript runtime row types. Let a view callback infer its result, or annotate a separately declared structural type such as `Array<{ sku: bigint; label: string }>`. A named output type must not reuse the generated PascalCase name of its view accessor (for example, reserve `DiscountedProduct` for a `discounted_product` view).
 
+A view context is `ViewCtx<S>` (and `AnonymousViewCtx<S>`), both exported from
+`spacetimedb/server`. It carries `sender`, a read-only `db`, and `from`; it is
+not a `ReducerCtx`, so a helper shared between a reducer and a view must accept
+either:
+
+```typescript
+import type { ReducerCtx, ViewCtx, InferSchema } from 'spacetimedb/server';
+type S = InferSchema<typeof spacetimedb>;
+function stockOf(ctx: ReducerCtx<S> | ViewCtx<S>, itemId: bigint) { ... }
+```
+
 Both `spacetimedb.view(...)` and `spacetimedb.anonymousView(...)` take three arguments: view options, the declared return schema, and the callback.
 
 ```typescript
@@ -288,7 +307,7 @@ Both `spacetimedb.view(...)` and `spacetimedb.anonymousView(...)` take three arg
 export const activeUsers = spacetimedb.anonymousView(
   { name: 'active_users', public: true },
   t.array(entity.rowType),
-  (ctx) => [...ctx.db.entity.iter()].filter(e => e.active)
+  (ctx) => [...ctx.db.entity.active.filter(true)]        // active: t.bool().index('btree')
 );
 
 // Per-user view (varies by ctx.sender):
diff --git a/crates/bindings-typescript/src/lib/query.ts b/crates/bindings-typescript/src/lib/query.ts
index bb93b0e6ce3..0c17e3d145a 100644
--- a/crates/bindings-typescript/src/lib/query.ts
+++ b/crates/bindings-typescript/src/lib/query.ts
@@ -248,19 +248,21 @@ export type NamespacedQueryBuilder<SchemaDef extends UntypedSchemaDef> =
  * A runtime reference to a table. This materializes the RowExpr for us.
  * TODO: Maybe add the full SchemaDef to the type signature depending on how joins will work.
  */
-export type TableRef<TableDef extends TypedTableDef> = Readonly<{
-  type: 'table';
-  sourceName: TableDef['sourceName'];
-  accessorName: string;
-  cols: RowExpr<TableDef>;
-  indexedCols: IndexedRowExpr<TableDef>;
-  tableDef: TableDef;
+// Keep this named so TypeScript diagnostics show `TableRef` instead of its
+// expanded structure.
+export interface TableRef<TableDef extends TypedTableDef> {
+  readonly type: 'table';
+  readonly sourceName: TableDef['sourceName'];
+  readonly accessorName: string;
+  readonly cols: RowExpr<TableDef>;
+  readonly indexedCols: IndexedRowExpr<TableDef>;
+  readonly tableDef: TableDef;
   // Delegated UntypedTableDef properties for compatibility.
-  columns: TableDef['columns'];
-  indexes: TableDef['indexes'];
-  rowType: TableDef['rowType'];
-  constraints: any;
-}>;
+  readonly columns: TableDef['columns'];
+  readonly indexes: TableDef['indexes'];
+  readonly rowType: TableDef['rowType'];
+  readonly constraints: any;
+}
 
 class TableRefImpl<TableDef extends TypedTableDef>
   implements TableRef<TableDef>, From<TableDef>
diff --git a/crates/bindings-typescript/src/sdk/connection_manager.ts b/crates/bindings-typescript/src/sdk/connection_manager.ts
index 211b01b5add..42febd5d221 100644
--- a/crates/bindings-typescript/src/sdk/connection_manager.ts
+++ b/crates/bindings-typescript/src/sdk/connection_manager.ts
@@ -145,9 +145,7 @@ class ConnectionManagerImpl {
         clearTimeout(managed.reconnectTimer);
         managed.reconnectTimer = null;
         managed.reconnectAttempt = 0;
-        if (managed.builder) {
-          this.#buildManagedConnection(managed, managed.builder);
-        }
+        this.#reconnectManagedConnection(managed);
         continue;
       }
 
@@ -179,9 +177,7 @@ class ConnectionManagerImpl {
     connection.disconnect();
     this.#updateState(managed, { isActive: false });
     managed.reconnectAttempt = 0;
-    if (managed.builder) {
-      this.#buildManagedConnection(managed, managed.builder);
-    }
+    this.#reconnectManagedConnection(managed);
   }
 
   /** Generates a unique key for a connection based on URI and module name. */
@@ -294,6 +290,14 @@ class ConnectionManagerImpl {
     }
   }
 
+  /** Reconnect with the issued token. Explicit rebuilds use the caller's token. */
+  #reconnectManagedConnection(managed: ManagedConnection): void {
+    if (!managed.builder) return;
+    const token = managed.state.token;
+    if (token) managed.builder.withToken(token);
+    this.#buildManagedConnection(managed, managed.builder);
+  }
+
   #buildManagedConnection<T extends DbConnectionImpl<any>>(
     managed: ManagedConnection,
     builder: DbConnectionBuilder<T>
@@ -349,7 +353,7 @@ class ConnectionManagerImpl {
         return;
       }
 
-      this.#buildManagedConnection(managed, managed.builder);
+      this.#reconnectManagedConnection(managed);
     }, delay);
   }
 
diff --git a/crates/bindings-typescript/tests/connection_manager_liveness.test.ts b/crates/bindings-typescript/tests/connection_manager_liveness.test.ts
index ea24ea6887e..e9f76a909e9 100644
--- a/crates/bindings-typescript/tests/connection_manager_liveness.test.ts
+++ b/crates/bindings-typescript/tests/connection_manager_liveness.test.ts
@@ -12,7 +12,7 @@ type ErrorContextInterface = { isActive: boolean };
 class MockConnection {
   isActive = false;
   identity = undefined;
-  token = undefined;
+  token: string | undefined;
   connectionId = ConnectionId.random();
   isDisconnectRequested = false;
   disconnected = false;
@@ -28,6 +28,10 @@ class MockConnection {
     (ctx: ErrorContextInterface, error: Error) => void
   >();
 
+  constructor(private readonly issuedToken?: string) {
+    this.token = undefined;
+  }
+
   get isSocketClosed(): boolean {
     return this.socketClosed;
   }
@@ -63,6 +67,7 @@ class MockConnection {
 
   simulateConnect(): void {
     this.isActive = true;
+    this.token = this.issuedToken;
     for (const cb of this.#onConnect) cb(this);
   }
   simulateDisconnect(error?: Error): void {
@@ -74,7 +79,9 @@ class MockConnection {
 
 class MockBuilder {
   buildCount = 0;
+  presentedTokens: Array<string | undefined> = [];
   connections: MockConnection[] = [];
+  #token: string | undefined;
 
   #onConnect = new Set<(conn: MockConnection) => void>();
   #onDisconnect = new Set<
@@ -84,9 +91,17 @@ class MockBuilder {
     (ctx: ErrorContextInterface, error: Error) => void
   >();
 
+  constructor(private readonly issuedToken?: string) {}
+
+  withToken(token?: string): MockBuilder {
+    this.#token = token;
+    return this;
+  }
+
   build(): MockConnection {
-    const connection = new MockConnection();
+    const connection = new MockConnection(this.issuedToken);
     this.buildCount += 1;
+    this.presentedTokens.push(this.#token);
     this.connections.push(connection);
     for (const cb of this.#onConnect) connection.register('connect', cb);
     for (const cb of this.#onDisconnect) connection.register('disconnect', cb);
@@ -201,6 +216,32 @@ describe('ConnectionManager liveness recovery', () => {
     ConnectionManager.release(key);
   });
 
+  test('reuses the issued token when reviving a dead socket', () => {
+    const key = nextKey();
+    const builder = new MockBuilder('issued-token');
+    const first = retain(key, builder);
+    expect(builder.presentedTokens).toEqual([undefined]);
+
+    first.simulateConnect();
+    first.socketClosed = true;
+    fire('win:online');
+
+    expect(builder.presentedTokens).toEqual([undefined, 'issued-token']);
+    ConnectionManager.release(key);
+  });
+
+  test('an explicit rebuild uses the caller token', () => {
+    const key = nextKey();
+    const firstBuilder = new MockBuilder('issued-token');
+    retain(key, firstBuilder).simulateConnect();
+
+    const replacement = new MockBuilder().withToken('caller-token');
+    ConnectionManager.rebuild(key, replacement as any);
+
+    expect(replacement.presentedTokens).toEqual(['caller-token']);
+    ConnectionManager.release(key);
+  });
+
   test('does not rebuild a healthy connection on resume', () => {
     const key = nextKey();
     const builder = new MockBuilder();
diff --git a/crates/bindings-typescript/tests/table_ref_error_message.test.ts b/crates/bindings-typescript/tests/table_ref_error_message.test.ts
new file mode 100644
index 00000000000..009a9c192dd
--- /dev/null
+++ b/crates/bindings-typescript/tests/table_ref_error_message.test.ts
@@ -0,0 +1,79 @@
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import * as ts from 'typescript';
+import { describe, expect, it } from 'vitest';
+
+const bindingsRoot = path.resolve(
+  path.dirname(fileURLToPath(import.meta.url)),
+  '..'
+);
+
+function runTypecheck(source: string) {
+  const tmpDir = mkdtempSync(path.join(tmpdir(), 'stdb-tableref-diag-'));
+  const reproPath = path.join(tmpDir, 'repro.ts');
+  writeFileSync(reproPath, source);
+
+  try {
+    const options: ts.CompilerOptions = {
+      target: ts.ScriptTarget.ESNext,
+      module: ts.ModuleKind.ESNext,
+      strict: true,
+      noEmit: true,
+      skipLibCheck: true,
+      forceConsistentCasingInFileNames: true,
+      allowImportingTsExtensions: true,
+      noImplicitAny: true,
+      moduleResolution: ts.ModuleResolutionKind.Bundler,
+      useDefineForClassFields: true,
+      verbatimModuleSyntax: true,
+      isolatedModules: true,
+    };
+
+    const host = ts.createCompilerHost(options);
+    const program = ts.createProgram(
+      [reproPath, path.join(bindingsRoot, 'src/server/sys.d.ts')],
+      options,
+      host
+    );
+    const diagnostics = ts.getPreEmitDiagnostics(program);
+    return diagnostics.map(d =>
+      ts.flattenDiagnosticMessageText(d.messageText, '\n')
+    );
+  } finally {
+    rmSync(tmpDir, { recursive: true, force: true });
+  }
+}
+
+describe('TableRef diagnostics', () => {
+  const source = `
+import { t } from ${JSON.stringify(path.join(bindingsRoot, 'src/server/index.ts'))};
+import { table } from ${JSON.stringify(path.join(bindingsRoot, 'src/lib/table.ts'))};
+import { createTableRefFromDef } from ${JSON.stringify(path.join(bindingsRoot, 'src/lib/query.ts'))};
+import type { AllUnique } from ${JSON.stringify(path.join(bindingsRoot, 'src/lib/constraints.ts'))};
+
+const cartItem = table(
+  { name: 'cart_item' },
+  { id: t.u64().primaryKey().autoInc(), accountId: t.u64(), quantity: t.u32() }
+);
+
+const ref = createTableRefFromDef(cartItem as any, 'cartItem');
+type Boom = AllUnique<typeof ref, ['accountId']>;
+declare const b: Boom;
+`;
+
+  it('names the type instead of dumping its structure', () => {
+    const messages = runTypecheck(source);
+    const constraintError = messages.find(m =>
+      m.includes("does not satisfy the constraint 'UntypedTableDef'")
+    );
+
+    expect(constraintError).toBeDefined();
+    // The name, not the shape.
+    expect(constraintError).toContain('TableRef<');
+    expect(constraintError).not.toContain('type: "table"');
+    expect(constraintError).not.toContain('accessorName');
+    expect(constraintError.length).toBeLessThan(250);
+  }, 15000);
+});
diff --git a/crates/cli/build.rs b/crates/cli/build.rs
index c5bd4303464..90da9fa3bdd 100644
--- a/crates/cli/build.rs
+++ b/crates/cli/build.rs
@@ -110,6 +110,7 @@ fn generate_template_files() {
 
     // Embed skill files from skills/*/SKILL.md
     let skills_dir = repo_root.join("skills");
+    println!("cargo:rerun-if-changed={}", skills_dir.display());
     let skill_names = discover_skill_names(&skills_dir);
 
     generated_code.push_str("pub fn get_skill(name: &str) -> Option<&'static str> {\n");
diff --git a/crates/cli/src/subcommands/dev.rs b/crates/cli/src/subcommands/dev.rs
index a0588b6de50..a2622c8ea0c 100644
--- a/crates/cli/src/subcommands/dev.rs
+++ b/crates/cli/src/subcommands/dev.rs
@@ -738,7 +738,7 @@ pub async fn exec(mut config: Config, args: &ArgMatches) -> Result<(), anyhow::E
     let loaded_config_dir = loaded_config.as_ref().map(|lc| lc.config_dir.clone());
 
     generate_build_and_publish(
-        &config,
+        &mut config,
         &project_dir,
         loaded_config_dir.as_deref(),
         &spacetimedb_dir,
@@ -853,7 +853,7 @@ pub async fn exec(mut config: Config, args: &ArgMatches) -> Result<(), anyhow::E
 
                 println!("\n{}", "File change detected, rebuilding...".yellow());
                 match generate_build_and_publish(
-                    &config,
+                    &mut config,
                     &project_dir,
                     loaded_config_dir.as_deref(),
                     &spacetimedb_dir,
@@ -1000,7 +1000,7 @@ fn upsert_env_db_names_and_hosts(env_path: &Path, server_host_url: &str, databas
 
 #[allow(clippy::too_many_arguments)]
 async fn generate_build_and_publish(
-    config: &Config,
+    config: &mut Config,
     project_dir: &Path,
     config_dir: Option<&Path>,
     spacetimedb_dir: &Path,
@@ -1146,7 +1146,8 @@ async fn generate_build_and_publish(
             publish_entry.insert("break-clients".to_string(), json!(true));
         }
 
-        publish::exec_from_entry(config.clone(), publish_entry, config_dir, clear_database, yes).await?;
+        // Preserve a token created during publish for logs and later rebuilds.
+        publish::exec_from_entry(config, publish_entry, config_dir, clear_database, yes).await?;
     }
 
     println!("{}", "Published successfully!".green().bold());
diff --git a/crates/cli/src/subcommands/publish.rs b/crates/cli/src/subcommands/publish.rs
index 745664880f0..63d704d25af 100644
--- a/crates/cli/src/subcommands/publish.rs
+++ b/crates/cli/src/subcommands/publish.rs
@@ -450,7 +450,7 @@ pub async fn exec_with_options(
 }
 
 pub async fn exec_from_entry(
-    mut config: Config,
+    config: &mut Config,
     entry: HashMap<String, serde_json::Value>,
     config_dir: Option<&std::path::Path>,
     clear_database: ClearMode,
@@ -465,7 +465,7 @@ pub async fn exec_from_entry(
 
     let yes = if force { YesFlags::all() } else { YesFlags::default() };
 
-    execute_publish_configs(&mut config, vec![command_config], true, config_dir, clear_database, yes).await
+    execute_publish_configs(config, vec![command_config], true, config_dir, clear_database, yes).await
 }
 
 async fn execute_publish_configs<'a>(
diff --git a/skills/spacetimedb-typescript-core/SKILL.md b/skills/spacetimedb-typescript-core/SKILL.md
new file mode 100644
index 00000000000..993a527a452
--- /dev/null
+++ b/skills/spacetimedb-typescript-core/SKILL.md
@@ -0,0 +1,101 @@
+---
+name: spacetimedb-typescript-core
+description: Core SpacetimeDB TypeScript server and client SDK syntax for building an application without framework or architecture guidance.
+license: Apache-2.0
+metadata:
+  author: clockworklabs
+  version: "1.0"
+  language: typescript
+---
+
+# SpacetimeDB TypeScript Core API
+
+## Server module
+
+Define tables with `table()`, bind them with `schema()`, and export the schema
+as the module default. Export reducers from the same module or its entry file.
+
+```typescript
+import { schema, table, t } from 'spacetimedb/server';
+
+const record = table(
+  { name: 'record', public: true },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    label: t.string().index('btree'),
+    value: t.u32(),
+  },
+);
+
+const spacetimedb = schema({ record });
+export default spacetimedb;
+
+export const createRecord = spacetimedb.reducer(
+  { label: t.string(), value: t.u32() },
+  (ctx, { label, value }) => {
+    ctx.db.record.insert({ id: 0n, label, value });
+  },
+);
+```
+
+Table names must be snake_case. The keys passed to `schema({ ... })` are the
+server-side `ctx.db` accessor names. A split module must re-export the schema
+as the default export from its entry file.
+
+## Types and table access
+
+Common builders are `t.string()`, `t.bool()`, `t.u32()`, `t.i32()`,
+`t.u64()`, `t.i64()`, `t.identity()`, `t.timestamp()`, and
+`t.option(inner)`. The 64-bit integer builders use TypeScript `bigint` values.
+Use `0n` for an auto-increment `u64` or `i64` field during insertion.
+
+Column modifiers include `.primaryKey()`, `.autoInc()`, `.unique()`, and
+`.index('btree')`.
+
+```typescript
+const row = ctx.db.record.id.find(id);                  // row | null
+const inserted = ctx.db.record.insert(values);          // inserted row
+if (row) ctx.db.record.id.update({ ...row, value: 2 }); // update by primary key
+ctx.db.record.id.delete(id);                            // delete by primary key
+const matching = [...ctx.db.record.label.filter(label)];
+const all = [...ctx.db.record.iter()];
+```
+
+`iter()` and `filter()` return iterators. Spread them before using array
+methods. Insert through the table accessor, not through an index accessor.
+
+## Generated client bindings
+
+Generated bindings convert snake_case table, reducer, and field names to
+camelCase. A server reducer named `createRecord` is called as `createRecord` in a
+TypeScript client.
+
+Create a connection with the generated `DbConnection`:
+
+```typescript
+import { DbConnection, tables } from './module_bindings';
+
+const connection = DbConnection.builder()
+  .withUri(serverUri)
+  .withDatabaseName(moduleName)
+  .onConnect(ctx => {
+    ctx.subscriptionBuilder()
+      .onApplied(() => console.log('ready'))
+      .subscribe([tables.record]);
+  })
+  .build();
+```
+
+Call reducers with an object argument:
+
+```typescript
+await connection.reducers.createRecord({ label: 'Example', value: 1 });
+```
+
+The generated database accessors support row callbacks:
+
+```typescript
+connection.db.record.onInsert((_ctx, row) => console.log(row.label));
+connection.db.record.onUpdate((_ctx, oldRow, newRow) => console.log(oldRow, newRow));
+connection.db.record.onDelete((_ctx, row) => console.log(row.id));
+```
diff --git a/skills/typescript-client/SKILL.md b/skills/typescript-client/SKILL.md
index 3a31183133f..62f86ff36fc 100644
--- a/skills/typescript-client/SKILL.md
+++ b/skills/typescript-client/SKILL.md
@@ -18,7 +18,7 @@ Generated bindings convert snake_case names to camelCase, including row fields:
 ## React: main.tsx
 
 ```typescript
-import React, { useEffect, useMemo } from 'react';
+import React, { useMemo } from 'react';
 import ReactDOM from 'react-dom/client';
 import { SpacetimeDBProvider } from 'spacetimedb/react';
 import { DbConnection } from './module_bindings';
@@ -30,6 +30,7 @@ function Root() {
     DbConnection.builder()
       .withUri(SPACETIMEDB_URI)
       .withDatabaseName(MODULE_NAME)
+      // Reuse the token issued on the previous connection.
       .withToken(localStorage.getItem('auth_token') || undefined),
     []
   );
@@ -46,6 +47,7 @@ ReactDOM.createRoot(document.getElementById('root')!).render(<Root />);
 ## React: App.tsx
 
 ```typescript
+import { useEffect } from 'react';
 import { useTable, useSpacetimeDB } from 'spacetimedb/react';
 import { DbConnection, tables } from './module_bindings';
 
@@ -53,7 +55,7 @@ function App() {
   const { isActive, identity: myIdentity, token, getConnection } = useSpacetimeDB();
   const conn = getConnection() as DbConnection | null;
 
-  // Save auth token
+  // Persist the issued token for the next page load.
   useEffect(() => { if (token) localStorage.setItem('auth_token', token); }, [token]);
 
   // Subscribe when connected. Prefer typed query builders over raw SQL
diff --git a/skills/typescript-server/SKILL.md b/skills/typescript-server/SKILL.md
index c9f2e7343fd..ba24bf781d5 100644
--- a/skills/typescript-server/SKILL.md
+++ b/skills/typescript-server/SKILL.md
@@ -98,6 +98,10 @@ Every column is a `t` builder value:
 
 Modifiers: `.primaryKey()`, `.autoInc()`, `.unique()`, `.index('btree')`, `.default(value)`.
 
+`.primaryKey()` and `.unique()` apply to one column. For uniqueness across
+multiple columns, use a surrogate key, the multi-column index below, and a
+reducer that rejects an existing index match before inserting.
+
 Use `.default(value)` only for a newly appended migration-safe field. Do not put defaults on primary-key, unique, or auto-increment columns.
 
 Optional columns: `nickname: t.option(t.string())`
@@ -130,7 +134,9 @@ export { default } from './schema';   // re-export the schema for the module ent
 
 ## Reducers
 
-Reducers are created with `spacetimedb.reducer(...)`; the export name becomes the reducer name:
+Reducers are created with `spacetimedb.reducer(...)`. An exported `signUp`
+becomes `signUp` in generated clients and `sign_up` in `spacetime call` and
+`describe`:
 
 ```typescript
 export const createEntity = spacetimedb.reducer(
@@ -278,9 +284,22 @@ const Shape = t.enum('Shape', {
 A client subscribing to a view receives only the rows it returns. Use a per-user view
 (keyed on `ctx.sender`) for per-viewer access control: deleting a row it depends on
 (e.g. a membership row) automatically drops the rows it was exposing from that client.
+Use index accessors in views. Do not scan a whole table with `.iter()` when an
+indexed lookup can select the required rows.
 
 `t.row(...)` and `t.object(...)` return schema builders, not TypeScript runtime row types. Let a view callback infer its result, or annotate a separately declared structural type such as `Array<{ sku: bigint; label: string }>`. A named output type must not reuse the generated PascalCase name of its view accessor (for example, reserve `DiscountedProduct` for a `discounted_product` view).
 
+A view context is `ViewCtx<S>` (and `AnonymousViewCtx<S>`), both exported from
+`spacetimedb/server`. It carries `sender`, a read-only `db`, and `from`; it is
+not a `ReducerCtx`, so a helper shared between a reducer and a view must accept
+either:
+
+```typescript
+import type { ReducerCtx, ViewCtx, InferSchema } from 'spacetimedb/server';
+type S = InferSchema<typeof spacetimedb>;
+function stockOf(ctx: ReducerCtx<S> | ViewCtx<S>, itemId: bigint) { ... }
+```
+
 Both `spacetimedb.view(...)` and `spacetimedb.anonymousView(...)` take three arguments: view options, the declared return schema, and the callback.
 
 ```typescript
@@ -288,7 +307,7 @@ Both `spacetimedb.view(...)` and `spacetimedb.anonymousView(...)` take three arg
 export const activeUsers = spacetimedb.anonymousView(
   { name: 'active_users', public: true },
   t.array(entity.rowType),
-  (ctx) => [...ctx.db.entity.iter()].filter(e => e.active)
+  (ctx) => [...ctx.db.entity.active.filter(true)]        // active: t.bool().index('btree')
 );
 
 // Per-user view (varies by ctx.sender):
diff --git a/tools/llm-sequential-upgrade/.gitignore b/tools/llm-sequential-upgrade/.gitignore
index 14aa619a63d..35223d12b8f 100644
--- a/tools/llm-sequential-upgrade/.gitignore
+++ b/tools/llm-sequential-upgrade/.gitignore
@@ -27,4 +27,4 @@ telemetry/metrics.jsonl
 **/telemetry/**/metadata.json
 
 # Sequential-upgrade run output lives in the external spacetimedb-ai-test-results repo
-sequential-upgrade/sequential-upgrade-*/
+sequential-upgrade/
diff --git a/tools/llm-sequential-upgrade/read-guard.sh b/tools/llm-sequential-upgrade/read-guard.sh
new file mode 100644
index 00000000000..314c52e7cde
--- /dev/null
+++ b/tools/llm-sequential-upgrade/read-guard.sh
@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+# Write Claude Code settings that deny direct Read tool access to benchmark
+# internals. Bash is allowed, so this is not filesystem isolation.
+
+write_read_guard() {
+  local app_dir="$1" backend="$2" out siblings=""
+  out="$app_dir/.read-guard-settings.json"
+
+  local b
+  for b in spacetime postgres mongodb; do
+    [[ "$b" == "$backend" ]] && continue
+    siblings+="      \"Read(**/$b/results/**)\",
+"
+  done
+
+  cat > "$out" <<READ_GUARD_EOF
+{
+  "permissions": {
+    "allow": ["Bash"],
+    "deny": [
+$siblings      "Read(**/stack-bench/**)",
+      "Read(**/llm-oneshot/**)",
+      "Read(**/llm-sequential-upgrade/GRADING*.md)",
+      "Read(**/llm-sequential-upgrade/RUNBOOK.md)",
+      "Read(**/llm-sequential-upgrade/*.sh)",
+      "Read(**/llm-sequential-upgrade/*.mjs)",
+      "Read(**/llm-sequential-upgrade/templates/**)",
+      "Read(**/llm-sequential-upgrade/telemetry/**)",
+      "Read(**/llm-sequential-upgrade/perf-benchmark/**)",
+      "Read(**/inputs/**)",
+      "Read(**/telemetry/**)",
+      "Read(**/projects/**)",
+      "Read(**/.claude/**)",
+      "Read(.claude/**)",
+      "Read(**/memory/**)",
+      "Read(**/*.local.md)"
+    ]
+  }
+}
+READ_GUARD_EOF
+  echo "$out"
+}
diff --git a/tools/llm-sequential-upgrade/run.sh b/tools/llm-sequential-upgrade/run.sh
index 34e58c3d9b4..836894bf3f1 100644
--- a/tools/llm-sequential-upgrade/run.sh
+++ b/tools/llm-sequential-upgrade/run.sh
@@ -859,12 +859,21 @@ if [[ -n "$MODEL" ]]; then
   MODEL_FLAG="--model $MODEL"
 fi
 
+# Block direct Read tool access to grading material. Bash remains available, so
+# this is not filesystem isolation.
+source "$SCRIPT_DIR/read-guard.sh"
+READ_GUARD_SETTINGS=$(write_read_guard "$APP_DIR" "$BACKEND")
+echo "[OK] Read guard written ($(grep -c '"Read(' "$READ_GUARD_SETTINGS") deny rules)"
+
 # Build args as an array so empty optional flags (model/resume) can't break the invocation.
+# --add-dir no longer names the tool root or the prompt source: the language and
+# feature content is inlined into the prompt above, so nothing outside the app
+# has to be reachable for a build to succeed.
 CLAUDE_ARGS=(
-  --print --verbose --output-format text --dangerously-skip-permissions
+  --print --verbose --output-format text
+  --permission-mode acceptEdits
+  --settings "$READ_GUARD_SETTINGS"
   --add-dir "$APP_DIR"
-  --add-dir "$SCRIPT_DIR"
-  --add-dir "$SCRIPT_DIR/../llm-oneshot/apps/chat-app/prompts"
   --session-id "$SESSION_ID"
 )
 [[ -n "$MODEL" ]] && CLAUDE_ARGS+=(--model "$MODEL")
@@ -974,4 +983,3 @@ if node "$SCRIPT_DIR_NATIVE/parse-telemetry.mjs" "$RUN_DIR_NATIVE" "--logs-file=
 else
   echo "WARNING: Telemetry parsing failed. Raw logs at: $SHARED_TELEMETRY_DIR/logs.jsonl"
 fi
-
diff --git a/tools/stack-bench/.gitignore b/tools/stack-bench/.gitignore
new file mode 100644
index 00000000000..8a9adc19fba
--- /dev/null
+++ b/tools/stack-bench/.gitignore
@@ -0,0 +1,13 @@
+media/
+dist/
+local-notes/
+*.local.md
+.loop-test/
+results/
+snapshot-l*/
+grader/.candidates/
+.spacetime-data/
+.spacetime-data.bak-*/
+grader/.mutation-report.json
+tracks/*/overview.html
+transcripts/
diff --git a/tools/stack-bench/README.md b/tools/stack-bench/README.md
new file mode 100644
index 00000000000..a3c075f9b46
--- /dev/null
+++ b/tools/stack-bench/README.md
@@ -0,0 +1,57 @@
+# Stack Bench
+
+Stack Bench compares how coding agents build the same application with different
+technology stacks. It runs each attempt in an isolated container, tests real
+behavior, allows bounded repairs, and keeps the evidence behind every result.
+
+## What it does
+
+1. Compiles a versioned campaign that fixes the product request, model, stacks,
+   checks, budgets, repetitions, and parallelism.
+2. Verifies the runner before model work starts.
+3. Gives the coding agent only the current product work and selected stack
+   material. The agent cannot see the grader, checks, scores, or comparison data.
+4. Grades the running app through separate browser sessions and stack operations.
+5. Returns conclusive app failures for repair within the campaign budget.
+6. Records score, cost, duration, source identity, and supporting evidence.
+
+Only compatible, verified attempts become comparison data. Provider failures,
+harness failures, and incomplete measurements remain separate.
+
+## Run modes
+
+- **Sequential:** complete each selected level before starting the next. Earlier
+  checks run again to catch regressions.
+- **Dependency:** each feature opens after its required parents pass. One branch
+  can stop while unrelated branches continue. `workSelection` controls whether
+  the agent gets one ready feature, all ready features, or the full graph. The
+  manifest's `repair` object targets one failed feature or all current
+  failures and sets the repair budget.
+
+## Start here
+
+The supported v1 deployment is the Docker appliance on a dedicated Linux/amd64
+runner. The controller has root-equivalent access through the Docker socket, so
+do not run it beside unrelated workloads or credentials.
+
+1. Follow the [appliance guide](appliance/README.md) to configure and run a
+   campaign.
+2. Follow the [development guide](docs/development.md) to work from source.
+3. Use the [documentation index](docs/README.md) for architecture, grading,
+   recovery, release, and track authoring.
+
+Paid and subscription-backed model work runs only through the appliance. Local
+source commands accept non-billable adapters for development and qualification.
+
+## Ownership
+
+- `tracks/` owns product requests, feature definitions, checks, and scenarios.
+- `conditions/` owns guidance and repair feedback.
+- `backends/` owns stack material sent to the coding agent.
+- `src/stacks/` owns runtime stack adapters.
+- `commands/` and `src/` own the CLI and reusable benchmark logic.
+- `grader/`, `linter/`, and `reference-apps/` own validation.
+- `appliance/` owns deployment. `dashboard/` is an optional interface.
+
+Prompt selection and scoring selection stay separate. A behavior can be measured
+without being named in the product request.
diff --git a/tools/stack-bench/appliance/Controller.Dockerfile b/tools/stack-bench/appliance/Controller.Dockerfile
new file mode 100644
index 00000000000..ce4e9e2e965
--- /dev/null
+++ b/tools/stack-bench/appliance/Controller.Dockerfile
@@ -0,0 +1,92 @@
+# syntax=docker/dockerfile:1.7
+
+FROM docker:29.6.2-cli@sha256:feb2d49bd65f274b3e4b4620beabe2f4691e5287e496da9fbc9830ed5f780676 AS docker-cli
+FROM mcr.microsoft.com/playwright:v1.62.1-noble@sha256:c091b21d9fae78c76e85cd4356431e9b018402f172a214fc7d7a5e9a7e29d8ac AS sdk-build
+
+WORKDIR /workspace
+COPY package.json pnpm-lock.yaml pnpm-workspace.yaml ./
+COPY crates/bindings-typescript/ crates/bindings-typescript/
+RUN corepack enable \
+    && pnpm --filter spacetimedb install --frozen-lockfile --ignore-scripts \
+    && pnpm --filter spacetimedb run build \
+    && test -f crates/bindings-typescript/dist/server/index.d.ts \
+    && test -f crates/bindings-typescript/dist/server/index.mjs
+
+FROM mcr.microsoft.com/playwright:v1.62.1-noble@sha256:c091b21d9fae78c76e85cd4356431e9b018402f172a214fc7d7a5e9a7e29d8ac AS stack-bench-build
+
+WORKDIR /opt/stack-bench
+COPY tools/stack-bench/package.json tools/stack-bench/package-lock.json ./
+RUN npm ci --ignore-scripts --no-audit --no-fund
+COPY tools/stack-bench/ ./
+RUN npm run build
+
+FROM mcr.microsoft.com/playwright:v1.62.1-noble@sha256:c091b21d9fae78c76e85cd4356431e9b018402f172a214fc7d7a5e9a7e29d8ac
+
+ENV NODE_ENV=production \
+    PLAYWRIGHT_BROWSERS_PATH=/ms-playwright
+
+COPY --from=docker-cli /usr/local/bin/docker /usr/local/bin/docker
+COPY --from=docker-cli /usr/local/libexec/docker/cli-plugins /usr/local/libexec/docker/cli-plugins
+ADD --checksum=sha256:4629c757b7618056f8ddd7e2625ae9fdd94c0372a65049520bc7d9df9efc7f71 \
+    https://github.com/sigstore/cosign/releases/download/v3.1.3/cosign-linux-amd64 \
+    /usr/local/bin/cosign
+
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends lsof=4.95.0-1build3 \
+    && chmod 0555 /usr/local/bin/cosign \
+    && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /opt/stack-bench
+COPY tools/stack-bench/package.json tools/stack-bench/package-lock.json ./
+RUN npm ci --omit=dev --ignore-scripts --no-audit --no-fund \
+    && test "$(node -p "require('playwright/package.json').version")" = "1.62.1"
+
+ARG SOURCE_REVISION
+ARG SOURCE_SHA256
+ARG BINARY_SOURCE_SHA256
+RUN printf '%s' "$SOURCE_REVISION" | grep -Eq '^[0-9a-f]{40}([0-9a-f]{24})?$' \
+    && printf '%s' "$SOURCE_SHA256" | grep -Eq '^[0-9a-f]{64}$' \
+    && printf '%s' "$BINARY_SOURCE_SHA256" | grep -Eq '^[0-9a-f]{64}$'
+LABEL org.opencontainers.image.title="Stack Bench controller" \
+      org.opencontainers.image.revision="$SOURCE_REVISION" \
+      io.spacetimedb.stack-bench.binary-source-sha256="$BINARY_SOURCE_SHA256"
+ENV STACK_BENCH_SOURCE_REVISION=$SOURCE_REVISION \
+    STACK_BENCH_SOURCE_SHA256=$SOURCE_SHA256 \
+    STACK_BENCH_BINARY_SOURCE_SHA256=$BINARY_SOURCE_SHA256
+
+COPY tools/stack-bench/ ./
+COPY --from=stack-bench-build /opt/stack-bench/dist/ ./dist/
+COPY skills/ /skills/
+COPY crates/bindings-typescript/ /opt/stack-bench-embedded-deps/bindings-typescript/
+COPY --from=sdk-build /workspace/crates/bindings-typescript/dist/ /opt/stack-bench-embedded-deps/bindings-typescript/dist/
+COPY licenses/BSL.txt /opt/stack-bench-embedded-deps/BSL.txt
+
+RUN node dist/container/binary-provenance.js verify \
+      --root /opt/stack-bench --source-sha256 "$BINARY_SOURCE_SHA256" \
+    && rm -rf tests dist/tests \
+    && install -m 0555 container/bin/spacetimedb-cli \
+      /opt/stack-bench-embedded-deps/spacetimedb-cli \
+    && install -m 0555 container/bin/spacetimedb-standalone \
+      /opt/stack-bench-embedded-deps/spacetimedb-standalone \
+    && rm /opt/stack-bench-embedded-deps/bindings-typescript/LICENSE.txt \
+    && mv /opt/stack-bench-embedded-deps/BSL.txt \
+      /opt/stack-bench-embedded-deps/bindings-typescript/LICENSE.txt \
+    && chmod 0444 /opt/stack-bench-embedded-deps/bindings-typescript/LICENSE.txt \
+    && chmod 0555 /opt/stack-bench-embedded-deps/spacetimedb-cli \
+      /opt/stack-bench-embedded-deps/spacetimedb-standalone \
+    && cd /opt/stack-bench-embedded-deps/bindings-typescript \
+    && pack_name="$(npm pack --pack-destination /opt/stack-bench-embedded-deps --silent)" \
+    && mv "/opt/stack-bench-embedded-deps/$pack_name" /opt/stack-bench-embedded-deps/spacetimedb.tgz \
+    && tar -tzf /opt/stack-bench-embedded-deps/spacetimedb.tgz | grep -Fxq package/dist/server/index.d.ts \
+    && tar -tzf /opt/stack-bench-embedded-deps/spacetimedb.tgz | grep -Fxq package/dist/server/index.mjs \
+    && cd /opt/stack-bench \
+    && node dist/appliance/dependency-volume.js manifest \
+      --source /opt/stack-bench-embedded-deps \
+      --out /opt/stack-bench/dependency-manifest.json \
+    && node dist/appliance/dependency-volume.js verify \
+      --target /opt/stack-bench-embedded-deps \
+      --manifest /opt/stack-bench/dependency-manifest.json \
+    && rm -rf results .spacetime-data .loop-test
+
+ENTRYPOINT ["node", "/opt/stack-bench/dist/appliance/controller.js"]
+CMD ["--help"]
diff --git a/tools/stack-bench/appliance/Controller.Dockerfile.dockerignore b/tools/stack-bench/appliance/Controller.Dockerfile.dockerignore
new file mode 100644
index 00000000000..a7bf601854f
--- /dev/null
+++ b/tools/stack-bench/appliance/Controller.Dockerfile.dockerignore
@@ -0,0 +1,30 @@
+*
+!tools
+!tools/stack-bench
+!tools/stack-bench/**
+!skills
+!skills/**
+!crates
+!crates/bindings-typescript
+!crates/bindings-typescript/**
+!licenses
+!licenses/BSL.txt
+!package.json
+!pnpm-lock.yaml
+!pnpm-workspace.yaml
+
+**/node_modules
+**/dist
+**/target
+tools/stack-bench/results
+tools/stack-bench/.spacetime-data*
+tools/stack-bench/.loop-test
+tools/stack-bench/*.local.md
+tools/stack-bench/**/*.local.md
+tools/stack-bench/transcripts
+tools/stack-bench/local-notes
+tools/stack-bench/media
+tools/stack-bench/snapshot-l*
+tools/stack-bench/grader/.candidates
+tools/stack-bench/grader/.mutation-report.json
+tools/stack-bench/tracks/*/overview.html
diff --git a/tools/stack-bench/appliance/DESIGN.md b/tools/stack-bench/appliance/DESIGN.md
new file mode 100644
index 00000000000..9e0b67d1f1b
--- /dev/null
+++ b/tools/stack-bench/appliance/DESIGN.md
@@ -0,0 +1,164 @@
+# Stack Bench v1 appliance
+
+## Supported v1 environment
+
+The first distributable release supports one environment deliberately:
+
+- a dedicated, disposable Linux x86-64 runner;
+- a local Docker Engine with Compose v2;
+- no unrelated workloads or credentials on that runner;
+- enough resources to pass `preflight`;
+- results copied off the runner before it is destroyed.
+
+V1 is not a general workstation installation. The controller needs the Docker
+socket to create, identify, and remove exact per-run containers. That socket is
+effectively root access to the runner. Host networking is also required so the
+controller, build containers, grader, dynamic lint server, databases,
+and dedicated SpacetimeDB host keep the already-qualified address model. Those
+permissions are acceptable only because the supported runner is disposable and
+contains no unrelated data.
+
+## Container and data boundaries
+
+| Component | Can see benchmark definitions? | Can see generated app? | Persistent data |
+|---|---:|---:|---|
+| controller | yes | yes | results and run state |
+| coding/build sandbox | no | its one app only | app workspace and its transcript |
+| PostgreSQL/MongoDB | no | database traffic only | dedicated database volumes |
+| SpacetimeDB host | no | published module only | one run-owned data directory |
+
+The coding container never mounts the controller image, repository, grader,
+scenarios, recipes, calibration, or results. It receives only:
+
+- its unique app directory, read-write;
+- the exact selected stack dependencies, read-only;
+- its per-run provider transcript directory, read-write;
+- its per-run SpacetimeDB CLI configuration when that stack is selected;
+- a short-lived token for the controller-owned provider broker.
+
+## V1 topology
+
+The controller runs with:
+
+- `network_mode: host`, Linux only;
+- `/var/run/docker.sock`, read-write;
+- `/var/lib/stack-bench`, bind-mounted at the identical host/container path;
+- a read-only release-dependency volume after initialization;
+- provider credential files below the private appliance state root, never
+  secret values in the Compose file or process environment;
+- no registry credential mount. The host pulls images before the controller
+  starts.
+
+Using the same `/var/lib/stack-bench` path on both sides is intentional. A
+sibling container created through the host Docker socket resolves bind-mount
+sources on the host, not inside the controller. The fixed identical path makes
+workspaces and results name the same bytes from either side without mounting the
+harness into a coding container.
+
+Stack-specific binaries and SDK sources use a named, read-only dependency
+volume instead of a host source checkout. A one-shot initializer copies the
+content embedded in the signed controller release into that volume and writes a
+checksum marker. Both the controller and each selected coding container mount
+the volume, but coding containers receive only the paths their stack adapter
+declares. The initializer refuses an existing volume whose marker does not match
+the release manifest.
+
+## Network paths
+
+Host networking keeps the proven runtime paths:
+
+- the controller grader reaches app ports through `127.0.0.1`;
+- coding and reference containers share the appliance host network and reach
+  controller-hosted lint, SpacetimeDB, and the dedicated PostgreSQL/MongoDB
+  published ports through `127.0.0.1`;
+- only provider-declared HTTPS endpoints and package registries are required
+  outbound from coding containers;
+- the controller needs registry access only during the explicit pull/verify
+  step, not during a benchmark attempt.
+
+`preflight --smoke` must exercise these paths from the delivered build image in
+the same host-network namespace used by benchmark builds before a model call. A
+release is unsupported if host networking or the fixed state path is changed.
+
+## Secrets
+
+The release contains a template naming required secrets but no secret values.
+The operator supplies the selected provider credential as a secret file. The
+controller reads it and starts a provider broker for each coding session. The
+coding container receives a random session token and the broker URL. It does
+not receive the provider credential or credential file. The broker stops when
+the coding session ends.
+
+The controller must not write the provider credential to an artifact, command
+log, transcript path, or long-lived environment block. The controller still
+has the long-lived credential and root-equivalent Docker access. V1 therefore
+requires a dedicated disposable runner and a credential scoped to the
+campaign. A shared or persistent host is not supported.
+
+Coding containers drop all Linux capabilities, use `no-new-privileges`, and
+have a finite process limit. This prevents a host-network coding session from
+using raw sockets to inspect loopback traffic.
+
+Developer-home credential mounts are not part of the appliance. They remain a
+local-development convenience only. Adding another provider requires its agent
+adapter to declare its credential alternatives and outbound HTTPS destinations.
+
+## Release contents
+
+The delivered bundle must include:
+
+- controller and build-sandbox images by registry digest;
+- PostgreSQL and MongoDB images by registry digest;
+- every digest names the exact Linux/amd64 platform manifest, not a
+  multi-architecture index;
+- the SpacetimeDB runtime, CLI, standalone binary, and TypeScript SDK source by
+  checksum;
+- exact engine, recipe, pack, fixture, calibration, reference, mutation, and
+  experiment inputs;
+- Compose files and a secrets template;
+- a release manifest binding every file and image;
+- SPDX 2.3 SBOMs bound to every exact first- and third-party image digest;
+- registry-attached signatures for images and a detached signature bundle for
+  the manifest;
+- an operator guide and recovery/quarantine instructions;
+- a persistent results directory containing raw artifacts and generated report
+  output.
+
+Readable tags may appear in commands, but verification and execution use the
+manifest digest. A mutable tag alone can never satisfy preflight.
+
+## Operator flow
+
+```text
+1. Verify the bundle checksum and signature.
+2. Configure registry login and provider secret files.
+3. Pull every image from the release manifest by digest.
+4. Initialize the release-dependency volume.
+5. Inspect the selected test plan.
+6. Start the campaign. The controller records the exact plan, runs admission,
+   and creates durable state before model work starts.
+7. Observe durable state; use logs only to diagnose a live phase or failure.
+8. Generate the deterministic report from retained raw artifacts.
+9. Copy results off-runner, verify their manifest, then destroy the runner.
+```
+
+The plan owns intent. Campaign state owns scheduling. Attempt artifacts own
+results. Reports and the dashboard are reproducible views of those records.
+No view can schedule work or change a verdict without calling the controller's
+bounded command for that state transition.
+
+## Release requirements
+
+A clean dedicated runner must be able to do the following from the delivered
+bundle alone:
+
+- verify every file and image identity before execution;
+- initialize dependencies without a source checkout;
+- run exact-scope preflight and the no-model smoke;
+- prove the coding container cannot read definitions or results;
+- preserve artifacts after the controller container is removed;
+- remove only exact benchmark-owned resources;
+- emit a public quarantine artifact and retain private authenticated recovery
+  state whenever exact cleanup cannot be proven;
+- emit no provider, registry, database, or lease secret in public artifacts;
+- reproduce the same release identity on a second runner.
diff --git a/tools/stack-bench/appliance/README.md b/tools/stack-bench/appliance/README.md
new file mode 100644
index 00000000000..442ac25bd8f
--- /dev/null
+++ b/tools/stack-bench/appliance/README.md
@@ -0,0 +1,241 @@
+# Stack Bench appliance
+
+The appliance is the supported v1 deployment for paid and subscription-backed
+Stack Bench campaigns. Run it on a dedicated, disposable Linux/amd64 machine
+with a local Docker Engine and the persistent path `/var/lib/stack-bench`.
+
+The controller has root-equivalent access through the Docker socket. Do not run
+it beside unrelated workloads or credentials. Copy verified results off the
+runner before destroying it.
+
+See [appliance design](DESIGN.md) for the security model and
+[release guidance](RELEASE.md) for bundle assembly and signature verification.
+
+## Package contents
+
+- `Controller.Dockerfile` builds the controller and grader.
+- `docker-compose.yaml` starts the controller, dependency initializer,
+  PostgreSQL, MongoDB, and optional dashboard.
+- `operator.env.example` lists operator configuration without secret values.
+- the dependency initializer copies the release SDK, CLI, and runtime into a
+  checksummed read-only volume.
+
+The coding container receives one app workspace, its transcript directory, and
+only the dependencies declared by its stack adapter. It cannot read the
+controller, grader, scenarios, results, or provider credential.
+
+## Prepare the runner
+
+1. Create these operator-only directories:
+
+   ```text
+   /var/lib/stack-bench/work
+   /var/lib/stack-bench/results
+   /var/lib/stack-bench/secrets
+   /var/lib/stack-bench/controller-home
+   ```
+
+2. Configure one provider credential mode:
+
+   - For subscription billing, run `claude setup-token` and write only the
+     returned token to `secrets/claude_subscription_token`.
+   - For API billing, write the provider key to a file under `secrets/`.
+
+   Set secret-file permissions to `0600`. Do not configure both modes.
+
+3. Copy `operator.env.example` to `/var/lib/stack-bench/operator.env`. Replace
+   example image values with the exact digest references from the release
+   manifest.
+
+4. Copy the release manifest to the configured path. Pull and verify every
+   manifest image before starting services.
+
+5. If you use the dashboard, write at least 32 random characters to
+   `secrets/dashboard_control_secret` and set its mode to `0600`.
+
+## Validate the appliance
+
+Run commands from `tools/stack-bench` on the runner.
+
+Check the Compose configuration:
+
+```sh
+docker compose --env-file /var/lib/stack-bench/operator.env \
+  -f appliance/docker-compose.yaml config --quiet
+```
+
+Run preflight for the exact planned scope:
+
+```sh
+docker compose --env-file /var/lib/stack-bench/operator.env \
+  -f appliance/docker-compose.yaml run --rm controller \
+  preflight --backend spacetime,postgres,mongodb \
+  --track ecommerce --levels 1-2 --run-index 0 --smoke
+```
+
+Preflight verifies the runner, credentials, images, dependencies, ports,
+network paths, storage, and stack access. The
+smoke check uses the real build image and does not call a model.
+
+## Inspect a campaign
+
+The campaign file is the run authority. Store it below
+`/var/lib/stack-bench/results/plans`.
+
+Compile and inspect it without model work:
+
+```sh
+docker compose --env-file /var/lib/stack-bench/operator.env \
+  -f appliance/docker-compose.yaml run --rm controller \
+  campaign show /var/lib/stack-bench/results/plans/campaign.json
+```
+
+A test plan selects the model, stacks, work, checks, budgets, repetitions,
+parallelism, pricing, controller image, and build image. When the run starts,
+Stack Bench records these settings with the results. This prevents settings
+from changing during a campaign.
+
+The manifest also defines how repair work is selected and limited:
+
+```json
+"repair": { "selection": "feature", "budget": { "perFeature": 1 } }
+```
+
+Dependency mode supports `feature` or `batch` selection. The budget must name
+at least one limit; each is a non-negative integer with no upper cap:
+
+- `total`: repairs across the whole attempt. `0` runs the initial grade and
+  advances passed branches without any repair.
+- `perFeature`: repairs that may include one feature.
+- `perDepth`: `{ "count": N, "carry": true | false }`. Each opened depth adds
+  `count` repairs; `carry` keeps unused depth repairs available later.
+
+When several features have failed, the next repair goes to the first of them
+by dependency depth, then by `order`:
+
+- `declared` (default): the order the catalog declares its features, which is
+  part of the catalog's identity.
+- `shuffled`: a permutation within each depth drawn once from the campaign's
+  `ordering.seed` when the plan compiles, frozen in the plan as the policy's
+  `nodeOrder`, and used by every stack in the campaign. The catalog and its
+  qualification are unchanged; the policy identity carries the order.
+When limits are combined, the tightest remaining limit wins, and the result
+names which one stopped a feature: `feature-repairs-exhausted`,
+`depth-repairs-exhausted`, `total-repairs-exhausted`, or `repeated-findings`
+when the same failures survived the configured number of repairs. A completed
+repair counts even when its grade did not finish; its source is kept beside
+the run and graded on resume before any further coding session. Sequential
+mode requires `batch` selection and one `total` limit.
+
+The plan, dashboard, and report show qualification status. Publish scores as
+verified comparison data only after every selected level is qualified.
+
+`campaign.example.json` is a zero-cost deterministic example. Copy it outside
+the image before changing it.
+
+## Run a campaign
+
+Start the campaign. This command creates the run state and records the exact
+test plan automatically:
+
+```sh
+docker compose --env-file /var/lib/stack-bench/operator.env \
+  -f appliance/docker-compose.yaml run --rm controller \
+  campaign run /var/lib/stack-bench/results/plans/campaign.json \
+  --out /var/lib/stack-bench/results/campaigns/campaign-001
+```
+
+The campaign controls attempt counts and concurrency. `repetitions` sets the
+default attempt count per stack. A stack can override it. `parallelism` limits
+simultaneous attempts. Each live attempt receives isolated ports, database
+names, locks, workspaces, and evidence paths.
+
+Coding containers share the runner's network until the cross-run isolation
+test passes. Until then admission refuses a campaign whose `parallelism` is
+above 1, and refuses to start while any coding container from another
+campaign is still running on the runner. An attempt is active from its first
+build through its final grade. Results from this period are diagnostic.
+
+The remaining `campaign` snippets are controller subcommands. Run them after
+the same Docker Compose `run --rm controller` prefix used above.
+
+Use durable state for normal control:
+
+```sh
+campaign status <campaign-directory>
+campaign inspect <campaign-directory>
+campaign report <campaign-directory>
+```
+
+- `status` is the compact normal view.
+- `inspect` adds score, cost, duration, cleanup, evidence, and feature progress.
+- `report` rebuilds `report/report.json` and `report/report.html` from retained
+  evidence.
+
+Do not infer state from logs. Use logs only to diagnose a reported phase or
+failure. The controller never retries, extends, or grants paid work
+automatically.
+
+## Resume and repair
+
+If the controller stopped while an attempt remained live, reconcile ownership
+before any resume:
+
+```sh
+campaign reconcile <campaign.json> --out <campaign-directory>
+```
+
+Reconciliation changes state only when private supervisor evidence proves that
+the exact owned resources are clean.
+
+Dependency campaigns can grant more repairs to selected exhausted features:
+
+```sh
+campaign grant-repairs <campaign-directory> \
+  --attempt <attempt-id> --grant-id <unique-id> --level <N> \
+  --feature <feature-id> --repairs <N>
+```
+
+The grant creates a linked continuation. It does not rewrite the completed
+execution. Use `campaign resume <campaign.json> --out <campaign-directory>` to
+run scheduled dependency work.
+
+## Model-free trials and qualification
+
+`campaign trial` accepts only registered non-billable adapters and zero pricing.
+It validates orchestration but does not produce comparative model data.
+
+Check qualification requirements without starting work:
+
+```sh
+docker compose --env-file /var/lib/stack-bench/operator.env \
+  -f appliance/docker-compose.yaml run --rm controller \
+  qualification status --track ecommerce --level <N>
+```
+
+Run only evidence required by that exact status. Do not repeat reference,
+mutation, or null work when its bound inputs have not changed. See the
+[reference app guide](../reference-apps/README.md) and
+[grader guide](../grader/README.md) for qualification rules.
+
+## Dashboard
+
+Start the optional dashboard:
+
+```sh
+docker compose --env-file /var/lib/stack-bench/operator.env \
+  -f appliance/docker-compose.yaml --profile dashboard up -d dashboard
+```
+
+Open `http://127.0.0.1:7331`. The dashboard reads and controls the same campaign
+state as the CLI. See [dashboard/README.md](../dashboard/README.md).
+
+## Results and cleanup
+
+Results remain under `/var/lib/stack-bench/results` after the controller exits.
+Verify and copy the complete campaign package before deleting the runner.
+
+A run removes only resources whose private ownership evidence still matches.
+If cleanup cannot be proved, it preserves the evidence and quarantines the run.
+Follow [RECOVERY.md](RECOVERY.md). Do not delete same-name resources or clear the
+shared state root by guesswork.
diff --git a/tools/stack-bench/appliance/RECOVERY.md b/tools/stack-bench/appliance/RECOVERY.md
new file mode 100644
index 00000000000..ecf413d98af
--- /dev/null
+++ b/tools/stack-bench/appliance/RECOVERY.md
@@ -0,0 +1,67 @@
+# Interruption and recovery
+
+Stack Bench never guesses that a container, listener, lock, database, or data
+directory is safe to delete. Normal teardown authenticates the run's private
+lease, compares exact container IDs and listener PIDs, and releases only locks
+whose owner record still matches that lease.
+
+Every appliance run keeps two different records:
+
+- `results/.../recovery.json` is public, contains no ownership token, and says
+  whether cleanup is `clean`, intentionally `retained`, or `quarantined`;
+- `controller-home/supervisor/<run-id>.json` is private recovery authority. It
+  contains the lease token and must remain readable only by the appliance
+  operator. Normal cleanup deletes it. Refused cleanup deliberately preserves
+  it.
+
+## If a run is interrupted
+
+1. Preserve the result directory and private supervisor-state file.
+2. Read `recovery.json`. Do not publish an attempt whose status is
+   `quarantined`.
+3. Do not start another run using any lock key listed in that artifact.
+4. Retry authenticated cleanup from the controller:
+
+```sh
+docker compose --env-file /var/lib/stack-bench/operator.env \
+  -f appliance/docker-compose.yaml run --rm controller \
+  recover /var/lib/stack-bench/controller-home/supervisor/<run-id>.json
+```
+
+On success the command changes `recovery.json` to `clean`, releases the exact
+owned resources, and removes the private supervisor state. It is idempotent
+when public lease evidence already proves that an earlier cleanup completed.
+
+If the parent process ended before it retained a supervisor file, recover from
+the private runtime lease instead. Supply a durable output directory outside
+the private runtime directory:
+
+```sh
+docker compose --env-file /var/lib/stack-bench/operator.env \
+  -f appliance/docker-compose.yaml run --rm controller \
+  recover-lease /var/lib/stack-bench/controller-home/runtime/<run-id>/backend-lease.json \
+  --out /var/lib/stack-bench/results/recovery/<run-id>
+```
+
+This path uses the same ownership token, container ID, listener PID, and lock
+checks. It refuses an output directory inside the runtime directory because a
+successful recovery removes that directory.
+
+## If recovery refuses
+
+Refusal is the safety behavior. It means a live resource does not match the
+lease or its identity could not be proven. The command leaves the private state,
+lease, lock records, and public quarantine artifact intact.
+
+Compare the live container ID and listener PIDs with `recovery.json` and the
+private lease before manual action. Never delete a same-name container, kill a
+port's current listener, remove another lock, or recursively clear the shared
+state root merely because its name resembles Stack Bench. Escalate with the
+complete result directory and private state stored separately from public
+artifacts.
+
+## Intentional retention
+
+`--retain-backend` is inspection mode, not successful cleanup. It writes
+`status: "retained"` and preserves private recovery authority. No other run may
+reuse the listed locks until the recovery command completes.
diff --git a/tools/stack-bench/appliance/RELEASE.md b/tools/stack-bench/appliance/RELEASE.md
new file mode 100644
index 00000000000..23b34502679
--- /dev/null
+++ b/tools/stack-bench/appliance/RELEASE.md
@@ -0,0 +1,121 @@
+# Release assembly and verification
+
+Stack Bench uses two deliberately different release states.
+
+- A `candidate` has exact image digests, checksummed files, and digest-bound
+  SPDX SBOMs. It is useful for inspecting and testing a proposed bundle, but it
+  is unsigned and cannot be called qualified.
+- A `qualified` release adds a bundled public key, a detached Sigstore bundle
+  covering `release.json`, and registry signatures for every image. Verification
+  must use a public key obtained outside the release bundle.
+
+Schema v2 is the only accepted release format.
+
+## Build the controller image
+
+Build the Linux/amd64 controller from a clean checkout. The source identity
+command refuses changed or untracked release inputs.
+
+```powershell
+$source = npm --prefix tools/stack-bench run release:source --silent | ConvertFrom-Json
+docker build --platform linux/amd64 `
+  -f tools/stack-bench/appliance/Controller.Dockerfile `
+  --build-arg SOURCE_REVISION=$($source.revision) `
+  --build-arg SOURCE_SHA256=$($source.sha256) `
+  --build-arg BINARY_SOURCE_SHA256=$($source.binarySourceSha256) `
+  -t stack-bench-controller:development .
+```
+
+The build accepts only Linux SpacetimeDB binaries recorded in
+`container/spacetimedb-binaries.json`. Rebuild them with
+`bash tools/stack-bench/container/build-linux-cli.sh` after a recorded binary
+source changes. Review and commit the updated provenance file. The binary files
+remain ignored.
+
+## Build a candidate
+
+Publish the first-party images, resolve every first- and third-party image to an
+exact single-platform `linux/amd64` manifest reference, then generate one SPDX
+SBOM for each exact reference. Do not use a multi-architecture index digest:
+Docker Scout correctly reports the selected child-manifest digest, so an index
+digest cannot satisfy the one-image/one-SBOM identity contract.
+
+```sh
+node dist/src/releases/release-bundle.js sbom registry.example/controller@sha256:DIGEST \
+  --output bundle/sbom/controller.spdx.json
+```
+
+The command uses registry resolution, refuses mutable references and existing
+output, and checks that Docker Scout's SPDX 2.3 document contains the requested
+image digest. A successful tool exit without that digest binding is rejected.
+
+Create a strict release specification with `state: "candidate"`,
+`signing: null`, and `files` entries containing only `path` and `role`. Place
+every input below the bundle root, then materialize immutable size and SHA-256
+metadata:
+
+```sh
+node dist/src/releases/release-bundle.js assemble release-spec.json \
+  --root bundle --output bundle/release.json
+node dist/src/releases/release-manifest.js verify bundle/release.json --root bundle
+```
+
+Candidate verification reports `candidate-file-integrity`. It validates all
+declared files and all four image-to-SBOM digest bindings. Candidate manifests
+must use `signing: null` and cannot include a public signing key.
+
+## Sign and qualify
+
+Signing keys are external CI inputs. Never copy a private key, registry token,
+or signing password into the source tree, image, bundle, Compose environment,
+or command transcript. Sign each exact registry image with Cosign. The
+authoritative image-signature evidence stays attached to the registry object
+and is checked directly during verification; the release does not preserve a
+redundant unverified export. Add the public half of the signing key as
+`signing/cosign.pub` with the `public-key` role.
+
+Change the specification to `state: "qualified"` and declare:
+
+```json
+{
+  "signing": {
+    "scheme": "cosign-public-key-v1",
+    "publicKeyPath": "signing/cosign.pub",
+    "manifestBundlePath": "signing/release-manifest.sigstore.json"
+  }
+}
+```
+
+Assemble `release.json` only after all other evidence exists, then sign that
+exact file with a detached Cosign bundle:
+
+```sh
+cosign sign-blob --yes --key "$COSIGN_KEY" \
+  --bundle bundle/signing/release-manifest.sigstore.json bundle/release.json
+```
+
+The detached bundle is intentionally not checksummed by `release.json`: a file
+cannot contain the hash of its own signature. Cosign authenticates it instead.
+
+Verify with the trusted public key copied to a path outside the downloaded
+bundle:
+
+```sh
+node dist/src/releases/release-manifest.js verify bundle/release.json --root bundle \
+  --trusted-key /operator/trust/stack-bench-cosign.pub
+```
+
+Qualified verification refuses an absent or bundle-local trust key, requires
+it to equal the public key bound by the signed manifest, verifies the detached
+manifest signature, and runs `cosign verify` against every exact registry image
+reference. A failed or unavailable Cosign invocation is a failed release; there
+is no downgrade to candidate verification. The controller image includes
+checksum-pinned Cosign 3.1.3 so this command is available in the delivered
+appliance rather than depending on an untracked host installation.
+
+## Trust distribution
+
+The release bundle cannot establish trust in its own key. Publish the expected
+public key and its SHA-256 fingerprint through a separately controlled channel.
+The operator must compare that fingerprint before verification. Key rotation
+requires a new release and an explicit trust-distribution update.
diff --git a/tools/stack-bench/appliance/campaign.ecommerce-progression-reference.json b/tools/stack-bench/appliance/campaign.ecommerce-progression-reference.json
new file mode 100644
index 00000000000..01a584ee447
--- /dev/null
+++ b/tools/stack-bench/appliance/campaign.ecommerce-progression-reference.json
@@ -0,0 +1,96 @@
+{
+  "schemaVersion": 7,
+  "kind": "campaign-manifest",
+  "id": "ecommerce-progression-reference",
+  "version": "2.0.1",
+  "state": "draft",
+  "title": "Ecommerce progression reference pilot",
+  "track": "ecommerce",
+  "mode": { "id": "dependency", "version": "4.3.0", "workSelection": "progressive" },
+  "repair": { "selection": "feature", "budget": { "total": 0 } },
+  "levels": [1, 2, 3, 4, 5, 6],
+  "featureCatalog": "ecommerce.questlines@2.0.2",
+  "selection": {
+    "levels": [
+      { "level": 1, "recipe": "ecommerce.progression-catalog@2.0.2" },
+      { "level": 2, "recipe": "ecommerce.progression-catalog@2.0.2" },
+      { "level": 3, "recipe": "ecommerce.progression-catalog@2.0.2" },
+      { "level": 4, "recipe": "ecommerce.progression-catalog@2.0.2" },
+      { "level": 5, "recipe": "ecommerce.progression-catalog@2.0.2" },
+      { "level": 6, "recipe": "ecommerce.progression-catalog@2.0.2" }
+    ]
+  },
+  "stacks": [
+    { "id": "mongodb", "adapterVersion": "1.4.0" },
+    { "id": "postgres", "adapterVersion": "1.5.0" },
+    { "id": "spacetime", "adapterVersion": "1.3.0" }
+  ],
+  "agents": [
+    {
+      "adapter": "reference-fixture",
+      "adapterVersion": "1.4.0",
+      "model": "reference-fixture"
+    }
+  ],
+  "conditions": [
+    {
+      "id": "reference-pilot",
+      "version": "1.0.0",
+      "guidanceProfile": "neutral@1.8.0",
+      "repairPolicy": "scored-only@1.1.0"
+    }
+  ],
+  "repetitions": 1,
+  "parallelism": 1,
+  "ordering": {
+    "method": "balanced-rotation",
+    "seed": "ecommerce-progression-reference-1"
+  },
+  "budgets": {
+    "attemptTimeoutMinutes": 180,
+    "maxCostUsdPerAttempt": null
+  },
+  "attemptPolicy": {
+    "retries": 0,
+    "retryOn": [],
+    "excludeFromAnalysis": [
+      "contaminated",
+      "harness_failure",
+      "inconclusive",
+      "ungraded"
+    ]
+  },
+  "runtime": {
+    "releaseManifestSha256": null,
+    "controllerImage": null,
+    "buildImage": null,
+    "platform": "linux/amd64"
+  },
+  "pricing": {
+    "currency": "USD",
+    "unit": "USD-per-million-tokens",
+    "capturedAt": "2026-08-25T00:00:00.000Z",
+    "source": "Reference fixtures make no provider calls.",
+    "models": {
+      "reference-fixture": {
+        "input": 0,
+        "output": 0,
+        "cacheWrite5m": 0,
+        "cacheWrite1h": 0,
+        "cacheRead": 0
+      }
+    }
+  },
+  "analysis": {
+    "primaryMetric": "finalScoreRate",
+    "secondaryMetrics": [
+      "firstBuildScoreRate",
+      "totalDurationMs",
+      "invalidAttemptRate"
+    ],
+    "dispersion": "median-iqr",
+    "invalidAttempts": "report-separately",
+    "missingData": "no-imputation",
+    "comparisonUnit": "stack-agent-condition-recipe"
+  }
+}
diff --git a/tools/stack-bench/appliance/campaign.example.json b/tools/stack-bench/appliance/campaign.example.json
new file mode 100644
index 00000000000..95d974b7002
--- /dev/null
+++ b/tools/stack-bench/appliance/campaign.example.json
@@ -0,0 +1,115 @@
+{
+  "schemaVersion": 7,
+  "kind": "campaign-manifest",
+  "id": "ecommerce-l1-example",
+  "version": "2.0.0",
+  "state": "draft",
+  "title": "Ecommerce L1 model-free example",
+  "track": "ecommerce",
+  "mode": { "id": "sequential", "version": "1.0.0" },
+  "repair": { "selection": "batch", "budget": { "total": 3 } },
+  "levels": [1],
+  "selection": {
+    "levels": [
+      {
+        "level": 1,
+        "recipe": "ecommerce.sequential-l1@2.5.0",
+        "features": [
+          "ecommerce.feature.accounts",
+          "ecommerce.feature.cart-checkout",
+          "ecommerce.feature.catalog",
+          "ecommerce.feature.purchasing",
+          "ecommerce.feature.reviews",
+          "ecommerce.feature.warehouse-admin"
+        ],
+        "checks": []
+      }
+    ]
+  },
+  "stacks": [
+    { "id": "spacetime", "adapterVersion": "1.3.0" },
+    { "id": "postgres", "adapterVersion": "1.5.0" },
+    { "id": "mongodb", "adapterVersion": "1.4.0" }
+  ],
+  "agents": [
+    {
+      "adapter": "deterministic",
+      "adapterVersion": "1.3.0",
+      "model": "deterministic"
+    }
+  ],
+  "conditions": [
+    {
+      "id": "prescribed",
+      "version": "1.1.0",
+      "guidanceProfile": "prescribed@1.2.0",
+      "repairPolicy": "scored-only@1.1.0",
+      "specifications": {
+        "levels": [
+          {
+            "level": 1,
+            "requested": [
+              "ecommerce.spec.access-control@1.2.0",
+              "ecommerce.spec.concurrency-safety@1.3.0",
+              "ecommerce.spec.external-data-sync@1.1.0",
+              "ecommerce.spec.live-state@1.2.0",
+              "ecommerce.spec.state-durability@1.1.0",
+              "ecommerce.spec.transactional-integrity@1.3.0"
+            ],
+            "expected": [],
+            "observed": []
+          }
+        ]
+      }
+    }
+  ],
+  "repetitions": 3,
+  "parallelism": 1,
+  "ordering": {
+    "method": "balanced-rotation",
+    "seed": "replace-before-measurement"
+  },
+  "budgets": {
+    "attemptTimeoutMinutes": 240,
+    "maxCostUsdPerAttempt": null
+  },
+  "attemptPolicy": {
+    "retries": 1,
+    "retryOn": ["provider_failure"],
+    "excludeFromAnalysis": ["contaminated", "harness_failure", "inconclusive", "ungraded"]
+  },
+  "runtime": {
+    "releaseManifestSha256": null,
+    "controllerImage": null,
+    "buildImage": null,
+    "platform": "linux/amd64"
+  },
+  "pricing": {
+    "currency": "USD",
+    "unit": "USD-per-million-tokens",
+    "capturedAt": "2026-08-12T00:00:00.000Z",
+    "source": "deterministic adapter makes no billable provider calls",
+    "models": {
+      "deterministic": {
+        "input": 0,
+        "output": 0,
+        "cacheWrite5m": 0,
+        "cacheWrite1h": 0,
+        "cacheRead": 0
+      }
+    }
+  },
+  "analysis": {
+    "primaryMetric": "firstBuildScoreRate",
+    "secondaryMetrics": [
+      "finalScoreRate",
+      "totalCostUsd",
+      "totalDurationMs",
+      "invalidAttemptRate"
+    ],
+    "dispersion": "median-iqr",
+    "invalidAttempts": "report-separately",
+    "missingData": "no-imputation",
+    "comparisonUnit": "stack-agent-condition-recipe"
+  }
+}
diff --git a/tools/stack-bench/appliance/campaign.product-brief-reference.json b/tools/stack-bench/appliance/campaign.product-brief-reference.json
new file mode 100644
index 00000000000..a8f7d37359c
--- /dev/null
+++ b/tools/stack-bench/appliance/campaign.product-brief-reference.json
@@ -0,0 +1,114 @@
+{
+  "schemaVersion": 7,
+  "kind": "campaign-manifest",
+  "id": "ecommerce-l1-product-brief-reference",
+  "version": "2.0.0",
+  "state": "draft",
+  "title": "Ecommerce L1 product brief and quality validation",
+  "track": "ecommerce",
+  "mode": { "id": "sequential", "version": "1.0.0" },
+  "repair": { "selection": "batch", "budget": { "total": 0 } },
+  "levels": [1],
+  "selection": {
+    "levels": [
+      {
+        "level": 1,
+        "recipe": "ecommerce.sequential-l1@2.5.0",
+        "features": [
+          "ecommerce.feature.accounts",
+          "ecommerce.feature.cart-checkout",
+          "ecommerce.feature.catalog",
+          "ecommerce.feature.purchasing",
+          "ecommerce.feature.reviews",
+          "ecommerce.feature.warehouse-admin"
+        ],
+        "checks": []
+      }
+    ]
+  },
+  "stacks": [
+    { "id": "spacetime", "adapterVersion": "1.3.0" },
+    { "id": "postgres", "adapterVersion": "1.5.0" },
+    { "id": "mongodb", "adapterVersion": "1.4.0" }
+  ],
+  "agents": [
+    {
+      "adapter": "reference-fixture",
+      "adapterVersion": "1.4.0",
+      "model": "reference-fixture"
+    }
+  ],
+  "conditions": [
+    {
+      "id": "product-brief-quality",
+      "version": "1.2.0",
+      "guidanceProfile": "neutral@1.8.0",
+      "repairPolicy": "scored-only@1.1.0",
+      "specifications": {
+        "levels": [
+          {
+            "level": 1,
+            "requested": [],
+            "expected": [
+              "ecommerce.spec.access-control@1.2.0",
+              "ecommerce.spec.concurrency-safety@1.3.0",
+              "ecommerce.spec.external-data-sync@1.1.0",
+              "ecommerce.spec.live-state@1.2.0",
+              "ecommerce.spec.state-durability@1.1.0",
+              "ecommerce.spec.transactional-integrity@1.3.0"
+            ],
+            "observed": []
+          }
+        ]
+      }
+    }
+  ],
+  "repetitions": 2,
+  "ordering": {
+    "method": "balanced-rotation",
+    "seed": "product-brief-quality-reference-1"
+  },
+  "budgets": {
+    "attemptTimeoutMinutes": 60,
+    "maxCostUsdPerAttempt": null
+  },
+  "attemptPolicy": {
+    "retries": 1,
+    "retryOn": ["harness_failure", "inconclusive"],
+    "excludeFromAnalysis": ["contaminated", "harness_failure", "inconclusive", "ungraded"]
+  },
+  "runtime": {
+    "releaseManifestSha256": null,
+    "controllerImage": null,
+    "buildImage": null,
+    "platform": "linux/amd64"
+  },
+  "pricing": {
+    "currency": "USD",
+    "unit": "USD-per-million-tokens",
+    "capturedAt": "2026-08-16T00:00:00.000Z",
+    "source": "reference fixture adapter makes no billable provider calls",
+    "models": {
+      "reference-fixture": {
+        "input": 0,
+        "output": 0,
+        "cacheWrite5m": 0,
+        "cacheWrite1h": 0,
+        "cacheRead": 0
+      }
+    }
+  },
+  "analysis": {
+    "primaryMetric": "firstBuildScoreRate",
+    "secondaryMetrics": [
+      "finalScoreRate",
+      "totalCostUsd",
+      "totalDurationMs",
+      "invalidAttemptRate"
+    ],
+    "dispersion": "median-iqr",
+    "invalidAttempts": "report-separately",
+    "missingData": "no-imputation",
+    "comparisonUnit": "stack-agent-condition-recipe"
+  }
+}
diff --git a/tools/stack-bench/appliance/controller.ts b/tools/stack-bench/appliance/controller.ts
new file mode 100644
index 00000000000..6ee5da5fa91
--- /dev/null
+++ b/tools/stack-bench/appliance/controller.ts
@@ -0,0 +1,151 @@
+#!/usr/bin/env node
+
+import { spawn } from 'node:child_process';
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+const RUNTIME_ROOT = join(STACK_BENCH_ROOT, 'dist');
+
+const COMMANDS = Object.freeze({
+  'init-deps': [join(RUNTIME_ROOT, 'appliance', 'dependency-volume.js'), 'init'],
+  'verify-deps': [join(RUNTIME_ROOT, 'appliance', 'dependency-volume.js'), 'verify'],
+  'preflight': [join(RUNTIME_ROOT, 'commands', 'preflight.js')],
+  'qualify-reference': [join(RUNTIME_ROOT, 'src', 'references', 'reference-live.js')],
+  'qualify-null': [join(RUNTIME_ROOT, 'commands', 'null-control.js')],
+  'qualification': [join(RUNTIME_ROOT, 'commands', 'qualification-cli.js')],
+  'pack-budget': [join(RUNTIME_ROOT, 'commands', 'pack-budget.js')],
+  'campaign': [join(RUNTIME_ROOT, 'commands', 'campaign-cli.js')],
+  'dashboard': [join(RUNTIME_ROOT, 'dashboard', 'dashboard-server.js')],
+  'repair': [join(RUNTIME_ROOT, 'commands', 'repair-cli.js')],
+  'run': [join(RUNTIME_ROOT, 'commands', 'bench.js')],
+  'verify-release': [join(RUNTIME_ROOT, 'src', 'releases', 'release-manifest.js'), 'verify'],
+  'recover': [join(RUNTIME_ROOT, 'commands', 'recovery.js'), 'recover'],
+  'recover-lease': [join(RUNTIME_ROOT, 'commands', 'recovery.js'), 'recover-lease'],
+} satisfies Record<string, readonly string[]>);
+
+const COMMANDS_REQUIRING_AGENT_AUTH = new Set(['preflight', 'dashboard', 'run']);
+
+export function controllerCommandRequiresAgentAuth(command: string | undefined,
+  args: string[] = []): boolean {
+  if (command && COMMANDS_REQUIRING_AGENT_AUTH.has(command)) return true;
+  return command === 'campaign' && args[0] === 'run';
+}
+
+export interface ResolvedControllerCommand {
+  executable: string;
+  args: string[];
+}
+
+export function resolveControllerCommand(argv: string[]): ResolvedControllerCommand | null {
+  const [command, ...rest] = argv;
+  if (!command || command === '--help' || command === 'help') return null;
+  if (!Object.hasOwn(COMMANDS, command)) {
+    throw new Error(`unknown controller command ${JSON.stringify(command)}`);
+  }
+  return { executable: process.execPath,
+    args: [...COMMANDS[command as keyof typeof COMMANDS], ...rest] };
+}
+
+export function controllerChildEnvironment(source: NodeJS.ProcessEnv = process.env,
+  { requireAgentAuth = true }: { requireAgentAuth?: boolean } = {}): NodeJS.ProcessEnv {
+  const env = { ...source };
+  delete env.ANTHROPIC_API_KEY;
+  delete env.ANTHROPIC_API_KEY_FILE;
+  delete env.CLAUDE_CODE_OAUTH_TOKEN;
+  delete env.CLAUDE_CODE_OAUTH_TOKEN_FILE;
+  if (!requireAgentAuth) return env;
+  const mode = source.STACK_BENCH_AGENT_AUTH ?? 'subscription-token';
+  if (!['subscription-token', 'api-key'].includes(mode)) {
+    throw new Error('STACK_BENCH_AGENT_AUTH must be subscription-token or api-key');
+  }
+  if (mode === 'api-key') {
+    const path = source.STACK_BENCH_ANTHROPIC_API_KEY_FILE?.trim();
+    if (!path) throw new Error('api-key auth requires STACK_BENCH_ANTHROPIC_API_KEY_FILE');
+    env.ANTHROPIC_API_KEY_FILE = path;
+  } else {
+    const path = source.STACK_BENCH_CLAUDE_OAUTH_TOKEN_FILE?.trim();
+    if (!path) {
+      throw new Error('subscription-token auth requires STACK_BENCH_CLAUDE_OAUTH_TOKEN_FILE');
+    }
+    env.CLAUDE_CODE_OAUTH_TOKEN_FILE = path;
+  }
+  return env;
+}
+
+interface SignalChild {
+  kill(signal: NodeJS.Signals): unknown;
+}
+
+interface SignalSource {
+  on(signal: NodeJS.Signals, listener: () => void): unknown;
+  off(signal: NodeJS.Signals, listener: () => void): unknown;
+}
+
+export function forwardControllerSignals(child: SignalChild,
+  source: SignalSource = process): () => void {
+  const signals: NodeJS.Signals[] = ['SIGINT', 'SIGTERM'];
+  const listeners = new Map<NodeJS.Signals, () => void>(signals.map(signal =>
+    [signal, () => { child.kill(signal); }]));
+  for (const [signal, listener] of listeners) source.on(signal, listener);
+  return () => {
+    for (const [signal, listener] of listeners) source.off(signal, listener);
+  };
+}
+
+function help(): void {
+  process.stdout.write('Stack Bench controller\n\n'
+    + 'Commands:\n'
+    + '  preflight <exact run options>  verify the runner without a model call\n'
+    + '  qualify-reference <scope>      run a pristine or mutation reference gate\n'
+    + '    --mutation-workers N         split one mutation gate across 1 to 8 isolated workers\n'
+    + '  qualify-null <scope>           run the exact null-oracle gate\n'
+    + '  qualification status <scope>  show exact launch and promotion blockers\n'
+    + '  pack-budget recommend <scope> derive reviewable bounds from exact reference evidence\n'
+    + '  campaign validate|show <file>  compile the exact comparison plan without running it\n'
+    + '  campaign trial <file> --out <dir>  exercise a model-free draft\n'
+    + '  campaign run <file> --out <dir>  start a campaign\n'
+    + '  campaign reconcile <file> --out <dir>  prove cleanup for interrupted work\n'
+    + '  campaign status <dir>         inspect exact durable campaign state\n'
+    + '  campaign report <dir>         regenerate deterministic JSON and static HTML\n'
+    + '  dashboard [--port N]          serve the local operator dashboard\n'
+    + '  repair status <run> --level N inspect whether a failed level can continue\n'
+    + '  repair grant <run> --level N --repairs N  add one finite repair budget\n'
+    + '  run <exact run options>        execute and retain one requested run\n'
+    + '  verify-release <manifest>      verify candidate files or a qualified signed release\n'
+    + '  recover <private-state>        retry authenticated cleanup or retain quarantine\n'
+    + '  recover-lease <lease> --out <dir>  recover when parent state was not retained\n'
+    + '  init-deps | verify-deps        initialize or verify the release dependency volume\n');
+}
+
+interface ChildOutcome {
+  code: number | null;
+  signal: NodeJS.Signals | null;
+}
+
+async function main(argv: string[]): Promise<void> {
+  const command = argv[2];
+  const resolved = resolveControllerCommand(argv.slice(2));
+  if (!resolved) { help(); return; }
+  const child = spawn(resolved.executable, resolved.args,
+    { stdio: 'inherit', env: controllerChildEnvironment(process.env,
+      { requireAgentAuth: controllerCommandRequiresAgentAuth(command, argv.slice(3)) }) });
+  const stopForwardingSignals = forwardControllerSignals(child);
+  let outcome: ChildOutcome;
+  try {
+    outcome = await new Promise<ChildOutcome>((resolveExit, reject) => {
+      child.once('error', reject);
+      child.once('exit', (code, signal) => { resolveExit({ code, signal }); });
+    });
+  } finally { stopForwardingSignals(); }
+  if (outcome.signal) process.kill(process.pid, outcome.signal);
+  process.exitCode = outcome.code ?? 1;
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? '').href) {
+  main(process.argv).catch((error: unknown) => {
+    console.error(`stack-bench-controller: ${error instanceof Error ? error.message : String(error)}`);
+    process.exitCode = 2;
+  });
+}
diff --git a/tools/stack-bench/appliance/dependency-volume.ts b/tools/stack-bench/appliance/dependency-volume.ts
new file mode 100644
index 00000000000..e6f49e55a86
--- /dev/null
+++ b/tools/stack-bench/appliance/dependency-volume.ts
@@ -0,0 +1,165 @@
+#!/usr/bin/env node
+
+import { createHash } from 'node:crypto';
+import {
+  chmodSync, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync,
+  renameSync, rmSync, writeFileSync,
+} from 'node:fs';
+import { dirname, join, relative, resolve, sep } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { parseArgs } from 'node:util';
+
+const MARKER = '.stack-bench-release-deps.json';
+
+export interface DependencyManifestFile {
+  path: string;
+  size: number;
+  mode: number;
+  sha256: string;
+}
+
+export interface DependencyManifest {
+  schemaVersion: 1;
+  files: DependencyManifestFile[];
+}
+
+interface DependencyVerification {
+  manifestSha256: string;
+  files: number;
+}
+
+interface DependencyInitialization extends DependencyVerification {
+  initialized: boolean;
+}
+
+function sha256Bytes(bytes: string | NodeJS.ArrayBufferView): string {
+  return createHash('sha256').update(bytes).digest('hex');
+}
+
+function normalizedRelative(root: string, path: string): string {
+  const value = relative(root, path).split(sep).join('/');
+  if (!value || value.startsWith('../') || value === '..') throw new Error(`path escapes dependency root: ${path}`);
+  return value;
+}
+
+function walk(root: string, current = root): string[] {
+  const files: string[] = [];
+  for (const entry of readdirSync(current, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+    const path = join(current, entry.name);
+    if (entry.isSymbolicLink()) throw new Error(`dependency tree cannot contain symlinks: ${normalizedRelative(root, path)}`);
+    if (entry.isDirectory()) files.push(...walk(root, path));
+    else if (entry.isFile()) files.push(path);
+    else throw new Error(`dependency tree contains unsupported entry: ${normalizedRelative(root, path)}`);
+  }
+  return files;
+}
+
+export function createDependencyManifest(root: string): DependencyManifest {
+  const absolute = resolve(root);
+  if (!existsSync(absolute) || !lstatSync(absolute).isDirectory()) {
+    throw new Error(`dependency source is not a directory: ${absolute}`);
+  }
+  const files = walk(absolute).map(path => {
+    const bytes = readFileSync(path);
+    return { path: normalizedRelative(absolute, path), size: bytes.length,
+      mode: lstatSync(path).mode & 0o777, sha256: sha256Bytes(bytes) };
+  });
+  if (!files.length) throw new Error('dependency source is empty');
+  return { schemaVersion: 1, files };
+}
+
+export function manifestSha256(manifest: DependencyManifest): string {
+  return sha256Bytes(`${JSON.stringify(manifest)}\n`);
+}
+
+export function verifyDependencyTree(root: string, manifest: DependencyManifest,
+  { allowMarker = false }: { allowMarker?: boolean } = {}): DependencyVerification {
+  if (!manifest || manifest.schemaVersion !== 1 || !Array.isArray(manifest.files) || !manifest.files.length) {
+    throw new Error('dependency manifest is invalid');
+  }
+  const absolute = resolve(root);
+  const actual = createDependencyManifest(absolute);
+  if (allowMarker) actual.files = actual.files.filter(file => file.path !== MARKER);
+  if (JSON.stringify(actual.files) !== JSON.stringify(manifest.files)) {
+    throw new Error(`dependency tree does not match manifest ${manifestSha256(manifest)}`);
+  }
+  return { manifestSha256: manifestSha256(manifest), files: manifest.files.length };
+}
+
+export function initializeDependencyVolume({ source, target, manifest }:
+  { source: string; target: string; manifest: DependencyManifest }): DependencyInitialization {
+  const sourceRoot = resolve(source);
+  const targetRoot = resolve(target);
+  const verified = verifyDependencyTree(sourceRoot, manifest);
+  mkdirSync(targetRoot, { recursive: true, mode: 0o755 });
+  const markerPath = join(targetRoot, MARKER);
+  const existing = readdirSync(targetRoot);
+  if (existing.length) {
+    if (!existsSync(markerPath)) throw new Error('dependency volume is non-empty but has no release marker');
+    const marker = JSON.parse(readFileSync(markerPath, 'utf8'));
+    if (marker.schemaVersion !== 1 || marker.manifestSha256 !== verified.manifestSha256) {
+      throw new Error('dependency volume belongs to a different release');
+    }
+    verifyDependencyTree(targetRoot, manifest, { allowMarker: true });
+    return { ...verified, initialized: false };
+  }
+
+  const staging = join(targetRoot, `.staging-${process.pid}`);
+  mkdirSync(staging, { mode: 0o700 });
+  try {
+    for (const file of manifest.files) {
+      const from = join(sourceRoot, ...file.path.split('/'));
+      const to = join(staging, ...file.path.split('/'));
+      mkdirSync(dirname(to), { recursive: true });
+      copyFileSync(from, to);
+      chmodSync(to, file.mode);
+    }
+    for (const entry of readdirSync(staging)) renameSync(join(staging, entry), join(targetRoot, entry));
+    rmSync(staging, { recursive: true, force: true });
+    writeFileSync(markerPath, `${JSON.stringify({ schemaVersion: 1,
+      manifestSha256: verified.manifestSha256 })}\n`, { flag: 'wx', mode: 0o444 });
+    verifyDependencyTree(targetRoot, manifest, { allowMarker: true });
+    return { ...verified, initialized: true };
+  } catch (error) {
+    rmSync(staging, { recursive: true, force: true });
+    throw error;
+  }
+}
+
+function main(argv: string[]): void {
+  const { values, positionals } = parseArgs({ args: argv.slice(2), allowPositionals: true,
+    options: {
+      source: { type: 'string', default: '/opt/stack-bench-embedded-deps' },
+      target: { type: 'string', default: '/opt/stack-bench-release-deps' },
+      manifest: { type: 'string', default: '/opt/stack-bench/dependency-manifest.json' },
+      out: { type: 'string' },
+    } });
+  const [command] = positionals;
+  const source = values.source;
+  const target = values.target;
+  const manifestPath = values.manifest;
+  if (command === 'manifest') {
+    const output = values.out;
+    if (!output) throw new Error('manifest requires --out');
+    writeFileSync(resolve(output), `${JSON.stringify(createDependencyManifest(source), null, 2)}\n`, { flag: 'wx' });
+    return;
+  }
+  const manifest: DependencyManifest = JSON.parse(readFileSync(resolve(manifestPath), 'utf8'));
+  if (command === 'init') {
+    process.stdout.write(`${JSON.stringify(initializeDependencyVolume({ source, target, manifest }))}\n`);
+    return;
+  }
+  if (command === 'verify') {
+    process.stdout.write(`${JSON.stringify(verifyDependencyTree(target, manifest, { allowMarker: true }))}\n`);
+    return;
+  }
+  throw new Error('usage: dependency-volume manifest|init|verify [options]');
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? '').href) {
+  try { main(process.argv); }
+  catch (error) {
+    console.error(`dependency-volume: ${error instanceof Error ? error.message : String(error)}`);
+    process.exit(2);
+  }
+}
diff --git a/tools/stack-bench/appliance/docker-compose.yaml b/tools/stack-bench/appliance/docker-compose.yaml
new file mode 100644
index 00000000000..1edcead0ca5
--- /dev/null
+++ b/tools/stack-bench/appliance/docker-compose.yaml
@@ -0,0 +1,114 @@
+name: stack-bench-appliance
+
+services:
+  deps-init:
+    image: ${STACK_BENCH_CONTROLLER_IMAGE:?set STACK_BENCH_CONTROLLER_IMAGE to the manifest digest reference}
+    platform: linux/amd64
+    command: ["init-deps"]
+    read_only: true
+    cap_drop: ["ALL"]
+    security_opt: ["no-new-privileges:true"]
+    volumes:
+      - type: volume
+        source: release-deps
+        target: /opt/stack-bench-release-deps
+    tmpfs:
+      - /tmp:size=64m,mode=1777
+
+  controller:
+    image: ${STACK_BENCH_CONTROLLER_IMAGE:?set STACK_BENCH_CONTROLLER_IMAGE to the manifest digest reference}
+    platform: linux/amd64
+    init: true
+    network_mode: host
+    read_only: true
+    cap_drop: ["ALL"]
+    security_opt: ["no-new-privileges:true"]
+    depends_on:
+      deps-init:
+        condition: service_completed_successfully
+      postgres:
+        condition: service_healthy
+      mongodb:
+        condition: service_healthy
+    environment:
+      STACK_BENCH_CONTROLLER_IMAGE: ${STACK_BENCH_CONTROLLER_IMAGE:?set STACK_BENCH_CONTROLLER_IMAGE to the manifest digest reference}
+      STACK_BENCH_IMAGE: ${STACK_BENCH_BUILD_IMAGE:?set STACK_BENCH_BUILD_IMAGE to the manifest digest reference}
+      STACK_BENCH_RELEASE_MANIFEST: ${STACK_BENCH_RELEASE_MANIFEST:-}
+      STACK_BENCH_APPLIANCE: "1"
+      STACK_BENCH_COMPOSE_FILE: /opt/stack-bench/appliance/docker-compose.yaml
+      STACK_BENCH_WORK_DIR: /var/lib/stack-bench/work
+      STACK_BENCH_RESULTS_DIR: /var/lib/stack-bench/results
+      STACK_BENCH_SUPERVISOR_DIR: /var/lib/stack-bench/controller-home/supervisor
+      STACK_BENCH_RUNTIME_DIR: /var/lib/stack-bench/controller-home/runtime
+      STACK_BENCH_RESOURCE_LOCK_DIR: /var/lib/stack-bench/controller-home/resource-locks
+      STACK_BENCH_RELEASE_DEPS_VOLUME: stack-bench-release-deps
+      STACK_BENCH_LINUX_CLI: /opt/stack-bench-release-deps/spacetimedb-cli
+      STDB_PACKAGE: /opt/stack-bench-release-deps/bindings-typescript
+      SPACETIME_BIN: /opt/stack-bench-release-deps/spacetimedb-cli
+      STACK_BENCH_AGENT_AUTH: ${STACK_BENCH_AGENT_AUTH:-subscription-token}
+      STACK_BENCH_CLAUDE_OAUTH_TOKEN_FILE: ${STACK_BENCH_CLAUDE_OAUTH_TOKEN_FILE:-/var/lib/stack-bench/secrets/claude_subscription_token}
+      STACK_BENCH_ANTHROPIC_API_KEY_FILE: ${STACK_BENCH_ANTHROPIC_API_KEY_FILE:-}
+      HOME: /var/lib/stack-bench/controller-home
+    volumes:
+      - type: bind
+        source: /var/run/docker.sock
+        target: /var/run/docker.sock
+      - type: bind
+        source: /var/lib/stack-bench
+        target: /var/lib/stack-bench
+      - type: volume
+        source: release-deps
+        target: /opt/stack-bench-release-deps
+        read_only: true
+    tmpfs:
+      - /tmp:size=1g,mode=1777
+    command: ["--help"]
+
+  dashboard:
+    extends:
+      service: controller
+    profiles: ["dashboard"]
+    network_mode: bridge
+    environment:
+      STACK_BENCH_DASHBOARD_CONTROL_SECRET_FILE: ${STACK_BENCH_DASHBOARD_CONTROL_SECRET_FILE:-/var/lib/stack-bench/secrets/dashboard_control_secret}
+    ports:
+      - "127.0.0.1:7331:7331"
+    command: ["dashboard", "--host", "0.0.0.0", "--port", "7331", "--allow-container-bind"]
+
+  postgres:
+    image: postgres:16@sha256:219341e4cedb06c8634f80af40851da3425b41b76603fd890272f58e37e139f7
+    platform: linux/amd64
+    container_name: stack-bench-postgres
+    ports: ["127.0.0.1:6532:5432"]
+    environment:
+      POSTGRES_USER: appuser
+      POSTGRES_PASSWORD: local-app-password
+      POSTGRES_DB: app
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U appuser -d app"]
+      interval: 5s
+      timeout: 5s
+      retries: 12
+
+  mongodb:
+    image: mongo:7@sha256:554a9bb1ec6e00c40ba078a41974a834d1a9a8ab1772645b69142afecc87f082
+    platform: linux/amd64
+    container_name: stack-bench-mongodb
+    ports: ["127.0.0.1:6537:27017"]
+    volumes:
+      - mongodata:/data/db
+    healthcheck:
+      test: ["CMD", "mongosh", "--quiet", "--eval", "db.runCommand({ping:1})"]
+      interval: 5s
+      timeout: 5s
+      retries: 12
+
+volumes:
+  release-deps:
+    name: stack-bench-release-deps
+  pgdata:
+    name: stack-bench-appliance-pgdata
+  mongodata:
+    name: stack-bench-appliance-mongodata
diff --git a/tools/stack-bench/appliance/operator.env.example b/tools/stack-bench/appliance/operator.env.example
new file mode 100644
index 00000000000..ad900f63759
--- /dev/null
+++ b/tools/stack-bench/appliance/operator.env.example
@@ -0,0 +1,20 @@
+# Subscription billing is the default. Generate a dedicated long-lived Claude
+# setup token, write only the token to this mode-0600 file, and never commit it.
+STACK_BENCH_AGENT_AUTH=subscription-token
+STACK_BENCH_CLAUDE_OAUTH_TOKEN_FILE=/var/lib/stack-bench/secrets/claude_subscription_token
+
+# To bill through an API key instead, set the mode to api-key and provide an
+# absolute path below /var/lib/stack-bench containing only that key.
+# STACK_BENCH_ANTHROPIC_API_KEY_FILE=/var/lib/stack-bench/secrets/anthropic_api_key
+
+# The dashboard reads this separate operator secret from a mode-0600 file.
+# The file must contain at least 32 random characters on one line.
+STACK_BENCH_DASHBOARD_CONTROL_SECRET_FILE=/var/lib/stack-bench/secrets/dashboard_control_secret
+
+# Both image values must be registry references ending in @sha256:<64 hex chars>.
+STACK_BENCH_CONTROLLER_IMAGE=registry.example/stack-bench-controller@sha256:replace-with-release-digest
+STACK_BENCH_BUILD_IMAGE=registry.example/stack-bench-build@sha256:replace-with-release-digest
+
+# Optional for internal campaigns and required for a distributed release
+# campaign. The file must be below the appliance state root.
+STACK_BENCH_RELEASE_MANIFEST=/var/lib/stack-bench/release/release.json
diff --git a/tools/stack-bench/backends/minimal/mongodb-1.5.md b/tools/stack-bench/backends/minimal/mongodb-1.5.md
new file mode 100644
index 00000000000..8b9e91fbdba
--- /dev/null
+++ b/tools/stack-bench/backends/minimal/mongodb-1.5.md
@@ -0,0 +1,19 @@
+# MongoDB
+
+Use MongoDB for the application data. Choose the libraries, architecture, and
+project structure.
+
+## Connection
+
+| Setting | Value |
+|---|---|
+| `DATABASE_URL` | `<DATABASE_URL>` |
+| Web application | `http://localhost:<VITE_PORT>` |
+
+The MongoDB service is already running. Use the exact `DATABASE_URL`. Do not
+start another MongoDB server, connect to another instance, or create another
+database. Serve the complete application on `<VITE_PORT>`.
+Create `/app/start.sh`. From a clean source checkout, it must install
+dependencies, build the complete application, and start it on `<VITE_PORT>`.
+The script must not change source files. Leave the application running when the
+work is complete.
diff --git a/tools/stack-bench/backends/minimal/postgres-1.5.md b/tools/stack-bench/backends/minimal/postgres-1.5.md
new file mode 100644
index 00000000000..4a9124a88d2
--- /dev/null
+++ b/tools/stack-bench/backends/minimal/postgres-1.5.md
@@ -0,0 +1,19 @@
+# PostgreSQL
+
+Use PostgreSQL for the application data. Choose the libraries, architecture,
+and project structure.
+
+## Connection
+
+| Setting | Value |
+|---|---|
+| `DATABASE_URL` | `<DATABASE_URL>` |
+| Web application | `http://localhost:<VITE_PORT>` |
+
+The PostgreSQL service is already running. Use the exact `DATABASE_URL`. Do not
+start another PostgreSQL server, connect to another instance, or create another
+database. Serve the complete application on `<VITE_PORT>`.
+Create `/app/start.sh`. From a clean source checkout, it must install
+dependencies, build the complete application, and start it on `<VITE_PORT>`.
+The script must not change source files. Leave the application running when the
+work is complete.
diff --git a/tools/stack-bench/backends/minimal/spacetime-1.6.md b/tools/stack-bench/backends/minimal/spacetime-1.6.md
new file mode 100644
index 00000000000..4d686b4d547
--- /dev/null
+++ b/tools/stack-bench/backends/minimal/spacetime-1.6.md
@@ -0,0 +1,28 @@
+# SpacetimeDB
+
+Use SpacetimeDB for the application data. Put the TypeScript module in the
+required directory below. Choose the schema, libraries, architecture, and the
+rest of the project structure.
+
+## Connection
+
+Use the connection settings below.
+
+| Setting | Value |
+|---|---|
+| Server URI | `<STDB_URI>` |
+| Module name | `<MODULE_NAME>` |
+| SpacetimeDB CLI | `<STDB_BIN>` |
+| TypeScript SDK package | `<STDB_PACKAGE>` |
+| Module source directory | `/app/backend/spacetimedb` |
+| Web application | `http://localhost:<VITE_PORT>` |
+
+Publish only the named module to the exact server URI. Local publish and
+development commands must use `--yes`. Do not pipe confirmation input, publish
+anonymously, or use the hosted service. Create `/app/start.sh`. From a clean
+source checkout, it must install dependencies, build the complete application,
+and start it on `<VITE_PORT>`. The script must not change source files. Leave
+the application running when the work is complete.
+
+The included TypeScript core SDK reference describes the available core API syntax.
+CLI `--help` is available for command syntax.
diff --git a/tools/stack-bench/backends/model-free-stub.md b/tools/stack-bench/backends/model-free-stub.md
new file mode 100644
index 00000000000..7a83d0e4bc2
--- /dev/null
+++ b/tools/stack-bench/backends/model-free-stub.md
@@ -0,0 +1,4 @@
+# Model-free service
+
+Use the supplied service. Leave the app running on the assigned client port
+when the work is complete.
diff --git a/tools/stack-bench/backends/mongodb.md b/tools/stack-bench/backends/mongodb.md
new file mode 100644
index 00000000000..4671ddbb19e
--- /dev/null
+++ b/tools/stack-bench/backends/mongodb.md
@@ -0,0 +1,46 @@
+# Backend: MongoDB
+
+An Express API server with Socket.io for live updates, Mongoose over MongoDB,
+and a React client.
+
+## Layout
+
+```
+<app-dir>/
+  server/
+    package.json          express, socket.io, mongoose, dotenv, tsx
+    .env                  DATABASE_URL and PORT
+    src/models.ts         Mongoose schemas and models
+    src/index.ts          Express routes, Socket.io handlers
+  client/
+    package.json          react, react-dom, vite, socket.io-client
+    vite.config.ts        server.port <VITE_PORT>, proxy /api and /socket.io to <EXPRESS_PORT>
+    index.html
+    src/main.tsx
+    src/App.tsx
+```
+
+## Deploy
+
+```bash
+cd server && npm install && npm run dev    # on <EXPRESS_PORT>
+cd client && npm install && npm run dev    # on <VITE_PORT>
+```
+
+Mongoose creates collections on first write; there is no migration step.
+
+The server prints to the terminal running `npm run dev`; it restarts on save,
+so a code change is live without redeploying.
+
+Keep existing application data when you change the schema. Do not drop
+collections during upgrades or repairs.
+
+## Configuration
+
+| Setting | Value |
+|---|---|
+| `DATABASE_URL` | `<DATABASE_URL>` |
+| API server port | `<EXPRESS_PORT>` |
+| Client dev server | `<VITE_PORT>` |
+
+Use this exact `DATABASE_URL`. Do not point at another MongoDB instance.
diff --git a/tools/stack-bench/backends/postgres.md b/tools/stack-bench/backends/postgres.md
new file mode 100644
index 00000000000..32ee3ac4afd
--- /dev/null
+++ b/tools/stack-bench/backends/postgres.md
@@ -0,0 +1,48 @@
+# Backend: PostgreSQL
+
+An Express API server with Socket.io for live updates, Drizzle ORM over
+PostgreSQL, and a React client.
+
+## Layout
+
+```
+<app-dir>/
+  server/
+    package.json          express, socket.io, drizzle-orm, pg, dotenv, tsx
+    .env                  DATABASE_URL and PORT
+    drizzle.config.ts
+    src/schema.ts         Drizzle table definitions
+    src/index.ts          Express routes, Socket.io handlers
+  client/
+    package.json          react, react-dom, vite, socket.io-client
+    vite.config.ts        server.port <VITE_PORT>, proxy /api and /socket.io to <EXPRESS_PORT>
+    index.html
+    src/main.tsx
+    src/App.tsx
+```
+
+## Deploy
+
+```bash
+cd server && npm install && npx drizzle-kit push && npm run dev   # on <EXPRESS_PORT>
+cd client && npm install && npm run dev                            # on <VITE_PORT>
+```
+
+Re-run `npx drizzle-kit push` after any schema change.
+
+The server prints to the terminal running `npm run dev`; it restarts on save,
+so a code change is live without redeploying.
+
+Keep existing application data when you change the schema. Do not drop or
+recreate tables during upgrades or repairs.
+
+## Configuration
+
+| Setting | Value |
+|---|---|
+| `DATABASE_URL` | `<DATABASE_URL>` |
+| API server port | `<EXPRESS_PORT>` |
+| Client dev server | `<VITE_PORT>` |
+
+Use this exact `DATABASE_URL`. Do not point at another PostgreSQL instance and do
+not create databases outside it.
diff --git a/tools/stack-bench/backends/spacetime.md b/tools/stack-bench/backends/spacetime.md
new file mode 100644
index 00000000000..250587f88fe
--- /dev/null
+++ b/tools/stack-bench/backends/spacetime.md
@@ -0,0 +1,80 @@
+# Backend: SpacetimeDB
+
+The database runs your server logic. There is no separate API server and no ORM:
+tables and reducers are a WASM module you publish, and the client subscribes to
+tables and calls reducers over a live connection.
+
+## Layout
+
+```
+<app-dir>/
+  backend/spacetimedb/
+    package.json          { "type": "module", dependencies: { "spacetimedb": "<STDB_PACKAGE>" },
+                            devDependencies: { "typescript": "~5.6.2" } }  ← required; the build runs tsc from node_modules
+    tsconfig.json
+    src/schema.ts         tables and indexes
+    src/index.ts          reducers and lifecycle hooks
+  client/
+    package.json          react, react-dom, vite, and "spacetimedb": "<STDB_PACKAGE>"
+    vite.config.ts        server.port must be <VITE_PORT>
+    index.html
+    src/config.ts         MODULE_NAME and SPACETIMEDB_URI
+    src/main.tsx          React entry
+    src/App.tsx
+    src/module_bindings/  generated; never edit by hand
+```
+
+## Deploy
+
+Publish the module, then regenerate the client bindings from it:
+
+```bash
+<STDB_BIN> publish <MODULE_NAME> --module-path backend/spacetimedb -s <STDB_URI> --yes
+<STDB_BIN> generate --lang typescript --out-dir client/src/module_bindings --module-path backend/spacetimedb
+```
+
+**While iterating, run development mode instead of republishing by hand.** It
+watches the module and automatically rebuilds, publishes, and regenerates the
+client bindings on every save:
+
+```bash
+<STDB_BIN> dev <MODULE_NAME> --module-path backend/spacetimedb -s <STDB_URI> --yes
+```
+
+Leave it running in the background while you work. The manual commands below
+are for one-off publishes and for the first deploy.
+
+Republish after any server change, and regenerate after any schema change.
+
+Keep existing application data when you change the schema.
+
+Always use `--yes` for local publish and development commands. It selects the
+CLI's non-interactive authentication flow for the target server. Do not pipe
+`y` into the command and do not publish anonymously. Use the same local
+identity for every publish to the named module.
+
+Then start the client:
+
+```bash
+cd client && npm install && npm run dev
+```
+
+`<STDB_BIN> logs <MODULE_NAME> -s <STDB_URI>` shows module output, including reducer errors.
+
+To inspect stored data while debugging:
+
+```bash
+<STDB_BIN> sql <MODULE_NAME> "SELECT * FROM item LIMIT 5" -s <STDB_URI>
+```
+
+## Configuration
+
+| Setting | Value |
+|---|---|
+| Server URI | `<STDB_URI>` |
+| Module name | `<MODULE_NAME>` |
+| Client dev server | `<VITE_PORT>` |
+
+The SDK reference for writing modules and clients is in the skill documents
+included with these instructions. Follow them for API specifics: import paths,
+type builders, accessors and context typing.
diff --git a/tools/stack-bench/commands/agent.ts b/tools/stack-bench/commands/agent.ts
new file mode 100644
index 00000000000..5fe8372dcba
--- /dev/null
+++ b/tools/stack-bench/commands/agent.ts
@@ -0,0 +1,897 @@
+#!/usr/bin/env node
+
+import { execFileSync } from 'node:child_process';
+import type { ExecFileSyncOptionsWithStringEncoding } from 'node:child_process';
+import { readFileSync, writeFileSync, mkdirSync, existsSync, realpathSync,
+         openSync, readSync, closeSync, readdirSync } from 'node:fs';
+import { join, dirname, resolve, relative, isAbsolute, sep } from 'node:path';
+import { homedir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { parseArgs as parseNodeArgs } from 'node:util';
+import { loadTrack, levelPrompt, appendix, suitesFor, dbName, moduleName, portsFor,
+  DEFAULT_TRACK, TRACK_MANIFEST_FILE } from '../src/composition/tracks.js';
+import type { Track, TrackDefinition } from '../src/composition/tracks.js';
+import type { BackendLease } from '../src/runtime/backend-lease.js';
+import { resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { parseGuidanceMode, resolveDefaultGuidanceForStack, type GuidanceMode,
+  type ResolvedGuidanceDocument, type ResolvedSkills }
+  from '../src/campaigns/condition-compiler.js';
+import type { ExactRecipeRequest, RecipeBinding } from '../src/composition/recipe-release.js';
+import { createBoundRecipeTaskRequest, resolveBoundRecipeTaskRequest } from '../src/composition/recipe-selection.js';
+import { agentVisibleContractText, assertAgentVisibleText }
+  from '../src/composition/agent-visible-contract.js';
+import { DEFAULT_SPACETIME_SERVER_URI, leaseFromEnv } from '../src/runtime/backend-lease.js';
+import { CODING_CONTAINER_APP_ROOT, CODING_CONTAINER_BUG_REPORT_FILE,
+  CODING_CONTAINER_RELEASE_DEPS_ROOT, CODING_CONTAINER_SPACETIME_CLI,
+  CODING_CONTAINER_SPACETIME_PACKAGE }
+  from '../src/runtime/coding-container-policy.js';
+import { resolveContainerImage } from '../src/runtime/container-image.js';
+import { hashDirectory, sessionProvenance, sha256 } from '../src/evidence/provenance.js';
+import type { StackRunPorts } from '../src/stacks/stack-adapter-contract.js';
+import { STACK_ADAPTER_REGISTRY } from '../src/stacks/stack-adapters.js';
+import { requireLeasedDatabase, requireLeasedSpacetime }
+  from '../src/stacks/backend-reset-guard.js';
+import { DEFAULT_BUILD_IMAGE } from '../src/composition/product-config.js';
+import { dockerMountArguments } from '../src/runtime/container-mount.js';
+import { normalizePromptText, readAgentSkillDocuments, selectAgentSkills } from '../src/agents/agent-materials.js';
+import { codingSessionFailure, DEFAULT_THROTTLE_MAX_WAIT_MS, providerSessionFailure,
+  runCodingSessionWithRetries } from '../src/agents/coding-session-retry.js';
+import type { CodingSessionRetryResult } from '../src/agents/coding-session-retry.js';
+import { AGENT_PROCESS_TIMEOUT_MS } from '../src/agents/coding-session-timeouts.js';
+import { assertNewOrEmptyDirectory } from '../src/runtime/path-safety.js';
+import { claudeRatesForModel } from '../src/evidence/claude-usage-cost.js';
+import { PRICING_UNIT, validatePricingAuthority }
+  from '../src/evidence/pricing-authority.js';
+import type { PricingAuthority } from '../src/evidence/pricing-authority.js';
+
+import { STACK_BENCH_ROOT as ROOT, compiledEntrypoint } from '../src/package-root.js';
+const REPO = resolve(ROOT, '..', '..');
+const CONTROL_COMMAND_TIMEOUT_MS = 120_000;
+const DEFAULT_CODING_INTERRUPTION_RETRIES = 2;
+
+type UnknownRecord = Record<string, unknown>;
+interface PromptMaterials {
+  skillsText?: string;
+  requirementText?: string;
+  contractText?: string;
+  startingCatalog?: string;
+}
+
+type RecipeTaskRequest = Parameters<typeof resolveBoundRecipeTaskRequest>[1] & {
+  recipe?: Exclude<ExactRecipeRequest, string>;
+};
+
+type AgentMode = 'build' | 'upgrade' | 'fix' | 'resume';
+
+interface AgentArgs {
+  mode: AgentMode;
+  backend: string;
+  app: string;
+  level: number;
+  runIndex: number;
+  model: string;
+  guidance: GuidanceMode;
+  track: string;
+  pricing: Readonly<PricingAuthority> | null;
+  guidanceDocument?: ResolvedGuidanceDocument;
+  credentialAliases?: Readonly<Record<string, string>>;
+  recipe?: string;
+  recipeTask?: RecipeTaskRequest;
+  thinking?: string;
+  maxBudgetUsd?: number;
+  skills?: string[];
+  skillIdentity?: ResolvedSkills;
+  apiKey?: string;
+  printPrompt?: boolean;
+}
+
+interface ThinkingVolume {
+  blocks: number;
+  signatureBytes: number;
+  bytesPerBlock: number;
+}
+
+interface SessionUsage {
+  input_tokens?: number;
+  output_tokens?: number;
+  cache_creation_input_tokens?: number;
+  cache_read_input_tokens?: number;
+}
+
+const isRecord = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+const stringValue = (value: unknown): string | null => typeof value === 'string' ? value : null;
+
+function stringArray(value: string, option: string): string[] {
+  const parsed: unknown = JSON.parse(value);
+  if (!Array.isArray(parsed) || parsed.some(item => typeof item !== 'string')) {
+    throw new Error(`${option} must be an array of strings`);
+  }
+  return parsed;
+}
+
+function sessionUsage(value: unknown): SessionUsage {
+  return isRecord(value) ? {
+    input_tokens: typeof value.input_tokens === 'number' ? value.input_tokens : undefined,
+    output_tokens: typeof value.output_tokens === 'number' ? value.output_tokens : undefined,
+    cache_creation_input_tokens: typeof value.cache_creation_input_tokens === 'number'
+      ? value.cache_creation_input_tokens : undefined,
+    cache_read_input_tokens: typeof value.cache_read_input_tokens === 'number'
+      ? value.cache_read_input_tokens : undefined,
+  } : {};
+}
+
+// Use only the benchmark-owned SpacetimeDB host.
+const STDB_URI = process.env.STACK_BENCH_STDB_URI ?? DEFAULT_SPACETIME_SERVER_URI;
+
+// Test the CLI and SDK from this checkout.
+const LOCAL_CLI = join(REPO, 'target', 'release', 'spacetimedb-cli.exe');
+const STDB_BIN = process.env.SPACETIME_BIN ?? (existsSync(LOCAL_CLI) ? LOCAL_CLI : 'spacetime');
+const LOCAL_PKG = process.env.STDB_PACKAGE ?? join(REPO, 'crates', 'bindings-typescript');
+
+const fwd = (path: string): string => path.split('\\').join('/');
+
+// Keep the provider's default thinking budget unless an experiment selects one
+// explicitly. The run records observed reasoning volume so default changes are
+// visible in the evidence.
+const THINKING_TOKENS = process.env.STACK_BENCH_THINKING ?? null;
+
+const EFFORT = process.env.STACK_BENCH_EFFORT ?? 'high';
+
+const IMAGE = process.env.STACK_BENCH_IMAGE ?? DEFAULT_BUILD_IMAGE;
+
+// Containers reach host services through this address. App ports remain local.
+export function hostServiceAddress(env: NodeJS.ProcessEnv = process.env): string {
+  return env.STACK_BENCH_HOST_ALIAS
+    ?? (env.STACK_BENCH_APPLIANCE === '1' ? '127.0.0.1' : 'host.docker.internal');
+}
+
+const HOST_ADDR = hostServiceAddress();
+const hostUrl = (url: string): string => url.replace(/127\.0\.0\.1|localhost/g, HOST_ADDR);
+
+const C_BIN = CODING_CONTAINER_SPACETIME_CLI;
+
+// The container requires the Linux CLI from this checkout.
+const LINUX_CLI = process.env.STACK_BENCH_LINUX_CLI
+  ?? join(ROOT, 'container', 'bin', 'spacetimedb-cli');
+
+// The provider CLI keeps one JSONL transcript per session under its project
+// directory for the application path.
+function transcriptFile(appDir: string, sessionId: string): string | null {
+  const store = join(homedir(), '.claude', 'projects');
+  if (!existsSync(store)) return null;
+  const want = resolve(appDir).replace(/[\\/:]/g, '-').toLowerCase();
+  const dir = readdirSync(store).find(d => {
+    const n = d.toLowerCase();
+    return n === want || n === want.replace(/^-+/, '');
+  });
+  const file = dir && join(store, dir, `${sessionId}.jsonl`);
+  return file && existsSync(file) ? file : null;
+}
+
+// The model ids the provider actually served. The requested name is an alias
+// that can resolve to different snapshots over time; the transcript records
+// what answered each request.
+function transcriptModels(appDir: string, sessionIds: readonly (string | null | undefined)[]): string[] {
+  const models = new Set<string>();
+  for (const sessionId of new Set(sessionIds.filter((id): id is string => Boolean(id)))) {
+    try {
+      const file = transcriptFile(appDir, sessionId);
+      if (!file) continue;
+      for (const line of readFileSync(file, 'utf8').split('\n')) {
+        if (!line.includes('"model"')) continue;
+        let record: unknown;
+        try { record = JSON.parse(line); } catch { continue; }
+        if (!isRecord(record) || !isRecord(record.message)) continue;
+        const model = stringValue(record.message.model);
+        if (model) models.add(model);
+      }
+    } catch { /* an unreadable transcript leaves the list shorter, never wrong */ }
+  }
+  return [...models].sort();
+}
+
+// The transcript exposes reasoning blocks and signature bytes, not reasoning tokens.
+function thinkingVolume(appDir: string, sessionId: string | null | undefined): ThinkingVolume | null {
+  if (!sessionId) return null;
+  try {
+    const file = transcriptFile(appDir, sessionId);
+    if (!file) return null;
+
+    let blocks = 0, bytes = 0;
+    for (const line of readFileSync(file, 'utf8').split('\n')) {
+      if (!line.includes('"thinking"')) continue;   // cheap filter before parsing
+      let record: unknown;
+      try { record = JSON.parse(line); } catch { continue; }
+      if (!isRecord(record) || !isRecord(record.message)
+        || !Array.isArray(record.message.content)) continue;
+      for (const content of record.message.content) {
+        if (!isRecord(content) || content.type !== 'thinking') continue;
+        blocks++;
+        bytes += stringValue(content.signature)?.length ?? 0;
+      }
+    }
+    return { blocks, signatureBytes: bytes,
+             bytesPerBlock: blocks ? Math.round(bytes / blocks) : 0 };
+  } catch { return null; }
+}
+
+function combinedThinkingVolume(appDir: string, sessionIds: readonly (string | null | undefined)[]): ThinkingVolume | null {
+  const volumes: ThinkingVolume[] = [...new Set(sessionIds.filter((id): id is string => Boolean(id)))]
+    .map(id => thinkingVolume(appDir, id)).filter((item): item is ThinkingVolume => item !== null);
+  if (!volumes.length) return null;
+  const blocks = volumes.reduce((sum, item) => sum + item.blocks, 0);
+  const signatureBytes = volumes.reduce((sum, item) => sum + item.signatureBytes, 0);
+  return { blocks, signatureBytes,
+    bytesPerBlock: blocks ? Math.round(signatureBytes / blocks) : 0 };
+}
+
+
+// Record the Linux CLI executed by the container. The host and container
+// binaries can change independently and must not share an identity.
+function linuxSpacetimeVersion(image: string): { commit: string | null; binarySha256: string | null; raw: string } {
+  try {
+    const releaseVolume = process.env.STACK_BENCH_RELEASE_DEPS_VOLUME?.trim() || null;
+    const mountArgs = releaseVolume
+      ? dockerMountArguments({ kind: 'volume', source: releaseVolume,
+        target: CODING_CONTAINER_RELEASE_DEPS_ROOT, readOnly: true })
+      : ['-v', `${LINUX_CLI}:${CODING_CONTAINER_SPACETIME_CLI}:ro`];
+    const entrypoint = releaseVolume
+      ? `${CODING_CONTAINER_RELEASE_DEPS_ROOT}/spacetimedb-cli`
+      : CODING_CONTAINER_SPACETIME_CLI;
+    const out = execFileSync('docker',
+      ['run', '--rm', ...mountArgs, '--entrypoint', entrypoint, image, '--version'],
+      { encoding: 'utf8', stdio: 'pipe', env: { ...process.env, MSYS_NO_PATHCONV: '1' },
+        timeout: CONTROL_COMMAND_TIMEOUT_MS });
+    const commit = out.match(/Commit:\s*([0-9a-f]+)/i)?.[1] ?? null;
+    return { commit, binarySha256: sha256(readFileSync(LINUX_CLI)),
+      raw: out.trim().split(/\r?\n/).slice(0, 2).join(' ') };
+  } catch { return { commit: null, binarySha256: null, raw: 'unknown' }; }
+}
+
+function bindingsIdentity(pkgDir: string): { package: string; sourceSha256: string | null; sourceFiles: number } {
+  try {
+    const p = JSON.parse(readFileSync(join(pkgDir, 'package.json'), 'utf8'));
+    const source = hashDirectory(pkgDir, { exclude: name =>
+      /(^|\/)(node_modules|dist|target)(\/|$)/.test(name) });
+    return { package: `${p.name}@${p.version}`, sourceSha256: source.sha256,
+      sourceFiles: source.files.length };
+  } catch { return { package: 'unknown', sourceSha256: null, sourceFiles: 0 }; }
+}
+
+// The CLI version inside the build image. Read by running it, not by trusting
+// the tag: the image is pinned by ARG and a tag can be moved.
+function imageCliVersion(image: string): string {
+  try {
+    return execFileSync('docker', ['run', '--rm', '--entrypoint', 'claude', image, '--version'],
+      { encoding: 'utf8', stdio: 'pipe', env: { ...process.env, MSYS_NO_PATHCONV: '1' },
+        timeout: CONTROL_COMMAND_TIMEOUT_MS }).trim();
+  } catch { return 'unknown'; }
+}
+
+function imageNodeVersion(image: string): string {
+  try {
+    return execFileSync('docker', ['run', '--rm', '--entrypoint', 'node', image, '--version'],
+      { encoding: 'utf8', stdio: 'pipe', env: { ...process.env, MSYS_NO_PATHCONV: '1' },
+        timeout: CONTROL_COMMAND_TIMEOUT_MS }).trim();
+  } catch { return 'unknown'; }
+}
+
+function containerImage(name: string): { reference: string; imageId: string | null | undefined } {
+  try {
+    const out = execFileSync('docker', ['inspect', '-f', '{{.Config.Image}} {{.Image}}', name],
+      { encoding: 'utf8', stdio: 'pipe', timeout: CONTROL_COMMAND_TIMEOUT_MS }).trim();
+    const [reference, imageId] = out.split(/\s+/, 2);
+    return { reference: reference ?? '', imageId };
+  } catch { return { reference: 'unknown', imageId: null }; }
+}
+
+// Record ambient provider configuration that can change model behaviour while
+// replacing credential values with presence markers.
+function ambientEnv(): Record<string, string | undefined> {
+  const seen: Record<string, string | undefined> = {};
+  for (const [k, v] of Object.entries(process.env)) {
+    if (!/^(CLAUDE|ANTHROPIC|MAX_THINKING|DISABLE_AUTOUPDATER|FORCE_PROMPT)/.test(k)) continue;
+    // Never record a credential, only that one was present.
+    seen[k] = /KEY|TOKEN|SECRET/i.test(k) ? '<redacted, present>' : v;
+  }
+  return seen;
+}
+
+export function parseAgentArgs(argv: readonly string[]): AgentArgs {
+  const strings = ['mode', 'track', 'backend', 'level', 'app', 'run-index', 'model',
+    'pricing-json', 'guidance', 'guidance-document-json', 'credential-aliases-json',
+    'recipe', 'recipe-task-json', 'thinking', 'max-budget-usd', 'skills', 'skills-json',
+    'skill-identity-json', 'api-key'] as const;
+  const { values: rawValues } = parseNodeArgs({ args: [...argv.slice(2)], options: Object.fromEntries([
+    ...strings.map(name => [name, { type: 'string' as const }]),
+    ['print-prompt', { type: 'boolean' as const }],
+  ]), strict: true, allowPositionals: false });
+  const values = rawValues as Partial<Record<(typeof strings)[number], string>>
+    & { 'print-prompt'?: boolean };
+  const mode = values.mode;
+  if (mode !== 'build' && mode !== 'upgrade' && mode !== 'fix' && mode !== 'resume') {
+    throw new Error('--mode must be build, upgrade, fix, or resume');
+  }
+  const backend = values.backend;
+  const app = values.app;
+  if (!backend || !app) {
+    throw new Error('usage: node dist/commands/agent.js --mode build|upgrade|fix|resume '
+      + '--backend <backend> --app <directory> [--level <positive integer>]');
+  }
+  const level = values.level === undefined ? 1 : Number(values.level);
+  if (!Number.isSafeInteger(level) || level < 1) {
+    throw new Error('--level must be a positive integer');
+  }
+  const runIndex = values['run-index'] === undefined ? 0 : Number(values['run-index']);
+  if (!Number.isSafeInteger(runIndex) || runIndex < 0) {
+    throw new Error('--run-index must be a non-negative integer');
+  }
+  const model = values.model ?? 'claude-sonnet-5';
+  const maxBudgetUsd = values['max-budget-usd'] === undefined
+    ? undefined : Number(values['max-budget-usd']);
+  if (maxBudgetUsd !== undefined && (!Number.isFinite(maxBudgetUsd) || maxBudgetUsd <= 0)) {
+    throw new Error('--max-budget-usd must be a positive number');
+  }
+  if (values.skills !== undefined && values['skills-json'] !== undefined) {
+    throw new Error('--skills and --skills-json cannot be used together');
+  }
+  const skills = values.skills?.split(',').map(skill => skill.trim()).filter(Boolean)
+    ?? (values['skills-json'] === undefined ? undefined
+      : stringArray(values['skills-json'], '--skills-json'));
+  let pricing = values['pricing-json'] === undefined
+    ? undefined : validatePricingAuthority(JSON.parse(values['pricing-json']), { at: '--pricing-json' });
+  if (pricing === undefined && maxBudgetUsd !== undefined) {
+    const rates = claudeRatesForModel(model);
+    if (!rates) throw new Error(`no default pricing is recorded for model ${model}`);
+    pricing = validatePricingAuthority({ unit: PRICING_UNIT, rates },
+      { at: 'default pricing' });
+  }
+  return { mode, backend, app, level, runIndex, model,
+    guidance: parseGuidanceMode(values.guidance ?? 'prescribed'),
+    track: values.track ?? DEFAULT_TRACK, pricing: pricing ?? null,
+    ...(values['guidance-document-json'] ? {
+      guidanceDocument: JSON.parse(values['guidance-document-json']) as ResolvedGuidanceDocument,
+    } : {}),
+    ...(values['credential-aliases-json'] ? {
+      credentialAliases: JSON.parse(values['credential-aliases-json']) as Record<string, string>,
+    } : {}),
+    ...(values.recipe ? { recipe: values.recipe } : {}),
+    ...(values['recipe-task-json'] ? {
+      recipeTask: JSON.parse(values['recipe-task-json']) as RecipeTaskRequest,
+    } : {}),
+    ...(values.thinking ? { thinking: values.thinking } : {}),
+    ...(maxBudgetUsd !== undefined ? { maxBudgetUsd } : {}),
+    ...(skills ? { skills } : {}),
+    ...(values['skill-identity-json'] ? {
+      skillIdentity: validateSkillIdentity(JSON.parse(values['skill-identity-json'])),
+    } : {}),
+    ...(values['api-key'] ? { apiKey: values['api-key'] } : {}),
+    ...(values['print-prompt'] ? { printPrompt: true } : {}) };
+}
+
+const dbUrl = (backend: string, runIndex: number, dbPort: number | null, track: Track): string | null => {
+  const adapter = STACK_ADAPTER_REGISTRY.get(backend);
+  if (adapter.id === 'spacetime' || adapter.id === 'stub') return null;
+  if (!dbPort) throw new Error(`${backend} has no assigned database port`);
+  return adapter.agent.connectionUrl({ dbPort, database: dbName(track, runIndex), hostUrl });
+};
+
+// Create the leased database before the app connects. A build clears its schema.
+// A reset between suites preserves the schema required by the running app.
+type DatabasePreparationLease = BackendLease;
+
+type DatabaseCommandOptions = Pick<ExecFileSyncOptionsWithStringEncoding, 'stdio' | 'timeout'>;
+
+type DatabaseCommandExecutor = (command: string, args: readonly string[],
+  options: DatabaseCommandOptions) => string;
+
+const databaseCommandExecutor: DatabaseCommandExecutor = (command, args, options) =>
+  String(execFileSync(command, args, { ...options, encoding: 'utf8' }));
+
+interface DatabasePreparationOptions {
+  exec?: DatabaseCommandExecutor;
+  stdbBin?: string;
+  lease?: DatabasePreparationLease;
+}
+
+export function ensureDatabase(backend: string, runIndex: number, dbPort: number | null,
+  track: Pick<TrackDefinition, 'name' | 'slug'>, wipe = false,
+  { exec = databaseCommandExecutor, stdbBin = STDB_BIN, lease: suppliedLease }: DatabasePreparationOptions = {}) {
+  const lease = suppliedLease ?? leaseFromEnv(process.env, { backend, active: true }).lease;
+  if (lease.runIndex !== runIndex || lease.track !== track.name) {
+    throw new Error(`backend lease ${lease.runId} belongs to ${lease.track}/run${lease.runIndex}, `
+      + `not ${track.name}/run${runIndex}`);
+  }
+  const expectedName = dbName(track, runIndex);
+  const name = lease.resources.database ?? expectedName;
+  const input = { name, expectedName, wipe, exec, cli: stdbBin,
+    expectedServerUri: STDB_URI, expectedModule: moduleName(track, runIndex), dbPort };
+  const adapter = STACK_ADAPTER_REGISTRY.get(backend);
+  if (adapter.id === 'postgres' || adapter.id === 'mongodb') {
+    return adapter.database.prepare({ ...input, lease: requireLeasedDatabase(lease) });
+  }
+  if (adapter.id === 'spacetime') {
+    return adapter.database.prepare({ ...input, lease: requireLeasedSpacetime(lease) });
+  }
+  return adapter.database.prepare({ name });
+}
+
+// Prescribed guidance chooses an implementation stack. Neutral guidance gives
+// only stack access facts and the selected API references.
+export function readBackendGuidanceDocument(
+  document: ResolvedGuidanceDocument | undefined,
+  fallbackRelativePath: string,
+): string {
+  if (typeof fallbackRelativePath !== 'string' || !fallbackRelativePath) {
+    throw new Error('backend guidance fallback path is required');
+  }
+  if (document !== undefined) {
+    const fields = new Set(['path', 'sha256', 'bytes', 'applicationInterface']);
+    if (!document || typeof document !== 'object' || Array.isArray(document)
+      || Object.keys(document).some(field => !fields.has(field))
+      || typeof document.path !== 'string' || !document.path || isAbsolute(document.path)
+      || document.path.includes('\\')
+      || !/^[a-f0-9]{64}$/.test(document.sha256)
+      || !Number.isSafeInteger(document.bytes) || document.bytes < 0
+      || !['http', 'reducer'].includes(document.applicationInterface)) {
+      throw new Error('campaign guidance document identity is invalid');
+    }
+  }
+  const root = realpathSync(ROOT);
+  const candidate = resolve(root, document?.path ?? fallbackRelativePath);
+  const candidateRel = relative(root, candidate);
+  if (candidateRel === '..' || candidateRel.startsWith(`..${sep}`) || isAbsolute(candidateRel)) {
+    throw new Error('campaign guidance document escapes the Stack Bench root');
+  }
+  const selectedPath = realpathSync(candidate);
+  const resolvedRel = relative(root, selectedPath);
+  if (resolvedRel === '..' || resolvedRel.startsWith(`..${sep}`) || isAbsolute(resolvedRel)) {
+    throw new Error('campaign guidance document resolves outside the Stack Bench root');
+  }
+  const bytes = Buffer.from(normalizePromptText(readFileSync(selectedPath, 'utf8')), 'utf8');
+  if (document && (sha256(bytes) !== document.sha256 || bytes.length !== document.bytes)) {
+    throw new Error(`campaign guidance document changed after compilation: ${document.path}`);
+  }
+  return bytes.toString('utf8');
+}
+
+function validateSkillIdentity(value: unknown): ResolvedSkills {
+  const fields = new Set(['ids', 'sha256', 'bytes']);
+  if (!isRecord(value) || Object.keys(value).some(field => !fields.has(field))
+    || !Array.isArray(value.ids) || new Set(value.ids).size !== value.ids.length
+    || value.ids.some(id => typeof id !== 'string' || !/^[a-z][a-z0-9-]*$/.test(id))
+    || typeof value.sha256 !== 'string' || !/^[a-f0-9]{64}$/.test(value.sha256)
+    || !Number.isSafeInteger(value.bytes) || Number(value.bytes) < 0) {
+    throw new Error('campaign skill identity is invalid');
+  }
+  return { ids: value.ids as string[], sha256: value.sha256, bytes: Number(value.bytes) };
+}
+
+function backendDoc(args: AgentArgs, p: StackRunPorts, track: Track): string {
+  const defaultGuidance = resolveDefaultGuidanceForStack(args.guidance, args.backend);
+  let defaultPath = defaultGuidance?.documents[args.backend]?.path;
+  if (!defaultPath && args.guidance === 'neutral') {
+    throw new Error(`neutral guidance has no document for ${args.backend}`);
+  }
+  defaultPath ??= join('backends', `${args.backend}.md`);
+  const raw = readBackendGuidanceDocument(args.guidanceDocument, defaultPath);
+  return raw
+    .replaceAll('<VITE_PORT>', String(p.vite))
+    .replaceAll('<EXPRESS_PORT>', String(p.express ?? ''))
+    .replaceAll('<APP_NOUN>', track.title)
+    .replaceAll('<MODULE_NAME>', moduleName(track, args.runIndex))
+    .replaceAll('<DATABASE_URL>', p.dbPort ? dbUrl(args.backend, args.runIndex, p.dbPort, track) ?? '' : '')
+    .replaceAll('<STDB_URI>', hostUrl(STDB_URI))
+    .replaceAll('<STDB_BIN>', C_BIN)
+    .replaceAll('<STDB_PACKAGE>', `file:${CODING_CONTAINER_SPACETIME_PACKAGE}`);
+}
+
+// Fail before a paid session when the selected container cannot run this checkout.
+function containerBlocker(backend: string): string | null {
+  try {
+    execFileSync('docker', ['image', 'inspect', IMAGE],
+      { stdio: 'pipe', timeout: CONTROL_COMMAND_TIMEOUT_MS });
+  } catch (error: unknown) {
+    const detail = error instanceof Error ? error.message.split('\n')[0] : String(error).split('\n')[0];
+    return `cannot verify isolation image ${IMAGE}: ${detail} — `
+      + `build it with docker build -t ${IMAGE} ${fwd(join(ROOT, 'container'))}`;
+  }
+  if (!STACK_ADAPTER_REGISTRY.get(backend).agent.linuxCliRequired) return null;
+  if (!existsSync(LINUX_CLI)) {
+    return `no Linux SpacetimeDB CLI at ${fwd(LINUX_CLI)} — `
+      + 'bash tools/stack-bench/container/build-linux-cli.sh';
+  }
+  // A file at this path must be a Linux executable, not the Windows build.
+  const magic = Buffer.alloc(4);
+  try {
+    const fd = openSync(LINUX_CLI, 'r');
+    try { readSync(fd, magic, 0, 4, 0); } finally { closeSync(fd); }
+  } catch {
+    return `cannot read the Linux SpacetimeDB CLI at ${fwd(LINUX_CLI)}`;
+  }
+  if (magic.toString('binary') !== '\x7fELF') {
+    return `${fwd(LINUX_CLI)} is not a Linux binary; rebuild it with `
+      + 'container/build-linux-cli.sh';
+  }
+  return null;
+}
+
+function decideIsolation(args: AgentArgs): { container: true; reason: null } {
+  const blocker = containerBlocker(args.backend);
+  if (!blocker) return { container: true, reason: null };
+  console.error(`agent.js: isolated build unavailable: ${blocker}`);
+  console.error('  benchmark coding sessions require the isolation container');
+  process.exit(2);
+}
+
+// Pin every round to the build's recorded container topology.
+function resolveIsolation(args: AgentArgs): { container: true; reason: null } {
+  const marker = resolve(args.app, '..', '.stack-bench-isolation');
+  const backendMarker = resolve(args.app, '..', '.stack-bench-backend');
+
+  if (args.mode === 'build') {
+    const decided = decideIsolation(args);
+    if (!args.printPrompt) {
+      mkdirSync(dirname(marker), { recursive: true });
+      writeFileSync(marker, 'container');
+    }
+    return decided;
+  }
+
+  if (existsSync(marker)) {
+    const pinned = readFileSync(marker, 'utf8').trim();
+    if (pinned !== 'container') {
+      console.error(`agent.js: unsupported isolation marker ${JSON.stringify(pinned)}; expected "container"`);
+      process.exit(2);
+    }
+    const blocker = containerBlocker(args.backend);
+    if (blocker) {
+      console.error(`agent.js: this run's build ran in a container, but ${blocker}`);
+      console.error('  refusing to run this round in a different environment');
+      process.exit(2);
+    }
+    return { container: true, reason: null };
+  }
+
+  // A backend marker without an isolation marker is ambiguous prior state.
+  if (existsSync(backendMarker)) {
+    console.error('agent.js: app has prior benchmark state but no isolation marker');
+    console.error('  refusing to guess where earlier rounds ran; start a clean run');
+    process.exit(2);
+  }
+  const decided = decideIsolation(args);
+  if (!args.printPrompt) {
+    mkdirSync(dirname(marker), { recursive: true });
+    writeFileSync(marker, 'container');
+  }
+  return decided;
+}
+
+export function buildPrompt(args: AgentArgs, p: StackRunPorts, track: Track,
+  materials: PromptMaterials = {}): string {
+  const prompt = (lines: string[]): string => assertAgentVisibleText(lines.join('\n'));
+  const applicationInterface = args.guidanceDocument?.applicationInterface
+    ?? resolveDefaultGuidanceForStack(args.guidance, args.backend)
+      ?.documents[args.backend]?.applicationInterface;
+  if (applicationInterface !== 'http' && applicationInterface !== 'reducer') {
+    throw new Error(`stack ${args.backend} has no application interface`);
+  }
+  const common = [
+    `Build the app in ${CODING_CONTAINER_APP_ROOT}.`,
+    // Published container ports require the app to bind to all interfaces.
+    '',
+      'The web application must listen on 0.0.0.0, not localhost, so it is reachable '
+      + 'outside its process.',
+    'The environment can run /app/start.sh again with APP_WARM_START=1. '
+      + 'When dependencies are current, reuse them instead of installing them again.',
+    '',
+    '## Stack',
+    '',
+    agentVisibleContractText(backendDoc(args, p, track), args.credentialAliases,
+      applicationInterface),
+  ];
+  const skills = materials.skillsText ?? readAgentSkillDocuments(REPO, args.skills ?? []);
+  if (skills) common.push('', '## Selected API reference', '', skills);
+
+  if (args.mode === 'resume') {
+    return prompt([
+      'Restore the existing application to a runnable state.',
+      '',
+      'This is a saved application from an earlier completed run. Install its',
+      'dependencies and start its existing database module, server, and web client',
+      'as needed. Do not implement features or fix application behavior. Do not',
+      'change source files. The saved source must remain byte-for-byte identical.',
+      '',
+      'Output RESUME_COMPLETE when the existing app is running.',
+      '',
+      ...common,
+    ]);
+  }
+
+  if (args.mode === 'fix') {
+    return prompt([
+      'Fix the reported application bugs.',
+      '',
+      `Read ${CODING_CONTAINER_BUG_REPORT_FILE} in the app directory. Each entry says what was expected`,
+      'and what actually happened. Fix the app so the behaviour matches, redeploy,',
+      'and make sure the dev server is running.',
+      '',
+      'Change only what is needed. Do not alter behaviour that is already correct.',
+      '',
+      'Output FIX_COMPLETE when done.',
+      '',
+      ...common,
+      '',
+      agentVisibleContractText(materials.requirementText ?? levelPrompt(track, args.level),
+        args.credentialAliases, applicationInterface),
+      '',
+      '## Application interface',
+      '',
+      agentVisibleContractText(materials.contractText ?? appendix(track, args.level),
+        args.credentialAliases, applicationInterface),
+    ]);
+  }
+
+  const verb = args.mode === 'upgrade'
+    ? [
+        'Add the features below to the existing app.',
+        '',
+        'Keep completed features working. Add only the current features below.',
+      ]
+    : [`Build the application described below and leave it running.`];
+  const startingCatalog = args.mode === 'build' && materials.startingCatalog
+    ? ['', '## Starting catalog', '', 'Use exactly this starting data:', '',
+        '```json', materials.startingCatalog, '```'] : [];
+
+  return prompt([
+    ...verb,
+    '',
+    `After the web application is running, reply with ${args.mode === 'upgrade'
+      ? 'UPGRADE_COMPLETE' : 'DEPLOY_COMPLETE'}.`,
+    '',
+    ...common,
+    '',
+    agentVisibleContractText(materials.requirementText ?? levelPrompt(track, args.level),
+      args.credentialAliases, applicationInterface),
+    ...startingCatalog,
+    '',
+    '## Application interface',
+    '',
+    agentVisibleContractText(materials.contractText ?? appendix(track, args.level),
+      args.credentialAliases, applicationInterface),
+  ]);
+}
+
+export function agentScenarioPaths(track: Track, level: number,
+  recipeBinding: RecipeBinding | null = null): string[] {
+  const execution = recipeBinding?.execution;
+  if (execution) return execution.map(entry => resolve(track.dir, entry.source ?? ''));
+  return suitesFor(track, level).map(suite => suite.spec);
+}
+
+export function agentRecipeRequest(explicitRecipe: string | null = null,
+  recipeTask: RecipeTaskRequest | null = null): ExactRecipeRequest | null {
+  const bound = recipeTask?.recipe;
+  if (!bound) return explicitRecipe;
+  const identity = `${bound.id}@${bound.version}`;
+  if (explicitRecipe && explicitRecipe !== identity) {
+    throw new Error(`agent recipe ${explicitRecipe} does not match bound task ${identity}`);
+  }
+  return bound;
+}
+
+// The coding container must not contain the controller or grading inputs.
+
+async function main() {
+  const args = parseAgentArgs(process.argv);
+  const track = loadTrack(args.track);
+  const p = portsFor(track, args.backend, args.runIndex);
+  const adapter = STACK_ADAPTER_REGISTRY.get(args.backend);
+  const defaultGuidance = resolveDefaultGuidanceForStack(args.guidance, args.backend);
+  args.credentialAliases ??= defaultGuidance?.credentialAliases ?? {};
+  const profileSkills = defaultGuidance?.skills[args.backend]?.ids;
+  const defaultSkills = profileSkills ?? [...adapter.agent.defaultSkills];
+  const selectedSkills = selectAgentSkills(defaultSkills,
+    args.skillIdentity?.ids ?? args.skills ?? null);
+  const skillsText = readAgentSkillDocuments(REPO, selectedSkills);
+  if (args.skillIdentity && (sha256(skillsText) !== args.skillIdentity.sha256
+    || Buffer.byteLength(skillsText) !== args.skillIdentity.bytes)) {
+    throw new Error('campaign skill material changed after compilation');
+  }
+  const recipeBinding = resolveRecipeRelease(track, args.level,
+    agentRecipeRequest(args.recipe ?? null, args.recipeTask ?? null));
+  if (args.recipeTask && !recipeBinding) {
+    throw new Error(`L${args.level} has no recipe release for the requested task`);
+  }
+  const selectedTask = recipeBinding
+    ? (args.recipeTask
+        ? resolveBoundRecipeTaskRequest(recipeBinding, args.recipeTask)
+        : createBoundRecipeTaskRequest(recipeBinding))
+    : null;
+  const requirementText = selectedTask?.task.requirementText ?? levelPrompt(track, args.level);
+  const contractText = selectedTask?.task.contractText ?? appendix(track, args.level);
+  const taskMode = isRecord(args.recipeTask?.task) ? args.recipeTask.task.mode : null;
+  const startingCatalog = recipeBinding && taskMode === 'fresh' ? JSON.stringify({
+    warehouses: recipeBinding.plan.fixture.warehouses,
+    items: recipeBinding.plan.fixture.items,
+  }, null, 2) : undefined;
+
+  // Print the exact prompt without starting a session or changing the app.
+  if (args.printPrompt) {
+    process.stdout.write(buildPrompt(args, p, track,
+      { skillsText, requirementText, contractText, startingCatalog }));
+    return;
+  }
+  if (args.mode === 'build') {
+    assertNewOrEmptyDirectory(args.app, 'build application directory');
+  }
+  resolveIsolation(args);
+  const imageIdentity = resolveContainerImage(IMAGE);
+  // Build wipes all backend state. Later rounds preserve it.
+  ensureDatabase(args.backend, args.runIndex, p.dbPort, track, args.mode === 'build');
+  // Never erase a caller-supplied application tree.
+  mkdirSync(args.app, { recursive: true });
+  writeFileSync(resolve(args.app, '..', '.stack-bench-backend'), args.backend);
+
+  const prompt = buildPrompt(args, p, track,
+    { skillsText, requirementText, contractText, startingCatalog });
+  const bugReportPath = join(args.app, CODING_CONTAINER_BUG_REPORT_FILE);
+  const bugReportText = args.mode === 'fix' && existsSync(bugReportPath)
+    ? readFileSync(bugReportPath, 'utf8') : null;
+  const provenance = sessionProvenance({ prompt, skillsText, contractText, bugReportText,
+    scenarioPaths: agentScenarioPaths(track, args.level, recipeBinding),
+    trackDir: track.dir, trackManifestPath: join(track.dir, TRACK_MANIFEST_FILE) });
+  const started = Date.now();
+  const retryLimitRaw = process.env.STACK_BENCH_CODING_INTERRUPTION_RETRIES
+    ?? String(DEFAULT_CODING_INTERRUPTION_RETRIES);
+  const retryLimit = Number(retryLimitRaw);
+  if (!Number.isInteger(retryLimit) || retryLimit < 0 || retryLimit > 3) {
+    throw new Error('STACK_BENCH_CODING_INTERRUPTION_RETRIES must be an integer from 0 to 3');
+  }
+  // The throttle wait must fit inside the adapter deadline.
+  const throttleWaitRaw = process.env.STACK_BENCH_PROVIDER_THROTTLE_MAX_WAIT_MINUTES
+    ?? String(DEFAULT_THROTTLE_MAX_WAIT_MS / 60_000);
+  const throttleMaxWaitMinutes = Number(throttleWaitRaw);
+  if (!Number.isInteger(throttleMaxWaitMinutes) || throttleMaxWaitMinutes < 0
+    || throttleMaxWaitMinutes > DEFAULT_THROTTLE_MAX_WAIT_MS / 60_000) {
+    throw new Error('STACK_BENCH_PROVIDER_THROTTLE_MAX_WAIT_MINUTES must be an integer from 0 to '
+      + `${DEFAULT_THROTTLE_MAX_WAIT_MS / 60_000}`);
+  }
+  // Concurrent campaign slots must not wake and retry as one burst. This
+  // stable offset keeps retries reproducible while spreading them over 45s.
+  const throttleJitterMs = parseInt(sha256(Buffer.from(
+    `${args.backend}:${args.runIndex}:${args.level}:${args.mode}`)).slice(0, 8), 16) % 45_001;
+  let coding: CodingSessionRetryResult;
+  try {
+    // Send prompts through stdin to avoid the Windows command-line limit.
+    const cliEnv = { ...process.env,
+      // Absent unless deliberately overridden — see THINKING_TOKENS above.
+      ...((args.thinking ?? THINKING_TOKENS)
+        ? { MAX_THINKING_TOKENS: String(args.thinking ?? THINKING_TOKENS) }
+        : {}),
+      // Keep the CLI fixed across the campaign.
+      DISABLE_AUTOUPDATER: '1',
+      // Pin cache lifetime so run order cannot change cost.
+      FORCE_PROMPT_CACHING_5M: '1' };
+
+    coding = runCodingSessionWithRetries({ prompt, model: args.model, retryLimit,
+      maxBudgetUsd: args.maxBudgetUsd,
+      throttleMaxWaitMs: throttleMaxWaitMinutes * 60_000,
+      throttleJitterMs,
+      invoke: ({ input, maxBudgetUsd, resumeSession, recoverStoppedContainer }) =>
+        execFileSync(process.execPath, [
+          compiledEntrypoint('container', 'run-build.js'),
+          '--app', args.app,
+          '--backend', args.backend,
+          '--image', imageIdentity.id,
+          '--effort', EFFORT,
+          '--model', args.model,
+          ...(args.pricing ? ['--pricing-json', JSON.stringify(args.pricing)] : []),
+          '--completion-marker', args.mode === 'fix' ? 'FIX_COMPLETE'
+            : args.mode === 'upgrade' ? 'UPGRADE_COMPLETE'
+              : args.mode === 'resume' ? 'RESUME_COMPLETE' : 'DEPLOY_COMPLETE',
+          ...(maxBudgetUsd != null ? ['--max-budget-usd', String(maxBudgetUsd)] : []),
+          '--ports', [p.vite, p.express].filter(Boolean).join(','),
+          ...(resumeSession ? ['--resume-session', resumeSession] : []),
+          ...(recoverStoppedContainer ? ['--recover-stopped-container'] : []),
+        ], { input, encoding: 'utf8', maxBuffer: 256 * 1024 * 1024,
+          env: { ...cliEnv, ...(args.apiKey ? { STACK_BENCH_AGENT_API_KEY: args.apiKey } : {}) },
+          timeout: AGENT_PROCESS_TIMEOUT_MS }),
+    });
+  } catch (err: unknown) {
+    coding = { raw: '', spawnError: codingSessionFailure(isRecord(err) ? err : {}), sessionResults: [],
+      interruptions: [], result: { total_cost_usd: 0, num_turns: 0,
+        usage: { input_tokens: 0, output_tokens: 0, cache_creation_input_tokens: 0,
+          cache_read_input_tokens: 0 }, stack_bench_cost_receipts: [] },
+      throttle: { waits: 0, waitedMs: 0, maxWaitMs: throttleMaxWaitMinutes * 60_000,
+        jitterMs: throttleJitterMs } };
+  }
+
+  const { raw, spawnError, sessionResults, interruptions, result, throttle } = coding;
+  const noOutput = !result.session_id && !raw.trim();
+  const failed = Boolean(spawnError || noOutput);
+  const providerFailure = providerSessionFailure(result);
+  const usage = sessionUsage(result.usage);
+  const input = usage.input_tokens ?? 0;
+  const output = usage.output_tokens ?? 0;
+  const cacheWrite = usage.cache_creation_input_tokens ?? 0;
+  const cacheRead = usage.cache_read_input_tokens ?? 0;
+  const turns = result.num_turns ?? 0;
+
+  // Preserve the cost inputs needed to explain stack differences.
+  const setupMetadata = adapter.agent.setupMetadata({
+    imageId: imageIdentity.id,
+    localPackage: LOCAL_PKG,
+    env: process.env,
+    helpers: { linuxSpacetimeVersion, bindingsIdentity, containerImage },
+  });
+  const out = {
+    appDir: args.app,
+    mode: args.mode,
+    level: args.level,
+    track: args.track,
+    backend: args.backend,
+    model: args.model,
+    guidance: args.guidance,
+    setup: {
+      thinkingTokens: (args.thinking ?? THINKING_TOKENS) ? Number(args.thinking ?? THINKING_TOKENS) : 'cli default',
+      permissionMode: 'acceptEdits',
+      effort: EFFORT,
+      skills: selectedSkills,
+      cacheTier: '5m',
+      autoUpdater: 'disabled',
+      codingInterruptionRetries: { limit: retryLimit,
+        used: interruptions.filter(item => item.kind !== 'provider-throttled').length },
+      providerThrottle: { maxWaitMinutes: throttleMaxWaitMinutes,
+        waits: throttle?.waits ?? 0, waitedMs: throttle?.waitedMs ?? 0,
+        jitterMs: throttle?.jitterMs ?? throttleJitterMs },
+      cliVersion: imageCliVersion(imageIdentity.id),
+      isolation: { mode: 'container', image: imageIdentity.reference,
+        imageId: imageIdentity.id, hostAlias: HOST_ADDR },
+      auth: (args.apiKey ?? process.env.ANTHROPIC_API_KEY) ? 'api-key'
+        : (process.env.CLAUDE_CODE_OAUTH_TOKEN || process.env.CLAUDE_CODE_OAUTH_TOKEN_FILE)
+          ? 'subscription-token' : 'not-selected',
+      ...(isRecord(setupMetadata) ? setupMetadata : {}),
+      env: ambientEnv(),
+      node: { orchestrator: process.version, codingContainer: imageNodeVersion(imageIdentity.id) },
+      platform: process.platform,
+      resources: result.stack_bench_resources ?? null,
+    },
+    costUsd: Number((result.total_cost_usd ?? 0).toFixed(6)),
+    costReceipts: result.stack_bench_cost_receipts ?? [],
+    tokens: input + output + cacheWrite + cacheRead,
+    outputTokens: output,
+    usage: { input, output, cacheWrite, cacheRead },
+    provenance,
+    turns,
+    promptBytes: Buffer.byteLength(prompt),
+    tokensPerTurn: turns ? Math.round((input + output + cacheWrite + cacheRead) / turns) : null,
+    thinking: combinedThinkingVolume(args.app, sessionResults.map(item => item.session_id)),
+    durationMs: Date.now() - started,
+    sessionId: result.session_id ?? null,
+    ok: !failed && result.is_error === false,
+    providerMetadata: { failureCode: failed
+      ? String(spawnError ?? '').startsWith('provider stayed throttled')
+        ? 'provider-throttle-exhausted'
+        : providerFailure?.code ?? (noOutput ? 'coding-session-no-output' : 'coding-session-failed')
+      : result.is_error === true ? 'provider-session-error' : null,
+      diagnostic: spawnError,
+      failure: failed ? {
+        providerStatus: result.api_error_status ?? null,
+        waitedMs: throttle?.waitedMs ?? 0,
+        waits: throttle?.waits ?? 0,
+      } : null,
+      interruptions, invocations: sessionResults.length,
+      terminalRecovery: isRecord(result) ? result.terminal_recovery ?? null : null,
+      credentialBroker: result.stack_bench_credential_broker ?? null,
+      sessionIds: [...new Set(sessionResults.map(item => item.session_id).filter(Boolean))],
+      models: transcriptModels(args.app, sessionResults.map(item => item.session_id)) },
+  };
+  console.log(JSON.stringify(out));
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  main().catch(err => { console.error(err); process.exit(1); });
+}
diff --git a/tools/stack-bench/commands/bench-arguments.ts b/tools/stack-bench/commands/bench-arguments.ts
new file mode 100644
index 00000000000..ac4f486e5e1
--- /dev/null
+++ b/tools/stack-bench/commands/bench-arguments.ts
@@ -0,0 +1,344 @@
+import { dirname, resolve } from 'node:path';
+import { parseArgs } from 'node:util';
+import { readArtifact } from '../src/evidence/artifacts.js';
+import { DEFAULT_BUILD_IMAGE } from '../src/composition/product-config.js';
+import { DEFAULT_TRACK, RUN_INDEX_CAP } from '../src/composition/tracks.js';
+import { validateCompiledCampaignPlan } from '../src/campaigns/campaign-compiler.js';
+import type { CampaignAttemptPlan, CampaignSelection }
+  from '../src/campaigns/campaign-compiler.js';
+import { campaignAdmissionSmokeReuse, readCampaignAdmission }
+  from '../src/campaigns/campaign-admission.js';
+import type { CampaignAdmissionSmokeReuse } from '../src/campaigns/campaign-admission.js';
+import { compileProgressionInput, dependencyRuntimeDefinition, progressionLevels,
+  validateFeatureCatalogInput, validateProgressionInput }
+  from '../src/progression/progression-definition.js';
+import type { CompiledDependencyPolicyDefinition, CompiledProgressionDefinition,
+  ProgressionInput } from '../src/progression/progression-definition.js';
+import { validatePricingAuthority } from '../src/evidence/pricing-authority.js';
+import type { PricingAuthority } from '../src/evidence/pricing-authority.js';
+import { parseGuidanceMode } from '../src/campaigns/condition-compiler.js';
+import type { GuidanceMode } from '../src/campaigns/condition-compiler.js';
+import { validateCampaignExtensionSeed } from '../src/campaigns/campaign-scheduler.js';
+import type { CampaignExtensionSeed } from '../src/campaigns/campaign-scheduler.js';
+import { repairBudgetLimit } from '../src/progression/repair-plan.js';
+
+type StudyCondition = CampaignAttemptPlan['condition'];
+type UnknownRecord = Record<string, unknown>;
+
+export interface BenchArguments {
+  backend?: string;
+  track: string;
+  levels: string;
+  levelsProvided: boolean;
+  levelList: number[];
+  model: string | null;
+  agentAdapter: string;
+  pricing?: PricingAuthority | null;
+  repairs: number;
+  maxStalledRepairs: number;
+  maxBudgetUsd?: number;
+  runIndex: number;
+  out?: string;
+  app?: string;
+  url?: string;
+  media: boolean;
+  retainBackend?: boolean;
+  guidance: GuidanceMode;
+  guidanceDocument?: unknown;
+  condition?: StudyCondition;
+  selectionRequest?: CampaignSelection;
+  taskMode?: string;
+  packIds: string[];
+  checkKeys: string[];
+  featureIds: string[];
+  requestedSpecifications: string[];
+  expectedSpecifications: string[];
+  observedSpecifications: string[];
+  skills?: string[];
+  apiKey?: string;
+  apiKeyFile?: string;
+  mutations?: string;
+  mutationShardIndex?: number;
+  mutationShardCount?: number;
+  mutationResumeFrom?: string;
+  mutationCheckpointOut?: string;
+  mutationBaselineBundle?: string;
+  expectedMutationCalibration?: unknown;
+  mutationMaxRuntimeMinutes: number;
+  referenceMutationOnly?: boolean;
+  seedFrom?: string;
+  seedThrough?: number;
+  progressionSeed?: CampaignExtensionSeed;
+  parentAttemptId?: string;
+  repairFrom?: string;
+  repairLevel?: number;
+  recipe?: string;
+  campaignFile?: string;
+  campaignAttemptId?: string;
+  campaignAdmissionId?: string;
+  progressionResumeFrom?: string;
+  experimentIdentity?: { id: string; version: string; sha256: string; state: string };
+  campaignAdmission?: { id: string } & CampaignAdmissionSmokeReuse;
+  runMode?: CampaignAttemptPlan['mode'];
+  featureCatalog?: ProgressionInput<CompiledProgressionDefinition>;
+  dependencyPolicy?: ProgressionInput<CompiledDependencyPolicyDefinition>;
+  progression?: ProgressionInput<CompiledProgressionDefinition>;
+  progressionOwner?: UnknownRecord;
+}
+
+interface BenchCliOptions extends Partial<BenchArguments> {
+  pack?: string[];
+  check?: string[];
+  pricingJson?: unknown;
+  featureModule?: string[];
+  requestSpec?: string[];
+  expectSpec?: string[];
+  observeSpec?: string[];
+  expectedMutationCalibrationJson?: unknown;
+  progressionSeedJson?: unknown;
+}
+
+function parseCli(argv: readonly string[]): BenchCliOptions {
+  const strings = ['backend', 'track', 'levels', 'campaign-file', 'campaign-attempt-id',
+    'campaign-admission-id', 'progression-resume-from', 'recipe', 'model', 'pricing-json',
+    'repairs', 'max-stalled-repairs', 'max-budget-usd', 'run-index', 'out', 'app', 'url',
+    'agent-adapter', 'guidance', 'task-mode', 'skills', 'mutations',
+    'mutation-shard-index', 'mutation-shard-count', 'mutation-resume-from',
+    'mutation-checkpoint-out', 'mutation-baseline-bundle',
+    'expected-mutation-calibration-json', 'mutation-max-runtime-minutes', 'seed-from',
+    'seed-through', 'progression-seed-json',
+    'parent-attempt-id', 'repair-from', 'repair-level'] as const;
+  const multiple = ['pack', 'check', 'feature-module', 'request-spec', 'expect-spec',
+    'observe-spec'] as const;
+  const options = Object.fromEntries([
+    ...strings.map(name => [name, { type: 'string' as const }]),
+    ...multiple.map(name => [name, { type: 'string' as const, multiple: true }]),
+    ...['no-media', 'retain-backend', 'reference-mutation-only'].map(name =>
+      [name, { type: 'boolean' as const }]),
+  ]);
+  const { values } = parseArgs({ args: [...argv.slice(2)], options, strict: true,
+    allowPositionals: false });
+  const parsed: Record<string, unknown> = {};
+  for (const [key, value] of Object.entries(values)) {
+    parsed[key.replace(/-([a-z])/g, (_, letter: string) => letter.toUpperCase())] = value;
+  }
+  for (const key of ['pack', 'check', 'featureModule', 'requestSpec', 'expectSpec',
+    'observeSpec']) {
+    const value = parsed[key] as string[] | undefined;
+    if (value) parsed[key] = value.flatMap(item => item.split(',').filter(Boolean));
+  }
+  for (const key of ['repairs', 'maxStalledRepairs', 'maxBudgetUsd', 'mutationShardIndex',
+    'mutationShardCount', 'mutationMaxRuntimeMinutes', 'repairLevel', 'seedThrough']) {
+    if (typeof parsed[key] === 'string') parsed[key] = Number(parsed[key]);
+  }
+  if (typeof parsed.runIndex === 'string') parsed.runIndex = Number(parsed.runIndex);
+  for (const key of ['campaignFile', 'progressionResumeFrom', 'mutations',
+    'mutationResumeFrom', 'mutationCheckpointOut', 'mutationBaselineBundle', 'repairFrom']) {
+    if (typeof parsed[key] === 'string') parsed[key] = resolve(parsed[key]);
+  }
+  for (const key of ['pricingJson', 'expectedMutationCalibrationJson', 'progressionSeedJson']) {
+    if (typeof parsed[key] === 'string') parsed[key] = JSON.parse(parsed[key]);
+  }
+  if (typeof parsed.guidance === 'string') parsed.guidance = parseGuidanceMode(parsed.guidance);
+  if (typeof parsed.skills === 'string') parsed.skills = parsed.skills.split(',').filter(Boolean);
+  if (parsed.noMedia === true) parsed.media = false;
+  delete parsed.noMedia;
+  return parsed as BenchCliOptions;
+}
+
+export function parseBenchArguments(argv: readonly string[]): BenchArguments {
+  const args: BenchArguments = { model: null, agentAdapter: 'claude-code',
+    repairs: 10, runIndex: 0, levels: '1', levelsProvided: false, media: true,
+    levelList: [], maxStalledRepairs: 3, guidance: 'prescribed', track: DEFAULT_TRACK,
+    packIds: [], checkKeys: [], featureIds: [], requestedSpecifications: [],
+    expectedSpecifications: [], observedSpecifications: [],
+    mutationMaxRuntimeMinutes: 60 };
+  const { pack, check, pricingJson, featureModule, requestSpec, expectSpec, observeSpec,
+    expectedMutationCalibrationJson, progressionSeedJson, ...options } = parseCli(argv);
+  Object.assign(args, options);
+  if (pack) args.packIds = pack;
+  if (check) args.checkKeys = check;
+  if (pricingJson !== undefined) {
+    args.pricing = validatePricingAuthority(pricingJson, { at: '--pricing-json' });
+  }
+  if (featureModule) args.featureIds = featureModule;
+  if (requestSpec) args.requestedSpecifications = requestSpec;
+  if (expectSpec) args.expectedSpecifications = expectSpec;
+  if (observeSpec) args.observedSpecifications = observeSpec;
+  args.levelsProvided = options.levels !== undefined;
+  if (expectedMutationCalibrationJson !== undefined) {
+    args.expectedMutationCalibration = expectedMutationCalibrationJson;
+  }
+  if (progressionSeedJson !== undefined) {
+    args.progressionSeed = validateCampaignExtensionSeed(progressionSeedJson);
+  }
+  if ((args.mutationResumeFrom || args.mutationCheckpointOut || args.mutationBaselineBundle)
+      && !args.mutations) {
+    throw new Error('mutation control options require --mutations');
+  }
+  if (args.expectedMutationCalibration && !args.mutations) {
+    throw new Error('--expected-mutation-calibration-json requires --mutations');
+  }
+  if (!Number.isFinite(args.mutationMaxRuntimeMinutes) || args.mutationMaxRuntimeMinutes < 1
+      || args.mutationMaxRuntimeMinutes > 120) {
+    throw new Error('--mutation-max-runtime-minutes must be from 1 through 120');
+  }
+  if (args.referenceMutationOnly && (!args.mutations || args.agentAdapter !== 'reference-fixture'
+      || args.repairs !== 0 || !args.app || args.campaignFile)) {
+    throw new Error('--reference-mutation-only requires a mutation-bound reference fixture run');
+  }
+  if (args.mutationBaselineBundle && !args.referenceMutationOnly) {
+    throw new Error('--mutation-baseline-bundle is an internal reference mutation option');
+  }
+  if (args.repairFrom && (args.repairLevel === undefined
+      || !Number.isSafeInteger(args.repairLevel) || args.repairLevel < 1)) {
+    throw new Error('--repair-from requires --repair-level with a positive integer');
+  }
+  if (args.campaignFile && !args.campaignAttemptId) {
+    throw new Error('--campaign-file requires --campaign-attempt-id');
+  }
+  if (!args.campaignFile && (args.campaignAttemptId || args.campaignAdmissionId)) {
+    throw new Error('campaign binding requires --campaign-file');
+  }
+  if (args.progressionResumeFrom && !args.campaignFile) {
+    throw new Error('--progression-resume-from requires a compiled campaign');
+  }
+  if (args.seedThrough !== undefined && (!args.seedFrom || !args.campaignFile)) {
+    throw new Error('--seed-through requires --seed-from and a compiled campaign');
+  }
+  if (args.seedThrough !== undefined && !args.progressionSeed) {
+    throw new Error('--seed-through requires --progression-seed-json');
+  }
+  if (args.progressionSeed !== undefined && args.seedThrough === undefined) {
+    throw new Error('--progression-seed-json requires --seed-through');
+  }
+  if (args.progressionSeed && args.progressionSeed.fromDepth !== args.seedThrough) {
+    throw new Error('--progression-seed-json does not match --seed-through');
+  }
+  if (args.campaignFile) {
+    const allowed = new Set(['--campaign-file', '--campaign-attempt-id',
+      '--campaign-admission-id', '--progression-resume-from', '--run-index', '--out',
+      '--max-budget-usd', '--seed-from', '--seed-through', '--progression-seed-json']);
+    const override = argv.slice(2).find(value => value.startsWith('--')
+      && !allowed.has(value.split('=', 1)[0]!));
+    if (override) throw new Error(`campaign attempts cannot override ${override}`);
+    bindCampaign(args);
+  }
+  if (!args.backend && !args.repairFrom) {
+    throw new Error('--backend is required unless --repair-from or --campaign-file is supplied');
+  }
+  if (args.progression) {
+    if (args.levelsProvided) throw new Error('--levels cannot be combined with progression input');
+    args.progression = validateProgressionInput(args.progression);
+    args.levelList = progressionLevels(args.progression);
+    args.levels = `${args.levelList[0]}-${args.levelList.at(-1)}`;
+    const seedThrough = args.seedThrough;
+    if (seedThrough !== undefined && (!args.levelList.includes(seedThrough)
+      || !args.levelList.some(level => level > seedThrough))) {
+      throw new Error('--seed-through must precede another planned dependency depth');
+    }
+    if (seedThrough !== undefined
+      && args.dependencyPolicy?.definition.workSelection !== 'progressive') {
+      throw new Error('--seed-through requires progressive dependency work selection');
+    }
+  } else {
+    const [fromText, toText] = args.levels.split('-');
+    const from = Number(fromText);
+    const to = toText === undefined ? from : Number(toText);
+    if (!Number.isSafeInteger(from) || from < 1 || !Number.isSafeInteger(to) || to < from) {
+      throw new Error('--levels must be one positive level or an ascending range');
+    }
+    args.levelList = Array.from({ length: (to ?? from) - from + 1 }, (_, index) => from + index);
+    if (args.seedThrough !== undefined) {
+      throw new Error('--seed-through requires dependency mode');
+    }
+  }
+  if (args.recipe && args.levelList.length !== 1) {
+    throw new Error('--recipe requires exactly one requested level');
+  }
+  if (!Number.isSafeInteger(args.repairs) || args.repairs < 0) {
+    throw new Error('--repairs must be a non-negative safe integer');
+  }
+  if (!Number.isInteger(args.maxStalledRepairs) || args.maxStalledRepairs < 0
+    || args.maxStalledRepairs > 20) {
+    throw new Error('--max-stalled-repairs must be an integer from 0 through 20');
+  }
+  if (args.maxBudgetUsd !== undefined
+    && (!Number.isFinite(args.maxBudgetUsd) || args.maxBudgetUsd <= 0)) {
+    throw new Error('--max-budget-usd must be a positive number');
+  }
+  if (!Number.isSafeInteger(args.runIndex) || args.runIndex < 0 || args.runIndex > RUN_INDEX_CAP) {
+    throw new Error(`--run-index must be an integer from 0 through ${RUN_INDEX_CAP}`);
+  }
+  if ((args.mutationShardIndex === undefined) !== (args.mutationShardCount === undefined)) {
+    throw new Error('--mutation-shard-index and --mutation-shard-count must be supplied together');
+  }
+  return args;
+}
+
+function bindCampaign(args: BenchArguments): void {
+  if (!args.campaignFile) throw new Error('campaign file is required');
+  const artifact = readArtifact(args.campaignFile, { expectedKind: 'campaign_plan' });
+  const plan = validateCompiledCampaignPlan(artifact.payload);
+  const attempt = plan.attempts.find(item => item.id === args.campaignAttemptId);
+  if (!attempt) throw new Error('--campaign-attempt-id is not in the compiled campaign plan');
+  const plannedBudget = plan.definition.budgets.maxCostUsdPerAttempt;
+  if (args.maxBudgetUsd !== undefined
+    && (plannedBudget === null || args.maxBudgetUsd > plannedBudget)) {
+    throw new Error('--max-budget-usd exceeds the compiled campaign budget');
+  }
+  args.backend = attempt.stack;
+  args.track = plan.definition.track;
+  args.model = attempt.model;
+  args.agentAdapter = attempt.agentAdapter;
+  args.pricing = validatePricingAuthority(attempt.pricing, { at: 'compiled campaign pricing' });
+  args.guidance = parseGuidanceMode(attempt.guidance);
+  args.condition = structuredClone(attempt.condition);
+  args.skills = structuredClone(attempt.skills);
+  args.selectionRequest = structuredClone(plan.definition.selection);
+  args.guidanceDocument = structuredClone(
+    attempt.condition.guidance.documents[attempt.stack]);
+  args.packIds = structuredClone(plan.definition.selection.packs ?? []);
+  args.checkKeys = structuredClone(plan.definition.selection.checks ?? []);
+  args.repairs = attempt.mode.id === 'dependency'
+    ? 0 : repairBudgetLimit(plan.definition.repair);
+  args.maxBudgetUsd ??= plannedBudget ?? undefined;
+  args.parentAttemptId = attempt.id;
+  args.media = false;
+  args.levels = `${Math.min(...attempt.levels)}-${Math.max(...attempt.levels)}`;
+  args.experimentIdentity = {
+    id: plan.id, version: plan.version, sha256: plan.contentSha256, state: plan.state,
+  };
+  if (args.campaignAdmissionId) {
+    const admission = readCampaignAdmission(dirname(args.campaignFile),
+      args.campaignAdmissionId, plan);
+    const image = plan.definition.runtime.buildImage
+      ?? process.env.STACK_BENCH_IMAGE ?? DEFAULT_BUILD_IMAGE;
+    args.campaignAdmission = {
+      id: args.campaignAdmissionId,
+      ...campaignAdmissionSmokeReuse(admission, {
+        agentAdapter: args.agentAdapter,
+        runIndex: args.runIndex,
+        backend: args.backend,
+        image,
+      }),
+    };
+  }
+  args.runMode = structuredClone(attempt.mode);
+  if (plan.featureCatalog) {
+    args.featureCatalog = validateFeatureCatalogInput(plan.featureCatalog);
+  }
+  if (attempt.mode.id === 'dependency') {
+    if (!plan.dependencyPolicy || !args.featureCatalog) {
+      throw new Error('dependency campaign requires a feature catalog and dependency policy');
+    }
+    args.dependencyPolicy = plan.dependencyPolicy;
+    args.progression = compileProgressionInput(dependencyRuntimeDefinition(
+      args.featureCatalog, args.dependencyPolicy));
+    args.progressionOwner = { schemaVersion: 1,
+      campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+      attempt: { id: attempt.id, track: plan.definition.track, stack: attempt.stack,
+        agentAdapter: attempt.agentAdapter, model: attempt.model,
+        conditionSha256: attempt.condition.sha256 } };
+  }
+}
diff --git a/tools/stack-bench/commands/bench.ts b/tools/stack-bench/commands/bench.ts
new file mode 100644
index 00000000000..7ca98080553
--- /dev/null
+++ b/tools/stack-bench/commands/bench.ts
@@ -0,0 +1,2678 @@
+#!/usr/bin/env node
+
+import { execFile, execFileSync } from 'node:child_process';
+import type { ChildProcess, ExecFileSyncOptionsWithStringEncoding } from 'node:child_process';
+import { readFileSync, writeFileSync, mkdirSync, existsSync, cpSync, rmSync } from 'node:fs';
+import { join, dirname, resolve } from 'node:path';
+import { tmpdir } from 'node:os';
+import { pathToFileURL } from 'node:url';
+import { loadTrack, resultsName, portsFor, workDirFor, assertNoPortCollisions,
+  moduleName, dbName, suitesFor } from '../src/composition/tracks.js';
+import { parseBenchArguments } from './bench-arguments.js';
+import type { BenchArguments } from './bench-arguments.js';
+import { killTree } from '../src/runtime/platform.js';
+import { formatRepairProgress } from '../src/evidence/scoring.js';
+import { ARTIFACT_FILE, emptyArtifactIdentities, readArtifact, readArtifactPayload,
+  writeArtifact, writeRunJson } from '../src/evidence/artifacts.js';
+import { aggregateRunOutcome, classifyBundle, ladderMayAdvance, ladderMayContinue,
+  mutationControlEligible, runExitCode, runOutcomeKind } from '../src/evidence/outcomes.js';
+import { summarizeSessions } from '../src/evidence/session-metrics.js';
+import { hashDirectory, sha256 } from '../src/evidence/provenance.js';
+import { createBackendLease, newRunId, publicBackendLease, readBackendLease,
+  acquireResourceLocks, backendResourceLockKeys, releaseResourceLocks, resourceLockScope,
+  writeBackendLease } from '../src/runtime/backend-lease.js';
+import { captureApplicationDiagnostics } from '../src/runtime/backend-control.js';
+import type { RuntimeControlSpec } from '../src/runtime/backend-control.js';
+import { releaseBackendLease } from '../src/runtime/backend-teardown.js';
+import { resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { createAgentVisibleTaskRequest, createBoundRecipeTaskRequest }
+  from '../src/composition/recipe-selection.js';
+import { criterionEvidence, evidencePassed } from '../src/evidence/check-evidence.js';
+import { STACK_ADAPTER_REGISTRY } from '../src/stacks/stack-adapters.js';
+import { agentRecipeIdentity, agentRequestArgv } from '../src/agents/agent-adapter-contract.js';
+import { agentSessionFailure, validateAgentResult }
+  from '../src/agents/agent-result-contract.js';
+import { AGENT_ADAPTER_REGISTRY, agentAdapterIdentity } from '../src/agents/agent-adapters.js';
+import { archiveTranscripts } from '../src/agents/transcript-archive.js';
+import { runPreflight } from '../src/runtime/preflight.js';
+import { DEFAULT_BUILD_IMAGE } from '../src/composition/product-config.js';
+import { SUPERVISOR_STATE_VERSION, writeRecoveryArtifact } from '../src/runtime/recovery.js';
+import { applyAgentCredential } from '../src/agents/agent-credentials.js';
+import { hashAppSource, resetAppToSource, seedAppSource, snapshotAppSource } from '../src/runtime/source-snapshot.js';
+import { finalPackageEvidenceRequired, preserveFinalPackageEvidence, preserveLevelCheckpoint,
+  sourceBoundFirstBuildOutcome } from '../src/runtime/source-checkpoint.js';
+import { materializationAppFailure, materializeAcceptedSource }
+  from '../src/runtime/source-materialization.js';
+import { compareRepairBaseline, createRepairGrant } from '../src/runtime/repair-grant.js';
+import { canonicalDefinitionJson } from '../src/composition/definition-plan.js';
+import { contractInterfaceNames } from '../src/composition/agent-visible-contract.js';
+import { clearPrivateGradingEvidence, levelGradeIsUsable, repairEvidenceDecision,
+  repairHistoryEntry, repairProgressState, repairRegressionDecision,
+  restorePrivateGradingEvidence }
+  from '../src/evidence/repair-evidence.js';
+import { mutationControlArgv, mutationControlTimeoutMs, pristineMutationBaselinePath }
+  from '../src/evidence/mutation-control.js';
+import type { MutationControlArgs } from '../src/evidence/mutation-control.js';
+import { progressionEngine } from '../src/progression/progression-engine.js';
+import { dependencyRepairBudget, dependencyRepairRecords }
+  from '../src/progression/dependency-mode.js';
+import { DEPENDENCY_MODE_VERSION } from '../src/progression/dependency-definition.js';
+import { resolveProgressionRecipeAction, resolveProgressionRecipeLevelSelection,
+  resolveProgressionRepairTarget, validateProgressionCampaignLevelScope }
+  from '../src/progression/progression-recipe-selection.js';
+import { createLiveProgressionExecution }
+  from '../src/progression/live-progression.js';
+import type { CampaignSelection } from '../src/campaigns/campaign-compiler.js';
+import { gradingRunTimeoutMs, selectedGradingSourceCount }
+  from '../src/runtime/grading-timeout.js';
+import { claudeRatesForModel } from '../src/evidence/claude-usage-cost.js';
+import { PRICING_UNIT, validatePricingAuthority }
+  from '../src/evidence/pricing-authority.js';
+import type { BoundRecipeTaskRequestResult } from '../src/composition/recipe-selection.js';
+import type { RecipeBinding } from '../src/composition/recipe-release.js';
+import type { RepairGrantResolution, RepairOutcome } from '../src/runtime/repair-grant.js';
+import type { AgentAdapter, AgentMode, AgentRequest }
+  from '../src/agents/agent-adapter-contract.js';
+import type { ValidatedAgentResult } from '../src/agents/agent-result-contract.js';
+import type { Track } from '../src/composition/tracks.js';
+import type { RunOutcome } from '../src/evidence/outcomes.js';
+import type { GradeBundlePayload, BenchmarkRunRecord, RunLevelRecord,
+  RunContinuation, RunRepairCandidate, RunSessionRecord, RunTotals }
+  from '../src/evidence/benchmark-run.js';
+import { addCostUsd, finalizeRunTotals, runSessionRecord }
+  from '../src/evidence/benchmark-run.js';
+import { formatLevelSummary } from '../src/evidence/evidence-presentation.js';
+import type { ProgressionAction } from '../src/progression/progression-engine.js';
+import type { ProgressionRepairRegression, ProgressionState }
+  from '../src/progression/progression-state.js';
+import type { ProgressionRecipeAction, ProgressionRecipeSelections }
+  from '../src/progression/progression-recipe-selection.js';
+import type { BackendLease } from '../src/runtime/backend-lease.js';
+
+import { STACK_BENCH_ROOT as ROOT, compiledEntrypoint } from '../src/package-root.js';
+import { stackBenchResultsRoot } from '../src/runtime/operational-paths.js';
+import { runningContainerIdentity } from '../src/runtime/container-identity.js';
+const COMMAND_TIMEOUT_MS = 20 * 60_000;
+
+type UnknownRecord = Record<string, unknown>;
+type ContaminationAudit = { kind: 'contaminated' | 'harness_failure'; evidence: string[];
+  verdict: string };
+type LeakAuditEntry = { hits: Array<{ kind: string; path: string }> };
+type CommandFailure = Error & { stdout?: string | Buffer; stderr?: string | Buffer;
+  status?: number | null; signal?: NodeJS.Signals | null };
+type GradeOptions = { observation?: 'scored' | 'observed'; out?: string | null;
+  sourceSha256?: string | null; applicationFailure?: RunOutcome | null;
+  recipeTask?: GradeRecipeTask };
+type MutationControlResult = UnknownRecord & { ok: boolean; artifact?: string;
+  skipped?: boolean; processError?: string | null; outcome: RunOutcome | null };
+type RecipeTask = (BoundRecipeTaskRequestResult | ProgressionRecipeSelections['grader']) & { agentRequest?: UnknownRecord;
+  progressionAction?: ProgressionAction };
+type BenchArgs = BenchArguments & {
+  recipeTasks: Map<number, RecipeTask>;
+  recipeBindings: Map<number, RecipeBinding>;
+  repairGrant?: RepairGrantResolution;
+  mutationImageId?: string;
+  spentBudgetUsd?: number;
+};
+type ProgressionWorkRecipeAction = ProgressionRecipeSelections & {
+  action: Exclude<ProgressionAction, { type: 'terminal' }>;
+};
+type FirstBuildRecord = {
+  score: number | null;
+  max: number | null;
+  regression: NonNullable<GradeBundlePayload['totals']>['regression'] | null;
+  contractPass: boolean | null;
+  outcome: RunOutcome;
+  source: { sha256: string; files: number } | null;
+  missed: string[];
+  observations?: UnknownRecord;
+};
+type RepairStatus = 'not-needed' | 'corrected' | 'budget-exhausted' | 'incomplete' | 'ungraded';
+type ProgressionFailure = { kind?: string; reason?: string };
+
+const object = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+const errorMessage = (error: unknown): string =>
+  error instanceof Error ? error.message : String(error);
+
+function commandFailure(error: unknown): CommandFailure {
+  if (error instanceof Error) return error;
+  throw error;
+}
+
+function parseLeakAudit(value: string): LeakAuditEntry[] {
+  const parsed: unknown = JSON.parse(value);
+  if (!Array.isArray(parsed)) throw new Error('contamination audit output must be an array');
+  return parsed.map((entry, index) => {
+    if (!object(entry) || !Array.isArray(entry.hits)) {
+      throw new Error(`contamination audit output[${index}] is invalid`);
+    }
+    const hits = entry.hits.map((hit, hitIndex) => {
+      if (!object(hit) || typeof hit.kind !== 'string' || typeof hit.path !== 'string') {
+        throw new Error(`contamination audit output[${index}].hits[${hitIndex}] is invalid`);
+      }
+      return { kind: hit.kind, path: hit.path };
+    });
+    return { hits };
+  });
+}
+
+function stringArray(value: unknown, at: string): string[] {
+  if (!Array.isArray(value) || value.some(entry => typeof entry !== 'string')) {
+    throw new Error(`${at} must be an array of strings`);
+  }
+  return [...value];
+}
+
+function campaignSelection(value: unknown, at: string): CampaignSelection {
+  if (!object(value)) throw new Error(`${at} must be an object`);
+  const optionalStrings = (field: 'packs' | 'checks'): string[] | undefined => {
+    const entry = value[field];
+    if (entry === undefined) return undefined;
+    return stringArray(entry, `${at}.${field}`);
+  };
+  let levels: CampaignSelection['levels'];
+  if (value.levels !== undefined) {
+    if (!Array.isArray(value.levels)) throw new Error(`${at}.levels must be an array`);
+    levels = value.levels.map((entry, index) => {
+      if (!object(entry)) throw new Error(`${at}.levels[${index}] is invalid`);
+      const level = entry.level;
+      const recipe = entry.recipe;
+      if (typeof level !== 'number' || !Number.isSafeInteger(level) || typeof recipe !== 'string') {
+        throw new Error(`${at}.levels[${index}] is invalid`);
+      }
+      return { level, recipe,
+        ...(entry.features === undefined ? {} : { features: stringArray(entry.features,
+          `${at}.levels[${index}].features`) }),
+        ...(entry.checks === undefined ? {} : { checks: stringArray(entry.checks,
+          `${at}.levels[${index}].checks`) }) };
+    });
+  }
+  return { ...(optionalStrings('packs') === undefined ? {} : { packs: optionalStrings('packs') }),
+    ...(optionalStrings('checks') === undefined ? {} : { checks: optionalStrings('checks') }),
+    ...(levels === undefined ? {} : { levels }) };
+}
+
+function isProgressionWorkRecipeAction(value: ProgressionRecipeAction):
+  value is ProgressionWorkRecipeAction {
+  return value.action.type !== 'terminal';
+}
+
+function repairCheckKeys(value: ProgressionRecipeAction | null): string[] {
+  if (!value || !isProgressionWorkRecipeAction(value) || value.action.type !== 'repair') return [];
+  if (!object(value.action.prompt) || !Array.isArray(value.action.prompt.nodeIds)
+    || !object(value.action.grading) || !Array.isArray(value.action.grading.checks)) {
+    throw new Error('dependency repair action has invalid prompt or grading selections');
+  }
+  const promptNodeIds = new Set(value.action.prompt.nodeIds.map(nodeId => {
+    if (typeof nodeId !== 'string' || !nodeId) {
+      throw new Error('dependency repair action has an invalid prompt node');
+    }
+    return nodeId;
+  }));
+  const checks = value.action.grading.checks.flatMap(check => {
+    if (!object(check) || typeof check.id !== 'string' || !check.id
+      || typeof check.nodeId !== 'string' || !check.nodeId) {
+      throw new Error('dependency repair action has an invalid grading check');
+    }
+    return promptNodeIds.has(check.nodeId) ? [check.id] : [];
+  });
+  if (checks.length === 0) throw new Error('dependency repair action selects no repair checks');
+  return checks;
+}
+
+function repairReportArgs(value: ProgressionRecipeAction | null): string[] {
+  const checks = repairCheckKeys(value);
+  if (!value || !isProgressionWorkRecipeAction(value) || checks.length === 0) return [];
+  const interfaces = contractInterfaceNames(value.agent.task.contractText);
+  return ['--checks-json', JSON.stringify(checks),
+    '--controls-json', JSON.stringify(interfaces)];
+}
+
+function repairOwnerNodeIds(value: ProgressionRecipeAction | null): string[] {
+  if (!value || !isProgressionWorkRecipeAction(value) || value.action.type !== 'repair') return [];
+  return [...value.action.repair.nodeIds].sort();
+}
+
+function savedRepairRegression(state: ProgressionState | null,
+  selected: ProgressionRecipeAction | null): ProgressionRepairRegression | null {
+  const saved = state?.attempts.at(-1)?.repairRegression;
+  if (!saved) return null;
+  const owners = repairOwnerNodeIds(selected);
+  return JSON.stringify([...saved.ownerNodeIds].sort()) === JSON.stringify(owners)
+    ? structuredClone(saved) : null;
+}
+
+function requireProgressionState(state: ProgressionState | null): ProgressionState {
+  if (!state) throw new Error('live dependency progression has no active state');
+  return state;
+}
+
+function requireContinuation(run: BenchmarkRunRecord): RunContinuation {
+  if (!run.continuation) throw new Error('repair continuation has no continuation record');
+  return run.continuation;
+}
+
+function requireRunTotals(run: BenchmarkRunRecord): RunTotals {
+  if (!run.totals) throw new Error('benchmark run totals are not available');
+  return run.totals;
+}
+
+function repairOutcome(outcome: RunOutcome): RepairOutcome {
+  return { kind: outcome.kind, appFailures: [...(outcome.appFailures ?? [])],
+    inconclusive: [...(outcome.inconclusive ?? [])],
+    harnessFailures: [...(outcome.harnessFailures ?? [])] };
+}
+
+function progressionFailure(outcome: RunOutcome): ProgressionFailure {
+  return { kind: outcome.kind, ...(outcome.reason === null || outcome.reason === undefined
+    ? {} : { reason: outcome.reason }) };
+}
+
+function featureCheckKeys(selected: ProgressionWorkRecipeAction,
+  state: ProgressionState): string[] {
+  if (!object(selected.action.prompt) || !Array.isArray(selected.action.prompt.nodeIds)) {
+    throw new Error('feature action has no prompt nodes');
+  }
+  const selectedNodes = new Set(selected.action.prompt.nodeIds);
+  return state.definition.nodes
+    .filter(node => selectedNodes.has(node.id))
+    .flatMap(node => node.gradingChecks
+      .filter(check => check.role === 'feature')
+      .map(check => check.id));
+}
+
+function bundlePassedChecks(bundle: GradeBundlePayload | null): Set<string> {
+  return new Set(Object.values(bundle?.suites ?? {}).flatMap(suite =>
+    (suite?.features ?? []).flatMap(feature =>
+      (feature.criteria ?? []).flatMap(criterion =>
+        typeof criterion.stableKey === 'string'
+          && evidencePassed(criterionEvidence(criterion)) ? [criterion.stableKey] : []))));
+}
+
+function featureCandidateAccepted(selected: ProgressionWorkRecipeAction,
+  state: ProgressionState, candidate: GradeBundlePayload | null): boolean {
+  if (!levelGradeIsUsable(classifyBundle(candidate))) return false;
+  const passed = bundlePassedChecks(candidate);
+  if (!featureCheckKeys(selected, state).every(check => passed.has(check))) return false;
+  return state.definition.nodes.every(node => node.gradingChecks.every(check =>
+    state.nodes[node.id]?.checks[check.id] !== 'pass' || passed.has(check.id)));
+}
+
+function featureActionNeedsCoding(selected: ProgressionWorkRecipeAction,
+  state: ProgressionState): boolean {
+  if (selected.action.type === 'repair') return true;
+  if (!object(selected.action.prompt) || !Array.isArray(selected.action.prompt.nodeIds)) {
+    throw new Error('feature action has no prompt nodes');
+  }
+  return selected.action.prompt.nodeIds.some(nodeId => {
+    const node = state.nodes[String(nodeId)];
+    return node?.status === 'active'
+      && Object.values(node.checks).every(outcome => outcome === null);
+  });
+}
+
+function mergeFeatureLevelRecord(previous: RunLevelRecord | null,
+  current: RunLevelRecord): RunLevelRecord {
+  if (!previous) return current;
+  const buildSessions: RunSessionRecord[] = [
+    ...(previous.buildSessions ?? []),
+    ...(current.buildSessions ?? []),
+  ];
+  const repairSessions = [...(previous.repairSessions ?? []), ...(current.repairSessions ?? [])];
+  const sessionTotals = summarizeSessions([...buildSessions, ...repairSessions]);
+  const repairs = (previous.repairs ?? 0) + (current.repairs ?? 0);
+  const repair = current.repair ? {
+    ...current.repair,
+    limit: Math.max(previous.repair?.limit ?? 0,
+      (previous.repairs ?? 0) + current.repair.limit),
+    used: repairs,
+  } : previous.repair;
+  const merged: RunLevelRecord = {
+    ...previous,
+    ...current,
+    buildSessions,
+    buildCostUsd: addCostUsd(previous.buildCostUsd, current.buildCostUsd),
+    repairSessions,
+    repairCostUsd: addCostUsd(previous.repairCostUsd, current.repairCostUsd),
+    repairHistory: [...(previous.repairHistory ?? []), ...(current.repairHistory ?? [])],
+    repairs,
+    repair,
+    sessionTotals,
+    tokens: sessionTotals.tokens,
+    usage: sessionTotals.usage,
+    turns: sessionTotals.turns,
+    promptBytes: sessionTotals.promptBytes,
+    tokensPerTurn: sessionTotals.turns
+      ? Math.round(sessionTotals.tokens / sessionTotals.turns) : null,
+    thinking: sessionTotals.thinking,
+    costUsd: addCostUsd(previous.costUsd, current.costUsd),
+    durationSec: (previous.durationSec ?? 0) + (current.durationSec ?? 0),
+  };
+  return merged;
+}
+
+function mutationControlArgs(args: BenchArgs): MutationControlArgs {
+  if (!args.out || !args.mutations || !args.backend || !args.parentAttemptId) {
+    throw new Error('mutation control has incomplete run identity');
+  }
+  return { levelList: args.levelList, out: args.out, recipe: args.recipe,
+    recipeTasks: args.recipeTasks, mutations: args.mutations, backend: args.backend,
+    track: args.track, runIndex: args.runIndex, parentAttemptId: args.parentAttemptId,
+    mutationShardIndex: args.mutationShardIndex, mutationShardCount: args.mutationShardCount,
+    mutationResumeFrom: args.mutationResumeFrom, mutationCheckpointOut: args.mutationCheckpointOut,
+    mutationBaselineBundle: args.mutationBaselineBundle,
+    expectedMutationCalibration: args.expectedMutationCalibration,
+    mutationMaxRuntimeMinutes: args.mutationMaxRuntimeMinutes,
+    mutationImageId: args.mutationImageId };
+}
+
+function mutationOutcome(value: unknown): RunOutcome | null {
+  if (value === null || value === undefined) return null;
+  if (!object(value)) {
+    throw new Error('mutation control artifact outcome is invalid');
+  }
+  return { kind: runOutcomeKind(value.kind),
+    ...(typeof value.phase === 'string' ? { phase: value.phase } : {}),
+    ...(typeof value.reason === 'string' ? { reason: value.reason } : {}) };
+}
+
+function recipeRequestIdentity(value: unknown): { recipeSha256: string; selectionSha256: string;
+  taskPacks: unknown; taskSha256: string } {
+  if (!object(value) || !object(value.recipe) || !object(value.selection) || !object(value.task)
+    || typeof value.recipe.contentSha256 !== 'string' || typeof value.selection.sha256 !== 'string'
+    || typeof value.task.sha256 !== 'string') {
+    throw new Error('recipe task request has no complete identity');
+  }
+  return { recipeSha256: value.recipe.contentSha256, selectionSha256: value.selection.sha256,
+    taskPacks: value.selection.taskPacks, taskSha256: value.task.sha256 };
+}
+
+function snapshotSource(appDir: string, to: string): void {
+  snapshotAppSource(appDir, to);
+}
+
+// The ports a build may legitimately reach: its own web, database, and
+// SpacetimeDB listeners. Every other local port belongs to another run, the
+// controller, or the dashboard.
+function runOwnPorts(track: Parameters<typeof portsFor>[0],
+  args: { backend: string; runIndex: number }): number[] {
+  const ports = portsFor(track, args.backend, args.runIndex);
+  const stdb = process.env.STACK_BENCH_STDB_URI
+    ? Number(new URL(process.env.STACK_BENCH_STDB_URI).port) : null;
+  return [ports.vite, ports.express, ports.dbPort, stdb].filter((port): port is number =>
+    typeof port === 'number' && Number.isInteger(port) && port > 0);
+}
+
+// Check contamination after every coding session. File-tool permissions do not
+// govern shell reads, so the transcript audit remains a separate hard gate.
+function auditContamination(appDir: string, ownPorts: readonly number[],
+  expectTranscripts: boolean): ContaminationAudit | null {
+  // A non-billable adapter runs no provider session and leaves no transcript;
+  // there is nothing to audit and nothing that could have been read.
+  if (!expectTranscripts) return null;
+  const args = [join(ROOT, 'dist', 'commands', 'leak-audit.js'), '--app', appDir, '--json',
+    '--own-ports', ownPorts.join(',')];
+  let firstFailure: unknown = null;
+  for (let attempt = 1; attempt <= 2; attempt++) {
+    try {
+      const audit = sh('node', args, { stdio: 'pipe' });
+      const entries = parseLeakAudit(audit);
+      if (entries.length === 0) {
+        return { kind: 'harness_failure',
+          evidence: ['no session transcript was found to audit'],
+          verdict: 'SCORES NOT USABLE — nothing verified this build stayed inside its directory.' };
+      }
+      const escapes = entries.flatMap(entry => entry.hits);
+      const serious = escapes.filter(h => /GRADER|CONTRACT|BENCHMARK NOTES|PROMPTS|NETWORK/.test(h.kind));
+      if (firstFailure) {
+        console.error(`  warning: contamination audit passed on retry after: ${auditFailureSummary(firstFailure)}`);
+      }
+      if (!serious.length) return null;
+      return { kind: 'contaminated',
+        evidence: [...new Set(serious.map(h => `${h.kind}: ${h.path.split('/').slice(-2).join('/')}`))].slice(0, 8),
+        verdict: 'SCORES NOT USABLE — the build read the harness that grades it.' };
+    } catch (error) {
+      firstFailure ??= error;
+      if (attempt === 2) {
+        // An audit that could not run is not a pass. Keep the process details so
+        // the failure can be repaired without another paid reproduction.
+        return { kind: 'harness_failure',
+          evidence: [`audit did not run after retry: ${auditFailureSummary(error)}`],
+          verdict: 'SCORES NOT USABLE — nothing verified this build stayed inside its directory.' };
+      }
+    }
+  }
+  return null;
+}
+
+export function auditFailureSummary(error: unknown): string {
+  const failure = object(error) ? error : {};
+  const message = errorMessage(error).split(/\r?\n/)[0] ?? '';
+  const stderrLines = String(failure.stderr ?? '').trim().split(/\r?\n/).filter(Boolean);
+  const stderr = stderrLines.find(line => /(?:error|eacces|permission denied|failed)/i.test(line))
+    ?? stderrLines[0];
+  const details = [
+    Number.isInteger(failure.status) ? `exit ${String(failure.status)}` : null,
+    failure.signal ? `signal ${String(failure.signal)}` : null,
+    stderr ? `stderr: ${stderr}` : null,
+  ].filter(Boolean);
+  return details.length ? `${message} (${details.join('; ')})` : message;
+}
+
+const sh = (cmd: string, args: readonly string[],
+  opts: Omit<ExecFileSyncOptionsWithStringEncoding, 'encoding'> = {}): string =>
+  execFileSync(cmd, [...args], {
+    encoding: 'utf8', maxBuffer: 64 * 1024 * 1024, timeout: COMMAND_TIMEOUT_MS, ...opts,
+  });
+
+let activeAgentChild: ChildProcess | null = null;
+// Set once a run owns resources. The top-level rejection handler invokes this
+// directly; relying only on process 'exit' made cleanup best-effort precisely
+// when an awaited build rejected unexpectedly.
+let emergencyTeardown: (() => void) | null = null;
+
+export function parseAgentProcessResult(stdout: string, stderr: string, processError: unknown,
+  request: AgentRequest): ValidatedAgentResult {
+  const resultLine = stdout.trim().split('\n').pop();
+  let result: ValidatedAgentResult;
+  try {
+    if (!resultLine) throw new Error('agent returned no result line');
+    result = validateAgentResult(JSON.parse(resultLine), request);
+  } catch (resultError) {
+    const stdoutTail = stdout.trim().slice(-2000) || '<empty>';
+    const stderrTail = stderr.trim().slice(-4000) || '<empty>';
+    const processDetail = processError ? `agent process failed: ${errorMessage(processError)}\n` : '';
+    throw new Error(`${processDetail}agent returned an invalid result: ${errorMessage(resultError)}\n`
+      + `agent stdout tail:\n${stdoutTail}\nagent stderr tail:\n${stderrTail}`);
+  }
+  if (processError && result.ok) {
+    throw new Error(`agent process failed after reporting success: ${errorMessage(processError)}`);
+  }
+  return result;
+}
+
+function runAgent(
+  args: BenchArgs,
+  adapter: AgentAdapter,
+  mode: AgentMode,
+  level: number,
+  appDir: string,
+): Promise<ValidatedAgentResult> {
+  if (!args.backend || !args.model) throw new Error('agent run requires backend and model');
+  const remainingBudget = args.maxBudgetUsd == null ? null
+    : addCostUsd(args.maxBudgetUsd, -(args.spentBudgetUsd ?? 0));
+  if (remainingBudget !== null && remainingBudget <= 0) {
+    throw new Error(`attempt cost cap of $${args.maxBudgetUsd} was exhausted before ${mode} L${level}`);
+  }
+  if (remainingBudget !== null && adapter.costLimit === 'unsupported') {
+    throw new Error(`agent adapter ${adapter.id} cannot enforce --max-budget-usd`);
+  }
+  const recipeTask = args.recipeTasks?.get(level)?.agentRequest
+    ?? args.recipeTasks?.get(level)?.request ?? null;
+  const request: AgentRequest = { mode, level, app: appDir, backend: args.backend, track: args.track,
+    runIndex: args.runIndex, model: args.model, guidance: args.guidance, skills: args.skills,
+    ...(adapter.usesStackSkills
+      ? { skillIdentity: args.condition?.guidance.skills[args.backend] } : {}),
+    recipe: agentRecipeIdentity(args.recipe, recipeTask),
+    guidanceDocument: args.guidanceDocument,
+    credentialAliases: args.condition?.guidance?.credentialAliases ?? {},
+    recipeTask, pricing: args.pricing,
+    maxBudgetUsd: remainingBudget, adapterCostLimit: adapter.costLimit };
+  const argv = agentRequestArgv(adapter, request);
+  if (args.apiKey && !adapter.apiKeyEnvironmentVariable) {
+    throw new Error(`agent adapter ${adapter.id} does not accept an API key`);
+  }
+  const env = { ...process.env };
+  if (args.apiKey) {
+    const credentialName = adapter.apiKeyEnvironmentVariable;
+    if (!credentialName) throw new Error(`agent adapter ${adapter.id} does not accept an API key`);
+    env[credentialName] = args.apiKey;
+  }
+  return new Promise((resolveRun, rejectRun) => {
+    const child = execFile('node', argv, {
+      encoding: 'utf8', maxBuffer: 64 * 1024 * 1024, timeout: adapter.deadlineMs,
+      env,
+    },
+      (error, stdout, stderr) => {
+        if (activeAgentChild === child) activeAgentChild = null;
+        try {
+          const result = parseAgentProcessResult(stdout, stderr, error, request);
+          args.spentBudgetUsd = addCostUsd(args.spentBudgetUsd, result.costUsd);
+          resolveRun(result);
+        }
+        catch (parseError) {
+          rejectRun(parseError);
+        }
+      });
+    activeAgentChild = child;
+  });
+}
+
+interface GradeCheck {
+  stableKey: string;
+  executionId?: string;
+  source?: string;
+}
+
+interface GradeRecipeTask {
+  request: UnknownRecord;
+  selection: { checks: readonly GradeCheck[] }
+    | { scoredChecks: readonly GradeCheck[]; observedChecks?: readonly GradeCheck[] };
+}
+
+function checksForGrade(task: GradeRecipeTask | undefined, observation: GradeOptions['observation']):
+  readonly GradeCheck[] {
+  if (!task) return [];
+  if ('scoredChecks' in task.selection) {
+    return observation === 'observed'
+      ? task.selection.observedChecks ?? [] : task.selection.scoredChecks;
+  }
+  return task.selection.checks;
+}
+
+type GradeArguments = Pick<BenchArgs, 'backend' | 'track' | 'runIndex' | 'media' | 'recipe'> & {
+  recipeTasks?: ReadonlyMap<number, GradeRecipeTask>;
+  progression?: { identity: { policy?: string } };
+  condition?: { guidance?: { credentialAliases?: Record<string, unknown> } };
+};
+
+export function gradeArgv(
+  args: GradeArguments,
+  appDir: string,
+  url: string,
+  label: string,
+  level: number,
+  track: Track,
+  parentAttemptId: string,
+  options: GradeOptions = {},
+): string[] {
+  const { observation = 'scored', out = null, sourceSha256 = null,
+    applicationFailure = null } = options;
+  if (!args.backend) throw new Error('grading requires a backend');
+  const restartSpec = restartSpecFor(args, appDir, track);
+  const task = options.recipeTask ?? args.recipeTasks?.get(level);
+  return [compiledEntrypoint('commands', 'run-suite.js'), '--app', appDir, '--url', url,
+    '--backend', args.backend, '--label', label, '--level', String(level),
+    '--track', args.track,
+    '--run-index', String(args.runIndex),
+    '--parent-attempt-id', parentAttemptId,
+    '--observation', observation,
+    ...(out ? ['--out', out] : []),
+    ...(sourceSha256 ? ['--source-sha256', sourceSha256] : []),
+    ...(args.recipe ? ['--recipe', args.recipe] : []),
+    ...(task ? ['--recipe-task-json', JSON.stringify(task.request)] : []),
+    ...(args.condition?.guidance?.credentialAliases
+      ? ['--credential-aliases-json', JSON.stringify(
+          args.condition.guidance.credentialAliases)] : []),
+    ...(applicationFailure
+      ? ['--application-failure-json', JSON.stringify(applicationFailure)] : []),
+    ...(observation === 'scored' && args.recipeTasks && !args.progression
+      ? ['--regression-checks-json', JSON.stringify([...args.recipeTasks.entries()]
+        .filter(([priorLevel]) => priorLevel < level)
+        .flatMap(([, priorTask]) => checksForGrade(priorTask, 'scored')
+          .map(check => check.stableKey)))] : []),
+    ...(args.media && observation === 'scored' ? [] : ['--no-media']),
+    ...(!STACK_ADAPTER_REGISTRY.get(args.backend).runPolicy.resetEnabled
+      ? ['--no-reset']
+      : ['--restart-spec', JSON.stringify(restartSpec)])];
+}
+
+function grade(
+  args: BenchArgs,
+  appDir: string,
+  url: string,
+  label: string,
+  level: number,
+  track: Track,
+  parentAttemptId: string,
+  options: GradeOptions = {},
+): GradeBundlePayload | null {
+  const { out = null } = options;
+  const source = hashAppSource(appDir);
+  const argv = gradeArgv(args, appDir, url, label, level, track, parentAttemptId, {
+    ...options, sourceSha256: options.sourceSha256 ?? source.sha256,
+  });
+  const bundle = join(out ?? join(appDir, 'stack-bench'), ARTIFACT_FILE.gradeBundle);
+  rmSync(bundle, { force: true });
+  const task = options.recipeTask ?? args.recipeTasks?.get(level);
+  const currentChecks = checksForGrade(task, options.observation);
+  const regressionChecks = options.observation === 'observed' || args.progression
+    ? []
+    : [...(args.recipeTasks?.entries() ?? [])]
+      .filter(([priorLevel]) => priorLevel < level)
+      .flatMap(([, priorTask]) => checksForGrade(priorTask, 'scored'));
+  const sourceCount = task
+    ? selectedGradingSourceCount(currentChecks, regressionChecks)
+    : suitesFor(track, level).length;
+  try {
+    sh('node', argv, { stdio: 'inherit', timeout: gradingRunTimeoutMs(sourceCount) });
+  } catch { /* a current bundle may still explain a scored failure */ }
+  return existsSync(bundle)
+    ? readArtifactPayload<GradeBundlePayload>(bundle, { expectedKind: 'grade_bundle' }) : null;
+}
+
+function restartSpecFor(args: Pick<GradeArguments, 'backend' | 'runIndex'>,
+  appDir: string, track: Track): RuntimeControlSpec {
+  if (!args.backend) throw new Error('restart specification requires a backend');
+  const port = portsFor(track, args.backend, args.runIndex).vite ?? null;
+  if (port == null) throw new Error(`stack ${args.backend} has no application port`);
+  return { backend: args.backend, app: appDir, port: Number(port), probe: '' };
+}
+
+function runMutationControl(
+  args: BenchArgs,
+  appDir: string,
+  url: string,
+  track: Track,
+  imageId: string | null,
+): MutationControlResult {
+  if (!args.out || !args.mutations) throw new Error('mutation control requires output and manifest paths');
+  const output = join(args.out, ARTIFACT_FILE.mutationControl);
+  if (!args.mutationResumeFrom || resolve(args.mutationResumeFrom) !== resolve(output)) {
+    rmSync(output, { force: true });
+  }
+  if (imageId) args.mutationImageId = imageId;
+  else delete args.mutationImageId;
+  const argv = mutationControlArgv(mutationControlArgs(args), appDir, url, track);
+  let processError = null;
+  try { sh(process.execPath, argv, {
+    stdio: 'inherit', timeout: mutationControlTimeoutMs(args.mutationMaxRuntimeMinutes),
+  }); }
+  catch (error) { processError = errorMessage(error).split('\n')[0] ?? null; }
+  if (!existsSync(output)) {
+    return { ok: false, artifact: output, processError,
+      outcome: { kind: 'harness_failure', phase: 'mutation-control',
+        reason: processError ?? 'mutation runner produced no artifact' } };
+  }
+  const artifact = readArtifactPayload(output, { expectedKind: 'mutation_control' });
+  return { ok: artifact.ok === true && !processError, artifact: output,
+    processError, summary: artifact.summary ?? null, outcome: mutationOutcome(artifact.outcome),
+    results: artifact.results ?? [] };
+}
+
+function validateMutationInput(args: BenchArgs): void {
+  if (!args.mutations) return;
+  if (!args.app) throw new Error('--mutations requires an explicit pristine --app');
+  const manifest = JSON.parse(readFileSync(args.mutations, 'utf8'));
+  if (!/^[a-f0-9]{64}$/.test(manifest.fixtureSha256 ?? '')) {
+    throw new Error('mutation manifest has no valid fixtureSha256');
+  }
+  const fixture = hashDirectory(args.app);
+  if (fixture.sha256 !== manifest.fixtureSha256) {
+    throw new Error(`mutation manifest targets fixture ${manifest.fixtureSha256}, not ${fixture.sha256}`);
+  }
+}
+
+async function main() {
+  const args: BenchArgs = {
+    ...parseBenchArguments(process.argv),
+    recipeTasks: new Map(),
+    recipeBindings: new Map(),
+  };
+  let repairGrant = null;
+  if (args.repairFrom) {
+    const repairLevel = args.repairLevel;
+    if (typeof repairLevel !== 'number' || !Number.isSafeInteger(repairLevel) || repairLevel < 1) {
+      throw new Error('--repair-from requires a positive --repair-level');
+    }
+    repairGrant = createRepairGrant(args.repairFrom,
+      { level: repairLevel, repairs: args.repairs });
+    const config = repairGrant.configuration;
+    if (config.buildImage && process.env.STACK_BENCH_IMAGE
+      && config.buildImage !== process.env.STACK_BENCH_IMAGE) {
+      throw new Error('repair continuation build image differs from its parent run');
+    }
+    if (config.buildImage) process.env.STACK_BENCH_IMAGE = config.buildImage;
+    Object.assign(args, {
+      backend: config.backend,
+      track: config.track,
+      recipe: config.recipe,
+      levels: String(config.level),
+      levelList: [config.level],
+      runIndex: config.runIndex,
+      agentAdapter: config.agentAdapter,
+      model: config.model,
+      guidance: config.guidance,
+      guidanceDocument: config.guidanceDocument,
+      condition: config.condition,
+      selectionRequest: campaignSelection(config.selectionRequest, 'repair configuration.selectionRequest'),
+      skills: config.skills,
+      packIds: [...(campaignSelection(config.selectionRequest,
+        'repair configuration.selectionRequest').packs ?? [])],
+      checkKeys: [...(campaignSelection(config.selectionRequest,
+        'repair configuration.selectionRequest').checks ?? [])],
+      featureIds: [],
+      requestedSpecifications: [],
+      expectedSpecifications: [],
+      observedSpecifications: [],
+      seedFrom: repairGrant.sourcePath,
+      url: config.url,
+      parentAttemptId: repairGrant.parent.id,
+      repairGrant,
+    });
+  }
+  if (!args.backend) throw new Error('benchmark run requires a backend');
+  const stackAdapter = STACK_ADAPTER_REGISTRY.get(args.backend);
+  const materializeCodingOutput = stackAdapter.id !== 'stub';
+  const agentAdapter = AGENT_ADAPTER_REGISTRY.get(args.agentAdapter);
+  if (process.env.STACK_BENCH_APPLIANCE !== '1' && agentAdapter.costLimit !== 'non-billable') {
+    throw new Error(`agent adapter ${agentAdapter.id} requires the Docker appliance`);
+  }
+  if (repairGrant) {
+    const currentAgent = agentAdapterIdentity(agentAdapter);
+    const parentAgent = repairGrant.parentArtifact.identities.agentAdapter;
+    if (currentAgent.id !== parentAgent?.id || currentAgent.version !== parentAgent?.version
+      || currentAgent.sha256 !== parentAgent?.sha256) {
+      throw new Error('repair continuation agent adapter differs from its parent run');
+    }
+    if (stackAdapter.id !== repairGrant.parentArtifact.identities.stackAdapter?.id
+      || stackAdapter.version !== repairGrant.parentArtifact.identities.stackAdapter?.version) {
+      throw new Error('repair continuation stack adapter differs from its parent run');
+    }
+  }
+  applyAgentCredential(args, agentAdapter);
+  args.model ??= agentAdapter.defaultModel;
+  if (!args.model) throw new Error(`agent adapter ${agentAdapter.id} has no default model`);
+  if (args.pricing !== undefined) {
+    args.pricing = validatePricingAuthority(args.pricing, { at: '--pricing-json' });
+  } else if (args.maxBudgetUsd != null && agentAdapter.costLimit === 'native') {
+    const rates = claudeRatesForModel(args.model);
+    if (!rates) throw new Error(`no default pricing is recorded for model ${args.model}`);
+    args.pricing = validatePricingAuthority({ unit: PRICING_UNIT, rates },
+      { at: 'default pricing' });
+  } else {
+    args.pricing = null;
+  }
+  if (args.retainBackend && !stackAdapter.runPolicy.retainHostSupported) {
+    throw new Error(`stack adapter ${args.backend} does not support --retain-backend`);
+  }
+  const stackRuntime = stackAdapter.orchestrator.config(
+    { root: ROOT, env: process.env, helpers: { exists: existsSync } });
+  Object.assign(process.env, stackRuntime.environment);
+  process.env.STACK_BENCH_NODE_BIN = process.platform === 'win32' ? 'node.exe' : process.execPath;
+  const track = loadTrack(args.track);
+  const ownPorts = runOwnPorts(track, { backend: stackAdapter.id, runIndex: args.runIndex });
+  const auditsTranscripts = agentAdapter.costLimit !== 'non-billable';
+  // Resolve the requested scope for every level before probing the sandbox,
+  // acquiring a backend lease or paying for a build. A pack that exists at L2
+  // but not L1 is not a late grading surprise; it is an invalid run request.
+  args.selectionRequest ??= { packs: [...args.packIds], checks: [...args.checkKeys] };
+  for (const level of args.levelList) {
+    const declared = args.condition?.requested?.levels?.find(entry => entry.level === level) ?? null;
+    const modularSelection = args.selectionRequest.levels?.find(entry => entry.level === level) ?? null;
+    if (declared?.selection?.schemaVersion === 3) {
+      const expected = args.featureCatalog
+        ? { level, recipe: `${declared.recipe.id}@${declared.recipe.version}` }
+        : { level, recipe: `${declared.recipe.id}@${declared.recipe.version}`,
+          features: declared.selection.requested.features,
+          checks: declared.selection.requested.checks };
+      if (canonicalDefinitionJson(modularSelection) !== canonicalDefinitionJson(expected)) {
+        throw new Error(`campaign selection changed before L${level}`);
+      }
+    } else if (modularSelection) {
+      throw new Error(`campaign selection declares modular L${level} without a modular condition`);
+    }
+    const declaredRecipe = declared
+      ? `${declared.recipe.id}@${declared.recipe.version}` : null;
+    const binding = resolveRecipeRelease(track, level, declaredRecipe ?? args.recipe);
+    if (!binding && (args.packIds.length || args.checkKeys.length)) {
+      throw new Error(`L${level} has no recipe release, so --pack/--check cannot be resolved`);
+    }
+    if (binding) {
+      args.recipeBindings.set(level, binding);
+      if (args.featureCatalog) {
+        validateProgressionCampaignLevelScope(binding, args.featureCatalog, declared, level);
+      }
+      const requested = declared?.selection?.requested;
+      const progressionSelection = args.featureCatalog
+        ? resolveProgressionRecipeLevelSelection(binding, args.featureCatalog, level,
+          { cumulative: Boolean(args.progression) }) : null;
+      const resolved = progressionSelection === null
+        ? createBoundRecipeTaskRequest(binding, requested?.features
+          ? { featureIds: requested.features,
+              requestedSpecifications: requested.specifications?.requested,
+              expectedSpecifications: requested.specifications?.expected,
+              observedSpecifications: requested.specifications?.observed,
+              checkKeys: requested.checks }
+          : args) : null;
+      const grader = progressionSelection?.grader ?? resolved;
+      if (!grader) throw new Error(`L${level} has no recipe task request`);
+      if (args.condition && !declared) {
+        throw new Error(`study condition does not bind requested L${level}`);
+      }
+      const graderIdentity = recipeRequestIdentity(grader.request);
+      if (declared && (declared.recipe.contentSha256 !== graderIdentity.recipeSha256
+        || declared.selection.sha256 !== graderIdentity.selectionSha256
+        || JSON.stringify(declared.selection.taskPacks) !== JSON.stringify(graderIdentity.taskPacks)
+        || declared.task.sha256 !== graderIdentity.taskSha256)) {
+        throw new Error(`study condition requested scope changed before L${level}`);
+      }
+      if (progressionSelection) {
+        const progressionGrader = progressionSelection.grader;
+        args.recipeTasks.set(level, {
+          request: progressionGrader.request,
+          selection: progressionGrader.selection,
+          task: progressionGrader.task,
+          agentRequest: progressionSelection.agent.request,
+        });
+      } else if (resolved) {
+        args.recipeTasks.set(level, {
+          ...resolved,
+          agentRequest: createAgentVisibleTaskRequest(binding, resolved),
+        });
+      }
+    }
+  }
+  if (args.progression) {
+    const state = progressionEngine.initialize(args.progression.definition);
+    const declared = args.condition?.requested?.levels
+      ?.find(entry => entry.level === state.level) ?? null;
+    const binding = resolveRecipeRelease(track, state.level,
+      declared ? `${declared.recipe.id}@${declared.recipe.version}` : null);
+    if (!binding) throw new Error(`L${state.level} has no recipe release`);
+    resolveProgressionRecipeAction(binding, state);
+    if (!args.progressionOwner) {
+      throw new Error('live dependency progression requires an exact compiled campaign attempt');
+    }
+  }
+  if (repairGrant) {
+    const expectedSelection = repairGrant.level.selection?.sha256 ?? null;
+    const repairTask = args.recipeTasks.get(repairGrant.level.level);
+    const resolvedSelection = repairTask ? recipeRequestIdentity(repairTask.request).selectionSha256 : null;
+    if (resolvedSelection !== expectedSelection) {
+      throw new Error('repair continuation test selection differs from its parent run');
+    }
+  }
+  if (!args.selectionRequest.levels && (JSON.stringify(args.selectionRequest.packs) !== JSON.stringify(args.packIds)
+    || JSON.stringify(args.selectionRequest.checks) !== JSON.stringify(args.checkKeys))) {
+    throw new Error('campaign pack/check selection changed before execution');
+  }
+  // Caller-owned mutation inputs are pure request data. Reject them before
+  // checking credentials, Docker, ports, or any other ambient runner state so
+  // an invalid experiment can never be masked by an unrelated preflight error.
+  validateMutationInput(args);
+  assertNoPortCollisions();
+  // The deterministic adapter/stack is the model-free unit loop. Real runs
+  // prove the exact requested scope, engine, image, credentials, storage and
+  // ports before any paid coding session begins.
+  const admittedSmoke = args.campaignAdmission?.reusable === true
+    ? { id: args.campaignAdmission.id, createdAt: args.campaignAdmission.createdAt }
+    : null;
+  const preflight = args.backend === 'stub' ? null : runPreflight({
+    backends: [args.backend], track: args.track, levels: args.levels,
+    levelList: args.levelList, runIndex: args.runIndex, agentAdapter: args.agentAdapter,
+    guidance: args.guidance,
+    recipe: args.recipe,
+    ...(args.condition?.requested ? { requestedScopes: [args.condition.requested] } : {}),
+    ...(args.featureCatalog ? { featureCatalog: args.featureCatalog } : {}),
+    ...(args.runMode ? { mode: args.runMode } : {}),
+    agentSkills: args.skills ?? null,
+    packIds: args.packIds, checkKeys: args.checkKeys, smoke: admittedSmoke === null,
+    ...(admittedSmoke ? { admittedSmoke } : {}),
+    ...(process.env.STACK_BENCH_SUPERVISOR_STATE
+      ? { supervisorState: process.env.STACK_BENCH_SUPERVISOR_STATE } : {}),
+    image: process.env.STACK_BENCH_IMAGE ?? DEFAULT_BUILD_IMAGE,
+    resultsDir: resolve(args.out ?? stackBenchResultsRoot(ROOT)),
+  }, { env: args.apiKey && agentAdapter.apiKeyEnvironmentVariable
+    ? { ...process.env, [agentAdapter.apiKeyEnvironmentVariable]: '<provided-by-argument>' }
+    : process.env });
+  if (preflight && !preflight.ok) {
+    const failures = preflight.checks.filter(check => check.status === 'fail');
+    console.error('\nPREFLIGHT FAILED — no model session was started.');
+    for (const failure of failures) {
+      console.error(`  ${failure.id}: ${failure.summary}`);
+      if (failure.remediation) console.error(`    fix: ${failure.remediation}`);
+    }
+    process.exit(2);
+  }
+  if (preflight) console.log(`  preflight  ... ${preflight.summary.passed} checks passed`
+    + `${preflight.summary.warnings ? `, ${preflight.summary.warnings} warning(s)` : ''}`);
+  if (process.env.STACK_BENCH_APPLIANCE === '1') {
+    console.log('  sandbox    ... coding container is isolated from the controller and grading files');
+  }
+  let url = args.url ?? `http://localhost:${portsFor(track, args.backend, args.runIndex).vite}`;
+  const runDir = resultsName(track, args.backend, args.runIndex);
+  const runId = newRunId({ track: args.track, backend: args.backend, runIndex: args.runIndex });
+  const artifactLabel = `${runDir}-${runId}`;
+  // Default results never reuse a directory. The stable backend/run name is a
+  // grouping directory only; every artifact beneath it belongs to one run id.
+  args.out ??= join(stackBenchResultsRoot(ROOT), runDir, runId);
+  if (!args.out) throw new Error('benchmark run has no results directory');
+  const outputDir = args.out;
+  mkdirSync(args.out, { recursive: true });
+  if (existsSync(join(args.out, ARTIFACT_FILE.run))) {
+    throw new Error(`refusing to reuse result directory containing ${ARTIFACT_FILE.run}: ${args.out}`);
+  }
+  if (preflight) writeArtifact(join(args.out, ARTIFACT_FILE.preflight), {
+    kind: 'preflight', id: `${runId}-preflight`,
+    attempt: { id: `${runId}-preflight`, parentId: runId },
+    identities: emptyArtifactIdentities({
+      agentAdapter: agentAdapterIdentity(agentAdapter),
+      stackAdapter: { id: stackAdapter.id, version: stackAdapter.version },
+    }),
+    payload: preflight,
+  });
+
+  // Validate caller-owned source before acquiring a backend slot so a bad
+  // fixture cannot leave leased resources behind.
+  const ownWorkDir = !args.app;
+  const appDir = args.app ?? join(workDirFor(track, args.backend, args.runIndex, runId), 'app');
+  if (args.repairGrant && url.startsWith('file:')) {
+    url = pathToFileURL(join(appDir, 'index.html')).href;
+  }
+
+  // Bind destructive and lifecycle operations to exact resource identities and
+  // an ownership token. Targets come only from the lease, never generated code.
+  const runtimeRoot = resolve(process.env.STACK_BENCH_RUNTIME_DIR
+    ?? join(tmpdir(), 'stack-bench-runtime'));
+  const runtimeDir = join(runtimeRoot, runId);
+  const leasePath = join(runtimeDir, ARTIFACT_FILE.backendLease);
+  const preparedLease = stackAdapter.lease.prepare({
+    track,
+    runIndex: args.runIndex,
+    runtimeDir,
+    serverUri: stackRuntime.lease.serverUri,
+    env: process.env,
+    helpers: { containerIdentity: runningContainerIdentity, dbName, moduleName },
+  });
+  const initialLease = createBackendLease({
+    runId,
+    backend: args.backend,
+    track: args.track,
+    runIndex: args.runIndex,
+    ...preparedLease.lease,
+  });
+  const lockScope = resourceLockScope();
+  const lockKeys = backendResourceLockKeys(initialLease, preparedLease.lockKeys);
+  let privateSupervisorStatePath = null;
+  try {
+    initialLease.resources.locks.push(...acquireResourceLocks({
+      ...lockScope, keys: lockKeys, lease: initialLease,
+    }));
+    writeBackendLease(leasePath, initialLease);
+    const supervisorState = process.env.STACK_BENCH_SUPERVISOR_STATE
+      ?? (process.env.STACK_BENCH_SUPERVISOR_DIR
+        ? join(resolve(process.env.STACK_BENCH_SUPERVISOR_DIR), `${runId}.json`) : null);
+    if (supervisorState) {
+      // Private handoff to an outer timeout supervisor. It contains the lease
+      // token, so create it once with owner-only permissions and never place it
+      // in the results tree.
+      privateSupervisorStatePath = resolve(supervisorState);
+      mkdirSync(dirname(privateSupervisorStatePath), { recursive: true, mode: 0o700 });
+      writeFileSync(privateSupervisorStatePath, `${JSON.stringify({
+        version: SUPERVISOR_STATE_VERSION, runId, backend: args.backend, runtimeDir, leasePath,
+        ownershipToken: initialLease.ownershipToken, output: resolve(args.out),
+      })}\n`, { flag: 'wx', mode: 0o600 });
+    }
+  } catch (error) {
+    releaseResourceLocks(initialLease);
+    rmSync(runtimeDir, { recursive: true, force: true });
+    throw error;
+  }
+  process.env.STACK_BENCH_LEASE = leasePath;
+  process.env.STACK_BENCH_LEASE_TOKEN = initialLease.ownershipToken;
+  if (process.platform === 'win32') {
+    // When Windows resolves `bash` through WSL, WSLENV must carry lease paths
+    // and tokens into lifecycle scripts with path translation.
+    const bridge = ['STACK_BENCH_LEASE/p', 'STACK_BENCH_LEASE_TOKEN',
+      'STACK_BENCH_NODE_BIN', ...stackRuntime.windowsEnvironmentBridge];
+    const existing = (process.env.WSLENV ?? '').split(':').filter(Boolean);
+    process.env.WSLENV = [...new Set([...existing, ...bridge])].join(':');
+  }
+
+  let tornDown = false;
+  let activeRun: BenchmarkRunRecord | null = null;
+  const recoveryPath = join(outputDir, ARTIFACT_FILE.recovery);
+  const writeLeaseEvidence = (knownLease: BackendLease | null = null) => {
+    const lease = knownLease ?? readBackendLease(leasePath,
+      { token: initialLease.ownershipToken, backend: args.backend, runId });
+    const out = join(outputDir, ARTIFACT_FILE.backendLease);
+    const evidence = publicBackendLease(lease);
+    const id = `${runId}-backend-lease`;
+    writeArtifact(out, {
+      kind: 'backend_lease_evidence', id,
+      attempt: { id, parentId: runId },
+      timestamps: { startedAt: evidence.createdAt, completedAt: new Date().toISOString() },
+      identities: emptyArtifactIdentities({ stackAdapter: { id: args.backend } }),
+      payload: evidence,
+    });
+    return evidence;
+  };
+  const teardown = ({ reason = null, retainBackend = args.retainBackend }:
+    { reason?: string | null; retainBackend?: boolean } = {}) => {
+    if (tornDown) return;
+    if (activeAgentChild?.pid) {
+      killTree(activeAgentChild.pid);
+      activeAgentChild = null;
+    }
+    // Preserve restart failures before removing the only filesystem that holds
+    // their stderr. A 500 after restart is otherwise impossible to distinguish
+    // from an application defect, a dead dependency, or host pressure.
+    if (activeRun) {
+      try {
+        activeRun.backendDiagnostics = captureApplicationDiagnostics(join(outputDir, 'backend.log'));
+      } catch (error) {
+        activeRun.backendDiagnostics = { captured: false,
+          reason: errorMessage(error).split(/\r?\n/)[0] };
+      }
+    }
+    let released = false;
+    let cleanupError: unknown = null;
+    try {
+      released = releaseBackendLease(leasePath, initialLease.ownershipToken,
+        { retainBackend });
+    } catch (error) { cleanupError = error; }
+    let finalLease = initialLease;
+    try {
+      finalLease = readBackendLease(leasePath,
+        { token: initialLease.ownershipToken, backend: args.backend, runId });
+    } catch (error) { cleanupError ??= error; released = false; }
+    const evidence = writeLeaseEvidence(finalLease);
+    writeRecoveryArtifact(recoveryPath, finalLease, { cleanupSucceeded: released,
+      retained: Boolean(retainBackend),
+      reason: cleanupError === null ? reason ?? (released ? null : 'authenticated cleanup refused')
+        : errorMessage(cleanupError) });
+    if (activeRun) {
+      activeRun.backendLease = evidence;
+      activeRun.outcome ??= aggregateRunOutcome(activeRun.levels);
+      writeRunJson(join(outputDir, ARTIFACT_FILE.run), activeRun);
+    }
+    tornDown = released;
+    if (released && !retainBackend) {
+      rmSync(runtimeDir, { recursive: true, force: true });
+      if (privateSupervisorStatePath) rmSync(privateSupervisorStatePath, { force: true });
+    }
+    if (cleanupError) throw cleanupError;
+    if (!released) throw new Error(`backend teardown refused: listener no longer matches lease ${runId}`);
+  };
+  emergencyTeardown = teardown;
+
+  try {
+    stackAdapter.lifecycle.activate({
+      leasePath, leaseToken: initialLease.ownershipToken, lease: initialLease,
+      ...stackRuntime.lifecycle,
+    });
+  } catch (error) {
+    try { teardown({ reason: `backend activation failed: ${errorMessage(error)}`, retainBackend: false }); }
+    catch (cleanupError) {
+      console.error(`  activation cleanup quarantined: ${errorMessage(cleanupError).split(/\r?\n/)[0]}`);
+    }
+    throw error;
+  }
+
+  // Teardown stops only resources recorded in this run's lease.
+  const interrupt = (signal: NodeJS.Signals, exitCode: number) => {
+    console.log(`interrupted by ${signal} — stopping exact owned resources`);
+    try { teardown({ reason: `interrupted by ${signal}` }); }
+    catch (error) { console.error(`  cleanup quarantined: ${errorMessage(error).split(/\r?\n/)[0]}`); }
+    process.exit(exitCode);
+  };
+  process.on('SIGINT', () => interrupt('SIGINT', 130));
+  process.on('SIGTERM', () => interrupt('SIGTERM', 143));
+  process.on('exit', () => {
+    if (!tornDown) {
+      try { teardown(); } catch (error) {
+        console.error(`  cleanup failed: ${errorMessage(error).split('\n')[0]}`);
+      }
+    }
+  });
+
+  // Seed source only; the upgrade session installs its own dependencies.
+  if (args.seedFrom) {
+    const from = resolve(args.seedFrom);
+    if (!existsSync(from)) { console.error(`--seed-from path does not exist: ${from}`); process.exit(2); }
+    seedAppSource(from, appDir);
+    if (args.progressionSeed) {
+      const seeded = hashAppSource(appDir);
+      if (seeded.sha256 !== args.progressionSeed.sourceSha256
+        || seeded.files.length !== args.progressionSeed.sourceFiles) {
+        throw new Error('extension source does not match its recorded identity');
+      }
+    }
+    console.log(args.repairGrant
+      ? `  restored L${args.levelList[0]} checkpoint from ${from} for a bounded repair continuation`
+      : `  seeded from ${from} — level ${args.levelList[0]} will UPGRADE it, not rebuild`);
+  }
+
+  const started = Date.now();
+  const run: BenchmarkRunRecord = { id: runId,
+    ...(args.repairGrant ? { kind: 'repair_continuation',
+      continuation: structuredClone(args.repairGrant.grant) } : {}),
+    startedAt: new Date(started).toISOString(),
+    parentAttemptId: args.parentAttemptId ?? null,
+    identities: emptyArtifactIdentities({
+      experiment: args.experimentIdentity ?? null,
+      agentAdapter: agentAdapterIdentity(agentAdapter),
+      stackAdapter: { id: stackAdapter.id, version: stackAdapter.version },
+    }),
+    mode: args.runMode ?? { id: args.progression ? 'dependency' : 'sequential',
+      version: args.progression ? DEPENDENCY_MODE_VERSION : '1.0.0' },
+    track: args.track, backend: args.backend, model: args.model,
+    pricing: args.pricing,
+    guidance: args.guidance, condition: args.condition ?? null,
+    skills: args.skills ?? [],
+    runtime: { buildImage: process.env.STACK_BENCH_IMAGE ?? DEFAULT_BUILD_IMAGE, url },
+    selectionRequest: args.selectionRequest,
+    featureCatalog: args.featureCatalog?.identity ?? null,
+    dependencyPolicy: args.dependencyPolicy?.identity ?? null,
+    ...(args.progressionOwner ? { progressionOwner: args.progressionOwner } : {}),
+    ...(args.progressionSeed ? { progressionSeed: {
+      fromDepth: args.progressionSeed.fromDepth,
+      sourceSha256: args.progressionSeed.sourceSha256,
+      sourceFiles: args.progressionSeed.sourceFiles,
+      parent: structuredClone(args.progressionSeed.parent),
+      validatedDepths: [],
+    } } : {}),
+    backendLease: publicBackendLease(readBackendLease(leasePath,
+      { token: initialLease.ownershipToken, backend: args.backend, runId })),
+    validation: {
+      ladder: { policy: args.progression ? args.progression.identity.policy : 'pass-before-next-level',
+        requestedLevels: [...args.levelList],
+        completedLevels: [], stoppedAfterLevel: null, blockedLevels: [] } }, levels: [] };
+  activeRun = run;
+
+  const progressionOwner = args.progression ? {
+    ...args.progressionOwner,
+    workspace: { appDirectory: 'source' },
+  } : null;
+  const progressionExecution = args.progression ? createLiveProgressionExecution({
+      progression: args.progression,
+      featureCatalogIdentity: args.featureCatalog?.identity,
+      dependencyPolicyIdentity: args.dependencyPolicy?.identity,
+      owner: progressionOwner,
+      statePath: join(args.out, ARTIFACT_FILE.progressionState),
+      runId,
+      outputDir: args.out,
+      appDir,
+      track: args.track,
+      backend: args.backend,
+      identities: run.identities,
+      recipeBindings: args.recipeBindings,
+      resumeFrom: args.progressionResumeFrom ?? null,
+      getRunArtifact: () => {
+        writeRunJson(join(outputDir, ARTIFACT_FILE.run), run);
+        return readArtifact(join(outputDir, ARTIFACT_FILE.run));
+      },
+      onState: status => {
+        run.progressionStatus = status;
+        writeRunJson(join(outputDir, ARTIFACT_FILE.run), run);
+      },
+    }) : null;
+  const progressionStart = progressionExecution?.initialize() ?? null;
+  if (progressionStart?.resumed) {
+    const prior = progressionStart.priorRun;
+    if (!prior) throw new Error('resumed dependency progression has no prior run artifact');
+    const actionLevel = progressionStart.action.type === 'terminal'
+      ? Number.MAX_SAFE_INTEGER : progressionStart.action.level;
+    const inheritedLevels = (prior.payload.levels ?? [])
+      .filter(level => level.level < actionLevel).map(level => level.level);
+    run.levels = (prior.payload.levels ?? [])
+      .filter(level => inheritedLevels.includes(level.level)).map(level => structuredClone(level));
+    run.validation.ladder.completedLevels = [...inheritedLevels];
+    run.progressionResume = {
+      priorRunId: prior.id,
+      priorRunSha256: sha256(canonicalDefinitionJson(prior)),
+      stateSha256: progressionStart.stateSha256,
+      action: progressionStart.action.type === 'terminal'
+        ? { type: 'terminal' }
+        : { type: progressionStart.action.type, level: progressionStart.action.level },
+      inheritedLevels,
+      priorTotals: prior.payload.totals ?? null,
+    };
+    run.progressionStatus = progressionStart.status;
+    writeRunJson(join(args.out, ARTIFACT_FILE.run), run);
+  }
+
+  const bindProgressionAction = (level: number): ProgressionRecipeAction | null => {
+    if (!progressionExecution) return null;
+    const selected = progressionExecution.bind();
+    if (!isProgressionWorkRecipeAction(selected)) return selected;
+    if (!args.recipeTasks) throw new Error('recipe task map is unavailable');
+    args.recipeTasks.set(level, {
+      request: selected.grader.request,
+      selection: selected.grader.selection,
+      task: selected.grader.task,
+      agentRequest: selected.agent.request,
+      progressionAction: selected.action,
+    });
+    return selected;
+  };
+
+  const progressionBundles = new Map<number, GradeBundlePayload>();
+  const recordProgressionGrade = (input: Parameters<NonNullable<typeof progressionExecution>['record']>[0]) => {
+    const next = progressionExecution?.record(input) ?? null;
+    const last = progressionExecution?.state?.attempts.at(-1) ?? null;
+    if (input.bundle && input.selected && isProgressionWorkRecipeAction(input.selected)
+      && last?.outcome === 'conclusive') {
+      progressionBundles.set(input.selected.action.level, input.bundle as GradeBundlePayload);
+    }
+    return next;
+  };
+
+  const appendLevelRecord = (record: RunLevelRecord): void => {
+    if (args.dependencyPolicy?.definition.workSelection !== 'feature') {
+      run.levels.push(record);
+      return;
+    }
+    const index = run.levels.findIndex(candidate => candidate.level === record.level);
+    if (index < 0) run.levels.push(record);
+    else run.levels[index] = mergeFeatureLevelRecord(run.levels[index] ?? null, record);
+  };
+
+  let runCostComplete = true;
+
+  const runAgentForLevel = async (mode: AgentMode, level: number,
+    onFailure?: () => Promise<void>): Promise<ValidatedAgentResult> => {
+    try {
+      clearPrivateGradingEvidence(appDir);
+      const result = await runAgent(args, agentAdapter, mode, level, appDir);
+      if (result.costComplete !== true) runCostComplete = false;
+      return result;
+    } catch (error) {
+      await onFailure?.();
+      const reason = errorMessage(error).split(/\r?\n/)[0] ?? 'agent execution failed';
+      run.outcome = { kind: 'harness_failure', phase: `agent-${mode}`,
+        reason, appFailures: [], inconclusive: [], harnessFailures: [reason] };
+      run.validation.ladder.stoppedAfterLevel = run.levels.at(-1)?.level ?? null;
+      run.validation.ladder.blockedLevels = args.levelList.filter(candidate => candidate >= level);
+      if (progressionExecution) {
+        run.progressionStatus = progressionExecution.status();
+        run.validation.ladder.completedLevels = [...new Set(requireProgressionState(progressionExecution.state).attempts
+          .filter(attempt => attempt.outcome === 'conclusive')
+          .map(attempt => attempt.level))];
+      }
+      finalizeRunTotals(run, started, { costComplete: false });
+      run.completedAt = new Date().toISOString();
+      writeRunJson(join(outputDir, ARTIFACT_FILE.run), run);
+      throw error;
+    }
+  };
+
+  // Stop before grading if a coding session read protected material or if the
+  // audit itself failed. Keep the paid session and exact cost in the run artifact even
+  // though no score may be used.
+  const abortUnusableSession = (whichSession: string, audit: ContaminationAudit,
+    levelRecord: UnknownRecord & { level: number },
+    selected: ProgressionRecipeAction | null, completedRepair = false) => {
+    const reason = audit.evidence.join('; ');
+    const outcome: RunOutcome = { kind: audit.kind === 'harness_failure' ? 'harness_failure' : 'ungraded',
+      phase: 'contamination-audit', reason,
+      appFailures: [], inconclusive: [],
+      harnessFailures: audit.kind === 'harness_failure' ? [reason] : [] };
+    run.contaminated = audit.kind === 'contaminated';
+    run.contamination = { evidence: audit.evidence, verdict: audit.verdict,
+      detectedAt: whichSession };
+    const record: RunLevelRecord = { ...levelRecord, error: reason, outcome,
+      level: levelRecord.level, graded: false, score: null, max: null, selection: null };
+    appendLevelRecord(record);
+    if (progressionExecution) {
+      recordProgressionGrade({ selected, bundle: null, level: levelRecord.level,
+        failure: progressionFailure(outcome),
+        completedRepair });
+      run.progressionStatus = progressionExecution!.status();
+    }
+    run.validation.ladder.stoppedAfterLevel = run.levels.at(-2)?.level ?? null;
+    run.validation.ladder.blockedLevels = args.levelList
+      .filter(candidate => candidate >= levelRecord.level);
+    finalizeRunTotals(run, started, { costComplete: runCostComplete });
+    run.outcome = outcome;
+    run.completedAt = new Date().toISOString();
+    if (run.contaminated) {
+      console.log(`\n  !! CONTAMINATED at ${whichSession}:`);
+      for (const evidence of audit.evidence) console.log(`     ${evidence}`);
+      console.log('     Scores from this run must not be quoted.');
+    } else {
+      console.log(`\n  !! HARNESS FAILURE at ${whichSession}:`);
+      for (const evidence of audit.evidence) console.log(`     ${evidence}`);
+      console.log('     The audit did not establish a usable result.');
+    }
+    try { writeRunJson(join(outputDir, ARTIFACT_FILE.run), run); } catch { /* best effort */ }
+    try { archiveTranscripts(appDir, artifactLabel); } catch { /* best effort */ }
+    teardown();
+    process.exit(4);
+  };
+
+  for (let levelIndex = 0; levelIndex < args.levelList.length; levelIndex += 1) {
+    const level = args.levelList[levelIndex]!;
+    const t0 = Date.now();
+    const continuing = Boolean(args.repairGrant);
+    console.log(`\n================ ${args.backend} — level ${level} ================`);
+
+    let progressionSelection = bindProgressionAction(level);
+    if (progressionSelection?.action.type === 'terminal') break;
+    if (args.dependencyPolicy?.definition.workSelection === 'all-at-once'
+      && progressionSelection?.action.level !== level) continue;
+    const applicationControl = materializeCodingOutput
+      ? restartSpecFor(args, appDir, track) : null;
+    const featureActionSequence = args.dependencyPolicy?.definition.workSelection === 'feature'
+      ? requireProgressionState(progressionExecution?.state ?? null).attempts.length + 1 : null;
+    const featureActionSuffix = featureActionSequence === null
+      ? '' : `-action${String(featureActionSequence).padStart(3, '0')}`;
+    // A clean-source start that fails voids a grade. Its launch log is the
+    // only account of why, so it stays beside the run.
+    const keepStartLog = (error: unknown, label: string): void => {
+      const startLog = error !== null && typeof error === 'object' && 'startLog' in error
+        ? error.startLog : null;
+      if (typeof startLog !== 'string' || !startLog) return;
+      writeFileSync(join(outputDir, `${label}-start.log`), `${startLog}\n`);
+    };
+    const restoreFeatureAcceptedSource = async (): Promise<void> => {
+      if (featureActionSequence === null) return;
+      const source = join(outputDir, 'source');
+      if (applicationControl) {
+        try {
+          await materializeAcceptedSource(source, appDir, applicationControl);
+        } catch {
+          resetAppToSource(source, appDir);
+        }
+      } else resetAppToSource(source, appDir);
+    };
+    if (featureActionSequence !== null && progressionSelection
+      && isProgressionWorkRecipeAction(progressionSelection)
+      && !featureActionNeedsCoding(progressionSelection,
+        requireProgressionState(progressionExecution?.state ?? null))) {
+      await restoreFeatureAcceptedSource();
+      const bundle = grade(args, appDir, url,
+        `${args.backend}-l${level}${featureActionSuffix}-regrade`, level, track, runId);
+      const outcome = classifyBundle(bundle);
+      const repair = { status: levelGradeIsUsable(outcome) ? 'not-needed' as const : 'ungraded' as const,
+        limit: 0, used: 0, stopReason: 'accepted-source-regrade' };
+      let next = recordProgressionGrade({ selected: progressionSelection, bundle,
+        level });
+      let finalOutcome = outcome;
+      const currentState = requireProgressionState(progressionExecution?.state ?? null);
+      if (next?.type === 'build' && next.level === level
+        && !featureActionNeedsCoding(progressionSelection, currentState)) {
+        const reason = 'accepted source still has ungraded checks after regrade';
+        finalOutcome = { kind: 'harness_failure', phase: 'feature-regrade', reason,
+          appFailures: [], inconclusive: [], harnessFailures: [reason] };
+        next = recordProgressionGrade({ selected: progressionSelection, bundle: null,
+          level, failure: progressionFailure(finalOutcome) });
+      }
+      const state = requireProgressionState(progressionExecution?.state ?? null);
+      const graded = levelGradeIsUsable(finalOutcome)
+        && state.attempts.at(-1)?.outcome === 'conclusive';
+      let checkpoint = null;
+      if (graded && (state.phase === 'terminal' || state.level > level)) {
+        checkpoint = preserveLevelCheckpoint({ appDir, outputDir, runId,
+          identities: run.identities, track: args.track, backend: args.backend, level,
+          repair, outcome: finalOutcome,
+          selectionSha256: bundle?.selection?.sha256 ?? null });
+      }
+      appendLevelRecord({ level, graded,
+        score: graded ? bundle?.totals?.score ?? null : null,
+        max: graded ? bundle?.totals?.max ?? null : null,
+        selection: graded ? bundle?.selection ?? null : null,
+        regression: bundle?.totals?.regression ?? null,
+        contractPass: bundle?.totals?.contractPass ?? null,
+        code: bundle?.code ?? null,
+        repair,
+        checkpoint,
+        sessionTotals: summarizeSessions([]),
+        costUsd: 0,
+        repairs: 0,
+        durationSec: Math.round((Date.now() - t0) / 1000),
+        outcome: finalOutcome });
+      if (graded && (state.phase === 'terminal' || state.level > level)
+        && !run.validation.ladder.completedLevels.includes(level)) {
+        run.validation.ladder.completedLevels.push(level);
+      }
+      run.progressionStatus = progressionExecution!.status();
+      writeRunJson(join(outputDir, ARTIFACT_FILE.run), run);
+      if (state.phase === 'terminal') break;
+      if (state.attempts.at(-1)?.outcome === 'inconclusive') {
+        run.validation.ladder.stoppedAfterLevel = level;
+        run.validation.ladder.blockedLevels = args.levelList.filter(candidate => candidate >= level);
+        break;
+      }
+      if (next?.type !== 'terminal' && next?.level === level) {
+        levelIndex -= 1;
+        continue;
+      }
+      if (next?.type !== 'terminal' && next && next.level < level) {
+        throw new Error(`dependency progression moved backward from L${level}`);
+      }
+      continue;
+    }
+    if (args.seedThrough !== undefined && level <= args.seedThrough) {
+      if (!progressionSelection || !isProgressionWorkRecipeAction(progressionSelection)
+        || progressionSelection.action.level !== level || !args.seedFrom || !run.progressionSeed) {
+        throw new Error(`extension cannot validate depth ${level}`);
+      }
+      let applicationFailure: RunOutcome | null = null;
+      if (applicationControl) {
+        try {
+          await materializeAcceptedSource(args.seedFrom, appDir, applicationControl);
+        } catch (error) {
+          applicationFailure = materializationAppFailure(error);
+          keepStartLog(error, `${args.backend}-extension-l${level}`);
+        }
+      } else {
+        resetAppToSource(args.seedFrom, appDir);
+      }
+      const bundle = grade(args, appDir, url, `${args.backend}-extension-l${level}`,
+        level, track, runId, { applicationFailure });
+      const outcome = applicationFailure ?? classifyBundle(bundle);
+      const next = recordProgressionGrade({ selected: progressionSelection, bundle, level });
+      const progressionState = requireProgressionState(progressionExecution?.state ?? null);
+      const progressionAttempt = progressionState.attempts.at(-1) ?? null;
+      const graded = levelGradeIsUsable(outcome, progressionAttempt);
+      const passed = graded && outcome.kind === 'passed';
+      const repair = { status: passed ? 'not-needed' as const : 'incomplete' as const,
+        limit: 0, used: 0,
+        stopReason: passed ? 'not-needed' : 'extension-validation-failed' };
+      let checkpoint = null;
+      try {
+        checkpoint = preserveLevelCheckpoint({ appDir, outputDir: args.out, runId,
+          identities: run.identities, track: args.track, backend: args.backend, level,
+          repair, outcome, selectionSha256: bundle?.selection?.sha256 ?? null });
+      } catch (error) {
+        throw new Error(`could not preserve extension depth ${level}: ${errorMessage(error)}`);
+      }
+      const source = hashAppSource(appDir);
+      appendLevelRecord({ level, graded,
+        score: graded ? bundle?.totals?.score ?? null : null,
+        max: graded ? bundle?.totals?.max ?? null : null,
+        selection: bundle?.selection ?? null,
+        baseline: { kind: 'extension-validation', source: {
+          sha256: source.sha256, files: source.files.length } },
+        regression: bundle?.totals?.regression ?? null,
+        contractPass: bundle?.totals?.contractPass ?? null,
+        code: bundle?.code ?? null,
+        repair,
+        checkpoint,
+        sessionTotals: summarizeSessions([]),
+        costUsd: 0,
+        repairs: 0,
+        durationSec: Math.round((Date.now() - t0) / 1000),
+        outcome });
+      if (progressionAttempt?.outcome === 'conclusive') {
+        if (!run.validation.ladder.completedLevels.includes(level)) {
+          run.validation.ladder.completedLevels.push(level);
+        }
+      }
+      run.progressionStatus = progressionExecution!.status();
+      if (passed) run.progressionSeed.validatedDepths.push(level);
+      if (!passed) {
+        run.validation.ladder.stoppedAfterLevel = level > 1 ? level - 1 : null;
+        run.validation.ladder.blockedLevels = args.levelList.filter(candidate => candidate >= level);
+        writeRunJson(join(args.out, ARTIFACT_FILE.run), run);
+        break;
+      }
+      writeRunJson(join(args.out, ARTIFACT_FILE.run), run);
+      if (!next || next.type === 'terminal' || next.level === undefined || next.level <= level) {
+        throw new Error(`extension did not advance after depth ${level}`);
+      }
+      continue;
+    }
+    const resumedRepair = progressionStart?.resumed === true
+      && progressionStart.action.type === 'repair';
+    // The interrupted repair was charged but never graded. Grade its preserved
+    // source before any coding session.
+    const resumedGrade = resumedRepair && progressionStart?.action.type === 'repair'
+      && progressionStart.action.repair.awaitingGrade === true;
+    const resumedRegression = resumedRepair
+      ? savedRepairRegression(progressionExecution?.state ?? null, progressionSelection) : null;
+    const resumedRegressionReport = resumedRegression
+      ? join(args.out, 'repair-reports',
+        `rejected-regression-l${level}${featureActionSuffix}-resume.md`) : null;
+    const priorRepairs = resumedRepair
+      ? progressionStart.priorRun?.payload.levels?.find(item => item.level === level)
+        ?.repair?.used ?? 0
+      : args.progression ? 0 : run.levels.reduce((sum, item) => sum + (item.repairs ?? 0), 0);
+    const repairBudgetFor = (selected: ProgressionRecipeAction | null,
+      completedRepairs: number) => selected
+      && isProgressionWorkRecipeAction(selected)
+      ? dependencyRepairBudget(selected.action, completedRepairs)
+      : args.repairs;
+    const levelRepairNodeIds = new Set(progressionSelection?.action.repair.nodeIds ?? []);
+    let progressionRepairLimit = repairBudgetFor(
+      progressionSelection, priorRepairs);
+    const trackProgressionBudget = (selected: ProgressionRecipeAction | null,
+      completedRepairs: number) => {
+      if (!selected || !isProgressionWorkRecipeAction(selected)) return;
+      selected.action.repair.nodeIds.forEach(nodeId => levelRepairNodeIds.add(nodeId));
+      progressionRepairLimit = Math.max(
+        progressionRepairLimit, repairBudgetFor(selected, completedRepairs));
+    };
+    if (resumedRepair && !resumedGrade) {
+      let reportFailure: string | null = null;
+      try {
+        if (resumedRegressionReport && resumedRegression) {
+          mkdirSync(dirname(resumedRegressionReport), { recursive: true });
+          writeFileSync(resumedRegressionReport, resumedRegression.report);
+        }
+        sh('node', [join(ROOT, 'dist', 'commands', 'report-bugs.js'), '--app', appDir,
+          '--history-json', '[]', '--archive', join(args.out, 'repair-reports',
+            `bug-report-l${level}${featureActionSuffix}-resume.md`),
+          ...(resumedRegressionReport ? ['--prior-regression', resumedRegressionReport] : []),
+          ...repairReportArgs(progressionSelection)],
+        { stdio: 'pipe' });
+      } catch (error) {
+        reportFailure = errorMessage(error).split(/\r?\n/)[0]
+          ?? 'repair report generation failed';
+      }
+      if (reportFailure) {
+        const outcome: RunOutcome = {
+          kind: 'harness_failure', phase: 'repair-report', reason: reportFailure,
+          appFailures: [], inconclusive: [], harnessFailures: [reportFailure],
+        };
+        recordProgressionGrade({ selected: progressionSelection, bundle: null, level,
+          failure: progressionFailure(outcome) });
+        appendLevelRecord({ level, graded: false, score: null, max: null,
+          selection: null, error: reportFailure, outcome,
+          repair: { status: 'ungraded', limit: progressionRepairLimit,
+            used: priorRepairs, stopReason: 'repair-report' },
+          repairCostUsd: 0, repairSessions: [], repairs: 0, priorRepairs,
+          cumulativeRepairs: priorRepairs, sessionTotals: summarizeSessions([]),
+          costUsd: 0, durationSec: Math.round((Date.now() - t0) / 1000) });
+        run.validation.ladder.stoppedAfterLevel = level;
+        run.validation.ladder.blockedLevels = args.levelList.filter(candidate => candidate >= level);
+        writeRunJson(join(args.out, ARTIFACT_FILE.run), run);
+        break;
+      }
+    }
+
+    const firstMode = resumedRepair ? 'fix'
+      : continuing ? 'resume' : args.seedFrom ? 'upgrade' : 'build';
+    const build = resumedGrade ? null : await runAgentForLevel(
+      resumedRepair || run.levels.length === 0 ? firstMode : 'upgrade', level,
+      featureActionSequence === null ? undefined : restoreFeatureAcceptedSource);
+    // Only a resumed grade runs a level without a coding session.
+    const requireBuild = (): NonNullable<typeof build> => {
+      if (!build) throw new Error(`level ${level} has no coding session`);
+      return build;
+    };
+    const buildLeak = build ? auditContamination(appDir, ownPorts, auditsTranscripts) : null;
+    if (buildLeak) {
+      const session = requireBuild();
+      const buildSession = runSessionRecord(session,
+        resumedRepair ? priorRepairs + 1 : null);
+      const sessionTotals = summarizeSessions([buildSession]);
+      abortUnusableSession(`level ${level} ${firstMode}`, buildLeak, {
+        level, graded: false, score: null, max: null, selection: null,
+        ...(resumedRepair
+          ? { repairCostUsd: session.costUsd, repairSessions: [buildSession], repairs: 1,
+            priorRepairs, cumulativeRepairs: priorRepairs + 1 }
+          : continuing
+          ? { resumeCostUsd: session.costUsd, resumeSession: buildSession }
+          : { buildCostUsd: session.costUsd, buildSessions: [buildSession] }),
+        sessionTotals, costUsd: session.costUsd, durationMs: Date.now() - t0,
+      }, progressionSelection, resumedRepair);
+    }
+    // Record the session setup needed to compare runs.
+    if (build) run.setup ??= build.setup;
+    if (continuing) {
+      const session = requireBuild();
+      requireContinuation(run).resumeSetup = {
+        sessionId: session.sessionId ?? null,
+        costUsd: session.costUsd,
+        durationMs: session.durationMs,
+        sourceVerified: false,
+      };
+    }
+    // No session, no app. Grading an empty directory yields a real-looking zero
+    // that is a harness failure, not a result for this backend.
+    const buildFailure = build ? agentSessionFailure(build) : null;
+    if (buildFailure) {
+      const session = requireBuild();
+      await restoreFeatureAcceptedSource();
+      console.log(`  ABORTED: ${buildFailure.reason}. Details will be kept in ${join(args.out, ARTIFACT_FILE.run)}`);
+      const failedSession = runSessionRecord(session);
+      if (progressionExecution) {
+        recordProgressionGrade({ selected: progressionSelection, bundle: null, level,
+          failure: buildFailure });
+      }
+      appendLevelRecord({ level, graded: false, score: null, max: null,
+        selection: null, error: buildFailure.reason,
+        outcome: buildFailure,
+        ...(continuing
+          ? { resumeSession: failedSession, resumeCostUsd: session.costUsd }
+          : { buildSessions: [failedSession], buildCostUsd: session.costUsd }),
+        sessionTotals: summarizeSessions([session]),
+        costUsd: session.costUsd, durationMs: Date.now() - t0 });
+      break;
+    }
+    const gradeAcceptedSource = async (sourcePath: string,
+      label: string): Promise<GradeBundlePayload | null> => {
+      let failure: RunOutcome | null = null;
+      if (applicationControl) {
+        try {
+          await materializeAcceptedSource(sourcePath, appDir, applicationControl);
+        } catch (error) {
+          failure = materializationAppFailure(error);
+          keepStartLog(error, label);
+        }
+      } else {
+        resetAppToSource(sourcePath, appDir);
+      }
+      return grade(args, appDir, url, label, level, track, runId,
+        { applicationFailure: failure });
+    };
+    const archiveCandidateGrade = (label: string): void => {
+      const gradingDirectory = join(appDir, 'stack-bench');
+      if (!existsSync(gradingDirectory)) return;
+      cpSync(gradingDirectory, join(outputDir, 'candidate-grades', label), {
+        recursive: true,
+        filter: source => !/[\\/]media([\\/]|$)/.test(source),
+      });
+    };
+    const restoreAcceptedRepair = async (sourcePath: string, gradingPath: string): Promise<void> => {
+      if (applicationControl) await materializeAcceptedSource(sourcePath, appDir, applicationControl);
+      else resetAppToSource(sourcePath, appDir);
+      restorePrivateGradingEvidence(appDir, gradingPath);
+    };
+    // Keep a repaired source whose grade did not finish beside the run, bound
+    // by hash, so a resume can grade exactly what the paid session produced.
+    const preserveRepairCandidate = (directory: string): RunRepairCandidate => {
+      const path = join(outputDir, directory);
+      rmSync(path, { recursive: true, force: true });
+      const live = hashAppSource(appDir);
+      snapshotSource(appDir, path);
+      const preserved = hashDirectory(path);
+      if (live.sha256 !== preserved.sha256 || live.files.length !== preserved.files.length) {
+        throw new Error('preserved repair source differs from the live application source');
+      }
+      return { directory, sha256: preserved.sha256, files: preserved.files.length };
+    };
+    if (resumedGrade) {
+      const candidate = progressionStart?.priorRun?.payload.levels
+        ?.find(item => item.level === level)?.repair?.candidate;
+      const candidateRoot = args.progressionResumeFrom ?? outputDir;
+      let candidateFailure: string | null = null;
+      if (!candidate || !/^[A-Za-z0-9._-]+$/.test(candidate.directory)
+        || !existsSync(join(candidateRoot, candidate.directory))) {
+        candidateFailure = 'the interrupted repair left no source to grade';
+      } else {
+        const candidatePath = join(candidateRoot, candidate.directory);
+        const preserved = hashDirectory(candidatePath);
+        if (preserved.sha256 !== candidate.sha256
+          || preserved.files.length !== candidate.files) {
+          candidateFailure = 'the interrupted repair source does not match its record';
+        } else {
+          resetAppToSource(candidatePath, appDir);
+          console.log(`  restored the interrupted repair source from ${candidatePath}`);
+        }
+      }
+      if (candidateFailure) {
+        const outcome: RunOutcome = {
+          kind: 'harness_failure', phase: 'repair-candidate', reason: candidateFailure,
+          appFailures: [], inconclusive: [], harnessFailures: [candidateFailure],
+        };
+        recordProgressionGrade({ selected: progressionSelection, bundle: null, level,
+          failure: progressionFailure(outcome) });
+        appendLevelRecord({ level, graded: false, score: null, max: null,
+          selection: null, error: candidateFailure, outcome,
+          repair: { status: 'ungraded', limit: progressionRepairLimit,
+            used: priorRepairs, stopReason: 'repair-candidate' },
+          repairCostUsd: 0, repairSessions: [], repairs: 0, priorRepairs,
+          cumulativeRepairs: priorRepairs, sessionTotals: summarizeSessions([]),
+          costUsd: 0, durationSec: Math.round((Date.now() - t0) / 1000) });
+        run.validation.ladder.stoppedAfterLevel = level;
+        run.validation.ladder.blockedLevels = args.levelList.filter(candidate => candidate >= level);
+        writeRunJson(join(args.out, ARTIFACT_FILE.run), run);
+        break;
+      }
+    }
+    if (continuing) {
+      // A resume may restore runtime state but cannot change checkpoint source.
+      const resumed = hashAppSource(appDir);
+      const repairGrant = args.repairGrant;
+      if (!repairGrant) throw new Error('repair continuation has no grant');
+      if (resumed.sha256 !== repairGrant.checkpoint.payload.source.sha256
+        || resumed.files.length !== repairGrant.checkpoint.payload.source.files) {
+        throw new Error('resume setup changed the parent checkpoint source');
+      }
+      const continuation = requireContinuation(run);
+      if (!continuation.resumeSetup) throw new Error('repair continuation did not record resume setup');
+      continuation.resumeSetup.sourceVerified = true;
+    }
+    if (args.referenceMutationOnly) {
+      const session = requireBuild();
+      appendLevelRecord({ level, score: null, max: null, graded: false, contractPass: null,
+        selection: null,
+        outcome: { kind: 'ungraded', phase: 'reference-mutation-only',
+          reason: 'the parent qualification owns the full clean grade',
+          appFailures: [], inconclusive: [], harnessFailures: [] },
+        buildSessions: [runSessionRecord(session)],
+        buildCostUsd: session.costUsd, sessionTotals: summarizeSessions([session]),
+        costUsd: session.costUsd, durationMs: Date.now() - t0 });
+      break;
+    }
+    const firstBuildDirectory = continuing
+      ? `baseline-l${level}${featureActionSuffix}`
+      : `first-build-l${level}${featureActionSuffix}`;
+    const firstBuildPath = join(args.out, firstBuildDirectory);
+    let firstBuildSource = null;
+    let materializationOutcome: RunOutcome | null = null;
+    try {
+      const liveSource = hashAppSource(appDir);
+      snapshotSource(appDir, firstBuildPath);
+      const preservedSource = hashDirectory(firstBuildPath);
+      if (liveSource.sha256 !== preservedSource.sha256) {
+        throw new Error('preserved first-build source differs from the live application source');
+      }
+      firstBuildSource = { sha256: liveSource.sha256, files: liveSource.files.length };
+      if (applicationControl) {
+        await materializeAcceptedSource(firstBuildPath, appDir, applicationControl);
+      }
+      console.log(`  kept the ${continuing ? 'continuation baseline' : 'unaided'} source at ${firstBuildPath}`);
+    } catch (error) {
+      if (firstBuildSource) {
+        materializationOutcome = materializationAppFailure(error);
+        keepStartLog(error, `${args.backend}-l${level}${featureActionSuffix}`);
+      }
+      console.log(materializationOutcome
+        ? `  !! ${materializationOutcome.reason}`
+        : `  !! could not bind the first-build source: ${errorMessage(error).split('\n')[0]}`);
+    }
+    const firstBuildLabel = `${args.backend}-l${level}${featureActionSuffix}`;
+    let bundle = firstBuildSource
+      ? grade(args, appDir, url, firstBuildLabel, level, track, runId,
+        { applicationFailure: materializationOutcome }) : null;
+    // A grader failure on unchanged source is retried once, as a repair grade is.
+    if (firstBuildSource && !materializationOutcome
+      && !levelGradeIsUsable(classifyBundle(bundle))) {
+      console.log('  grade did not complete; retrying the same source once');
+      bundle = grade(args, appDir, url, `${firstBuildLabel}-retry`, level, track, runId);
+    }
+    let reusableRepairEvidence: {
+      bundle: GradeBundlePayload;
+      results: string;
+    } | null = null;
+
+    // What the model built BEFORE being handed the answers. Every backend can
+    // reach the same total given enough repairs, so the post-fix score stops
+    // discriminating — what it got right unaided is the comparison that survives.
+    const firstBuild: FirstBuildRecord = {
+      score: bundle?.totals?.score ?? null,
+      max: bundle?.totals?.max ?? null,
+      regression: bundle?.totals?.regression ?? null,
+      contractPass: bundle?.totals?.contractPass ?? null,
+      outcome: materializationOutcome ?? sourceBoundFirstBuildOutcome(bundle, firstBuildSource),
+      source: firstBuildSource,
+      missed: Object.values(bundle?.suites ?? {}).flatMap(s =>
+        (s?.features ?? []).flatMap(f =>
+          (f.criteria ?? []).filter(c => !evidencePassed(criterionEvidence(c)))
+            .map(c => `${f.name}/${c.id}`))),
+    };
+
+    if (continuing) {
+      const repairGrant = args.repairGrant;
+      if (!repairGrant) throw new Error('repair continuation has no grant');
+      if (firstBuild.score === null || firstBuild.max === null || firstBuildSource === null) {
+        throw new Error('repair continuation did not produce a source-bound baseline score');
+      }
+      const reproduction = compareRepairBaseline(repairGrant.level, {
+        score: firstBuild.score,
+        max: firstBuild.max,
+        selectionSha256: bundle?.selection?.sha256 ?? null,
+        sourceSha256: firstBuildSource.sha256,
+        expectedSourceSha256: repairGrant.checkpoint.payload.source.sha256,
+        outcome: repairOutcome(firstBuild.outcome),
+      });
+      requireContinuation(run).baseline = {
+        score: firstBuild.score,
+        max: firstBuild.max,
+        selectionSha256: bundle?.selection?.sha256 ?? null,
+        sourceSha256: firstBuildSource?.sha256 ?? null,
+        outcome: firstBuild.outcome,
+        ...reproduction,
+      };
+      if (!reproduction.reproduced) {
+        const reason = `restored checkpoint did not reproduce its parent: ${reproduction.mismatches.join(', ')}`;
+        console.log(`  CONTINUATION STOPPED: ${reason}`);
+        const failure = { kind: 'harness_failure', phase: 'continuation-baseline', reason,
+          appFailures: [], inconclusive: [], harnessFailures: [] };
+        firstBuild.outcome = failure;
+        bundle = { ...bundle, outcome: failure };
+      }
+    }
+
+    const selectedObservedChecks = checksForGrade(args.recipeTasks?.get(level), 'observed');
+    if (!continuing && !resumedRepair && selectedObservedChecks.length) {
+      const observationOut = join(args.out,
+        `first-build-l${level}${featureActionSuffix}-observed`);
+      let observationBundle = null;
+      let observationOutcome;
+      if (!firstBuildSource) {
+        observationOutcome = { kind: 'harness_failure', phase: 'first-build-source',
+          reason: 'observed specifications require a source-bound first build' };
+      } else if (!ladderMayContinue(firstBuild.outcome)) {
+        observationOutcome = { kind: 'ungraded', phase: 'first-build-observation',
+          reason: 'scored first-build grading did not establish a usable environment' };
+      } else {
+        observationBundle = grade(args, appDir, url, `${args.backend}-l${level}-observed`, level,
+          track, runId, { observation: 'observed', out: observationOut,
+            sourceSha256: firstBuildSource.sha256 });
+        observationOutcome = classifyBundle(observationBundle);
+      }
+      firstBuild.observations = {
+        sourceSha256: firstBuildSource?.sha256 ?? null,
+        selectionSha256: args.recipeTasks?.get(level)?.selection.sha256 ?? null,
+        selectedChecks: selectedObservedChecks.map(check => check.stableKey),
+        reportedChecks: observationBundle?.selection?.reportedChecks ?? [],
+        passedPoints: observationBundle?.totals?.score ?? null,
+        observedPoints: observationBundle?.totals?.max ?? null,
+        scoreContribution: false,
+        repairVisible: false,
+        artifact: observationBundle
+          ? `first-build-l${level}${featureActionSuffix}-observed/${ARTIFACT_FILE.gradeBundle}` : null,
+        outcome: observationOutcome,
+      };
+    }
+
+    let initialProgressionFailure: ProgressionFailure | null = null;
+    if (featureActionSequence !== null && progressionSelection
+      && isProgressionWorkRecipeAction(progressionSelection)) {
+      const candidateOutcome = classifyBundle(bundle);
+      archiveCandidateGrade(`l${level}${featureActionSuffix}`);
+      if (!levelGradeIsUsable(candidateOutcome)) {
+        await restoreFeatureAcceptedSource();
+        initialProgressionFailure = progressionFailure(candidateOutcome);
+      } else if (!featureCandidateAccepted(progressionSelection,
+        requireProgressionState(progressionExecution?.state ?? null),
+        bundle)) {
+        bundle = await gradeAcceptedSource(join(outputDir, 'source'),
+          `${args.backend}-l${level}${featureActionSuffix}-restored`,
+        );
+        const restoredOutcome = classifyBundle(bundle);
+        if (!levelGradeIsUsable(restoredOutcome)) {
+          initialProgressionFailure = progressionFailure(restoredOutcome);
+        }
+      }
+    }
+
+    // Preserve the first source and scored grading before repair overwrites the
+    // app. Observed evidence remains in its own source-bound result directory.
+    const acceptedGradingDirectory = continuing
+      ? `baseline-l${level}${featureActionSuffix}-grading`
+      : `first-build-l${level}${featureActionSuffix}-grading`;
+    try {
+      const gradingFrom = join(appDir, 'stack-bench');
+      if (existsSync(gradingFrom)) {
+        const gradingTo = join(args.out, acceptedGradingDirectory);
+        cpSync(gradingFrom, gradingTo, {
+          recursive: true,
+          filter: src => !/[\\/]media([\\/]|$)/.test(src),
+        });
+        if (bundle) reusableRepairEvidence = { bundle, results: gradingTo };
+        console.log(`  kept the ${continuing ? 'continuation baseline' : 'unaided'} grading at ${join(args.out, acceptedGradingDirectory)}`);
+      }
+    } catch (e) {
+      // Never worth losing a run over: the score is already recorded.
+      console.log(`  !! could not keep the first build: ${errorMessage(e).split('\n')[0]}`);
+    }
+
+    // A resumed grade settles a repair that was already charged; only a
+    // resumed coding session is a new repair.
+    let repairs = resumedRepair && !resumedGrade ? 1 : 0;
+    let repairCost = resumedRepair && build ? build.costUsd : 0;
+    const repairSessions = resumedRepair && build
+      ? [runSessionRecord(build, priorRepairs + 1)] : [];
+    const repairHistory: ReturnType<typeof repairHistoryEntry>[] = [];
+    let repairCandidate: RunRepairCandidate | null = null;
+    let priorRegressionReport = resumedRegressionReport;
+    let priorRegressionOwner = repairOwnerNodeIds(progressionSelection).join('\n') || null;
+    let regressed = false;
+    let repairStopReason: string | null = null;
+    let repairProgress = repairProgressState(null, bundle);
+    const pauseForRepeatedFindings = () => {
+      if (args.progression) return false;
+      repairProgress = repairProgressState(repairProgress, bundle);
+      if (args.maxStalledRepairs === 0
+        || repairProgress.stalledRounds < args.maxStalledRepairs) return false;
+      repairStopReason = 'repeated-findings';
+      console.log(`    pausing after ${repairProgress.stalledRounds} repairs `
+        + 'with the same failed checks and no score gain');
+      return true;
+    };
+    const initialBundleOutcome = classifyBundle(bundle);
+    const initialProgressionAttempt = args.progression
+      ? requireProgressionState(progressionExecution?.state ?? null).attempts.at(-1) ?? null
+      : null;
+    const initialGradeUsable = levelGradeIsUsable(initialBundleOutcome,
+      initialProgressionAttempt);
+    if (!initialGradeUsable) {
+      repairStopReason = 'initial-grading-failed';
+      console.log('  repairs skipped: the initial grade did not complete, so there are no reliable findings to fix');
+    }
+
+    let progressionNext = recordProgressionGrade({
+      selected: progressionSelection,
+      bundle: initialProgressionFailure ? null : bundle,
+      level,
+      failure: initialProgressionFailure,
+      completedRepair: resumedRepair && !resumedGrade,
+    });
+    // Never start a paid repair with nothing left to spend or while a charged
+    // repair still waits for its grade.
+    const progressionMayRepair = () => !args.progression
+      || (progressionNext?.type === 'repair' && progressionNext.repair.remaining > 0
+        && progressionNext.repair.awaitingGrade !== true);
+    // One allowance for both modes: the engine's remaining repairs in
+    // dependency mode, the run-wide total less every repair so far otherwise.
+    const repairsRemaining = (): number => args.progression
+      ? (progressionNext?.type === 'repair' ? progressionNext.repair.remaining : 0)
+      : args.repairs - priorRepairs - repairs;
+    const mayRepair = (): boolean => args.progression
+      ? progressionMayRepair() : repairsRemaining() > 0;
+    const recordRepairProgression = ({ failure = null, repairRegression = null,
+      completedRepair = false }: {
+      failure?: ProgressionFailure | null;
+      repairRegression?: ProgressionRepairRegression | null;
+      completedRepair?: boolean;
+    } = {}) => {
+      progressionNext = recordProgressionGrade({
+        selected: progressionSelection,
+        bundle: failure ? null : bundle,
+        level,
+        failure,
+        repairRegression,
+        completedRepair,
+      });
+      return progressionMayRepair();
+    };
+    const recordRepairHarnessFailure = (phase: string, reason: string,
+      failedBundle: GradeBundlePayload | null = null, completedRepair = false): void => {
+      const failure: RunOutcome = {
+        kind: 'harness_failure', phase, reason,
+        appFailures: [], inconclusive: [], harnessFailures: [reason],
+      };
+      bundle = failedBundle ? { ...failedBundle, outcome: failure } : { outcome: failure };
+      repairStopReason = phase;
+      if (args.progression) recordRepairProgression({
+        failure: progressionFailure(failure), completedRepair,
+      });
+    };
+    const restoreProgressionGrade = (accepted: GradeBundlePayload | null,
+      label: string): boolean => {
+      const expected = progressionSelection && isProgressionWorkRecipeAction(progressionSelection)
+        ? progressionSelection.grader.selectionSha256 : null;
+      if (!expected || accepted?.selection?.sha256 === expected) {
+        bundle = accepted;
+        return true;
+      }
+      bundle = grade(args, appDir, url, label, level, track, runId);
+      const outcome = classifyBundle(bundle);
+      if (levelGradeIsUsable(outcome)) return true;
+      recordRepairHarnessFailure('repair-restore-grading',
+        outcome.reason ?? 'restored source did not produce a reliable grade', bundle, true);
+      return false;
+    };
+    const writeRepairReport = (results: string | null = null):
+      { status: 0 | 3 | 4 } | { status: 'failed'; reason: string } => {
+      try {
+        sh('node', [join(ROOT, 'dist', 'commands', 'report-bugs.js'), '--app', appDir,
+          ...(results ? ['--results', results] : []),
+          '--history-json', JSON.stringify(repairHistory),
+          '--archive', join(outputDir, 'repair-reports',
+            `bug-report-l${level}${featureActionSuffix}-round${repairs + 1}.md`),
+          ...(priorRegressionReport ? ['--prior-regression', priorRegressionReport] : []),
+          ...repairReportArgs(progressionSelection)], { stdio: 'pipe' });
+        return { status: 0 };
+      } catch (error) {
+        const failure = commandFailure(error);
+        if (failure.status === 3 || failure.status === 4) return { status: failure.status };
+        return { status: 'failed', reason: errorMessage(failure).split(/\r?\n/)[0]
+          ?? 'repair report generation failed' };
+      }
+    };
+    const recordMissingRepairFeedback = (status: 3 | 4): void => {
+      repairStopReason = 'no-actionable-findings';
+      if (!args.progression) return;
+      const reason = status === 3
+        ? 'selected repair checks contain no failures'
+        : 'selected repair checks produced no actionable findings';
+      const failure: RunOutcome = {
+        kind: 'harness_failure', phase: 'repair-report', reason,
+        appFailures: [], inconclusive: [], harnessFailures: [reason],
+      };
+      bundle = { outcome: failure };
+      recordRepairProgression({ failure: progressionFailure(failure) });
+    };
+
+    // Hand back findings and let the agent fix, until clean or out of rounds.
+    while (levelGradeIsUsable(classifyBundle(bundle), args.progression
+      ? requireProgressionState(progressionExecution?.state ?? null).attempts.at(-1) ?? null
+      : null) && mayRepair()) {
+      let reportReady = false;
+      const acceptedBundle = bundle;
+      let repairBaselineBundle = bundle;
+      if (args.progression) {
+        progressionSelection = bindProgressionAction(level);
+        const repairOwner = repairOwnerNodeIds(progressionSelection).join('\n') || null;
+        if (repairOwner !== priorRegressionOwner) {
+          priorRegressionReport = null;
+          priorRegressionOwner = repairOwner;
+        }
+        trackProgressionBudget(progressionSelection, priorRepairs + repairs);
+        if (progressionSelection && isProgressionWorkRecipeAction(progressionSelection)
+          && bundle?.selection?.sha256 !== progressionSelection.grader.selectionSha256) {
+          const sequence = requireProgressionState(progressionExecution?.state ?? null).attempts.length + 1;
+          const targetChecks = repairCheckKeys(progressionSelection);
+          const sourceSha256 = hashAppSource(appDir).sha256;
+          const hasCurrentTargetEvidence = bundle?.source?.sha256 === sourceSha256
+            && targetChecks.every(check => bundle?.selection?.reportedChecks?.includes(check));
+          const reusable = reusableRepairEvidence?.bundle.source?.sha256 === sourceSha256
+            && targetChecks.every(check =>
+              reusableRepairEvidence?.bundle.selection?.reportedChecks?.includes(check))
+            ? reusableRepairEvidence : null;
+          let repairResults = hasCurrentTargetEvidence ? null : reusable?.results ?? null;
+          if (reusable && !hasCurrentTargetEvidence) repairBaselineBundle = reusable.bundle;
+          if (!hasCurrentTargetEvidence && !reusable) {
+            const binding = args.recipeBindings.get(level);
+            if (!binding) throw new Error(`L${level} has no recipe binding`);
+            const targetTask = resolveProgressionRepairTarget(binding,
+              requireProgressionState(progressionExecution?.state ?? null));
+            repairResults = join(outputDir, 'repair-grades',
+              `l${level}${featureActionSuffix}-round-${repairs + 1}`);
+            repairBaselineBundle = grade(args, appDir, url,
+              `${args.backend}-l${level}-repair-target${sequence}`,
+              level, track, runId, { out: repairResults, recipeTask: targetTask });
+          }
+          const refreshOutcome = classifyBundle(repairBaselineBundle);
+          const refreshUsable = levelGradeIsUsable(refreshOutcome);
+          if (!refreshUsable) {
+            recordRepairHarnessFailure('refresh-grading-failed',
+              refreshOutcome.reason ?? 'repair target did not produce a reliable grade',
+              repairBaselineBundle);
+            break;
+          }
+          const refreshReport = writeRepairReport(repairResults);
+          if (refreshReport.status === 'failed') {
+            recordRepairHarnessFailure('repair-report', refreshReport.reason);
+            break;
+          }
+          if (refreshReport.status === 3) {
+            bundle = grade(args, appDir, url,
+              `${args.backend}-l${level}-repair-refresh${sequence}`,
+              level, track, runId);
+            if (!levelGradeIsUsable(classifyBundle(bundle))) {
+              recordRepairHarnessFailure('refresh-grading-failed',
+                classifyBundle(bundle).reason ?? 'repair refresh did not produce a reliable grade',
+                bundle);
+              break;
+            }
+            recordRepairProgression();
+            continue;
+          }
+          if (refreshReport.status === 4) {
+            recordMissingRepairFeedback(refreshReport.status);
+            break;
+          }
+          reportReady = true;
+        }
+      }
+      const report = reportReady ? { status: 0 as const } : writeRepairReport();
+      if (report.status === 'failed') {
+        recordRepairHarnessFailure('repair-report', report.reason);
+        break;
+      }
+      if (report.status !== 0) {
+        recordMissingRepairFeedback(report.status);
+        break;
+      }
+
+      const before = repairBaselineBundle?.totals?.score ?? 0;
+      const beforeMax = repairBaselineBundle?.totals?.max ?? 0;
+      const beforeBundle = repairBaselineBundle;
+      // Keep the accepted source outside paths visible to the coding session.
+      const snapshot = join(tmpdir(), `stack-bench-snapshot-${args.backend}-${args.track}-run${args.runIndex}-l${level}`);
+      const gradingSnapshot = `${snapshot}-grading`;
+      const acceptedSource = hashAppSource(appDir);
+      snapshotSource(appDir, snapshot);
+      rmSync(gradingSnapshot, { recursive: true, force: true });
+      if (existsSync(join(appDir, 'stack-bench'))) {
+        cpSync(join(appDir, 'stack-bench'), gradingSnapshot, { recursive: true });
+      }
+      const cleanupRepairSnapshots = () => {
+        rmSync(snapshot, { recursive: true, force: true });
+        rmSync(gradingSnapshot, { recursive: true, force: true });
+      };
+      try {
+      const displayedRepairBudget = args.progression
+        ? progressionRepairLimit
+        : args.repairs;
+      if (args.dependencyPolicy?.definition.repair.selection === 'feature'
+        && progressionSelection && isProgressionWorkRecipeAction(progressionSelection)) {
+        const [nodeId] = progressionSelection.action.repair.nodeIds;
+        const node = requireProgressionState(progressionExecution?.state ?? null).definition.nodes
+          .find(candidate => candidate.id === nodeId);
+        if (!nodeId || !node) {
+          throw new Error('feature repair has no selected feature');
+        }
+        const used = requireProgressionState(progressionExecution?.state ?? null)
+          .nodes[nodeId]?.repairs.used ?? 0;
+        console.log(`--- feature repair ${used + 1}: ${node.title} ---`);
+      } else {
+        console.log(`--- repair ${priorRepairs + repairs + 1}/${displayedRepairBudget} ---`);
+      }
+      const fix = await runAgentForLevel('fix', level,
+        featureActionSequence === null ? undefined : restoreFeatureAcceptedSource);
+      repairCost += fix.costUsd;
+      repairSessions.push(runSessionRecord(fix, priorRepairs + repairs + 1));
+
+      const fixFailure = agentSessionFailure(fix);
+      if (fixFailure) {
+        if (featureActionSequence !== null) {
+          await restoreAcceptedRepair(snapshot, gradingSnapshot);
+        }
+        console.log(`    coding session failed: ${fixFailure.reason}; stopping repairs`);
+        bundle = { outcome: fixFailure };
+        repairHistory.push(repairHistoryEntry(repairs + 1, beforeBundle, bundle,
+          'agent session failed'));
+        repairStopReason = 'agent-session-failure';
+        recordRepairProgression({ failure: progressionFailure(fixFailure) });
+        break;
+      }
+      repairs += 1;
+
+      // Reject contaminated repairs before spending time on grading.
+      const fixLeak = auditContamination(appDir, ownPorts, auditsTranscripts);
+      if (fixLeak) {
+        const buildSession = build ? runSessionRecord(build) : null;
+        const sessions = resumedRepair || !buildSession
+          ? repairSessions : [buildSession, ...repairSessions];
+        const sessionTotals = summarizeSessions(sessions);
+        cleanupRepairSnapshots();
+        abortUnusableSession(`repair ${repairs}`, fixLeak, {
+          level, graded: false, score: null, max: null,
+          selection: bundle?.selection ?? null,
+          ...(resumedRepair
+            ? { resumedRepair: firstBuild }
+            : continuing
+            ? { baseline: firstBuild, resumeCostUsd: requireBuild().costUsd,
+              resumeSession: runSessionRecord(requireBuild()) }
+            : { firstBuild, buildCostUsd: requireBuild().costUsd,
+              buildSessions: [runSessionRecord(requireBuild())] }),
+          repairCostUsd: addCostUsd(repairCost), repairSessions, repairs,
+          ...(resumedRepair ? { priorRepairs,
+            cumulativeRepairs: priorRepairs + repairs } : {}),
+          repair: { status: 'ungraded', limit: displayedRepairBudget,
+            used: priorRepairs + repairs,
+            stopReason: fixLeak.kind === 'harness_failure' ? 'audit-failure' : 'contaminated' },
+          sessionTotals,
+          costUsd: resumedRepair ? addCostUsd(repairCost)
+            : addCostUsd(requireBuild().costUsd, repairCost),
+          durationMs: Date.now() - t0,
+        }, progressionSelection, true);
+      }
+      if (hashAppSource(appDir).sha256 === acceptedSource.sha256) {
+        clearPrivateGradingEvidence(appDir);
+        if (existsSync(gradingSnapshot)) {
+          cpSync(gradingSnapshot, join(appDir, 'stack-bench'), { recursive: true });
+        }
+        const reason = 'repair made no source change';
+        console.log(`    ${reason}; ${args.progression
+          ? 'counting the failed attempt'
+          : 'pausing before another paid round'}`);
+        repairHistory.push(repairHistoryEntry(repairs, beforeBundle, beforeBundle, reason));
+        if (args.progression) {
+          if (!restoreProgressionGrade(acceptedBundle,
+            `${args.backend}-l${level}-unchanged${repairs}`)) break;
+          if (!recordRepairProgression({ completedRepair: true })) break;
+          continue;
+        }
+        repairStopReason = 'no-source-change';
+        break;
+      }
+      const repairedSource = `${snapshot}-accepted`;
+      snapshotSource(appDir, repairedSource);
+      try {
+        bundle = await gradeAcceptedSource(repairedSource,
+          `${args.backend}-l${level}-fix${repairs}`);
+        if (!levelGradeIsUsable(classifyBundle(bundle))) {
+          console.log('    repair grade did not complete; retrying the same source once');
+          bundle = await gradeAcceptedSource(repairedSource,
+            `${args.backend}-l${level}-fix${repairs}-retry`);
+        }
+      } finally {
+        rmSync(repairedSource, { recursive: true, force: true });
+      }
+
+      const repairedOutcome = classifyBundle(bundle);
+      if (!levelGradeIsUsable(repairedOutcome)) {
+        const reason = repairedOutcome.reason
+          ?? 'the repaired source did not produce a reliable grade';
+        // The session is paid for and charged. Keep what it produced so a
+        // resume grades it instead of buying another repair; the feature's
+        // status waits for that grade.
+        const candidateDirectory = `repair-candidate-l${level}${featureActionSuffix}`;
+        let preserveFailure: string | null = null;
+        try {
+          repairCandidate = preserveRepairCandidate(candidateDirectory);
+          console.log(`    repair grade failed: ${reason}; kept the repaired source at `
+            + `${join(outputDir, candidateDirectory)} for grading on resume`);
+        } catch (error) {
+          preserveFailure = errorMessage(error).split(/\r?\n/)[0]
+            ?? 'could not keep the repaired source';
+          console.log(`    repair grade failed: ${reason}; ${preserveFailure}; restoring the accepted source`);
+          await restoreAcceptedRepair(snapshot, gradingSnapshot);
+        }
+        repairHistory.push(repairHistoryEntry(repairs, beforeBundle, bundle,
+          'repair completed; grading failed'));
+        recordRepairHarnessFailure('repair-grading',
+          preserveFailure ? `${reason}; ${preserveFailure}` : reason, bundle, true);
+        break;
+      }
+
+      if (featureActionSequence !== null && progressionSelection
+        && isProgressionWorkRecipeAction(progressionSelection)
+        && !featureCandidateAccepted(progressionSelection,
+          requireProgressionState(progressionExecution?.state ?? null), bundle)) {
+        const rejectedBundle = bundle;
+        archiveCandidateGrade(`l${level}${featureActionSuffix}-repair${repairs}`);
+        await restoreAcceptedRepair(snapshot, gradingSnapshot);
+        if (!restoreProgressionGrade(acceptedBundle,
+          `${args.backend}-l${level}${featureActionSuffix}-rollback${repairs}`)) break;
+        repairHistory.push(repairHistoryEntry(repairs, beforeBundle, rejectedBundle,
+          'rolled back because the feature still failed or earlier behavior regressed'));
+        if (!recordRepairProgression({ completedRepair: true })) break;
+        if (pauseForRepeatedFindings()) break;
+        continue;
+      }
+
+      const after = bundle?.totals?.score ?? 0;
+      const afterMax = bundle?.totals?.max ?? 0;
+      // Lost or inconclusive evidence cannot hide a repair regression.
+      let decision = repairEvidenceDecision(beforeBundle, bundle);
+      const regressionDecision = repairRegressionDecision(acceptedBundle, bundle);
+      if (regressionDecision.action === 'rollback-regression') decision = regressionDecision;
+      const shared = decision.shared;
+      if (decision.action === 'keep-setup-repair') {
+        console.log(afterMax > 0
+          ? `    application setup is now gradeable (${after}/${afterMax}); keeping this repair`
+          : '    application setup is still failing; keeping the attempted repair for the next round');
+        repairHistory.push(repairHistoryEntry(repairs, beforeBundle, bundle,
+          afterMax > 0
+            ? 'kept because the app became gradeable'
+            : 'kept to continue repairing application setup'));
+        if (!recordRepairProgression({ completedRepair: true })) break;
+        if (pauseForRepeatedFindings()) break;
+        continue;
+      }
+      if (decision.action === 'rollback-no-comparison') {
+        console.log('    no criteria were conclusively scored in both rounds; rolling back this fix');
+        await restoreAcceptedRepair(snapshot, gradingSnapshot);
+        if (!restoreProgressionGrade(acceptedBundle,
+          `${args.backend}-l${level}-rollback${repairs}`)) break;
+        repairHistory.push(repairHistoryEntry(repairs, beforeBundle, bundle,
+          'rolled back because the result could not be compared'));
+        if (!recordRepairProgression({ completedRepair: true })) break;
+        if (pauseForRepeatedFindings()) break;
+        continue;
+      }
+      if (shared.points < Math.min(beforeMax, afterMax)) {
+        console.log(`    comparing ${shared.points} point(s) across ${shared.count} criteria scored in both rounds`
+          + ` (${before}/${beforeMax} -> ${after}/${afterMax} overall)`);
+      }
+      if (decision.action === 'rollback-regression') {
+        if (shared.regressions.length) {
+          console.log(`    broke ${shared.regressions.length} earlier passing check(s); rolling back this fix`);
+        } else if (shared.lostEvidence.length) {
+          console.log(`    lost conclusive evidence for ${shared.lostEvidence.length} criterion/criteria; rolling back this fix`);
+        } else if (shared.definitionChanges.length) {
+          console.log('    rubric points changed between grades; rolling back this fix');
+        } else {
+          console.log(`    regressed (${shared.before} -> ${shared.after} on shared criteria); rolling back this fix`);
+        }
+        let repairRegression: ProgressionRepairRegression | null = null;
+        let regressionReportFailure: string | null = null;
+        try {
+          if (shared.regressions.length) {
+            const path = join(outputDir, 'repair-reports',
+              `rejected-regression-l${level}${featureActionSuffix}-round${repairs}.md`);
+            sh('node', [join(ROOT, 'dist', 'commands', 'report-bugs.js'), '--app', appDir,
+              '--out', path, '--checks-json', JSON.stringify(shared.regressions),
+              '--regression-context'], { stdio: 'pipe' });
+            repairRegression = {
+              ownerNodeIds: repairOwnerNodeIds(progressionSelection),
+              report: readFileSync(path, 'utf8'),
+            };
+            priorRegressionReport = path;
+          }
+        } catch (error) {
+          regressionReportFailure = errorMessage(error).split(/\r?\n/)[0]
+            ?? 'regression report generation failed';
+        } finally {
+          await restoreAcceptedRepair(snapshot, gradingSnapshot);
+        }
+        if (regressionReportFailure) {
+          repairHistory.push(repairHistoryEntry(repairs, beforeBundle, bundle,
+            'repair completed; regression reporting failed'));
+          recordRepairHarnessFailure('repair-regression-report', regressionReportFailure,
+            null, true);
+          break;
+        }
+        if (!restoreProgressionGrade(acceptedBundle,
+          `${args.backend}-l${level}-rollback${repairs}`)) break;
+        regressed = true;
+        repairHistory.push(repairHistoryEntry(repairs, beforeBundle, bundle,
+          'rolled back because earlier behavior regressed'));
+        if (!recordRepairProgression({ repairRegression, completedRepair: true })) break;
+        if (pauseForRepeatedFindings()) break;
+        continue;
+      }
+      priorRegressionReport = null;
+      if (shared.after === shared.before) {
+        const remaining = displayedRepairBudget - priorRepairs - repairs;
+        console.log(`    ${formatRepairProgress(shared, { before, beforeMax, after, afterMax })}; `
+          + (remaining > 0 ? `${remaining} repair(s) remain` : 'repair budget exhausted'));
+      }
+      repairHistory.push(repairHistoryEntry(repairs, beforeBundle, bundle,
+        shared.after === shared.before ? 'kept with no score gain' : 'kept'));
+      if (!recordRepairProgression({ completedRepair: true })) break;
+      if (pauseForRepeatedFindings()) break;
+      } finally {
+        cleanupRepairSnapshots();
+      }
+    }
+
+    // Missing grade evidence is not a zero score.
+    const progressionState = progressionExecution
+      ? requireProgressionState(progressionExecution.state) : null;
+    const progressionAttempt = progressionState
+      ? progressionState.attempts.findLast(attempt => attempt.level === level) ?? null
+      : null;
+    const levelBundle = progressionAttempt?.outcome === 'inconclusive'
+      ? bundle : progressionBundles.get(level) ?? bundle;
+    const finalBundleOutcome = classifyBundle(levelBundle);
+    // Progression uses stricter evidence rules than a regular scored bundle.
+    // Store one answer when a selected check is not measured: the raw bundle
+    // remains available for diagnosis, but the level is not a usable grade.
+    const graded = levelGradeIsUsable(finalBundleOutcome,
+      args.progression ? progressionAttempt : null);
+    const finalTotals = graded ? levelBundle?.totals ?? null : null;
+    const nodeRepairs = progressionState
+      ? dependencyRepairRecords(progressionState, level, levelRepairNodeIds)
+      : null;
+    const repairLimit = progressionExecution
+      ? Math.max(priorRepairs + repairs, progressionRepairLimit)
+      : args.repairs;
+    const repairBudgetExhausted = progressionExecution
+      ? finalBundleOutcome.kind === 'app_failure'
+        && progressionNext?.type !== 'repair'
+      : priorRepairs + repairs >= args.repairs;
+    const repairStatus: RepairStatus = repairStopReason === 'no-source-change' ? 'incomplete'
+      : !graded ? 'ungraded'
+      : finalBundleOutcome.kind === 'passed' ? (repairs > 0 ? 'corrected' : 'not-needed')
+        : repairBudgetExhausted ? 'budget-exhausted' : 'incomplete';
+    const stopReasons: Record<RepairStatus, string | null> = {
+      'not-needed': 'not-needed',
+      corrected: 'passed',
+      'budget-exhausted': 'budget-exhausted',
+      incomplete: null,
+      ungraded: null,
+    };
+    const stopReason = repairStopReason ?? stopReasons[repairStatus];
+    const repair = {
+      status: repairStatus,
+      limit: repairLimit,
+      used: priorRepairs + repairs,
+      ...(!args.progression ? { stallLimitRounds: args.maxStalledRepairs } : {}),
+      stopReason,
+      ...(nodeRepairs ? { nodeRepairs } : {}),
+      ...(repairCandidate ? { candidate: repairCandidate } : {}),
+    };
+    const latestProgressionAttempt = progressionState?.attempts.at(-1) ?? null;
+    const featureDepthContinues = featureActionSequence !== null
+      && progressionState?.phase === 'active' && progressionState.level === level;
+    if (progressionState && latestProgressionAttempt && latestProgressionAttempt.level !== level) {
+      const prior = run.levels.find(item => item.level === latestProgressionAttempt.level);
+      const latestBundle = progressionBundles.get(latestProgressionAttempt.level);
+      if (prior && latestBundle) {
+        const latestOutcome = classifyBundle(latestBundle);
+        const latestGraded = levelGradeIsUsable(latestOutcome, latestProgressionAttempt);
+        prior.graded = latestGraded;
+        prior.score = latestGraded ? latestBundle.totals?.score ?? null : null;
+        prior.max = latestGraded ? latestBundle.totals?.max ?? null : null;
+        prior.regression = latestBundle.totals?.regression ?? null;
+        prior.selection = latestBundle.selection ?? null;
+        prior.contractPass = latestBundle.totals?.contractPass ?? null;
+        prior.code = latestBundle.code ?? null;
+        prior.repair = { ...repair,
+          nodeRepairs: dependencyRepairRecords(
+            progressionState, latestProgressionAttempt.level, levelRepairNodeIds),
+        };
+        prior.stalled = repairStatus === 'budget-exhausted';
+        prior.outcome = latestOutcome;
+      }
+    }
+    if (continuing) {
+      const continuation = requireContinuation(run);
+      continuation.cumulativeRepairsAfter = continuation.cumulativeRepairsBefore + repairs;
+    }
+    let checkpoint = null;
+    if (graded && !featureDepthContinues
+      && (!latestProgressionAttempt || latestProgressionAttempt.level === level)) {
+      try {
+        checkpoint = preserveLevelCheckpoint({
+          appDir,
+          outputDir: args.out,
+          runId,
+          identities: run.identities,
+          track: args.track,
+          backend: args.backend,
+          level,
+          repair,
+          outcome: finalBundleOutcome,
+          selectionSha256: levelBundle?.selection?.sha256 ?? null,
+        });
+        console.log(`  kept the L${level} source checkpoint at ${join(args.out, checkpoint.directory)}`);
+      } catch (error) {
+        console.log(`  !! could not keep the L${level} source checkpoint: ${errorMessage(error).split('\n')[0]}`);
+      }
+    }
+    if (!graded) {
+      console.log(`  L${level}: GRADING DID NOT COMPLETE — no usable bundle. ` +
+        `Score is unknown, not zero; re-grade this level before using the run.`);
+    }
+    const buildSession = build ? runSessionRecord(build) : null;
+    const requireBuildSession = (): RunSessionRecord => {
+      if (!buildSession) throw new Error(`level ${level} has no coding session`);
+      return buildSession;
+    };
+    const sessionTotals = summarizeSessions(resumedRepair || !buildSession ? repairSessions
+      : [buildSession, ...repairSessions]);
+    appendLevelRecord({
+      level,
+      graded,
+      score: finalTotals?.score ?? null,
+      max: finalTotals?.max ?? null,
+      // Preserve earlier-level guarantees in the durable result.
+      regression: levelBundle?.totals?.regression ?? null,
+      selection: levelBundle?.selection ?? null,
+      ...(resumedRepair
+        ? { resumedRepair: firstBuild }
+        : continuing
+        ? { baseline: firstBuild, resumeCostUsd: requireBuild().costUsd,
+          resumeSession: requireBuildSession() }
+        : featureActionSequence !== null
+        ? { buildCostUsd: requireBuild().costUsd, buildSessions: [requireBuildSession()] }
+        : { firstBuild, buildCostUsd: requireBuild().costUsd,
+          buildSessions: [requireBuildSession()] }),
+      contractPass: levelBundle?.totals?.contractPass ?? null,
+      code: levelBundle?.code ?? null,
+      repairCostUsd: addCostUsd(repairCost),
+      repairSessions,
+      repairHistory,
+      sessionTotals,
+      tokens: sessionTotals.tokens,
+      usage: sessionTotals.usage,
+      turns: sessionTotals.turns,
+      promptBytes: sessionTotals.promptBytes,
+      tokensPerTurn: sessionTotals.turns
+        ? Math.round(sessionTotals.tokens / sessionTotals.turns) : null,
+      // Record actual reasoning because the provider default is not pinned.
+      thinking: sessionTotals.thinking,
+      repairs,
+      ...(resumedRepair ? { priorRepairs,
+        cumulativeRepairs: priorRepairs + repairs } : {}),
+      repair,
+      checkpoint,
+      // Keep the summary flag derived from the typed status so the two cannot drift.
+      stalled: repairStatus === 'budget-exhausted'
+        || ['repeated-findings', 'no-source-change'].includes(repairStopReason ?? ''),
+      regressed,
+      outcome: finalBundleOutcome,
+      durationSec: Math.round((Date.now() - t0) / 1000),
+    });
+    if (!args.progression || requireProgressionState(progressionExecution?.state ?? null).attempts
+      .some(attempt => attempt.level === level && attempt.outcome === 'conclusive')) {
+      if (!featureDepthContinues && !run.validation.ladder.completedLevels.includes(level)) {
+        run.validation.ladder.completedLevels.push(level);
+      }
+    }
+    writeRunJson(join(args.out, ARTIFACT_FILE.run), run);
+    const blockedLevels = args.levelList.filter(candidate => candidate > level);
+    if (args.progression) {
+      const progressionState = requireProgressionState(progressionExecution?.state ?? null);
+      if (progressionState.phase === 'terminal') {
+        if (blockedLevels.length) run.validation.ladder.stoppedAfterLevel = level;
+        run.validation.ladder.blockedLevels = blockedLevels;
+        writeRunJson(join(args.out, ARTIFACT_FILE.run), run);
+        break;
+      }
+      if (progressionState.level <= level) {
+        if (progressionState.attempts.at(-1)?.outcome === 'inconclusive') {
+          run.validation.ladder.stoppedAfterLevel = level;
+          run.validation.ladder.blockedLevels = [level, ...blockedLevels];
+          writeRunJson(join(args.out, ARTIFACT_FILE.run), run);
+          break;
+        }
+        if (featureActionSequence !== null && progressionState.level === level) {
+          levelIndex -= 1;
+          continue;
+        }
+        throw new Error(`dependency progression did not leave L${level} after its repair budget`);
+      }
+      continue;
+    }
+    if (blockedLevels.length && !ladderMayAdvance(finalBundleOutcome)) {
+      run.validation.ladder.stoppedAfterLevel = level;
+      run.validation.ladder.blockedLevels = blockedLevels;
+      writeRunJson(join(args.out, ARTIFACT_FILE.run), run);
+      console.log(`  ladder paused after L${level}: L${level} must pass before `
+        + `${blockedLevels.map(candidate => `L${candidate}`).join(', ')} can start`);
+      console.log('  inspect the failures, then explicitly grant more repairs or correct the benchmark');
+      break;
+    }
+  }
+
+  if (args.mutations) {
+    console.log(`\n================ ${args.backend} mutation control ================`);
+    const pristineOutcome = aggregateRunOutcome(run.levels);
+    if (args.referenceMutationOnly || mutationControlEligible(pristineOutcome)) {
+      args.parentAttemptId = runId;
+      const baselineBundle = pristineMutationBaselinePath(args);
+      if (baselineBundle) args.mutationBaselineBundle = baselineBundle;
+      else delete args.mutationBaselineBundle;
+      run.mutationControl = runMutationControl(args, appDir, url, track,
+        run.setup?.isolation?.imageId ?? null);
+    } else {
+      console.log(`  skipped: pristine outcome is ${pristineOutcome.kind}`);
+      run.mutationControl = { ok: false, skipped: true,
+        outcome: { kind: pristineOutcome.kind, phase: 'mutation-control-prerequisite',
+          reason: `pristine outcome is ${pristineOutcome.kind}` } };
+    }
+    writeRunJson(join(args.out, ARTIFACT_FILE.run), run);
+  }
+
+  // Record a final transcript audit in addition to the per-session hard gates.
+  // The same retry and diagnostic path is used at both gates.
+  let finalAuditFailure = null;
+  const finalAudit = auditContamination(appDir, ownPorts, auditsTranscripts);
+  if (!finalAudit) {
+    run.contaminated = false;
+    run.contamination = { evidence: 'no agent access to private benchmark files detected',
+      verdict: 'private-access audit passed' };
+  } else if (finalAudit.kind === 'contaminated') {
+    run.contaminated = true;
+    run.contamination = { evidence: finalAudit.evidence, verdict: finalAudit.verdict };
+    console.log('\n  !! CONTAMINATED: this build read the harness that grades it:');
+    for (const evidence of finalAudit.evidence) console.log(`     ${evidence}`);
+    console.log('     Scores from this run must not be quoted.');
+  } else {
+    run.contaminated = false;
+    run.contamination = { evidence: finalAudit.evidence, verdict: finalAudit.verdict };
+    const reason = finalAudit.evidence.join('; ');
+    finalAuditFailure = { kind: 'harness_failure', phase: 'contamination-audit', reason,
+      appFailures: [], inconclusive: [], harnessFailures: [reason] };
+    console.log('\n  !! AUDIT DID NOT COMPLETE. Scores from this run must not be quoted.');
+  }
+
+  // Keep the transcript evidence outside the provider CLI's prunable store.
+  try { archiveTranscripts(appDir, artifactLabel); }
+  catch { console.log('  (transcript archiving failed — evidence is on a 30-day timer)'); }
+
+  run.outcome = finalAuditFailure ?? (args.referenceMutationOnly && run.mutationControl?.ok
+    ? { kind: 'passed', phase: 'mutation-control', reason: null,
+      appFailures: [], inconclusive: [], harnessFailures: [] }
+    : aggregateRunOutcome(run.levels));
+  if (args.mutations && !run.mutationControl?.ok && !run.mutationControl?.skipped) {
+    run.outcome = { kind: run.mutationControl?.outcome?.kind === 'incomplete'
+      ? 'incomplete' : 'harness_failure', phase: 'mutation-control',
+      reason: run.mutationControl?.outcome?.reason
+        ?? run.mutationControl?.processError
+        ?? 'one or more declared mutations were not cleanly caught',
+      appFailures: [], inconclusive: [] };
+  }
+
+  if (finalPackageEvidenceRequired(run.outcome, run.levels)) {
+    try {
+      preserveFinalPackageEvidence({ appDir, outputDir });
+      console.log(`  source kept at ${join(outputDir, 'source')}`);
+      console.log(`  grading detail kept at ${join(outputDir, 'grading')}`);
+    } catch (error) {
+      const reason = errorMessage(error).split(/\r?\n/)[0] ?? 'evidence preservation failed';
+      run.outcome = { kind: 'harness_failure', phase: 'evidence-preservation', reason,
+        appFailures: [], inconclusive: [], harnessFailures: [reason] };
+      console.log(`  !! ${reason}`);
+    }
+  }
+
+  finalizeRunTotals(run, started, { costComplete: runCostComplete });
+  if (args.repairGrant) {
+    const continuation = requireContinuation(run);
+    const totals = requireRunTotals(run);
+    continuation.cumulativeCostAfterUsd = addCostUsd(continuation.cumulativeCostBeforeUsd, totals.costUsd);
+    continuation.cumulativeDurationAfterSec = continuation.cumulativeDurationBeforeSec + totals.durationSec;
+  }
+  run.completedAt = new Date().toISOString();
+  writeRunJson(join(args.out, ARTIFACT_FILE.run), run);
+
+  console.log(`\n================ ${args.backend} summary ================`);
+  for (const l of run.levels) {
+    console.log(`  ${formatLevelSummary(l)}`);
+  }
+  const totals = requireRunTotals(run);
+  console.log(`  TOTAL ${totals.score}/${totals.max}  ` +
+    `$${totals.costUsd}  ${totals.repairs} repair(s)  ${totals.durationSec}s`);
+  console.log(`  ${join(outputDir, ARTIFACT_FILE.run)}`);
+
+  teardown();
+
+  // Remove only the temporary directory created by this run.
+  if (ownWorkDir) {
+    try {
+      rmSync(dirname(appDir), { recursive: true, force: true });
+    } catch {
+      console.log(`  (work dir still held: ${dirname(appDir)} — the next sweep will take it)`);
+    }
+  }
+  process.exitCode = runExitCode(run.outcome);
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  main().catch(error => {
+    console.error(error instanceof Error ? error.stack ?? error.message : errorMessage(error));
+    try { emergencyTeardown?.(); }
+    catch (cleanupError) {
+      console.error(`cleanup after failure also failed: ${errorMessage(cleanupError).split(/\r?\n/)[0]}`);
+    }
+    process.exitCode = 1;
+  });
+}
diff --git a/tools/stack-bench/commands/campaign-cli.ts b/tools/stack-bench/commands/campaign-cli.ts
new file mode 100644
index 00000000000..38c927d4ac0
--- /dev/null
+++ b/tools/stack-bench/commands/campaign-cli.ts
@@ -0,0 +1,288 @@
+#!/usr/bin/env node
+
+import { resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+import { compileCampaignFile } from '../src/campaigns/campaign-compiler.js';
+import { CAMPAIGN_MODE_REGISTRY } from '../src/campaigns/campaign-mode.js';
+import { executeCampaign, inspectCampaign, reconcileCampaign }
+  from '../src/campaigns/campaign-runner.js';
+import { inspectCampaignSummary } from '../src/campaigns/campaign-inspection.js';
+import { generateCampaignReport } from '../src/campaigns/campaign-report.js';
+import { grantCampaignDependencyRepairs }
+  from '../src/campaigns/campaign-progression-grant.js';
+import { auditProgressionReferenceCampaign, formatProgressionReferenceCampaignAudit }
+  from '../src/campaigns/progression-reference-campaign-audit.js';
+import type { ReferenceCampaignAudit }
+  from '../src/campaigns/progression-reference-campaign-audit.js';
+import { prepareCampaignExtension } from '../src/campaigns/campaign-extension.js';
+
+interface CampaignSummaryPlan {
+  id: string;
+  version: string;
+  contentSha256: string;
+}
+
+interface CampaignSummaryState {
+  status: string;
+  summary: unknown;
+  attempts: Array<{
+    plan: { id: string };
+    status: string;
+    executions: Array<{
+      id: string;
+      outcome: unknown;
+      reason: string | null;
+    }>;
+  }>;
+}
+
+interface ReferenceCampaignPlan {
+  attempts: Array<{
+    mode?: { id?: string };
+    agentAdapter?: string;
+  }>;
+}
+
+interface ReferenceCampaignState {
+  status: string;
+}
+
+interface ResumeCampaign {
+  plan: {
+    contentSha256: string;
+    definition: { mode?: { id?: string } };
+  };
+  state: {
+    status: string;
+    attempts: Array<{ executions: readonly unknown[] }>;
+  };
+}
+
+type ReferenceCampaignAuditFunction = (directory: string) => ReferenceCampaignAudit | null;
+
+export type CampaignArgs =
+  | { command: 'modes' }
+  | { command: 'validate'; path: string }
+  | { command: 'show'; path: string }
+  | { command: 'status'; directory: string; full: boolean }
+  | { command: 'inspect'; directory: string }
+  | { command: 'report'; directory: string }
+  | { command: 'audit'; directory: string }
+  | { command: 'grant-repairs'; directory: string; attemptId: string; grantId: string;
+    level: number; nodeIds: string[]; repairs: number }
+  | { command: 'extend'; path: string; parentDirectory: string; fromDepth: number;
+    directory: string }
+  | { command: 'trial'; path: string; directory: string }
+  | { command: 'run'; path: string; directory: string }
+  | { command: 'resume'; path: string; directory: string }
+  | { command: 'reconcile'; path: string; directory: string };
+
+function isOneOf<const T extends string>(value: string | undefined,
+  values: readonly T[]): value is T {
+  return value !== undefined && values.some(candidate => candidate === value);
+}
+
+export function campaignStateSummary(plan: CampaignSummaryPlan, state: CampaignSummaryState) {
+  const failures = state.attempts.flatMap(attempt => {
+    const execution = attempt.executions.at(-1);
+    if (!execution || execution.outcome === null || execution.outcome === 'passed') return [];
+    return [{
+      attempt: attempt.plan.id,
+      status: attempt.status,
+      execution: execution.id,
+      outcome: execution.outcome,
+      reason: execution.reason,
+    }];
+  });
+  return {
+    campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+    status: state.status,
+    summary: state.summary,
+    failures,
+  };
+}
+
+export function auditCompletedReferenceCampaign(directory: string, plan: ReferenceCampaignPlan,
+  state: ReferenceCampaignState, {
+  audit = auditProgressionReferenceCampaign,
+}: { audit?: ReferenceCampaignAuditFunction } = {}): ReferenceCampaignAudit | null {
+  const hasReferenceProgression = plan.attempts.some(attempt =>
+    attempt.mode?.id === 'dependency' && attempt.agentAdapter === 'reference-fixture');
+  return state.status === 'completed' && hasReferenceProgression ? audit(directory) : null;
+}
+
+export function validateResumeCampaignState<T extends ResumeCampaign>(
+  requested: { contentSha256: string }, existing: T): T {
+  if (requested.contentSha256 !== existing.plan.contentSha256) {
+    throw new Error('resume requires the exact campaign plan already stored in the output directory');
+  }
+  if (existing.plan.definition.mode?.id !== 'dependency') {
+    throw new Error('resume is available only for dependency campaigns');
+  }
+  const executions = existing.state.attempts.reduce((total, attempt) =>
+    total + attempt.executions.length, 0);
+  if (existing.state.status !== 'prepared' || executions < 1) {
+    throw new Error('resume requires a dependency campaign with scheduled work');
+  }
+  return existing;
+}
+
+export function validateResumeCampaign(path: string, directory: string): ResumeCampaign {
+  return validateResumeCampaignState(compileCampaignFile(path), inspectCampaign(directory));
+}
+
+export function parseCampaignArgs(argv: string[]): CampaignArgs {
+  const [command, path, ...rest] = argv.slice(2);
+  if (command === 'modes' && path === undefined) return { command };
+  if (isOneOf(command, ['validate', 'show']) && path && rest.length === 0) {
+    return { command, path: resolve(path) };
+  }
+  if (command === 'status' && path
+    && (rest.length === 0 || (rest.length === 1 && rest[0] === '--full'))) {
+    return { command, directory: resolve(path), full: rest.length === 1 };
+  }
+  if (isOneOf(command, ['inspect', 'report', 'audit']) && path && rest.length === 0) {
+    return { command, directory: resolve(path) };
+  }
+  if (command === 'grant-repairs' && path) {
+    const values: { attemptId?: string; grantId?: string; level?: number; repairs?: number;
+      nodeIds: string[] } = { nodeIds: [] };
+    const seen = new Set<string>();
+    for (let index = 0; index < rest.length; index += 2) {
+      const flag = rest[index];
+      const value = rest[index + 1];
+      if (flag === undefined || value === undefined
+        || !['--attempt', '--grant-id', '--level', '--feature', '--repairs'].includes(flag)
+        || (flag !== '--feature' && seen.has(flag))) {
+        throw new Error(`invalid or duplicate grant-repairs option ${String(flag)}`);
+      }
+      seen.add(flag);
+      if (flag === '--attempt') values.attemptId = value;
+      else if (flag === '--grant-id') values.grantId = value;
+      else if (flag === '--level') values.level = Number(value);
+      else if (flag === '--repairs') values.repairs = Number(value);
+      else values.nodeIds.push(value);
+    }
+    if (!values.attemptId || !values.grantId || typeof values.level !== 'number'
+      || !Number.isSafeInteger(values.level) || typeof values.repairs !== 'number'
+      || !Number.isSafeInteger(values.repairs) || values.nodeIds.length === 0) {
+      throw new Error('grant-repairs requires --attempt, --grant-id, --level, '
+        + 'one or more --feature values, and --repairs');
+    }
+    return { command, directory: resolve(path), attemptId: values.attemptId,
+      grantId: values.grantId, level: values.level, nodeIds: values.nodeIds,
+      repairs: values.repairs };
+  }
+  if (command === 'extend' && path && rest.length === 6
+    && rest[0] === '--from' && rest[2] === '--depth' && rest[4] === '--out') {
+    const fromDepth = Number(rest[3]);
+    if (!Number.isSafeInteger(fromDepth) || fromDepth < 1) {
+      throw new Error('extend --depth must be a positive integer');
+    }
+    return { command, path: resolve(path), parentDirectory: resolve(rest[1]!),
+      fromDepth, directory: resolve(rest[5]!) };
+  }
+  if (isOneOf(command, ['trial', 'run', 'resume', 'reconcile'])
+    && path && rest.length === 2 && rest[0] === '--out') {
+    return { command, path: resolve(path), directory: resolve(rest[1]!) };
+  }
+  throw new Error('usage: campaign-cli.js modes | validate|show <campaign.json> '
+    + '| trial|run|resume|reconcile <campaign.json> --out <directory> '
+    + '| extend <campaign.json> --from <campaign-directory> --depth <N> --out <directory> '
+    + '| status <directory> [--full] | inspect|report|audit <directory> '
+    + '| grant-repairs <directory> --attempt <id> --grant-id <id> --level <N> '
+    + '--feature <id> [--feature <id> ...] --repairs <N>');
+}
+
+async function main() {
+  const args = parseCampaignArgs(process.argv);
+  if (args.command === 'modes') {
+    console.log(JSON.stringify(CAMPAIGN_MODE_REGISTRY.ids.map(value => {
+      const [id, version] = value.split('@');
+      return { id, version };
+    }), null, 2));
+    return;
+  }
+  if (args.command === 'status') {
+    const campaign = inspectCampaign(args.directory, { requireCurrentInputs: false });
+    console.log(JSON.stringify(args.full
+      ? campaign.state
+      : campaignStateSummary(campaign.plan, campaign.state), null, 2));
+    return;
+  }
+  if (args.command === 'inspect') {
+    console.log(JSON.stringify(inspectCampaignSummary(args.directory), null, 2));
+    return;
+  }
+  if (args.command === 'report') {
+    const generated = generateCampaignReport(args.directory);
+    console.log(`${generated.reportPath}\n${generated.htmlPath}\n${generated.report.contentSha256}`);
+    return;
+  }
+  if (args.command === 'audit') {
+    const report = auditProgressionReferenceCampaign(args.directory);
+    if (report === null) throw new Error('campaign has no dependency reference attempts to audit');
+    console.log(formatProgressionReferenceCampaignAudit(report));
+    if (!report.ok) process.exitCode = 1;
+    return;
+  }
+  if (args.command === 'grant-repairs') {
+    console.log(JSON.stringify(grantCampaignDependencyRepairs(args.directory, {
+      attemptId: args.attemptId,
+      grantId: args.grantId,
+      level: args.level,
+      nodeIds: args.nodeIds,
+      repairs: args.repairs,
+    }), null, 2));
+    return;
+  }
+  if (args.command === 'extend') {
+    prepareCampaignExtension(args.path, args.parentDirectory, args.directory, args.fromDepth);
+    const plan = compileCampaignFile(args.path);
+    const state = await executeCampaign(args.path, args.directory, { mode: 'frozen' });
+    console.log(JSON.stringify(campaignStateSummary(plan, state), null, 2));
+    if (state.status !== 'completed') process.exitCode = 1;
+    return;
+  }
+  const plan = compileCampaignFile(args.path);
+  if (args.command === 'reconcile') {
+    const state = reconcileCampaign(args.path, args.directory);
+    console.log(JSON.stringify(campaignStateSummary(plan, state), null, 2));
+    return;
+  }
+  if (args.command === 'trial' || args.command === 'run' || args.command === 'resume') {
+    if (args.command === 'resume') validateResumeCampaign(args.path, args.directory);
+    const cancellation = new AbortController();
+    const cancel = () => cancellation.abort();
+    process.on('SIGINT', cancel);
+    process.on('SIGTERM', cancel);
+    let state;
+    try {
+      const executionMode = args.command === 'trial'
+        || (args.command === 'resume' && plan.state === 'draft')
+        ? 'model-free-trial' : 'frozen';
+      state = await executeCampaign(args.path, args.directory, {
+        mode: executionMode,
+        signal: cancellation.signal,
+      });
+    } finally {
+      process.off('SIGINT', cancel);
+      process.off('SIGTERM', cancel);
+    }
+    console.log(JSON.stringify(campaignStateSummary(plan, state), null, 2));
+    const audit = auditCompletedReferenceCampaign(args.directory, plan, state);
+    if (audit !== null) console.log(formatProgressionReferenceCampaignAudit(audit));
+    if (state.status !== 'completed' || audit?.ok === false) process.exitCode = 1;
+    return;
+  }
+  if (args.command === 'show') console.log(JSON.stringify(plan, null, 2));
+  else console.log(`${plan.id}@${plan.version} ${plan.state}: ${plan.summary.attempts} attempts, ${plan.contentSha256}`);
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  main().catch((error: unknown) => {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 2;
+  });
+}
diff --git a/tools/stack-bench/commands/check-actions.ts b/tools/stack-bench/commands/check-actions.ts
new file mode 100644
index 00000000000..b213a3fc8a6
--- /dev/null
+++ b/tools/stack-bench/commands/check-actions.ts
@@ -0,0 +1,113 @@
+#!/usr/bin/env node
+// Probes are unauthenticated or malformed and must never mutate data.
+
+import { parseArgs as parseNodeArgs } from 'node:util';
+
+import { emptyArtifactIdentities, writeArtifact } from '../src/evidence/artifacts.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { STACK_ADAPTER_REGISTRY } from '../src/stacks/stack-adapters.js';
+
+interface CheckActionsArgs {
+  backend?: string;
+  url?: string;
+  app?: string;
+  out?: string;
+  track?: string;
+  quiet?: boolean;
+  parentAttemptId?: string;
+}
+
+import type { NamedAction } from '../src/composition/tracks.js';
+
+interface ActionResult {
+  id: string;
+  ok: boolean;
+  status: number;
+  note: string;
+}
+
+function parseArgs(argv: string[]): CheckActionsArgs {
+  const { values } = parseNodeArgs({ args: argv.slice(2), options: {
+    backend: { type: 'string' }, url: { type: 'string' }, app: { type: 'string' },
+    out: { type: 'string' }, track: { type: 'string' }, quiet: { type: 'boolean' },
+    'parent-attempt-id': { type: 'string' },
+  } });
+  const a: CheckActionsArgs = { backend: values.backend, url: values.url, app: values.app,
+    out: values.out, track: values.track, quiet: values.quiet,
+    parentAttemptId: values['parent-attempt-id'] };
+  if (!a.backend) { console.error('--backend is required'); process.exit(2); }
+  return a;
+}
+
+const args = parseArgs(process.argv);
+const backend = args.backend;
+if (!backend) throw new Error('--backend is required');
+
+// Use non-writing probes declared by the selected track.
+const track = args.track ? loadTrack(args.track) : null;
+const ACTIONS = (track?.actions ?? []).map(action => ({ ...action,
+  http: { method: 'POST', path: action.path } }));
+if (!ACTIONS.length) {
+  if (!args.quiet) console.log(`  no named actions declared for track "${args.track ?? '(none)'}" — nothing to check`);
+  if (args.out) {
+    const id = `${args.parentAttemptId ?? 'actions'}-action-check`;
+    writeArtifact(args.out, { kind: 'action_check', id,
+      attempt: { id, parentId: args.parentAttemptId ?? null },
+      identities: emptyArtifactIdentities({ stackAdapter: { id: backend } }),
+      payload: { backend, results: [], missing: [] } });
+  }
+  process.exit(0);
+}
+
+// SpacetimeDB control targets come from the authenticated lease. Client config
+// is app-controlled input and may use environment expressions rather than
+// literals; it is neither authoritative nor safe for harness operations.
+const adapter = STACK_ADAPTER_REGISTRY.get(backend);
+const spacetime = adapter.grading.context({ requireBuildContainer: false });
+
+async function probe(action: NamedAction): Promise<Omit<ActionResult, 'id'>> {
+  try {
+    const request = adapter.namedAction.request(
+      { action, input: { args: action.args }, spacetime, url: args.url });
+    if (!request.url) return { ok: false, status: 0, note: 'no --url given for a server-based backend' };
+    const r = await fetch(request.url, {
+      method: request.method ?? 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: request.body,
+    });
+    const rejectedByApplication = 'applicationRejectionStatuses' in request
+      && request.applicationRejectionStatuses.includes(r.status);
+    const recognizedWithoutRunning = r.status >= 400 && r.status < 500
+      && ![404, 405, 429].includes(r.status);
+    const ok = r.ok || rejectedByApplication || recognizedWithoutRunning;
+    return { ok, status: r.status,
+      note: r.status === 404 ? request.missingNote
+        : ok ? '' : `action probe returned HTTP ${r.status}` };
+  } catch (error: unknown) {
+    const message = error instanceof Error ? error.message : String(error);
+    return { ok: false, status: 0, note: (message.split('\n')[0] ?? '').slice(0, 90) };
+  }
+}
+
+const results: ActionResult[] = await Promise.all(ACTIONS.map(async action => ({
+  id: action.id,
+  ...(await probe(action)),
+})));
+
+const missing = results.filter(r => !r.ok);
+if (!args.quiet) {
+  for (const r of results) {
+    console.log(`  ${r.ok ? 'ready' : 'UNUSABLE'}  ${r.id.padEnd(11)} ${r.status ? `HTTP ${r.status}` : ''} ${r.note}`);
+  }
+  console.log(missing.length
+    ? `\n${missing.length} named action(s) unusable — contention and volume tests cannot be issued against this app.`
+    : '\nall named actions are ready.');
+}
+if (args.out) {
+  const id = `${args.parentAttemptId ?? 'actions'}-action-check`;
+  writeArtifact(args.out, { kind: 'action_check', id,
+    attempt: { id, parentId: args.parentAttemptId ?? null },
+      identities: emptyArtifactIdentities({ stackAdapter: { id: backend } }),
+      payload: { backend, results, missing: missing.map(m => m.id) } });
+}
+process.exit(missing.length ? 1 : 0);
diff --git a/tools/stack-bench/commands/check-calibration.ts b/tools/stack-bench/commands/check-calibration.ts
new file mode 100644
index 00000000000..188a72d9833
--- /dev/null
+++ b/tools/stack-bench/commands/check-calibration.ts
@@ -0,0 +1,71 @@
+#!/usr/bin/env node
+
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { parseArgs } from 'node:util';
+
+import { compileCalibrationDefinition, compileCalibrationFile } from '../src/composition/calibration-compiler.js';
+import { buildRecipeRelease } from '../src/composition/recipe-release.js';
+import { listTracks, TRACKS_DIR } from '../src/composition/tracks.js';
+
+import { STACK_BENCH_ROOT as ROOT } from '../src/package-root.js';
+
+export interface CalibrationCheckResult {
+  track: string;
+  id: string;
+  version: string;
+  state: string;
+  recipe: string;
+  controls: number;
+  stacks: number;
+  contentSha256: string;
+}
+
+export function checkCalibrations(
+  { trackName = null }: { trackName?: string | null } = {},
+): CalibrationCheckResult[] {
+  const availableTracks = listTracks({ includeInternal: true });
+  if (trackName && !availableTracks.includes(trackName)) {
+    throw new Error(`unknown calibration track ${trackName}`);
+  }
+  const tracks = trackName ? [trackName] : availableTracks;
+  const results: CalibrationCheckResult[] = [];
+  for (const name of tracks) {
+    const trackRoot = join(TRACKS_DIR, name);
+    const directory = join(trackRoot, 'composition', 'calibrations');
+    if (!existsSync(directory)) continue;
+    for (const file of readdirSync(directory).filter(candidate => candidate.endsWith('.json')).sort()) {
+      const path = join(directory, file);
+      const source = `composition/calibrations/${file}`;
+      const input = JSON.parse(readFileSync(path, 'utf8'));
+      const definition = compileCalibrationDefinition(input, { source });
+      const recipePath = resolve(dirname(path), definition.recipe.path);
+      const release = buildRecipeRelease(recipePath, { trackRoot });
+      const plan = compileCalibrationFile(path, { trackRoot, stackBenchRoot: ROOT, release });
+      results.push({ track: name, id: plan.id, version: plan.version, state: plan.state,
+        recipe: plan.recipe.id, controls: plan.controls.length, stacks: plan.qualification.stacks.length,
+        contentSha256: plan.contentSha256 });
+    }
+  }
+  return results;
+}
+
+function main() {
+  const { values } = parseArgs({ args: process.argv.slice(2), options: {
+    track: { type: 'string' },
+  }, strict: true, allowPositionals: false });
+  const results = checkCalibrations({ trackName: values.track ?? null });
+  for (const result of results) {
+    console.log(`${result.track}: ${result.id}@${result.version} ${result.state}; ` +
+      `${result.controls} controls, ${result.stacks} stacks, ${result.contentSha256.slice(0, 12)}`);
+  }
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  try { main(); }
+  catch (error: unknown) {
+    console.error(error instanceof Error ? error.stack ?? error.message : String(error));
+    process.exitCode = 1;
+  }
+}
diff --git a/tools/stack-bench/commands/check-composition.ts b/tools/stack-bench/commands/check-composition.ts
new file mode 100644
index 00000000000..4548a0730d5
--- /dev/null
+++ b/tools/stack-bench/commands/check-composition.ts
@@ -0,0 +1,87 @@
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+import {
+  compileFixtureDefinition,
+  compilePackDefinition,
+  compilePromotionFile,
+  compileRecipeFile,
+} from '../src/composition/composition-compiler.js';
+import { TRACKS_DIR, listTracks } from '../src/composition/tracks.js';
+
+function json(path: string): unknown {
+  try { return JSON.parse(readFileSync(path, 'utf8')); }
+  catch (error: unknown) {
+    const message = error instanceof Error ? error.message : String(error);
+    throw new Error(`cannot read composition source ${path}: ${message}`, { cause: error });
+  }
+}
+
+export interface CompositionSummary {
+  track: string;
+  packs: number;
+  fixtures: number;
+  recipes: number;
+  checks: number;
+  aliases: number;
+}
+
+export function checkCompositions(
+  { trackName = null }: { trackName?: string | null } = {},
+): CompositionSummary[] {
+  const names = trackName ? [trackName] : listTracks({ includeInternal: true });
+  const summary = [];
+  for (const name of names) {
+    const trackRoot = join(TRACKS_DIR, name);
+    const root = join(trackRoot, 'composition');
+    if (!existsSync(root)) {
+      if (trackName) throw new Error(`track ${name} has no composition directory`);
+      continue;
+    }
+    const packs = join(root, 'packs');
+    const fixtures = join(root, 'fixtures');
+    const recipes = join(root, 'recipes');
+    const packFiles = readdirSync(packs).filter(file => file.endsWith('.json')).sort();
+    const fixtureFiles = readdirSync(fixtures).filter(file => file.endsWith('.json')).sort();
+    const recipeFiles = readdirSync(recipes).filter(file => file.endsWith('.json')).sort();
+    if (!packFiles.length || !fixtureFiles.length || !recipeFiles.length) {
+      throw new Error(`track ${name} composition must contain packs, fixtures, and recipes`);
+    }
+    for (const file of packFiles) {
+      const path = join(packs, file);
+      compilePackDefinition(json(path), { source: path });
+    }
+    for (const file of fixtureFiles) {
+      const path = join(fixtures, file);
+      compileFixtureDefinition(json(path), { source: path });
+    }
+    const plans = recipeFiles.map(file => compileRecipeFile(join(recipes, file), { trackRoot }));
+    const promotionPath = join(root, 'promotions.json');
+    const promotion = existsSync(promotionPath)
+      ? compilePromotionFile(promotionPath, { trackRoot }) : null;
+    summary.push({ track: name, packs: packFiles.length, fixtures: fixtureFiles.length,
+      recipes: plans.length, checks: plans.reduce((total, plan) => total + plan.checks.length, 0),
+      aliases: promotion?.entries.length ?? 0 });
+  }
+  return summary;
+}
+
+function main(): void {
+  const args = process.argv.slice(2);
+  let trackName: string | null = null;
+  for (let index = 0; index < args.length; index += 1) {
+    const value = args[index + 1];
+    if (args[index] === '--track' && value) {
+      trackName = value;
+      index += 1;
+    } else throw new Error(`unknown or incomplete argument ${args[index]}`);
+  }
+  const summary = checkCompositions({ trackName });
+  if (!summary.length) throw new Error('no composition sources found');
+  for (const row of summary) {
+    console.log(`${row.track}: ${row.packs} packs, ${row.fixtures} fixtures, ${row.recipes} recipes, ${row.checks} selected checks, ${row.aliases} promotion entries`);
+  }
+}
+
+if (process.argv[1] && pathToFileURL(process.argv[1]).href === import.meta.url) main();
diff --git a/tools/stack-bench/commands/check-mutations.ts b/tools/stack-bench/commands/check-mutations.ts
new file mode 100644
index 00000000000..042a6d9770b
--- /dev/null
+++ b/tools/stack-bench/commands/check-mutations.ts
@@ -0,0 +1,81 @@
+#!/usr/bin/env node
+
+import { existsSync, readFileSync } from 'node:fs';
+import { parseArgs as parseNodeArgs } from 'node:util';
+
+import { mutationFileEdits, resolveMutationFile, validateMutationDefinitions }
+  from '../src/evidence/mutation-analysis.js';
+import type { MutationDefinition } from '../src/evidence/mutation-analysis.js';
+
+interface CliArgs {
+  app: string;
+  mutations: string;
+  quiet: boolean;
+}
+
+interface MutationSpec {
+  anchoredTo?: unknown;
+  mutations?: MutationDefinition[];
+}
+
+function parseArgs(argv: string[]): CliArgs {
+  const { values: { app, mutations, quiet = false } } = parseNodeArgs({ args: argv.slice(2),
+    options: { app: { type: 'string' }, mutations: { type: 'string' }, quiet: { type: 'boolean' } } });
+  if (!app || !mutations) {
+    console.error('Usage: node dist/commands/check-mutations.js --app <dir> --mutations <file.json>');
+    process.exit(2);
+  }
+  return { app, mutations, quiet };
+}
+
+const args = parseArgs(process.argv);
+const parsed: unknown = JSON.parse(readFileSync(args.mutations, 'utf8'));
+if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+  throw new Error('mutation manifest must be an object');
+}
+const spec = parsed as MutationSpec;
+const say = (...message: unknown[]): void => { if (!args.quiet) console.log(...message); };
+
+say(`mutations : ${args.mutations}`);
+say(`app       : ${args.app}`);
+if (spec.anchoredTo) say(`anchored  : ${String(spec.anchoredTo).split('.')[0]}`);
+say('');
+
+let bad = 0;
+const definitions = validateMutationDefinitions(spec.mutations);
+for (const issue of definitions.issues) {
+  console.log(`  BAD MANIFEST ${issue.mutation ?? '<unnamed>'} -> ${issue.kind}`);
+  bad += 1;
+}
+for (const mutation of spec.mutations ?? []) {
+  const mutationId = String(mutation.id ?? '<unnamed>');
+  for (const edit of mutationFileEdits(mutation)) {
+    let file: string;
+    try { file = resolveMutationFile(args.app, edit.file); }
+    catch {
+      console.log(`  UNSAFE FILE ${mutationId} -> ${edit.file} escapes the app directory`);
+      bad += 1;
+      continue;
+    }
+    if (!existsSync(file)) {
+      console.log(`  DEAD FILE   ${mutationId} -> ${edit.file} does not exist in this app`);
+      bad += 1;
+      continue;
+    }
+    const source = readFileSync(file, 'utf8');
+    const matches = source.split(edit.find).length - 1;
+    if (matches === 1) {
+      say(`  ok          ${mutationId} -> ${edit.file}`);
+      continue;
+    }
+    console.log(matches === 0
+      ? `  DEAD ANCHOR ${mutationId} -> not found in ${edit.file}`
+      : `  AMBIGUOUS   ${mutationId} -> matches ${matches}x in ${edit.file}; the edit would land in more than one place`);
+    bad += 1;
+  }
+}
+
+console.log(bad
+  ? `\n${bad} problem(s) — these mutations cannot validate anything against this app.`
+  : '\nall anchors present and unique — this file can validate against this app.');
+process.exit(bad ? 1 : 0);
diff --git a/tools/stack-bench/commands/check-scenarios.ts b/tools/stack-bench/commands/check-scenarios.ts
new file mode 100644
index 00000000000..7fd01f2c378
--- /dev/null
+++ b/tools/stack-bench/commands/check-scenarios.ts
@@ -0,0 +1,304 @@
+#!/usr/bin/env node
+// Check scenario action names, actors, UI hooks, and score totals without an app.
+
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { parseArgs } from 'node:util';
+
+import { ACTION_REGISTRY } from '../src/actions/action-catalog.js';
+import { compileRecipeFile, type CompiledOwnedTaskFragment, type CompiledRecipeRelease }
+  from '../src/composition/composition-compiler.js';
+import { compileScenarioDefinition, type CompiledStep }
+  from '../src/composition/definition-compiler.js';
+import { DEFAULT_TRACK, listTracks, loadTrack, type Track }
+  from '../src/composition/tracks.js';
+
+interface ScenarioScope {
+  features: Map<number, Set<string>>;
+  contractOwners: Set<string>;
+  requirementOwners: Set<string>;
+  contractText: string;
+  requirementText: string;
+}
+
+interface RecipeSource {
+  baseRecipe: string | null;
+  isolatesSelectedSources: boolean;
+}
+
+type HooksByLevel = Map<string, Set<string>>;
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+function readJson(path: string): unknown {
+  return JSON.parse(readFileSync(path, 'utf8')) as unknown;
+}
+
+function readRecipeSource(path: string): RecipeSource {
+  const source = readJson(path);
+  if (!isRecord(source)) throw new Error(`${path}: recipe must be an object`);
+  const task = source.task;
+  if (!isRecord(task)) throw new Error(`${path}: recipe task must be an object`);
+  const baseRecipe = task.baseRecipe;
+  let baseRecipePath: string | null = null;
+  if (baseRecipe !== undefined) {
+    if (!isRecord(baseRecipe) || typeof baseRecipe.path !== 'string') {
+      throw new Error(`${path}: task.baseRecipe.path must be a string`);
+    }
+    baseRecipePath = baseRecipe.path;
+  }
+  return {
+    baseRecipe: baseRecipePath,
+    isolatesSelectedSources: source.execution === 'all-selected-sources',
+  };
+}
+
+function contractHookIds(path: string): string[] {
+  const contract = readJson(path);
+  if (!isRecord(contract) || !Array.isArray(contract.hooks)) {
+    throw new Error(`${path}: hooks must be an array`);
+  }
+  return contract.hooks.map((hook, index) => {
+    if (!isRecord(hook) || typeof hook.id !== 'string') {
+      throw new Error(`${path}: hooks[${index}].id must be a string`);
+    }
+    return hook.id;
+  });
+}
+
+// Contract levels are cumulative. A level can use hooks introduced earlier.
+function hooksByLevel(track: Track): HooksByLevel {
+  const perFile = new Map<string, string[]>();
+  for (const file of readdirSync(track.contracts).filter(name => /^\d\d-.*\.json$/.test(name))) {
+    perFile.set(file.slice(0, 2), contractHookIds(join(track.contracts, file)));
+  }
+  const byLevel: HooksByLevel = new Map();
+  for (const level of perFile.keys()) {
+    const ids = [...perFile.entries()]
+      .filter(([candidate]) => candidate <= level)
+      .flatMap(([, hookIds]) => hookIds);
+    byLevel.set(level, new Set(ids));
+  }
+  return byLevel;
+}
+
+function packId(reference: string): string {
+  return reference.slice(0, reference.lastIndexOf('@'));
+}
+
+function ownedFragment(
+  fragment: CompiledOwnedTaskFragment,
+  owners: ReadonlySet<string>,
+): boolean {
+  return fragment.owners.some(owner => owners.has(owner));
+}
+
+function recipeScenarioScopes(track: Track, recipeFile: string): Map<string, ScenarioScope> {
+  const recipeDir = join(track.dir, 'composition', 'recipes');
+  const chain: CompiledRecipeRelease[] = [];
+  const seen = new Set<string>();
+  let currentFile: string | null = recipeFile;
+  let isolatesSelectedSources = false;
+  while (currentFile !== null) {
+    if (seen.has(currentFile)) throw new Error(`recipe base cycle at ${currentFile}`);
+    seen.add(currentFile);
+    const path = join(recipeDir, currentFile);
+    chain.push(compileRecipeFile(path, { trackRoot: track.dir }));
+    const source = readRecipeSource(path);
+    if (chain.length === 1) isolatesSelectedSources = source.isolatesSelectedSources;
+    currentFile = source.baseRecipe;
+  }
+
+  const recipe = chain[0];
+  if (recipe === undefined) throw new Error(`recipe chain is empty for ${recipeFile}`);
+  const packs = new Map(recipe.packs.map(pack => [pack.id, pack]));
+  const contracts = isolatesSelectedSources
+    ? recipe.recipe.task.contracts
+    : chain.flatMap(release => release.recipe.task.contracts);
+  const requirements = isolatesSelectedSources
+    ? recipe.recipe.task.requirements
+    : chain.flatMap(release => release.recipe.task.requirements);
+  const scopes = new Map<string, ScenarioScope>();
+
+  const ownersFor = (check: CompiledRecipeRelease['checks'][number]): Set<string> => {
+    const found = new Set([check.packId, ...(check.requiresFeatures ?? [])]);
+    const visit = (id: string): void => {
+      const pack = packs.get(id);
+      if (pack === undefined) return;
+      for (const reference of pack.requiresPacks) {
+        const dependency = packId(reference);
+        if (found.has(dependency)) continue;
+        found.add(dependency);
+        visit(dependency);
+      }
+    };
+    [...found].forEach(visit);
+    return found;
+  };
+
+  for (const check of recipe.checks) {
+    const source = check.source.replace(/^scenarios\//, '');
+    const scope = scopes.get(source) ?? {
+      features: new Map<number, Set<string>>(),
+      contractOwners: new Set<string>(),
+      requirementOwners: new Set<string>(),
+      contractText: '',
+      requirementText: '',
+    };
+    const criteria = scope.features.get(check.featureId) ?? new Set<string>();
+    criteria.add(check.criterionId);
+    scope.features.set(check.featureId, criteria);
+    for (const owner of ownersFor(check)) {
+      scope.contractOwners.add(owner);
+      scope.requirementOwners.add(owner);
+    }
+    scopes.set(source, scope);
+  }
+
+  for (const scope of scopes.values()) {
+    const selectedContracts = isolatesSelectedSources
+      ? contracts.filter(fragment => ownedFragment(fragment, scope.contractOwners))
+      : contracts;
+    const selectedRequirements = isolatesSelectedSources
+      ? requirements.filter(fragment => ownedFragment(fragment, scope.requirementOwners))
+      : requirements;
+    scope.contractText = selectedContracts.map(fragment => fragment.text).join('\n');
+    scope.requirementText = selectedRequirements.map(fragment => fragment.text).join('\n');
+  }
+  return scopes;
+}
+
+function normalizeText(text: string): string {
+  return text.replace(/\*\*/g, '').replace(/—/g, '-').toLowerCase().replace(/\s+/g, ' ').trim();
+}
+
+function promptFor(track: Track, level: string): string | null {
+  const dir = join(track.dir, 'prompts');
+  if (!existsSync(dir)) return null;
+  const file = readdirSync(dir).find(name => name.startsWith(`${level}-`) && name.endsWith('.md'));
+  return file === undefined ? null : normalizeText(readFileSync(join(dir, file), 'utf8'));
+}
+
+function referencedActors(step: CompiledStep): string[] {
+  return [step.from, step.fromActor].filter((actor): actor is string => actor !== undefined);
+}
+
+function referencedTestIds(step: CompiledStep): string[] {
+  return [step.testid, step.in?.testid].filter((id): id is string => id !== undefined);
+}
+
+function main(args: readonly string[]): number {
+  const { values } = parseArgs({ args: [...args], options: {
+    track: { type: 'string' },
+    recipe: { type: 'string' },
+  }, strict: true, allowPositionals: false });
+  const trackArg = values.track ?? null;
+  const recipeArg = values.recipe ?? null;
+  const availableTracks = listTracks();
+  const trackNames = trackArg === null
+    ? (availableTracks.length > 0 ? availableTracks : [DEFAULT_TRACK])
+    : [trackArg];
+  if (recipeArg !== null && trackNames.length !== 1) {
+    throw new Error('--recipe requires one --track');
+  }
+
+  const knownActions = new Set(ACTION_REGISTRY.ids);
+  let problems = 0;
+  let unstatedWarnings = 0;
+  let staleStatementWarnings = 0;
+  const fail = (where: string, message: string): void => {
+    console.log(`  ${where}: ${message}`);
+    problems += 1;
+  };
+
+  for (const name of trackNames) {
+    const track = loadTrack(name);
+    console.log(`# track: ${name}`);
+    const contracts = hooksByLevel(track);
+    const recipeScopes = recipeArg === null ? null : recipeScenarioScopes(track, recipeArg);
+    for (const file of readdirSync(track.scenarios).filter(candidate => candidate.endsWith('.json'))) {
+      const recipeScope = recipeScopes?.get(file);
+      if (recipeScopes !== null && recipeScope === undefined) continue;
+      const scenarioPath = join(track.scenarios, file);
+      let spec;
+      try {
+        spec = compileScenarioDefinition(readJson(scenarioPath), { source: scenarioPath });
+      } catch (error: unknown) {
+        fail(file, error instanceof Error ? error.message : String(error));
+        continue;
+      }
+      const level = String(spec.level).padStart(2, '0');
+      const hooks = recipeScope === undefined ? (contracts.get(level) ?? null) : null;
+
+      console.log(file);
+      const prompt = recipeScope === undefined
+        ? promptFor(track, level)
+        : normalizeText(recipeScope.requirementText);
+      for (const feature of spec.features) {
+        const selectedCriteria = recipeScope?.features.get(feature.id);
+        if (recipeScope !== undefined && selectedCriteria === undefined) continue;
+        const criteria = selectedCriteria === undefined
+          ? feature.criteria
+          : feature.criteria.filter(criterion => selectedCriteria.has(criterion.id));
+        for (const criterion of criteria) {
+          if (criterion.statedBy !== undefined) {
+            if (recipeScope === undefined && prompt !== null
+              && !prompt.includes(normalizeText(criterion.statedBy))) {
+              staleStatementWarnings += 1;
+              console.log(`  warn F${feature.id} ${criterion.id}: statedBy text is not in the level ${level} prompt`);
+            }
+          } else if (recipeScope === undefined && criterion.points > 0) {
+            unstatedWarnings += 1;
+            console.log(`  warn F${feature.id} ${criterion.id}: carries ${criterion.points} point(s) with no statedBy - the requirement may be unstated`);
+          }
+        }
+
+        const actors = new Set(feature.actors ?? []);
+        const steps = [...feature.setup, ...criteria.flatMap(criterion => criterion.steps)];
+        const declared = (actor: string): boolean => actors.has(actor)
+          || [...actors].some(candidate => actor.startsWith(`${candidate}-`));
+        for (const step of steps) {
+          const at = `F${feature.id} ${step.do}`;
+          if (!knownActions.has(step.do)) fail(at, `unknown step type "${step.do}"`);
+          if (step.actor !== undefined && actors.size > 0 && !declared(step.actor)) {
+            fail(at, `actor "${step.actor}" is not in the feature's actor list`);
+          }
+          for (const actor of referencedActors(step)) {
+            if (actors.size > 0 && !declared(actor)) {
+              fail(at, `actor "${actor}" is not in the feature's actor list`);
+            }
+          }
+          if (hooks !== null) {
+            for (const id of referencedTestIds(step)) {
+              if (!hooks.has(id)) fail(at, `testid "${id}" is not in the contract`);
+            }
+          }
+          if (recipeScope !== undefined) {
+            for (const id of referencedTestIds(step)) {
+              if (!recipeScope.contractText.includes(`\`${id}\``)) {
+                fail(at, `testid "${id}" is not in the selected recipe contracts`);
+              }
+            }
+          }
+        }
+
+        const points = criteria.reduce((total, criterion) => total + criterion.points, 0);
+        if (recipeScope === undefined && feature.max !== undefined && points !== feature.max) {
+          fail(`F${feature.id}`, `criteria total ${points} but max says ${feature.max}`);
+        }
+      }
+    }
+  }
+
+  const warnings = unstatedWarnings + staleStatementWarnings;
+  console.log(problems > 0
+    ? `\n${problems} error(s); ${warnings} warning(s)`
+    : warnings > 0
+      ? `\n0 errors; ${warnings} warning(s) (${unstatedWarnings} point-carrying criteria lack statedBy; ${staleStatementWarnings} statedBy references are outside level prompts)`
+      : '\n0 errors; 0 warnings');
+  return problems > 0 ? 1 : 0;
+}
+
+process.exitCode = main(process.argv.slice(2));
diff --git a/tools/stack-bench/commands/composition-cli.ts b/tools/stack-bench/commands/composition-cli.ts
new file mode 100644
index 00000000000..820698e7ea0
--- /dev/null
+++ b/tools/stack-bench/commands/composition-cli.ts
@@ -0,0 +1,321 @@
+#!/usr/bin/env node
+
+import { existsSync, readdirSync, realpathSync } from 'node:fs';
+import { join, relative, resolve, sep } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { parseArgs } from 'node:util';
+
+import { compilePackDefinition, compileRecipeFile, resolveTaskFragment } from '../src/composition/composition-compiler.js';
+import { compileScenarioDefinition } from '../src/composition/definition-compiler.js';
+import { canonicalDefinitionJson, readDefinitionJson }
+  from '../src/composition/definition-plan.js';
+import { buildRecipeRelease } from '../src/composition/recipe-release.js';
+import { composeSelectedRecipeTask, selectRecipeRelease } from '../src/composition/recipe-selection.js';
+import { TRACKS_DIR } from '../src/composition/tracks.js';
+import type { CompiledPackDefinition, CompiledRecipePlan } from '../src/composition/composition-compiler.js';
+import type { RecipeRelease } from '../src/composition/recipe-release.js';
+import type { RecipeSelectionOptions, SelectedRecipeRelease } from '../src/composition/recipe-selection.js';
+
+export { selectRecipeRelease } from '../src/composition/recipe-selection.js';
+
+interface TrackRootOptions {
+  trackRoot: string;
+}
+
+interface PackIndexEntry {
+  pack: CompiledPackDefinition;
+  path: string;
+}
+
+interface CalibrationValue {
+  id: string;
+  version: string;
+  recipe?: { id?: string; version?: string; contentSha256?: string };
+}
+
+type RecipeOptions = TrackRootOptions & RecipeSelectionOptions;
+type RecipeTaskKind = 'requirements' | 'contracts';
+
+function contained(root: string, path: string, label: string): string {
+  const absoluteRoot = realpathSync(resolve(root));
+  const candidate = resolve(path);
+  const lexical = relative(absoluteRoot, candidate);
+  if (lexical === '..' || lexical.startsWith(`..${sep}`)) throw new Error(`${label} escapes ${absoluteRoot}`);
+  if (!existsSync(candidate)) throw new Error(`${label} does not exist: ${candidate}`);
+  const absolute = realpathSync(candidate);
+  const physical = relative(absoluteRoot, absolute);
+  if (physical === '..' || physical.startsWith(`..${sep}`)) throw new Error(`${label} escapes ${absoluteRoot}`);
+  return absolute;
+}
+
+function packIndex(trackRoot: string): Map<string, PackIndexEntry> {
+  const directory = join(trackRoot, 'composition', 'packs');
+  const byRef = new Map<string, PackIndexEntry>();
+  for (const name of readdirSync(directory).filter(file => file.endsWith('.json')).sort()) {
+    const path = join(directory, name);
+    const pack = compilePackDefinition(readDefinitionJson(path, 'pack'), {
+      source: relative(trackRoot, path).replaceAll('\\', '/'),
+    });
+    const ref = `${pack.id}@${pack.version}`;
+    if (byRef.has(ref)) throw new Error(`duplicate pack release ${ref}`);
+    byRef.set(ref, { pack, path: realpathSync(path) });
+  }
+  for (const [ref, { pack }] of byRef) {
+    for (const dependency of [...pack.requiresPacks, ...pack.conflictsWith]) {
+      if (!byRef.has(dependency)) throw new Error(`${ref} references missing pack ${dependency}`);
+    }
+  }
+  return byRef;
+}
+
+export function validatePackFile(path: string, options: Partial<TrackRootOptions> = {}) {
+  const { trackRoot } = options;
+  if (trackRoot === undefined) throw new Error('pack validation requires trackRoot');
+  const root = realpathSync(resolve(trackRoot));
+  const absolute = contained(join(root, 'composition'), path, 'pack path');
+  const pack = compilePackDefinition(readDefinitionJson(absolute, 'pack'), {
+    source: relative(root, absolute).replaceAll('\\', '/'),
+  });
+  const packs = packIndex(root);
+  const ownRef = `${pack.id}@${pack.version}`;
+  const indexed = packs.get(ownRef);
+  if (!indexed || indexed.path !== absolute) throw new Error(`${ownRef} is not the indexed source ${absolute}`);
+  for (const ref of [...pack.requiresPacks, ...pack.conflictsWith]) {
+    if (!packs.has(ref)) throw new Error(`${ownRef} references missing pack ${ref}`);
+  }
+  const sourceCache = new Map();
+  for (const kind of ['requirements', 'contracts'] satisfies RecipeTaskKind[]) {
+    for (const fragment of pack.task[kind]) {
+      resolveTaskFragment(fragment, { trackRoot: root,
+        source: `${relative(root, absolute).replaceAll('\\', '/')}.task.${kind}.${fragment.id}`,
+        sourceCache });
+    }
+  }
+  const state = new Map<string, 'visiting' | 'done'>();
+  const visit = (ref: string, chain: string[] = []): void => {
+    if (state.get(ref) === 'done') return;
+    if (state.get(ref) === 'visiting') throw new Error(`pack dependency cycle: ${[...chain, ref].join(' -> ')}`);
+    state.set(ref, 'visiting');
+    const entry = packs.get(ref);
+    if (!entry) throw new Error(`missing pack release ${ref}`);
+    for (const dependency of entry.pack.requiresPacks) {
+      if (!packs.has(dependency)) throw new Error(`${ref} references missing pack ${dependency}`);
+      visit(dependency, [...chain, ref]);
+    }
+    state.set(ref, 'done');
+  };
+  visit(ownRef);
+  let criteria = 0;
+  for (const check of pack.checks) {
+    const scenarioPath = contained(root, join(root, check.source), `${pack.id}.${check.id}.source`);
+    const scenario = compileScenarioDefinition(readDefinitionJson(scenarioPath, 'scenario'), {
+      source: relative(root, scenarioPath).replaceAll('\\', '/'),
+    });
+    const feature = scenario.features.find(candidate => candidate.id === check.feature);
+    if (!feature) throw new Error(`${pack.id}.${check.id} references missing feature ${check.feature}`);
+    criteria += feature.criteria.length;
+  }
+  return { id: pack.id, version: pack.version, state: pack.state, path: absolute,
+    checkGroups: pack.checks.length, criteria, requiresPacks: pack.requiresPacks };
+}
+
+export function validateRecipeFile(path: string, options: Partial<TrackRootOptions> = {}): {
+  plan: CompiledRecipePlan;
+  release: RecipeRelease;
+} {
+  const { trackRoot } = options;
+  if (trackRoot === undefined) throw new Error('recipe validation requires trackRoot');
+  const absolute = contained(join(trackRoot, 'composition'), path, 'recipe path');
+  const plan = compileRecipeFile(absolute, { trackRoot });
+  const release = buildRecipeRelease(absolute, { trackRoot });
+  return { plan, release };
+}
+
+export function showRecipeFile(path: string, options: RecipeOptions): SelectedRecipeRelease & {
+  builderTask: ReturnType<typeof composeSelectedRecipeTask> & { note: string };
+} {
+  const compiled = validateRecipeFile(path, options);
+  const selected = selectRecipeRelease(compiled.release, options);
+  const builderTask = composeSelectedRecipeTask(compiled.plan, selected.selection);
+  return {
+    ...selected,
+    builderTask: {
+      ...builderTask,
+      note: 'Pack selection defines the requested task; a check-only filter narrows measurement inside it.',
+    },
+  };
+}
+
+const same = (left: unknown, right: unknown): boolean =>
+  canonicalDefinitionJson(left) === canonicalDefinitionJson(right);
+
+function meaningView(release: RecipeRelease) {
+  return {
+    track: release.track,
+    task: release.task,
+    checks: release.checkCatalog.map(({ stableKey, packId, checkGroupId, role, source,
+      featureId, criterionId, description }) => ({ stableKey, packId, checkGroupId, role,
+      source, featureId, criterionId, description })),
+  };
+}
+
+function scoringView(release: RecipeRelease) {
+  return { scoring: release.scoring,
+    checks: release.checkCatalog.map(({ stableKey, points }) => ({ stableKey, points })) };
+}
+
+function metadataView(release: RecipeRelease) {
+  return { id: release.id, version: release.version, state: release.state, title: release.title,
+    sequence: release.sequence, sourceManifestSha256: release.sourceManifestSha256 };
+}
+
+function matchingCalibrations(trackRoot: string, release: RecipeRelease): Array<{
+  path: string;
+  value: CalibrationValue;
+}> {
+  const directory = join(trackRoot, 'composition', 'calibrations');
+  if (!existsSync(directory)) return [];
+  return readdirSync(directory).filter(name => name.endsWith('.json')).sort()
+    .map(name => ({ path: join(directory, name),
+      value: readDefinitionJson<CalibrationValue>(join(directory, name), 'calibration') }))
+    .filter(({ value }) => value.recipe?.id === release.id
+      && value.recipe?.version === release.version
+      && value.recipe?.contentSha256 === release.contentSha256);
+}
+
+export function diffRecipeFiles(fromPath: string, toPath: string, options: Partial<TrackRootOptions> = {}) {
+  const { trackRoot } = options;
+  if (trackRoot === undefined) throw new Error('recipe diff requires trackRoot');
+  const from = validateRecipeFile(fromPath, { trackRoot }).release;
+  const to = validateRecipeFile(toPath, { trackRoot }).release;
+  const categories = {
+    meaning: !same(meaningView(from), meaningView(to)),
+    scoring: !same(scoringView(from), scoringView(to)),
+    fixtures: !same(from.components.fixture, to.components.fixture),
+    execution: from.executionSha256 !== to.executionSha256,
+    metadata: !same(metadataView(from), metadataView(to)),
+  };
+  const recipeBindingChanged = from.id !== to.id || from.version !== to.version
+    || from.meaningSha256 !== to.meaningSha256 || from.executionSha256 !== to.executionSha256
+    || from.contentSha256 !== to.contentSha256;
+  const calibrations = matchingCalibrations(trackRoot, from).map(({ path, value }) => {
+    const invalidated = [];
+    const stateChanged = from.state !== to.state;
+    if (recipeBindingChanged) invalidated.push('recipe binding');
+    if (stateChanged) invalidated.push('recipe qualification state');
+    if (categories.fixtures) invalidated.push('fixture binding');
+    if (categories.scoring) invalidated.push('zero-point control policy');
+    if (categories.meaning || categories.scoring || categories.execution || categories.fixtures) {
+      invalidated.push('reference repetitions', 'mutation repetitions');
+    }
+    if (categories.meaning || categories.scoring || categories.fixtures) invalidated.push('null repetitions');
+    if (recipeBindingChanged || stateChanged) invalidated.push('promotion decision');
+    return { id: value.id, version: value.version,
+      path: relative(trackRoot, path).replaceAll('\\', '/'), invalidated: [...new Set(invalidated)] };
+  });
+  const fragmentDiff = (kind: RecipeTaskKind) => {
+    const before = new Map(from.task[kind].map(fragment => [fragment.id, fragment]));
+    const after = new Map(to.task[kind].map(fragment => [fragment.id, fragment]));
+    return {
+      added: [...after.keys()].filter(key => !before.has(key)).sort(),
+      removed: [...before.keys()].filter(key => !after.has(key)).sort(),
+      changed: [...after.keys()].filter(key => before.has(key)
+        && !same(before.get(key), after.get(key))).sort(),
+    };
+  };
+  return {
+    from: { id: from.id, version: from.version, state: from.state, meaningSha256: from.meaningSha256,
+      executionSha256: from.executionSha256, contentSha256: from.contentSha256 },
+    to: { id: to.id, version: to.version, state: to.state, meaningSha256: to.meaningSha256,
+      executionSha256: to.executionSha256, contentSha256: to.contentSha256 },
+    categories,
+    taskFragments: {
+      requirements: fragmentDiff('requirements'),
+      contracts: fragmentDiff('contracts'),
+      composedTaskChanged: from.task.composedSha256 !== to.task.composedSha256,
+    },
+    calibrations,
+  };
+}
+
+type CliSubject = 'pack' | 'recipe';
+type CliCommand = 'validate' | 'show' | 'diff';
+
+interface ParsedArgs extends RecipeSelectionOptions {
+  json: boolean;
+  positional: string[];
+  packIds: string[];
+  checkKeys: string[];
+  track?: string;
+  trackRoot?: string;
+}
+
+interface CliArgs extends ParsedArgs {
+  subject: CliSubject;
+  command: CliCommand;
+  paths: string[];
+  trackRoot: string;
+}
+
+function parse(argv: string[]): CliArgs {
+  const { positionals, values } = parseArgs({ args: argv.slice(2), allowPositionals: true,
+    options: { track: { type: 'string' }, 'track-root': { type: 'string' },
+      pack: { type: 'string', multiple: true }, check: { type: 'string', multiple: true },
+      json: { type: 'boolean' } } });
+  const args: ParsedArgs = { json: values.json ?? false, positional: positionals,
+    packIds: (values.pack ?? []).flatMap(value => value.split(',').filter(Boolean)),
+    checkKeys: (values.check ?? []).flatMap(value => value.split(',').filter(Boolean)),
+    track: values.track,
+    trackRoot: values['track-root'] === undefined ? undefined : resolve(values['track-root']) };
+  const [subject, command, ...paths] = args.positional;
+  if (subject !== 'pack' && subject !== 'recipe') {
+    throw new Error('usage: npm run pack -- validate <file> --track <name> | npm run recipe -- validate|show <file> --track <name> | npm run recipe -- diff <from> <to> --track <name>');
+  }
+  if (command !== 'validate' && command !== 'show' && command !== 'diff') {
+    throw new Error('usage: npm run pack -- validate <file> --track <name> | npm run recipe -- validate|show <file> --track <name> | npm run recipe -- diff <from> <to> --track <name>');
+  }
+  if (subject === 'pack' && command !== 'validate') throw new Error(`pack ${command} is not supported`);
+  if ((command === 'diff' ? paths.length !== 2 : paths.length !== 1)) throw new Error(`${subject} ${command} received the wrong number of paths`);
+  if (!args.trackRoot && !args.track) throw new Error('--track or --track-root is required');
+  if ((args.packIds.length || args.checkKeys.length) && !(subject === 'recipe' && command === 'show')) {
+    throw new Error('--pack and --check are allowed only with recipe show');
+  }
+  const trackRoot = args.trackRoot ?? join(TRACKS_DIR, args.track ?? '');
+  return { ...args, subject, command, paths, trackRoot };
+}
+
+function main() {
+  const args = parse(process.argv);
+  const firstPath = args.paths[0];
+  if (firstPath === undefined) throw new Error('command requires a source path');
+  let result: object;
+  if (args.subject === 'pack') result = validatePackFile(firstPath, args);
+  else if (args.command === 'diff') {
+    const secondPath = args.paths[1];
+    if (secondPath === undefined) throw new Error('recipe diff requires two source paths');
+    result = diffRecipeFiles(firstPath, secondPath, args);
+  } else if (args.command === 'show') result = showRecipeFile(firstPath, args);
+  else {
+    const compiled = validateRecipeFile(firstPath, args);
+    result = {
+      id: compiled.release.id, version: compiled.release.version, state: compiled.release.state,
+      packs: compiled.release.components.packs.length, checks: compiled.release.checkCatalog.length,
+      points: compiled.release.checkCatalog.reduce((total, check) => total + check.points, 0),
+      meaningSha256: compiled.release.meaningSha256,
+      executionSha256: compiled.release.executionSha256,
+      contentSha256: compiled.release.contentSha256,
+    };
+  }
+  if (args.json || args.command === 'show' || args.command === 'diff') console.log(JSON.stringify(result, null, 2));
+  else if ('id' in result && 'version' in result && 'state' in result) {
+    console.log(`${String(result.id)}@${String(result.version)} ${String(result.state)}: valid`);
+  } else throw new Error('validation result has no release identity');
+}
+
+if (process.argv[1] && pathToFileURL(process.argv[1]).href === import.meta.url) {
+  try { main(); }
+  catch (error) {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 2;
+  }
+}
diff --git a/tools/stack-bench/commands/container-smoke.ts b/tools/stack-bench/commands/container-smoke.ts
new file mode 100644
index 00000000000..9ea5f297de3
--- /dev/null
+++ b/tools/stack-bench/commands/container-smoke.ts
@@ -0,0 +1,200 @@
+#!/usr/bin/env node
+// Use only ephemeral resources owned by this smoke run.
+
+import { spawn, execFileSync } from 'node:child_process';
+import type { ChildProcess } from 'node:child_process';
+import { cpSync, existsSync, mkdirSync, mkdtempSync, rmSync } from 'node:fs';
+import { createServer } from 'node:net';
+import type { AddressInfo } from 'node:net';
+import { basename, join, resolve } from 'node:path';
+import { tmpdir } from 'node:os';
+import { setTimeout as delay } from 'node:timers/promises';
+
+import { killTree, pidsOnPort, processIdentity } from '../src/runtime/platform.js';
+import { createBackendLease, readBackendLease, writeBackendLease } from '../src/runtime/backend-lease.js';
+import { fetchStatus } from '../src/runtime/readiness.js';
+import { DEFAULT_BUILD_IMAGE } from '../src/composition/product-config.js';
+import { containerReachableSpacetimeUri } from '../src/runtime/spacetime-target.js';
+import { CODING_CONTAINER_APP_ROOT, CODING_CONTAINER_SPACETIME_CLI,
+  codingContainerAgentExecOptions } from '../src/runtime/coding-container-policy.js';
+import { ARTIFACT_FILE } from '../src/evidence/artifacts.js';
+
+import { STACK_BENCH_ROOT as ROOT, compiledEntrypoint } from '../src/package-root.js';
+const REPO = resolve(ROOT, '..', '..');
+const IMAGE = process.env.STACK_BENCH_IMAGE ?? DEFAULT_BUILD_IMAGE;
+const CLI = process.env.SPACETIME_BIN ?? join(REPO, 'target', 'release',
+  process.platform === 'win32' ? 'spacetimedb-cli.exe' : 'spacetimedb-cli');
+const RUN_BUILD = compiledEntrypoint('container', 'run-build.js');
+const FIXTURE = join(ROOT, 'tests', 'fixtures', 'spacetime-module');
+
+interface PreparedContainerIdentity {
+  containerName: string;
+  identity: string;
+  networkMode: string | null;
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function parsePreparedContainerIdentity(text: string): PreparedContainerIdentity {
+  const value: unknown = JSON.parse(text.trim().split(/\r?\n/).pop() ?? '');
+  if (!isRecord(value)) throw new Error('prepared container identity is invalid');
+  const record = value;
+  if (typeof record.containerName !== 'string' || typeof record.identity !== 'string'
+    || (record.networkMode !== null && typeof record.networkMode !== 'string')) {
+    throw new Error('prepared container identity is invalid');
+  }
+  return { containerName: record.containerName, identity: record.identity, networkMode: record.networkMode };
+}
+
+async function freePort() {
+  const server = createServer();
+  await new Promise<void>((ok, fail) => server.listen({ port: 0, host: '127.0.0.1' }, ok).once('error', fail));
+  const address = server.address();
+  if (!address || typeof address === 'string') throw new Error('could not allocate a TCP port');
+  const port: AddressInfo['port'] = address.port;
+  await new Promise(ok => server.close(ok));
+  return port;
+}
+
+async function waitFor(check: () => boolean | Promise<boolean>, timeoutMs: number, description: string): Promise<void> {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    if (await check()) return;
+    await delay(250);
+  }
+  throw new Error(`timed out waiting for ${description}`);
+}
+
+async function main() {
+  if (!existsSync(CLI)) throw new Error(`local SpacetimeDB CLI is missing: ${CLI}`);
+  execFileSync('docker', ['image', 'inspect', IMAGE], { stdio: 'pipe' });
+
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-container-smoke-'));
+  const app = join(root, 'app');
+  const dataDir = join(root, 'spacetime-data');
+  const port = await freePort();
+  const uri = `http://127.0.0.1:${port}`;
+  const module = `stackbench-container-smoke-${process.pid}`;
+  const containerName = `stack-bench-${basename(root)}`;
+  const leasePath = join(root, ARTIFACT_FILE.backendLease);
+  let host: ChildProcess | null = null;
+  let dev: ChildProcess | null = null;
+  let output = '';
+
+  try {
+    mkdirSync(app, { recursive: true });
+    host = spawn(CLI, ['start', '--listen-addr', `127.0.0.1:${port}`, '--data-dir', dataDir],
+      { stdio: 'ignore', windowsHide: true });
+    await waitFor(async () => {
+      const status = await fetchStatus(`${uri}/v1/ping`, { timeoutMs: 5000 });
+      return status !== null && status >= 200 && status < 300;
+    }, 120_000, `dedicated SpacetimeDB host on :${port}`);
+
+    const lease = createBackendLease({ runId: basename(root), backend: 'spacetime',
+      track: 'container-smoke', runIndex: 0, serverUri: uri, module, dataDir });
+    lease.state = 'active';
+    lease.resources.launchedProcess = host.pid ? processIdentity(host.pid) : null;
+    lease.resources.listenerProcesses = pidsOnPort(port).map(pid => processIdentity(pid))
+      .filter((identity): identity is NonNullable<typeof identity> => identity !== null);
+    writeBackendLease(leasePath, lease);
+
+    const prepared = execFileSync(process.execPath,
+      [RUN_BUILD, '--app', app, '--backend', 'spacetime', '--image', IMAGE, '--prepare-only'],
+      { encoding: 'utf8', stdio: 'pipe', maxBuffer: 16 * 1024 * 1024,
+        env: { ...process.env, STACK_BENCH_LEASE: leasePath,
+          STACK_BENCH_LEASE_TOKEN: lease.ownershipToken, STACK_BENCH_STDB_URI: uri } });
+    const identity = parsePreparedContainerIdentity(prepared);
+    if (identity.containerName !== containerName) {
+      throw new Error(`prepared unexpected container ${identity.containerName}`);
+    }
+    const leasedContainer = readBackendLease(leasePath,
+      { token: lease.ownershipToken, backend: 'spacetime', active: true }).resources.buildContainer;
+    if (!leasedContainer || identity.identity.split(' ')[0] !== leasedContainer.id) {
+      throw new Error('prepared container identity was not recorded in the backend lease');
+    }
+    if (!leasedContainer.image || !/^sha256:[0-9a-f]{64}$/.test(leasedContainer.image)) {
+      throw new Error(`prepared container did not record an immutable image id: ${leasedContainer.image}`);
+    }
+
+    cpSync(FIXTURE, join(app, 'spacetimedb'), { recursive: true });
+    const agentExec = ['exec', ...codingContainerAgentExecOptions()];
+    const cliAccess = execFileSync('docker', [...agentExec, containerName, 'sh', '-c',
+      `stat -c '%a %U %G' ${CODING_CONTAINER_SPACETIME_CLI}; test -x ${CODING_CONTAINER_SPACETIME_CLI}`],
+    { encoding: 'utf8', stdio: 'pipe' });
+    if (!/^755 root root/m.test(cliAccess)) throw new Error(`unexpected CLI access: ${cliAccess.trim()}`);
+    execFileSync('docker', [...agentExec, containerName, 'sh', '-c',
+      `umask 000; cd ${CODING_CONTAINER_APP_ROOT}/spacetimedb && npm install --no-audit --no-fund`],
+    { stdio: 'pipe' });
+
+    const startedDev = spawn('docker', [...agentExec, '-i', containerName, 'sh', '-c',
+      `umask 000; cd ${CODING_CONTAINER_APP_ROOT}/spacetimedb && ${CODING_CONTAINER_SPACETIME_CLI} dev ${module} `
+      + `--project-path ${CODING_CONTAINER_APP_ROOT}/spacetimedb --module-path . `
+      + '--server-only --skip-generate '
+      + `-s ${containerReachableSpacetimeUri({ resources: { serverUri: uri,
+        buildContainer: lease.resources.buildContainer } }, identity.networkMode)} -y`],
+    { stdio: ['ignore', 'pipe', 'pipe'], windowsHide: true });
+    dev = startedDev;
+    const collect = (chunk: Buffer): void => { output = (output + chunk.toString()).slice(-128 * 1024); };
+    startedDev.stdout?.on('data', collect);
+    startedDev.stderr?.on('data', collect);
+
+    await waitFor(() => {
+      if (/Published successfully!/.test(output)) return true;
+      if (startedDev.exitCode !== null) throw new Error(`spacetime dev exited ${startedDev.exitCode}:\n${output}`);
+      return false;
+    }, 240_000, 'containerized module publish');
+
+    const sql = execFileSync(CLI, ['sql', module, 'SELECT * FROM smoke_item', '-s', uri],
+      { encoding: 'utf8', stdio: 'pipe' });
+    if (!/\bid\s*\|\s*value\b/.test(sql)) throw new Error(`SQL verification failed:\n${sql}`);
+    if (startedDev.exitCode !== null) throw new Error('spacetime dev did not remain alive as a watcher');
+
+    // Publishing and log streaming must retain one authenticated identity. A
+    // prior dev bug published with a token stored only in a Config clone, then
+    // directly logged in again for logs and received an authorization error.
+    await delay(2_000);
+    const logStreamingAuthorized = !/Log streaming error:.*not authorized/s.test(output);
+    console.log(JSON.stringify({ ok: true, image: IMAGE, container: identity.identity,
+      host: { uri, listenerPids: pidsOnPort(port) }, published: true, sqlVerified: true,
+      watcherAlive: true, leasedContainer: true, immutableImagePinned: true,
+      logStreamingAuthorized }, null, 2));
+    if (!logStreamingAuthorized) {
+      throw new Error('`spacetime dev` published successfully but its log stream was not authorized');
+    }
+    // The grader resets by republishing the same named database from this exact
+    // leased container. Prove that `-y` retained a reusable local identity,
+    // rather than merely proving that the first anonymous-looking publish ran.
+    execFileSync('docker', [...agentExec, containerName, 'sh', '-c',
+      'for process in /proc/[0-9]*; do '
+      + 'test "$(readlink "$process/exe" 2>/dev/null)" = /deps/.spacetimedb-cli '
+      + '&& kill -TERM "${process##*/}" || true; done'], { stdio: 'pipe' });
+    await waitFor(() => startedDev.exitCode !== null, 15_000, 'spacetime dev to stop before reset publish');
+    const targetUri = containerReachableSpacetimeUri({ resources: { serverUri: uri,
+      buildContainer: lease.resources.buildContainer } }, identity.networkMode);
+    execFileSync('docker', [...agentExec, containerName, 'sh', '-c',
+      `umask 000; cd ${CODING_CONTAINER_APP_ROOT}/spacetimedb && ${CODING_CONTAINER_SPACETIME_CLI} publish ${module} `
+      + `--module-path . -s ${targetUri} --delete-data -y`],
+    { stdio: 'pipe', timeout: 240_000 });
+    const afterReset = execFileSync(CLI, ['sql', module, 'SELECT * FROM smoke_item', '-s', uri],
+      { encoding: 'utf8', stdio: 'pipe' });
+    if (!/\bid\s*\|\s*value\b/.test(afterReset)) {
+      throw new Error(`SQL verification after reset publish failed:\n${afterReset}`);
+    }
+    console.log(JSON.stringify({ resetRepublished: true, resetSqlVerified: true }));
+  } finally {
+    if (dev && dev.exitCode === null) dev.kill('SIGTERM');
+    try { execFileSync('docker', ['rm', '-f', containerName], { stdio: 'ignore' }); } catch { /* absent */ }
+    // The port was proven unused before this script started the host. Kill only
+    // listeners on that exact ephemeral port, then the wrapper if it remains.
+    for (const pid of pidsOnPort(port)) killTree(pid);
+    if (host && host.exitCode === null) killTree(host.pid);
+    rmSync(root, { recursive: true, force: true });
+  }
+}
+
+main().catch(error => {
+  console.error(error.stack ?? error.message);
+  process.exitCode = 1;
+});
diff --git a/tools/stack-bench/commands/definition-snapshots.ts b/tools/stack-bench/commands/definition-snapshots.ts
new file mode 100644
index 00000000000..9f227e19d30
--- /dev/null
+++ b/tools/stack-bench/commands/definition-snapshots.ts
@@ -0,0 +1,80 @@
+import { mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+import { compileScenarioDefinition } from '../src/composition/definition-compiler.js';
+import { canonicalDefinitionJson, compileTrackPlan } from '../src/composition/definition-plan.js';
+import { listTracks } from '../src/composition/tracks.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+const SNAPSHOT_DIR = join(STACK_BENCH_ROOT, 'tests', 'snapshots', 'definitions');
+const ALL_ACTIONS = join(STACK_BENCH_ROOT, 'tests', 'fixtures', 'definitions', 'all-actions.json');
+
+function atomicWrite(path: string, contents: string): void {
+  mkdirSync(dirname(path), { recursive: true });
+  const temporary = `${path}.tmp-${process.pid}`;
+  writeFileSync(temporary, contents);
+  renameSync(temporary, path);
+}
+
+interface DefinitionSnapshot {
+  name: string;
+  value: unknown;
+}
+
+export function currentDefinitionSnapshots(): DefinitionSnapshot[] {
+  const entries: DefinitionSnapshot[] = listTracks({ includeInternal: true }).map(name => ({
+    name: `${name}.snapshot.json`,
+    value: compileTrackPlan(name),
+  }));
+  entries.push({
+    name: 'all-actions.snapshot.json',
+    value: compileScenarioDefinition(JSON.parse(readFileSync(ALL_ACTIONS, 'utf8')), {
+      source: ALL_ACTIONS,
+    }),
+  });
+  return entries.sort((a, b) => a.name.localeCompare(b.name));
+}
+
+export interface DefinitionSnapshotResult {
+  checked: number;
+  changed: string[];
+}
+
+export function checkDefinitionSnapshots(
+  { update = false }: { update?: boolean } = {},
+): DefinitionSnapshotResult {
+  const entries = currentDefinitionSnapshots();
+  const changed: string[] = [];
+  for (const entry of entries) {
+    const path = join(SNAPSHOT_DIR, entry.name);
+    const actual = canonicalDefinitionJson(entry.value);
+    let expected: string | null = null;
+    try {
+      expected = readFileSync(path, 'utf8').replaceAll('\r\n', '\n');
+    } catch (error: unknown) {
+      if (!(error instanceof Error && 'code' in error && error.code === 'ENOENT')) throw error;
+    }
+    if (expected === actual) continue;
+    changed.push(entry.name);
+    if (update) atomicWrite(path, actual);
+  }
+  if (changed.length > 0 && !update) {
+    throw new Error(
+      `definition snapshot drift: ${changed.join(', ')}; inspect the semantic change, then run npm run check:definition-snapshots -- --update`,
+    );
+  }
+  return { checked: entries.length, changed };
+}
+
+function main(): void {
+  const args = new Set(process.argv.slice(2));
+  for (const arg of args) {
+    if (arg !== '--update') throw new Error(`unknown argument ${arg}`);
+  }
+  const result = checkDefinitionSnapshots({ update: args.has('--update') });
+  console.log(`${result.checked} definition snapshots checked${
+    result.changed.length > 0 ? `; ${result.changed.length} updated` : '; no drift'}`);
+}
+
+if (process.argv[1] && pathToFileURL(process.argv[1]).href === import.meta.url) main();
diff --git a/tools/stack-bench/commands/fault-injection.ts b/tools/stack-bench/commands/fault-injection.ts
new file mode 100644
index 00000000000..fc8f324d6be
--- /dev/null
+++ b/tools/stack-bench/commands/fault-injection.ts
@@ -0,0 +1,250 @@
+#!/usr/bin/env node
+// Fault injection may remove only resources owned by its lease.
+
+import assert from 'node:assert/strict';
+import { execFileSync, spawn } from 'node:child_process';
+import type { ChildProcess } from 'node:child_process';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { createServer } from 'node:http';
+import type { Server } from 'node:http';
+import type { AddressInfo } from 'node:net';
+import { basename, join, resolve } from 'node:path';
+import { tmpdir } from 'node:os';
+import { setTimeout as delay } from 'node:timers/promises';
+
+import { createBackendLease, writeBackendLease } from '../src/runtime/backend-lease.js';
+import { killTree, pidsOnPort } from '../src/runtime/platform.js';
+import { ARTIFACT_FILE, readArtifact, readArtifactPayload } from '../src/evidence/artifacts.js';
+import { DEFAULT_BUILD_IMAGE } from '../src/composition/product-config.js';
+
+import { STACK_BENCH_ROOT as ROOT, compiledEntrypoint } from '../src/package-root.js';
+const REPO = resolve(ROOT, '..', '..');
+const IMAGE = process.env.STACK_BENCH_IMAGE ?? DEFAULT_BUILD_IMAGE;
+const CLI = process.env.SPACETIME_BIN ?? join(REPO, 'target', 'release',
+  process.platform === 'win32' ? 'spacetimedb-cli.exe' : 'spacetimedb-cli');
+const RUN_BUILD = compiledEntrypoint('container', 'run-build.js');
+interface ContainerIdentity { id: string; running: boolean; }
+interface ExitResult { code: number | null; signal: NodeJS.Signals | null; }
+interface FaultLeaseResources {
+  listenerProcesses: Array<{ pid: number; startMarker: string }>;
+  buildContainer: { id: string; image: string; running: boolean; removedAt?: string };
+  locks: { releasedAt?: string }[];
+}
+interface FaultLeaseEvidence {
+  runId: string;
+  state: string;
+  stoppedAt?: string;
+  releasedAt?: string;
+  resources: FaultLeaseResources;
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+async function freePort() {
+  const server = createServer((_request, response) => response.end('foreign'));
+  await new Promise<void>((ok, fail) => server.listen({ port: 0, host: '127.0.0.1' }, ok).once('error', fail));
+  const address = server.address();
+  if (!address || typeof address === 'string') throw new Error('could not allocate a TCP port');
+  const port: AddressInfo['port'] = address.port;
+  await new Promise(ok => server.close(ok));
+  return port;
+}
+
+function inspectContainer(target: string): ContainerIdentity | null {
+  try {
+    const output = execFileSync('docker', ['inspect', '--format',
+      '{{.Id}} {{.State.Running}}', target], { encoding: 'utf8', stdio: 'pipe' }).trim();
+    const [id, running] = output.split(/\s+/, 2);
+    if (!id) return null;
+    return { id, running: running === 'true' };
+  } catch { return null; }
+}
+
+function startContainer(name: string): ContainerIdentity {
+  const id = execFileSync('docker', ['run', '-d', '--init', '--name', name,
+    IMAGE, 'sleep', 'infinity'], { encoding: 'utf8', stdio: 'pipe' }).trim();
+  assert.ok(id, `Docker did not return an id for ${name}`);
+  const container = inspectContainer(id);
+  if (!container) throw new Error(`Docker did not return a running container for ${name}`);
+  return container;
+}
+
+function removeExactContainer(identity: ContainerIdentity | { id: string } | null): void {
+  if (!identity) return;
+  const current = inspectContainer(identity.id);
+  if (!current || current.id !== identity.id) return;
+  execFileSync('docker', ['rm', '-f', identity.id], { stdio: 'ignore' });
+}
+
+async function waitForExit(child: ChildProcess, timeoutMs: number): Promise<ExitResult> {
+  return new Promise<ExitResult>((resolveExit, reject) => {
+    const timeout = setTimeout(() => reject(new Error(
+      `benchmark runner did not exit after injected failure within ${timeoutMs}ms`)), timeoutMs);
+    child.once('exit', (code: number | null, signal: NodeJS.Signals | null) => {
+      clearTimeout(timeout);
+      resolveExit({ code, signal });
+    });
+  });
+}
+
+async function assertRefusesUnleasedCollision() {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-container-collision-'));
+  const app = join(root, 'app');
+  const name = `stack-bench-${basename(root)}`;
+  const leasePath = join(root, ARTIFACT_FILE.backendLease);
+  let foreign = null;
+  try {
+    mkdirSync(app, { recursive: true });
+    foreign = startContainer(name);
+    const lease = createBackendLease({ runId: `collision-${process.pid}`, backend: 'spacetime',
+      track: 'fault-injection', runIndex: 0, serverUri: 'http://127.0.0.1:1',
+      module: `collision-${process.pid}`, dataDir: join(root, 'data') });
+    lease.state = 'active';
+    writeBackendLease(leasePath, lease);
+
+    let refused = false;
+    try {
+      execFileSync(process.execPath,
+        [RUN_BUILD, '--app', app, '--backend', 'spacetime', '--prepare-only'],
+        { stdio: 'pipe', env: { ...process.env, STACK_BENCH_LEASE: leasePath,
+          STACK_BENCH_LEASE_TOKEN: lease.ownershipToken } });
+    } catch (error: unknown) {
+      const childError = error instanceof Error && isRecord(error) ? error : null;
+      refused = childError?.status === 3
+        && /refusing to adopt existing unleased container/.test(String(childError?.stderr));
+    }
+    assert.equal(refused, true, 'launcher did not explicitly refuse an unleased same-name container');
+    assert.deepEqual(inspectContainer(foreign.id), foreign,
+      'collision refusal changed or stopped the foreign container');
+  } finally {
+    removeExactContainer(foreign);
+    rmSync(root, { recursive: true, force: true });
+  }
+}
+
+async function main() {
+  assert.ok(existsSync(CLI), `local SpacetimeDB CLI is missing: ${CLI}`);
+  execFileSync('docker', ['image', 'inspect', IMAGE], { stdio: 'pipe' });
+  await assertRefusesUnleasedCollision();
+
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-fault-'));
+  const app = join(root, 'app');
+  const out = join(root, 'out');
+  const markerPath = join(app, '.fault-ready.json');
+  const port = await freePort();
+  const uri = `http://127.0.0.1:${port}`;
+  const foreignName = `stack-bench-foreign-${process.pid}-${Date.now()}`;
+  let foreignContainer: ContainerIdentity | null = null;
+  let foreignServer: Server | null = null;
+  let bench: ChildProcess | null = null;
+  let marker: { lease: { runId: string; state: string; resources: FaultLeaseResources }; leasePath: string; phase: string } | null = null;
+  let output = '';
+
+  try {
+    mkdirSync(app, { recursive: true });
+    mkdirSync(out, { recursive: true });
+    foreignContainer = startContainer(foreignName);
+    const startedForeignServer = createServer((_request, response) => response.end('foreign'));
+    foreignServer = startedForeignServer;
+    await new Promise<void>((ok, fail) => startedForeignServer.listen({ port: 0, host: '127.0.0.1' }, ok).once('error', fail));
+    const foreignAddress = startedForeignServer.address();
+    if (!foreignAddress || typeof foreignAddress === 'string') throw new Error('could not allocate foreign TCP port');
+    const foreignUri = `http://127.0.0.1:${foreignAddress.port}`;
+
+    bench = spawn(process.execPath,
+      [compiledEntrypoint('commands', 'bench.js'), '--backend', 'spacetime', '--track', 'loop',
+        '--levels', '1', '--agent-adapter', 'fault-injection', '--app', app, '--out', out,
+        '--url', `file:///${app.replace(/\\/g, '/')}/index.html`],
+      { env: { ...process.env, STACK_BENCH_STDB_URI: uri, STACK_BENCH_IMAGE: IMAGE,
+        SPACETIME_BIN: CLI },
+        stdio: ['ignore', 'pipe', 'pipe'], windowsHide: true });
+    const collect = (chunk: Buffer): void => { output = (output + chunk.toString()).slice(-256 * 1024); };
+    bench.stdout?.on('data', collect);
+    bench.stderr?.on('data', collect);
+    const exited = await waitForExit(bench, 300_000);
+    assert.notEqual(exited.code, 0, 'injected coding-agent failure unexpectedly exited zero');
+    assert.ok(existsSync(markerPath), `fault marker was not written before failure:\n${output}`);
+    const markerValue: unknown = JSON.parse(readFileSync(markerPath, 'utf8'));
+    if (!isRecord(markerValue) || !isRecord(markerValue.lease) || !isRecord(markerValue.lease.resources)
+      || typeof markerValue.leasePath !== 'string' || typeof markerValue.phase !== 'string'
+      || typeof markerValue.lease.runId !== 'string' || typeof markerValue.lease.state !== 'string') {
+      throw new Error('fault marker is invalid');
+    }
+    const markerResources = markerValue.lease.resources;
+    if (!Array.isArray(markerResources.listenerProcesses) || !isRecord(markerResources.buildContainer)
+      || typeof markerResources.buildContainer.id !== 'string') throw new Error('fault marker resources are invalid');
+    marker = { phase: markerValue.phase, leasePath: markerValue.leasePath,
+      lease: { runId: markerValue.lease.runId, state: markerValue.lease.state,
+        resources: { listenerProcesses: markerResources.listenerProcesses.filter((item): item is {
+          pid: number; startMarker: string } => isRecord(item) && typeof item.pid === 'number'
+            && typeof item.startMarker === 'string'), buildContainer: {
+          id: markerResources.buildContainer.id, image: String(markerResources.buildContainer.image ?? ''),
+          running: markerResources.buildContainer.running === true }, locks: [] } } };
+    assert.equal(marker.phase, 'restart-stopped',
+      'fault was not injected inside the backend restart window');
+    assert.equal(marker.lease.state, 'restarting');
+    assert.match(marker.lease.resources.buildContainer.image, /^sha256:[0-9a-f]{64}$/,
+      'build container lease did not record an immutable image id');
+
+    const evidencePath = join(out, ARTIFACT_FILE.backendLease);
+    assert.ok(existsSync(evidencePath), `teardown did not preserve lease evidence:\n${output}`);
+    const evidence = readArtifactPayload<FaultLeaseEvidence>(evidencePath, { expectedKind: 'backend_lease_evidence' });
+    const preflight = readArtifact(join(out, ARTIFACT_FILE.preflight),
+      { expectedKind: 'preflight' });
+    assert.equal(preflight.payload.ok, true, 'paid-run preflight did not pass');
+    assert.equal(preflight.attempt.parentId, marker.lease.runId,
+      'preflight evidence is not attached to the run it admitted');
+    assert.equal(evidence.runId, marker.lease.runId);
+    assert.equal(evidence.state, 'released', 'benchmark lease did not reach its terminal state');
+    assert.ok(evidence.stoppedAt, 'benchmark-owned SpacetimeDB host has no stop evidence');
+    assert.ok(evidence.releasedAt, 'benchmark lease has no release evidence');
+    assert.deepEqual(evidence.resources.listenerProcesses, []);
+    assert.equal(evidence.resources.buildContainer.running, false,
+      'benchmark-owned build container was not marked removed');
+    assert.ok(evidence.resources.buildContainer.removedAt);
+    assert.ok(evidence.resources.locks.every(lock => lock.releasedAt),
+      'one or more resource locks were not released');
+    assert.equal(inspectContainer(marker.lease.resources.buildContainer.id), null,
+      'benchmark-owned build container survived fatal cleanup');
+    assert.equal(pidsOnPort(port).length, 0, 'benchmark-owned listener survived fatal cleanup');
+    assert.equal(existsSync(marker.leasePath), false, 'private runtime lease was not removed');
+
+    assert.equal((await fetch(foreignUri)).status, 200,
+      'foreign listener was disturbed by benchmark cleanup');
+    assert.deepEqual(inspectContainer(foreignContainer.id), foreignContainer,
+      'foreign container was changed or removed by benchmark cleanup');
+
+    console.log(JSON.stringify({ ok: true, injectedAt: 'restart-stopped-before-replacement',
+      benchmarkHostStopped: true, benchmarkContainerRemoved: true, locksReleased: true,
+      privateLeaseRemoved: true, foreignListenerSurvived: true,
+      foreignContainerSurvived: true, unleasedCollisionRefused: true,
+      immutableImagePinned: true }, null, 2));
+  } finally {
+    if (bench?.exitCode === null) {
+      killTree(bench.pid);
+      await delay(500);
+    }
+    if (marker?.lease?.resources?.buildContainer) {
+      removeExactContainer(marker.lease.resources.buildContainer);
+    }
+    for (const identity of marker?.lease?.resources?.listenerProcesses ?? []) {
+      if (pidsOnPort(port).includes(String(identity.pid))) killTree(identity.pid);
+    }
+    if (foreignServer) {
+      const server = foreignServer;
+      // The verification fetch uses a keep-alive connection. Waiting on
+      // close() alone can hold CI open until Undici retires that socket.
+      server.closeAllConnections();
+      await new Promise<void>((ok, fail) => server.close(error => error ? fail(error) : ok()));
+    }
+    removeExactContainer(foreignContainer);
+    rmSync(root, { recursive: true, force: true });
+  }
+}
+
+main().catch(error => {
+  console.error(error.stack ?? error.message);
+  process.exitCode = 1;
+});
diff --git a/tools/stack-bench/commands/leak-audit.ts b/tools/stack-bench/commands/leak-audit.ts
new file mode 100644
index 00000000000..11e156302a2
--- /dev/null
+++ b/tools/stack-bench/commands/leak-audit.ts
@@ -0,0 +1,287 @@
+#!/usr/bin/env node
+// Use the recorded cwd as the app boundary; transcript folder names are not authority.
+
+import { readdirSync, readFileSync, existsSync, statSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { homedir } from 'node:os';
+import { pathToFileURL } from 'node:url';
+import { parseArgs } from 'node:util';
+import { CODING_CONTAINER_APP_ROOT } from '../src/runtime/coding-container-policy.js';
+
+// --dir is exclusive. --app resolves its matching CLI transcript directory.
+function transcriptsFor(appDir: string): string[] {
+  const base = join(homedir(), '.claude', 'projects');
+  if (!existsSync(base)) return [];
+  const want = resolve(appDir).replace(/[\\/:]/g, '-').toLowerCase();
+  return readdirSync(base)
+    .filter(d => d.toLowerCase() === want || d.toLowerCase() === want.replace(/^-+/, ''))
+    .map(d => join(base, d));
+}
+
+const norm = (value: unknown): string => String(value ?? '')
+  .replace(/\\/g, '/').replace(/^["']|["']$/g, '').toLowerCase();
+
+// Ignore dependencies, build output, and this session's CLI task output.
+const IGNORE = /node_modules|\.git[/\\]|package-lock\.json|\/dist\/|\.map$|[/\\]temp[/\\]claude[/\\].*[/\\]tasks[/\\]/;
+
+// Commands that pull file contents into context.
+const READER = /(?:^|[;&|]\s*)(?:cat|head|tail|less|more|type|grep|rg|ack|find|ls\s+-\w*l|sed\s+-n|awk)\s+([^;&|]+)/g;
+
+// Network targets in a shell command: any URL, and a raw socket target. A
+// build legitimately reaches its own web, database, and SpacetimeDB ports;
+// every other local port belongs to another run, the controller, or the
+// dashboard. Internet targets are recorded, not judged.
+const URL_TARGET = /https?:\/\/([^\s/'"`]+)/gi;
+const SOCKET_TARGET = /(?:^|[;&|]\s*)(?:nc|ncat|netcat)\s+(?:-\S+\s+)*([\w.-]+)\s+(\d{2,5})\b/g;
+const LOCAL_HOST = /^(?:127\.\d+\.\d+\.\d+|localhost|0\.0\.0\.0|\[::1\]|host\.docker\.internal|10\.\d+\.\d+\.\d+|172\.(?:1[6-9]|2\d|3[01])\.\d+\.\d+|192\.168\.\d+\.\d+)$/i;
+
+export interface NetworkTarget {
+  host: string;
+  port: number | null;
+}
+
+export function networkTargetsFromBash(command: unknown): NetworkTarget[] {
+  const targets: NetworkTarget[] = [];
+  const text = String(command ?? '');
+  for (const match of text.matchAll(URL_TARGET)) {
+    const authority = (match[1] ?? '').replace(/^[^@]*@/, '');
+    const port = authority.match(/:(\d{1,5})$/)?.[1];
+    targets.push({ host: authority.replace(/:\d{1,5}$/, ''), port: port ? Number(port) : null });
+  }
+  for (const match of text.matchAll(SOCKET_TARGET)) {
+    targets.push({ host: match[1] ?? '', port: Number(match[2]) });
+  }
+  return targets;
+}
+
+const networkKind = (target: NetworkTarget, ownPorts: ReadonlySet<number>): string | null => {
+  if (!LOCAL_HOST.test(target.host)) return 'network (internet)';
+  if (target.port !== null && ownPorts.has(target.port)) return null;
+  return 'NETWORK / OTHER RUN';
+};
+
+const CLASSES: Array<readonly [RegExp, string]> = [
+  [/[/\\]stack-bench(?:[/\\]|$)/, 'GRADER / TEST SPECS'],
+  [/\.claude[/\\]projects.*memory|[/\\]memory[/\\].*\.md$/, 'BENCHMARK NOTES'],
+  [/scenarios[/\\].*\.json|grade\.(?:js|ts)|mutation|check-scenarios/, 'GRADER / TEST SPECS'],
+  [/contracts[/\\].*\.json|appendix-\d+\.md|walk\.(?:js|ts)|lint\.(?:js|ts)/, 'CONTRACT / LINTER'],
+  [/prompts[/\\]|test-plans[/\\]|GRADING|RUBRIC/, 'PROMPTS / RUBRIC'],
+  [/[/\\]skills[/\\]/, 'skill docs (intended)'],
+  [/backends[/\\].*\.md|CLAUDE\.md|README/, 'setup docs (intended)'],
+];
+const classify = (path: string): string => CLASSES.find(([pattern]) => pattern.test(path))?.[1]
+  ?? 'other';
+
+// The shallowest recorded cwd is the app boundary when --app is absent.
+function sessionCwd(lines: string[]): string | null {
+  const seen = new Set<string>();
+  for (const l of lines) {
+    const m = l.match(/"cwd":"((?:[^"\\]|\\.)*)"/);
+    if (m?.[1]) seen.add(norm(m[1].replace(/\\\\/g, '/')));
+  }
+  if (!seen.size) return null;
+  return [...seen].sort((a, b) => a.split('/').length - b.split('/').length || a.length - b.length)[0]
+    ?? null;
+}
+
+export function pathsFromBash(command: unknown): string[] {
+  const out: string[] = [];
+  for (const match of String(command).matchAll(READER)) {
+    const argumentsText = match[1];
+    if (!argumentsText) continue;
+    for (const tokRaw of argumentsText.split(/\s+/)) {
+      const t = tokRaw.replace(/^["']|["']$/g, '');
+      if (!t || t.startsWith('-')) continue;
+      if (/[*?]/.test(t) || /\//.test(t) || /\\/.test(t) || /\.\w+$/.test(t)) out.push(t);
+    }
+  }
+  return out;
+}
+
+// Count file-tool reads only after their result confirms success.
+// Bash reads count unless the command fails.
+interface AuditHit {
+  path: string;
+  via: string;
+  kind: string;
+  unresolved?: boolean;
+}
+
+interface PendingRead {
+  paths: string[];
+  network: Array<{ path: string; kind: string }>;
+  via: string;
+}
+
+interface TranscriptAudit {
+  file: string;
+  cwd: string | null;
+  fileTool: number;
+  bashReads: number;
+  hits: AuditHit[];
+  refused: AuditHit[];
+}
+
+interface AuditResult extends TranscriptAudit {
+  root: string;
+}
+
+interface TranscriptContent {
+  type?: string;
+  name?: string;
+  id?: string;
+  tool_use_id?: string;
+  is_error?: boolean;
+  input?: { file_path?: string; path?: string; pattern?: string; command?: string };
+}
+
+export function auditTranscript(file: string, boundary: string | null,
+  { ownPorts = [] }: { ownPorts?: readonly number[] } = {}): TranscriptAudit {
+  const own = new Set(ownPorts);
+  const lines = readFileSync(file, 'utf8').split('\n').filter(Boolean);
+  // Container transcripts use /app; --app is its host path.
+  const recorded = sessionCwd(lines);
+  const cwd = recorded === CODING_CONTAINER_APP_ROOT ? recorded : (boundary ?? recorded);
+  const hits: AuditHit[] = [];
+  const refused: AuditHit[] = [];
+  const pending = new Map<string, PendingRead>();
+  let fileTool = 0, bashReads = 0;
+
+  for (const line of lines) {
+    let event: { message?: { content?: TranscriptContent[] } };
+    try { event = JSON.parse(line) as typeof event; } catch { continue; }
+    const c = event.message?.content;
+    if (!Array.isArray(c)) continue;
+    for (const p of c) {
+      if (p.type === 'tool_result' && p.tool_use_id && pending.has(p.tool_use_id)) {
+        const completed = pending.get(p.tool_use_id ?? '');
+        if (!completed) continue;
+        const { paths, network, via } = completed;
+        pending.delete(p.tool_use_id ?? '');
+        const blocked = p.is_error === true;
+        for (const n of paths) (blocked ? refused : hits).push({ path: n, via, kind: classify(n) });
+        for (const target of network) (blocked ? refused : hits).push({ ...target, via });
+        continue;
+      }
+      if (p.type !== 'tool_use') continue;
+      const cand = [];
+      if (/^(Read|Grep|Glob|NotebookRead)$/.test(p.name ?? '')) {
+        fileTool++;
+        cand.push(p.input?.file_path ?? p.input?.path ?? p.input?.pattern ?? '');
+      } else if (p.name === 'Bash') {
+        const found = pathsFromBash(p.input?.command ?? '');
+        bashReads += found.length;
+        cand.push(...found);
+      }
+      const paths = [];
+      const network: Array<{ path: string; kind: string }> = [];
+      if (p.name === 'Bash') {
+        for (const target of networkTargetsFromBash(p.input?.command ?? '')) {
+          const kind = networkKind(target, own);
+          if (kind) network.push({ path: `${target.host}${target.port === null ? '' : `:${target.port}`}`, kind });
+        }
+      }
+      for (const raw of cand) {
+        let n = norm(raw);
+        if (!n || IGNORE.test(n)) continue;
+        // The CLI keeps auto-memory for the session's OWN project dir. A build
+        // A session may read its own memory, never another project's memory.
+        if (cwd && /[/\\]projects[/\\][^/\\]+[/\\]memory[/\\]/.test(n)
+          && n.includes(cwd.replace(/[\\/:]/g, '-'))) continue;
+        const absolute = /^[a-z]:/.test(n) || n.startsWith('/');
+        if (!absolute && cwd) n = `${cwd}/${n.replace(/^\.\//, '')}`;
+        const privateHarnessPath = cwd
+          && (n === `${cwd}/stack-bench` || n.startsWith(`${cwd}/stack-bench/`));
+        if (!privateHarnessPath && !absolute) continue;
+        if (!privateHarnessPath && cwd && (n === cwd || n.startsWith(`${cwd}/`))) continue;
+        paths.push(n);
+      }
+      if ((paths.length || network.length) && p.id && p.name) {
+        pending.set(p.id, { paths, network, via: p.name });
+      }
+    }
+  }
+  // A call whose result never arrived (session cut short) is unresolved, and
+  // unresolved is not innocent: count it.
+  for (const { paths, network, via } of pending.values()) {
+    for (const n of paths) hits.push({ path: n, via, kind: classify(n), unresolved: true });
+    for (const target of network) hits.push({ ...target, via, unresolved: true });
+  }
+
+  return { file, cwd, fileTool, bashReads, hits, refused };
+}
+
+function main(): void {
+  const { values } = parseArgs({ args: process.argv.slice(2), options: {
+    app: { type: 'string' }, dir: { type: 'string' }, json: { type: 'boolean' },
+    'own-ports': { type: 'string' },
+  } });
+  const ownPorts = (values['own-ports'] ?? '').split(',').filter(Boolean).map(Number);
+  if (ownPorts.some(port => !Number.isInteger(port) || port <= 0)) {
+    throw new Error('--own-ports must list positive integers');
+  }
+  const requestedApp = values.app;
+  const requestedDirectory = values.dir;
+  if (requestedApp && requestedDirectory) throw new Error('--app and --dir cannot be used together');
+  const roots = requestedApp ? transcriptsFor(requestedApp)
+    : requestedDirectory ? [resolve(requestedDirectory)]
+    : [join(homedir(), '.claude', 'projects')];
+  // When the caller names the app directory, that is the boundary. Do not
+  // infer it from a transcript folder name.
+  const appBoundary = requestedApp ? norm(resolve(requestedApp)) : null;
+  const results: AuditResult[] = [];
+for (const root of roots) {
+  if (!existsSync(root)) continue;
+  const stack = [root];
+  while (stack.length) {
+    const d = stack.pop();
+    if (!d) continue;
+    for (const e of readdirSync(d, { withFileTypes: true })) {
+      const p = join(d, e.name);
+      if (e.isDirectory()) { if (!/node_modules/.test(p)) stack.push(p); continue; }
+      if (!/\.jsonl$/.test(e.name)) continue;
+      // Include transcripts from the main session and its subagents.
+      if (!/transcript|^agent-|^[0-9a-f-]{36}\.jsonl$/.test(e.name)) continue;
+      if (statSync(p).size < 2000) continue;
+      results.push({ ...auditTranscript(p, appBoundary, { ownPorts }), root });
+    }
+  }
+}
+
+if (values.json) {
+  console.log(JSON.stringify(results, null, 2));
+  return;
+}
+
+const label = (file: string): string => file.replace(/\\/g, '/')
+  .split('/').slice(-3).join('/').slice(0, 62);
+console.log('\nBuilds that read outside their own directory');
+console.log('(counts BOTH file tools and Bash cat/grep/find; boundary = the session\'s own cwd)\n');
+
+let clean = 0;
+for (const r of results.sort((a, b) => b.hits.length - a.hits.length)) {
+  if (!r.cwd) { console.log(`  ?? ${label(r.file)} — no cwd recorded, cannot judge`); continue; }
+  if (!r.hits.length) {
+    clean++;
+    // Blocked attempts are worth printing: they are the sandbox doing its job,
+    // and they say which paths a build still goes looking for.
+    if (r.refused?.length) {
+      const kinds = [...new Set(r.refused.map(h => h.kind))].join(', ');
+      console.log(`  ${label(r.file)}\n      clean — ${r.refused.length} attempt(s) BLOCKED by the sandbox (${kinds})`);
+    }
+    continue;
+  }
+  const byKind: Record<string, string[]> = {};
+  for (const h of r.hits) (byKind[h.kind] ??= []).push(h.path);
+  console.log(`  ${label(r.file)}`);
+  console.log(`      cwd: ...${r.cwd.slice(-52)}   (${r.fileTool} file-tool, ${r.bashReads} bash reads)`);
+  for (const [k, v] of Object.entries(byKind).sort((a, b) => b[1].length - a[1].length)) {
+    const example = [...new Set(v)][0] ?? '';
+    console.log(`      ${String(v.length).padStart(3)}x ${k.padEnd(22)} ${example.split('/').slice(-2).join('/')}`);
+  }
+}
+console.log(`\n  ${clean} transcript(s) read nothing outside their directory.`);
+console.log(`  ${results.length} transcript(s) examined.\n`);
+}
+
+if (process.argv[1] && pathToFileURL(process.argv[1]).href === import.meta.url) main();
diff --git a/tools/stack-bench/commands/null-control.ts b/tools/stack-bench/commands/null-control.ts
new file mode 100644
index 00000000000..4716e66e1ea
--- /dev/null
+++ b/tools/stack-bench/commands/null-control.ts
@@ -0,0 +1,260 @@
+#!/usr/bin/env node
+// Grade the real validated production scenarios against a reachable app that
+// implements nothing. Every point-bearing criterion must conclusively fail.
+
+import { execFile } from 'node:child_process';
+import { createServer } from 'node:http';
+import type { Server } from 'node:http';
+import type { AddressInfo } from 'node:net';
+import { mkdirSync, mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { basename, join, relative, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { parseArgs as parseNodeArgs } from 'node:util';
+import { readArtifactPayload, writeRunJson } from '../src/evidence/artifacts.js';
+import { calibrationQualificationIdentity, calibrationQualificationRelease,
+  resolveCalibrationForRelease } from '../src/composition/calibration-compiler.js';
+import { qualificationScopeIdentity } from '../src/composition/qualification-scope.js';
+import { analyseNullReports } from '../src/evidence/null-control-analysis.js';
+import { resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { resolveRecipeSelection } from '../src/composition/recipe-selection.js';
+import { isDeclaredLevel, listTracks, loadTrack, suitesFor } from '../src/composition/tracks.js';
+import { controllerRunner } from '../src/runtime/runner-environment.js';
+import type { CalibrationPlan } from '../src/composition/calibration-compiler.js';
+import type { RecipeBinding } from '../src/composition/recipe-release.js';
+import type { Track } from '../src/composition/tracks.js';
+
+import { STACK_BENCH_ROOT as ROOT, compiledEntrypoint } from '../src/package-root.js';
+const GRADE = compiledEntrypoint('grader', 'grade.js');
+const NULL_CONTROL_WORKERS = 4;
+
+interface NullControlArgs {
+  tracks: string[];
+  level: number | null;
+  recipe?: string;
+  out?: string;
+  audit: boolean;
+  parentAttemptId?: string;
+}
+
+export function parseNullControlArgs(argv: string[]): NullControlArgs {
+  const { values } = parseNodeArgs({ args: argv.slice(2), options: {
+    track: { type: 'string' }, level: { type: 'string' }, recipe: { type: 'string' },
+    out: { type: 'string' }, audit: { type: 'boolean' }, 'parent-attempt-id': { type: 'string' },
+  } });
+  const args: NullControlArgs = {
+    tracks: values.track?.split(',').filter(Boolean) ?? listTracks(),
+    level: values.level === undefined ? null : Number(values.level), audit: values.audit ?? false,
+    recipe: values.recipe, out: values.out, parentAttemptId: values['parent-attempt-id'],
+  };
+  if (args.level !== null && (!Number.isInteger(args.level) || args.level < 1)) {
+    throw new Error('--level must be a positive integer');
+  }
+  if (args.level !== null && args.tracks.length !== 1) {
+    throw new Error('--level requires exactly one --track');
+  }
+  if (args.recipe && args.level === null) throw new Error('--recipe requires --level');
+  return args;
+}
+
+function runGrade(argv: string[], timeoutMs = 300_000): Promise<{ stdout: string; stderr: string }> {
+  return new Promise((resolve, reject) => {
+    execFile(process.execPath, [GRADE, ...argv], {
+      encoding: 'utf8', maxBuffer: 32 * 1024 * 1024, timeout: timeoutMs,
+    }, (error, stdout, stderr) => {
+      if (error) {
+        error.message = `grader failed: ${error.message}\n${stdout}\n${stderr}`;
+        reject(error);
+      } else resolve({ stdout, stderr });
+    });
+  });
+}
+
+export function nullControlSuites(track: Track, selectedLevel: number | null = null,
+  binding: RecipeBinding | null = null) {
+  if (selectedLevel !== null && !isDeclaredLevel(track, selectedLevel)) {
+    throw new Error(`L${selectedLevel} is not declared for ${track.name}`);
+  }
+  if (binding) {
+    if (selectedLevel === null) throw new Error('recipe-bound null control requires one level');
+    if (!Array.isArray(binding.execution) || !binding.execution.length) {
+      throw new Error('recipe-bound null control requires a typed execution plan');
+    }
+    const executionIds = new Set();
+    const mappedKeys = new Set();
+    const suites = binding.execution.map(execution => {
+      if (executionIds.has(execution.id)) {
+        throw new Error(`recipe-bound null control repeats execution ${execution.id}`);
+      }
+      executionIds.add(execution.id);
+      const checks = binding.release.checkCatalog.filter(check => check.executionId === execution.id);
+      if (!checks.length) {
+        throw new Error(`recipe-bound null control execution ${execution.id} maps no checks`);
+      }
+      for (const check of checks) {
+        if (mappedKeys.has(check.stableKey)) {
+          throw new Error(`recipe-bound null control maps check ${check.stableKey} more than once`);
+        }
+        mappedKeys.add(check.stableKey);
+      }
+      return { id: execution.id, spec: resolve(track.dir, execution.source ?? ''),
+        level: selectedLevel, checks };
+    });
+    const missing = binding.release.checkCatalog
+      .filter(check => !mappedKeys.has(check.stableKey)).map(check => check.stableKey);
+    if (missing.length) {
+      throw new Error(`recipe-bound null control leaves checks unmapped: ${missing.join(', ')}`);
+    }
+    return suites;
+  }
+  const seen = new Set();
+  const suites = [];
+  const levels = selectedLevel === null
+    ? Array.from({ length: track.validatedThrough }, (_, index) => index + 1)
+    : [selectedLevel];
+  for (const level of levels) {
+    for (const suite of suitesFor(track, level)) {
+      if (seen.has(suite.spec)) continue;
+      seen.add(suite.spec);
+      suites.push({ ...suite, level });
+    }
+  }
+  return suites;
+}
+
+export function selectNullQualificationBinding(binding: RecipeBinding, calibration: CalibrationPlan): RecipeBinding {
+  const selected = calibrationQualificationRelease(calibration, binding.release, binding.execution);
+  return { ...binding, release: selected.release, execution: selected.execution };
+}
+
+export function createNullQualification(binding: RecipeBinding, calibration: CalibrationPlan) {
+  const selectedBinding = selectNullQualificationBinding(binding, calibration);
+  const selection = resolveRecipeSelection(selectedBinding.release, {
+    checkKeys: selectedBinding.release.checkCatalog.map(check => check.stableKey),
+  });
+  return {
+    binding: selectedBinding,
+    calibration,
+    identity: calibrationQualificationIdentity(calibration),
+    selectionSha256: selection.sha256,
+  };
+}
+
+async function listen(server: Server): Promise<number> {
+  await new Promise<void>((resolve, reject) => {
+    server.once('error', reject);
+    server.listen({ port: 0, host: '127.0.0.1' }, () => resolve());
+  });
+  return (server.address() as AddressInfo).port;
+}
+
+async function main() {
+  const args = parseNullControlArgs(process.argv);
+  const nullAttemptId = `null-control-${new Date().toISOString().replace(/[:.]/g, '-')}`;
+  const work = mkdtempSync(join(tmpdir(), 'stack-bench-null-'));
+  const app = join(work, 'app');
+  const reportsDir = join(work, 'reports');
+  mkdirSync(app, { recursive: true });
+  mkdirSync(reportsDir, { recursive: true });
+
+  // Root navigation succeeds, proving the browser and server are healthy. All
+  // application/API behavior is absent: non-navigation requests get 404.
+  const server = createServer((request, response) => {
+    if (request.method === 'GET' && (request.url === '/' || request.headers.accept?.includes('text/html'))) {
+      response.writeHead(200, { 'content-type': 'text/html; charset=utf-8' });
+      response.end('<!doctype html><html><head><title>Null control</title></head><body></body></html>');
+    } else {
+      response.writeHead(404, { 'content-type': 'application/json' });
+      response.end('{"error":"not implemented"}');
+    }
+  });
+
+  const started = Date.now();
+  const suiteReports = [];
+  let qualification: ReturnType<typeof createNullQualification> | null = null;
+  try {
+    const port = await listen(server);
+    const url = `http://127.0.0.1:${port}`;
+    for (const trackName of args.tracks) {
+      const track = loadTrack(trackName);
+      let binding: RecipeBinding | null = null;
+      if (args.level !== null) {
+        binding = resolveRecipeRelease(track, args.level, args.recipe);
+        if (!binding) throw new Error(`${trackName} L${args.level} has no recipe release`);
+        const calibration = resolveCalibrationForRelease(binding.release,
+          { trackRoot: track.dir, stackBenchRoot: ROOT });
+        if (!calibration) throw new Error(`${trackName} L${args.level} has no calibration`);
+        qualification = createNullQualification(binding, calibration);
+        binding = qualification.binding;
+      }
+      const selectedSuites = nullControlSuites(track, args.level, binding);
+      const resolvedRecipe = binding
+        ? `${binding.release.id}@${binding.release.version}` : args.recipe;
+      for (let index = 0; index < selectedSuites.length; index += NULL_CONTROL_WORKERS) {
+        const reports = await Promise.all(selectedSuites
+          .slice(index, index + NULL_CONTROL_WORKERS).map(async suite => {
+            const reportPath = join(reportsDir,
+              `${trackName}-l${suite.level}-${suite.id.replaceAll('@', '-')}.json`);
+            console.log(`${trackName} L${suite.level} ${suite.id} (${basename(suite.spec)})`);
+            await runGrade(['--url', url, '--level', String(suite.level), '--spec', suite.spec,
+              '--backend', 'postgres', '--track', trackName, '--app', app, '--out', reportPath,
+              '--null-control',
+              '--parent-attempt-id', nullAttemptId,
+              ...(resolvedRecipe ? ['--recipe', resolvedRecipe] : []),
+              ...(binding ? ['--expected-recipe-sha256', binding.release.contentSha256] : []),
+              ...(qualification ? ['--selection-sha256', qualification.selectionSha256] : []),
+              ...(('checks' in suite ? suite.checks : []) ?? [])
+                .flatMap(check => ['--selected-check', check.stableKey])]);
+            const report = readArtifactPayload(reportPath, { expectedKind: 'grade' });
+            console.log(`${suite.id}: ${report.total}/${report.max}`);
+            return { track: trackName, level: suite.level, id: suite.id,
+              scenario: relative(track.dir, suite.spec).replaceAll('\\', '/'), report };
+          }));
+        suiteReports.push(...reports);
+      }
+    }
+
+    const analysis = analyseNullReports(suiteReports);
+    const artifact = {
+      id: nullAttemptId,
+      kind: 'null_control',
+      startedAt: new Date(started).toISOString(),
+      completedAt: new Date().toISOString(),
+      parentAttemptId: args.parentAttemptId ?? null,
+      identities: qualification ? {
+        recipe: { id: qualification.binding.release.id, version: qualification.binding.release.version,
+          sha256: qualification.binding.release.contentSha256, state: qualification.binding.release.state },
+        calibration: { ...qualification.identity, state: qualification.calibration.state },
+      } : undefined,
+      durationMs: Date.now() - started,
+      runner: controllerRunner(),
+      ...(qualification ? { qualificationScope: qualificationScopeIdentity({
+        kind: 'null', release: qualification.binding.release, stackBenchRoot: ROOT,
+      }) } : {}),
+      tracks: args.tracks,
+      ...analysis,
+    };
+    const outputPath = resolve(args.out ?? join(ROOT, 'results', `${artifact.id}.json`));
+    writeRunJson(outputPath, artifact);
+    console.log(JSON.stringify({
+      id: artifact.id,
+      kind: artifact.kind,
+      durationMs: artifact.durationMs,
+      tracks: artifact.tracks,
+      ok: artifact.ok,
+      summary: artifact.summary,
+      artifact: outputPath,
+    }, null, 2));
+    if (!analysis.ok && !args.audit) process.exitCode = 1;
+  } finally {
+    await new Promise(resolve => server.close(resolve));
+    rmSync(work, { recursive: true, force: true });
+  }
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  main().catch(error => {
+    console.error(error.stack ?? error.message);
+    process.exitCode = 2;
+  });
+}
diff --git a/tools/stack-bench/commands/pack-budget.ts b/tools/stack-bench/commands/pack-budget.ts
new file mode 100644
index 00000000000..6ab28f76873
--- /dev/null
+++ b/tools/stack-bench/commands/pack-budget.ts
@@ -0,0 +1,82 @@
+#!/usr/bin/env node
+
+import { existsSync } from 'node:fs';
+import { dirname, relative, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { parseArgs } from 'node:util';
+
+import { artifactPayload, recipeArtifactIdentities, writeArtifact } from '../src/evidence/artifacts.js';
+import { calibrationQualificationIdentity, resolveCalibrationForRelease }
+  from '../src/composition/calibration-compiler.js';
+import { loadPackBudgetEvidence, PACK_BUDGET_POLICY, recommendPackBudgets }
+  from '../src/composition/pack-budget.js';
+import { resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { isDeclaredLevel, listTracks, loadTrack } from '../src/composition/tracks.js';
+
+interface PackBudgetArgs {
+  command: 'recommend';
+  track: string;
+  level: number;
+  evidence: string[];
+  out: string;
+  recipe?: string;
+}
+
+const USAGE = 'usage: pack-budget.js recommend --track <name> --level <n> '
+  + '[--recipe <id>@<version>] --evidence <reference.json> [--evidence ...] '
+  + '--out <measurement.json>';
+
+export function parsePackBudgetArgs(argv: string[]): PackBudgetArgs {
+  const [command, ...options] = argv.slice(2);
+  const { values } = parseArgs({ args: options, options: {
+    track: { type: 'string' },
+    level: { type: 'string' },
+    recipe: { type: 'string' },
+    evidence: { type: 'string', multiple: true },
+    out: { type: 'string' },
+  } });
+  const level = Number(values.level);
+  const evidence = (values.evidence ?? []).map(path => resolve(path));
+  if (command !== 'recommend' || !values.track || !Number.isInteger(level) || level < 1
+    || !evidence.length || !values.out) throw new Error(USAGE);
+  if (new Set(evidence).size !== evidence.length) throw new Error('--evidence paths must be unique');
+  return { command, track: values.track, level, evidence, out: resolve(values.out),
+    ...(values.recipe ? { recipe: values.recipe } : {}) };
+}
+
+function main(): void {
+  const args = parsePackBudgetArgs(process.argv);
+  if (!listTracks().includes(args.track)) throw new Error(`unknown track ${args.track}`);
+  const track = loadTrack(args.track);
+  if (!isDeclaredLevel(track, args.level)) throw new Error(`L${args.level} is not declared for ${args.track}`);
+  const binding = resolveRecipeRelease(track, args.level, args.recipe);
+  if (!binding) throw new Error(`${args.track} L${args.level} has no recipe release`);
+  const calibration = resolveCalibrationForRelease(binding.release, { trackRoot: track.dir });
+  if (!calibration) throw new Error(`${binding.release.id}@${binding.release.version} has no calibration`);
+  const loaded = loadPackBudgetEvidence(args.evidence);
+  const result = recommendPackBudgets({ binding, calibration, evidence: loaded });
+  if (existsSync(args.out)) throw new Error(`refusing to replace existing budget measurement: ${args.out}`);
+  const id = `pack-budget-${args.track}-l${args.level}-${new Date().toISOString().replace(/[-:.TZ]/g, '').slice(0, 14)}`;
+  const artifact = writeArtifact(args.out, { kind: 'pack_budget_measurement', id,
+    identities: recipeArtifactIdentities(binding.release, {
+      calibration: { ...calibrationQualificationIdentity(calibration), state: calibration.state },
+    }),
+    payload: { schemaVersion: 1, track: args.track, level: args.level, policy: PACK_BUDGET_POLICY,
+      runner: result.measuredRunner,
+      evidence: loaded.map(item => {
+        const stackAdapter = item.artifact.identities.stackAdapter;
+        if (!stackAdapter) throw new Error(`${item.path} has no stack adapter identity`);
+        return { path: relative(dirname(args.out), item.path).replaceAll('\\', '/'),
+          sha256: item.sha256, stack: stackAdapter.id };
+      }),
+      samples: result.samples, recommendations: result.recommendations } });
+  console.log(JSON.stringify(artifactPayload(artifact), null, 2));
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  try { main(); }
+  catch (error) {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 2;
+  }
+}
diff --git a/tools/stack-bench/commands/preflight-cli.ts b/tools/stack-bench/commands/preflight-cli.ts
new file mode 100644
index 00000000000..af689917c26
--- /dev/null
+++ b/tools/stack-bench/commands/preflight-cli.ts
@@ -0,0 +1,85 @@
+import { resolve } from 'node:path';
+import { parseArgs } from 'node:util';
+
+import { DEFAULT_BUILD_IMAGE } from '../src/composition/product-config.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { stackBenchResultsRoot } from '../src/runtime/operational-paths.js';
+import type { PreflightReport, PreflightRequest } from '../src/runtime/preflight.js';
+
+function splitList(value: unknown): string[] {
+  return String(value).split(',').map(item => item.trim()).filter(Boolean);
+}
+
+export function parsePreflightArgs(
+  argv: string[],
+  { env = process.env }: { env?: NodeJS.ProcessEnv } = {},
+): PreflightRequest {
+  const { values } = parseArgs({ args: argv.slice(2), options: {
+    backend: { type: 'string', multiple: true },
+    track: { type: 'string' },
+    levels: { type: 'string' },
+    recipe: { type: 'string' },
+    'run-index': { type: 'string' },
+    parallelism: { type: 'string' },
+    'agent-adapter': { type: 'string' },
+    guidance: { type: 'string' },
+    pack: { type: 'string', multiple: true },
+    check: { type: 'string', multiple: true },
+    image: { type: 'string' },
+    'results-dir': { type: 'string' },
+    report: { type: 'string' },
+    smoke: { type: 'boolean' },
+    json: { type: 'boolean' },
+  } });
+  const request: PreflightRequest = { backends: [], track: 'ecommerce', levels: '1', levelList: [],
+    runIndex: 0, parallelism: 1,
+    agentAdapter: 'claude-code', guidance: 'prescribed', packIds: [], checkKeys: [], smoke: false,
+    image: env.STACK_BENCH_IMAGE ?? DEFAULT_BUILD_IMAGE,
+    resultsDir: stackBenchResultsRoot(STACK_BENCH_ROOT, env) };
+  request.backends = (values.backend ?? []).flatMap(splitList);
+  if (values.track !== undefined) request.track = values.track;
+  if (values.levels !== undefined) request.levels = values.levels;
+  if (values.recipe !== undefined) request.recipe = values.recipe;
+  if (values['run-index'] !== undefined) request.runIndex = Number(values['run-index']);
+  if (values.parallelism !== undefined) request.parallelism = Number(values.parallelism);
+  if (values['agent-adapter'] !== undefined) request.agentAdapter = values['agent-adapter'];
+  if (values.guidance !== undefined) request.guidance = values.guidance;
+  request.packIds = (values.pack ?? []).flatMap(splitList);
+  request.checkKeys = (values.check ?? []).flatMap(splitList);
+  if (values.image !== undefined) request.image = values.image;
+  if (values['results-dir'] !== undefined) request.resultsDir = resolve(values['results-dir']);
+  if (values.report !== undefined) request.report = resolve(values.report);
+  request.smoke = values.smoke ?? false;
+  request.json = values.json;
+  if (!request.backends.length) throw new Error('--backend is required (comma-separated values are accepted)');
+  if (request.guidance !== 'neutral' && request.guidance !== 'prescribed') {
+    throw new Error('--guidance must be neutral or prescribed');
+  }
+  request.backends = [...new Set(request.backends)].sort();
+  if (!Number.isInteger(request.runIndex) || request.runIndex < 0) {
+    throw new Error('--run-index must be a non-negative integer');
+  }
+  if (!Number.isInteger(request.parallelism) || (request.parallelism ?? 0) < 1) {
+    throw new Error('--parallelism must be a positive integer');
+  }
+  const match = String(request.levels).match(/^(\d+)(?:-(\d+))?$/);
+  if (!match || Number(match[2] ?? match[1]) < Number(match[1])) {
+    throw new Error('--levels must be N or N-M');
+  }
+  request.levelList = Array.from({ length: Number(match[2] ?? match[1]) - Number(match[1]) + 1 },
+    (_, index) => Number(match[1]) + index);
+  if (request.recipe && request.levelList.length !== 1) {
+    throw new Error('--recipe requires exactly one requested level');
+  }
+  return request;
+}
+
+export function printPreflightReport(report: PreflightReport): void {
+  console.log(`Stack Bench preflight: ${report.ok ? 'READY' : 'NOT READY'}`);
+  for (const check of report.checks) {
+    const mark = check.status === 'pass' ? 'PASS' : check.status === 'warn' ? 'WARN' : 'FAIL';
+    console.log(`  ${mark.padEnd(4)}  ${check.id.padEnd(28)} ${check.summary}`);
+    if (check.remediation && check.status === 'fail') console.log(`        fix: ${check.remediation}`);
+  }
+  console.log(`\n${report.summary.passed} passed, ${report.summary.failed} failed, ${report.summary.warnings} warnings`);
+}
diff --git a/tools/stack-bench/commands/preflight.ts b/tools/stack-bench/commands/preflight.ts
new file mode 100644
index 00000000000..45cb7a40af1
--- /dev/null
+++ b/tools/stack-bench/commands/preflight.ts
@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+
+import { parsePreflightArgs, printPreflightReport } from './preflight-cli.js';
+import { runPreflight, writePreflightReport } from '../src/runtime/preflight.js';
+
+let request;
+try {
+  request = parsePreflightArgs(process.argv);
+} catch (error) {
+  console.error(`preflight: ${error instanceof Error ? error.message : String(error)}`);
+  console.error('Usage: stack-bench preflight --backend spacetime[,postgres,mongodb] [--track ecommerce] [--levels 1-2] [--smoke]');
+  process.exit(2);
+}
+
+const report = runPreflight(request);
+if (request.report) writePreflightReport(request.report, report);
+if (request.json) console.log(JSON.stringify(report, null, 2));
+else printPreflightReport(report);
+process.exitCode = report.ok ? 0 : 1;
diff --git a/tools/stack-bench/commands/progression-graph.ts b/tools/stack-bench/commands/progression-graph.ts
new file mode 100644
index 00000000000..82dc0a3be9e
--- /dev/null
+++ b/tools/stack-bench/commands/progression-graph.ts
@@ -0,0 +1,21 @@
+import { dirname, join, resolve } from 'node:path';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { writeProgressionGraph } from '../src/progression/progression-graph.js';
+
+interface ProgressionGraph {
+  nodes: unknown[];
+  levels: number;
+}
+
+const definitionPath = process.argv[2];
+if (!definitionPath) {
+  throw new Error('usage: progression-graph <definition-path> [html-path]');
+}
+const resolvedDefinitionPath = resolve(definitionPath);
+const graph: ProgressionGraph = writeProgressionGraph({
+  definitionPath: resolvedDefinitionPath,
+  htmlPath: process.argv[3] ?? join(STACK_BENCH_ROOT, 'docs', 'dependency-graph.html'),
+  trackRoot: dirname(dirname(resolvedDefinitionPath)),
+});
+console.log(`Rendered ${graph.nodes.length} nodes across ${graph.levels} levels.`);
diff --git a/tools/stack-bench/commands/qualification-cli.ts b/tools/stack-bench/commands/qualification-cli.ts
new file mode 100644
index 00000000000..74839b00940
--- /dev/null
+++ b/tools/stack-bench/commands/qualification-cli.ts
@@ -0,0 +1,277 @@
+#!/usr/bin/env node
+
+import { existsSync, readFileSync } from 'node:fs';
+import { basename, dirname, extname, join, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { parseArgs as parseNodeArgs } from 'node:util';
+
+import { calibrationQualificationIdentity, resolveCalibrationForRelease } from '../src/composition/calibration-compiler.js';
+import { resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { isDeclaredLevel, listTracks, loadTrack } from '../src/composition/tracks.js';
+import { PACK_BUDGET_POLICY } from '../src/composition/pack-budget.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { stackBenchResultsRoot } from '../src/runtime/operational-paths.js';
+import { companionReferenceArtifactPath } from '../src/references/reference-live.js';
+import type { CalibrationPlan } from '../src/composition/calibration-compiler.js';
+import type { RecipeBinding, RecipeRelease } from '../src/composition/recipe-release.js';
+
+interface QualificationArgs {
+  command?: string;
+  track: string | null;
+  level: number | null;
+  recipe?: string;
+}
+
+interface QualificationBlocker {
+  code: string;
+  path: string;
+  summary: string;
+}
+
+export function parseQualificationArgs(argv: string[]): QualificationArgs {
+  const { positionals, values } = parseNodeArgs({ args: argv.slice(2), allowPositionals: true,
+    options: { track: { type: 'string' }, level: { type: 'string' }, recipe: { type: 'string' } } });
+  const args: QualificationArgs = { command: positionals[0], track: values.track ?? null,
+    level: values.level === undefined ? null : Number(values.level),
+    ...(values.recipe === undefined ? {} : { recipe: values.recipe }) };
+  if (args.command !== 'status' || typeof args.track !== 'string' || !args.track
+    || positionals.length !== 1 || args.level === null || !Number.isInteger(args.level) || args.level < 1) {
+    throw new Error('usage: node dist/commands/qualification-cli.js status --track <name> --level <positive integer> '
+      + '[--recipe <id>@<version>]');
+  }
+  return args;
+}
+
+function blocker(code: string, path: string, summary: string): QualificationBlocker {
+  return { code, path, summary };
+}
+
+function evidencePlan(calibration: CalibrationPlan) {
+  const stacks = calibration.qualification.stacks
+    .filter(stack => stack.status !== 'unsupported').map(stack => stack.id).sort();
+  const evidence = [];
+  for (const stack of stacks) {
+    for (let repetition = 1; repetition <= calibration.qualification.referenceRepetitions; repetition += 1) {
+      evidence.push({ kind: 'reference', stack, repetition });
+    }
+    for (let repetition = 1; repetition <= calibration.qualification.mutationRepetitions; repetition += 1) {
+      evidence.push({ kind: 'mutation', stack, repetition });
+    }
+  }
+  for (let repetition = 1; repetition <= calibration.nullControl.repetitions; repetition += 1) {
+    evidence.push({ kind: 'null', stack: null, repetition });
+  }
+  return evidence;
+}
+
+export interface CalibrationMutationSelection {
+  mutations: Array<{ backend: string; path: string; targets: Array<{ id: string }> }>;
+}
+
+export function mutationWorkerCount(calibration: CalibrationMutationSelection, stack: string,
+  readManifest: (path: string) => { mutations?: { id: string }[] } = path =>
+    JSON.parse(readFileSync(resolve(STACK_BENCH_ROOT, path), 'utf8')) as { mutations?: { id: string }[] }) {
+  const entry = calibration.mutations.find(candidate => candidate.backend === stack);
+  if (!entry) return 1;
+  const manifest = readManifest(entry.path);
+  const selectedIds = new Set(entry.targets.map(target => target.id));
+  const selectedMutations = (manifest.mutations ?? []).filter(mutation =>
+    selectedIds.delete(mutation.id));
+  if (selectedIds.size) {
+    throw new Error(`${stack} calibration selects missing mutations: ${[...selectedIds].sort().join(', ')}`);
+  }
+  return Math.min(4, Math.max(1, selectedMutations.length));
+}
+
+function mutationWorkerOption(calibration: CalibrationPlan, stack: string) {
+  const workers = mutationWorkerCount(calibration, stack);
+  return workers > 1 ? ` --mutation-workers ${workers}` : '';
+}
+
+function qualificationRunDirectory(artifactPath: string): string {
+  return join(dirname(artifactPath), `${basename(artifactPath, extname(artifactPath))}.runs`);
+}
+
+function defectCheckCoverage(release: RecipeRelease, calibration: CalibrationPlan) {
+  const selected = calibration.qualification.checks
+    ? new Set(calibration.qualification.checks) : null;
+  const scored = release.checkCatalog.filter(check => check.points > 0
+    && (selected === null || selected.has(check.stableKey)));
+  const scoredByKey = new Map(scored.map(check => [check.stableKey, check]));
+  const stacks = calibration.qualification.stacks
+    .filter(stack => stack.status !== 'unsupported').map(stack => stack.id).sort();
+  return {
+    required: 'every scored check has an exact known-defect test on every supported stack',
+    totalChecks: scored.length,
+    totalPoints: scored.reduce((total, check) => total + check.points, 0),
+    stacks: stacks.map(stack => {
+      const covered = new Set(calibration.mutations
+        .filter(entry => entry.backend === stack)
+        .flatMap(entry => entry.targets.flatMap(target => target.stableKeys))
+        .filter(key => scoredByKey.has(key)));
+      const missing = scored.filter(check => !covered.has(check.stableKey));
+      return {
+        stack,
+        coveredChecks: covered.size,
+        coveredPoints: [...covered].reduce((total, key) => total + (scoredByKey.get(key)?.points ?? 0), 0),
+        missingChecks: missing.map(check => check.stableKey),
+      };
+    }),
+  };
+}
+
+export function qualificationReadiness(trackName: string, level: number, recipe: string | null = null) {
+  if (!listTracks().includes(trackName)) throw new Error(`unknown qualification track ${trackName}`);
+  const track = loadTrack(trackName);
+  if (!isDeclaredLevel(track, level)) {
+    throw new Error(`L${level} is not declared for ${trackName}`);
+  }
+  const binding: RecipeBinding | null = resolveRecipeRelease(track, level, recipe);
+  if (!binding) throw new Error(`${trackName} L${level} has no recipe release`);
+  const calibration = resolveCalibrationForRelease(binding.release,
+    { trackRoot: track.dir, alias: `L${level}` });
+  if (!calibration) {
+    throw new Error(`${binding.release.id}@${binding.release.version} has no L${level} calibration`);
+  }
+  const identity = calibrationQualificationIdentity(calibration);
+  const launchBlockers = [];
+  if (binding.release.state === 'retired') {
+    launchBlockers.push(blocker('recipe_retired', 'recipe.state', 'selected recipe is retired'));
+  }
+  for (const pack of binding.plan.packs) {
+    if (pack.budget.status !== 'bounded') {
+      launchBlockers.push(blocker('pack_budget_unbounded', `packs.${pack.id}.budget`,
+        `${pack.id}@${pack.version} needs a measured maxRuntimeMs before qualification`));
+    }
+  }
+  for (const entry of calibration.references.entries) {
+    if (!['candidate', 'active'].includes(String(entry.status))) {
+      launchBlockers.push(blocker('reference_unavailable', `references.${entry.backend}`,
+        `${entry.id} is ${entry.status}`));
+    }
+  }
+  for (const entry of calibration.mutations) {
+    if (!['candidate', 'active'].includes(String(entry.status))) {
+      launchBlockers.push(blocker('mutation_unavailable', `mutations.${entry.backend}`,
+        `${entry.path} is ${entry.status}`));
+    }
+  }
+
+  const requiredEvidence = evidencePlan(calibration);
+  const defectChecks = defectCheckCoverage(binding.release, calibration);
+  const recorded = new Set(calibration.qualification.evidence.map(entry =>
+    `${entry.kind}:${entry.stack ?? ''}:${entry.repetition}`));
+  const promotionBlockers = [...launchBlockers];
+  for (const coverage of defectChecks.stacks.filter(item => item.missingChecks.length > 0)) {
+    promotionBlockers.push(blocker('defect_check_coverage_incomplete',
+      `defectChecks.${coverage.stack}`,
+      `${coverage.coveredChecks}/${defectChecks.totalChecks} scored checks have exact known-defect tests`));
+  }
+  for (const item of requiredEvidence) {
+    const key = `${item.kind}:${item.stack ?? ''}:${item.repetition}`;
+    if (!recorded.has(key)) promotionBlockers.push(blocker('evidence_missing', `evidence.${key}`,
+      `${key} has no hash-bound qualification artifact`));
+  }
+  for (const stale of (calibration.qualificationStaleness ?? []) as {
+    kind: string; stack?: string; repetition: number; reason: string;
+  }[]) {
+    const key = `${stale.kind}:${stale.stack ?? ''}:${stale.repetition}`;
+    promotionBlockers.push(blocker('qualification_evidence_stale', `evidence.${key}`,
+      `${key} must be regenerated: ${stale.reason}`));
+  }
+  const sourceStates: [string, string][] = [
+    ['recipe.state', binding.release.state],
+    ['fixture.state', binding.release.components.fixture.state],
+    ...binding.release.components.packs.map(pack => [`packs.${pack.id}.state`, pack.state] as [string, string]),
+    ['calibration.state', calibration.state],
+    ['promotion.status', binding.status],
+  ];
+  const governance = sourceStates.map(([path, state]) => ({ path, state,
+    target: path === 'promotion.status' ? 'promoted' : 'qualified' }));
+  governance.push(...calibration.qualification.stacks.map(stack => ({
+    path: `qualification.stacks.${stack.id}`, state: stack.status,
+    target: stack.status === 'unsupported' ? 'unsupported' : 'qualified',
+  })));
+
+  const output = join(stackBenchResultsRoot(STACK_BENCH_ROOT), 'qualification');
+  const stacks = calibration.qualification.stacks
+    .filter(stack => stack.status !== 'unsupported').map(stack => stack.id).sort();
+  const qualificationLevel = Number(calibration.promotion.alias.slice(1));
+  const budgetEvidence = stacks.map(stack =>
+    `${output}/budget-input/${trackName}-l${qualificationLevel}-${stack}.json`);
+  const budgetPreparationRequired = launchBlockers.some(item => item.code === 'pack_budget_unbounded');
+  const recipeOption = ` --recipe ${binding.release.id}@${binding.release.version}`;
+  const featureCatalog = calibration.qualification.featureCatalog;
+  const featureCatalogOption = featureCatalog
+    ? ` --feature-catalog ${featureCatalog.id}@${featureCatalog.version}` : '';
+  const combinedReferenceEvidence = calibration.qualification.referenceRepetitions
+    === calibration.qualification.mutationRepetitions;
+  const artifactStem = `${trackName}-l${qualificationLevel}-${binding.release.contentSha256.slice(0, 12)}`;
+  const artifactPaths = {
+    references: Object.fromEntries(stacks.map(stack => [stack,
+      `${output}/${artifactStem}-${stack}-reference.json`])),
+    mutations: Object.fromEntries(stacks.map(stack => [stack,
+      `${output}/${artifactStem}-${stack}-mutation.json`])),
+    null: `${output}/${artifactStem}-null.json`,
+  };
+  const launchPaths = new Set<string>([artifactPaths.null]);
+  for (const stack of stacks) {
+    const mutationPath = artifactPaths.mutations[stack];
+    const referencePath = artifactPaths.references[stack];
+    if (!mutationPath || !referencePath) throw new Error(`qualification path is missing for ${stack}`);
+    launchPaths.add(mutationPath);
+    launchPaths.add(qualificationRunDirectory(mutationPath));
+    launchPaths.add(combinedReferenceEvidence
+      ? companionReferenceArtifactPath(mutationPath) : referencePath);
+    if (!combinedReferenceEvidence) {
+      launchPaths.add(qualificationRunDirectory(referencePath));
+    }
+  }
+  for (const path of [...launchPaths].filter(existsSync).sort()) {
+    launchBlockers.push(blocker('qualification_output_exists', path,
+      'qualification output already exists'));
+  }
+  return {
+    qualificationSchemaVersion: 1,
+    scope: { track: trackName, level, recipe: { id: binding.release.id,
+      version: binding.release.version, contentSha256: binding.release.contentSha256 },
+    calibration: { ...identity, contentSha256: calibration.contentSha256 },
+    runner: calibration.qualification.runner ?? null },
+    launch: { ok: launchBlockers.length === 0, blockers: launchBlockers },
+    budgetPreparation: {
+      required: budgetPreparationRequired,
+      policy: PACK_BUDGET_POLICY,
+      commands: budgetPreparationRequired ? [
+        ...stacks.map((stack, index) =>
+          `qualify-reference --backend ${stack} --track ${trackName} --level ${qualificationLevel}${recipeOption}${featureCatalogOption} --repetitions ${calibration.qualification.referenceRepetitions} --out ${budgetEvidence[index]}`),
+        `pack-budget recommend --track ${trackName} --level ${qualificationLevel}${recipeOption} ${budgetEvidence
+          .map(path => `--evidence ${path}`).join(' ')} --out ${output}/${trackName}-l${qualificationLevel}-pack-budgets.json`,
+      ] : [],
+    },
+    requiredEvidence,
+    defectChecks,
+    artifactPaths,
+    commands: [
+      ...stacks.flatMap(stack => [
+        ...(!combinedReferenceEvidence ? [
+          `qualify-reference --backend ${stack} --track ${trackName} --level ${qualificationLevel}${recipeOption}${featureCatalogOption} --repetitions ${calibration.qualification.referenceRepetitions} --out ${artifactPaths.references[stack]}`,
+        ] : []),
+        `qualify-reference --backend ${stack} --track ${trackName} --level ${qualificationLevel}${recipeOption}${featureCatalogOption} --repetitions ${calibration.qualification.mutationRepetitions} --mutations --release-candidate${mutationWorkerOption(calibration, stack)} --out ${artifactPaths.mutations[stack]}`,
+      ]),
+      `qualify-null --track ${trackName} --level ${qualificationLevel}${recipeOption} --out ${artifactPaths.null}`,
+    ],
+    promotion: { ready: promotionBlockers.length === 0, blockers: promotionBlockers,
+      governance },
+  };
+}
+
+function main() {
+  const args = parseQualificationArgs(process.argv);
+  if (!args.track || args.level === null) throw new Error('track and level are required');
+  console.log(JSON.stringify(qualificationReadiness(args.track, args.level, args.recipe), null, 2));
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  try { main(); }
+  catch (error: unknown) { console.error(error instanceof Error ? error.message : String(error)); process.exitCode = 2; }
+}
diff --git a/tools/stack-bench/commands/recovery.ts b/tools/stack-bench/commands/recovery.ts
new file mode 100644
index 00000000000..cf622baf806
--- /dev/null
+++ b/tools/stack-bench/commands/recovery.ts
@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+
+import { recoverBackendLease, recoverSupervisedRun } from '../src/runtime/recovery.js';
+
+const [command, statePath, option, output] = process.argv.slice(2);
+const supervisorRequest = command === 'recover' && statePath !== undefined && process.argv.length === 4;
+const leaseRequest = command === 'recover-lease' && statePath !== undefined && option === '--out'
+  && output !== undefined && process.argv.length === 6;
+if (!supervisorRequest && !leaseRequest) {
+  console.error('Usage:\n'
+    + '  stack-bench recover <private-supervisor-state.json>\n'
+    + '  stack-bench recover-lease <private-lease.json> --out <directory>');
+  process.exit(2);
+}
+
+try {
+  const result = leaseRequest
+    ? recoverBackendLease(statePath, output)
+    : recoverSupervisedRun(statePath);
+  console.log(JSON.stringify(result, null, 2));
+  process.exitCode = result.ok ? 0 : 1;
+} catch (error) {
+  console.error(`recovery: ${error instanceof Error ? error.message : String(error)}`);
+  process.exitCode = 2;
+}
diff --git a/tools/stack-bench/commands/repair-cli.ts b/tools/stack-bench/commands/repair-cli.ts
new file mode 100644
index 00000000000..b37a06a74a3
--- /dev/null
+++ b/tools/stack-bench/commands/repair-cli.ts
@@ -0,0 +1,220 @@
+#!/usr/bin/env node
+
+import { randomUUID } from 'node:crypto';
+import { existsSync, mkdirSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+import { acquireCampaignLock, releaseCampaignLock } from '../src/campaigns/campaign-lock.js';
+import { ARTIFACT_FILE, emptyArtifactIdentities, readArtifact, writeArtifact }
+  from '../src/evidence/artifacts.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { rescueSupervisedLease } from '../src/runtime/recovery.js';
+import { runBounded } from '../src/runtime/bounded-process.js';
+import type { BoundedProcessResult, RunBoundedOptions }
+  from '../src/runtime/bounded-process.js';
+import { createRepairGrant, inspectRepairParent } from '../src/runtime/repair-grant.js';
+
+const BENCH = join(STACK_BENCH_ROOT, 'dist', 'commands', 'bench.js');
+
+export interface RepairStatusArgs {
+  command: 'status';
+  parent: string;
+  level: number;
+}
+
+export interface RepairGrantArgs {
+  command: 'grant';
+  parent: string;
+  level: number;
+  repairs: number;
+  maxBudgetUsd?: number;
+  timeoutMinutes: number;
+}
+
+export type RepairArgs = RepairStatusArgs | RepairGrantArgs;
+
+export function parseRepairArgs(argv: string[]): RepairArgs {
+  const [command, parent, ...rest] = argv.slice(2);
+  if (command === 'status' && parent && rest.length === 2 && rest[0] === '--level') {
+    const level = Number(rest[1]);
+    if (!Number.isSafeInteger(level) || level < 1) throw new Error('--level must be a positive integer');
+    return { command, parent: resolve(parent), level };
+  }
+  if (command !== 'grant' || !parent) {
+    throw new Error('usage: repair status <run-dir> --level <N> | repair grant <run-dir> --level <N> --repairs <N> [--max-budget-usd <N>] [--timeout-minutes <N>]');
+  }
+  const values: { level?: number; repairs?: number; maxBudgetUsd?: number;
+    timeoutMinutes: number } = { timeoutMinutes: 120 };
+  const seen = new Set<string>();
+  for (let index = 0; index < rest.length; index += 2) {
+    const flag = rest[index];
+    if (!flag || !['--level', '--repairs', '--max-budget-usd', '--timeout-minutes'].includes(flag)
+      || index + 1 >= rest.length || seen.has(flag)) {
+      throw new Error(`invalid or duplicate repair option ${String(flag)}`);
+    }
+    seen.add(flag);
+    const value = Number(rest[index + 1]);
+    if (flag === '--level') values.level = value;
+    else if (flag === '--repairs') values.repairs = value;
+    else if (flag === '--max-budget-usd') values.maxBudgetUsd = value;
+    else values.timeoutMinutes = value;
+  }
+  const level = values.level;
+  if (level === undefined || !Number.isSafeInteger(level) || level < 1) {
+    throw new Error('--level must be a positive integer');
+  }
+  const repairs = values.repairs;
+  if (repairs === undefined || !Number.isSafeInteger(repairs) || repairs < 1) {
+    throw new Error('--repairs must be a positive safe integer');
+  }
+  if (values.maxBudgetUsd !== undefined
+    && (!Number.isFinite(values.maxBudgetUsd) || values.maxBudgetUsd <= 0)) {
+    throw new Error('--max-budget-usd must be a positive number');
+  }
+  if (!Number.isFinite(values.timeoutMinutes) || values.timeoutMinutes < 10
+    || values.timeoutMinutes > 480) {
+    throw new Error('--timeout-minutes must be from 10 through 480');
+  }
+  return { command, parent: resolve(parent), level,
+    repairs, timeoutMinutes: values.timeoutMinutes,
+    ...(values.maxBudgetUsd === undefined ? {} : { maxBudgetUsd: values.maxBudgetUsd }) };
+}
+
+export function repairStatus(parent: string, level: number): Record<string, unknown> {
+  try {
+    const inspected = inspectRepairParent(parent, level);
+    return { eligible: true, parentRunId: inspected.parent.id, level,
+      score: inspected.level.score, max: inspected.level.max,
+      used: inspected.cumulativeRepairsBefore,
+      checkpointSha256: inspected.checkpoint.payload.source.sha256 };
+  } catch (error) {
+    return { eligible: false, level,
+      reason: error instanceof Error ? error.message : String(error) };
+  }
+}
+
+interface RepairExecutionDependencies {
+  execute?: (command: string, argv: string[],
+    options: RunBoundedOptions) => Promise<BoundedProcessResult>;
+  rescue?: (path: string, output: string) => void;
+  uuid?: () => string;
+  env?: NodeJS.ProcessEnv;
+}
+
+interface RepairContinuationPayload {
+  outcome?: unknown;
+  continuation?: {
+    parentRunId?: string;
+    repairsGranted?: number;
+    level?: number;
+    [key: string]: unknown;
+  };
+  [key: string]: unknown;
+}
+
+export async function executeRepairGrant(args: RepairGrantArgs,
+  { execute = runBounded, rescue = rescueSupervisedLease, uuid = randomUUID,
+    env = process.env }: RepairExecutionDependencies = {}) {
+  const resolved = createRepairGrant(args.parent, { level: args.level, repairs: args.repairs });
+  const lock = acquireCampaignLock(join(resolved.root, '.repair-control'), {
+    id: `repair-l${args.level}`,
+    contentSha256: resolved.checkpoint.payload.source.sha256,
+  });
+  const stamp = new Date().toISOString().replace(/[-:.TZ]/g, '').slice(0, 14);
+  const executionId = `grant-${stamp}-${uuid().replaceAll('-', '').slice(0, 12)}`;
+  const output = join(resolved.root, 'continuations', executionId);
+  const privateRoot = join(tmpdir(), 'stack-bench-repair-supervisors');
+  const supervisorState = join(privateRoot, `${executionId}.json`);
+  try {
+    mkdirSync(output, { recursive: true });
+    mkdirSync(privateRoot, { recursive: true, mode: 0o700 });
+    const argv = [BENCH,
+      '--repair-from', resolved.root,
+      '--repair-level', String(args.level),
+      '--repairs', String(args.repairs),
+      '--out', output,
+      '--no-media'];
+    if (args.maxBudgetUsd !== undefined) {
+      argv.push('--max-budget-usd', String(args.maxBudgetUsd));
+    }
+    const childEnv: NodeJS.ProcessEnv = {
+      ...env,
+      STACK_BENCH_SUPERVISOR_STATE: supervisorState,
+    };
+    if (resolved.configuration.buildImage) {
+      childEnv.STACK_BENCH_IMAGE = resolved.configuration.buildImage;
+    }
+    const processResult = await execute(process.execPath, argv, {
+      cwd: STACK_BENCH_ROOT,
+      env: childEnv,
+      stdio: 'inherit',
+      timeoutMs: args.timeoutMinutes * 60_000,
+      logs: { stdout: join(output, 'process.stdout.log'),
+        stderr: join(output, 'process.stderr.log') },
+    });
+    let cleanupError: unknown = null;
+    if (!processResult.ok && existsSync(supervisorState)) {
+      try { rescue(supervisorState, output); }
+      catch (error) { cleanupError = error; }
+    }
+    const streams = processResult.logs ? Object.fromEntries(Object.entries(processResult.logs)
+      .map(([name, value]) => [name, { ...value, path: `process.${name}.log` }])) : null;
+    writeArtifact(join(output, ARTIFACT_FILE.process), {
+      kind: 'repair_process',
+      id: `${executionId}-process`,
+      attempt: { id: `${executionId}-process`, parentId: resolved.parent.id },
+      identities: emptyArtifactIdentities({
+        agentAdapter: resolved.parentArtifact.identities.agentAdapter,
+        stackAdapter: resolved.parentArtifact.identities.stackAdapter,
+      }),
+      payload: { schemaVersion: 2, parentRunId: resolved.parent.id,
+        level: args.level, repairsGranted: args.repairs,
+        exitCode: processResult.code ?? null, signal: processResult.signal ?? null,
+        timedOut: processResult.timedOut, streams },
+    });
+    if (cleanupError) {
+      const detail = cleanupError instanceof Error ? cleanupError.message : String(cleanupError);
+      throw new Error(`repair continuation cleanup failed: ${detail}`);
+    }
+    const runPath = join(output, ARTIFACT_FILE.run);
+    if (!existsSync(runPath)) {
+      throw new Error(`repair continuation produced no run artifact${processResult.timedOut ? ' before its timeout' : ''}`);
+    }
+    const run = readArtifact<RepairContinuationPayload>(runPath,
+      { expectedKind: 'repair_continuation' });
+    if (run.attempt.parentId !== resolved.parent.id
+      || run.payload.continuation?.parentRunId !== resolved.parent.id
+      || run.payload.continuation?.repairsGranted !== args.repairs
+      || run.payload.continuation?.level !== args.level) {
+      throw new Error('repair continuation result does not match its grant');
+    }
+    return { output, process: processResult, run };
+  } finally {
+    rmSync(supervisorState, { force: true });
+    releaseCampaignLock(lock);
+  }
+}
+
+async function main(): Promise<void> {
+  const args = parseRepairArgs(process.argv);
+  if (args.command === 'status') {
+    const status = repairStatus(args.parent, args.level);
+    console.log(JSON.stringify(status, null, 2));
+    if (status.eligible !== true) process.exitCode = 1;
+    return;
+  }
+  const result = await executeRepairGrant(args);
+  console.log(JSON.stringify({ output: result.output, id: result.run.id,
+    outcome: result.run.payload.outcome,
+    continuation: result.run.payload.continuation }, null, 2));
+  if (!result.process.ok) process.exitCode = 1;
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  main().catch((error: unknown) => {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 2;
+  });
+}
diff --git a/tools/stack-bench/commands/report-bugs.ts b/tools/stack-bench/commands/report-bugs.ts
new file mode 100644
index 00000000000..955bec395ce
--- /dev/null
+++ b/tools/stack-bench/commands/report-bugs.ts
@@ -0,0 +1,326 @@
+#!/usr/bin/env node
+// Turns grading results into a behavioral BUG_REPORT.md for the fix agent.
+//
+// Every line the agent reads comes from one of three sources: the sentence
+// the agent was already given for the behavior (`statedBy`, else the
+// criterion's description), the rendered finding from the catalog, or the
+// application's own console errors. Harness prose never enters the report.
+
+import { existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { parseArgs as parseNodeArgs } from 'node:util';
+import { renderFinding } from '../src/actions/action-findings.js';
+import type { Finding } from '../src/actions/action-findings.js';
+import { sanitiseConsoleError, sanitiseDiagnostic } from '../src/evidence/diagnostic-sanitizer.js';
+import { ARTIFACT_FILE, readArtifactPayload } from '../src/evidence/artifacts.js';
+import { criterionEvidence, evidenceIsRepairable } from '../src/evidence/check-evidence.js';
+import { assertAgentVisibleText } from '../src/composition/agent-visible-contract.js';
+import { CODING_CONTAINER_BUG_REPORT_FILE, CODING_CONTAINER_START_SCRIPT }
+  from '../src/runtime/coding-container-policy.js';
+
+interface RepairHistoryEntry {
+  round?: number;
+  beforeScore?: number;
+  beforeMax?: number;
+  afterScore?: number;
+  afterMax?: number;
+  result?: string;
+  remainingFailures?: string[];
+}
+
+interface ReportBugsArgs {
+  app: string;
+  results: string;
+  out: string;
+  archive?: string;
+  history: RepairHistoryEntry[];
+  checks: string[] | null;
+  controls: string[] | null;
+  priorRegression: string | null;
+  regressionContext: boolean;
+}
+
+interface ParsedArgs {
+  app?: string;
+  results?: string;
+  out?: string;
+  archive?: string;
+  history?: unknown;
+  checks?: unknown;
+  controls?: unknown;
+}
+
+interface Criterion {
+  id?: string;
+  stableKey?: string;
+  desc?: string;
+  statedBy?: string;
+  points?: number;
+  evidence?: unknown;
+}
+
+interface GradeFeature {
+  name?: string;
+  consoleErrors?: string[];
+  criteria?: Criterion[];
+}
+
+interface GradePayload {
+  features?: GradeFeature[];
+}
+
+interface ContractResult {
+  id: string;
+  status: string;
+  detail?: string;
+}
+
+interface ContractLintPayload {
+  results?: ContractResult[];
+}
+
+interface GradeBundlePayload {
+  backend?: string;
+  outcome?: { kind?: string; phase?: string; reason?: string };
+}
+
+interface RepairBug {
+  area: string;
+  actor: string | null;
+  action: string | null;
+  expected: string;
+  observed: string;
+  consoleErrors: string[];
+  contract: boolean;
+}
+
+// The public verb for the step that failed. Control and action names are the
+// agent's own vocabulary; nothing else about the step is repeated.
+function failedAction(action: string | undefined, finding: Finding | null): string | null {
+  if (action === 'fill') {
+    return finding?.kind === 'choice-missing' ? 'Select the requested choice' : 'Enter the requested value';
+  }
+  if (action === 'click') return 'Use the requested control';
+  if (action === 'signIn') return 'Sign in';
+  if (action === 'signUp') return 'Create the account';
+  if (action === 'reload') return 'Reload the page';
+  return null;
+}
+
+// What the application did, from the finding alone. A failure without a
+// finding (the feature's setup failed before this behavior was reached)
+// says so and nothing more.
+function observed(finding: Finding | null, phase: string): string {
+  if (finding) return renderFinding(finding);
+  return phase === 'setup'
+    ? 'the application did not reach this behavior; an earlier step of the same feature failed'
+    : 'the application did not do this';
+}
+
+export function parseReportBugsArgs(argv: string[]): ReportBugsArgs {
+  const { values } = parseNodeArgs({ args: argv.slice(2), options: {
+    app: { type: 'string' }, results: { type: 'string' }, out: { type: 'string' },
+    archive: { type: 'string' },
+    'history-json': { type: 'string' }, 'checks-json': { type: 'string' },
+    'controls-json': { type: 'string' },
+    'prior-regression': { type: 'string' },
+    'regression-context': { type: 'boolean' },
+  } });
+  const args: ParsedArgs = { app: values.app, results: values.results, out: values.out,
+    archive: values.archive,
+    history: values['history-json'] === undefined ? undefined : JSON.parse(values['history-json']),
+    checks: values['checks-json'] === undefined ? undefined : JSON.parse(values['checks-json']),
+    controls: values['controls-json'] === undefined ? undefined : JSON.parse(values['controls-json']) };
+  if (!args.app) {
+    throw new Error('Usage: report-bugs --app <dir> [--out <file>]');
+  }
+  args.results ??= join(args.app, 'stack-bench');
+  args.out ??= join(args.app, CODING_CONTAINER_BUG_REPORT_FILE);
+  args.history ??= [];
+  if (!Array.isArray(args.history)) throw new Error('--history-json must contain an array');
+  args.checks ??= null;
+  if (args.checks !== null && (!Array.isArray(args.checks)
+    || args.checks.some(check => typeof check !== 'string' || !check)
+    || new Set(args.checks).size !== args.checks.length)) {
+    throw new Error('--checks-json must contain distinct non-empty strings');
+  }
+  args.controls ??= null;
+  if (args.controls !== null && (!Array.isArray(args.controls)
+    || args.controls.some(control => typeof control !== 'string' || !control)
+    || new Set(args.controls).size !== args.controls.length)) {
+    throw new Error('--controls-json must contain distinct non-empty strings');
+  }
+  return { app: args.app, results: args.results, out: args.out, archive: args.archive,
+    history: args.history as RepairHistoryEntry[], checks: args.checks as string[] | null,
+    controls: args.controls as string[] | null,
+    priorRegression: values['prior-regression'] ?? null,
+    regressionContext: values['regression-context'] ?? false };
+}
+
+function priorRegressionSection(path: string): string[] {
+  const details = assertAgentVisibleText(readFileSync(resolve(path), 'utf8')).trim()
+    .replace(/^### /gm, '#### ')
+    .replace(/^## /gm, '### ');
+  if (!details) throw new Error('prior regression report has no failure details');
+  return [
+    '## Previous repair regression',
+    '',
+    'The previous repair was rolled back because it broke behavior that already worked.',
+    'Keep this behavior working while you fix the current problems.',
+    '',
+    ...details.split(/\r?\n/),
+    '',
+  ];
+}
+
+export function createBugReport(args: ReportBugsArgs): number {
+  const resultsDir = resolve(args.results);
+  if (!existsSync(resultsDir)) throw new Error(`No grading results in ${resultsDir}`);
+
+  const bugs: RepairBug[] = [];
+  const selectedChecks = args.checks === null ? null : new Set(args.checks);
+  const selectedControls = args.controls === null ? null : new Set(args.controls);
+
+  for (const file of readdirSync(resultsDir).filter(name => /^grading-.*\.json$/.test(name))) {
+    const report = readArtifactPayload<GradePayload>(join(resultsDir, file), { expectedKind: 'grade' });
+    for (const feature of report.features ?? []) {
+      // Repairs receive only scored, typed application failures.
+      for (const criterion of feature.criteria ?? []) {
+        if (selectedChecks && (!criterion.stableKey
+          || !selectedChecks.has(criterion.stableKey))) continue;
+        if (!(Number(criterion.points) > 0)) continue;
+        const evidence = criterionEvidence(criterion);
+        if (!evidenceIsRepairable(evidence)) continue;
+        const actionEntry = evidence.actions.at(-1);
+        const actionId = actionEntry && typeof actionEntry.evidence === 'object' && actionEntry.evidence
+          ? String((actionEntry.evidence as { action?: { id?: string } }).action?.id ?? '') : undefined;
+        const expected = (criterion.statedBy ?? criterion.desc ?? '').trim() || 'the requested behavior';
+        bugs.push({
+          area: sanitiseDiagnostic(feature.name, 120),
+          actor: sanitiseDiagnostic(actionEntry?.actor ?? evidence.actor, 120) || null,
+          action: failedAction(actionId, evidence.finding),
+          expected,
+          observed: observed(evidence.finding, evidence.phase),
+          consoleErrors: (feature.consoleErrors ?? []).slice(0, 3)
+            .map(sanitiseConsoleError).filter(Boolean),
+          contract: false,
+        });
+      }
+    }
+  }
+
+  // Contract failures are separate because the interface name is itself the public
+  // requirement here. Behavioral failures above must never expose one.
+  const lintPath = join(resultsDir, ARTIFACT_FILE.contractLint);
+  if (existsSync(lintPath)) {
+    const lint = readArtifactPayload<ContractLintPayload>(lintPath, { expectedKind: 'contract_lint' });
+    for (const result of (lint.results ?? []).filter(item => item.status === 'FAIL'
+      && (!selectedControls || selectedControls.has(item.id)))) {
+      bugs.push({
+        area: 'Application interface',
+        actor: null,
+        action: null,
+        expected: `A visible element for "${(result.detail ?? '').split('expected: ').pop()}" must use the "${result.id}" application interface`,
+        observed: sanitiseDiagnostic(result.detail
+          ?? `no visible element with id="${result.id}" was found after a clean reset`, 500),
+        consoleErrors: [], contract: true,
+      });
+    }
+  }
+
+  const bundlePath = join(resultsDir, ARTIFACT_FILE.gradeBundle);
+  if (existsSync(bundlePath)) {
+    const bundle = readArtifactPayload<GradeBundlePayload>(bundlePath, { expectedKind: 'grade_bundle' });
+    if (bundle.outcome?.kind === 'app_failure' && bundle.outcome.reason) {
+      const expectedByPhase: Record<string, string> = {
+        'database-provenance': `The app must use the ${bundle.backend} database and connection supplied for this run.`,
+        'application-layout': 'The app must use a project layout that can be built, started, and reset repeatedly.',
+        'application-restart': `The app must provide ${CODING_CONTAINER_START_SCRIPT}. From clean source, it must install dependencies, build, and start the complete application without changing source files.`,
+      };
+      const expected = expectedByPhase[bundle.outcome.phase ?? '']
+        ?? 'The app must start successfully in the supplied environment.';
+      bugs.unshift({
+        area: 'Application setup',
+        actor: null,
+        action: null,
+        expected,
+        observed: sanitiseDiagnostic(bundle.outcome.reason, 500),
+        consoleErrors: [],
+        contract: false,
+      });
+    }
+  }
+
+  if (bugs.length === 0) {
+    console.log('No failures — no bug report written.');
+    return 3;
+  }
+
+  const behavioral = bugs.filter(bug => !bug.contract);
+  const contractFailures = bugs.filter(bug => bug.contract);
+  const lines = args.regressionContext ? [] : [
+    '# Bug Report',
+    '',
+    'The application has these problems after a clean database reset and a fresh',
+    'restart. Fix the behavior, then redeploy.',
+    'Do not change behavior that is already correct. A result from existing local',
+    'state does not replace the clean result below.',
+    '',
+  ];
+
+  if (!args.regressionContext && args.history.length) {
+    lines.push('## Earlier work', '');
+    lines.push('Earlier changes did not fix the current problems. Use the current source as',
+      'the starting point. Do not repeat an earlier approach only because it appeared',
+      'to work with existing local state.', '');
+  }
+
+  if (behavioral.length) {
+    lines.push('## Behavior', '');
+    behavioral.forEach((bug, index) => {
+      lines.push(`### Bug ${index + 1}: ${bug.area}`, '');
+      if (bug.actor) lines.push(`**Actor/session:** ${bug.actor}`, '');
+      if (bug.action) lines.push(`**Failed action:** ${bug.action}`, '');
+      lines.push(`**Expected:** ${bug.expected}`, '');
+      lines.push(`**Actual:** ${bug.observed}`, '');
+      if (bug.consoleErrors.length) {
+        lines.push('**Console or network errors:**', '');
+        bug.consoleErrors.forEach(error => lines.push(`- \`${error}\``));
+        lines.push('');
+      }
+    });
+  }
+
+  if (contractFailures.length) {
+    lines.push('## Application interface', '');
+    lines.push('These required elements were not available in the clean application state:', '');
+    contractFailures.forEach(bug => {
+      lines.push(`- **Expected:** ${bug.expected}`);
+      lines.push(`  **Actual:** ${bug.observed}`);
+    });
+    lines.push('');
+  }
+
+  if (args.priorRegression) lines.push(...priorRegressionSection(args.priorRegression));
+
+  const reportText = assertAgentVisibleText(lines.join('\n'));
+  writeFileSync(args.out, reportText);
+  if (args.archive) {
+    mkdirSync(dirname(args.archive), { recursive: true });
+    writeFileSync(args.archive, reportText);
+  }
+  console.log(`Wrote ${bugs.length} bug(s) to ${args.out}`);
+  return 0;
+}
+
+function main(): void {
+  try {
+    process.exitCode = createBugReport(parseReportBugsArgs(process.argv));
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : String(error));
+    process.exitCode = 2;
+  }
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) main();
diff --git a/tools/stack-bench/commands/reset-backend.ts b/tools/stack-bench/commands/reset-backend.ts
new file mode 100644
index 00000000000..c2815d3b103
--- /dev/null
+++ b/tools/stack-bench/commands/reset-backend.ts
@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+
+import { GENERATED_APP_LAYOUT_EXIT_CODE, resetBackend } from '../src/stacks/backend-reset.js';
+import { GeneratedAppLayoutError } from '../src/runtime/spacetime-layout.js';
+import { redactCredentials } from '../src/evidence/diagnostic-sanitizer.js';
+
+const [backend, app] = process.argv.slice(2);
+if (!backend || !app) throw new Error('usage: node dist/commands/reset-backend.js <backend> <app-dir>');
+
+Promise.resolve().then(() => resetBackend({ backend, app })).then(result => {
+  console.log(result);
+}).catch(error => {
+  if (error instanceof GeneratedAppLayoutError || error?.code === 'generated_app_layout') {
+    console.error(`GENERATED_APP_LAYOUT: ${error.message}`);
+    process.exitCode = GENERATED_APP_LAYOUT_EXIT_CODE;
+    return;
+  }
+  const childOutput = [error?.stderr, error?.stdout]
+    .filter(value => value !== undefined && value !== null && String(value).trim())
+    .map(value => String(value).trim()).join('\n');
+  if (childOutput) console.error(redactCredentials(childOutput).slice(-2000));
+  console.error(error.stack ?? error.message);
+  process.exitCode = 1;
+});
diff --git a/tools/stack-bench/commands/run-suite.ts b/tools/stack-bench/commands/run-suite.ts
new file mode 100644
index 00000000000..9dfd4342a26
--- /dev/null
+++ b/tools/stack-bench/commands/run-suite.ts
@@ -0,0 +1,1153 @@
+#!/usr/bin/env node
+
+import { execFile, execFileSync } from 'node:child_process';
+import type { ExecFileException, ExecFileSyncOptionsWithStringEncoding } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
+import { readFileSync, writeFileSync, mkdirSync, existsSync, readdirSync, rmSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { setTimeout as sleep } from 'node:timers/promises';
+import { parseArgs as parseNodeArgs, promisify } from 'node:util';
+import { chromium } from 'playwright';
+import type { BrowserServer } from 'playwright';
+import { dbName, loadTrack, suitesFor, DEFAULT_TRACK } from '../src/composition/tracks.js';
+import { controlBackendRuntime, parseRuntimeControlSpec }
+  from '../src/runtime/backend-control.js';
+import type { RuntimeControlSpec } from '../src/runtime/backend-control.js';
+import { ARTIFACT_FILE, readArtifactPayload, recipeArtifactIdentities, writeArtifact }
+  from '../src/evidence/artifacts.js';
+import { bundleRecipeRelease, resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { createBoundRecipeTaskRequest, resolveBoundRecipeTaskRequest } from '../src/composition/recipe-selection.js';
+import { contractInterfaceNames } from '../src/composition/agent-visible-contract.js';
+import { resolveCalibrationForRelease } from '../src/composition/calibration-compiler.js';
+import { criterionEvidence, evidencePassed } from '../src/evidence/check-evidence.js';
+import { renderEvidenceConsoleLine } from '../src/evidence/evidence-presentation.js';
+import { STACK_ADAPTER_REGISTRY } from '../src/stacks/stack-adapters.js';
+import { requireLeasedDatabase, requireLeasedSpacetime } from '../src/stacks/backend-reset-guard.js';
+import { aggregatePackRuntime, exceededPackBudgets } from '../src/composition/pack-runtime.js';
+import { hashAppSource } from '../src/runtime/source-snapshot.js';
+import { GENERATED_APP_LAYOUT_EXIT_CODE } from '../src/stacks/backend-reset.js';
+import { readBackendLease } from '../src/runtime/backend-lease.js';
+import { redactCredentials } from '../src/evidence/diagnostic-sanitizer.js';
+import { canonicalDefinitionJson } from '../src/composition/definition-plan.js';
+import { sha256 } from '../src/evidence/provenance.js';
+import { GRADER_SOURCE_TIMEOUT_MS } from '../src/runtime/grading-timeout.js';
+import type { BackendLease, BackendLeaseExpectation } from '../src/runtime/backend-lease.js';
+import type { CheckEvidence } from '../src/evidence/check-evidence.js';
+import type { AggregatedPackRuntimeEvidence, PackRuntimeEvidence } from '../src/composition/pack-runtime.js';
+import { isModularRecipeTaskRequest } from '../src/composition/recipe-selection.js';
+import type { BoundRecipeTaskRequestResult, RecipeSelection } from '../src/composition/recipe-selection.js';
+import type { RecipeBinding, RecipeCheck } from '../src/composition/recipe-release.js';
+import type { Track, TrackSuite } from '../src/composition/tracks.js';
+
+import { STACK_BENCH_ROOT as ROOT, compiledEntrypoint } from '../src/package-root.js';
+const RESET = compiledEntrypoint('commands', 'reset-backend.js');
+
+type Observation = 'scored' | 'observed';
+type Selection = {
+  schemaVersion: number;
+  recipe: { id: string; version: string; contentSha256: string };
+  requested: RecipeSelection['requested'];
+  sha256: string;
+  checks: RecipeCheck[];
+  scoredPoints: number;
+  observedChecks?: Array<RecipeCheck & { treatment: string }>;
+  observedPoints?: number;
+  evaluationSha256?: string;
+  regressionChecks?: Array<RecipeCheck & { treatment: string }>;
+  regressionPoints?: number;
+  observation?: Observation;
+};
+type DeclaredSuite = TrackSuite;
+type Failure = Error & { stdout?: string; stderr?: string; status?: number | null; signal?: string | null;
+  code?: string };
+type FailureDetail = { message?: unknown; stderr?: unknown } | null;
+type RecipeTaskArgument = { recipe: { id: string; version: string; contentSha256?: string } } & Record<string, unknown>;
+type RunArguments = {
+  app: string;
+  url: string;
+  backend: string;
+  label: string;
+  out: string;
+  level: string;
+  reset: boolean;
+  media: boolean;
+  runIndex: number;
+  track: string;
+  packIds: string[];
+  checkKeys: string[];
+  observation: Observation;
+  recipe?: string;
+  recipeTask?: RecipeTaskArgument;
+  credentialAliases?: unknown;
+  regressionChecks: string[];
+  sourceSha256?: string;
+  restartSpec?: RuntimeControlSpec;
+  applicationFailure?: ApplicationFailure;
+  parentAttemptId?: string;
+  databaseLease?: BackendLease | null;
+  browserWsEndpoint?: string;
+  selection?: Selection | null;
+  bundleArtifactId: string;
+};
+type GradeCriterion = { id: string; stableKey?: string; serverCheck?: string; evidence?: CheckEvidence };
+type GradeFeature = { name: string; criteria: GradeCriterion[];
+  cleanupEvidence?: { failures: Array<{ stage: string }> } };
+type GradePayload = { total: number; max: number; features: GradeFeature[];
+  selection?: { checks?: RecipeCheck[] }; packRuntime?: PackRuntimeEvidence };
+type LintPayload = {
+  pass: boolean;
+  counts: { pass: number; fail: number; blocked: number; scenario: number };
+};
+type ActionsPayload = { missing: string[]; results: unknown[] };
+type RuntimeProvenance = { ok: boolean | null; verified: boolean; reason: string };
+type ApplicationProbeResult = { ok: boolean; detail: string | null };
+type ResetOutcome = { kind: string; phase: string; appFailures?: string[] };
+type ApplicationFailure = ResetOutcome & { kind: 'app_failure'; reason: string };
+type DatabaseProvenance = { ok: boolean; reason: string; url?: string };
+type GradeLeaseReader = typeof readBackendLease;
+type MutationDirectoryEntry = { name: string; isDirectory(): boolean; isFile(): boolean };
+type MutationDirectoryReader = (path: string, options: { withFileTypes: true }) => readonly MutationDirectoryEntry[];
+type ProbeResponse = { ok: boolean; status: number };
+type ApplicationFetch = (url: string, init: { signal: AbortSignal }) => Promise<ProbeResponse>;
+type DatabaseProvenanceDefinition = Track['databaseProvenance'];
+type DatabaseNameLease = { resources: { database?: string | null } };
+type ProvenanceFetch = (url: string, init: { method: string; headers: Record<string, string>;
+  body: string; signal: AbortSignal }) => Promise<{ ok: boolean; status: number }>;
+type ProvenanceWrite = { ok: true; marker: string } | { ok: false; marker: null; reason: string };
+type ApplicationFailureSelection = { checks: Array<{ executionId: string; points?: number }> };
+type ContractLintArguments = Pick<RunArguments,
+  'url' | 'level' | 'track' | 'label' | 'out' | 'bundleArtifactId' | 'credentialAliases'>;
+type BundleSelection = Selection & { attemptedChecks: string[]; reportedChecks: string[];
+  notRun: Array<{ stableKey: string; reason: string }> };
+type Bundle = {
+  definitionSchemaVersion: number;
+  recipeRelease: ReturnType<typeof bundleRecipeRelease>;
+  calibration: { id: string; version: string; state: string; contentSha256: string } | null;
+  label: string; track: string; backend: string; url: string; app: string; level: number;
+  observation: Observation; source?: { sha256: string };
+  suites: Record<string, GradePayload | LintPayload | null>;
+  totals: Record<string, unknown>;
+  selection: BundleSelection | null;
+  code?: ReturnType<typeof codeMetrics>;
+  error?: string;
+  outcome?: { kind: string; phase: string; reason?: string; appFailures?: string[] };
+  provenance?: DatabaseProvenance & { runtime?: RuntimeProvenance };
+  actions?: ActionsPayload | null;
+  packRuntime?: AggregatedPackRuntimeEvidence;
+};
+
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+const parseObservation = (value: string): Observation => {
+  if (value === 'scored' || value === 'observed') return value;
+  throw new Error('--observation must be scored or observed');
+};
+
+export function suitesForRecipe(track: Track, binding: RecipeBinding): DeclaredSuite[] {
+  if (!binding?.execution?.length) throw new Error('recipe has no typed execution plan');
+  return binding.execution.map(entry => ({
+    id: entry.id,
+    spec: resolve(track.dir, entry.source ?? ''),
+    ...(entry.ownership.kind === 'inherited'
+      ? { inherited: true, fromLevel: entry.ownership.fromLevel }
+      : {}),
+  }));
+}
+
+export function childFailureDetail(failure: FailureDetail = null, stdout = '', limit = 600): string {
+  const processOutput = [failure?.stderr, stdout]
+    .filter(value => value !== undefined && value !== null && String(value).trim())
+    .join('\n').trim();
+  const diagnostic = processOutput || String(failure?.message ?? '').trim();
+  const lines = diagnostic.split(/\r?\n/).map(line => line.trim()).filter(Boolean);
+  if (!lines.length) return '';
+  const punctuationOnly = (line: string) =>
+    [...line].every(character => '[]{},'.includes(character));
+  const noise = (line: string) => line.startsWith('at ') || /^Node\.js v/.test(line)
+    || /^node:internal\//.test(line) || /^\^+$/.test(line) || punctuationOnly(line);
+  const cause = lines.find(line => !noise(line) && /(?:error|failed|timeout|closed|econn|killed)/i.test(line))
+    ?? lines.find(line => !noise(line)) ?? lines[0];
+  const selected = [cause, ...lines.slice(-4)].filter((line, index, all) => all.indexOf(line) === index);
+  return selected.join(' | ').slice(0, limit);
+}
+
+export function resetFailureOutcome(error: unknown): ResetOutcome {
+  const failure = isRecord(error) ? error : {};
+  return failure.status === GENERATED_APP_LAYOUT_EXIT_CODE
+    ? { kind: 'app_failure', phase: 'application-layout',
+      appFailures: ['application-layout'] }
+    : failure.code === 'generated_app_not_restartable'
+    ? { kind: 'app_failure', phase: 'application-restart',
+      appFailures: ['application-restart'] }
+    : { kind: 'harness_failure', phase: 'database-reset' };
+}
+
+export function applicationFailureTotals(selection: ApplicationFailureSelection | null | undefined,
+  declaredSuites: Array<Pick<DeclaredSuite, 'id' | 'inherited'>>): Record<string, unknown> {
+  if (!selection?.checks?.length) return {};
+  const inherited = new Set(declaredSuites.filter(suite => suite.inherited).map(suite => suite.id));
+  const currentMax = selection.checks.filter(check => !inherited.has(check.executionId))
+    .reduce((total, check) => total + Number(check.points ?? 0), 0);
+  const regressionMax = selection.checks.filter(check => inherited.has(check.executionId))
+    .reduce((total, check) => total + Number(check.points ?? 0), 0);
+  return { score: 0, max: currentMax, dirty: false, contractPass: null,
+    regression: regressionMax ? { score: 0, max: regressionMax } : null };
+}
+
+export function clearPreviousGradeOutputs(output: string): void {
+  const generated = existsSync(output) ? readdirSync(output).filter(name =>
+    /^grading-.+\.json$/.test(name) || /^grader-.+\.(?:stdout|stderr)\.log$/.test(name)) : [];
+  for (const name of [ARTIFACT_FILE.gradeBundle, ARTIFACT_FILE.contractLint,
+    ARTIFACT_FILE.actions, 'media', 'failure-media',
+    'database-provenance', ...generated]) {
+    rmSync(join(output, name), { recursive: true, force: true });
+  }
+}
+
+function recordGraderChildResult(output: string, suiteId: string,
+  result: { stdout?: unknown; stderr?: unknown; failure?: Error | null }) {
+  const stdout = redactCredentials(String(result.stdout ?? ''));
+  const stderr = redactCredentials(String(result.stderr ?? ''));
+  const safeId = String(suiteId).replace(/[^A-Za-z0-9._-]/g, '_');
+  const stdoutName = `grader-${safeId}.stdout.log`;
+  const stderrName = `grader-${safeId}.stderr.log`;
+  writeFileSync(join(output, stdoutName), stdout);
+  writeFileSync(join(output, stderrName), stderr);
+  const failure = result.failure ?? null;
+  if (failure) Object.assign(failure, { stdout, stderr });
+  return { stdout, stderr, failure, stdoutName, stderrName };
+}
+
+const execFileAsync = promisify(execFile);
+
+export async function runGraderChild(argv: string[], output: string, suiteId: string) {
+  try {
+    const result = await execFileAsync(process.execPath, argv, { encoding: 'utf8', cwd: ROOT,
+      timeout: COMMAND_TIMEOUT_MS, maxBuffer: 64 * 1024 * 1024 });
+    return recordGraderChildResult(output, suiteId, result);
+  } catch (error) {
+    const failure = error instanceof Error ? error : new Error(String(error));
+    const processFailure = error as ExecFileException & { stdout?: unknown; stderr?: unknown };
+    return recordGraderChildResult(output, suiteId, {
+      stdout: processFailure.stdout, stderr: processFailure.stderr, failure,
+    });
+  }
+}
+
+function gradeLeaseInput(backend: string, env: NodeJS.ProcessEnv): { path: string;
+  expected: BackendLeaseExpectation } | null {
+  if (!['mongodb', 'postgres', 'spacetime'].includes(backend)) return null;
+  const path = String(env.STACK_BENCH_LEASE ?? '').trim();
+  const token = String(env.STACK_BENCH_LEASE_TOKEN ?? '').trim();
+  if (!path && !token) return null;
+  if (!path || !token) throw new Error('database grading requires both lease path and lease token');
+  return { path, expected: { token, backend, active: true } };
+}
+
+export function databaseLeaseForGrading(backend: string, env = process.env, {
+  readLease = readBackendLease,
+}: { readLease?: GradeLeaseReader } = {}) {
+  const input = gradeLeaseInput(backend, env);
+  if (!input) return null;
+  const lease = readLease(input.path, input.expected);
+  if (backend === 'spacetime') {
+    if (!lease.resources.module || !lease.resources.serverUri) {
+      throw new Error('active spacetime lease has no complete module target');
+    }
+    return lease;
+  }
+  const container = String(lease.resources?.container?.name ?? '').trim();
+  const containerId = String(lease.resources?.container?.id ?? '').trim();
+  if (!container || !containerId) {
+    throw new Error(`active ${backend} lease has no complete database container identity`);
+  }
+  return lease;
+}
+
+export function databaseNameForGrading(track: Pick<Track, 'slug'>, runIndex: number,
+  lease: DatabaseNameLease | null = null): string {
+  if (!lease) return dbName(track, runIndex);
+  const database = String(lease.resources?.database ?? '').trim();
+  if (!database) throw new Error('active database lease has no database name');
+  return database;
+}
+
+function parseArgs(argv: string[]): RunArguments {
+  const { values } = parseNodeArgs({ args: argv.slice(2), options: {
+    app: { type: 'string' }, url: { type: 'string' }, backend: { type: 'string' },
+    label: { type: 'string' }, out: { type: 'string' }, level: { type: 'string' },
+    recipe: { type: 'string' }, 'recipe-task-json': { type: 'string' },
+    'credential-aliases-json': { type: 'string' }, 'regression-checks-json': { type: 'string' },
+    observation: { type: 'string' }, 'source-sha256': { type: 'string' },
+    'no-media': { type: 'boolean' }, track: { type: 'string' },
+    pack: { type: 'string', multiple: true }, check: { type: 'string', multiple: true },
+    'restart-spec': { type: 'string' }, 'application-failure-json': { type: 'string' },
+    'run-index': { type: 'string' }, 'no-reset': { type: 'boolean' },
+    'parent-attempt-id': { type: 'string' },
+  } });
+  const a: RunArguments = { app: values.app ?? '', url: values.url ?? '',
+    backend: values.backend ?? '', label: values.label ?? '', out: values.out ?? '',
+    level: values.level ?? '1', reset: !(values['no-reset'] ?? false),
+    media: !(values['no-media'] ?? false), runIndex: Number(values['run-index'] ?? 0),
+    track: values.track ?? DEFAULT_TRACK,
+    packIds: (values.pack ?? []).flatMap(value => value.split(',').filter(Boolean)),
+    checkKeys: (values.check ?? []).flatMap(value => value.split(',').filter(Boolean)),
+    observation: parseObservation(values.observation ?? 'scored'),
+    recipe: values.recipe,
+    recipeTask: values['recipe-task-json'] === undefined ? undefined : JSON.parse(values['recipe-task-json']),
+    credentialAliases: values['credential-aliases-json'] === undefined
+      ? undefined : JSON.parse(values['credential-aliases-json']),
+    regressionChecks: values['regression-checks-json'] === undefined
+      ? [] : JSON.parse(values['regression-checks-json']),
+    sourceSha256: values['source-sha256'],
+    restartSpec: values['restart-spec'] === undefined
+      ? undefined : parseRuntimeControlSpec(JSON.parse(values['restart-spec'])),
+    applicationFailure: values['application-failure-json'] === undefined
+      ? undefined : JSON.parse(values['application-failure-json']),
+    parentAttemptId: values['parent-attempt-id'], bundleArtifactId: '' };
+  if (!a.app || !a.url || !a.backend || !a.label) {
+    console.error('Usage: node dist/commands/run-suite.js --app <dir> --url <url> --backend <stack> --label <id> [--out <dir>] [--media] [--no-reset]');
+    process.exit(2);
+  }
+  if (!['scored', 'observed'].includes(a.observation)) {
+    throw new Error('--observation must be scored or observed');
+  }
+  if (a.observation === 'observed' && !/^[a-f0-9]{64}$/.test(a.sourceSha256 ?? '')) {
+    throw new Error('observed specifications require --source-sha256');
+  }
+  if (a.sourceSha256 !== undefined && !/^[a-f0-9]{64}$/.test(a.sourceSha256)) {
+    throw new Error('--source-sha256 must be a SHA-256 digest');
+  }
+  if (a.applicationFailure && (a.applicationFailure.kind !== 'app_failure'
+    || typeof a.applicationFailure.phase !== 'string' || !a.applicationFailure.phase
+    || typeof a.applicationFailure.reason !== 'string' || !a.applicationFailure.reason)) {
+    throw new Error('--application-failure-json must describe an application failure');
+  }
+  a.out ||= join(a.app, 'stack-bench');
+  if (!Array.isArray(a.regressionChecks)
+    || a.regressionChecks.some(key => typeof key !== 'string' || !key)) {
+    throw new Error('--regression-checks-json must contain stable check keys');
+  }
+  return a;
+}
+
+export function selectObservationScope(selectedTask: BoundRecipeTaskRequestResult | null,
+  observation: Observation = 'scored'): Selection | null {
+  if (observation === 'scored') return selectedTask?.selection ?? null;
+  if (observation !== 'observed') throw new Error(`unknown observation scope ${observation}`);
+  if (!selectedTask || !isModularRecipeTaskRequest(selectedTask)) {
+    throw new Error('observed specifications require a modular schema-3 task request');
+  }
+  const selection = selectedTask.selection;
+  if (!selection.observedChecks.length) throw new Error('observed specification scope is empty');
+  return {
+    ...selection,
+    observation: 'observed',
+    checks: selection.observedChecks,
+    scoredPoints: 0,
+    observedPoints: selection.observedChecks.reduce((total, check) => total + check.points, 0),
+  };
+}
+
+export function attachRegressionScope(selection: Selection | null, recipeBinding: RecipeBinding | null,
+  declaredSuites: DeclaredSuite[], stableKeys: string[] = []): Selection | null {
+  if (!stableKeys.length) return selection;
+  if (!selection || !recipeBinding?.release?.checkCatalog) {
+    throw new Error('regression checks require a recipe-bound scored selection');
+  }
+  const uniqueKeys = [...new Set(stableKeys)];
+  if (uniqueKeys.length !== stableKeys.length) throw new Error('regression checks contain duplicates');
+  const currentKeys = new Set(selection.checks.map(check => check.stableKey));
+  const catalog = new Map(recipeBinding.release.checkCatalog
+    .map(check => [check.stableKey, check]));
+  const inheritedSuites = new Set(declaredSuites.filter(suite => suite.inherited)
+    .map(suite => suite.id));
+  const regressionChecks = uniqueKeys.map(key => {
+    if (currentKeys.has(key)) throw new Error(`regression check ${key} is already in the current score`);
+    const check = catalog.get(key);
+    if (!check) throw new Error(`regression check ${key} is absent from the cumulative recipe`);
+    if (!inheritedSuites.has(check.executionId)) {
+      throw new Error(`regression check ${key} does not belong to an inherited execution`);
+    }
+    return { ...check, treatment: check.treatment ?? 'regression' };
+  });
+  const evaluationDocument = { schemaVersion: 1, selectionSha256: selection.sha256,
+    regressionChecks: uniqueKeys.slice().sort() };
+  return {
+    ...selection,
+    checks: [...selection.checks, ...regressionChecks],
+    regressionChecks: regressionChecks.map(check => ({ ...check, treatment: check.treatment ?? 'regression' })),
+    regressionPoints: regressionChecks.reduce((total, check) => total + check.points, 0),
+    evaluationSha256: sha256(Buffer.from(canonicalDefinitionJson(evaluationDocument))),
+  };
+}
+
+const COMMAND_TIMEOUT_MS = GRADER_SOURCE_TIMEOUT_MS;
+const run = (cmd: string, args: readonly string[], opts: Omit<ExecFileSyncOptionsWithStringEncoding, 'encoding'> = {}): string =>
+  execFileSync(cmd, args, {
+    encoding: 'utf8', stdio: 'pipe', cwd: ROOT, timeout: COMMAND_TIMEOUT_MS, ...opts,
+  });
+
+export async function verifyApplicationProbe(url: string, {
+  fetchImpl = fetch, timeoutMs = 5000,
+}: { fetchImpl?: ApplicationFetch; timeoutMs?: number } = {}): Promise<ApplicationProbeResult> {
+  let response;
+  try {
+    response = await fetchImpl(url, { signal: AbortSignal.timeout(timeoutMs) });
+  } catch (error) {
+    return { ok: false,
+      detail: `application did not respond: ${error instanceof Error ? error.message : String(error)}` };
+  }
+  if (!response.ok) {
+    return { ok: false, detail: `application returned HTTP ${response.status}` };
+  }
+  return { ok: true, detail: null };
+}
+
+export async function waitForApplicationProbe(url: string, {
+  attempts = 9, intervalMs = 250, probeTimeoutMs = 1000,
+  probe = verifyApplicationProbe, sleepImpl = sleep,
+}: { attempts?: number; intervalMs?: number; probeTimeoutMs?: number;
+  probe?: typeof verifyApplicationProbe;
+  sleepImpl?: (ms: number) => Promise<void> } = {}): Promise<ApplicationProbeResult> {
+  if (!Number.isInteger(attempts) || attempts < 1) {
+    throw new Error('application probe attempts must be a positive integer');
+  }
+  let result = null;
+  for (let attempt = 1; attempt <= attempts; attempt += 1) {
+    result = await probe(url, { timeoutMs: probeTimeoutMs });
+    if (result.ok || attempt === attempts) return result;
+    await sleepImpl(intervalMs);
+  }
+  return result ?? { ok: false, detail: 'application readiness probe did not run' };
+}
+
+// Confirm the app uses the database leased to this run.
+export function checkDatabaseProvenance(args: Pick<RunArguments, 'app' | 'backend'>): DatabaseProvenance {
+  const adapter = STACK_ADAPTER_REGISTRY.get(args.backend);
+  const expected = adapter.ports.allocations().db;
+  if (!expected) return { ok: true, reason: 'no external database for this backend' };
+  // Neutral guidance does not prescribe project layout. Search the app for the
+  // connection string instead of assuming it is in server/.env.
+  const urls: string[] = [];
+  let usesLeasedEnvironment = false;
+  const walk = (dir: string): void => {
+    if (!existsSync(dir)) return;
+    for (const e of readdirSync(dir, { withFileTypes: true })) {
+      if (/^(node_modules|dist|\.vite|\.git|module_bindings)$/.test(e.name)) continue;
+      const p = join(dir, e.name);
+      if (e.isDirectory()) { walk(p); continue; }
+      if (!/\.(env|ts|tsx|js|mjs|json|yaml|yml)$|^\.env/.test(e.name)) continue;
+      try {
+        const text = readFileSync(p, 'utf8');
+        if (/process\.env(?:\.DATABASE_URL|\[['"]DATABASE_URL['"]\])/.test(text)) {
+          usesLeasedEnvironment = true;
+        }
+        urls.push(...adapter.agent.findDatabaseUrls({ text }));
+      } catch { /* unreadable file proves nothing */ }
+    }
+  };
+  walk(args.app);
+  if (usesLeasedEnvironment) {
+    return { ok: true, url: 'process.env.DATABASE_URL',
+      reason: 'app reads the database URL supplied by its authenticated backend lease' };
+  }
+  if (!urls.length) return { ok: false,
+    reason: 'app neither reads process.env.DATABASE_URL nor contains a database connection string' };
+  const matchesExpectedPort = (value: string): boolean => {
+    try { return Number(new URL(value).port) === Number(expected); }
+    catch { return false; }
+  };
+  const ok = urls.some(matchesExpectedPort);
+  return { ok, url: urls[0],
+    reason: ok ? 'ok' : `app targets ${urls[0]} but the benchmark database is on port ${expected}` };
+}
+
+export async function writeApplicationDatabaseMarker(
+  args: Pick<RunArguments, 'backend' | 'url'>,
+  track: Pick<Track, 'actions'>,
+  definition: DatabaseProvenanceDefinition,
+  fetchImpl: ProvenanceFetch = fetch,
+): Promise<ProvenanceWrite> {
+  if (!definition) throw new Error('track does not define runtime database provenance');
+  const action = track.actions.find(candidate => candidate.id === definition.action);
+  if (!action) throw new Error(`database provenance action is not declared: ${definition.action}`);
+  const marker = `sb${randomUUID().replaceAll('-', '').slice(0, 16)}`;
+  const body = { ...definition.body, [definition.markerParameter]: marker };
+  const adapter = STACK_ADAPTER_REGISTRY.get(args.backend);
+  const request = adapter.namedAction.request({ action,
+    input: { values: body },
+    url: args.url,
+    spacetime: args.backend === 'spacetime' ? adapter.grading.context() : null });
+  if (!request.url) throw new Error('database provenance action has no URL');
+  try {
+    const response = await fetchImpl(request.url, {
+      method: request.method,
+      headers: { 'Content-Type': 'application/json' },
+      body: request.body,
+      signal: AbortSignal.timeout(15_000),
+    });
+    return response.ok ? { ok: true, marker }
+      : { ok: false, marker: null,
+          reason: `application provenance action returned HTTP ${response.status}` };
+  } catch (error) {
+    return { ok: false, marker: null,
+      reason: `application provenance action failed: ${error instanceof Error ? error.message : String(error)}` };
+  }
+}
+
+export function databaseProvenanceFailure(error: unknown): { kind: string; phase: string; reason: string } {
+  return { kind: 'harness_failure', phase: 'database-provenance',
+    reason: `runtime database provenance failed: ${error instanceof Error ? error.message : String(error)}` };
+}
+
+export function checkRuntimeDatabaseProvenance(args: Pick<RunArguments, 'backend' | 'databaseLease'>,
+  marker: string | null = null): RuntimeProvenance {
+  const adapter = STACK_ADAPTER_REGISTRY.get(args.backend);
+  if (!('proveUse' in adapter.database)) {
+    return { ok: null, verified: false,
+      reason: 'exact runtime database marker proof is not implemented for this stack' };
+  }
+  if (!args.databaseLease) {
+    return { ok: null, verified: false,
+      reason: 'standalone grading has no authenticated database lease' };
+  }
+  if (typeof marker !== 'string' || !marker) {
+    return { ok: null, verified: false,
+      reason: 'the application action did not produce a database marker' };
+  }
+  if (args.backend === 'spacetime') {
+    return STACK_ADAPTER_REGISTRY.get('spacetime').database.proveUse(
+      { lease: requireLeasedSpacetime(args.databaseLease), marker });
+  }
+  const lease = requireLeasedDatabase(args.databaseLease);
+  return args.backend === 'mongodb'
+    ? STACK_ADAPTER_REGISTRY.get('mongodb').database.proveUse({ lease, marker })
+    : STACK_ADAPTER_REGISTRY.get('postgres').database.proveUse({ lease, marker });
+}
+
+function isGradePayload(value: GradePayload | LintPayload | null | undefined): value is GradePayload {
+  return value !== null && value !== undefined && 'total' in value && 'max' in value;
+}
+
+// Report the application size and direct runtime dependency count.
+export function codeMetrics(args: Pick<RunArguments, 'app' | 'backend'>): { serverLoc: number; serverFiles: number;
+  totalLoc: number; totalFiles: number; runtimeDeps: number } {
+  // Minimal-guidance apps may place server code outside the conventional directory.
+  const adapter = STACK_ADAPTER_REGISTRY.get(args.backend);
+  const conventional = adapter.agent.serverDirectory;
+  const SERVER_DIR = existsSync(join(args.app, conventional)) ? conventional : '.';
+  const walk = (dir: string, out: string[] = []): string[] => {
+    if (!existsSync(dir)) return out;
+    for (const e of readdirSync(dir, { withFileTypes: true })) {
+      if (/^(node_modules|dist|\.vite|module_bindings|drizzle)$/.test(e.name)) continue;
+      const p = join(dir, e.name);
+      if (e.isDirectory()) walk(p, out);
+      // Count every supported JavaScript and TypeScript source extension.
+      else if (/\.(ts|tsx|js|jsx|mjs|cjs)$/.test(e.name)) out.push(p);
+    }
+    return out;
+  };
+  const count = (files: string[]): number => files.reduce((n, f) => n + readFileSync(f, 'utf8').split('\n').length, 0);
+  // With no conventional server directory, "server" is everything that is not
+  // the client — otherwise the fallback counts the client twice and serverLoc
+  // equals totalLoc, which reads as a much larger backend than was written.
+  const allFiles = walk(args.app);
+  const serverFiles = SERVER_DIR === '.'
+    ? allFiles.filter(f => !/[\\/]client[\\/]/.test(f))
+    : walk(join(args.app, SERVER_DIR));
+
+  let deps = 0;
+  const packageFiles = new Set([
+    resolve(args.app, 'package.json'),
+    resolve(args.app, SERVER_DIR, 'package.json'),
+    resolve(args.app, 'client/package.json'),
+  ]);
+  for (const p of packageFiles) {
+    if (!existsSync(p)) continue;
+    try { deps += Object.keys(JSON.parse(readFileSync(p, 'utf8')).dependencies ?? {}).length; } catch { /* ignore */ }
+  }
+
+  return {
+    serverLoc: count(serverFiles), serverFiles: serverFiles.length,
+    totalLoc: count(allFiles), totalFiles: allFiles.length,
+    runtimeDeps: deps,
+  };
+}
+
+export function findMutationBackups(app: string, { readDir = readdirSync }:
+  { readDir?: MutationDirectoryReader } = {}): string[] {
+  const backups: string[] = [];
+  const walk = (dir: string): void => {
+    let entries;
+    try {
+      entries = readDir(dir, { withFileTypes: true });
+    } catch (error) {
+      // Vite atomically replaces transient dependency directories while the
+      // app runs. They are not source and may vanish between parent and child
+      // reads; a missing directory cannot contain a mutation backup.
+      if (isRecord(error) && error.code === 'ENOENT') return;
+      throw error;
+    }
+    for (const entry of entries) {
+      if (/^(node_modules|dist|\.vite|\.git|module_bindings)$/.test(entry.name)) continue;
+      const path = join(dir, entry.name);
+      if (entry.isDirectory()) walk(path);
+      else if (entry.isFile() && entry.name.endsWith('.mutation-backup')) backups.push(path);
+    }
+  };
+  walk(app);
+  return backups;
+}
+
+function resetDatabase(args: RunArguments): { ok: boolean; detail: string | null;
+  outcome: { kind: string; phase: string; appFailures?: string[] } | null } {
+  process.stdout.write('  reset database ... ');
+  try {
+    run(process.execPath, [RESET, args.backend, args.app]);
+    console.log('ok');
+  } catch (err) {
+    console.log('FAILED');
+    const failure: Failure = err instanceof Error ? err : new Error(String(err));
+    const detail = childFailureDetail(failure, failure.stdout);
+    console.log(`    ${detail}`);
+    return { ok: false, detail, outcome: resetFailureOutcome(failure) };
+  }
+  return { ok: true, detail: null, outcome: null };
+}
+
+export function contractLintArgv(args: ContractLintArguments,
+  selectedTask: BoundRecipeTaskRequestResult | null = null): string[] {
+  const interfaces = selectedTask ? contractInterfaceNames(selectedTask.task.contractText) : [];
+  const out = join(args.out, ARTIFACT_FILE.contractLint);
+  return [compiledEntrypoint('linter', 'lint.js'), '--url', args.url, '--level', args.level,
+      '--track', args.track, '--label', args.label, '--out', out,
+      '--parent-attempt-id', args.bundleArtifactId,
+      ...(args.credentialAliases
+        ? ['--credential-aliases-json', JSON.stringify(args.credentialAliases)] : []),
+      ...interfaces.flatMap(id => ['--hook', id])];
+}
+
+function lint(args: RunArguments, selectedTask: BoundRecipeTaskRequestResult | null = null): LintPayload | null {
+  process.stdout.write('  contract lint ... ');
+  const out = join(args.out, ARTIFACT_FILE.contractLint);
+  rmSync(out, { force: true });
+  let failure: unknown = null;
+  try {
+    run('node', contractLintArgv(args, selectedTask));
+  } catch (error) { failure = error; /* hook failures still write a report */ }
+  if (!existsSync(out)) {
+    const output = failure && typeof failure === 'object' && 'stdout' in failure
+      ? String(failure.stdout ?? '') : undefined;
+    const detail = failure instanceof Error
+      ? childFailureDetail(failure, output) : null;
+    throw new Error(`contract lint produced no report${detail ? `: ${detail}` : ''}`);
+  }
+  const r = readArtifactPayload<LintPayload>(out, { expectedKind: 'contract_lint' });
+  console.log(r.pass
+    ? r.counts.pass > 0
+      ? `PASS (${r.counts.pass} interfaces)`
+      : `DEFERRED (${r.counts.scenario} interfaces checked during feature grading)`
+    : `FAIL (${r.counts.fail} failed, ${r.counts.blocked} blocked)`);
+  return r;
+}
+
+// Named write actions let concurrency checks issue authenticated operations
+// without prescribing one transport. Missing actions are reported explicitly.
+function checkActions(args: RunArguments): ActionsPayload | null {
+  process.stdout.write(`  ${'actions'.padEnd(10)} ... `);
+  const out = join(args.out, ARTIFACT_FILE.actions);
+  rmSync(out, { force: true });
+  try {
+    run('node', [compiledEntrypoint('commands', 'check-actions.js'), '--backend', args.backend,
+      '--url', args.url, '--app', args.app ?? '.', '--track', args.track, '--out', out, '--quiet',
+      '--parent-attempt-id', args.bundleArtifactId]);
+  } catch { /* non-zero exit means something is missing; the report still lands */ }
+  if (!existsSync(out)) { console.log('NO REPORT'); return null; }
+  const r = readArtifactPayload<ActionsPayload>(out, { expectedKind: 'action_check' });
+  if (!r.missing.length) { console.log(`all ${r.results.length} present`); return r; }
+  console.log(`${r.missing.length} MISSING — ${r.missing.join(', ')}`);
+  return r;
+}
+
+async function gradeSuite(args: RunArguments, suite: DeclaredSuite, track: Track,
+  recipeBinding: RecipeBinding | null, bundleArtifactId: string, selectedChecks: RecipeCheck[] = [],
+  { recordSelection = true, captureMedia = true, outputDirectory = args.out }: {
+    recordSelection?: boolean; captureMedia?: boolean; outputDirectory?: string;
+  } = {}): Promise<GradePayload> {
+  process.stdout.write(`  ${suite.id.padEnd(10)} ... `);
+  mkdirSync(outputDirectory, { recursive: true });
+  const out = join(outputDirectory, `grading-${suite.id}.json`);
+  rmSync(out, { force: true });
+  const argv = [compiledEntrypoint('grader', 'grade.js'), '--url', args.url, '--level', args.level,
+    '--label', `${args.label}-${suite.id}`, '--out', out];
+  if (suite.spec) argv.push('--spec', suite.spec);
+  argv.push('--backend', args.backend, '--track', args.track);
+  if (recipeBinding) argv.push('--expected-recipe-sha256', recipeBinding.release.contentSha256);
+  const requestedRecipe = args.recipe ?? (args.recipeTask
+    ? `${args.recipeTask.recipe.id}@${args.recipeTask.recipe.version}` : null);
+  if (requestedRecipe) argv.push('--recipe', requestedRecipe);
+  for (const check of selectedChecks) argv.push('--selected-check', check.stableKey);
+  if (args.credentialAliases) {
+    argv.push('--credential-aliases-json', JSON.stringify(args.credentialAliases));
+  }
+  if (recordSelection && args.selection?.sha256) {
+    argv.push('--selection-sha256', args.selection.evaluationSha256 ?? args.selection.sha256);
+  }
+  argv.push('--parent-attempt-id', bundleArtifactId);
+  // The out-of-band write goes straight to this run's database, with no
+  // app code in the loop; only the harness knows which one that is.
+  argv.push('--db-name', databaseNameForGrading(track, args.runIndex ?? 0,
+    args.databaseLease?.resources.database ? args.databaseLease : null));
+  if (args.restartSpec) argv.push('--restart-spec', JSON.stringify(args.restartSpec));
+  // The systems criteria run scripts the app itself ships (back-office writes),
+  // so the grader has to know where the app lives.
+  if (args.app) argv.push('--app', args.app);
+  if (captureMedia && args.media) argv.push('--media', join(outputDirectory, 'media'), '--trace');
+  else if (captureMedia) argv.push('--failure-media', join(outputDirectory, 'failure-media'));
+  if (args.browserWsEndpoint) argv.push('--browser-ws-endpoint', args.browserWsEndpoint);
+  const child = await runGraderChild(argv, outputDirectory, suite.id);
+  const { stdout, failure } = child;
+  if (!existsSync(out)) {
+    console.log('NO REPORT');
+    const detail = childFailureDetail(failure, stdout);
+    throw new Error(`grader produced no report for ${suite.id}${detail ? `: ${detail}` : ''}; `
+      + `full diagnostics: ${child.stdoutName}, ${child.stderrName}`);
+  }
+  const r = readArtifactPayload<GradePayload>(out, { expectedKind: 'grade' });
+  if (selectedChecks.length) {
+    const expected = selectedChecks.map(check => check.stableKey).sort();
+    const reported = (r.selection?.checks ?? []).map(check => check.stableKey).sort();
+    if (JSON.stringify(reported) !== JSON.stringify(expected)) {
+      throw new Error(`grader report scope differs from requested suite scope for ${suite.id}`);
+    }
+  }
+  console.log(`${r.total}/${r.max}`);
+  for (const f of r.features) {
+    for (const c of f.criteria.filter(c => !evidencePassed(criterionEvidence(c)))) {
+      console.log(`      ${renderEvidenceConsoleLine(criterionEvidence(c), `${f.name} / ${c.id}`, {
+        includeSummary: false,
+      })}`);
+    }
+  }
+  // Disclose passes that lack server-side confirmation.
+  const uiOnly = r.features.flatMap(f =>
+    f.criteria.filter(c => evidencePassed(criterionEvidence(c)) && c.serverCheck === 'unverified')
+      .map(c => `${f.name}/${c.id}`));
+  if (uiOnly.length) {
+    console.log(`      note: ${uiOnly.length} criterion/criteria passed on interface behaviour only`);
+    for (const u of uiOnly) console.log(`            ${u} — server-side check not runnable on this backend`);
+  }
+  return r;
+}
+
+async function main() {
+  const startedAt = new Date().toISOString();
+  const args = parseArgs(process.argv);
+  args.databaseLease = databaseLeaseForGrading(args.backend);
+  const track = loadTrack(args.track);
+  const recipeBinding = resolveRecipeRelease(track, Number(args.level), args.recipeTask?.recipe ?? args.recipe);
+  if (!recipeBinding && (args.packIds.length || args.checkKeys.length)) {
+    throw new Error('--pack and --check require a recipe-bound level');
+  }
+  const selectedTask = recipeBinding
+    ? (args.recipeTask
+        ? resolveBoundRecipeTaskRequest(recipeBinding, args.recipeTask)
+        : createBoundRecipeTaskRequest(recipeBinding, args))
+    : null;
+  let selection = selectObservationScope(selectedTask, args.observation);
+  if (args.sourceSha256) {
+    const source = hashAppSource(args.app);
+    if (source.sha256 !== args.sourceSha256) {
+      throw new Error('live application source differs from the source selected for grading');
+    }
+  }
+  const declaredSuites = recipeBinding
+    ? suitesForRecipe(track, recipeBinding)
+    : suitesFor(track, Number(args.level));
+  if (args.observation === 'scored') {
+    selection = attachRegressionScope(selection, recipeBinding, declaredSuites,
+      args.regressionChecks);
+  } else if (args.regressionChecks.length) {
+    throw new Error('observed grading cannot include regression checks');
+  }
+  args.selection = selection;
+  if (selection) {
+    const suiteIds = new Set(declaredSuites.map(suite => suite.id));
+    const unmapped = selection.checks.filter(check => !suiteIds.has(check.executionId));
+    if (unmapped.length) {
+      throw new Error(`selected recipe checks do not map to a declared suite: ${
+        unmapped.map(check => check.stableKey).join(', ')}`);
+    }
+  }
+  const calibration = resolveCalibrationForRelease(recipeBinding?.release ?? null, {
+    trackRoot: track.dir,
+    stackBenchRoot: ROOT,
+  });
+  const observationSuffix = args.observation === 'observed' ? '-observed' : '';
+  const bundleArtifactId = `${args.parentAttemptId ?? args.label}-grade-bundle-l${args.level}${observationSuffix}`;
+  args.bundleArtifactId = bundleArtifactId;
+  mkdirSync(args.out, { recursive: true });
+  // Remove all prior grade output before writing cumulative evidence.
+  clearPreviousGradeOutputs(args.out);
+
+  console.log(`\n=== ${args.label} (${args.backend}) ===`);
+  console.log(`  app: ${args.app}`);
+  console.log(`  url: ${args.url}`);
+  if (recipeBinding && selection) {
+    console.log(`  recipe: ${recipeBinding.alias} -> ${recipeBinding.release.id}@${recipeBinding.release.version} ` +
+      `(${recipeBinding.status}, ${recipeBinding.release.contentSha256.slice(0, 12)})`);
+    console.log(args.observation === 'observed'
+      ? `  scope: ${selection.checks.length} observed check(s), ${selection.observedPoints} observed point(s), 0 score contribution`
+      : `  scope: ${selection.checks.length} check(s), ${selection.scoredPoints} point(s)`);
+    if (selection.requested.packs?.length) console.log(`    packs: ${selection.requested.packs.join(', ')}`);
+    if (selection.requested.features?.length) {
+      console.log(`    features: ${selection.requested.features.join(', ')}`);
+    }
+    if (selection.requested.checks.length) console.log(`    extra checks: ${selection.requested.checks.join(', ')}`);
+  }
+
+  const bundle: Bundle = {
+    definitionSchemaVersion: track.schemaVersion,
+    recipeRelease: bundleRecipeRelease(recipeBinding),
+    calibration: calibration ? { id: calibration.id, version: calibration.version,
+      state: calibration.state, contentSha256: calibration.contentSha256 } : null,
+    label: args.label, track: args.track, backend: args.backend, url: args.url, app: args.app,
+    level: Number(args.level), observation: args.observation,
+    ...(args.sourceSha256 ? { source: { sha256: args.sourceSha256 } } : {}),
+    suites: {}, totals: {},
+    selection: selection ? { ...selection, attemptedChecks: [], reportedChecks: [], notRun: [] } : null,
+  };
+  const selectedPackIds = new Set(selection?.checks.map(check => check.packId) ?? []);
+  const selectedPackDefinitions = recipeBinding?.plan.packs
+    .filter(pack => selectedPackIds.has(pack.id)) ?? [];
+  const writeBundle = () => {
+    if (args.sourceSha256) {
+      const current = hashAppSource(args.app);
+      if (current.sha256 !== args.sourceSha256) {
+        bundle.error = 'application source changed while grading was in progress';
+        bundle.outcome = { kind: 'harness_failure', phase: 'source-provenance',
+          reason: bundle.error };
+      }
+    }
+    return writeArtifact(join(args.out, ARTIFACT_FILE.gradeBundle), {
+      kind: 'grade_bundle',
+      id: bundleArtifactId,
+      attempt: { id: bundleArtifactId, parentId: args.parentAttemptId ?? null },
+      timestamps: { startedAt, completedAt: new Date().toISOString() },
+      identities: recipeArtifactIdentities(recipeBinding?.release ?? null, {
+        calibration: calibration ? { id: calibration.id, version: calibration.version,
+          sha256: calibration.contentSha256, state: calibration.state } : null,
+        stackAdapter: { id: args.backend },
+      }),
+      payload: bundle,
+    });
+  };
+  const recordApplicationAbort = () => {
+    bundle.totals = applicationFailureTotals(selection, declaredSuites);
+  };
+  const freshenFailureMessage = () => {
+    const detail = lastResetFailure ? `: ${lastResetFailure}` : '';
+    if (lastResetOutcome?.phase !== 'application-readiness') {
+      return `database reset failed — scores would not be comparable${detail}`;
+    }
+    return lastResetOutcome.kind === 'harness_failure'
+      ? `application server stopped by the grader was not restored${detail}`
+      : `application did not become ready after database reset${detail}`;
+  };
+  const markRemainingNotRun = (reason: string): void => {
+    if (!bundle.selection) return;
+    const accounted = new Set([
+      ...bundle.selection.attemptedChecks,
+      ...bundle.selection.notRun.map(check => check.stableKey),
+    ]);
+    bundle.selection.notRun.push(...bundle.selection.checks
+      .filter(check => !accounted.has(check.stableKey))
+      .map(check => ({ stableKey: check.stableKey, reason })));
+  };
+
+  if (args.applicationFailure) {
+    bundle.error = args.applicationFailure.reason;
+    bundle.outcome = args.applicationFailure;
+    recordApplicationAbort();
+    markRemainingNotRun(`run aborted: ${bundle.error}`);
+    writeBundle();
+    console.log(`\nABORTED: ${bundle.error}`);
+    process.exit(1);
+  }
+
+  // Reset before each stateful check.
+  let lastResetFailure: string | null = null;
+  let lastResetOutcome: ResetOutcome = { kind: 'harness_failure', phase: 'database-reset' };
+  // Set when a grader stopped the application server and could not start it
+  // again. Until the harness starts it, the app cannot be blamed for being
+  // unreachable.
+  let applicationLeftStopped = false;
+  const freshen = async () => {
+    if (!args.reset) return true;
+    const requiresReseed = STACK_ADAPTER_REGISTRY.get(args.backend).reset.requiresReseed;
+    const restartSpec = args.restartSpec;
+    if (track.reseedOnReset && restartSpec && requiresReseed) {
+      process.stdout.write('  stop application ... ');
+      try {
+        await controlBackendRuntime(restartSpec, 'stop');
+        console.log('ok');
+      } catch (error) {
+        const failure: Failure = error instanceof Error ? error : new Error(String(error));
+        lastResetFailure = childFailureDetail(failure);
+        lastResetOutcome = { kind: 'harness_failure', phase: 'application-reset-control' };
+        console.log(`FAILED (${lastResetFailure})`);
+        return false;
+      }
+    }
+    const reset = resetDatabase(args);
+    lastResetFailure = reset.detail;
+    lastResetOutcome = reset.outcome ?? { kind: 'harness_failure', phase: 'database-reset' };
+    if (!reset.ok) return false;
+    // Do not grade until the reset application is reachable.
+    const waitUntilReady = async () => {
+      const ready = await waitForApplicationProbe(args.url);
+      if (!ready.ok) {
+        lastResetFailure = ready.detail;
+        lastResetOutcome = applicationLeftStopped
+          ? { kind: 'harness_failure', phase: 'application-readiness' }
+          : { kind: 'app_failure', phase: 'application-readiness',
+            appFailures: ['application-readiness'] };
+        console.log(`FAILED (${ready.detail})`);
+        return false;
+      }
+      console.log('ok');
+      return true;
+    };
+    if (track.reseedOnReset && restartSpec && requiresReseed) {
+      process.stdout.write('  restart     ... ');
+      // Judge restart success with the readiness probe. The restart command can
+      // leave a long-running server process behind, so the command also needs a deadline.
+      try {
+        // Do not give a background server an inherited pipe that keeps the
+        // synchronous restart command open.
+        await controlBackendRuntime(restartSpec, 'start');
+        applicationLeftStopped = false;
+      } catch (err) {
+        const failure: Failure = err instanceof Error ? err : new Error(String(err));
+        lastResetOutcome = resetFailureOutcome(failure);
+        const detail = ((failure.stderr || '') + (failure.stdout || '') + (failure.message || ''))
+          .toString().trim().split('\n').slice(-3).join(' | ').slice(0, 300);
+        lastResetFailure = detail || null;
+        console.log('FAILED (application did not restart)');
+        console.log(`    control: ${JSON.stringify(restartSpec)}`);
+        console.log(`    ${detail}`);
+        return false;
+      }
+      return await waitUntilReady();
+    }
+    process.stdout.write('  ready       ... ');
+    return await waitUntilReady();
+  };
+
+  bundle.code = codeMetrics(args);
+  console.log(`  code        ... ${bundle.code.serverLoc} server LOC in ${bundle.code.serverFiles} files, ` +
+    `${bundle.code.totalLoc} total LOC, ${bundle.code.runtimeDeps} runtime deps`);
+
+  // Refuse source left modified by an interrupted mutation run.
+  const mutated = findMutationBackups(args.app);
+  if (mutated.length) {
+    bundle.error = `app still carries mutation backups (${mutated.join(', ')}) — its source is mutated, not the build under test`;
+    bundle.outcome = { kind: 'harness_failure', phase: 'mutation-cleanup', reason: bundle.error };
+    markRemainingNotRun('run aborted because application source is still mutated');
+    writeBundle();
+    console.log(`\nABORTED: ${bundle.error}`);
+    process.exit(1);
+  }
+
+  const prov = checkDatabaseProvenance(args);
+  bundle.provenance = prov;
+  console.log(`  database    ... ${prov.ok ? 'benchmark-owned' : `WRONG DATABASE — ${prov.reason}`}`);
+  if (!prov.ok) {
+    bundle.error = `app is not using the benchmark database: ${prov.reason}`;
+    bundle.outcome = { kind: 'app_failure', phase: 'database-provenance', reason: bundle.error,
+      appFailures: ['database-provenance'] };
+    recordApplicationAbort();
+    markRemainingNotRun('run aborted because database provenance was invalid');
+    writeBundle();
+    console.log('\nABORTED: results would not describe the benchmark environment.');
+    process.exit(1);
+  }
+
+  if (args.observation === 'scored') {
+    if (!(await freshen())) {
+      bundle.error = freshenFailureMessage();
+      bundle.outcome = { ...lastResetOutcome, reason: bundle.error };
+      if (bundle.outcome.kind === 'app_failure') recordApplicationAbort();
+      markRemainingNotRun(`run aborted: ${bundle.error}`);
+      writeBundle();
+      console.log(`\nABORTED: ${bundle.error}`);
+      process.exit(1);
+    }
+    let runtime = checkRuntimeDatabaseProvenance(args);
+    let proofError = null;
+    let actionFailure: string | null = null;
+    const proof = track.databaseProvenance;
+    const supportsRuntimeProof = 'proveUse' in STACK_ADAPTER_REGISTRY.get(args.backend).database;
+    const requiresRuntimeProof = supportsRuntimeProof && args.databaseLease && args.reset;
+    if (requiresRuntimeProof && !proof) {
+      proofError = new Error(`${args.track} does not define a runtime database provenance check`);
+    } else if (requiresRuntimeProof && proof) {
+      try {
+        const write = await writeApplicationDatabaseMarker(args, track, proof);
+        if (write.ok) runtime = checkRuntimeDatabaseProvenance(args, write.marker);
+        else actionFailure = write.reason;
+      } catch (error) {
+        proofError = error;
+      }
+
+      // The proof writes unique data through the application. Remove it before
+      // linting and scored grading so the proof cannot change the result.
+      if (!(await freshen())) {
+        bundle.error = freshenFailureMessage();
+        bundle.outcome = { ...lastResetOutcome, reason: bundle.error };
+        if (bundle.outcome.kind === 'app_failure') recordApplicationAbort();
+        markRemainingNotRun(`run aborted: ${bundle.error}`);
+        writeBundle();
+        console.log(`\nABORTED: ${bundle.error}`);
+        process.exit(1);
+      }
+    } else if (supportsRuntimeProof && !args.reset) {
+      runtime = { ok: null, verified: false,
+        reason: 'runtime marker proof requires database reset to isolate its write' };
+    }
+
+    if (proofError) {
+      bundle.outcome = databaseProvenanceFailure(proofError);
+      bundle.error = bundle.outcome.reason;
+      markRemainingNotRun('run aborted because runtime database provenance could not be verified');
+      writeBundle();
+      console.log(`\nABORTED: ${bundle.error}`);
+      process.exit(1);
+    }
+
+    if (actionFailure) {
+      bundle.error = actionFailure;
+      bundle.outcome = { kind: 'app_failure', phase: 'database-provenance-action',
+        reason: actionFailure, appFailures: ['database-provenance-action'] };
+      recordApplicationAbort();
+      markRemainingNotRun('run aborted because the application database write failed');
+      writeBundle();
+      console.log(`\nABORTED: ${actionFailure}`);
+      process.exit(1);
+    }
+
+    bundle.provenance.runtime = runtime;
+    console.log(`  db runtime  ... ${runtime.verified
+      ? runtime.ok ? runtime.reason : `WRONG DATABASE — ${runtime.reason}`
+      : runtime.reason}`);
+    if (runtime.ok === false) {
+      bundle.error = `app did not write its marker to the benchmark database: ${runtime.reason}`;
+      bundle.outcome = { kind: 'app_failure', phase: 'database-provenance', reason: bundle.error,
+        appFailures: ['database-provenance'] };
+      recordApplicationAbort();
+      markRemainingNotRun('run aborted because runtime database provenance failed');
+      writeBundle();
+      console.log('\nABORTED: application data came from outside the benchmark database.');
+      process.exit(1);
+    }
+    try {
+      bundle.suites.lint = lint(args, selectedTask);
+    } catch (error) {
+      markRemainingNotRun('run aborted after contract lint failed to produce evidence');
+      bundle.error = error instanceof Error ? error.message : String(error);
+      bundle.outcome = { kind: 'harness_failure', phase: 'contract-lint', reason: bundle.error };
+      writeBundle();
+      console.log(`\nABORTED: ${bundle.error}`);
+      process.exit(1);
+    }
+    bundle.actions = checkActions(args);
+  }
+
+  // Keep current-level score separate from earlier guarantee regressions.
+  let total = 0, max = 0, regTotal = 0, regMax = 0;
+  const dirty = false;
+  let browserServer: BrowserServer | null = null;
+  try {
+    if (declaredSuites.some(suite => !selection
+      || selection.checks.some(check => check.executionId === suite.id))) {
+      browserServer = await chromium.launchServer({ headless: true });
+      args.browserWsEndpoint = browserServer.wsEndpoint();
+    }
+    for (const suite of declaredSuites) {
+      const selectedChecks = selection?.checks.filter(check => check.executionId === suite.id) ?? [];
+      if (selection && selectedChecks.length === 0) {
+        console.log(`  ${suite.id.padEnd(10)} ... not selected`);
+        continue;
+      }
+      if (!(await freshen())) {
+        bundle.error = freshenFailureMessage();
+        console.log(`  ${suite.id}: SKIPPED (${bundle.error})`);
+        markRemainingNotRun(`run aborted: ${bundle.error}`);
+        bundle.outcome = { ...lastResetOutcome, reason: bundle.error };
+        if (bundle.outcome.kind === 'app_failure') recordApplicationAbort();
+        writeBundle();
+        console.log(`\nABORTED: ${bundle.error}`);
+        throw new Error(bundle.error);
+      }
+      if (bundle.selection) {
+        bundle.selection.attemptedChecks.push(...selectedChecks.map(check => check.stableKey));
+      }
+      let r;
+      try {
+        r = await gradeSuite(args, suite, track, recipeBinding, bundleArtifactId, selectedChecks);
+      } catch (error) {
+        markRemainingNotRun(`run aborted after ${suite.id} grader failure`);
+        bundle.error = error instanceof Error ? error.message : String(error);
+        bundle.outcome = { kind: 'harness_failure', phase: `grade:${suite.id}`, reason: bundle.error };
+        writeBundle();
+        console.log(`\nABORTED: ${bundle.error}`);
+        throw error;
+      }
+      bundle.suites[suite.id] = r;
+      if (isGradePayload(r) && r.features.some(feature => feature.cleanupEvidence?.failures
+        .some(failure => failure.stage === 'application-restore'))) {
+        applicationLeftStopped = true;
+      }
+      if (bundle.selection) {
+        bundle.selection.reportedChecks.push(...selectedChecks.map(check => check.stableKey));
+      }
+      if (selection) {
+        bundle.packRuntime = aggregatePackRuntime(
+          Object.values(bundle.suites).filter(isGradePayload),
+          selectedPackDefinitions);
+        const exceeded = exceededPackBudgets(bundle.packRuntime);
+        if (exceeded.length) {
+          // Runtime budgets qualify references; generated apps still receive a complete grade.
+          console.log(`  runtime    ... ${exceeded.map(pack =>
+            `${pack.id} ${pack.measuredRuntimeMs}ms > ${pack.budget.maxRuntimeMs}ms`)
+            .join(', ')} [recorded; grading continues]`);
+        }
+      }
+      if (suite.inherited) { regTotal += r.total; regMax += r.max; }
+      else { total += r.total; max += r.max; }
+    }
+  } finally {
+    args.browserWsEndpoint = undefined;
+    await browserServer?.close();
+  }
+
+  bundle.totals = {
+    score: total, max, dirty, contractPass: isGradePayload(bundle.suites.lint)
+      ? null : bundle.suites.lint?.pass ?? null,
+    // null rather than 0/0 at L1, where there is nothing earlier to regress.
+    regression: regMax ? { score: regTotal, max: regMax } : null,
+  };
+  writeBundle();
+
+  console.log(`  ${'TOTAL'.padEnd(10)} ... ${total}/${max}${dirty ? '  [DIRTY]' : ''}`);
+  if (regMax) {
+    const kept = regTotal === regMax ? 'all earlier guarantees still hold' : `${regMax - regTotal} EARLIER GUARANTEE(S) LOST`;
+    console.log(`  ${'REGRESSION'.padEnd(10)} ... ${regTotal}/${regMax}  — ${kept}`);
+  }
+  console.log(`  bundle: ${join(args.out, ARTIFACT_FILE.gradeBundle)}`);
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) main();
diff --git a/tools/stack-bench/commands/test-loop.ts b/tools/stack-bench/commands/test-loop.ts
new file mode 100644
index 00000000000..c63a8de6b74
--- /dev/null
+++ b/tools/stack-bench/commands/test-loop.ts
@@ -0,0 +1,309 @@
+#!/usr/bin/env node
+
+import { execFileSync, spawnSync } from 'node:child_process';
+import { readFileSync, existsSync, rmSync, mkdirSync, mkdtempSync, readdirSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+
+import { ARTIFACT_FILE, readArtifact, readArtifactPayload } from '../src/evidence/artifacts.js';
+import type { ArtifactIdentities } from '../src/evidence/artifacts.js';
+import type { CostRun, CostSession } from '../src/evidence/cost-proof.js';
+import type { PublicBackendLease } from '../src/runtime/backend-lease.js';
+import type { RepairLevel, RepairOutcome } from '../src/runtime/repair-grant.js';
+import type { LevelCheckpoint } from '../src/runtime/source-checkpoint.js';
+import { CODING_CONTAINER_BUG_REPORT_FILE } from '../src/runtime/coding-container-policy.js';
+
+import { STACK_BENCH_ROOT as ROOT, compiledEntrypoint } from '../src/package-root.js';
+const WORK = mkdtempSync(join(tmpdir(), 'stack-bench-loop-'));
+const APP = join(WORK, 'app');
+// A cold Playwright start plus two grades can exceed three minutes on Windows
+// Docker hosts. The timeout is a deadlock guard, not a performance assertion.
+const BENCH_TIMEOUT_MS = 300_000;
+
+interface LoopSession extends CostSession {
+  sessionId?: string;
+  tokens?: number;
+  turns?: number;
+  durationMs?: number;
+}
+
+interface LoopLevel extends RepairLevel {
+  buildSessions?: LoopSession[];
+  repairSessions?: LoopSession[];
+  resumeSession?: LoopSession;
+  contractPass?: boolean;
+  stalled?: boolean;
+  code?: { totalLoc?: number };
+  sessionTotals?: { sessions?: number; tokens?: number; turns?: number; durationMs?: number };
+}
+
+interface LoopRun extends CostRun {
+  id?: string;
+  levels?: LoopLevel[];
+  outcome?: RepairOutcome;
+  artifactEnvelope?: { identities?: ArtifactIdentities };
+  backendLease?: PublicBackendLease;
+  totals?: CostRun['totals'] & { max?: number; sessions?: number; tokens?: number; turns?: number;
+    modelDurationMs?: number; durationSec?: number };
+}
+
+interface GradeFeature {
+  id?: string;
+  setupEvidence?: { schemaVersion?: number; status?: string };
+  criteria?: { evidence?: { schemaVersion?: number; status?: string; actions?: unknown[] } }[];
+}
+
+interface GradePayload { features?: GradeFeature[]; }
+interface SourceCheckpointPayload { source: LevelCheckpoint; }
+interface RepairContinuation {
+  baseline?: { reproduced?: boolean; score?: number; sourceSha256?: string };
+  cumulativeRepairsBefore?: number;
+  cumulativeRepairsAfter?: number;
+  resumeSetup?: { sourceVerified?: boolean };
+}
+interface RepairContinuationPayload extends LoopRun { continuation?: RepairContinuation; }
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function processOutput(error: unknown): string {
+  if (!isRecord(error)) return String(error);
+  return `${String(error.stdout ?? '')}${String(error.stderr ?? '')}`;
+}
+
+// A failed assertion or interrupted CI job must not leave a fixture app that a
+// later loop can mistake for its own output.
+process.on('exit', () => rmSync(WORK, { recursive: true, force: true }));
+
+let failures = 0;
+const check = (name: string, ok: boolean, detail = ''): void => {
+  console.log(`  ${ok ? 'PASS' : 'FAIL'}  ${name}${ok || !detail ? '' : ` — ${detail}`}`);
+  if (!ok) failures += 1;
+};
+
+function runBench(extra: string[] = []): string {
+  const argv = [compiledEntrypoint('commands', 'bench.js'), '--backend', 'stub', '--levels', '1',
+    '--agent-adapter', 'deterministic',
+    '--app', APP, '--out', WORK,
+    '--track', 'loop',
+    '--url', `file:///${join(APP, 'index.html').replace(/\\/g, '/')}`, ...extra];
+  try {
+    return execFileSync('node', argv, {
+      encoding: 'utf8',
+      maxBuffer: 32 * 1024 * 1024,
+      timeout: BENCH_TIMEOUT_MS,
+      killSignal: 'SIGTERM',
+    });
+  } catch (error: unknown) { return processOutput(error); }
+}
+
+const invalidRounds = spawnSync('node', [compiledEntrypoint('commands', 'bench.js'), '--backend', 'stub',
+  '--repairs', '1.5'],
+  { encoding: 'utf8' });
+check('fractional correction budgets are rejected before a run starts',
+  invalidRounds.status !== 0
+    && /--repairs must be a non-negative safe integer/.test(invalidRounds.stderr));
+
+rmSync(WORK, { recursive: true, force: true });
+mkdirSync(APP, { recursive: true });
+
+console.log('\nLoop test — one repair available');
+const out = runBench(['--repairs', '1']);
+const runPath = join(WORK, ARTIFACT_FILE.run);
+
+check(`the benchmark run produced ${ARTIFACT_FILE.run}`, existsSync(runPath));
+if (!existsSync(runPath)) {
+  console.log(`\ncannot continue without ${ARTIFACT_FILE.run}`);
+  process.exit(1);
+}
+
+const run = readArtifactPayload<LoopRun>(runPath);
+const level = run.levels?.[0];
+const evidenceDir = join(APP, 'stack-bench');
+const bundleArtifact = readArtifact(join(evidenceDir, ARTIFACT_FILE.gradeBundle),
+  { expectedKind: 'grade_bundle' });
+const lintArtifact = readArtifact(join(evidenceDir, ARTIFACT_FILE.contractLint),
+  { expectedKind: 'contract_lint' });
+const actionArtifact = readArtifact(join(evidenceDir, ARTIFACT_FILE.actions),
+  { expectedKind: 'action_check' });
+const gradeArtifact = readArtifact<GradePayload>(join(evidenceDir, 'grading-features.json'), { expectedKind: 'grade' });
+const leaseArtifact = readArtifact<PublicBackendLease>(join(WORK, ARTIFACT_FILE.backendLease),
+  { expectedKind: 'backend_lease_evidence' });
+const checkpointArtifact = readArtifact<SourceCheckpointPayload>(join(WORK, 'level-l1-checkpoint.json'),
+  { expectedKind: 'source_checkpoint' });
+
+check('recorded exactly one level', run.levels?.length === 1);
+check('run and level carry structured outcomes',
+  typeof run.outcome?.kind === 'string' && run.outcome.kind === level?.outcome?.kind,
+  `run=${run.outcome?.kind} level=${level?.outcome?.kind}`);
+check('artifacts carry the producing run id', typeof run.id === 'string' && run.id.length > 10);
+check('run envelope identifies engine, agent adapter, and stack adapter',
+  /^[a-f0-9]{64}$/.test(run.artifactEnvelope?.identities?.engine?.sha256 ?? '')
+    && /^[a-f0-9]{64}$/.test(run.artifactEnvelope?.identities?.agentAdapter?.sha256 ?? '')
+    && run.artifactEnvelope?.identities?.stackAdapter?.id === 'stub');
+check('bundle is a child of the run', bundleArtifact.attempt.parentId === run.id,
+  JSON.stringify(bundleArtifact.attempt));
+check('public lease evidence is a child of the run', leaseArtifact.attempt.parentId === run.id,
+  JSON.stringify(leaseArtifact.attempt));
+check('level source checkpoint is hash-bound and linked to the run',
+  checkpointArtifact.attempt.parentId === run.id
+    && level?.checkpoint?.artifact === 'level-l1-checkpoint.json'
+    && level.checkpoint.sha256 === checkpointArtifact.payload.source.sha256
+    && /^[a-f0-9]{64}$/.test(level.checkpoint.sha256)
+    && existsSync(join(WORK, level.checkpoint.directory)),
+  JSON.stringify(level?.checkpoint));
+check('lint, action, and grade evidence are children of the bundle',
+  [lintArtifact, actionArtifact, gradeArtifact]
+    .every(artifact => artifact.attempt.parentId === bundleArtifact.attempt.id));
+const gradedFeatures = gradeArtifact.payload?.features ?? [];
+check('grade artifacts retain typed setup, criterion, and action evidence',
+  gradedFeatures.length > 0
+    && gradedFeatures.every(feature => feature.setupEvidence?.schemaVersion === 1
+      && (feature.criteria ?? []).every(criterion => criterion.evidence?.schemaVersion === 1
+        && Array.isArray(criterion.evidence.actions))),
+  JSON.stringify(gradedFeatures.map(feature => ({ id: feature.id,
+    setup: feature.setupEvidence?.status,
+    criteria: feature.criteria?.map(criterion => criterion.evidence?.status) }))));
+const publicJson = [runPath, join(WORK, ARTIFACT_FILE.backendLease),
+  join(evidenceDir, ARTIFACT_FILE.gradeBundle), join(evidenceDir, ARTIFACT_FILE.contractLint),
+  join(evidenceDir, ARTIFACT_FILE.actions), join(evidenceDir, 'grading-features.json')]
+  .map(path => readFileSync(path, 'utf8')).join('\n');
+check('public envelopes contain no secret or lease-token fields',
+  !/"(?:apiKey|leaseToken|ownershipToken|password|secret)"\s*:/i.test(publicJson));
+check('backend lease was released',
+  ['released', 'stopped'].includes(run.backendLease?.state ?? '')
+    && (run.backendLease?.resources?.locks?.every(lock => lock.releasedAt) ?? false),
+  JSON.stringify(run.backendLease?.state));
+check('a repair ran', level?.repairs === 1, `repairs=${level?.repairs}`);
+check('successful repair is explicit', level?.repair?.status === 'corrected'
+  && level.repair.limit === 1 && level.repair.used === 1
+  && level.repair.stopReason === 'passed',
+  JSON.stringify(level?.repair));
+const reportPath = join(APP, CODING_CONTAINER_BUG_REPORT_FILE);
+const reportExists = existsSync(reportPath);
+check('the bug report was written', reportExists);
+// Behavioural findings must never reveal how they were detected, or a fix can
+// target the check instead of the app. Missing-control findings are exempt:
+// there the element id is the requirement.
+const report = reportExists ? readFileSync(reportPath, 'utf8') : '';
+const behaviourSection = report.split('## Application interface')[0] ?? '';
+check('behavioural findings do not leak selectors or timings',
+  !/data-(?:role|testid)|locator|within \d+ms/.test(behaviourSection));
+check('missing interfaces are reported separately', /## Application interface/.test(report));
+check('build and fix costs are both recorded',
+  (level?.buildCostUsd ?? 0) > 0 && (level?.repairCostUsd ?? 0) > 0,
+  `build=${level?.buildCostUsd} fix=${level?.repairCostUsd}`);
+check('build and fix sessions remain individually auditable',
+  level?.buildSessions?.length === 1
+    && level.buildSessions[0]?.sessionId === 'stub-build'
+    && level?.repairSessions?.length === 1
+    && level.repairSessions[0]?.sessionId === 'stub-fix',
+  JSON.stringify({ builds: level?.buildSessions, fixes: level?.repairSessions }));
+check('level session totals include the build and fix',
+  level?.sessionTotals?.sessions === 2
+    && level.sessionTotals.tokens === 2000
+    && level.sessionTotals.turns === 5
+    && level.sessionTotals.durationMs === 100,
+  JSON.stringify(level?.sessionTotals));
+check('grading produced a score out of a maximum', Number.isInteger(level?.score) && (level?.max ?? 0) > 0,
+  `${level?.score}/${level?.max}`);
+check('code metrics captured', Boolean(level?.code) && typeof level?.code?.totalLoc === 'number',
+  JSON.stringify(level?.code));
+check('totals aggregate the levels', run.totals?.max === level?.max);
+check('run totals aggregate every model session',
+  run.totals?.sessions === 2 && run.totals.tokens === 2000
+    && run.totals.turns === 5 && run.totals.modelDurationMs === 100,
+  JSON.stringify(run.totals));
+check('wall time recorded', (run.totals?.durationSec ?? -1) >= 0);
+check('the fix improved the contract lint',
+  /APPLICATION CONTRACT FAIL[\s\S]*APPLICATION CONTRACT PASS/.test(out)
+    || level?.contractPass === true,
+  'expected the broken fixture to fail the lint and the fixed one to pass');
+
+console.log('\nLoop test — zero repairs allowed');
+rmSync(WORK, { recursive: true, force: true });
+mkdirSync(APP, { recursive: true });
+runBench(['--repairs', '0']);
+const capped = readArtifactPayload<LoopRun>(runPath);
+check('no fix ran when the cap is zero', capped.levels?.[0]?.repairs === 0);
+check('no bug report was written when no fix is allowed',
+  !existsSync(join(APP, CODING_CONTAINER_BUG_REPORT_FILE)));
+
+console.log('\nLoop test - flat corrections exhaust their declared budget');
+rmSync(WORK, { recursive: true, force: true });
+mkdirSync(APP, { recursive: true });
+runBench(['--repairs', '2', '--model', 'deterministic-stall']);
+const exhausted = readArtifactPayload<LoopRun>(runPath);
+const exhaustedLevel = exhausted.levels?.[0];
+check('both correction rounds ran after the first flat result', exhaustedLevel?.repairs === 2,
+  `repairs=${exhaustedLevel?.repairs}`);
+check('an unresolved app records budget exhaustion', exhaustedLevel?.repair?.status === 'budget-exhausted'
+  && exhaustedLevel.repair.limit === 2 && exhaustedLevel.repair.used === 2
+  && exhaustedLevel.repair.stopReason === 'budget-exhausted'
+  && exhaustedLevel.stalled === true && exhausted.outcome?.kind === 'app_failure',
+  JSON.stringify({ repair: exhaustedLevel?.repair, outcome: exhausted.outcome }));
+
+console.log('\nLoop test - a later finite grant continues the exact exhausted source');
+rmSync(WORK, { recursive: true, force: true });
+mkdirSync(APP, { recursive: true });
+runBench(['--repairs', '2', '--model', 'deterministic-deferred']);
+const parentBefore = readFileSync(runPath, 'utf8');
+const deferred = readArtifactPayload<LoopRun>(runPath);
+check('the deferred parent exhausted its original two-round budget',
+  deferred.levels?.[0]?.repair?.status === 'budget-exhausted'
+    && deferred.levels[0].repair.used === 2,
+  JSON.stringify(deferred.levels?.[0]?.repair));
+let continuationOutput = '';
+try {
+  continuationOutput = execFileSync('node', [join(ROOT, 'dist', 'commands', 'repair-cli.js'), 'grant', WORK,
+    '--level', '1', '--repairs', '2', '--timeout-minutes', '10'], {
+    encoding: 'utf8', maxBuffer: 32 * 1024 * 1024, timeout: BENCH_TIMEOUT_MS,
+  });
+} catch (error: unknown) {
+  continuationOutput = processOutput(error);
+}
+const continuationRoot = join(WORK, 'continuations');
+const continuationDirectories = existsSync(continuationRoot)
+  ? readdirSync(continuationRoot, { withFileTypes: true }).filter(entry => entry.isDirectory()) : [];
+const continuationDirectory = continuationDirectories.length === 1
+  ? join(continuationRoot, continuationDirectories[0]?.name ?? '') : null;
+const continuationPath = continuationDirectory
+  ? join(continuationDirectory, ARTIFACT_FILE.run) : null;
+check('repair grant produced one linked continuation',
+  continuationPath !== null && existsSync(continuationPath), continuationOutput.slice(-2000));
+if (continuationDirectory && continuationPath && existsSync(continuationPath)) {
+  const continuationArtifact = readArtifact<RepairContinuationPayload>(continuationPath, { expectedKind: 'repair_continuation' });
+  const continuation = continuationArtifact.payload;
+  const continuedLevel = continuation.levels?.[0];
+  const continuationDetails = continuation.continuation;
+  const deferredLevel = deferred.levels?.[0];
+  check('continuation reproduced the exact failed baseline before spending a repair',
+    continuationDetails?.baseline?.reproduced === true
+      && continuationDetails.baseline.score === deferredLevel?.score
+      && continuationDetails.baseline.sourceSha256 === deferredLevel?.checkpoint?.sha256,
+    JSON.stringify(continuationDetails?.baseline));
+  check('continuation reached correctness inside its finite added budget',
+    continuation.outcome?.kind === 'passed'
+      && continuedLevel?.repair?.status === 'corrected'
+      && continuedLevel.repair.used === 1
+      && continuationDetails?.cumulativeRepairsBefore === 2
+      && continuationDetails?.cumulativeRepairsAfter === 3,
+    JSON.stringify({ repair: continuedLevel?.repair, continuation: continuationDetails }));
+  check('resume setup is visible, separately costed, and does not consume a repair',
+    continuationDetails?.resumeSetup?.sourceVerified === true
+      && continuedLevel?.resumeSession?.sessionId === 'stub-resume'
+      && (continuedLevel?.resumeCostUsd ?? 0) > 0
+      && continuedLevel.repairs === 1,
+    JSON.stringify({ setup: continuationDetails?.resumeSetup,
+      resume: continuedLevel?.resumeSession, fixes: continuedLevel?.repairs }));
+  check('continuation process outcome is retained as a typed child artifact',
+    readArtifact(join(continuationDirectory, ARTIFACT_FILE.process),
+      { expectedKind: 'repair_process' }).attempt.parentId === deferred.id);
+}
+check('grant left the original run artifact byte-for-byte unchanged',
+  readFileSync(runPath, 'utf8') === parentBefore);
+
+rmSync(WORK, { recursive: true, force: true });
+console.log(`\n${failures === 0 ? 'loop OK' : `${failures} check(s) failed`}`);
+process.exit(failures === 0 ? 0 : 1);
diff --git a/tools/stack-bench/conditions/catalog.json b/tools/stack-bench/conditions/catalog.json
new file mode 100644
index 00000000000..1c6ca9a1a18
--- /dev/null
+++ b/tools/stack-bench/conditions/catalog.json
@@ -0,0 +1,12 @@
+{
+  "schemaVersion": 1,
+  "kind": "study-condition-catalog",
+  "guidanceProfiles": {
+    "model-free-stub@1.1.0": "guidance/model-free-stub.json",
+    "prescribed@1.2.0": "guidance/prescribed.json",
+    "neutral@1.8.0": "guidance/neutral-1.8.0.json"
+  },
+  "repairPolicies": {
+    "scored-only@1.1.0": "repairs/scored-only.json"
+  }
+}
diff --git a/tools/stack-bench/conditions/guidance/model-free-stub.json b/tools/stack-bench/conditions/guidance/model-free-stub.json
new file mode 100644
index 00000000000..5d3559cc5eb
--- /dev/null
+++ b/tools/stack-bench/conditions/guidance/model-free-stub.json
@@ -0,0 +1,22 @@
+{
+  "schemaVersion": 1,
+  "kind": "backend-guidance-profile",
+  "id": "model-free-stub",
+  "version": "1.1.0",
+  "state": "draft",
+  "mode": "neutral",
+  "material": {
+    "accessFacts": true,
+    "apiReference": false,
+    "designAdvice": false
+  },
+  "documents": {
+    "stub": "backends/model-free-stub.md"
+  },
+  "applicationInterfaces": {
+    "stub": "http"
+  },
+  "skills": {
+    "stub": []
+  }
+}
diff --git a/tools/stack-bench/conditions/guidance/neutral-1.8.0.json b/tools/stack-bench/conditions/guidance/neutral-1.8.0.json
new file mode 100644
index 00000000000..c377ac67c45
--- /dev/null
+++ b/tools/stack-bench/conditions/guidance/neutral-1.8.0.json
@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 1,
+  "kind": "backend-guidance-profile",
+  "id": "neutral",
+  "version": "1.8.0",
+  "state": "qualified",
+  "mode": "neutral",
+  "material": {
+    "accessFacts": true,
+    "apiReference": true,
+    "designAdvice": false
+  },
+  "documents": {
+    "mongodb": "backends/minimal/mongodb-1.5.md",
+    "postgres": "backends/minimal/postgres-1.5.md",
+    "spacetime": "backends/minimal/spacetime-1.6.md"
+  },
+  "applicationInterfaces": {
+    "mongodb": "http",
+    "postgres": "http",
+    "spacetime": "reducer"
+  },
+  "skills": {
+    "mongodb": [],
+    "postgres": [],
+    "spacetime": ["typescript-server", "typescript-client"]
+  },
+  "credentialAliases": {
+    "stackbench-admin-2026": "store-admin-2026",
+    "stackbench-customer-2026": "store-customer-2026",
+    "stackbench-staff-2026": "store-staff-2026"
+  }
+}
diff --git a/tools/stack-bench/conditions/guidance/prescribed.json b/tools/stack-bench/conditions/guidance/prescribed.json
new file mode 100644
index 00000000000..ad800f4cc83
--- /dev/null
+++ b/tools/stack-bench/conditions/guidance/prescribed.json
@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 1,
+  "kind": "backend-guidance-profile",
+  "id": "prescribed",
+  "version": "1.2.0",
+  "state": "qualified",
+  "mode": "prescribed",
+  "material": {
+    "accessFacts": true,
+    "apiReference": true,
+    "designAdvice": true
+  },
+  "documents": {
+    "mongodb": "backends/mongodb.md",
+    "postgres": "backends/postgres.md",
+    "spacetime": "backends/spacetime.md"
+  },
+  "applicationInterfaces": {
+    "mongodb": "http",
+    "postgres": "http",
+    "spacetime": "reducer"
+  },
+  "skills": {
+    "mongodb": [],
+    "postgres": [],
+    "spacetime": ["typescript-server", "typescript-client"]
+  },
+  "credentialAliases": {
+    "stackbench-admin-2026": "store-admin-2026",
+    "stackbench-customer-2026": "store-customer-2026",
+    "stackbench-staff-2026": "store-staff-2026"
+  }
+}
diff --git a/tools/stack-bench/conditions/repairs/scored-only.json b/tools/stack-bench/conditions/repairs/scored-only.json
new file mode 100644
index 00000000000..d5edc402c57
--- /dev/null
+++ b/tools/stack-bench/conditions/repairs/scored-only.json
@@ -0,0 +1,10 @@
+{
+  "schemaVersion": 1,
+  "kind": "repair-policy",
+  "id": "scored-only",
+  "version": "1.1.0",
+  "state": "qualified",
+  "scoredEvidence": true,
+  "observedEvidence": false,
+  "scenarioValues": "withheld"
+}
diff --git a/tools/stack-bench/container/Dockerfile b/tools/stack-bench/container/Dockerfile
new file mode 100644
index 00000000000..f41c6073afd
--- /dev/null
+++ b/tools/stack-bench/container/Dockerfile
@@ -0,0 +1,42 @@
+# The image a generated app is built in.
+#
+# The generated app must not see the harness, grader, or test definitions.
+#
+# No harness, grader, or test definition is copied in or mounted at run time.
+# An adapter can mount only its selected stack artifacts, read-only.
+# Keep the readable tag, but bind the base to an exact manifest. Campaigns use
+# the digest of the completed image, so every attempt runs the same artifact.
+FROM node:22-slim@sha256:f86be15afa9a8277608e141ce2a8aa55d3d9c40845921b8511f4fb7897be2554
+
+# git: builds initialise repositories and some tooling shells out to it.
+# curl: readiness probes against the app's own dev server.
+# ca-certificates: TLS for npm and the API.
+# procps: the build starts and stops its own dev servers.
+# lsof: `kill-port` locates a listener with lsof on Linux, and finds nothing
+# without it — it then prints "Process on port N killed" and exits 0 while the
+# server keeps running. Every durability and deploy-window test would pass
+# without restarting anything, which is worse than failing. None of lsof, fuser,
+# ss or netstat is present in node:22-slim.
+RUN apt-get update && apt-get install -y --no-install-recommends \
+      git curl ca-certificates procps lsof \
+    && rm -rf /var/lib/apt/lists/*
+
+# Pinned, and the auto-updater disabled: a CLI that updates itself mid-series
+# changes the thing under test between one backend and the next. Override at
+# build time to move deliberately rather than by drift.
+ARG CLAUDE_VERSION=2.1.226
+ENV DISABLE_AUTOUPDATER=1
+RUN npm install -g @anthropic-ai/claude-code@${CLAUDE_VERSION} \
+    && claude --version
+
+# The coding session can change the app and its own temporary state. It does
+# not run as root, so it cannot change the system or harness control files.
+RUN useradd --uid 10001 --create-home --shell /bin/bash developer \
+    && chmod 0700 /home/developer
+
+# The app under construction. Everything the build writes lives here, and the
+# host mounts its own work directory over it.
+WORKDIR /app
+
+# No ENTRYPOINT: the run-build command supplies the whole command so the prompt can go
+# in on stdin exactly as it does on the host.
diff --git a/tools/stack-bench/container/binary-provenance.ts b/tools/stack-bench/container/binary-provenance.ts
new file mode 100644
index 00000000000..a7cd6197562
--- /dev/null
+++ b/tools/stack-bench/container/binary-provenance.ts
@@ -0,0 +1,199 @@
+#!/usr/bin/env node
+
+import { createHash, randomBytes } from 'node:crypto';
+import { existsSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+import { binarySourceIdentity, SOURCE_IDENTITY_SCHEME }
+  from '../src/releases/release-source.js';
+import { STACK_BENCH_RUNNER_PLATFORM } from '../src/runtime/runner-environment.js';
+
+export const RUST_BUILDER_IMAGE =
+  'rust:1.93-slim-bookworm@sha256:8f8609d448e821fbc0e44241bc5ca4ce49663cc6306ff1a17f655a0e2a7cd084';
+export const BINARY_NAMES = Object.freeze(['spacetimedb-cli', 'spacetimedb-standalone']);
+const PROVENANCE_NAME = 'spacetimedb-binaries.json';
+
+interface BinarySourceIdentity {
+  identityScheme: typeof SOURCE_IDENTITY_SCHEME;
+  revision: string;
+  sha256: string;
+  files: number;
+}
+
+interface BinaryRecord {
+  sha256: string;
+  size: number;
+}
+
+interface BinaryProvenance {
+  schemaVersion: 2;
+  platform: typeof STACK_BENCH_RUNNER_PLATFORM;
+  builderImage: string;
+  source: BinarySourceIdentity;
+  binaries: Record<string, BinaryRecord>;
+}
+
+function sha256File(path: string): string {
+  return createHash('sha256').update(readFileSync(path)).digest('hex');
+}
+
+function binaryPath(stackBenchRoot: string, name: string): string {
+  return join(stackBenchRoot, 'container', 'bin', name);
+}
+
+function provenancePath(stackBenchRoot: string): string {
+  return join(stackBenchRoot, 'container', PROVENANCE_NAME);
+}
+
+function assertSha256(value: unknown, label: string): asserts value is string {
+  if (typeof value !== 'string' || !/^[a-f0-9]{64}$/.test(value)) {
+    throw new Error(`${label} must be a SHA-256 digest`);
+  }
+}
+
+function inspectBinary(path: string, name: string): BinaryRecord {
+  if (!existsSync(path)) {
+    throw new Error(`${name} is absent; run tools/stack-bench/container/build-linux-cli.sh`);
+  }
+  const stat = statSync(path);
+  if (!stat.isFile() || stat.size < 4) throw new Error(`${name} is not a non-empty file`);
+  const magic = readFileSync(path).subarray(0, 4);
+  if (!magic.equals(Buffer.from([0x7f, 0x45, 0x4c, 0x46]))) {
+    throw new Error(`${name} is not a Linux ELF binary`);
+  }
+  return { sha256: sha256File(path), size: stat.size };
+}
+
+export function createBinaryProvenance(stackBenchRoot: string,
+  source: BinarySourceIdentity): BinaryProvenance {
+  if (source?.identityScheme !== SOURCE_IDENTITY_SCHEME) {
+    throw new Error('binary source identity scheme is unsupported');
+  }
+  assertSha256(source?.sha256, 'binary source identity');
+  if (!/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/.test(source?.revision ?? '')) {
+    throw new Error('binary source revision must be an exact commit id');
+  }
+  if (!Number.isSafeInteger(source?.files) || source.files < 1) {
+    throw new Error('binary source file count must be a positive integer');
+  }
+  const binaries: Record<string, BinaryRecord> = {};
+  for (const name of BINARY_NAMES) binaries[name] = inspectBinary(binaryPath(stackBenchRoot, name), name);
+  return {
+    schemaVersion: 2,
+    platform: STACK_BENCH_RUNNER_PLATFORM,
+    builderImage: RUST_BUILDER_IMAGE,
+    source: { identityScheme: source.identityScheme,
+      revision: source.revision, sha256: source.sha256, files: source.files },
+    binaries,
+  };
+}
+
+export function assertBinarySourceUnchanged(before: BinarySourceIdentity,
+  after: BinarySourceIdentity): void {
+  if (before?.identityScheme !== after?.identityScheme
+    || before?.revision !== after?.revision || before?.sha256 !== after?.sha256
+    || before?.files !== after?.files) {
+    throw new Error('binary source changed during the build');
+  }
+}
+
+function readProvenance(stackBenchRoot: string): BinaryProvenance {
+  const path = provenancePath(stackBenchRoot);
+  if (!existsSync(path)) {
+    throw new Error(`${PROVENANCE_NAME} is absent; run tools/stack-bench/container/build-linux-cli.sh`);
+  }
+  let manifest: BinaryProvenance & { status?: string };
+  try { manifest = JSON.parse(readFileSync(path, 'utf8')); }
+  catch (error) {
+    throw new Error(`${PROVENANCE_NAME} is not valid JSON: ${error instanceof Error
+      ? error.message : String(error)}`);
+  }
+  if (manifest.status === 'unbuilt') {
+    throw new Error(`${PROVENANCE_NAME} has no verified binaries; run tools/stack-bench/container/build-linux-cli.sh`);
+  }
+  return manifest;
+}
+
+export function verifyBinaryProvenance(stackBenchRoot: string,
+  { sourceSha256 }: { sourceSha256: string }): BinaryProvenance {
+  assertSha256(sourceSha256, 'expected binary source identity');
+  const manifest = readProvenance(stackBenchRoot);
+  if (manifest.schemaVersion !== 2) throw new Error('unsupported binary provenance schema');
+  if (manifest.platform !== STACK_BENCH_RUNNER_PLATFORM) {
+    throw new Error(`binary provenance platform must be ${STACK_BENCH_RUNNER_PLATFORM}`);
+  }
+  if (manifest.builderImage !== RUST_BUILDER_IMAGE) {
+    throw new Error('binary provenance does not use the pinned Rust builder image');
+  }
+  assertSha256(manifest.source?.sha256, 'recorded binary source identity');
+  if (manifest.source.identityScheme !== SOURCE_IDENTITY_SCHEME) {
+    throw new Error('recorded binary source identity scheme is unsupported');
+  }
+  if (manifest.source.sha256 !== sourceSha256) {
+    throw new Error('SpacetimeDB binaries do not match the selected release source');
+  }
+  if (!/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/.test(manifest.source?.revision ?? '')) {
+    throw new Error('recorded binary source revision is invalid');
+  }
+  if (!Number.isSafeInteger(manifest.source?.files) || manifest.source.files < 1) {
+    throw new Error('recorded binary source file count is invalid');
+  }
+  for (const name of BINARY_NAMES) {
+    const expected = manifest.binaries?.[name];
+    assertSha256(expected?.sha256, `${name} recorded checksum`);
+    if (!Number.isSafeInteger(expected.size) || expected.size < 4) {
+      throw new Error(`${name} recorded size is invalid`);
+    }
+    const actual = inspectBinary(binaryPath(stackBenchRoot, name), name);
+    if (actual.size !== expected.size) throw new Error(`${name} size does not match provenance`);
+    if (actual.sha256 !== expected.sha256) throw new Error(`${name} checksum does not match provenance`);
+  }
+  return manifest;
+}
+
+function option(args: string[], name: string): string {
+  const index = args.indexOf(name);
+  const value = index === -1 ? undefined : args[index + 1];
+  if (!value) throw new Error(`${name} is required`);
+  return value;
+}
+
+function main(): void {
+  const [command, ...args] = process.argv.slice(2);
+  if (command === 'source') {
+    const repo = resolve(option(args, '--repo'));
+    console.log(JSON.stringify(binarySourceIdentity(repo), null, 2));
+    return;
+  }
+  if (command === 'record') {
+    const repo = resolve(option(args, '--repo'));
+    const stackBenchRoot = join(repo, 'tools', 'stack-bench');
+    const source = JSON.parse(readFileSync(resolve(option(args, '--source-file')), 'utf8'));
+    const current = binarySourceIdentity(repo);
+    assertBinarySourceUnchanged(source, current);
+    const manifest = createBinaryProvenance(stackBenchRoot, source);
+    const path = provenancePath(stackBenchRoot);
+    const temporary = `${path}.${process.pid}.${randomBytes(8).toString('hex')}.tmp`;
+    writeFileSync(temporary, `${JSON.stringify(manifest, null, 2)}\n`, { flag: 'wx' });
+    try { renameSync(temporary, path); }
+    catch (error) { rmSync(temporary, { force: true }); throw error; }
+    console.log(`recorded ${path}`);
+    return;
+  }
+  if (command === 'verify') {
+    const stackBenchRoot = resolve(option(args, '--root'));
+    verifyBinaryProvenance(stackBenchRoot, { sourceSha256: option(args, '--source-sha256') });
+    console.log('verified SpacetimeDB CLI and standalone binary provenance');
+    return;
+  }
+  throw new Error('Usage: binary-provenance source --repo PATH | record --repo PATH --source-file PATH | verify --root PATH --source-sha256 SHA256');
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  try { main(); }
+  catch (error) {
+    console.error(`binary provenance failed: ${error instanceof Error ? error.message : String(error)}`);
+    process.exit(1);
+  }
+}
diff --git a/tools/stack-bench/container/build-container-inspection.ts b/tools/stack-bench/container/build-container-inspection.ts
new file mode 100644
index 00000000000..768be6980e7
--- /dev/null
+++ b/tools/stack-bench/container/build-container-inspection.ts
@@ -0,0 +1,188 @@
+import { spawnSync } from 'node:child_process';
+import type { SpawnSyncOptionsWithStringEncoding, SpawnSyncReturns } from 'node:child_process';
+import { resolve } from 'node:path';
+
+import { LEGACY_SUBSCRIPTION_TOKEN_TARGET } from './container-auth.js';
+import type { ContainerMount } from '../src/runtime/container-mount.js';
+
+type InspectedMount = {
+  type: string;
+  source: string;
+  name: string | null;
+  destination: string;
+  readOnly: boolean;
+};
+
+export type InspectedBuildContainer = {
+  id: string;
+  image: string;
+  running: boolean;
+  networkMode: string | null;
+  readonlyRootfs: boolean;
+  tmpfs: Record<string, string>;
+  capAdd: string[];
+  capDrop: string[];
+  securityOpt: string[];
+  pidsLimit: number | null;
+  nanoCpus: number | null;
+  memoryBytes: number | null;
+  memorySwapBytes: number | null;
+  mounts: InspectedMount[];
+  unsafeCredentialExposure: boolean;
+};
+
+type DockerExecute = (command: string, args: readonly string[],
+  options: SpawnSyncOptionsWithStringEncoding) => SpawnSyncReturns<string>;
+
+type JsonRecord = Record<string, unknown>;
+
+function isRecord(value: unknown): value is JsonRecord {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function stringArray(value: unknown): string[] {
+  return Array.isArray(value) ? value.filter((item): item is string => typeof item === 'string') : [];
+}
+
+function numberOrNull(value: unknown): number | null {
+  return typeof value === 'number' ? value : null;
+}
+
+function dockerDetail(result: SpawnSyncReturns<string>): string {
+  return String(result.stderr || result.stdout || result.error?.message || `exit ${result.status}`).trim();
+}
+
+export function parseCgroupMemory(value: string) {
+  const bytes = (name: string): number | null => {
+    const match = value.match(new RegExp(`^\\[${name.replace('.', '\\.')}]\\r?\\n(\\d+)$`, 'm'));
+    if (!match) return null;
+    const parsed = Number(match[1]);
+    return Number.isSafeInteger(parsed) ? parsed : null;
+  };
+  return {
+    currentBytes: bytes('memory.current'),
+    peakBytes: bytes('memory.peak'),
+    limitBytes: bytes('memory.max'),
+  };
+}
+
+export function inspectBuildContainer(name: string, {
+  env = process.env,
+  timeoutMs = 120_000,
+  execute = spawnSync as DockerExecute,
+}: { env?: NodeJS.ProcessEnv; timeoutMs?: number; execute?: DockerExecute } = {}): InspectedBuildContainer | null {
+  const result = execute('docker', ['inspect', name], { encoding: 'utf8', env, timeout: timeoutMs });
+  if (result.status !== 0) {
+    const detail = dockerDetail(result);
+    if (/no such (?:object|container)/i.test(detail)) return null;
+    throw new Error(`cannot inspect build container ${name}: ${detail}`);
+  }
+
+  let parsed: unknown;
+  try { parsed = JSON.parse(result.stdout); }
+  catch (error) {
+    throw new Error(`Docker returned invalid inspection JSON for ${name}: ${error instanceof Error
+      ? error.message : String(error)}`);
+  }
+  if (!Array.isArray(parsed) || !isRecord(parsed[0])) {
+    throw new Error(`Docker returned an invalid container inspection for ${name}`);
+  }
+
+  const inspected = parsed[0];
+  const mounts = Array.isArray(inspected.Mounts) ? inspected.Mounts.filter(isRecord) : [];
+  const config = isRecord(inspected.Config) ? inspected.Config : {};
+  const hostConfig = isRecord(inspected.HostConfig) ? inspected.HostConfig : {};
+  const state = isRecord(inspected.State) ? inspected.State : {};
+  const sensitiveTargets = new Set([LEGACY_SUBSCRIPTION_TOKEN_TARGET, '/root/.claude/.credentials.json']);
+  const capabilities = (values: unknown): string[] => stringArray(values).map(value => value.replace(/^CAP_/, ''));
+  const tmpfs = isRecord(hostConfig.Tmpfs)
+    ? Object.fromEntries(Object.entries(hostConfig.Tmpfs)
+      .filter((entry): entry is [string, string] => typeof entry[1] === 'string')) : {};
+
+  return {
+    id: String(inspected.Id),
+    image: String(inspected.Image),
+    running: state.Running === true,
+    networkMode: typeof hostConfig.NetworkMode === 'string' ? hostConfig.NetworkMode : null,
+    readonlyRootfs: hostConfig.ReadonlyRootfs === true,
+    tmpfs,
+    capAdd: capabilities(hostConfig.CapAdd),
+    capDrop: capabilities(hostConfig.CapDrop),
+    securityOpt: stringArray(hostConfig.SecurityOpt).map(option => option.replace(/:true$/, '')),
+    pidsLimit: numberOrNull(hostConfig.PidsLimit),
+    nanoCpus: numberOrNull(hostConfig.NanoCpus),
+    memoryBytes: numberOrNull(hostConfig.Memory),
+    memorySwapBytes: numberOrNull(hostConfig.MemorySwap),
+    mounts: mounts.map(mount => ({
+      type: String(mount.Type),
+      source: String(mount.Source),
+      name: typeof mount.Name === 'string' ? mount.Name : null,
+      destination: String(mount.Destination),
+      readOnly: mount.RW !== true,
+    })),
+    unsafeCredentialExposure: mounts.some(mount => sensitiveTargets.has(String(mount.Destination)))
+      || stringArray(config.Env).some(value => /^(?:ANTHROPIC_API_KEY|CLAUDE_CODE_OAUTH_TOKEN)=/.test(value)),
+  };
+}
+
+export function sameHostPath(left: string, right: string,
+  platform: NodeJS.Platform = process.platform): boolean {
+  const normalize = (value: string): string => resolve(value).replaceAll('\\', '/');
+  const normalizedLeft = normalize(left);
+  const normalizedRight = normalize(right);
+  return platform === 'win32'
+    ? normalizedLeft.toLowerCase() === normalizedRight.toLowerCase()
+    : normalizedLeft === normalizedRight;
+}
+
+export function parsePublishedPorts(value: string | undefined): string[] {
+  if (!value) return [];
+  const ports = value.split(',').map(port => port.trim()).filter(Boolean);
+  if (ports.some(port => !/^\d+$/.test(port) || Number(port) < 1 || Number(port) > 65_535)) {
+    throw new Error('--ports must contain integers from 1 through 65535');
+  }
+  if (new Set(ports).size !== ports.length) throw new Error('--ports must not contain duplicates');
+  return ports;
+}
+
+export function hasRequiredBuildContainerIsolation(container: InspectedBuildContainer, {
+  expectedMounts,
+  requiredTmpfs,
+  requiredCapabilities,
+  pidsLimit,
+  cpuCount,
+  memoryBytes,
+  memorySwapBytes,
+  image,
+}: {
+  expectedMounts: ContainerMount[];
+  requiredTmpfs: Readonly<Record<string, string>>;
+  requiredCapabilities: readonly string[];
+  pidsLimit: number;
+  cpuCount: number;
+  memoryBytes: number;
+  memorySwapBytes: number;
+  image: string;
+}): boolean {
+  const mountsMatch = container.mounts.length === expectedMounts.length
+    && expectedMounts.every(expected => container.mounts.some(actual =>
+      actual.type === (expected.kind ?? 'bind')
+      && actual.destination === expected.target
+      && actual.readOnly === expected.readOnly
+      && (expected.kind === 'volume'
+        ? actual.name === expected.source
+        : sameHostPath(actual.source, expected.source))));
+  return container.readonlyRootfs
+    && Object.entries(requiredTmpfs).every(([path, options]) => container.tmpfs[path] === options)
+    && Object.keys(container.tmpfs).length === Object.keys(requiredTmpfs).length
+    && requiredCapabilities.every(capability => container.capAdd.includes(capability))
+    && container.capAdd.length === requiredCapabilities.length
+    && container.capDrop.includes('ALL')
+    && container.securityOpt.includes('no-new-privileges')
+    && container.pidsLimit === pidsLimit
+    && container.nanoCpus === cpuCount * 1_000_000_000
+    && container.memoryBytes === memoryBytes
+    && container.memorySwapBytes === memorySwapBytes
+    && container.image === image
+    && mountsMatch;
+}
diff --git a/tools/stack-bench/container/build-linux-cli.sh b/tools/stack-bench/container/build-linux-cli.sh
new file mode 100644
index 00000000000..5e9f45be8c7
--- /dev/null
+++ b/tools/stack-bench/container/build-linux-cli.sh
@@ -0,0 +1,76 @@
+#!/usr/bin/env bash
+# Build the SpacetimeDB CLI for Linux, from THIS repository, so a containerised
+# build can publish modules with the CLI actually under test.
+#
+# The benchmark's whole claim about SpacetimeDB rests on measuring the software
+# in this checkout rather than a published release. `target/release/
+# spacetimedb-cli.exe` is a Windows PE binary and a Linux container cannot run
+# it, so without this the SpacetimeDB backend falls back to running on the host
+# and loses the isolation every other backend gets.
+#
+# Outputs: tools/stack-bench/container/bin/spacetimedb-cli and
+#          tools/stack-bench/container/bin/spacetimedb-standalone (Linux ELFs)
+#
+# Usage: bash tools/stack-bench/container/build-linux-cli.sh
+set -euo pipefail
+
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO="$(cd "$HERE/../../.." && pwd)"
+OUT="$HERE/bin"
+
+# This digest is the linux/amd64 manifest for rust:1.93-slim-bookworm. Update it
+# with rust-toolchain.toml and the expected image in the provenance command.
+IMAGE="rust:1.93-slim-bookworm@sha256:8f8609d448e821fbc0e44241bc5ca4ce49663cc6306ff1a17f655a0e2a7cd084"
+
+# Cargo's target directory is a named volume, not a path in the repo. A Rust
+# build against a Windows bind mount is many times slower, and it would also sit
+# next to the Windows artifacts in target/ where the wrong one is easy to pick up
+# so container runs cannot silently execute a stale or host-platform binary.
+VOLUME="${STACK_BENCH_CARGO_VOLUME:-stack-bench-cargo-target}"
+
+SOURCE_RECORD="$(mktemp)"
+trap 'rm -f "$SOURCE_RECORD"' EXIT
+(cd "$HERE/.." && npm run build --silent)
+PROVENANCE="$HERE/../dist/container/binary-provenance.js"
+node "$PROVENANCE" source --repo "$REPO" >"$SOURCE_RECORD"
+
+mkdir -p "$OUT"
+docker volume create "$VOLUME" >/dev/null
+
+echo "building spacetimedb-cli for linux (image $IMAGE, target volume $VOLUME)"
+echo "  first build compiles the whole workspace and takes a while; later ones reuse the volume"
+
+# Git Bash must not rewrite container-side paths in this Docker command. Keep
+# the setting local so host-side Node paths still convert normally.
+MSYS_NO_PATHCONV=1 docker run --rm --platform linux/amd64 \
+  -v "$REPO:/src" \
+  -v "$VOLUME:/target" \
+  -v "$OUT:/out" \
+  -w /src \
+  -e CARGO_TARGET_DIR=/target \
+  -e CARGO_TERM_COLOR=never \
+  "$IMAGE" \
+  bash -c '
+    set -euo pipefail
+    # pkg-config/libssl: the CLI links openssl. clang/cmake: some transitive
+    # build scripts need them. Installed here rather than baked into an image so
+    # this script stays a single file with nothing to keep in sync.
+    apt-get update -qq
+    apt-get install -y -qq --no-install-recommends \
+      pkg-config libssl-dev build-essential clang cmake perl git curl python3 >/dev/null
+    rustup show >/dev/null            # honours rust-toolchain.toml
+    cargo build --release --locked \
+      -p spacetimedb-cli --bin spacetimedb-cli \
+      -p spacetimedb-standalone --bin spacetimedb-standalone
+    cp /target/release/spacetimedb-cli /out/spacetimedb-cli
+    cp /target/release/spacetimedb-standalone /out/spacetimedb-standalone
+    chmod +x /out/spacetimedb-cli /out/spacetimedb-standalone
+  '
+
+echo ""
+file "$OUT/spacetimedb-cli" 2>/dev/null || true
+file "$OUT/spacetimedb-standalone" 2>/dev/null || true
+MSYS_NO_PATHCONV=1 docker run --rm -v "$OUT:/deps:ro" "${STACK_BENCH_IMAGE:-stack-bench-build:2.1.226}" \
+  sh -c 'test -x /deps/spacetimedb-standalone && /deps/spacetimedb-cli --version'
+
+node "$PROVENANCE" record --repo "$REPO" --source-file "$SOURCE_RECORD"
diff --git a/tools/stack-bench/container/container-auth.ts b/tools/stack-bench/container/container-auth.ts
new file mode 100644
index 00000000000..6bbe629593a
--- /dev/null
+++ b/tools/stack-bench/container/container-auth.ts
@@ -0,0 +1,54 @@
+import { existsSync, readFileSync } from 'node:fs';
+import type { PathLike } from 'node:fs';
+import { isAbsolute, resolve } from 'node:path';
+
+export const SUBSCRIPTION_TOKEN_ENVIRONMENT = 'CLAUDE_CODE_OAUTH_TOKEN';
+export const LEGACY_SUBSCRIPTION_TOKEN_TARGET = '/run/secrets/claude-code-oauth-token';
+
+export type ContainerAuth = {
+  mode: 'api-key' | 'subscription-token';
+  credential: string;
+};
+
+type ReadTextFile = (path: PathLike | number, encoding: BufferEncoding) => string;
+
+export interface ResolveContainerAuthOptions {
+  apiKey?: string;
+  env?: NodeJS.ProcessEnv;
+  credentialsPath?: string;
+  exists?: (path: PathLike) => boolean;
+  read?: ReadTextFile;
+}
+
+export function resolveContainerAuth({ apiKey = '', env = process.env, credentialsPath,
+  exists = existsSync, read = readFileSync as ReadTextFile }: ResolveContainerAuthOptions = {}): ContainerAuth {
+  const token = String(env[SUBSCRIPTION_TOKEN_ENVIRONMENT] ?? '').trim();
+  const tokenFileValue = String(env[`${SUBSCRIPTION_TOKEN_ENVIRONMENT}_FILE`] ?? '').trim();
+  if (token && tokenFileValue) {
+    throw new Error(`use only one of ${SUBSCRIPTION_TOKEN_ENVIRONMENT} and `
+      + `${SUBSCRIPTION_TOKEN_ENVIRONMENT}_FILE`);
+  }
+  if (apiKey && (token || tokenFileValue)) {
+    throw new Error('use only one of API-key and subscription-token authentication');
+  }
+  if (apiKey) return { mode: 'api-key', credential: apiKey };
+  if (token) return { mode: 'subscription-token', credential: token };
+  if (tokenFileValue) {
+    if (!isAbsolute(tokenFileValue)) {
+      throw new Error(`${SUBSCRIPTION_TOKEN_ENVIRONMENT}_FILE must be an absolute path`);
+    }
+    const source = resolve(tokenFileValue);
+    if (!exists(source)) throw new Error(`subscription token file does not exist: ${source}`);
+    const credential = String(read(source, 'utf8')).trim();
+    if (!credential) {
+      throw new Error(`subscription token file is empty: ${source}`);
+    }
+    return { mode: 'subscription-token', credential };
+  }
+  if (credentialsPath && exists(credentialsPath)) {
+    throw new Error('rotating Claude credential files cannot be isolated from generated shell commands; '
+      + 'select an API key or CLAUDE_CODE_OAUTH_TOKEN_FILE');
+  }
+  throw new Error(`no API key, ${SUBSCRIPTION_TOKEN_ENVIRONMENT}, `
+    + `${SUBSCRIPTION_TOKEN_ENVIRONMENT}_FILE, or credentials file is available`);
+}
diff --git a/tools/stack-bench/container/credential-broker-accounting.ts b/tools/stack-bench/container/credential-broker-accounting.ts
new file mode 100644
index 00000000000..594b1287a3d
--- /dev/null
+++ b/tools/stack-bench/container/credential-broker-accounting.ts
@@ -0,0 +1,310 @@
+import { randomBytes } from 'node:crypto';
+import { readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { z } from 'zod';
+
+import { normalizeClaudeUsage, priceClaudeUsage } from '../src/evidence/claude-usage-cost.js';
+import type { ClaudeUsage } from '../src/evidence/claude-usage-cost.js';
+import { validatePricingRates as validateSharedPricingRates } from '../src/evidence/pricing-authority.js';
+import { formatZodError } from '../src/zod-error.js';
+
+export const BROKER_LEDGER_SCHEMA_VERSION = 4;
+// Why a billable request was charged its cost ceiling instead of priced from
+// the provider's usage: a 2xx response without complete usage (an aborted or
+// errored stream, an oversized body), a response that broke off, or an
+// upstream connection that failed. The ceiling makes spend an upper bound.
+export const ESTIMATE_REASONS = ['no-usage', 'response-aborted', 'upstream-error'] as const;
+export type EstimateReason = typeof ESTIMATE_REASONS[number];
+export type EstimateCounts = Record<EstimateReason, number>;
+export const noEstimates = (): EstimateCounts => ({ 'no-usage': 0, 'response-aborted': 0, 'upstream-error': 0 });
+export const MAX_BROKER_OUTPUT_TOKENS = 128_000;
+export const CLAUDE_USAGE_FIELDS = ['input', 'output', 'cacheRead', 'cacheWrite5m', 'cacheWrite1h'] as const;
+const COST_TOLERANCE_USD = 0.0001;
+
+type JsonRecord = Record<string, unknown>;
+export type BrokerMode = 'api-key' | 'subscription-token';
+export type PricingRates = ReturnType<typeof validateSharedPricingRates>;
+
+export type BrokerConfig = {
+  mode: BrokerMode;
+  credential: string;
+  sessionToken: string;
+  readyPath?: string;
+  parentPid?: number;
+  expiresAt?: number;
+  listenHost?: '127.0.0.1' | '0.0.0.0';
+  ledgerPath?: string;
+  model: string;
+  maxOutputTokens: number;
+  maxBudgetUsd?: number | null;
+  pricingRates?: PricingRates;
+};
+
+export type BrokerLedger = {
+  schemaVersion: number;
+  model: string;
+  maxBudgetUsd: number | null;
+  acceptedRequests: number;
+  billableRequests: number;
+  completedBillableRequests: number;
+  estimatedBillableRequests: number;
+  estimatedByReason: EstimateCounts;
+  spentUsd: number;
+  reservedUsd: number;
+  usage: ClaudeUsage;
+  complete: boolean;
+  updatedAt: string;
+};
+
+// `costUsd` is what the broker charged: exact provider usage priced at the
+// receipt's rates, plus the cost ceiling of every estimated request. With
+// `exact` false it is an upper bound and `calculatedCostUsd`, priced from the
+// exact usage alone, a lower bound.
+export interface CredentialBrokerReceipt {
+  schemaVersion: 3;
+  source: 'credential-broker';
+  model: string;
+  maxBudgetUsd: number;
+  costUsd: number;
+  cliCostUsd: number | null;
+  calculatedCostUsd: number | null;
+  usage: ClaudeUsage | null;
+  pricingRates: PricingRates | null;
+  exact: boolean;
+  estimatedRequests: number;
+  estimatedByReason: EstimateCounts;
+  complete: boolean;
+  reconciled: boolean;
+  error: string | null;
+}
+
+export interface CredentialBrokerResult extends JsonRecord {
+  total_cost_usd: number;
+  usage?: ReturnType<typeof rawUsage>;
+  stack_bench_cost_receipt: CredentialBrokerReceipt;
+}
+
+const positiveFinite = z.number().finite().positive();
+const nonNegativeFinite = z.number().finite().nonnegative();
+const nonNegativeSafeInteger = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER);
+const usageSchema = z.strictObject({
+  input: nonNegativeSafeInteger,
+  output: nonNegativeSafeInteger,
+  cacheRead: nonNegativeSafeInteger,
+  cacheWrite5m: nonNegativeSafeInteger,
+  cacheWrite1h: nonNegativeSafeInteger,
+});
+const brokerConfigSchema = z.strictObject({
+  mode: z.enum(['api-key', 'subscription-token']),
+  credential: z.string().min(16),
+  sessionToken: z.string().min(16),
+  readyPath: z.string().min(1).optional(),
+  parentPid: z.number().int().positive().max(Number.MAX_SAFE_INTEGER).optional(),
+  expiresAt: positiveFinite.optional(),
+  listenHost: z.enum(['127.0.0.1', '0.0.0.0']).optional(),
+  ledgerPath: z.string().min(1).optional(),
+  model: z.string().min(1),
+  maxOutputTokens: z.number().int().min(1).max(MAX_BROKER_OUTPUT_TOKENS),
+  maxBudgetUsd: positiveFinite.nullable().optional(),
+  pricingRates: z.unknown().optional(),
+}).superRefine((value, context) => {
+  if (value.expiresAt !== undefined && value.expiresAt <= Date.now()) {
+    context.addIssue({ code: 'custom', path: ['expiresAt'], message: 'must be in the future' });
+  }
+});
+const brokerLedgerSchema = z.strictObject({
+  schemaVersion: z.literal(BROKER_LEDGER_SCHEMA_VERSION),
+  model: z.string().min(1),
+  maxBudgetUsd: positiveFinite.nullable(),
+  acceptedRequests: nonNegativeSafeInteger,
+  billableRequests: nonNegativeSafeInteger,
+  completedBillableRequests: nonNegativeSafeInteger,
+  estimatedBillableRequests: nonNegativeSafeInteger,
+  estimatedByReason: z.strictObject({
+    'no-usage': nonNegativeSafeInteger,
+    'response-aborted': nonNegativeSafeInteger,
+    'upstream-error': nonNegativeSafeInteger,
+  }),
+  spentUsd: nonNegativeFinite,
+  reservedUsd: nonNegativeFinite,
+  usage: usageSchema,
+  complete: z.boolean(),
+  updatedAt: z.string().refine(value => !Number.isNaN(Date.parse(value)), 'must be a timestamp'),
+});
+
+function isRecord(value: unknown): value is JsonRecord {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function isNumber(value: unknown): value is number {
+  return typeof value === 'number';
+}
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+function fail(message: string): never {
+  throw new Error(`credential broker: ${message}`);
+}
+
+export function validatePricingRates(value: unknown): PricingRates {
+  try { return validateSharedPricingRates(value, { at: 'pricingRates' }); }
+  catch (error) { return fail(errorMessage(error)); }
+}
+
+export function priceNormalizedClaudeUsage(usage: ClaudeUsage, rates: PricingRates): number {
+  return priceClaudeUsage({
+    input_tokens: usage.input,
+    output_tokens: usage.output,
+    cache_read_input_tokens: usage.cacheRead,
+    cache_creation: {
+      ephemeral_5m_input_tokens: usage.cacheWrite5m,
+      ephemeral_1h_input_tokens: usage.cacheWrite1h,
+    },
+  }, rates);
+}
+
+function rawUsage(usage: ClaudeUsage): JsonRecord {
+  return {
+    input_tokens: usage.input,
+    output_tokens: usage.output,
+    cache_read_input_tokens: usage.cacheRead,
+    cache_creation_input_tokens: usage.cacheWrite5m + usage.cacheWrite1h,
+    cache_creation: {
+      ephemeral_5m_input_tokens: usage.cacheWrite5m,
+      ephemeral_1h_input_tokens: usage.cacheWrite1h,
+    },
+  };
+}
+
+function brokerCoversCliUsage(broker: ClaudeUsage, cli: ClaudeUsage): boolean {
+  return broker.input >= cli.input
+    && broker.output >= cli.output
+    && broker.cacheRead >= cli.cacheRead
+    && broker.cacheWrite5m + broker.cacheWrite1h >= cli.cacheWrite5m + cli.cacheWrite1h;
+}
+
+export function validateBrokerConfig(value: unknown): BrokerConfig {
+  const parsed = brokerConfigSchema.safeParse(value);
+  if (!parsed.success) fail(formatZodError(parsed.error, 'configuration'));
+  const { pricingRates, ...config } = parsed.data;
+  return config.maxBudgetUsd === null || config.maxBudgetUsd === undefined
+    ? config
+    : { ...config, pricingRates: validatePricingRates(pricingRates) };
+}
+
+function validateLedger(value: unknown,
+  { model = null, maxBudgetUsd = undefined }: { model?: string | null; maxBudgetUsd?: number | null } = {}): BrokerLedger {
+  const parsed = brokerLedgerSchema.safeParse(value);
+  if (!parsed.success) fail(formatZodError(parsed.error, 'spend ledger'));
+  const ledger = parsed.data;
+  if (model !== null && ledger.model !== model) fail('spend ledger model does not match');
+  if (maxBudgetUsd !== undefined && ledger.maxBudgetUsd !== maxBudgetUsd) {
+    fail('spend ledger budget does not match');
+  }
+  if (ledger.completedBillableRequests > ledger.billableRequests) {
+    fail('spend ledger completed request count is invalid');
+  }
+  if (ledger.estimatedBillableRequests > ledger.completedBillableRequests) {
+    fail('spend ledger estimated request count is invalid');
+  }
+  const reasons = ESTIMATE_REASONS.reduce((sum, reason) => sum + ledger.estimatedByReason[reason], 0);
+  if (reasons !== ledger.estimatedBillableRequests) fail('spend ledger estimate reasons do not add up');
+  const complete = ledger.reservedUsd === 0
+    && ledger.completedBillableRequests === ledger.billableRequests;
+  if (ledger.complete !== complete) fail('spend ledger completion state is invalid');
+  return ledger;
+}
+
+export function writeCredentialBrokerLedger(path: string | undefined, value: unknown): void {
+  if (!path) return;
+  const ledger = validateLedger(value);
+  const temporary = `${path}.${process.pid}.${randomBytes(8).toString('hex')}.tmp`;
+  writeFileSync(temporary, `${JSON.stringify(ledger)}\n`, { flag: 'wx', mode: 0o600 });
+  try { renameSync(temporary, path); }
+  catch (error) { rmSync(temporary, { force: true }); throw error; }
+}
+
+export function readCredentialBrokerLedger(path: string,
+  expected: { model?: string | null; maxBudgetUsd?: number | null } = {}): BrokerLedger {
+  return validateLedger(JSON.parse(readFileSync(path, 'utf8')), expected);
+}
+
+export function reconcileCredentialBrokerReceipt({ ledger, cliResult, model, maxBudgetUsd,
+  pricingRates, brokerDiagnostics = null, toleranceUsd = COST_TOLERANCE_USD }: {
+  ledger: unknown; cliResult: unknown; model: unknown; maxBudgetUsd: unknown; pricingRates: unknown;
+  brokerDiagnostics?: unknown; toleranceUsd?: number;
+}): { ok: boolean; result: CredentialBrokerResult; receipt: CredentialBrokerReceipt } {
+  if (typeof model !== 'string' || !model) fail('receipt model is invalid');
+  if (!isNumber(maxBudgetUsd) || !Number.isFinite(maxBudgetUsd) || maxBudgetUsd <= 0) fail('receipt budget is invalid');
+  if (!Number.isFinite(toleranceUsd) || toleranceUsd < 0) fail('receipt tolerance is invalid');
+  const receiptBudget = maxBudgetUsd;
+  let verifiedLedger: BrokerLedger | null = null;
+  let verifiedRates: PricingRates | null = null;
+  let usage: ClaudeUsage | null = null;
+  let cliUsage: ClaudeUsage | null = null;
+  let calculatedCostUsd: number | null = null;
+  let issue: string | null = null;
+  try { verifiedLedger = validateLedger(ledger, { model, maxBudgetUsd: receiptBudget }); }
+  catch (error) { issue = errorMessage(error); }
+  if (!issue && verifiedLedger?.complete !== true) issue = 'credential broker spend ledger is incomplete';
+  const estimatedRequests = verifiedLedger?.estimatedBillableRequests ?? 0;
+  const exact = verifiedLedger !== null && estimatedRequests === 0;
+  try { verifiedRates = validatePricingRates(pricingRates); }
+  catch (error) { if (!issue) issue = errorMessage(error); }
+  try { cliUsage = normalizeClaudeUsage(isRecord(cliResult) ? cliResult.usage : undefined); }
+  catch (error) { if (!issue) issue = errorMessage(error); }
+  if (verifiedLedger) usage = structuredClone(verifiedLedger.usage);
+  if (!issue && cliUsage && usage && !brokerCoversCliUsage(usage, cliUsage)) {
+    issue = 'credential broker usage is lower than CLI usage totals';
+  }
+  try { if (verifiedRates && usage) calculatedCostUsd = priceNormalizedClaudeUsage(usage, verifiedRates); }
+  catch (error) { if (!issue) issue = errorMessage(error); }
+  const brokerCost = verifiedLedger
+    ? Math.min(receiptBudget, verifiedLedger.spentUsd + verifiedLedger.reservedUsd) : receiptBudget;
+  const cliCost = Number(isRecord(cliResult) ? cliResult.total_cost_usd : undefined);
+  if (!issue && (!Number.isFinite(cliCost) || cliCost < 0)) {
+    issue = 'coding session did not return a usable cost receipt';
+  }
+  // Exact spend must price back to the broker's figure. Estimated requests
+  // add their ceilings on top of the priced usage, so the priced usage can
+  // only fall below the broker's figure, never above it.
+  if (!issue && calculatedCostUsd !== null && exact && Math.abs(calculatedCostUsd - brokerCost) > toleranceUsd) {
+    issue = `usage-priced spend $${calculatedCostUsd.toFixed(6)} does not match credential broker spend $${brokerCost.toFixed(6)}`;
+  }
+  if (!issue && calculatedCostUsd !== null && !exact && calculatedCostUsd - brokerCost > toleranceUsd) {
+    issue = `usage-priced spend $${calculatedCostUsd.toFixed(6)} exceeds credential broker spend $${brokerCost.toFixed(6)}`;
+  }
+  const receipt: CredentialBrokerReceipt = {
+    schemaVersion: 3,
+    source: 'credential-broker',
+    model,
+    maxBudgetUsd: receiptBudget,
+    costUsd: Number(brokerCost.toFixed(6)),
+    cliCostUsd: Number.isFinite(cliCost) && cliCost >= 0 ? Number(cliCost.toFixed(6)) : null,
+    calculatedCostUsd: calculatedCostUsd === null ? null : Number(calculatedCostUsd.toFixed(6)),
+    usage,
+    pricingRates: verifiedRates,
+    exact,
+    estimatedRequests,
+    estimatedByReason: verifiedLedger ? structuredClone(verifiedLedger.estimatedByReason) : noEstimates(),
+    complete: verifiedLedger?.complete === true,
+    reconciled: issue === null,
+    error: issue,
+  };
+  const result: CredentialBrokerResult = {
+    ...(isRecord(cliResult)
+      ? structuredClone(cliResult) : { type: 'result', is_error: true, result: '' }),
+    total_cost_usd: receipt.costUsd,
+    stack_bench_cost_receipt: receipt,
+  };
+  if (usage) result.usage = rawUsage(usage);
+  if (brokerDiagnostics) result.stack_bench_credential_broker = structuredClone(brokerDiagnostics);
+  if (issue) {
+    result.is_error = true;
+    result.terminal_reason = 'cost_receipt_error';
+    result.result = [typeof result.result === 'string' ? result.result.trim() : '', issue]
+      .filter(Boolean).join('\n');
+  }
+  return { ok: issue === null, result, receipt };
+}
diff --git a/tools/stack-bench/container/credential-broker-process.ts b/tools/stack-bench/container/credential-broker-process.ts
new file mode 100644
index 00000000000..f773269a6ee
--- /dev/null
+++ b/tools/stack-bench/container/credential-broker-process.ts
@@ -0,0 +1,318 @@
+import { spawn } from 'node:child_process';
+import type { ChildProcess } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import { chmodSync, existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { setTimeout as wait } from 'node:timers/promises';
+
+import type { ContainerAuth } from './container-auth.js';
+import { MAX_BROKER_OUTPUT_TOKENS, readCredentialBrokerLedger, validateBrokerConfig }
+  from './credential-broker-accounting.js';
+import type { BrokerLedger, PricingRates } from './credential-broker-accounting.js';
+import { compiledEntrypoint } from '../src/package-root.js';
+import { killTree } from '../src/runtime/platform.js';
+
+const BROKER_DRAIN_TIMEOUT_MS = 30_000;
+const BROKER_DRAIN_POLL_MS = 100;
+const BROKER_STDERR_LIMIT_BYTES = 16 * 1024;
+const BROKER_STOP_GRACE_MS = 2_000;
+const BROKER_STOP_FORCE_MS = 2_000;
+
+type JsonRecord = Record<string, unknown>;
+type Alive = (pid: number | undefined) => boolean;
+
+export type BrokerProcessState = {
+  exitCode: number | null;
+  signal: NodeJS.Signals | null;
+  exitedAt: string | null;
+  stderrTail: string;
+  stderrPending: string;
+  stderrTruncated: boolean;
+};
+
+export type BrokerError = { type: string; phase: string; message: string };
+
+export type BrokerDiagnostics = {
+  schemaVersion: number;
+  endpointKind: string;
+  child: { pid: number | undefined | null; exitCode: number | null; signal: NodeJS.Signals | null;
+    exitedAt: string | null; stderrTail: string | null; stderrTruncated: boolean };
+  drain: { timeoutMs: number; elapsedMs: number; timedOut: boolean; reason: string | null;
+    terminationRequested: boolean } | null;
+  termination: { gracefulRequested: boolean; forceRequested: boolean; exited: boolean;
+    gracefulTimeoutMs: number; forceTimeoutMs: number } | null;
+  ledger: BrokerLedger | null;
+  errors: BrokerError[];
+};
+
+export interface CredentialBrokerChild {
+  pid?: number;
+  exitCode?: number | null;
+  signalCode?: NodeJS.Signals | null;
+  kill?: (signal?: NodeJS.Signals | number) => boolean;
+}
+
+export interface CredentialBrokerHandle {
+  child: CredentialBrokerChild;
+  root: string;
+  ledgerPath: string;
+  model: string;
+  maxBudgetUsd: number | null;
+  sessionToken?: string;
+  baseUrl?: string;
+  listenHost?: string;
+  endpointKind?: string;
+  processState?: Partial<BrokerProcessState>;
+  diagnosticSecrets?: string[];
+  finalDiagnostics?: BrokerDiagnostics | null;
+  finalLedger?: BrokerLedger | null;
+}
+
+export interface CredentialBroker extends CredentialBrokerHandle {
+  child: ChildProcess;
+  sessionToken: string;
+  baseUrl: string;
+  listenHost: string;
+  endpointKind: string;
+  processState: BrokerProcessState;
+  diagnosticSecrets: string[];
+  finalDiagnostics: BrokerDiagnostics | null;
+  finalLedger: BrokerLedger | null;
+}
+
+function isRecord(value: unknown): value is JsonRecord {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function fail(message: string): never {
+  throw new Error(`credential broker: ${message}`);
+}
+
+function redactDiagnosticText(value: unknown,
+  broker: CredentialBrokerHandle | string[] | null | undefined): string {
+  let result = String(value ?? '');
+  const secrets = Array.isArray(broker) ? broker : broker?.diagnosticSecrets ?? [];
+  for (const secret of secrets) {
+    if (typeof secret === 'string' && secret) result = result.replaceAll(secret, '[REDACTED]');
+  }
+  return result;
+}
+
+function appendDiagnosticStderr(state: BrokerProcessState, chunk: string, secrets: string[], flush = false): void {
+  const raw = state.stderrPending + chunk;
+  let redacted = redactDiagnosticText(raw, secrets);
+  let pendingLength = 0;
+  if (!flush) {
+    for (const secret of secrets) {
+      for (let length = Math.min(secret.length - 1, redacted.length); length > pendingLength; length -= 1) {
+        if (redacted.endsWith(secret.slice(0, length))) { pendingLength = length; break; }
+      }
+    }
+  } else if (raw && secrets.some(secret => secret.startsWith(raw))) redacted = '[REDACTED]';
+  state.stderrPending = pendingLength ? redacted.slice(-pendingLength) : '';
+  const safe = pendingLength ? redacted.slice(0, -pendingLength) : redacted;
+  const next = state.stderrTail + safe;
+  if (Buffer.byteLength(next) > BROKER_STDERR_LIMIT_BYTES) {
+    state.stderrTruncated = true;
+    state.stderrTail = Buffer.from(next).subarray(-BROKER_STDERR_LIMIT_BYTES).toString('utf8');
+  } else state.stderrTail = next;
+}
+
+export async function startCredentialBroker(selectedAuth: ContainerAuth, { networkMode, deadlineMs,
+  model, maxOutputTokens = MAX_BROKER_OUTPUT_TOKENS, maxBudgetUsd = null, pricingRates = null,
+  env = process.env }: { networkMode: 'bridge' | 'host'; deadlineMs: number; model: string;
+  maxOutputTokens?: number; maxBudgetUsd?: number | null; pricingRates?: PricingRates | null;
+  env?: NodeJS.ProcessEnv }): Promise<CredentialBroker> {
+  if (!['bridge', 'host'].includes(networkMode)) fail('network mode is invalid');
+  if (!Number.isFinite(deadlineMs) || deadlineMs <= 0) fail('deadline is invalid');
+  const credential = selectedAuth.credential.trim();
+  if (!credential) fail('selected authentication has no broker credential');
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-credential-broker-'));
+  let child: ChildProcess | null = null;
+  const processState: BrokerProcessState = { exitCode: null, signal: null, exitedAt: null,
+    stderrTail: '', stderrPending: '', stderrTruncated: false };
+  try {
+    chmodSync(root, 0o700);
+    const configPath = join(root, 'config.json');
+    const readyPath = join(root, 'ready.json');
+    const ledgerPath = join(root, 'spend-ledger.json');
+    const sessionToken = randomBytes(32).toString('hex');
+    const listenHost = networkMode === 'host' ? '127.0.0.1' : '0.0.0.0';
+    const config = validateBrokerConfig({ mode: selectedAuth.mode, credential, sessionToken, readyPath,
+      parentPid: process.pid, expiresAt: Date.now() + deadlineMs + 60_000, listenHost, ledgerPath,
+      model, maxOutputTokens, maxBudgetUsd, pricingRates });
+    writeFileSync(configPath, `${JSON.stringify(config)}\n`, { flag: 'wx', mode: 0o600 });
+    child = spawn(process.execPath, [compiledEntrypoint('container', 'credential-broker.js'),
+      '--config', configPath], {
+      stdio: ['ignore', 'ignore', 'pipe'],
+      windowsHide: true,
+      env: Object.fromEntries(['PATH', 'Path', 'SystemRoot', 'WINDIR', 'SSL_CERT_FILE',
+        'NODE_EXTRA_CA_CERTS', 'HTTPS_PROXY', 'HTTP_PROXY']
+        .filter(name => env[name] !== undefined).map(name => [name, env[name]])),
+    });
+    const diagnosticSecrets = [credential, sessionToken];
+    child.stderr?.on('data', (chunk: Buffer) => appendDiagnosticStderr(
+      processState, chunk.toString('utf8'), diagnosticSecrets));
+    child.once('exit', (code: number | null, signal: NodeJS.Signals | null) => {
+      appendDiagnosticStderr(processState, '', diagnosticSecrets, true);
+      processState.exitCode = code;
+      processState.signal = signal;
+      processState.exitedAt = new Date().toISOString();
+    });
+    let spawnError: Error | null = null;
+    child.once('error', (error: Error) => { spawnError = error; });
+    const readyDeadline = Date.now() + 10_000;
+    while (!spawnError && child.exitCode === null && !existsSync(readyPath) && Date.now() < readyDeadline) {
+      await wait(100);
+    }
+    if (spawnError) throw spawnError;
+    if (!existsSync(readyPath)) throw new Error('credential broker did not become ready');
+    const ready: unknown = JSON.parse(readFileSync(readyPath, 'utf8'));
+    if (!isRecord(ready) || typeof ready.port !== 'number' || !Number.isInteger(ready.port)
+      || ready.port < 1 || ready.port > 65_535) throw new Error('credential broker returned an invalid port');
+    if (ready.host !== listenHost) throw new Error('credential broker returned an invalid host');
+    const host = networkMode === 'host' ? '127.0.0.1' : 'host.docker.internal';
+    return { child, root, ledgerPath, model, maxBudgetUsd: maxBudgetUsd ?? null,
+      sessionToken, baseUrl: `http://${host}:${ready.port}`, listenHost,
+      endpointKind: 'local-credential-broker', processState,
+      diagnosticSecrets, finalDiagnostics: null, finalLedger: null };
+  } catch (error) {
+    if (child?.pid) killTree(child.pid);
+    rmSync(root, { recursive: true, force: true });
+    throw error;
+  }
+}
+
+function processAlive(pid: number | undefined): boolean {
+  if (typeof pid !== 'number' || !Number.isInteger(pid) || pid < 1) return false;
+  try { process.kill(pid, 0); return true; }
+  catch (error) { return !isRecord(error) || error.code !== 'ESRCH'; }
+}
+
+function brokerExited(broker: CredentialBrokerHandle | null | undefined, alive: Alive): boolean {
+  const state = broker?.processState;
+  if (!state) return !alive(broker?.child?.pid);
+  if (state.exitedAt || state.exitCode !== null && state.exitCode !== undefined
+    || state.signal !== null && state.signal !== undefined
+    || broker?.child?.exitCode !== null && broker?.child?.exitCode !== undefined
+    || broker?.child?.signalCode !== null && broker?.child?.signalCode !== undefined) return true;
+  return !alive(broker?.child?.pid);
+}
+
+async function waitForBrokerExit(broker: CredentialBrokerHandle, timeoutMs: number,
+  { sleep, now, alive }: { sleep: (ms: number) => Promise<void>; now: () => number; alive: Alive }): Promise<boolean> {
+  const deadline = now() + timeoutMs;
+  while (!brokerExited(broker, alive) && now() < deadline) await sleep(BROKER_DRAIN_POLL_MS);
+  return brokerExited(broker, alive);
+}
+
+export function credentialBrokerDiagnostics(broker: CredentialBrokerHandle | null): BrokerDiagnostics | null {
+  if (!broker) return null;
+  if (broker.finalDiagnostics) return structuredClone(broker.finalDiagnostics);
+  const state = broker.processState ?? {};
+  return {
+    schemaVersion: 1,
+    endpointKind: broker.endpointKind ?? 'local-credential-broker',
+    child: { pid: broker.child?.pid ?? null,
+      exitCode: state.exitCode ?? broker.child?.exitCode ?? null,
+      signal: state.signal ?? broker.child?.signalCode ?? null,
+      exitedAt: state.exitedAt ?? null,
+      stderrTail: state.stderrTail ? redactDiagnosticText(state.stderrTail, broker) : null,
+      stderrTruncated: state.stderrTruncated === true },
+    drain: null,
+    termination: null,
+    ledger: null,
+    errors: [],
+  };
+}
+
+export async function stopCredentialBroker(broker: CredentialBrokerHandle | null, {
+  drainTimeoutMs = BROKER_DRAIN_TIMEOUT_MS,
+  pollMs = BROKER_DRAIN_POLL_MS,
+  gracefulTimeoutMs = BROKER_STOP_GRACE_MS,
+  forceTimeoutMs = BROKER_STOP_FORCE_MS,
+  readLedger = readCredentialBrokerLedger,
+  terminate = killTree,
+  requestStop = (child: CredentialBrokerChild) => child.kill?.('SIGTERM') ?? false,
+  alive = processAlive,
+  sleep = wait,
+  now = Date.now,
+}: { drainTimeoutMs?: number; pollMs?: number; gracefulTimeoutMs?: number; forceTimeoutMs?: number;
+  readLedger?: typeof readCredentialBrokerLedger; terminate?: typeof killTree;
+  requestStop?: (child: CredentialBrokerChild) => boolean | void; alive?: Alive;
+  sleep?: (ms: number) => Promise<void>; now?: () => number } = {}): Promise<BrokerLedger | null> {
+  if (!broker) return null;
+  if (broker.finalDiagnostics) return structuredClone(broker.finalLedger ?? null);
+  let ledger: BrokerLedger | null = null;
+  const startedAt = now();
+  let drainTimedOut = false;
+  let drainReason: string | null = null;
+  const errors: BrokerError[] = [];
+  const errorKeys = new Set<string>();
+  const recordError = (type: string, phase: string, error: unknown): void => {
+    const message = redactDiagnosticText(error instanceof Error ? error.message : error, broker) || 'unknown error';
+    const key = `${type}:${phase}:${message}`;
+    if (errorKeys.has(key)) return;
+    errorKeys.add(key);
+    errors.push({ type, phase, message });
+  };
+  const read = (phase: string, expected: { model: string; maxBudgetUsd: number | null }): BrokerLedger | null => {
+    try { return readLedger(broker.ledgerPath, expected); }
+    catch (error) { recordError('ledger-read-error', phase, error); return null; }
+  };
+  let gracefulRequested = false;
+  let forceRequested = false;
+  let exited = brokerExited(broker, alive);
+  const expected = { model: broker.model, maxBudgetUsd: broker.maxBudgetUsd };
+  try {
+    const deadline = now() + drainTimeoutMs;
+    while (drainReason === null) {
+      ledger = read('drain', expected) ?? ledger;
+      if (ledger?.complete === true) { drainReason = 'ledger-complete'; break; }
+      exited = brokerExited(broker, alive);
+      if (exited) { drainReason = 'child-exited'; break; }
+      if (now() >= deadline) { drainTimedOut = true; drainReason = 'timeout'; break; }
+      await sleep(pollMs);
+    }
+    exited = brokerExited(broker, alive);
+    if (!exited) {
+      gracefulRequested = true;
+      try { requestStop(broker.child); }
+      catch (error) { recordError('termination-error', 'graceful-request', error); }
+      exited = await waitForBrokerExit(broker, gracefulTimeoutMs, { sleep, now, alive });
+    }
+    if (!exited) {
+      forceRequested = true;
+      try { terminate(broker.child.pid); }
+      catch (error) { recordError('termination-error', 'force-request', error); }
+      exited = await waitForBrokerExit(broker, forceTimeoutMs, { sleep, now, alive });
+    }
+    if (!exited) recordError('termination-error', 'exit-verification',
+      new Error('credential broker remained alive after forced termination'));
+    ledger = read('final', expected) ?? ledger;
+  } catch (error) { recordError('broker-stop-error', 'shutdown', error); }
+  finally {
+    const state = broker.processState ?? {};
+    if (exited) {
+      try { rmSync(broker.root, { recursive: true, force: true }); }
+      catch (error) { recordError('cleanup-error', 'private-root', error); }
+    }
+    broker.finalLedger = ledger;
+    broker.finalDiagnostics = {
+      ...(credentialBrokerDiagnostics(broker) as BrokerDiagnostics),
+      child: { pid: broker.child?.pid ?? null,
+        exitCode: state.exitCode ?? broker.child?.exitCode ?? null,
+        signal: state.signal ?? broker.child?.signalCode ?? null,
+        exitedAt: state.exitedAt ?? null,
+        stderrTail: state.stderrTail ? redactDiagnosticText(state.stderrTail, broker) : null,
+        stderrTruncated: state.stderrTruncated === true },
+      drain: { timeoutMs: drainTimeoutMs, elapsedMs: Math.max(0, now() - startedAt),
+        timedOut: drainTimedOut, reason: drainReason, terminationRequested: gracefulRequested },
+      termination: { gracefulRequested, forceRequested, exited, gracefulTimeoutMs, forceTimeoutMs },
+      ledger: ledger ? structuredClone(ledger) : null,
+      errors,
+    };
+  }
+  return ledger;
+}
diff --git a/tools/stack-bench/container/credential-broker.ts b/tools/stack-bench/container/credential-broker.ts
new file mode 100644
index 00000000000..9ad94469067
--- /dev/null
+++ b/tools/stack-bench/container/credential-broker.ts
@@ -0,0 +1,437 @@
+#!/usr/bin/env node
+import { createServer } from 'node:http';
+import type { ClientRequest, IncomingMessage, OutgoingHttpHeaders, ServerResponse } from 'node:http';
+import { request as httpsRequest } from 'node:https';
+import type { RequestOptions } from 'node:https';
+import type { Socket } from 'node:net';
+import { readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { parseArgs as parseNodeArgs } from 'node:util';
+import type { AddressInfo } from 'node:net';
+import { brotliDecompressSync, gunzipSync, inflateSync } from 'node:zlib';
+import { createParser } from 'eventsource-parser';
+
+import { normalizeClaudeUsage } from '../src/evidence/claude-usage-cost.js';
+import type { ClaudeUsage } from '../src/evidence/claude-usage-cost.js';
+import { BROKER_LEDGER_SCHEMA_VERSION, CLAUDE_USAGE_FIELDS, noEstimates, priceNormalizedClaudeUsage,
+  validateBrokerConfig,
+  writeCredentialBrokerLedger } from './credential-broker-accounting.js';
+import type { BrokerConfig, EstimateReason, PricingRates }
+  from './credential-broker-accounting.js';
+
+const MAX_REQUEST_BYTES = 32 * 1024 * 1024;
+const MAX_REQUESTS = 512;
+const ALLOWED_PATHS = new Set(['/v1/messages', '/v1/messages/count_tokens']);
+const BROKER_SERVER_CLOSE_GRACE_MS = 1_000;
+export type { ClaudeUsage } from '../src/evidence/claude-usage-cost.js';
+type JsonRecord = Record<string, unknown>;
+export interface BrokerStats {
+  acceptedRequests: number;
+  billableRequests: number;
+  completedBillableRequests: number;
+  estimatedBillableRequests: number;
+  spentUsd: number;
+  reservedUsd: number;
+}
+
+export interface CreatedCredentialBroker {
+  server: ReturnType<typeof createServer>;
+  stats: () => BrokerStats;
+}
+
+type UpstreamRequest = (options: RequestOptions,
+  callback: (response: IncomingMessage) => void) => ClientRequest;
+
+function isRecord(value: unknown): value is JsonRecord {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function isNumber(value: unknown): value is number {
+  return typeof value === 'number';
+}
+
+const roundUsd = (value: number): number => Number(value.toFixed(6));
+const reserveUsd = (value: number): number => Math.ceil(value * 1e6) / 1e6;
+
+function fail(message: string): never {
+  throw new Error(`credential broker: ${message}`);
+}
+
+function clientAuthorized(request: IncomingMessage, sessionToken: string): boolean {
+  return request.headers.authorization === `Bearer ${sessionToken}`
+    || request.headers['x-api-key'] === sessionToken;
+}
+
+function upstreamHeaders(request: IncomingMessage, config: BrokerConfig): OutgoingHttpHeaders {
+  const headers: OutgoingHttpHeaders = { ...request.headers };
+  delete headers.host;
+  // Request identity encoding so accounting and the client read the same bytes.
+  delete headers['accept-encoding'];
+  delete headers.authorization;
+  delete headers['proxy-authorization'];
+  delete headers['x-api-key'];
+  if (config.mode === 'api-key') headers['x-api-key'] = config.credential;
+  else headers.authorization = `Bearer ${config.credential}`;
+  return headers;
+}
+
+function requestPath(value: string | undefined): string | null {
+  try { return new URL(value ?? '', 'http://credential-broker.invalid').pathname; }
+  catch { return null; }
+}
+
+function rejectRequest(request: IncomingMessage, response: ServerResponse,
+  status: number, message: string): void {
+  request.on('error', () => {});
+  response.on('error', () => {});
+  try {
+    response.shouldKeepAlive = false;
+    response.writeHead(status, { 'content-type': 'text/plain', connection: 'close' });
+    response.end(message);
+  } catch { response.destroy(); }
+  request.resume();
+}
+
+function parseProviderRequest(body: Buffer, path: string, config: BrokerConfig): JsonRecord {
+  let payload: unknown;
+  try { payload = JSON.parse(body.toString('utf8')); }
+  catch { fail('request body must be valid JSON'); }
+  if (!isRecord(payload)) {
+    fail('request body must be an object');
+  }
+  if (payload.model !== config.model) fail('request model does not match the selected model');
+  if (path === '/v1/messages'
+    && (!isNumber(payload.max_tokens) || !Number.isInteger(payload.max_tokens) || payload.max_tokens < 1
+      || payload.max_tokens > config.maxOutputTokens)) {
+    fail(`max_tokens must be from 1 through ${config.maxOutputTokens}`);
+  }
+  return payload;
+}
+
+function requestCostCeiling(bodyBytes: number, maxTokens: number, rates: PricingRates): number {
+  const inputRate = Math.max(rates.input, rates.cacheWrite5m, rates.cacheWrite1h);
+  return bodyBytes * inputRate / 1e6 + maxTokens * rates.output / 1e6;
+}
+
+function decodedResponseBody(body: Buffer, contentEncoding: string | string[] | undefined): Buffer {
+  const encodings = String(contentEncoding ?? '')
+    .split(',').map(value => value.trim().toLowerCase()).filter(Boolean);
+  let decoded = body;
+  for (const encoding of encodings.reverse()) {
+    if (encoding === 'identity') continue;
+    const options = { maxOutputLength: MAX_REQUEST_BYTES };
+    if (encoding === 'gzip' || encoding === 'x-gzip') decoded = gunzipSync(decoded, options);
+    else if (encoding === 'deflate') decoded = inflateSync(decoded, options);
+    else if (encoding === 'br') decoded = brotliDecompressSync(decoded, options);
+    else throw new Error(`unsupported response encoding ${encoding}`);
+  }
+  return decoded;
+}
+
+function responseUsage(body: Buffer, contentEncoding: string | string[] | undefined = undefined): JsonRecord | null {
+  const values: JsonRecord[] = [];
+  const add = (value: unknown): void => {
+    if (!isRecord(value)) return;
+    if (isRecord(value.usage)) values.push(value.usage);
+    if (isRecord(value.message) && isRecord(value.message.usage)) values.push(value.message.usage);
+  };
+  let text: string;
+  try { text = decodedResponseBody(body, contentEncoding).toString('utf8'); }
+  catch { return null; }
+  try {
+    add(JSON.parse(text));
+  } catch {
+    let sawError = false;
+    let sawFinalUsage = false;
+    let sawMessageStop = false;
+    let parseError = false;
+    const parser = createParser({
+      maxBufferSize: MAX_REQUEST_BYTES,
+      onError: () => { parseError = true; },
+      onEvent: ({ data }) => {
+        if (!data || data === '[DONE]') return;
+        try {
+          const event = JSON.parse(data);
+          if (isRecord(event) && event.type === 'error') sawError = true;
+          if (isRecord(event) && event.type === 'message_delta' && isRecord(event.usage)) {
+            sawFinalUsage = true;
+          }
+          if (isRecord(event) && event.type === 'message_stop') sawMessageStop = true;
+          add(event);
+        } catch { /* Ignore non-JSON event data. */ }
+      },
+    });
+    try { parser.feed(`${text}\n\n`); }
+    catch { parseError = true; }
+    if (parseError || sawError || !sawFinalUsage || !sawMessageStop) return null;
+  }
+  if (values.length === 0) return null;
+  const number = (field: string): number => Math.max(0, ...values.map(value => Number(value[field]) || 0));
+  const cacheWrite = (field: string): number => Math.max(0, ...values.map(value =>
+    isRecord(value.cache_creation) ? Number(value.cache_creation[field]) || 0 : 0));
+  const cacheWrite5m = cacheWrite('ephemeral_5m_input_tokens');
+  const cacheWrite1h = cacheWrite('ephemeral_1h_input_tokens');
+  const flatCacheWrite = number('cache_creation_input_tokens');
+  return {
+    input_tokens: number('input_tokens'),
+    output_tokens: number('output_tokens'),
+    cache_read_input_tokens: number('cache_read_input_tokens'),
+    cache_creation: {
+      ephemeral_5m_input_tokens: cacheWrite5m + cacheWrite1h > 0 ? cacheWrite5m : flatCacheWrite,
+      ephemeral_1h_input_tokens: cacheWrite1h,
+    },
+  };
+}
+
+export function createCredentialBroker(configInput: unknown, {
+  requestUpstream = httpsRequest as UpstreamRequest,
+  upstream = { protocol: 'https:', hostname: 'api.anthropic.com', port: 443 },
+  maxRequests = MAX_REQUESTS,
+  maxRequestBytes = MAX_REQUEST_BYTES,
+}: { requestUpstream?: UpstreamRequest;
+  upstream?: { protocol: string; hostname: string; port: number };
+  maxRequests?: number; maxRequestBytes?: number } = {}): CreatedCredentialBroker {
+  const config = validateBrokerConfig(configInput);
+  let acceptedRequests = 0;
+  let billableRequests = 0;
+  let completedBillableRequests = 0;
+  let estimatedBillableRequests = 0;
+  const estimatedByReason = noEstimates();
+  let spentUsd = 0;
+  let reservedUsd = 0;
+  const usageTotals: ClaudeUsage = { input: 0, output: 0, cacheRead: 0, cacheWrite5m: 0, cacheWrite1h: 0 };
+  const recordLedger = () => writeCredentialBrokerLedger(config.ledgerPath, {
+    schemaVersion: BROKER_LEDGER_SCHEMA_VERSION,
+    model: config.model,
+    maxBudgetUsd: config.maxBudgetUsd ?? null,
+    acceptedRequests,
+    billableRequests,
+    completedBillableRequests,
+    estimatedBillableRequests,
+    estimatedByReason,
+    spentUsd: Number(spentUsd.toFixed(6)),
+    reservedUsd: Number(reservedUsd.toFixed(6)),
+    usage: usageTotals,
+    complete: reservedUsd === 0 && completedBillableRequests === billableRequests,
+    updatedAt: new Date().toISOString(),
+  });
+  recordLedger();
+  const server = createServer((request, response) => {
+    // A client can disappear while the broker is still draining an upstream
+    // response. Socket errors must not terminate the broker and strand a paid
+    // request reservation in the ledger.
+    request.on('error', () => {});
+    request.on('aborted', () => {});
+    response.on('error', () => {});
+    const responseOpen = (): boolean => !response.destroyed && !response.writableEnded;
+    const writeHead = (status: number, headers: OutgoingHttpHeaders): void => {
+      if (!responseOpen() || response.headersSent) return;
+      try { response.writeHead(status, headers); }
+      catch { response.destroy(); }
+    };
+    const endResponse = (body?: string | Buffer): void => {
+      if (!responseOpen()) return;
+      try { response.end(body); }
+      catch { response.destroy(); }
+    };
+    if (!clientAuthorized(request, config.sessionToken)) {
+      rejectRequest(request, response, 401, 'unauthorized');
+      return;
+    }
+    const path = requestPath(request.url);
+    if (request.method !== 'POST' || path === null || !ALLOWED_PATHS.has(path)) {
+      rejectRequest(request, response, 404, 'not found');
+      return;
+    }
+    acceptedRequests += 1;
+    recordLedger();
+    if (acceptedRequests > maxRequests) {
+      rejectRequest(request, response, 429, 'session request limit reached');
+      return;
+    }
+
+    const chunks: Buffer[] = [];
+    let received = 0;
+    let tooLarge = false;
+    request.on('data', (chunk: Buffer) => {
+      if (tooLarge) return;
+      received += chunk.length;
+      if (received > maxRequestBytes) {
+        tooLarge = true;
+        writeHead(413, { 'content-type': 'text/plain' });
+        endResponse('request is too large');
+        return;
+      }
+      chunks.push(chunk);
+    });
+    request.on('end', () => {
+      if (tooLarge) return;
+      const body = Buffer.concat(chunks);
+      let payload: JsonRecord;
+      try { payload = parseProviderRequest(body, path, config); }
+      catch {
+        writeHead(400, { 'content-type': 'text/plain' });
+        endResponse('invalid provider request');
+        return;
+      }
+      const billable = path === '/v1/messages' && config.maxBudgetUsd != null;
+      const costCeiling = billable
+        ? reserveUsd(requestCostCeiling(received, payload.max_tokens as number,
+          config.pricingRates as PricingRates)) : 0;
+      const budget = config.maxBudgetUsd;
+      if (billable && budget !== null && budget !== undefined
+        && spentUsd + reservedUsd + costCeiling > budget) {
+        writeHead(402, { 'content-type': 'text/plain' });
+        endResponse('session cost limit reached');
+        return;
+      }
+      if (billable) billableRequests += 1;
+      reservedUsd = roundUsd(reservedUsd + costCeiling);
+      recordLedger();
+      let billableSettled = !billable;
+      const settleBillable = ({ usage = null, estimated = null }:
+        { usage?: ClaudeUsage | null; estimated?: EstimateReason | null } = {}): void => {
+        if (billableSettled) return;
+        billableSettled = true;
+        reservedUsd = roundUsd(reservedUsd - costCeiling);
+        completedBillableRequests += 1;
+        if (estimated) {
+          estimatedBillableRequests += 1;
+          estimatedByReason[estimated] += 1;
+          spentUsd = roundUsd(spentUsd + costCeiling);
+        } else if (usage) {
+          spentUsd = roundUsd(spentUsd + priceNormalizedClaudeUsage(usage, config.pricingRates as PricingRates));
+          for (const field of CLAUDE_USAGE_FIELDS) usageTotals[field] += usage[field];
+        }
+        recordLedger();
+      };
+      const headers = upstreamHeaders(request, config);
+      for (const name of ['connection', 'keep-alive', 'proxy-connection', 'te', 'trailer',
+        'transfer-encoding', 'upgrade']) delete headers[name];
+      headers['content-length'] = String(received);
+      const upstreamRequest = requestUpstream({
+        protocol: upstream.protocol,
+        hostname: upstream.hostname,
+        port: upstream.port,
+        method: request.method,
+        path: request.url,
+        headers,
+      }, upstreamResponse => {
+        writeHead(upstreamResponse.statusCode ?? 502, upstreamResponse.headers);
+        const responseChunks: Buffer[] = [];
+        let responseBytes = 0;
+        upstreamResponse.on('data', (chunk: Buffer) => {
+          responseBytes += chunk.length;
+          if (responseBytes <= maxRequestBytes) responseChunks.push(chunk);
+          if (responseOpen()) {
+            try { response.write(chunk); }
+            catch { response.destroy(); }
+          }
+        });
+        upstreamResponse.on('end', () => {
+          endResponse();
+          if (!billable) return;
+          if ((upstreamResponse.statusCode ?? 502) >= 200
+            && (upstreamResponse.statusCode ?? 502) < 300) {
+            const usage = responseBytes <= maxRequestBytes
+              ? responseUsage(Buffer.concat(responseChunks), upstreamResponse.headers['content-encoding'])
+              : null;
+            if (!usage) settleBillable({ estimated: 'no-usage' });
+            else try { settleBillable({ usage: normalizeClaudeUsage(usage) }); }
+            catch { settleBillable({ estimated: 'no-usage' }); }
+          } else {
+            settleBillable();
+          }
+        });
+        const settleAbortedResponse = () => {
+          settleBillable({ estimated: 'response-aborted' });
+          if (responseOpen()) response.destroy();
+        };
+        upstreamResponse.once('aborted', settleAbortedResponse);
+        upstreamResponse.once('error', settleAbortedResponse);
+      });
+      upstreamRequest.on('error', () => {
+        settleBillable({ estimated: 'upstream-error' });
+        writeHead(502, { 'content-type': 'text/plain' });
+        endResponse('upstream request failed');
+      });
+      upstreamRequest.end(body);
+    });
+  });
+  server.on('clientError', (_error: Error, socket: Socket) => {
+    socket.on('error', () => {});
+    if (socket.writable) socket.end('HTTP/1.1 400 Bad Request\r\nConnection: close\r\n\r\n');
+    else socket.destroy();
+  });
+  return { server, stats: () => ({ acceptedRequests,
+    billableRequests, completedBillableRequests, estimatedBillableRequests,
+    estimatedByReason: { ...estimatedByReason },
+    spentUsd: Number(spentUsd.toFixed(6)), reservedUsd: Number(reservedUsd.toFixed(6)) }) };
+}
+
+function parseArgs(argv: string[]): string {
+  const { values } = parseNodeArgs({ args: argv, options: { config: { type: 'string' } } });
+  const configPath = values.config;
+  if (!configPath || argv.length !== 2) fail('use --config <private-file>');
+  return resolve(configPath);
+}
+
+async function main() {
+  const configPath = parseArgs(process.argv.slice(2));
+  let config: BrokerConfig;
+  try { config = validateBrokerConfig(JSON.parse(readFileSync(configPath, 'utf8'))); }
+  finally { rmSync(configPath, { force: true }); }
+  if (!config.readyPath) fail('readyPath is invalid');
+  const { server } = createCredentialBroker(config);
+  const sockets = new Set<Socket>();
+  server.on('connection', (socket: Socket) => {
+    sockets.add(socket);
+    socket.once('close', () => sockets.delete(socket));
+  });
+  server.on('error', (error: Error) => {
+    process.stderr.write(`credential broker: ${error.message}\n`);
+    process.exitCode = 1;
+  });
+  const readyPath = config.readyPath;
+  server.listen(0, config.listenHost ?? '127.0.0.1', () => {
+    const address: string | AddressInfo | null = server.address();
+    if (!address || typeof address === 'string') fail('listener address is unavailable');
+    writeFileSync(readyPath, `${JSON.stringify({ host: address.address, port: address.port })}\n`,
+      { flag: 'wx', mode: 0o600 });
+  });
+  let stopping = false;
+  const stop = () => {
+    if (stopping) return;
+    stopping = true;
+    const force = setTimeout(() => {
+      for (const socket of sockets) socket.destroy();
+      server.closeAllConnections?.();
+      process.exit(0);
+    }, BROKER_SERVER_CLOSE_GRACE_MS);
+    force.unref();
+    server.close(() => {
+      clearTimeout(force);
+      process.exit(0);
+    });
+    server.closeIdleConnections?.();
+  };
+  const parentPid = config.parentPid;
+  if (parentPid) {
+    setInterval(() => {
+      try { process.kill(parentPid, 0); }
+      catch { stop(); }
+    }, 1_000).unref();
+  }
+  const expiresAt = config.expiresAt;
+  if (expiresAt) setTimeout(stop, Math.max(1, expiresAt - Date.now())).unref();
+  process.on('SIGINT', stop);
+  process.on('SIGTERM', stop);
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  main().catch((error: unknown) => {
+    process.stderr.write(`${error instanceof Error ? error.stack ?? error.message : String(error)}\n`);
+    process.exit(1);
+  });
+}
diff --git a/tools/stack-bench/container/reconcile-build-container.ts b/tools/stack-bench/container/reconcile-build-container.ts
new file mode 100644
index 00000000000..68d2e1c4611
--- /dev/null
+++ b/tools/stack-bench/container/reconcile-build-container.ts
@@ -0,0 +1,85 @@
+import { spawnSync } from 'node:child_process';
+import type { SpawnSyncOptionsWithStringEncoding, SpawnSyncReturns } from 'node:child_process';
+
+export const BUILD_CONTAINER_CREATION_LABEL = 'com.clockworklabs.stack-bench.creation';
+
+const CONTAINER_ID = /^[a-f0-9]{64}$/i;
+
+type DockerResult = SpawnSyncReturns<string>;
+type DockerExecute = (command: string, args: readonly string[],
+  options: SpawnSyncOptionsWithStringEncoding) => DockerResult;
+
+export interface RemoveFailedBuildContainerOptions {
+  containerName: string;
+  creationToken: string;
+  createdId?: string | null;
+  dockerEnv?: NodeJS.ProcessEnv;
+  timeoutMs?: number;
+  execute?: DockerExecute;
+}
+
+export function containerIdFromDockerOutput(output: unknown): string | null {
+  return String(output ?? '').split(/\r?\n/).map(line => line.trim())
+    .find(line => CONTAINER_ID.test(line)) ?? null;
+}
+
+function detail(result: DockerResult): string {
+  return String(result.stderr || result.stdout || result.error?.message
+    || `exit ${result.status}`).trim();
+}
+
+// The coding containers running on this Docker host, from any campaign. A
+// stopped container keeps its label but holds no application or session.
+export function listRunningCodingContainers({ dockerEnv = process.env, timeoutMs = 30_000,
+  execute = spawnSync as DockerExecute }: {
+    dockerEnv?: NodeJS.ProcessEnv; timeoutMs?: number; execute?: DockerExecute;
+  } = {}): string[] {
+  const result = execute('docker', ['ps', '--filter', `label=${BUILD_CONTAINER_CREATION_LABEL}`,
+    '--format', '{{.Names}}'], { encoding: 'utf8', env: dockerEnv, timeout: timeoutMs });
+  if (result.error || result.status !== 0) {
+    throw new Error(`cannot list coding containers: ${detail(result)}`);
+  }
+  return String(result.stdout ?? '').split(/\r?\n/).map(line => line.trim())
+    .filter(Boolean).sort();
+}
+
+export function removeFailedBuildContainer({ containerName, creationToken, createdId = null,
+  dockerEnv = process.env, timeoutMs = 120_000,
+  execute = spawnSync as DockerExecute }: RemoveFailedBuildContainerOptions): {
+  removed: boolean; absent: boolean; id?: string;
+} {
+  if (typeof containerName !== 'string' || !containerName) {
+    throw new Error('failed build-container cleanup requires a container name');
+  }
+  if (typeof creationToken !== 'string' || !creationToken) {
+    throw new Error('failed build-container cleanup requires a creation token');
+  }
+
+  let id = containerIdFromDockerOutput(createdId);
+  if (!id) {
+    const inspected = execute('docker', ['inspect', '--format',
+      `{{.Id}} {{index .Config.Labels "${BUILD_CONTAINER_CREATION_LABEL}"}}`, containerName], {
+      encoding: 'utf8', env: dockerEnv, timeout: timeoutMs,
+    });
+    if (inspected.status !== 0) {
+      const reason = detail(inspected);
+      if (/no such (?:object|container)/i.test(reason)) return { removed: false, absent: true };
+      throw new Error(`cannot prove cleanup of failed container ${containerName}: ${reason}`);
+    }
+    const [inspectedId, label, ...extra] = String(inspected.stdout ?? '').trim().split(/\s+/);
+    if (!CONTAINER_ID.test(inspectedId ?? '') || label !== creationToken || extra.length > 0) {
+      throw new Error(`refusing to remove ${containerName}: its creation identity does not match`);
+    }
+    id = inspectedId ?? null;
+  }
+
+  if (!id) throw new Error(`cannot prove cleanup of failed container ${containerName}`);
+
+  const removed = execute('docker', ['rm', '-f', id], {
+    encoding: 'utf8', env: dockerEnv, timeout: timeoutMs,
+  });
+  if (removed.status !== 0) {
+    throw new Error(`could not remove failed build container ${id}: ${detail(removed)}`);
+  }
+  return { removed: true, absent: false, id };
+}
diff --git a/tools/stack-bench/container/recover-build-container.ts b/tools/stack-bench/container/recover-build-container.ts
new file mode 100644
index 00000000000..acefebcb228
--- /dev/null
+++ b/tools/stack-bench/container/recover-build-container.ts
@@ -0,0 +1,77 @@
+import { spawnSync } from 'node:child_process';
+import type { SpawnSyncOptionsWithStringEncoding } from 'node:child_process';
+
+import { updateBackendLease } from '../src/runtime/backend-lease.js';
+import type { BackendLease } from '../src/runtime/backend-lease.js';
+
+interface StoppedBuildContainer {
+  id: string;
+  running: false;
+}
+
+interface LeaseContext {
+  path: string;
+  lease: BackendLease;
+}
+
+export interface DockerExecuteResult {
+  status: number | null;
+  stdout?: string;
+  stderr?: string;
+  error?: Error;
+}
+
+export type DockerExecute = (command: string, args: readonly string[],
+  options: SpawnSyncOptionsWithStringEncoding) => DockerExecuteResult;
+
+export interface RecoverStoppedBuildContainerOptions {
+  existing: StoppedBuildContainer;
+  containerName: string;
+  leaseContext: LeaseContext;
+  backend: string;
+  dockerEnv?: NodeJS.ProcessEnv;
+  timeoutMs?: number;
+  execute?: DockerExecute;
+}
+
+function clearBuildContainerLease(leaseContext: LeaseContext, backend: string,
+  containerId: string, description: string): LeaseContext {
+  const lease = updateBackendLease(leaseContext.path, {
+    token: leaseContext.lease.ownershipToken, backend, runId: leaseContext.lease.runId,
+  }, next => {
+    if (next.resources.buildContainer?.id !== containerId) {
+      throw new Error(`${description} ownership changed before recovery`);
+    }
+    next.resources.buildContainer = null;
+    return next;
+  });
+  return { path: leaseContext.path, lease };
+}
+
+export function recoverStoppedBuildContainer({ existing, containerName, leaseContext, backend,
+  dockerEnv = process.env, timeoutMs = 120_000,
+  execute = spawnSync }: RecoverStoppedBuildContainerOptions): LeaseContext {
+  const prior = leaseContext?.lease?.resources?.buildContainer ?? null;
+  if (!existing || existing.running) throw new Error('recovery requires a stopped container');
+  if (!prior || prior.name !== containerName || prior.id !== existing.id) {
+    throw new Error('stopped container does not match the authenticated lease');
+  }
+  const removed = execute('docker', ['rm', existing.id], {
+    encoding: 'utf8', env: dockerEnv, timeout: timeoutMs,
+  });
+  if (removed.status !== 0) {
+    throw new Error(`could not remove exact stopped leased container ${existing.id}: `
+      + String(removed.stderr || removed.stdout || removed.error?.message || `exit ${removed.status}`).trim());
+  }
+  return clearBuildContainerLease(leaseContext, backend, existing.id, 'stopped container');
+}
+
+export function clearMissingBuildContainerLease({ containerName, leaseContext, backend }: {
+  containerName: string; leaseContext: LeaseContext; backend: string;
+}): LeaseContext {
+  const prior = leaseContext?.lease?.resources?.buildContainer ?? null;
+  if (!prior || prior.name !== containerName) {
+    throw new Error('missing container does not match the authenticated lease');
+  }
+  return clearBuildContainerLease(leaseContext, backend, prior.id, 'missing container');
+}
diff --git a/tools/stack-bench/container/run-build.ts b/tools/stack-bench/container/run-build.ts
new file mode 100644
index 00000000000..ae2501c0cca
--- /dev/null
+++ b/tools/stack-bench/container/run-build.ts
@@ -0,0 +1,680 @@
+#!/usr/bin/env node
+// The build container must not expose Stack Bench source or grading material.
+import { spawnSync } from 'node:child_process';
+import { randomBytes } from 'node:crypto';
+import { chmodSync, existsSync, readFileSync, mkdirSync } from 'node:fs';
+import { join, resolve, basename, dirname } from 'node:path';
+import { homedir } from 'node:os';
+import { parseArgs } from 'node:util';
+import { leaseFromEnv, updateBackendLease } from '../src/runtime/backend-lease.js';
+import { resolveContainerImage } from '../src/runtime/container-image.js';
+import { leasedDatabaseEnvironment, STACK_ADAPTER_REGISTRY } from '../src/stacks/stack-adapters.js';
+import { BUILD_CONTAINER_RESOURCE_LIMITS, DEFAULT_BUILD_IMAGE }
+  from '../src/composition/product-config.js';
+import { dockerMountArguments } from '../src/runtime/container-mount.js';
+import type { ContainerMount } from '../src/runtime/container-mount.js';
+import { dockerHostGatewayArguments } from '../src/runtime/docker-network.js';
+import { resolveContainerAuth } from './container-auth.js';
+import { hasRequiredBuildContainerIsolation, inspectBuildContainer, parseCgroupMemory,
+  parsePublishedPorts }
+  from './build-container-inspection.js';
+import { reconcileCredentialBrokerReceipt } from './credential-broker-accounting.js';
+import { credentialBrokerDiagnostics, startCredentialBroker, stopCredentialBroker }
+  from './credential-broker-process.js';
+import { clearMissingBuildContainerLease,
+  recoverStoppedBuildContainer } from './recover-build-container.js';
+import { BUILD_CONTAINER_CREATION_LABEL, containerIdFromDockerOutput,
+  removeFailedBuildContainer } from './reconcile-build-container.js';
+import { CODING_SESSION_TIMEOUT_MS } from '../src/agents/coding-session-timeouts.js';
+import { CODING_CONTAINER_AGENT, CODING_CONTAINER_APP_ROOT, CODING_CONTAINER_CONTROL_DIR,
+  CODING_CONTAINER_PROCESS_IDENTITY,
+  codingContainerAgentEnvironment, codingContainerTranscriptHandoffCommands,
+  codingContainerWorkspaceHandoffCommands }
+  from '../src/runtime/coding-container-policy.js';
+import { runTranscriptAwareProcess, snapshotClaudeTranscripts }
+  from '../src/agents/claude-terminal-recovery.js';
+import { claudeRatesForModel } from '../src/evidence/claude-usage-cost.js';
+import { PRICING_UNIT, validatePricingAuthority }
+  from '../src/evidence/pricing-authority.js';
+import { REPOSITORY_ROOT } from '../src/package-root.js';
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+const { values } = parseArgs({ args: process.argv.slice(2), options: {
+  app: { type: 'string' }, backend: { type: 'string' }, 'prepare-only': { type: 'boolean' },
+  image: { type: 'string' }, effort: { type: 'string' }, model: { type: 'string' },
+  'max-budget-usd': { type: 'string' }, 'pricing-json': { type: 'string' },
+  'resume-session': { type: 'string' }, 'recover-stopped-container': { type: 'boolean' },
+  'completion-marker': { type: 'string' }, ports: { type: 'string' },
+} });
+
+const appDir = values.app;
+if (!appDir) { console.error('run-build.js: --app is required'); process.exit(2); }
+const backend = values.backend;
+if (!backend) { console.error('run-build.js: --backend is required'); process.exit(2); }
+let adapter;
+try { adapter = STACK_ADAPTER_REGISTRY.get(backend); }
+catch (error) { console.error(`run-build.js: ${errorMessage(error)}`); process.exit(2); }
+const prepareOnly = values['prepare-only'] ?? false;
+const DOCKER_TIMEOUT_MS = 120_000;
+const DOCKER_PROBE_TIMEOUT_MS = 10_000;
+const { uid: AGENT_UID, gid: AGENT_GID, home: AGENT_HOME } = CODING_CONTAINER_AGENT;
+const CONTROLLER_GID = process.getgid?.() ?? 0;
+const AGENT_ENVIRONMENT = codingContainerAgentEnvironment();
+const CONTROL_DIR = CODING_CONTAINER_CONTROL_DIR;
+const REQUIRED_CAPABILITIES = Object.freeze([
+  'CHOWN', 'DAC_OVERRIDE', 'FOWNER', 'KILL', 'SETGID', 'SETUID',
+]);
+const REQUIRED_TMPFS = Object.freeze({
+  '/tmp': 'rw,nosuid,nodev,mode=1777',
+  [AGENT_HOME]: `rw,nosuid,nodev,uid=${AGENT_UID},gid=${AGENT_GID},mode=0700`,
+  [`${AGENT_HOME}/.claude`]: `rw,nosuid,nodev,uid=${AGENT_UID},gid=${AGENT_GID},mode=0700`,
+  '/deps': 'rw,exec,nosuid,nodev,mode=0755',
+  [CONTROL_DIR]: 'rw,nosuid,nodev,mode=0700',
+});
+
+const REPO = REPOSITORY_ROOT;
+const imageReference = values.image ?? DEFAULT_BUILD_IMAGE;
+let imageIdentity;
+try { imageIdentity = resolveContainerImage(imageReference); }
+catch (error) {
+  console.error(`run-build.js: cannot resolve image ${imageReference}: ${errorMessage(error)}`);
+  process.exit(2);
+}
+const image = imageIdentity.id;
+const effort = values.effort ?? '';
+const model = values.model ?? '';
+if (!prepareOnly && (!effort || !model)) {
+  console.error('run-build.js: --effort and --model are required');
+  process.exit(2);
+}
+const maxBudgetUsd = values['max-budget-usd'] ?? null;
+if (maxBudgetUsd !== null && (!Number.isFinite(Number(maxBudgetUsd)) || Number(maxBudgetUsd) <= 0)) {
+  console.error('run-build.js: --max-budget-usd must be a positive number');
+  process.exit(2);
+}
+let pricing = null;
+try {
+  const supplied = values['pricing-json'] ?? null;
+  if (supplied !== null) {
+    pricing = validatePricingAuthority(JSON.parse(supplied), { at: '--pricing-json' });
+  } else if (maxBudgetUsd !== null) {
+    const rates = claudeRatesForModel(model);
+    if (!rates) throw new Error(`no default pricing is recorded for model ${model}`);
+    pricing = validatePricingAuthority({ unit: PRICING_UNIT, rates },
+      { at: 'default pricing' });
+  }
+} catch (error) {
+  console.error(`run-build.js: ${errorMessage(error)}`);
+  process.exit(2);
+}
+const resumeSession = values['resume-session'] ?? null;
+if (resumeSession !== null
+  && !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(resumeSession)) {
+  console.error('run-build.js: --resume-session must be a UUID');
+  process.exit(2);
+}
+const recoverStoppedContainer = values['recover-stopped-container'] ?? false;
+const completionMarker = values['completion-marker'] ?? null;
+if (!prepareOnly && !/^[A-Z][A-Z0-9_]*$/.test(completionMarker ?? '')) {
+  console.error('run-build.js: --completion-marker must be an uppercase marker');
+  process.exit(2);
+}
+let ports: string[] = [];
+try { ports = parsePublishedPorts(values.ports); }
+catch (error) { console.error(`run-build.js: ${errorMessage(error)}`); process.exit(2); }
+
+const containerPlan = adapter.buildContainer.plan({
+  repo: REPO, appDir, env: process.env,
+});
+
+// Auth is resolved in the controller. A short-lived broker forwards model API
+// requests later. The coding container never receives the long-lived provider
+// credential or a credential file.
+const apiKey = process.env.STACK_BENCH_AGENT_API_KEY ?? process.env.ANTHROPIC_API_KEY ?? '';
+const creds = join(homedir(), '.claude', '.credentials.json');
+let auth = null;
+if (!prepareOnly) {
+  try { auth = resolveContainerAuth({ apiKey, env: process.env, credentialsPath: creds }); }
+  catch (error) { console.error(`run-build.js: ${errorMessage(error)}`); process.exit(2); }
+}
+
+// Persist this run's transcript without exposing other local sessions.
+const projects = prepareOnly ? null : join(homedir(), '.claude', 'projects',
+  resolve(appDir).replace(/[\\/:]/g, '-').toLowerCase());
+function ensureAgentDirectory(directory: string): void {
+  mkdirSync(directory, { recursive: true,
+    mode: process.env.STACK_BENCH_APPLIANCE === '1' ? 0o700 : 0o777 });
+  if (process.env.STACK_BENCH_APPLIANCE !== '1') chmodSync(directory, 0o777);
+}
+
+ensureAgentDirectory(appDir);
+if (projects) ensureAgentDirectory(projects);
+for (const directory of containerPlan.ensureDirectories) ensureAgentDirectory(directory);
+
+// Grading and repair reuse this leased container.
+const containerName = `stack-bench-${basename(dirname(resolve(appDir)))}`;
+const dockerEnv: NodeJS.ProcessEnv = { ...process.env, MSYS_NO_PATHCONV: '1' };
+
+function resolveNetworkMode(): 'bridge' | 'host' {
+  if (containerPlan!.networkNamespace !== 'host') return 'bridge';
+  if (process.env.STACK_BENCH_APPLIANCE !== '1') {
+    throw new Error('the host network namespace is available only in appliance mode');
+  }
+  return 'host';
+}
+
+let expectedNetworkMode: 'bridge' | 'host';
+try { expectedNetworkMode = resolveNetworkMode(); }
+catch (error) {
+  console.error(`run-build.js: ${errorMessage(error)}`);
+  process.exit(2);
+}
+
+const inspectContainer = (name: string) => inspectBuildContainer(name,
+  { env: dockerEnv, timeoutMs: DOCKER_TIMEOUT_MS });
+
+const hasRequiredIsolation = (container: NonNullable<ReturnType<typeof inspectBuildContainer>>,
+  expectedMounts: ContainerMount[]): boolean => hasRequiredBuildContainerIsolation(container, {
+  expectedMounts,
+  requiredTmpfs: REQUIRED_TMPFS,
+  requiredCapabilities: REQUIRED_CAPABILITIES,
+  pidsLimit: BUILD_CONTAINER_RESOURCE_LIMITS.pids,
+  cpuCount: BUILD_CONTAINER_RESOURCE_LIMITS.cpuCount,
+  memoryBytes: BUILD_CONTAINER_RESOURCE_LIMITS.memoryBytes,
+  memorySwapBytes: BUILD_CONTAINER_RESOURCE_LIMITS.memorySwapBytes,
+  image,
+});
+
+const expectedMounts: ContainerMount[] = [
+  { kind: 'bind' as const, source: resolve(appDir), target: CODING_CONTAINER_APP_ROOT, readOnly: false },
+  ...(projects ? [{ kind: 'bind' as const, source: projects,
+    target: `${AGENT_HOME}/.claude/projects/-app`, readOnly: false }] : []),
+  ...containerPlan.mounts,
+];
+
+// Only the lease's immutable container id grants reuse or deletion authority.
+let leaseContext;
+try { leaseContext = leaseFromEnv(process.env, { backend, active: true }); }
+catch (error) {
+  console.error(`run-build.js: an authenticated active backend lease is required: ${errorMessage(error)}`);
+  process.exit(3);
+}
+
+let existing = inspectContainer(containerName);
+const priorContainer = leaseContext.lease.resources.buildContainer ?? null;
+if (existing) {
+  if (!priorContainer) {
+    console.error(`run-build.js: refusing to adopt existing unleased container ${containerName}`);
+    process.exit(3);
+  }
+  if (priorContainer.name !== containerName || priorContainer.id !== existing.id) {
+    console.error(`run-build.js: existing container ${containerName}/${existing.id} does not match lease `
+      + `${priorContainer.name}/${priorContainer.id}`);
+    process.exit(3);
+  }
+  if (!existing.running) {
+    if (!recoverStoppedContainer) {
+      console.error(`run-build.js: leased container ${containerName} stopped unexpectedly; refusing to replace it`);
+      process.exit(3);
+    }
+    try {
+      leaseContext = recoverStoppedBuildContainer({ existing: { ...existing, running: false }, containerName, leaseContext, backend,
+        dockerEnv, timeoutMs: DOCKER_TIMEOUT_MS });
+      existing = null;
+    } catch (error) {
+      console.error(`run-build.js: could not recover stopped container: ${errorMessage(error)}`);
+      process.exit(3);
+    }
+  }
+  if (existing && existing.networkMode !== expectedNetworkMode) {
+    console.error(`run-build.js: leased container ${containerName} uses network ${existing.networkMode}, `
+      + `expected ${expectedNetworkMode}`);
+    process.exit(3);
+  }
+  if (existing?.unsafeCredentialExposure) {
+    console.error(`run-build.js: leased container ${containerName} was created with a provider credential; `
+      + 'reconcile the run and start it with the isolated credential broker');
+    process.exit(3);
+  }
+  if (existing && !hasRequiredIsolation(existing, expectedMounts)) {
+    console.error(`run-build.js: leased container ${containerName} does not have the required isolation`);
+    process.exit(3);
+  }
+} else if (priorContainer) {
+  const leasedById = inspectContainer(priorContainer.id);
+  if (leasedById) {
+    console.error(`run-build.js: leased container ${priorContainer.id} still exists under an unexpected name`);
+    process.exit(3);
+  }
+  if (!recoverStoppedContainer) {
+    console.error(`run-build.js: leased container ${priorContainer.name}/${priorContainer.id} is missing`);
+    process.exit(3);
+  }
+  try {
+    leaseContext = clearMissingBuildContainerLease({ containerName, leaseContext, backend });
+  } catch (error) {
+    console.error(`run-build.js: could not recover missing container lease: ${errorMessage(error)}`);
+    process.exit(3);
+  }
+}
+
+// Create it if this is the first round of the run; reuse it for every round
+// after, so a repair finds the app, its node_modules and its servers exactly
+// where the build round left them.
+let containerInspection = existing;
+if (!existing) {
+  const creationToken = randomBytes(16).toString('hex');
+  const create = [
+    'create', '--init', '--name', containerName,
+    '--label', `${BUILD_CONTAINER_CREATION_LABEL}=${creationToken}`,
+    '--cap-drop', 'ALL', '--security-opt', 'no-new-privileges:true',
+    '--pids-limit', String(BUILD_CONTAINER_RESOURCE_LIMITS.pids),
+    '--cpus', String(BUILD_CONTAINER_RESOURCE_LIMITS.cpuCount),
+    '--memory', String(BUILD_CONTAINER_RESOURCE_LIMITS.memoryBytes),
+    '--memory-swap', String(BUILD_CONTAINER_RESOURCE_LIMITS.memorySwapBytes),
+    // The agent may write the app, its own home directory, and temporary files.
+    // It must not replace system binaries or libraries used by later grading.
+    '--read-only',
+    '-v', `${resolve(appDir)}:${CODING_CONTAINER_APP_ROOT}`,
+  ];
+  for (const capability of REQUIRED_CAPABILITIES) create.push('--cap-add', capability);
+  for (const [path, options] of Object.entries(REQUIRED_TMPFS)) {
+    create.push('--tmpfs', `${path}:${options}`);
+  }
+  create.push('--network', expectedNetworkMode);
+  create.push(...dockerHostGatewayArguments(expectedNetworkMode));
+  if (projects) create.push('-v', `${projects}:${AGENT_HOME}/.claude/projects/-app`);
+  // The selected adapter owns every stack-specific mount. Giving a treatment
+  // another stack's artifacts would violate the "only artifacts under test"
+  // boundary.
+  for (const requiredPath of containerPlan.requiredPaths) {
+    if (!existsSync(requiredPath)) {
+      console.error(`run-build.js: ${backend} container artifact is missing: ${requiredPath}`);
+      process.exit(2);
+    }
+  }
+  for (const mount of containerPlan.mounts) {
+    try { create.push(...dockerMountArguments(mount)); }
+    catch (error) {
+      console.error(`run-build.js: ${backend} adapter returned an invalid container mount: ${errorMessage(error)}`);
+      process.exit(2);
+    }
+  }
+
+  // Publish the track's ports for the host grader.
+  if (expectedNetworkMode === 'bridge') for (const p of ports) create.push('-p', `127.0.0.1:${p}:${p}`);
+
+  // `--init` gives the container a real PID 1. Without it the dev servers the
+  // build leaves behind are reparented to `sleep`, which never reaps them.
+  const init = 'export HOME=/tmp npm_config_cache=/tmp/npm-cache; '
+    + containerPlan.init;
+  create.push('-w', CODING_CONTAINER_APP_ROOT, image, 'sh', '-c', init);
+
+  const made = spawnSync('docker', create, {
+    encoding: 'utf8', env: dockerEnv, timeout: DOCKER_TIMEOUT_MS,
+  });
+  if (made.status !== 0) {
+    console.error(`run-build.js: could not create ${containerName}`);
+    console.error(made.stderr || made.stdout || made.error?.message || '');
+    try {
+      removeFailedBuildContainer({ containerName, creationToken,
+        createdId: containerIdFromDockerOutput(made.stdout), dockerEnv,
+        timeoutMs: DOCKER_TIMEOUT_MS });
+    } catch (cleanupError) {
+      console.error(`run-build.js: ${errorMessage(cleanupError)}`);
+      process.exit(3);
+    }
+    process.exit(2);
+  }
+
+  const createdId = containerIdFromDockerOutput(made.stdout);
+  try { containerInspection = inspectContainer(containerName); }
+  catch (error) {
+    console.error(`run-build.js: cannot inspect ${containerName}: ${errorMessage(error)}`);
+  }
+  if (!containerInspection) {
+    try {
+      removeFailedBuildContainer({ containerName, creationToken, createdId, dockerEnv,
+        timeoutMs: DOCKER_TIMEOUT_MS });
+    } catch (cleanupError) {
+      console.error(`run-build.js: ${errorMessage(cleanupError)}`);
+      process.exit(3);
+    }
+    console.error(`run-build.js: cannot inspect ${containerName}`);
+    process.exit(2);
+  }
+  if (containerInspection.unsafeCredentialExposure
+    || !hasRequiredIsolation(containerInspection, expectedMounts)) {
+    try {
+      removeFailedBuildContainer({ containerName, creationToken, createdId, dockerEnv,
+        timeoutMs: DOCKER_TIMEOUT_MS });
+    } catch (cleanupError) {
+      console.error(`run-build.js: ${errorMessage(cleanupError)}`);
+      process.exit(3);
+    }
+    console.error(`run-build.js: created container ${containerName} does not have the required isolation`);
+    process.exit(2);
+  }
+}
+
+if (!containerInspection) {
+  console.error(`run-build.js: cannot inspect ${containerName}`);
+  process.exit(2);
+}
+const { id: containerId, image: containerImage } = containerInspection;
+try {
+  const { path, lease } = leaseContext;
+  const prior = lease.resources.buildContainer;
+  if (prior && (prior.name !== containerName || prior.id !== containerId)) {
+    throw new Error(`running container ${containerName}/${containerId} does not match lease `
+      + `${prior.name}/${prior.id}`);
+  }
+  updateBackendLease(path, { token: lease.ownershipToken, backend, runId: lease.runId }, next => {
+    next.resources.buildContainer = {
+      name: containerName, id: containerId, image: containerImage, owned: true, running: existing !== null,
+      networkMode: expectedNetworkMode,
+      resourceLimits: structuredClone(BUILD_CONTAINER_RESOURCE_LIMITS),
+    };
+    return next;
+  });
+} catch (error) {
+  // Creation succeeded but ownership recording did not. Remove only the exact
+  // id created by this invocation; leaving an unleased container is not safe.
+  if (!existing) {
+    spawnSync('docker', ['rm', '-f', containerId], {
+      stdio: 'ignore', env: dockerEnv, timeout: DOCKER_TIMEOUT_MS,
+    });
+  }
+  console.error(`run-build.js: ${errorMessage(error)}`);
+  process.exit(3);
+}
+
+if (!existing) {
+  const started = spawnSync('docker', ['start', containerId], {
+    encoding: 'utf8', env: dockerEnv, timeout: DOCKER_TIMEOUT_MS,
+  });
+  if (started.status !== 0) {
+    console.error(`run-build.js: could not start leased container ${containerName}/${containerId}`);
+    console.error(started.stderr || started.stdout || started.error?.message || '');
+    process.exit(2);
+  }
+  try {
+    const { path, lease } = leaseContext;
+    updateBackendLease(path, { token: lease.ownershipToken, backend, runId: lease.runId }, next => {
+      if (next.resources.buildContainer?.id !== containerId) {
+        throw new Error(`leased container changed before start: expected ${containerId}`);
+      }
+      next.resources.buildContainer.running = true;
+      return next;
+    });
+  } catch (error) {
+    console.error(`run-build.js: started container ownership could not be recorded: ${errorMessage(error)}`);
+    process.exit(3);
+  }
+}
+
+if (containerPlan.readyFile) {
+  // Wait until SDK staging finishes before starting the paid session.
+  let ready = false;
+  const readyDeadline = Date.now() + 90_000;
+  while (Date.now() < readyDeadline) {
+    const probe = spawnSync('docker', ['exec', containerName, 'test', '-f', containerPlan.readyFile],
+      { stdio: 'ignore', env: dockerEnv, timeout: DOCKER_PROBE_TIMEOUT_MS });
+    if (probe.status === 0) { ready = true; break; }
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 500);
+  }
+  if (!ready) {
+    const logs = spawnSync('docker', ['logs', containerName], {
+      encoding: 'utf8', env: dockerEnv, timeout: DOCKER_TIMEOUT_MS,
+    });
+    console.error(`run-build.js: timed out waiting for ${containerPlan.readyDescription ?? `${backend} setup`}`);
+    console.error(logs.stderr || logs.stdout || '');
+    process.exit(2);
+  }
+}
+
+if (process.env.STACK_BENCH_APPLIANCE === '1') {
+  const writableTargets = [AGENT_HOME,
+    ...expectedMounts.filter(mount => !mount.readOnly).map(mount => mount.target)];
+  for (const [command, commandArgs] of [
+    ['chown', ['-R', `${AGENT_UID}:${CONTROLLER_GID}`, '--', ...writableTargets]],
+    ['chmod', ['-R', 'u+rwX,g+rwX,o-rwx', '--', ...writableTargets]],
+  ] as const) {
+    const permissions = spawnSync('docker', ['exec', containerName, command, ...commandArgs], {
+      encoding: 'utf8', env: dockerEnv, timeout: DOCKER_PROBE_TIMEOUT_MS,
+    });
+    if (permissions.status !== 0) {
+      console.error(`run-build.js: could not secure writable paths in ${containerName}`);
+      console.error(permissions.stderr || permissions.stdout || permissions.error?.message || '');
+      process.exit(2);
+    }
+  }
+}
+
+// A nested transcript mount makes Docker create its parent directories as
+// root. Confirm that Claude can create its private session state before a
+// provider request can spend money.
+const homeProbe = spawnSync('docker', [
+  'exec', '--user', `${AGENT_UID}:${AGENT_GID}`, '-e', `HOME=${AGENT_HOME}`,
+  containerName, 'sh', '-c',
+  'umask 077; mkdir -p "$HOME/.claude/session-env" && test -w "$HOME/.claude/session-env"',
+], { encoding: 'utf8', env: dockerEnv, timeout: DOCKER_PROBE_TIMEOUT_MS });
+if (homeProbe.status !== 0) {
+  console.error(`run-build.js: agent home is not writable in ${containerName}`);
+  console.error(homeProbe.stderr || homeProbe.stdout || homeProbe.error?.message || '');
+  process.exit(2);
+}
+
+if (prepareOnly) {
+  process.stdout.write(`${JSON.stringify({ containerName,
+    identity: `${containerId} ${containerImage}`,
+    networkMode: expectedNetworkMode })}\n`);
+  process.exit(0);
+}
+
+const args = ['exec', '-i', '--user', `${AGENT_UID}:${AGENT_GID}`, '-w', CODING_CONTAINER_APP_ROOT];
+
+args.push('-e', `HOME=${AGENT_ENVIRONMENT.HOME}`, '-e', `USER=${AGENT_ENVIRONMENT.USER}`,
+  '-e', 'DISABLE_AUTOUPDATER=1', '-e', 'FORCE_PROMPT_CACHING_5M=1');
+const leasedEnvironment = leasedDatabaseEnvironment(adapter, {
+  database: leaseContext.lease.resources.database, networkMode: expectedNetworkMode,
+});
+for (const [key, value] of Object.entries(leasedEnvironment)) args.push('-e', `${key}=${value}`);
+const dockerExecEnv: NodeJS.ProcessEnv = { ...process.env, MSYS_NO_PATHCONV: '1' };
+// Forward only benchmark-owned environment settings.
+if (process.env.MAX_THINKING_TOKENS) {
+  args.push('-e', `MAX_THINKING_TOKENS=${process.env.MAX_THINKING_TOKENS}`);
+}
+
+const claudeArgs = [
+  '--print', '--output-format', 'json',
+  // Isolate the session from project memory, plugins, and integrations.
+  '--bare',
+  '--permission-mode', 'acceptEdits',
+  '--settings', JSON.stringify({ permissions: { allow: ['Bash'] } }),
+  '--effort', effort,
+  '--model', model,
+  ...(maxBudgetUsd !== null ? ['--max-budget-usd', maxBudgetUsd] : []),
+  // The app is the only directory a session may reach; inside the container
+  // that is all there is, but the flag is kept so host and container runs are
+  // configured identically.
+  '--add-dir', CODING_CONTAINER_APP_ROOT,
+  ...(resumeSession !== null ? ['--resume', resumeSession] : []),
+];
+// Record the exact remote PID. Killing the local `docker exec` client does not
+// guarantee that Claude stops inside the long-lived build container.
+const invocationToken = randomBytes(16).toString('hex');
+const processRecord = `${CODING_CONTAINER_PROCESS_IDENTITY.recordPrefix}${invocationToken}.pid`;
+const claudeWrapper = 'umask 022; record="$1"; shift; '
+  + 'start="$(awk \'{print $22}\' /proc/$$/stat)" || exit 1; '
+  + 'printf \'%s %s\\n\' "$$" "$start" > "$record"; exec "$@"';
+
+if (!auth) throw new Error('container authentication is unavailable');
+let credentialBroker: Awaited<ReturnType<typeof startCredentialBroker>> | null = null;
+try {
+  credentialBroker = await startCredentialBroker(auth,
+    { networkMode: expectedNetworkMode, deadlineMs: CODING_SESSION_TIMEOUT_MS, model,
+      maxBudgetUsd: maxBudgetUsd === null ? null : Number(maxBudgetUsd),
+      pricingRates: maxBudgetUsd === null ? null : pricing!.rates });
+} catch (error) {
+  console.error(`run-build.js: ${errorMessage(error)}`);
+  process.exit(2);
+}
+if (!credentialBroker) throw new Error('credential broker is unavailable');
+dockerExecEnv.ANTHROPIC_AUTH_TOKEN = credentialBroker.sessionToken;
+args.push('-e', 'ANTHROPIC_AUTH_TOKEN', '-e', `ANTHROPIC_BASE_URL=${credentialBroker.baseUrl}`,
+  containerName, 'sh', '-c', claudeWrapper, CODING_CONTAINER_PROCESS_IDENTITY.sessionLabel,
+  processRecord,
+  'claude', ...claudeArgs);
+
+// MSYS_NO_PATHCONV: Git Bash rewrites container-side paths like /app into
+// Windows paths (C:/Program Files/Git/app) and every mount silently lands
+// somewhere wrong.
+if (!projects) throw new Error('transcript directory is unavailable');
+const transcriptSnapshot = snapshotClaudeTranscripts(projects);
+const promptInput = process.stdin.isTTY ? '' : readFileSync(0, 'utf8');
+function signalClaude(signal: 'TERM' | 'KILL') {
+  const script = 'record="$1"; signal="$2"; test -r "$record" || exit 4; '
+    + 'read -r pid expected < "$record"; '
+    + 'current="$(awk \'{print $22}\' "/proc/$pid/stat" 2>/dev/null)" || exit 5; '
+    + 'test "$current" = "$expected" || exit 3; kill "-$signal" "$pid"';
+  return spawnSync('docker', ['exec', containerName, 'sh', '-c', script,
+    CODING_CONTAINER_PROCESS_IDENTITY.stopLabel, processRecord, signal], {
+    encoding: 'utf8', env: dockerExecEnv, timeout: DOCKER_PROBE_TIMEOUT_MS,
+  });
+}
+function terminateClaude(child: { kill(signal?: NodeJS.Signals): boolean }): void {
+  const term = signalClaude('TERM');
+  if (term.status !== 0) child.kill('SIGTERM');
+  const force = setTimeout(() => {
+    signalClaude('KILL');
+    child.kill('SIGKILL');
+  }, 5_000);
+  force.unref();
+}
+
+let res: Awaited<ReturnType<typeof runTranscriptAwareProcess>> | undefined;
+let sessionError: unknown = null;
+let brokerLedger = null;
+let brokerDiagnostics = null;
+const cleanupErrors: string[] = [];
+const runCleanupCommand = (description: string, command: readonly string[]): void => {
+  const result = spawnSync('docker', ['exec', containerName, ...command], {
+    encoding: 'utf8', env: dockerExecEnv, timeout: DOCKER_PROBE_TIMEOUT_MS,
+  });
+  if (result.status !== 0) cleanupErrors.push(`${description}: ${String(result.stderr || result.stdout
+    || result.error?.message || `exit ${result.status}`).trim()}`);
+};
+try {
+  res = await runTranscriptAwareProcess({ command: 'docker', args,
+    input: promptInput,
+    maxBuffer: 256 * 1024 * 1024,
+    env: dockerExecEnv,
+    timeoutMs: CODING_SESSION_TIMEOUT_MS,
+    transcriptDirectory: projects,
+    transcriptSnapshot,
+    marker: completionMarker as string,
+    model,
+    pricingRates: pricing?.rates ?? null,
+    resumeSession: resumeSession ?? undefined,
+    terminate: terminateClaude,
+  });
+} catch (error) {
+  sessionError = error;
+} finally {
+  brokerLedger = await stopCredentialBroker(credentialBroker);
+  brokerDiagnostics = credentialBrokerDiagnostics(credentialBroker);
+  for (const command of codingContainerTranscriptHandoffCommands(CONTROLLER_GID)) {
+    runCleanupCommand('transcript handoff', command);
+  }
+  const handoff = process.env.STACK_BENCH_APPLIANCE === '1'
+    ? codingContainerWorkspaceHandoffCommands(CONTROLLER_GID)
+    : [['chmod', '-R', 'a+rwX', CODING_CONTAINER_APP_ROOT]];
+  for (const command of handoff) runCleanupCommand('workspace handoff', command);
+  runCleanupCommand('process-record cleanup', ['rm', '-f', processRecord]);
+}
+
+if (sessionError) {
+  if (cleanupErrors.length) {
+    throw new AggregateError([sessionError, ...cleanupErrors.map(message => new Error(message))],
+      'coding session and container cleanup failed');
+  }
+  throw sessionError;
+}
+if (!res) throw new Error('coding session returned no process result');
+if (cleanupErrors.length) {
+  res.status = res.status === 0 ? 3 : res.status ?? 3;
+  res.stderr = `${res.stderr ?? ''}${res.stderr ? '\n' : ''}`
+    + `run-build.js: container cleanup failed: ${cleanupErrors.join('; ')}\n`;
+}
+
+let cliResult = null;
+const stdout = String(res.stdout ?? '').trim();
+try { cliResult = JSON.parse(stdout); }
+catch {
+  for (const line of stdout.split(/\r?\n/).reverse()) {
+    try { cliResult = JSON.parse(line); break; } catch { /* Keep looking. */ }
+  }
+}
+const memory = spawnSync('docker', ['exec', containerName, 'sh', '-c',
+  'for f in memory.events memory.current memory.peak memory.max; do '
+    + 'p="/sys/fs/cgroup/$f"; if test -r "$p"; then echo "[$f]"; cat "$p"; fi; done'], {
+  encoding: 'utf8', env: dockerExecEnv, timeout: DOCKER_PROBE_TIMEOUT_MS,
+});
+const resources = {
+  buildContainerMemory: memory.status === 0 ? parseCgroupMemory(memory.stdout) : null,
+  memoryProbeError: memory.status === 0 ? null
+    : memory.stderr?.trim() || (memory.error instanceof Error ? memory.error.message : null)
+      || `exit ${memory.status}`,
+};
+if (maxBudgetUsd !== null) {
+  const reconciled = reconcileCredentialBrokerReceipt({
+    ledger: brokerLedger,
+    cliResult,
+    model,
+    maxBudgetUsd: Number(maxBudgetUsd),
+    pricingRates: pricing!.rates,
+    brokerDiagnostics,
+  });
+  reconciled.result.stack_bench_resources = resources;
+  res.stdout = `${JSON.stringify(reconciled.result)}\n`;
+  if (!reconciled.ok) {
+    res.status = res.status === 0 ? 3 : res.status ?? 3;
+    res.stderr = `${res.stderr ?? ''}${res.stderr ? '\n' : ''}`
+      + `run-build.js: ${reconciled.receipt.error}\n`;
+  }
+} else if (cliResult && typeof cliResult === 'object' && !Array.isArray(cliResult)) {
+  cliResult.stack_bench_credential_broker = brokerDiagnostics;
+  cliResult.stack_bench_resources = resources;
+  res.stdout = `${JSON.stringify(cliResult)}\n`;
+}
+
+if ((res.status ?? 1) !== 0) {
+  const state = spawnSync('docker', ['inspect', '--format', '{{json .State}}', containerName], {
+    encoding: 'utf8', env: dockerExecEnv, timeout: DOCKER_PROBE_TIMEOUT_MS,
+  });
+  let containerState = null;
+  try { containerState = JSON.parse(state.stdout?.trim() || 'null'); } catch { /* retain raw text below */ }
+  const diagnostic = {
+    schemaVersion: 1,
+    kind: 'coding-process-exit',
+    status: res.status ?? null,
+    signal: res.signal ?? null,
+    error: res.error instanceof Error ? res.error.message : null,
+    container: containerState ?? { inspectError: state.stderr?.trim()
+      || (state.error instanceof Error ? state.error.message : null) },
+    cgroupMemory: memory.stdout?.trim() || null,
+    cgroupProbeError: memory.status === 0 ? null
+      : memory.stderr?.trim() || (memory.error instanceof Error ? memory.error.message : null)
+        || `exit ${memory.status}`,
+  };
+  process.stderr.write(`STACK_BENCH_CODING_PROCESS_DIAGNOSTIC ${JSON.stringify(diagnostic)}\n`);
+}
+
+if (res.stdout) process.stdout.write(res.stdout);
+if (res.stderr) process.stderr.write(res.stderr);
+if (res.error) process.stderr.write(`run-build.js: coding session failed: ${errorMessage(res.error)}\n`);
+process.exit(res.status ?? 1);
diff --git a/tools/stack-bench/container/spacetimedb-binaries.json b/tools/stack-bench/container/spacetimedb-binaries.json
new file mode 100644
index 00000000000..e4af3ced333
--- /dev/null
+++ b/tools/stack-bench/container/spacetimedb-binaries.json
@@ -0,0 +1,21 @@
+{
+  "schemaVersion": 2,
+  "platform": "linux/amd64",
+  "builderImage": "rust:1.93-slim-bookworm@sha256:8f8609d448e821fbc0e44241bc5ca4ce49663cc6306ff1a17f655a0e2a7cd084",
+  "source": {
+    "identityScheme": "git-object-content-v1",
+    "revision": "64afb5fd35aa391ccbff423d0bec272cefbd6092",
+    "sha256": "c76824c57bbfee62d707b36c1c6a4bdf1fffb295770931cf0b67f7adb9f88ed3",
+    "files": 2586
+  },
+  "binaries": {
+    "spacetimedb-cli": {
+      "sha256": "376fbb1978533b75bc144a7b27cc202ceec5da4d39ad840dc4a88fff59049157",
+      "size": 46986456
+    },
+    "spacetimedb-standalone": {
+      "sha256": "d53a8cbc4325bb87024748b725d13d5984f85bb0600ace3cea646a7ff6c5dce2",
+      "size": 134334152
+    }
+  }
+}
diff --git a/tools/stack-bench/dashboard/README.md b/tools/stack-bench/dashboard/README.md
new file mode 100644
index 00000000000..1df142872f7
--- /dev/null
+++ b/tools/stack-bench/dashboard/README.md
@@ -0,0 +1,100 @@
+# Stack Bench dashboard
+
+The dashboard is an optional local view over Stack Bench results. It does not
+schedule attempts, grade applications, operate Docker, or repair source itself.
+Campaign plans, durable campaign state, and run artifacts remain the source of
+truth; the dashboard only reads them and, in the appliance, asks the controller
+to start or resume a run.
+
+## Pages
+
+- Campaigns (`/`) — a lane per running attempt, then one row per campaign with
+  its shape, status, and per-stack score. A campaign whose plan or state this
+  build cannot read appears with the status `unreadable` and the reason in
+  place of its title.
+- Campaign (`/c/:key`) — one sheet: the plan's facts across the top, then
+  score, unaided, repairs, regressions, time, spend, climb, and attempt phase
+  per stack. Dependency campaigns add questline rows, which
+  `?questlines=grid|graph|replay` switches between; `&step=N` moves the replay
+  cursor. Sequential campaigns show one row pair per level instead.
+- Attempt (`/c/:key/a/:attemptId`) — the attempt's figures, its climb, and
+  `?tab=checks|screenshots|files|log`. The log tab follows new bytes.
+- Plans (`/plans`) — the frozen campaign plans found under the plans directory,
+  and the form that starts one.
+
+## Modes
+
+Inside the appliance (`STACK_BENCH_APPLIANCE=1`) the dashboard runs in
+controller mode: the Plans form and the resume button post to the controller.
+Elsewhere it runs read-only and those controls are unavailable;
+`GET /api/health` reports which mode is active.
+
+For UI development, `npm run dashboard` starts a read-only host view over
+`tools/stack-bench/results`. Pass `--port` to move it off 7331 and `--results`
+to point it at another results directory.
+
+## Appliance
+
+```sh
+docker compose --env-file /var/lib/stack-bench/operator.env \
+  -f appliance/docker-compose.yaml --profile dashboard up -d dashboard
+```
+
+Open `http://127.0.0.1:7331`. Docker publishes that port only on the host's
+loopback interface. Stop it with:
+
+```sh
+docker compose --env-file /var/lib/stack-bench/operator.env \
+  -f appliance/docker-compose.yaml --profile dashboard stop dashboard
+```
+
+Starting or resuming a run needs the separate dashboard control secret, typed
+into the form. The server reads the expected value from the file configured by
+`STACK_BENCH_DASHBOARD_CONTROL_SECRET_FILE` and no dashboard API returns it. A
+wrong secret is answered with 403 and nothing is started. Starting a campaign
+invokes the same `campaign run` command used by the CLI, so the CLI can inspect
+or resume the result normally and CLI-started campaigns appear here.
+
+## Routes
+
+| route | returns |
+| --- | --- |
+| `GET /api/health` | `read-only` or `controller` |
+| `GET /api/overview` | one summary per campaign |
+| `GET /api/campaigns/:key` | the campaign sheet |
+| `GET /api/campaigns/:key/progression` | the dependency graph and its replay |
+| `GET /api/campaigns/:key/attempts/:id/checks` | per-check outcome and history |
+| `GET /api/campaigns/:key/attempts/:id/package` | the evidence listing |
+| `GET /api/campaigns/:key/attempts/:id/log?from=N` | log bytes after `N` |
+| `GET /api/campaigns/:key/artifacts/:name` | one allowlisted artifact |
+| `GET /api/events` | the change stream |
+| `GET /api/plans` | the discovered plans |
+| `POST /api/campaigns` | start a run |
+| `POST /api/campaigns/:key/resume` | resume an interrupted dependency run |
+
+Each payload covers one question, so opening a campaign or a tab is what pays
+for reading it. The overview and the sheet are cached against the size and
+modification time of the evidence they read, including while a campaign runs.
+
+## The event stream
+
+`GET /api/events` is a server-sent event stream. A `campaign` event names a
+campaign whose plan, state, run output, or progression state changed; a `log`
+event names an attempt whose stdout grew. Changes are debounced for 500 ms and
+the stream sends a comment every 25 seconds so an idle connection stays open.
+The client loads the overview once, then refetches only what an event names.
+While the stream is down it falls back to polling the overview every 15
+seconds.
+
+The watcher uses a recursive `fs.watch` per campaign directory. Where the
+platform or the mount does not support one it polls the same file fingerprints
+every 5 seconds instead. The server logs which mode it opened with when the
+first client subscribes.
+
+## What it touches
+
+It reads campaign plans from `<results>/plans` and campaigns from
+`<results>/campaigns`. It writes nothing under a campaign directory. The only
+file it appends to is `<results>/dashboard/operations.jsonl`, the record of
+runs submitted through the dashboard, and the controller it starts writes its
+own output under `<results>/dashboard/operations`.
diff --git a/tools/stack-bench/dashboard/dashboard-events.ts b/tools/stack-bench/dashboard/dashboard-events.ts
new file mode 100644
index 00000000000..fb19a334e31
--- /dev/null
+++ b/tools/stack-bench/dashboard/dashboard-events.ts
@@ -0,0 +1,164 @@
+import { existsSync, readdirSync, statSync, watch } from 'node:fs';
+import type { FSWatcher } from 'node:fs';
+import { join } from 'node:path';
+
+import { ARTIFACT_FILE } from '../src/evidence/artifacts.js';
+import { CAMPAIGN_FILE } from '../src/campaigns/campaign-path.js';
+
+const DEBOUNCE_MS = 500;
+const POLL_MS = 5000;
+const LOG_FILE = 'process.stdout.log';
+const CAMPAIGN_FILES = [CAMPAIGN_FILE.plan, CAMPAIGN_FILE.state] as const;
+const EXECUTION_FILES = [ARTIFACT_FILE.run, ARTIFACT_FILE.progressionState] as const;
+
+export interface CampaignChange {
+  type: 'campaign' | 'log';
+  key: string;
+  attemptId?: string;
+}
+
+export type WatchMode = 'watch' | 'poll';
+
+export interface CampaignWatcher {
+  close(): void;
+}
+
+interface CampaignFingerprint {
+  campaign: string;
+  logs: Map<string, number>;
+}
+
+function stamp(path: string): string | null {
+  if (!existsSync(path)) return null;
+  const stat = statSync(path);
+  return `${stat.size}:${stat.mtimeMs}`;
+}
+
+function directories(root: string): string[] {
+  if (!existsSync(root)) return [];
+  return readdirSync(root, { withFileTypes: true })
+    .filter(entry => entry.isDirectory()).map(entry => entry.name);
+}
+
+// The evidence a view reads, in one pass: the campaign files and each
+// execution's result, and the log sizes that tell a follower there are new
+// bytes to fetch.
+function fingerprintCampaign(directory: string): CampaignFingerprint {
+  const parts = CAMPAIGN_FILES.map(file => `${file}:${stamp(join(directory, file)) ?? 'missing'}`);
+  const logs = new Map<string, number>();
+  const attemptsRoot = join(directory, 'attempts');
+  for (const attempt of directories(attemptsRoot)) {
+    const attemptDirectory = join(attemptsRoot, attempt);
+    let bytes = 0;
+    for (const execution of directories(attemptDirectory)) {
+      const executionDirectory = join(attemptDirectory, execution);
+      for (const file of EXECUTION_FILES) {
+        const value = stamp(join(executionDirectory, file));
+        if (value) parts.push(`${attempt}/${execution}/${file}:${value}`);
+      }
+      const log = join(executionDirectory, LOG_FILE);
+      if (existsSync(log)) bytes += statSync(log).size;
+    }
+    logs.set(attempt, bytes);
+  }
+  return { campaign: parts.sort().join('|'), logs };
+}
+
+// One watcher for the whole server: a recursive watch per campaign directory
+// where the platform supports it (Windows, macOS, and Linux on Node 20 and
+// later), and a poll of the same fingerprints where it does not.
+export function watchCampaigns(campaignsRoot: string,
+  emit: (change: CampaignChange) => void,
+  onMode: (mode: WatchMode) => void = () => {}): CampaignWatcher {
+  const fingerprints = new Map<string, CampaignFingerprint>();
+  const watchers = new Map<string, FSWatcher>();
+  const timers = new Map<string, NodeJS.Timeout>();
+  let rootWatcher: FSWatcher | null = null;
+  let poll: NodeJS.Timeout | null = null;
+  let closed = false;
+
+  const check = (key: string): void => {
+    timers.delete(key);
+    const directory = join(campaignsRoot, key);
+    if (!existsSync(directory)) {
+      fingerprints.delete(key);
+      watchers.get(key)?.close();
+      watchers.delete(key);
+      return;
+    }
+    const next = fingerprintCampaign(directory);
+    const previous = fingerprints.get(key);
+    fingerprints.set(key, next);
+    if (!previous) return;
+    if (previous.campaign !== next.campaign) emit({ type: 'campaign', key });
+    for (const [attemptId, bytes] of next.logs) {
+      if ((previous.logs.get(attemptId) ?? 0) !== bytes) emit({ type: 'log', key, attemptId });
+    }
+  };
+
+  const schedule = (key: string): void => {
+    if (closed || timers.has(key)) return;
+    timers.set(key, setTimeout(() => check(key), DEBOUNCE_MS).unref());
+  };
+
+  const startPoll = (): void => {
+    if (closed || poll) return;
+    onMode('poll');
+    poll = setInterval(() => {
+      attach();
+      for (const key of directories(campaignsRoot)) check(key);
+    }, POLL_MS).unref();
+  };
+
+  const attach = (): void => {
+    if (closed) return;
+    if (!rootWatcher && existsSync(campaignsRoot)) {
+      try {
+        rootWatcher = watch(campaignsRoot, { persistent: false }, (_event, name) => {
+          const key = String(name ?? '').split(/[/\\]/)[0];
+          if (key) schedule(key);
+          attach();
+        });
+        rootWatcher.once('error', () => { rootWatcher = null; startPoll(); });
+      } catch { startPoll(); }
+    }
+    for (const key of directories(campaignsRoot)) {
+      // A campaign that appeared since the last pass has everything to report.
+      if (!fingerprints.has(key)) {
+        fingerprints.set(key, { campaign: '', logs: new Map() });
+        schedule(key);
+      }
+      if (watchers.has(key) || poll) continue;
+      try {
+        const watcher = watch(join(campaignsRoot, key), { persistent: false, recursive: true },
+          () => schedule(key));
+        watcher.once('error', () => { watchers.delete(key); startPoll(); });
+        watchers.set(key, watcher);
+      } catch {
+        // No recursive watch on this platform: the poll reads the same files.
+        startPoll();
+        return;
+      }
+    }
+  };
+
+  for (const key of directories(campaignsRoot)) {
+    fingerprints.set(key, fingerprintCampaign(join(campaignsRoot, key)));
+  }
+  attach();
+  if (!rootWatcher) startPoll();
+  else if (!poll) onMode('watch');
+  return {
+    close() {
+      closed = true;
+      for (const timer of timers.values()) clearTimeout(timer);
+      timers.clear();
+      if (poll) clearInterval(poll);
+      poll = null;
+      rootWatcher?.close();
+      rootWatcher = null;
+      for (const watcher of watchers.values()) watcher.close();
+      watchers.clear();
+    },
+  };
+}
diff --git a/tools/stack-bench/dashboard/dashboard-model.ts b/tools/stack-bench/dashboard/dashboard-model.ts
new file mode 100644
index 00000000000..5222b658c1d
--- /dev/null
+++ b/tools/stack-bench/dashboard/dashboard-model.ts
@@ -0,0 +1,502 @@
+import { closeSync, existsSync, fstatSync, openSync, readFileSync, readSync, readdirSync,
+  lstatSync, realpathSync, statSync,
+} from 'node:fs';
+import { basename, dirname, extname, join, relative, resolve, sep } from 'node:path';
+
+import type { CompiledCampaignPlan }
+  from '../src/campaigns/campaign-compiler.js';
+import type { CampaignAttemptState } from '../src/campaigns/campaign-scheduler.js';
+import { ARTIFACT_FILE } from '../src/evidence/artifacts.js';
+import { compileCampaignFile } from '../src/campaigns/campaign-compiler.js';
+import { campaignLockIsActive } from '../src/campaigns/campaign-lock.js';
+import { readCampaignState } from '../src/campaigns/campaign-scheduler.js';
+import { campaignFacts, inspectCampaignAttempt } from '../src/campaigns/campaign-inspection.js';
+import { redactCredentials } from '../src/evidence/diagnostic-sanitizer.js';
+import { CAMPAIGN_FILE } from '../src/campaigns/campaign-path.js';
+import { repairBudgetLimit } from '../src/progression/repair-plan.js';
+
+export const MAX_LOG_BYTES = 96 * 1024;
+const MAX_PUBLIC_TEXT_BYTES = 8 * 1024 * 1024;
+const MAX_ARTIFACTS_PER_EXECUTION = 512;
+const IMAGE_TYPES = new Map([
+  ['.png', 'image/png'], ['.jpg', 'image/jpeg'], ['.jpeg', 'image/jpeg'], ['.webp', 'image/webp'],
+]);
+const CAMPAIGN_ARTIFACT = /^(?:plan\.json|state\.json|report\/report\.(?:html|json))$/;
+const EXECUTION_ARTIFACT = /^(?:run\.json|preflight\.json|recovery\.json|progression-state\.json|process\.json|process\.(?:stdout|stderr)\.log|backend\.log|level-l\d+-checkpoint\.json|progression\/attempt-\d+\/(?:bundle\.json|contract-lint\.json|actions\.json|grading-[^/]+\.json|failure-media\/[^/]+\.(?:png|jpe?g|webp))|(?:first-build-l\d+-grading|l\d+-fix\d+-grading|grading)\/(?:bundle\.json|contract-lint\.json|actions\.json|grading-[^/]+\.json|failure-media\/[^/]+\.(?:png|jpe?g|webp)))$/i;
+
+type ControllerActive = (directory: string, campaign: CompiledCampaignPlan) => boolean;
+
+export interface DashboardArtifact {
+  id: string;
+  path: string;
+  name: string;
+  kind: 'visual' | 'report' | 'log' | 'data';
+  contentType: string;
+  size: number;
+}
+
+export interface ResolvedDashboardArtifact extends DashboardArtifact {
+  absolute: string;
+}
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+export function contained(root: string, path: string, label: string): string {
+  const absoluteRoot = resolve(root);
+  const absolute = resolve(absoluteRoot, path);
+  const rel = relative(absoluteRoot, absolute);
+  if (rel === '..' || rel.startsWith(`..${sep}`) || rel === '') {
+    throw new Error(`${label} is outside the configured dashboard root`);
+  }
+  return absolute;
+}
+
+export function readTextTail(path: string, limit = MAX_LOG_BYTES): string {
+  if (!existsSync(path)) return '';
+  const descriptor = openSync(path, 'r');
+  try {
+    const size = fstatSync(descriptor).size;
+    const length = Math.min(size, limit);
+    const buffer = Buffer.alloc(length);
+    readSync(descriptor, buffer, 0, length, size - length);
+    return redactCredentials(buffer.toString('utf8'));
+  } finally {
+    closeSync(descriptor);
+  }
+}
+
+function artifactId(relativePath: string): string {
+  return Buffer.from(relativePath, 'utf8').toString('base64url');
+}
+
+function artifactLabel(path: string): string {
+  const name = basename(path);
+  if (path === CAMPAIGN_FILE.plan) return 'Frozen plan';
+  if (path === CAMPAIGN_FILE.state) return 'Campaign state';
+  if (path === `report/${CAMPAIGN_FILE.reportHtml}`) return 'Campaign report';
+  if (path === `report/${CAMPAIGN_FILE.reportJson}`) return 'Report data';
+  if (name === ARTIFACT_FILE.run) return 'Run result';
+  if (name === ARTIFACT_FILE.preflight) return 'Preflight result';
+  if (name === ARTIFACT_FILE.recovery) return 'Recovery record';
+  if (name === ARTIFACT_FILE.progressionState) return 'Dependency progress';
+  if (name === 'process.stdout.log') return 'Run output';
+  if (name === 'process.stderr.log') return 'Run errors';
+  if (name === 'backend.log') return 'Backend output';
+  if (name === ARTIFACT_FILE.gradeBundle) return `${basename(dirname(path))} bundle`;
+  if (name === ARTIFACT_FILE.actions) return `${basename(dirname(path))} actions`;
+  if (name === ARTIFACT_FILE.contractLint) return `${basename(dirname(path))} contract check`;
+  return name.replace(/[-_]/g, ' ');
+}
+
+function artifactMetadata(campaignDirectory: string, path: string): DashboardArtifact {
+  const absolute = contained(campaignDirectory, path, 'campaign artifact');
+  const size = statSync(absolute).size;
+  const extension = extname(path).toLowerCase();
+  const kind = IMAGE_TYPES.has(extension) ? 'visual'
+    : path.endsWith('/report.html') ? 'report'
+      : path.endsWith('.log') ? 'log' : 'data';
+  return { id: artifactId(path), path: path.replaceAll('\\', '/'), name: artifactLabel(path),
+    kind, contentType: IMAGE_TYPES.get(extension) ?? (kind === 'report' ? 'text/html' : 'text/plain'),
+    size };
+}
+
+function rejectSymlinkPath(root: string, path: string): void {
+  const rel = relative(resolve(root), resolve(path));
+  let current = resolve(root);
+  for (const segment of rel.split(sep)) {
+    current = join(current, segment);
+    if (lstatSync(current).isSymbolicLink()) {
+      throw new Error('campaign artifact path contains a symbolic link');
+    }
+  }
+}
+
+export function walkPublicExecutionArtifacts(campaignDirectory: string, executionDirectory: string): {
+  artifacts: DashboardArtifact[];
+  truncated: boolean;
+} {
+  const found: DashboardArtifact[] = [];
+  let truncated = false;
+  const visit = (directory: string): void => {
+    const directoryRelative = relative(executionDirectory, directory).replaceAll('\\', '/');
+    for (const entry of readdirSync(directory, { withFileTypes: true })) {
+      if (found.length >= MAX_ARTIFACTS_PER_EXECUTION) {
+        truncated = true;
+        return;
+      }
+      if (entry.isSymbolicLink()) continue;
+      const absolute = join(directory, entry.name);
+      if (entry.isDirectory()) {
+        const allowed = directoryRelative === ''
+          ? /^(?:first-build-l\d+-grading|l\d+-fix\d+-grading|grading|progression)$/i.test(entry.name)
+          : directoryRelative === 'progression'
+            ? /^attempt-\d+$/i.test(entry.name)
+          : (/^(?:progression\/attempt-\d+|(?:.*\/)?(?:first-build-l\d+-grading|l\d+-fix\d+-grading|grading))$/i
+            .test(directoryRelative) && entry.name === 'failure-media');
+        if (allowed) visit(absolute);
+        if (truncated) return;
+      }
+      else if (entry.isFile()) {
+        const executionRelative = relative(executionDirectory, absolute).replaceAll('\\', '/');
+        if (EXECUTION_ARTIFACT.test(executionRelative)) {
+          const campaignRelative = relative(campaignDirectory, absolute).replaceAll('\\', '/');
+          found.push(artifactMetadata(campaignDirectory, campaignRelative));
+        }
+      }
+    }
+  };
+  if (existsSync(executionDirectory)) visit(executionDirectory);
+  return { artifacts: found.sort((left, right) => left.path.localeCompare(right.path)), truncated };
+}
+
+function campaignPackage(campaignDirectory: string, attempts: CampaignAttemptState[]) {
+  const campaign = [CAMPAIGN_FILE.plan, CAMPAIGN_FILE.state,
+    `report/${CAMPAIGN_FILE.reportHtml}`, `report/${CAMPAIGN_FILE.reportJson}`]
+    .filter(path => existsSync(join(campaignDirectory, path)))
+    .map(path => artifactMetadata(campaignDirectory, path));
+  const executions: Array<{
+    attemptId: string;
+    stack: string;
+    executionId: string;
+    ordinal: number;
+    status: string;
+    artifacts: DashboardArtifact[];
+    visuals: DashboardArtifact[];
+    truncated: boolean;
+  }> = [];
+  for (const attempt of attempts) {
+    for (const execution of attempt.executions) {
+      const directory = contained(campaignDirectory, execution.output, 'campaign execution');
+      const scanned = walkPublicExecutionArtifacts(campaignDirectory, directory);
+      const artifacts = scanned.artifacts;
+      executions.push({ attemptId: attempt.plan.id, stack: attempt.plan.stack,
+        executionId: execution.id, ordinal: execution.ordinal, status: execution.status,
+        artifacts, visuals: artifacts.filter(artifact => artifact.kind === 'visual'),
+        truncated: scanned.truncated });
+    }
+  }
+  return { campaign, executions };
+}
+
+export function resolveCampaignArtifact(resultsRoot: string, key: string,
+  id: string): ResolvedDashboardArtifact {
+  if (!/^[a-z0-9][a-z0-9.-]*$/.test(key)) throw new Error('campaign key is invalid');
+  let path;
+  try { path = Buffer.from(id, 'base64url').toString('utf8'); }
+  catch { throw new Error('campaign artifact id is invalid'); }
+  if (!path || artifactId(path) !== id || path.includes('\\') || path.startsWith('/')) {
+    throw new Error('campaign artifact id is invalid');
+  }
+  const executionMatch = path.match(/^attempts\/([^/]+)\/(execution-\d+)\/(.+)$/);
+  const allowed = CAMPAIGN_ARTIFACT.test(path)
+    || (executionMatch !== null && EXECUTION_ARTIFACT.test(executionMatch[3] ?? ''));
+  if (!allowed) {
+    throw new Error('campaign artifact is not available in the dashboard');
+  }
+  const campaignsRoot = join(resolve(resultsRoot), 'campaigns');
+  const campaignDirectory = contained(campaignsRoot, key, 'campaign');
+  const absolute = contained(campaignDirectory, path, 'campaign artifact');
+  if (!existsSync(absolute) || !statSync(absolute).isFile()) throw new Error('campaign artifact does not exist');
+  rejectSymlinkPath(campaignsRoot, absolute);
+  const realCampaign = realpathSync(campaignDirectory);
+  const realArtifact = realpathSync(absolute);
+  contained(realCampaign, relative(realCampaign, realArtifact), 'campaign artifact');
+  return { ...artifactMetadata(campaignDirectory, path), absolute };
+}
+
+export function readCampaignArtifactBody(artifact: ResolvedDashboardArtifact): Buffer {
+  if (artifact.kind === 'visual') return readFileSync(artifact.absolute);
+  if (artifact.size > MAX_PUBLIC_TEXT_BYTES) throw new Error('campaign artifact is too large to view');
+  return Buffer.from(redactCredentials(readFileSync(artifact.absolute, 'utf8')));
+}
+
+function matches(text: string, pattern: RegExp): Array<RegExpMatchArray & { index: number }> {
+  return [...text.matchAll(pattern)].map(match => Object.assign(match, { index: match.index ?? 0 }));
+}
+
+export function parseRunProgress(log: string, { repairs = 0, running = true, status = null,
+  dependency = false }: {
+  repairs?: number;
+  running?: boolean;
+  status?: string | null;
+  dependency?: boolean;
+} = {}) {
+  const totals = matches(log, /^\s*TOTAL\b.*?(\d+)\/(\d+)\s*$/gm)
+    .map(match => ({ index: match.index, score: Number(match[1]), max: Number(match[2]) }));
+  // A run-wide repair prints "repair N/M"; a feature repair prints
+  // "feature repair N: title" because its limit belongs to the feature.
+  const roundMarkers = matches(log,
+    /^--- (?:feature )?repair (\d+)(?:\/(\d+))?(?:: (.+))? ---$/gm)
+    .map(match => ({ index: match.index, round: Number(match[1]),
+      budget: match[2] === undefined ? null : Number(match[2]),
+      target: match[3] ?? null }));
+  const grading = matches(log, /^===\s+[^\n]*?-l(\d+)(?:-(?:first|fix(\d+)))?\s+\([^\n]+\)\s*===$/gm)
+    .map(match => ({ index: match.index, level: Number(match[1]),
+      round: match[2] ? Number(match[2]) : 0 }));
+  const latestTotal = totals.at(-1) ?? null;
+  const latestRound = roundMarkers.at(-1) ?? null;
+  const latestGrading = grading.at(-1) ?? null;
+  const latestIndex = Math.max(latestTotal?.index ?? -1, latestRound?.index ?? -1,
+    latestGrading?.index ?? -1);
+  let phase = status === 'pending' ? 'Waiting to start'
+    : running ? 'Building the generated app' : 'Finished';
+  const level = latestGrading?.level ?? null;
+  const round = latestRound?.round ?? latestGrading?.round ?? 0;
+  const budget = latestRound ? latestRound.budget : repairs;
+  const target = latestRound?.target ? ` for ${latestRound.target}` : '';
+  const of = (limit: number | null): string => limit === null ? '' : ` of ${limit}`;
+  const stage = (value: number): string => dependency ? `depth ${value}` : `L${value}`;
+  if (latestIndex === latestGrading?.index) {
+    phase = latestGrading.round
+      ? `Grading ${stage(latestGrading.level)} after repair ${round}${of(budget)}${target}`
+      : `Grading the first ${stage(latestGrading.level)} build`;
+  } else if (latestIndex === latestRound?.index) {
+    phase = latestRound.target
+      ? `Repairing ${latestRound.target} · ${latestRound.round}${of(latestRound.budget)}`
+      : `Repairing ${stage(latestGrading?.level ?? 1)} · round ${latestRound.round}${of(latestRound.budget)}`;
+  } else if (latestIndex === latestTotal?.index && running) {
+    phase = 'Preparing the next step';
+  }
+  return {
+    phase,
+    level,
+    repair: { round, budget },
+    firstScore: totals[0] ? { score: totals[0].score, max: totals[0].max } : null,
+    latestScore: latestTotal ? { score: latestTotal.score, max: latestTotal.max } : null,
+    completedGrades: totals.length,
+    // Every completed grade in order — the attempt's trajectory — carrying the
+    // level it graded and whether it was the unaided build of that level. A
+    // view can draw the climb with its bands, and a flat tail is the stall an
+    // operator otherwise discovers by diffing round logs.
+    series: totals.map(total => {
+      const mark = grading.findLast(entry => entry.index < total.index) ?? null;
+      return { score: total.score, max: total.max, level: mark?.level ?? null,
+        unaided: mark ? mark.round === 0 : false };
+    }),
+  };
+}
+
+function summarizeAttempt(plan: CompiledCampaignPlan, attempt: CampaignAttemptState,
+  campaignDirectory: string, repairs: number, { includeLog = false }: {
+    includeLog?: boolean;
+  } = {}) {
+  const inspected = inspectCampaignAttempt(plan, attempt, campaignDirectory);
+  const execution = inspected.execution;
+  let executionDirectory = null;
+  let log = '';
+  let logUpdatedAt = null;
+  if (execution) {
+    executionDirectory = contained(campaignDirectory, execution.output, 'campaign execution');
+    const logPath = join(executionDirectory, 'process.stdout.log');
+    log = readTextTail(logPath);
+    // When the run last wrote anything. A running attempt whose output has
+    // been silent for a long time is wedged in a way no score can show.
+    if (existsSync(logPath)) logUpdatedAt = new Date(statSync(logPath).mtimeMs).toISOString();
+  }
+  const progress = parseRunProgress(log, { repairs, running: attempt.status === 'running',
+    status: attempt.status, dependency: plan.definition.mode.id === 'dependency' });
+  if (inspected.result?.score) progress.latestScore = inspected.result.score;
+  return {
+    ...inspected,
+    progress,
+    logUpdatedAt,
+    ...(includeLog ? { log: log.split(/\r?\n/).slice(-160).join('\n') } : {}),
+  };
+}
+
+export function summarizeCampaign(directory: string, {
+  includeLogs = false,
+  includePackage = false,
+  includeAttempts = true,
+  controllerActive = null,
+}: {
+  includeLogs?: boolean;
+  includePackage?: boolean;
+  includeAttempts?: boolean;
+  controllerActive?: ControllerActive | null;
+} = {}) {
+  const { plan, state } = readCampaignState(directory, { requireCurrentInputs: false });
+  let attempts = includeAttempts
+    ? state.attempts.map(attempt => summarizeAttempt(plan, attempt, directory,
+      repairBudgetLimit(plan.definition.repair, {
+        features: plan.featureCatalog?.definition.nodes.length ?? 1,
+        depths: plan.definition.levels.length,
+      }), { includeLog: includeLogs }))
+    : [];
+  const interrupted = state.status === 'running' && controllerActive !== null
+    && !controllerActive(directory, plan);
+  if (interrupted) {
+    attempts = attempts.map(attempt => attempt.status !== 'running' ? attempt : ({
+      ...attempt,
+      status: 'interrupted',
+      execution: attempt.execution ? { ...attempt.execution, status: 'interrupted' } : null,
+      progress: { ...attempt.progress, phase: 'Controller stopped before completion' },
+    }));
+  }
+  return {
+    key: basename(resolve(directory)),
+    id: plan.id,
+    version: plan.version,
+    sha256: plan.contentSha256,
+    title: plan.title,
+    state: plan.state,
+    mode: plan.definition.mode?.id ?? 'sequential',
+    status: interrupted ? 'attention-required' : state.status,
+    track: plan.definition.track,
+    levels: plan.definition.levels,
+    stacks: plan.stacks.map(stack => stack.id),
+    repetitions: plan.definition.repetitions,
+    maxParallel: state.maxParallel,
+    createdAt: state.createdAt,
+    updatedAt: state.updatedAt,
+    summary: interrupted ? { ...state.summary, interrupted: state.summary.running, running: 0 }
+      : state.summary,
+    interrupted,
+    ...(interrupted ? { statusReason: 'The campaign controller is no longer running.' } : {}),
+    budgets: plan.definition.budgets,
+    facts: campaignFacts(plan),
+    attempts,
+    ...(includePackage ? { package: campaignPackage(directory, state.attempts) } : {}),
+  };
+}
+
+export interface UnreadableDashboardCampaign {
+  key: string;
+  id: string;
+  title: string;
+  status: 'unreadable';
+  error: string;
+  attempts: [];
+}
+
+export type DashboardCampaign = ReturnType<typeof summarizeCampaign>;
+export type DashboardCampaignSummary = DashboardCampaign | UnreadableDashboardCampaign;
+
+const overviewCampaignCache = new Map<string, {
+  fingerprint: string;
+  campaign: DashboardCampaign;
+}>();
+
+function summarizeOverviewCampaign(directory: string, includeAttempts: boolean,
+  controllerActive: ControllerActive): DashboardCampaign {
+  const fingerprint = [CAMPAIGN_FILE.plan, CAMPAIGN_FILE.state]
+    .map(file => {
+      const stat = statSync(join(directory, file));
+      return `${stat.size}:${stat.mtimeMs}`;
+    }).join('|');
+  const key = `${includeAttempts ? 'attempts' : 'summary'}:${directory}`;
+  const cached = overviewCampaignCache.get(key);
+  if (cached?.fingerprint === fingerprint) return cached.campaign;
+  const campaign = summarizeCampaign(directory, { includeAttempts, controllerActive });
+  if (campaign.summary.running === 0) {
+    overviewCampaignCache.set(key, { fingerprint, campaign });
+  }
+  return campaign;
+}
+
+export function discoverCampaigns(campaignsRoot: string, {
+  includeLogs = false,
+  controllerActive = campaignLockIsActive,
+}: { includeLogs?: boolean; controllerActive?: ControllerActive } = {}) {
+  if (!existsSync(campaignsRoot)) return [];
+  const campaigns: DashboardCampaignSummary[] = [];
+  for (const entry of readdirSync(campaignsRoot, { withFileTypes: true })) {
+    if (!entry.isDirectory()) continue;
+    const directory = join(campaignsRoot, entry.name);
+    if (!existsSync(join(directory, CAMPAIGN_FILE.state))
+      || !existsSync(join(directory, CAMPAIGN_FILE.plan))) continue;
+    try {
+      campaigns.push(includeLogs
+        ? summarizeCampaign(directory, { includeLogs, controllerActive })
+        : summarizeOverviewCampaign(directory, false, controllerActive));
+    } catch (error) {
+      campaigns.push({ key: entry.name, id: entry.name, title: entry.name,
+        status: 'unreadable', error: errorMessage(error), attempts: [] });
+    }
+  }
+  campaigns.sort((left, right) => String('updatedAt' in right ? right.updatedAt ?? '' : '')
+    .localeCompare(String('updatedAt' in left ? left.updatedAt ?? '' : '')));
+  if (includeLogs) return campaigns;
+
+  const verdict = campaigns.find(campaign => campaign.status === 'completed'
+    && 'facts' in campaign && campaign.facts.grading.status === 'qualified');
+  return campaigns.map(campaign => {
+    if (campaign.status !== 'running' && campaign !== verdict) return campaign;
+    try {
+      return summarizeOverviewCampaign(join(campaignsRoot, campaign.key), true, controllerActive);
+    } catch (error) {
+      const unreadable: UnreadableDashboardCampaign = {
+        key: campaign.key,
+        id: campaign.id,
+        title: campaign.title,
+        status: 'unreadable',
+        error: errorMessage(error),
+        attempts: [],
+      };
+      return unreadable;
+    }
+  });
+}
+
+export interface DashboardPlan {
+  id: string;
+  version?: string;
+  title: string;
+  state: string;
+  mode?: string;
+  track?: string;
+  levels?: number[];
+  stacks?: string[];
+  attempts?: number;
+  parallelism?: number;
+  budgets?: CompiledCampaignPlan['definition']['budgets'];
+  repairBudget?: number;
+  sha256?: string;
+  file: string;
+  error?: string;
+}
+
+export function discoverPlans(plansRoot: string): DashboardPlan[] {
+  if (!existsSync(plansRoot)) return [];
+  const plans: DashboardPlan[] = [];
+  for (const entry of readdirSync(plansRoot, { withFileTypes: true })) {
+    if (!entry.isFile() || !entry.name.endsWith('.json')) continue;
+    const path = join(plansRoot, entry.name);
+    try {
+      const plan = compileCampaignFile(path);
+      plans.push({ id: plan.id, version: plan.version, title: plan.title, state: plan.state,
+        mode: plan.definition.mode?.id ?? 'sequential',
+        track: plan.definition.track, levels: plan.definition.levels,
+        stacks: plan.stacks.map(stack => stack.id), attempts: plan.summary.attempts,
+        parallelism: plan.summary.parallelism, budgets: plan.definition.budgets,
+        repairBudget: repairBudgetLimit(plan.definition.repair, {
+          features: plan.featureCatalog?.definition.nodes.length ?? 1,
+          depths: plan.definition.levels.length,
+        }),
+        sha256: plan.contentSha256, file: entry.name });
+    } catch (error) {
+      plans.push({ id: entry.name.slice(0, -5), title: entry.name, state: 'invalid',
+        error: errorMessage(error), file: entry.name });
+    }
+  }
+  return plans.sort((left, right) => left.title.localeCompare(right.title));
+}
+
+export function readJsonLines(path: string): unknown[] {
+  if (!existsSync(path)) return [];
+  const lines = readFileSync(path, 'utf8').split(/\r?\n/);
+  const last = lines.findLastIndex(line => line.trim() !== '');
+  const events: unknown[] = [];
+  for (let index = 0; index <= last; index += 1) {
+    const line = lines[index];
+    if (!line?.trim()) continue;
+    try { events.push(JSON.parse(line)); }
+    catch {
+      if (index === last) break;
+      throw new Error(`dashboard operation feed line ${index + 1} is invalid JSON`);
+    }
+  }
+  return events;
+}
diff --git a/tools/stack-bench/dashboard/dashboard-server.ts b/tools/stack-bench/dashboard/dashboard-server.ts
new file mode 100644
index 00000000000..2263361c44e
--- /dev/null
+++ b/tools/stack-bench/dashboard/dashboard-server.ts
@@ -0,0 +1,504 @@
+#!/usr/bin/env node
+
+import { randomBytes, randomUUID, timingSafeEqual } from 'node:crypto';
+import { appendFileSync, closeSync, createReadStream, existsSync, mkdirSync, openSync, readFileSync, statSync } from 'node:fs';
+import { createServer } from 'node:http';
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { basename, dirname, join, resolve } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { spawn } from 'node:child_process';
+import { parseArgs as parseNodeArgs } from 'node:util';
+
+import { contained, discoverPlans, readCampaignArtifactBody,
+  readJsonLines, resolveCampaignArtifact, summarizeCampaign,
+} from './dashboard-model.js';
+import type { DashboardPlan } from './dashboard-model.js';
+import { attemptChecks, attemptLogSlice, attemptPackage, campaignProgression, campaignSheet,
+  overviewSummary } from './dashboard-views.js';
+import { watchCampaigns } from './dashboard-events.js';
+import type { CampaignChange, CampaignWatcher } from './dashboard-events.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { stackBenchResultsRoot } from '../src/runtime/operational-paths.js';
+
+const DASHBOARD_ROOT = dirname(fileURLToPath(import.meta.url));
+const RUNTIME_ROOT = dirname(DASHBOARD_ROOT);
+const PUBLIC_ROOT = join(DASHBOARD_ROOT, 'public');
+const CAMPAIGN_CLI = join(RUNTIME_ROOT, 'commands', 'campaign-cli.js');
+const SAFE_NAME = /^[a-z0-9][a-z0-9.-]{2,119}$/;
+const SPA_PATH = /^\/(?:plans|c\/[^/]+(?:\/a\/[^/]+)?)$/;
+const HEARTBEAT_MS = 25_000;
+const LOOPBACK = new Set(['127.0.0.1', '::1', 'localhost']);
+const STATIC = new Map<string, readonly [file: string, contentType: string]>([
+  ['/', ['index.html', 'text/html; charset=utf-8']],
+  ['/app.js', ['app.js', 'text/javascript; charset=utf-8']],
+  ['/climb.js', ['climb.js', 'text/javascript; charset=utf-8']],
+  ['/format.js', ['format.js', 'text/javascript; charset=utf-8']],
+  ['/graph.js', ['graph.js', 'text/javascript; charset=utf-8']],
+  ['/metrics.js', ['metrics.js', 'text/javascript; charset=utf-8']],
+  ['/views/attempt.js', ['views/attempt.js', 'text/javascript; charset=utf-8']],
+  ['/views/campaign.js', ['views/campaign.js', 'text/javascript; charset=utf-8']],
+  ['/views/campaigns.js', ['views/campaigns.js', 'text/javascript; charset=utf-8']],
+  ['/views/plans.js', ['views/plans.js', 'text/javascript; charset=utf-8']],
+  ['/styles.css', ['styles.css', 'text/css; charset=utf-8']],
+  ['/spacetimedb-mark.svg', ['spacetimedb-mark.svg', 'image/svg+xml']],
+  // The brand faces are served from here rather than a CDN: the dashboard's own
+  // content-security-policy allows 'self' only, and the appliance has no
+  // outbound access to fetch them at view time.
+  ['/fonts/inter-latin-variable.woff2', ['fonts/inter-latin-variable.woff2', 'font/woff2']],
+  ['/fonts/source-code-pro-latin-variable.woff2', ['fonts/source-code-pro-latin-variable.woff2', 'font/woff2']],
+]);
+
+interface DashboardArgs {
+  host: string;
+  port: number;
+  resultsRoot: string;
+  plansRoot: string;
+  allowContainerBind: boolean;
+}
+
+export interface DashboardOperation {
+  id: string;
+  updatedAt: string;
+  [key: string]: unknown;
+}
+
+function dashboardOperation(value: unknown): DashboardOperation {
+  if (!value || typeof value !== 'object') throw new Error('dashboard operation must be an object');
+  const id = 'id' in value ? value.id : undefined;
+  const updatedAt = 'updatedAt' in value ? value.updatedAt : undefined;
+  if (typeof id !== 'string' || !id) throw new Error('dashboard operation id is required');
+  if (typeof updatedAt !== 'string' || !updatedAt) {
+    throw new Error('dashboard operation updatedAt is required');
+  }
+  return { ...value, id, updatedAt };
+}
+
+export interface OperationFeed {
+  readonly path?: string;
+  append(event: DashboardOperation): void;
+  list(): DashboardOperation[];
+}
+
+export interface LaunchChild {
+  pid?: number;
+  once(event: 'error', listener: (error: Error) => void): unknown;
+  once(event: 'exit', listener: (code: number | null, signal: NodeJS.Signals | null) => void): unknown;
+}
+
+export interface LaunchInput {
+  plan: DashboardPlan & { path: string };
+  output: string;
+  operationId: string;
+  resultsRoot: string;
+  feed: OperationFeed;
+  env?: NodeJS.ProcessEnv;
+}
+
+export interface DashboardServerOptions {
+  resultsRoot: string;
+  plansRoot: string;
+  allowLaunch?: boolean;
+  token?: string;
+  controlSecret?: string;
+  controlSecretFile?: string;
+  feed?: OperationFeed;
+  launch?: (input: LaunchInput) => LaunchChild;
+  plans?: () => DashboardPlan[];
+}
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+function loopbackHost(value: unknown): boolean {
+  return /^(?:localhost|127\.0\.0\.1|\[::1\])(?::\d+)?$/i.test(String(value ?? ''));
+}
+
+function loadControlSecret(options: DashboardServerOptions, allowLaunch: boolean): string | null {
+  if (!allowLaunch) return null;
+  const file = options.controlSecretFile
+    ?? process.env.STACK_BENCH_DASHBOARD_CONTROL_SECRET_FILE;
+  let value = options.controlSecret;
+  if (value === undefined && file) {
+    try { value = readFileSync(resolve(file), 'utf8').trim(); }
+    catch { throw new Error('dashboard run controls require a readable operator control secret file'); }
+  }
+  if (typeof value !== 'string' || value.length < 32 || value.length > 4096 || /[\r\n]/.test(value)) {
+    throw new Error('dashboard run controls require a valid operator control secret file');
+  }
+  return value;
+}
+
+function sameSecret(actual: unknown, expected: unknown): boolean {
+  if (typeof actual !== 'string' || typeof expected !== 'string') return false;
+  const left = Buffer.from(actual);
+  const right = Buffer.from(expected);
+  return left.length === right.length && timingSafeEqual(left, right);
+}
+
+function controlAuthorized(request: IncomingMessage, host: string | undefined,
+  csrfToken: string, controlSecret: string | null): boolean {
+  return request.headers.origin === `http://${host}`
+    && sameSecret(request.headers['x-stack-bench-token'], csrfToken)
+    && sameSecret(request.headers['x-stack-bench-control-secret'], controlSecret);
+}
+
+export function parseDashboardArgs(argv: string[], env: NodeJS.ProcessEnv = process.env): DashboardArgs {
+  const { values } = parseNodeArgs({ args: argv.slice(2), options: {
+    host: { type: 'string' }, port: { type: 'string' }, results: { type: 'string' },
+    plans: { type: 'string' }, 'allow-container-bind': { type: 'boolean' },
+  } });
+  const args: DashboardArgs = { host: values.host ?? '127.0.0.1',
+    port: values.port === undefined ? 7331 : Number(values.port),
+    resultsRoot: stackBenchResultsRoot(STACK_BENCH_ROOT, env),
+    plansRoot: '', allowContainerBind: values['allow-container-bind'] ?? false };
+  if (values.results) args.resultsRoot = resolve(values.results);
+  if (values.plans) args.plansRoot = resolve(values.plans);
+  args.plansRoot ||= join(args.resultsRoot, 'plans');
+  const applianceContainerBind = args.allowContainerBind
+    && env.STACK_BENCH_APPLIANCE === '1' && args.host === '0.0.0.0';
+  if (!LOOPBACK.has(args.host) && !applianceContainerBind) {
+    throw new Error('dashboard must bind to localhost or a loopback address');
+  }
+  if (!Number.isInteger(args.port) || args.port < 1 || args.port > 65535) {
+    throw new Error('dashboard port must be an integer from 1 through 65535');
+  }
+  return args;
+}
+
+function json(response: ServerResponse, status: number, value: unknown): void {
+  const body = Buffer.from(`${JSON.stringify(value)}\n`);
+  response.writeHead(status, { 'content-type': 'application/json; charset=utf-8',
+    'content-length': body.length, 'cache-control': 'no-store' });
+  response.end(body);
+}
+
+function securityHeaders(response: ServerResponse): void {
+  response.setHeader('content-security-policy', "default-src 'self'; connect-src 'self'; img-src 'self' data:; script-src 'self'; style-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'");
+  response.setHeader('x-content-type-options', 'nosniff');
+  response.setHeader('x-frame-options', 'DENY');
+  response.setHeader('referrer-policy', 'no-referrer');
+}
+
+async function body(request: IncomingMessage): Promise<unknown> {
+  const chunks: Buffer[] = [];
+  let bytes = 0;
+  for await (const chunk of request) {
+    const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+    bytes += buffer.length;
+    if (bytes > 16 * 1024) throw new Error('request body is too large');
+    chunks.push(buffer);
+  }
+  try { return JSON.parse(Buffer.concat(chunks).toString('utf8'));
+  } catch { throw new Error('request body must be valid JSON'); }
+}
+
+function createOperationFeed(resultsRoot: string): OperationFeed {
+  const root = join(resolve(resultsRoot), 'dashboard');
+  const path = join(root, 'operations.jsonl');
+  mkdirSync(root, { recursive: true });
+  return {
+    path,
+    append(event: DashboardOperation) {
+      appendFileSync(path, `${JSON.stringify(event)}\n`, { encoding: 'utf8', mode: 0o600 });
+    },
+    list() {
+      const latest = new Map<string, DashboardOperation>();
+      for (const value of readJsonLines(path)) {
+        const event = dashboardOperation(value);
+        latest.set(event.id, { ...(latest.get(event.id) ?? {}), ...event });
+      }
+      return [...latest.values()].sort((left, right) => right.updatedAt.localeCompare(left.updatedAt));
+    },
+  };
+}
+
+function launchCampaign({ plan, output, operationId, resultsRoot, feed,
+  env = process.env }: LaunchInput): LaunchChild {
+  const operationsRoot = join(resolve(resultsRoot), 'dashboard', 'operations');
+  mkdirSync(operationsRoot, { recursive: true });
+  const stdoutPath = join(operationsRoot, `${operationId}.stdout.log`);
+  const stderrPath = join(operationsRoot, `${operationId}.stderr.log`);
+  const stdout = openSync(stdoutPath, 'a', 0o600);
+  const stderr = openSync(stderrPath, 'a', 0o600);
+  const child = spawn(process.execPath, [CAMPAIGN_CLI, 'run', plan.path, '--out', output], {
+    cwd: STACK_BENCH_ROOT, env, stdio: ['ignore', stdout, stderr], windowsHide: true,
+  });
+  closeSync(stdout);
+  closeSync(stderr);
+  child.once('error', error => feed.append({ schemaVersion: 1, id: operationId,
+    status: 'failed', updatedAt: new Date().toISOString(), error: error.message }));
+  child.once('exit', (code, signal) => feed.append({ schemaVersion: 1, id: operationId,
+    status: code === 0 ? 'completed' : 'failed', updatedAt: new Date().toISOString(),
+    exitCode: code, signal }));
+  return child;
+}
+
+export function createDashboardServer(options: DashboardServerOptions) {
+  const resultsRoot = resolve(options.resultsRoot);
+  const plansRoot = resolve(options.plansRoot);
+  const allowLaunch = options.allowLaunch ?? process.env.STACK_BENCH_APPLIANCE === '1';
+  const token = options.token ?? randomBytes(24).toString('base64url');
+  const controlSecret = loadControlSecret(options, allowLaunch);
+  const feed = options.feed ?? createOperationFeed(resultsRoot);
+  const launch = options.launch ?? launchCampaign;
+  const plans = options.plans ?? (() => discoverPlans(plansRoot));
+  const launchReservations = new Set<string>();
+  const campaignsRoot = join(resultsRoot, 'campaigns');
+  const listeners = new Set<ServerResponse>();
+  let watcher: CampaignWatcher | null = null;
+  let heartbeat: NodeJS.Timeout | null = null;
+  const broadcast = (change: CampaignChange): void => {
+    const frame = `event: ${change.type}\ndata: ${JSON.stringify({ key: change.key,
+      ...(change.attemptId === undefined ? {} : { attemptId: change.attemptId }) })}\n\n`;
+    for (const listener of listeners) listener.write(frame);
+  };
+  const stopEvents = (): void => {
+    watcher?.close();
+    watcher = null;
+    if (heartbeat) clearInterval(heartbeat);
+    heartbeat = null;
+  };
+  const server = createServer(async (request, response) => {
+    securityHeaders(response);
+    try {
+      if (!loopbackHost(request.headers.host)) {
+        return json(response, 421, { error: 'Dashboard requests must use a loopback host.' });
+      }
+      const url = new URL(request.url ?? '/', `http://${request.headers.host ?? 'localhost'}`);
+      // The client routes are pages, not fragments: each serves the shell.
+      const staticFile = STATIC.get(url.pathname)
+        ?? (SPA_PATH.test(url.pathname) ? STATIC.get('/') : undefined);
+      if (request.method === 'GET' && staticFile) {
+        const [file, type] = staticFile;
+        const path = join(PUBLIC_ROOT, file);
+        const size = existsSync(path) ? statSync(path).size : 0;
+        if (!size) return json(response, 404, { error: 'Not found' });
+        response.writeHead(200, { 'content-type': type, 'content-length': size,
+          'cache-control': file === 'index.html' ? 'no-store' : 'public, max-age=300' });
+        createReadStream(path).pipe(response);
+        return;
+      }
+      if (request.method === 'GET' && url.pathname === '/api/health') {
+        return json(response, 200, { ok: true, mode: allowLaunch ? 'controller' : 'read-only' });
+      }
+      if (request.method === 'GET' && url.pathname === '/api/overview') {
+        return json(response, 200, { campaigns: overviewSummary(campaignsRoot),
+          canStart: allowLaunch, csrfToken: token });
+      }
+      if (request.method === 'GET' && url.pathname === '/api/plans') {
+        return json(response, 200, plans());
+      }
+      if (request.method === 'GET' && url.pathname === '/api/events') {
+        response.writeHead(200, { 'content-type': 'text/event-stream; charset=utf-8',
+          'cache-control': 'no-store', connection: 'keep-alive' });
+        response.write(': open\n\n');
+        listeners.add(response);
+        watcher ??= watchCampaigns(campaignsRoot, broadcast,
+          mode => console.log(`Stack Bench dashboard: campaign watcher ${mode}`));
+        // A silent connection is dropped by proxies long before a campaign
+        // writes anything.
+        heartbeat ??= setInterval(() => {
+          for (const listener of listeners) listener.write(': ping\n\n');
+        }, HEARTBEAT_MS).unref();
+        request.once('close', () => {
+          listeners.delete(response);
+          if (!listeners.size) stopEvents();
+        });
+        return;
+      }
+      const resumeRoute = url.pathname.match(/^\/api\/campaigns\/([^/]+)\/resume$/);
+      if (request.method === 'POST' && resumeRoute) {
+        if (!allowLaunch) return json(response, 503, { error: 'Run controls are available inside the Stack Bench appliance.' });
+        if (!controlAuthorized(request, request.headers.host, token, controlSecret)) {
+          return json(response, 403, { error: 'The run request is not authorized.' });
+        }
+        const key = decodeURIComponent(resumeRoute[1] ?? '');
+        if (!SAFE_NAME.test(key)) return json(response, 400, { error: 'The campaign name is invalid.' });
+        const campaign = summarizeCampaign(
+          contained(join(resultsRoot, 'campaigns'), key, 'campaign'), { includeAttempts: false });
+        const priorExecutions = campaign.summary?.executions ?? 0;
+        if (campaign.mode !== 'dependency' || campaign.status !== 'prepared' || priorExecutions < 1) {
+          return json(response, 409, { error: 'Only an interrupted campaign that is ready can resume.' });
+        }
+        const plan = plans().find(item => item.id === campaign.id && item.sha256 === campaign.sha256);
+        if (!plan || plan.state !== 'frozen') {
+          return json(response, 409, { error: 'The test plan used by this campaign is unavailable.' });
+        }
+        const reservation = `${campaign.id}:${campaign.sha256}:${key}`;
+        if (launchReservations.has(reservation)) {
+          return json(response, 409, { error: 'This campaign already has an active controller.' });
+        }
+        launchReservations.add(reservation);
+        const now = new Date().toISOString();
+        const operation = { schemaVersion: 1, id: randomUUID(), type: 'campaign.resume',
+          status: 'running', createdAt: now, updatedAt: now, actor: 'local-operator',
+          campaignId: campaign.id, campaignSha256: campaign.sha256, outputName: key };
+        feed.append(operation);
+        const output = join(resultsRoot, 'campaigns', key);
+        try {
+          const child = launch({ plan: { ...plan, path: join(plansRoot, plan.file) }, output,
+            operationId: operation.id, resultsRoot, feed, env: process.env });
+          if (typeof child?.once === 'function') {
+            child.once('error', () => launchReservations.delete(reservation));
+            child.once('exit', () => launchReservations.delete(reservation));
+          } else {
+            launchReservations.delete(reservation);
+          }
+          feed.append({ ...operation, pid: child?.pid ?? null });
+        } catch (error) {
+          launchReservations.delete(reservation);
+          feed.append({ schemaVersion: 1, id: operation.id, status: 'failed',
+            updatedAt: new Date().toISOString(), error: errorMessage(error) });
+          throw error;
+        }
+        return json(response, 202, operation);
+      }
+      const artifactRoute = url.pathname.match(/^\/api\/campaigns\/([^/]+)\/artifacts\/([^/]+)$/);
+      if (request.method === 'GET' && artifactRoute) {
+        let artifact;
+        try {
+          artifact = resolveCampaignArtifact(resultsRoot, decodeURIComponent(artifactRoute[1] ?? ''),
+            decodeURIComponent(artifactRoute[2] ?? ''));
+        } catch {
+          return json(response, 404, { error: 'Campaign artifact not found.' });
+        }
+        const body = readCampaignArtifactBody(artifact);
+        const download = url.searchParams.get('download') === '1';
+        const type = artifact.kind === 'visual' ? artifact.contentType
+          : artifact.kind === 'report' && !download ? 'text/html; charset=utf-8'
+            : 'text/plain; charset=utf-8';
+        if (artifact.kind === 'report' && !download) {
+          response.setHeader('content-security-policy', "sandbox; default-src 'none'; style-src 'unsafe-inline'; img-src data:");
+        }
+        response.writeHead(200, { 'content-type': type, 'content-length': body.length,
+          'cache-control': 'no-store', 'content-disposition': `${download ? 'attachment' : 'inline'}; filename*=UTF-8''${encodeURIComponent(basename(artifact.path))}` });
+        response.end(body);
+        return;
+      }
+      const campaignRoute = url.pathname.match(/^\/api\/campaigns\/([^/]+)(?:\/(.*))?$/);
+      if (request.method === 'GET' && campaignRoute) {
+        const key = decodeURIComponent(campaignRoute[1] ?? '');
+        const rest = campaignRoute[2] ?? '';
+        if (!SAFE_NAME.test(key)) {
+          return json(response, 400, { error: 'The campaign name is invalid.' });
+        }
+        const attemptRoute = rest.match(/^attempts\/([^/]+)\/(checks|package|log)$/);
+        const attemptId = attemptRoute ? decodeURIComponent(attemptRoute[1] ?? '') : '';
+        if (attemptRoute && !SAFE_NAME.test(attemptId)) {
+          return json(response, 400, { error: 'The attempt name is invalid.' });
+        }
+        const from = url.searchParams.get('from') ?? '0';
+        if (attemptRoute?.[2] === 'log' && (!/^\d+$/.test(from) || !Number.isSafeInteger(Number(from)))) {
+          return json(response, 400, { error: 'The log offset must be a whole number of bytes.' });
+        }
+        try {
+          if (!rest) return json(response, 200, campaignSheet(resultsRoot, key));
+          if (rest === 'progression') {
+            const progression = campaignProgression(resultsRoot, key);
+            return progression
+              ? json(response, 200, progression)
+              : json(response, 404, { error: 'Progression is recorded for dependency campaigns only.' });
+          }
+          if (attemptRoute?.[2] === 'checks') {
+            return json(response, 200, attemptChecks(resultsRoot, key, attemptId));
+          }
+          if (attemptRoute?.[2] === 'package') {
+            return json(response, 200, attemptPackage(resultsRoot, key, attemptId));
+          }
+          if (attemptRoute) {
+            const slice = attemptLogSlice(resultsRoot, key, attemptId, Number(from));
+            const text = Buffer.from(slice.text);
+            response.writeHead(200, { 'content-type': 'text/plain; charset=utf-8',
+              'content-length': text.length, 'cache-control': 'no-store',
+              'x-stack-bench-log-offset': String(slice.offset) });
+            response.end(text);
+            return;
+          }
+        } catch {
+          // The evidence reader names real paths; a campaign or attempt that
+          // cannot be read is a miss, not a message.
+          return json(response, 404, { error: 'Not found' });
+        }
+        return json(response, 404, { error: 'Not found' });
+      }
+      if (request.method === 'POST' && url.pathname === '/api/campaigns') {
+        if (!allowLaunch) return json(response, 503, { error: 'Run controls are available inside the Stack Bench appliance.' });
+        if (!controlAuthorized(request, request.headers.host, token, controlSecret)) {
+          return json(response, 403, { error: 'The run request is not authorized.' });
+        }
+        if (!String(request.headers['content-type'] ?? '').toLowerCase().startsWith('application/json')) {
+          return json(response, 415, { error: 'Run requests must use JSON.' });
+        }
+        const input = await body(request);
+        const runRequest = input !== null && typeof input === 'object'
+          ? input as { planId?: unknown; outputName?: unknown } : {};
+        if (typeof runRequest.planId !== 'string' || typeof runRequest.outputName !== 'string'
+          || !SAFE_NAME.test(runRequest.outputName)) {
+          return json(response, 400, { error: 'Choose a test plan and a simple run name.' });
+        }
+        const plan = plans().find(item => item.id === runRequest.planId);
+        if (!plan || plan.state !== 'frozen') {
+          return json(response, 400, { error: 'The selected test plan is not ready to run.' });
+        }
+        const path = join(plansRoot, plan.file);
+        const output = join(resultsRoot, 'campaigns', runRequest.outputName);
+        if (existsSync(output)) return json(response, 409, { error: 'That run output already exists.' });
+        const reservation = `output:${runRequest.outputName}`;
+        if (launchReservations.has(reservation)) {
+          return json(response, 409, { error: 'That run output already has an active controller.' });
+        }
+        launchReservations.add(reservation);
+        const now = new Date().toISOString();
+        const operation = { schemaVersion: 1, id: randomUUID(), type: 'campaign.run', status: 'running',
+          createdAt: now, updatedAt: now, actor: 'local-operator', campaignId: plan.id,
+          campaignSha256: plan.sha256, outputName: runRequest.outputName };
+        feed.append(operation);
+        try {
+          const child = launch({ plan: { ...plan, path }, output, operationId: operation.id,
+            resultsRoot, feed, env: process.env });
+          if (typeof child?.once === 'function') {
+            child.once('error', () => launchReservations.delete(reservation));
+            child.once('exit', () => launchReservations.delete(reservation));
+          } else {
+            launchReservations.delete(reservation);
+          }
+          feed.append({ ...operation, pid: child?.pid ?? null });
+        } catch (error) {
+          launchReservations.delete(reservation);
+          feed.append({ schemaVersion: 1, id: operation.id, status: 'failed',
+            updatedAt: new Date().toISOString(), error: errorMessage(error) });
+          throw error;
+        }
+        return json(response, 202, operation);
+      }
+      return json(response, 404, { error: 'Not found' });
+    } catch (error) {
+      return json(response, 500, { error: errorMessage(error) });
+    }
+  });
+  // An open event stream is not an idle connection: the watchers stop and the
+  // streams end as the server closes, not once it has.
+  const closeServer = server.close.bind(server);
+  server.close = ((callback?: (error?: Error) => void) => {
+    stopEvents();
+    for (const listener of listeners) listener.end();
+    listeners.clear();
+    return closeServer(callback);
+  }) as typeof server.close;
+  return { server, token, allowLaunch };
+}
+
+async function main() {
+  const args = parseDashboardArgs(process.argv);
+  const { server, allowLaunch } = createDashboardServer(args);
+  await new Promise<void>((resolveListen, reject) => {
+    server.once('error', reject);
+    server.listen(args.port, args.host, resolveListen);
+  });
+  console.log(`Stack Bench dashboard: http://${args.host}:${args.port} (${allowLaunch ? 'controller' : 'read-only'})`);
+}
+
+if (import.meta.url === pathToFileURL(process.argv[1] ?? '').href) {
+  main().catch(error => { console.error(`stack-bench-dashboard: ${errorMessage(error)}`); process.exitCode = 2; });
+}
diff --git a/tools/stack-bench/dashboard/dashboard-views.ts b/tools/stack-bench/dashboard/dashboard-views.ts
new file mode 100644
index 00000000000..06c9a646df8
--- /dev/null
+++ b/tools/stack-bench/dashboard/dashboard-views.ts
@@ -0,0 +1,794 @@
+import { closeSync, existsSync, fstatSync, openSync, readSync, readdirSync, statSync }
+  from 'node:fs';
+import { basename, join, resolve } from 'node:path';
+
+import type { CampaignAttemptState } from '../src/campaigns/campaign-scheduler.js';
+import type { DependencyPromptSelection, DependencyState }
+  from '../src/progression/dependency-mode.js';
+import type { ProgressionState } from '../src/progression/progression-state.js';
+import type { CompiledCampaignPlan } from '../src/campaigns/campaign-compiler.js';
+import type { DependencyProgress } from '../src/campaigns/campaign-inspection.js';
+import type { GradeBundlePayload } from '../src/evidence/benchmark-run.js';
+import { ARTIFACT_FILE, readArtifactPayload } from '../src/evidence/artifacts.js';
+import { CAMPAIGN_FILE } from '../src/campaigns/campaign-path.js';
+import { campaignFacts, inspectCampaignAttempt } from '../src/campaigns/campaign-inspection.js';
+import { campaignLockIsActive } from '../src/campaigns/campaign-lock.js';
+import { campaignProgressionOwner } from '../src/campaigns/campaign-compiler.js';
+import { compileProgressionInput, dependencyRuntimeDefinition }
+  from '../src/progression/progression-definition.js';
+import { progressionEngine } from '../src/progression/progression-engine.js';
+import { readCampaignState } from '../src/campaigns/campaign-scheduler.js';
+import { readProgressionState } from '../src/progression/progression-state.js';
+import { redactCredentials } from '../src/evidence/diagnostic-sanitizer.js';
+import { repairBudgetLimit } from '../src/progression/repair-plan.js';
+import { MAX_LOG_BYTES, contained, parseRunProgress, readTextTail,
+  walkPublicExecutionArtifacts } from './dashboard-model.js';
+import type { DashboardArtifact } from './dashboard-model.js';
+import { attemptExcluded, attemptMetrics, attemptStalling, compareCampaign, median }
+  from './public/metrics.js';
+
+const CAMPAIGN_KEY = /^[a-z0-9][a-z0-9.-]*$/;
+const GRADE_DIRECTORY = /^(?:first-build-l(\d+)-grading|l(\d+)-fix(\d+)-grading|grading)$/i;
+const PROGRESSION_ATTEMPT = /^attempt-(\d+)$/i;
+const LOG_FILE = 'process.stdout.log';
+
+type ControllerActive = (directory: string, campaign: CompiledCampaignPlan) => boolean;
+type InspectedAttempt = ReturnType<typeof inspectCampaignAttempt>;
+
+interface ViewOptions {
+  controllerActive?: ControllerActive;
+}
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+function percentage(value: number | null | undefined): number | null {
+  return value == null ? null : Math.round(value * 1000) / 10;
+}
+
+function campaignDirectory(resultsRoot: string, key: string): string {
+  if (!CAMPAIGN_KEY.test(key)) throw new Error('campaign key is invalid');
+  return contained(join(resolve(resultsRoot), 'campaigns'), key, 'campaign');
+}
+
+function fileFingerprint(path: string): string | null {
+  if (!existsSync(path)) return null;
+  const stat = statSync(path);
+  return `${stat.size}:${stat.mtimeMs}`;
+}
+
+// Every file whose change can move a number in the view, and nothing else: a
+// running campaign that has written nothing since the last read is unchanged.
+function executionFingerprints(directory: string, files: readonly string[]): string[] {
+  const attemptsRoot = join(directory, 'attempts');
+  if (!existsSync(attemptsRoot)) return [];
+  const parts: string[] = [];
+  for (const attempt of readdirSync(attemptsRoot, { withFileTypes: true })) {
+    if (!attempt.isDirectory()) continue;
+    const attemptDirectory = join(attemptsRoot, attempt.name);
+    for (const execution of readdirSync(attemptDirectory, { withFileTypes: true })) {
+      if (!execution.isDirectory()) continue;
+      for (const file of files) {
+        const stamp = fileFingerprint(join(attemptDirectory, execution.name, file));
+        if (stamp) parts.push(`${attempt.name}/${execution.name}/${file}:${stamp}`);
+      }
+    }
+  }
+  return parts.sort();
+}
+
+function campaignFingerprint(directory: string, files: readonly string[],
+  executionFiles: readonly string[]): string {
+  return [...files.map(file => `${file}:${fileFingerprint(join(directory, file)) ?? 'missing'}`),
+    ...executionFingerprints(directory, executionFiles)].join('|');
+}
+
+// Overview
+
+export interface OverviewCampaign {
+  key: string;
+  id: string;
+  title: string;
+  status: string;
+  mode: string;
+  levels: number[];
+  repetitions: number;
+  provisional: boolean;
+  updatedAt: string | null;
+  // The mode's official score per stack, as a percentage; null until a stack
+  // has a comparable result.
+  scores: Record<string, number | null>;
+  attempts: { total: number; running: number; completed: number };
+}
+
+export interface UnreadableOverviewCampaign {
+  key: string;
+  id: string;
+  title: string;
+  status: 'unreadable';
+  error: string;
+}
+
+export type OverviewEntry = OverviewCampaign | UnreadableOverviewCampaign;
+
+const overviewCache = new Map<string, {
+  fingerprint: string;
+  plan: CompiledCampaignPlan;
+  campaign: OverviewCampaign;
+}>();
+
+function overviewCampaign(directory: string): {
+  plan: CompiledCampaignPlan;
+  campaign: OverviewCampaign;
+} {
+  const { plan, state } = readCampaignState(directory, { requireCurrentInputs: false });
+  const attempts = state.attempts.map(attempt =>
+    inspectCampaignAttempt(plan, attempt, directory));
+  const comparison = compareCampaign<InspectedAttempt>({ attempts });
+  const scores = Object.fromEntries(plan.stacks.map(stack =>
+    [stack.id, percentage(comparison.rows.find(row => row.stack === stack.id)?.final ?? null)]));
+  return {
+    plan,
+    campaign: {
+      key: basename(resolve(directory)),
+      id: plan.id,
+      title: plan.title,
+      status: state.status,
+      mode: plan.definition.mode?.id ?? 'sequential',
+      levels: plan.definition.levels,
+      repetitions: plan.definition.repetitions,
+      provisional: campaignFacts(plan).grading.status !== 'qualified',
+      updatedAt: state.updatedAt,
+      scores,
+      attempts: { total: state.summary.total, running: state.summary.running,
+        completed: state.summary.completed },
+    },
+  };
+}
+
+// Liveness is one more fact about a running campaign, not a condition of
+// reading it: the read-only host view has no Docker socket to ask.
+function controllerInterrupted(probe: ControllerActive, directory: string,
+  plan: CompiledCampaignPlan, status: string): boolean {
+  if (status !== 'running') return false;
+  try { return !probe(directory, plan); } catch { return false; }
+}
+
+function withInterruption(campaign: OverviewCampaign, interrupted: boolean): OverviewCampaign {
+  if (!interrupted) return campaign;
+  return { ...campaign, status: 'attention-required',
+    attempts: { ...campaign.attempts, running: 0 } };
+}
+
+// Summaries only: no attempt list, no log, no plan. The fingerprint covers a
+// running campaign too, so a poll that finds nothing changed costs one stat
+// per evidence file instead of a full replay.
+export function overviewSummary(campaignsRoot: string,
+  { controllerActive = campaignLockIsActive }: ViewOptions = {}): OverviewEntry[] {
+  if (!existsSync(campaignsRoot)) return [];
+  const campaigns: OverviewEntry[] = [];
+  for (const entry of readdirSync(campaignsRoot, { withFileTypes: true })) {
+    if (!entry.isDirectory()) continue;
+    const directory = join(campaignsRoot, entry.name);
+    if (!existsSync(join(directory, CAMPAIGN_FILE.state))
+      || !existsSync(join(directory, CAMPAIGN_FILE.plan))) continue;
+    try {
+      const fingerprint = campaignFingerprint(directory,
+        [CAMPAIGN_FILE.plan, CAMPAIGN_FILE.state], [ARTIFACT_FILE.run]);
+      const cached = overviewCache.get(directory);
+      const fresh = cached?.fingerprint === fingerprint
+        ? { plan: cached.plan, campaign: cached.campaign } : overviewCampaign(directory);
+      overviewCache.set(directory, { fingerprint, ...fresh });
+      campaigns.push(withInterruption(fresh.campaign, controllerInterrupted(controllerActive,
+        directory, fresh.plan, fresh.campaign.status)));
+    } catch (error) {
+      campaigns.push({ key: entry.name, id: entry.name, title: entry.name,
+        status: 'unreadable', error: errorMessage(error) });
+    }
+  }
+  return campaigns.sort((left, right) =>
+    String('updatedAt' in right ? right.updatedAt ?? '' : '')
+      .localeCompare(String('updatedAt' in left ? left.updatedAt ?? '' : '')));
+}
+
+// Campaign sheet
+
+export interface SheetFacts {
+  mode: string;
+  workSelection: string | null;
+  repairSelection: string | null;
+  repairBudget: number;
+  agent: string | null;
+  model: string | null;
+  guidance: string | null;
+  recipes: Array<{ level: number; id: string | null; version: string | null }>;
+  timeLimitMinutes: number;
+  spendLimitUsd: number | null;
+  controllerImage: string | null;
+  buildImage: string | null;
+  planSha256: string;
+  grading: string;
+  gradingReasons: string[];
+}
+
+export interface ClimbPoint {
+  score: number;
+  max: number;
+  level: number | null;
+  unaided: boolean;
+}
+
+export interface SheetAttempt {
+  id: string;
+  repetition: number;
+  status: string;
+  phase: string;
+  stalling: boolean;
+  excluded: string | null;
+  continued: boolean;
+  logUpdatedAt: string | null;
+  score: number | null;
+  unaided: number | null;
+  repairs: { used: number; budget: number };
+  timeSec: number | null;
+  spendUsd: number | null;
+  climb: ClimbPoint[];
+}
+
+export interface SheetLevel {
+  level: number;
+  unaided: { score: number; max: number } | null;
+  score: { score: number; max: number } | null;
+  repairs: number;
+}
+
+export interface SheetQuestline {
+  id: string;
+  title: string;
+  score: number | null;
+  nodes: Array<{ id: string; status: string }>;
+}
+
+export interface SheetStack {
+  stack: string;
+  score: number | null;
+  points: { score: number; max: number } | null;
+  unaided: number | null;
+  continued: boolean;
+  repairs: { used: number; budget: number };
+  regressions: number;
+  timeSec: number | null;
+  spendUsd: number | null;
+  n: number;
+  climb: ClimbPoint[];
+  attempts: SheetAttempt[];
+  levels: SheetLevel[] | null;
+  questlines: SheetQuestline[] | null;
+}
+
+export interface CampaignSheet {
+  key: string;
+  id: string;
+  title: string;
+  status: string;
+  mode: string;
+  levels: number[];
+  repetitions: number;
+  provisional: boolean;
+  mixedScope: boolean;
+  executions: number;
+  // A dependency campaign that stopped between executions is the one thing an
+  // operator can restart; the server checks the same three facts again.
+  resumable: boolean;
+  createdAt: string;
+  updatedAt: string;
+  facts: SheetFacts;
+  stacks: SheetStack[];
+}
+
+interface SheetAttemptView {
+  inspected: InspectedAttempt;
+  attempt: SheetAttempt;
+  series: ClimbPoint[];
+}
+
+function sheetFacts(plan: CompiledCampaignPlan): SheetFacts {
+  const mode = plan.definition.mode;
+  const policy = plan.dependencyPolicy?.definition ?? null;
+  const agent = plan.agents[0] ?? null;
+  const facts = campaignFacts(plan);
+  return {
+    mode: mode.id,
+    workSelection: policy?.workSelection ?? mode.workSelection ?? null,
+    repairSelection: policy?.repair.selection ?? plan.definition.repair.selection,
+    repairBudget: repairBudgetLimit(plan.definition.repair, {
+      features: plan.featureCatalog?.definition.nodes.length ?? 1,
+      depths: plan.definition.levels.length,
+    }),
+    agent: agent?.adapter ?? null,
+    model: agent?.model ?? null,
+    guidance: plan.attempts[0]?.guidance ?? null,
+    recipes: facts.recipes,
+    timeLimitMinutes: plan.definition.budgets.attemptTimeoutMinutes,
+    spendLimitUsd: plan.definition.budgets.maxCostUsdPerAttempt,
+    controllerImage: facts.runtime.controllerImage,
+    buildImage: facts.runtime.buildImage,
+    planSha256: plan.contentSha256,
+    grading: gradingStatus(facts.grading),
+    gradingReasons: [...new Set(facts.grading.levels.flatMap(level => level.reasons ?? []))],
+  };
+}
+
+// A campaign whose levels disagree is partly publishable and says so.
+function gradingStatus(grading: ReturnType<typeof campaignFacts>['grading']): string {
+  const levels = new Set(grading.levels.map(level => level.status));
+  return levels.size > 1 ? 'partial' : grading.status;
+}
+
+function dependencyRepairs(plan: CompiledCampaignPlan,
+  dependency: DependencyProgress): { used: number; budget: number } {
+  return {
+    used: dependency.history?.repairAttempts ?? 0,
+    budget: repairBudgetLimit(plan.definition.repair, {
+      features: dependency.nodes.length,
+      depths: plan.definition.levels.length,
+    }),
+  };
+}
+
+function attemptRegressions(attempt: InspectedAttempt): number {
+  if (attempt.dependency) return attempt.dependency.regressions ?? 0;
+  return (attempt.result?.levels ?? []).reduce((total, level) => total + level.regressions, 0);
+}
+
+// Continued: the attempt resumed on a repair grant, so its first grade is a
+// checkpoint baseline rather than an unaided build.
+function attemptContinued(attempt: InspectedAttempt): boolean {
+  if (attempt.dependency) {
+    return attempt.dependency.attempts.features.some(feature =>
+      typeof feature.granted === 'number' && feature.granted > 0);
+  }
+  return (attempt.result?.levels ?? []).some(level => level.continued);
+}
+
+function sheetLevels(attempt: InspectedAttempt | null): SheetLevel[] {
+  return (attempt?.result?.levels ?? []).map(level => ({
+    level: level.level,
+    unaided: level.firstAbort ? null : level.firstScore,
+    score: level.finalScore,
+    repairs: level.used,
+  }));
+}
+
+function sheetQuestlines(dependency: DependencyProgress): SheetQuestline[] {
+  const status = new Map(dependency.nodes.map(node => [node.id, node.status]));
+  const scored = new Map((dependency.score?.questlines ?? [])
+    .map(questline => [questline.id, questline.percentage ?? null]));
+  return (dependency.questlines ?? []).map(questline => ({
+    id: questline.id,
+    title: questline.title,
+    score: scored.get(questline.id) ?? null,
+    nodes: questline.nodes.map(id => ({ id, status: status.get(id) ?? 'locked' })),
+  }));
+}
+
+function sheetAttemptView(plan: CompiledCampaignPlan, state: CampaignAttemptState,
+  directory: string, interrupted: boolean): SheetAttemptView {
+  const inspected = inspectCampaignAttempt(plan, state, directory);
+  const execution = inspected.execution;
+  const logPath = execution
+    ? join(contained(directory, execution.output, 'campaign execution'), LOG_FILE) : null;
+  const log = logPath ? readTextTail(logPath) : '';
+  const logUpdatedAt = logPath && existsSync(logPath)
+    ? new Date(statSync(logPath).mtimeMs).toISOString() : null;
+  const running = inspected.status === 'running' && !interrupted;
+  const repairLimit = repairBudgetLimit(plan.definition.repair, {
+    features: plan.featureCatalog?.definition.nodes.length ?? 1,
+    depths: plan.definition.levels.length,
+  });
+  const progress = parseRunProgress(log, { repairs: repairLimit,
+    running, status: inspected.status,
+    dependency: plan.definition.mode?.id === 'dependency' });
+  const metrics = attemptMetrics({ ...inspected, logUpdatedAt });
+  const repairs = inspected.dependency ? dependencyRepairs(plan, inspected.dependency) : null;
+  return {
+    inspected,
+    series: progress.series,
+    attempt: {
+      id: inspected.id,
+      repetition: inspected.repetition,
+      status: interrupted && inspected.status === 'running' ? 'interrupted' : inspected.status,
+      phase: interrupted && inspected.status === 'running'
+        ? 'Controller stopped before completion' : progress.phase,
+      stalling: attemptStalling({ ...inspected, logUpdatedAt }, progress.series),
+      excluded: attemptExcluded(inspected),
+      continued: attemptContinued(inspected),
+      logUpdatedAt,
+      score: percentage(metrics?.final ?? null),
+      unaided: percentage(metrics?.first ?? null),
+      repairs: repairs ?? { used: metrics?.repairs ?? 0, budget: repairLimit },
+      timeSec: metrics?.duration ?? null,
+      spendUsd: metrics?.spend ?? null,
+      climb: progress.series,
+    },
+  };
+}
+
+const sheetCache = new Map<string, { fingerprint: string; sheet: CampaignSheet }>();
+
+// Facts and per-stack figures. No log text and no package walk: the climb and
+// the phase come from the run output the controller already writes.
+export function campaignSheet(resultsRoot: string, key: string,
+  { controllerActive = campaignLockIsActive }: ViewOptions = {}): CampaignSheet {
+  const directory = campaignDirectory(resultsRoot, key);
+  const fingerprint = campaignFingerprint(directory, [CAMPAIGN_FILE.plan, CAMPAIGN_FILE.state],
+    [ARTIFACT_FILE.run, ARTIFACT_FILE.progressionState, LOG_FILE]);
+  const { plan, state } = readCampaignState(directory, { requireCurrentInputs: false });
+  const interrupted = controllerInterrupted(controllerActive, directory, plan, state.status);
+  const cacheKey = `${directory}:${interrupted ? 'interrupted' : 'live'}`;
+  const cached = sheetCache.get(cacheKey);
+  if (cached?.fingerprint === fingerprint) return cached.sheet;
+  const views = state.attempts.map(attempt =>
+    sheetAttemptView(plan, attempt, directory, interrupted));
+  const comparison = compareCampaign<InspectedAttempt>({
+    attempts: views.map(view => view.inspected) });
+  const dependency = plan.definition.mode?.id === 'dependency';
+  const plannedRepairLimit = repairBudgetLimit(plan.definition.repair, {
+    features: plan.featureCatalog?.definition.nodes.length ?? 1,
+    depths: plan.definition.levels.length,
+  });
+  const stacks = plan.stacks.map(stack => {
+    const owned = views.filter(view => view.inspected.stack === stack.id);
+    const row = comparison.rows.find(entry => entry.stack === stack.id);
+    // Figures a repetition cannot average — the climb, the questline board, the
+    // per-level rows — come from the newest attempt that actually ran.
+    const latest = owned.findLast(view => view.inspected.execution !== null) ?? null;
+    const lead = latest?.inspected ?? null;
+    const repairs = lead?.dependency ? dependencyRepairs(plan, lead.dependency) : null;
+    const metrics = lead ? attemptMetrics(lead) : null;
+    return {
+      stack: stack.id,
+      score: percentage(row?.final ?? null),
+      points: dependency ? uniquePoints(lead?.dependency ?? null) : metrics?.raw.final ?? null,
+      unaided: percentage(row?.first ?? null),
+      continued: owned.some(view => view.attempt.continued),
+      repairs: repairs ?? { used: Math.round(row?.repairs ?? 0),
+        budget: plannedRepairLimit },
+      regressions: Math.round(median(owned.map(view => attemptRegressions(view.inspected))) ?? 0),
+      timeSec: row?.duration ?? null,
+      spendUsd: row?.spend ?? null,
+      n: row?.n ?? 0,
+      climb: latest?.series ?? [],
+      attempts: owned.map(view => view.attempt),
+      levels: dependency ? null : sheetLevels(lead),
+      questlines: lead?.dependency ? sheetQuestlines(lead.dependency) : null,
+    };
+  });
+  const sheet: CampaignSheet = {
+    key: basename(resolve(directory)),
+    id: plan.id,
+    title: plan.title,
+    status: interrupted ? 'attention-required' : state.status,
+    mode: plan.definition.mode?.id ?? 'sequential',
+    levels: plan.definition.levels,
+    repetitions: plan.definition.repetitions,
+    provisional: campaignFacts(plan).grading.status !== 'qualified',
+    mixedScope: comparison.mixedScope,
+    executions: state.summary.executions,
+    resumable: dependency && state.status === 'prepared' && state.summary.executions > 0,
+    createdAt: state.createdAt,
+    updatedAt: state.updatedAt,
+    facts: sheetFacts(plan),
+    stacks,
+  };
+  sheetCache.set(cacheKey, { fingerprint, sheet });
+  return sheet;
+}
+
+function uniquePoints(dependency: DependencyProgress | null): { score: number; max: number } | null {
+  const unique = dependency?.score?.uniqueChecks;
+  if (!unique || unique.passedPoints == null || unique.availablePoints == null) return null;
+  return { score: unique.passedPoints, max: unique.availablePoints };
+}
+
+// Attempt sub-resources
+
+function attemptState(directory: string, attemptId: string): CampaignAttemptState {
+  const { state } = readCampaignState(directory, { requireCurrentInputs: false });
+  const attempt = state.attempts.find(item => item.plan.id === attemptId);
+  if (!attempt) throw new Error('campaign attempt does not exist');
+  return attempt;
+}
+
+export interface AttemptCheckGrade {
+  id: string;
+  level: number | null;
+  round: number | null;
+  score: { score: number; max: number } | null;
+  error?: string;
+}
+
+export interface AttemptCheck {
+  key: string;
+  id: string;
+  description: string;
+  points: number;
+  feature: string;
+  outcome: string;
+  regressed: boolean;
+  history: string[];
+}
+
+export interface AttemptChecks {
+  attemptId: string;
+  stack: string;
+  grades: AttemptCheckGrade[];
+  checks: AttemptCheck[];
+}
+
+function checkOutcome(evidence: unknown): string {
+  const status = evidence !== null && typeof evidence === 'object' && 'status' in evidence
+    ? (evidence as { status?: unknown }).status : null;
+  if (status === 'passed') return 'pass';
+  if (status === 'failed') return 'fail';
+  return 'not-run';
+}
+
+function gradeDirectories(executionDirectory: string): AttemptCheckGrade[] {
+  if (!existsSync(executionDirectory)) return [];
+  const progression = join(executionDirectory, 'progression');
+  if (existsSync(progression)) {
+    return readdirSync(progression, { withFileTypes: true })
+      .filter(entry => entry.isDirectory() && PROGRESSION_ATTEMPT.test(entry.name))
+      .map(entry => ({ id: `progression/${entry.name}`,
+        level: null, round: Number(PROGRESSION_ATTEMPT.exec(entry.name)?.[1] ?? 0), score: null }))
+      .sort((left, right) => (left.round ?? 0) - (right.round ?? 0));
+  }
+  return readdirSync(executionDirectory, { withFileTypes: true })
+    .filter(entry => entry.isDirectory() && GRADE_DIRECTORY.test(entry.name))
+    .map(entry => {
+      const match = GRADE_DIRECTORY.exec(entry.name);
+      const level = match?.[1] ?? match?.[2] ?? null;
+      return { id: entry.name, level: level === null ? null : Number(level),
+        round: match?.[3] === undefined ? 0 : Number(match[3]), score: null };
+    })
+    .sort((left, right) => (left.level ?? 0) - (right.level ?? 0)
+      || (left.round ?? 0) - (right.round ?? 0));
+}
+
+// Per-check outcome and the history of every grade that reported it: the
+// question "did this ever pass" has no other answer in the evidence.
+export function attemptChecks(resultsRoot: string, key: string, attemptId: string): AttemptChecks {
+  const directory = campaignDirectory(resultsRoot, key);
+  const attempt = attemptState(directory, attemptId);
+  const execution = attempt.executions.at(-1) ?? null;
+  if (!execution) return { attemptId, stack: attempt.plan.stack, grades: [], checks: [] };
+  const executionDirectory = contained(directory, execution.output, 'campaign execution');
+  const grades = gradeDirectories(executionDirectory);
+  const checks = new Map<string, AttemptCheck>();
+  grades.forEach((grade, index) => {
+    const path = join(executionDirectory, grade.id, ARTIFACT_FILE.gradeBundle);
+    if (!existsSync(path)) {
+      grade.error = 'grade bundle is missing';
+      return;
+    }
+    let payload;
+    try {
+      payload = readArtifactPayload<GradeBundlePayload>(path, { expectedKind: 'grade_bundle' });
+    } catch (error) {
+      grade.error = errorMessage(error);
+      return;
+    }
+    grade.score = payload.totals?.score == null || payload.totals.max == null
+      ? null : { score: payload.totals.score, max: payload.totals.max };
+    for (const suite of Object.values(payload.suites ?? {})) {
+      for (const feature of suite.features ?? []) {
+        for (const criterion of feature.criteria ?? []) {
+          const stableKey = criterion.stableKey ?? `${feature.name ?? ''}.${criterion.id ?? ''}`;
+          const entry = checks.get(stableKey) ?? { key: stableKey, id: criterion.id ?? stableKey,
+            description: criterionDescription(criterion), points: criterion.points ?? 0,
+            feature: feature.name ?? '', outcome: 'not-run', regressed: false,
+            history: grades.map(() => 'not-run') };
+          entry.history[index] = checkOutcome(criterion.evidence);
+          checks.set(stableKey, entry);
+        }
+      }
+    }
+  });
+  for (const check of checks.values()) {
+    const conclusive = check.history.filter(outcome => outcome !== 'not-run');
+    check.outcome = conclusive.at(-1) ?? 'not-run';
+    check.regressed = conclusive.some((outcome, index) =>
+      outcome === 'fail' && conclusive.slice(0, index).includes('pass'));
+  }
+  return { attemptId, stack: attempt.plan.stack, grades, checks: [...checks.values()] };
+}
+
+// The grade bundle names the criterion text `desc`.
+function criterionDescription(criterion: object): string {
+  const record = criterion as { desc?: unknown; description?: unknown };
+  if (typeof record.desc === 'string') return record.desc;
+  return typeof record.description === 'string' ? record.description : '';
+}
+
+export interface AttemptPackage {
+  attemptId: string;
+  stack: string;
+  executions: Array<{
+    executionId: string;
+    ordinal: number;
+    status: string;
+    artifacts: DashboardArtifact[];
+    visuals: DashboardArtifact[];
+    truncated: boolean;
+  }>;
+}
+
+export function attemptPackage(resultsRoot: string, key: string,
+  attemptId: string): AttemptPackage {
+  const directory = campaignDirectory(resultsRoot, key);
+  const attempt = attemptState(directory, attemptId);
+  return {
+    attemptId,
+    stack: attempt.plan.stack,
+    executions: attempt.executions.map(execution => {
+      const scanned = walkPublicExecutionArtifacts(directory,
+        contained(directory, execution.output, 'campaign execution'));
+      return { executionId: execution.id, ordinal: execution.ordinal, status: execution.status,
+        artifacts: scanned.artifacts,
+        visuals: scanned.artifacts.filter(artifact => artifact.kind === 'visual'),
+        truncated: scanned.truncated };
+    }),
+  };
+}
+
+export interface AttemptLogSlice {
+  attemptId: string;
+  from: number;
+  offset: number;
+  size: number;
+  text: string;
+}
+
+// Bytes after an offset, so a following view pays for growth rather than for
+// the whole log on every poll.
+export function attemptLogSlice(resultsRoot: string, key: string, attemptId: string,
+  fromOffset = 0): AttemptLogSlice {
+  const directory = campaignDirectory(resultsRoot, key);
+  const attempt = attemptState(directory, attemptId);
+  const execution = attempt.executions.at(-1) ?? null;
+  const path = execution
+    ? join(contained(directory, execution.output, 'campaign execution'), LOG_FILE) : null;
+  if (!path || !existsSync(path)) {
+    return { attemptId, from: fromOffset, offset: 0, size: 0, text: '' };
+  }
+  const descriptor = openSync(path, 'r');
+  try {
+    const size = fstatSync(descriptor).size;
+    // A rotated or truncated log invalidates the caller's offset.
+    const start = Math.min(Math.max(0, fromOffset), size);
+    const length = Math.min(size - start, MAX_LOG_BYTES);
+    const buffer = Buffer.alloc(length);
+    if (length) readSync(descriptor, buffer, 0, length, start);
+    return { attemptId, from: fromOffset, offset: start + length, size,
+      text: redactCredentials(buffer.toString('utf8')) };
+  } finally {
+    closeSync(descriptor);
+  }
+}
+
+// Campaign progression
+
+export interface ProgressionCatalogNode {
+  id: string;
+  title: string;
+  questline: string;
+  depth: number;
+  dependencies: string[];
+}
+
+export interface ProgressionStep {
+  sequence: number;
+  action: 'build' | 'repair' | 'grant';
+  targets: string[];
+  // Node status after the event, index-aligned with `nodes`.
+  statuses: string[];
+  score: number | null;
+  repairs: number;
+}
+
+export interface ProgressionTrack {
+  stack: string;
+  attemptId: string;
+  updatedAt: string;
+  steps: ProgressionStep[];
+}
+
+export interface CampaignProgression {
+  key: string;
+  depths: number[];
+  questlines: Array<{ id: string; title: string; nodes: string[] }>;
+  nodes: ProgressionCatalogNode[];
+  stacks: ProgressionTrack[];
+}
+
+function progressionSnapshot(state: ProgressionState, nodeIds: readonly string[]): {
+  statuses: string[];
+  score: number | null;
+  repairs: number;
+} {
+  const average = progressionEngine.score(state).questlineAveragePercentage;
+  return {
+    statuses: nodeIds.map(id => state.nodes[id]?.status ?? 'locked'),
+    score: average == null ? null : Math.round(average * 10) / 10,
+    repairs: state.attempts.filter(attempt => attempt.repair !== undefined).length,
+  };
+}
+
+function progressionSteps(state: DependencyState, nodeIds: readonly string[]): ProgressionStep[] {
+  let replay = progressionEngine.initialize(state.definition);
+  return state.events.map(event => {
+    const action = progressionEngine.nextAction(replay);
+    if (event.type === 'repairs-granted') {
+      replay = progressionEngine.grantRepairs(replay, event.grant);
+      return { sequence: event.sequence, action: 'grant' as const,
+        targets: [...event.grant.nodeIds], ...progressionSnapshot(replay, nodeIds) };
+    }
+    const targets = action.type === 'terminal'
+      ? [] : [...(action.prompt as DependencyPromptSelection).nodeIds];
+    const repair = action.type === 'repair';
+    replay = progressionEngine.recordResult(replay, event.result);
+    return { sequence: event.sequence, action: repair ? 'repair' as const : 'build' as const,
+      targets, ...progressionSnapshot(replay, nodeIds) };
+  });
+}
+
+const progressionCache = new Map<string, { fingerprint: string; view: CampaignProgression }>();
+
+// The catalog subgraph the campaign runs, plus one node-status snapshot per
+// progression event: the graph and its replay come from the same read.
+export function campaignProgression(resultsRoot: string, key: string): CampaignProgression | null {
+  const directory = campaignDirectory(resultsRoot, key);
+  const { plan, state } = readCampaignState(directory, { requireCurrentInputs: false });
+  if (plan.definition.mode?.id !== 'dependency' || !plan.featureCatalog
+    || !plan.dependencyPolicy) return null;
+  const fingerprint = campaignFingerprint(directory, [CAMPAIGN_FILE.plan, CAMPAIGN_FILE.state],
+    [ARTIFACT_FILE.progressionState]);
+  const cached = progressionCache.get(directory);
+  if (cached?.fingerprint === fingerprint) return cached.view;
+  const progression = compileProgressionInput(dependencyRuntimeDefinition(
+    plan.featureCatalog, plan.dependencyPolicy));
+  const definition = progression.definition;
+  const nodeIds = definition.nodes.map(node => node.id);
+  const owned = new Set(nodeIds);
+  const stacks: ProgressionTrack[] = [];
+  for (const attempt of state.attempts) {
+    const execution = attempt.executions.at(-1) ?? null;
+    if (!execution) continue;
+    const path = join(contained(directory, execution.output, 'campaign execution'),
+      ARTIFACT_FILE.progressionState);
+    if (!existsSync(path)) continue;
+    const stored = readProgressionState(path, {
+      progression,
+      featureCatalogIdentity: plan.featureCatalog.identity,
+      dependencyPolicyIdentity: plan.dependencyPolicy.identity,
+      owner: campaignProgressionOwner(plan, attempt.plan, { workspace: true }),
+    });
+    stacks.push({ stack: attempt.plan.stack, attemptId: attempt.plan.id,
+      updatedAt: new Date(statSync(path).mtimeMs).toISOString(),
+      steps: progressionSteps(stored.state as DependencyState, nodeIds) });
+  }
+  const view: CampaignProgression = {
+    key: basename(resolve(directory)),
+    depths: [...new Set(definition.nodes.map(node => node.level))].sort((a, b) => a - b),
+    questlines: definition.questlines.map(questline => ({ id: questline.id,
+      title: questline.title, nodes: [...questline.nodes] })),
+    nodes: definition.nodes.map(node => ({ id: node.id, title: node.title,
+      questline: node.questline, depth: node.level,
+      dependencies: node.dependencies.filter(id => owned.has(id)) })),
+    stacks,
+  };
+  progressionCache.set(directory, { fingerprint, view });
+  return view;
+}
diff --git a/tools/stack-bench/dashboard/public/app.ts b/tools/stack-bench/dashboard/public/app.ts
new file mode 100644
index 00000000000..cdae43e0f16
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/app.ts
@@ -0,0 +1,344 @@
+/// <reference lib="dom" />
+/// <reference lib="dom.iterable" />
+
+// The client: real paths, one event stream, and keyed reconciliation so a
+// refresh does not move what the pointer is on. Every view is a pure function
+// of data; the only DOM work in the dashboard happens here.
+
+import type { AttemptChecks, AttemptPackage, CampaignProgression, CampaignSheet, OverviewEntry }
+  from '../dashboard-views.js';
+import type { DashboardPlan } from '../dashboard-model.js';
+import { type QuestlineView, campaignPage, replayTimeline } from './views/campaign.js';
+import { type AttemptTab, attemptPage } from './views/attempt.js';
+import { type CampaignFilter, campaignsPage } from './views/campaigns.js';
+import { type Page, type RunForm, afterRun, plansPage, runName, topbar }
+  from './views/plans.js';
+import { esc } from './format.js';
+
+const FALLBACK_MS = 15_000;
+const TABS: readonly AttemptTab[] = ['checks', 'screenshots', 'files', 'log'];
+const VIEWS: readonly QuestlineView[] = ['grid', 'graph', 'replay'];
+const FILTERS: readonly CampaignFilter[] = ['all', 'attention', 'completed', 'ready'];
+
+interface Route {
+  key: string;
+  attempt: string;
+  plans: boolean;
+  filter: CampaignFilter;
+  view: QuestlineView;
+  step: number;
+  tab: AttemptTab;
+}
+
+const state = {
+  overview: [] as OverviewEntry[],
+  plans: [] as DashboardPlan[],
+  canStart: false,
+  csrfToken: '',
+  form: { planId: '', outputName: '', secret: '', error: '' } as RunForm,
+  sheets: new Map<string, CampaignSheet>(),
+  progression: new Map<string, CampaignProgression | null>(),
+  checks: new Map<string, AttemptChecks>(),
+  evidence: new Map<string, AttemptPackage>(),
+  log: { attempt: '', text: '', offset: 0 },
+};
+let fallback = 0;
+let playing = 0;
+
+function route(): Route {
+  const url = new URL(location.href);
+  const parts = url.pathname.split('/').filter(Boolean);
+  const pick = <Value extends string>(values: readonly Value[], name: string, fall: Value): Value =>
+    values.find(value => value === url.searchParams.get(name)) ?? fall;
+  return {
+    key: parts[0] === 'c' ? parts[1] ?? '' : '',
+    attempt: parts[2] === 'a' ? parts[3] ?? '' : '',
+    plans: parts[0] === 'plans',
+    filter: pick(FILTERS, 'filter', 'all'),
+    view: pick(VIEWS, 'questlines', 'grid'),
+    step: Math.max(0, Number(url.searchParams.get('step') ?? 0)),
+    tab: pick(TABS, 'tab', 'checks'),
+  };
+}
+
+async function read<Payload>(url: string): Promise<Payload | null> {
+  try {
+    const response = await fetch(url, { headers: { accept: 'application/json' } });
+    if (!response.ok) return null;
+    return await response.json() as Payload;
+  } catch {
+    return null;
+  }
+}
+
+function attemptUrl(current: Route, suffix: string): string {
+  return `/api/campaigns/${encodeURIComponent(current.key)}`
+    + `/attempts/${encodeURIComponent(current.attempt)}/${suffix}`;
+}
+
+async function readLog(current: Route): Promise<void> {
+  if (state.log.attempt !== current.attempt) state.log = { attempt: current.attempt, text: '', offset: 0 };
+  try {
+    const response = await fetch(attemptUrl(current, `log?from=${state.log.offset}`));
+    if (!response.ok) return;
+    state.log.text += await response.text();
+    state.log.offset = Number(response.headers.get('x-stack-bench-log-offset') ?? state.log.offset);
+  } catch { /* the stream reconnects and asks again */ }
+}
+
+function chrome(current: Route): string {
+  const sheet = state.sheets.get(current.key) ?? null;
+  const page: Page = current.plans ? 'plans'
+    : current.key && !current.attempt ? 'campaign' : 'campaigns';
+  return topbar({ page, key: current.key, canStart: state.canStart, error: state.form.error,
+    resumable: state.canStart && page === 'campaign' && (sheet?.resumable ?? false) });
+}
+
+function page(current: Route): string {
+  const sheet = state.sheets.get(current.key) ?? null;
+  if (current.plans) {
+    return plansPage({ plans: state.plans, canStart: state.canStart, form: state.form });
+  }
+  if (!current.key) {
+    const running = state.overview.filter(campaign => campaign.status === 'running')
+      .map(campaign => state.sheets.get(campaign.key))
+      .filter((entry): entry is CampaignSheet => entry !== undefined);
+    return campaignsPage({ campaigns: state.overview, sheets: running, filter: current.filter });
+  }
+  if (!sheet) return `<div class="page"><div class="crumbs"><a href="/">Campaigns</a> / `
+    + `<b>${esc(current.key)}</b></div></div>`;
+  if (current.attempt) {
+    return attemptPage({ sheet, attemptId: current.attempt, tab: current.tab,
+      checks: state.checks.get(current.attempt) ?? null,
+      evidence: state.evidence.get(current.attempt) ?? null,
+      log: state.log.attempt === current.attempt ? state.log.text : '' });
+  }
+  return campaignPage({ sheet, progression: state.progression.get(current.key) ?? null,
+    view: current.view, step: current.step });
+}
+
+function sync(current: Element, next: Element): void {
+  for (const name of [...current.getAttributeNames()]) {
+    if (!next.hasAttribute(name)) current.removeAttribute(name);
+  }
+  for (const name of next.getAttributeNames()) {
+    if (current.getAttribute(name) !== next.getAttribute(name)) {
+      current.setAttribute(name, next.getAttribute(name) ?? '');
+    }
+  }
+}
+
+// Replace only what changed, matching children by position and data-key, so a
+// row under the pointer keeps its hover across a refetch.
+function patch(current: Element, next: Element): void {
+  const mine = [...current.children];
+  const theirs = [...next.children];
+  if (mine.length !== theirs.length || current.childNodes.length !== mine.length
+    || next.childNodes.length !== theirs.length) {
+    current.replaceChildren(...next.childNodes);
+    return;
+  }
+  mine.forEach((child, index) => {
+    const other = theirs[index]!;
+    if (child.tagName !== other.tagName
+      || child.getAttribute('data-key') !== other.getAttribute('data-key')) {
+      child.replaceWith(other);
+      return;
+    }
+    if (child.outerHTML === other.outerHTML) return;
+    if (!child.children.length || !other.children.length) {
+      child.replaceWith(other);
+      return;
+    }
+    sync(child, other);
+    patch(child, other);
+  });
+}
+
+function render(): void {
+  const current = route();
+  const root = document.body;
+  const next = document.createElement('body');
+  next.innerHTML = `${chrome(current)}<main>${page(current)}</main>`;
+  patch(root, next);
+  // The secret and the run name live in the tab, never in the markup.
+  for (const field of document.querySelectorAll<HTMLInputElement>('form[data-run] input')) {
+    const value = field.name === 'secret' ? state.form.secret : state.form.outputName;
+    if (field.value !== value) field.value = value;
+  }
+}
+
+async function load(): Promise<void> {
+  const current = route();
+  if (!current.key || !state.csrfToken) {
+    const overview = await read<{ campaigns: OverviewEntry[]; canStart: boolean;
+      csrfToken: string; }>('/api/overview');
+    if (overview) Object.assign(state, { overview: overview.campaigns,
+      canStart: overview.canStart, csrfToken: overview.csrfToken });
+    render();
+  }
+  if (current.plans) {
+    const plans = await read<DashboardPlan[]>('/api/plans');
+    if (plans) state.plans = plans;
+    const first = state.plans.find(plan => plan.state === 'frozen');
+    if (first && !state.form.planId) {
+      state.form = { ...state.form, planId: first.id, outputName: runName(first.id, new Date()) };
+    }
+    render();
+    return;
+  }
+  if (!current.key) {
+    for (const campaign of state.overview.filter(entry => entry.status === 'running')) {
+      const sheet = await read<CampaignSheet>(`/api/campaigns/${encodeURIComponent(campaign.key)}`);
+      if (sheet) state.sheets.set(campaign.key, sheet);
+      render();
+    }
+    return;
+  }
+  const sheet = await read<CampaignSheet>(`/api/campaigns/${encodeURIComponent(current.key)}`);
+  if (sheet) state.sheets.set(current.key, sheet);
+  render();
+  if (sheet?.mode === 'dependency' && current.view !== 'grid'
+    && !state.progression.has(current.key)) {
+    state.progression.set(current.key, await read<CampaignProgression>(
+      `/api/campaigns/${encodeURIComponent(current.key)}/progression`));
+    render();
+  }
+  if (!current.attempt) return;
+  if (current.tab === 'checks' && !state.checks.has(current.attempt)) {
+    const checks = await read<AttemptChecks>(attemptUrl(current, 'checks'));
+    if (checks) state.checks.set(current.attempt, checks);
+  } else if ((current.tab === 'screenshots' || current.tab === 'files')
+    && !state.evidence.has(current.attempt)) {
+    const evidence = await read<AttemptPackage>(attemptUrl(current, 'package'));
+    if (evidence) state.evidence.set(current.attempt, evidence);
+  } else if (current.tab === 'log') {
+    await readLog(current);
+  }
+  render();
+}
+
+function go(href: string): void {
+  history.pushState(null, '', href);
+  void load();
+}
+
+function stepTo(offset: number): void {
+  const current = route();
+  const progression = state.progression.get(current.key) ?? null;
+  if (!progression) return;
+  const total = replayTimeline(progression).length;
+  const next = Math.min(Math.max(0, current.step + offset), Math.max(0, total - 1));
+  const url = new URL(location.href);
+  url.searchParams.set('step', String(next));
+  history.replaceState(null, '', `${url.pathname}${url.search}`);
+  render();
+}
+
+function subscribe(): void {
+  const source = new EventSource('/api/events');
+  const changed = (event: MessageEvent<string>): void => {
+    const current = route();
+    const message = JSON.parse(event.data) as { key?: string; attemptId?: string };
+    if (current.key && message.key !== current.key) return;
+    if (message.attemptId && message.attemptId !== current.attempt) return;
+    if (message.attemptId) state.checks.delete(message.attemptId);
+    void load();
+  };
+  source.addEventListener('campaign', changed);
+  source.addEventListener('log', changed);
+  source.addEventListener('open', () => {
+    if (fallback) clearInterval(fallback);
+    fallback = 0;
+  });
+  // Only while the stream is down: a served dashboard that is up pays nothing.
+  source.addEventListener('error', () => {
+    fallback ||= window.setInterval(() => void load(), FALLBACK_MS);
+  });
+}
+
+document.addEventListener('click', event => {
+  if (event.defaultPrevented || event.button !== 0 || event.metaKey || event.ctrlKey
+    || event.shiftKey || event.altKey) return;
+  const shot = (event.target as Element | null)?.closest<HTMLElement>('[data-shot]');
+  if (shot) {
+    const dialog = document.querySelector<HTMLDialogElement>('.lightbox');
+    const image = dialog?.querySelector('img');
+    if (!dialog || !image) return;
+    image.src = shot.dataset.shot ?? '';
+    image.alt = shot.dataset.shotName ?? '';
+    dialog.showModal();
+    return;
+  }
+  if (event.target instanceof HTMLDialogElement) event.target.close();
+  const link = (event.target as Element | null)?.closest('a');
+  const href = link?.getAttribute('href') ?? '';
+  if (!href || href.startsWith('/api/') || !/^[/?]/.test(href)) return;
+  event.preventDefault();
+  go(href.startsWith('?') ? `${location.pathname}${href}` : href);
+});
+
+// Start and resume are the same request twice: the browser token, the operator
+// secret the operator just typed, and the plan the server re-reads itself.
+async function post(form: HTMLFormElement): Promise<void> {
+  const current = route();
+  const data = new FormData(form);
+  const resume = form.dataset.run === 'resume';
+  const output = resume ? current.key : String(data.get('output') ?? '');
+  const response = await fetch(resume
+    ? `/api/campaigns/${encodeURIComponent(current.key)}/resume` : '/api/campaigns', {
+    method: 'POST',
+    headers: { 'content-type': 'application/json', 'x-stack-bench-token': state.csrfToken,
+      'x-stack-bench-control-secret': String(data.get('secret') ?? '') },
+    body: JSON.stringify(resume ? {} : { planId: String(data.get('plan') ?? ''), outputName: output }),
+  });
+  if (response.ok) {
+    state.form = { ...state.form, secret: '', error: '' };
+    if (resume) return void load();
+    return go(`/c/${encodeURIComponent(output)}`);
+  }
+  const failure = await response.json().catch(() => ({})) as { error?: string };
+  state.form = afterRun(state.form, response.status, failure.error ?? '');
+  render();
+}
+
+document.addEventListener('submit', event => {
+  const form = event.target;
+  if (!(form instanceof HTMLFormElement) || !form.dataset.run) return;
+  event.preventDefault();
+  void post(form);
+});
+
+// The form's fields are the state; picking a plan renames the output with it.
+document.addEventListener('input', event => {
+  const field = event.target as HTMLInputElement;
+  if (field.name === 'secret') state.form = { ...state.form, secret: field.value };
+  else if (field.name === 'output') state.form = { ...state.form, outputName: field.value };
+  else if (field.name === 'plan') {
+    state.form = { ...state.form, planId: field.value,
+      outputName: runName(field.value, new Date()) };
+    render();
+  }
+});
+
+document.addEventListener('keydown', event => {
+  if (route().view !== 'replay') return;
+  if (event.key === 'ArrowRight') stepTo(1);
+  else if (event.key === 'ArrowLeft') stepTo(-1);
+  else if (event.key === ' ') {
+    event.preventDefault();
+    if (playing) {
+      clearInterval(playing);
+      playing = 0;
+    } else playing = window.setInterval(() => stepTo(1), 600);
+    return;
+  } else return;
+  if (playing) {
+    clearInterval(playing);
+    playing = 0;
+  }
+});
+
+window.addEventListener('popstate', () => void load());
+subscribe();
+void load();
diff --git a/tools/stack-bench/dashboard/public/climb.ts b/tools/stack-bench/dashboard/public/climb.ts
new file mode 100644
index 00000000000..dbaa24dc052
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/climb.ts
@@ -0,0 +1,95 @@
+// The climb: one point per completed grade, unaided grades ringed, the current
+// grade filled. Small in a lane or a sheet cell, large on the attempt page.
+
+import type { ClimbPoint } from '../dashboard-views.js';
+import { esc } from './format.js';
+
+interface Plot {
+  x: number;
+  y: number;
+  point: ClimbPoint;
+}
+
+function plot(series: readonly ClimbPoint[], left: number, right: number,
+  top: number, bottom: number): Plot[] {
+  const span = Math.max(1, series.length - 1);
+  return series.map((point, index) => ({
+    x: series.length === 1 ? (left + right) / 2 : left + (right - left) * index / span,
+    y: bottom - (bottom - top) * (point.max ? point.score / point.max : 0),
+    point,
+  }));
+}
+
+function stepPath(plots: readonly Plot[]): string {
+  const head = plots[0];
+  if (!head) return '';
+  return plots.slice(1).reduce((path, item, index) =>
+    `${path} L${item.x} ${plots[index]!.y} L${item.x} ${item.y}`, `M${head.x} ${head.y}`);
+}
+
+export function climb(series: readonly ClimbPoint[], { warn = false, height = 36 }: {
+  warn?: boolean;
+  height?: number;
+} = {}): string {
+  if (!series.length) return '';
+  const top = 4;
+  const bottom = height - 4;
+  const plots = plot(series, 8, 292, top, bottom);
+  const line = stepPath(plots);
+  const first = plots[0]!;
+  const last = plots.at(-1)!;
+  const tone = warn ? ' warn' : '';
+  const rings = plots.filter(item => item.point.unaided || item === first)
+    .map(item => `<circle class="first" cx="${item.x}" cy="${item.y}" r="3.2"/>`).join('');
+  return `<svg class="climb" viewBox="0 0 300 ${height}" preserveAspectRatio="none">`
+    + `<line class="grid" x1="0" y1="${top}" x2="300" y2="${top}"/>`
+    + `<line class="grid" x1="0" y1="${bottom}" x2="300" y2="${bottom}"/>`
+    + `<path class="area${tone}" d="M${first.x} ${bottom} ${line.slice(1)} L${last.x} ${bottom} Z"/>`
+    + `<path class="line${tone}" d="${line}"/>${rings}`
+    + `<circle class="now${tone}" cx="${last.x}" cy="${last.y}" r="3.2"/></svg>`;
+}
+
+// Full size: the same points with a band per depth or level, and a number at
+// the first, the best and the current grade.
+export function bigClimb(series: readonly ClimbPoint[], stage: (level: number) => string): string {
+  if (!series.length) return '';
+  const top = 10;
+  const bottom = 130;
+  const plots = plot(series, 100, 1010, top, bottom);
+  const bands: string[] = [];
+  let start = 0;
+  plots.forEach((item, index) => {
+    const next = plots[index + 1];
+    if (next && next.point.level === item.point.level) return;
+    const level = item.point.level;
+    if (level !== null) {
+      const from = Math.max(60, plots[start]!.x - 40);
+      const width = Math.min(1050, item.x + 40) - from;
+      bands.push(`<rect class="band" x="${from}" y="${top}" width="${width}" height="${bottom - top}"`
+        + `${(bands.length % 2) ? ' opacity=".6"' : ''}/>`
+        + `<text x="${from + width / 2}" y="152" text-anchor="middle">${esc(stage(level))}</text>`);
+    }
+    start = index + 1;
+  });
+  const line = stepPath(plots);
+  const first = plots[0]!;
+  const last = plots.at(-1)!;
+  const best = plots.reduce((top1, item) => item.y < top1.y ? item : top1, first);
+  const label = (item: Plot, tone: string): string =>
+    `<text x="${item.x}" y="${item.y - 8 < top + 4 ? item.y + 16 : item.y - 8}" `
+    + `text-anchor="middle" fill="${tone}">`
+    + `${Math.round(item.point.max ? 100 * item.point.score / item.point.max : 0)}</text>`;
+  return `<svg class="bigclimb" viewBox="0 0 1060 170" preserveAspectRatio="none">${bands.join('')}`
+    + [0, 50, 100].map(value => {
+      const y = bottom - (bottom - top) * value / 100;
+      return `<line class="g" x1="60" y1="${y}" x2="1050" y2="${y}"/>`
+        + `<text x="50" y="${y + 4}" text-anchor="end">${value}</text>`;
+    }).join('')
+    + `<path class="a" d="M${first.x} ${bottom} ${line.slice(1)} L${last.x} ${bottom} Z"/>`
+    + `<path class="l" d="${line}"/>`
+    + plots.map(item => `<circle class="ev${item.point.unaided || item === first ? ' first' : ''}`
+      + `${item === last ? ' now' : ''}" cx="${item.x}" cy="${item.y}" r="${
+        item.point.unaided || item === last ? 4.5 : 3.5}"/>`).join('')
+    + label(first, '#b6c0cf') + (best === first || best === last ? '' : label(best, '#b6c0cf'))
+    + (last === first ? '' : label(last, '#e6e9f0')) + '</svg>';
+}
diff --git a/tools/stack-bench/dashboard/public/fonts/inter-LICENSE.txt b/tools/stack-bench/dashboard/public/fonts/inter-LICENSE.txt
new file mode 100644
index 00000000000..40589daa9de
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/fonts/inter-LICENSE.txt
@@ -0,0 +1,93 @@
+Copyright 2016 The Inter Project Authors (https://github.com/rsms/inter) Inter-Italic[opsz,wght].ttf: Copyright 2016 The Inter Project Authors (https://github.com/rsms/inter)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/tools/stack-bench/dashboard/public/fonts/inter-latin-variable.woff2 b/tools/stack-bench/dashboard/public/fonts/inter-latin-variable.woff2
new file mode 100644
index 00000000000..d15208de03c
Binary files /dev/null and b/tools/stack-bench/dashboard/public/fonts/inter-latin-variable.woff2 differ
diff --git a/tools/stack-bench/dashboard/public/fonts/source-code-pro-LICENSE.txt b/tools/stack-bench/dashboard/public/fonts/source-code-pro-LICENSE.txt
new file mode 100644
index 00000000000..046fc664900
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/fonts/source-code-pro-LICENSE.txt
@@ -0,0 +1,93 @@
+Google Inc.
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/tools/stack-bench/dashboard/public/fonts/source-code-pro-latin-variable.woff2 b/tools/stack-bench/dashboard/public/fonts/source-code-pro-latin-variable.woff2
new file mode 100644
index 00000000000..bc303f50c5d
Binary files /dev/null and b/tools/stack-bench/dashboard/public/fonts/source-code-pro-latin-variable.woff2 differ
diff --git a/tools/stack-bench/dashboard/public/format.ts b/tools/stack-bench/dashboard/public/format.ts
new file mode 100644
index 00000000000..9f8e0bb6eff
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/format.ts
@@ -0,0 +1,79 @@
+// One spelling per value. Every figure the dashboard prints goes through here,
+// so a percentage, a duration and a dash look the same on every page.
+
+import type { SheetAttempt } from '../dashboard-views.js';
+import { stallRounds } from './metrics.js';
+
+const SILENCE_MINUTES = 10;
+
+export const STACK_LABEL: Record<string, string> = { spacetime: 'SpacetimeDB',
+  postgres: 'PostgreSQL', mongodb: 'MongoDB' };
+const STATUS_WORD: Record<string, string> = { prepared: 'ready', 'attention-required':
+  'needs attention', pending: 'queued', invalid: 'excluded', interrupted: 'interrupted' };
+export const DASH = '—';
+
+export function esc(value: unknown): string {
+  return String(value ?? '').replace(/[&<>"']/g, character =>
+    ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[character] ?? character);
+}
+
+export function stackLabel(stack: string): string {
+  return STACK_LABEL[stack] ?? stack;
+}
+
+export function statusWord(status: string): string {
+  return STATUS_WORD[status] ?? status;
+}
+
+export function pct(value: number | null | undefined): string {
+  return value == null ? DASH : `${Math.round(value)}%`;
+}
+
+export function num(value: number | null | undefined): string {
+  return value == null ? DASH : String(Math.round(value));
+}
+
+// One value: the count and the total it is out of.
+export function ratio(used: number | null | undefined, budget: number | null | undefined): string {
+  if (used == null) return DASH;
+  return budget == null ? String(used) : `${used}<i>/ ${budget}</i>`;
+}
+
+export function money(value: number | null | undefined): string {
+  if (value == null) return DASH;
+  return value >= 10 ? `$${Math.round(value)}` : `$${value.toFixed(2)}`;
+}
+
+export function duration(seconds: number | null | undefined): string {
+  if (seconds == null) return DASH;
+  const minutes = Math.round(seconds / 60);
+  return minutes < 60 ? `${minutes}m` : `${Math.floor(minutes / 60)}h ${minutes % 60}m`;
+}
+
+export function since(value: string | null | undefined, now = Date.now()): string {
+  if (!value) return DASH;
+  const minutes = Math.max(0, Math.floor((now - Date.parse(value)) / 60000));
+  if (minutes < 60) return `${minutes}m`;
+  if (minutes < 60 * 48) return `${Math.floor(minutes / 60)}h`;
+  return `${Math.floor(minutes / 1440)}d`;
+}
+
+// The phase, with the stall the operator would otherwise find by diffing round
+// logs: three identical grades, or ten minutes without output.
+export function phrase(attempt: SheetAttempt, now = Date.now()): string {
+  const parts = [attempt.phase];
+  const flat = stallRounds(attempt.climb);
+  if (flat) parts.push(`same score for ${flat} grades`);
+  const silent = attempt.status === 'running' && attempt.logUpdatedAt
+    ? Math.floor((now - Date.parse(attempt.logUpdatedAt)) / 60000) : 0;
+  if (silent >= SILENCE_MINUTES) parts.push(`no output for ${silent}m`);
+  return parts.join(' · ');
+}
+
+// depth 3 · 1×  /  L1–L3 · 3×
+export function shape(mode: string, levels: readonly number[], repetitions: number): string {
+  const depth = levels.length ? Math.max(...levels) : 0;
+  const span = mode === 'dependency' ? `depth ${depth}`
+    : levels.length > 1 ? `L${Math.min(...levels)}–L${depth}` : `L${depth}`;
+  return `${span} · ${repetitions}×`;
+}
diff --git a/tools/stack-bench/dashboard/public/graph.ts b/tools/stack-bench/dashboard/public/graph.ts
new file mode 100644
index 00000000000..c4f6510307a
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/graph.ts
@@ -0,0 +1,82 @@
+// One graph for the campaign: columns are depth, bands are questlines, edges
+// are the catalog's own dependencies. Every stack builds the same catalog, so a
+// node carries one dot per stack in fixed order. The renderer takes one
+// node-status snapshot per stack, which is what the replay feeds it per step.
+
+import type { CampaignProgression } from '../dashboard-views.js';
+import { esc, stackLabel } from './format.js';
+
+export interface GraphStack {
+  stack: string;
+  statuses: readonly string[];
+}
+
+const DOT: Record<string, string> = { passed: 'p', active: 'a', working: 'a', failed: 'f',
+  blocked: 'b', locked: 'o' };
+const COLUMN = 260;
+const NODE_W = 200;
+const ROW = 30;
+
+interface Placed {
+  x: number;
+  y: number;
+  index: number;
+}
+
+export function graph(view: CampaignProgression, stacks: readonly GraphStack[]): string {
+  const depths = view.depths;
+  const width = 150 + Math.max(1, depths.length) * COLUMN - 40;
+  const placed = new Map<string, Placed>();
+  const bands: string[] = [];
+  let top = 20;
+  for (const questline of view.questlines) {
+    const nodes = view.nodes.filter(node => node.questline === questline.id);
+    if (!nodes.length) continue;
+    const used = new Map<number, number>();
+    let rows = 0;
+    for (const node of nodes) {
+      const row = used.get(node.depth) ?? 0;
+      used.set(node.depth, row + 1);
+      rows = Math.max(rows, row + 1);
+      placed.set(node.id, { x: 150 + Math.max(0, depths.indexOf(node.depth)) * COLUMN,
+        y: top + 8 + row * ROW, index: view.nodes.indexOf(node) });
+    }
+    const height = rows * ROW + 16;
+    bands.push(`<text class="band" x="8" y="${top + 24}">${esc(questline.title)}</text>`);
+    top += height;
+    bands.push(`<line class="sep" x1="0" y1="${top}" x2="${width}" y2="${top}"/>`);
+  }
+  const failed = (index: number): boolean =>
+    stacks.some(entry => entry.statuses[index] === 'failed');
+  const blocked = (index: number): boolean =>
+    stacks.some(entry => entry.statuses[index] === 'blocked');
+  const edges = view.nodes.flatMap(node => {
+    const target = placed.get(node.id);
+    if (!target) return [];
+    return node.dependencies.flatMap(id => {
+      const source = placed.get(id);
+      if (!source) return [];
+      const cut = failed(source.index) || blocked(target.index);
+      return [`<path class="e${cut ? ' cut' : ''}" d="M${source.x + NODE_W} ${source.y + 12}`
+        + ` C ${source.x + NODE_W + 40} ${source.y + 12}, ${target.x - 40} ${target.y + 12},`
+        + ` ${target.x} ${target.y + 12}"/>`];
+    });
+  });
+  const nodes = view.nodes.map(node => {
+    const at = placed.get(node.id);
+    if (!at) return '';
+    const dots = stacks.map((entry, column) =>
+      `<circle class="d ${DOT[entry.statuses[at.index] ?? 'locked'] ?? 'o'}" `
+      + `cx="${at.x + NODE_W - 40 + column * 14}" cy="${at.y + 12}" r="4"/>`).join('');
+    const hover = stacks.map(entry =>
+      `${stackLabel(entry.stack)} ${entry.statuses[at.index] ?? 'locked'}`).join(' · ');
+    return `<g class="n"><title>${esc(`${node.title} · ${hover}`)}</title>`
+      + `<rect x="${at.x}" y="${at.y}" width="${NODE_W}" height="24" rx="4"/>`
+      + `<text x="${at.x + 9}" y="${at.y + 16}">${esc(node.title.length > 22
+        ? `${node.title.slice(0, 21)}…` : node.title)}</text>${dots}</g>`;
+  });
+  const columns = depths.map((depth, index) =>
+    `<text class="col" x="${150 + index * COLUMN}" y="14">depth ${depth}</text>`).join('');
+  return `<svg class="dag" viewBox="0 0 ${width} ${top + 10}" role="img">`
+    + `${bands.join('')}${columns}${edges.join('')}${nodes.join('')}</svg>`;
+}
diff --git a/tools/stack-bench/dashboard/public/index.html b/tools/stack-bench/dashboard/public/index.html
new file mode 100644
index 00000000000..f07520b310b
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/index.html
@@ -0,0 +1,15 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <meta name="color-scheme" content="dark">
+    <meta name="theme-color" content="#0b1114">
+    <title>Stack Bench</title>
+    <link rel="preload" href="/fonts/inter-latin-variable.woff2" as="font" type="font/woff2" crossorigin>
+    <link rel="preload" href="/fonts/source-code-pro-latin-variable.woff2" as="font" type="font/woff2" crossorigin>
+    <link rel="stylesheet" href="/styles.css">
+    <script type="module" src="/app.js"></script>
+  </head>
+  <body></body>
+</html>
diff --git a/tools/stack-bench/dashboard/public/metrics.ts b/tools/stack-bench/dashboard/public/metrics.ts
new file mode 100644
index 00000000000..2c8c77f723b
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/metrics.ts
@@ -0,0 +1,212 @@
+import type { CampaignRunLevelResult, CampaignRunResult, DependencyProgress }
+  from '../../src/campaigns/campaign-inspection.js';
+
+// The dashboard's vocabulary in one place: Unaided, Score, Repairs, Regressions,
+// Stalling and Excluded are defined here and nowhere else, so the server-rendered
+// sheet and the browser read the same numbers from the same evidence.
+
+export const STACK_ORDER = ['spacetime', 'postgres', 'mongodb'];
+const EXCLUDED_OUTCOMES = new Set(['harness_failure', 'inconclusive', 'ungraded', 'contaminated']);
+const STALL_GRADES = 3;
+const SILENCE_MINUTES = 10;
+
+export interface MetricExecution {
+  outcome: string | null;
+  reason: string | null;
+}
+
+export interface MetricAttempt {
+  id: string;
+  stack: string;
+  status: string;
+  repetition?: number;
+  logUpdatedAt?: string | null;
+  execution: MetricExecution | null;
+  result: CampaignRunResult | null;
+  dependency: DependencyProgress | null;
+}
+
+export interface AttemptMetrics {
+  first: number | null;
+  final: number;
+  repairs: number;
+  spend: number | null;
+  duration: number | null;
+  scope: string;
+  abortedFirst: number;
+  raw: {
+    first: { score: number; max: number } | null;
+    final: { score: number; max: number } | null;
+  };
+}
+
+export interface ComparisonEntry<Attempt extends MetricAttempt> {
+  stack: string;
+  runs: Array<{ attempt: Attempt; metrics: AttemptMetrics }>;
+  excluded: Array<{ attempt: Attempt; reason: string }>;
+  pending: number;
+  spendSoFar: number | null;
+  abortedFirst: number;
+}
+
+export type ComparisonRow<Attempt extends MetricAttempt> = ComparisonEntry<Attempt> & {
+  n: number; scopes: string[]; first: number | null; final: number | null;
+  repairs: number | null; spend: number | null; duration: number | null;
+  firstRange: { min: number; max: number } | null;
+  spendRange: { min: number; max: number } | null;
+  durationRange: { min: number; max: number } | null;
+};
+
+export function median(values: readonly number[]): number | null {
+  if (!values.length) return null;
+  const sorted = [...values].sort((left, right) => left - right);
+  const middle = Math.floor(sorted.length / 2);
+  return sorted.length % 2 ? sorted[middle]! : (sorted[middle - 1]! + sorted[middle]!) / 2;
+}
+
+// Live attempts record cost by level before final totals exist.
+export function attemptSpend(attempt: MetricAttempt): number | null {
+  const run = attempt.result;
+  if (!run || run.unreadable) return null;
+  const levelled = (run.levels ?? []).reduce<number | null>((total, level) =>
+    level.costUsd == null ? total : (total ?? 0) + level.costUsd, null);
+  const spend = run.costUsd ?? levelled;
+  return spend != null && Number.isFinite(spend) && spend >= 0 ? spend : null;
+}
+
+// An ungraded first build has no score; it is not a zero.
+export function attemptMetrics(attempt: MetricAttempt): AttemptMetrics | null {
+  const run = attempt.result;
+  if (!run || run.unreadable) return null;
+  const dependency = attempt.dependency;
+  if (dependency) {
+    const score = dependency.score;
+    const unique = score?.uniqueChecks;
+    if (score?.status !== 'final' || unique?.percentage == null) return null;
+    const available = unique.availablePoints ?? 0;
+    return {
+      first: dependency.history ? dependency.history.firstTryPercentage / 100 : null,
+      // Passed points over every selected point in the graph, the same scale
+      // as the first build. The questline average is the sheet's secondary view.
+      final: unique.percentage / 100,
+      repairs: dependency.history?.repairAttempts ?? 0,
+      spend: run.costComplete === true ? attemptSpend(attempt) : null,
+      duration: run.durationSec ?? null,
+      scope: `dependency:${dependency.nodes.length}:${available}`,
+      abortedFirst: 0,
+      raw: { first: null, final: unique.passedPoints == null
+        ? null : { score: unique.passedPoints, max: available } },
+    };
+  }
+  type FinalLevel = CampaignRunLevelResult & { finalScore: { score: number; max: number } };
+  type ScoredLevel = FinalLevel & { firstScore: { score: number; max: number } };
+  const levels = (run.levels ?? [])
+    .filter((level): level is FinalLevel => level.finalScore !== null);
+  if (!levels.length) return null;
+  const sum = <Level extends CampaignRunLevelResult>(list: readonly Level[],
+    pick: (level: Level) => number): number => list.reduce((total, item) => total + pick(item), 0);
+  const scored = levels.filter((level): level is ScoredLevel =>
+    level.firstScore !== null && level.firstAbort === null);
+  const abortedFirst = levels.filter(level => level.firstAbort).length;
+  const firstMax = sum(scored, level => level.firstScore.max);
+  const finalMax = sum(levels, level => level.finalScore.max);
+  return {
+    first: firstMax ? sum(scored, level => level.firstScore.score) / firstMax : null,
+    final: sum(levels, level => level.finalScore.score) / finalMax,
+    repairs: sum(levels, level => level.used ?? 0),
+    spend: run.costComplete === true ? attemptSpend(attempt) : null,
+    duration: run.durationSec ?? null,
+    scope: `sequential:${levels.map(level => level.level).join(',')}`,
+    abortedFirst,
+    // Raw sums over the same set of levels, so a first and a final score shown
+    // side by side are always out of the same total.
+    raw: { first: firstMax ? { score: sum(scored, l => l.firstScore.score), max: firstMax } : null,
+      final: { score: sum(levels, l => l.finalScore.score), max: finalMax } },
+  };
+}
+
+export function attemptExcluded(attempt: MetricAttempt): string | null {
+  const outcome = attempt.execution?.outcome ?? attempt.result?.outcome;
+  if (attempt.status === 'invalid') return attempt.execution?.reason ?? outcome ?? 'excluded';
+  if (attempt.result?.unreadable && attempt.status !== 'running') return 'result could not be read';
+  // 'ungraded' on an attempt still running means "not yet", not "thrown out".
+  if (outcome && EXCLUDED_OUTCOMES.has(outcome) && attempt.status === 'completed') return outcome;
+  return null;
+}
+
+// Compare results only when they share the same recorded test plan.
+export function compareCampaign<Attempt extends MetricAttempt>(campaign: {
+  attempts?: readonly Attempt[];
+}): { rows: Array<ComparisonRow<Attempt>>; usable: Array<ComparisonRow<Attempt>>;
+  priced: Array<ComparisonRow<Attempt>>; burn: Map<string, number | null>;
+  mixedScope: boolean; comparable: boolean } {
+  const byStack = new Map<string, ComparisonEntry<Attempt>>();
+  for (const attempt of campaign.attempts ?? []) {
+    const entry = byStack.get(attempt.stack)
+      ?? { stack: attempt.stack, runs: [], excluded: [], pending: 0, spendSoFar: null, abortedFirst: 0 };
+    byStack.set(attempt.stack, entry);
+    // Excluded attempts still contribute to actual spend.
+    const incurred = attemptSpend(attempt);
+    if (incurred != null) entry.spendSoFar = (entry.spendSoFar ?? 0) + incurred;
+    const reason = attemptExcluded(attempt);
+    if (reason) { entry.excluded.push({ attempt, reason }); continue; }
+    const metrics = attempt.status === 'completed' ? attemptMetrics(attempt) : null;
+    if (metrics) {
+      entry.runs.push({ attempt, metrics });
+      entry.abortedFirst += metrics.abortedFirst;
+    } else entry.pending += 1;
+  }
+  const rows = [...byStack.values()]
+    .sort((left, right) => STACK_ORDER.indexOf(left.stack) - STACK_ORDER.indexOf(right.stack))
+    .map(entry => {
+      const pick = (key: 'first' | 'final' | 'repairs' | 'spend' | 'duration'): number[] =>
+        entry.runs.map(run => run.metrics[key]).filter((value): value is number => value !== null);
+      const range = (values: readonly number[]): { min: number; max: number } | null =>
+        values.length ? { min: Math.min(...values), max: Math.max(...values) } : null;
+      const spend = pick('spend');
+      const duration = pick('duration');
+      const first = pick('first');
+      const scopes = [...new Set(entry.runs.map(run => run.metrics.scope))].sort();
+      return { ...entry, n: entry.runs.length, scopes,
+        first: median(first), firstRange: range(first),
+        final: median(pick('final')),
+        repairs: median(pick('repairs')),
+        spend: median(spend), spendRange: range(spend),
+        duration: median(duration), durationRange: range(duration) };
+    });
+  const usable = rows.filter(row => row.n > 0);
+  const scopes = new Set(usable.flatMap(row => row.scopes));
+  const priced = usable.filter(row => row.spend != null);
+  return { rows, usable, priced,
+    burn: new Map([...byStack.values()].map(entry => [entry.stack, entry.spendSoFar])),
+    mixedScope: scopes.size > 1,
+    comparable: priced.length > 1 && scopes.size === 1 };
+}
+
+// A trailing run of identical grades is the repair loop treading water.
+export function stallRounds(
+  series: readonly { score: number; max: number }[] | null | undefined): number {
+  if (!series || series.length < STALL_GRADES + 1) return 0;
+  const last = series.at(-1);
+  if (!last) return 0;
+  let flat = 0;
+  for (let index = series.length - 2; index >= 0; index--) {
+    const item = series[index];
+    if (item && item.score === last.score && item.max === last.max) flat += 1;
+    else break;
+  }
+  return flat >= STALL_GRADES ? flat : 0;
+}
+
+export function outputSilentMinutes(attempt: MetricAttempt, now = Date.now()): number {
+  if (attempt.status !== 'running' || !attempt.logUpdatedAt) return 0;
+  return Math.floor((now - Date.parse(attempt.logUpdatedAt)) / 60000);
+}
+
+// Stalling: three identical consecutive grades, or ten minutes of silence.
+export function attemptStalling(attempt: MetricAttempt,
+  series: readonly { score: number; max: number }[] | null | undefined,
+  now = Date.now()): boolean {
+  if (attempt.status !== 'running') return false;
+  return stallRounds(series) > 0 || outputSilentMinutes(attempt, now) >= SILENCE_MINUTES;
+}
diff --git a/tools/stack-bench/dashboard/public/spacetimedb-mark.svg b/tools/stack-bench/dashboard/public/spacetimedb-mark.svg
new file mode 100644
index 00000000000..f7957efa1ed
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/spacetimedb-mark.svg
@@ -0,0 +1,5 @@
+<svg width="35" height="32" viewBox="0 0 35 32" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <path d="M28.8002 15.317C28.5535 9.53226 29.63 6.19046 35 0L24.2649 10.9106C26.8343 14.2552 26.6051 19.0995 23.5774 22.1767C20.5498 25.2538 15.7834 25.4867 12.4925 22.8754L10.5042 24.8962L10.5116 24.9024L7.35285 28.1361C9.73784 26.7321 13.4208 27.1349 15.6425 27.3779C16.2579 27.4452 16.7611 27.5003 17.0937 27.5013C20.1371 27.6534 23.2301 26.5483 25.5544 24.186C27.9465 21.7549 29.0284 18.4965 28.8002 15.317Z" fill="#D7D8D9"/>
+  <path d="M17.9063 4.49871C18.2389 4.49971 18.7421 4.55476 19.3575 4.62207C21.5792 4.86508 25.2622 5.26792 27.6472 3.86395L24.4884 7.0976L24.4958 7.10383L22.5075 9.12462C19.2166 6.51328 14.4502 6.74618 11.4226 9.82332C8.3949 12.9005 8.16574 17.7448 10.7351 21.0894L0 32C5.36996 25.8095 6.44651 22.4677 6.1998 16.683C5.97163 13.5035 7.05355 10.2451 9.44557 7.81402C11.7699 5.45167 14.8629 4.34657 17.9063 4.49871Z" fill="#D7D8D9"/>
+  <path fill-rule="evenodd" clip-rule="evenodd" d="M24.7486 16C24.7486 20.0687 21.5033 23.367 17.5 23.367C13.4967 23.367 10.2514 20.0687 10.2514 16C10.2514 11.9313 13.4967 8.63292 17.5 8.63292C21.5033 8.63292 24.7486 11.9313 24.7486 16ZM17.5 21.6C20.5752 21.6 23.0682 19.0928 23.0682 16C23.0682 12.9072 20.5752 10.4 17.5 10.4C14.4248 10.4 11.9318 12.9072 11.9318 16C11.9318 19.0928 14.4248 21.6 17.5 21.6Z" fill="#D7D8D9"/>
+</svg>
diff --git a/tools/stack-bench/dashboard/public/styles.css b/tools/stack-bench/dashboard/public/styles.css
new file mode 100644
index 00000000000..e6dfd517474
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/styles.css
@@ -0,0 +1,241 @@
+/* Stack Bench dashboard.
+ *
+ * Tokens are the SpacetimeDB web palette under the names it uses in
+ * spacetimedb.com/app/styles/variables.css. Hue is state and nothing else;
+ * stacks are told apart by fixed order and label. 4px radius, no shadow. */
+
+@font-face {
+  font-family: 'Inter Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 100 900;
+  src: url(/fonts/inter-latin-variable.woff2) format('woff2-variations');
+}
+@font-face {
+  font-family: 'Source Code Pro Variable';
+  font-style: normal;
+  font-display: swap;
+  font-weight: 200 900;
+  src: url(/fonts/source-code-pro-latin-variable.woff2) format('woff2-variations');
+}
+
+:root {
+  --green: #4cf490; --green-25: #4cf49040; --green-10: #4cf4901a;
+  --blue: #02befa; --blue-25: #02befa40;
+  --yellow: #fbdc8e; --yellow-25: #fbdc8e40; --yellow-10: #fbdc8e1a;
+  --red: #ff4c4c;
+  --n1: #e6e9f0; --n2: #ced3e0; --n3: #b6c0cf; --n4: #6f7987; --n5: #363840; --n7: #050505;
+  --shade1: #162d38; --shade4: #121e24; --shade5: #0f191f; --shade6: #0e161a;
+  --shade7: #0b1114; --shade8: #0b0e12;
+  --sans: 'Inter Variable', Inter, ui-sans-serif, system-ui, -apple-system, 'Segoe UI', sans-serif;
+  --mono: 'Source Code Pro Variable', 'Source Code Pro', ui-monospace, SFMono-Regular, Consolas, monospace;
+  color-scheme: dark;
+}
+
+* { box-sizing: border-box; }
+body { margin: 0; background: var(--shade7); color: var(--n3); font: 14px/1.5 var(--sans); }
+a { color: var(--n1); }
+:focus-visible { outline: 2px solid var(--green); outline-offset: 2px; }
+::selection { background: var(--green-25); }
+
+.topbar { display: flex; align-items: center; gap: 22px; height: 48px; padding: 0 24px; border-bottom: 1px solid var(--shade4); }
+.brand { display: flex; align-items: center; gap: 10px; color: var(--n1); text-decoration: none; }
+.brand b { font: 600 12px/1 var(--mono); letter-spacing: .1em; }
+.btn { display: inline-flex; align-items: center; min-height: 30px; padding: 0 14px; border-radius: 4px; border: 1px solid var(--shade1); color: var(--n1); background: transparent; font: 500 11.7px/1 var(--mono); letter-spacing: .08em; text-transform: uppercase; cursor: pointer; list-style: none; }
+.nav { display: flex; gap: 2px; }
+.nav a { padding: 6px 10px; border-radius: 4px; color: var(--n4); text-decoration: none; font: 500 12.5px var(--sans); }
+.nav a.on { color: var(--n1); background: var(--shade5); }
+.btn.primary { background: var(--green); border-color: var(--green); color: var(--n7); text-decoration: none; }
+.tools { display: flex; align-items: center; gap: 10px; margin-left: auto; }
+.files { position: relative; }
+.files summary::-webkit-details-marker { display: none; }
+.files div { position: absolute; right: 0; top: 36px; display: grid; gap: 2px; padding: 8px 10px; background: var(--shade6); border: 1px solid var(--shade1); border-radius: 4px; }
+.files div a { color: var(--n2); font: 12px var(--mono); text-decoration: none; }
+.page { padding: 22px 24px 40px; }
+.crumbs { color: var(--n4); font: 12px var(--mono); margin-bottom: 8px; }
+.crumbs a { color: var(--n4); text-decoration: none; }
+.crumbs b { color: var(--n2); font-weight: 500; }
+.title { display: flex; align-items: center; gap: 12px; margin-bottom: 16px; }
+.title h2 { margin: 0; color: var(--n1); font: 600 25px/28px var(--sans); letter-spacing: -.01em; }
+.title h2 span { color: var(--n4); font-weight: 400; }
+.label { color: var(--n4); font: 500 11.7px/1 var(--mono); letter-spacing: .1em; text-transform: uppercase; }
+.state { color: var(--n4); font: 500 13px var(--sans); white-space: nowrap; }
+.state.run { color: var(--green); }
+.state.done { color: var(--blue); }
+.state.warn { color: var(--yellow); }
+.state.idle { color: var(--n4); }
+
+/* live lanes: stack, score, climb, phase */
+.live { border: 1px solid var(--shade4); border-radius: 4px; background: var(--shade6); margin-bottom: 18px; }
+.live-head { display: flex; align-items: center; gap: 12px; height: 44px; padding: 0 16px; border-bottom: 1px solid var(--shade4); }
+.live-head b { color: var(--n1); font-size: 15px; font-weight: 600; }
+.lane { display: grid; grid-template-columns: 130px 96px minmax(200px, 1fr) minmax(260px, 1.1fr); gap: 20px; align-items: center; height: 60px; padding: 0 16px; border-top: 1px solid var(--shade4); }
+.lane:first-of-type { border-top: 0; }
+.lane .who { color: var(--n1); font-weight: 600; }
+.lane .big { color: var(--n1); font: 600 26px/1 var(--sans); letter-spacing: -.02em; }
+.lane .big.prov { color: var(--yellow); }
+.lane .phase { font-size: 13px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.lane .phase.warn { color: var(--yellow); }
+.climb { display: block; width: 100%; height: 36px; }
+.climb .area { fill: var(--green-10); }
+.climb .area.warn { fill: var(--yellow-10); }
+.climb .line { fill: none; stroke: var(--green); stroke-width: 1.6; stroke-linejoin: round; }
+.climb .line.warn { stroke: var(--yellow); }
+.climb .first { fill: var(--shade6); stroke: var(--n3); stroke-width: 1.4; }
+.climb .now { fill: var(--green); }
+.climb .now.warn { fill: var(--yellow); }
+.climb .grid { stroke: var(--shade4); stroke-width: 1; }
+
+/* campaigns table */
+.tablewrap { border: 1px solid var(--shade4); border-radius: 4px; background: var(--shade6); overflow: hidden; }
+.toolbar { display: flex; gap: 6px; align-items: center; height: 44px; padding: 0 12px; border-bottom: 1px solid var(--shade4); }
+.chip { height: 24px; padding: 0 10px; border-radius: 4px; border: 1px solid var(--shade1); color: var(--n3); font: 500 12px/22px var(--sans); text-decoration: none; }
+.chip.on { background: var(--shade1); color: var(--n1); }
+.chip.sm { height: 20px; line-height: 18px; font-size: 10.5px; padding: 0 8px; }
+.wrap { overflow-x: auto; }
+table.runs { width: 100%; border-collapse: collapse; font-size: 13px; }
+table.runs th, table.runs td { padding: 0 14px; height: 40px; text-align: left; vertical-align: middle; border-bottom: 1px solid var(--shade4); white-space: nowrap; }
+table.runs thead th { color: var(--n4); font: 500 11.7px/1.2 var(--mono); letter-spacing: .1em; text-transform: uppercase; height: 36px; }
+table.runs tbody tr:last-child td { border-bottom: 0; }
+table.runs tbody tr:hover td { background: var(--shade5); }
+table.runs td.name a { color: var(--n1); font-weight: 600; text-decoration: none; }
+table.runs td.shape { color: var(--n4); font: 12px var(--mono); }
+table.runs th.stack, table.runs td.stack { text-align: right; font: 13px var(--mono); font-variant-numeric: tabular-nums; color: var(--n1); width: 128px; }
+table.runs th.stack:first-of-type, table.runs td.stack:first-of-type { border-left: 1px solid var(--shade4); }
+table.runs td.stack.prov { color: var(--yellow); }
+table.runs td.stack.na { color: var(--n5); }
+table.runs td.stack u { text-decoration-color: var(--green); text-underline-offset: 5px; text-decoration-thickness: 2px; }
+table.runs th.when, table.runs td.when { color: var(--n4); font: 12px var(--mono); text-align: right; }
+table.runs thead th.when { color: var(--n4); font: 500 11.7px/1.2 var(--mono); letter-spacing: .1em; text-transform: uppercase; }
+
+/* plans and the run form */
+table.plans th.stack, table.plans td.stack { width: auto; }
+table.plans td.name { color: var(--n1); font-weight: 600; }
+.runform { display: flex; align-items: end; gap: 14px; flex-wrap: wrap; padding: 14px 16px; margin-bottom: 18px; border: 1px solid var(--shade4); border-radius: 4px; background: var(--shade6); }
+.runform > div { display: grid; gap: 6px; }
+.runform select, .runform input, .secret input { height: 30px; padding: 0 10px; border: 1px solid var(--shade1); border-radius: 4px; background: var(--shade7); color: var(--n1); font: 13px var(--mono); }
+.runform select { min-width: 300px; }
+.runform input[name=output] { min-width: 330px; }
+.secret { display: flex; align-items: center; gap: 8px; }
+.secret input { width: 168px; }
+.err { color: var(--red); font: 12.5px var(--sans); align-self: center; }
+
+/* campaign sheet: stacks across, facts down */
+.facts { display: grid; grid-template-columns: repeat(auto-fill, minmax(168px, 1fr)); gap: 1px; margin: 0 0 16px; background: var(--shade4); border: 1px solid var(--shade4); border-radius: 4px; overflow: hidden; }
+.facts div { display: grid; gap: 5px; min-width: 0; padding: 9px 12px; background: var(--shade6); }
+.facts b { color: var(--n1); font: 500 12.5px var(--mono); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.facts b.warn { color: var(--yellow); }
+.sheet { display: grid; grid-template-columns: 168px repeat(3, minmax(0, 1fr)); border: 1px solid var(--shade4); border-radius: 4px; background: var(--shade6); overflow: hidden; }
+.sheet > div { display: flex; align-items: center; gap: 6px; min-height: 40px; padding: 0 16px; border-top: 1px solid var(--shade4); border-left: 1px solid var(--shade4); }
+.sheet > div:nth-child(-n+4) { border-top: 0; }
+.sheet > div:nth-child(4n+1) { border-left: 0; }
+.sheet .k { color: var(--n4); font: 500 11.7px/1 var(--mono); letter-spacing: .1em; text-transform: uppercase; }
+.sheet .k.views { gap: 8px; }
+.sheet .h { min-height: 48px; color: var(--n1); font-size: 15px; font-weight: 600; gap: 10px; }
+.sheet .h a { text-decoration: none; }
+.sheet .v { color: var(--n1); font: 13px var(--mono); font-variant-numeric: tabular-nums; }
+.sheet .v i, .checks .group i { color: var(--n4); font-style: normal; margin-left: 6px; }
+.sheet .big { min-height: 64px; color: var(--n1); font: 600 30px/1 var(--sans); letter-spacing: -.02em; }
+.sheet .big.prov { color: var(--yellow); }
+.sheet .chart { min-height: 64px; padding: 10px 16px; }
+.sheet .chart .climb { height: 44px; }
+.sheet .phase { font-size: 13px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.sheet .phase.warn { color: var(--yellow); }
+.sheet .reasons { display: grid; gap: 5px; width: 100%; padding: 8px 0; }
+.sheet .reasons div { display: flex; gap: 8px; min-width: 0; }
+.sheet .reasons a { color: var(--yellow); white-space: nowrap; }
+.sheet .reasons span { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.sheet .q { min-height: 32px; }
+.sheet .q.k { text-transform: none; letter-spacing: 0; font: 12.5px var(--sans); color: var(--n3); }
+.sheet .q .pct { margin-left: auto; color: var(--n4); font: 11.5px var(--mono); font-variant-numeric: tabular-nums; }
+.sheet .q .pct.full { color: var(--green); }
+.sheet .sum .v { font-weight: 600; }
+.sheet .band { background: var(--shade5); }
+.sheet .links a { color: var(--n2); font: 12px var(--mono); text-decoration: none; margin-right: 14px; }
+.sheet > .wide { grid-column: 1 / -1; display: block; padding: 8px 8px 4px; border-left: 0; }
+.sheet > .span3 { grid-column: 2 / -1; }
+.sheet > .evhead { display: flex; gap: 0; padding: 0; }
+.sheet .ev { display: grid; gap: 5px; padding: 8px 16px; border-left: 1px solid var(--shade4); min-height: 48px; min-width: 130px; }
+.sheet .ev:first-child { border-left: 0; }
+.dot { width: 9px; height: 9px; border-radius: 50%; background: var(--shade1); flex: 0 0 auto; }
+.dot.p { background: var(--green); }
+.dot.a { background: var(--blue); box-shadow: 0 0 0 2px var(--blue-25); }
+.dot.f { background: var(--red); }
+.dot.b { background: transparent; border: 1.5px solid var(--red); }
+.dot.o { background: transparent; border: 1.5px solid var(--shade1); }
+
+/* graph */
+.dag { display: block; width: 100%; height: auto; }
+.dag .band { font: 11px var(--mono); fill: var(--n4); }
+.dag .col { font: 500 10.5px var(--mono); fill: var(--n4); letter-spacing: .08em; text-transform: uppercase; }
+.dag .sep { stroke: var(--shade4); }
+.dag .e { fill: none; stroke: var(--shade1); stroke-width: 1.1; opacity: .8; }
+.dag .e.cut { stroke: var(--red); stroke-dasharray: 3 4; opacity: .7; }
+.dag .n rect { fill: var(--shade5); stroke: var(--shade1); }
+.dag .n text { font: 10.5px var(--mono); fill: var(--n2); }
+.dag .d { fill: var(--shade1); }
+.dag .d.p { fill: var(--green); }
+.dag .d.a { fill: var(--blue); }
+.dag .d.f { fill: var(--red); }
+.dag .d.b { fill: none; stroke: var(--red); stroke-width: 1.4; }
+.dag .d.o { fill: none; stroke: var(--shade1); stroke-width: 1.4; }
+
+/* replay */
+.replay { min-height: 40px; padding: 6px 16px; }
+.strip { display: block; width: 100%; height: 28px; }
+.strip .st { fill: var(--n4); }
+.strip .st.b { fill: var(--blue); }
+.strip .st.r { fill: var(--yellow); }
+.strip .st.g { fill: var(--n5); }
+.strip .st.f { fill: var(--red); }
+.strip .st.on { stroke: var(--yellow-25); stroke-width: 3; }
+.strip .st.dim { opacity: .3; }
+.strip .cur { stroke: var(--n1); stroke-width: 1; }
+
+/* attempt */
+.figs { display: flex; gap: 48px; margin: 4px 0 20px; flex-wrap: wrap; }
+.figs div { display: grid; gap: 6px; }
+.figs b { color: var(--n1); font: 600 30px/1 var(--sans); letter-spacing: -.02em; }
+.figs b.prov { color: var(--yellow); }
+.figs b.now { font: 500 15px/30px var(--sans); }
+.figs b.now.warn { color: var(--yellow); }
+.issue { margin: 0 0 20px; padding: 12px 14px; border-left: 2px solid var(--yellow); background: var(--yellow-10); }
+.issue p { margin: 6px 0 0; color: var(--n2); }
+.bigclimb { display: block; width: 100%; height: 170px; margin-bottom: 20px; }
+.bigclimb text { font: 10.5px var(--mono); fill: var(--n4); }
+.bigclimb .l { stroke: var(--green); stroke-width: 2; fill: none; stroke-linejoin: round; }
+.bigclimb .a { fill: var(--green-10); }
+.bigclimb .g { stroke: var(--shade4); }
+.bigclimb .band { fill: var(--shade6); }
+.bigclimb .ev { fill: var(--n1); }
+.bigclimb .ev.first { fill: var(--shade7); stroke: var(--n3); stroke-width: 1.5; }
+.bigclimb .ev.now { fill: var(--blue); }
+.tabs { display: flex; gap: 2px; border-bottom: 1px solid var(--shade4); }
+.tabs a { padding: 10px 12px; color: var(--n4); font: 500 13px var(--sans); border-bottom: 2px solid transparent; margin-bottom: -1px; text-decoration: none; }
+.tabs a.on { color: var(--n1); border-bottom-color: var(--green); }
+.tabs a i { color: var(--n4); font: 11.5px var(--mono); font-style: normal; margin-left: 6px; }
+.checks { width: 100%; border-collapse: collapse; font-size: 13px; }
+.checks th, .checks td { height: 34px; padding: 0 14px; text-align: left; border-bottom: 1px solid var(--shade4); white-space: nowrap; }
+.checks thead th { color: var(--n4); font: 500 11.7px var(--mono); letter-spacing: .1em; text-transform: uppercase; height: 36px; }
+.checks td.k { font-family: var(--mono); color: var(--n2); }
+.checks td.d { color: var(--n3); white-space: normal; }
+.checks td.h { color: var(--n4); font: 12px var(--mono); letter-spacing: .14em; }
+.checks .h .p { color: var(--green); }
+.checks .h .f { color: var(--red); }
+.checks .h .x { color: var(--n5); }
+.checks tr.group td { color: var(--n1); font-weight: 600; background: var(--shade6); }
+.grade-key { display: flex; gap: 18px; padding: 10px 14px; color: var(--n4); font: 12px var(--mono); }
+.grade-key .p { color: var(--green); }
+.grade-key .f { color: var(--red); }
+.grade-key .x { color: var(--n4); }
+.shots { display: grid; grid-template-columns: repeat(auto-fill, minmax(240px, 1fr)); gap: 12px; padding: 14px 0; }
+.shots button { padding: 0; border: 0; background: none; cursor: zoom-in; }
+.shots img { width: 100%; border: 1px solid var(--shade4); border-radius: 4px; }
+.lightbox { width: min(94vw, 1500px); max-height: 94vh; padding: 42px 12px 12px; border: 1px solid var(--shade1); border-radius: 4px; background: var(--shade8); }
+.lightbox::backdrop { background: #000c; }
+.lightbox form { position: absolute; top: 8px; right: 10px; }
+.lightbox button { border: 0; background: none; color: var(--n2); cursor: pointer; }
+.lightbox img { display: block; max-width: 100%; max-height: calc(94vh - 54px); margin: auto; }
+.files-list { display: grid; gap: 6px; padding: 14px 0; }
+.files-list a { color: var(--n2); font: 12px var(--mono); text-decoration: none; }
+.log { margin: 14px 0 0; padding: 14px 16px; max-height: 520px; overflow: auto; background: var(--shade8); color: var(--n3); font: 12px/1.7 var(--mono); border-radius: 4px; }
diff --git a/tools/stack-bench/dashboard/public/views/attempt.ts b/tools/stack-bench/dashboard/public/views/attempt.ts
new file mode 100644
index 00000000000..5b9acf37101
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/views/attempt.ts
@@ -0,0 +1,119 @@
+// One attempt: figures, the climb at full size, and the evidence behind tabs.
+// Each tab is a link, so what is open survives a reload and a back button.
+
+import type { AttemptCheck, AttemptChecks, AttemptPackage, CampaignSheet, SheetAttempt, SheetStack }
+  from '../../dashboard-views.js';
+import { bigClimb } from '../climb.js';
+import { DASH, duration, esc, money, pct, phrase, ratio, stackLabel } from '../format.js';
+
+export type AttemptTab = 'checks' | 'screenshots' | 'files' | 'log';
+
+export interface AttemptPageInput {
+  sheet: CampaignSheet;
+  attemptId: string;
+  tab: AttemptTab;
+  checks: AttemptChecks | null;
+  evidence: AttemptPackage | null;
+  log: string;
+}
+
+const GLYPH: Record<string, string> = { pass: '<span class="p">✓</span>',
+  fail: '<span class="f">✕</span>', 'not-run': '<span class="x">·</span>' };
+
+function locate(sheet: CampaignSheet, attemptId: string): {
+  stack: SheetStack;
+  attempt: SheetAttempt;
+} | null {
+  for (const stack of sheet.stacks) {
+    const attempt = stack.attempts.find(item => item.id === attemptId);
+    if (attempt) return { stack, attempt };
+  }
+  return null;
+}
+
+function checksTable(checks: AttemptChecks | null): string {
+  if (!checks) return '';
+  const features = new Map<string, AttemptCheck[]>();
+  for (const check of checks.checks) {
+    features.set(check.feature, [...features.get(check.feature) ?? [], check]);
+  }
+  const groups = [...features.entries()].map(([feature, items]) => {
+    const points = items.reduce((total, check) => total + check.points, 0);
+    const passed = items.filter(check => check.outcome === 'pass')
+      .reduce((total, check) => total + check.points, 0);
+    return `<tr class="group"><td colspan="3">${esc(feature)}`
+      + `<i>${ratio(passed, points)}</i></td></tr>`
+      + items.map(check => `<tr><td class="k">${esc(check.id)}</td>`
+        + `<td class="d">${esc(check.description)}</td><td class="h">`
+        + `${check.history.map(outcome => GLYPH[outcome] ?? GLYPH['not-run']).join('')}`
+        + '</td></tr>').join('');
+  }).join('');
+  return '<div class="grade-key">Each mark is one grading pass, from left to right. '
+    + '<span class="p">✓ Pass</span><span class="f">✕ Fail</span>'
+    + '<span class="x">· Not run</span></div>'
+    + '<div class="wrap"><table class="checks"><thead><tr><th>Check</th><th>Proves</th>'
+    + `<th>Grades</th></tr></thead><tbody>${groups}</tbody></table></div>`;
+}
+
+function artifacts(evidence: AttemptPackage | null, key: string, visual: boolean): string {
+  const items = (evidence?.executions ?? []).flatMap(execution =>
+    visual ? execution.visuals : execution.artifacts.filter(item => item.kind !== 'visual'));
+  const link = (id: string): string =>
+    `/api/campaigns/${encodeURIComponent(key)}/artifacts/${encodeURIComponent(id)}`;
+  if (visual) {
+    return `<div class="shots">${items.map(item => {
+      const source = link(item.id);
+      return `<button type="button" data-shot="${source}" data-shot-name="${esc(item.name)}">`
+        + `<img src="${source}" alt="${esc(item.name)}"></button>`;
+    }).join('')}</div><dialog class="lightbox"><form method="dialog">`
+      + '<button type="submit">Close</button></form><img alt=""></dialog>';
+  }
+  return `<div class="files-list">${items.map(item =>
+    `<a href="${link(item.id)}">${esc(item.path)}</a>`).join('')}</div>`;
+}
+
+export function attemptPage({ sheet, attemptId, tab, checks, evidence, log }: AttemptPageInput): string {
+  const found = locate(sheet, attemptId);
+  const crumbs = (tail: string): string => `<div class="crumbs"><a href="/">Campaigns</a> / `
+    + `<a href="/c/${encodeURIComponent(sheet.key)}">${esc(sheet.title)}</a> / `
+    + `<b>${esc(tail)}</b></div>`;
+  if (!found) {
+    return `<div class="page">${crumbs(attemptId)}`
+      + '<div class="title"><h2>no attempt</h2></div></div>';
+  }
+  const { stack, attempt } = found;
+  const name = `${stackLabel(stack.stack)} rep ${attempt.repetition}`;
+  const counts: Record<AttemptTab, string> = {
+    checks: checks ? String(checks.checks.length) : '',
+    screenshots: evidence
+      ? String(evidence.executions.reduce((total, item) => total + item.visuals.length, 0)) : '',
+    files: evidence ? String(evidence.executions.reduce((total, item) =>
+      total + item.artifacts.filter(entry => entry.kind !== 'visual').length, 0)) : '',
+    log: attempt.status === 'running' ? 'live' : '',
+  };
+  const tabs = (['checks', 'screenshots', 'files', 'log'] as const).map(entry =>
+    `<a class="${entry === tab ? 'on' : ''}" href="?tab=${entry}">`
+    + `${entry[0]!.toUpperCase()}${entry.slice(1)}`
+    + `${counts[entry] ? `<i>${esc(counts[entry])}</i>` : ''}</a>`).join('');
+  const figure = (label: string, text: string, tone = ''): string =>
+    `<div><span class="label">${esc(label)}</span><b class="${tone}">${text}</b></div>`;
+  const stage = (level: number): string =>
+    sheet.mode === 'dependency' ? `depth ${level}` : `L${level}`;
+  const panel = tab === 'checks' ? checksTable(checks)
+    : tab === 'log' ? `<pre class="log">${esc(log)}</pre>`
+      : artifacts(evidence, sheet.key, tab === 'screenshots');
+  const issue = attempt.excluded
+    ? `<div class="issue"><span class="label">Why this run was excluded</span>`
+      + `<p>${esc(attempt.excluded)}</p></div>` : '';
+  return `<div class="page">${crumbs(name)}`
+    + `<div class="title"><h2>${esc(stackLabel(stack.stack))} `
+    + `<span>rep ${attempt.repetition}</span></h2></div>`
+    + `<div class="figs">${figure('Score', pct(attempt.score), sheet.provisional ? 'prov' : '')}`
+    + figure('Unaided', pct(attempt.unaided))
+    + figure('Repairs', ratio(attempt.repairs.used, attempt.repairs.budget))
+    + figure('Time', duration(attempt.timeSec))
+    + figure('Spend', money(attempt.spendUsd))
+    + figure('Now', esc(phrase(attempt)), attempt.stalling ? 'now warn' : 'now')
+    + `</div>${issue}${bigClimb(attempt.climb, stage) || `<p class="v">${DASH}</p>`}`
+    + `<div class="tabs">${tabs}</div>${panel}</div>`;
+}
diff --git a/tools/stack-bench/dashboard/public/views/campaign.ts b/tools/stack-bench/dashboard/public/views/campaign.ts
new file mode 100644
index 00000000000..37f7ac8a722
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/views/campaign.ts
@@ -0,0 +1,241 @@
+// One campaign is one sheet: stacks across in fixed order, facts down, one
+// value per cell. The questline rows are the grid; Graph and Replay replace
+// them with a full-width cell drawn by the shared graph renderer.
+
+import type { CampaignProgression, CampaignSheet, ProgressionStep, SheetAttempt, SheetStack }
+  from '../../dashboard-views.js';
+import { climb } from '../climb.js';
+import { DASH, duration, esc, money, num, pct, phrase, ratio, stackLabel } from '../format.js';
+import { STACK_ORDER } from '../metrics.js';
+import { graph } from '../graph.js';
+
+export type QuestlineView = 'grid' | 'graph' | 'replay';
+
+export interface CampaignPageInput {
+  sheet: CampaignSheet;
+  progression: CampaignProgression | null;
+  view: QuestlineView;
+  step: number;
+}
+
+export interface ReplayEvent {
+  stack: string;
+  ordinal: number;
+  step: ProgressionStep;
+}
+
+const DOT: Record<string, string> = { passed: 'p', active: 'a', working: 'a', failed: 'f',
+  blocked: 'b', locked: 'o' };
+
+function short(value: string | null): string {
+  return value ? value.slice(0, 12) : DASH;
+}
+
+function ordered(sheet: CampaignSheet): SheetStack[] {
+  return STACK_ORDER.flatMap(stack => sheet.stacks.filter(entry => entry.stack === stack));
+}
+
+function latest(stack: SheetStack): SheetAttempt | null {
+  return stack.attempts.findLast(attempt => attempt.status === 'running')
+    ?? stack.attempts.at(-1) ?? null;
+}
+
+function facts(sheet: CampaignSheet): string {
+  const fact = sheet.facts;
+  const dependency = sheet.mode === 'dependency';
+  const depth = sheet.levels.length ? Math.max(...sheet.levels) : 0;
+  const cells: Array<[string, string, string]> = [['Mode', fact.mode, '']];
+  cells.push(dependency ? ['Depth', String(depth), '']
+    : ['Levels', sheet.levels.map(level => `L${level}`).join('–'), '']);
+  if (dependency) {
+    cells.push(['Work', fact.workSelection ?? DASH, ''],
+      ['Repair', fact.repairSelection ?? DASH, ''],
+      ['Repair budget', String(fact.repairBudget), '']);
+  } else {
+    cells.push(['Repair budget', String(fact.repairBudget), '']);
+  }
+  cells.push(['Repetitions', String(sheet.repetitions), ''],
+    ['Agent', fact.agent ?? DASH, ''], ['Model', fact.model ?? DASH, ''],
+    ['Guidance', fact.guidance ?? DASH, ''],
+    [fact.recipes.length > 1 ? 'Recipes' : 'Recipe', fact.recipes.map(recipe =>
+      [recipe.id, recipe.version].filter(Boolean).join(' ')).join(' · ') || DASH, ''],
+    ['Time limit', `${fact.timeLimitMinutes} min`, ''],
+    ['Spend limit', fact.spendLimitUsd === null ? DASH
+      : `$${fact.spendLimitUsd} per attempt`, ''],
+    ['Controller', short(fact.controllerImage), ''], ['Plan', short(fact.planSha256), ''],
+    ['Grading', fact.grading, fact.gradingReasons.join(' · ')]);
+  if (sheet.mixedScope) cells.push(['Scope', 'mixed', 'attempts do not share one test plan']);
+  const continued = sheet.stacks.filter(stack => stack.continued).length;
+  if (continued) cells.push(['Continued', String(continued), '']);
+  return `<div class="facts">${cells.map(([label, value, hover]) =>
+    `<div><span class="label">${esc(label)}</span><b title="${esc(hover || value)}"`
+    + `${label === 'Grading' && value !== 'qualified' ? ' class="warn"' : ''}>`
+    + `${esc(value)}</b></div>`).join('')}</div>`;
+}
+
+function questlineRows(sheet: CampaignSheet, stacks: readonly SheetStack[]): string {
+  const lead = stacks.find(stack => stack.questlines?.length)?.questlines ?? [];
+  const rows = lead.map(questline => {
+    const cells = stacks.map(stack => {
+      const owned = stack.questlines?.find(entry => entry.id === questline.id) ?? null;
+      const dots = (owned?.nodes ?? []).map(node =>
+        `<i class="dot ${DOT[node.status] ?? 'o'}"></i>`).join('');
+      const score = owned?.score ?? null;
+      return `<div class="q">${dots}<span class="pct${score === 100 ? ' full' : ''}">`
+        + `${pct(score)}</span></div>`;
+    }).join('');
+    return `<div class="q k">${esc(questline.title)}</div>${cells}`;
+  }).join('');
+  const average = stacks.map(stack =>
+    `<div class="band sum"><span class="v">${pct(stack.score)}</span></div>`).join('');
+  if (sheet.mode !== 'dependency') return '';
+  return `${rows}<div class="k band sum">Questline average</div>${average}`;
+}
+
+function levelRows(stacks: readonly SheetStack[]): string {
+  const levels = stacks.find(stack => stack.levels?.length)?.levels ?? [];
+  return levels.map(level => ['unaided', 'score'].map(kind => {
+    const cells = stacks.map(stack => {
+      const owned = stack.levels?.find(entry => entry.level === level.level) ?? null;
+      const points = kind === 'unaided' ? owned?.unaided ?? null : owned?.score ?? null;
+      return `<div class="q"><span class="v">${points
+        ? ratio(points.score, points.max) : DASH}</span></div>`;
+    }).join('');
+    return `<div class="q k">L${level.level} ${kind}</div>${cells}`;
+  }).join('')).join('');
+}
+
+export function replayTimeline(progression: CampaignProgression): ReplayEvent[] {
+  const tracks = STACK_ORDER.flatMap(stack =>
+    progression.stacks.filter(track => track.stack === stack));
+  const depth = Math.max(0, ...tracks.map(track => track.steps.length));
+  const events: ReplayEvent[] = [];
+  for (let ordinal = 0; ordinal < depth; ordinal += 1) {
+    for (const track of tracks) {
+      const step = track.steps[ordinal];
+      if (step) events.push({ stack: track.stack, ordinal, step });
+    }
+  }
+  return events;
+}
+
+function marker(step: ProgressionStep, failed: boolean): string {
+  if (failed) return 'f';
+  if (step.action === 'repair') return 'r';
+  return step.action === 'grant' ? 'g' : 'b';
+}
+
+function replay(progression: CampaignProgression, cursor: number): string {
+  const events = replayTimeline(progression);
+  const span = Math.max(1, events.length - 1);
+  const selected = events[cursor] ?? events.at(-1) ?? null;
+  const failedAt = (step: ProgressionStep): boolean => step.targets.some(target =>
+    step.statuses[progression.nodes.findIndex(node => node.id === target)] === 'failed');
+  const title = (id: string): string =>
+    progression.nodes.find(node => node.id === id)?.title ?? id;
+  const head = selected ? [['Step', ratio(cursor + 1, events.length)],
+    ['Stack', esc(stackLabel(selected.stack))], ['Action', esc(selected.step.action)],
+    ['Feature', selected.step.targets.length === 1
+      ? esc(title(selected.step.targets[0] ?? '')) : `${selected.step.targets.length} features`],
+    ['Score', pct(selected.step.score)], ['Repairs', num(selected.step.repairs)]]
+    .map(([label, value]) => `<div class="ev"><span class="label">${label}</span>`
+      + `<span class="v">${value}</span></div>`).join('') : '';
+  // Drawn as one SVG per stack: the dashboard's policy allows no inline style,
+  // and a marker's position is geometry, not decoration.
+  const at = (index: number): number => 20 + 960 * index / span;
+  const rows = STACK_ORDER.flatMap(stack => progression.stacks
+    .filter(track => track.stack === stack)
+    .map(track => {
+      const marks = events.map((event, index) => event.stack !== track.stack ? '' :
+        `<rect class="st ${marker(event.step, failedAt(event.step))}`
+        + `${index > cursor ? ' dim' : ''}${index === cursor ? ' on' : ''}" `
+        + `x="${at(index).toFixed(1)}" y="9" width="10" height="10" rx="2"/>`).join('');
+      return `<div class="k">${esc(stackLabel(track.stack))}</div><div class="replay span3">`
+        + '<svg class="strip" viewBox="0 0 1000 28">'
+        + `<line class="cur" x1="${at(cursor).toFixed(1)}" y1="2" `
+        + `x2="${at(cursor).toFixed(1)}" y2="26"/>${marks}</svg></div>`;
+    })).join('');
+  const snapshot = STACK_ORDER.flatMap(stack => progression.stacks
+    .filter(track => track.stack === stack).map(track => {
+      const step = events.filter((event, index) =>
+        event.stack === track.stack && index <= cursor).at(-1)?.step ?? null;
+      return { stack: track.stack,
+        statuses: step?.statuses ?? progression.nodes.map(() => 'locked') };
+    }));
+  return `<div class="wide evhead">${head}</div>`
+    + `<div class="wide">${graph(progression, snapshot)}</div>${rows}`;
+}
+
+function board({ sheet, progression, view, step }: CampaignPageInput,
+  stacks: readonly SheetStack[]): string {
+  const chips = (['grid', 'graph', 'replay'] as const).map(entry =>
+    `<a class="chip sm${entry === view ? ' on' : ''}" href="?questlines=${entry}">`
+    + `${entry[0]!.toUpperCase()}${entry.slice(1)}</a>`).join('');
+  const switcher = `<div class="k views">${chips}</div><div></div><div></div><div></div>`;
+  if (sheet.mode !== 'dependency') return levelRows(stacks);
+  if (view === 'grid' || !progression) return switcher + questlineRows(sheet, stacks);
+  if (view === 'graph') {
+    const snapshot = STACK_ORDER.flatMap(stack => progression.stacks
+      .filter(track => track.stack === stack)
+      .map(track => ({ stack: track.stack,
+        statuses: track.steps.at(-1)?.statuses ?? progression.nodes.map(() => 'locked') })));
+    return `${switcher}<div class="wide">${graph(progression, snapshot)}</div>`;
+  }
+  return switcher + replay(progression, step);
+}
+
+export function campaignPage(input: CampaignPageInput): string {
+  const sheet = input.sheet;
+  const stacks = ordered(sheet);
+  const cell = (render: (stack: SheetStack) => string): string =>
+    stacks.map(stack => render(stack)).join('');
+  const row = (label: string, render: (stack: SheetStack) => string): string =>
+    `<div class="k">${esc(label)}</div>${cell(render)}`;
+  const value = (text: string): string => `<div class="v">${text}</div>`;
+  const heads = stacks.map(stack => {
+    const attempt = latest(stack);
+    const label = esc(stackLabel(stack.stack));
+    return `<div class="h">${attempt
+      ? `<a href="/c/${encodeURIComponent(sheet.key)}/a/${encodeURIComponent(attempt.id)}">`
+        + `${label}</a>` : label}</div>`;
+  }).join('');
+  const repetitions = sheet.repetitions > 1
+    ? row('Completed', stack => value(num(stack.n)))
+      + row('Excluded', stack =>
+        value(num(stack.attempts.filter(attempt => attempt.excluded).length)))
+    : '';
+  const evidence = row('Evidence', stack => {
+    const attempt = latest(stack);
+    if (!attempt) return `<div class="links">${DASH}</div>`;
+    const base = `/c/${encodeURIComponent(sheet.key)}/a/${encodeURIComponent(attempt.id)}`;
+    return `<div class="links">${['screenshots', 'files', 'log'].map(tab =>
+      `<a href="${base}?tab=${tab}">${tab}</a>`).join('')}</div>`;
+  });
+  const issues = stacks.some(stack => stack.attempts.some(attempt => attempt.excluded))
+    ? row('Excluded because', stack => {
+      const excluded = stack.attempts.filter(attempt => attempt.excluded);
+      return excluded.length ? `<div class="reasons">${excluded.map(attempt => {
+        const href = `/c/${encodeURIComponent(sheet.key)}/a/${encodeURIComponent(attempt.id)}`;
+        return `<div><a href="${href}">rep ${attempt.repetition}</a>`
+          + `<span title="${esc(attempt.excluded)}">${esc(attempt.excluded)}</span></div>`;
+      }).join('')}</div>` : value(DASH);
+    }) : '';
+  return `<div class="page"><div class="crumbs"><a href="/">Campaigns</a> / `
+    + `<b>${esc(sheet.key)}</b></div>`
+    + `<div class="title"><h2>${esc(sheet.title)}</h2></div>${facts(sheet)}`
+    + `<div class="sheet"><div class="h"></div>${heads}`
+    + row('Score', stack => `<div class="big${sheet.provisional ? ' prov' : ''}">`
+      + `${pct(stack.score)}</div>`)
+    + row('Unaided', stack => value(pct(stack.unaided)))
+    + row('Repairs', stack => value(ratio(stack.repairs.used, stack.repairs.budget)))
+    + row('Regressions', stack => value(num(stack.regressions)))
+    + row('Time', stack => value(duration(stack.timeSec)))
+    + row('Spend', stack => value(money(stack.spendUsd)))
+    + row('Climb', stack => `<div class="chart">${climb(stack.climb, { height: 44 })}</div>`)
+    + row('Attempt', stack => {
+      const attempt = latest(stack);
+      return `<div><span class="phase${attempt?.stalling ? ' warn' : ''}">`
+        + `${attempt ? esc(phrase(attempt)) : DASH}</span></div>`;
+    })
+    + issues + repetitions + board(input, stacks) + evidence + '</div></div>';
+}
diff --git a/tools/stack-bench/dashboard/public/views/campaigns.ts b/tools/stack-bench/dashboard/public/views/campaigns.ts
new file mode 100644
index 00000000000..3ab2ab793b5
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/views/campaigns.ts
@@ -0,0 +1,104 @@
+// Campaigns: a live block per running campaign, then one table of every
+// campaign. Nothing here explains itself — a lane is four cells, a row is
+// seven, and the status word lives in the Status column.
+
+import type { CampaignSheet, OverviewCampaign, OverviewEntry, SheetAttempt }
+  from '../../dashboard-views.js';
+import { climb } from '../climb.js';
+import { DASH, esc, pct, phrase, shape, since, stackLabel, statusWord } from '../format.js';
+import { STACK_ORDER } from '../metrics.js';
+
+export type CampaignFilter = 'all' | 'attention' | 'completed' | 'ready';
+
+const FILTERS: Array<{ id: CampaignFilter; label: string }> = [{ id: 'all', label: 'All' },
+  { id: 'attention', label: 'Needs attention' }, { id: 'completed', label: 'Completed' },
+  { id: 'ready', label: 'Ready' }];
+
+function readable(campaign: OverviewEntry): campaign is OverviewCampaign {
+  return 'scores' in campaign;
+}
+
+function matches(campaign: OverviewEntry, filter: CampaignFilter): boolean {
+  if (filter === 'all') return true;
+  if (filter === 'attention') {
+    return campaign.status === 'attention-required' || campaign.status === 'unreadable';
+  }
+  if (filter === 'completed') return campaign.status === 'completed';
+  return campaign.status === 'prepared';
+}
+
+// Percentage of the points the grades have offered so far, which is the only
+// score a half-finished attempt has.
+function running(attempt: SheetAttempt): number | null {
+  const last = attempt.climb.at(-1);
+  return last && last.max ? 100 * last.score / last.max : attempt.score;
+}
+
+function lane(sheet: CampaignSheet, stack: string, attempt: SheetAttempt): string {
+  const warn = attempt.stalling;
+  return `<div class="lane" data-key="${esc(`${sheet.key}:${attempt.id}`)}">`
+    + `<span class="who">${esc(stackLabel(stack))}</span>`
+    + `<span class="big${sheet.provisional ? ' prov' : ''}">${pct(running(attempt))}</span>`
+    + `<span>${climb(attempt.climb, { warn })}</span>`
+    + `<span class="phase${warn ? ' warn' : ''}">${esc(phrase(attempt))}</span></div>`;
+}
+
+function live(sheet: CampaignSheet): string {
+  const lanes = STACK_ORDER.flatMap(stack => {
+    const owner = sheet.stacks.find(entry => entry.stack === stack);
+    const attempt = owner?.attempts.findLast(item => item.status === 'running');
+    return attempt ? [lane(sheet, stack, attempt)] : [];
+  });
+  if (!lanes.length) return '';
+  return `<div class="live" data-key="${esc(sheet.key)}"><div class="live-head">`
+    + `<b>${esc(sheet.title)}</b></div>${lanes.join('')}</div>`;
+}
+
+function stackCell(campaign: OverviewEntry, stack: string, best: number | null): string {
+  const score = readable(campaign) ? campaign.scores[stack] ?? null : null;
+  if (score === null) return `<td class="stack na">${DASH}</td>`;
+  const value = best !== null && score === best ? `<u>${pct(score)}</u>` : pct(score);
+  return `<td class="stack${readable(campaign) && campaign.provisional ? ' prov' : ''}">`
+    + `${value}</td>`;
+}
+
+function tone(status: string): string {
+  if (status === 'running') return 'run';
+  if (status === 'completed') return 'done';
+  if (status === 'attention-required' || status === 'unreadable') return 'warn';
+  return 'idle';
+}
+
+function row(campaign: OverviewEntry): string {
+  const summary = readable(campaign) ? campaign : null;
+  const best = summary && summary.status === 'completed' && !summary.provisional
+    ? STACK_ORDER.reduce<number | null>((top, stack) => {
+      const score = summary.scores[stack] ?? null;
+      return score !== null && (top === null || score > top) ? score : top;
+    }, null) : null;
+  return `<tr data-key="${esc(campaign.key)}"><td class="name">`
+    + `<a href="/c/${encodeURIComponent(campaign.key)}">${esc(campaign.title)}</a></td>`
+    + `<td class="shape">${summary
+      ? esc(shape(summary.mode, summary.levels, summary.repetitions)) : DASH}</td>`
+    + `<td><span class="state ${tone(campaign.status)}">${esc(statusWord(campaign.status))}</span></td>`
+    + STACK_ORDER.map(stack => stackCell(campaign, stack, best)).join('')
+    + `<td class="when">${summary ? esc(since(summary.updatedAt)) : DASH}</td></tr>`;
+}
+
+export function campaignsPage({ campaigns, sheets, filter }: {
+  campaigns: readonly OverviewEntry[];
+  sheets: readonly CampaignSheet[];
+  filter: CampaignFilter;
+}): string {
+  const shown = campaigns.filter(campaign => matches(campaign, filter));
+  const chips = FILTERS.map(entry =>
+    `<a class="chip${entry.id === filter ? ' on' : ''}" href="/?filter=${entry.id}">`
+    + `${entry.label} ${campaigns.filter(campaign => matches(campaign, entry.id)).length}</a>`).join('');
+  const body = shown.length ? shown.map(row).join('')
+    : `<tr><td colspan="7">no campaigns</td></tr>`;
+  return `<div class="page">${sheets.map(live).join('')}`
+    + `<div class="tablewrap"><div class="toolbar">${chips}</div><div class="wrap">`
+    + '<table class="runs"><thead><tr><th>Campaign</th><th>Shape</th><th>Status</th>'
+    + STACK_ORDER.map(stack => `<th class="stack">${esc(stackLabel(stack))}</th>`).join('')
+    + `<th class="when">Updated</th></tr></thead><tbody>${body}</tbody></table></div></div></div>`;
+}
diff --git a/tools/stack-bench/dashboard/public/views/plans.ts b/tools/stack-bench/dashboard/public/views/plans.ts
new file mode 100644
index 00000000000..13f36db74ce
--- /dev/null
+++ b/tools/stack-bench/dashboard/public/views/plans.ts
@@ -0,0 +1,112 @@
+// Plans, and the chrome that carries the run controls: one table of test
+// plans, the form that starts a run, and the topbar whose Start a run and
+// Resume exist only where the server accepts them. Only a frozen plan runs.
+
+import type { DashboardPlan } from '../../dashboard-model.js';
+import { DASH, esc, money, num } from '../format.js';
+
+export type Page = 'campaigns' | 'plans' | 'campaign';
+
+export interface RunForm {
+  planId: string;
+  outputName: string;
+  secret: string;
+  error: string;
+}
+
+// The server's SAFE_NAME, spelled once here so the field cannot hold a name the
+// route will reject.
+export const RUN_NAME = '[a-z0-9][a-z0-9.-]{2,119}';
+
+const HEADS: Array<[string, string]> = [['Plan', 'name'], ['Mode', 'shape'], ['Shape', 'shape'],
+  ['Stacks', 'stack'], ['Attempts', 'stack'], ['Parallel', 'stack'], ['Repairs', 'stack'],
+  ['Time limit', 'stack'], ['Spend limit', 'stack'], ['State', 'state']];
+
+export function runName(planId: string, now: Date): string {
+  const pad = (value: number): string => String(value).padStart(2, '0');
+  const stamp = `${now.getFullYear()}${pad(now.getMonth() + 1)}${pad(now.getDate())}`
+    + `-${pad(now.getHours())}${pad(now.getMinutes())}`;
+  return `${planId}-${stamp}`.toLowerCase().replace(/[^a-z0-9.-]+/g, '-')
+    .replace(/^[^a-z0-9]+/, '').slice(0, 120);
+}
+
+// A 403 is the wrong operator secret: the tab forgets it and keeps the rest.
+export function afterRun(form: RunForm, status: number, error: string): RunForm {
+  return { ...form, secret: status === 403 ? '' : form.secret, error };
+}
+
+export function topbar({ page, key, canStart, resumable, error }: {
+  page: Page; key: string; canStart: boolean; resumable: boolean; error: string;
+}): string {
+  const artifact = (path: string): string => `/api/campaigns/${encodeURIComponent(key)}/artifacts/`
+    + btoa(path).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+  const files = page === 'campaign'
+    ? '<details class="files"><summary class="btn">Files</summary><div>'
+      + `<a href="${artifact('plan.json')}">plan</a><a href="${artifact('state.json')}">state</a>`
+      + `<a href="${artifact('report/report.html')}">report</a></div></details>` : '';
+  const resume = resumable
+    ? '<form class="secret" data-run="resume"><input name="secret" type="password" required>'
+      + '<button class="btn" type="submit">Resume</button>'
+      + (error ? `<span class="err">${esc(error)}</span>` : '') + '</form>' : '';
+  const nav = (on: boolean, label: string, href: string): string =>
+    `<a class="${on ? 'on' : ''}" href="${href}">${label}</a>`;
+  return '<div class="topbar"><a class="brand" href="/">'
+    + '<img src="/spacetimedb-mark.svg" alt="" width="26" height="24"><b>STACK BENCH</b></a>'
+    + `<nav class="nav">${nav(page !== 'plans', 'Campaigns', '/')}`
+    + `${nav(page === 'plans', 'Plans', '/plans')}</nav><div class="tools">${resume}${files}`
+    + `${canStart && page !== 'plans' ? '<a class="btn primary" href="/plans">Start a run</a>' : ''}`
+    + '</div></div>';
+}
+
+function shapeOf(plan: DashboardPlan): string {
+  const levels = plan.levels ?? [];
+  if (!levels.length) return DASH;
+  const depth = Math.max(...levels);
+  if (plan.mode === 'dependency') return `depth ${depth}`;
+  return levels.length > 1 ? `L${Math.min(...levels)}–L${depth}` : `L${depth}`;
+}
+
+function planRow(plan: DashboardPlan): string {
+  const budgets = plan.budgets ?? null;
+  const stacks = plan.stacks ?? [];
+  const cell = (value: string, hover = ''): string =>
+    `<td class="stack" title="${esc(hover || value)}">${value}</td>`;
+  return `<tr data-key="${esc(plan.file)}">`
+    + `<td class="name" title="${esc(plan.file)}">${esc(plan.title)}</td>`
+    + `<td class="shape">${esc(plan.mode ?? DASH)}</td>`
+    + `<td class="shape">${esc(shapeOf(plan))}</td>`
+    + cell(stacks.length ? num(stacks.length) : DASH, stacks.join(' · '))
+    + cell(num(plan.attempts)) + cell(num(plan.parallelism))
+    + cell(plan.repairBudget === undefined ? DASH : num(plan.repairBudget))
+    + cell(budgets ? `${budgets.attemptTimeoutMinutes} min` : DASH)
+    + cell(budgets ? money(budgets.maxCostUsdPerAttempt) : DASH)
+    + `<td><span class="state ${plan.state === 'frozen' ? 'done' : 'idle'}" `
+    + `title="${esc(plan.error ?? plan.state)}">${esc(plan.state)}</span></td></tr>`;
+}
+
+function runForm(plans: readonly DashboardPlan[], form: RunForm): string {
+  const frozen = plans.filter(plan => plan.state === 'frozen');
+  const options = [...new Set(frozen.map(plan => plan.mode ?? 'sequential'))]
+    .map(mode => `<optgroup label="${esc(mode)}">${frozen
+      .filter(plan => (plan.mode ?? 'sequential') === mode)
+      .map(plan => `<option value="${esc(plan.id)}"${plan.id === form.planId ? ' selected' : ''}>`
+        + `${esc(plan.title)}</option>`).join('')}</optgroup>`).join('');
+  const field = (label: string, control: string): string =>
+    `<div><span class="label">${label}</span>${control}</div>`;
+  return '<form class="runform" data-run="start">'
+    + field('Plan', `<select name="plan" required>${options}</select>`)
+    + field('Run name', `<input name="output" required pattern="${RUN_NAME}">`)
+    + field('Secret', '<input name="secret" type="password" required>')
+    + '<button class="btn primary" type="submit">Start a run</button>'
+    + (form.error ? `<div class="err">${esc(form.error)}</div>` : '') + '</form>';
+}
+
+export function plansPage({ plans, canStart, form }: {
+  plans: readonly DashboardPlan[]; canStart: boolean; form: RunForm;
+}): string {
+  return `<div class="page">${canStart ? runForm(plans, form) : ''}`
+    + '<div class="tablewrap"><div class="wrap"><table class="runs plans"><thead><tr>'
+    + HEADS.map(([label, kind]) => `<th class="${kind}">${label}</th>`).join('')
+    + `</tr></thead><tbody>${plans.length ? plans.map(planRow).join('')
+      : `<tr><td colspan="${HEADS.length}">no plans</td></tr>`}</tbody></table></div></div></div>`;
+}
diff --git a/tools/stack-bench/docker-compose.yaml b/tools/stack-bench/docker-compose.yaml
new file mode 100644
index 00000000000..82b36ef8630
--- /dev/null
+++ b/tools/stack-bench/docker-compose.yaml
@@ -0,0 +1,49 @@
+# Databases for the Postgres and MongoDB backends.
+#
+# Development-only ports, container names and volumes keep this stack separate
+# from the appliance. The SpacetimeDB
+# backend needs no service here; run `spacetime start` for it.
+#
+#   docker compose -f tools/stack-bench/docker-compose.yaml up -d
+#
+name: stack-bench
+
+services:
+  postgres:
+    image: postgres:16@sha256:219341e4cedb06c8634f80af40851da3425b41b76603fd890272f58e37e139f7
+    container_name: stack-bench-dev-postgres
+    ports:
+      - "127.0.0.1:6532:5432"
+    environment:
+      POSTGRES_USER: appuser
+      POSTGRES_PASSWORD: local-app-password
+      POSTGRES_DB: app
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U appuser -d app"]
+      interval: 5s
+      timeout: 5s
+      retries: 12
+
+  # Single node, no replica set: change streams would give MongoDB a push
+  # mechanism the Postgres backend does not have, and the comparison is about
+  # what an agent builds on a standard stack.
+  mongodb:
+    image: mongo:7@sha256:554a9bb1ec6e00c40ba078a41974a834d1a9a8ab1772645b69142afecc87f082
+    container_name: stack-bench-dev-mongodb
+    ports:
+      - "127.0.0.1:6537:27017"
+    volumes:
+      - mongodata:/data/db
+    healthcheck:
+      test: ["CMD", "mongosh", "--quiet", "--eval", "db.runCommand({ping:1})"]
+      interval: 5s
+      timeout: 5s
+      retries: 12
+
+volumes:
+  pgdata:
+    name: stack-bench-dev-pgdata
+  mongodata:
+    name: stack-bench-dev-mongodata
diff --git a/tools/stack-bench/docs/README.md b/tools/stack-bench/docs/README.md
new file mode 100644
index 00000000000..8071c0e6200
--- /dev/null
+++ b/tools/stack-bench/docs/README.md
@@ -0,0 +1,41 @@
+# Stack Bench documentation
+
+Use the root [README](../README.md) for the product summary.
+
+## Run Stack Bench
+
+- [Development](development.md): local dependencies and source checks
+- [Appliance operation](../appliance/README.md): configure and run campaigns
+- [Dashboard](../dashboard/README.md): optional web interface
+- [Recovery](../appliance/RECOVERY.md): interrupted runs and retained resources
+- [Release](../appliance/RELEASE.md): assemble and verify a release
+
+## Understand the system
+
+- [System design](system-design.md): ownership, data flow, and operator loop
+- [Prompting method](prompting.md): prompt inputs, specification treatments,
+  stack guidance, and repair examples
+- [Appliance design](../appliance/DESIGN.md): security and container boundaries
+- [Grader](../grader/README.md): scoring, evidence, and grader validation
+- [Reference apps](../reference-apps/README.md): known-good grading fixtures
+
+## Define benchmark work
+
+- [Ecommerce composition](../tracks/ecommerce/composition/README.md): packs,
+  recipes, calibration, and specification treatment
+- [Ecommerce levels](../tracks/ecommerce/LEVELS.md): cumulative and dependency
+  progression
+- [Chat levels](../tracks/chat/LEVELS.md): current chat scope
+
+## Visuals
+
+- [Dependency graph](dependency-graph.html): generated ecommerce feature graph
+- [Technical guide](technical-guide.html): current run path
+- [Presentation](stack-bench.html): product presentation
+
+`dependency-graph.html` is generated from the versioned graph with
+`npm run graph`. Do not edit it by hand.
+
+Markdown files under `backends/`, `conditions/`, `tracks/*/prompts`, and
+`tracks/*/contracts` are executable benchmark inputs. They stay with their
+owners and are not general documentation.
diff --git a/tools/stack-bench/docs/dependency-graph.html b/tools/stack-bench/docs/dependency-graph.html
new file mode 100644
index 00000000000..527fca8c706
--- /dev/null
+++ b/tools/stack-bench/docs/dependency-graph.html
@@ -0,0 +1,1301 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Stack Bench | Dependency Graph</title>
+<style>
+  :root {
+    color-scheme: dark;
+    --bg: #050706;
+    --panel: #0b1110;
+    --panel-raised: #101716;
+    --line: #22322f;
+    --line-strong: #3b504b;
+    --text: #eef3f1;
+    --muted: #91a09d;
+    --dim: #5e6b68;
+    --green: #21f38a;
+    --green-bg: #0d2b1c;
+    --blue: #62c7ff;
+    --blue-bg: #102938;
+    --yellow: #f3c959;
+    --yellow-bg: #352b13;
+    --mono: ui-monospace, "SFMono-Regular", Consolas, "Liberation Mono", monospace;
+    --sans: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+  }
+
+  * { box-sizing: border-box; }
+
+  html, body { min-height: 100%; }
+
+  body {
+    margin: 0;
+    background: var(--bg);
+    color: var(--text);
+    font-family: var(--sans);
+  }
+
+  body::before {
+    content: "";
+    position: fixed;
+    inset: 0;
+    pointer-events: none;
+    opacity: .12;
+    background-image:
+      linear-gradient(var(--line) 1px, transparent 1px),
+      linear-gradient(90deg, var(--line) 1px, transparent 1px);
+    background-size: 40px 40px;
+  }
+
+  button { font: inherit; }
+
+  .shell {
+    position: relative;
+    z-index: 1;
+    width: min(1440px, 100%);
+    min-height: 100vh;
+    margin: 0 auto;
+    padding: 24px;
+  }
+
+  header {
+    display: flex;
+    align-items: flex-start;
+    justify-content: space-between;
+    gap: 24px;
+    margin-bottom: 18px;
+  }
+
+  h1 { margin: 0 0 8px; font-size: 28px; line-height: 1.1; letter-spacing: -.025em; }
+  .subtitle { margin: 0; color: var(--muted); font-size: 14px; line-height: 1.5; }
+
+  .toolbar {
+    display: flex;
+    align-items: center;
+    gap: 18px;
+    min-height: 52px;
+    margin-bottom: 14px;
+    padding: 10px 14px;
+    border: 1px solid var(--line);
+    border-radius: 9px;
+    background: rgba(11, 17, 16, .94);
+  }
+
+  .legend { display: flex; flex-wrap: wrap; gap: 18px; }
+  .legend span { color: var(--muted); font: 10px/1 var(--mono); text-transform: uppercase; letter-spacing: .07em; }
+  .legend i { display: inline-block; width: 7px; height: 7px; margin-right: 7px; border-radius: 50%; }
+  .legend .qualified { background: var(--green); }
+  .legend .draft { background: var(--yellow); }
+
+  .graph-panel {
+    border: 1px solid var(--line);
+    border-radius: 10px;
+    background: rgba(11, 17, 16, .96);
+  }
+
+  .graph-panel { min-width: 0; overflow: auto; }
+
+  .graph-canvas {
+    position: relative;
+    min-width: 1320px;
+    min-height: 680px;
+    padding: 18px;
+  }
+
+  #edges {
+    position: absolute;
+    inset: 0;
+    z-index: 0;
+    width: 100%;
+    height: 100%;
+    overflow: visible;
+    pointer-events: none;
+  }
+
+  .edge {
+    fill: none;
+    stroke-width: 1.75;
+    opacity: .1;
+    transition: opacity 120ms ease, stroke-width 120ms ease;
+  }
+
+  .edge.qualified { stroke: var(--green); }
+  .edge.draft { stroke: var(--yellow); }
+  .edge.muted { opacity: .025; }
+  .edge.active { opacity: 1; stroke-width: 2.75; }
+
+  .graph-grid {
+    position: relative;
+    z-index: 1;
+    display: grid;
+    grid-template-columns: 170px repeat(var(--depth-count, 4), minmax(160px, 1fr));
+    gap: 0 30px;
+  }
+
+  .depth-head {
+    display: flex;
+    align-items: center;
+    min-height: 38px;
+    padding: 0 10px 10px;
+    border-bottom: 1px solid var(--line);
+    color: var(--muted);
+    font: 10px/1 var(--mono);
+    letter-spacing: .09em;
+    text-transform: uppercase;
+  }
+
+  .depth-head:first-child { padding-left: 0; }
+
+  .questline-label,
+  .questline-cell {
+    min-height: 76px;
+    padding: 10px;
+    border-bottom: 1px solid rgba(34, 50, 47, .72);
+  }
+
+  .questline-label {
+    display: flex;
+    align-items: flex-start;
+    padding-left: 0;
+    color: var(--muted);
+    font: 600 12px/1.25 var(--sans);
+  }
+
+  .questline-cell {
+    display: grid;
+    align-content: start;
+    gap: 8px;
+  }
+
+  .node {
+    width: 100%;
+    min-height: 52px;
+    margin: 0;
+    padding: 9px 11px;
+    display: grid;
+    grid-template-columns: 1fr auto;
+    gap: 5px 12px;
+    align-items: center;
+    border: 1px solid var(--line-strong);
+    border-radius: 8px;
+    background: var(--panel-raised);
+    color: var(--text);
+    text-align: left;
+    cursor: pointer;
+    transition: opacity 120ms ease, border-color 120ms ease, box-shadow 120ms ease;
+  }
+
+  .node .name { min-width: 0; font: 600 11.5px/1.25 var(--mono); }
+  .node .state { grid-column: 2; font: 700 11px/1 var(--mono); }
+
+  .node.qualified { border-color: #287b55; background: var(--green-bg); }
+  .node.qualified .state { color: var(--green); }
+  .node.draft { border-color: #766329; background: var(--yellow-bg); }
+  .node.draft .state { color: var(--yellow); }
+  .node.muted { opacity: .2; }
+  .node.active { box-shadow: 0 0 0 1px currentColor; }
+
+  .footnote { margin: 14px 2px 0; color: var(--muted); font-size: 12px; line-height: 1.5; }
+
+  @media (max-width: 900px) {
+    header { display: block; }
+  }
+
+  @media (max-width: 560px) {
+    .shell { padding: 16px; }
+    .toolbar { display: block; }
+  }
+</style>
+</head>
+<body>
+<main class="shell">
+  <header>
+    <div>
+      <h1>Ecommerce dependency graph</h1>
+      <p class="subtitle">Each row is a questline. Select a feature to see what it needs and what it unlocks.</p>
+    </div>
+  </header>
+
+  <div class="toolbar">
+    <div class="legend" aria-label="Feature release states">
+      <span><i class="qualified"></i>Qualified feature pack</span>
+      <span><i class="draft"></i>Draft feature pack</span>
+    </div>
+  </div>
+
+  <section class="graph-panel" aria-label="Feature graph">
+    <div class="graph-canvas" id="graph-canvas">
+      <svg id="edges" aria-hidden="true">
+        <defs>
+          <marker id="arrow-qualified" markerWidth="10" markerHeight="10" refX="9" refY="5" orient="auto" markerUnits="userSpaceOnUse">
+            <path d="M0,0 L10,5 L0,10 Z" fill="#21f38a"></path>
+          </marker>
+          <marker id="arrow-draft" markerWidth="10" markerHeight="10" refX="9" refY="5" orient="auto" markerUnits="userSpaceOnUse">
+            <path d="M0,0 L10,5 L0,10 Z" fill="#f3c959"></path>
+          </marker>
+        </defs>
+      </svg>
+      <div class="graph-grid" id="graph-grid"></div>
+    </div>
+  </section>
+</main>
+
+<script>
+  /* STACK_BENCH_GRAPH_START */
+  const graph = {
+  "schemaVersion": 1,
+  "definition": {
+    "id": "ecommerce.questlines",
+    "version": "2.0.2",
+    "state": "draft"
+  },
+  "levels": 6,
+  "questlines": [
+    {
+      "id": "business-operations",
+      "title": "Business operations"
+    },
+    {
+      "id": "catalog-discovery",
+      "title": "Catalog and discovery"
+    },
+    {
+      "id": "customer-support",
+      "title": "Customer support"
+    },
+    {
+      "id": "identity-profiles",
+      "title": "Identity and profiles"
+    },
+    {
+      "id": "inventory",
+      "title": "Inventory"
+    },
+    {
+      "id": "notifications",
+      "title": "Notifications"
+    },
+    {
+      "id": "orders-fulfillment",
+      "title": "Orders and fulfilment"
+    },
+    {
+      "id": "promotions",
+      "title": "Promotions"
+    },
+    {
+      "id": "recommendations",
+      "title": "Recommendations"
+    },
+    {
+      "id": "reviews",
+      "title": "Reviews"
+    },
+    {
+      "id": "shopping-checkout",
+      "title": "Shopping and checkout"
+    },
+    {
+      "id": "staff-access",
+      "title": "Staff access"
+    }
+  ],
+  "nodes": [
+    {
+      "id": "accounts",
+      "name": "Accounts",
+      "description": "Account creation, sign-in, and sign-out.",
+      "level": 1,
+      "state": "qualified",
+      "parents": [],
+      "dependencyReasons": {},
+      "questline": "identity-profiles",
+      "featureRefs": [
+        "ecommerce.feature.accounts@1.2.0"
+      ],
+      "checks": 5,
+      "points": 5
+    },
+    {
+      "id": "catalog",
+      "name": "Catalog items",
+      "description": "Public catalog item values used by shopping features.",
+      "level": 1,
+      "state": "qualified",
+      "parents": [],
+      "dependencyReasons": {},
+      "questline": "catalog-discovery",
+      "featureRefs": [
+        "ecommerce.feature.catalog-items@1.0.0"
+      ],
+      "checks": 1,
+      "points": 1
+    },
+    {
+      "id": "staff-access",
+      "name": "Staff access",
+      "description": "Staff and administrator sign-in.",
+      "level": 1,
+      "state": "draft",
+      "parents": [],
+      "dependencyReasons": {},
+      "questline": "staff-access",
+      "featureRefs": [
+        "ecommerce.progression.staff-access@1.0.0"
+      ],
+      "checks": 2,
+      "points": 4
+    },
+    {
+      "id": "support-intake",
+      "name": "Support intake",
+      "description": "Public support ticket creation and references.",
+      "level": 1,
+      "state": "qualified",
+      "parents": [],
+      "dependencyReasons": {},
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.support-intake@1.0.0"
+      ],
+      "checks": 1,
+      "points": 2
+    },
+    {
+      "id": "customer-profile",
+      "name": "Customer profile",
+      "description": "Customer details and shipping address.",
+      "level": 2,
+      "state": "draft",
+      "parents": [
+        "accounts"
+      ],
+      "dependencyReasons": {
+        "accounts": "A profile belongs to a customer account."
+      },
+      "questline": "identity-profiles",
+      "featureRefs": [
+        "ecommerce.progression.customer-profile@1.0.0"
+      ],
+      "checks": 3,
+      "points": 5
+    },
+    {
+      "id": "notification-preferences",
+      "name": "Notification preferences",
+      "description": "Customer notification choices.",
+      "level": 2,
+      "state": "draft",
+      "parents": [
+        "accounts"
+      ],
+      "dependencyReasons": {
+        "accounts": "Preferences belong to an account."
+      },
+      "questline": "notifications",
+      "featureRefs": [
+        "ecommerce.progression.notification-preferences@1.0.0"
+      ],
+      "checks": 3,
+      "points": 5
+    },
+    {
+      "id": "purchasing",
+      "name": "Purchasing and orders",
+      "description": "Immediate purchase and customer order history.",
+      "level": 2,
+      "state": "qualified",
+      "parents": [
+        "accounts",
+        "catalog"
+      ],
+      "dependencyReasons": {
+        "accounts": "A purchase needs a buyer.",
+        "catalog": "A purchase needs an item."
+      },
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.feature.purchasing@1.2.1"
+      ],
+      "checks": 8,
+      "points": 12
+    },
+    {
+      "id": "cart",
+      "name": "Cart",
+      "description": "A signed-in customer cart.",
+      "level": 2,
+      "state": "qualified",
+      "parents": [
+        "accounts",
+        "catalog"
+      ],
+      "dependencyReasons": {
+        "accounts": "An account cart belongs to a buyer.",
+        "catalog": "A cart contains catalog items."
+      },
+      "questline": "shopping-checkout",
+      "featureRefs": [
+        "ecommerce.feature.cart@2.0.0"
+      ],
+      "checks": 5,
+      "points": 7
+    },
+    {
+      "id": "catalog-discovery",
+      "name": "Catalog discovery",
+      "description": "Public catalog ranking and full-catalog search.",
+      "level": 2,
+      "state": "qualified",
+      "parents": [
+        "catalog"
+      ],
+      "dependencyReasons": {
+        "catalog": "Discovery ranks and searches catalog items."
+      },
+      "questline": "catalog-discovery",
+      "featureRefs": [
+        "ecommerce.feature.catalog-discovery@1.0.0"
+      ],
+      "checks": 2,
+      "points": 2
+    },
+    {
+      "id": "support-history",
+      "name": "Customer support history",
+      "description": "Customer support ticket history.",
+      "level": 2,
+      "state": "draft",
+      "parents": [
+        "accounts",
+        "support-intake"
+      ],
+      "dependencyReasons": {
+        "accounts": "Owned ticket history requires an account.",
+        "support-intake": "History contains submitted tickets."
+      },
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.support-history@1.0.0"
+      ],
+      "checks": 4,
+      "points": 7
+    },
+    {
+      "id": "warehouse-admin",
+      "name": "Warehouse administration",
+      "description": "Warehouse inventory, restocking, and revenue views.",
+      "level": 2,
+      "state": "draft",
+      "parents": [
+        "catalog",
+        "staff-access"
+      ],
+      "dependencyReasons": {
+        "catalog": "Warehouse stock belongs to catalog items.",
+        "staff-access": "Warehouse changes require staff access."
+      },
+      "questline": "inventory",
+      "featureRefs": [
+        "ecommerce.feature.warehouse-admin@1.2.1"
+      ],
+      "checks": 8,
+      "points": 10
+    },
+    {
+      "id": "promotion-rules",
+      "name": "Promotion rules",
+      "description": "Staff-managed bounded promotion codes.",
+      "level": 2,
+      "state": "draft",
+      "parents": [
+        "catalog",
+        "staff-access"
+      ],
+      "dependencyReasons": {
+        "catalog": "Promotions apply to catalog sales.",
+        "staff-access": "Promotion rules require staff access."
+      },
+      "questline": "promotions",
+      "featureRefs": [
+        "ecommerce.progression.promotion-rules@1.0.1"
+      ],
+      "checks": 2,
+      "points": 4
+    },
+    {
+      "id": "staff-roles",
+      "name": "Staff roles",
+      "description": "Role assignment for staff accounts.",
+      "level": 2,
+      "state": "draft",
+      "parents": [
+        "staff-access"
+      ],
+      "dependencyReasons": {
+        "staff-access": "Roles apply to staff identities."
+      },
+      "questline": "staff-access",
+      "featureRefs": [
+        "ecommerce.progression.staff-roles@1.0.1"
+      ],
+      "checks": 3,
+      "points": 5
+    },
+    {
+      "id": "support-triage",
+      "name": "Support triage",
+      "description": "Staff assignment, priority, and status changes.",
+      "level": 2,
+      "state": "qualified",
+      "parents": [
+        "staff-access",
+        "support-intake"
+      ],
+      "dependencyReasons": {
+        "staff-access": "Triage requires a staff member.",
+        "support-intake": "Triage operates on submitted tickets."
+      },
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.support-triage@1.0.0"
+      ],
+      "checks": 3,
+      "points": 3
+    },
+    {
+      "id": "sales-dashboard",
+      "name": "Sales dashboard",
+      "description": "Category totals and best sellers.",
+      "level": 3,
+      "state": "draft",
+      "parents": [
+        "purchasing"
+      ],
+      "dependencyReasons": {
+        "purchasing": "The dashboard summarizes sales."
+      },
+      "questline": "business-operations",
+      "featureRefs": [
+        "ecommerce.l2.sales-dashboard@2.0.0"
+      ],
+      "checks": 5,
+      "points": 7
+    },
+    {
+      "id": "reviews",
+      "name": "Reviews",
+      "description": "Item ratings and comments.",
+      "level": 3,
+      "state": "draft",
+      "parents": [
+        "purchasing"
+      ],
+      "dependencyReasons": {
+        "purchasing": "A verified review needs a purchase."
+      },
+      "questline": "reviews",
+      "featureRefs": [
+        "ecommerce.feature.reviews@1.2.2"
+      ],
+      "checks": 7,
+      "points": 10
+    },
+    {
+      "id": "recommendations",
+      "name": "Recommendations",
+      "description": "Customer recommendations based on purchase activity and cart contents.",
+      "level": 3,
+      "state": "qualified",
+      "parents": [
+        "cart",
+        "purchasing"
+      ],
+      "dependencyReasons": {
+        "cart": "Recommendations exclude items already in the cart.",
+        "purchasing": "Recommendations use customer purchase activity."
+      },
+      "questline": "recommendations",
+      "featureRefs": [
+        "ecommerce.l2.recommendations@2.0.0"
+      ],
+      "checks": 1,
+      "points": 2
+    },
+    {
+      "id": "checkout",
+      "name": "Checkout",
+      "description": "Turn a cart into an order.",
+      "level": 3,
+      "state": "qualified",
+      "parents": [
+        "cart"
+      ],
+      "dependencyReasons": {
+        "cart": "Checkout turns a cart into an order."
+      },
+      "questline": "shopping-checkout",
+      "featureRefs": [
+        "ecommerce.feature.checkout@2.0.0"
+      ],
+      "checks": 5,
+      "points": 6
+    },
+    {
+      "id": "stock-alerts",
+      "name": "Stock alerts",
+      "description": "Customer alerts when stock returns.",
+      "level": 3,
+      "state": "draft",
+      "parents": [
+        "notification-preferences",
+        "warehouse-admin"
+      ],
+      "dependencyReasons": {
+        "notification-preferences": "The customer chooses whether to receive alerts.",
+        "warehouse-admin": "Alerts respond to warehouse stock changes."
+      },
+      "questline": "notifications",
+      "featureRefs": [
+        "ecommerce.progression.stock-alerts@1.0.1"
+      ],
+      "checks": 3,
+      "points": 4
+    },
+    {
+      "id": "faceted-search",
+      "name": "Faceted search",
+      "description": "Combined catalogue filters with stable pagination.",
+      "level": 3,
+      "state": "draft",
+      "parents": [
+        "catalog-discovery"
+      ],
+      "dependencyReasons": {
+        "catalog-discovery": "Facets refine catalog discovery."
+      },
+      "questline": "catalog-discovery",
+      "featureRefs": [
+        "ecommerce.progression.faceted-search@1.0.1"
+      ],
+      "checks": 2,
+      "points": 6
+    },
+    {
+      "id": "fulfilment-queue",
+      "name": "Fulfilment queue",
+      "description": "Staff and administrator fulfilment workflows.",
+      "level": 3,
+      "state": "draft",
+      "parents": [
+        "purchasing",
+        "warehouse-admin"
+      ],
+      "dependencyReasons": {
+        "purchasing": "Fulfilment needs orders.",
+        "warehouse-admin": "Fulfilment needs warehouse stock."
+      },
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.progression.fulfilment-queue@1.0.1"
+      ],
+      "checks": 9,
+      "points": 12
+    },
+    {
+      "id": "order-cancellation",
+      "name": "Order cancellation",
+      "description": "Cancel pending orders without losing stock or accounting accuracy.",
+      "level": 3,
+      "state": "qualified",
+      "parents": [
+        "purchasing",
+        "warehouse-admin"
+      ],
+      "dependencyReasons": {
+        "purchasing": "Cancellation needs an order.",
+        "warehouse-admin": "Cancelled stock returns to its original warehouse."
+      },
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.l2.order-cancellation-features@1.0.1"
+      ],
+      "checks": 6,
+      "points": 11
+    },
+    {
+      "id": "catalog-management",
+      "name": "Catalog management",
+      "description": "Staff-managed products and named variants.",
+      "level": 3,
+      "state": "draft",
+      "parents": [
+        "catalog-discovery",
+        "staff-roles"
+      ],
+      "dependencyReasons": {
+        "catalog-discovery": "Staff use catalog discovery to find managed products.",
+        "staff-roles": "Catalog changes require an authorized staff role."
+      },
+      "questline": "business-operations",
+      "featureRefs": [
+        "ecommerce.progression.catalog-management@1.0.3"
+      ],
+      "checks": 2,
+      "points": 4
+    },
+    {
+      "id": "inventory-dashboard",
+      "name": "Inventory dashboard",
+      "description": "A low-stock dashboard.",
+      "level": 3,
+      "state": "draft",
+      "parents": [
+        "warehouse-admin"
+      ],
+      "dependencyReasons": {
+        "warehouse-admin": "The dashboard shows warehouse stock."
+      },
+      "questline": "business-operations",
+      "featureRefs": [
+        "ecommerce.l2.inventory-dashboard@2.0.0"
+      ],
+      "checks": 2,
+      "points": 4
+    },
+    {
+      "id": "scheduled-restocks",
+      "name": "Scheduled restocks",
+      "description": "Pending, completed, and cancelled scheduled restocks.",
+      "level": 3,
+      "state": "qualified",
+      "parents": [
+        "warehouse-admin"
+      ],
+      "dependencyReasons": {
+        "warehouse-admin": "Scheduled restocking changes warehouse stock."
+      },
+      "questline": "inventory",
+      "featureRefs": [
+        "ecommerce.l3.scheduled-restocks-features@1.1.1"
+      ],
+      "checks": 7,
+      "points": 20
+    },
+    {
+      "id": "stock-transfers",
+      "name": "Stock transfers",
+      "description": "Move stock between warehouses without changing the total.",
+      "level": 3,
+      "state": "draft",
+      "parents": [
+        "warehouse-admin"
+      ],
+      "dependencyReasons": {
+        "warehouse-admin": "Transfers operate on warehouse stock."
+      },
+      "questline": "inventory",
+      "featureRefs": [
+        "ecommerce.l2.stock-transfers-features@1.0.1"
+      ],
+      "checks": 6,
+      "points": 13
+    },
+    {
+      "id": "managed-support",
+      "name": "Managed support cases",
+      "description": "Customer and staff support case updates.",
+      "level": 3,
+      "state": "draft",
+      "parents": [
+        "support-history",
+        "support-triage"
+      ],
+      "dependencyReasons": {
+        "support-history": "Customers need an owned case history.",
+        "support-triage": "Staff need an assigned ticket queue."
+      },
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.managed-support@1.0.0"
+      ],
+      "checks": 3,
+      "points": 4
+    },
+    {
+      "id": "payment-records",
+      "name": "Payment records",
+      "description": "Exact and non-duplicated payment records at checkout.",
+      "level": 4,
+      "state": "draft",
+      "parents": [
+        "checkout",
+        "purchasing"
+      ],
+      "dependencyReasons": {
+        "checkout": "Checkout creates a payment record.",
+        "purchasing": "The payment belongs to an order."
+      },
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.progression.payment-records@2.0.0"
+      ],
+      "checks": 3,
+      "points": 7
+    },
+    {
+      "id": "reservations",
+      "name": "Reservations",
+      "description": "Timed cart reservations, renewal, checkout, and expiry.",
+      "level": 4,
+      "state": "draft",
+      "parents": [
+        "checkout",
+        "warehouse-admin"
+      ],
+      "dependencyReasons": {
+        "checkout": "Reservations confirm checkout availability.",
+        "warehouse-admin": "Reservations hold warehouse stock."
+      },
+      "questline": "shopping-checkout",
+      "featureRefs": [
+        "ecommerce.l3.reservations-features@2.0.0"
+      ],
+      "checks": 9,
+      "points": 23
+    },
+    {
+      "id": "promotion-checkout",
+      "name": "Promotion checkout",
+      "description": "Server-calculated discounts recorded on orders.",
+      "level": 4,
+      "state": "draft",
+      "parents": [
+        "checkout",
+        "promotion-rules"
+      ],
+      "dependencyReasons": {
+        "checkout": "A promotion is applied at checkout.",
+        "promotion-rules": "Checkout needs an active promotion rule."
+      },
+      "questline": "promotions",
+      "featureRefs": [
+        "ecommerce.progression.promotion-checkout@2.0.0"
+      ],
+      "checks": 3,
+      "points": 7
+    },
+    {
+      "id": "order-support",
+      "name": "Order-linked support",
+      "description": "Owned order links that authorized staff can inspect.",
+      "level": 4,
+      "state": "draft",
+      "parents": [
+        "managed-support",
+        "purchasing"
+      ],
+      "dependencyReasons": {
+        "managed-support": "The order is attached to an existing managed case.",
+        "purchasing": "The linked order must exist."
+      },
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.order-support@1.0.1"
+      ],
+      "checks": 2,
+      "points": 5
+    },
+    {
+      "id": "personalized-recommendations",
+      "name": "Personalized recommendations",
+      "description": "Deterministic recommendations isolated by customer.",
+      "level": 4,
+      "state": "draft",
+      "parents": [
+        "recommendations"
+      ],
+      "dependencyReasons": {
+        "recommendations": "Personalization extends customer recommendations."
+      },
+      "questline": "recommendations",
+      "featureRefs": [
+        "ecommerce.progression.personalized-recommendations@2.0.0"
+      ],
+      "checks": 2,
+      "points": 6
+    },
+    {
+      "id": "automatic-reorder",
+      "name": "Automatic reorder rules",
+      "description": "Threshold rules schedule one pending restock.",
+      "level": 4,
+      "state": "draft",
+      "parents": [
+        "scheduled-restocks",
+        "staff-roles"
+      ],
+      "dependencyReasons": {
+        "scheduled-restocks": "Rules create scheduled restocks.",
+        "staff-roles": "Only warehouse staff can manage reorder rules."
+      },
+      "questline": "inventory",
+      "featureRefs": [
+        "ecommerce.progression.automatic-reorder@2.0.1"
+      ],
+      "checks": 3,
+      "points": 7
+    },
+    {
+      "id": "order-delivery",
+      "name": "Order delivery",
+      "description": "Automatic delivery and final cancellation.",
+      "level": 4,
+      "state": "draft",
+      "parents": [
+        "fulfilment-queue",
+        "order-cancellation"
+      ],
+      "dependencyReasons": {
+        "fulfilment-queue": "Delivery follows fulfilment.",
+        "order-cancellation": "Delivery must respect final cancellation state."
+      },
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.l3.order-delivery-features@1.1.1"
+      ],
+      "checks": 5,
+      "points": 13
+    },
+    {
+      "id": "staff-activity",
+      "name": "Staff activity history",
+      "description": "Attributable and private history of administrative changes.",
+      "level": 4,
+      "state": "draft",
+      "parents": [
+        "catalog-management"
+      ],
+      "dependencyReasons": {
+        "catalog-management": "Catalog changes provide attributable staff activity."
+      },
+      "questline": "business-operations",
+      "featureRefs": [
+        "ecommerce.progression.staff-activity@1.0.3"
+      ],
+      "checks": 2,
+      "points": 5
+    },
+    {
+      "id": "price-history",
+      "name": "Price history",
+      "description": "Update product prices and retain a history of those changes.",
+      "level": 4,
+      "state": "draft",
+      "parents": [
+        "catalog-management"
+      ],
+      "dependencyReasons": {
+        "catalog-management": "Price changes are a catalog management operation."
+      },
+      "questline": "catalog-discovery",
+      "featureRefs": [
+        "ecommerce.l2.price-history-features@2.0.2"
+      ],
+      "checks": 5,
+      "points": 12
+    },
+    {
+      "id": "delivery-notifications",
+      "name": "Delivery notifications",
+      "description": "Exactly one private notification for a delivered order.",
+      "level": 5,
+      "state": "draft",
+      "parents": [
+        "notification-preferences",
+        "order-delivery"
+      ],
+      "dependencyReasons": {
+        "notification-preferences": "The customer chooses whether to receive delivery notices.",
+        "order-delivery": "A notice follows a delivered order."
+      },
+      "questline": "notifications",
+      "featureRefs": [
+        "ecommerce.progression.delivery-notifications@1.0.1"
+      ],
+      "checks": 2,
+      "points": 5
+    },
+    {
+      "id": "support-refunds",
+      "name": "Support refunds",
+      "description": "Authorized, exact, and single-application support refunds.",
+      "level": 5,
+      "state": "draft",
+      "parents": [
+        "order-cancellation",
+        "order-support"
+      ],
+      "dependencyReasons": {
+        "order-cancellation": "A support refund uses the established order refund path.",
+        "order-support": "The refund resolves an order-linked case."
+      },
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.support-refunds@1.0.1"
+      ],
+      "checks": 3,
+      "points": 4
+    },
+    {
+      "id": "cart-expiration",
+      "name": "Cart expiration",
+      "description": "Inactive carts expire, release stock, and return empty.",
+      "level": 5,
+      "state": "draft",
+      "parents": [
+        "reservations"
+      ],
+      "dependencyReasons": {
+        "reservations": "Expiration releases existing reservations."
+      },
+      "questline": "shopping-checkout",
+      "featureRefs": [
+        "ecommerce.l3.cart-expiration-features@2.0.0"
+      ],
+      "checks": 2,
+      "points": 8
+    },
+    {
+      "id": "promotion-reporting",
+      "name": "Promotion reporting",
+      "description": "Exact promotion redemptions and revenue.",
+      "level": 5,
+      "state": "draft",
+      "parents": [
+        "promotion-checkout"
+      ],
+      "dependencyReasons": {
+        "promotion-checkout": "Reports count promotion redemptions."
+      },
+      "questline": "promotions",
+      "featureRefs": [
+        "ecommerce.progression.promotion-reporting@2.0.0"
+      ],
+      "checks": 2,
+      "points": 3
+    },
+    {
+      "id": "recommendation-feedback",
+      "name": "Recommendation feedback",
+      "description": "Durable customer-specific recommendation dismissal.",
+      "level": 5,
+      "state": "draft",
+      "parents": [
+        "personalized-recommendations"
+      ],
+      "dependencyReasons": {
+        "personalized-recommendations": "Feedback applies to personal recommendations."
+      },
+      "questline": "recommendations",
+      "featureRefs": [
+        "ecommerce.progression.recommendation-feedback@2.0.0"
+      ],
+      "checks": 2,
+      "points": 4
+    },
+    {
+      "id": "order-returns",
+      "name": "Returns",
+      "description": "Return shipped items without losing stock or accounting accuracy.",
+      "level": 5,
+      "state": "draft",
+      "parents": [
+        "order-delivery"
+      ],
+      "dependencyReasons": {
+        "order-delivery": "Only a shipped or delivered item can be returned."
+      },
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.l3.order-returns-features@1.1.1"
+      ],
+      "checks": 2,
+      "points": 4
+    },
+    {
+      "id": "cart-recovery",
+      "name": "Cart recovery",
+      "description": "Safe restoration of available items from an expired cart.",
+      "level": 6,
+      "state": "draft",
+      "parents": [
+        "cart-expiration"
+      ],
+      "dependencyReasons": {
+        "cart-expiration": "Recovery restores an expired cart."
+      },
+      "questline": "shopping-checkout",
+      "featureRefs": [
+        "ecommerce.progression.cart-recovery@2.0.0"
+      ],
+      "checks": 2,
+      "points": 6
+    }
+  ]
+};
+  /* STACK_BENCH_GRAPH_END */
+  const features = graph.nodes;
+
+  const byId = new Map(features.map(feature => [feature.id, feature]));
+  const grid = document.getElementById('graph-grid');
+  const canvas = document.getElementById('graph-canvas');
+  const edges = document.getElementById('edges');
+
+  grid.style.setProperty('--depth-count', graph.levels);
+  const corner = document.createElement('div');
+  corner.className = 'depth-head';
+  corner.textContent = 'Questline';
+  grid.appendChild(corner);
+  for (let depth = 1; depth <= graph.levels; depth += 1) {
+    const head = document.createElement('div');
+    head.className = 'depth-head';
+    head.textContent = `Depth ${depth}`;
+    grid.appendChild(head);
+  }
+
+  for (const questline of graph.questlines) {
+    const label = document.createElement('div');
+    label.className = 'questline-label';
+    label.textContent = questline.title;
+    grid.appendChild(label);
+    for (let depth = 1; depth <= graph.levels; depth += 1) {
+      const cell = document.createElement('div');
+      cell.className = 'questline-cell';
+      const items = features.filter(feature => feature.questline === questline.id
+        && feature.level === depth);
+      for (const feature of items) {
+      const node = document.createElement('button');
+      node.type = 'button';
+      node.className = `node ${feature.state}`;
+      node.dataset.id = feature.id;
+      node.title = feature.description;
+      node.setAttribute('aria-label', `${feature.name}. ${feature.description}`);
+      node.setAttribute('aria-pressed', 'false');
+      node.innerHTML = `<span class="name">${feature.name}</span><span class="state">●</span>`;
+        cell.appendChild(node);
+      }
+      grid.appendChild(cell);
+    }
+  }
+
+  function drawEdges() {
+    edges.querySelectorAll('.edge').forEach(edge => edge.remove());
+    const canvasBox = canvas.getBoundingClientRect();
+
+    for (const child of features) {
+      const childNode = document.querySelector(`[data-id="${child.id}"]`);
+      const childBox = childNode.getBoundingClientRect();
+
+      for (const parentId of child.parents) {
+        const parentNode = document.querySelector(`[data-id="${parentId}"]`);
+        const parentBox = parentNode.getBoundingClientRect();
+        const outgoing = features
+          .filter(feature => feature.parents.includes(parentId))
+          .sort((a, b) => document.querySelector(`[data-id="${a.id}"]`).getBoundingClientRect().top - document.querySelector(`[data-id="${b.id}"]`).getBoundingClientRect().top);
+        const incoming = [...child.parents]
+          .sort((a, b) => document.querySelector(`[data-id="${a}"]`).getBoundingClientRect().top - document.querySelector(`[data-id="${b}"]`).getBoundingClientRect().top);
+        const outgoingIndex = outgoing.findIndex(feature => feature.id === child.id);
+        const incomingIndex = incoming.indexOf(parentId);
+        const x1 = parentBox.right - canvasBox.left;
+        const y1 = parentBox.top + parentBox.height * (outgoingIndex + 1) / (outgoing.length + 1) - canvasBox.top;
+        const x2 = childBox.left - canvasBox.left;
+        const y2 = childBox.top + childBox.height * (incomingIndex + 1) / (incoming.length + 1) - canvasBox.top;
+        const middle = x1 + (x2 - x1) / 2;
+        const path = document.createElementNS('http://www.w3.org/2000/svg', 'path');
+        path.classList.add('edge', child.state);
+        path.dataset.parent = parentId;
+        path.dataset.child = child.id;
+        path.setAttribute('d', `M ${x1} ${y1} C ${middle} ${y1}, ${middle} ${y2}, ${x2} ${y2}`);
+        path.setAttribute('marker-end', `url(#arrow-${child.state})`);
+        edges.appendChild(path);
+      }
+    }
+  }
+
+  let selectedId = null;
+
+  function dependencyChain(featureId) {
+    const connected = new Set([featureId]);
+    const connectedEdges = new Set();
+    const visitParents = id => {
+      const feature = byId.get(id);
+      for (const parentId of feature.parents) {
+        connectedEdges.add(`${parentId}:${id}`);
+        if (!connected.has(parentId)) {
+          connected.add(parentId);
+          visitParents(parentId);
+        }
+      }
+    };
+    const visitChildren = id => {
+      for (const child of features.filter(candidate => candidate.parents.includes(id))) {
+        connectedEdges.add(`${id}:${child.id}`);
+        if (!connected.has(child.id)) {
+          connected.add(child.id);
+          visitChildren(child.id);
+        }
+      }
+    };
+    visitParents(featureId);
+    visitChildren(featureId);
+    return { connected, connectedEdges };
+  }
+
+  function trace(featureId) {
+    const { connected, connectedEdges } = dependencyChain(featureId);
+    document.querySelectorAll('.edge').forEach(edge => {
+      const matches = connectedEdges.has(`${edge.dataset.parent}:${edge.dataset.child}`);
+      edge.classList.toggle('active', matches);
+      edge.classList.toggle('muted', !matches);
+    });
+    document.querySelectorAll('.node').forEach(node => {
+      node.classList.toggle('active', node.dataset.id === featureId);
+      node.classList.toggle('muted', !connected.has(node.dataset.id));
+    });
+  }
+
+  function clearTrace() {
+    document.querySelectorAll('.edge, .node').forEach(element => element.classList.remove('active', 'muted'));
+  }
+
+  function showSelection() {
+    document.querySelectorAll('.node').forEach(node => node.setAttribute('aria-pressed', String(node.dataset.id === selectedId)));
+    selectedId ? trace(selectedId) : clearTrace();
+  }
+
+  document.querySelectorAll('.node').forEach(node => {
+    node.addEventListener('mouseenter', () => trace(node.dataset.id));
+    node.addEventListener('mouseleave', () => selectedId ? trace(selectedId) : clearTrace());
+    node.addEventListener('focus', () => trace(node.dataset.id));
+    node.addEventListener('blur', () => selectedId ? trace(selectedId) : clearTrace());
+    node.addEventListener('click', () => {
+      selectedId = selectedId === node.dataset.id ? null : node.dataset.id;
+      showSelection();
+    });
+  });
+
+  document.addEventListener('keydown', event => {
+    if (event.key === 'Escape') {
+      selectedId = null;
+      showSelection();
+    }
+  });
+
+  drawEdges();
+  new ResizeObserver(drawEdges).observe(canvas);
+
+</script>
+</body>
+</html>
diff --git a/tools/stack-bench/docs/development.md b/tools/stack-bench/docs/development.md
new file mode 100644
index 00000000000..500553bde0c
--- /dev/null
+++ b/tools/stack-bench/docs/development.md
@@ -0,0 +1,91 @@
+# Stack Bench development
+
+This guide covers local source development. Use the
+[appliance guide](../appliance/README.md) for runner configuration, credentials,
+preflight, campaigns, and paid model work.
+
+## Requirements
+
+- Node.js 22 or newer
+- Docker Engine with Compose v2
+- Chromium installed through the pinned Playwright dependency
+- the repository Linux CLI and TypeScript bindings for SpacetimeDB work
+
+Install the locked dependencies and browser:
+
+```bash
+cd tools/stack-bench
+npm ci
+npm run bootstrap:browsers
+```
+
+Build the local coding image:
+
+```bash
+docker build -t stack-bench-build:2.1.226 container
+```
+
+On a Windows checkout, build the Linux SpacetimeDB CLI before testing the
+SpacetimeDB adapter:
+
+```bash
+bash container/build-linux-cli.sh
+```
+
+The local image tag is for development. The appliance uses image digests from
+its release manifest.
+
+## Source checks
+
+Run the smallest check that covers the change:
+
+| Change | Check |
+|---|---|
+| TypeScript | `npm run typecheck` and the focused compiled test |
+| Unit tests | `npm test` |
+| Dashboard read model, routes, and pages | `npm run test:dashboard` |
+| Repository contracts | `npm run test:contracts` |
+| Mutation definitions and anchors | `npm run test:mutation-definitions` |
+| Browser, process, and Docker integration | `npm run test:integration` |
+| Prompt composition | `npm run check:prompts` |
+| Track scenarios | `npm run check:scenarios` |
+| Packs and recipes | `npm run check:composition` |
+| Calibration | `npm run check:calibration` |
+| Dependency graph | `npm run graph` |
+
+After a shared runtime, composition, grading, campaign, or release change is
+stable, run the integrated source gate once:
+
+```bash
+npm run lint
+npm run typecheck
+npm run test:all
+```
+
+Use `npm test` while changing code. Run `npm run test:dashboard` when the
+dashboard read model, routes, or pages change; it writes thirty campaigns of
+fixture evidence and stays out of the unit tier. Run `npm run test:contracts`
+when tracks, prompts, reference applications, repository policies, or campaign
+definitions change. `npm run test:all` runs the unit, dashboard, and contract
+tiers after one build. Docker and qualification checks remain separate.
+Mutation-definition tests are model-free. Run them when reference source, grading
+checks, or mutation manifests change. They do not run during ordinary unit work.
+
+Documentation-only changes need link and formatting checks, not the harness.
+Run Docker checks only when the changed code affects their boundary. Run
+targeted mutations while developing checks and the complete mutation set only
+for a release candidate. Integration files run sequentially because they can
+own browsers, processes, ports, and Docker resources.
+
+A passing check stays valid until one of its inputs changes. Do not rerun it for
+reassurance. Add a test only when it protects a distinct invariant that an
+existing test does not cover. Pending qualification marks campaign scores as
+provisional; it blocks publishing verified comparisons, not campaign execution.
+
+## Generated files
+
+Run `npm run graph` to rebuild `docs/dependency-graph.html` from the versioned
+ecommerce graph. Do not edit generated output by hand.
+
+Build output, run artifacts, transcripts, local plans, and operational notes are
+not product documentation and must remain untracked.
diff --git a/tools/stack-bench/docs/prompting.md b/tools/stack-bench/docs/prompting.md
new file mode 100644
index 00000000000..216d46acf1c
--- /dev/null
+++ b/tools/stack-bench/docs/prompting.md
@@ -0,0 +1,239 @@
+# Prompting method
+
+Stack Bench gives the coding agent a normal software request. It does not tell
+the agent that it is in a benchmark. What Stack Bench asks for and what Stack
+Bench measures are separate choices.
+
+## Prompt inputs
+
+Each request is assembled from these owners:
+
+| Input | Purpose | Owner |
+|---|---|---|
+| Product framing | Says whether to build a new app or add work to an existing app | Recipe |
+| Current features | Describes the product work to implement now | Feature packs |
+| Requested production behavior | States production requirements that the campaign chose to disclose | Specification packs |
+| Stack material | Gives required access details and the selected level of technical guidance | Guidance profile and backend document |
+| API reference | Supplies selected SDK material, including SpacetimeDB skills | Guidance profile |
+| Starting data | Gives the fixed catalog for a new app | Fixture |
+| Application interface | Names the controls or operations needed for reliable use | Feature contracts |
+| Repair report | Describes conclusive application failures from the last grade | Condition repair policy |
+
+The recipe and selected packs own the text. The prompt builder orders that text
+and adds the small controller contract, such as the application directory,
+listening address, start script, and completion response.
+
+## What the coding agent receives
+
+A new-build request has this shape:
+
+```text
+Build the application described below and leave it running.
+
+Build the app in /app.
+The web application must listen on 0.0.0.0.
+
+## Stack
+<selected stack access and guidance>
+
+## Selected API reference
+<selected SDK material, when needed>
+
+## New application
+<product framing>
+
+## <current feature>
+<feature request>
+
+## Starting catalog
+<fixed starting data>
+
+## Application interface
+<stable controls or operations>
+```
+
+This is an abridged example. The exact request is composed from versioned files
+and bound to the campaign by hashes.
+
+The new-build request does not include:
+
+- grader source or scenario files;
+- check names, point values, expected scores, or comparison results;
+- exact adversarial inputs chosen by a scenario;
+- future dependency nodes that are not ready;
+- production expectations assigned to the `expected` or `observed` treatments.
+
+## Features and production expectations
+
+A feature is product work. A production expectation describes how selected
+features should behave under conditions such as reload, reconnect, concurrent
+writes, authorization boundaries, or direct data changes.
+
+Each selected production expectation has one treatment:
+
+| Treatment | Included in request | Main score | Repair feedback |
+|---|---:|---:|---:|
+| `requested` | Yes | Yes | Yes |
+| `expected` | No | Yes | Yes, after a conclusive failure |
+| `observed` | No | No | No |
+
+`Expected` answers: "Does this stack produce sound production behavior when the
+user did not prescribe the mechanism?"
+
+`Observed` is a separate first-build diagnostic. It cannot change the main
+score or steer repairs.
+
+### Example: expected durability
+
+The campaign selects account creation as current work. It also selects session
+durability as expected production behavior.
+
+The coding agent sees product text such as:
+
+```text
+## Accounts
+
+Visitors can create an account with a username and password. Returning users
+can sign in, see which account is active, and sign out.
+```
+
+The request does not mention reload behavior. Stack Bench can still verify that
+the signed-in session survives a reload. A conclusive failure affects the main
+score and can produce repair feedback.
+
+### Example: requested durability
+
+The campaign selects the same account feature and changes durability to
+`requested`. The request now also includes text such as:
+
+```text
+## State durability: accounts
+
+A signed-in session survives a page reload as the same account.
+```
+
+The scored behavior is the same. Only disclosure changed. This makes the two
+conditions comparable without changing the feature itself.
+
+### Example: observed durability
+
+The campaign changes durability to `observed`. The request again omits reload
+behavior. Stack Bench measures it after the first build, records the result as
+a diagnostic, and does not include it in the score or repair report.
+
+## Stack guidance
+
+Stack selection and guidance selection are separate.
+
+- Neutral guidance gives the required stack, connection details, startup
+  contract, and selected API reference. The coding agent chooses libraries,
+  architecture, and project structure.
+- Prescribed guidance can add design advice selected by the campaign.
+
+SpacetimeDB can include its TypeScript SDK skills in either condition. This is
+API reference for a less familiar stack. It does not expose grading logic or
+the implementation that a check expects.
+
+An abridged neutral PostgreSQL section is:
+
+```text
+# PostgreSQL
+
+Use PostgreSQL for the application data. Choose the libraries, architecture,
+and project structure.
+
+Use the supplied DATABASE_URL. Serve the application on the supplied port.
+```
+
+An abridged neutral SpacetimeDB section is:
+
+```text
+# SpacetimeDB
+
+Use SpacetimeDB for the application data. Put the TypeScript module in the
+required module directory. Choose the schema, libraries, architecture, and the
+rest of the project structure.
+
+Use the supplied server URI, module name, CLI, SDK package, and web port.
+```
+
+## Application interfaces
+
+Feature contracts name stable controls or operations when deterministic use
+requires them. They do not prescribe layout, data models, frameworks, or visual
+design. The one data-shaped item a contract may name is an interoperability
+surface that other systems write to directly, such as the stock tables; the
+behavior expected around that surface stays in the specification.
+
+For example, the account contract names fields such as `signup-username` and
+`signin-submit`. An HTTP stack also exposes the account operations through HTTP.
+A reducer-based stack exposes the equivalent reducer operations. The product
+behavior stays the same while the usable interface matches the selected stack.
+
+Scenario files own exact test data and edge-case values. Those values do not
+belong in the product request or interface contract.
+
+## Dependency progression
+
+Dependency mode composes the request from features that are ready now.
+
+- A new app receives the framing, current root features, applicable requested
+  production expectations, starting data, and their interfaces.
+- An upgrade receives only the newly ready feature work and its interfaces.
+- Passed features are not repeated unless they fail again.
+- Blocked descendants are not included until their dependencies pass.
+
+For example, if accounts and catalog items are ready, the request can include
+those two features. Customer profile stays out until its account dependency
+passes. A failure in the catalog path does not add or remove work from the
+account path.
+
+## Repair requests
+
+A repair starts only after Stack Bench completes grading and records a
+conclusive application failure. A repair report can name an expected
+production behavior that the initial request withheld; that disclosure
+happens only through the repair policy, after a conclusive failure, and under
+the same rule for every stack. The coding agent receives a plain bug report:
+
+```text
+Fix the reported application bugs.
+
+Expected: The signed-in account remains active after a reload.
+Actual: The page returned to the signed-out state after reload.
+
+Change only what is needed. Do not alter behavior that is already correct.
+```
+
+The real report also identifies the affected product area and includes the
+current feature text and application interface. Provider failures, harness
+failures, and interrupted work do not become application bug reports.
+
+Every line of the report comes from one of three sources: the sentence the
+request already gave the agent for that behavior, a finding from the
+grader's closed catalog rendered as one sentence (a control that did not
+appear, a number that read 9 instead of 12, a request that was accepted
+when it had to be refused), and the application's own console errors.
+The grader never writes prose into the report, and the values a scenario
+chose to probe a behavior are never among a finding's fields. A repair
+fixes the behavior, not the probe.
+
+## Authoring rules
+
+- Put product asks in feature prompts.
+- Put optional production requirements in specification prompts.
+- Put stable controls and operations in contracts.
+- Put connection facts and API material in stack guidance.
+- Put exact values and probes in scenarios.
+- Never solve a check by adding its private input or expected implementation to
+  the request.
+- Keep equivalent stacks equally informed about the product.
+- Give every replay, forgery, or direct call a named application action that
+  declares both the HTTP route and the reducer. A campaign does not compile
+  while a selected check cannot be measured on a selected stack.
+- Mark changed prompt inputs as draft until matching qualification is current.
+
+After a prompt change, run `npm run check:composition`, `npm run check:prompts`,
+and the exact scenario check for the affected recipe. Inspect the rendered
+request for every affected stack and depth. Do not run unrelated qualification
+or paid work.
diff --git a/tools/stack-bench/docs/stack-bench.html b/tools/stack-bench/docs/stack-bench.html
new file mode 100644
index 00000000000..59954ae5ab5
--- /dev/null
+++ b/tools/stack-bench/docs/stack-bench.html
@@ -0,0 +1,1806 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Stack Bench</title>
+<style>
+  /* Fonts embedded from the site's fontsource packages. */
+  @font-face {
+    font-family: 'Inter Variable';
+    font-style: normal;
+    font-display: swap;
+    font-weight: 100 900;
+    src: url(data:font/woff2;base64,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) format('woff2-variations');
+  }
+  @font-face {
+    font-family: 'Source Code Pro Variable';
+    font-style: normal;
+    font-display: swap;
+    font-weight: 200 900;
+    src: url(data:font/woff2;base64,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) format('woff2-variations');
+  }
+  /* Brand tokens from spacetime-web/spacetimedb.com/app/styles/variables.css */
+  :root {
+    --green:  #4cf490;
+    --green-25: #4cf49040;
+    --green-10: #4cf4901a;
+    --open: #67b7ff;
+    --open-10: #67b7ff1a;
+    --working: #f6c85f;
+    --working-10: #f6c85f1a;
+    --n1: #e6e9f0;  /* primary text */
+    --n3: #b6c0cf;  /* secondary text */
+    --n4: #6f7987;  /* muted */
+    --n5: #363840;
+    --shade1: #162d38;
+    --shade4: #121e24; /* borders */
+    --shade5: #0f191f;
+    --shade7: #0b1114;
+    --n8: #060606;   /* page ground */
+    --font-ui: 'Inter Variable', sans-serif;   /* --font-inter */
+    --font-mono: 'Source Code Pro Variable', monospace;   /* --font-source */
+  }
+  * { margin: 0; padding: 0; box-sizing: border-box; }
+  html { scroll-snap-type: y proximity; scroll-behavior: smooth; }
+  body {
+    background: var(--n8);
+    color: var(--n1);
+    font-family: var(--font-ui);
+    font-size: clamp(16px, 1.35vw, 19px);
+    line-height: 1.55;
+  }
+  ::selection { background: var(--green-25); }
+
+  section {
+    min-height: 100vh;
+    scroll-snap-align: start;
+    display: flex;
+    flex-direction: column;
+    justify-content: center;
+    padding: 5rem clamp(1.5rem, 8vw, 9rem) 4rem;
+    position: relative;
+    overflow: hidden;
+    border-bottom: 1px solid var(--shade4);
+  }
+
+  h1, h2 { font-weight: 650; letter-spacing: -0.02em; }
+  h1 { font-size: clamp(2.4rem, 6vw, 4.6rem); line-height: 1.05; }
+  h2 { font-size: clamp(1.8rem, 3.5vw, 2.8rem); margin-bottom: 1.6rem; }
+  p  { max-width: 62ch; color: var(--n3); }
+  .lead { font-size: clamp(1.05rem, 1.9vw, 1.4rem); color: var(--n1); max-width: 56ch; }
+  #hero .lead { max-width: 34ch; }
+  #hero > p:not(.lead) { max-width: 38ch; }
+
+  .kicker {
+    font-family: var(--font-mono);
+    font-size: .78rem;
+    letter-spacing: .18em;
+    text-transform: uppercase;
+    color: var(--green);
+    margin-bottom: 1.1rem;
+  }
+  code, .mono { font-family: var(--font-mono); }
+  code { color: var(--green); font-size: .92em; }
+  .quote { border-left: 2px solid var(--green); padding-left: 1.1rem; color: var(--n1); font-size: 1.15em; max-width: 58ch; }
+
+  /* reveal animation */
+  .r { opacity: 0; transform: translateY(22px); transition: opacity .6s ease, transform .6s ease; }
+  .r.d1 { transition-delay: .08s; } .r.d2 { transition-delay: .18s; }
+  .r.d3 { transition-delay: .28s; } .r.d4 { transition-delay: .38s; }
+  .r.d5 { transition-delay: .48s; }
+  section.on .r { opacity: 1; transform: none; }
+
+  /* nav dots */
+  #dots {
+    position: fixed; right: 1.1rem; top: 50%; transform: translateY(-50%);
+    display: flex; flex-direction: column; gap: .55rem; z-index: 10;
+  }
+  #dots a { width: 8px; height: 8px; border-radius: 50%; background: var(--n5); transition: background .25s, transform .25s; }
+  #dots a.on { background: var(--green); transform: scale(1.35); }
+
+  #bar { position: fixed; top: 0; left: 0; height: 2px; background: var(--green); width: 0; z-index: 11; transition: width .2s ease; }
+
+  .hint { position: fixed; bottom: 1.2rem; right: 1.4rem; font-family: var(--font-mono); font-size: .72rem; color: var(--n4); z-index: 10; }
+
+  ul.plain { list-style: none; display: grid; gap: .7rem; max-width: 66ch; }
+  ul.plain li { padding-left: 1.4rem; position: relative; color: var(--n3); }
+  ul.plain li::before { content: '\203A'; position: absolute; left: 0; color: var(--green); font-family: var(--font-mono); }
+  ul.plain li strong { color: var(--n1); font-weight: 600; }
+
+
+  table { border-collapse: collapse; margin: 1.2rem 0; font-size: .92rem; max-width: 880px; width: 100%; }
+  th, td { text-align: left; padding: .55rem .9rem; border-bottom: 1px solid var(--shade4); color: var(--n3); vertical-align: top; }
+  th { font-family: var(--font-mono); font-size: .72rem; text-transform: uppercase; letter-spacing: .12em; color: var(--n4); font-weight: 500; }
+  td:first-child { color: var(--n1); font-family: var(--font-mono); white-space: nowrap; }
+
+  /* hero */
+  #hero { border-bottom-color: var(--shade1); }
+  #hero::before {
+    content: '';
+    position: absolute; inset: 0;
+    background:
+      radial-gradient(60% 50% at 70% 20%, var(--green-10), transparent 70%);
+    pointer-events: none;
+  }
+  #hero { justify-content: center; padding-top: 3rem; padding-bottom: 3rem; }
+  #hero .brand { display: flex; align-items: center; gap: .7rem; margin-bottom: 2.4rem; }
+  #hero .brand span { font-family: var(--font-mono); color: #d7d8d9; font-size: .95rem; letter-spacing: .12em; }
+  #hero > .brand, #hero > h1, #hero > p { position: relative; z-index: 2; width: 100%; max-width: 920px; margin-left: auto; margin-right: auto; }
+  #hero > h1 { font-size: clamp(2.8rem, 5vw, 4.5rem); margin: 0 auto 1.2rem; }
+  #hero > p.lead { margin: 1.2rem auto 0; max-width: 920px; font-size: clamp(1rem, 1.5vw, 1.2rem); color: var(--n4); }
+  #hero > p span { display: block; max-width: 44ch; }
+
+  /* Main slides use one consistent order: title, description, visual. */
+  section.visual-first { justify-content: center; padding-top: 2.8rem; padding-bottom: 2.8rem; }
+  section.visual-first > :not(.kicker) { width: min(100%, 920px); margin-left: auto; margin-right: auto; }
+  section.visual-first > .kicker { display: none; }
+  section.visual-first > h2 { order: 0; font-size: clamp(1.45rem, 2.4vw, 2rem); margin: 0 0 .4rem; }
+  section.visual-first > .lead,
+  section.visual-first > .supp { order: 1; max-width: 920px; margin: 0 auto 1.2rem !important; padding-right: 10rem; box-sizing: border-box; font-size: .94rem; line-height: 1.45; color: var(--n4); }
+  section.visual-first > :not(.kicker):not(h2):not(p) { order: 2; }
+  @media (max-width: 900px) {
+    section.visual-first > .lead,
+    section.visual-first > .supp { padding-right: 0; }
+  }
+
+  /* loop diagram */
+  .loop { max-width: 980px; width: 100%; margin: .6rem 0 1rem; }
+  .loop text { font-family: var(--font-mono); font-size: 12.5px; fill: var(--n3); }
+  .loop .t { fill: var(--n1); font-size: 13.5px; font-weight: 600; }
+  .loop .sub { fill: var(--n4); font-size: 10.5px; }
+  .loop rect.node { fill: #0f191f; stroke: #162d38; rx: 9; }
+  .loop .edge { stroke: #363840; stroke-width: 1.4; fill: none; marker-end: url(#arr); }
+  .loop .flow { stroke: var(--green); stroke-width: 1.6; fill: none; stroke-dasharray: 5 7; animation: dash 1.2s linear infinite; opacity: .85; }
+  @keyframes dash { to { stroke-dashoffset: -12; } }
+  section.on .pulse { animation: pulse 3.6s ease-in-out infinite; }
+  @keyframes pulse { 0%,100% { stroke: #162d38; } 50% { stroke: var(--green-25); } }
+
+
+  @keyframes breathe { 0%,100% { border-color: var(--n5); } 50% { border-color: var(--green-25); } }
+  .empty {
+    animation: breathe 4s ease-in-out infinite;
+    border: 1px dashed var(--n5);
+    border-radius: 12px;
+    padding: 2.2rem 2rem;
+    max-width: 720px;
+    margin: 1rem 0 1.6rem;
+    text-align: center;
+    color: var(--n4);
+    font-family: var(--font-mono);
+    font-size: .95rem;
+  }
+  .empty b { color: var(--n1); display: block; font-size: 1.15rem; margin-bottom: .5rem; font-family: var(--font-ui); }
+
+  .files span { color: var(--green); }
+
+
+  @keyframes assertPop {
+    0%, 50%  { opacity: 0; }
+    58%, 88% { opacity: 1; }
+    96%,100% { opacity: 0; }
+  }
+
+
+  /* video banner demo */
+  .banners { display: grid; gap: .6rem; max-width: 720px; margin: .6rem 0 1.2rem; }
+  .banner {
+    font-family: var(--font-mono); font-size: .8rem;
+    border-radius: 8px; padding: .55rem .9rem;
+    display: flex; justify-content: space-between; gap: 1rem; flex-wrap: wrap;
+  }
+  .banner.pass { background: var(--green-10); border: 1px solid var(--green-25); color: var(--green); }
+  .banner.fail { background: #fc689726; border: 1px solid #fc689766; color: #fc6897; }
+  section.on .banner.pass { animation: bannerIn .5s ease .3s backwards; }
+  section.on .banner.fail { animation: bannerIn .5s ease .55s backwards; }
+  @keyframes bannerIn { from { opacity: 0; transform: translateY(10px); } }
+  .files div { opacity: 0; transform: translateY(8px); transition: opacity .45s ease, transform .45s ease; }
+  section.on .files div { opacity: 1; transform: none; }
+
+
+  /* visual-first layout */
+  .supp { font-size: 1rem; color: var(--n4); max-width: 68ch; }
+
+  /* hover reveals: pointer devices get them on hover, touch gets them inline */
+  .more { font-size: .85rem; color: var(--n4); }
+  @media (hover: hover) {
+    .more { max-height: 0; opacity: 0; overflow: hidden; margin: 0;
+            transition: max-height .35s ease, opacity .35s ease, margin .35s ease; }
+    .card:hover .more, .card:focus-within .more,
+    .rung:hover .more, .tile:hover .more, .tile:focus-within .more
+      { max-height: 6em; opacity: 1; margin-top: .45rem; }
+  }
+
+
+
+
+
+
+  /* evidence rows highlight */
+
+
+  /* ---- simulated run demos ---- */
+  .demo-tag { font-family: var(--font-mono); font-size: .68rem; color: var(--n4); letter-spacing: .08em; margin-top: .6rem; }
+
+  /* terminal */
+  .term {
+    background: #0a0d10; border: 1px solid var(--shade1); border-radius: 10px;
+    font-family: var(--font-mono); font-size: clamp(.78rem, 1.7vw, 1.02rem);
+    padding: 1.4rem 1.6rem; max-width: 940px; width: 100%;
+    display: grid; gap: .6rem; line-height: 1.55;
+  }
+  .term .tbar { display: flex; gap: .4rem; margin-bottom: .5rem; }
+  .term .tbar i { width: 9px; height: 9px; border-radius: 50%; background: var(--n5); }
+  .term .tl { opacity: 0; color: var(--n3); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+  section.on .term .tl { animation: lineIn .3s ease forwards; }
+  @keyframes lineIn { from { opacity: 0; transform: translateY(4px); } to { opacity: 1; transform: none; } }
+  .term .cmd { color: var(--n1); }
+  .term .ok { color: var(--green); }
+  .term .warn { color: var(--n1); }
+  .term .dim { color: var(--n4); }
+  section.on .term .tl:nth-child(2)  { animation-delay: .3s; }
+  section.on .term .tl:nth-child(3)  { animation-delay: .9s; }
+  section.on .term .tl:nth-child(4)  { animation-delay: 1.7s; }
+  section.on .term .tl:nth-child(5)  { animation-delay: 2.6s; }
+  section.on .term .tl:nth-child(6)  { animation-delay: 3.4s; }
+  section.on .term .tl:nth-child(7)  { animation-delay: 4.2s; }
+  section.on .term .tl:nth-child(8)  { animation-delay: 5.0s; }
+  section.on .term .tl:nth-child(9)  { animation-delay: 5.8s; }
+  section.on .term .tl:nth-child(10) { animation-delay: 6.6s; }
+  .caret::after { content: '\258B'; color: var(--green); animation: blink 1s steps(1) infinite; margin-left: .15rem; }
+  @keyframes blink { 50% { opacity: 0; } }
+
+  /* live two-client chat demo */
+  .live { display: grid; grid-template-columns: 1fr 90px 1fr; align-items: stretch; max-width: 1000px; width: 100%; gap: 0; }
+  .client {
+    background: var(--shade5); border: 1px solid var(--shade1); border-radius: 10px;
+    display: flex; flex-direction: column; overflow: hidden;
+  }
+  .client .chead {
+    background: var(--shade7); padding: .45rem .8rem; font-family: var(--font-mono);
+    font-size: .85rem; color: var(--n1); display: flex; gap: .5rem; align-items: center;
+    border-bottom: 1px solid var(--shade1);
+  }
+  .client .chead i { width: 8px; height: 8px; border-radius: 50%; background: var(--n5); }
+  .client .chead .who { margin-left: .3rem; }
+  .lane { position: relative; }
+  .lane::before { content: ''; position: absolute; top: 50%; left: 0; right: 0; border-top: 1px dashed var(--shade1); }
+  .lane .zip { position: absolute; top: 50%; left: 0; width: 10px; height: 10px; margin-top: -5px;
+               border-radius: 50%; background: var(--green); opacity: 0; }
+  .verd {
+    margin: 0 .6rem .6rem; font-family: var(--font-mono); font-size: .74rem;
+    color: var(--green); opacity: 0;
+  }
+  /* one shared 7s timeline */
+  section.on .d-zip    { animation: dZip 7s infinite; }
+  section.on .d-verd   { animation: dVerd 7s infinite; }
+  @keyframes dType { 0%,4% { width: 0; } 22% { width: 7.2ch; } 26%,88% { width: 7.2ch; } 92%,100% { width: 0; } }
+  @keyframes dBubA { 0%,26% { opacity: 0; transform: scale(.7); } 30%,88% { opacity: 1; transform: scale(1); } 94%,100% { opacity: 0; } }
+  @keyframes dZip  { 0%,30% { opacity: 0; left: 0; } 34% { opacity: 1; } 46% { opacity: 1; left: calc(100% - 10px); } 50%,100% { opacity: 0; left: calc(100% - 10px); } }
+  @keyframes dBubB { 0%,46% { opacity: 0; transform: scale(.7); } 50%,88% { opacity: 1; transform: scale(1); } 94%,100% { opacity: 0; } }
+  @keyframes dVerd { 0%,54% { opacity: 0; } 60%,88% { opacity: 1; } 94%,100% { opacity: 0; } }
+
+
+  /* storefront live demo */
+  .bigprod {
+    margin: .55rem .6rem; border: 1px solid var(--shade1); border-radius: 8px;
+    padding: .7rem .95rem; font-family: var(--font-mono); font-size: .95rem; color: var(--n3);
+    display: grid; gap: .22rem;
+  }
+  .bigprod b { color: var(--n1); font-weight: 600; }
+  .stockline { position: relative; height: 1.3em; }
+  .stockline span { position: absolute; left: 0; top: 0; }
+  .s-old { color: var(--green); }
+  .s-new { color: var(--green); opacity: 0; }
+  section.on .d-sold { animation: dSOld 7s infinite; }
+  section.on .d-snew { animation: dSNew 7s infinite; }
+  @keyframes dSOld { 0%, 44% { opacity: 1; } 48%, 90% { opacity: 0; } 96%, 100% { opacity: 1; } }
+  @keyframes dSNew { 0%, 44% { opacity: 0; } 48%, 90% { opacity: 1; } 96%, 100% { opacity: 0; } }
+  .buy {
+    justify-self: start; font-family: var(--font-mono); font-size: .85rem;
+    color: var(--green); border: 1px solid var(--green-25); border-radius: 6px;
+    padding: .3rem .8rem; background: var(--green-10);
+  }
+  section.on .d-buy { animation: dBuy 7s infinite; }
+  @keyframes dBuy { 0%, 6% { transform: none; } 9% { transform: scale(.94); background: var(--green-25); } 12%, 100% { transform: none; } }
+  .toast {
+    margin: 0 .6rem .55rem; font-family: var(--font-mono); font-size: .85rem;
+    color: var(--n1); border: 1px solid var(--shade1); border-radius: 6px;
+    padding: .35rem .7rem; background: var(--shade7); opacity: 0; justify-self: start;
+  }
+  section.on .d-toast { animation: dToast 7s infinite; }
+  @keyframes dToast { 0%, 12% { opacity: 0; transform: translateY(6px); } 16%, 88% { opacity: 1; transform: none; } 94%, 100% { opacity: 0; } }
+
+  /* proving the grader: the whole suite on screen, so a clean kill is visible */
+  .kill { width: 100%; max-width: 940px; display: grid; gap: .85rem; }
+  .kill-head {
+    display: flex; justify-content: space-between; align-items: baseline; gap: 1rem;
+    font-family: var(--font-mono); font-size: .72rem; letter-spacing: .1em;
+    text-transform: uppercase; color: var(--n4);
+  }
+  .kill-head .tally { position: relative; height: 1.1em; min-width: 15ch; text-align: right; }
+  .kill-head .tally span { position: absolute; right: 0; top: 0; white-space: nowrap; opacity: 0; }
+  .tiles { display: grid; grid-template-columns: repeat(17, 1fr); gap: 7px; }
+  @media (max-width: 760px) { .tiles { grid-template-columns: repeat(9, 1fr); } }
+  .tiles i {
+    height: 26px; border-radius: 3px;
+    background: var(--green-10); border: 1px solid var(--green-25);
+  }
+  .killcap {
+    position: relative; min-height: 2.6em; font-family: var(--font-mono);
+    font-size: clamp(.78rem, 1.5vw, .9rem);
+  }
+  .killcap span { position: absolute; left: 0; top: 0; opacity: 0; }
+
+  /* 13s cycle: the suite passes, one criterion is killed, then an empty build */
+  section.on .tiles i { animation: kHold 13s ease-in-out infinite; }
+  section.on .tiles i.target { animation: kKill 13s ease-in-out infinite; }
+  @keyframes kHold {
+    0%, 62%   { background: var(--green-10); border-color: var(--green-25); }
+    68%, 92%  { background: #0a0d10; border-color: var(--shade4); }
+    98%, 100% { background: var(--green-10); border-color: var(--green-25); }
+  }
+  @keyframes kKill {
+    0%, 26%   { background: var(--green-10); border-color: var(--green-25); box-shadow: none; }
+    32%, 58%  { background: #fc689722; border-color: #fc6897; box-shadow: 0 0 12px 2px #fc689733; }
+    62%       { background: #fc689722; border-color: #fc6897; box-shadow: none; }
+    68%, 92%  { background: #0a0d10; border-color: var(--shade4); box-shadow: none; }
+    98%, 100% { background: var(--green-10); border-color: var(--green-25); box-shadow: none; }
+  }
+  section.on .kc1, section.on .ky1 { animation: kW1 13s ease-in-out infinite; }
+  section.on .kc2, section.on .ky2 { animation: kW2 13s ease-in-out infinite; }
+  section.on .kc3, section.on .ky3 { animation: kW3 13s ease-in-out infinite; }
+  @keyframes kW1 { 0%, 26% { opacity: 1 } 30%, 96% { opacity: 0 } 99%, 100% { opacity: 1 } }
+  @keyframes kW2 { 0%, 28% { opacity: 0 } 32%, 62% { opacity: 1 } 66%, 100% { opacity: 0 } }
+  @keyframes kW3 { 0%, 64% { opacity: 0 } 68%, 94% { opacity: 1 } 97%, 100% { opacity: 0 } }
+  .killcap .kc2 b { color: #fc6897; font-weight: 500; }
+  .killcap .kc1, .killcap .kc3 { color: var(--n3); }
+  .killcap .kc2 { color: var(--n3); }
+  .kill-head .ky2 { color: #fc6897; }
+
+  /* technical diagrams */
+  .dia { width: 100%; max-width: 1000px; margin: .4rem 0 1rem; }
+  .dia text { font-family: var(--font-mono); fill: var(--n3); font-size: 12px; }
+  .dia .lbl { fill: var(--n1); font-size: 12.5px; }
+  .dia .sub { fill: var(--n4); font-size: 10px; }
+  .dia .acc { fill: var(--green); }
+  .dia rect.b { fill: #0d1418; stroke: #1b3540; rx: 6; }
+  .dia rect.b.key { stroke: #2b3a42; }
+  .dia .e { stroke: #2b3a42; stroke-width: 1.3; fill: none; marker-end: url(#a2); }
+  .dia .e.back { stroke: #3d4c55; stroke-dasharray: 4 4; }
+  section.on .dia .flow {
+    stroke: var(--green); stroke-width: 1.6; fill: none;
+    stroke-dasharray: 6 10; animation: dashRun 1.1s linear infinite; opacity: .9;
+  }
+  @keyframes dashRun { to { stroke-dashoffset: -16; } }
+  section.on .dia .lit { animation: litUp 6s ease-in-out infinite; }
+  @keyframes litUp { 0%,100% { stroke: #1b3540; } 50% { stroke: var(--green-25); } }
+
+  /* transaction timeline */
+  .tl-dia .life { stroke: #22323a; stroke-width: 1; }
+  .tl-dia .op { fill: #0d1418; stroke: #24404a; rx: 4; }
+  .tl-dia .op.win { stroke: var(--green-25); }
+  .tl-dia .op.lose { stroke: #fc689766; }
+  .tl-dia .ok { fill: var(--green); }
+  .tl-dia .no { fill: #fc6897; }
+  section.on .tl-dia .sweep { animation: sweepX 7s linear infinite; }
+  @keyframes sweepX { 0% { transform: translateX(0); opacity: 0; } 4% { opacity: 1; } 92% { opacity: 1; } 100% { transform: translateX(720px); opacity: 0; } }
+  section.on .tl-dia .ev { opacity: 0; animation: evShow 7s ease-in-out infinite; }
+  @keyframes evShow { 0%, 6% { opacity: 0; } 12%, 92% { opacity: 1; } 98%, 100% { opacity: 0; } }
+  .tl-dia .ev.e2 { animation-delay: .5s; } .tl-dia .ev.e3 { animation-delay: 1.0s; }
+  .tl-dia .ev.e4 { animation-delay: 1.5s; } .tl-dia .ev.e5 { animation-delay: 2.1s; }
+  .tl-dia .ev.e6 { animation-delay: 2.7s; }
+
+
+
+  /* the correction loop, running twice then exiting */
+  .cyc { width: 100%; max-width: 1000px; }
+  .cyc text { font-family: var(--font-mono); fill: var(--n4); font-size: 11.5px; }
+  .cyc .nl { fill: var(--n1); font-size: 13px; }
+  .cyc rect.n, .cyc polygon.n { fill: #0d1418; stroke: #1e2c33; stroke-width: 1.2; }
+  .cyc rect.n { rx: 7; }
+  .cyc .edge2 { stroke: #253239; stroke-width: 1.4; fill: none; marker-end: url(#a3); }
+  .cyc .edge2.ret { stroke-dasharray: 5 5; }
+
+  /* one 16s pass. the run fails once, uses a fix, repairs, passes, and
+     advances. grade and the decision are reached twice, so each node carries its
+     own windows instead of a shared keyframe plus an offset:
+     unlock 0-12 | build 15-28 | grade 31-43 | decide 46-53 | fixes 56-63 |
+     repair 66-78 | grade 81-90 | decide 91-95 | advance 97-100, as percent */
+  section.on .cyc .n, section.on .cyc .nl { animation-duration: 16s; animation-iteration-count: infinite; }
+  section.on .cyc rect.p-unlock  { animation-name: nUnlock; }
+  section.on .cyc rect.p-build   { animation-name: nBuild; }
+  section.on .cyc rect.p-grade1  { animation-name: nGrade; }
+  section.on .cyc polygon.p-dec1 { animation-name: nDec; }
+  section.on .cyc polygon.p-dec2 { animation-name: nDec2; }
+  section.on .cyc rect.p-fix     { animation-name: nFix; }
+  section.on .cyc rect.p-done    { animation-name: nDone; }
+  section.on .cyc text.p-unlock  { animation-name: tUnlock; }
+  section.on .cyc text.p-build   { animation-name: tBuild; }
+  section.on .cyc text.p-grade1  { animation-name: tGrade; }
+  section.on .cyc text.p-dec1    { animation-name: tDec; }
+  section.on .cyc text.p-dec2    { animation-name: tDec2; }
+  section.on .cyc text.p-fix     { animation-name: tFix; }
+  section.on .cyc text.p-done    { animation-name: tDone; }
+  /* the exhausted branch is drawn, never traversed: it is the outcome this pass
+     does not take, and it stays legible instead of blinking past */
+  .cyc rect.p-stop { stroke-dasharray: 4 4; }
+  .cyc text.p-stop { fill: var(--n4); }
+  @keyframes nUnlock { 0%,12% { stroke: var(--green); fill: #10201c } 14%,100% { stroke: #1e2c33; fill: #0d1418 } }
+  @keyframes nBuild  { 0%,13% { stroke: #1e2c33; fill: #0d1418 } 15%,28% { stroke: var(--green); fill: #10201c } 30%,100% { stroke: #1e2c33; fill: #0d1418 } }
+  @keyframes nGrade  { 0%,29% { stroke: #1e2c33; fill: #0d1418 } 31%,43% { stroke: var(--green); fill: #10201c }
+                       45%,79% { stroke: #1e2c33; fill: #0d1418 } 81%,90% { stroke: var(--green); fill: #10201c }
+                       92%,100% { stroke: #1e2c33; fill: #0d1418 } }
+  @keyframes nDec    { 0%,44% { stroke: #1e2c33; fill: #0d1418 } 46%,53% { stroke: var(--green); fill: #10201c }
+                       55%,90% { stroke: #1e2c33; fill: #0d1418 } 91%,95% { stroke: var(--green); fill: #10201c }
+                       97%,100% { stroke: #1e2c33; fill: #0d1418 } }
+  @keyframes nDec2   { 0%,54% { stroke: #1e2c33; fill: #0d1418 } 56%,63% { stroke: var(--green); fill: #10201c } 65%,100% { stroke: #1e2c33; fill: #0d1418 } }
+  @keyframes nFix    { 0%,64% { stroke: #1e2c33; fill: #0d1418 } 66%,78% { stroke: var(--green); fill: #10201c } 80%,100% { stroke: #1e2c33; fill: #0d1418 } }
+  @keyframes nDone   { 0%,95% { stroke: #1e2c33; fill: #0d1418 } 97%,100% { stroke: var(--green); fill: #10201c } }
+  @keyframes tUnlock { 0%,12% { fill: var(--green) } 14%,100% { fill: var(--n1) } }
+  @keyframes tBuild  { 0%,13% { fill: var(--n1) } 15%,28% { fill: var(--green) } 30%,100% { fill: var(--n1) } }
+  @keyframes tGrade  { 0%,29% { fill: var(--n1) } 31%,43% { fill: var(--green) } 45%,79% { fill: var(--n1) } 81%,90% { fill: var(--green) } 92%,100% { fill: var(--n1) } }
+  @keyframes tDec    { 0%,44% { fill: var(--n1) } 46%,53% { fill: var(--green) } 55%,90% { fill: var(--n1) } 91%,95% { fill: var(--green) } 97%,100% { fill: var(--n1) } }
+  @keyframes tDec2   { 0%,54% { fill: var(--n1) } 56%,63% { fill: var(--green) } 65%,100% { fill: var(--n1) } }
+  @keyframes tFix    { 0%,64% { fill: var(--n1) } 66%,78% { fill: var(--green) } 80%,100% { fill: var(--n1) } }
+  @keyframes tDone   { 0%,95% { fill: var(--n1) } 97%,100% { fill: var(--green) } }
+
+  /* an edge carries the run only while the run is crossing it */
+  section.on .cyc .e1, section.on .cyc .e2, section.on .cyc .e3,
+  section.on .cyc .e4, section.on .cyc .e5, section.on .cyc .e6, section.on .cyc .e8 {
+    stroke-dasharray: 5 9;
+    animation: dashRun .9s linear infinite, edgeLive 16s linear infinite;
+  }
+  section.on .cyc .e1 { animation-delay: 0s, -13.8s; }   /* unlock to build,   2.2s */
+  section.on .cyc .e2 { animation-delay: 0s, -11.3s; }   /* build to grade,    4.7s */
+  section.on .cyc .e3 { animation-delay: 0s,  -8.9s; }   /* grade to decide,   7.1s */
+  section.on .cyc .e5 { animation-delay: 0s,  -7.3s; }   /* decide to fixes, 8.7s */
+  section.on .cyc .e6 { animation-delay: 0s,  -5.7s; }   /* fixes to repair, 10.3s */
+  section.on .cyc .e8 { animation-delay: 0s,  -3.3s; }   /* repair to grade,   12.7s */
+  section.on .cyc .e4 { animation-delay: 0s,  -0.6s; }   /* decide to advance, 15.4s */
+  @keyframes edgeLive {
+    0%, 5%   { stroke: var(--green); stroke-width: 1.8; opacity: 1 }
+    7%, 100% { stroke: #253239; stroke-width: 1.4; opacity: .55 }
+  }
+  section.on .cyc .br { animation: brShow 16s linear infinite; }
+  section.on .cyc .br-no     { animation-delay: -8.0s; }
+  section.on .cyc .br-fix { animation-delay: -6.4s; }
+  section.on .cyc .br-yes    { animation-delay: -0.9s; }
+  @keyframes brShow { 0%, 8% { opacity: 1 } 10%, 100% { opacity: 0 } }
+
+  /* live state readout beside the loop */
+  .state { display: grid; grid-template-columns: repeat(4, 1fr); gap: .8rem; width: 100%; max-width: 1000px; margin-top: 1.1rem; }
+  @media (max-width: 700px) { .state { grid-template-columns: repeat(2, 1fr); } }
+  .st {
+    border: 1px solid var(--shade1); border-radius: 8px; background: #0a0d10;
+    padding: .7rem .85rem; font-family: var(--font-mono); font-size: .74rem; color: var(--n4);
+  }
+  .st .sv { display: block; margin-top: .35rem; font-size: 1.05rem; color: var(--n1); position: relative; height: 1.3em; }
+  .st .sv span { position: absolute; left: 0; top: 0; opacity: 0; white-space: nowrap; }
+  /* every cell holds a value at every point in the cycle; the windows tile it */
+  section.on .st .sv span { animation-duration: 16s; animation-iteration-count: infinite; }
+  section.on .v-a1 { animation-name: wA1; } section.on .v-a2 { animation-name: wA2; }
+  section.on .v-k1 { animation-name: wK1; } section.on .v-k2 { animation-name: wK2; }
+  section.on .v-u1 { animation-name: wU1; } section.on .v-u2 { animation-name: wU2; }
+  section.on .v-c0 { animation-name: wC0; } section.on .v-c1 { animation-name: wC1; } section.on .v-c2 { animation-name: wC2; }
+  @keyframes wA1 { 0%,95% { opacity: 1 } 97%,100% { opacity: 0 } }
+  @keyframes wA2 { 0%,95% { opacity: 0 } 97%,100% { opacity: 1 } }
+  @keyframes wK1 { 0%,63% { opacity: 1 } 65%,100% { opacity: 0 } }
+  @keyframes wK2 { 0%,63% { opacity: 0 } 65%,100% { opacity: 1 } }
+  @keyframes wU1 { 0%,95% { opacity: 1 } 97%,100% { opacity: 0 } }
+  @keyframes wU2 { 0%,95% { opacity: 0 } 97%,100% { opacity: 1 } }
+  @keyframes wC0 { 0%,28% { opacity: 1 } 30%,100% { opacity: 0 } }
+  @keyframes wC1 { 0%,28% { opacity: 0 } 30%,78% { opacity: 1 } 80%,100% { opacity: 0 } }
+  @keyframes wC2 { 0%,78% { opacity: 0 } 80%,100% { opacity: 1 } }
+  .st .sv .good { color: var(--green); }
+  .st .sv .wait { color: var(--n4); }
+  .st .sv .bad  { color: #fc6897; }
+
+  /* attack picker */
+  /* all 21 on the board at once, three columns of seven */
+  .atk { display: grid; gap: .9rem; width: 100%; max-width: 1000px; }
+  .atk-list { display: grid; grid-template-columns: repeat(3, 1fr); gap: .25rem .5rem; }
+  @media (max-width: 860px) { .atk-list { grid-template-columns: repeat(2, 1fr); } }
+  @media (max-width: 560px) { .atk-list { grid-template-columns: 1fr; } }
+  .atk-item {
+    display: grid; grid-template-columns: 1.6rem 1fr; gap: .4rem; align-items: baseline;
+    text-align: left; background: none; cursor: pointer;
+    border: 1px solid transparent; border-left: 2px solid var(--shade1);
+    border-radius: 0 6px 6px 0; padding: .32rem .6rem;
+    font-family: var(--font-mono); font-size: .76rem; color: var(--n4);
+    transition: color .15s, border-color .15s, background .15s;
+  }
+  .atk-item em { font-style: normal; font-size: .66rem; color: var(--n5); }
+  .atk-item:hover { color: var(--n3); background: #0d1418; }
+  .atk-item.on { color: var(--green); border-left-color: var(--green); background: var(--green-10); }
+  .atk-item.on em { color: var(--green-25); }
+
+  .atk-stage { border: 1px solid var(--shade1); border-radius: 10px; background: #0a0d10; overflow: hidden; min-height: 190px; }
+  .atk-panel { display: none; }
+  .atk-panel.on { display: block; }
+  .atk-head {
+    display: flex; justify-content: space-between; gap: 1rem; align-items: baseline;
+    padding: .55rem .9rem; border-bottom: 1px solid var(--shade1);
+    font-family: var(--font-mono); font-size: .76rem; color: var(--n4);
+  }
+  .atk-head span:first-child { color: var(--n1); }
+  .atk-body { padding: .9rem; display: grid; gap: .55rem; font-family: var(--font-mono); font-size: .8rem; }
+  .step {
+    display: grid; grid-template-columns: 3.4rem 1fr; gap: .7rem; align-items: start;
+    color: var(--n3); opacity: 0; transform: translateY(6px);
+    animation: stepIn .4s ease forwards;
+  }
+  .step .actor { color: var(--n4); font-size: .74rem; }
+  .step .actor { padding-top: .42rem; }
+  .step .what {
+    border: 1px solid var(--shade1); border-radius: 6px; padding: .38rem .7rem;
+    background: #0d1418; line-height: 1.45;
+  }
+  .step .what.hit { border-color: #fc689766; color: #fc6897; }
+  .step .what.hold { border-color: var(--green-25); color: var(--green); background: var(--green-10); }
+  @keyframes stepIn { to { opacity: 1; transform: none; } }
+  .atk-panel.on .step:nth-child(1) { animation-delay: .1s; }
+  .atk-panel.on .step:nth-child(2) { animation-delay: .5s; }
+  .atk-panel.on .step:nth-child(3) { animation-delay: .9s; }
+  .atk-panel.on .step:nth-child(4) { animation-delay: 1.3s; }
+  .atk-verdict {
+    margin: .2rem .9rem .9rem; padding: .5rem .8rem; border-radius: 6px;
+    font-family: var(--font-mono); font-size: .78rem;
+    border: 1px solid var(--green-25); background: var(--green-10); color: var(--green);
+    opacity: 0; animation: stepIn .4s ease 1.7s forwards;
+  }
+  .atk-panel.on .atk-verdict { animation-delay: 1.7s; }
+
+  /* verdict card */
+  .vcard {
+    width: 100%; max-width: 480px; border: 1px solid #fc689766; border-radius: 10px;
+    background: #0d1418; overflow: hidden; font-family: var(--font-mono);
+  }
+  .vcard .vh {
+    display: flex; justify-content: space-between; align-items: center; gap: 1rem;
+    padding: .6rem .9rem; border-bottom: 1px solid var(--shade1); background: #fc689714;
+  }
+  .vcard .vh b { color: var(--n1); font-size: .9rem; font-weight: 600; }
+  .vcard .vh span { color: #fc6897; font-size: .78rem; letter-spacing: .1em; }
+  .vcard .vrow { display: flex; justify-content: space-between; gap: 1rem; padding: .42rem .9rem; font-size: .78rem; color: var(--n3); }
+  .vcard .vrow span:first-child { color: var(--n4); }
+  .vcard .vrow.ev span:last-child { color: var(--green); }
+
+  /* side-by-side outcome simulation */
+  .sims { display: grid; grid-template-columns: 1fr 1fr; gap: 1.2rem; width: 100%; max-width: 1000px; }
+  @media (max-width: 800px) { .sims { grid-template-columns: 1fr; } }
+  .sim { border: 1px solid var(--shade1); border-radius: 10px; background: #0a0d10; overflow: hidden; }
+  .sim.good { border-color: var(--green-25); }
+  .sim.bad  { border-color: #fc689766; }
+  .sim .sh {
+    padding: .5rem .9rem; border-bottom: 1px solid var(--shade1);
+    font-family: var(--font-mono); font-size: .8rem; color: var(--n1);
+    display: flex; justify-content: space-between; gap: .6rem;
+  }
+  .sim.good .sh em { color: var(--green); font-style: normal; }
+  .sim.bad  .sh em { color: #fc6897; font-style: normal; }
+  .simbody { padding: .9rem; display: grid; gap: .55rem; font-family: var(--font-mono); font-size: .8rem; }
+  .lane2 { display: grid; grid-template-columns: 3.4rem 1fr; gap: .6rem; align-items: center; color: var(--n4); }
+  .track { height: 26px; border-radius: 5px; background: #0d1418; border: 1px solid var(--shade1); position: relative; overflow: hidden; }
+  .pkt {
+    position: absolute; top: 50%; margin-top: -8px; left: 6px; height: 16px;
+    border-radius: 4px; padding: 0 .45rem; font-size: .66rem; line-height: 16px;
+    background: var(--green-10); border: 1px solid var(--green-25); color: var(--green);
+    white-space: nowrap; opacity: 0;
+  }
+  .pkt.b { background: #1b2129; border-color: #2b3a42; color: var(--n3); }
+  section.on .pkt.a1 { animation: pktRun 8s ease-in-out infinite; }
+  section.on .pkt.b1 { animation: pktRun 8s ease-in-out infinite .6s; }
+  @keyframes pktRun {
+    0%      { left: 6px; opacity: 0; }
+    6%      { opacity: 1; }
+    38%     { left: calc(100% - 92px); opacity: 1; }
+    46%,100%{ left: calc(100% - 92px); opacity: 0; }
+  }
+  .stockbox {
+    display: flex; align-items: center; justify-content: space-between;
+    border-top: 1px solid var(--shade1); margin-top: .3rem; padding-top: .6rem;
+    font-family: var(--font-mono); font-size: .82rem; color: var(--n4);
+  }
+  .stockbox .val { position: relative; height: 1.3em; min-width: 9rem; text-align: right; }
+  .stockbox .val span { position: absolute; right: 0; top: 0; opacity: 0; }
+  section.on .sv1 { animation: svA 8s ease-in-out infinite; }
+  section.on .sv2 { animation: svB 8s ease-in-out infinite; }
+  @keyframes svA { 0%, 44% { opacity: 1; } 50%, 92% { opacity: 0; } 97%, 100% { opacity: 1; } }
+  @keyframes svB { 0%, 44% { opacity: 0; } 50%, 92% { opacity: 1; } 97%, 100% { opacity: 0; } }
+  .outcome { font-family: var(--font-mono); font-size: .78rem; opacity: 0; padding: 0 .9rem .8rem; }
+  .outcome.ok { color: var(--green); }
+  .outcome.no { color: #fc6897; }
+  section.on .outcome { animation: evShow 8s ease-in-out infinite; animation-delay: 2.6s; }
+
+  /* one collision, one outcome bar that resolves */
+  .collide { width: 100%; max-width: 900px; border: 1px solid var(--shade1); border-radius: 10px; background: #0a0d10; overflow: hidden; }
+  .collide .ch { padding: .5rem .95rem; border-bottom: 1px solid var(--shade1); font-family: var(--font-mono); font-size: .8rem; color: var(--n4); }
+  .collide .cbody { padding: 1rem .95rem; display: grid; gap: .7rem; font-family: var(--font-mono); font-size: .82rem; }
+  .row2 { display: grid; grid-template-columns: 3.6rem 1fr 5.5rem; gap: .7rem; align-items: center; color: var(--n4); }
+  .rail { height: 28px; border-radius: 6px; background: #0d1418; border: 1px solid var(--shade1); position: relative; overflow: hidden; }
+  .rail .req2 {
+    position: absolute; top: 50%; margin-top: -9px; left: 8px; height: 18px; line-height: 18px;
+    border-radius: 4px; padding: 0 .5rem; font-size: .68rem; white-space: nowrap;
+    background: var(--green-10); border: 1px solid var(--green-25); color: var(--green); opacity: 0;
+  }
+  section.on .req2.q1 { animation: reqRun 9s ease-in-out infinite; }
+  section.on .req2.q2 { animation: reqRun 9s ease-in-out infinite .35s; }
+  @keyframes reqRun {
+    0%       { left: 8px; opacity: 0; }
+    5%       { opacity: 1; }
+    26%      { left: calc(100% - 108px); opacity: 1; }
+    33%,100% { left: calc(100% - 108px); opacity: 0; }
+  }
+  .rowend { font-family: var(--font-mono); font-size: .74rem; color: var(--n4); text-align: right; }
+  .stockrow {
+    display: flex; justify-content: space-between; align-items: center;
+    border-top: 1px solid var(--shade1); padding-top: .75rem; margin-top: .25rem;
+    font-family: var(--font-mono); font-size: .86rem; color: var(--n4);
+  }
+  .stockrow b { color: var(--n1); font-weight: 600; }
+
+  .fork { width: 100%; max-width: 900px; margin-top: 1rem; position: relative; height: 4.4rem; }
+  .fork .branch {
+    position: absolute; inset: 0; display: flex; align-items: center; gap: .8rem;
+    border: 1px solid var(--shade1); border-radius: 8px; padding: .75rem 1rem;
+    font-family: var(--font-mono); font-size: clamp(.74rem, 1.5vw, .86rem); opacity: 0;
+  }
+  .fork .branch .tagl { flex: none; color: var(--n4); }
+  .fork .branch.good { border-color: var(--green-25); background: var(--green-10); color: var(--green); }
+  .fork .branch.bad  { border-color: #fc689766; background: #fc689714; color: #fc6897; }
+  section.on .fork .good { animation: forkA 9s ease-in-out infinite; }
+  section.on .fork .bad  { animation: forkB 9s ease-in-out infinite; }
+  @keyframes forkA { 0%, 34% { opacity: 0; transform: translateY(8px); } 40%, 60% { opacity: 1; transform: none; } 66%, 100% { opacity: 0; } }
+  @keyframes forkB { 0%, 62% { opacity: 0; transform: translateY(8px); } 68%, 92% { opacity: 1; transform: none; } 97%, 100% { opacity: 0; } }
+
+  /* verdict as an opened file */
+  /* receipts: the evidence pack, one tile per thing a run leaves behind */
+  .pack { display: grid; grid-template-columns: repeat(4, 1fr); gap: .6rem; width: 100%; max-width: 1000px; }
+  @media (max-width: 900px) { .pack { grid-template-columns: repeat(3, 1fr); } }
+  @media (max-width: 620px) { .pack { grid-template-columns: repeat(2, 1fr); } }
+  .rcpt {
+    border: 1px solid var(--shade1); border-radius: 10px; background: #0a0d10;
+    padding: .8rem .85rem; display: grid; gap: .28rem; align-content: start;
+    transition: border-color .2s, background .2s;
+  }
+  .rcpt { text-align: left; font: inherit; }
+
+  /* what is inside the tile you picked */
+  .pack-open {
+    width: 100%; max-width: 1000px; margin-top: .7rem;
+    border: 1px solid var(--shade1); border-radius: 10px; background: #0a0d10; overflow: hidden;
+  }
+  .po { display: none; }
+  .po.on { display: block; }
+  .po-head {
+    display: flex; justify-content: space-between; gap: 1rem; align-items: baseline;
+    padding: .55rem .9rem; border-bottom: 1px solid var(--shade1);
+    font-family: var(--font-mono); font-size: .76rem; color: var(--n4);
+  }
+  .po-head b { color: var(--green); font-weight: 500; }
+  .po-body { padding: .7rem .9rem; display: grid; gap: .05rem; }
+  .po-row {
+    display: grid; grid-template-columns: 13rem 1fr; gap: 1rem;
+    padding: .3rem 0; font-family: var(--font-mono); font-size: .78rem;
+    border-bottom: 1px solid #131b20;
+    opacity: 0; animation: lineIn .28s ease forwards;
+  }
+  .po-row:last-of-type { border-bottom: none; }
+  @media (max-width: 640px) { .po-row { grid-template-columns: 1fr; gap: 0; } }
+  .po-row span:first-child { color: var(--n4); }
+  .po-row span:last-child { color: var(--n1); }
+  .po.on .po-row:nth-of-type(1) { animation-delay: .04s; }
+  .po.on .po-row:nth-of-type(2) { animation-delay: .10s; }
+  .po.on .po-row:nth-of-type(3) { animation-delay: .16s; }
+  .po.on .po-row:nth-of-type(4) { animation-delay: .22s; }
+  .po.on .po-row:nth-of-type(5) { animation-delay: .28s; }
+  .po.on .po-row:nth-of-type(6) { animation-delay: .34s; }
+  .po.on .po-row:nth-of-type(7) { animation-delay: .40s; }
+  .po.on .po-row:nth-of-type(8) { animation-delay: .46s; }
+  .po-note {
+    padding: .5rem .9rem .7rem; font-family: var(--font-mono); font-size: .72rem;
+    color: var(--n4); border-top: 1px solid #131b20;
+  }
+  .rcpt svg {
+    width: 20px; height: 20px; fill: none; stroke: var(--green);
+    stroke-width: 1.6; stroke-linecap: round; stroke-linejoin: round; margin-bottom: .2rem;
+  }
+  .rcpt b { font-family: var(--font-mono); font-size: .82rem; color: var(--n1); font-weight: 500; }
+  .rcpt i { font-family: var(--font-mono); font-size: .72rem; color: var(--n3); font-style: normal; line-height: 1.45; }
+  section.on .rcpt { opacity: 0; animation: lineIn .35s ease forwards; }
+  section.on .rcpt:nth-child(1) { animation-delay: 0.23s; }
+  section.on .rcpt:nth-child(2) { animation-delay: 0.28s; }
+  section.on .rcpt:nth-child(3) { animation-delay: 0.33s; }
+  section.on .rcpt:nth-child(4) { animation-delay: 0.38s; }
+  section.on .rcpt:nth-child(5) { animation-delay: 0.43s; }
+  section.on .rcpt:nth-child(6) { animation-delay: 0.48s; }
+  section.on .rcpt:nth-child(7) { animation-delay: 0.53s; }
+  section.on .rcpt:nth-child(8) { animation-delay: 0.58s; }
+  section.on .rcpt:nth-child(9) { animation-delay: 0.63s; }
+  section.on .rcpt:nth-child(10) { animation-delay: 0.68s; }
+  section.on .rcpt:nth-child(11) { animation-delay: 0.73s; }
+  section.on .rcpt:nth-child(12) { animation-delay: 0.78s; }
+
+  @media (max-width: 720px) { .live { grid-template-columns: 1fr; } .lane { height: 40px; } }
+
+  @keyframes stockTick { 0%, 55% { opacity: 1; } 60%, 78% { opacity: .45; } 80%, 100% { opacity: 1; } }
+
+  /* video player mock */
+  .player { max-width: 820px; width: 100%; border: 1px solid var(--shade1); border-radius: 10px; overflow: hidden; background: #0a0d10; }
+  .pbanner { position: relative; height: 2.2rem; }
+  .pbanner .banner { position: absolute; inset: 0; border-radius: 0; align-items: center; border-left: none; border-right: none; border-top: none; }
+  section.on .pbanner .pass { animation: bswap 8s steps(1) infinite; }
+  section.on .pbanner .fail { animation: bswap2 8s steps(1) infinite; }
+  @keyframes bswap  { 0%, 49% { opacity: 1; } 50%, 100% { opacity: 0; } }
+  @keyframes bswap2 { 0%, 49% { opacity: 0; } 50%, 100% { opacity: 1; } }
+  .pscreen { height: 150px; display: grid; place-items: center; color: var(--n5); position: relative; }
+  .pscreen svg { opacity: .6; }
+  .pbar { height: 4px; background: var(--shade4); position: relative; }
+  .pbar i { position: absolute; inset: 0 auto 0 0; width: 0; background: var(--green); }
+  section.on .pbar i { animation: pplay 8s linear infinite; }
+  @keyframes pplay { to { width: 100%; } }
+
+  @media (max-width: 720px) {
+    .files { columns: 1; }
+    #dots { display: none; }
+    section { padding-left: 1.4rem; padding-right: 1.4rem; }
+  }
+  /* the dependency graph: levels across, edges showing what unlocks what */
+  .dg { width: 100%; max-width: 1000px; }
+  .dg text { font-family: var(--font-mono); font-size: 11.5px; fill: var(--n1); }
+  .dg .dg-col { font-size: 10.5px; fill: var(--n4); letter-spacing: .08em; }
+  .dg-n rect { fill: #0d1418; stroke: #1e2c33; stroke-width: 1.2; rx: 6; }
+  .dg .dg-label { fill: var(--n1); font-size: 12px; }
+  .dg .dg-state { font-size: 9px; text-anchor: end; opacity: 0; }
+  .dg .dg-state.open { fill: var(--open); }
+  .dg .dg-state.working { fill: var(--working); }
+  .dg .dg-state.pass { fill: var(--green); }
+  .dg .dg-state.fail { fill: #fc6897; }
+  .dg .dg-state.locked { fill: var(--n4); }
+  .dg-edges path { fill: none; stroke: #253239; stroke-width: 1.4; }
+  .dg-flow { fill: none; stroke: var(--green); stroke-width: 1.7; stroke-dasharray: 5 8; opacity: 0; }
+  section.on .dg .l1-pass rect { animation: dgL1Pass 9s ease-in-out infinite; }
+  section.on .dg .l1-fail rect { animation: dgL1Fail 9s ease-in-out infinite; }
+  section.on .dg .l2-pass rect { animation: dgL2Pass 9s ease-in-out infinite; }
+  section.on .dg .l2-fail rect { animation: dgL2Fail 9s ease-in-out infinite; }
+  section.on .dg .l2-locked, section.on .dg .l3-locked { animation: dgLocked 9s ease-in-out infinite; }
+  section.on .dg .l3-open rect { animation: dgL3Open 9s ease-in-out infinite; }
+  section.on .dg .phase-l1-open { animation: dgL1OpenText 9s ease-in-out infinite; }
+  section.on .dg .phase-l1-working { animation: dgL1WorkingText 9s ease-in-out infinite; }
+  section.on .dg .phase-l1-result { animation: dgL1ResultText 9s ease-in-out infinite; }
+  section.on .dg .phase-l2-open { animation: dgL2OpenText 9s ease-in-out infinite; }
+  section.on .dg .phase-l2-working { animation: dgL2WorkingText 9s ease-in-out infinite; }
+  section.on .dg .phase-l2-result { animation: dgL2ResultText 9s ease-in-out infinite; }
+  section.on .dg .phase-l3-open { animation: dgL3OpenText 9s ease-in-out infinite; }
+  section.on .dg .blocked-l1 { animation: dgBlockedL1Text 9s ease-in-out infinite; }
+  section.on .dg .blocked-l2 { animation: dgBlockedL2Text 9s ease-in-out infinite; }
+  section.on .dg .flow-l2 { animation: dgFlow2 9s linear infinite; }
+  section.on .dg .flow-l3 { animation: dgFlow3 9s linear infinite; }
+  @keyframes dgL1Pass {
+    0%,10%,97%,100% { stroke:var(--open); fill:var(--open-10); }
+    14%,23% { stroke:var(--working); fill:var(--working-10); }
+    27%,93% { stroke:var(--green); fill:var(--green-10); }
+  }
+  @keyframes dgL1Fail {
+    0%,10%,97%,100% { stroke:var(--open); fill:var(--open-10); }
+    14%,23% { stroke:var(--working); fill:var(--working-10); }
+    27%,93% { stroke:#fc6897; fill:#fc689714; }
+  }
+  @keyframes dgL2Pass {
+    0%,29%,97%,100% { stroke:#1e2c33; fill:#0d1418; opacity:.3; }
+    33%,40% { stroke:var(--open); fill:var(--open-10); opacity:1; }
+    44%,53% { stroke:var(--working); fill:var(--working-10); opacity:1; }
+    57%,93% { stroke:var(--green); fill:var(--green-10); opacity:1; }
+  }
+  @keyframes dgL2Fail {
+    0%,29%,97%,100% { stroke:#1e2c33; fill:#0d1418; opacity:.3; }
+    33%,40% { stroke:var(--open); fill:var(--open-10); opacity:1; }
+    44%,53% { stroke:var(--working); fill:var(--working-10); opacity:1; }
+    57%,93% { stroke:#fc6897; fill:#fc689714; opacity:1; }
+  }
+  @keyframes dgL3Open {
+    0%,59%,97%,100% { stroke:#1e2c33; fill:#0d1418; opacity:.3; }
+    63%,93% { stroke:var(--open); fill:var(--open-10); opacity:1; }
+  }
+  @keyframes dgLocked { 0%,100% { opacity:.58; } }
+  @keyframes dgL1OpenText { 0%,10%,97%,100% { opacity:1; } 13%,96% { opacity:0; } }
+  @keyframes dgL1WorkingText { 0%,12%,25%,100% { opacity:0; } 15%,22% { opacity:1; } }
+  @keyframes dgL1ResultText { 0%,25%,95%,100% { opacity:0; } 28%,93% { opacity:1; } }
+  @keyframes dgL2OpenText { 0%,31%,42%,100% { opacity:0; } 34%,39% { opacity:1; } }
+  @keyframes dgL2WorkingText { 0%,42%,55%,100% { opacity:0; } 45%,52% { opacity:1; } }
+  @keyframes dgL2ResultText { 0%,55%,95%,100% { opacity:0; } 58%,93% { opacity:1; } }
+  @keyframes dgL3OpenText { 0%,61%,95%,100% { opacity:0; } 64%,93% { opacity:1; } }
+  @keyframes dgBlockedL1Text { 0%,25%,95%,100% { opacity:0; } 28%,93% { opacity:1; } }
+  @keyframes dgBlockedL2Text { 0%,55%,95%,100% { opacity:0; } 58%,93% { opacity:1; } }
+  @keyframes dgFlow2 { 0%,25%,42%,100% { opacity:0; stroke-dashoffset:18; } 29%,39% { opacity:1; stroke-dashoffset:-18; } }
+  @keyframes dgFlow3 { 0%,55%,72%,100% { opacity:0; stroke-dashoffset:18; } 59%,69% { opacity:1; stroke-dashoffset:-18; } }
+
+  section.appendix { display: none; }
+  section.visual-tight { padding-top: 3rem; padding-bottom: 2.5rem; }
+  section.visual-tight .supp { margin-top: .55rem !important; font-size: .9rem; }
+  section.fit-slide { padding-top: 3.5rem; padding-bottom: 3rem; }
+  section.fit-slide .dia { max-height: 420px; margin-bottom: 0; }
+  section.graph-slide h2 { margin-bottom: .75rem; }
+  section.graph-slide .lead { margin-top: 0 !important; }
+  section.graph-slide .dg { margin-top: 1.2rem; }
+  .scorevis {
+    display: grid; grid-template-columns: minmax(0, 1fr) 13rem; gap: 3rem;
+    padding: 1.5rem 0; border-top: 1px solid var(--shade1); border-bottom: 1px solid var(--shade1);
+  }
+  .scoreareas { display: grid; grid-template-columns: 1fr 1fr; gap: .8rem 1.4rem; }
+  .scorerow { display: grid; grid-template-columns: 7.5rem minmax(0, 1fr) 3.2rem; gap: .65rem; align-items: center; }
+  .scorelabel b { display: block; color: var(--n1); font-size: .95rem; font-weight: 560; }
+  .scorelabel span { display: block; color: var(--n4); font-family: var(--font-mono); font-size: .7rem; margin-top: .1rem; }
+  .scorebar { height: 12px; background: var(--shade4); overflow: hidden; }
+  .scorebar i { display: block; height: 100%; width: var(--score); background: #9eb7c8; opacity: .82; transform-origin: left; }
+  section.on .scorebar i { animation: scoreGrow 1s ease-out both; }
+  @keyframes scoreGrow { from { transform: scaleX(0); } to { transform: scaleX(1); } }
+  .scorepct { color: var(--n1); font-family: var(--font-mono); font-size: .9rem; text-align: right; }
+  .overallscore { border-left: 1px solid var(--shade1); padding-left: 2.5rem; display: flex; flex-direction: column; justify-content: center; }
+  .overallscore span { color: var(--n4); font-family: var(--font-mono); font-size: .72rem; letter-spacing: .1em; text-transform: uppercase; }
+  .overallscore strong { color: var(--n1); font-size: clamp(3rem, 6vw, 5rem); line-height: 1; margin: .55rem 0 .65rem; font-weight: 620; }
+  .overallscore small { color: var(--n4); font-size: .78rem; line-height: 1.45; }
+  .scorestatus { display: grid; gap: .3rem; margin-top: .9rem; color: var(--n2); font: .68rem/1.25 var(--font-mono); }
+  .scorestatus b { color: var(--n1); font-weight: 500; }
+  .comparevis {
+    width: 100%;
+    max-width: 920px;
+    margin-top: 1.05rem;
+    border-top: 1px solid var(--shade1);
+    border-bottom: 1px solid var(--shade1);
+  }
+  .compare-head,
+  .compare-row {
+    display: grid;
+    grid-template-columns: 5rem minmax(12rem, 1fr) 9rem 4.5rem 5rem 4rem 3.5rem;
+    gap: 1rem;
+    align-items: center;
+  }
+  .compare-head {
+    padding: .65rem .8rem;
+    color: var(--n4);
+    font: .64rem/1.2 var(--font-mono);
+    letter-spacing: .1em;
+    text-transform: uppercase;
+  }
+  .compare-row {
+    min-height: 92px;
+    padding: .8rem;
+    border-top: 1px solid var(--shade4);
+  }
+  .compare-stack {
+    color: var(--n1);
+    font: 580 .92rem/1.2 var(--font);
+  }
+  .compare-score {
+    display: grid;
+    grid-template-columns: minmax(0, 1fr) 4rem;
+    gap: .85rem;
+    align-items: center;
+  }
+  .compare-track {
+    position: relative;
+    height: 12px;
+    background: var(--shade4);
+    overflow: hidden;
+  }
+  .compare-track b {
+    position: absolute; left: var(--initial); top: 0; bottom: 0; width: 2px;
+    background: var(--n1); transform: translateX(-1px); opacity: .85;
+  }
+  .compare-track i {
+    display: block;
+    width: var(--final);
+    height: 100%;
+    background: var(--green);
+    opacity: .72;
+    transform-origin: left;
+  }
+  .compare-score span,
+  .compare-metric {
+    color: var(--n1);
+    font: .78rem/1.3 var(--font-mono);
+  }
+  .compare-score span { white-space: nowrap; }
+  .compare-progress { line-height: 1.45; }
+  .compare-progress span { color: var(--n4); font-size: .65rem; }
+  .compare-note {
+    text-align: right;
+    padding: .65rem .8rem;
+    color: var(--n4);
+    font: .65rem/1.2 var(--font-mono);
+  }
+  section.on .compare-track i { animation: compareGrow .9s ease-out both; }
+  section.on .compare-row:nth-child(3) .compare-track i { animation-delay: .12s; }
+  section.on .compare-row:nth-child(4) .compare-track i { animation-delay: .24s; }
+  @keyframes compareGrow { from { transform: scaleX(0); } to { transform: scaleX(1); } }
+  @media (max-width: 760px) {
+    .scorevis { grid-template-columns: 1fr; gap: 1.5rem; }
+    .scorerow { grid-template-columns: 7rem minmax(0, 1fr) 3.5rem; }
+    .overallscore { border-left: 0; border-top: 1px solid var(--shade1); padding: 1.5rem 0 0; }
+    .compare-head,
+    .compare-row { grid-template-columns: 5rem minmax(12rem, 1fr) 4.5rem 4.5rem; }
+    .compare-head > :nth-child(5), .compare-head > :nth-child(6), .compare-head > :nth-child(7),
+    .compare-row > :nth-child(5), .compare-row > :nth-child(6), .compare-row > :nth-child(7) { display: none; }
+  }
+  /* CTO presentation: simple, centered compositions with one job per slide. */
+  .cto-visual { width: 100%; max-width: 920px; margin-top: 1.45rem; }
+  .behvis { width: 100%; max-width: 920px; overflow: visible; }
+  .behvis text { font-family: var(--font-mono); }
+  .behvis .area { fill: #0b1115; stroke: #26343b; stroke-width: 1.2; }
+  .behvis .core { fill: #0e1915; stroke: var(--green); stroke-width: 1.3; }
+  .behvis .wire { fill: none; stroke: #33444d; stroke-width: 1.4; }
+  .behvis .wire.live { stroke: var(--green); }
+  .behvis .label { fill: var(--n1); font-size: 13px; font-weight: 600; }
+  .behvis .minor { fill: var(--n4); font-size: 10px; }
+  section.on .behvis .wire.live { stroke-dasharray: 5 8; animation: behDash 1.1s linear infinite; }
+  @keyframes behDash { to { stroke-dashoffset: -13; } }
+  .selftest {
+    width: 100%; max-width: 920px; margin-top: 1.15rem;
+    border-top: 1px solid var(--shade1); border-bottom: 1px solid var(--shade1);
+  }
+  .selftest-head, .selftest-row {
+    display: grid; grid-template-columns: 13.5rem minmax(0, 1fr) 11rem;
+    gap: 1.5rem; align-items: center;
+  }
+  .selftest-head {
+    padding: .55rem .9rem; color: var(--n4);
+    font: .64rem/1.3 var(--font-mono); letter-spacing: .12em; text-transform: uppercase;
+  }
+  .selftest-row { padding: 1rem .9rem; border-top: 1px solid var(--shade4); }
+  .selftest-control b { display: block; color: var(--n1); font-size: .9rem; font-weight: 560; }
+  .selftest-control span { display: block; color: var(--n4); font: .68rem/1.4 var(--font-mono); margin-top: .15rem; }
+  .check-strip { display: grid; grid-template-columns: repeat(12, 1fr); gap: .36rem; }
+  .check-unit { height: 13px; border: 1px solid var(--green-25); background: var(--green-10); border-radius: 2px; }
+  .check-unit.target { position: relative; }
+  .check-unit.target::after {
+    content: ''; position: absolute; left: 50%; top: -10px; width: 1px; height: 31px;
+    background: #fc689755; transform: translateX(-50%); opacity: 0;
+  }
+  .check-unit.blank { border-style: dashed; border-color: var(--n5); background: transparent; }
+  .selftest-result { color: var(--n3); font: .73rem/1.4 var(--font-mono); }
+  .selftest-result strong { display: block; color: var(--n1); font-weight: 500; font-size: .8rem; }
+  .selftest-result span { display: block; color: var(--n4); margin-top: .15rem; }
+  section.on .selftest-row { opacity: .3; animation: selfRow 7.2s ease-in-out infinite; }
+  section.on .selftest-row.row-reference { animation-delay: 0s; }
+  section.on .selftest-row.row-defect { animation-delay: .65s; }
+  section.on .selftest-row.row-empty { animation-delay: 1.3s; }
+  section.on .check-unit.target { animation: selfDefect 7.2s ease-in-out infinite; animation-delay: .65s; }
+  section.on .check-unit.target::after { animation: selfMarker 7.2s ease-in-out infinite; animation-delay: .65s; }
+  @keyframes selfRow { 0%,4%,100% { opacity:.35; } 10%,84% { opacity:1; } 94% { opacity:.35; } }
+  @keyframes selfDefect { 0%,12%,100% { background:var(--green-10); border-color:var(--green-25); } 18%,84% { background:#fc689726; border-color:#fc6897; box-shadow:0 0 16px #fc689733; } }
+  @keyframes selfMarker { 0%,12%,100% { opacity:0; } 18%,84% { opacity:1; } }
+  /* Product overview: one flat feature grid, not a dashboard. */
+  .feature-grid {
+    display: grid;
+    grid-template-columns: repeat(3, 1fr);
+    width: 100%;
+    max-width: 920px;
+    margin-top: 1.1rem;
+    border-top: 1px solid var(--shade1);
+    border-left: 1px solid var(--shade1);
+  }
+  .feature-item {
+    min-height: 152px;
+    padding: 1.35rem 1.45rem 1.25rem;
+    border-right: 1px solid var(--shade1);
+    border-bottom: 1px solid var(--shade1);
+    background: linear-gradient(145deg, #0b1114 0%, #08100c 100%);
+  }
+  .feature-icon {
+    width: 28px;
+    height: 28px;
+    margin-bottom: .85rem;
+    color: var(--green);
+  }
+  .feature-icon svg {
+    width: 100%;
+    height: 100%;
+    fill: none;
+    stroke: currentColor;
+    stroke-width: 1.6;
+    stroke-linecap: round;
+    stroke-linejoin: round;
+  }
+  .feature-item h3 {
+    margin: 0 0 .35rem;
+    color: var(--n1);
+    font-size: 1rem;
+    font-weight: 590;
+  }
+  .feature-item p {
+    margin: 0;
+    color: var(--n3);
+    font-size: .78rem;
+    line-height: 1.45;
+  }
+  section.on .feature-item {
+    opacity: 0;
+    transform: translateY(10px);
+    animation: featureIn .45s ease forwards;
+  }
+  section.on .feature-item:nth-child(1) { animation-delay: .22s; }
+  section.on .feature-item:nth-child(2) { animation-delay: .28s; }
+  section.on .feature-item:nth-child(3) { animation-delay: .34s; }
+  section.on .feature-item:nth-child(4) { animation-delay: .40s; }
+  section.on .feature-item:nth-child(5) { animation-delay: .46s; }
+  section.on .feature-item:nth-child(6) { animation-delay: .52s; }
+  @keyframes featureIn { to { opacity: 1; transform: none; } }
+
+  /* Five fixed choices become one exact agent request. */
+  .run-visual {
+    width: 100%;
+    max-width: 920px;
+    height: auto;
+    margin-top: .9rem;
+    overflow: visible;
+  }
+  .run-visual .section-label {
+    fill: var(--n4);
+    font: .66rem var(--font-mono);
+    letter-spacing: .13em;
+  }
+  .run-visual .choice-dot { fill: var(--green); }
+  .run-visual .choice-name {
+    fill: var(--n1);
+    font: 600 .9rem var(--font);
+  }
+  .run-visual .choice-detail {
+    fill: var(--n3);
+    font: .68rem var(--font-mono);
+  }
+  .run-visual .choice-rule,
+  .run-visual .request-rule {
+    stroke: var(--shade1);
+    stroke-width: 1;
+  }
+  .run-visual .feed {
+    fill: none;
+    stroke: #264337;
+    stroke-width: 1.2;
+    stroke-dasharray: 4 6;
+  }
+  .run-visual .feed-main {
+    fill: none;
+    stroke: var(--green);
+    stroke-width: 1.5;
+  }
+  .run-visual .merge { fill: var(--green); }
+  .run-visual .request-sheet {
+    fill: #09110d;
+    stroke: var(--green-55);
+    stroke-width: 1;
+  }
+  .run-visual .request-title {
+    fill: var(--green);
+    font: 600 .72rem var(--font-mono);
+    letter-spacing: .11em;
+  }
+  .run-visual .request-command {
+    fill: var(--n1);
+    font: 600 1.16rem var(--font);
+  }
+  .run-visual .request-key {
+    fill: var(--n1);
+    font: 580 .74rem var(--font);
+  }
+  .run-visual .request-value {
+    fill: var(--n3);
+    font: .65rem var(--font-mono);
+  }
+  .run-visual .repair-note {
+    fill: var(--green);
+    font: .64rem var(--font-mono);
+  }
+  section.on .run-visual .feed {
+    stroke-dashoffset: 30;
+    animation: runFeed 1.5s linear infinite;
+  }
+  section.on .run-visual .request-sheet {
+    animation: requestGlow 2.4s ease-in-out infinite;
+  }
+  @keyframes runFeed { to { stroke-dashoffset: 0; } }
+  @keyframes requestGlow {
+    0%, 100% { stroke: var(--green-25); }
+    50% { stroke: var(--green); }
+  }
+
+  @media (max-width: 760px) {
+    .selftest-head, .selftest-row { grid-template-columns: 8rem minmax(0, 1fr) 7rem; gap: .65rem; }
+    .check-strip { gap: .18rem; }
+    .feature-grid { grid-template-columns: 1fr 1fr; }
+    .feature-item { min-height: 138px; padding: 1rem; }
+    .run-visual { margin-top: .55rem; }
+  }
+</style>
+</head>
+<body>
+
+<div id="bar"></div>
+<nav id="dots" aria-label="slides"></nav>
+<div class="hint">&#8592; &#8594; or scroll</div>
+
+<!-- 1 hero -->
+<section id="hero">
+  <div class="brand r">
+    <svg width="35" height="32" viewBox="0 0 35 32" fill="none" xmlns="http://www.w3.org/2000/svg" aria-hidden="true">
+      <path d="M28.8002 15.317C28.5535 9.53226 29.63 6.19046 35 0L24.2649 10.9106C26.8343 14.2552 26.6051 19.0995 23.5774 22.1767C20.5498 25.2538 15.7834 25.4867 12.4925 22.8754L10.5042 24.8962L10.5116 24.9024L7.35285 28.1361C9.73784 26.7321 13.4208 27.1349 15.6425 27.3779C16.2579 27.4452 16.7611 27.5003 17.0937 27.5013C20.1371 27.6534 23.2301 26.5483 25.5544 24.186C27.9465 21.7549 29.0284 18.4965 28.8002 15.317Z" fill="#D7D8D9"/>
+      <path d="M17.9063 4.49871C18.2389 4.49971 18.7421 4.55476 19.3575 4.62207C21.5792 4.86508 25.2622 5.26792 27.6472 3.86395L24.4884 7.0976L24.4958 7.10383L22.5075 9.12462C19.2166 6.51328 14.4502 6.74618 11.4226 9.82332C8.3949 12.9005 8.16574 17.7448 10.7351 21.0894L0 32C5.36996 25.8095 6.44651 22.4677 6.1998 16.683C5.97163 13.5035 7.05355 10.2451 9.44557 7.81402C11.7699 5.45167 14.8629 4.34657 17.9063 4.49871Z" fill="#D7D8D9"/>
+      <path fill-rule="evenodd" clip-rule="evenodd" d="M24.7486 16C24.7486 20.0687 21.5033 23.367 17.5 23.367C13.4967 23.367 10.2514 20.0687 10.2514 16C10.2514 11.9313 13.4967 8.63292 17.5 8.63292C21.5033 8.63292 24.7486 11.9313 24.7486 16ZM17.5 21.6C20.5752 21.6 23.0682 19.0928 23.0682 16C23.0682 12.9072 20.5752 10.4 17.5 10.4C14.4248 10.4 11.9318 12.9072 11.9318 16C11.9318 19.0928 14.4248 21.6 17.5 21.6Z" fill="#D7D8D9"/>
+    </svg>
+    <span>SpacetimeDB</span>
+  </div>
+  <h1 class="r d1">Stack Bench</h1>
+  <p class="lead r d2"><span>Build the same product on different app stacks. Test what works, repair what fails, and compare the evidence.</span></p>
+</section>
+
+<!-- 2 product overview -->
+<section class="visual-tight visual-first">
+  <div class="kicker r">what it includes</div>
+  <h2 class="r d1">Stack Bench manages the full workflow.</h2>
+  <p class="lead r d2">One system runs the build, tests the finished product, manages repairs, and preserves everything needed to compare app stacks.</p>
+  <div class="feature-grid r d3" role="list" aria-label="Stack Bench capabilities">
+    <article class="feature-item" role="listitem">
+      <div class="feature-icon" aria-hidden="true"><svg viewBox="0 0 32 32"><path d="M7 8h18v16H7z"/><path d="M11 13l3 3-3 3M17 19h4"/></svg></div>
+      <h3>AI build runner</h3>
+      <p>Runs the selected model with the product brief, stack, and budget.</p>
+    </article>
+    <article class="feature-item" role="listitem">
+      <div class="feature-icon" aria-hidden="true"><svg viewBox="0 0 32 32"><circle cx="8" cy="8" r="3"/><circle cx="24" cy="8" r="3"/><circle cx="16" cy="24" r="3"/><path d="M10.5 9.5l4 11M21.5 9.5l-4 11M11 8h10"/></svg></div>
+      <h3>Modular product spec</h3>
+      <p>Versions features, dependencies, prompts, checks, and scoring rules.</p>
+    </article>
+    <article class="feature-item" role="listitem">
+      <div class="feature-icon" aria-hidden="true"><svg viewBox="0 0 32 32"><path d="M5 9l11-5 11 5-11 5zM5 9v14l11 5 11-5V9M16 14v14"/></svg></div>
+      <h3>Isolated stack runtime</h3>
+      <p>Starts the generated app and selected stack services in controlled containers.</p>
+    </article>
+    <article class="feature-item" role="listitem">
+      <div class="feature-icon" aria-hidden="true"><svg viewBox="0 0 32 32"><path d="M5 7h22v16H5zM10 27h12M16 23v4"/><path d="M10 15l4 4 8-9"/></svg></div>
+      <h3>Automated grader</h3>
+      <p>Exercises real user flows, direct data changes, failures, and concurrency.</p>
+    </article>
+    <article class="feature-item" role="listitem">
+      <div class="feature-icon" aria-hidden="true"><svg viewBox="0 0 32 32"><path d="M25 11a10 10 0 10.5 9"/><path d="M25 5v6h-6M12 12l8 8M20 12l-8 8"/></svg></div>
+      <h3>Repair controller</h3>
+      <p>Returns failed checks to the agent and manages the repair budget.</p>
+    </article>
+    <article class="feature-item" role="listitem">
+      <div class="feature-icon" aria-hidden="true"><svg viewBox="0 0 32 32"><path d="M8 4h12l5 5v19H8zM20 4v6h6"/><path d="M12 15h9M12 20h9M12 25h6"/></svg></div>
+      <h3>Evidence and comparison</h3>
+      <p>Packages source, prompts, scores, cost, screenshots, video, and traces.</p>
+    </article>
+  </div>
+</section>
+
+<!-- 3 functional architecture -->
+<section class="fit-slide visual-first">
+  <div class="kicker r">one controlled run</div>
+  <h2 class="r d1">Stack Bench controls every step.</h2>
+  <p class="lead r d2">Each run keeps the request and environment fixed, isolates the build and services, and saves the results and evidence.</p>
+  <svg class="dia r d3" viewBox="0 0 960 452" role="img" aria-label="Stack Bench checks the setup, runs the agent and app stack, grades the app, and saves the results and evidence">
+    <defs><marker id="a2" viewBox="0 0 8 8" refX="7" refY="4" markerWidth="7" markerHeight="7" orient="auto"><path d="M0 0 L8 4 L0 8 z" fill="#2b3a42"/></marker></defs>
+    <rect class="b key" x="385" y="8" width="200" height="40"/><text class="lbl" x="405" y="26">Stack Bench</text><text class="sub" x="405" y="40">controls the run</text>
+    <rect class="b" x="60" y="92" width="200" height="40"/><text class="lbl" x="78" y="110">preflight</text><text class="sub" x="78" y="124">checks setup first</text>
+    <rect class="b" x="385" y="92" width="200" height="40"/><text class="lbl" x="405" y="110">agent</text><text class="sub" x="405" y="124">builds or fixes</text>
+    <rect class="b" x="700" y="92" width="200" height="40"/><text class="lbl" x="718" y="110">app stack</text><text class="sub" x="718" y="124">selected for the run</text>
+    <rect class="b lit" x="385" y="168" width="200" height="40"/><text class="lbl" x="405" y="186">build</text><text class="sub" x="405" y="200">isolated workspace</text>
+    <rect class="b lit" x="700" y="168" width="200" height="40" style="animation-delay:.8s"/><text class="lbl" x="718" y="186">services</text><text class="sub" x="718" y="200">isolated and reset</text>
+    <rect class="b key" x="385" y="244" width="515" height="40"/><text class="lbl" x="405" y="262">app</text><text class="sub" x="405" y="276">running on the selected stack</text>
+    <rect class="b key" x="130" y="320" width="770" height="46"/><text class="lbl" x="150" y="338">grader</text><text class="sub" x="150" y="354">runs the product tests</text>
+    <rect class="b" x="130" y="396" width="360" height="44"/><text class="lbl" x="150" y="414">results</text><text class="sub" x="150" y="429">pass · fail · could not test</text>
+    <rect class="b" x="540" y="396" width="360" height="44"/><text class="lbl" x="560" y="414">evidence</text><text class="sub" x="560" y="429">prompt · source · cost · visuals</text>
+    <path class="e" d="M470 48 V70 H160 V88"/><path class="e flow" d="M485 48 V88"/><path class="e" d="M500 48 V70 H800 V88"/>
+    <path class="e flow" d="M485 132 V164"/><path class="e flow" d="M800 132 V164"/><path class="e flow" d="M485 208 V240"/><path class="e flow" d="M800 208 V240"/>
+    <path class="e flow" d="M600 284 V300 H515 V316"/><path class="e flow" d="M310 366 V392"/><path class="e flow" d="M720 366 V392"/>
+    <path class="e back" d="M130 418 H40 V150 H430 V134" marker-end="url(#a2)"/><text class="sub acc" x="46" y="252">failed tests</text><text class="sub" x="46" y="266">return to the agent</text>
+  </svg>
+</section>
+
+<!-- 4 run definition and agent request -->
+<section class="visual-tight visual-first">
+  <div class="kicker r">the run plan</div>
+  <h2 class="r d1">Each run starts with a fixed plan.</h2>
+  <p class="lead r d2">Choose the model, stack, features, tests, and repair limit. Stack Bench records the plan and builds the request the agent receives.</p>
+  <svg class="run-visual r d3" viewBox="0 0 960 372" role="img" aria-label="Five fixed run choices flow into one exact agent request">
+    <defs>
+      <marker id="run-arrow" viewBox="0 0 8 8" refX="7" refY="4" markerWidth="7" markerHeight="7" orient="auto">
+        <path d="M0 0 L8 4 L0 8 z" fill="#21f38a"/>
+      </marker>
+    </defs>
+
+    <text class="section-label" x="30" y="22">FIXED FOR THE RUN</text>
+    <text class="section-label" x="585" y="22">AGENT REQUEST</text>
+
+    <circle class="choice-dot" cx="38" cy="62" r="3"/>
+    <text class="choice-name" x="58" y="59">Model</text>
+    <text class="choice-detail" x="58" y="76">provider + exact model</text>
+    <line class="choice-rule" x1="30" y1="91" x2="350" y2="91"/>
+
+    <circle class="choice-dot" cx="38" cy="123" r="3"/>
+    <text class="choice-name" x="58" y="120">Stack</text>
+    <text class="choice-detail" x="58" y="137">selected stack + tools</text>
+    <line class="choice-rule" x1="30" y1="152" x2="350" y2="152"/>
+
+    <circle class="choice-dot" cx="38" cy="184" r="3"/>
+    <text class="choice-name" x="58" y="181">Features</text>
+    <text class="choice-detail" x="58" y="198">unlocked for this level</text>
+    <line class="choice-rule" x1="30" y1="213" x2="350" y2="213"/>
+
+    <circle class="choice-dot" cx="38" cy="245" r="3"/>
+    <text class="choice-name" x="58" y="242">Tests</text>
+    <text class="choice-detail" x="58" y="259">checks + scoring</text>
+    <line class="choice-rule" x1="30" y1="274" x2="350" y2="274"/>
+
+    <circle class="choice-dot" cx="38" cy="306" r="3"/>
+    <text class="choice-name" x="58" y="303">Repairs</text>
+    <text class="choice-detail" x="58" y="320">limit for each feature</text>
+
+    <path class="feed" d="M260 62 H392 Q430 62 455 105 L482 151"/>
+    <path class="feed" d="M260 123 H402 Q438 123 460 151 L482 178"/>
+    <path class="feed" d="M260 184 H482"/>
+    <path class="feed" d="M260 245 H402 Q438 245 460 217 L482 190"/>
+    <path class="feed" d="M260 306 H392 Q430 306 455 263 L482 217"/>
+    <circle class="merge" cx="492" cy="184" r="4"/>
+    <path class="feed-main" d="M496 184 H552" marker-end="url(#run-arrow)"/>
+
+    <rect class="request-sheet" x="570" y="38" width="360" height="298" rx="10"/>
+    <text class="request-title" x="600" y="70">BUILD, ADD, OR FIX</text>
+    <text class="request-command" x="600" y="103">Work on the current features</text>
+    <line class="request-rule" x1="600" y1="124" x2="900" y2="124"/>
+
+    <text class="request-key" x="600" y="154">Product brief</text>
+    <text class="request-value" x="785" y="154">app + current features</text>
+    <text class="request-key" x="600" y="190">Stack access</text>
+    <text class="request-value" x="785" y="190">connection details</text>
+    <text class="request-key" x="600" y="226">API reference</text>
+    <text class="request-value" x="785" y="226">selected SDK material</text>
+    <text class="request-key" x="600" y="262">Testing interface</text>
+    <text class="request-value" x="785" y="262">hooks + lint command</text>
+
+    <line class="request-rule" x1="600" y1="285" x2="900" y2="285"/>
+    <text class="repair-note" x="600" y="311">On repair: one feature + its failed tests</text>
+  </svg>
+</section>
+
+<!-- 5 how the app is tested -->
+<section class="visual-tight visual-first">
+  <div class="kicker r">how testing works</div>
+  <h2 class="r d1">Stack Bench tests the finished product.</h2>
+  <p class="lead r d2">The grader uses real browser sessions, direct data changes, service interruptions, and concurrent actions, then checks both visible and persisted state.</p>
+  <svg class="behvis cto-visual r d3" viewBox="0 0 920 380" role="img" aria-label="six end-to-end test areas surround the generated application">
+    <path class="wire live" d="M290 64 H360 L400 138 M290 190 H360 M290 316 H360 L400 242 M630 64 H560 L520 138 M630 190 H560 M630 316 H560 L520 242"/>
+    <rect class="area" x="20" y="34" width="270" height="60" rx="8"/><text class="label" x="42" y="59">REAL USER FLOWS</text><text class="minor" x="42" y="78">multiple browser actors</text>
+    <rect class="area" x="20" y="160" width="270" height="60" rx="8"/><text class="label" x="42" y="185">ACCESS + OWNERSHIP</text><text class="minor" x="42" y="204">protected and cross-account actions</text>
+    <rect class="area" x="20" y="286" width="270" height="60" rx="8"/><text class="label" x="42" y="311">DURABILITY + RECOVERY</text><text class="minor" x="42" y="330">reload · reconnect · restart</text>
+    <circle class="core" cx="460" cy="190" r="98"/><text class="label" x="460" y="196" text-anchor="middle" style="font-size:17px">APP UNDER TEST</text>
+    <rect class="area" x="630" y="34" width="270" height="60" rx="8"/><text class="label" x="652" y="59">LIVE STATE</text><text class="minor" x="652" y="78">direct data changes reach open pages</text>
+    <rect class="area" x="630" y="160" width="270" height="60" rx="8"/><text class="label" x="652" y="185">CONCURRENCY</text><text class="minor" x="652" y="204">overlapping actions · exact totals</text>
+    <rect class="area" x="630" y="286" width="270" height="60" rx="8"/><text class="label" x="652" y="311">OPERATIONS + ACCOUNTING</text><text class="minor" x="652" y="330">shipping · pricing · revenue</text>
+  </svg>
+</section>
+
+<!-- 3 a run -->
+<section id="repair-slide" class="visual-tight visual-first">
+  <div class="kicker r">repair and retest</div>
+  <h2 class="r d1">Failed tests return to the agent.</h2>
+  <svg class="cyc r d2" viewBox="0 0 960 310" role="img" aria-label="start the level, build, test, repair one failed feature, continue, or stop that path">
+    <defs>
+      <marker id="a3" viewBox="0 0 8 8" refX="7" refY="4" markerWidth="7" markerHeight="7" orient="auto">
+        <path d="M0 0 L8 4 L0 8 z" fill="#253239"/>
+      </marker>
+    </defs>
+
+    <rect class="n p-unlock" x="20" y="40" width="170" height="52"/>
+    <text class="nl p-unlock" x="40" y="64">start level</text>
+    <text x="40" y="80">dependencies passed</text>
+
+    <rect class="n p-build" x="215" y="40" width="170" height="52"/>
+    <text class="nl p-build" x="235" y="64">build</text>
+    <text x="235" y="80">current features</text>
+
+    <rect class="n p-grade1" x="410" y="40" width="170" height="52"/>
+    <text class="nl p-grade1" x="430" y="64">test</text>
+    <text x="430" y="80">unlocked features</text>
+
+    <polygon class="n p-dec1" points="600,66 670,32 740,66 670,100"/>
+    <text class="nl p-dec1" text-anchor="middle" x="670" y="70">all pass?</text>
+
+    <rect class="n p-done" x="765" y="40" width="175" height="52"/>
+    <text class="nl p-done" x="785" y="64">continue</text>
+    <text x="785" y="80">next level opens</text>
+
+    <polygon class="n p-dec2" points="435,206 500,172 565,206 500,240"/>
+    <text class="nl p-dec2" text-anchor="middle" x="500" y="210">repairs left?</text>
+
+    <rect class="n p-fix" x="215" y="180" width="170" height="52"/>
+    <text class="nl p-fix" x="235" y="204">repair</text>
+    <text x="235" y="220">one failed feature</text>
+
+    <rect class="n p-stop" x="620" y="180" width="180" height="52"/>
+    <text class="nl p-stop" x="640" y="204">that path stops</text>
+    <text x="640" y="220">other paths continue</text>
+
+    <path class="edge2 e1" d="M190 66 H211"/>
+    <path class="edge2 e2" d="M385 66 H406"/>
+    <path class="edge2 e3" d="M580 66 H596"/>
+    <path class="edge2 e4" d="M740 66 H761"/>
+    <text class="br br-yes" text-anchor="middle" x="750" y="54" style="fill:#4cf490">yes</text>
+
+    <path class="edge2 e5" d="M670 100 V206 H569"/>
+    <text class="br br-no" x="680" y="130">no</text>
+    <path class="edge2 e6" d="M435 206 H389"/>
+    <text class="br br-fix" x="398" y="198">yes</text>
+    <path class="edge2 e8" d="M300 180 V142 H495 V96"/>
+
+    <path class="edge2 ret" d="M565 206 H616"/>
+    <text text-anchor="middle" x="590" y="198" style="fill:#6f7987">none</text>
+
+    <path class="edge2 ret" d="M852 92 V286 H105 V96"/>
+    <text x="400" y="278" style="fill:#6f7987">continue with passed paths</text>
+  </svg>
+  <div class="state r d3">
+    <div class="st">level<span class="sv"><span class="v-a1">L1</span><span class="v-a2 good">L2</span></span></div>
+    <div class="st">feature repairs<span class="sv"><span class="v-k1">0 of 3</span><span class="v-k2">1 of 3</span></span></div>
+    <div class="st">features passed<span class="sv"><span class="v-u1">2 of 12</span><span class="v-u2 good">4 of 12</span></span></div>
+    <div class="st">cost<span class="sv"><span class="v-c0">$0.00</span><span class="v-c1">$3.20</span><span class="v-c2">$6.40</span></span></div>
+  </div>
+  <p class="supp r d4">Each failed feature has its own repair limit. A repair request contains one feature. A completed coding repair uses one repair, even if grading later fails. Provider errors and interrupted coding use none.</p>
+</section>
+
+<!-- 4 the dependency graph -->
+<section id="graph-slide" class="visual-tight graph-slide visual-first">
+  <div class="kicker r">dependency mode</div>
+  <h2 class="r d1">Working features open the next work.</h2>
+  <p class="lead r d2">A feature can move forward when its product behavior works. Production checks still affect its score. A failed feature blocks only the paths that need it.</p>
+  <svg class="dg r d3" viewBox="0 0 1000 360" role="img" aria-label="four feature paths animate through three dependency depths, with working and passed paths moving forward and failed paths becoming blocked">
+    <text class="dg-col" x="20" y="18">DEPTH 1</text>
+    <text class="dg-col" x="350" y="18">DEPTH 2</text>
+    <text class="dg-col" x="680" y="18">DEPTH 3</text>
+
+    <g class="dg-edges">
+      <path d="M260 66 H350 M590 66 H680"/>
+      <path d="M260 140 H350 M590 140 H680"/>
+      <path d="M260 214 H350 M590 214 H680"/>
+      <path d="M260 288 H350 M590 288 H680"/>
+    </g>
+    <path class="dg-flow flow-l2" d="M260 66 H350 M260 214 H350 M260 288 H350"/>
+    <path class="dg-flow flow-l3" d="M590 66 H680 M590 288 H680"/>
+
+    <g class="dg-n l1-pass"><rect x="20" y="42" width="240" height="48"/><text class="dg-label" x="38" y="71">accounts</text><text class="dg-state open phase-l1-open" x="242" y="71">OPEN</text><text class="dg-state working phase-l1-working" x="242" y="71">WORKING</text><text class="dg-state pass phase-l1-result" x="242" y="71">PASS</text></g>
+    <g class="dg-n l1-fail"><rect x="20" y="116" width="240" height="48"/><text class="dg-label" x="38" y="145">catalog</text><text class="dg-state open phase-l1-open" x="242" y="145">OPEN</text><text class="dg-state working phase-l1-working" x="242" y="145">WORKING</text><text class="dg-state fail phase-l1-result" x="242" y="145">FAIL</text></g>
+    <g class="dg-n l1-pass"><rect x="20" y="190" width="240" height="48"/><text class="dg-label" x="38" y="219">cart</text><text class="dg-state open phase-l1-open" x="242" y="219">OPEN</text><text class="dg-state working phase-l1-working" x="242" y="219">WORKING</text><text class="dg-state pass phase-l1-result" x="242" y="219">PASS</text></g>
+    <g class="dg-n l1-pass"><rect x="20" y="264" width="240" height="48"/><text class="dg-label" x="38" y="293">warehouse</text><text class="dg-state open phase-l1-open" x="242" y="293">OPEN</text><text class="dg-state working phase-l1-working" x="242" y="293">WORKING</text><text class="dg-state pass phase-l1-result" x="242" y="293">PASS</text></g>
+
+    <g class="dg-n l2-pass"><rect x="350" y="42" width="240" height="48"/><text class="dg-label" x="368" y="71">operator access</text><text class="dg-state open phase-l2-open" x="572" y="71">OPEN</text><text class="dg-state working phase-l2-working" x="572" y="71">WORKING</text><text class="dg-state pass phase-l2-result" x="572" y="71">PASS</text></g>
+    <g class="dg-n l2-locked"><rect x="350" y="116" width="240" height="48"/><text class="dg-label" x="368" y="145">search</text><text class="dg-state locked blocked-l1" x="572" y="145">BLOCKED</text></g>
+    <g class="dg-n l2-fail"><rect x="350" y="190" width="240" height="48"/><text class="dg-label" x="368" y="219">checkout</text><text class="dg-state open phase-l2-open" x="572" y="219">OPEN</text><text class="dg-state working phase-l2-working" x="572" y="219">WORKING</text><text class="dg-state fail phase-l2-result" x="572" y="219">FAIL</text></g>
+    <g class="dg-n l2-pass"><rect x="350" y="264" width="240" height="48"/><text class="dg-label" x="368" y="293">stock transfers</text><text class="dg-state open phase-l2-open" x="572" y="293">OPEN</text><text class="dg-state working phase-l2-working" x="572" y="293">WORKING</text><text class="dg-state pass phase-l2-result" x="572" y="293">PASS</text></g>
+
+    <g class="dg-n l3-open"><rect x="680" y="42" width="240" height="48"/><text class="dg-label" x="698" y="71">account recovery</text><text class="dg-state open phase-l3-open" x="902" y="71">OPEN</text></g>
+    <g class="dg-n l3-locked"><rect x="680" y="116" width="240" height="48"/><text class="dg-label" x="698" y="145">recommendations</text><text class="dg-state locked blocked-l1" x="902" y="145">BLOCKED</text></g>
+    <g class="dg-n l3-locked"><rect x="680" y="190" width="240" height="48"/><text class="dg-label" x="698" y="219">returns</text><text class="dg-state locked blocked-l2" x="902" y="219">BLOCKED</text></g>
+    <g class="dg-n l3-open"><rect x="680" y="264" width="240" height="48"/><text class="dg-label" x="698" y="293">scheduled restocks</text><text class="dg-state open phase-l3-open" x="902" y="293">OPEN</text></g>
+  </svg>
+</section>
+
+<!-- 5 break it on purpose -->
+<section class="appendix" aria-hidden="true">
+  <div class="kicker r">break it on purpose</div>
+  <h2 class="r d1">The harness breaks the store 21 ways</h2>
+  <div class="atk r d2">
+    <div class="atk-list" role="tablist">
+      <button class="atk-item on" data-atk="c1" role="tab"><em>L1</em>purchase needs an account</button>
+      <button class="atk-item" data-atk="c2" role="tab"><em>L1</em>orders keep their author</button>
+      <button class="atk-item" data-atk="c3" role="tab"><em>L1</em>only admins move stock</button>
+      <button class="atk-item" data-atk="c4" role="tab"><em>L1</em>the store sets the price</button>
+      <button class="atk-item" data-atk="c5" role="tab"><em>L1</em>an account keeps its own</button>
+      <button class="atk-item" data-atk="c6" role="tab"><em>L1</em>order history is private</button>
+      <button class="atk-item" data-atk="c7" role="tab"><em>L1</em>the books balance</button>
+      <button class="atk-item" data-atk="c8" role="tab"><em>L1</em>a review follows a purchase</button>
+      <button class="atk-item" data-atk="c9" role="tab"><em>L1</em>a cart is private</button>
+      <button class="atk-item" data-atk="c10" role="tab"><em>L1</em>the last unit sells once</button>
+      <button class="atk-item" data-atk="c11" role="tab"><em>L1</em>a restock in a rush holds</button>
+      <button class="atk-item" data-atk="c12" role="tab"><em>L1</em>one cart, two tabs</button>
+      <button class="atk-item" data-atk="c13" role="tab"><em>L1</em>outside writes show up</button>
+      <button class="atk-item" data-atk="c14" role="tab"><em>L1</em>a list opened mid-change</button>
+      <button class="atk-item" data-atk="c15" role="tab"><em>L2</em>operating needs an operator</button>
+      <button class="atk-item" data-atk="c16" role="tab"><em>L2</em>stock is conserved</button>
+      <button class="atk-item" data-atk="c17" role="tab"><em>L2</em>the books balance on refunds</button>
+      <button class="atk-item" data-atk="c18" role="tab"><em>L2</em>an order has one owner</button>
+      <button class="atk-item" data-atk="c19" role="tab"><em>L3</em>scheduled work survives</button>
+      <button class="atk-item" data-atk="c20" role="tab"><em>L3</em>a restart fires nothing early</button>
+      <button class="atk-item" data-atk="c21" role="tab"><em>L3</em>time moves no stock</button>
+    </div>
+    <div class="atk-stage">
+      <div class="atk-panel on" id="c1">
+        <div class="atk-head"><span>Purchase requires an account</span><span>buyer &middot; guest</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">101a</span><span class="what">a purchase request replayed without a session creates no order and moves no stock</span></div>
+        </div>
+        <div class="atk-verdict">1 check, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c2">
+        <div class="atk-head"><span>Purchases are attributed to whoever made them</span><span>victim &middot; attacker</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">102a</span><span class="what">an order cannot be placed in someone else's name by editing the request</span></div>
+        </div>
+        <div class="atk-verdict">1 check, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c3">
+        <div class="atk-head"><span>Stock is administered by admins only</span><span>admin &middot; customer</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">103a</span><span class="what">a restock replayed by a customer is refused and changes no stock</span></div>
+        </div>
+        <div class="atk-verdict">1 check, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c4">
+        <div class="atk-head"><span>The price is the store's to set</span><span>buyer</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">104a</span><span class="what">a purchase request with the price edited does not sell the item for less</span></div>
+        </div>
+        <div class="atk-verdict">1 check, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c5">
+        <div class="atk-head"><span>An account keeps what belongs to it</span><span>shopper</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">105a</span><span class="what">cart and order history survive a reload as the same account</span></div>
+          <div class="step"><span class="actor">105b</span><span class="what">the same account survives the connection dropping and coming back</span></div>
+        </div>
+        <div class="atk-verdict">2 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c6">
+        <div class="atk-head"><span>One customer's orders are not another's</span><span>one &middot; two</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">106a</span><span class="what">a customer's order history contains only their own orders</span></div>
+        </div>
+        <div class="atk-verdict">1 check, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c7">
+        <div class="atk-head"><span>The books balance</span><span>buyer &middot; admin</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">107a</span><span class="what">revenue rises by exactly what was bought</span></div>
+          <div class="step"><span class="actor">107b</span><span class="what">what the store sold is what left the warehouses, and a fresh client agrees</span></div>
+        </div>
+        <div class="atk-verdict">2 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c8">
+        <div class="atk-head"><span>A review is a claim about a purchase</span><span>owner &middot; stranger</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">108a</span><span class="what">someone who never bought the item cannot review it</span></div>
+          <div class="step"><span class="actor">108b</span><span class="what">buying the item earns the right to review it</span></div>
+        </div>
+        <div class="atk-verdict">2 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c9">
+        <div class="atk-head"><span>A cart is nobody else’s business</span><span>owner &middot; stranger</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">109a</span><span class="what">one customer’s cart request replayed by another leaves the owner’s cart untouched</span></div>
+          <div class="step"><span class="actor">109b</span><span class="what">a quantity below one is refused rather than credited</span></div>
+        </div>
+        <div class="atk-verdict">2 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c10">
+        <div class="atk-head"><span>The last unit is sold once</span><span>a &middot; b &middot; c &middot; d &middot; e &middot; f</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">201a</span><span class="what">six customers buy the last three units at once: stock lands on exactly zero, never below</span></div>
+          <div class="step"><span class="actor">201b</span><span class="what">exactly three of the six customers end up with an order, and none is charged twice</span></div>
+          <div class="step"><span class="actor">201c</span><span class="what">revenue counts three sales, not six</span></div>
+        </div>
+        <div class="atk-verdict">3 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c11">
+        <div class="atk-head"><span>A restock during a rush is not lost</span><span>admin &middot; a &middot; b &middot; c</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">202-control</span><span class="what">an uncontended restock of five is stored by the server and shows on the storefront</span></div>
+          <div class="step"><span class="actor">202a</span><span class="what">three purchases and a restock of five during the rush leave stock at start + 2</span></div>
+        </div>
+        <div class="atk-verdict">2 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c12">
+        <div class="atk-head"><span>One cart, two tabs, one checkout</span><span>tab1 &middot; tab2 &middot; filler</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">203a</span><span class="what">the same item added from two tabs at once becomes one line of two</span></div>
+          <div class="step"><span class="actor">203b</span><span class="what">checking the same cart out twice at once produces one order</span></div>
+        </div>
+        <div class="atk-verdict">2 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c13">
+        <div class="atk-head"><span>A write from outside the app is visible without reload</span><span>viewer</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">901a</span><span class="what">a back-office script sets Desk Lamp's East stock to 5, directly in the database; an anonymous viewer with the storefront already open sees 50 without touching the page</span></div>
+          <div class="step"><span class="actor">901b</span><span class="what">the out-of-band change survives a reload; the page did not merely patch its own memory</span></div>
+          <div class="step"><span class="actor">901c</span><span class="what">a stock correction that lands while the app server is down shows on an open storefront once the server returns: East 5 + West 10 = 15, no reload</span></div>
+          <div class="step"><span class="actor">901d</span><span class="what">the client, not the server, misses the window: a correction lands while this browser is disconnected, and the page is current again once it reconnects</span></div>
+        </div>
+        <div class="atk-verdict">4 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c14">
+        <div class="atk-head"><span>A list being opened while its contents change</span><span>reader &middot; reviewer</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">902a</span><span class="what">one customer opens the Keyboard's reviews at the same moment another posts one: the opener ends with that review exactly once, not zero (stale fetch) or twice (fetch merged with its own live echo)</span></div>
+        </div>
+        <div class="atk-verdict">1 check, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c15">
+        <div class="atk-head"><span>Operating the store requires being an operator</span><span>admin &middot; customer</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">201a</span><span class="what">a customer replaying an admin's transfer moves no stock</span></div>
+          <div class="step"><span class="actor">201b</span><span class="what">a customer cannot set a price by replaying an admin's change</span></div>
+          <div class="step"><span class="actor">201c</span><span class="what">a customer cannot ship their own order</span></div>
+        </div>
+        <div class="atk-verdict">3 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c16">
+        <div class="atk-head"><span>Stock is conserved however it moves</span><span>admin &middot; customer</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">202a</span><span class="what">a transfer changes where stock is, never how much there is</span></div>
+          <div class="step"><span class="actor">202b</span><span class="what">a sale and its cancellation leave the shelf exactly as they found it</span></div>
+          <div class="step"><span class="actor">202c</span><span class="what">a fresh client sees the same totals, so nothing was only corrected in one browser</span></div>
+          <div class="step"><span class="actor">202d</span><span class="what">a transfer racing a purchase loses no unit between the rows: total = before − sold, exactly, however the two interleave</span></div>
+        </div>
+        <div class="atk-verdict">4 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c17">
+        <div class="atk-head"><span>The books still balance once money can flow backwards</span><span>admin &middot; customer</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">203a</span><span class="what">revenue rises by what was bought and falls by what was cancelled</span></div>
+          <div class="step"><span class="actor">203b</span><span class="what">a price change does not rewrite revenue already earned</span></div>
+        </div>
+        <div class="atk-verdict">2 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c18">
+        <div class="atk-head"><span>An order belongs to the person who placed it</span><span>one &middot; two</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">204a</span><span class="what">one customer cannot cancel another's order</span></div>
+        </div>
+        <div class="atk-verdict">1 check, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c19">
+        <div class="atk-head"><span>Scheduled work survives a restart</span><span>admin &middot; watcher</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">311a</span><span class="what">a restock scheduled before a restart still fires after it, once, at its own time; an in-memory timer does not survive and must not be how this was built</span></div>
+          <div class="step"><span class="actor">311b</span><span class="what">it fired exactly once; the restart did not replay it</span></div>
+        </div>
+        <div class="atk-verdict">2 checks, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c20">
+        <div class="atk-head"><span>A restart does not make pending work fire early</span><span>admin &middot; watcher</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">312a</span><span class="what">a restock due in three minutes has not applied thirty seconds after a restart; re-reading pending work must not run it</span></div>
+        </div>
+        <div class="atk-verdict">1 check, and the store has to hold every one</div>
+      </div>
+      <div class="atk-panel" id="c21">
+        <div class="atk-head"><span>Time does not create or destroy stock</span><span>shopper &middot; admin</span></div>
+        <div class="atk-body">
+          <div class="step"><span class="actor">313a</span><span class="what">a reservation taken and left to expire returns exactly what it took, counted in the admin's own totals</span></div>
+        </div>
+        <div class="atk-verdict">1 check, and the store has to hold every one</div>
+      </div>
+    </div>
+  </div>
+  <p class="supp r d3" style="margin-top:1.2rem">Twenty-one criteria go at the store on purpose, on top of the thirteen that check it does the job at all. Pick any one to see the checks it makes.</p>
+</section>
+
+<!-- automated validation -->
+<section class="visual-tight visual-first">
+  <div class="kicker r">testing the benchmark</div>
+  <h2 class="r d1">Stack Bench tests itself.</h2>
+  <p class="lead r d2">The same selected checks run against controlled apps. A correct app must pass, a planted defect must fail its target, and an empty app must score zero.</p>
+  <div class="selftest r d3" role="img" aria-label="the same selected checks run against a correct reference app, a deliberately broken app, and an empty app, producing all pass, target caught, and zero point results">
+    <div class="selftest-head"><span>control app</span><span>same selected checks</span><span>expected result</span></div>
+    <div class="selftest-row row-reference">
+      <div class="selftest-control"><b>Correct reference</b><span>known working behavior</span></div>
+      <div class="check-strip" aria-hidden="true">
+        <i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i>
+      </div>
+      <div class="selftest-result"><strong>ALL PASS</strong><span>reference accepted</span></div>
+    </div>
+    <div class="selftest-row row-defect">
+      <div class="selftest-control"><b>Planted defect</b><span>one known behavior broken</span></div>
+      <div class="check-strip" aria-hidden="true">
+        <i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit target"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i><i class="check-unit"></i>
+      </div>
+      <div class="selftest-result"><strong>TARGET CAUGHT</strong><span>other checks stay clean</span></div>
+    </div>
+    <div class="selftest-row row-empty">
+      <div class="selftest-control"><b>Empty app</b><span>required work missing</span></div>
+      <div class="check-strip" aria-hidden="true">
+        <i class="check-unit blank"></i><i class="check-unit blank"></i><i class="check-unit blank"></i><i class="check-unit blank"></i><i class="check-unit blank"></i><i class="check-unit blank"></i><i class="check-unit blank"></i><i class="check-unit blank"></i><i class="check-unit blank"></i><i class="check-unit blank"></i><i class="check-unit blank"></i><i class="check-unit blank"></i>
+      </div>
+      <div class="selftest-result"><strong>ZERO POINTS</strong><span>missing work earns no credit</span></div>
+    </div>
+  </div>
+</section>
+
+<!-- 7 score -->
+<section class="visual-first">
+  <div class="kicker r">results</div>
+  <h2 class="r d1">Scores show where each stack works.</h2>
+  <p class="supp r d2">Each questline has its own score. Blocked and unfinished work stays in the denominator, so the overall score reflects the complete plan.</p>
+  <div class="scorevis r d3" role="img" aria-label="example scores for twelve product questlines averaging to an overall score of 77 percent, with passed, working, failed, and blocked feature counts">
+    <div class="scoreareas">
+      <div class="scorerow">
+        <div class="scorelabel"><b>Identity</b><span>12 / 12 points</span></div>
+        <div class="scorebar"><i style="--score:100%"></i></div>
+        <div class="scorepct">100%</div>
+      </div>
+      <div class="scorerow">
+        <div class="scorelabel"><b>Catalog</b><span>14 / 16 points</span></div>
+        <div class="scorebar"><i style="--score:88%"></i></div>
+        <div class="scorepct">88%</div>
+      </div>
+      <div class="scorerow">
+        <div class="scorelabel"><b>Shopping</b><span>18 / 24 points</span></div>
+        <div class="scorebar"><i style="--score:75%"></i></div>
+        <div class="scorepct">75%</div>
+      </div>
+      <div class="scorerow">
+        <div class="scorelabel"><b>Orders</b><span>15 / 24 points</span></div>
+        <div class="scorebar"><i style="--score:63%"></i></div>
+        <div class="scorepct">63%</div>
+      </div>
+      <div class="scorerow">
+        <div class="scorelabel"><b>Inventory</b><span>16 / 20 points</span></div>
+        <div class="scorebar"><i style="--score:80%"></i></div>
+        <div class="scorepct">80%</div>
+      </div>
+      <div class="scorerow">
+        <div class="scorelabel"><b>Reviews</b><span>6 / 6 points</span></div>
+        <div class="scorebar"><i style="--score:100%"></i></div>
+        <div class="scorepct">100%</div>
+      </div>
+      <div class="scorerow"><div class="scorelabel"><b>Recommendations</b><span>6 / 12 points</span></div><div class="scorebar"><i style="--score:50%"></i></div><div class="scorepct">50%</div></div>
+      <div class="scorerow"><div class="scorelabel"><b>Notifications</b><span>8 / 12 points</span></div><div class="scorebar"><i style="--score:67%"></i></div><div class="scorepct">67%</div></div>
+      <div class="scorerow"><div class="scorelabel"><b>Staff access</b><span>8 / 8 points</span></div><div class="scorebar"><i style="--score:100%"></i></div><div class="scorepct">100%</div></div>
+      <div class="scorerow"><div class="scorelabel"><b>Operations</b><span>13 / 18 points</span></div><div class="scorebar"><i style="--score:72%"></i></div><div class="scorepct">72%</div></div>
+      <div class="scorerow"><div class="scorelabel"><b>Promotions</b><span>4 / 10 points</span></div><div class="scorebar"><i style="--score:40%"></i></div><div class="scorepct">40%</div></div>
+      <div class="scorerow"><div class="scorelabel"><b>Support</b><span>15 / 18 points</span></div><div class="scorebar"><i style="--score:83%"></i></div><div class="scorepct">83%</div></div>
+    </div>
+    <div class="overallscore">
+      <span>overall score</span>
+      <strong>77%</strong>
+      <small>Average of all 12 questline scores</small>
+      <div class="scorestatus"><b>24 passed</b><span>7 working</span><span>3 failed</span><span>8 blocked</span></div>
+    </div>
+  </div>
+</section>
+
+<!-- 10 comparison metrics -->
+<section class="visual-tight visual-first">
+  <div class="kicker r">comparison</div>
+  <h2 class="r d1">Compare score, cost, duration, and repairs.</h2>
+  <p class="lead r d2">Each stack uses the same plan. The report shows what worked on the first build, what repairs improved, what remains, and what the run cost.</p>
+  <div class="comparevis r d3" role="img" aria-label="Example comparison of three stacks by initial and final score, product progress, cost, duration, repairs, and repeated runs">
+    <div class="compare-head">
+      <span>Stack</span><span>Score</span><span>Product progress</span><span>Cost</span><span>Duration</span><span>Repairs</span><span>Runs</span>
+    </div>
+    <div class="compare-row">
+      <div class="compare-stack">Stack A</div>
+      <div class="compare-score">
+        <div class="compare-track" style="--initial:51%;--final:94%"><i></i><b></b></div>
+        <span>51 → 94%</span>
+      </div>
+      <div class="compare-metric compare-progress">36 passed<br><span>4 working · 2 blocked</span></div>
+      <div class="compare-metric">$8.40</div>
+      <div class="compare-metric">52 min</div>
+      <div class="compare-metric">2</div>
+      <div class="compare-metric">3</div>
+    </div>
+    <div class="compare-row">
+      <div class="compare-stack">Stack B</div>
+      <div class="compare-score">
+        <div class="compare-track" style="--initial:48%;--final:86%"><i></i><b></b></div>
+        <span>48 → 86%</span>
+      </div>
+      <div class="compare-metric compare-progress">31 passed<br><span>6 working · 5 blocked</span></div>
+      <div class="compare-metric">$5.90</div>
+      <div class="compare-metric">39 min</div>
+      <div class="compare-metric">1</div>
+      <div class="compare-metric">3</div>
+    </div>
+    <div class="compare-row">
+      <div class="compare-stack">Stack C</div>
+      <div class="compare-score">
+        <div class="compare-track" style="--initial:44%;--final:76%"><i></i><b></b></div>
+        <span>44 → 76%</span>
+      </div>
+      <div class="compare-metric compare-progress">27 passed<br><span>5 working · 10 blocked</span></div>
+      <div class="compare-metric">$9.10</div>
+      <div class="compare-metric">61 min</div>
+      <div class="compare-metric">3</div>
+      <div class="compare-metric">3</div>
+    </div>
+    <div class="compare-note">Example values</div>
+  </div>
+</section>
+
+<!-- 11 evidence -->
+<section class="fit-slide visual-first">
+  <div class="kicker r">evidence</div>
+  <h2 class="r d1">Every run preserves its evidence.</h2>
+  <p class="lead r d2">Open the exact result, source, visuals, and run economics behind the score.</p>
+  <div class="pack r d3" role="img" aria-label="the evidence package includes test results, the run record, prompt, repair feedback, video, screenshots, traces, source, controls, preflight, a known broken app, and an empty app">
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M4 5h16v14H4z"/><path d="M8 12l3 3 5-6"/></svg><b>test results</b><i>one verdict for every selected check</i></div>
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M2 20h20"/><path d="M5 20V10M11 20V4M17 20v-6"/></svg><b>run record</b><i>model, stack, graph, recipe, checks, cost, and time</i></div>
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M6 3h9l4 4v14H6z"/><path d="M9 11h8M9 15h8M9 18h5"/></svg><b>exact prompt</b><i>the request given to the agent</i></div>
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M4 5h16v11H8l-4 4z"/><path d="M12 8v4M12 14h.01"/></svg><b>repair feedback</b><i>failures returned to the agent</i></div>
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M3 6h13v12H3z"/><path d="M16 10l5-3v10l-5-3z"/></svg><b>video</b><i>recording for each test actor</i></div>
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M3 5h18v14H3z"/><path d="M3 16l5-5 4 4 3-3 6 6"/><circle cx="8.5" cy="9.5" r="1.3"/></svg><b>screenshots</b><i>captured results and failures</i></div>
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M2 12h4l3-7 4 14 3-7h6"/></svg><b>browser traces</b><i>snapshots and actions for each actor</i></div>
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M4 7l8-4 8 4v10l-8 4-8-4z"/><path d="M4 7l8 4 8-4"/><path d="M12 11v10"/></svg><b>source</b><i>the exact app that produced the score</i></div>
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M9 4L4 12l5 8M15 4l5 8-5 8"/></svg><b>required controls</b><i>checked before grading begins</i></div>
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><path d="M5 3v18"/><path d="M5 4h13l-3 4 3 4H5z"/></svg><b>preflight</b><i>checks completed before model spend</i></div>
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><circle cx="12" cy="12" r="6.5"/><path d="M12 1.5v4M12 18.5v4M1.5 12h4M18.5 12h4"/></svg><b>known broken app</b><i>proves the intended defect is caught</i></div>
+    <div class="rcpt"><svg viewBox="0 0 24 24" aria-hidden="true"><circle cx="12" cy="12" r="8"/><path d="M6.7 17.3L17.3 6.7"/></svg><b>empty app</b><i>proves missing work earns zero</i></div>
+  </div>
+</section>
+
+<script>
+  const sections = [...document.querySelectorAll('section:not(.appendix)')];
+  const dots = document.getElementById('dots');
+  sections.forEach((s, i) => {
+    const a = document.createElement('a');
+    a.href = '#'; a.title = 'slide ' + (i + 1);
+    a.addEventListener('click', e => { e.preventDefault(); sections[i].scrollIntoView(); });
+    dots.appendChild(a);
+  });
+  const dotEls = [...dots.children];
+  let current = 0;
+
+  const io = new IntersectionObserver(entries => {
+    for (const e of entries) {
+      if (e.isIntersecting) {
+        e.target.classList.add('on');
+        current = sections.indexOf(e.target);
+        dotEls.forEach((d, i) => d.classList.toggle('on', i === current));
+        document.getElementById('bar').style.width = ((current + 1) / sections.length * 100) + '%';
+      }
+    }
+  }, { threshold: 0.55 });
+  sections.forEach(s => io.observe(s));
+
+  // Sections can be taller than the viewport, so the slide we are "on" is the
+  // one nearest the top of the window, measured at the moment a key is pressed.
+  const nearest = () => {
+    const y = scrollY;
+    let best = 0, dist = Infinity;
+    sections.forEach((sec, i) => {
+      const d = Math.abs(sec.offsetTop - y);
+      if (d < dist) { dist = d; best = i; }
+    });
+    return best;
+  };
+  // While a programmatic scroll is in flight, base the next step on where we
+  // are headed rather than where scrollY still is, so quick presses stack.
+  let target = null, targetTimer = null;
+  const goTo = i => {
+    target = Math.max(0, Math.min(i, sections.length - 1));
+    sections[target].scrollIntoView();
+    clearTimeout(targetTimer);
+    targetTimer = setTimeout(() => { target = null; }, 1200);
+  };
+  const base = () => (target !== null ? target : nearest());
+
+  // attack picker
+  document.querySelectorAll('.atk-item').forEach(btn => {
+    btn.addEventListener('click', () => {
+      const stage = btn.closest('.atk');
+      stage.querySelectorAll('.atk-item').forEach(b => b.classList.toggle('on', b === btn));
+      stage.querySelectorAll('.atk-panel').forEach(p => p.classList.toggle('on', p.id === btn.dataset.atk));
+    });
+  });
+
+  addEventListener('keydown', e => {
+    if (['ArrowRight', 'ArrowDown', 'PageDown', ' '].includes(e.key)) {
+      e.preventDefault(); goTo(base() + 1);
+    } else if (['ArrowLeft', 'ArrowUp', 'PageUp'].includes(e.key)) {
+      e.preventDefault(); goTo(base() - 1);
+    } else if (e.key === 'Home') { goTo(0); }
+    else if (e.key === 'End') { goTo(sections.length - 1); }
+  });
+</script>
+</body>
+</html>
diff --git a/tools/stack-bench/docs/system-design.md b/tools/stack-bench/docs/system-design.md
new file mode 100644
index 00000000000..fa164ebe8eb
--- /dev/null
+++ b/tools/stack-bench/docs/system-design.md
@@ -0,0 +1,117 @@
+# Stack Bench system design
+
+Stack Bench turns one versioned test plan into verified comparison data. The
+system must make every decision, action, result, and cost traceable without
+using chat history or operator memory.
+
+## One owner for each fact
+
+| Layer | Owns | Durable output |
+|---|---|---|
+| Definitions | Product work, prompt modules, checks, stacks, models, and budgets | Versioned source files |
+| Compiler | The exact work matrix and all bound identities | `plan.json` |
+| Admission | Whether the exact plan can run on this appliance | Admission artifact |
+| Scheduler | Attempt order, concurrency, continuations, and terminal state | `state.json` |
+| Run engine | Build, grade, repair, resource ownership, and cleanup | Attempt directory |
+| Grader | Typed check results and evidence | Grade artifacts |
+| Progression engine | Open, passed, failed, and blocked features | `progression-state.json` |
+| Report | A reproducible view of retained evidence | `report.json` and `report.html` |
+
+No layer can silently replace a decision from a layer above it. A view can
+summarize durable data, but it cannot create new run state.
+
+## Data flow
+
+```text
+versioned definitions
+        |
+        v
+compiled plan -> admission -> scheduler -> run engine -> grader
+                                      |          |          |
+                                      v          v          v
+                                  state.json  run.json   evidence
+                                      \          |          /
+                                       \         v         /
+                                        -> inspection -> report
+```
+
+The coding agent receives only the app request, current work, selected stack
+material, and repair evidence allowed by the plan. It does not receive the
+benchmark, grader, future work, expected implementation, or comparison data.
+
+## Operator loop
+
+An operator, human or agent, uses one loop:
+
+1. **Define.** Select one versioned campaign file. Do not rebuild the plan from
+   command flags.
+2. **Validate.** Compile it and inspect the exact attempts, stacks, model,
+   prompt policy, checks, points, budgets, images, and parallelism.
+3. **Admit.** Prove credentials, images, ports, resource capacity, and stack
+   access before model work starts.
+4. **Run.** Start or resume the exact stored plan. A paid action is always
+   explicit.
+5. **Observe.** Read durable campaign state first. Open logs only to diagnose a
+   live phase or failure.
+6. **Decide.** Continue only through a legal state transition. Never hide an
+   invalid attempt or retry it automatically.
+7. **Report.** Generate the result from retained run evidence. Publish it as
+   verified comparison data only when grading qualification is complete.
+8. **Clean.** Remove temporary owned resources. Keep the campaign package.
+
+The CLI and dashboard use the same compiler, scheduler, state reader, and run
+commands. The dashboard is a view and input surface. It is not another control
+plane.
+
+## Agent interface
+
+The operator interface must answer these questions without source inspection:
+
+- What exact plan am I controlling?
+- Can it start without spending model usage?
+- What is running now, and in which phase?
+- What has it cost and how long has it run?
+- Which results are valid application results?
+- Which failures belong to Stack Bench, the provider, the stack tools, the
+  host, or the operator?
+- What evidence proves each answer?
+- Which actions are legal now?
+
+Machine-facing commands return stable JSON. A compact response gives the plan
+identity, campaign state, active work, cost, failures, and legal next actions.
+Detailed responses add attempts and artifact paths. Logs and raw artifacts stay
+available, but an operator does not need to parse them for normal control.
+
+Errors must name the failed subsystem, failure owner, retryability, retained
+evidence, and next safe action. `inconclusive` is an intermediate measurement
+state, not an accepted final explanation.
+
+## Resource rules
+
+- Compile and inspect before any model call.
+- Run focused source checks after a change. Run the integrated source gate once
+  for the final source identity.
+- Reuse qualification evidence only when all bound hashes match.
+- Do not repeat reference, mutation, or null work for unchanged scope.
+- Stop new paid attempts after a harness, provider, host, or operator failure.
+- Do not retry or grant more repair work automatically.
+- Run independent attempts in parallel only within the plan and admitted host
+  capacity.
+- Preserve a failed package before a source or plan change.
+
+## Accumulated knowledge
+
+Operational knowledge belongs in typed artifacts, not chat transcripts or a
+growing journal. Each completed action records its inputs, identity, outcome,
+cost, duration, evidence paths, and owner. A later operator can reconstruct the
+campaign from the retained package and continue from the last valid state.
+
+Local notes can explain an active investigation. They cannot authorize a run,
+change a score, or replace a missing artifact.
+
+## Design test
+
+Every major structure must have one purpose, one owner, and one current
+consumer. If its reason cannot be stated in one sentence, simplify or remove it.
+Complexity is allowed only when it protects result validity, isolation,
+security, recovery, or a current operator need.
diff --git a/tools/stack-bench/docs/technical-guide.html b/tools/stack-bench/docs/technical-guide.html
new file mode 100644
index 00000000000..2faafd5e678
--- /dev/null
+++ b/tools/stack-bench/docs/technical-guide.html
@@ -0,0 +1,617 @@
+<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Stack Bench technical walkthrough</title>
+  <style>
+    :root {
+      color-scheme: dark;
+      --bg: #050807;
+      --panel: #0a1210;
+      --panel-2: #0d1714;
+      --line: #213630;
+      --text: #eef5f2;
+      --muted: #9aada6;
+      --faint: #6e817a;
+      --green: #42f59b;
+      --cyan: #67d4ff;
+      --amber: #ffd166;
+      --red: #ff6b8f;
+      --mono: "Cascadia Code", "SFMono-Regular", Consolas, monospace;
+      --sans: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+    }
+    * { box-sizing: border-box; }
+    html { scroll-behavior: smooth; }
+    body {
+      margin: 0;
+      background:
+        linear-gradient(rgba(66,245,155,.025) 1px, transparent 1px),
+        linear-gradient(90deg, rgba(66,245,155,.025) 1px, transparent 1px),
+        var(--bg);
+      background-size: 32px 32px;
+      color: var(--text);
+      font-family: var(--sans);
+      line-height: 1.55;
+    }
+    a { color: inherit; }
+    .shell { width: min(1240px, calc(100% - 40px)); margin: 0 auto; }
+    header { padding: 56px 0 28px; border-bottom: 1px solid var(--line); }
+    h1 { margin: 12px 0 10px; font-size: clamp(38px, 6vw, 72px); line-height: .98; letter-spacing: -.055em; }
+    .lede { max-width: 760px; margin: 0; color: var(--muted); font-size: 18px; }
+    nav { position: sticky; top: 0; z-index: 10; border-bottom: 1px solid var(--line); background: rgba(5,8,7,.93); backdrop-filter: blur(16px); }
+    nav .shell { display: flex; gap: 18px; overflow-x: auto; padding: 12px 0; scrollbar-width: thin; }
+    nav a { white-space: nowrap; text-decoration: none; color: var(--muted); font: 12px var(--mono); }
+    nav a:hover { color: var(--green); }
+    main { padding: 42px 0 84px; }
+    section { scroll-margin-top: 60px; margin: 0 0 64px; }
+    h2 { margin: 0 0 8px; font-size: 30px; letter-spacing: -.025em; }
+    h3 { margin: 0 0 8px; font-size: 18px; }
+    p { margin: 0 0 14px; }
+    .section-intro { max-width: 820px; color: var(--muted); margin-bottom: 22px; }
+    .grid { display: grid; gap: 14px; }
+    .grid.two { grid-template-columns: repeat(2, minmax(0, 1fr)); }
+    .grid.three { grid-template-columns: repeat(3, minmax(0, 1fr)); }
+    .card { min-width: 0; padding: 20px; background: linear-gradient(145deg, rgba(13,23,20,.98), rgba(8,14,12,.98)); border: 1px solid var(--line); border-radius: 12px; }
+    .card p:last-child, .card ul:last-child { margin-bottom: 0; }
+    .label { color: var(--faint); font: 700 10px var(--mono); letter-spacing: .12em; text-transform: uppercase; }
+    .value { margin-top: 5px; font: 600 22px var(--mono); color: var(--text); }
+    .value.green { color: var(--green); }
+    .flow { display: grid; grid-template-columns: repeat(6, minmax(120px, 1fr)); gap: 22px; align-items: stretch; margin: 24px 0; }
+    .flow .step { position: relative; padding: 16px; min-height: 104px; border: 1px solid var(--line); border-radius: 10px; background: var(--panel); }
+    .flow .step:not(:last-child)::after { content: "→"; position: absolute; right: -18px; top: 35px; color: var(--green); font: 20px var(--mono); }
+    .step b { display: block; margin: 5px 0; }
+    .step span { color: var(--muted); font-size: 13px; }
+    .path { display: inline-block; padding: 2px 6px; border-radius: 4px; background: #101d19; color: #b6c9c2; font: 12px var(--mono); overflow-wrap: anywhere; }
+    .file-list { margin: 12px 0 0; padding: 0; list-style: none; }
+    .file-list li { display: grid; grid-template-columns: minmax(180px, .85fr) 1.4fr; gap: 18px; padding: 9px 0; border-top: 1px solid rgba(33,54,48,.7); color: var(--muted); }
+    .file-list li:first-child { border-top: 0; }
+    ul, ol { margin: 8px 0 16px; padding-left: 20px; }
+    li { margin: 5px 0; }
+    details { margin-top: 14px; border: 1px solid var(--line); border-radius: 9px; overflow: hidden; background: #07100d; }
+    summary { cursor: pointer; padding: 11px 14px; color: var(--cyan); font: 600 12px var(--mono); user-select: none; }
+    pre { margin: 0; padding: 16px; overflow: auto; border-top: 1px solid var(--line); background: #030706; color: #d9e7e2; font: 12px/1.55 var(--mono); tab-size: 2; }
+    code { font-family: var(--mono); }
+    .callout { margin: 16px 0; padding: 14px 16px; border-left: 3px solid var(--cyan); background: rgba(103,212,255,.06); color: var(--muted); }
+    .callout strong { color: var(--text); }
+    .callout.risk { border-color: var(--red); background: rgba(255,107,143,.055); }
+    .audit { display: grid; gap: 8px; margin-top: 14px; }
+    .audit div { display: grid; grid-template-columns: 22px 1fr; gap: 8px; color: var(--muted); }
+    .audit span { color: var(--green); font-family: var(--mono); }
+    .audit .risk-mark { color: var(--amber); }
+    .example { counter-reset: item; }
+    .example .example-step { position: relative; margin-left: 18px; padding: 0 0 20px 28px; border-left: 1px solid var(--line); }
+    .example .example-step::before { counter-increment: item; content: counter(item); position: absolute; left: -14px; top: 0; width: 26px; height: 26px; display: grid; place-items: center; border-radius: 50%; background: var(--panel-2); border: 1px solid var(--green); color: var(--green); font: 12px var(--mono); }
+    table { width: 100%; border-collapse: collapse; font-size: 14px; }
+    th, td { text-align: left; vertical-align: top; padding: 10px 12px; border-bottom: 1px solid var(--line); }
+    th { color: var(--faint); font: 700 10px var(--mono); letter-spacing: .1em; text-transform: uppercase; }
+    td { color: var(--muted); }
+    td:first-child { color: var(--text); font-family: var(--mono); }
+    @media (max-width: 980px) {
+      .grid.three, .grid.two { grid-template-columns: 1fr; }
+      .flow { grid-template-columns: repeat(2, 1fr); }
+      .flow .step:not(:last-child)::after { display: none; }
+    }
+    @media (max-width: 620px) {
+      .shell { width: min(100% - 24px, 1240px); }
+      header { padding-top: 36px; }
+      .flow { grid-template-columns: 1fr; }
+      .file-list li { grid-template-columns: 1fr; gap: 4px; }
+      .card { padding: 16px; }
+    }
+  </style>
+</head>
+<body>
+  <header>
+    <div class="shell">
+      <h1>Stack Bench<br>technical walkthrough</h1>
+      <p class="lede">Current implementation, data flow, code examples, and production boundaries.</p>
+    </div>
+  </header>
+
+  <nav aria-label="Document sections">
+    <div class="shell">
+      <a href="#overview">Overview</a>
+      <a href="#map">Code map</a>
+      <a href="#definitions">Definitions</a>
+      <a href="#dependency">Dependency mode</a>
+      <a href="#campaigns">Campaigns</a>
+      <a href="#agent">Agent and prompts</a>
+      <a href="#runtime">Stacks and runtime</a>
+      <a href="#grading">Grading</a>
+      <a href="#repairs">Repairs</a>
+      <a href="#mutations">Mutations</a>
+      <a href="#evidence">Evidence</a>
+      <a href="#dashboard">Dashboard</a>
+      <a href="#testing">Tests</a>
+      <a href="#examples">Examples</a>
+      <a href="#audit">Audit</a>
+    </div>
+  </nav>
+
+  <main class="shell">
+    <section id="overview">
+      <h2>What the system does</h2>
+      <p class="section-intro">Stack Bench builds, tests, repairs, and records the same product work across technology stacks.</p>
+      <div class="flow" aria-label="Run data flow">
+        <div class="step"><div class="label">1</div><b>Define</b><span>Track, feature catalog, recipe, stacks, model, budget</span></div>
+        <div class="step"><div class="label">2</div><b>Compile</b><span>Resolve exact versions and hash the plan</span></div>
+        <div class="step"><div class="label">3</div><b>Preflight</b><span>Check Docker, credentials, ports, files, and smoke paths</span></div>
+        <div class="step"><div class="label">4</div><b>Build</b><span>Give the current request to the selected coding agent</span></div>
+        <div class="step"><div class="label">5</div><b>Grade and repair</b><span>Run selected checks and return application failures</span></div>
+        <div class="step"><div class="label">6</div><b>Record</b><span>Write typed artifacts, source hashes, cost, and reports</span></div>
+      </div>
+    </section>
+
+    <section id="map">
+      <h2>Code map</h2>
+      <p class="section-intro">Main code boundaries. Source is TypeScript. The build emits ESM JavaScript into <span class="path">dist/</span>.</p>
+      <details open><summary>Control</summary>
+        <div class="card"><h3>Control plane</h3><ul class="file-list">
+          <li><span class="path">commands/bench.ts</span><span>Runs one benchmark attempt. It resolves scope, runs preflight, owns the stack lease, calls the coding agent, grades, repairs, and writes the run.</span></li>
+          <li><span class="path">src/campaigns/campaign-compiler.ts</span><span>Turns a campaign manifest into an exact, hashed plan.</span></li>
+          <li><span class="path">src/campaigns/campaign-runner.ts</span><span>Admits, schedules, runs, retries, and reconciles campaign attempts.</span></li>
+          <li><span class="path">src/campaigns/campaign-scheduler.ts</span><span>Stores the state machine for pending, running, completed, and invalid attempts.</span></li>
+        </ul></div>
+      </details>
+      <details><summary>Definitions</summary>
+        <div class="card"><h3>Definition plane</h3><ul class="file-list">
+          <li><span class="path">tracks/&lt;track&gt;/track.json</span><span>Declares levels, suites, actions, ports, restart probes, and validation status.</span></li>
+          <li><span class="path">src/composition/*</span><span>Compiles packs, recipes, task fragments, selected checks, calibration, and release identities.</span></li>
+          <li><span class="path">src/progression/progression-definition.ts</span><span>Compiles feature nodes from versioned packs. It assigns each scored group to one owner.</span></li>
+          <li><span class="path">tracks/ecommerce/progression/ecommerce-2.0.2.json</span><span>Current 43-node dependency catalog.</span></li>
+        </ul></div>
+      </details>
+      <details><summary>Execution</summary>
+        <div class="card"><h3>Execution plane</h3><ul class="file-list">
+          <li><span class="path">src/agents/*</span><span>Validates agent adapters, credentials, supported modes, result shape, cost, and token usage.</span></li>
+          <li><span class="path">src/stacks/*</span><span>Defines the stack capability contract and routes work to MongoDB, PostgreSQL, SpacetimeDB, or stub adapters.</span></li>
+          <li><span class="path">src/runtime/*</span><span>Owns leases, resource locks, Docker runtime, checkpoints, recovery, and source snapshots.</span></li>
+          <li><span class="path">src/progression/*</span><span>Runs the dependency state machine and persists its event history.</span></li>
+        </ul></div>
+      </details>
+      <details><summary>Proof</summary>
+        <div class="card"><h3>Proof plane</h3><ul class="file-list">
+          <li><span class="path">grader/grade.ts</span><span>Runs browser and API actions. It produces one structured result per selected check.</span></li>
+          <li><span class="path">src/actions/*</span><span>Defines action contracts and the actors used by scenarios.</span></li>
+          <li><span class="path">src/evidence/*</span><span>Validates evidence, writes artifacts, tracks provenance, and classifies mutations.</span></li>
+          <li><span class="path">grader/mutation-test.ts</span><span>Breaks a known-good app one defect at a time and proves that the expected check catches it.</span></li>
+          <li><span class="path">src/references/*</span><span>Imports, validates, runs, and qualifies known-good reference apps.</span></li>
+        </ul></div>
+      </details>
+      <details><summary>Interfaces</summary>
+        <div class="card"><h3>Operator interfaces</h3><ul class="file-list">
+          <li><span class="path">commands/campaign-cli.ts</span><span>CLI access to prepare, run, resume, reconcile, inspect, audit, and report operations.</span></li>
+          <li><span class="path">dashboard/</span><span>Reads the same campaign state and artifacts. It does not define a second execution model.</span></li>
+          <li><span class="path">src/campaigns/campaign-report.ts</span><span>Builds JSON and HTML reports from the recorded test plan and run state.</span></li>
+        </ul></div>
+      </details>
+    </section>
+
+    <section id="definitions">
+      <h2>Definitions and composition</h2>
+      <p class="section-intro">Versioned tracks, packs, recipes, and campaigns define each run.</p>
+      <div class="grid three">
+        <div class="card"><div class="label">Track</div><h3>Product shape</h3><p>Levels, suites, actions, ports, reset behavior, and validation status.</p></div>
+        <div class="card"><div class="label">Pack</div><h3>Reusable module</h3><p>Prompt fragments, check groups, points, dependencies, and version.</p></div>
+        <div class="card"><div class="label">Recipe</div><h3>Selected test plan</h3><p>Fixture, included modules, prompt composition, execution, and scoring.</p></div>
+      </div>
+      <details open><summary>Recipe excerpt: independent modules stay separately versioned</summary><pre><code>{
+  "id": "ecommerce.progression-catalog",
+  "version": "2.0.1",
+  "packs": [
+    { "id": "ecommerce.feature.accounts", "version": "1.2.0" },
+    { "id": "ecommerce.spec.state-durability", "version": "2.0.1" },
+    { "id": "ecommerce.progression.support-intake", "version": "1.0.0" }
+  ],
+  "execution": "all-selected-sources",
+  "scoring": { "mode": "source-points" }
+}</code></pre></details>
+      <details><summary>Real code: compose only the fragments selected for this task</summary><pre><code>const applies = fragment =&gt; fragment.ownerConditions
+  ? fragment.ownerConditions.some(entry =&gt; owners.has(entry.owner)
+    &amp;&amp; entry.modes.includes(mode)
+    &amp;&amp; entry.requiresFeatures.every(featureApplies))
+  : fragment.owners.some(owner =&gt; owners.has(owner))
+    &amp;&amp; fragment.modes.includes(mode);
+
+const requirements = plan.recipe.task.requirements.filter(applies);
+const contracts = plan.recipe.task.contracts.filter(applies);</code></pre></details>
+      <div class="audit">
+        <div><span>✓</span><p>Unknown fields and unsupported schema versions fail during compilation.</p></div>
+        <div><span>✓</span><p>Exact content hashes detect changed definitions between compile time and execution.</p></div>
+        <div><span>✓</span><p>Exact references and the candidate catalog identify active versions. Older files cannot become launch inputs through filename discovery.</p></div>
+      </div>
+    </section>
+
+    <section id="dependency">
+      <h2>Dependency mode</h2>
+      <p class="section-intro">Dependency depth sets the level. Passed parents open child features.</p>
+      <p><a href="dependency-graph.html">Open the current dependency graph</a> to trace parents, children, and feature descriptions.</p>
+      <div class="callout"><strong>Work selection.</strong> <code>feature</code> sends one ready feature. <code>progressive</code> sends all ready features. <code>all-at-once</code> sends the full selected graph. <strong>Repair plan.</strong> Selection can target one failed feature or all current failures. The budget can limit the full run, each feature, each depth, or any combination. When limits are combined, the tightest remaining limit wins.</div>
+      <details open><summary>Real example: a node owns prompt modules, checks, and dependencies</summary><pre><code>{
+  "id": "purchasing",
+  "title": "Purchasing and orders",
+  "questline": "orders-fulfillment",
+  "featureRefs": ["ecommerce.feature.purchasing@1.2.1"],
+  "gradingGroups": [
+    "ecommerce.feature.purchasing@1.2.1#purchase-order",
+    "ecommerce.spec.access-control@2.0.0#order-ownership"
+  ],
+  "dependencies": [
+    { "id": "accounts", "reason": "A purchase needs a buyer." },
+    { "id": "catalog", "reason": "A purchase needs an item." }
+  ]
+}</code></pre></details>
+      <details><summary>Real code: prompt work and grading work are selected separately</summary><pre><code>function selectedPromptWork(state) {
+  const nodeIds = selectedPromptNodeIds(state);
+  return {
+    nodeIds,
+    featureRefs: [...new Set(selectionFor(state, nodeIds, 'featureRefs'))].sort(),
+    promptModules: [...new Set(selectionFor(state, nodeIds, 'promptModules'))].sort(),
+  };
+}
+
+function selectedGradingWork(state) {
+  const nodeIds = gradingNodeIds(state);
+  const selected = new Set(nodeIds);
+  const promptNodeIds = new Set(selectedPromptNodeIds(state));
+  return {
+    nodeIds,
+    checks: state.definition.nodes.filter(node =&gt; selected.has(node.id)).flatMap(node =&gt;
+      node.gradingChecks.filter(check =&gt;
+        state.definition.workSelection === 'all-at-once'
+          || checkRequirementsAvailable(state, check, promptNodeIds))
+        .map(check =&gt; ({ ...check, nodeId: node.id })))
+  };
+}</code></pre></details>
+      <details><summary>Real code: state changes append one event</summary><pre><code>export function recordDependencyResult(inputState, inputResult) {
+  const state = asDependencyState(inputState);
+  const event = {
+    sequence: state.events.length + 1,
+    type: 'attempt-recorded',
+    result: structuredClone(inputResult)
+  };
+  const next = applyDependencyResult(state, event.result);
+  next.events.push(event);
+  return next;
+}</code></pre></details>
+      <div class="audit">
+        <div><span>✓</span><p>Every scored group can have only one owner. Duplicate ownership fails compilation.</p></div>
+        <div><span>✓</span><p>Feature pack dependencies must exist in the node or one of its ancestors.</p></div>
+        <div><span>✓</span><p>The persisted event history is hash-checked and replayed. A contradictory or corrupted state cannot resume silently.</p></div>
+        <div><span class="risk-mark">!</span><p>The full catalog is draft. Fresh qualification is still required for the current dependency definition.</p></div>
+      </div>
+    </section>
+
+    <section id="campaigns">
+      <h2>Campaign compilation and scheduling</h2>
+      <p class="section-intro">A compiled campaign fixes the scope, versions, budget, repetitions, and parallelism.</p>
+      <div class="grid two">
+        <div class="card"><h3>Compilation</h3><ol><li>Validate the manifest schema.</li><li>Resolve exact versions.</li><li>Expand all stack, agent, condition, and repetition attempts.</li><li>Hash the definition and engine identity.</li></ol></div>
+        <div class="card"><h3>Execution</h3><ol><li>Run campaign-wide admission checks.</li><li>Claim up to the configured parallel slots.</li><li>Give each slot a distinct run index and resource scope.</li><li>Write attempt state after each completion.</li></ol></div>
+      </div>
+      <details open><summary>Example campaign excerpt</summary><pre><code>{
+  "mode": { "id": "dependency", "version": "4.0.0",
+    "workSelection": "feature" },
+  "repair": { "selection": "feature", "budget": { "perFeature": 1 } },
+  "levels": [1, 2, 3, 4, 5, 6],
+  "featureCatalog": "ecommerce.questlines@2.0.2",
+  "stacks": [
+    { "id": "mongodb", "adapterVersion": "1.4.0" },
+    { "id": "postgres", "adapterVersion": "1.5.0" },
+    { "id": "spacetime", "adapterVersion": "1.3.0" }
+  ],
+  "repetitions": 1,
+  "parallelism": 3,
+  "budgets": { "attemptTimeoutMinutes": 180 }
+}</code></pre></details>
+      <div class="callout"><strong>Parallelism.</strong> Each active attempt gets separate ports, database names, containers, and resource locks.</div>
+      <div class="callout"><strong>Extension.</strong> <code>campaign extend target.json --from prior-results --depth 2 --out extended-results</code> copies each matching depth-2 source, regrades depths 1 and 2 on a fresh database, and starts depth 3 only after both rechecks pass.</div>
+      <div class="audit">
+        <div><span>✓</span><p>Model-free drafts use the trial path. Paid campaigns require a complete test plan.</p></div>
+        <div><span>✓</span><p>An unresolved running attempt must be reconciled before the controller resumes.</p></div>
+        <div><span class="risk-mark">!</span><p>Single-attempt orchestration remains concentrated in <code>commands/bench.ts</code>. Focused tests must protect its boundaries with campaign, runtime, grading, and repair code.</p></div>
+      </div>
+    </section>
+
+    <section id="agent">
+      <h2>Agent adapters and prompt construction</h2>
+      <p class="section-intro">Agent adapters define model access, limits, credentials, and result format.</p>
+      <div class="grid two">
+        <div class="card"><h3>Agent receives</h3><ul><li>Product brief and current feature work</li><li>Selected stack access details</li><li>Selected SDK or skill material</li><li>Required application interface</li><li>On repair, failed checks and expected results</li></ul></div>
+        <div class="card"><h3>Controller retains</h3><ul><li>Checks selected only for grading</li><li>Expected and observed specification sets</li><li>Reference and mutation evidence</li><li>Campaign state and prior artifacts</li><li>Docker control authority</li></ul></div>
+      </div>
+      <details open><summary>Adapter contract excerpt</summary><pre><code>export const AGENT_ADAPTER_SCHEMA_VERSION = 5;
+
+const MODES = new Set(['build', 'upgrade', 'resume', 'fix']);
+
+export function defineAgentAdapter(value) {
+  if (!object(value)) throw new Error('agent adapter must be an object');
+  if (value.schemaVersion !== AGENT_ADAPTER_SCHEMA_VERSION)
+    throw new Error('agent adapter schema is unsupported');
+  if (!Array.isArray(value.modes) || value.modes.some(mode =&gt; !MODES.has(mode)))
+    throw new Error(`agent adapter ${value.id}.modes is invalid`);
+  // Remaining identity, limit, credential, network, and executable fields
+  // are also validated before the adapter is frozen.
+}</code></pre></details>
+      <details><summary>Real code: remove grader-only selections from the agent request</summary><pre><code>const requested = resolved.selection.requested;
+const visible = createBoundRecipeTaskRequest(binding, {
+  featureIds: requested.features,
+  requestedSpecifications: requested.specifications?.requested ?? [],
+  expectedSpecifications: [],
+  observedSpecifications: [],
+  checkKeys: [],
+  dependencyExpansion: requested.dependencyExpansion,
+  taskMode: resolved.taskMode,
+});
+
+if (visible.task.sha256 !== resolved.task.sha256) {
+  throw new Error('undisclosed treatment removal changed the agent task');
+}</code></pre></details>
+      <div class="callout"><strong>Selection boundary.</strong> Prompt selection and grading selection are independent.</div>
+      <div class="audit">
+        <div><span>✓</span><p>The result validator checks app directory, mode, level, stack, track, model, tokens, cost, duration, session, and provider metadata.</p></div>
+        <div><span>✓</span><p>Credentials and allowed outbound destinations are adapter data, not ad hoc shell arguments.</p></div>
+        <div><span class="risk-mark">!</span><p>The code uses several terms for the same boundary: requested, expected, observed, selected, visible, and grading. Public copy needs a smaller vocabulary, even if internal schemas remain exact.</p></div>
+      </div>
+    </section>
+
+    <section id="runtime">
+      <h2>Stack adapters and runtime isolation</h2>
+      <p class="section-intro">Stack adapters provide setup, access, reset, grading, lifecycle, and cleanup operations.</p>
+      <details open><summary>Real code: one capability call instead of stack conditionals</summary><pre><code>export function executeStackCapability(adapter, capabilityName, operation, input = {}) {
+  const provider = adapter.capabilities[capabilityName];
+  if (!provider) {
+    throw new StackCapabilityUnsupportedError(
+      `stack adapter ${adapter.id} does not support capability ${capabilityName}`);
+  }
+  if (!provider.operations.includes(operation)) {
+    throw new StackCapabilityUnsupportedError(
+      `stack adapter ${adapter.id} capability ${capabilityName} does not support operation ${operation}`);
+  }
+  return provider.execute(operation, input);
+}</code></pre></details>
+      <div class="grid three">
+        <div class="card"><div class="label">Lease</div><h3>Exact ownership</h3><p>A generated run ID, ownership token, database identity, container identity, ports, and locks bind all destructive operations.</p></div>
+        <div class="card"><div class="label">Container</div><h3>Isolation</h3><p>The coding process does not receive the controller, grader, scenarios, old results, or Docker socket in appliance mode.</p></div>
+        <div class="card"><div class="label">Recovery</div><h3>Cleanup proof</h3><p>A stopped controller must prove owned resources are released before a campaign attempt can be retried.</p></div>
+      </div>
+      <details><summary>Real code: run IDs and ownership-bound leases</summary><pre><code>export function newRunId({ track, backend, runIndex,
+  now = new Date(), nonce = randomUUID() }) {
+  const stamp = now.toISOString().replace(/[-:.TZ]/g, '').slice(0, 14);
+  const safe = value =&gt; String(value).toLowerCase().replace(/[^a-z0-9_-]+/g, '-');
+  return `${safe(track)}-${safe(backend)}-run${Number(runIndex)}-${stamp}-${safe(nonce).slice(0, 8)}`;
+}
+
+return {
+  version: LEASE_VERSION,
+  runId,
+  backend,
+  track,
+  runIndex,
+  ownerPid,
+  ownershipToken: randomUUID(),
+  createdAt: new Date().toISOString(),
+  state: 'created',
+  resources
+};</code></pre></details>
+      <div class="audit">
+        <div><span>✓</span><p>The adapter registry rejects a stack that does not implement every required engine operation.</p></div>
+        <div><span>✓</span><p>Lease files are written atomically with restricted permissions.</p></div>
+        <div><span>✓</span><p>Resource locks use exact keys. The controller does not select cleanup targets from generated code.</p></div>
+        <div><span class="risk-mark">!</span><p>Host and appliance behavior still share some runtime modules. Every production path should be proven in the Docker appliance, which is the intended delivery shape.</p></div>
+      </div>
+    </section>
+
+    <section id="grading">
+      <h2>Grading and check evidence</h2>
+      <p class="section-intro">Selected scenarios produce typed check evidence. Only application failures are repairable.</p>
+      <div class="grid two">
+        <div class="card"><h3>Measured results</h3><table><tr><th>Status</th><th>Meaning</th><th>Repair</th></tr><tr><td>passed</td><td>The app met the assertion.</td><td>No</td></tr><tr><td>failed</td><td>The app did not meet the assertion.</td><td>Yes</td></tr></table></div>
+        <div class="card"><h3>Invalid evidence</h3><table><tr><th>Status</th><th>Meaning</th><th>Score</th></tr><tr><td>inconclusive</td><td>The result cannot prove pass or fail.</td><td>0 points; attempt invalid</td></tr><tr><td>harness_failure</td><td>The test system failed.</td><td>0 points; attempt invalid</td></tr></table></div>
+      </div>
+      <details open><summary>Core status policy</summary><pre><code>export const CHECK_EVIDENCE_DISPOSITIONS = Object.freeze({
+  passed: { outcomeKind: 'passed', passed: true, measured: true,
+    applicationFailure: false, repairable: false },
+  failed: { outcomeKind: 'app_failure', passed: false, measured: true,
+    applicationFailure: true, repairable: true },
+  inconclusive: { outcomeKind: 'inconclusive', passed: false, measured: false,
+    applicationFailure: false, repairable: false },
+  harness_failure: { outcomeKind: 'harness_failure', passed: false, measured: false,
+    applicationFailure: false, repairable: false },
+});</code></pre></details>
+      <div class="callout"><strong>Status control.</strong> The status table alone controls scoring and repair eligibility.</div>
+      <div class="audit">
+        <div><span>✓</span><p>A clean status boundary prevents a browser crash or setup fault from looking like an application defect.</p></div>
+        <div><span>✓</span><p>Selected checks are mapped by stable recipe keys before the browser starts.</p></div>
+        <div><span class="risk-mark">!</span><p><code>grader/grade.ts</code> still coordinates browser setup, action execution, evidence, and aggregation. Focused action and evidence tests must protect those boundaries.</p></div>
+      </div>
+    </section>
+
+    <section id="repairs">
+      <h2>Repair loop and source checkpoints</h2>
+      <p class="section-intro">Repairs use failed checks and preserve the last accepted source checkpoint.</p>
+      <div class="example">
+        <div class="example-step"><h3>Hash current source</h3><p>The controller records the authored source before grading.</p></div>
+        <div class="example-step"><h3>Grade selected checks</h3><p>Passed, failed, inconclusive, and harness failure results remain distinct.</p></div>
+        <div class="example-step"><h3>Send repairable failures</h3><p>With feature selection, dependency mode sends one failed feature. Batch and sequential runs send their selected failing set.</p></div>
+        <div class="example-step"><h3>Grade the changed source</h3><p>A repair is useful only if the new result is usable and the source is intact.</p></div>
+        <div class="example-step"><h3>Accept or restore</h3><p>The checkpoint becomes the next source, or the controller restores the last accepted source.</p></div>
+      </div>
+      <details><summary>Real code: source snapshots exclude runtime and harness files</summary><pre><code>const PRESERVED_DIRS = new Set(['node_modules']);
+const ROOT_PRESERVED_DIRS = new Set(['.git', 'stack-bench']);
+const TRANSIENT_DIRS = new Set([
+  'dist', '.vite', 'coverage',
+  '.apt', '.cache', '.debroot', '.libs', '.npm-cache', '.pw-browsers', '.pwcache'
+]);
+const TRANSIENT_PATHS = new Set(['client/src/module_bindings']);
+const ROOT_RUNTIME_FILES = new Set(['BUG_REPORT.md', 'client.log', 'server.log', 'vite.log']);
+
+export function hashAppSource(appDir) {
+  return hashDirectory(appDir, { exclude: rel =&gt; directoryDisposition(rel) !== 'source'
+    || preservedRuntimeFile(rel) || transientRuntimeFile(rel) });
+}</code></pre></details>
+      <div class="audit">
+        <div><span>✓</span><p>Source identity excludes dependencies, build output, logs, and harness-owned files.</p></div>
+        <div><span>✓</span><p>Repair continuation checks the parent agent adapter, stack adapter, selection, build image, and source.</p></div>
+        <div><span class="risk-mark">!</span><p>The repair loop must stop repeated failures that provide no new information. The run report should show repeated failure signatures and cost per changed result.</p></div>
+      </div>
+    </section>
+
+    <section id="mutations">
+      <h2>Mutation qualification</h2>
+      <p class="section-intro">Mutation tests prove that known defects fail the intended checks.</p>
+      <div class="flow" style="grid-template-columns:repeat(5,minmax(120px,1fr))">
+        <div class="step"><div class="label">1</div><b>Clean reference</b><span>Hash and fully grade the baseline</span></div>
+        <div class="step"><div class="label">2</div><b>Apply defect</b><span>Use exact source edits from the manifest</span></div>
+        <div class="step"><div class="label">3</div><b>Reset state</b><span>Restore database and app readiness</span></div>
+        <div class="step"><div class="label">4</div><b>Grade target</b><span>Run the selected scenario and checks</span></div>
+        <div class="step"><div class="label">5</div><b>Classify</b><span>Expected catch, miss, collateral, or invalid evidence</span></div>
+      </div>
+      <details open><summary>Real code: mutations are distributed across isolated workers</summary><pre><code>function shardAssignments(mutations, count, defaultScenario) {
+  const workers = Array.from({ length: count }, () =&gt; []);
+  mutations.forEach((mutation, position) =&gt; {
+    const scenario = mutation.scenario ?? defaultScenario;
+    if (typeof scenario !== 'string' || !scenario.trim()) {
+      fail(`mutation ${mutation.id} has no scenario`);
+    }
+    workers[position % count].push(position);
+  });
+  return workers;
+}</code></pre></details>
+      <div class="callout"><strong>Sharding.</strong> Individual defects are distributed evenly. Each worker has isolated ports, containers, databases, and evidence. Merge validation requires every mutation ID exactly once.</div>
+      <div class="audit">
+        <div><span>✓</span><p>The mutation manifest binds the exact pristine fixture hash.</p></div>
+        <div><span>✓</span><p>A mutation counts only when the intended criterion fails conclusively and no unrelated criterion regresses.</p></div>
+        <div><span>✓</span><p>Parallel shard merge rejects missing, duplicate, or misassigned results.</p></div>
+        <div><span class="risk-mark">!</span><p>Mutation coverage proves that known defects are detected. It does not prove that the grader detects every possible defect. Coverage must map to check ownership and risk.</p></div>
+      </div>
+    </section>
+
+    <section id="evidence">
+      <h2>Artifacts, provenance, and reports</h2>
+      <p class="section-intro">Typed artifacts record the plan, run, evidence, identities, and source hashes.</p>
+      <div class="grid three">
+        <div class="card"><div class="label">Plan</div><h3>What was selected</h3><p>Track, versions, stacks, model, conditions, levels, pricing, budgets, repetitions, and engine identity.</p></div>
+        <div class="card"><div class="label">Run</div><h3>What happened</h3><p>Preflight, build sessions, grades, repairs, source checkpoints, time, token usage, cost, and recovery.</p></div>
+        <div class="card"><div class="label">Evidence</div><h3>Why it scored</h3><p>Check observations, expected values, actors, actions, screenshots, logs, source, and test identity.</p></div>
+      </div>
+      <table>
+        <tr><th>Artifact</th><th>Purpose</th><th>Main validator</th></tr>
+        <tr><td>plan.json</td><td>Frozen experiment and schedule</td><td>validateCompiledCampaignPlan</td></tr>
+        <tr><td>state.json</td><td>Campaign attempt state</td><td>validateCampaignState</td></tr>
+        <tr><td>run.json</td><td>One complete attempt</td><td>artifact schema and campaign run validator</td></tr>
+        <tr><td>bundle.json</td><td>One grading bundle</td><td>grade bundle artifact validator</td></tr>
+        <tr><td>progression-state.json</td><td>Dependency event history and bound identities</td><td>hash validation and event replay</td></tr>
+        <tr><td>recovery.json</td><td>Proof that exact-owned resources were cleaned</td><td>recovery artifact validator</td></tr>
+      </table>
+    </section>
+
+    <section id="dashboard">
+      <h2>CLI and dashboard</h2>
+      <p class="section-intro">The CLI and dashboard use the same campaign state and artifacts.</p>
+      <details open><summary>Dashboard artifact allowlist</summary><pre><code>Campaign: plan, state, HTML report, JSON report
+Attempt: run, preflight, recovery, progression state, process metadata, logs, checkpoints
+Grade: bundle, contract lint, actions, check evidence, screenshots</code></pre></details>
+      <div class="audit">
+        <div><span>✓</span><p>Dashboard paths are resolved under the configured results root.</p></div>
+        <div><span>✓</span><p>Credentials are redacted from log tails before display.</p></div>
+        <div><span>✓</span><p>Visual evidence, JSON, reports, and logs are exposed through explicit patterns.</p></div>
+        <div><span class="risk-mark">!</span><p>The dashboard should remain a controller client. Business rules must stay in shared source modules, not browser code.</p></div>
+      </div>
+    </section>
+
+    <section id="testing">
+      <h2>Test layers</h2>
+      <p class="section-intro">Use focused tests first. Use Docker and live qualification only when required.</p>
+      <div class="grid three">
+        <div class="card"><div class="label">Fast</div><h3>Module and contract tests</h3><p>Node tests cover compilers, state machines, adapters, evidence, scheduling, locks, prompts, and artifact validation.</p><p class="path">npm run build --silent &amp;&amp; node --test dist/tests/&lt;focused-file&gt;.test.js</p></div>
+        <div class="card"><div class="label">Model free</div><h3>Reference and control tests</h3><p>Known-good fixtures, null controls, scenario checks, prompt snapshots, graph compilation, and mutation definition checks need no paid agent.</p><p class="path">npm run check:scenarios</p></div>
+        <div class="card"><div class="label">Integrated</div><h3>Docker and live qualification</h3><p>Container smoke, real stack reset, browser grading, reference qualification, fault injection, and campaign admission prove the deployed topology.</p><p class="path">npm run test:container</p></div>
+      </div>
+      <div class="callout"><strong>Order.</strong> Focused test, affected model-free check, Docker smoke if needed, then scoped live qualification.</div>
+      <table>
+        <tr><th>Change</th><th>Minimum focused proof</th><th>Release proof</th></tr>
+        <tr><td>Graph dependency</td><td>Progression definition, engine, state, and graph tests</td><td>Affected reference nodes and their mutations</td></tr>
+        <tr><td>Check or scenario</td><td>Scenario compiler and exact grader tests</td><td>Known-good pass plus targeted mutation catch</td></tr>
+        <tr><td>Stack adapter</td><td>Adapter contract and stack-specific unit tests</td><td>Docker smoke, reset, recovery, and reference qualification</td></tr>
+        <tr><td>Campaign scheduler</td><td>Scheduler, locking, admission, and retry tests</td><td>Model-free parallel campaign trial</td></tr>
+        <tr><td>Prompt composition</td><td>Recipe selection and prompt snapshot tests</td><td>Scope identity and agent-visible request review</td></tr>
+      </table>
+    </section>
+
+    <section id="examples">
+      <h2>Change examples</h2>
+      <p class="section-intro">Common extension paths.</p>
+      <div class="grid two">
+        <div class="card">
+          <h3>Move a feature to a later level</h3>
+          <ol>
+            <li>Change the node dependencies in <span class="path">progression/ecommerce-2.0.2.json</span>.</li>
+            <li>Do not edit a numeric level. The compiler recalculates it from dependency depth.</li>
+            <li>Keep the same feature pack and grading group IDs if their behavior did not change.</li>
+            <li>Compile the graph. Check reachability, cycles, prompt mode, and ownership.</li>
+            <li>Run focused definition and progression tests.</li>
+            <li>Requalify only affected reference and mutation scopes.</li>
+          </ol>
+          <p><strong>Expected result:</strong> the feature moves without rewriting its prompt module, grader scenario, or stable check identity.</p>
+        </div>
+        <div class="card">
+          <h3>Add a new technology stack</h3>
+          <ol>
+            <li>Implement every required capability in <span class="path">src/stacks/backends/&lt;stack&gt;</span>.</li>
+            <li>Register the adapter with an exact semantic version.</li>
+            <li>Add connection, reset, lifecycle, grading, container, and cleanup operations.</li>
+            <li>Add focused contract tests with the stub path.</li>
+            <li>Add Docker admission and reference qualification for the real stack.</li>
+            <li>Add it to a campaign only after its reference checks pass.</li>
+          </ol>
+          <p><strong>Expected result:</strong> campaign, agent, grader, evidence, and dashboard code do not need stack-specific branches.</p>
+        </div>
+        <div class="card">
+          <h3>Add a product feature</h3>
+          <ol>
+            <li>Create one feature pack with prompt requirements and application interface.</li>
+            <li>Create one or more scenario files with stable criteria and points.</li>
+            <li>Add the pack to the recipe catalog.</li>
+            <li>Add one graph node that owns its scored groups.</li>
+            <li>Declare only necessary parent features.</li>
+            <li>Add a known-good reference behavior and targeted mutation evidence.</li>
+          </ol>
+        </div>
+        <div class="card">
+          <h3>Continue a stopped repair</h3>
+          <ol>
+            <li>Select the exact parent run and level.</li>
+            <li>Create a repair grant with the number of repairs.</li>
+            <li>Verify source, adapter, selection, model, stack, and image identities.</li>
+            <li>Seed the accepted checkpoint.</li>
+            <li>Run only the added repairs and required regression checks.</li>
+            <li>Append the new cost and evidence to the lineage.</li>
+          </ol>
+        </div>
+      </div>
+    </section>
+
+    <section id="audit">
+      <h2>Senior review checklist</h2>
+      <p class="section-intro">Production comparison checklist.</p>
+      <table>
+        <tr><th>Area</th><th>What to prove</th><th>Current signal</th></tr>
+        <tr><td>Definition integrity</td><td>Exact versions, no duplicate ownership, all nodes reachable, no cycles, prompt and test identities fixed.</td><td>Strong compiler checks. The full six-depth catalog is still draft.</td></tr>
+        <tr><td>Prompt boundary</td><td>Agent receives only the selected product work and intended guidance. Grader-only selections do not change prompt text.</td><td>Hash equality check exists.</td></tr>
+        <tr><td>Stack fairness</td><td>Same product work and scored checks. Only stack access and stack-specific setup differ.</td><td>Adapter boundary exists. Needs qualified reference evidence per stack.</td></tr>
+        <tr><td>Grader correctness</td><td>Known-good app passes. Known defects fail the intended criterion without collateral failures.</td><td>Mutation framework exists. Qualification coverage is the gating evidence.</td></tr>
+        <tr><td>Failure attribution</td><td>Application failure, inconclusive evidence, provider failure, and harness failure remain separate.</td><td>Central evidence disposition table exists.</td></tr>
+        <tr><td>Repair quality</td><td>Failures contain useful structured evidence. Repeated unchanged failures stop. Accepted source remains recoverable.</td><td>Checkpoint and repair lineage exist. Cost efficiency still needs run evidence.</td></tr>
+        <tr><td>Parallel isolation</td><td>Every attempt gets unique ports, database, containers, paths, and locks.</td><td>Run index, leases, and lock keys exist. Fresh qualification is required for the current definition.</td></tr>
+        <tr><td>Reproducibility</td><td>Plan, engine, definitions, adapters, image, model, source, pricing, and checks are all recorded.</td><td>Identity model is broad and strict.</td></tr>
+        <tr><td>Code size</td><td>Large orchestration files have clear internal phases and focused tests.</td><td><code>commands/bench.ts</code> and <code>grader/grade.ts</code> remain the main responsibility concentrations.</td></tr>
+        <tr><td>Production data</td><td>Only qualified, complete, comparable attempts enter stack conclusions.</td><td>Current dependency qualification is pending. Paid comparison data must pass the same artifact validation.</td></tr>
+      </table>
+      <div class="callout risk"><strong>Main risk.</strong> Large execution files can duplicate selection, scoring, cleanup, or retry policy.</div>
+    </section>
+  </main>
+
+</body>
+</html>
diff --git a/tools/stack-bench/grader/README.md b/tools/stack-bench/grader/README.md
new file mode 100644
index 00000000000..9689398f1d7
--- /dev/null
+++ b/tools/stack-bench/grader/README.md
@@ -0,0 +1,131 @@
+# Stack Bench grader
+
+The grader runs versioned scenarios against a generated app. It collects
+browser, transport, lifecycle, and database evidence for each check.
+
+Each scenario actor receives a separate browser context. A live-update check
+passes only when the page that was already open changes. The grader does not
+reload a failed assertion and try again.
+
+## Outcomes and scoring
+
+Every check produces one outcome:
+
+- `passed`;
+- `failed`;
+- `inconclusive` when required evidence is unavailable;
+- `harness_failure` when Stack Bench could not perform the measurement.
+
+Only a passed check adds its declared points. Other outcomes add zero and never
+change the declared denominator. Console errors remain diagnostics and do not
+change unrelated scores.
+
+Authorization and replay checks pass only when the requested call ran and
+produced verifiable evidence. Visible UI behavior cannot replace missing server
+evidence.
+
+An action never fails with a sentence. It fails with a finding from the closed
+catalog in `src/actions/action-findings.ts`: a kind and its fields, where a
+field is a contract control name, an action id, an actor label, a number, a
+count, or an HTTP status. Every reader renders the finding from its one
+template. Raw diagnostics travel in a `detail` field that is never rendered.
+
+## Scenario ownership
+
+Scenario JSON contains actors, setup steps, actions, and scored checks. The
+action contracts are compiled and registered in `src/actions/`. Scenario prose
+is not executable behavior.
+
+Actions run through capability-scoped executors. Browser, transport,
+concurrency, lifecycle, and database actions use the same typed result contract.
+Each stack adapter declares the capabilities it provides and whether named
+application actions travel as HTTP routes or reducer calls. The campaign
+compiler resolves every selected check against every selected stack and
+refuses a campaign that a stack could not measure.
+
+When authoring assertions:
+
+- scope repeated elements to their owning row, room, message, or user;
+- assert visible values, not the presence of an empty container;
+- require the original open page for live-update behavior;
+- use separate actors for identity boundaries;
+- say in the criterion's `note` why it carries its points when they differ
+  from the feature's other criteria.
+
+Example:
+
+```json
+{
+  "do": "expect",
+  "actor": "bob",
+  "testid": "unread-badge",
+  "in": { "testid": "room-item", "contains": "{room:unread-main}" },
+  "within": 5000
+}
+```
+
+## Run the grader
+
+Use `dist/commands/run-suite.js` for normal grading. It owns database reset,
+provenance checks, contract linting, scenario execution, logs, and bundle
+creation.
+
+Direct `dist/grader/grade.js` execution is for focused scenario authoring only:
+
+```bash
+node dist/grader/grade.js --url http://localhost:6173 \
+  --spec tracks/ecommerce/scenarios/01-account-create-2.4.0.json \
+  --label spacetime-l1 --out report.json
+```
+
+If the grader exits before writing JSON, inspect the retained
+`grader-<suite>.stdout.log` and `grader-<suite>.stderr.log` files.
+
+## Validate checks
+
+Reference apps prove that intended behavior passes. Null controls prove that a
+blank app cannot earn points. Mutations prove that each scored check detects its
+assigned defect.
+
+```bash
+npm run test:null
+npm run check:mutations -- --app <reference-app> --mutations <manifest>
+```
+
+During development, run only mutations affected by the change. A full mutation
+qualification is a release-candidate gate.
+
+The mutation runner requires:
+
+- a fully passing clean baseline;
+- one exact source anchor for every edit;
+- a conclusive failure at the intended check;
+- no unrelated failures;
+- successful source restoration and app reset.
+
+Setup, infrastructure, and inconclusive failures do not count as defect
+detection. A surviving mutation can be equivalent, so confirm that its source
+edit changes observable behavior before changing the check.
+
+## Media evidence
+
+`--media <dir>` records videos and failure screenshots. `--trace` adds a
+Playwright trace with DOM and network snapshots.
+
+```bash
+npx playwright show-trace <trace.zip>
+```
+
+Inspect the failing actor's evidence before attributing a failure. Media belongs
+with run output and is not tracked in the repository.
+
+## Execution target
+
+Preflight binds the stack adapter, database or module name, ports, container
+identity, and run lease. The suite runner verifies that exact target before
+grading. A mismatch is a harness failure and cannot produce an application
+score.
+
+When several stacks fail the same check, inspect the structured evidence. A
+shared failure is useful diagnostic information, but it does not prove whether
+the apps or the check are wrong.
diff --git a/tools/stack-bench/grader/grade.ts b/tools/stack-bench/grader/grade.ts
new file mode 100644
index 00000000000..bcf30b01c9b
--- /dev/null
+++ b/tools/stack-bench/grader/grade.ts
@@ -0,0 +1,1048 @@
+#!/usr/bin/env node
+/// <reference lib="dom" />
+// Score declared criteria from one observed run in isolated actor contexts.
+//
+import { chromium } from 'playwright';
+import type { Browser, BrowserContext, Page } from 'playwright';
+import { randomUUID } from 'node:crypto';
+import { readFileSync, mkdirSync } from 'node:fs';
+import { basename, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { parseArgs as parseNodeArgs } from 'node:util';
+import { harnessBrowserFailure, harnessProcessFailure,
+  runBrowserInfrastructureOperation } from '../src/evidence/harness-errors.js';
+import { compileScenarioDefinition } from '../src/composition/definition-compiler.js';
+import { materializeScenarioCredentials } from '../src/composition/credential-aliases.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { isFinding } from '../src/actions/action-findings.js';
+import type { Finding } from '../src/actions/action-findings.js';
+import { recipeArtifactIdentities, writeArtifact } from '../src/evidence/artifacts.js';
+import { resolveCalibrationForRelease } from '../src/composition/calibration-compiler.js';
+import { resolveGradeRecipeArtifactBinding } from '../src/composition/recipe-release.js';
+import { selectScenarioChecks } from '../src/composition/recipe-selection.js';
+import { ACTION_REGISTRY } from '../src/actions/action-catalog.js';
+import { ActionApplicationFailure, executeAction } from '../src/actions/action-contract.js';
+import { createCheckEvidence, evidenceIsMeasured, evidencePassed } from '../src/evidence/check-evidence.js';
+import { evidenceNowMs } from '../src/evidence/evidence-timing.js';
+import { renderEvidenceConsoleLine } from '../src/evidence/evidence-presentation.js';
+import { measureGradePackRuntime } from '../src/composition/pack-runtime.js';
+import { STACK_ADAPTER_REGISTRY } from '../src/stacks/stack-adapters.js';
+import { stableElementSelector } from '../src/actions/element-selector.js';
+import {
+  createNamedActionsCapability,
+} from '../src/actions/actor-transport-action-executors.js';
+import type { ConcurrentCallResult }
+  from '../src/actions/actor-transport-action-executors.js';
+import {
+  createDatabaseWriteCapability,
+  createLifecycleCapability,
+} from '../src/actions/runtime-action-executors.js';
+import type { DatabaseWriteLease } from '../src/actions/runtime-action-executors.js';
+import { controlAppServer, controlBackendRuntime, parseRuntimeControlSpec }
+  from '../src/runtime/backend-control.js';
+import type { RuntimeControlSpec } from '../src/runtime/backend-control.js';
+import { leaseFromEnv } from '../src/runtime/backend-lease.js';
+import type { LeasedSpacetimeTarget } from '../src/runtime/spacetime-target.js';
+
+import { STACK_BENCH_ROOT as ROOT } from '../src/package-root.js';
+import { transportFrameText } from './transport-frames.js';
+import type { ActionEvidence } from '../src/actions/action-contract.js';
+import type { CheckEvidence, CheckEvidenceAttachment, CheckEvidencePhase,
+  CheckEvidenceStatus } from '../src/evidence/check-evidence.js';
+import type { CompletedGradeFeatureResult, CompletedGradeReport, GradeCleanupFailure }
+  from '../src/evidence/grade-report.js';
+import type { CompiledFeature, CompiledScenarioDefinition,
+  CompiledStep } from '../src/composition/definition-compiler.js';
+import type { RecipeCheck, RecipeGradeRelease, RecipeRelease } from '../src/composition/recipe-release.js';
+import type { TrackAction } from '../src/composition/tracks.js';
+
+type JsonRecord = Record<string, unknown>;
+type ActorWrite = {
+  url: string;
+  method: string;
+  headers: Record<string, string>;
+  body: JsonRecord | null;
+};
+type ActorWebSocketWrite = { event: unknown; body: JsonRecord };
+type ActorContextEntry = { context: BrowserContext; name: string; page: Page | null };
+type CleanupBrowserContext = {
+  tracing: { stop(options: { path: string }): Promise<void> };
+  close(): Promise<void>;
+};
+type CleanupVideo = { saveAs(path: string): Promise<void>; delete(): Promise<void> };
+type CleanupPage = { video(): CleanupVideo | null };
+type CleanupActorContextEntry = {
+  context: CleanupBrowserContext;
+  name: string;
+  page: CleanupPage | null;
+};
+type FeatureResult = Omit<CompletedGradeFeatureResult, 'setupEvidence'> & {
+  setupEvidence?: CheckEvidence;
+};
+type GradeArgs = {
+  url?: string;
+  level: number;
+  headed: boolean;
+  selectedCheckKeys: string[];
+  out?: string;
+  label?: string;
+  feature?: number;
+  spec?: string;
+  restartSpec?: RuntimeControlSpec;
+  backend?: string;
+  track?: string;
+  recipe?: string;
+  expectedRecipeSha256?: string;
+  credentialAliases?: unknown;
+  selectionSha256?: string;
+  parentAttemptId?: string;
+  dbName?: string;
+  app?: string;
+  media?: string;
+  failureMedia?: string;
+  trace?: boolean;
+  nullControl: boolean;
+  browserWsEndpoint?: string;
+};
+type GradeRunContext = {
+  runId: string;
+  roomName: (base: string) => string;
+  restartSpec?: RuntimeControlSpec;
+  url: string;
+  backend?: string;
+  actions: TrackAction[];
+  spacetime: LeasedSpacetimeTarget | null;
+  dbName?: string;
+  databaseLease?: DatabaseWriteLease | null;
+  appDir?: string;
+  scope?: string;
+  extraContexts?: ActorContextEntry[];
+  recorded?: Record<string, unknown>;
+  unverified?: string[];
+  verified?: string[];
+  actionEvidence?: Array<{ actor: string | null; evidence: ActionEvidence }>;
+  serverCheck?: string | null;
+  lastCalls?: ConcurrentCallResult | null;
+  defaultWithin?: number;
+  nullControl: boolean;
+  // True while a scenario step has stopped the application server and no
+  // later step or restore has started it again.
+  applicationStopped?: boolean;
+};
+type ActionFailure = Error & { actionEvidence?: ActionEvidence; actionActor?: string | null };
+const APPLICATION_RESTORE_SETTLE_MS = 8000;
+const APPLICATION_RESTORE_TIMEOUT_MS = 60_000;
+class ApplicationNotRestored extends Error {
+  constructor(reason: string) {
+    super(`the application server stopped by the harness was not restored: ${reason}`);
+  }
+}
+type CheckFailure = {
+  status: CheckEvidenceStatus;
+  code: string;
+  actor: string | null;
+  summary: string | null;
+  finding: Finding | null;
+  observation: unknown;
+  expected: unknown;
+  retryable: boolean;
+};
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+function actionFailure(error: unknown): ActionFailure | null {
+  return error instanceof Error ? error as ActionFailure : null;
+}
+// The sentence the coding agent was given for this behaviour travels with the
+// grade, so a repair report can repeat it instead of describing the check.
+const authored = (criterion: { statedBy?: string }): { statedBy?: string } =>
+  criterion.statedBy ? { statedBy: criterion.statedBy } : {};
+const DEFAULT_WITHIN = 5000;
+const SETUP_WITHIN = 20000;
+// Keep the cause when Playwright prefixes it with locator retry details.
+function keepReason(detail: unknown, limit = 600): string {
+  const s = String(detail ?? '');
+  if (s.length <= limit) return s;
+  const [head, ...rest] = s.split('\n');
+  const reasons = rest
+    .map(l => l.trim())
+    .filter(l => /^-\s/.test(l))
+    .map(l => l.replace(/^-\s*/, ''))
+    .filter(l => !/^(waiting for|retrying|attempting|scrolling|done scrolling|locator resolved to|\d+ ×)/i.test(l));
+  const kept = [...new Set(reasons)].slice(0, 4);
+  const out = kept.length ? `${head}\n  - ${kept.join('\n  - ')}` : s.slice(0, limit);
+  return out.length > limit ? out.slice(0, limit) : out;
+}
+
+export function parseGradeArgs(argv: readonly string[]): GradeArgs {
+  const { values } = parseNodeArgs({ args: [...argv.slice(2)], options: {
+    url: { type: 'string' }, level: { type: 'string' }, out: { type: 'string' },
+    label: { type: 'string' }, feature: { type: 'string' }, spec: { type: 'string' },
+    'restart-spec': { type: 'string' }, backend: { type: 'string' }, track: { type: 'string' },
+    recipe: { type: 'string' }, 'expected-recipe-sha256': { type: 'string' },
+    'selected-check': { type: 'string', multiple: true },
+    'credential-aliases-json': { type: 'string' }, 'selection-sha256': { type: 'string' },
+    'parent-attempt-id': { type: 'string' }, 'db-name': { type: 'string' },
+    app: { type: 'string' }, media: { type: 'string' }, 'failure-media': { type: 'string' },
+    trace: { type: 'boolean' }, headed: { type: 'boolean' },
+    'null-control': { type: 'boolean' },
+    'browser-ws-endpoint': { type: 'string' },
+  } });
+  const args: GradeArgs = { url: values.url, level: values.level === undefined ? 1 : Number(values.level),
+    out: values.out, label: values.label,
+    feature: values.feature === undefined ? undefined : Number(values.feature), spec: values.spec,
+    restartSpec: values['restart-spec'] === undefined ? undefined
+      : parseRuntimeControlSpec(JSON.parse(values['restart-spec'])),
+    backend: values.backend, track: values.track, recipe: values.recipe,
+    expectedRecipeSha256: values['expected-recipe-sha256'],
+    selectedCheckKeys: values['selected-check'] ?? [],
+    credentialAliases: values['credential-aliases-json'] === undefined
+      ? undefined : JSON.parse(values['credential-aliases-json']),
+    selectionSha256: values['selection-sha256'], parentAttemptId: values['parent-attempt-id'],
+    dbName: values['db-name'], app: values.app, media: values.media,
+    failureMedia: values['failure-media'], trace: values.trace, headed: values.headed ?? false,
+    nullControl: values['null-control'] ?? false,
+    browserWsEndpoint: values['browser-ws-endpoint'] };
+  if (!args.url || !args.spec) {
+    throw new Error('Usage: node dist/grader/grade.js --url <app-url> --spec <scenario.json> '
+      + '--level <N> [--out <file>] [--label <s>] [--feature <N>]');
+  }
+  let url: URL;
+  try { url = new URL(args.url); }
+  catch { throw new Error('--url must be a valid HTTP or HTTPS URL'); }
+  if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+    throw new Error('--url must use HTTP or HTTPS');
+  }
+  if (!Number.isInteger(args.level) || args.level < 1) {
+    throw new Error('--level must be a positive integer');
+  }
+  if (args.feature !== undefined && (!Number.isInteger(args.feature) || args.feature < 1)) {
+    throw new Error('--feature must be a positive integer');
+  }
+  if (args.selectionSha256 && !/^[a-f0-9]{64}$/.test(args.selectionSha256)) {
+    throw new Error('--selection-sha256 must be 64 lowercase hexadecimal characters');
+  }
+  if (args.browserWsEndpoint) {
+    let endpoint: URL;
+    try { endpoint = new URL(args.browserWsEndpoint); }
+    catch { throw new Error('--browser-ws-endpoint must be a valid WebSocket URL'); }
+    if (!['ws:', 'wss:'].includes(endpoint.protocol)) {
+      throw new Error('--browser-ws-endpoint must use ws or wss');
+    }
+  }
+  return args;
+}
+
+const tid = stableElementSelector;
+const uniq = () => randomUUID().slice(0, 16);
+const MAX_RECEIVED_BYTES = 8 * 1024 * 1024;
+const MAX_CONSOLE_ERRORS = 200;
+
+// Isolated browser actor
+
+// Which requests count as writes worth capturing for replay and forgery. The
+// default covers chat's routes; a scenario spec can widen it for an application
+// whose endpoints are named differently (`writeUrlPattern`).
+const DEFAULT_WRITE_URL = '\\/api\\/|\\/rooms|\\/messages';
+let WRITE_URL_RE = new RegExp(DEFAULT_WRITE_URL);
+
+
+class Actor {
+  readonly name: string;
+  readonly context: BrowserContext;
+  page!: Page;
+  readonly consoleErrors: string[];
+  readonly received: string[];
+  receivedBytes = 0;
+  receivedOverflow = false;
+  lastWrite: ActorWrite | null = null;
+  lastWrites: Record<string, ActorWrite> = {};
+  writes: ActorWrite[] = [];
+  lastWsWrite: ActorWebSocketWrite | null = null;
+  annotate = false;
+
+  constructor(name: string, page: Page, context: BrowserContext) {
+    this.name = name;
+    this.context = context;
+    this.consoleErrors = [];
+    // Test privacy against delivered payloads, not rendered content.
+    this.received = [];
+    this.attach(page);
+  }
+  attach(page: Page): void {
+    this.page = page;
+    // Capture writes so checks can replay them with changed fields or actors.
+    this.lastWrite = null;
+    this.lastWrites = {};
+    this.writes = [];
+    this.lastWsWrite = null;
+    page.on('dialog', dialog => {
+      void dialog.dismiss().catch(error => {
+        if (page.isClosed()) return;
+        this.consoleErrors.push(`dialog dismiss failed: ${errorMessage(error)}`);
+        if (this.consoleErrors.length > MAX_CONSOLE_ERRORS) this.consoleErrors.shift();
+      });
+    });
+    // A missing client identity in a WebSocket write proves server-derived identity.
+    page.on('websocket', ws => {
+      ws.on('framesent', f => {
+        const p = typeof f.payload === 'string' ? f.payload : '';
+        const m = p.match(/^\d+(\[.*\])$/s);
+        if (!m) return;
+        try {
+          const [event, arg] = JSON.parse(m[1] as string) as unknown[];
+          if (arg && typeof arg === 'object' && !Array.isArray(arg)) {
+            this.lastWsWrite = { event, body: arg as JsonRecord };
+          }
+        } catch { /* not a socket.io event frame */ }
+      });
+      // Binary frames are decoded as UTF-8 too, after any SpacetimeDB frame
+      // compression: a binary wire format still carries message text as
+      // inline UTF-8 bytes, so a substring search finds it without the
+      // harness knowing the encoding.
+      ws.on('framereceived', f => this.record(f.payload));
+    });
+    page.on('request', req => {
+      if (req.method() === 'GET' || req.method() === 'OPTIONS') return;
+      const url = req.url();
+      if (!WRITE_URL_RE.test(url)) return;
+      let body: JsonRecord | null = null;
+      try {
+        const candidate: unknown = JSON.parse(req.postData() ?? '');
+        if (candidate && typeof candidate === 'object' && !Array.isArray(candidate)) {
+          body = candidate as JsonRecord;
+        }
+      } catch { /* bodyless, e.g. a DELETE */ }
+      // Forging needs a body to tamper with; replaying does not — a privileged
+      // action is often a bare DELETE whose meaning is entirely in the URL.
+      const write = { url, method: req.method(), headers: req.headers(), body };
+      this.writes.push(write);
+      if (this.writes.length > 200) this.writes.shift();
+      if (body && typeof body === 'object') {
+        this.lastWrite = write;
+        this.lastWrites[req.method()] = write;
+      }
+    });
+    page.on('console', m => {
+      if (m.type() !== 'error') return;
+      const text = m.text();
+      // Expected 4xx responses are not application console failures.
+      if (/Failed to load resource.*status of 4\d\d/.test(text)) return;
+      this.consoleErrors.push(text.slice(0, 200));
+      if (this.consoleErrors.length > MAX_CONSOLE_ERRORS) this.consoleErrors.shift();
+    });
+    page.on('pageerror', e => {
+      this.consoleErrors.push(`pageerror: ${e.message.slice(0, 200)}`);
+      if (this.consoleErrors.length > MAX_CONSOLE_ERRORS) this.consoleErrors.shift();
+    });
+    page.on('response', async res => {
+      const type = res.headers()['content-type'] ?? '';
+      // Data only. Scripts and markup are served as text/* too, and a Vite
+      // bundle would bury the buffer in megabytes of application source.
+      if (!/(application\/json|application\/x-ndjson|text\/event-stream|text\/plain)/.test(type)) return;
+      const length = Number(res.headers()['content-length']);
+      if (Number.isFinite(length) && length > MAX_RECEIVED_BYTES) {
+        this.receivedOverflow = true;
+        return;
+      }
+      try { this.record(await res.text()); } catch { /* body gone, or page closed */ }
+    });
+  }
+  record(payload: string | Buffer): void {
+    const text = transportFrameText(payload);
+    if (!text) return;
+    const chunk = text.slice(0, 200_000);
+    this.received.push(chunk);
+    this.receivedBytes += Buffer.byteLength(chunk);
+    while (this.receivedBytes > MAX_RECEIVED_BYTES && this.received.length > 1) {
+      this.receivedOverflow = true;
+      this.receivedBytes -= Buffer.byteLength(this.received.shift()!);
+    }
+  }
+  wasSent(needle: string): boolean {
+    if (this.received.some(chunk => chunk.includes(needle))) return true;
+    if (this.receivedOverflow) throw new Error('transport evidence exceeded its memory limit');
+    return false;
+  }
+  loc(testid: string, { contains, scope }:
+    { contains?: string; scope?: { testid: string; contains?: string } } = {}) {
+    // `scope` narrows the search to inside a specific container (e.g. the badge
+    // belonging to ONE room), so a stale element elsewhere can't satisfy it.
+    const root = scope
+      ? this.page.locator(tid(scope.testid), { hasText: scope.contains }).filter({ visible: true }).first()
+      : this.page;
+    return (contains
+      ? root.locator(tid(testid), { hasText: contains })
+      : root.locator(tid(testid))).filter({ visible: true }).first();
+  }
+}
+
+// Expand scenario aliases to the run-scoped values used by the app.
+const expand = (s: unknown, ctx: GradeRunContext): unknown =>
+  typeof s === 'string'
+    ? s.replace(/\{room:([^}]+)\}/g, (_, b) => ctx.roomName(b))
+       // Keep generated usernames alphanumeric so ordinary validators accept them.
+       .replace(/\{user:([^}]+)\}/g, (_, n) => `${n}${ctx.scope}`)
+    : s;
+
+
+// Put test context in recordings without exposing it to scoped app selectors.
+
+const OVERLAY_ID = '__stackbench_overlay';
+
+async function annotate(actor: Actor | undefined, { feature, criterion, step, status }:
+  { feature?: string; criterion?: string; step?: string; status?: 'fail' | 'pass' } = {}): Promise<void> {
+  if (!actor?.annotate) return;
+  await actor.page.evaluate(({ id, feature, criterion, step, status, who }) => {
+    let el = document.getElementById(id);
+    if (!el) {
+      el = document.createElement('div');
+      el.id = id;
+      el.style.cssText = [
+        'position:fixed', 'inset:0 0 auto 0', 'z-index:2147483647',
+        'font:12px/1.5 ui-monospace,SFMono-Regular,Menlo,monospace',
+        'padding:6px 10px', 'pointer-events:none', 'white-space:pre',
+        'background:rgba(12,12,16,.92)', 'color:#e8e8ef',
+        'border-bottom:2px solid #4c8dff',
+      ].join(';');
+      document.documentElement.appendChild(el);
+    }
+    const colour = status === 'fail' ? '#ff5c5c' : status === 'pass' ? '#3ddc84' : '#4c8dff';
+    el.style.borderBottomColor = colour;
+    el.textContent = [
+      `${who}   ${feature ?? ''}`,
+      criterion ? `  ${status === 'fail' ? 'FAILED' : 'checking'}: ${criterion}` : '',
+      step ? `  > ${step}` : '',
+    ].filter(Boolean).join(String.fromCharCode(10));
+  }, { id: OVERLAY_ID, feature, criterion, step, status, who: actor.name }).catch(() => {});
+}
+
+// Step execution
+
+function abortableSleep(ms: number, signal: AbortSignal | null = null): Promise<void> {
+  if (signal?.aborted) return Promise.reject(signal.reason ?? new Error('action cancelled'));
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(done, ms);
+    function done() {
+      signal?.removeEventListener('abort', cancelled);
+      resolve();
+    }
+    function cancelled() {
+      clearTimeout(timer);
+      signal?.removeEventListener('abort', cancelled);
+      reject(signal?.reason ?? new Error('action cancelled'));
+    }
+    signal?.addEventListener('abort', cancelled, { once: true });
+  });
+}
+
+function browserActionCapabilities(actors: Map<string, Actor>, ctx: GradeRunContext): Readonly<Record<string, unknown>> {
+  const defaultWithin = ctx.defaultWithin ?? DEFAULT_WITHIN;
+  const actorAccess = Object.freeze({ get: (name: string) => actors.get(name) });
+  const runtimeValues = Object.freeze({
+    defaultWithin,
+    expand: (value: unknown) => expand(value, ctx),
+    hyphenatedScopedUser: (name: string) => `${name}-${ctx.scope}`,
+    roomName: (base: string) => ctx.roomName(base),
+    scopedUser: (name: string) => `${name}${ctx.scope}`,
+    recorded: Object.freeze({
+      get: (key: string) => ctx.recorded?.[key],
+      set: (key: string, value: unknown) => { (ctx.recorded ??= {})[key] = value; },
+    }),
+    sleep: abortableSleep,
+    testId: tid,
+    clients: Object.freeze({
+      async open(actor: Actor, settleMs: number, signal: AbortSignal) {
+        const fresh = await actor.context.newPage();
+        fresh.setDefaultTimeout(defaultWithin);
+        actor.attach(fresh);
+        await fresh.goto(ctx.url, { waitUntil: 'domcontentloaded', timeout: 20000 });
+        await abortableSleep(settleMs, signal);
+      },
+      async fresh(actor: Actor, sourceName: string) {
+        const browser = actor.page.context().browser();
+        if (!browser) throw new Error('actor browser is unavailable');
+        const context = await browser.newContext();
+        const fresh = await context.newPage();
+        const name = `${sourceName}-fresh`;
+        // Register teardown ownership before navigation. If goto fails, the
+        // partially opened context must still be closed with the feature.
+        ctx.extraContexts?.push({ context, name, page: fresh });
+        fresh.setDefaultTimeout(defaultWithin);
+        const observer = new Actor(`${actor.name}-fresh`, fresh, context);
+        await fresh.goto(ctx.url, { waitUntil: 'domcontentloaded', timeout: 20000 });
+        observer.annotate = actor.annotate;
+        actors.set(name, observer);
+        return name;
+      },
+    }),
+  });
+  const transportObservation = Object.freeze({
+    defaultWithin,
+    expand: (value: unknown) => expand(value, ctx),
+    sleep: abortableSleep,
+    verification: Object.freeze({
+      structural(message: string) {
+        ctx.verified?.push(message);
+        ctx.serverCheck = ctx.serverCheck ?? 'structural';
+      },
+      unverified(message: string) {
+        (ctx.unverified ??= []).push(message);
+        ctx.serverCheck = 'unverified';
+      },
+      verified(message: string) {
+        ctx.verified?.push(message);
+        ctx.serverCheck = 'verified';
+      },
+    }),
+  });
+  const namedActions = createNamedActionsCapability({
+    actions: ctx.actions,
+    backend: ctx.backend!,
+    url: ctx.url,
+    spacetime: ctx.spacetime,
+    lastCalls: Object.freeze({
+      get: () => ctx.lastCalls ?? null,
+      set: value => { ctx.lastCalls = value; },
+    }),
+    sleep: abortableSleep,
+  });
+  const concurrency = Object.freeze({
+    defaultWithin,
+    dispatch: (step: CompiledStep, signal: AbortSignal) => runRegisteredAction(step, actors, ctx, signal),
+    expand: (value: unknown) => expand(value, ctx),
+    sleep: abortableSleep,
+    testId: tid,
+  });
+  return Object.freeze({
+    actors: actorAccess,
+    'application-files': Object.freeze({ root: ctx.appDir ?? null, expand: (value: unknown) => expand(value, ctx) }),
+    'application-lifecycle': applicationLifecycle(ctx),
+    'backend-lifecycle': createLifecycleCapability({
+      restartSpec: ctx.restartSpec,
+      target: 'backend-runtime',
+      control: controlBackendRuntime,
+      sleep: abortableSleep,
+    }),
+    'browser-interaction': runtimeValues,
+    'browser-observation': runtimeValues,
+    clock: Object.freeze({ sleep: abortableSleep }),
+    concurrency,
+    'database-write': createDatabaseWriteCapability({
+      backend: ctx.backend,
+      spacetime: ctx.spacetime,
+      databaseLease: ctx.databaseLease,
+      skip: ctx.nullControl,
+      expand: (value: string) => String(expand(value, ctx)),
+    }),
+    'named-actions': namedActions,
+    subprocess: Object.freeze({ sleep: abortableSleep }),
+    'transport-observation': transportObservation,
+  });
+}
+
+function applicationLifecycle(ctx: GradeRunContext) {
+  return createLifecycleCapability({
+    restartSpec: ctx.restartSpec,
+    target: 'app-server',
+    control: controlAppServer,
+    sleep: abortableSleep,
+    onOperated: mode => { ctx.applicationStopped = mode === 'stop'; },
+  });
+}
+
+async function runRegisteredAction(step: CompiledStep, actors: Map<string, Actor>, ctx: GradeRunContext,
+  signal: AbortSignal | null = null): Promise<unknown> {
+  const actionEvidence = await executeAction(ACTION_REGISTRY, step.do, step,
+    {
+      capabilities: browserActionCapabilities(actors, ctx),
+      signal,
+    });
+  ctx.actionEvidence?.push({ actor: step.actor ?? null, evidence: actionEvidence });
+  if (actionEvidence.status === 'passed') return actionEvidence.observation;
+  const error = new Error(actionEvidence.summary ?? `${step.do} did not complete`);
+  Object.defineProperty(error, 'actionEvidence', { value: actionEvidence });
+  Object.defineProperty(error, 'actionActor', { value: step.actor ?? null });
+  throw error;
+}
+
+function classifyCheckFailure(error: unknown, fallbackActor: string | null = null): CheckFailure {
+  const actionError = actionFailure(error);
+  const actionEvidence = actionError?.actionEvidence;
+  if (actionEvidence) {
+    return {
+      status: actionEvidence.status,
+      code: actionEvidence.code,
+      actor: actionError?.actionActor ?? fallbackActor,
+      summary: actionEvidence.summary ?? `${actionEvidence.action.id} did not complete`,
+      finding: actionEvidence.finding,
+      observation: actionEvidence.observation,
+      expected: actionEvidence.expected,
+      retryable: actionEvidence.retryable,
+    };
+  }
+  if (error instanceof ApplicationNotRestored) {
+    return { status: 'harness_failure', code: 'application_not_restored', actor: fallbackActor,
+      summary: error.message, finding: null, observation: null, expected: null, retryable: false };
+  }
+  const processFailure = harnessProcessFailure(error);
+  if (processFailure) return { status: 'harness_failure', code: 'process_failure', actor: fallbackActor,
+    summary: processFailure, finding: null, observation: null, expected: null, retryable: false };
+  const browserFailure = harnessBrowserFailure(error);
+  if (browserFailure) return { status: 'harness_failure', code: 'browser_failure', actor: fallbackActor,
+    summary: browserFailure, finding: null, observation: null, expected: null, retryable: false };
+  if (error instanceof ActionApplicationFailure) {
+    return { status: 'failed', code: 'application_failure', actor: fallbackActor,
+      summary: error.message, finding: isFinding(error.details.finding) ? error.details.finding : null,
+      observation: error.details.observation ?? null,
+      expected: error.details.expected ?? null, retryable: false };
+  }
+  return { status: 'harness_failure', code: 'unclassified_exception', actor: fallbackActor,
+    summary: errorMessage(error ?? 'unknown grader failure'),
+    finding: null, observation: null, expected: null, retryable: false };
+}
+
+function buildCheckEvidence({ ctx, phase, startedAtMs, failure = null, actor = null, summary = null,
+  attachments = [], actions = ctx.actionEvidence ?? [], sensitivity = null }: {
+    ctx: GradeRunContext; phase: CheckEvidencePhase; startedAtMs: number; failure?: unknown;
+    actor?: string | null; summary?: string | null; attachments?: Array<string | CheckEvidenceAttachment>;
+    actions?: Array<{ actor: string | null; evidence: ActionEvidence }>;
+    sensitivity?: readonly string[] | null;
+  }): CheckEvidence {
+  const classified: CheckFailure = failure ? classifyCheckFailure(failure, actor) : {
+    status: 'passed', code: 'completed', actor: null, summary: null, finding: null,
+    observation: null, expected: null, retryable: false,
+  };
+  const completedAtMs = Math.max(startedAtMs, evidenceNowMs());
+  const evidenceSummary = summary ?? classified.summary;
+  return createCheckEvidence({
+    ...classified,
+    phase,
+    summary: evidenceSummary == null ? null : keepReason(evidenceSummary),
+    startedAtMs,
+    completedAtMs,
+    actions,
+    attachments: attachments.map(attachment => typeof attachment === 'string'
+      ? { kind: 'screenshot', ref: basename(attachment) } : attachment),
+    sensitivity: sensitivity ?? actions.flatMap(entry => entry.evidence?.sensitivity ?? []),
+  });
+}
+
+async function runStep(step: CompiledStep, actors: Map<string, Actor>, ctx: GradeRunContext): Promise<unknown> {
+  return runRegisteredAction(step, actors, ctx);
+}
+
+export async function closeActorContexts(entries: readonly CleanupActorContextEntry[], {
+  trace = false, media = null, slug = 'grade',
+}: { trace?: boolean; media?: string | null; slug?: string } = {}): Promise<GradeCleanupFailure[]> {
+  const failures: GradeCleanupFailure[] = [];
+  const record = (name: string, stage: string, error: unknown): void => { failures.push({
+    actor: name,
+    stage,
+    reason: keepReason(errorMessage(error)),
+  }); };
+  for (const { context, name, page } of entries) {
+    if (trace) {
+      try {
+        await context.tracing.stop({ path: join(media ?? '.', `${slug}-${name}.trace.zip`) });
+      } catch (error) { record(name, 'trace', error); }
+    }
+    let video = null;
+    if (media && page) {
+      try { video = page.video(); }
+      catch (error) { record(name, 'video-handle', error); }
+    }
+    try { await context.close(); }
+    catch (error) { record(name, 'context-close', error); }
+    if (video) {
+      try { await video.saveAs(join(media!, `${slug}-${name}.webm`)); }
+      catch (error) { record(name, 'video-save', error); }
+      try { await video.delete(); }
+      catch (error) { record(name, 'video-delete', error); }
+    }
+  }
+  return failures;
+}
+
+// Feature grading
+
+function completedFeatureResult(result: FeatureResult): CompletedGradeFeatureResult {
+  if (!result.setupEvidence) {
+    throw new Error(`feature ${result.id} completed without setup evidence`);
+  }
+  return { ...result, setupEvidence: result.setupEvidence };
+}
+
+async function gradeFeature(browser: Browser, feature: CompiledFeature, args: GradeArgs,
+  runCtx: GradeRunContext): Promise<CompletedGradeFeatureResult> {
+  // Features share the app's DATABASE even though each gets fresh browser
+  // contexts, so user and room names are scoped per feature — otherwise a
+  // defect in one feature (e.g. a hijacked account) corrupts later setups.
+  const scope = `${runCtx.runId}f${feature.id}`;
+  const extraContexts: ActorContextEntry[] = [];
+  const ctx: GradeRunContext = { ...runCtx, scope, roomName: (base: string) => `${base}-${scope}`, extraContexts, recorded: {},
+    unverified: [], verified: [], actionEvidence: [] };
+  const actors = new Map();
+  const contexts: ActorContextEntry[] = [];
+  const slug = `${args.label ?? 'run'}-f${feature.id}`;
+
+  // A feature is worth what its criteria are worth. An explicit `max` is only
+  // a consistency check enforced by check-scenarios, never a top-up.
+  const featureMax = feature.criteria.reduce((n, c) => n + (c.points ?? 1), 0);
+  const result: FeatureResult = {
+    id: feature.id, name: feature.name, score: 0, max: featureMax,
+    criteria: [], consoleErrors: [],
+  };
+  const restoreFailures: GradeCleanupFailure[] = [];
+  const closeAll = async () => {
+    const failures = [...restoreFailures, ...await closeActorContexts([...contexts, ...extraContexts], {
+      trace: args.trace, media: args.media, slug,
+    })];
+    if (failures.length) result.cleanupEvidence = { status: 'harness_failure', failures };
+    return failures;
+  };
+  // A criterion that stops the application server owns it only for its own
+  // steps. Whatever the outcome, the server is running again before the next
+  // criterion; a restore the harness cannot complete is the harness's failure
+  // and every later criterion in the feature is unmeasured, not failed.
+  const restoreApplicationServer = async () => {
+    if (!ctx.applicationStopped || restoreFailures.length) return;
+    try {
+      await applicationLifecycle(ctx)
+        .operate('start', APPLICATION_RESTORE_SETTLE_MS, AbortSignal.timeout(APPLICATION_RESTORE_TIMEOUT_MS));
+    } catch (error) {
+      restoreFailures.push({ actor: null, stage: 'application-restore',
+        reason: keepReason(errorMessage(error)) });
+    }
+  };
+  const initializationStartedAtMs = evidenceNowMs();
+  try {
+    for (const name of feature.actors!) {
+      // Isolated storage per actor. Video is per-context, so each actor gets its
+      // own recording — you can watch what every participant saw, side by side.
+      const context = await runBrowserInfrastructureOperation('context creation', () =>
+        browser.newContext(
+          args.media ? { recordVideo: { dir: args.media, size: { width: 1280, height: 800 } } } : {}
+        ));
+      contexts.push({ context, name, page: null });
+      if (args.trace) {
+        await runBrowserInfrastructureOperation('trace start', () =>
+          context.tracing.start({ screenshots: true, snapshots: true }));
+      }
+      const page = await runBrowserInfrastructureOperation('page creation', () => context.newPage());
+      contexts[contexts.length - 1]!.page = page;
+      page.setDefaultTimeout(SETUP_WITHIN);
+      const actor = new Actor(name, page, context);
+      actor.annotate = Boolean(args.media);
+      actors.set(name, actor);
+      try {
+        await page.goto(args.url!, { waitUntil: 'domcontentloaded', timeout: 20000 });
+      } catch (cause) {
+        if (harnessBrowserFailure(cause)) throw cause;
+        throw new ActionApplicationFailure('application did not load during browser setup', {
+          observation: errorMessage(cause), expected: 'a reachable application page',
+        });
+      }
+    }
+  } catch (error) {
+    const classified = classifyCheckFailure(error);
+    const reason = keepReason((classified.summary ?? '').trim());
+    result.setupEvidence = buildCheckEvidence({ ctx, phase: 'setup', startedAtMs: initializationStartedAtMs,
+      failure: error, summary: reason });
+    for (const criterion of feature.criteria) {
+      const points = criterion.points ?? 1;
+      const evidence = buildCheckEvidence({ ctx, phase: 'setup', startedAtMs: initializationStartedAtMs,
+        failure: error, summary: `browser setup failed: ${reason}`, actions: [] });
+      result.criteria.push({ id: criterion.id, desc: criterion.desc, points, evidence,
+        ...authored(criterion) });
+      result.inconclusive = [...(result.inconclusive ?? []),
+        { id: criterion.id, points, status: evidence.status, code: evidence.code,
+          phase: evidence.phase, summary: evidence.summary }];
+    }
+    await closeAll();
+    return completedFeatureResult(result);
+  }
+
+  const captureFailureScreenshots = async (label: string): Promise<string[]> => {
+    if (!args.failureMedia) return [];
+    mkdirSync(args.failureMedia, { recursive: true });
+    const captured: string[] = [];
+    for (const { name, page } of [...contexts, ...extraContexts]) {
+      if (!page) continue;
+      const path = join(args.failureMedia, `${slug}-${label}-${name}.png`);
+      const ok = await page.screenshot({ path, fullPage: true, timeout: 5000 })
+        .then(() => true, () => false);
+      if (ok) captured.push(path);
+    }
+    return captured;
+  };
+
+  const setupStartedAtMs = evidenceNowMs();
+  ctx.defaultWithin = SETUP_WITHIN;
+  ctx.actionEvidence = [];
+  try {
+    // Setup is not scored, but a failure makes the feature untestable (0).
+    for (const step of feature.setup) {
+      await annotate(actors.get(step.actor), { feature: feature.name, criterion: 'setup', step: step.do });
+      await runStep(step, actors, ctx);
+    }
+  } catch (err) {
+    // Preserve the typed setup failure on every affected criterion.
+    const classified = classifyCheckFailure(err);
+    const why = keepReason((classified.summary ?? '').trim());
+    const screenshots = await captureFailureScreenshots('setup');
+    result.setupEvidence = buildCheckEvidence({ ctx, phase: 'setup', startedAtMs: setupStartedAtMs,
+      failure: err, summary: why, attachments: screenshots });
+    for (const c of feature.criteria) {
+      const base = why ? `setup failed: ${why}` : 'setup failed';
+      const points = c.points ?? 1;
+      const evidence = buildCheckEvidence({ ctx, phase: 'setup', startedAtMs: setupStartedAtMs,
+        failure: err, summary: base, actions: [], sensitivity: result.setupEvidence.sensitivity,
+        attachments: [{ kind: 'check-evidence', ref: 'feature.setupEvidence' }, ...screenshots] });
+      const recorded = { id: c.id, desc: c.desc, points, evidence, ...authored(c) };
+      result.criteria.push(recorded);
+      if (!evidenceIsMeasured(evidence)) {
+        result.inconclusive = [...(result.inconclusive ?? []),
+          { id: c.id, points, status: evidence.status, code: evidence.code,
+            phase: evidence.phase, summary: evidence.summary }];
+      }
+    }
+    if (screenshots.length) result.screenshots = screenshots;
+    await closeAll();
+    return completedFeatureResult(result);
+  }
+  result.setupEvidence = buildCheckEvidence({ ctx, phase: 'setup', startedAtMs: setupStartedAtMs });
+  ctx.defaultWithin = DEFAULT_WITHIN;
+  for (const actor of actors.values()) actor.page.setDefaultTimeout(DEFAULT_WITHIN);
+
+  for (const criterion of feature.criteria) {
+    let failure: unknown = null, detail: string | null = null, activeActor: string | null = null;
+    let criterionScreenshots: string[] = [];
+    const criterionStartedAtMs = evidenceNowMs();
+    ctx.actionEvidence = [];
+    ctx.serverCheck = null;
+    try {
+      if (restoreFailures.length) throw new ApplicationNotRestored(restoreFailures[0]!.reason);
+      for (const step of criterion.steps) {
+        activeActor = step.actor ?? activeActor;
+        await annotate(actors.get(step.actor) ?? actors.values().next().value,
+          { feature: feature.name, criterion: criterion.id, step: step.do });
+        await runStep(step, actors, ctx);
+      }
+      for (const a of actors.values()) {
+        await annotate(a, { feature: feature.name, criterion: criterion.id, step: 'passed', status: 'pass' });
+      }
+    } catch (err) {
+      failure = err;
+      const classified = classifyCheckFailure(err, activeActor);
+      detail = classified.summary;
+      if (args.media) {
+        for (const a of actors.values()) {
+          await annotate(a, { feature: feature.name, criterion: criterion.id,
+            step: errorMessage(err).slice(0, 120), status: 'fail' });
+        }
+        const shotActor = actors.get(criterion.steps[criterion.steps.length - 1]?.actor) ?? actors.values().next().value;
+        const shot = join(args.media, `${slug}-${criterion.id}.png`);
+        const captured = await shotActor.page.screenshot({ path: shot, fullPage: true })
+          .then(() => true, () => false);
+        if (captured) criterionScreenshots.push(shot);
+      } else {
+        criterionScreenshots = await captureFailureScreenshots(criterion.id);
+      }
+      if (criterionScreenshots.length) {
+        result.screenshots = [...(result.screenshots ?? []), ...criterionScreenshots];
+      }
+    }
+    await restoreApplicationServer();
+    const evidence = buildCheckEvidence({ ctx, phase: 'assertion', startedAtMs: criterionStartedAtMs,
+      failure, actor: activeActor, summary: detail, attachments: criterionScreenshots });
+    result.criteria.push({ id: criterion.id, desc: criterion.desc, points: criterion.points,
+      evidence, ...authored(criterion),
+      ...(ctx.serverCheck ? { serverCheck: ctx.serverCheck } : {}) });
+    if (evidencePassed(evidence)) result.score += criterion.points;
+    else if (!evidenceIsMeasured(evidence)) {
+      result.inconclusive = [...(result.inconclusive ?? []),
+        { id: criterion.id, points: criterion.points, status: evidence.status, code: evidence.code,
+          phase: evidence.phase, summary: evidence.summary }];
+    }
+  }
+
+  for (const actor of actors.values()) {
+    for (const e of actor.consoleErrors) result.consoleErrors.push(`[${actor.name}] ${e}`);
+  }
+
+  // Retain diagnostics for server-side checks that could not execute. The
+  // action executor marks those criteria inconclusive, so they cannot score.
+  if (ctx.unverified?.length) result.unverified = ctx.unverified;
+  if (ctx.verified?.length) result.verified = ctx.verified;
+
+  await closeAll();
+  if (args.media) result.videos = contexts.map(c => join(args.media!, `${slug}-${c.name}.webm`));
+  return completedFeatureResult(result);
+}
+
+// Main
+
+async function main(): Promise<void> {
+  const startedAt = new Date().toISOString();
+  const args = parseGradeArgs(process.argv);
+  const specPath = args.spec!;
+  let spec: CompiledScenarioDefinition;
+  try {
+    const compiled = compileScenarioDefinition(JSON.parse(readFileSync(specPath, 'utf8')),
+      { source: specPath });
+    spec = materializeScenarioCredentials(compiled, args.credentialAliases);
+  } catch (error) {
+    throw new Error(`cannot compile scenario ${specPath}: ${errorMessage(error)}`, { cause: error });
+  }
+
+  if (typeof spec.writeUrlPattern === 'string' && spec.writeUrlPattern) {
+    WRITE_URL_RE = new RegExp(spec.writeUrlPattern);
+  }
+
+  const candidateFeatures = args.feature ? spec.features.filter(f => f.id === args.feature) : spec.features;
+  if (args.feature && candidateFeatures.length === 0) {
+    throw new Error(`scenario ${specPath} has no feature ${args.feature}`);
+  }
+  const runId = uniq();
+  // Where the named actions live. The track declares their names; the
+  // authenticated backend lease—not generated application config—selects the
+  // SpacetimeDB host, module and exact build container used for direct SQL.
+  let actions: TrackAction[] = [], spacetime: LeasedSpacetimeTarget | null = null,
+    recipeRelease: RecipeGradeRelease | null = null,
+    recipeIdentityRelease: RecipeRelease | null = null,
+    calibration: ReturnType<typeof resolveCalibrationForRelease> | null = null;
+  if (args.track) {
+    const track = loadTrack(args.track);
+    actions = track.actions;
+    const binding = resolveGradeRecipeArtifactBinding(track, args.level, specPath,
+      args.feature ?? null, args.recipe);
+    recipeRelease = binding?.release ?? null;
+    recipeIdentityRelease = binding?.sourceRelease ?? null;
+  }
+  if (args.expectedRecipeSha256
+    && recipeRelease?.contentSha256 !== args.expectedRecipeSha256) {
+    throw new Error(`recipe changed before grading: expected ${args.expectedRecipeSha256}, ` +
+      `resolved ${recipeRelease?.contentSha256 ?? 'no recipe'}`);
+  }
+  const selectedScenario = selectScenarioChecks(
+    { ...spec, features: candidateFeatures }, recipeRelease, args.selectedCheckKeys);
+  const features = selectedScenario.features;
+  const selectedChecks = selectedScenario.checks;
+  if (!features.length) throw new Error(`scenario ${specPath} has no selected checks`);
+  if (args.track) {
+    const track = loadTrack(args.track);
+    calibration = resolveCalibrationForRelease(recipeIdentityRelease, {
+      trackRoot: track.dir,
+      stackBenchRoot: ROOT,
+    });
+  }
+  spacetime = args.backend
+    ? STACK_ADAPTER_REGISTRY.get(args.backend).grading.context({ requireBuildContainer: true })
+    : null;
+  const hostedBackend = args.backend === 'mongodb' || args.backend === 'postgres';
+  const hasLeaseAuthority = Boolean(process.env.STACK_BENCH_LEASE
+    || process.env.STACK_BENCH_LEASE_TOKEN);
+  let databaseLease: DatabaseWriteLease | null = null;
+  if (hostedBackend && hasLeaseAuthority) {
+    const lease = leaseFromEnv(process.env, { backend: args.backend, active: true }).lease;
+    const { container, database } = lease.resources;
+    if (!container || !database) {
+      throw new Error(`active ${args.backend} lease has no complete database identity`);
+    }
+    databaseLease = { resources: { container, database } };
+  }
+
+  const ctx: GradeRunContext = { runId, roomName: (base: string) => `${base}-${runId}`,
+    restartSpec: args.restartSpec, url: args.url!,
+    backend: args.backend, actions, spacetime, dbName: args.dbName,
+    databaseLease,
+    nullControl: args.nullControl,
+    appDir: args.app };
+
+  const browser = args.browserWsEndpoint
+    ? await chromium.connect(args.browserWsEndpoint)
+    : await chromium.launch({ headless: !args.headed });
+  const report: JsonRecord & CompletedGradeReport & {
+    inconclusive?: Array<JsonRecord>;
+    cleanupEvidence?: { status: 'harness_failure'; failures: GradeCleanupFailure[] };
+  } = {
+    definitionSchemaVersion: spec.schemaVersion,
+    recipeRelease,
+    label: args.label ?? null, url: args.url, level: args.level, runId,
+    total: 0, max: features.reduce((n, f) => n + f.criteria.reduce((m, c) => m + (c.points ?? 1), 0), 0), features: [],
+    selection: recipeRelease ? {
+      ...(args.selectionSha256 ? { sha256: args.selectionSha256 } : {}),
+      checks: selectedChecks.map(({ stableKey, packId, checkGroupId, featureId, criterionId,
+        description, points }) => {
+        if (!packId) throw new Error(`selected check ${stableKey} has no pack id`);
+        return { stableKey, packId, checkGroupId, featureId, criterionId, description, points };
+      }),
+    } : null,
+  };
+  const checkByCriterion = new Map<string, RecipeCheck>(selectedChecks.map(check => [
+    `${String(check.featureId)}\0${String(check.criterionId)}`, check,
+  ]));
+
+  try {
+    for (const feature of features) {
+      process.stdout.write(`Feature ${feature.id}: ${feature.name} ... `);
+      const r = await gradeFeature(browser, feature, args, ctx);
+      if (recipeRelease) {
+        for (const criterion of r.criteria) {
+          const check = checkByCriterion.get(`${String(feature.id)}\0${String(criterion.id)}`);
+          if (!check) throw new Error(`graded criterion ${feature.id}/${criterion.id} has no recipe check`);
+          criterion.stableKey = check.stableKey;
+        }
+      }
+      report.features.push(r);
+      report.total += r.score;
+      // The recipe owns the denominator. An unmeasured criterion earns zero and
+      // remains explicitly inconclusive; it must never change the contract.
+      if (r.inconclusive?.length) {
+        report.inconclusive = [...(report.inconclusive ?? []),
+          ...r.inconclusive.map(c => ({ feature: r.id, ...c }))];
+      }
+      console.log(`${r.score}/${r.max}`);
+      for (const c of r.criteria.filter(c => !evidencePassed(c.evidence))) {
+        console.log(`    ${renderEvidenceConsoleLine(c.evidence, c.id)}`);
+      }
+    }
+  } finally {
+    try { await browser.close(); }
+    catch (error) {
+      report.cleanupEvidence = { status: 'harness_failure', failures: [{
+        actor: null, stage: 'browser-close', reason: keepReason(errorMessage(error)),
+      }] };
+    }
+  }
+
+  if (recipeRelease) report.packRuntime = measureGradePackRuntime(report);
+
+  console.log(`\nTOTAL ${report.total}/${report.max}`);
+  if (args.out) {
+    const artifactId = `grade-${runId}`;
+    writeArtifact(args.out, {
+      kind: 'grade',
+      id: artifactId,
+      attempt: { id: artifactId, parentId: args.parentAttemptId ?? null },
+      timestamps: { startedAt, completedAt: new Date().toISOString() },
+      identities: recipeArtifactIdentities(recipeIdentityRelease, {
+        calibration: calibration ? { id: calibration.id, version: calibration.version,
+          sha256: calibration.contentSha256, state: calibration.state } : null,
+        stackAdapter: args.backend ? { id: args.backend } : null,
+      }),
+      payload: report,
+    });
+    console.log(`Report written to ${args.out}`);
+  }
+}
+
+if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) {
+  main().catch(error => {
+    console.error(error instanceof Error ? (error.stack ?? error.message) : String(error));
+    process.exitCode = 2;
+  });
+}
diff --git a/tools/stack-bench/grader/mutation-test.ts b/tools/stack-bench/grader/mutation-test.ts
new file mode 100644
index 00000000000..09479de533e
--- /dev/null
+++ b/tools/stack-bench/grader/mutation-test.ts
@@ -0,0 +1,743 @@
+#!/usr/bin/env node
+// A valid mutation fails only its declared criterion against a passing baseline.
+import {
+  copyFileSync,
+  cpSync,
+  existsSync,
+  mkdtempSync,
+  readFileSync,
+  rmSync,
+  unlinkSync,
+  writeFileSync,
+} from "node:fs";
+import { createHash } from "node:crypto";
+import { dirname, join, relative, resolve, sep } from "node:path";
+import { tmpdir } from "node:os";
+import { fileURLToPath } from "node:url";
+import { execFileSync } from "node:child_process";
+import { parseArgs as parseNodeArgs } from "node:util";
+import { currentEngineIdentity, emptyArtifactIdentities, readArtifactPayload,
+  writeRunJson } from "../src/evidence/artifacts.js";
+import { controlBackendRuntime, parseRuntimeControlSpec } from "../src/runtime/backend-control.js";
+import type { RuntimeControlSpec } from "../src/runtime/backend-control.js";
+import {
+  classifyMutationResult,
+  groupMutationsByScenario,
+  isRetryableMutationBaseline,
+  isRetryableMutationResult,
+  mutationFileEdits,
+  mutationTargetKeys,
+  readMutationManifest,
+  releaseScenarioCheckKeys,
+  resolveMutationScenarioPath,
+  reusableMutationBaseline,
+  resolveMutationFile,
+  validateMutationBaseline,
+  validateMutationDefinitions,
+} from "../src/evidence/mutation-analysis.js";
+import { dbName, loadTrack, TRACK_MANIFEST_FILE } from "../src/composition/tracks.js";
+import { resolveRecipeRelease } from "../src/composition/recipe-release.js";
+import { resetBackend } from "../src/stacks/backend-reset.js";
+import { STACK_ADAPTER_REGISTRY } from "../src/stacks/stack-adapters.js";
+import { mutationShard } from "../src/evidence/mutation-shards.js";
+import { reusableMutationEvidence } from "../src/evidence/mutation-checkpoint.js";
+import { MUTATION_GRADE_MAX_TIMEOUT_MS, mutationGradeTimeoutMs }
+  from "../src/evidence/mutation-control.js";
+import { assertAppSourceIdentity } from "../src/runtime/source-snapshot.js";
+import type { TextCommandExecutor } from '../src/runtime/command-executor.js';
+import type { LoadedMutationManifest, MutationDefinition } from '../src/evidence/mutation-analysis.js';
+import type { MutationCheckpointBaseline, MutationCheckpointIdentity,
+  MutationCheckpointResult } from '../src/evidence/mutation-checkpoint.js';
+
+type JsonRecord = Record<string, unknown>;
+type MutationSpec = LoadedMutationManifest;
+type MutationArgs = {
+  app?: string; url?: string; mutations?: string; level?: string; spec?: string; backend?: string;
+  track?: string; recipe?: string; selectedCheckKeys?: string[]; dbName?: string; runIndex?: string;
+  restartSpec?: RuntimeControlSpec; out?: string; parentAttemptId?: string;
+  mutationShardIndex?: number; mutationShardCount?: number; resumeFrom?: string; checkpointOut?: string;
+  baselineBundle?: string; expectedCalibrationIdentity?: JsonRecord; maxRuntimeMinutes?: number;
+  imageId?: string; mutationAttemptId?: string; expectedRecipeSha256?: string;
+  reseedOnReset?: boolean;
+};
+type ParsedMutationArgs = MutationArgs & {
+  app: string;
+  url: string;
+  mutations: string;
+  level: string;
+  recipe: string;
+  maxRuntimeMinutes: number;
+  mutationAttemptId: string;
+};
+type GradeReport = { total?: unknown; max?: unknown;
+  features?: Array<{ id?: unknown; score?: unknown;
+    criteria?: Array<{ id?: string; stableKey?: unknown; evidence?: unknown }> }>;
+  [key: string]: unknown };
+type MutationResult = ReturnType<typeof classifyMutationResult> & { id: string; scenario: string; targets: string[] };
+type BaselineEntry = MutationCheckpointBaseline & { total: unknown; max: unknown };
+type MutationFile = { target: string; backup: string; original: string; edits: ReturnType<typeof mutationFileEdits> };
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+function jsonObject(value: unknown, label: string): JsonRecord {
+  if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+    throw new Error(`${label} must be an object`);
+  }
+  return value as JsonRecord;
+}
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const GRADER = join(HERE, "grade.js");
+
+export function parseMutationArgs(argv: readonly string[]): ParsedMutationArgs {
+  const { values } = parseNodeArgs({ args: [...argv.slice(2)], options: {
+    app: { type: 'string' }, url: { type: 'string' }, mutations: { type: 'string' },
+    level: { type: 'string' }, spec: { type: 'string' }, backend: { type: 'string' },
+    track: { type: 'string' }, recipe: { type: 'string' },
+    'selected-check': { type: 'string', multiple: true }, 'db-name': { type: 'string' },
+    'run-index': { type: 'string' },
+    'restart-spec': { type: 'string' }, out: { type: 'string' }, 'parent-attempt-id': { type: 'string' },
+    'mutation-shard-index': { type: 'string' }, 'mutation-shard-count': { type: 'string' },
+    'resume-from': { type: 'string' }, 'checkpoint-out': { type: 'string' },
+    'baseline-bundle': { type: 'string' }, 'expected-calibration-json': { type: 'string' },
+    'max-runtime-minutes': { type: 'string' }, 'image-id': { type: 'string' },
+  } });
+  const a: MutationArgs = { app: values.app, url: values.url, mutations: values.mutations,
+    level: values.level, spec: values.spec, backend: values.backend, track: values.track,
+    recipe: values.recipe, selectedCheckKeys: values['selected-check'], dbName: values['db-name'],
+    runIndex: values['run-index'] ?? '0',
+    restartSpec: values['restart-spec'] === undefined ? undefined
+      : parseRuntimeControlSpec(JSON.parse(values['restart-spec'])),
+    out: values.out, parentAttemptId: values['parent-attempt-id'],
+    mutationShardIndex: values['mutation-shard-index'] === undefined
+      ? undefined : Number(values['mutation-shard-index']),
+    mutationShardCount: values['mutation-shard-count'] === undefined
+      ? undefined : Number(values['mutation-shard-count']),
+    resumeFrom: values['resume-from'] && resolve(values['resume-from']),
+    checkpointOut: values['checkpoint-out'] && resolve(values['checkpoint-out']),
+    baselineBundle: values['baseline-bundle'] && resolve(values['baseline-bundle']),
+    expectedCalibrationIdentity: values['expected-calibration-json'] === undefined
+      ? undefined : JSON.parse(values['expected-calibration-json']) as JsonRecord,
+    maxRuntimeMinutes: values['max-runtime-minutes'] === undefined
+      ? 60 : Number(values['max-runtime-minutes']),
+    imageId: values['image-id'] };
+  if (!a.app || !a.url || !a.mutations || !a.level || !a.recipe) {
+    throw new Error(
+      "Usage: node dist/grader/mutation-test.js --app <dir> --url <url> --mutations <file> "
+        + "--level <N> --recipe <id@version>",
+    );
+  }
+  let url: URL;
+  try { url = new URL(a.url); }
+  catch { throw new Error('--url must be a valid HTTP or HTTPS URL'); }
+  if (url.protocol !== 'http:' && url.protocol !== 'https:') {
+    throw new Error('--url must use HTTP or HTTPS');
+  }
+  if (!Number.isInteger(Number(a.level)) || Number(a.level) < 1) {
+    throw new Error('--level must be a positive integer');
+  }
+  const shardFields = [a.mutationShardIndex, a.mutationShardCount]
+    .filter(value => value !== undefined);
+  if (shardFields.length === 1) {
+    throw new Error('--mutation-shard-index and --mutation-shard-count must be supplied together');
+  }
+  if (a.mutationShardCount !== undefined
+    && (!Number.isInteger(a.mutationShardIndex) || !Number.isInteger(a.mutationShardCount)
+      || a.mutationShardIndex! < 0 || a.mutationShardCount < 1
+      || a.mutationShardIndex! >= a.mutationShardCount)) {
+    throw new Error('--mutation-shard-index must be within the positive shard count');
+  }
+  a.maxRuntimeMinutes ??= 60;
+  if (!Number.isFinite(a.maxRuntimeMinutes) || a.maxRuntimeMinutes < 1
+      || a.maxRuntimeMinutes > 120) {
+    throw new Error('--max-runtime-minutes must be from 1 through 120');
+  }
+  if (a.resumeFrom && !a.checkpointOut) a.checkpointOut = a.resumeFrom;
+  return { ...a, app: a.app, url: a.url, mutations: a.mutations, level: a.level, recipe: a.recipe,
+    maxRuntimeMinutes: a.maxRuntimeMinutes,
+    mutationAttemptId: `mutation-${new Date().toISOString().replace(/[:.]/g, "-")}` };
+}
+
+class MutationBatchDeadlineError extends Error {}
+
+export function remainingMutationBatchMs(deadlineMs: number, nowMs: number = Date.now()): number {
+  const remaining = Math.floor(deadlineMs - nowMs);
+  if (remaining <= 0) throw new MutationBatchDeadlineError('mutation batch deadline reached');
+  return remaining;
+}
+
+// Reset publishes SpacetimeDB source. Hosted stacks restart once to load source
+// and seed the empty database. A separate source-change restart is redundant.
+async function reset(a: MutationArgs, deadlineMs: number | null): Promise<void> {
+  const exec: TextCommandExecutor = deadlineMs === null ? execFileSync : ((file, commandArgs, options) =>
+    execFileSync(file, commandArgs, { ...options,
+      timeout: Math.min(options.timeout, remainingMutationBatchMs(deadlineMs)) }));
+  try {
+    resetBackend({ backend: a.backend!, app: a.app!, exec });
+    const requiresReseed = STACK_ADAPTER_REGISTRY.get(a.backend!).reset.requiresReseed;
+    if (a.reseedOnReset && requiresReseed) {
+      if (!a.restartSpec) {
+        throw new Error(`track ${a.track} requires a lease-authenticated --restart-spec to reseed after reset`);
+      }
+      const signal = deadlineMs === null ? null
+        : AbortSignal.timeout(remainingMutationBatchMs(deadlineMs));
+      await controlBackendRuntime(a.restartSpec, "restart", { signal, exec });
+    }
+  } catch (error) {
+    if (deadlineMs !== null && Date.now() >= deadlineMs) {
+      throw new MutationBatchDeadlineError('mutation batch deadline reached', { cause: error });
+    }
+    throw error;
+  }
+}
+
+function rebuildClientAfterSourceChange(a: MutationArgs, deadlineMs: number): void {
+  const timeout = deadlineMs - Date.now();
+  if (timeout <= 0) throw new MutationBatchDeadlineError();
+  try {
+    execFileSync('npm', ['run', 'build'], {
+      cwd: join(a.app!, 'client'), stdio: 'pipe', timeout,
+    });
+  } catch (cause) {
+    if (Date.now() >= deadlineMs) throw new MutationBatchDeadlineError();
+    throw new Error('client build failed after source change', { cause });
+  }
+}
+
+async function grade(a: MutationArgs, reportPath: string, deadlineMs: number | null = null): Promise<GradeReport> {
+  await reset(a, deadlineMs);
+  if (existsSync(reportPath)) unlinkSync(reportPath);
+  const gradeArgs: string[] = [
+    GRADER,
+    "--url",
+    a.url!,
+    "--level",
+    a.level!,
+    "--out",
+    reportPath,
+    "--spec",
+    a.spec!,
+    "--backend",
+    a.backend!,
+    "--track",
+    a.track!,
+    "--app",
+    a.app!,
+  ];
+  if (a.dbName) gradeArgs.push("--db-name", a.dbName);
+  if (a.restartSpec) gradeArgs.push("--restart-spec", JSON.stringify(a.restartSpec));
+  if (a.mutationAttemptId) gradeArgs.push("--parent-attempt-id", a.mutationAttemptId);
+  if (a.recipe) gradeArgs.push("--recipe", a.recipe);
+  if (a.expectedRecipeSha256) {
+    gradeArgs.push("--expected-recipe-sha256", a.expectedRecipeSha256);
+  }
+  for (const stableKey of a.selectedCheckKeys ?? []) {
+    gradeArgs.push("--selected-check", stableKey);
+  }
+  const timeout = deadlineMs === null
+    ? MUTATION_GRADE_MAX_TIMEOUT_MS
+    : mutationGradeTimeoutMs(deadlineMs);
+  if (timeout === 0) throw new MutationBatchDeadlineError('mutation batch deadline reached');
+  try {
+    execFileSync(process.execPath, gradeArgs, {
+      stdio: "pipe",
+      encoding: "utf8",
+      timeout,
+    });
+  } catch (error) {
+    if (jsonObject(error, 'grader process error').code === 'ETIMEDOUT' && timeout < MUTATION_GRADE_MAX_TIMEOUT_MS) {
+      throw new MutationBatchDeadlineError('mutation grade reached the remaining batch deadline');
+    }
+    throw error;
+  }
+  if (!existsSync(reportPath)) {
+    throw new Error("grader completed without producing its report");
+  }
+  return readArtifactPayload<GradeReport>(reportPath, { expectedKind: "grade" });
+}
+
+let args: ParsedMutationArgs;
+let startedAt: number;
+let startedIso: string;
+const artifactPath = (id: string) =>
+  resolve(args.out ?? join(HERE, "..", "results", `${id}.json`));
+let spec!: MutationSpec;
+
+function sha256(value: string | Buffer): string {
+  return createHash('sha256').update(value).digest('hex');
+}
+
+function scenarioKey(path: string): string {
+  return relative(resolve(HERE, '..'), path).replaceAll('\\', '/');
+}
+
+function checkpointGroup(path: string, mutations: MutationDefinition[], selectedCheckKeys: readonly string[]):
+  MutationCheckpointIdentity['groups'][number] {
+  const scenario = scenarioKey(path);
+  const scenarioSha256 = sha256(readFileSync(path));
+  const mutationSha256 = sha256(JSON.stringify(mutations));
+  const selectionSha256 = sha256(JSON.stringify([...selectedCheckKeys].sort()));
+  return { scenario, scenarioSha256, mutationSha256, selectionSha256,
+    identitySha256: sha256(JSON.stringify({ scenarioSha256, mutationSha256, selectionSha256 })),
+    mutationIds: mutations.map(mutation => mutation.id as string) };
+}
+
+function checkpointIdentity(groups: MutationCheckpointIdentity['groups'], shard: { index: number; count: number;
+  mutationIds: string[] }, track: ReturnType<typeof loadTrack>): MutationCheckpointIdentity {
+  return {
+    schemaVersion: 1,
+    engineSha256: currentEngineIdentity().sha256,
+    recipeSha256: args.expectedRecipeSha256,
+    fixtureSha256: spec.fixtureSha256,
+    calibrationSha256: args.expectedCalibrationIdentity?.sha256 ?? null,
+    imageId: args.imageId ?? null,
+    backend: args.backend,
+    track: args.track,
+    level: Number(args.level),
+    trackSha256: sha256(readFileSync(join(track.dir, TRACK_MANIFEST_FILE))),
+    shard: { index: shard.index, count: shard.count, mutationIds: shard.mutationIds },
+    groups,
+  };
+}
+
+function resumableEvidence(path: string | undefined, identity: MutationCheckpointIdentity):
+  { results: MutationCheckpointResult[]; baselines: MutationCheckpointBaseline[] } {
+  if (!path || !existsSync(path)) return { results: [], baselines: [] };
+  const prior = readArtifactPayload(path, { expectedKind: 'mutation_control' });
+  const { results, baselines } = reusableMutationEvidence(prior, identity);
+  const shard = identity.shard as { mutationIds: string[] };
+  console.log(`Resuming ${results.length}/${shard.mutationIds.length} completed mutations from ${path}`);
+  return { results, baselines };
+}
+
+function recordHarnessFailure(error: unknown): void {
+  const generatedAt = new Date().toISOString();
+  const id = args.mutationAttemptId;
+  const artifact = {
+    id,
+    kind: "mutation_control",
+    startedAt: startedIso,
+    completedAt: generatedAt,
+    parentAttemptId: args.parentAttemptId ?? null,
+    identities: emptyArtifactIdentities({
+      fixture: spec?.fixtureSha256 ? { id: "source-under-mutation", sha256: spec.fixtureSha256 } : null,
+      stackAdapter: (args.backend ?? spec?.backend) ? { id: args.backend ?? spec.backend } : null,
+    }),
+    durationMs: Date.now() - startedAt,
+    app: resolve(args.app),
+    mutations: resolve(args.mutations),
+    manifestStatus: spec?.status ?? null,
+    fixtureSha256: spec?.fixtureSha256 ?? null,
+    spec: args.spec ? resolve(args.spec) : null,
+    backend: args.backend ?? spec?.backend ?? null,
+    track: args.track ?? spec?.track ?? null,
+    ok: false,
+    outcome: {
+      kind: "harness_failure",
+      phase: "mutation-control",
+      reason: errorMessage(error),
+    },
+  };
+  try {
+    const outputPath = artifactPath(id);
+    writeRunJson(outputPath, artifact);
+    console.error(
+      `mutation harness failure: ${errorMessage(error)}\nartifact: ${outputPath}`,
+    );
+  } catch (artifactError) {
+    console.error(
+      `mutation harness failure: ${errorMessage(error)}\nfailed to write failure artifact: ${errorMessage(artifactError)}`,
+    );
+  }
+  process.exitCode = 2;
+}
+
+async function main(): Promise<void> {
+  spec = readMutationManifest(args.mutations!);
+  const fullMutations = spec.mutations;
+  const shard = args.mutationShardCount === undefined
+    ? { index: 0, count: 1, mutationIds: fullMutations.map(mutation => mutation.id as string),
+      mutations: fullMutations }
+    : mutationShard(fullMutations,
+      { index: args.mutationShardIndex!, count: args.mutationShardCount,
+        defaultScenario: spec.scenario });
+  if (shard.mutations.length === 0) throw new Error('mutation shard has no assigned mutations');
+  spec.mutations = shard.mutations;
+  if (args.backend && args.backend !== spec.backend) {
+    throw new Error(
+      `--backend conflicts with manifest backend ${spec.backend}`,
+    );
+  }
+  if (args.track && args.track !== spec.track) {
+    throw new Error(`--track conflicts with manifest track ${spec.track}`);
+  }
+  args.backend = spec.backend;
+  args.track = spec.track;
+  const track = loadTrack(args.track);
+  const binding = resolveRecipeRelease(track, Number(args.level), args.recipe);
+  if (!binding) throw new Error(`${args.track} L${args.level} has no recipe release`);
+  args.recipe = `${binding.release.id}@${binding.release.version}`;
+  args.expectedRecipeSha256 = binding.release.contentSha256;
+  const recipeRelease = binding.release;
+  args.dbName ??= dbName(track, Number(args.runIndex));
+  args.reseedOnReset = track.reseedOnReset;
+  const definitions = validateMutationDefinitions(spec.mutations,
+    { defaultScenario: spec.scenario, requireScenario: true });
+  if (!definitions.ok) {
+    throw new Error(
+      `invalid mutation manifest: ${
+        definitions.issues.map((issue) =>
+          `${issue.mutation ?? "<unnamed>"}:${issue.kind}`
+        ).join(", ")
+      }`,
+    );
+  }
+  const groups = new Map();
+  for (const [scenario, mutations] of groupMutationsByScenario(spec)) {
+    const declaredSpec = resolveMutationScenarioPath(scenario);
+    groups.set(declaredSpec, mutations);
+  }
+  if (args.spec) {
+    const requested = resolve(args.spec);
+    if (groups.size !== 1 || !groups.has(requested)) {
+      throw new Error('--spec conflicts with the mutation manifest scenario selection');
+    }
+  }
+  const work = mkdtempSync(join(tmpdir(), "stack-bench-mutation-"));
+  const reportPath = join(work, "grade.json");
+  // Hosted apps serve this build; development servers compile client source on demand.
+  const clientDist = join(args.app, 'client', 'dist');
+  const cleanClientDist = spec.mutations.some(mutation =>
+    mutationFileEdits(mutation).some(edit => edit.file.replaceAll('\\', '/').startsWith('client/')))
+    && existsSync(clientDist) ? join(work, 'client-dist') : null;
+  if (cleanClientDist) cpSync(clientDist, cleanClientDist, { recursive: true });
+  process.once("exit", () => rmSync(work, { recursive: true, force: true }));
+
+  // Reject backups left by an interrupted run before grading the baseline.
+  for (const m of spec.mutations) {
+    for (const file of new Set(mutationFileEdits(m).map(edit => edit.file))) {
+      const stale = resolveMutationFile(args.app, file) + ".mutation-backup";
+      if (existsSync(stale)) {
+        throw new Error(
+          `${stale} exists; restore the interrupted mutation backup before running again`,
+        );
+      }
+    }
+  }
+
+  // Catch dirty source even when no backup file remains.
+  assertAppSourceIdentity(args.app, spec.fixtureSha256, 'mutation fixture');
+
+  // Reject missing or ambiguous edit anchors before baseline grading.
+  for (const m of spec.mutations) {
+    for (const edit of mutationFileEdits(m)) {
+      const source = readFileSync(resolveMutationFile(args.app, edit.file), "utf8");
+      const matches = source.split(edit.find).length - 1;
+      if (matches !== 1) {
+        throw new Error(
+          `${m.id} anchor matched ${matches} times in ${edit.file}; expected exactly once`,
+        );
+      }
+    }
+  }
+
+  const plans = [...groups].map(([scenarioPath, mutations]) => {
+    const selectedCheckKeys = releaseScenarioCheckKeys(recipeRelease, track.dir, scenarioPath,
+      args.selectedCheckKeys ?? null);
+    return { scenarioPath, scenario: scenarioKey(scenarioPath), mutations, selectedCheckKeys,
+      checkpoint: checkpointGroup(scenarioPath, mutations, selectedCheckKeys) };
+  });
+  const cleanBaselineBundle = args.baselineBundle
+    ? readArtifactPayload(args.baselineBundle, { expectedKind: 'grade_bundle' })
+    : null;
+  if (cleanBaselineBundle && !args.expectedCalibrationIdentity) {
+    throw new Error('a reusable clean baseline requires its expected calibration identity');
+  }
+  const checkpoint = checkpointIdentity(plans.map(plan => plan.checkpoint), shard, track);
+  const resumed = resumableEvidence(args.resumeFrom, checkpoint);
+  const results: MutationResult[] = [...resumed.results] as MutationResult[];
+  const baselines: BaselineEntry[] = [...resumed.baselines] as BaselineEntry[];
+  const completedIds = new Set(results.map(result => result.id));
+  if (completedIds.size !== results.length) {
+    throw new Error('mutation checkpoint contains duplicate results');
+  }
+  const outputPath = artifactPath(args.mutationAttemptId);
+  const deadline = startedAt + args.maxRuntimeMinutes * 60_000;
+
+  const createControlArtifact = (status: 'running' | 'incomplete' | 'complete', reason: string | null = null) => {
+    const ordered = [...results].sort((left, right) =>
+      shard.mutationIds.indexOf(left.id) - shard.mutationIds.indexOf(right.id));
+    const clean = ordered.filter(result => result.status === 'CAUGHT');
+    const orderedBaselines = plans.map(plan => baselines.find(entry =>
+      entry.scenario === plan.scenario)).filter((entry): entry is BaselineEntry => Boolean(entry));
+    const remaining = shard.mutationIds.filter(id => !completedIds.has(id));
+    return {
+      id: args.mutationAttemptId,
+      kind: 'mutation_control',
+      startedAt: startedIso,
+      completedAt: status === 'running' ? null : new Date().toISOString(),
+      parentAttemptId: args.parentAttemptId ?? null,
+      identities: emptyArtifactIdentities({
+        fixture: { id: 'source-under-mutation', sha256: spec.fixtureSha256 },
+        recipe: { id: recipeRelease.id, version: recipeRelease.version,
+          sha256: recipeRelease.contentSha256, state: recipeRelease.state },
+        stackAdapter: { id: args.backend },
+      }),
+      durationMs: Date.now() - startedAt,
+      app: resolve(args.app),
+      mutations: resolve(args.mutations),
+      manifestStatus: spec.status,
+      fixtureSha256: spec.fixtureSha256,
+      spec: plans.map(plan => plan.scenario),
+      backend: args.backend,
+      track: args.track,
+      shard: { index: shard.index, count: shard.count, mutationIds: shard.mutationIds },
+      baseline: {
+        total: orderedBaselines.reduce((sum, entry) => sum + Number(entry.total), 0),
+        max: orderedBaselines.reduce((sum, entry) => sum + Number(entry.max), 0),
+        scenarios: orderedBaselines,
+      },
+      ok: status === 'complete' && clean.length === ordered.length
+        && ordered.length === shard.mutationIds.length,
+      ...(status === 'complete' ? {} : { outcome: { kind: 'incomplete',
+        phase: 'mutation-control', reason: reason ?? 'mutation batch is in progress' } }),
+      summary: { caught: clean.length, completed: ordered.length,
+        total: shard.mutationIds.length, remaining: remaining.length },
+      results: ordered,
+      checkpoint: { ...checkpoint, status, maxRuntimeMinutes: args.maxRuntimeMinutes,
+        updatedAt: new Date().toISOString() },
+    };
+  };
+  const persist = (status: 'running' | 'incomplete' | 'complete', reason: string | null = null) => {
+    assertAppSourceIdentity(args.app, spec.fixtureSha256,
+      'mutation fixture before checkpoint');
+    const artifact = createControlArtifact(status, reason);
+    writeRunJson(outputPath, artifact);
+    if (args.checkpointOut && resolve(args.checkpointOut) !== outputPath) {
+      writeRunJson(args.checkpointOut, artifact);
+    }
+    return artifact;
+  };
+  const stopAtBudget = () => {
+    const artifact = persist('incomplete',
+      `mutation batch reached its ${args.maxRuntimeMinutes} minute limit`);
+    console.log(`\n${artifact.summary.completed}/${artifact.summary.total} mutations completed; `
+      + `${artifact.summary.remaining} remain`);
+    console.log(`checkpoint: ${args.checkpointOut ?? outputPath}`);
+    process.exitCode = 3;
+  };
+
+  for (const plan of plans) {
+    const { scenarioPath, scenario, mutations, selectedCheckKeys } = plan;
+    const pending = mutations.filter((mutation: MutationDefinition) => !completedIds.has(mutation.id as string));
+    if (pending.length === 0) continue;
+    if (Date.now() >= deadline) return stopAtBudget();
+    args.spec = scenarioPath;
+    args.selectedCheckKeys = selectedCheckKeys;
+    let baseline;
+    if (cleanBaselineBundle) {
+      const reused = reusableMutationBaseline(cleanBaselineBundle, {
+        backend: args.backend,
+        track: args.track,
+        level: Number(args.level),
+        fixtureSha256: spec.fixtureSha256,
+        recipe: { id: recipeRelease.id, version: recipeRelease.version,
+          sha256: recipeRelease.contentSha256 },
+        identities: {
+          engine: currentEngineIdentity(),
+          calibration: args.expectedCalibrationIdentity,
+          stackAdapter: { id: args.backend },
+        },
+        selectedCheckKeys,
+      });
+      if (!reused.ok) {
+        throw new Error(`cannot reuse clean baseline for ${scenarioPath}: ${reused.reason}`);
+      }
+      baseline = reused.report;
+      console.log(`Baseline (verified clean evidence, ${scenarioPath})...`);
+    } else {
+      console.log(`Baseline (unmutated app, ${scenarioPath})...`);
+      try {
+        baseline = await grade(args, reportPath, deadline);
+      } catch (error) {
+        if (error instanceof MutationBatchDeadlineError) return stopAtBudget();
+        throw error;
+      }
+      const validation = validateMutationBaseline(baseline, mutations);
+      if (!validation.ok && isRetryableMutationBaseline(validation.issues)) {
+        console.log('  transient baseline failure; retrying once');
+        try {
+          baseline = await grade(args, reportPath, deadline);
+        } catch (error) {
+          if (error instanceof MutationBatchDeadlineError) return stopAtBudget();
+          throw error;
+        }
+      }
+    }
+    const baselineValidation = validateMutationBaseline(baseline, mutations);
+    if (!baselineValidation.ok) {
+      throw new Error(
+        `reference baseline is not known-good for ${scenarioPath}: ${
+          JSON.stringify(baselineValidation.issues)
+        }`,
+      );
+    }
+    console.log(
+      `  baseline: ${baseline.total}/${baseline.max}  ${
+        (baseline.features ?? []).map((f) => `F${f.id}:${(f as NonNullable<GradeReport['features']>[number]).score}`).join(" ")
+      }\n`,
+    );
+    const baselineEntry = { scenario, identitySha256: plan.checkpoint.identitySha256,
+      total: baseline.total, max: baseline.max };
+    const priorBaseline = baselines.findIndex(entry => entry.scenario === scenario);
+    if (priorBaseline === -1) baselines.push(baselineEntry);
+    else baselines[priorBaseline] = baselineEntry;
+
+    for (const m of pending) {
+      if (Date.now() >= deadline) return stopAtBudget();
+      const byFile = new Map<string, MutationFile>();
+      for (const edit of mutationFileEdits(m)) {
+        const target = resolveMutationFile(args.app, edit.file);
+        if (!byFile.has(target)) {
+          byFile.set(target, {
+            target,
+            backup: `${target}.mutation-backup`,
+            original: readFileSync(target, "utf8"),
+            edits: [],
+          });
+        }
+        byFile.get(target)!.edits.push(edit);
+      }
+      const files = [...byFile.values()];
+      const clientChanged = files.some(file => relative(args.app!, file.target)
+        .split(sep)[0] === 'client');
+      const backedUp: MutationFile[] = [];
+      let r: GradeReport | undefined;
+      let classified: ReturnType<typeof classifyMutationResult> | undefined;
+      let deadlineReached = false;
+      let mutationError: unknown = null;
+      try {
+        for (const file of files) {
+          copyFileSync(file.target, file.backup);
+          backedUp.push(file);
+        }
+        for (const file of files) {
+          writeFileSync(file.target,
+            file.edits.reduce((src, edit) => src.replace(edit.find, edit.replace),
+              file.original));
+        }
+        if (clientChanged) rebuildClientAfterSourceChange(args, deadline);
+        r = await grade(args, reportPath, deadline);
+        classified = classifyMutationResult(
+          baseline as Parameters<typeof classifyMutationResult>[0],
+          r as Parameters<typeof classifyMutationResult>[1],
+          m,
+        );
+        if (isRetryableMutationResult(classified.status)) {
+          console.log(`  ${classified.status} result; retrying once`);
+          r = await grade(args, reportPath, deadline);
+          classified = classifyMutationResult(
+            baseline as Parameters<typeof classifyMutationResult>[0],
+            r as Parameters<typeof classifyMutationResult>[1],
+            m,
+          );
+        }
+      } catch (error) {
+        if (error instanceof MutationBatchDeadlineError) deadlineReached = true;
+        else mutationError = error;
+      }
+
+      const cleanupErrors: Error[] = [];
+      for (const file of backedUp) {
+        try {
+          copyFileSync(file.backup, file.target);
+          unlinkSync(file.backup);
+        } catch (error) {
+          cleanupErrors.push(new Error(`cannot restore ${file.target}: ${errorMessage(error)}`,
+            { cause: error }));
+        }
+      }
+      for (const file of files) {
+        try {
+          if (existsSync(file.backup) || readFileSync(file.target, 'utf8') !== file.original) {
+            cleanupErrors.push(new Error(`restore verification failed for ${file.target}`));
+          }
+        } catch (error) {
+          cleanupErrors.push(new Error(`cannot verify restored source ${file.target}: ${errorMessage(error)}`,
+            { cause: error }));
+        }
+      }
+      if (clientChanged) {
+        try {
+          rmSync(clientDist, { recursive: true, force: true });
+          if (cleanClientDist) cpSync(cleanClientDist, clientDist, { recursive: true });
+        } catch (error) {
+          cleanupErrors.push(new Error(`cannot restore the built client: ${errorMessage(error)}`,
+            { cause: error }));
+        }
+      }
+      // A normal error leaves enough budget to restore the clean runtime. A
+      // deadline stop leaves clean source and lets the lease owner stop it.
+      if (mutationError !== null && cleanupErrors.length === 0) {
+        try {
+          await reset(args, deadline);
+        } catch (error) {
+          cleanupErrors.push(new Error(`cannot restore the clean runtime: ${errorMessage(error)}`,
+            { cause: error }));
+        }
+      }
+      if (cleanupErrors.length > 0) {
+        const errors = mutationError === null ? cleanupErrors : [mutationError, ...cleanupErrors];
+        throw new AggregateError(errors,
+          'mutation cleanup failed; do not reuse this app source');
+      }
+      if (mutationError !== null) throw mutationError;
+      if (deadlineReached) return stopAtBudget();
+      if (!r || !classified) throw new Error('mutation grade completed without a result');
+      results.push({ id: m.id, scenario,
+        targets: mutationTargetKeys(m), ...classified });
+      completedIds.add(m.id);
+      persist('running');
+      console.log(
+        `${classified.status.padEnd(20)} ${m.id} — expected ${
+          classified.targetKeys.join(", ")
+        }`,
+      );
+      if (classified.regressions.length) {
+        console.log(
+          `    failed criteria: ${
+            classified.regressions.map((item) => item.key).join(", ")
+          }`,
+        );
+      }
+    }
+  }
+
+  // Detect any source change outside the files restored above.
+  assertAppSourceIdentity(args.app, spec.fixtureSha256, 'mutation fixture after worker completion');
+  // Restore the clean runtime and database before releasing the worker lease.
+  await reset(args, null);
+
+  rmSync(work, { recursive: true, force: true });
+  const artifact = persist('complete');
+  console.log(`\n${artifact.summary.caught}/${artifact.summary.total} mutations cleanly caught`);
+  console.log(`artifact: ${outputPath}`);
+  if (!artifact.ok) process.exitCode = 1;
+}
+
+function run(): void {
+  try {
+    args = parseMutationArgs(process.argv);
+  } catch (error) {
+    console.error(errorMessage(error));
+    process.exitCode = 2;
+    return;
+  }
+  startedAt = Date.now();
+  startedIso = new Date(startedAt).toISOString();
+  main().catch(recordHarnessFailure);
+}
+
+if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) run();
diff --git a/tools/stack-bench/grader/mutations/mongodb-ecommerce-2.0.1.json b/tools/stack-bench/grader/mutations/mongodb-ecommerce-2.0.1.json
new file mode 100644
index 00000000000..4fffb722109
--- /dev/null
+++ b/tools/stack-bench/grader/mutations/mongodb-ecommerce-2.0.1.json
@@ -0,0 +1,1856 @@
+{
+  "schemaVersion": 2,
+  "status": "candidate",
+  "fixtureSha256": "edb9732535b2273232a320b8e7b4ad6758991683a6bd06103f2ec4be07dafe20",
+  "backend": "mongodb",
+  "track": "ecommerce",
+  "note": "Mutation definitions for the MongoDB ecommerce reference.",
+  "mutations": [
+    {
+      "id": "signup-does-not-expose-created-account",
+      "scenario": "tracks/ecommerce/scenarios/01-account-create-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.accounts.accounts.1a"
+      ],
+      "desc": "Signup succeeds but the client discards the created account identity from its current session view.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "    saveSession(data.token, data.user);\n  };\n\n  const handleSignIn",
+          "replace": "    saveSession(data.token, { ...data.user, username: \"\" });\n  };\n\n  const handleSignIn"
+        }
+      ]
+    },
+    {
+      "id": "duplicate-signup-reports-success",
+      "scenario": "tracks/ecommerce/scenarios/01-account-duplicate-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.accounts.accounts.1b"
+      ],
+      "desc": "A duplicate username is reported as a successful empty signup response instead of a refusal.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  if (existing) return res.status(409).json({ error: \"Username is already taken\" });",
+          "replace": "  if (existing) return res.json({}); // mutant: duplicate signup is falsely accepted"
+        }
+      ]
+    },
+    {
+      "id": "signin-skips-password-verification",
+      "scenario": "tracks/ecommerce/scenarios/01-account-password-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.accounts.accounts.1c"
+      ],
+      "desc": "Signin accepts an existing account without requiring its password to match.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  if (!valid) return res.status(401).json({ error: \"Invalid username or password\" });",
+          "replace": "  if (false && !valid) return res.status(401).json({ error: \"Invalid username or password\" });"
+        }
+      ]
+    },
+    {
+      "id": "signout-keeps-current-account",
+      "scenario": "tracks/ecommerce/scenarios/01-account-signout-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.accounts.accounts.1d"
+      ],
+      "desc": "Signout disconnects the token state but leaves the current account and persisted credential in place.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  const handleSignOut = () => {\n    clearSession();\n  };",
+          "replace": "  const handleSignOut = () => {\n    setToken(null); // mutant: visible and persisted account state is not cleared\n  };"
+        }
+      ]
+    },
+    {
+      "id": "session-token-not-persisted",
+      "scenario": "tracks/ecommerce/scenarios/01-account-reload-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.state-durability.session-reload.1e"
+      ],
+      "desc": "The active session is kept only in React state and is unavailable after a page reload.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "    localStorage.setItem(TOKEN_KEY, tok);\n    setToken(tok);",
+          "replace": "    void tok; // mutant: the session token is never persisted\n    setToken(tok);"
+        }
+      ]
+    },
+    {
+      "id": "purchase-counts-never-affect-ranking",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.ranking.2c"
+      ],
+      "desc": "The catalogue ranking ignores recorded purchases and therefore never promotes the bought item.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "      purchaseCount: purchaseMap.get(id) || 0,",
+          "replace": "      purchaseCount: 0, // mutant: ranking ignores durable purchase counts"
+        }
+      ]
+    },
+    {
+      "id": "signed-out-visitors-see-purchase-controls",
+      "scenario": "tracks/ecommerce/scenarios/progression-signed-out-purchase-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.signed-out-purchase.3a"
+      ],
+      "desc": "The client treats every non-admin state, including a signed-out visitor, as a customer allowed to see purchase controls.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  const isCustomer = !!currentUser && !currentUser.isAdmin && !currentUser.isStaff;",
+          "replace": "  const isCustomer = !currentUser?.isAdmin && !currentUser?.isStaff;"
+        }
+      ]
+    },
+    {
+      "id": "espresso-stock-row-ignores-live-updates",
+      "scenario": "tracks/ecommerce/scenarios/01-buying-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.purchase-stock.3b"
+      ],
+      "desc": "The live catalogue handler preserves a stale Espresso Machine stock projection while applying all other item updates.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "    socket.on(\"items:update\", (data: ItemT[]) => setItems(data));",
+          "replace": "    socket.on(\"items:update\", (data: ItemT[]) => setItems((previous) => data.map((item) => item.name === \"Espresso Machine\" ? { ...item, stock: previous.find((old) => old.id === item.id)?.stock ?? item.stock } : item)));"
+        }
+      ]
+    },
+    {
+      "id": "purchase-order-uses-zero-price",
+      "scenario": "tracks/ecommerce/scenarios/progression-purchasing-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.purchasing.purchase-order.3c"
+      ],
+      "desc": "A direct purchase records the item but stores a zero order total instead of the price paid.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    total: item.price,\n  });",
+          "replace": "    total: 0, // mutant: purchase receipt loses the authoritative price\n  });"
+        }
+      ]
+    },
+    {
+      "id": "reload-hydrates-an-empty-cart",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.state-durability.cart-reload.4b"
+      ],
+      "desc": "Cart hydration discards the persisted server response after reload.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  const refreshCart = useCallback(async (tok: string) => {\n    const data = await apiFetch(\"/api/cart\", tok);\n    setCart(data);\n  }, []);",
+          "replace": "  const refreshCart = useCallback(async (tok: string) => {\n    await apiFetch(\"/api/cart\", tok);\n    setCart({ items: [], total: 0 }); // mutant: persisted cart response is discarded\n  }, []);"
+        }
+      ]
+    },
+    {
+      "id": "shared-cart-live-events-ignored",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.shared-cart.4c"
+      ],
+      "desc": "An already-open second session ignores committed cart update events.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "    socket.on(\"cart:update\", (data: CartT) => setCart(data));",
+          "replace": "    socket.on(\"cart:update\", (data: CartT) => setCart(current => current.items.length === 0 ? current : data)); // mutant: an empty second-session cart ignores its first remote update"
+        }
+      ]
+    },
+    {
+      "id": "review-comment-is-not-persisted",
+      "scenario": "tracks/ecommerce/scenarios/01-review-visibility-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.reviews.reviews.6a"
+      ],
+      "desc": "Review submission persists an empty comment rather than the customer's submitted text.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    { itemId, userId: user._id, username: user.username, rating: ratingNum,\n      comment: typeof comment === \"string\" ? comment : \"\" },",
+          "replace": "    { itemId, userId: user._id, username: user.username, rating: ratingNum,\n      comment: \"\" },"
+        }
+      ]
+    },
+    {
+      "id": "repeat-review-uses-a-new-owner-key",
+      "scenario": "tracks/ecommerce/scenarios/01-review-uniqueness-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.transactional-integrity.unique-review.6b"
+      ],
+      "desc": "Each review submission is stored under a fresh owner key, bypassing the one-review-per-customer constraint.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    { itemId, userId: user._id },\n    { itemId, userId: user._id, username: user.username, rating: ratingNum,\n      comment: typeof comment === \"string\" ? comment : \"\" },",
+          "replace": "    { itemId, userId: new Types.ObjectId() },\n    { itemId, userId: new Types.ObjectId(), username: user.username, rating: ratingNum,\n      comment: typeof comment === \"string\" ? comment : \"\" },"
+        }
+      ]
+    },
+    {
+      "id": "live-review-average-uses-an-extra-divisor",
+      "scenario": "tracks/ecommerce/scenarios/01-review-rating-live-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.rating.6c"
+      ],
+      "desc": "The live review event divides the rating sum by one more review than actually exists.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "async function broadcastReviews(itemId: string) {\n  const reviews = await Review.find({ itemId }).sort({ createdAt: -1 });\n  const average = reviews.length ? reviews.reduce((s, r) => s + r.rating, 0) / reviews.length : 0;",
+          "replace": "async function broadcastReviews(itemId: string) {\n  const reviews = await Review.find({ itemId }).sort({ createdAt: -1 });\n  const average = reviews.length ? reviews.reduce((s, r) => s + r.rating, 0) / (reviews.length + 1) : 0;"
+        }
+      ]
+    },
+    {
+      "id": "warehouse-view-omits-one-location",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-admin-staff-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.warehouse-admin.warehouse-view.7b"
+      ],
+      "desc": "The admin warehouse projection truncates the final item-location row.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "          {overview.locations.map((loc) => (",
+          "replace": "          {overview.locations.slice(0, -1).map((loc) => ("
+        }
+      ]
+    },
+    {
+      "id": "unauthenticated-purchase-defaults-to-admin",
+      "scenario": "tracks/ecommerce/scenarios/01-purchase-session-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.purchase-session.101a"
+      ],
+      "desc": "The purchase endpoint drops authentication and assigns sessionless purchases to the seeded administrator.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/items/:id/buy\", requireAuth, async (req, res) => {",
+          "replace": "app.post(\"/api/items/:id/buy\", async (req, res) => {"
+        },
+        {
+          "find": "  const user = (req as any).user;\n  const order = await Order.create({",
+          "replace": "  const user = (req as any).user || await User.findOne({ username: \"admin\" });\n  const order = await Order.create({"
+        }
+      ]
+    },
+    {
+      "id": "direct-purchase-total-ignores-store-price",
+      "scenario": "tracks/ecommerce/scenarios/01-server-price-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.transactional-integrity.server-price.104a"
+      ],
+      "desc": "The direct purchase creates one order but records a zero total rather than the store's current price.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    total: item.price,\n  });",
+          "replace": "    total: 0, // mutant: direct purchase ignores the authoritative price\n  });"
+        }
+      ]
+    },
+    {
+      "id": "cart-hydration-loses-account-state",
+      "scenario": "tracks/ecommerce/scenarios/progression-account-state-reload-1.0.1.json",
+      "targets": [
+        "ecommerce.spec.state-durability.account-state-recovery.105a"
+      ],
+      "desc": "Reload hydration discards the account's persisted cart response.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  const refreshCart = useCallback(async (tok: string) => {\n    const data = await apiFetch(\"/api/cart\", tok);\n    setCart(data);\n  }, []);",
+          "replace": "  const refreshCart = useCallback(async (tok: string) => {\n    await apiFetch(\"/api/cart\", tok);\n    setCart({ items: [], total: 0 }); // mutant: account state is discarded on hydration\n  }, []);"
+        }
+      ]
+    },
+    {
+      "id": "reconnect-hydration-loses-account-state",
+      "scenario": "tracks/ecommerce/scenarios/progression-account-state-reconnect-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.state-durability.account-state-recovery.105b"
+      ],
+      "desc": "The initial account cart loads correctly, but after network restoration the client ignores both refreshed and pushed cart state.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  useEffect(() => {\n    const socket = io({ auth: token ? { token } : {} });",
+          "replace": "  useEffect(() => {\n    const clearAccountOffline = () => {\n      setCurrentUser(null);\n      setCart({ items: [], total: 0 });\n    };\n    window.addEventListener(\"offline\", clearAccountOffline, { once: true });\n    const socket = io({ auth: token ? { token } : {} });"
+        }
+      ]
+    },
+    {
+      "id": "order-history-is-not-owner-scoped",
+      "scenario": "tracks/ecommerce/scenarios/01-order-ownership-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.order-ownership.106a"
+      ],
+      "desc": "Order history returns every customer's orders instead of filtering by the authenticated owner.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  const orders = await Order.find({ userId }).sort({ createdAt: -1 });",
+          "replace": "  const orders = await Order.find({}).sort({ createdAt: -1 });"
+        }
+      ]
+    },
+    {
+      "id": "revenue-aggregation-ignores-order-totals",
+      "scenario": "tracks/ecommerce/scenarios/progression-books-balance-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.transactional-integrity.books-balance.107a"
+      ],
+      "desc": "The admin revenue aggregation counts every order as zero regardless of its stored total.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    { $group: { _id: null, total: { $sum: { $multiply: [\"$items.price\", \"$items.quantity\"] } } } },",
+          "replace": "    { $group: { _id: null, total: { $sum: 0 } } },"
+        }
+      ]
+    },
+    {
+      "id": "unpurchased-review-is-accepted",
+      "scenario": "tracks/ecommerce/scenarios/01-review-eligibility-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.review-eligibility.108a"
+      ],
+      "desc": "The review endpoint bypasses its completed-purchase eligibility check.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  if (!hasPurchased) {\n    return res.status(403).json({ error: \"You can only review items you have purchased\" });\n  }",
+          "replace": "  if (false && !hasPurchased) {\n    return res.status(403).json({ error: \"You can only review items you have purchased\" });\n  }"
+        }
+      ]
+    },
+    {
+      "id": "purchased-review-eligibility-query-never-matches",
+      "scenario": "tracks/ecommerce/scenarios/01-review-eligibility-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.review-eligibility.108b"
+      ],
+      "desc": "The eligibility query requires an impossible negative order total, rejecting even a customer who bought the item.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  const hasPurchased = await Order.exists({ userId: user._id, \"items.itemId\": itemId });",
+          "replace": "  const hasPurchased = await Order.exists({ userId: user._id, \"items.itemId\": itemId, total: -1 });"
+        }
+      ]
+    },
+    {
+      "id": "external-stock-polling-disabled",
+      "scenario": "tracks/ecommerce/scenarios/01-external-live-sync-1.1.0.json",
+      "targets": [
+        "ecommerce.spec.external-data-sync.external-stock.901a"
+      ],
+      "desc": "The server stops reconciling direct database stock writes into live catalogue events.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  broadcastItems().catch((err) => console.error(\"broadcastItems poll failed\", err));",
+          "replace": "  // mutant: direct database stock changes are never reconciled"
+        }
+      ]
+    },
+    {
+      "id": "server-restart-disables-catalog-recovery",
+      "scenario": "tracks/ecommerce/scenarios/01-external-server-restart-sync-1.1.0.json",
+      "targets": [
+        "ecommerce.spec.external-data-sync.external-stock.901c"
+      ],
+      "desc": "After a socket disconnect, the existing page ignores both reconnect refreshes and later catalogue snapshots.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  const socketRef = useRef<Socket | null>(null);\n\n  const saveSession",
+          "replace": "  const socketRef = useRef<Socket | null>(null);\n  const acceptCatalogRecovery = useRef(true);\n\n  const saveSession"
+        },
+        {
+          "find": "    socket.on(\"connect\", () => {\n      refreshItems().catch((err) => console.error(err));",
+          "replace": "    socket.on(\"disconnect\", () => { acceptCatalogRecovery.current = false; });\n    socket.on(\"connect\", () => {\n      if (acceptCatalogRecovery.current) refreshItems().catch((err) => console.error(err));"
+        },
+        {
+          "find": "    socket.on(\"items:update\", (data: ItemT[]) => setItems(data));",
+          "replace": "    socket.on(\"items:update\", (data: ItemT[]) => { if (acceptCatalogRecovery.current) setItems(data); });"
+        }
+      ]
+    },
+    {
+      "id": "reconnect-generation-ignores-current-catalog",
+      "scenario": "tracks/ecommerce/scenarios/01-external-reconnect-sync-1.1.0.json",
+      "targets": [
+        "ecommerce.spec.external-data-sync.external-stock.901d"
+      ],
+      "desc": "After the browser goes offline, the existing page ignores reconnect refreshes and subsequent catalogue events.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  const socketRef = useRef<Socket | null>(null);\n\n  const saveSession",
+          "replace": "  const socketRef = useRef<Socket | null>(null);\n  const acceptCatalogUpdates = useRef(true);\n  useEffect(() => {\n    const stopCatalogRecovery = () => { acceptCatalogUpdates.current = false; };\n    window.addEventListener(\"offline\", stopCatalogRecovery);\n    return () => window.removeEventListener(\"offline\", stopCatalogRecovery);\n  }, []);\n\n  const saveSession"
+        },
+        {
+          "find": "    setItems(data.items);",
+          "replace": "    if (acceptCatalogUpdates.current) setItems(data.items);"
+        },
+        {
+          "find": "    socket.on(\"items:update\", (data: ItemT[]) => setItems(data));",
+          "replace": "    socket.on(\"items:update\", (data: ItemT[]) => {\n      if (acceptCatalogUpdates.current) setItems(data);\n    });"
+        }
+      ]
+    },
+    {
+      "id": "open-review-list-ignores-live-update",
+      "scenario": "tracks/ecommerce/scenarios/progression-open-list-live-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.open-list.902a"
+      ],
+      "desc": "The already-open review list ignores a committed review update from another client.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "      setItemDetail((prev) => (prev && prev.id === payload.itemId ? { ...prev, reviews: payload.reviews, average: payload.average } : prev));",
+          "replace": "      void payload; // mutant: the already-open review list ignores committed updates"
+        }
+      ]
+    },
+    {
+      "id": "cancel-does-not-restore-stock-feature",
+      "scenario": "tracks/ecommerce/scenarios/02-order-cancellation-core-1.0.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.cancellation-and-return.3a"
+      ],
+      "desc": "Cancellation changes order state but skips restoration of its recorded warehouse allocations.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  for (const line of order.items) {\n    await restoreAllocations(line.allocations as any, line.itemId);\n  }\n  order.status = \"cancelled\";",
+          "replace": "  for (const line of order.items) {\n    void line; // mutant: cancellation does not restore its reserved stock\n  }\n  order.status = \"cancelled\";"
+        }
+      ]
+    },
+    {
+      "id": "cancel-does-not-restore-stock-fresh-client",
+      "scenario": "tracks/ecommerce/scenarios/02-self-contained-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.stock-conservation.202b",
+        "ecommerce.inventory-operations.stock-conservation.202c"
+      ],
+      "desc": "Cancellation changes order state but skips restoration, so a fresh client reads the persisted shortfall.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  for (const line of order.items) {\n    await restoreAllocations(line.allocations as any, line.itemId);\n  }\n  order.status = \"cancelled\";",
+          "replace": "  for (const line of order.items) {\n    void line; // mutant: cancellation does not restore its reserved stock\n  }\n  order.status = \"cancelled\";"
+        }
+      ]
+    },
+    {
+      "id": "cancel-restores-stock-but-keeps-pending-status",
+      "scenario": "tracks/ecommerce/scenarios/02-order-cancellation-history-1.0.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.cancellation-and-return.3b"
+      ],
+      "desc": "Cancellation restores allocations but writes pending back to order history.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  order.status = \"cancelled\";\n  await order.save();",
+          "replace": "  order.status = \"pending\";\n  await order.save();"
+        }
+      ]
+    },
+    {
+      "id": "cancelled-order-remains-in-revenue-feature",
+      "scenario": "tracks/ecommerce/scenarios/02-order-cancellation-core-1.0.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.cancellation-and-return.3a"
+      ],
+      "desc": "Admin revenue includes cancelled orders even though cancellation otherwise succeeds.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "async function getRevenue(): Promise<number> {\n  const rows = await Order.aggregate([\n    { $match: { status: { $ne: \"cancelled\" } } },",
+          "replace": "async function getRevenue(): Promise<number> {\n  const rows = await Order.aggregate([\n    { $match: {} },"
+        }
+      ]
+    },
+    {
+      "id": "cancelled-order-remains-in-revenue-invariant",
+      "scenario": "tracks/ecommerce/scenarios/02-invariants.json",
+      "targets": [
+        "ecommerce.returns-pricing.refund-accounting.203a"
+      ],
+      "desc": "Admin revenue includes cancelled orders even though cancellation otherwise succeeds.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "async function getRevenue(): Promise<number> {\n  const rows = await Order.aggregate([\n    { $match: { status: { $ne: \"cancelled\" } } },",
+          "replace": "async function getRevenue(): Promise<number> {\n  const rows = await Order.aggregate([\n    { $match: {} },"
+        }
+      ]
+    },
+    {
+      "id": "operator-authorization-allows-customer-transfer",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.operations-access.operator-authorization.201a"
+      ],
+      "desc": "The transfer route keeps authentication but drops its administrator role gate.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/admin/transfer\", requireAuth, requireAdmin, async (req, res) => {",
+          "replace": "app.post(\"/api/admin/transfer\", requireAuth, async (req, res) => {"
+        }
+      ]
+    },
+    {
+      "id": "customer-can-ship-order-direct-1-1",
+      "scenario": "tracks/ecommerce/scenarios/02-server-actions-1.1.0.json",
+      "targets": [
+        "ecommerce.operations-access.operator-authorization.201c"
+      ],
+      "desc": "The shipping route keeps authentication but drops its staff role gate.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/fulfilment/ship\", requireAuth, requireStaff, async (req, res) => {",
+          "replace": "app.post(\"/api/fulfilment/ship\", requireAuth, async (req, res) => {"
+        }
+      ]
+    },
+    {
+      "id": "customer-can-cancel-foreign-order-1-1",
+      "scenario": "tracks/ecommerce/scenarios/02-server-actions-1.1.0.json",
+      "targets": [
+        "ecommerce.operations-access.order-owner.204a"
+      ],
+      "desc": "Cancellation retains authentication and pending-state validation but drops order ownership.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/orders/:id/cancel\", requireAuth, async (req, res) => {\n  const user = (req as any).user;\n  const orderId = objectId(req.params.id);\n  const order = orderId ? await Order.findOne({ _id: orderId, userId: user._id }) : null;",
+          "replace": "app.post(\"/api/orders/:id/cancel\", requireAuth, async (req, res) => {\n  const user = (req as any).user;\n  const orderId = objectId(req.params.id);\n  const order = orderId ? await Order.findOne({ _id: orderId }) : null;"
+        }
+      ]
+    },
+    {
+      "id": "queue-depth-lags-one-order",
+      "scenario": "tracks/ecommerce/scenarios/02-fulfilment-live-1.0.0.json",
+      "targets": [
+        "ecommerce.operations-access.fulfilment-queue.1a"
+      ],
+      "desc": "The queue renders every order but its visible depth remains one behind.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "Orders waiting: <span className=\"value\" data-role=\"queue-depth\">{queue.depth}</span>",
+          "replace": "Orders waiting: <span className=\"value\" data-role=\"queue-depth\">{Math.max(0, queue.depth - 1)}</span>"
+        }
+      ]
+    },
+    {
+      "id": "ship-acknowledges-without-changing-status",
+      "scenario": "tracks/ecommerce/scenarios/02-fulfilment-ship-1.0.0.json",
+      "targets": [
+        "ecommerce.operations-access.fulfilment-queue.1c"
+      ],
+      "desc": "Shipping returns success but writes pending back to the order, leaving both live views unchanged.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  order.status = \"shipped\";\n  await order.save();",
+          "replace": "  order.status = \"pending\";\n  await order.save();"
+        }
+      ]
+    },
+    {
+      "id": "customer-sees-fulfilment-navigation",
+      "scenario": "tracks/ecommerce/scenarios/02-fulfilment-access-1.0.0.json",
+      "targets": [
+        "ecommerce.operations-access.fulfilment-queue.1d"
+      ],
+      "desc": "The fulfilment navigation is shown to every signed-in account instead of only staff and administrators.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "          {(currentUser?.isStaff || currentUser?.isAdmin) && (\n            <button className=\"btn btn-ghost\" data-role=\"staff-link\"",
+          "replace": "          {currentUser && (\n            <button className=\"btn btn-ghost\" data-role=\"staff-link\""
+        }
+      ]
+    },
+    {
+      "id": "transfer-debits-source-without-crediting-existing-destination",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.stock-conservation.202a",
+        "ecommerce.inventory-operations.warehouse-transfer.2a"
+      ],
+      "desc": "A transfer debits the source row but adds zero units to an existing destination row, violating both directional movement and total conservation while still returning success.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  await Stock.findOneAndUpdate(\n    { item_id: itemId, warehouse_id: toWarehouseId },\n    { $inc: { quantity: qty } },\n    { upsert: true }\n  );",
+          "replace": "  await Stock.findOneAndUpdate(\n    { item_id: itemId, warehouse_id: toWarehouseId },\n    { $inc: { quantity: 0 } },\n    { upsert: true }\n  );"
+        }
+      ]
+    },
+    {
+      "id": "transfer-warehouse-totals-omit-destination-credit",
+      "scenario": "tracks/ecommerce/scenarios/02-transfer-totals-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.warehouse-transfer.2b"
+      ],
+      "desc": "A transfer debits the source but adds zero to the existing destination, so the two live warehouse totals do not move in opposite directions.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  await Stock.findOneAndUpdate(\n    { item_id: itemId, warehouse_id: toWarehouseId },\n    { $inc: { quantity: qty } },\n    { upsert: true }\n  );",
+          "replace": "  await Stock.findOneAndUpdate(\n    { item_id: itemId, warehouse_id: toWarehouseId },\n    { $inc: { quantity: 0 } },\n    { upsert: true }\n  );"
+        }
+      ]
+    },
+    {
+      "id": "transfer-overdraft-guard-removed",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.warehouse-transfer.2c"
+      ],
+      "desc": "The atomic source debit no longer requires sufficient quantity, allowing an overdrawn transfer to succeed and change both rows.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "{ item_id: itemId, warehouse_id: fromWarehouseId, quantity: { $gte: qty } }",
+          "replace": "{ item_id: itemId, warehouse_id: fromWarehouseId }"
+        }
+      ]
+    },
+    {
+      "id": "low-stock-excludes-boundary-ten",
+      "scenario": "tracks/ecommerce/scenarios/02-low-stock-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.operational-views.5a"
+      ],
+      "desc": "The low-stock view uses a strict boundary and omits items with exactly ten units.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    .filter((it) => it.stock <= 10)",
+          "replace": "    .filter((it) => it.stock < 10)"
+        }
+      ]
+    },
+    {
+      "id": "category-totals-ignore-pending-purchases",
+      "scenario": "tracks/ecommerce/scenarios/02-operational-category-totals-1.0.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.operational-views.5b"
+      ],
+      "desc": "Category totals include only shipped orders, so a newly accepted pending purchase is absent from the live totals.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "async function getCategoryTotals() {\n  const rows = await Order.aggregate([\n    { $match: { status: { $ne: \"cancelled\" } } },",
+          "replace": "async function getCategoryTotals() {\n  const rows = await Order.aggregate([\n    { $match: { status: \"shipped\" } },"
+        }
+      ]
+    },
+    {
+      "id": "recommendations-ignore-pending-purchases",
+      "scenario": "tracks/ecommerce/scenarios/02-operational-recommendations-1.0.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.operational-views.5c"
+      ],
+      "desc": "Personal recommendations derive categories only from shipped orders, so a newly accepted pending purchase has no influence.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    { $match: { userId: new Types.ObjectId(userId), status: { $ne: \"cancelled\" } } },",
+          "replace": "    { $match: { userId: new Types.ObjectId(userId), status: \"shipped\" } },"
+        }
+      ]
+    },
+    {
+      "id": "purchases-do-not-affect-best-sellers",
+      "scenario": "tracks/ecommerce/scenarios/02-operational-best-sellers-1.0.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.operational-views.5d"
+      ],
+      "desc": "Rank signed-out recommendations without purchase counts.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "async function getPurchaseCounts(): Promise<Map<string, number>> {\n  const rows = await Order.aggregate([\n    { $match: { status: { $ne: \"cancelled\" } } },\n    { $unwind: \"$items\" },\n    { $match: { \"items.returned\": { $ne: true } } },\n    { $group: { _id: \"$items.itemId\", total: { $sum: \"$items.quantity\" } } },\n  ]);\n  const map = new Map<string, number>();\n  for (const row of rows) map.set(row._id.toString(), row.total);\n  return map;\n}",
+          "replace": "async function getPurchaseCounts(): Promise<Map<string, number>> {\n  return new Map<string, number>();\n}"
+        }
+      ]
+    },
+    {
+      "id": "queue-warehouse-reports-west",
+      "scenario": "tracks/ecommerce/scenarios/02-queue-warehouse-1.4.0.json",
+      "targets": [
+        "ecommerce.operations-access.fulfilment-queue.1b"
+      ],
+      "desc": "The queue renders West for the deterministic Desk Lamp allocation even though the order reserved stock in East.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "{(l.warehouseNames || []).join(\", \") || \"Unknown\"}",
+          "replace": "{\"West\"}"
+        }
+      ]
+    },
+    {
+      "id": "cart-repeat-does-not-increment",
+      "scenario": "tracks/ecommerce/scenarios/progression-cart-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.cart-checkout.cart.4a"
+      ],
+      "desc": "An existing cart line remains at its old quantity.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "{ $inc: { \"items.$.quantity\": qty },",
+          "replace": "{ $inc: { \"items.$.quantity\": 0 },"
+        }
+      ]
+    },
+    {
+      "id": "checkout-leaves-cart-claimed",
+      "scenario": "tracks/ecommerce/scenarios/progression-cart-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.cart-checkout.cart.4d"
+      ],
+      "desc": "Checkout creates an order without emptying the cart.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "{ $set: { items: [], promotionCode: \"\", discount: 0 } });",
+          "replace": "{ $set: { promotionCode: \"\", discount: 0 } });"
+        }
+      ]
+    },
+    {
+      "id": "catalog-initial-ranking-is-reversed",
+      "scenario": "tracks/ecommerce/scenarios/01-catalog-ranking-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog-ranking.2b"
+      ],
+      "desc": "The initial catalog uses reverse alphabetical order.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "return a.name.localeCompare(b.name);",
+          "replace": "return b.name.localeCompare(a.name);"
+        }
+      ]
+    },
+    {
+      "id": "catalog-search-requires-exact-name",
+      "scenario": "tracks/ecommerce/scenarios/01-catalog-search-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog-search.2d"
+      ],
+      "desc": "Partial catalog search is replaced with exact matching.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "(!q || it.name.toLowerCase().includes(q))",
+          "replace": "(!q || it.name.toLowerCase() === q)"
+        }
+      ]
+    },
+    {
+      "id": "catalog-price-is-offset",
+      "scenario": "tracks/ecommerce/scenarios/01-catalog-values-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog-values.2a"
+      ],
+      "desc": "Public catalog prices are reported one unit too high.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "      ...json,\n      id,\n      stock: stockMap.get(id) || 0,",
+          "replace": "      ...json,\n      id,\n      price: json.price + 1,\n      stock: stockMap.get(id) || 0,"
+        }
+      ]
+    },
+    {
+      "id": "staff-can-see-admin-navigation",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-admin-staff-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.warehouse-admin.access-boundary.7a"
+      ],
+      "desc": "Staff receive the administrator navigation control.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "          {currentUser?.isAdmin && (\n            <button className=\"btn btn-ghost\" data-role=\"admin-link\" onClick={openAdmin}>",
+          "replace": "          {(currentUser?.isAdmin || currentUser?.isStaff) && (\n            <button className=\"btn btn-ghost\" data-role=\"admin-link\" onClick={openAdmin}>"
+        }
+      ]
+    },
+    {
+      "id": "staff-can-use-direct-restock",
+      "scenario": "tracks/ecommerce/scenarios/01-admin-write-staff-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.warehouse-admin.admin-write.103a"
+      ],
+      "desc": "The direct restock route accepts staff instead of administrators only.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/admin/restock\", requireAuth, requireAdmin, async (req, res) => {",
+          "replace": "app.post(\"/api/admin/restock\", requireAuth, requireStaff, async (req, res) => {"
+        }
+      ]
+    },
+    {
+      "id": "restock-adds-the-wrong-quantity",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-stock-live-staff-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.warehouse-admin.warehouse-stock.7c"
+      ],
+      "desc": "A direct restock stores one fewer unit than requested.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  await Stock.findOneAndUpdate(\n    { item_id: item._id, warehouse_id: warehouse._id },\n    { $inc: { quantity: qty } },\n    { upsert: true }\n  );",
+          "replace": "  await Stock.findOneAndUpdate(\n    { item_id: item._id, warehouse_id: warehouse._id },\n    { $inc: { quantity: qty - 1 } },\n    { upsert: true }\n  );"
+        }
+      ]
+    },
+    {
+      "id": "transfer-creates-stock-during-race",
+      "scenario": "tracks/ecommerce/scenarios/02-server-actions-1.1.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.stock-conservation.202d"
+      ],
+      "desc": "A transfer creates one extra unit while a purchase runs.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    { $inc: { quantity: qty } },\n    { upsert: true }\n  );\n\n  await Promise.all([broadcastItems(), broadcastAdmin(), broadcastRecommendedForAll()]);",
+          "replace": "    { $inc: { quantity: qty + 1 } },\n    { upsert: true }\n  );\n\n  await Promise.all([broadcastItems(), broadcastAdmin(), broadcastRecommendedForAll()]);"
+        }
+      ]
+    },
+    {
+      "id": "customer-can-cancel-scheduled-restock",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-access-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-access.scheduled-work-access.317a"
+      ],
+      "desc": "Scheduled-restock cancellation routes omit their staff checks.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "  router.delete(\"/scheduled-restocks/:id\", auth, staff, cancelScheduledRestock);",
+          "replace": "  router.delete(\"/scheduled-restocks/:id\", auth, cancelScheduledRestock);"
+        },
+        {
+          "find": "  adminRouter.delete(\"/scheduled-restocks/:id\", auth, staff, cancelScheduledRestock);",
+          "replace": "  adminRouter.delete(\"/scheduled-restocks/:id\", auth, cancelScheduledRestock);"
+        }
+      ]
+    },
+    {
+      "id": "scheduled-restock-never-becomes-due-after-restart",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-durability-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-durability.restart-survival.311a"
+      ],
+      "desc": "Persisted scheduled restocks are never selected after restart.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "const due = await ScheduledRestock.find({ status: \"pending\", dueAt: { $lte: now } });",
+          "replace": "const due = await ScheduledRestock.find({ status: \"pending\", dueAt: { $lte: new Date(0) } });"
+        }
+      ]
+    },
+    {
+      "id": "reservation-expiry-does-not-release-stock-after-restart",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-durability-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-durability.restart-survival.314a"
+      ],
+      "desc": "Expired reservations clear their record but do not restore stock.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "if (result.modifiedCount) await releaseStock(line.itemId as Types.ObjectId,\n          [...line.reservedWarehouseIds] as Types.ObjectId[]);",
+          "replace": "if (result.modifiedCount) await releaseStock(line.itemId as Types.ObjectId, []);"
+        }
+      ]
+    },
+    {
+      "id": "completed-restock-is-replayed",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-integrity.exactly-once.311a"
+      ],
+      "desc": "A completed scheduled restock remains pending and applies repeatedly.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "{ $set: { status: \"applied\" } }, { new: true });",
+          "replace": "{ $set: { status: \"pending\" } }, { new: true });"
+        }
+      ]
+    },
+    {
+      "id": "expired-reservation-is-released-repeatedly",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-integrity.stock-conservation.313a"
+      ],
+      "desc": "An expired reservation keeps its allocation and restores it repeatedly.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "} } }, { $set: { \"items.$.reservedWarehouseIds\": [] } }, { timestamps: false });",
+          "replace": "} } }, { $set: { \"items.$.reservedWarehouseIds\": line.reservedWarehouseIds } }, { timestamps: false });"
+        }
+      ]
+    },
+    {
+      "id": "checkout-decrements-reserved-stock-again",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-integrity.stock-conservation.314a"
+      ],
+      "desc": "Checkout decrements stock after the reservation already did.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  const order = await Order.create({ userId, items: orderLines, total, discount });",
+          "replace": "  await Stock.updateOne({ item_id: orderLines[0].itemId }, { $inc: { quantity: -1 } });\n  const order = await Order.create({ userId, items: orderLines, total, discount });"
+        }
+      ]
+    },
+    {
+      "id": "cart-add-does-not-reserve-stock",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.reservations.reservations.301a"
+      ],
+      "desc": "Adding to the cart records an allocation without reserving stock.",
+      "file": "server/src/stock-reservations.ts",
+      "edits": [
+        {
+          "find": "      { $inc: { quantity: -1 } },",
+          "replace": "      { $inc: { quantity: 0 } },"
+        }
+      ]
+    },
+    {
+      "id": "reservation-timer-does-not-decrease",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.reservations.reservations.305a"
+      ],
+      "desc": "The cart always reports a fresh reservation timer.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "? Math.max(0, Math.ceil((line.reservationExpiresAt.getTime() - Date.now()) / 1000)) : 0,",
+          "replace": "? 90 : 0,"
+        }
+      ]
+    },
+    {
+      "id": "reservation-checkout-does-not-clear-cart",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.reservations.reservations.306a"
+      ],
+      "desc": "Reservation checkout leaves the claimed cart lines in place.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "{ $set: { items: [], promotionCode: \"\", discount: 0 } });",
+          "replace": "{ $set: { promotionCode: \"\", discount: 0 } });"
+        }
+      ]
+    },
+    {
+      "id": "expired-reservation-is-not-marked",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.reservations.reservations.307a"
+      ],
+      "desc": "Expired cart lines are never marked as expired.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "expired: Boolean(line.reservationExpiresAt && line.reservationExpiresAt.getTime() <= Date.now()),",
+          "replace": "expired: false,"
+        }
+      ]
+    },
+    {
+      "id": "quantity-change-does-not-renew-reservation",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.reservations.reservations.308a"
+      ],
+      "desc": "Raising cart quantity keeps the old reservation deadline.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "        $set: { \"items.$.reservationExpiresAt\": new Date(Date.now() + 90_000),\n          inactiveExpiresAt: new Date(Date.now() + 300_000) },",
+          "replace": "        $set: { inactiveExpiresAt: new Date(Date.now() + 300_000) },"
+        }
+      ]
+    },
+    {
+      "id": "scheduled-restock-countdown-is-fixed",
+      "scenario": "tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.scheduled-restocks.scheduled-restocks.302a"
+      ],
+      "desc": "The pending restock UI shows a fixed countdown.",
+      "file": "client/src/ProgressionPanel.tsx",
+      "edits": [
+        {
+          "find": "{Math.max(0, Math.ceil((new Date(entry.dueAt).getTime() - Date.now()) / 1000))}",
+          "replace": "{90}"
+        }
+      ]
+    },
+    {
+      "id": "due-restock-does-not-change-stock",
+      "scenario": "tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.scheduled-restocks.scheduled-restocks.305a"
+      ],
+      "desc": "A due restock is recorded without adding stock.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "{ $inc: { quantity: claimed.quantity } });",
+          "replace": "{ $inc: { quantity: 0 } });"
+        }
+      ]
+    },
+    {
+      "id": "cancelled-restock-remains-pending",
+      "scenario": "tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.scheduled-restocks.scheduled-restocks.306a"
+      ],
+      "desc": "Cancelling a restock leaves it pending so it later applies.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "{ $set: { status: \"cancelled\" } }, { new: true });",
+          "replace": "{ $set: { status: \"pending\" } }, { new: true });"
+        }
+      ]
+    },
+    {
+      "id": "server-time-restock-never-completes",
+      "scenario": "tracks/ecommerce/scenarios/03-server-time-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.server-time.server-time.312a"
+      ],
+      "desc": "Server time never selects a due restock after restart.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "const due = await ScheduledRestock.find({ status: \"pending\", dueAt: { $lte: now } });",
+          "replace": "const due = await ScheduledRestock.find({ status: \"pending\", dueAt: { $lte: new Date(0) } });"
+        }
+      ]
+    },
+    {
+      "id": "closed-browser-reservation-never-releases",
+      "scenario": "tracks/ecommerce/scenarios/03-server-time-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.server-time.server-time.313a"
+      ],
+      "desc": "A reservation that expires without a browser does not restore stock.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "if (result.modifiedCount) await releaseStock(line.itemId as Types.ObjectId,\n          [...line.reservedWarehouseIds] as Types.ObjectId[]);",
+          "replace": "if (result.modifiedCount) await releaseStock(line.itemId as Types.ObjectId, []);"
+        }
+      ]
+    },
+    {
+      "id": "catalog-product-name-is-not-published",
+      "scenario": "tracks/ecommerce/scenarios/progression-catalog-management-1.0.1.json",
+      "targets": [
+        "ecommerce.progression.catalog-management.catalog-management.622a"
+      ],
+      "desc": "The public product card omits the submitted name while retaining the product and its variants.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "      <div className=\"item-name\" data-role=\"item-name\">\n        {item.name}\n      </div>",
+          "replace": "      <div className=\"item-name\" data-role=\"item-name\">\n        {item.name === \"Travel Mug\" ? \"\" : item.name}\n      </div>"
+        }
+      ]
+    },
+    {
+      "id": "catalog-variants-are-discarded",
+      "scenario": "tracks/ecommerce/scenarios/progression-catalog-management-1.0.1.json",
+      "targets": [
+        "ecommerce.progression.catalog-management.catalog-management.622b"
+      ],
+      "desc": "Catalog management stores the submitted product without its named variants.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "const item = await Item.create({ name, price, category, variants });",
+          "replace": "const item = await Item.create({ name, price, category, variants: [] });"
+        }
+      ]
+    },
+    {
+      "id": "checkout-records-wrong-payment-amount",
+      "scenario": "tracks/ecommerce/scenarios/progression-core-business-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.payment-records.payment-records.623a"
+      ],
+      "desc": "Checkout records a payment above the charged total.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  await Payment.create({ orderId: order._id, userId, amount: total, status: \"paid\" });",
+          "replace": "  await Payment.create({ orderId: order._id, userId, amount: total + 1, status: \"paid\" });"
+        }
+      ]
+    },
+    {
+      "id": "payment-state-repeats-each-record",
+      "scenario": "tracks/ecommerce/scenarios/progression-core-business-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.payment-records.payment-records.623b"
+      ],
+      "desc": "The order response repeats every payment record.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "payments: (byOrder.get(String(order._id)) ?? []).map(payment => payment.toJSON()),",
+          "replace": "payments: [...(byOrder.get(String(order._id)) ?? []), ...(byOrder.get(String(order._id)) ?? [])].map(payment => payment.toJSON()),"
+        }
+      ]
+    },
+    {
+      "id": "profile-save-drops-address",
+      "scenario": "tracks/ecommerce/scenarios/progression-customer-profile-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.customer-profile.customer-profile.620a"
+      ],
+      "desc": "A saved profile stores the wrong address.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "{ userId: req.progressionUser._id, name, address }, { upsert: true, new: true });",
+          "replace": "{ userId: req.progressionUser._id, name, address: \"Wrong address\" }, { upsert: true, new: true });"
+        }
+      ]
+    },
+    {
+      "id": "profile-read-is-not-owner-scoped",
+      "scenario": "tracks/ecommerce/scenarios/progression-customer-profile-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.customer-profile.customer-profile.620b"
+      ],
+      "desc": "Profile reads return another account profile.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "user ? Profile.findOne({ userId: user._id }) : null,",
+          "replace": "user ? Profile.findOne({}) : null,"
+        }
+      ]
+    },
+    {
+      "id": "faceted-search-ignores-category",
+      "scenario": "tracks/ecommerce/scenarios/progression-faceted-filters-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.faceted-search.faceted-search.401a"
+      ],
+      "desc": "Faceted search ignores the selected category.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "&& (!categoryFilter || it.category === categoryFilter)",
+          "replace": "&& (!categoryFilter || true)"
+        }
+      ]
+    },
+    {
+      "id": "pagination-repeats-first-page",
+      "scenario": "tracks/ecommerce/scenarios/progression-faceted-pagination-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.faceted-search.faceted-search.402a"
+      ],
+      "desc": "Every catalog page repeats the first page.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "const searchResults = filteredItems.slice(searchPage * CATALOG_PAGE_SIZE,\n    searchPage * CATALOG_PAGE_SIZE + CATALOG_PAGE_SIZE);",
+          "replace": "const searchResults = filteredItems.slice(0, CATALOG_PAGE_SIZE);"
+        }
+      ]
+    },
+    {
+      "id": "managed-support-reply-is-not-saved",
+      "scenario": "tracks/ecommerce/scenarios/progression-managed-support-shared-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.managed-support.managed-support-shared.613a"
+      ],
+      "desc": "Managed support saves the wrong reply text.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "    ticket.replies.push({ userId: req.progressionUser._id, username: req.progressionUser.username,\n      body } as any);",
+          "replace": "    ticket.replies.push({ userId: req.progressionUser._id, username: req.progressionUser.username,\n      body: \"Wrong reply\" } as any);"
+        }
+      ]
+    },
+    {
+      "id": "managed-support-allows-another-customer",
+      "scenario": "tracks/ecommerce/scenarios/progression-managed-support-privacy-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.managed-support.managed-support-privacy.613b"
+      ],
+      "desc": "Managed support ownership is not checked.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "    if (user?.isStaff || user?.isAdmin || (ticket.userId && String(ticket.userId) === String(user?._id))) {\n      return ticket;\n    }\n    return null;",
+          "replace": "    return ticket;"
+        }
+      ]
+    },
+    {
+      "id": "notification-preference-is-not-saved",
+      "scenario": "tracks/ecommerce/scenarios/progression-notification-preferences-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.notification-preferences.notification-preferences-persistence.630a"
+      ],
+      "desc": "Notification preferences are always saved as disabled.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "userId: req.progressionUser._id, order: Boolean(req.body?.order), stock: Boolean(req.body?.stock),",
+          "replace": "userId: req.progressionUser._id, order: false, stock: false,"
+        }
+      ]
+    },
+    {
+      "id": "notification-preference-is-not-owner-scoped",
+      "scenario": "tracks/ecommerce/scenarios/progression-notification-preferences-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.notification-preferences.notification-preferences-privacy.630b"
+      ],
+      "desc": "Notification settings read another account preference.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "user ? Preference.findOne({ userId: user._id }) : null,",
+          "replace": "user ? Preference.findOne({}) : null,"
+        }
+      ]
+    },
+    {
+      "id": "active-promotion-has-zero-discount",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-checkout.promotion-checkout-active.621a"
+      ],
+      "desc": "An active promotion is recorded without changing checkout total.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "{ $set: { promotionCode: code, discount: promotion.discount } }, { new: true });",
+          "replace": "{ $set: { promotionCode: code, discount: 0 } }, { new: true });"
+        }
+      ]
+    },
+    {
+      "id": "unavailable-promotions-are-accepted",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-checkout.promotion-checkout-expired.621b",
+        "ecommerce.progression.promotion-checkout.promotion-checkout-exhausted.621c"
+      ],
+      "desc": "Expired and exhausted promotions are accepted.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "    if (!promotion || promotion.start > now || promotion.end < now\n      || promotion.redemptions >= promotion.limit) {",
+          "replace": "    if (!promotion) {"
+        }
+      ]
+    },
+    {
+      "id": "promotion-save-drops-bounded-values",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-rules-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-rules.promotion-rule-values.620a"
+      ],
+      "desc": "Promotion creation drops its bounded discount and limit.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "{ code, discount, limit, start, end }, { upsert: true, new: true });",
+          "replace": "{ code, discount: 1, limit: 1, start, end }, { upsert: true, new: true });"
+        }
+      ]
+    },
+    {
+      "id": "customer-can-create-promotion",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-rules-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-rules.promotion-rule-access.620b"
+      ],
+      "desc": "Promotion creation omits its staff authorization check.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "router.post(\"/promotions\", auth, staff, async (req: Request, res) => {",
+          "replace": "router.post(\"/promotions\", auth, async (req: Request, res) => {"
+        }
+      ]
+    },
+    {
+      "id": "staff-signin-loses-staff-role",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-access-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.staff-access.staff-access.601a"
+      ],
+      "desc": "Signin does not expose the staff role.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    isStaff: user.isStaff, roles: user.roles || [] };",
+          "replace": "    isStaff: false, roles: user.roles || [] };"
+        }
+      ]
+    },
+    {
+      "id": "customer-signin-gains-staff-role",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-access-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.staff-access.staff-access.601b"
+      ],
+      "desc": "Signin falsely exposes every customer as staff.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    isStaff: user.isStaff, roles: user.roles || [] };",
+          "replace": "    isStaff: true, roles: user.roles || [] };"
+        }
+      ]
+    },
+    {
+      "id": "role-assignment-drops-role",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-roles-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.staff-roles.staff-roles.621a"
+      ],
+      "desc": "Administrator role assignments are discarded.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "    target.roles = roles;",
+          "replace": "    target.roles = [];"
+        }
+      ]
+    },
+    {
+      "id": "staff-can-assign-roles",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-roles-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.staff-roles.staff-roles.621b"
+      ],
+      "desc": "Staff can call the role assignment endpoint.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "router.post(\"/staff/roles\", auth, admin, async (req: Request, res) => {",
+          "replace": "router.post(\"/staff/roles\", auth, staff, async (req: Request, res) => {"
+        }
+      ]
+    },
+    {
+      "id": "stock-alert-is-not-created",
+      "scenario": "tracks/ecommerce/scenarios/progression-stock-alerts-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.stock-alerts.stock-alert-delivery.631a"
+      ],
+      "desc": "Restored stock writes an alert under the wrong identity.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "await Notification.updateOne({ userId: alert.userId, key: `stock:${alert.itemId}` },",
+          "replace": "if (false) await Notification.updateOne({ userId: alert.userId, key: `stock:${alert.itemId}` },"
+        }
+      ]
+    },
+    {
+      "id": "stock-alerts-are-not-owner-scoped",
+      "scenario": "tracks/ecommerce/scenarios/progression-stock-alerts-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.stock-alerts.stock-alert-privacy.631b"
+      ],
+      "desc": "Notification reads expose alerts from other accounts.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "user ? Notification.find({ userId: user._id }).sort({ createdAt: -1 }) : [],",
+          "replace": "user ? Notification.find({}).sort({ createdAt: -1 }) : [],"
+        }
+      ]
+    },
+    {
+      "id": "support-history-is-not-persisted-for-owner",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-history-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-history.support-history-persistence.612a"
+      ],
+      "desc": "Signed-in customers cannot reload their support history.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "const ticketFilter = isStaff ? {} : user ? { userId: user._id } : { _id: null };",
+          "replace": "const ticketFilter = isStaff ? {} : { _id: null };"
+        }
+      ]
+    },
+    {
+      "id": "support-history-is-not-owner-scoped",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-history-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-history.support-history-privacy.612b"
+      ],
+      "desc": "Signed-in customers can read other customers support history.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "const ticketFilter = isStaff ? {} : user ? { userId: user._id } : { _id: null };",
+          "replace": "const ticketFilter = isStaff ? {} : user ? {} : { _id: null };"
+        }
+      ]
+    },
+    {
+      "id": "support-intake-returns-no-reference",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-intake-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-intake.support-intake.610a"
+      ],
+      "desc": "Support intake creates a ticket but omits its reference from the response.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "res.status(201).json({ ticket });",
+          "replace": "res.status(201).json({ ticket: { ...ticket.toJSON(), reference: \"\" } });"
+        }
+      ]
+    },
+    {
+      "id": "support-triage-discards-updates",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-triage-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-triage.support-assignment.611a",
+        "ecommerce.progression.support-triage.support-priority.611b",
+        "ecommerce.progression.support-triage.support-status.611c"
+      ],
+      "desc": "Support triage accepts but discards assignment, priority, and status updates.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "const ticket = ticketId\n      ? await SupportTicket.findByIdAndUpdate(ticketId, { $set: update }, { new: true }) : null;",
+          "replace": "const ticket = ticketId\n      ? await SupportTicket.findByIdAndUpdate(ticketId, { $set: {} }, { new: true }) : null;"
+        }
+      ]
+    },
+    {
+      "id": "cart-add-uses-another-account-cart",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-boundary-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.cart-boundary.109a"
+      ],
+      "desc": "Cart add writes to the first account cart instead of the caller cart.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    const incResult = await Cart.updateOne(\n      { userId, \"items.itemId\": itemId },",
+          "replace": "    const incResult = await Cart.updateOne(\n      { \"items.itemId\": itemId },"
+        }
+      ]
+    },
+    {
+      "id": "negative-cart-quantity-is-accepted",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-boundary-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.cart-boundary.109b"
+      ],
+      "desc": "Cart quantity updates accept values below one.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  if (!Number.isInteger(qty) || qty < 1) {\n    return res.status(400).json({ error: \"Quantity must be at least 1\" });\n  }",
+          "replace": "  if (!Number.isInteger(qty)) {\n    return res.status(400).json({ error: \"Quantity must be numeric\" });\n  }"
+        }
+      ]
+    },
+    {
+      "id": "direct-purchase-is-attributed-to-another-account",
+      "scenario": "tracks/ecommerce/scenarios/01-purchase-attribution-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.purchase-attribution.102a"
+      ],
+      "desc": "Direct purchase records the order against another account.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    userId: user._id,\n    items: [",
+          "replace": "    userId: (await User.findOne({ _id: { $ne: user._id } }))!._id,\n    items: ["
+        }
+      ]
+    },
+    {
+      "id": "concurrent-cart-add-does-not-increment",
+      "scenario": "tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.1.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.duplicate-checkout.203a"
+      ],
+      "desc": "Concurrent cart adds leave the line quantity unchanged.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "{ $inc: { \"items.$.quantity\": qty },",
+          "replace": "{ $inc: { \"items.$.quantity\": 0 },"
+        }
+      ]
+    },
+    {
+      "id": "checkout-claim-is-not-atomic",
+      "scenario": "tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.1.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.duplicate-checkout.203b"
+      ],
+      "desc": "Concurrent checkout reads the cart without atomically claiming it.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "const claimedCart = await Cart.findOneAndUpdate({ userId },\n    { $set: { items: [], promotionCode: \"\", discount: 0 } });",
+          "replace": "const claimedCart = await Cart.findOne({ userId });"
+        }
+      ]
+    },
+    {
+      "id": "last-unit-allows-negative-stock",
+      "scenario": "tracks/ecommerce/scenarios/01-last-unit-2.3.1.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.last-unit.201a",
+        "ecommerce.spec.concurrency-safety.last-unit.201b",
+        "ecommerce.spec.concurrency-safety.last-unit.201c"
+      ],
+      "desc": "Stock reservation can decrement a warehouse below zero.",
+      "file": "server/src/stock-reservations.ts",
+      "edits": [
+        {
+          "find": "{ item_id: itemId, quantity: { $gte: 1 } },",
+          "replace": "{ item_id: itemId },"
+        }
+      ]
+    },
+    {
+      "id": "purchase-does-not-reserve-stock-restock-race",
+      "scenario": "tracks/ecommerce/scenarios/01-restock-race-2.3.0.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.restock-race.202a"
+      ],
+      "desc": "Purchases create orders without reducing stock, so the rush loses all three purchase decrements.",
+      "file": "server/src/stock-reservations.ts",
+      "edits": [
+        {
+          "find": "      { $inc: { quantity: -1 } },",
+          "replace": "      { $inc: { quantity: 0 } },"
+        }
+      ]
+    },
+    {
+      "id": "stock-limit-allows-negative-stock",
+      "scenario": "tracks/ecommerce/scenarios/progression-stock-limit-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.stock-limit.3d"
+      ],
+      "desc": "Stock reservation accepts purchases after sellout.",
+      "file": "server/src/stock-reservations.ts",
+      "edits": [
+        {
+          "find": "{ item_id: itemId, quantity: { $gte: 1 } },",
+          "replace": "{ item_id: itemId },"
+        }
+      ]
+    },
+    {
+      "id": "purchase-does-not-reduce-warehouse-stock",
+      "scenario": "tracks/ecommerce/scenarios/progression-books-balance-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.transactional-integrity.books-balance.107b"
+      ],
+      "desc": "Purchases create orders without reducing warehouse stock.",
+      "file": "server/src/stock-reservations.ts",
+      "edits": [
+        {
+          "find": "      { $inc: { quantity: -1 } },",
+          "replace": "      { $inc: { quantity: 0 } },"
+        }
+      ]
+    },
+    {
+      "id": "seeded-air-purifier-price-is-wrong",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog.2a"
+      ],
+      "desc": "The public catalogue is seeded with the wrong authoritative Air Purifier price.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "{ name: \"Air Purifier\", price: 189.0, east: 60, west: 40, description: \"HEPA filtration for cleaner indoor air.\" }",
+          "replace": "{ name: \"Air Purifier\", price: 190.0, east: 60, west: 40, description: \"HEPA filtration for cleaner indoor air.\" }"
+        }
+      ]
+    },
+    {
+      "id": "initial-top-ten-is-reversed",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog.2b"
+      ],
+      "desc": "The client reverses the initial all-zero-purchase ranking but uses the server ranking after a purchase.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "    return items.filter((it) => (!q || it.name.toLowerCase().includes(q))",
+          "replace": "    return (items.every((item) => item.purchaseCount === 0) ? [...items].reverse() : items).filter((it) => (!q || it.name.toLowerCase().includes(q))"
+        }
+      ]
+    },
+    {
+      "id": "search-requires-an-exact-name",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog.2d"
+      ],
+      "desc": "Search compares the whole item name instead of matching a query within it.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "(!q || it.name.toLowerCase().includes(q))",
+          "replace": "(!q || it.name.toLowerCase() === q)"
+        }
+      ]
+    },
+    {
+      "id": "admin-navigation-is-visible-to-customers",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-admin-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.admin-ui.7a"
+      ],
+      "desc": "The client shows admin navigation to every signed-in account rather than administrators only.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "          {currentUser?.isAdmin && (\n            <button className=\"btn btn-ghost\" data-role=\"admin-link\" onClick={openAdmin}>",
+          "replace": "          {currentUser && (\n            <button className=\"btn btn-ghost\" data-role=\"admin-link\" onClick={openAdmin}>"
+        }
+      ]
+    },
+    {
+      "id": "restock-does-not-increase-stock",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-stock-live-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.warehouse-stock.7c"
+      ],
+      "desc": "The restock endpoint accepts a positive quantity but increments authoritative stock by zero.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  await Stock.findOneAndUpdate(\n    { item_id: item._id, warehouse_id: warehouse._id },\n    { $inc: { quantity: qty } },\n    { upsert: true }\n  );",
+          "replace": "  await Stock.findOneAndUpdate(\n    { item_id: item._id, warehouse_id: warehouse._id },\n    { $inc: { quantity: 0 } },\n    { upsert: true }\n  );"
+        }
+      ]
+    },
+    {
+      "id": "customer-can-restock-directly",
+      "scenario": "tracks/ecommerce/scenarios/01-admin-write-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.admin-write.103a"
+      ],
+      "desc": "The direct restock route retains authentication but drops its administrator role gate.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/admin/restock\", requireAuth, requireAdmin, async (req, res) => {",
+          "replace": "app.post(\"/api/admin/restock\", requireAuth, async (req, res) => {"
+        }
+      ]
+    },
+    {
+      "id": "operator-authorization-allows-customer-price-change",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.operations-access.operator-authorization.201b"
+      ],
+      "desc": "The price route keeps authentication but drops its administrator role gate.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/admin/price\", requireAuth, requireAdmin, async (req, res) => {",
+          "replace": "app.post(\"/api/admin/price\", requireAuth, async (req, res) => {"
+        }
+      ]
+    },
+    {
+      "id": "operator-authorization-allows-customer-shipping",
+      "scenario": "tracks/ecommerce/scenarios/02-self-contained-1.4.0.json",
+      "targets": [
+        "ecommerce.operations-access.fulfilment-queue.1e"
+      ],
+      "desc": "The shipping route retains authentication but drops the staff role gate.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/fulfilment/ship\", requireAuth, requireStaff, async (req, res) => {",
+          "replace": "app.post(\"/api/fulfilment/ship\", requireAuth, async (req, res) => {"
+        }
+      ]
+    },
+    {
+      "id": "catalog-price-change-not-broadcast-to-visitors",
+      "scenario": "tracks/ecommerce/scenarios/02-live-price-1.4.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.price-history.4b"
+      ],
+      "desc": "The signed-out search result caches detached rows and ignores later catalog updates.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  }, [items, searchQuery, categoryFilter, minimumPrice, maximumPrice, inStockOnly]);",
+          "replace": "  }, [searchQuery, categoryFilter, minimumPrice, maximumPrice, inStockOnly]);"
+        }
+      ]
+    },
+    {
+      "id": "catalog-price-change-not-broadcast-to-open-carts",
+      "scenario": "tracks/ecommerce/scenarios/02-features.json",
+      "targets": [
+        "ecommerce.returns-pricing.price-history.4c"
+      ],
+      "desc": "The price reaches the catalog but the price route omits its targeted open-cart broadcast.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    broadcastRecommendedForAll(),\n    broadcastCartsContainingItem(item._id),",
+          "replace": "    broadcastRecommendedForAll(),\n    // mutant: carts containing this item are not refreshed"
+        }
+      ]
+    },
+    {
+      "id": "catalog-price-rewrites-receipts",
+      "scenario": "tracks/ecommerce/scenarios/02-paid-price-history-1.4.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.price-history.4a"
+      ],
+      "desc": "Changing a catalog price cascades into saved order lines and recomputes historical order totals.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  const item = await Item.findByIdAndUpdate(itemId, { price: priceNum }, { new: true });\n  if (!item) return res.status(404).json({ error: \"Item not found\" });",
+          "replace": "  const item = await Item.findByIdAndUpdate(itemId, { price: priceNum }, { new: true });\n  if (!item) return res.status(404).json({ error: \"Item not found\" });\n  const historicalOrders = await Order.find({ \"items.itemId\": item._id });\n  for (const historical of historicalOrders) {\n    for (const line of historical.items) {\n      if (line.itemId.toString() === item._id.toString()) line.price = priceNum;\n    }\n    historical.total = historical.items.reduce((sum, line) => sum + line.price * line.quantity, 0);\n    await historical.save();\n  }"
+        }
+      ]
+    },
+    {
+      "id": "catalog-price-rewrites-earned-revenue",
+      "scenario": "tracks/ecommerce/scenarios/02-invariants.json",
+      "targets": [
+        "ecommerce.returns-pricing.refund-accounting.203b"
+      ],
+      "desc": "Changing a catalog price cascades into saved order lines and recomputes historical order totals and revenue.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  const item = await Item.findByIdAndUpdate(itemId, { price: priceNum }, { new: true });\n  if (!item) return res.status(404).json({ error: \"Item not found\" });",
+          "replace": "  const item = await Item.findByIdAndUpdate(itemId, { price: priceNum }, { new: true });\n  if (!item) return res.status(404).json({ error: \"Item not found\" });\n  const historicalOrders = await Order.find({ \"items.itemId\": item._id });\n  for (const historical of historicalOrders) {\n    for (const line of historical.items) {\n      if (line.itemId.toString() === item._id.toString()) line.price = priceNum;\n    }\n    historical.total = historical.items.reduce((sum, line) => sum + line.price * line.quantity, 0);\n    await historical.save();\n  }"
+        }
+      ]
+    },
+    {
+      "id": "returned-line-marker-omitted",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.cancellation-and-return.3c"
+      ],
+      "desc": "A returned order line keeps its persisted returned state, restored stock, and adjusted revenue but omits the visible returned marker.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "l.returned ? \" (returned)\" : \"\"",
+          "replace": "\"\""
+        }
+      ]
+    },
+    {
+      "id": "direct-review-access-is-not-checked",
+      "scenario": "tracks/ecommerce/scenarios/progression-review-access-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.review-access-specifications.review-eligibility-direct.618a"
+      ],
+      "desc": "The direct review action accepts a review from a customer who did not buy the item.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  if (!hasPurchased) {\n    return res.status(403).json({ error: \"You can only review items you have purchased\" });\n  }",
+          "replace": "  if (false && !hasPurchased) {\n    return res.status(403).json({ error: \"You can only review items you have purchased\" });\n  }"
+        }
+      ]
+    },
+    {
+      "id": "support-messages-are-sent-to-other-customers",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-read-privacy-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-privacy-specifications.private-message-delivery.619a"
+      ],
+      "desc": "A customer receives another customer's support message.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "const ticketFilter = isStaff ? {} : user ? { userId: user._id } : { _id: null };",
+          "replace": "const ticketFilter = isStaff ? {} : user ? {} : { _id: null };"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/grader/mutations/postgres-ecommerce-2.0.1.json b/tools/stack-bench/grader/mutations/postgres-ecommerce-2.0.1.json
new file mode 100644
index 00000000000..891d79e88e7
--- /dev/null
+++ b/tools/stack-bench/grader/mutations/postgres-ecommerce-2.0.1.json
@@ -0,0 +1,1716 @@
+{
+  "schemaVersion": 2,
+  "status": "candidate",
+  "fixtureSha256": "356a4fb0602bc1ca4ac5b272ae6d9a434039a7f8da71c2f237a8793988e86fe0",
+  "backend": "postgres",
+  "track": "ecommerce",
+  "note": "Mutation definitions for the PostgreSQL ecommerce reference.",
+  "mutations": [
+    {
+      "id": "signup-ui-does-not-enter-created-account",
+      "scenario": "tracks/ecommerce/scenarios/01-account-create-2.4.0.json",
+      "targets": ["ecommerce.feature.accounts.accounts.1a"],
+      "desc": "Create the account successfully but discard the returned signed-in identity in the client.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "      const r = await api<{ account: Account }>(\"/api/auth/signup\", {\n        method: \"POST\",\n        body: JSON.stringify({ username, password }),\n      });\n      setAccount(r.account);",
+          "replace": "      const r = await api<{ account: Account }>(\"/api/auth/signup\", {\n        method: \"POST\",\n        body: JSON.stringify({ username, password }),\n      });\n      void r;\n      setAccount(null);"
+        }
+      ]
+    },
+    {
+      "id": "duplicate-signup-authenticates-existing-account",
+      "scenario": "tracks/ecommerce/scenarios/01-account-duplicate-2.4.0.json",
+      "targets": ["ecommerce.feature.accounts.accounts.1b"],
+      "desc": "Treat a duplicate signup as a successful session for the pre-existing account.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    if (existing.length > 0) {\n      res.status(409).json({ error: \"username already taken\" });\n      return;\n    }",
+          "replace": "    if (existing.length > 0) {\n      const token = newToken();\n      await db.insert(session).values({ id: token, accountId: existing[0].id });\n      res.cookie(\"sid\", token, { httpOnly: true, sameSite: \"lax\", path: \"/\" });\n      res.json({ account: { id: existing[0].id, username, isAdmin: false, isStaff: false } });\n      return;\n    }"
+        }
+      ]
+    },
+    {
+      "id": "password-verification-is-inverted",
+      "scenario": "tracks/ecommerce/scenarios/01-account-password-2.4.0.json",
+      "targets": ["ecommerce.feature.accounts.accounts.1c"],
+      "desc": "Accept a wrong password instead of enforcing password verification.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    if (rows.length === 0 || !verifyPassword(password, rows[0].passwordHash)) {",
+          "replace": "    if (rows.length === 0 || verifyPassword(password, rows[0].passwordHash)) {"
+        }
+      ]
+    },
+    {
+      "id": "correct-signin-is-refused",
+      "scenario": "tracks/ecommerce/scenarios/01-account-signout-2.4.0.json",
+      "targets": ["ecommerce.feature.accounts.accounts.1d"],
+      "desc": "Preserve wrong-password refusal but reject an otherwise valid sign-in, preventing a signed-out account from returning.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    const acc = rows[0];\n    const token = newToken();",
+          "replace": "    const acc = rows[0];\n    if (username === acc.username) {\n      res.status(401).json({ error: \"sign in is unavailable\" });\n      return;\n    }\n    const token = newToken();"
+        }
+      ]
+    },
+    {
+      "id": "reload-discards-session-identity",
+      "scenario": "tracks/ecommerce/scenarios/01-account-reload-2.4.0.json",
+      "targets": ["ecommerce.spec.state-durability.session-reload.1e"],
+      "desc": "Ignore the authenticated identity returned during initial page hydration.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "        setAccount(me.account);",
+          "replace": "        setAccount(null);"
+        }
+      ]
+    },
+    {
+      "id": "purchase-does-not-broadcast-ranking",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": ["ecommerce.spec.live-state.ranking.2c"],
+      "desc": "Commit the purchase but omit the catalog broadcast that updates already-open rankings.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    lastCatalogJson = json;\n    io.emit(\"items:update\", { items: catalog });",
+          "replace": "    lastCatalogJson = json;\n    // mutant: changed catalog state is not broadcast"
+        }
+      ]
+    },
+    {
+      "id": "signed-out-visitors-see-purchase-controls",
+      "scenario": "tracks/ecommerce/scenarios/progression-signed-out-purchase-1.0.0.json",
+      "targets": ["ecommerce.spec.access-control.signed-out-purchase.3a"],
+      "desc": "Render purchasing controls without requiring a customer account.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  const canBuy = !!account && !account.isAdmin && !account.isStaff;",
+          "replace": "  const canBuy = !account || (!account.isAdmin && !account.isStaff);"
+        }
+      ]
+    },
+    {
+      "id": "purchase-stock-change-is-not-broadcast--01-buying",
+      "scenario": "tracks/ecommerce/scenarios/01-buying-2.4.0.json",
+      "targets": ["ecommerce.spec.live-state.purchase-stock.3b"],
+      "desc": "Commit purchases without broadcasting their stock changes, breaking live stock and sold-out visibility.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    lastCatalogJson = json;\n    io.emit(\"items:update\", { items: catalog });",
+          "replace": "    lastCatalogJson = json;\n    // mutant: changed stock is not broadcast"
+        }
+      ]
+    },
+    {
+      "id": "purchase-stock-change-is-not-broadcast--stock-limit",
+      "scenario": "tracks/ecommerce/scenarios/progression-stock-limit-1.0.0.json",
+      "targets": ["ecommerce.spec.concurrency-safety.stock-limit.3d"],
+      "desc": "Commit purchases without broadcasting their stock changes, breaking live stock and sold-out visibility.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    lastCatalogJson = json;\n    io.emit(\"items:update\", { items: catalog });",
+          "replace": "    lastCatalogJson = json;\n    // mutant: changed stock is not broadcast"
+        }
+      ]
+    },
+    {
+      "id": "direct-purchase-order-total-is-offset",
+      "scenario": "tracks/ecommerce/scenarios/progression-purchasing-1.0.0.json",
+      "targets": ["ecommerce.feature.purchasing.purchase-order.3c"],
+      "desc": "Record a direct purchase one dollar above the stored price.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "        [accountId, price]\n      );",
+          "replace": "        [accountId, Number(price) + 1]\n      );"
+        }
+      ]
+    },
+    {
+      "id": "reload-hydrates-an-empty-cart",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-2.4.0.json",
+      "targets": ["ecommerce.spec.state-durability.cart-reload.4b"],
+      "desc": "Return an empty cart from both reload hydration paths while preserving later live cart broadcasts.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    const state = await buildCartState(req.account!.id);\n    res.json(state);",
+          "replace": "    await buildCartState(req.account!.id);\n    res.json({ items: [], total: 0 });"
+        },
+        {
+          "find": "      const cartState = await buildCartState(acc.id);\n      socket.emit(\"cart:update\", cartState);",
+          "replace": "      await buildCartState(acc.id);\n      socket.emit(\"cart:update\", { items: [], total: 0 });"
+        }
+      ]
+    },
+    {
+      "id": "signed-out-visitors-do-not-see-reviews",
+      "scenario": "tracks/ecommerce/scenarios/01-review-visibility-2.4.0.json",
+      "targets": ["ecommerce.feature.reviews.reviews.6a"],
+      "desc": "Hide an item's reviews whenever the viewer is signed out.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "          {reviews.length === 0 ? (",
+          "replace": "          {!account || reviews.length === 0 ? ("
+        }
+      ]
+    },
+    {
+      "id": "review-average-update-is-not-broadcast",
+      "scenario": "tracks/ecommerce/scenarios/01-review-rating-live-2.4.0.json",
+      "targets": ["ecommerce.spec.live-state.rating.6c"],
+      "desc": "Return the new average to the submitter but omit the live review update to other viewers.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    io.emit(\"review:update\", { itemId, reviews, average });",
+          "replace": "    // mutant: other open review views do not receive the new average"
+        }
+      ]
+    },
+    {
+      "id": "admin-warehouse-view-drops-one-location",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-admin-staff-1.0.0.json",
+      "targets": ["ecommerce.feature.warehouse-admin.warehouse-view.7b"],
+      "desc": "Render only 23 of the 24 item-by-warehouse stock locations.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "          {admin.locations.map((loc) => {",
+          "replace": "          {admin.locations.slice(0, 23).map((loc) => {"
+        }
+      ]
+    },
+    {
+      "id": "unauthenticated-direct-purchase-uses-default-account",
+      "scenario": "tracks/ecommerce/scenarios/01-purchase-session-2.4.0.json",
+      "targets": ["ecommerce.spec.access-control.purchase-session.101a"],
+      "desc": "Remove purchase authentication and attribute unauthenticated requests to a default account.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  \"/api/items/:id/buy\",\n  requireAuth,",
+          "replace": "  \"/api/items/:id/buy\","
+        },
+        {
+          "find": "    const itemId = Number(req.params.id);\n    const accountId = req.account!.id;\n\n    const client = await pool.connect();",
+          "replace": "    const itemId = Number(req.params.id);\n    const accountId = req.account?.id ?? 1;\n\n    const client = await pool.connect();"
+        }
+      ]
+    },
+    {
+      "id": "direct-purchase-is-attributed-to-previous-account",
+      "scenario": "tracks/ecommerce/scenarios/01-purchase-attribution-2.4.0.json",
+      "targets": ["ecommerce.spec.access-control.purchase-attribution.102a"],
+      "desc": "Create the direct-purchase order for the preceding account id rather than the authenticated caller.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    const itemId = Number(req.params.id);\n    const accountId = req.account!.id;\n\n    const client = await pool.connect();",
+          "replace": "    const itemId = Number(req.params.id);\n    const accountId = req.account!.id - 1;\n\n    const client = await pool.connect();"
+        }
+      ]
+    },
+    {
+      "id": "direct-purchase-uses-constant-price",
+      "scenario": "tracks/ecommerce/scenarios/01-server-price-2.4.0.json",
+      "targets": ["ecommerce.spec.transactional-integrity.server-price.104a"],
+      "desc": "Create a direct-purchase order at a hard-coded price instead of the current stored price.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "        [accountId, price]\n      );",
+          "replace": "        [accountId, \"1.00\"]\n      );"
+        }
+      ]
+    },
+    {
+      "id": "account-state-reload-discards-session",
+      "scenario": "tracks/ecommerce/scenarios/progression-account-state-reload-1.0.1.json",
+      "targets": [
+        "ecommerce.spec.state-durability.account-state-recovery.105a"
+      ],
+      "desc": "Discard the authenticated account during reload hydration, making its cart and orders unavailable.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "        setAccount(me.account);",
+          "replace": "        setAccount(null);"
+        }
+      ]
+    },
+    {
+      "id": "offline-event-clears-account-state",
+      "scenario": "tracks/ecommerce/scenarios/progression-account-state-reconnect-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.state-durability.account-state-recovery.105b"
+      ],
+      "desc": "Treat a temporary offline event as a sign-out and clear the account and cart state.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  useEffect(() => {\n    const socket = io({ path: \"/socket.io\" });",
+          "replace": "  useEffect(() => {\n    const clearAccountOffline = () => {\n      setAccount(null);\n      setCart({ items: [], total: 0 });\n    };\n    window.addEventListener(\"offline\", clearAccountOffline, { once: true });\n    const socket = io({ path: \"/socket.io\" });"
+        }
+      ]
+    },
+    {
+      "id": "purchase-does-not-decrement-warehouse-stock",
+      "scenario": "tracks/ecommerce/scenarios/progression-books-balance-1.0.0.json",
+      "targets": ["ecommerce.spec.transactional-integrity.books-balance.107b"],
+      "desc": "Create purchase orders without decrementing their selected warehouse stock row.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "         UPDATE stock s SET quantity = quantity - 1\n         FROM target t",
+          "replace": "         UPDATE stock s SET quantity = quantity\n         FROM target t"
+        }
+      ]
+    },
+    {
+      "id": "review-route-skips-purchase-eligibility",
+      "scenario": "tracks/ecommerce/scenarios/01-review-eligibility-2.4.0.json",
+      "targets": ["ecommerce.spec.access-control.review-eligibility.108a"],
+      "desc": "Allow review creation even when the caller has never purchased the item.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    if (purchased.rowCount === 0) {",
+          "replace": "    if (false && purchased.rowCount === 0) {"
+        }
+      ]
+    },
+    {
+      "id": "only-shipped-orders-earn-review-eligibility",
+      "scenario": "tracks/ecommerce/scenarios/01-review-eligibility-2.4.0.json",
+      "targets": ["ecommerce.spec.access-control.review-eligibility.108b"],
+      "desc": "Incorrectly require an order to be shipped before its buyer may review the item.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "       WHERE o.account_id = $1 AND oi.item_id = $2 LIMIT 1`,",
+          "replace": "       WHERE o.account_id = $1 AND oi.item_id = $2 AND o.status = 'shipped' LIMIT 1`,"
+        }
+      ]
+    },
+    {
+      "id": "cart-update-accepts-negative-quantity",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-boundary-2.4.0.json",
+      "targets": ["ecommerce.spec.access-control.cart-boundary.109b"],
+      "desc": "Accept a negative cart quantity update and persist it instead of refusing the named action.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    if (!Number.isInteger(quantity) || quantity < 1) {",
+          "replace": "    if (!Number.isInteger(quantity)) {"
+        }
+      ]
+    },
+    {
+      "id": "oversell-no-row-lock",
+      "scenario": "tracks/ecommerce/scenarios/01-last-unit-2.3.1.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.last-unit.201a",
+        "ecommerce.spec.concurrency-safety.last-unit.201b",
+        "ecommerce.spec.concurrency-safety.last-unit.201c"
+      ],
+      "desc": "Drop the row lock so simultaneous buyers can select the same remaining units.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "           FOR UPDATE\n           LIMIT 1",
+          "replace": "           LIMIT 1"
+        }
+      ]
+    },
+    {
+      "id": "purchase-does-not-reserve-stock-restock-race",
+      "scenario": "tracks/ecommerce/scenarios/01-restock-race-2.3.0.json",
+      "targets": ["ecommerce.spec.concurrency-safety.restock-race.202a"],
+      "desc": "Create each purchase without decrementing stock, breaking conservation during the restock race.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "         UPDATE stock s SET quantity = quantity - 1\n         FROM target t",
+          "replace": "         UPDATE stock s SET quantity = quantity\n         FROM target t"
+        }
+      ]
+    },
+    {
+      "id": "external-stock-polling-disabled",
+      "scenario": "tracks/ecommerce/scenarios/01-external-live-sync-1.1.0.json",
+      "targets": ["ecommerce.spec.external-data-sync.external-stock.901a"],
+      "desc": "Stop reconciling direct database changes while the server remains online.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  broadcastCatalog().catch((err) => console.error(\"poll broadcast failed\", err));",
+          "replace": "  // mutant: direct database catalog changes are never reconciled"
+        }
+      ]
+    },
+    {
+      "id": "server-restart-does-not-resynchronize-catalog",
+      "scenario": "tracks/ecommerce/scenarios/01-external-server-restart-sync-1.1.0.json",
+      "targets": ["ecommerce.spec.external-data-sync.external-stock.901c"],
+      "desc": "After a server restart, omit both connection-time catalog hydration and periodic authoritative reconciliation.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    const catalog = await buildCatalog();\n    socket.emit(\"items:update\", { items: catalog });",
+          "replace": "    // mutant: reconnecting clients retain their pre-restart catalog"
+        },
+        {
+          "find": "  broadcastCatalog().catch((err) => console.error(\"poll broadcast failed\", err));",
+          "replace": "  // mutant: restart recovery does not reconcile authoritative catalog state"
+        }
+      ]
+    },
+    {
+      "id": "reconnect-does-not-send-current-catalog",
+      "scenario": "tracks/ecommerce/scenarios/01-external-reconnect-sync-1.1.0.json",
+      "targets": ["ecommerce.spec.external-data-sync.external-stock.901d"],
+      "desc": "Follow catalog changes until the browser goes offline, then ignore updates after restoration.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  const cartObservationRef = useRef(0);\n\n  function applyCartResponse",
+          "replace": "  const cartObservationRef = useRef(0);\n  const acceptCatalogUpdates = useRef(true);\n  useEffect(() => {\n    const stopCatalogRecovery = () => { acceptCatalogUpdates.current = false; };\n    window.addEventListener(\"offline\", stopCatalogRecovery);\n    return () => window.removeEventListener(\"offline\", stopCatalogRecovery);\n  }, []);\n\n  function applyCartResponse"
+        },
+        {
+          "find": "    socket.on(\"items:update\", (payload: { items: Item[] }) => setItems(payload.items));",
+          "replace": "    socket.on(\"items:update\", (payload: { items: Item[] }) => {\n      if (acceptCatalogUpdates.current) setItems(payload.items);\n    });"
+        }
+      ]
+    },
+    {
+      "id": "open-review-list-ignores-live-update",
+      "scenario": "tracks/ecommerce/scenarios/progression-open-list-live-1.0.0.json",
+      "targets": ["ecommerce.spec.live-state.open-list.902a"],
+      "desc": "Ignore committed review updates in a detail view that is already open.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "          setItemDetail({ reviews: payload.reviews, average: payload.average });",
+          "replace": "          // mutant: the already-open review list ignores committed updates"
+        }
+      ]
+    },
+    {
+      "id": "open-review-list-renders-each-review-twice",
+      "scenario": "tracks/ecommerce/scenarios/progression-open-list-live-1.0.0.json",
+      "targets": ["ecommerce.spec.live-state.open-list.902a"],
+      "desc": "Render every committed review twice in the already-open list.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "            reviews.map((r) => (",
+          "replace": "            [...reviews, ...reviews].map((r) => ("
+        }
+      ]
+    },
+    {
+      "id": "cancel-does-not-restore-stock-feature",
+      "scenario": "tracks/ecommerce/scenarios/02-order-cancellation-core-1.0.0.json",
+      "targets": ["ecommerce.returns-pricing.cancellation-and-return.3a"],
+      "desc": "Cancellation commits but restores zero units to each recorded warehouse row.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "          [l.item_id, l.warehouse_id, l.quantity]\n        );\n      }\n      await client.query(`UPDATE orders SET status = 'cancelled' WHERE id = $1`, [orderId]);",
+          "replace": "          [l.item_id, l.warehouse_id, 0]\n        );\n      }\n      await client.query(`UPDATE orders SET status = 'cancelled' WHERE id = $1`, [orderId]);"
+        }
+      ]
+    },
+    {
+      "id": "cancel-does-not-restore-stock-fresh-client",
+      "scenario": "tracks/ecommerce/scenarios/02-self-contained-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.stock-conservation.202b",
+        "ecommerce.inventory-operations.stock-conservation.202c"
+      ],
+      "desc": "Cancellation commits but restores zero units, so a fresh client reads the persisted shortfall.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "          [l.item_id, l.warehouse_id, l.quantity]\n        );\n      }\n      await client.query(`UPDATE orders SET status = 'cancelled' WHERE id = $1`, [orderId]);",
+          "replace": "          [l.item_id, l.warehouse_id, 0]\n        );\n      }\n      await client.query(`UPDATE orders SET status = 'cancelled' WHERE id = $1`, [orderId]);"
+        }
+      ]
+    },
+    {
+      "id": "cancel-restores-stock-but-keeps-pending-status",
+      "scenario": "tracks/ecommerce/scenarios/02-order-cancellation-history-1.0.0.json",
+      "targets": ["ecommerce.returns-pricing.cancellation-and-return.3b"],
+      "desc": "Cancellation restores allocations but writes pending back to order history.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "await client.query(`UPDATE orders SET status = 'cancelled' WHERE id = $1`, [orderId]);",
+          "replace": "await client.query(`UPDATE orders SET status = 'pending' WHERE id = $1`, [orderId]);"
+        }
+      ]
+    },
+    {
+      "id": "operator-authorization-allows-customer-transfer",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": ["ecommerce.operations-access.operator-authorization.201a"],
+      "desc": "The transfer route replaces its administrator gate with ordinary authentication.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\n  \"/api/admin/transfer\",\n  requireAdmin,",
+          "replace": "app.post(\n  \"/api/admin/transfer\",\n  requireAuth,"
+        }
+      ]
+    },
+    {
+      "id": "customer-can-ship-order-direct-1-1",
+      "scenario": "tracks/ecommerce/scenarios/02-server-actions-1.1.0.json",
+      "targets": ["ecommerce.operations-access.operator-authorization.201c"],
+      "desc": "The shipping route replaces its staff gate with ordinary authentication.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\n  \"/api/fulfilment/ship\",\n  requireStaff,",
+          "replace": "app.post(\n  \"/api/fulfilment/ship\",\n  requireAuth,"
+        }
+      ]
+    },
+    {
+      "id": "customer-can-cancel-foreign-order-1-1",
+      "scenario": "tracks/ecommerce/scenarios/02-server-actions-1.1.0.json",
+      "targets": ["ecommerce.operations-access.order-owner.204a"],
+      "desc": "Cancellation retains authentication and pending-state validation but drops order ownership.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\n  \"/api/orders/:id/cancel\",\n  requireAuth,\n  asyncHandler(async (req, res) => {\n    const orderId = Number(req.params.id);\n    const accountId = req.account!.id;\n    const client = await pool.connect();\n    try {\n      await client.query(\"BEGIN\");\n      const orderRow = await client.query(`SELECT id, account_id, status FROM orders WHERE id = $1 FOR UPDATE`, [orderId]);\n      if (orderRow.rowCount === 0 || orderRow.rows[0].account_id !== accountId) {",
+          "replace": "app.post(\n  \"/api/orders/:id/cancel\",\n  requireAuth,\n  asyncHandler(async (req, res) => {\n    const orderId = Number(req.params.id);\n    const accountId = req.account!.id;\n    const client = await pool.connect();\n    try {\n      await client.query(\"BEGIN\");\n      const orderRow = await client.query(`SELECT id, account_id, status FROM orders WHERE id = $1 FOR UPDATE`, [orderId]);\n      if (orderRow.rowCount === 0) {"
+        }
+      ]
+    },
+    {
+      "id": "queue-depth-lags-one-order",
+      "scenario": "tracks/ecommerce/scenarios/02-fulfilment-live-1.0.0.json",
+      "targets": ["ecommerce.operations-access.fulfilment-queue.1a"],
+      "desc": "The queue renders every order but its visible depth remains one behind.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "<strong data-role=\"queue-depth\">{queue.depth}</strong>",
+          "replace": "<strong data-role=\"queue-depth\">{Math.max(0, queue.depth - 1)}</strong>"
+        }
+      ]
+    },
+    {
+      "id": "customer-sees-fulfilment-navigation",
+      "scenario": "tracks/ecommerce/scenarios/02-fulfilment-access-1.0.0.json",
+      "targets": ["ecommerce.operations-access.fulfilment-queue.1d"],
+      "desc": "The fulfilment navigation is shown to every signed-in account instead of only staff and administrators.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "        {account && (account.isStaff || account.isAdmin) && (\n          <button className=\"btn btn-ghost btn-sm\" data-role=\"staff-link\"",
+          "replace": "        {account && (\n          <button className=\"btn btn-ghost btn-sm\" data-role=\"staff-link\""
+        }
+      ]
+    },
+    {
+      "id": "transfer-debits-source-without-crediting-existing-destination",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.stock-conservation.202a",
+        "ecommerce.inventory-operations.warehouse-transfer.2a"
+      ],
+      "desc": "A transfer debits the source row but inserts or increments the destination by zero, violating both directional movement and total conservation while still committing successfully.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "      await client.query(\n        `INSERT INTO stock (item_id, warehouse_id, quantity) VALUES ($1, $2, $3)\n         ON CONFLICT (item_id, warehouse_id) DO UPDATE SET quantity = stock.quantity + excluded.quantity`,\n        [itemId, toWarehouseId, qty]\n      );",
+          "replace": "      await client.query(\n        `INSERT INTO stock (item_id, warehouse_id, quantity) VALUES ($1, $2, $3)\n         ON CONFLICT (item_id, warehouse_id) DO UPDATE SET quantity = stock.quantity + excluded.quantity`,\n        [itemId, toWarehouseId, 0]\n      );"
+        }
+      ]
+    },
+    {
+      "id": "transfer-warehouse-totals-omit-destination-credit",
+      "scenario": "tracks/ecommerce/scenarios/02-transfer-totals-1.4.0.json",
+      "targets": ["ecommerce.inventory-operations.warehouse-transfer.2b"],
+      "desc": "A transfer debits the source but inserts or increments the destination by zero, so the live warehouse totals do not move in opposite directions.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "      await client.query(\n        `INSERT INTO stock (item_id, warehouse_id, quantity) VALUES ($1, $2, $3)\n         ON CONFLICT (item_id, warehouse_id) DO UPDATE SET quantity = stock.quantity + excluded.quantity`,\n        [itemId, toWarehouseId, qty]\n      );",
+          "replace": "      await client.query(\n        `INSERT INTO stock (item_id, warehouse_id, quantity) VALUES ($1, $2, $3)\n         ON CONFLICT (item_id, warehouse_id) DO UPDATE SET quantity = stock.quantity + excluded.quantity`,\n        [itemId, toWarehouseId, 0]\n      );"
+        }
+      ]
+    },
+    {
+      "id": "transfer-overdraft-guard-removed",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": ["ecommerce.inventory-operations.warehouse-transfer.2c"],
+      "desc": "The transaction no longer rejects a source warehouse with insufficient quantity, allowing an overdrawn transfer to commit.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "      if (available < qty) {\n        await client.query(\"ROLLBACK\");\n        res.status(409).json({ error: \"warehouse does not have enough stock to transfer\" });\n        return;\n      }",
+          "replace": "      // mutant: insufficient source stock is not rejected"
+        }
+      ]
+    },
+    {
+      "id": "low-stock-excludes-boundary-ten",
+      "scenario": "tracks/ecommerce/scenarios/02-low-stock-1.4.0.json",
+      "targets": ["ecommerce.inventory-operations.operational-views.5a"],
+      "desc": "The low-stock view uses a strict boundary and omits items with exactly ten units.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    .filter((it) => it.stock <= 10)",
+          "replace": "    .filter((it) => it.stock < 10)"
+        }
+      ]
+    },
+    {
+      "id": "category-totals-ignore-pending-purchases",
+      "scenario": "tracks/ecommerce/scenarios/02-operational-category-totals-1.0.0.json",
+      "targets": ["ecommerce.inventory-operations.operational-views.5b"],
+      "desc": "Category totals include only shipped orders, so a newly accepted pending purchase is absent from the live totals.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "           COALESCE(SUM(CASE WHEN oi.returned = false AND o.status != 'cancelled' THEN oi.quantity ELSE 0 END), 0)::int AS units,\n           COALESCE(SUM(CASE WHEN oi.returned = false AND o.status != 'cancelled' THEN oi.quantity * oi.price ELSE 0 END), 0) AS revenue",
+          "replace": "           COALESCE(SUM(CASE WHEN oi.returned = false AND o.status = 'shipped' THEN oi.quantity ELSE 0 END), 0)::int AS units,\n           COALESCE(SUM(CASE WHEN oi.returned = false AND o.status = 'shipped' THEN oi.quantity * oi.price ELSE 0 END), 0) AS revenue"
+        }
+      ]
+    },
+    {
+      "id": "recommendations-ignore-pending-purchases",
+      "scenario": "tracks/ecommerce/scenarios/02-operational-recommendations-1.0.0.json",
+      "targets": ["ecommerce.inventory-operations.operational-views.5c"],
+      "desc": "Personal recommendations derive categories only from shipped orders, so a newly accepted pending purchase has no influence.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "     WHERE o.account_id = $1 AND oi.returned = false AND o.status != 'cancelled'`,",
+          "replace": "     WHERE o.account_id = $1 AND oi.returned = false AND o.status = 'shipped'`,"
+        }
+      ]
+    },
+    {
+      "id": "purchases-do-not-affect-best-sellers",
+      "scenario": "tracks/ecommerce/scenarios/02-operational-best-sellers-1.0.0.json",
+      "targets": ["ecommerce.inventory-operations.operational-views.5d"],
+      "desc": "Rank signed-out recommendations without purchase counts.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "      WHERE oi.returned = false AND o.status != 'cancelled'\n      GROUP BY oi.item_id",
+          "replace": "      WHERE FALSE\n      GROUP BY oi.item_id"
+        }
+      ]
+    },
+    {
+      "id": "queue-warehouse-reports-west",
+      "scenario": "tracks/ecommerce/scenarios/02-queue-warehouse-1.4.0.json",
+      "targets": ["ecommerce.operations-access.fulfilment-queue.1b"],
+      "desc": "The queue renders West for the deterministic Desk Lamp allocation even though the order reserved stock in East.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "{line.warehouse}",
+          "replace": "{\"West\"}"
+        }
+      ]
+    },
+    {
+      "id": "transfer-overwrites-concurrent-purchase-with-stale-stock",
+      "scenario": "tracks/ecommerce/scenarios/02-server-actions-1.1.0.json",
+      "targets": ["ecommerce.inventory-operations.stock-conservation.202d"],
+      "desc": "The Headphones transfer reads East stock before taking a row lock, signals the concurrent purchase to proceed, waits for that purchase to commit, then writes its stale source result and credits West. Both actions return accepted, but the stale transfer write loses the purchase's decrement, proving the exact-total check detects broken cross-operation synchronization.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "const PORT = Number(process.env.PORT) || 6301;\n\nconst app = express();",
+          "replace": "const PORT = Number(process.env.PORT) || 6301;\n\nlet mutationTransferCapturedResolve!: () => void;\nconst mutationTransferCaptured = new Promise<void>((resolve) => {\n  mutationTransferCapturedResolve = resolve;\n});\nlet mutationBuyCommittedResolve!: () => void;\nconst mutationBuyCommitted = new Promise<void>((resolve) => {\n  mutationBuyCommittedResolve = resolve;\n});\n\nconst app = express();"
+        },
+        {
+          "find": "    const itemId = Number(req.params.id);\n    const accountId = req.account!.id;\n\n    const client = await pool.connect();",
+          "replace": "    const itemId = Number(req.params.id);\n    const accountId = req.account!.id;\n    const mutationBuyItem = await pool.query(`SELECT name FROM item WHERE id = $1`, [itemId]);\n    if (mutationBuyItem.rows[0]?.name === \"Headphones\") await mutationTransferCaptured;\n\n    const client = await pool.connect();"
+        },
+        {
+          "find": "      await client.query(\n        `INSERT INTO order_item (order_id, item_id, item_name, quantity, price, warehouse_id) VALUES ($1, $2, $3, 1, $4, $5)`,\n        [orderId, itemId, name, price, warehouseId]\n      );\n      await client.query(\"COMMIT\");",
+          "replace": "      await client.query(\n        `INSERT INTO order_item (order_id, item_id, item_name, quantity, price, warehouse_id) VALUES ($1, $2, $3, 1, $4, $5)`,\n        [orderId, itemId, name, price, warehouseId]\n      );\n      await client.query(\"COMMIT\");\n      if (name === \"Headphones\") mutationBuyCommittedResolve();"
+        },
+        {
+          "find": "    if (\n      !Number.isInteger(itemId) ||\n      !Number.isInteger(fromWarehouseId) ||\n      !Number.isInteger(toWarehouseId) ||\n      !Number.isInteger(qty) ||\n      qty < 1 ||\n      fromWarehouseId === toWarehouseId\n    ) {\n      res.status(400).json({ error: \"invalid transfer request\" });\n      return;\n    }\n    const client = await pool.connect();",
+          "replace": "    if (\n      !Number.isInteger(itemId) ||\n      !Number.isInteger(fromWarehouseId) ||\n      !Number.isInteger(toWarehouseId) ||\n      !Number.isInteger(qty) ||\n      qty < 1 ||\n      fromWarehouseId === toWarehouseId\n    ) {\n      res.status(400).json({ error: \"invalid transfer request\" });\n      return;\n    }\n    const mutationTransferItem = await pool.query(`SELECT name FROM item WHERE id = $1`, [itemId]);\n    const mutationStaleSource = mutationTransferItem.rows[0]?.name === \"Headphones\"\n      ? await pool.query(\n          `SELECT quantity FROM stock WHERE item_id = $1 AND warehouse_id = $2`,\n          [itemId, fromWarehouseId]\n        )\n      : null;\n    const mutationStaleSourceQuantity = mutationStaleSource?.rows[0]?.quantity ?? null;\n    if (mutationStaleSourceQuantity != null) {\n      mutationTransferCapturedResolve();\n      await mutationBuyCommitted;\n    }\n    const client = await pool.connect();"
+        },
+        {
+          "find": "      await client.query(`UPDATE stock SET quantity = quantity - $1 WHERE item_id = $2 AND warehouse_id = $3`, [\n        qty,\n        itemId,\n        fromWarehouseId,\n      ]);",
+          "replace": "      if (mutationStaleSourceQuantity != null) {\n        await client.query(\n          `UPDATE stock SET quantity = $1 WHERE item_id = $2 AND warehouse_id = $3`,\n          [mutationStaleSourceQuantity - qty, itemId, fromWarehouseId]\n        );\n      } else {\n        await client.query(`UPDATE stock SET quantity = quantity - $1 WHERE item_id = $2 AND warehouse_id = $3`, [\n          qty,\n          itemId,\n          fromWarehouseId,\n        ]);\n      }"
+        }
+      ]
+    },
+    {
+      "id": "progression-profile-address-is-discarded",
+      "scenario": "tracks/ecommerce/scenarios/progression-customer-profile-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.customer-profile.customer-profile.620a"
+      ],
+      "desc": "Discard the saved profile address.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "      [name, address, req.account!.id]);",
+          "replace": "      [name, \"\", req.account!.id]);"
+        }
+      ]
+    },
+    {
+      "id": "progression-profile-reads-another-account",
+      "scenario": "tracks/ecommerce/scenarios/progression-customer-profile-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.customer-profile.customer-profile.620b"
+      ],
+      "desc": "Return another account's saved profile.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "account ? one(`SELECT profile_name, profile_address FROM account WHERE id = $1`, [account.id]) : null,",
+          "replace": "account ? one(`SELECT profile_name, profile_address FROM account WHERE profile_address != '' ORDER BY id DESC LIMIT 1`) : null,"
+        }
+      ]
+    },
+    {
+      "id": "progression-staff-tools-are-hidden",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-access-1.0.0.json",
+      "targets": ["ecommerce.progression.staff-access.staff-access.601a"],
+      "desc": "Hide staff tools from staff and administrators.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "{account && (account.isStaff || account.isAdmin) && (\n          <button className=\"btn btn-ghost btn-sm\" data-role=\"staff-link\"",
+          "replace": "{false && (\n          <button className=\"btn btn-ghost btn-sm\" data-role=\"staff-link\""
+        }
+      ]
+    },
+    {
+      "id": "progression-customer-sees-staff-tools",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-access-1.0.0.json",
+      "targets": ["ecommerce.progression.staff-access.staff-access.601b"],
+      "desc": "Treat every signed-in account as staff.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "{account && (account.isStaff || account.isAdmin) && (\n          <button className=\"btn btn-ghost btn-sm\" data-role=\"staff-link\"",
+          "replace": "{account && (\n          <button className=\"btn btn-ghost btn-sm\" data-role=\"staff-link\""
+        }
+      ]
+    },
+    {
+      "id": "progression-staff-role-update-is-disabled",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-roles-1.0.0.json",
+      "targets": ["ecommerce.progression.staff-roles.staff-roles.621a"],
+      "desc": "Do not accept staff role updates.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "app.put(\"/api/staff/:id/role\",",
+          "replace": "app.put(\"/api/mutation-disabled-staff/:id/role\","
+        }
+      ]
+    },
+    {
+      "id": "progression-staff-can-assign-roles",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-roles-1.0.0.json",
+      "targets": ["ecommerce.progression.staff-roles.staff-roles.621b"],
+      "desc": "Allow staff members to assign roles.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "app.put(\"/api/staff/:id/role\", dependencies.requireAdmin,",
+          "replace": "app.put(\"/api/staff/:id/role\", dependencies.requireStaff,"
+        }
+      ]
+    },
+    {
+      "id": "progression-catalog-product-name-is-not-published",
+      "scenario": "tracks/ecommerce/scenarios/progression-catalog-management-1.0.1.json",
+      "targets": [
+        "ecommerce.progression.catalog-management.catalog-management.622a"
+      ],
+      "desc": "The public product card omits the submitted name while retaining the product and its variants.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "        <span className=\"item-name\" data-role=\"item-name\">{item.name}</span>",
+          "replace": "        <span className=\"item-name\" data-role=\"item-name\">{item.name === \"Travel Mug\" ? \"\" : item.name}</span>"
+        }
+      ]
+    },
+    {
+      "id": "progression-catalog-variants-are-discarded",
+      "scenario": "tracks/ecommerce/scenarios/progression-catalog-management-1.0.1.json",
+      "targets": [
+        "ecommerce.progression.catalog-management.catalog-management.622b"
+      ],
+      "desc": "Store the submitted product without its named variants.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "        [name, category, price.toFixed(2), variants],",
+          "replace": "        [name, category, price.toFixed(2), []],"
+        }
+      ]
+    },
+    {
+      "id": "progression-payment-amount-is-zero",
+      "scenario": "tracks/ecommerce/scenarios/progression-core-business-1.0.0.json",
+      "targets": ["ecommerce.progression.payment-records.payment-records.623a"],
+      "desc": "Record zero as the paid amount.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "[accountId, total, promotionId, discount],",
+          "replace": "[accountId, 0, promotionId, discount],"
+        }
+      ]
+    },
+    {
+      "id": "progression-payment-record-is-duplicated",
+      "scenario": "tracks/ecommerce/scenarios/progression-core-business-1.0.0.json",
+      "targets": ["ecommerce.progression.payment-records.payment-records.623b"],
+      "desc": "Render a duplicate payment record.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "              <div data-role=\"payment-record\">\n                <span data-role=\"payment-status\">{o.paymentStatus}</span>",
+          "replace": "              <div data-role=\"payment-record\">\n                <span data-role=\"payment-status\">{o.paymentStatus}</span>\n                <span data-role=\"payment-record\"><span data-role=\"payment-status\">{o.paymentStatus}</span></span>"
+        }
+      ]
+    },
+    {
+      "id": "progression-support-intake-is-disabled",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-intake-1.0.0.json",
+      "targets": ["ecommerce.progression.support-intake.support-intake.610a"],
+      "desc": "Do not accept new support cases.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/support/cases\",",
+          "replace": "app.post(\"/api/mutation-disabled-support/cases\","
+        }
+      ]
+    },
+    {
+      "id": "progression-support-triage-update-is-disabled",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-triage-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-triage.support-assignment.611a",
+        "ecommerce.progression.support-triage.support-priority.611b",
+        "ecommerce.progression.support-triage.support-status.611c"
+      ],
+      "desc": "Do not persist support triage updates.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "app.put(\"/api/support/cases/:id\",",
+          "replace": "app.put(\"/api/mutation-disabled-support/cases/:id\","
+        }
+      ]
+    },
+    {
+      "id": "progression-support-history-is-not-persisted",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-history-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-history.support-history-persistence.612a"
+      ],
+      "desc": "Hide saved support cases from their owner.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "const where = account.isAdmin || account.isStaff ? \"TRUE\" : \"sc.account_id = $1\";",
+          "replace": "const where = account.isAdmin || account.isStaff ? \"TRUE\" : \"FALSE\";"
+        }
+      ]
+    },
+    {
+      "id": "progression-support-history-leaks",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-history-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-history.support-history-privacy.612b"
+      ],
+      "desc": "Return all support cases to each customer.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "const where = account.isAdmin || account.isStaff ? \"TRUE\" : \"sc.account_id = $1\";\n  const values = account.isAdmin || account.isStaff ? [] : [account.id];",
+          "replace": "const where = \"TRUE\";\n  const values: unknown[] = [];"
+        }
+      ]
+    },
+    {
+      "id": "progression-managed-support-is-not-shared",
+      "scenario": "tracks/ecommerce/scenarios/progression-managed-support-shared-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.managed-support.managed-support-shared.613a"
+      ],
+      "desc": "Do not persist managed support replies.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/support/cases/:id/replies\",",
+          "replace": "app.post(\"/api/mutation-disabled-support/cases/:id/replies\","
+        }
+      ]
+    },
+    {
+      "id": "progression-managed-support-leaks",
+      "scenario": "tracks/ecommerce/scenarios/progression-managed-support-privacy-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.managed-support.managed-support-privacy.613b"
+      ],
+      "desc": "Return all managed support cases to each customer.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "const where = account.isAdmin || account.isStaff ? \"TRUE\" : \"sc.account_id = $1\";\n  const values = account.isAdmin || account.isStaff ? [] : [account.id];",
+          "replace": "const where = \"TRUE\";\n  const values: unknown[] = [];"
+        }
+      ]
+    },
+    {
+      "id": "progression-promotion-save-is-disabled",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-rules-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-rules.promotion-rule-values.620a"
+      ],
+      "desc": "Do not save promotion rules.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/promotions\",",
+          "replace": "app.post(\"/api/mutation-disabled-promotions\","
+        }
+      ]
+    },
+    {
+      "id": "progression-customer-can-create-promotions",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-rules-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-rules.promotion-rule-access.620b"
+      ],
+      "desc": "Allow customers to create promotions.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/promotions\", dependencies.requireStaff,",
+          "replace": "app.post(\"/api/promotions\", dependencies.requireAuth,"
+        }
+      ]
+    },
+    {
+      "id": "progression-active-promotion-cannot-apply",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-checkout.promotion-checkout-active.621a"
+      ],
+      "desc": "Do not apply active promotions.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/cart/promotion\",",
+          "replace": "app.post(\"/api/mutation-disabled-cart/promotion\","
+        }
+      ]
+    },
+    {
+      "id": "progression-notification-preferences-do-not-save",
+      "scenario": "tracks/ecommerce/scenarios/progression-notification-preferences-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.notification-preferences.notification-preferences-persistence.630a"
+      ],
+      "desc": "Do not save notification preferences.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "app.put(\"/api/notifications/preferences\",",
+          "replace": "app.put(\"/api/mutation-disabled-notifications/preferences\","
+        }
+      ]
+    },
+    {
+      "id": "progression-notifications-leak-across-accounts",
+      "scenario": "tracks/ecommerce/scenarios/progression-notification-preferences-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.notification-preferences.notification-preferences-privacy.630b"
+      ],
+      "desc": "Save one customer's notification choice to every other account.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "await deps.pool.query(`UPDATE account SET notify_order = $1, notify_stock = $2 WHERE id = $3`,\n      [order, stock, req.account!.id]);",
+          "replace": "await deps.pool.query(`UPDATE account SET notify_order = $1, notify_stock = $2 WHERE id = $3 OR id != $3`,\n      [order, stock, req.account!.id]);"
+        }
+      ]
+    },
+    {
+      "id": "progression-stock-alert-request-is-disabled",
+      "scenario": "tracks/ecommerce/scenarios/progression-stock-alerts-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.stock-alerts.stock-alert-delivery.631a"
+      ],
+      "desc": "Do not accept stock alert requests.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/items/:id/stock-alert\",",
+          "replace": "app.post(\"/api/mutation-disabled-items/:id/stock-alert\","
+        }
+      ]
+    },
+    {
+      "id": "progression-stock-alerts-leak-across-accounts",
+      "scenario": "tracks/ecommerce/scenarios/progression-stock-alerts-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.stock-alerts.stock-alert-privacy.631b"
+      ],
+      "desc": "Return stock alerts for all accounts.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "account ? deps.pool.query(`SELECT * FROM notification WHERE account_id = $1 ORDER BY created_at DESC`, [account.id]) : { rows: [] },",
+          "replace": "account ? deps.pool.query(`SELECT * FROM notification ORDER BY created_at DESC`) : { rows: [] },"
+        }
+      ]
+    },
+    {
+      "id": "progression-faceted-filter-ignores-category",
+      "scenario": "tracks/ecommerce/scenarios/progression-faceted-filters-1.0.0.json",
+      "targets": ["ecommerce.progression.faceted-search.faceted-search.401a"],
+      "desc": "Ignore the selected catalog category.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "    return items.filter((item) => (!q || item.name.toLowerCase().includes(q))\n      && (!categoryFilter || item.category === categoryFilter)",
+          "replace": "    return items.filter((item) => (!q || item.name.toLowerCase().includes(q))\n      && (!categoryFilter || true)"
+        }
+      ]
+    },
+    {
+      "id": "progression-pagination-always-shows-first-page",
+      "scenario": "tracks/ecommerce/scenarios/progression-faceted-pagination-1.0.0.json",
+      "targets": ["ecommerce.progression.faceted-search.faceted-search.402a"],
+      "desc": "Always show the first catalog page.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": ".slice(searchPage * CATALOG_PAGE_SIZE,\n        searchPage * CATALOG_PAGE_SIZE + CATALOG_PAGE_SIZE);",
+          "replace": ".slice(0, CATALOG_PAGE_SIZE);"
+        }
+      ]
+    },
+    {
+      "id": "progression-expired-promotion-is-accepted",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-checkout.promotion-checkout-expired.621b"
+      ],
+      "desc": "Accept an expired promotion code.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "`SELECT * FROM promotion WHERE code = $1 AND start_at <= now() AND end_at >= now()\n       AND redemptions < redemption_limit`, [code]",
+          "replace": "`SELECT * FROM promotion WHERE code = $1\n       AND redemptions < redemption_limit`, [code]"
+        }
+      ]
+    },
+    {
+      "id": "progression-exhausted-promotion-is-accepted",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-checkout.promotion-checkout-exhausted.621c"
+      ],
+      "desc": "Accept a promotion after its redemption limit.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "`SELECT * FROM promotion WHERE code = $1 AND start_at <= now() AND end_at >= now()\n       AND redemptions < redemption_limit`, [code]",
+          "replace": "`SELECT * FROM promotion WHERE code = $1 AND start_at <= now() AND end_at >= now()`, [code]"
+        }
+      ]
+    },
+    {
+      "id": "progression-restock-countdown-is-fixed",
+      "scenario": "tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json",
+      "targets": ["ecommerce.l3.scheduled-restocks.scheduled-restocks.302a"],
+      "desc": "Show a fixed restock countdown.",
+      "file": "client/src/ProgressionPanel.tsx",
+      "edits": [
+        {
+          "find": "{Math.max(0, Math.ceil((new Date(item.dueAt).valueOf() - Date.now()) / 1000))}",
+          "replace": "{90}"
+        }
+      ]
+    },
+    {
+      "id": "progression-due-restock-does-not-run",
+      "scenario": "tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json",
+      "targets": ["ecommerce.l3.scheduled-restocks.scheduled-restocks.305a"],
+      "desc": "Do not select due scheduled restocks.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "`SELECT * FROM scheduled_restock WHERE due_at <= now() AND cancelled = false AND applied = false FOR UPDATE`,",
+          "replace": "`SELECT * FROM scheduled_restock WHERE false FOR UPDATE`,"
+        }
+      ]
+    },
+    {
+      "id": "progression-cancelled-restock-still-runs",
+      "scenario": "tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json",
+      "targets": ["ecommerce.l3.scheduled-restocks.scheduled-restocks.306a"],
+      "desc": "Leave a scheduled restock active when it is cancelled.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "`UPDATE scheduled_restock SET cancelled = true WHERE id = $1 AND applied = false RETURNING item_id`,",
+          "replace": "`UPDATE scheduled_restock SET cancelled = false WHERE id = $1 AND applied = false RETURNING item_id`,"
+        }
+      ]
+    },
+    {
+      "id": "progression-restart-timer-never-runs",
+      "scenario": "tracks/ecommerce/scenarios/03-server-time-1.0.0.json",
+      "targets": ["ecommerce.l3.server-time.server-time.312a"],
+      "desc": "Do not process work that becomes due after restart.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "`SELECT * FROM scheduled_restock WHERE due_at <= now() AND cancelled = false AND applied = false FOR UPDATE`,",
+          "replace": "`SELECT * FROM scheduled_restock WHERE false FOR UPDATE`,"
+        }
+      ]
+    },
+    {
+      "id": "progression-closed-browser-reservation-never-expires",
+      "scenario": "tracks/ecommerce/scenarios/03-server-time-1.0.0.json",
+      "targets": ["ecommerce.l3.server-time.server-time.313a"],
+      "desc": "Do not select expired reservations for server processing.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "`SELECT ci.id, ci.item_id, c.account_id\n       FROM cart_item ci JOIN cart c ON c.id = ci.cart_id\n       WHERE ci.expired = false AND ci.reserved_until IS NOT NULL AND ci.reserved_until <= now()\n       FOR UPDATE OF ci`,",
+          "replace": "`SELECT ci.id, ci.item_id, c.account_id\n       FROM cart_item ci JOIN cart c ON c.id = ci.cart_id\n       WHERE false\n       FOR UPDATE OF ci`,"
+        }
+      ]
+    },
+    {
+      "id": "progression-cart-line-does-not-increment",
+      "scenario": "tracks/ecommerce/scenarios/progression-cart-checkout-1.0.0.json",
+      "targets": ["ecommerce.feature.cart-checkout.cart.4a"],
+      "desc": "Keep the old cart quantity when the same item is added again.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "ON CONFLICT (cart_id, item_id) DO UPDATE SET quantity = CASE WHEN cart_item.expired THEN excluded.quantity ELSE cart_item.quantity + excluded.quantity END,",
+          "replace": "ON CONFLICT (cart_id, item_id) DO UPDATE SET quantity = cart_item.quantity,"
+        }
+      ]
+    },
+    {
+      "id": "progression-checkout-leaves-cart-lines",
+      "scenario": "tracks/ecommerce/scenarios/progression-cart-checkout-1.0.0.json",
+      "targets": ["ecommerce.feature.cart-checkout.cart.4d"],
+      "desc": "Leave cart lines after checkout.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "    await client.query(`DELETE FROM cart_item WHERE cart_id = $1`, [cart.rows[0].id]);",
+          "replace": "    // Mutation: keep checked-out cart lines."
+        }
+      ]
+    },
+    {
+      "id": "progression-cart-update-uses-wrong-room",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-2.4.0.json",
+      "targets": ["ecommerce.spec.live-state.shared-cart.4c"],
+      "desc": "Send cart updates to the wrong account room.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    try {\n      await reserveCartItem(accountId, itemId, qty);\n    } catch (error) {\n      res.status(409).json({ error: error instanceof Error ? error.message : \"could not reserve stock\" });\n      return;\n    }\n    const state = await buildCartState(accountId);\n    io.to(`account:${accountId}`).emit(\"cart:update\", state);",
+          "replace": "    try {\n      await reserveCartItem(accountId, itemId, qty);\n    } catch (error) {\n      res.status(409).json({ error: error instanceof Error ? error.message : \"could not reserve stock\" });\n      return;\n    }\n    const state = await buildCartState(accountId);\n    io.to(`account:${accountId}:mutation`).emit(\"cart:update\", state);"
+        }
+      ]
+    },
+    {
+      "id": "progression-order-history-ignores-owner",
+      "scenario": "tracks/ecommerce/scenarios/01-order-ownership-2.4.0.json",
+      "targets": ["ecommerce.spec.access-control.order-ownership.106a"],
+      "desc": "Return orders without filtering by account.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "FROM orders WHERE account_id = $1 ORDER BY created_at DESC`,",
+          "replace": "FROM orders WHERE $1 IS NOT NULL ORDER BY created_at DESC`,"
+        }
+      ]
+    },
+    {
+      "id": "progression-review-conflict-is-not-updated",
+      "scenario": "tracks/ecommerce/scenarios/01-review-uniqueness-2.4.0.json",
+      "targets": ["ecommerce.spec.transactional-integrity.unique-review.6b"],
+      "desc": "Render every stored review twice.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "reviews={itemDetail.reviews}",
+          "replace": "reviews={[...itemDetail.reviews, ...itemDetail.reviews]}"
+        }
+      ]
+    },
+    {
+      "id": "progression-revenue-double-counts-orders",
+      "scenario": "tracks/ecommerce/scenarios/progression-books-balance-1.0.0.json",
+      "targets": ["ecommerce.spec.transactional-integrity.books-balance.107a"],
+      "desc": "Double the order contribution to revenue.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "COALESCE((SELECT SUM(total - refund_total) FROM orders WHERE status != 'cancelled'), 0)",
+          "replace": "COALESCE((SELECT SUM(total - refund_total) * 2 FROM orders WHERE status != 'cancelled'), 0)"
+        }
+      ]
+    },
+    {
+      "id": "progression-cancelled-orders-remain-in-revenue",
+      "scenario": "tracks/ecommerce/scenarios/02-invariants.json",
+      "targets": ["ecommerce.returns-pricing.refund-accounting.203a"],
+      "desc": "Include cancelled orders in revenue.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "COALESCE((SELECT SUM(total - refund_total) FROM orders WHERE status != 'cancelled'), 0)",
+          "replace": "COALESCE((SELECT SUM(total - refund_total) FROM orders), 0)"
+        }
+      ]
+    },
+    {
+      "id": "progression-shipping-keeps-order-pending",
+      "scenario": "tracks/ecommerce/scenarios/02-fulfilment-ship-1.0.0.json",
+      "targets": ["ecommerce.operations-access.fulfilment-queue.1c"],
+      "desc": "Acknowledge shipping without changing order status.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "`UPDATE orders SET status = 'shipped', shipped_at = now()\n       WHERE id = $1 AND status = 'pending' RETURNING account_id`",
+          "replace": "`UPDATE orders SET status = 'pending', shipped_at = now()\n       WHERE id = $1 AND status = 'pending' RETURNING account_id`"
+        }
+      ]
+    },
+    {
+      "id": "progression-concurrent-cart-line-does-not-increment",
+      "scenario": "tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.1.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.duplicate-checkout.203a"
+      ],
+      "desc": "Render the old cart quantity after concurrent adds.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "                    value={line.quantity}",
+          "replace": "                    value={1}"
+        }
+      ]
+    },
+    {
+      "id": "progression-concurrent-checkout-leaves-cart-lines",
+      "scenario": "tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.1.json",
+      "targets": ["ecommerce.spec.concurrency-safety.duplicate-checkout.203b"],
+      "desc": "Leave cart lines after concurrent checkout.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "    await client.query(`DELETE FROM cart_item WHERE cart_id = $1`, [cart.rows[0].id]);",
+          "replace": "    // Mutation: keep checked-out cart lines."
+        }
+      ]
+    },
+    {
+      "id": "progression-catalog-ranking-is-reversed",
+      "scenario": "tracks/ecommerce/scenarios/01-catalog-ranking-1.0.0.json",
+      "targets": ["ecommerce.feature.catalog.catalog-ranking.2b"],
+      "desc": "Reverse the catalog tie-break order.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": ".sort((a, b) => b.purchaseCount - a.purchaseCount || a.name.localeCompare(b.name))",
+          "replace": ".sort((a, b) => b.purchaseCount - a.purchaseCount || b.name.localeCompare(a.name))"
+        }
+      ]
+    },
+    {
+      "id": "progression-catalog-search-requires-exact-name",
+      "scenario": "tracks/ecommerce/scenarios/01-catalog-search-1.0.0.json",
+      "targets": ["ecommerce.feature.catalog.catalog-search.2d"],
+      "desc": "Require an exact catalog name in search.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "return items.filter((item) => (!q || item.name.toLowerCase().includes(q))",
+          "replace": "return items.filter((item) => (!q || item.name.toLowerCase() === q)"
+        }
+      ]
+    },
+    {
+      "id": "progression-catalog-price-is-offset",
+      "scenario": "tracks/ecommerce/scenarios/01-catalog-values-1.0.0.json",
+      "targets": ["ecommerce.feature.catalog.catalog-values.2a"],
+      "desc": "Report catalog prices one unit too high.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    price: Number(r.price),\n    category: r.category,\n    variants: r.variants,",
+          "replace": "    price: Number(r.price) + 1,\n    category: r.category,\n    variants: r.variants,"
+        }
+      ]
+    },
+    {
+      "id": "progression-staff-sees-admin-navigation",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-admin-staff-1.0.0.json",
+      "targets": ["ecommerce.feature.warehouse-admin.access-boundary.7a"],
+      "desc": "Show administrator navigation to staff.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "{account?.isAdmin && (\n          <button className=\"btn btn-ghost btn-sm\" data-role=\"admin-link\"",
+          "replace": "{(account?.isAdmin || account?.isStaff) && (\n          <button className=\"btn btn-ghost btn-sm\" data-role=\"admin-link\""
+        }
+      ]
+    },
+    {
+      "id": "progression-staff-can-restock-directly",
+      "scenario": "tracks/ecommerce/scenarios/01-admin-write-staff-1.0.0.json",
+      "targets": ["ecommerce.feature.warehouse-admin.admin-write.103a"],
+      "desc": "Allow staff members to use the direct restock route.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\n  \"/api/admin/restock\",\n  requireAdmin,",
+          "replace": "app.post(\n  \"/api/admin/restock\",\n  requireStaff,"
+        }
+      ]
+    },
+    {
+      "id": "progression-restock-adds-wrong-quantity",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-stock-live-staff-1.0.0.json",
+      "targets": ["ecommerce.feature.warehouse-admin.warehouse-stock.7c"],
+      "desc": "Add one fewer unit during direct restock.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "      [itemId, warehouseId, qty]\n    );\n    await processImmediateRestock(itemId);",
+          "replace": "      [itemId, warehouseId, qty - 1]\n    );\n    await processImmediateRestock(itemId);"
+        }
+      ]
+    },
+    {
+      "id": "progression-cart-add-uses-another-account",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-boundary-2.4.0.json",
+      "targets": ["ecommerce.spec.access-control.cart-boundary.109a"],
+      "desc": "Write a cart add to the first account instead of the caller.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    const accountId = req.account!.id;\n    try {\n      await reserveCartItem(accountId, itemId, qty);",
+          "replace": "    const owner = await pool.query(`SELECT id FROM account ORDER BY id LIMIT 1`);\n    const accountId = owner.rows[0].id;\n    try {\n      await reserveCartItem(accountId, itemId, qty);"
+        }
+      ]
+    },
+    {
+      "id": "progression-reservation-does-not-reduce-stock",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": ["ecommerce.l3.reservations.reservations.301a"],
+      "desc": "Record a reservation without reducing warehouse stock.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "      `UPDATE stock SET quantity = quantity - $1 WHERE item_id = $2 AND warehouse_id = $3`,\n      [take, itemId, row.warehouse_id],",
+          "replace": "      `UPDATE stock SET quantity = quantity + ($1 * 0) WHERE item_id = $2 AND warehouse_id = $3`,\n      [take, itemId, row.warehouse_id],"
+        }
+      ]
+    },
+    {
+      "id": "progression-reservation-countdown-is-fixed",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": ["ecommerce.l3.reservations.reservations.305a"],
+      "desc": "Show a fixed reservation countdown.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "{Math.max(0, (line.reservationSeconds ?? 0) - elapsed)}",
+          "replace": "{90}"
+        }
+      ]
+    },
+    {
+      "id": "progression-reservation-checkout-keeps-cart",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": ["ecommerce.l3.reservations.reservations.306a"],
+      "desc": "Leave reserved cart lines after checkout.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "    await client.query(`DELETE FROM cart_item WHERE cart_id = $1`, [cart.rows[0].id]);",
+          "replace": "    // Mutation: keep reserved cart lines after checkout."
+        }
+      ]
+    },
+    {
+      "id": "progression-reservation-never-expires",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": ["ecommerce.l3.reservations.reservations.307a"],
+      "desc": "Do not select expired reservations.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "`SELECT ci.id, ci.item_id, c.account_id\n       FROM cart_item ci JOIN cart c ON c.id = ci.cart_id\n       WHERE ci.expired = false AND ci.reserved_until IS NOT NULL AND ci.reserved_until <= now()\n       FOR UPDATE OF ci`,",
+          "replace": "`SELECT ci.id, ci.item_id, c.account_id\n       FROM cart_item ci JOIN cart c ON c.id = ci.cart_id\n       WHERE false\n       FOR UPDATE OF ci`,"
+        }
+      ]
+    },
+    {
+      "id": "progression-reservation-does-not-renew",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": ["ecommerce.l3.reservations.reservations.308a"],
+      "desc": "Keep the old reservation deadline when quantity changes.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "       reserved_until = excluded.reserved_until, expired = false RETURNING id`, [cartId, itemId, quantity]);",
+          "replace": "       reserved_until = cart_item.reserved_until, expired = false RETURNING id`, [cartId, itemId, quantity]);"
+        }
+      ]
+    },
+    {
+      "id": "progression-customers-can-manage-scheduled-work",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-access-1.0.0.json",
+      "targets": ["ecommerce.l3.deferred-access.scheduled-work-access.317a"],
+      "desc": "Allow customers to schedule and cancel restocks.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "app.post(\"/api/admin/scheduled-restocks\", dependencies.requireStaff,",
+          "replace": "app.post(\"/api/admin/scheduled-restocks\", dependencies.requireAuth,"
+        },
+        {
+          "find": "app.delete(\"/api/admin/scheduled-restocks/:id\", dependencies.requireStaff,",
+          "replace": "app.delete(\"/api/admin/scheduled-restocks/:id\", dependencies.requireAuth,"
+        }
+      ]
+    },
+    {
+      "id": "progression-restock-does-not-survive-restart",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-durability-1.0.0.json",
+      "targets": ["ecommerce.l3.deferred-durability.restart-survival.311a"],
+      "desc": "Do not process due restocks after restart.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "`SELECT * FROM scheduled_restock WHERE due_at <= now() AND cancelled = false AND applied = false FOR UPDATE`,",
+          "replace": "`SELECT * FROM scheduled_restock WHERE false FOR UPDATE`,"
+        }
+      ]
+    },
+    {
+      "id": "progression-reservation-does-not-survive-restart",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-durability-1.0.0.json",
+      "targets": ["ecommerce.l3.deferred-durability.restart-survival.314a"],
+      "desc": "Do not process expired reservations after restart.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "`SELECT ci.id, ci.item_id, c.account_id\n       FROM cart_item ci JOIN cart c ON c.id = ci.cart_id\n       WHERE ci.expired = false AND ci.reserved_until IS NOT NULL AND ci.reserved_until <= now()\n       FOR UPDATE OF ci`,",
+          "replace": "`SELECT ci.id, ci.item_id, c.account_id\n       FROM cart_item ci JOIN cart c ON c.id = ci.cart_id\n       WHERE false\n       FOR UPDATE OF ci`,"
+        }
+      ]
+    },
+    {
+      "id": "progression-restock-can-apply-more-than-once",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json",
+      "targets": ["ecommerce.l3.deferred-integrity.exactly-once.311a"],
+      "desc": "Leave an applied restock eligible for later timer passes.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "await client.query(`UPDATE scheduled_restock SET applied = true WHERE id = $1`, [restock.id]);",
+          "replace": "await client.query(`UPDATE scheduled_restock SET applied = false WHERE id = $1`, [restock.id]);"
+        }
+      ]
+    },
+    {
+      "id": "progression-expiry-returns-double-stock",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json",
+      "targets": ["ecommerce.l3.deferred-integrity.stock-conservation.313a"],
+      "desc": "Return twice the reserved quantity on expiry.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "      `UPDATE stock SET quantity = quantity + $1 WHERE item_id = $2 AND warehouse_id = $3`,\n      [allocation.quantity, item.rows[0].item_id, allocation.warehouse_id],",
+          "replace": "      `UPDATE stock SET quantity = quantity + $1 WHERE item_id = $2 AND warehouse_id = $3`,\n      [allocation.quantity * 2, item.rows[0].item_id, allocation.warehouse_id],"
+        }
+      ]
+    },
+    {
+      "id": "progression-checkout-returns-reserved-stock",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json",
+      "targets": ["ecommerce.l3.deferred-integrity.stock-conservation.314a"],
+      "desc": "Return reserved stock during checkout after creating the order.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "    if (promotionId) {\n      await client.query(",
+          "replace": "    for (const line of lines.rows) await releaseReservation(client, line.id);\n    if (promotionId) {\n      await client.query("
+        }
+      ]
+    },
+    {
+      "id": "catalog-adds-one-to-every-price",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog.2a"
+      ],
+      "desc": "Return a catalog price one dollar above the stored price while preserving stock and names.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    price: Number(r.price),\n    category: r.category,\n    variants: r.variants,",
+          "replace": "    price: Number(r.price) + 1,\n    category: r.category,\n    variants: r.variants,"
+        }
+      ]
+    },
+    {
+      "id": "unbought-ranking-is-reversed",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog.2b"
+      ],
+      "desc": "Reverse only the initial all-unbought ranking instead of applying the alphabetical tie-break.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "      .sort((a, b) => b.purchaseCount - a.purchaseCount || a.name.localeCompare(b.name))",
+          "replace": "      .sort((a, b) => items.every((item) => item.purchaseCount === 0) ? b.name.localeCompare(a.name) : b.purchaseCount - a.purchaseCount || a.name.localeCompare(b.name))"
+        }
+      ]
+    },
+    {
+      "id": "search-only-considers-top-ten",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog.2d"
+      ],
+      "desc": "Search only the currently visible top ten instead of the full catalog.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "    return items.filter((item) => (!q || item.name.toLowerCase().includes(q))",
+          "replace": "    return items.slice(0, 10).filter((item) => (!q || item.name.toLowerCase().includes(q))"
+        }
+      ]
+    },
+    {
+      "id": "customers-see-the-admin-link",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-admin-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.admin-ui.7a"
+      ],
+      "desc": "Expose the admin navigation control to every signed-in account.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "        {account?.isAdmin && (",
+          "replace": "        {account && ("
+        }
+      ]
+    },
+    {
+      "id": "restock-overwrites-instead-of-increments",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-stock-live-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.warehouse-stock.7c"
+      ],
+      "desc": "Overwrite the selected warehouse quantity with the restock amount instead of adding it.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "       ON CONFLICT (item_id, warehouse_id) DO UPDATE SET quantity = stock.quantity + excluded.quantity`,\n      [itemId, warehouseId, qty]",
+          "replace": "       ON CONFLICT (item_id, warehouse_id) DO UPDATE SET quantity = excluded.quantity`,\n      [itemId, warehouseId, qty]"
+        }
+      ]
+    },
+    {
+      "id": "customer-can-call-admin-restock",
+      "scenario": "tracks/ecommerce/scenarios/01-admin-write-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.admin-write.103a"
+      ],
+      "desc": "Remove the administrator guard from the direct restock route.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "  \"/api/admin/restock\",\n  requireAdmin,",
+          "replace": "  \"/api/admin/restock\","
+        }
+      ]
+    },
+    {
+      "id": "operator-authorization-allows-customer-price-change",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.operations-access.operator-authorization.201b"
+      ],
+      "desc": "The price route replaces its administrator gate with ordinary authentication.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\n  \"/api/admin/price\",\n  requireAdmin,",
+          "replace": "app.post(\n  \"/api/admin/price\",\n  requireAuth,"
+        }
+      ]
+    },
+    {
+      "id": "operator-authorization-allows-customer-shipping",
+      "scenario": "tracks/ecommerce/scenarios/02-self-contained-1.4.0.json",
+      "targets": [
+        "ecommerce.operations-access.fulfilment-queue.1e"
+      ],
+      "desc": "The shipping route replaces its staff gate with ordinary authentication.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "app.post(\n  \"/api/fulfilment/ship\",\n  requireStaff,",
+          "replace": "app.post(\n  \"/api/fulfilment/ship\",\n  requireAuth,"
+        }
+      ]
+    },
+    {
+      "id": "catalog-price-change-not-broadcast-to-visitors",
+      "scenario": "tracks/ecommerce/scenarios/02-live-price-1.4.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.price-history.4b"
+      ],
+      "desc": "The signed-out search result caches detached rows and ignores later catalog updates.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  }, [items, search, categoryFilter, minimumPrice, maximumPrice, inStockOnly, searchPage]);",
+          "replace": "  }, [search, categoryFilter, minimumPrice, maximumPrice, inStockOnly, searchPage]);"
+        }
+      ]
+    },
+    {
+      "id": "catalog-price-change-not-broadcast-to-open-carts",
+      "scenario": "tracks/ecommerce/scenarios/02-features.json",
+      "targets": [
+        "ecommerce.returns-pricing.price-history.4c"
+      ],
+      "desc": "The price reaches the catalog but the price route omits its targeted open-cart broadcasts.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    for (const row of cartAccounts.rows) {\n      await broadcastCart(row.account_id);\n    }",
+          "replace": "    void cartAccounts; // mutant: carts containing this item are not refreshed"
+        }
+      ]
+    },
+    {
+      "id": "catalog-price-rewrites-receipts",
+      "scenario": "tracks/ecommerce/scenarios/02-paid-price-history-1.4.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.price-history.4a"
+      ],
+      "desc": "Changing a catalog price cascades into saved order lines and recomputes historical order totals.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    await pool.query(`UPDATE item SET price = $1 WHERE id = $2`, [priceNum.toFixed(2), itemId]);\n    await broadcastCatalog();",
+          "replace": "    await pool.query(`UPDATE item SET price = $1 WHERE id = $2`, [priceNum.toFixed(2), itemId]);\n    await pool.query(`UPDATE order_item SET price = $1 WHERE item_id = $2`, [priceNum.toFixed(2), itemId]);\n    await pool.query(\n      `UPDATE orders o SET total = totals.total FROM (\n         SELECT order_id, SUM(quantity * price) AS total FROM order_item GROUP BY order_id\n       ) totals WHERE o.id = totals.order_id`\n    );\n    await broadcastCatalog();"
+        }
+      ]
+    },
+    {
+      "id": "catalog-price-rewrites-earned-revenue",
+      "scenario": "tracks/ecommerce/scenarios/02-invariants.json",
+      "targets": [
+        "ecommerce.returns-pricing.refund-accounting.203b"
+      ],
+      "desc": "Changing a catalog price cascades into saved order lines and recomputes historical order totals and revenue.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    await pool.query(`UPDATE item SET price = $1 WHERE id = $2`, [priceNum.toFixed(2), itemId]);\n    await broadcastCatalog();",
+          "replace": "    await pool.query(`UPDATE item SET price = $1 WHERE id = $2`, [priceNum.toFixed(2), itemId]);\n    await pool.query(`UPDATE order_item SET price = $1 WHERE item_id = $2`, [priceNum.toFixed(2), itemId]);\n    await pool.query(\n      `UPDATE orders o SET total = totals.total FROM (\n         SELECT order_id, SUM(quantity * price) AS total FROM order_item GROUP BY order_id\n       ) totals WHERE o.id = totals.order_id`\n    );\n    await broadcastCatalog();"
+        }
+      ]
+    },
+    {
+      "id": "returned-line-marker-omitted",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.cancellation-and-return.3c"
+      ],
+      "desc": "A returned order line keeps its persisted returned state, restored stock, and adjusted revenue but omits the visible returned marker.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "l.returned ? \" (returned)\" : \"\"",
+          "replace": "\"\""
+        }
+      ]
+    },
+    {
+      "id": "direct-review-access-is-not-checked",
+      "scenario": "tracks/ecommerce/scenarios/progression-review-access-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.review-access-specifications.review-eligibility-direct.618a"
+      ],
+      "desc": "The direct review action accepts a review from a customer who did not buy the item.",
+      "file": "server/src/index.ts",
+      "edits": [
+        {
+          "find": "    if (purchased.rowCount === 0) {",
+          "replace": "    if (false && purchased.rowCount === 0) {"
+        }
+      ]
+    },
+    {
+      "id": "support-messages-are-sent-to-other-customers",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-read-privacy-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-privacy-specifications.private-message-delivery.619a"
+      ],
+      "desc": "A customer receives another customer's support message.",
+      "file": "server/src/progression.ts",
+      "edits": [
+        {
+          "find": "const where = account.isAdmin || account.isStaff ? \"TRUE\" : \"sc.account_id = $1\";\n  const values = account.isAdmin || account.isStaff ? [] : [account.id];",
+          "replace": "const where = \"TRUE\";\n  const values: unknown[] = [];"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/grader/mutations/spacetime-ecommerce-2.0.1.json b/tools/stack-bench/grader/mutations/spacetime-ecommerce-2.0.1.json
new file mode 100644
index 00000000000..1a1f68a1d47
--- /dev/null
+++ b/tools/stack-bench/grader/mutations/spacetime-ecommerce-2.0.1.json
@@ -0,0 +1,1956 @@
+{
+  "schemaVersion": 2,
+  "status": "candidate",
+  "fixtureSha256": "f68523d7db3e236051b678a56dfdc278b88ed126dc4ef04b1f20fe2c20fcf3d6",
+  "backend": "spacetime",
+  "track": "ecommerce",
+  "note": "Mutation definitions for the SpacetimeDB ecommerce reference.",
+  "mutations": [
+    {
+      "id": "signup-binds-the-new-account-to-the-admin-session",
+      "scenario": "tracks/ecommerce/scenarios/01-account-create-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.accounts.accounts.1a"
+      ],
+      "desc": "Create the requested account but bind the new browser session to the administrator, so account creation no longer signs the visitor in as the account it created.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    const acc = ctx.db.account.insert({\n      id: 0n,\n      username: uname,\n      passwordHash: hashPassword(password),\n      isAdmin: false,\n      isStaff: false,\n    });\n\n    const existingSession = ctx.db.session.identity.find(ctx.sender);\n    if (existingSession) {\n      ctx.db.session.identity.update({ ...existingSession, accountId: acc.id });\n    } else {\n      ctx.db.session.insert({ identity: ctx.sender, accountId: acc.id });\n    }",
+          "replace": "    const acc = ctx.db.account.insert({\n      id: 0n,\n      username: uname,\n      passwordHash: hashPassword(password),\n      isAdmin: false,\n      isStaff: false,\n    });\n\n    const signedInAccount = ctx.db.account.username.find('admin') ?? acc;\n    const existingSession = ctx.db.session.identity.find(ctx.sender);\n    if (existingSession) {\n      ctx.db.session.identity.update({ ...existingSession, accountId: signedInAccount.id });\n    } else {\n      ctx.db.session.insert({ identity: ctx.sender, accountId: signedInAccount.id });\n    }"
+        }
+      ]
+    },
+    {
+      "id": "duplicate-signup-is-silently-ignored",
+      "scenario": "tracks/ecommerce/scenarios/01-account-duplicate-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.accounts.accounts.1b"
+      ],
+      "desc": "Return success for a taken username without creating a session or surfacing the required refusal.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    if (existing) throw new SenderError('That username is already taken.');",
+          "replace": "    if (existing) return; // mutant: duplicate signup is silently accepted"
+        }
+      ]
+    },
+    {
+      "id": "signin-does-not-verify-the-password",
+      "scenario": "tracks/ecommerce/scenarios/01-account-password-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.accounts.accounts.1c"
+      ],
+      "desc": "Accept a known username without comparing the supplied password hash.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    if (!acc || acc.passwordHash !== hashPassword(password)) {",
+          "replace": "    if (!acc) {"
+        }
+      ]
+    },
+    {
+      "id": "signout-keeps-the-account-session",
+      "scenario": "tracks/ecommerce/scenarios/01-account-signout-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.accounts.accounts.1d"
+      ],
+      "desc": "Leave the current account session in place when the visitor signs out.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  if (existingSession) ctx.db.session.identity.delete(ctx.sender);",
+          "replace": "  // mutant: sign out keeps the current account session"
+        }
+      ]
+    },
+    {
+      "id": "session-token-is-not-persisted-for-reload",
+      "scenario": "tracks/ecommerce/scenarios/01-account-reload-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.state-durability.session-reload.1e"
+      ],
+      "desc": "Discard the connection token instead of persisting it, so a reload receives a new identity with no account session.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "    if (token) localStorage.setItem('auth_token', token);",
+          "replace": "    if (token) localStorage.removeItem('auth_token');"
+        }
+      ]
+    },
+    {
+      "id": "catalog-seeds-the-wrong-air-purifier-price",
+      "scenario": "tracks/ecommerce/scenarios/01-catalog-values-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog-values.2a"
+      ],
+      "desc": "Seed Air Purifier with an incorrect stored price while leaving the rest of the catalog intact.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  ['Air Purifier', 189.0, 60, 40, 'Home'],",
+          "replace": "  ['Air Purifier', 999.0, 60, 40, 'Home'],"
+        }
+      ]
+    },
+    {
+      "id": "catalog-tie-breaks-in-reverse-alphabetical-order--01-catalog-ranking",
+      "scenario": "tracks/ecommerce/scenarios/01-catalog-ranking-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog-ranking.2b"
+      ],
+      "desc": "Reverse the specified alphabetical tie-breaker. This necessarily breaks both the initial sequence and the post-purchase sequence in the same scenario.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "      return a.name.localeCompare(b.name);",
+          "replace": "      return b.name.localeCompare(a.name);"
+        }
+      ]
+    },
+    {
+      "id": "catalog-tie-breaks-in-reverse-alphabetical-order--01-core",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.ranking.2c"
+      ],
+      "desc": "Reverse the specified alphabetical tie-breaker. This necessarily breaks both the initial sequence and the post-purchase sequence in the same scenario.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "      return a.name.localeCompare(b.name);",
+          "replace": "      return b.name.localeCompare(a.name);"
+        }
+      ]
+    },
+    {
+      "id": "purchase-does-not-update-ranking-count",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.ranking.2c"
+      ],
+      "desc": "Complete the purchase but leave its popularity count unchanged, so open storefronts cannot rank the purchased item first.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  bumpPurchaseCount(ctx, itemId, 1);",
+          "replace": "  // mutant: buy-now never advances the ranking count"
+        }
+      ]
+    },
+    {
+      "id": "purchase-controls-are-rendered-for-signed-out-visitors",
+      "scenario": "tracks/ecommerce/scenarios/progression-signed-out-purchase-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.signed-out-purchase.3a"
+      ],
+      "desc": "Render buy and cart controls without requiring an account.",
+      "file": "client/src/components/ItemCard.tsx",
+      "edits": [
+        {
+          "find": "      {isSignedIn && (",
+          "replace": "      {true && ("
+        }
+      ]
+    },
+    {
+      "id": "buy-now-creates-orders-without-reserving-stock--01-buying",
+      "scenario": "tracks/ecommerce/scenarios/01-buying-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.purchase-stock.3b"
+      ],
+      "desc": "Create purchase orders without reserving inventory. The same defect necessarily breaks live purchase stock and the sell-out portion of the stock-limit check.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  const allocations = decrementStockTracked(ctx, itemId, 1);",
+          "replace": "  const allocations: Array<{ warehouseId: bigint; quantity: number }> = [];"
+        }
+      ]
+    },
+    {
+      "id": "buy-now-creates-orders-without-reserving-stock--stock-limit",
+      "scenario": "tracks/ecommerce/scenarios/progression-stock-limit-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.stock-limit.3d"
+      ],
+      "desc": "Create purchase orders without reserving inventory. The same defect necessarily breaks live purchase stock and the sell-out portion of the stock-limit check.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  const allocations = decrementStockTracked(ctx, itemId, 1);",
+          "replace": "  const allocations: Array<{ warehouseId: bigint; quantity: number }> = [];"
+        }
+      ]
+    },
+    {
+      "id": "buy-now-records-the-wrong-order-total",
+      "scenario": "tracks/ecommerce/scenarios/progression-purchasing-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.purchasing.purchase-order.3c"
+      ],
+      "desc": "Record a completed buy-now order one dollar above the stored item price.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    total: it.price,\n    status: 'pending',",
+          "replace": "    total: it.price + 1,\n    status: 'pending',"
+        }
+      ]
+    },
+    {
+      "id": "existing-cart-line-does-not-increment-basic-cart",
+      "scenario": "tracks/ecommerce/scenarios/progression-cart-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.cart-checkout.cart.4a"
+      ],
+      "desc": "Write an existing cart line back without incrementing its quantity.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.cartItem.id.update({ ...existing, quantity: existing.quantity + 1 });",
+          "replace": "ctx.db.cartItem.id.update({ ...existing, quantity: existing.quantity });"
+        }
+      ]
+    },
+    {
+      "id": "cart-owner-token-is-not-restored-after-reload",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.state-durability.cart-reload.4b"
+      ],
+      "desc": "Build a reload connection without the stored identity token, leaving the durable cart attached to a different session.",
+      "file": "client/src/main.tsx",
+      "edits": [
+        {
+          "find": ".withToken(localStorage.getItem('auth_token') || undefined)",
+          "replace": ".withToken(undefined)"
+        }
+      ]
+    },
+    {
+      "id": "signin-binds-the-second-client-to-a-different-account",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.shared-cart.4c"
+      ],
+      "desc": "Authenticate valid credentials but bind the second connection to the administrator account, so two sessions for one customer do not share the customer's cart.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    const existingSession = ctx.db.session.identity.find(ctx.sender);\n    if (existingSession) {\n      ctx.db.session.identity.update({ ...existingSession, accountId: acc.id });\n    } else {\n      ctx.db.session.insert({ identity: ctx.sender, accountId: acc.id });\n    }\n  }\n);\n\nexport const signOut",
+          "replace": "    const wrongAccount = ctx.db.account.username.find('admin') ?? acc;\n    const existingSession = ctx.db.session.identity.find(ctx.sender);\n    if (existingSession) {\n      ctx.db.session.identity.update({ ...existingSession, accountId: wrongAccount.id });\n    } else {\n      ctx.db.session.insert({ identity: ctx.sender, accountId: wrongAccount.id });\n    }\n  }\n);\n\nexport const signOut"
+        }
+      ]
+    },
+    {
+      "id": "checkout-does-not-empty-the-basic-cart",
+      "scenario": "tracks/ecommerce/scenarios/progression-cart-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.cart-checkout.cart.4d"
+      ],
+      "desc": "Leave completed checkout lines in the durable cart.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  for (const line of lines) ctx.db.cartItem.id.delete(line.id);",
+          "replace": "  // mutant: checked-out cart lines remain"
+        }
+      ]
+    },
+    {
+      "id": "new-review-is-accepted-without-being-stored",
+      "scenario": "tracks/ecommerce/scenarios/01-review-visibility-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.reviews.reviews.6a"
+      ],
+      "desc": "Accept an eligible new review but omit its durable insert, so neither author nor visitor can see it.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "      ctx.db.review.insert({\n        id: 0n,\n        itemId,\n        accountId: acc.id,\n        rating,\n        comment,\n        createdAt: ctx.timestamp,\n      });",
+          "replace": "      // mutant: accepted review is not persisted"
+        }
+      ]
+    },
+    {
+      "id": "repeat-review-inserts-a-second-row",
+      "scenario": "tracks/ecommerce/scenarios/01-review-uniqueness-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.transactional-integrity.unique-review.6b"
+      ],
+      "desc": "Insert a second review row instead of updating the customer's existing item review.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "      ctx.db.review.id.update({ ...existing, rating, comment, createdAt: ctx.timestamp });",
+          "replace": "      ctx.db.review.insert({ id: 0n, itemId, accountId: acc.id, rating, comment, createdAt: ctx.timestamp });"
+        }
+      ]
+    },
+    {
+      "id": "review-average-counts-rows-instead-of-ratings",
+      "scenario": "tracks/ecommerce/scenarios/01-review-rating-live-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.rating.6c"
+      ],
+      "desc": "Compute the live average from a constant per row rather than each stored rating.",
+      "file": "client/src/components/ItemDetail.tsx",
+      "edits": [
+        {
+          "find": "      : reviews.reduce((sum, r) => sum + r.rating, 0) / reviews.length;",
+          "replace": "      : reviews.reduce((sum) => sum + 1, 0) / reviews.length;"
+        }
+      ]
+    },
+    {
+      "id": "every-signed-in-customer-is-treated-as-an-admin",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-admin-staff-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.warehouse-admin.access-boundary.7a"
+      ],
+      "desc": "Use account presence instead of the server-provided administrator flag to expose the admin area.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  const isAdmin = currentUser?.isAdmin ?? false;",
+          "replace": "  const isAdmin = isSignedIn;"
+        }
+      ]
+    },
+    {
+      "id": "warehouse-view-omits-west",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-admin-staff-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.warehouse-admin.warehouse-view.7b"
+      ],
+      "desc": "Filter one real warehouse out of the administrator's inventory view.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "                warehouses={warehouses}",
+          "replace": "                warehouses={warehouses.filter((warehouse) => warehouse.name !== 'West')}"
+        }
+      ]
+    },
+    {
+      "id": "guest-purchase-falls-back-to-the-admin-account",
+      "scenario": "tracks/ecommerce/scenarios/01-purchase-session-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.purchase-session.101a"
+      ],
+      "desc": "Allow an unauthenticated direct purchase by attributing missing sessions to the administrator account, while preserving the authorized control path.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "export const buyNow = spacetimedb.reducer({ itemId: t.u64() }, (ctx, { itemId }) => {\n  const acc = requireAccount(ctx);",
+          "replace": "export const buyNow = spacetimedb.reducer({ itemId: t.u64() }, (ctx, { itemId }) => {\n  const accountId = getAccountId(ctx);\n  const acc = (accountId === null ? null : ctx.db.account.id.find(accountId))\n    ?? ctx.db.account.username.find('admin')!;"
+        }
+      ]
+    },
+    {
+      "id": "direct-purchases-are-attributed-to-the-system-account",
+      "scenario": "tracks/ecommerce/scenarios/01-purchase-attribution-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.purchase-attribution.102a"
+      ],
+      "desc": "Store every buy-now order under the administrator instead of the authenticated caller.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    accountId: acc.id,\n    createdAt: ctx.timestamp,\n    total: it.price,",
+          "replace": "    accountId: (ctx.db.account.username.find('admin') ?? acc).id,\n    createdAt: ctx.timestamp,\n    total: it.price,"
+        }
+      ]
+    },
+    {
+      "id": "direct-restock-does-not-require-an-admin",
+      "scenario": "tracks/ecommerce/scenarios/01-admin-write-staff-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.warehouse-admin.admin-write.103a"
+      ],
+      "desc": "Remove the server-side administrator check from the restock reducer.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "export const adminRestock = spacetimedb.reducer(\n  { itemId: t.u64(), warehouseId: t.u64(), quantity: t.u32() },\n  (ctx, { itemId, warehouseId, quantity }) => {\n    requireAdmin(ctx);",
+          "replace": "export const adminRestock = spacetimedb.reducer(\n  { itemId: t.u64(), warehouseId: t.u64(), quantity: t.u32() },\n  (ctx, { itemId, warehouseId, quantity }) => {\n    // mutant: no administrator check"
+        }
+      ]
+    },
+    {
+      "id": "direct-purchase-ignores-the-stored-price",
+      "scenario": "tracks/ecommerce/scenarios/01-server-price-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.transactional-integrity.server-price.104a"
+      ],
+      "desc": "Create the direct purchase order one dollar above the authoritative stored price.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    total: it.price,\n    status: 'pending',",
+          "replace": "    total: 1,\n    status: 'pending',"
+        }
+      ]
+    },
+    {
+      "id": "account-state-token-is-not-restored-after-reload",
+      "scenario": "tracks/ecommerce/scenarios/progression-account-state-reload-1.0.1.json",
+      "targets": [
+        "ecommerce.spec.state-durability.account-state-recovery.105a"
+      ],
+      "desc": "Build a reload connection without the durable identity token, losing the account and its data.",
+      "file": "client/src/main.tsx",
+      "edits": [
+        {
+          "find": ".withToken(localStorage.getItem('auth_token') || undefined)",
+          "replace": ".withToken(undefined)"
+        }
+      ]
+    },
+    {
+      "id": "reconnect-discards-the-visible-account-state",
+      "scenario": "tracks/ecommerce/scenarios/progression-account-state-reconnect-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.state-durability.account-state-recovery.105b"
+      ],
+      "desc": "Keep normal reload recovery but discard the client account projection when the browser comes back online.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  const currentUser = currentUserRows[0] ?? null;",
+          "replace": "  const [discardAccountAfterReconnect, setDiscardAccountAfterReconnect] = useState(false);\n  useEffect(() => {\n    const discardAccount = () => setDiscardAccountAfterReconnect(true);\n    window.addEventListener('online', discardAccount);\n    return () => window.removeEventListener('online', discardAccount);\n  }, []);\n  const currentUser = discardAccountAfterReconnect ? null : currentUserRows[0] ?? null;"
+        }
+      ]
+    },
+    {
+      "id": "order-views-return-every-customers-orders",
+      "scenario": "tracks/ecommerce/scenarios/01-order-ownership-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.order-ownership.106a"
+      ],
+      "desc": "Remove account filters from both order views, exposing another customer's order and its line items.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    const rows = [...ctx.db.customerOrder.accountId.filter(accountId)];",
+          "replace": "    const rows = [...ctx.db.customerOrder.iter()];"
+        },
+        {
+          "find": "    for (const o of ctx.db.customerOrder.accountId.filter(accountId)) {",
+          "replace": "    for (const o of ctx.db.customerOrder.iter()) {"
+        }
+      ]
+    },
+    {
+      "id": "admin-revenue-double-counts-every-order",
+      "scenario": "tracks/ecommerce/scenarios/progression-books-balance-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.transactional-integrity.books-balance.107a"
+      ],
+      "desc": "Count every completed order twice in the administrator revenue projection.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "        total += li.unitPrice * li.quantity;",
+          "replace": "        total += li.unitPrice * li.quantity * 2;"
+        }
+      ]
+    },
+    {
+      "id": "purchases-do-not-leave-the-warehouses",
+      "scenario": "tracks/ecommerce/scenarios/progression-books-balance-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.transactional-integrity.books-balance.107b"
+      ],
+      "desc": "Create normal orders and revenue while leaving warehouse stock unchanged.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  const allocations = decrementStockTracked(ctx, itemId, 1);",
+          "replace": "  const allocations: Array<{ warehouseId: bigint; quantity: number }> = [];"
+        }
+      ]
+    },
+    {
+      "id": "review-purchase-eligibility-is-not-checked",
+      "scenario": "tracks/ecommerce/scenarios/01-review-eligibility-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.review-eligibility.108a"
+      ],
+      "desc": "Allow a signed-in customer to review an item with no matching purchase.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    if (!bought) throw new SenderError('You can only review items you have purchased.');",
+          "replace": "    // mutant: purchase eligibility is not checked"
+        }
+      ]
+    },
+    {
+      "id": "eligible-review-is-accepted-without-being-stored",
+      "scenario": "tracks/ecommerce/scenarios/01-review-eligibility-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.review-eligibility.108b"
+      ],
+      "desc": "Keep the non-buyer refusal but omit the insert for a buyer's eligible new review.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "      ctx.db.review.insert({\n        id: 0n,\n        itemId,\n        accountId: acc.id,\n        rating,\n        comment,\n        createdAt: ctx.timestamp,\n      });",
+          "replace": "      // mutant: eligible review is acknowledged but not persisted"
+        }
+      ]
+    },
+    {
+      "id": "cart-line-lookup-ignores-cart-ownership",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-boundary-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.cart-boundary.109a"
+      ],
+      "desc": "Find an existing cart line by item alone, so the same named add action from another customer increments the owner's line instead of that customer's cart.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "function findCartLine(ctx: Ctx, accountId: bigint, itemId: bigint) {\n  for (const row of ctx.db.cartItem.byAccountItem.filter([accountId, itemId])) {\n    return row;\n  }\n  return null;\n}",
+          "replace": "function findCartLine(ctx: Ctx, _accountId: bigint, itemId: bigint) {\n  for (const row of ctx.db.cartItem.iter()) {\n    if (row.itemId === itemId) return row;\n  }\n  return null;\n}"
+        }
+      ]
+    },
+    {
+      "id": "purchase-does-not-reserve-stock-last-unit",
+      "scenario": "tracks/ecommerce/scenarios/01-last-unit-2.3.1.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.last-unit.201a",
+        "ecommerce.spec.concurrency-safety.last-unit.201b",
+        "ecommerce.spec.concurrency-safety.last-unit.201c"
+      ],
+      "desc": "Create purchase orders without reserving stock, proving the focused last-unit stock, order-count, and revenue consequences.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  const allocations = decrementStockTracked(ctx, itemId, 1);",
+          "replace": "  const allocations: Array<{ warehouseId: bigint; quantity: number }> = [];"
+        }
+      ]
+    },
+    {
+      "id": "purchase-does-not-reserve-stock-restock-race",
+      "scenario": "tracks/ecommerce/scenarios/01-restock-race-2.3.0.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.restock-race.202a"
+      ],
+      "desc": "Create purchase orders without reserving stock, so the rush ends at start plus five instead of start plus two.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  const allocations = decrementStockTracked(ctx, itemId, 1);",
+          "replace": "  const allocations: Array<{ warehouseId: bigint; quantity: number }> = [];"
+        }
+      ]
+    },
+    {
+      "id": "existing-cart-line-does-not-increment",
+      "scenario": "tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.1.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.duplicate-checkout.203a"
+      ],
+      "desc": "Render the old cart quantity after concurrent adds.",
+      "file": "client/src/components/CartPanel.tsx",
+      "edits": [
+        {
+          "find": "                value={line.quantity}",
+          "replace": "                value={1}"
+        }
+      ]
+    },
+    {
+      "id": "checkout-does-not-empty-cart",
+      "scenario": "tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.1.json",
+      "targets": [
+        "ecommerce.spec.concurrency-safety.duplicate-checkout.203b"
+      ],
+      "desc": "Keep checked-out cart lines so the next serialized checkout creates a duplicate order.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  for (const line of lines) ctx.db.cartItem.id.delete(line.id);",
+          "replace": "  // mutant: checked-out lines remain in the cart"
+        }
+      ]
+    },
+    {
+      "id": "stock-subscription-snapshotted-once",
+      "scenario": "tracks/ecommerce/scenarios/01-external-live-sync-1.1.0.json",
+      "targets": [
+        "ecommerce.spec.external-data-sync.external-stock.901a"
+      ],
+      "desc": "Render the first non-empty stock snapshot forever instead of following committed subscription updates.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "import { useEffect, useMemo, useState } from 'react';",
+          "replace": "import { useEffect, useMemo, useRef, useState } from 'react';"
+        },
+        {
+          "find": "  const [stocks] = useTable(tables.stock);",
+          "replace": "  const [liveStocks] = useTable(tables.stock);\n  const initialStocks = useRef<typeof liveStocks | null>(null);\n  if (initialStocks.current === null && liveStocks.length > 0) {\n    initialStocks.current = liveStocks;\n  }\n  const stocks = initialStocks.current ?? liveStocks;"
+        }
+      ]
+    },
+    {
+      "id": "stock-view-ignores-update-across-app-server-stop",
+      "scenario": "tracks/ecommerce/scenarios/01-external-server-restart-sync-1.1.0.json",
+      "targets": [
+        "ecommerce.spec.external-data-sync.external-stock.901c"
+      ],
+      "desc": "Freeze the already-open stock view at its first complete snapshot. SpacetimeDB durability and app-server independence remain structural; this mutation validates only the scored stale-view oracle.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "import { useEffect, useMemo, useState } from 'react';",
+          "replace": "import { useEffect, useMemo, useRef, useState } from 'react';"
+        },
+        {
+          "find": "  const [stocks] = useTable(tables.stock);",
+          "replace": "  const [liveStocks] = useTable(tables.stock);\n  const frozenStocks = useRef<typeof liveStocks | null>(null);\n  if (frozenStocks.current === null && liveStocks.length > 0) frozenStocks.current = liveStocks;\n  const stocks = frozenStocks.current ?? liveStocks;"
+        }
+      ]
+    },
+    {
+      "id": "stock-view-keeps-pre-reconnect-snapshot",
+      "scenario": "tracks/ecommerce/scenarios/01-external-reconnect-sync-1.1.0.json",
+      "targets": [
+        "ecommerce.spec.external-data-sync.external-stock.901d"
+      ],
+      "desc": "Continue following stock until the browser goes offline, then retain the last online snapshot after network restoration.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "import { useEffect, useMemo, useState } from 'react';",
+          "replace": "import { useEffect, useMemo, useRef, useState } from 'react';"
+        },
+        {
+          "find": "  const [stocks] = useTable(tables.stock);",
+          "replace": "  const [liveStocks] = useTable(tables.stock);\n  const [freezeStockAfterOffline, setFreezeStockAfterOffline] = useState(false);\n  const lastOnlineStocks = useRef(liveStocks);\n  useEffect(() => {\n    const freezeStock = () => setFreezeStockAfterOffline(true);\n    window.addEventListener('offline', freezeStock);\n    return () => window.removeEventListener('offline', freezeStock);\n  }, []);\n  if (!freezeStockAfterOffline) {\n    lastOnlineStocks.current = liveStocks;\n  }\n  const stocks = freezeStockAfterOffline ? lastOnlineStocks.current : liveStocks;"
+        }
+      ]
+    },
+    {
+      "id": "open-review-list-snapshots-on-selection",
+      "scenario": "tracks/ecommerce/scenarios/progression-open-list-live-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.open-list.902a"
+      ],
+      "desc": "Snapshot the selected item's reviews when the detail opens instead of following later subscription updates.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "import { useEffect, useMemo, useState } from 'react';",
+          "replace": "import { useEffect, useMemo, useRef, useState } from 'react';"
+        },
+        {
+          "find": "  const selectedItemReviews = selectedItemId !== null ? reviewsByItem.get(selectedItemId) ?? [] : [];",
+          "replace": "  const openedReviewItem = useRef<bigint | null>(null);\n  const openedReviews = useRef<(typeof reviews)[number][]>([]);\n  if (selectedItemId !== openedReviewItem.current) {\n    openedReviewItem.current = selectedItemId;\n    openedReviews.current = selectedItemId !== null ? reviewsByItem.get(selectedItemId) ?? [] : [];\n  }\n  const selectedItemReviews = openedReviews.current;"
+        }
+      ]
+    },
+    {
+      "id": "open-review-list-renders-each-review-twice",
+      "scenario": "tracks/ecommerce/scenarios/progression-open-list-live-1.0.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.open-list.902a"
+      ],
+      "desc": "Render every committed review twice in the already-open list.",
+      "file": "client/src/components/ItemDetail.tsx",
+      "edits": [
+        {
+          "find": "            {reviews.map((r) => (",
+          "replace": "            {[...reviews, ...reviews].map((r) => ("
+        }
+      ]
+    },
+    {
+      "id": "cancel-does-not-restore-stock-feature",
+      "scenario": "tracks/ecommerce/scenarios/02-order-cancellation-core-1.0.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.cancellation-and-return.3a"
+      ],
+      "desc": "The serialized cancellation reducer changes order state and purchase counts but skips allocation restoration.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    restoreOrderItemStock(ctx, li);\n    decrementPurchaseCount(ctx, li.itemId, li.quantity);",
+          "replace": "    // mutant: cancellation does not restore its reserved stock\n    decrementPurchaseCount(ctx, li.itemId, li.quantity);"
+        }
+      ]
+    },
+    {
+      "id": "cancel-does-not-restore-stock-fresh-client",
+      "scenario": "tracks/ecommerce/scenarios/02-self-contained-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.stock-conservation.202b",
+        "ecommerce.inventory-operations.stock-conservation.202c"
+      ],
+      "desc": "The serialized cancellation reducer skips allocation restoration, so a fresh client reads the persisted shortfall.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    restoreOrderItemStock(ctx, li);\n    decrementPurchaseCount(ctx, li.itemId, li.quantity);",
+          "replace": "    // mutant: cancellation does not restore its reserved stock\n    decrementPurchaseCount(ctx, li.itemId, li.quantity);"
+        }
+      ]
+    },
+    {
+      "id": "cancel-restores-stock-but-keeps-pending-status",
+      "scenario": "tracks/ecommerce/scenarios/02-order-cancellation-history-1.0.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.cancellation-and-return.3b"
+      ],
+      "desc": "The serialized cancellation reducer restores allocations but writes pending back to order history.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  ctx.db.customerOrder.id.update({ ...order, status: 'cancelled' });",
+          "replace": "  ctx.db.customerOrder.id.update({ ...order, status: 'pending' });"
+        }
+      ]
+    },
+    {
+      "id": "cancelled-order-remains-in-revenue-feature",
+      "scenario": "tracks/ecommerce/scenarios/02-order-cancellation-core-1.0.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.cancellation-and-return.3a"
+      ],
+      "desc": "The admin revenue view includes cancelled orders even though cancellation otherwise succeeds.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "      if (!isOrderCounted(o)) continue;\n      for (const li of ctx.db.orderItem.orderId.filter(o.id)) {",
+          "replace": "      // mutant: cancelled orders remain in revenue\n      for (const li of ctx.db.orderItem.orderId.filter(o.id)) {"
+        }
+      ]
+    },
+    {
+      "id": "cancelled-order-remains-in-revenue-invariant",
+      "scenario": "tracks/ecommerce/scenarios/02-invariants.json",
+      "targets": [
+        "ecommerce.returns-pricing.refund-accounting.203a"
+      ],
+      "desc": "The admin revenue view includes cancelled orders even though cancellation otherwise succeeds.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "      if (!isOrderCounted(o)) continue;\n      for (const li of ctx.db.orderItem.orderId.filter(o.id)) {",
+          "replace": "      // mutant: cancelled orders remain in revenue\n      for (const li of ctx.db.orderItem.orderId.filter(o.id)) {"
+        }
+      ]
+    },
+    {
+      "id": "operator-authorization-allows-customer-transfer",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.operations-access.operator-authorization.201a"
+      ],
+      "desc": "The transfer reducer drops its administrator role gate.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  (ctx, { itemId, fromWarehouseId, toWarehouseId, quantity }) => {\n    requireAdmin(ctx);",
+          "replace": "  (ctx, { itemId, fromWarehouseId, toWarehouseId, quantity }) => {\n    // mutant: no administrator role check"
+        }
+      ]
+    },
+    {
+      "id": "customer-can-ship-order-direct-1-1",
+      "scenario": "tracks/ecommerce/scenarios/02-server-actions-1.1.0.json",
+      "targets": [
+        "ecommerce.operations-access.operator-authorization.201c"
+      ],
+      "desc": "The shipping reducer drops its staff role check while retaining pending-state validation.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "export const shipOrder = spacetimedb.reducer({ orderId: t.u64() }, (ctx, { orderId }) => {\n  requireStaffOrAdmin(ctx);",
+          "replace": "export const shipOrder = spacetimedb.reducer({ orderId: t.u64() }, (ctx, { orderId }) => {\n  // mutant: no staff role check"
+        }
+      ]
+    },
+    {
+      "id": "customer-can-cancel-foreign-order-1-1",
+      "scenario": "tracks/ecommerce/scenarios/02-server-actions-1.1.0.json",
+      "targets": [
+        "ecommerce.operations-access.order-owner.204a"
+      ],
+      "desc": "Cancellation bypasses the owner helper while retaining missing-order and pending-state validation.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "export const cancelOrder = spacetimedb.reducer({ orderId: t.u64() }, (ctx, { orderId }) => {\n  const order = requireOrderOwner(ctx, orderId);",
+          "replace": "export const cancelOrder = spacetimedb.reducer({ orderId: t.u64() }, (ctx, { orderId }) => {\n  const order = ctx.db.customerOrder.id.find(orderId);\n  if (!order) throw new SenderError('Order not found.');"
+        }
+      ]
+    },
+    {
+      "id": "queue-depth-lags-one-order",
+      "scenario": "tracks/ecommerce/scenarios/02-fulfilment-live-1.0.0.json",
+      "targets": [
+        "ecommerce.operations-access.fulfilment-queue.1a"
+      ],
+      "desc": "The reactive queue renders every order but its visible depth remains one behind.",
+      "file": "client/src/components/FulfilmentPanel.tsx",
+      "edits": [
+        {
+          "find": "Waiting: <span data-role=\"queue-depth\">{queue.length}</span>",
+          "replace": "Waiting: <span data-role=\"queue-depth\">{Math.max(0, queue.length - 1)}</span>"
+        }
+      ]
+    },
+    {
+      "id": "ship-acknowledges-without-changing-status",
+      "scenario": "tracks/ecommerce/scenarios/02-fulfilment-ship-1.0.0.json",
+      "targets": [
+        "ecommerce.operations-access.fulfilment-queue.1c"
+      ],
+      "desc": "The serialized shipping reducer accepts the call but writes pending back to the order.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  ctx.db.customerOrder.id.update({ ...order, status: 'shipped' });",
+          "replace": "  ctx.db.customerOrder.id.update({ ...order, status: 'pending' });"
+        }
+      ]
+    },
+    {
+      "id": "customer-sees-fulfilment-navigation",
+      "scenario": "tracks/ecommerce/scenarios/02-fulfilment-access-1.0.0.json",
+      "targets": [
+        "ecommerce.operations-access.fulfilment-queue.1d"
+      ],
+      "desc": "The fulfilment navigation is shown to every signed-in account instead of only staff and administrators.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "          {(isStaff || isAdmin) && (\n            <button\n              type=\"button\"\n              className=\"btn btn-ghost btn-sm\"\n              data-role=\"staff-link\"",
+          "replace": "          {isSignedIn && (\n            <button\n              type=\"button\"\n              className=\"btn btn-ghost btn-sm\"\n              data-role=\"staff-link\""
+        }
+      ]
+    },
+    {
+      "id": "operator-authorization-allows-customer-shipping",
+      "scenario": "tracks/ecommerce/scenarios/02-server-actions-1.1.0.json",
+      "targets": [
+        "ecommerce.operations-access.operator-authorization.201c"
+      ],
+      "desc": "The shipping reducer drops the staff role check while retaining the pending-order guard.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "export const shipOrder = spacetimedb.reducer({ orderId: t.u64() }, (ctx, { orderId }) => {\n  requireStaffOrAdmin(ctx);",
+          "replace": "export const shipOrder = spacetimedb.reducer({ orderId: t.u64() }, (ctx, { orderId }) => {\n  // mutant: no staff role check"
+        }
+      ]
+    },
+    {
+      "id": "transfer-debits-source-without-crediting-existing-destination",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.stock-conservation.202a",
+        "ecommerce.inventory-operations.warehouse-transfer.2a"
+      ],
+      "desc": "A transfer debits the source row but writes the existing destination quantity back unchanged, violating both directional movement and total conservation inside the serialized reducer.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "      ctx.db.stock.insert({ ...toRow, quantity: toRow.quantity + quantity });",
+          "replace": "      ctx.db.stock.insert({ ...toRow, quantity: toRow.quantity });"
+        }
+      ]
+    },
+    {
+      "id": "transfer-warehouse-totals-omit-destination-credit",
+      "scenario": "tracks/ecommerce/scenarios/02-transfer-totals-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.warehouse-transfer.2b"
+      ],
+      "desc": "The serialized transfer debits the source but writes the existing destination quantity back unchanged.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "      ctx.db.stock.insert({ ...toRow, quantity: toRow.quantity + quantity });",
+          "replace": "      ctx.db.stock.insert({ ...toRow, quantity: toRow.quantity });"
+        }
+      ]
+    },
+    {
+      "id": "transfer-overdraft-guard-removed",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.warehouse-transfer.2c"
+      ],
+      "desc": "The serialized reducer no longer rejects insufficient source stock and commits negative source quantity.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    if (available < quantity) {\n      throw new SenderError(`Not enough stock in source warehouse: only ${available} available.`);\n    }",
+          "replace": "    // mutant: insufficient source stock is not rejected"
+        }
+      ]
+    },
+    {
+      "id": "low-stock-excludes-boundary-ten",
+      "scenario": "tracks/ecommerce/scenarios/02-low-stock-1.4.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.operational-views.5a"
+      ],
+      "desc": "The reactive low-stock view uses a strict boundary and omits items with exactly ten units.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "        .filter((i) => (stockByItem.get(i.id) ?? 0) <= LOW_STOCK_THRESHOLD)",
+          "replace": "        .filter((i) => (stockByItem.get(i.id) ?? 0) < LOW_STOCK_THRESHOLD)"
+        }
+      ]
+    },
+    {
+      "id": "category-totals-ignore-pending-purchases",
+      "scenario": "tracks/ecommerce/scenarios/02-operational-category-totals-1.0.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.operational-views.5b"
+      ],
+      "desc": "The category totals view includes only shipped orders, so a newly accepted pending purchase is absent.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    for (const order of ctx.db.customerOrder.iter()) {\n      if (!isOrderCounted(order)) continue;",
+          "replace": "    for (const order of ctx.db.customerOrder.iter()) {\n      if (order.status !== 'shipped') continue;"
+        }
+      ]
+    },
+    {
+      "id": "recommendations-ignore-pending-purchases",
+      "scenario": "tracks/ecommerce/scenarios/02-operational-recommendations-1.0.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.operational-views.5c"
+      ],
+      "desc": "The personal recommendation view derives categories only from shipped orders, so a new pending purchase has no influence.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    for (const order of ctx.db.customerOrder.accountId.filter(accountId)) {\n      if (!isOrderCounted(order)) continue;",
+          "replace": "    for (const order of ctx.db.customerOrder.accountId.filter(accountId)) {\n      if (order.status !== 'shipped') continue;"
+        }
+      ]
+    },
+    {
+      "id": "purchases-do-not-affect-best-sellers",
+      "scenario": "tracks/ecommerce/scenarios/02-operational-best-sellers-1.0.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.operational-views.5d"
+      ],
+      "desc": "Rank signed-out recommendations without purchase counts.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "const purchaseCountOf = (id: bigint) => ctx.db.itemStats.itemId.find(id)?.purchaseCount ?? 0;",
+          "replace": "const purchaseCountOf = (_id: bigint) => 0;"
+        }
+      ]
+    },
+    {
+      "id": "queue-warehouse-reports-west",
+      "scenario": "tracks/ecommerce/scenarios/02-queue-warehouse-1.4.0.json",
+      "targets": [
+        "ecommerce.operations-access.fulfilment-queue.1b"
+      ],
+      "desc": "The queue renders West for the deterministic Desk Lamp allocation even though the order reserved stock in East.",
+      "file": "client/src/components/FulfilmentPanel.tsx",
+      "edits": [
+        {
+          "find": "{name}: {order.warehouseNames[i]}",
+          "replace": "{name}: West"
+        }
+      ]
+    },
+    {
+      "id": "stock-conservation-view-keeps-the-initial-total",
+      "scenario": "tracks/ecommerce/scenarios/02-server-actions-1.1.0.json",
+      "targets": [
+        "ecommerce.inventory-operations.stock-conservation.202d"
+      ],
+      "desc": "Freeze the displayed aggregate stock at the first complete subscription snapshot. This deterministic scenario-bound defect validates the exact starting-total-minus-one oracle after the direct transfer and purchase; it does not model a lost-update interleaving because SpacetimeDB reducer execution is atomically serialized.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "import { useEffect, useMemo, useState } from 'react';",
+          "replace": "import { useEffect, useMemo, useRef, useState } from 'react';"
+        },
+        {
+          "find": "  const stockByItem = useMemo(() => {\n    const map = new Map<bigint, number>();\n    for (const row of stocks) {",
+          "replace": "  const initialStockRows = useRef(stocks);\n  if (initialStockRows.current.length === 0 && stocks.length > 0) initialStockRows.current = stocks;\n\n  const stockByItem = useMemo(() => {\n    const map = new Map<bigint, number>();\n    for (const row of initialStockRows.current) {"
+        }
+      ]
+    },
+    {
+      "id": "catalog-search-ignores-the-query",
+      "scenario": "tracks/ecommerce/scenarios/01-catalog-search-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog-search.2d"
+      ],
+      "desc": "A non-empty catalog query filters out every product instead of matching names.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": ".filter(item => !q || item.name.toLowerCase().includes(q))",
+          "replace": ".filter(() => !q) // mutant: non-empty searches return no products"
+        }
+      ]
+    },
+    {
+      "id": "admin-total-stock-is-not-rendered",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-stock-live-staff-1.0.0.json",
+      "targets": [
+        "ecommerce.feature.warehouse-admin.warehouse-stock.7c"
+      ],
+      "desc": "The staff stock total always renders zero after a warehouse restock.",
+      "file": "client/src/components/AdminPanel.tsx",
+      "edits": [
+        {
+          "find": "<td data-role=\"admin-stock\">{totalStockOf(item.id)}</td>",
+          "replace": "<td data-role=\"admin-stock\">{0}</td>"
+        }
+      ]
+    },
+    {
+      "id": "customers-can-schedule-restocks",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-access-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-access.scheduled-work-access.317a"
+      ],
+      "desc": "Scheduling a restock no longer checks that the caller is an administrator.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  (ctx, input) => {\n    requireAdmin(ctx);\n    const itemName = input.item.trim();\n    const warehouseName = input.warehouse.trim();\n    const item = [...ctx.db.item].find(row => row.name === itemName);\n    const warehouse = [...ctx.db.warehouse].find(row => row.name === warehouseName);",
+          "replace": "  (ctx, input) => {\n    // mutant: any signed-in or anonymous caller can schedule work\n    const itemName = input.item.trim();\n    const warehouseName = input.warehouse.trim();\n    const item = [...ctx.db.item].find(row => row.name === itemName);\n    const warehouse = [...ctx.db.warehouse].find(row => row.name === warehouseName);"
+        }
+      ]
+    },
+    {
+      "id": "scheduled-restock-is-delayed-past-the-durability-window",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-durability-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-durability.restart-survival.311a"
+      ],
+      "desc": "A scheduled restock is persisted with an extra ten-minute delay.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "dueMicros: nowMicros(ctx) + BigInt(input.delaySeconds) * SECOND,",
+          "replace": "dueMicros: nowMicros(ctx) + (BigInt(input.delaySeconds) + 600n) * SECOND,"
+        }
+      ]
+    },
+    {
+      "id": "reservation-is-delayed-past-the-durability-window",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-durability-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-durability.restart-survival.314a"
+      ],
+      "desc": "A reservation is persisted with a ten-minute lifetime instead of ninety seconds.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "const expiresMicros = nowMicros(ctx) + 90n * SECOND;",
+          "replace": "const expiresMicros = nowMicros(ctx) + 600n * SECOND;"
+        }
+      ]
+    },
+    {
+      "id": "completed-restock-remains-pending",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-integrity.exactly-once.311a"
+      ],
+      "desc": "A completed restock remains pending and is applied again by later maintenance ticks.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.scheduledRestock.id.update({ ...pending, status: 'complete' });",
+          "replace": "ctx.db.scheduledRestock.id.update({ ...pending, status: 'pending' });"
+        }
+      ]
+    },
+    {
+      "id": "reservation-expiry-restores-stock-twice",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-integrity.stock-conservation.313a"
+      ],
+      "desc": "Reservation expiry returns twice the quantity that was reserved.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "restoreStock(ctx, row.itemId, row.warehouseId, row.quantity);\n    ctx.db.reservation.id.update({ ...row, expired: true });",
+          "replace": "restoreStock(ctx, row.itemId, row.warehouseId, row.quantity * 2);\n    ctx.db.reservation.id.update({ ...row, expired: true });"
+        }
+      ]
+    },
+    {
+      "id": "checkout-takes-reserved-stock-again",
+      "scenario": "tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.deferred-integrity.stock-conservation.314a"
+      ],
+      "desc": "Checkout decrements stock after the cart reservation already took it.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "const allocations = held.map(row => ({ warehouseId: row.warehouseId, quantity: row.quantity }));\n    const orderItemRow",
+          "replace": "const allocations = decrementStockTracked(ctx, p.itemId, p.quantity);\n    const orderItemRow"
+        }
+      ]
+    },
+    {
+      "id": "reservation-does-not-decrement-stock",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.reservations.reservations.301a"
+      ],
+      "desc": "Creating a reservation leaves the public stock total unchanged.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.stock.insert({ ...row, quantity: row.quantity - allocation.quantity });",
+          "replace": "ctx.db.stock.insert({ ...row, quantity: row.quantity });"
+        }
+      ]
+    },
+    {
+      "id": "reservation-timer-is-static",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.reservations.reservations.305a"
+      ],
+      "desc": "The cart always renders ninety seconds instead of a decreasing reservation timer.",
+      "file": "client/src/components/CartPanel.tsx",
+      "edits": [
+        {
+          "find": "const seconds = Math.max(0, Number((reservation.expiresMicros - BigInt(Date.now()) * 1000n) / 1_000_000n));",
+          "replace": "const seconds = 90;"
+        }
+      ]
+    },
+    {
+      "id": "checkout-leaves-cart-lines",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.reservations.reservations.306a"
+      ],
+      "desc": "Checkout creates an order but leaves the purchased lines in the cart.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "for (const line of lines) ctx.db.cartItem.id.delete(line.id);",
+          "replace": "for (const line of lines) void line;"
+        }
+      ]
+    },
+    {
+      "id": "expired-reservation-is-still-marked-live",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.reservations.reservations.307a"
+      ],
+      "desc": "Expired reservations keep their live flag, so the cart does not mark them expired.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.reservation.id.update({ ...row, expired: true });",
+          "replace": "ctx.db.reservation.id.update({ ...row, expired: false });"
+        }
+      ]
+    },
+    {
+      "id": "renewed-reservation-expires-too-soon",
+      "scenario": "tracks/ecommerce/scenarios/03-reservations-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.reservations.reservations.308a"
+      ],
+      "desc": "Renewed quantities receive only a twenty-second reservation window.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "reserveUnits(ctx, accountId, itemId, quantity);",
+          "replace": "reserveUnits(ctx, accountId, itemId, quantity);\n  for (const renewed of findReservations(ctx, accountId, itemId)) {\n    ctx.db.reservation.id.update({ ...renewed, expiresMicros: nowMicros(ctx) + 20n * SECOND });\n  }"
+        }
+      ]
+    },
+    {
+      "id": "pending-restock-timer-is-static",
+      "scenario": "tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.scheduled-restocks.scheduled-restocks.302a"
+      ],
+      "desc": "The pending restock UI always renders ninety seconds instead of the server due time.",
+      "file": "client/src/components/ProgressionWorkbench.tsx",
+      "edits": [
+        {
+          "find": "{Math.max(0, Number((row.dueMicros - BigInt(Date.now()) * 1000n) / 1_000_000n))}",
+          "replace": "{90}"
+        }
+      ]
+    },
+    {
+      "id": "due-restock-omits-ledger-entry",
+      "scenario": "tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.scheduled-restocks.scheduled-restocks.305a"
+      ],
+      "desc": "A due restock updates stock but does not create its stock ledger record.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.stockLedger.insert({\n      id: 0n,\n      itemId: pending.itemId,\n      warehouseId: pending.warehouseId,\n      quantity: pending.quantity,\n      createdMicros: now,\n      source: 'scheduled restock',\n    });",
+          "replace": "// mutant: due restocks are not recorded in the ledger"
+        }
+      ]
+    },
+    {
+      "id": "cancelled-restock-remains-pending",
+      "scenario": "tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.scheduled-restocks.scheduled-restocks.306a"
+      ],
+      "desc": "Cancelling a restock leaves it pending, so maintenance later applies it.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.scheduledRestock.id.update({ ...row, status: 'cancelled' });",
+          "replace": "ctx.db.scheduledRestock.id.update({ ...row, status: 'pending' });"
+        }
+      ]
+    },
+    {
+      "id": "restart-restock-runs-early",
+      "scenario": "tracks/ecommerce/scenarios/03-server-time-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.server-time.server-time.312a"
+      ],
+      "desc": "A scheduled restock ignores its requested delay and becomes due after one second.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "dueMicros: nowMicros(ctx) + BigInt(input.delaySeconds) * SECOND,",
+          "replace": "dueMicros: nowMicros(ctx) + SECOND,"
+        }
+      ]
+    },
+    {
+      "id": "closed-browser-reservation-never-expires",
+      "scenario": "tracks/ecommerce/scenarios/03-server-time-1.0.0.json",
+      "targets": [
+        "ecommerce.l3.server-time.server-time.313a"
+      ],
+      "desc": "Server maintenance skips reservation expiry when no customer browser is present.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "for (const row of [...ctx.db.reservation.iter()]) {\n    if (row.expired || row.expiresMicros > now) continue;",
+          "replace": "for (const row of [...ctx.db.reservation.iter()].filter(() => false)) {\n    if (row.expired || row.expiresMicros > now) continue;"
+        }
+      ]
+    },
+    {
+      "id": "catalog-product-is-not-published",
+      "scenario": "tracks/ecommerce/scenarios/progression-catalog-management-1.0.1.json",
+      "targets": [
+        "ecommerce.progression.catalog-management.catalog-management.622a"
+      ],
+      "desc": "The public product card omits the submitted name.",
+      "file": "client/src/components/ItemCard.tsx",
+      "edits": [
+        {
+          "find": "{item.name}",
+          "replace": "{item.name === 'Travel Mug' ? '' : item.name}"
+        }
+      ]
+    },
+    {
+      "id": "catalog-variants-are-discarded",
+      "scenario": "tracks/ecommerce/scenarios/progression-catalog-management-1.0.1.json",
+      "targets": [
+        "ecommerce.progression.catalog-management.catalog-management.622b"
+      ],
+      "desc": "Catalog management discards every submitted product variant.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "for (const variantName of variants.split(',').map(value => value.trim()).filter(Boolean)) {\n      ctx.db.itemVariant.insert({ id: 0n, itemId: product.id, name: variantName });\n    }",
+          "replace": "void variants; // mutant: submitted variants are discarded"
+        }
+      ]
+    },
+    {
+      "id": "customer-profile-is-not-saved",
+      "scenario": "tracks/ecommerce/scenarios/progression-customer-profile-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.customer-profile.customer-profile.620a"
+      ],
+      "desc": "Saving a customer profile does not persist its values.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "if (existing) ctx.db.customerProfile.accountId.update(row);\n    else ctx.db.customerProfile.insert(row);",
+          "replace": "void existing;\n    void row; // mutant: profile changes are discarded"
+        }
+      ]
+    },
+    {
+      "id": "customer-profile-view-leaks-another-account",
+      "scenario": "tracks/ecommerce/scenarios/progression-customer-profile-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.customer-profile.customer-profile.620b"
+      ],
+      "desc": "The customer profile view returns the first stored profile without checking its owner.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "return accountId === null ? undefined : ctx.db.customerProfile.accountId.find(accountId) ?? undefined;",
+          "replace": "return accountId === null ? undefined : [...ctx.db.customerProfile.iter()][0];"
+        }
+      ]
+    },
+    {
+      "id": "faceted-search-ignores-category",
+      "scenario": "tracks/ecommerce/scenarios/progression-faceted-filters-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.faceted-search.faceted-search.401a"
+      ],
+      "desc": "Faceted search applies price and stock filters but ignores the selected category.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": ".filter(item => !categoryFilter || categoryByItem.get(item.id) === categoryFilter)",
+          "replace": ".filter(() => true) // mutant: category filter is ignored"
+        }
+      ]
+    },
+    {
+      "id": "faceted-search-next-page-does-not-advance",
+      "scenario": "tracks/ecommerce/scenarios/progression-faceted-pagination-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.faceted-search.faceted-search.402a"
+      ],
+      "desc": "The next-page control keeps the search on its current page.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "onClick={() => setSearchPage(page => page + 1)}>Next</button>",
+          "replace": "onClick={() => setSearchPage(page => page)}>Next</button>"
+        }
+      ]
+    },
+    {
+      "id": "managed-support-leaks-and-accepts-cross-account-replies",
+      "scenario": "tracks/ecommerce/scenarios/progression-managed-support-privacy-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.managed-support.managed-support-privacy.613b"
+      ],
+      "desc": "Managed support tickets are visible across accounts and replayed replies are accepted.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": ".filter(row => isTicketCreator(sender, row.creatorIdentity.toHexString()) ||\n        !!actor && (actor.isAdmin || actor.isStaff || row.accountId === accountId))",
+          "replace": ".filter(() => true)"
+        },
+        {
+          "file": "backend/spacetimedb/src/index.ts",
+          "find": "if (!actor.isAdmin && !actor.isStaff && ticket.accountId !== actor.id) {\n    throw new SenderError('That support ticket is private.');\n  }",
+          "replace": "// mutant: any signed-in account can access any support ticket"
+        }
+      ]
+    },
+    {
+      "id": "managed-support-replies-are-empty",
+      "scenario": "tracks/ecommerce/scenarios/progression-managed-support-shared-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.managed-support.managed-support-shared.613a"
+      ],
+      "desc": "Managed support stores replies without their message body.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "body: body.trim(),\n      createdMicros: nowMicros(ctx),",
+          "replace": "body: '',\n      createdMicros: nowMicros(ctx),"
+        }
+      ]
+    },
+    {
+      "id": "notification-preferences-are-not-saved",
+      "scenario": "tracks/ecommerce/scenarios/progression-notification-preferences-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.notification-preferences.notification-preferences-persistence.630a"
+      ],
+      "desc": "Saving notification preferences discards the selected values.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "if (existing) ctx.db.notificationPreference.accountId.update(row);\n    else ctx.db.notificationPreference.insert(row);",
+          "replace": "void existing;\n    void row; // mutant: notification preferences are discarded"
+        }
+      ]
+    },
+    {
+      "id": "notification-preferences-leak-across-accounts",
+      "scenario": "tracks/ecommerce/scenarios/progression-notification-preferences-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.notification-preferences.notification-preferences-privacy.630b"
+      ],
+      "desc": "The preference view returns another account's first stored choice.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "const row = ctx.db.notificationPreference.accountId.find(accountId);\n    return row ? { orderEnabled: row.orderEnabled, stockEnabled: row.stockEnabled } : undefined;",
+          "replace": "const row = [...ctx.db.notificationPreference.iter()][0];\n    return row ? { orderEnabled: row.orderEnabled, stockEnabled: row.stockEnabled } : undefined;"
+        }
+      ]
+    },
+    {
+      "id": "checkout-records-zero-payment",
+      "scenario": "tracks/ecommerce/scenarios/progression-core-business-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.payment-records.payment-records.623a"
+      ],
+      "desc": "Checkout records a paid payment with a zero amount.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.paymentRecord.insert({ id: 0n, orderId: order.id, amount: order.total, status: 'paid' });\n  if (promo) {",
+          "replace": "ctx.db.paymentRecord.insert({ id: 0n, orderId: order.id, amount: 0, status: 'paid' });\n  if (promo) {"
+        }
+      ]
+    },
+    {
+      "id": "checkout-records-duplicate-payments",
+      "scenario": "tracks/ecommerce/scenarios/progression-core-business-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.payment-records.payment-records.623b"
+      ],
+      "desc": "Checkout inserts two payment records for one order.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.paymentRecord.insert({ id: 0n, orderId: order.id, amount: order.total, status: 'paid' });\n  if (promo) {",
+          "replace": "ctx.db.paymentRecord.insert({ id: 0n, orderId: order.id, amount: order.total, status: 'paid' });\n  ctx.db.paymentRecord.insert({ id: 0n, orderId: order.id, amount: order.total + 0.01, status: 'paid' });\n  if (promo) {"
+        }
+      ]
+    },
+    {
+      "id": "active-promotion-does-not-discount-checkout",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-checkout.promotion-checkout-active.621a"
+      ],
+      "desc": "Checkout ignores an active promotion when it calculates the discount.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "const discount = promo ? total * (promo.discountPercent / 100) : 0;",
+          "replace": "const discount = 0;"
+        }
+      ]
+    },
+    {
+      "id": "expired-promotion-is-accepted",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-checkout.promotion-checkout-expired.621b"
+      ],
+      "desc": "Promotion application does not reject a promotion after its end time.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "if (!promo || promo.startMicros > now || promo.endMicros < now || promo.redemptions >= promo.usageLimit) {",
+          "replace": "if (!promo || promo.startMicros > now || promo.redemptions >= promo.usageLimit) {"
+        }
+      ]
+    },
+    {
+      "id": "exhausted-promotion-is-accepted",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-checkout-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-checkout.promotion-checkout-exhausted.621c"
+      ],
+      "desc": "Promotion application does not reject a promotion at its usage limit.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "if (!promo || promo.startMicros > now || promo.endMicros < now || promo.redemptions >= promo.usageLimit) {",
+          "replace": "if (!promo || promo.startMicros > now || promo.endMicros < now) {"
+        }
+      ]
+    },
+    {
+      "id": "customers-can-create-promotions",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-rules-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-rules.promotion-rule-access.620b"
+      ],
+      "desc": "Promotion creation does not require staff access.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  (ctx, input) => {\n    requireStaffOrAdmin(ctx);\n    if (input.discountPercent <= 0 || input.discountPercent > 100) {",
+          "replace": "  (ctx, input) => {\n    if (input.discountPercent <= 0 || input.discountPercent > 100) {"
+        }
+      ]
+    },
+    {
+      "id": "promotion-rule-stores-the-wrong-discount",
+      "scenario": "tracks/ecommerce/scenarios/progression-promotion-rules-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.promotion-rules.promotion-rule-values.620a"
+      ],
+      "desc": "Promotion creation stores a one-percent discount instead of the submitted value.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.promotion.insert({ id: 0n, ...input, code: input.code.trim(), redemptions: 0 });",
+          "replace": "ctx.db.promotion.insert({ id: 0n, ...input, discountPercent: 1, code: input.code.trim(), redemptions: 0 });"
+        }
+      ]
+    },
+    {
+      "id": "staff-cannot-open-staff-tools",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-access-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.staff-access.staff-access.601a"
+      ],
+      "desc": "The staff navigation link is shown to administrators but not staff members.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "{(isStaff || isAdmin) && (\n            <button\n              type=\"button\"\n              className=\"btn btn-ghost btn-sm\"\n              data-role=\"staff-link\"",
+          "replace": "{isAdmin && (\n            <button\n              type=\"button\"\n              className=\"btn btn-ghost btn-sm\"\n              data-role=\"staff-link\""
+        }
+      ]
+    },
+    {
+      "id": "customers-can-open-staff-tools",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-access-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.staff-access.staff-access.601b"
+      ],
+      "desc": "The staff navigation link is shown to every signed-in customer.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "{(isStaff || isAdmin) && (\n            <button\n              type=\"button\"\n              className=\"btn btn-ghost btn-sm\"\n              data-role=\"staff-link\"",
+          "replace": "{isSignedIn && (\n            <button\n              type=\"button\"\n              className=\"btn btn-ghost btn-sm\"\n              data-role=\"staff-link\""
+        }
+      ]
+    },
+    {
+      "id": "administrator-role-assignment-is-discarded",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-roles-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.staff-roles.staff-roles.621a"
+      ],
+      "desc": "Role assignment records activity but does not save the selected role.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "if (existing) ctx.db.staffRole.accountId.update(row);\n    else ctx.db.staffRole.insert(row);",
+          "replace": "void existing;\n    void row; // mutant: the assigned role is discarded"
+        }
+      ]
+    },
+    {
+      "id": "staff-can-assign-roles",
+      "scenario": "tracks/ecommerce/scenarios/progression-staff-roles-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.staff-roles.staff-roles.621b"
+      ],
+      "desc": "Role assignment accepts staff callers instead of requiring an administrator.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "const actor = requireAdmin(ctx);\n    const target = ctx.db.account.id.find(accountId);",
+          "replace": "const actor = requireStaffOrAdmin(ctx);\n    const target = ctx.db.account.id.find(accountId);"
+        }
+      ]
+    },
+    {
+      "id": "stock-alert-is-sent-after-every-restock",
+      "scenario": "tracks/ecommerce/scenarios/progression-stock-alerts-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.stock-alerts.stock-alert-delivery.631a"
+      ],
+      "desc": "A fulfilled stock alert remains active and is sent again after another restock.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.stockAlert.id.update({ ...alert, fulfilled: true });\n    }\n  }\n);\n\nexport const adminChangePrice",
+          "replace": "ctx.db.stockAlert.id.update({ ...alert, fulfilled: false });\n    }\n  }\n);\n\nexport const adminChangePrice"
+        }
+      ]
+    },
+    {
+      "id": "stock-alerts-are-visible-to-other-customers",
+      "scenario": "tracks/ecommerce/scenarios/progression-stock-alerts-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.stock-alerts.stock-alert-privacy.631b"
+      ],
+      "desc": "The notifications view returns alerts for every account.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "return [...ctx.db.notification.accountId.filter(accountId)].map(row => ({",
+          "replace": "return [...ctx.db.notification.iter()].map(row => ({"
+        }
+      ]
+    },
+    {
+      "id": "support-history-disappears-after-reload",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-history-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-history.support-history-persistence.612a"
+      ],
+      "desc": "The customer support view hides every saved ticket.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "return [...ctx.db.supportTicket.iter()]\n      .filter(row => isTicketCreator(sender, row.creatorIdentity.toHexString()) ||",
+          "replace": "return [...ctx.db.supportTicket.iter()]\n      .filter(() => false)\n      .filter(row => isTicketCreator(sender, row.creatorIdentity.toHexString()) ||"
+        }
+      ]
+    },
+    {
+      "id": "support-history-leaks-across-customers",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-history-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-history.support-history-privacy.612b"
+      ],
+      "desc": "The support history view returns tickets owned by other customers.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": ".filter(row => isTicketCreator(sender, row.creatorIdentity.toHexString()) ||\n        !!actor && (actor.isAdmin || actor.isStaff || row.accountId === accountId))",
+          "replace": ".filter(() => true)"
+        }
+      ]
+    },
+    {
+      "id": "visitor-support-reference-is-hidden",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-intake-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-intake.support-intake.610a"
+      ],
+      "desc": "A visitor can create a support ticket but the returned reference is not rendered.",
+      "file": "client/src/components/ProgressionWorkbench.tsx",
+      "edits": [
+        {
+          "find": "<div data-role=\"support-reference\">{supportReference}</div>",
+          "replace": "<div data-role=\"support-reference\"></div>"
+        }
+      ]
+    },
+    {
+      "id": "support-assignment-is-discarded",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-triage-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-triage.support-assignment.611a"
+      ],
+      "desc": "Support triage saves status and priority but discards the assignee.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.supportTicket.id.update({ ...ticket, assigneeId: nextAssigneeId, priority, status });",
+          "replace": "ctx.db.supportTicket.id.update({ ...ticket, assigneeId: undefined, priority, status });"
+        }
+      ]
+    },
+    {
+      "id": "support-priority-is-discarded",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-triage-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-triage.support-priority.611b"
+      ],
+      "desc": "Support triage always saves normal priority instead of the submitted value.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.supportTicket.id.update({ ...ticket, assigneeId: nextAssigneeId, priority, status });",
+          "replace": "ctx.db.supportTicket.id.update({ ...ticket, assigneeId: nextAssigneeId, priority: 'normal', status });"
+        }
+      ]
+    },
+    {
+      "id": "support-status-is-discarded",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-triage-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-triage.support-status.611c"
+      ],
+      "desc": "Support triage preserves the old status instead of the submitted value.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "ctx.db.supportTicket.id.update({ ...ticket, assigneeId: nextAssigneeId, priority, status });",
+          "replace": "ctx.db.supportTicket.id.update({ ...ticket, assigneeId: nextAssigneeId, priority, status: ticket.status });"
+        }
+      ]
+    },
+    {
+      "id": "nonpositive-cart-quantity-is-treated-as-removal",
+      "scenario": "tracks/ecommerce/scenarios/01-cart-boundary-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.cart-boundary.109b"
+      ],
+      "desc": "Accept a negative quantity and remove the cart line instead of refusing the request.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    if (quantity < 1) throw new SenderError('Quantity must be at least 1.');\n    const existing = findCartLine(ctx, acc.id, itemId);\n    if (!existing) throw new SenderError('That item is not in your cart.');\n    replaceReservation(ctx, acc.id, itemId, quantity);\n    ctx.db.cartItem.id.update({ ...existing, quantity });",
+          "replace": "    const existing = findCartLine(ctx, acc.id, itemId);\n    if (!existing) throw new SenderError('That item is not in your cart.');\n    if (quantity < 1) {\n      ctx.db.cartItem.id.delete(existing.id);\n      return;\n    }\n    replaceReservation(ctx, acc.id, itemId, quantity);\n    ctx.db.cartItem.id.update({ ...existing, quantity });"
+        }
+      ]
+    },
+    {
+      "id": "catalog-core-seeds-wrong-air-purifier-price",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog.2a"
+      ],
+      "desc": "Seed Air Purifier with an incorrect stored price while leaving the rest of the catalog intact.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  ['Air Purifier', 189.0, 60, 40, 'Home'],",
+          "replace": "  ['Air Purifier', 999.0, 60, 40, 'Home'],"
+        }
+      ]
+    },
+    {
+      "id": "catalog-tie-breaks-in-reverse-alphabetical-order",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog.2b"
+      ],
+      "desc": "Reverse the specified alphabetical tie-breaker. This necessarily breaks both the initial sequence and the post-purchase sequence in the same scenario.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "      return a.name.localeCompare(b.name);",
+          "replace": "      return b.name.localeCompare(a.name);"
+        }
+      ]
+    },
+    {
+      "id": "search-only-examines-the-visible-top-ten",
+      "scenario": "tracks/ecommerce/scenarios/01-core-2.4.0.json",
+      "targets": [
+        "ecommerce.feature.catalog.catalog.2d"
+      ],
+      "desc": "Search the storefront slice instead of the full catalog, hiding items outside the current top ten.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "    return [...items]\n      .filter(item => !q || item.name.toLowerCase().includes(q))",
+          "replace": "    return rankedItems.slice(0, CATALOG_PAGE_SIZE)\n      .filter(item => !q || item.name.toLowerCase().includes(q))"
+        }
+      ]
+    },
+    {
+      "id": "admin-ui-allows-any-signed-in-account",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-admin-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.admin-ui.7a"
+      ],
+      "desc": "Use account presence instead of the server-provided administrator flag to expose the admin area.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "  const isAdmin = currentUser?.isAdmin ?? false;",
+          "replace": "  const isAdmin = isSignedIn;"
+        }
+      ]
+    },
+    {
+      "id": "admin-restock-preserves-existing-stock",
+      "scenario": "tracks/ecommerce/scenarios/01-warehouse-stock-live-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.live-state.warehouse-stock.7c"
+      ],
+      "desc": "Accept an administrator restock but write the existing quantity back unchanged.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "      ctx.db.stock.insert({ ...existing, quantity: existing.quantity + quantity });",
+          "replace": "      ctx.db.stock.insert({ ...existing, quantity: existing.quantity });"
+        }
+      ]
+    },
+    {
+      "id": "admin-write-allows-customer-restock",
+      "scenario": "tracks/ecommerce/scenarios/01-admin-write-2.4.0.json",
+      "targets": [
+        "ecommerce.spec.access-control.admin-write.103a"
+      ],
+      "desc": "Remove the server-side administrator check from the restock reducer.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "export const adminRestock = spacetimedb.reducer(\n  { itemId: t.u64(), warehouseId: t.u64(), quantity: t.u32() },\n  (ctx, { itemId, warehouseId, quantity }) => {\n    requireAdmin(ctx);",
+          "replace": "export const adminRestock = spacetimedb.reducer(\n  { itemId: t.u64(), warehouseId: t.u64(), quantity: t.u32() },\n  (ctx, { itemId, warehouseId, quantity }) => {\n    // mutant: no administrator check"
+        }
+      ]
+    },
+    {
+      "id": "operator-authorization-allows-customer-price-change",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.operations-access.operator-authorization.201b"
+      ],
+      "desc": "The price reducer drops its administrator role gate.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "  (ctx, { itemId, price }) => {\n    requireAdmin(ctx);",
+          "replace": "  (ctx, { itemId, price }) => {\n    // mutant: no administrator role check"
+        }
+      ]
+    },
+    {
+      "id": "fulfilment-queue-allows-customer-shipping",
+      "scenario": "tracks/ecommerce/scenarios/02-self-contained-1.4.0.json",
+      "targets": [
+        "ecommerce.operations-access.fulfilment-queue.1e"
+      ],
+      "desc": "The shipping reducer drops the staff role check while retaining the pending-order guard.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "export const shipOrder = spacetimedb.reducer({ orderId: t.u64() }, (ctx, { orderId }) => {\n  requireStaffOrAdmin(ctx);",
+          "replace": "export const shipOrder = spacetimedb.reducer({ orderId: t.u64() }, (ctx, { orderId }) => {\n  // mutant: no staff role check"
+        }
+      ]
+    },
+    {
+      "id": "catalog-search-keeps-pre-change-price",
+      "scenario": "tracks/ecommerce/scenarios/02-live-price-1.4.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.price-history.4b"
+      ],
+      "desc": "The search result renderer caches each item's first visible price and ignores later live price updates.",
+      "file": "client/src/components/ItemCard.tsx",
+      "edits": [
+        {
+          "find": "import { ItemRow } from '../types';",
+          "replace": "import { useRef } from 'react';\nimport { ItemRow } from '../types';"
+        },
+        {
+          "find": "  const outOfStock = stock <= 0;\n  const lowStock = !outOfStock && stock <= 5;",
+          "replace": "  const outOfStock = stock <= 0;\n  const lowStock = !outOfStock && stock <= 5;\n  // mutant: the card retains the first price it renders\n  const firstPrice = useRef(item.price);"
+        },
+        {
+          "find": "          {formatMoney(item.price)}",
+          "replace": "          {formatMoney(firstPrice.current)}"
+        }
+      ]
+    },
+    {
+      "id": "open-cart-keeps-pre-change-price",
+      "scenario": "tracks/ecommerce/scenarios/02-features.json",
+      "targets": [
+        "ecommerce.returns-pricing.price-history.4c"
+      ],
+      "desc": "The open-cart memo ignores reactive item-table price updates while checkout still reads the current server price.",
+      "file": "client/src/App.tsx",
+      "edits": [
+        {
+          "find": "    [cartRows, items, stockByItem]",
+          "replace": "    [cartRows, stockByItem]"
+        }
+      ]
+    },
+    {
+      "id": "catalog-price-rewrites-receipts",
+      "scenario": "tracks/ecommerce/scenarios/02-paid-price-history-1.4.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.price-history.4a"
+      ],
+      "desc": "Changing a catalog price cascades into saved order lines and recomputes historical order totals inside the reducer transaction.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    ctx.db.item.id.update({ ...it, price });",
+          "replace": "    ctx.db.item.id.update({ ...it, price });\n    const repricedOrderIds = new Set<bigint>();\n    for (const line of ctx.db.orderItem.iter()) {\n      if (line.itemId !== itemId) continue;\n      ctx.db.orderItem.id.update({ ...line, unitPrice: price });\n      repricedOrderIds.add(line.orderId);\n    }\n    for (const orderId of repricedOrderIds) {\n      const historical = ctx.db.customerOrder.id.find(orderId);\n      if (!historical) continue;\n      let total = 0;\n      for (const line of ctx.db.orderItem.orderId.filter(orderId)) total += line.unitPrice * line.quantity;\n      ctx.db.customerOrder.id.update({ ...historical, total });\n    }"
+        }
+      ]
+    },
+    {
+      "id": "catalog-price-rewrites-earned-revenue",
+      "scenario": "tracks/ecommerce/scenarios/02-invariants.json",
+      "targets": [
+        "ecommerce.returns-pricing.refund-accounting.203b"
+      ],
+      "desc": "Changing a catalog price cascades into saved order lines and recomputes historical order totals and revenue inside the reducer transaction.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    ctx.db.item.id.update({ ...it, price });",
+          "replace": "    ctx.db.item.id.update({ ...it, price });\n    const repricedOrderIds = new Set<bigint>();\n    for (const line of ctx.db.orderItem.iter()) {\n      if (line.itemId !== itemId) continue;\n      ctx.db.orderItem.id.update({ ...line, unitPrice: price });\n      repricedOrderIds.add(line.orderId);\n    }\n    for (const orderId of repricedOrderIds) {\n      const historical = ctx.db.customerOrder.id.find(orderId);\n      if (!historical) continue;\n      let total = 0;\n      for (const line of ctx.db.orderItem.orderId.filter(orderId)) total += line.unitPrice * line.quantity;\n      ctx.db.customerOrder.id.update({ ...historical, total });\n    }"
+        }
+      ]
+    },
+    {
+      "id": "returned-line-marker-omitted",
+      "scenario": "tracks/ecommerce/scenarios/02-strengthened-1.4.0.json",
+      "targets": [
+        "ecommerce.returns-pricing.cancellation-and-return.3c"
+      ],
+      "desc": "A returned order line keeps its persisted returned state, restored stock, and adjusted revenue but omits the visible returned marker.",
+      "file": "client/src/components/OrdersPanel.tsx",
+      "edits": [
+        {
+          "find": "{item.returned && <span className=\"badge badge-muted\" style={{ marginLeft: 6 }}>Returned</span>}",
+          "replace": "{false && <span className=\"badge badge-muted\" style={{ marginLeft: 6 }}>Returned</span>}"
+        }
+      ]
+    },
+    {
+      "id": "direct-review-access-is-not-checked",
+      "scenario": "tracks/ecommerce/scenarios/progression-review-access-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.review-access-specifications.review-eligibility-direct.618a"
+      ],
+      "desc": "The direct review action accepts a review from a customer who did not buy the item.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": "    if (!bought) throw new SenderError('You can only review items you have purchased.');",
+          "replace": "    // mutant: purchase eligibility is not checked"
+        }
+      ]
+    },
+    {
+      "id": "support-messages-are-sent-to-other-customers",
+      "scenario": "tracks/ecommerce/scenarios/progression-support-read-privacy-1.0.0.json",
+      "targets": [
+        "ecommerce.progression.support-privacy-specifications.private-message-delivery.619a"
+      ],
+      "desc": "A customer receives another customer's support message.",
+      "file": "backend/spacetimedb/src/index.ts",
+      "edits": [
+        {
+          "find": ".filter(row => isTicketCreator(sender, row.creatorIdentity.toHexString()) ||\n        !!actor && (actor.isAdmin || actor.isStaff || row.accountId === accountId))",
+          "replace": ".filter(() => true)"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/grader/transport-frames.ts b/tools/stack-bench/grader/transport-frames.ts
new file mode 100644
index 00000000000..0a3a6f596cd
--- /dev/null
+++ b/tools/stack-bench/grader/transport-frames.ts
@@ -0,0 +1,18 @@
+import { brotliDecompressSync, gunzipSync } from 'node:zlib';
+
+// A SpacetimeDB server frame carries a one-byte compression tag ahead of the
+// message: 0 none, 1 brotli, 2 gzip, and the SDK compresses by default. The
+// message text is inline UTF-8 once decoded, so a substring search finds it
+// without the harness knowing the wire format. Any other frame is kept as it
+// arrived.
+export function transportFrameText(payload: string | Buffer): string {
+  if (typeof payload === 'string') return payload;
+  const bytes = Buffer.from(payload);
+  if (bytes.length > 1) {
+    try {
+      if (bytes[0] === 1) return brotliDecompressSync(bytes.subarray(1)).toString('utf8');
+      if (bytes[0] === 2) return gunzipSync(bytes.subarray(1)).toString('utf8');
+    } catch { /* not a compressed SpacetimeDB frame */ }
+  }
+  return bytes.toString('utf8');
+}
diff --git a/tools/stack-bench/linter/fixtures/agreed.html b/tools/stack-bench/linter/fixtures/agreed.html
new file mode 100644
index 00000000000..c462174caf2
--- /dev/null
+++ b/tools/stack-bench/linter/fixtures/agreed.html
@@ -0,0 +1,4 @@
+<!DOCTYPE html><html><head><title>agreement fixture</title></head><body>
+<!-- Both contexts render the same value, as a server-derived count would. -->
+<span data-role="reaction-count">4</span>
+</body></html>
diff --git a/tools/stack-bench/linter/fixtures/divergent.html b/tools/stack-bench/linter/fixtures/divergent.html
new file mode 100644
index 00000000000..5d95d68cd79
--- /dev/null
+++ b/tools/stack-bench/linter/fixtures/divergent.html
@@ -0,0 +1,12 @@
+<!DOCTYPE html><html><head><title>divergence fixture</title></head><body>
+<!-- Two browser contexts render DIFFERENT counts from their own storage, which is
+     exactly what a client-local optimistic counter looks like. expectAgreement
+     must catch it; a single-actor assertion cannot. -->
+<div data-role="signup-username-x"></div>
+<span data-role="reaction-count"></span>
+<script>
+  const k = 'n';
+  if (!localStorage.getItem(k)) localStorage.setItem(k, String(1 + Math.floor(Math.random() * 1000)));
+  document.querySelector('[data-role="reaction-count"]').textContent = localStorage.getItem(k);
+</script>
+</body></html>
diff --git a/tools/stack-bench/linter/fixtures/mock-chat.html b/tools/stack-bench/linter/fixtures/mock-chat.html
new file mode 100644
index 00000000000..2677b6feb48
--- /dev/null
+++ b/tools/stack-bench/linter/fixtures/mock-chat.html
@@ -0,0 +1,71 @@
+<!DOCTYPE html>
+<html>
+<head><title>Linter fixture — mock chat</title></head>
+<body>
+<!-- Minimal mock implementing the L1-L3 contract core flow.
+     ?omit=<testid> renders that hook without its data-role, to test FAIL paths. -->
+<div id="landing">
+  <input data-role="name-input" placeholder="Your name">
+  <button data-role="name-submit">Join</button>
+</div>
+
+<div id="main" hidden>
+  <aside>
+    <button data-role="room-create">+ New room</button>
+    <div id="room-form" hidden>
+      <input data-role="room-name-input" placeholder="Room name">
+      <button data-role="room-name-submit">Create</button>
+    </div>
+    <ul data-role="room-list" id="rooms"></ul>
+    <ul data-role="online-users"><li>mock-user</li></ul>
+  </aside>
+  <main id="room" hidden>
+    <ul data-role="message-list" id="messages"></ul>
+    <input data-role="message-input" placeholder="Message...">
+    <button data-role="leave-room" hidden>Leave</button>
+    <button data-role="schedule-toggle">Schedule</button>
+    <div id="schedule-ui" hidden>
+      <input data-role="schedule-time" type="datetime-local">
+    </div>
+    <button data-role="ephemeral-toggle">Ephemeral</button>
+    <div id="ephemeral-ui" hidden>
+      <select data-role="ephemeral-duration">
+        <option>10s</option><option>30s</option><option>1m</option>
+      </select>
+    </div>
+  </main>
+</div>
+
+<script>
+  const omit = new URLSearchParams(location.search).getAll('omit');
+  for (const id of omit) {
+    document.querySelector(`[data-role="${id}"]`)?.removeAttribute('data-role');
+  }
+  const $ = t => document.querySelector(`[data-role="${t}"], #${t}`);
+  $('name-submit')?.addEventListener('click', () => {
+    document.getElementById('landing').hidden = true;
+    document.getElementById('main').hidden = false;
+  });
+  $('room-create')?.addEventListener('click', () => {
+    document.getElementById('room-form').hidden = false;
+  });
+  function createRoom() {
+    const name = $('room-name-input')?.value || 'unnamed';
+    const li = document.createElement('li');
+    li.setAttribute('data-role', 'room-item');
+    li.textContent = name;
+    li.addEventListener('click', () => { document.getElementById('room').hidden = false; });
+    document.getElementById('rooms').appendChild(li);
+  }
+  $('room-name-submit')?.addEventListener('click', createRoom);
+  $('message-input')?.addEventListener('keydown', e => {
+    if (e.key !== 'Enter') return;
+    const li = document.createElement('li');
+    li.setAttribute('data-role', 'message-item');
+    li.textContent = e.target.value;
+    document.getElementById('messages').appendChild(li);
+    e.target.value = '';
+  });
+</script>
+</body>
+</html>
diff --git a/tools/stack-bench/linter/fixtures/mock-shop.html b/tools/stack-bench/linter/fixtures/mock-shop.html
new file mode 100644
index 00000000000..5034271fdc9
--- /dev/null
+++ b/tools/stack-bench/linter/fixtures/mock-shop.html
@@ -0,0 +1,297 @@
+<!-- A hand-written store that satisfies the ecommerce contract, so the linter's
+     core flow can be validated without paying for a generated app. It fakes
+     nothing the walk inspects: signing up really reveals the buying controls,
+     search really covers the whole catalogue, checkout really produces an order.
+     Not a reference implementation — no server, no concurrency, no auth. -->
+<h1 data-role="app-title">Mock Shop</h1>
+
+<div id="auth">
+  <input data-role="signup-username" placeholder="username">
+  <input data-role="signup-password" type="password" placeholder="password">
+  <button data-role="signup-submit">Sign up</button>
+  <button data-role="signin-toggle">Have an account?</button>
+  <span id="signin-form" hidden>
+    <input data-role="signin-username" placeholder="username">
+    <input data-role="signin-password" type="password" placeholder="password">
+    <button data-role="signin-submit">Sign in</button>
+  </span>
+</div>
+
+<div id="account" hidden>
+  <span data-role="current-user"></span>
+  <button data-role="cart-toggle">Cart</button>
+  <span data-role="cart-count">0</span>
+  <button data-role="orders-toggle">Orders</button>
+  <button data-role="admin-link" hidden>Admin</button>
+  <button data-role="signout">Sign out</button>
+</div>
+
+<input data-role="search-input" placeholder="search">
+<div data-role="search-results" hidden></div>
+<div data-role="item-list"></div>
+
+<div data-role="item-detail" hidden>
+  <h2 id="detail-name"></h2>
+  <span>Average rating: <span data-role="review-average">0</span></span>
+  <select data-role="review-rating">
+    <option value="1">1</option><option value="2">2</option><option value="3">3</option>
+    <option value="4">4</option><option value="5">5</option>
+  </select>
+  <input data-role="review-input" placeholder="your review">
+  <button data-role="review-submit">Submit review</button>
+  <div id="reviews"></div>
+</div>
+
+<div data-role="cart-panel" hidden>
+  <div id="cart-lines"></div>
+  <div data-role="empty-cart" hidden>Your cart is empty</div>
+  <span>Total: <span data-role="cart-total">0.00</span></span>
+  <button data-role="checkout-submit">Check out</button>
+</div>
+
+<div data-role="order-list" hidden></div>
+
+<div data-role="admin-panel" hidden>
+  <div id="admin-items"></div>
+  <div id="admin-warehouses"></div>
+  <div id="admin-locations"></div>
+  <span>Revenue: <span data-role="admin-revenue">0.00</span></span>
+</div>
+
+<div data-role="buy-error" hidden></div>
+<div data-role="auth-error" hidden></div>
+<div data-role="review-error" hidden></div>
+
+<script>
+// Must match the seed table in tracks/ecommerce/prompts/01-storefront.md.
+const CATALOGUE = [
+  ['Air Purifier', 189.00, 60, 40], ['Bluetooth Speaker', 79.50, 50, 50], ['Coffee Grinder', 64.00, 70, 30],
+  ['Desk Lamp', 42.00, 55, 45], ['Espresso Machine', 449.00, 80, 20], ['Gaming Mouse', 59.00, 50, 50],
+  ['Headphones', 199.00, 60, 40], ['Induction Cooktop', 329.00, 50, 50], ['Keyboard', 89.00, 70, 30],
+  ['Laptop Stand', 29.00, 90, 10], ['Mirrorless Camera', 1299.00, 2, 1], ['Webcam', 69.00, 60, 40],
+];
+const WAREHOUSES = ['East', 'West'];
+const items = CATALOGUE.map(([name, price, east, west], id) =>
+  ({ id, name, price, stock: { East: east, West: west }, purchases: 0, reviews: [] }));
+const total = i => i.stock.East + i.stock.West;
+const $ = s => document.querySelector(s);
+const el = (tag, testid, text) => {
+  const n = document.createElement(tag);
+  if (testid) n.dataset.testid = testid;
+  if (text !== undefined) n.textContent = text;
+  return n;
+};
+
+let user = null, cart = [], orders = [], revenue = 0;
+const purchased = new Set();   // "user:itemId" — reviews are gated on this
+
+// Ranked by purchases, ties alphabetical — the ordering the contract requires.
+const ranked = () => [...items].sort((a, b) => b.purchases - a.purchases || a.name.localeCompare(b.name));
+
+function card(item) {
+  const c = el('div', 'item-card');
+  c.append(el('span', 'item-name', item.name));
+  c.append(el('span', 'item-price', '$' + item.price.toFixed(2)));
+  c.append(el('span', 'item-stock', 'Stock: ' + total(item)));
+  if (total(item) === 0) c.append(el('span', 'out-of-stock', 'Out of stock'));
+  if (user) {
+    const buy = el('button', 'buy-now', 'Buy');
+    buy.onclick = e => { e.stopPropagation(); buyOne(item); };
+    const add = el('button', 'add-to-cart', 'Add to cart');
+    add.onclick = e => { e.stopPropagation(); addToCart(item); };
+    c.append(buy, add);
+  }
+  c.querySelector('[data-role="item-name"]').onclick = () => openItem(item);
+  return c;
+}
+
+function renderStorefront() {
+  const list = $('[data-role="item-list"]');
+  list.textContent = '';
+  for (const item of ranked().slice(0, 10)) list.append(card(item));
+}
+
+function renderSearch(q) {
+  const box = $('[data-role="search-results"]');
+  box.textContent = '';
+  if (!q) { box.hidden = true; return; }
+  box.hidden = false;
+  for (const item of items.filter(i => i.name.toLowerCase().includes(q.toLowerCase()))) box.append(card(item));
+}
+
+function buyOne(item) {
+  if (total(item) === 0) { flash('buy-error', 'Out of stock'); return; }
+  item.stock.East > 0 ? item.stock.East-- : item.stock.West--;
+  item.purchases++;
+  revenue += item.price;
+  purchased.add(user + ':' + item.id);
+  orders.push({ lines: [{ name: item.name, qty: 1, price: item.price }], total: item.price });
+  renderAll();
+}
+
+function addToCart(item) {
+  const line = cart.find(l => l.id === item.id);
+  line ? line.qty++ : cart.push({ id: item.id, name: item.name, price: item.price, qty: 1 });
+  renderAll();
+}
+
+function checkout() {
+  if (!cart.length) return;
+  for (const line of cart) {
+    const item = items[line.id];
+    for (let n = 0; n < line.qty; n++) { item.stock.East > 0 ? item.stock.East-- : item.stock.West--; item.purchases++; }
+    revenue += line.price * line.qty;
+    purchased.add(user + ':' + line.id);
+  }
+  orders.push({ lines: cart.map(l => ({ ...l })), total: cart.reduce((s, l) => s + l.price * l.qty, 0) });
+  cart = [];
+  renderAll();
+}
+
+function openItem(item) {
+  $('[data-role="item-detail"]').hidden = false;
+  $('#detail-name').textContent = item.name;
+  $('[data-role="review-submit"]').onclick = () => {
+    const text = $('[data-role="review-input"]').value;
+    const rating = Number($('[data-role="review-rating"]').value);
+    if (!text) return;
+    if (!purchased.has(user + ':' + item.id)) {
+      flash('review-error', 'You can only review items you have bought'); return;
+    }
+    const mine = item.reviews.find(r => r.by === user);
+    mine ? Object.assign(mine, { text, rating }) : item.reviews.push({ by: user, text, rating });
+    renderReviews(item);
+  };
+  renderReviews(item);
+}
+
+function renderReviews(item) {
+  const box = $('#reviews');
+  box.textContent = '';
+  for (const r of item.reviews) box.append(el('div', 'review-item', r.text));
+  const avg = item.reviews.length
+    ? item.reviews.reduce((s, r) => s + r.rating, 0) / item.reviews.length : 0;
+  $('[data-role="review-average"]').textContent = String(avg);
+}
+
+function renderCart() {
+  const box = $('#cart-lines');
+  box.textContent = '';
+  for (const line of cart) {
+    const row = el('div', 'cart-item');
+    row.append(el('span', null, line.name));
+    row.append(el('span', 'cart-quantity', String(line.qty)));
+    const rm = el('button', 'cart-remove', 'Remove');
+    rm.onclick = () => { cart = cart.filter(l => l.id !== line.id); renderAll(); };
+    row.append(rm);
+    box.append(row);
+  }
+  $('[data-role="empty-cart"]').hidden = cart.length > 0;
+  $('[data-role="cart-total"]').textContent =
+    cart.reduce((s, l) => s + l.price * l.qty, 0).toFixed(2);
+  $('[data-role="cart-count"]').textContent = String(cart.reduce((s, l) => s + l.qty, 0));
+}
+
+function renderOrders() {
+  const box = $('[data-role="order-list"]');
+  box.textContent = '';
+  for (const o of orders) {
+    const row = el('div', 'order-item');
+    row.append(el('span', null, o.lines.map(l => l.name).join(', ')));
+    row.append(el('span', 'order-total', o.total.toFixed(2)));
+    box.append(row);
+  }
+}
+
+function renderAdmin() {
+  const itemBox = $('#admin-items'); itemBox.textContent = '';
+  for (const item of items) {
+    const row = el('div', 'admin-item-row');
+    row.append(el('span', null, item.name));
+    row.append(el('span', 'admin-stock', String(total(item))));
+    itemBox.append(row);
+  }
+  const whBox = $('#admin-warehouses'); whBox.textContent = '';
+  for (const w of WAREHOUSES) whBox.append(el('div', 'admin-warehouse-item', w));
+  // Restocking lives on the row, so choosing the row chooses both the item and
+  // the warehouse — there is nothing ambiguous left to select.
+  const locBox = $('#admin-locations'); locBox.textContent = '';
+  for (const item of items) {
+    for (const w of WAREHOUSES) {
+      const row = el('div', 'admin-location-row');
+      row.append(el('span', null, item.name + ' @ ' + w));
+      row.append(el('span', 'admin-location-qty', String(item.stock[w])));
+      const input = el('input', 'restock-input');
+      input.placeholder = 'units';
+      const btn = el('button', 'restock-submit', 'Restock');
+      btn.onclick = () => {
+        const n = Number(input.value);
+        if (n > 0) { item.stock[w] += n; renderAll(); }
+      };
+      row.append(input, btn);
+      locBox.append(row);
+    }
+  }
+  $('[data-role="admin-revenue"]').textContent = revenue.toFixed(2);
+}
+
+function renderAll() {
+  renderStorefront();
+  renderCart();
+  renderOrders();
+  if (user === 'admin') renderAdmin();
+  const q = $('[data-role="search-input"]').value;
+  if (q) renderSearch(q);
+}
+
+function flash(testid, msg) {
+  const n = $('[data-role="' + testid + '"]');
+  n.textContent = msg; n.hidden = false;
+}
+
+function signedIn(name) {
+  user = name;
+  $('#auth').hidden = true;
+  $('#account').hidden = false;
+  $('[data-role="current-user"]').textContent = name;
+  $('[data-role="admin-link"]').hidden = name !== 'admin';
+  renderAll();
+}
+
+$('[data-role="signup-submit"]').onclick = () => {
+  const name = $('[data-role="signup-username"]').value;
+  if (name) signedIn(name);
+};
+$('[data-role="signin-toggle"]').onclick = () => { $('#signin-form').hidden = false; };
+$('[data-role="signin-submit"]').onclick = () => {
+  const name = $('[data-role="signin-username"]').value;
+  if (name) signedIn(name);
+};
+$('[data-role="signout"]').onclick = () => {
+  user = null; cart = [];
+  $('#auth').hidden = false; $('#account').hidden = true;
+  $('[data-role="admin-panel"]').hidden = true;
+  $('[data-role="item-detail"]').hidden = true;
+  renderAll();
+};
+$('[data-role="cart-toggle"]').onclick = () => {
+  const p = $('[data-role="cart-panel"]'); p.hidden = !p.hidden;
+};
+$('[data-role="orders-toggle"]').onclick = () => {
+  const p = $('[data-role="order-list"]'); p.hidden = !p.hidden;
+};
+$('[data-role="admin-link"]').onclick = () => {
+  $('[data-role="admin-panel"]').hidden = false; renderAdmin();
+};
+$('[data-role="checkout-submit"]').onclick = checkout;
+$('[data-role="search-input"]').addEventListener('input', e => renderSearch(e.target.value));
+
+document.addEventListener('keydown', e => {
+  if (e.key !== 'Escape') return;
+  for (const id of ['cart-panel','order-list','admin-panel','item-detail']) {
+    const n = $('[data-role="' + id + '"]'); if (n) n.hidden = true;
+  }
+});
+
+renderAll();
+</script>
diff --git a/tools/stack-bench/linter/fixtures/spec-accounts.html b/tools/stack-bench/linter/fixtures/spec-accounts.html
new file mode 100644
index 00000000000..ddbb1ad5630
--- /dev/null
+++ b/tools/stack-bench/linter/fixtures/spec-accounts.html
@@ -0,0 +1,29 @@
+<!DOCTYPE html><html><body>
+<div id="landing">
+  <input data-role="signup-username" placeholder="username">
+  <input data-role="signup-password" type="password">
+  <button data-role="signup-submit">Create account</button>
+  <button data-role="signin-toggle">Sign in instead</button>
+  <div id="signin" hidden>
+    <input data-role="signin-username"><input data-role="signin-password" type="password">
+    <button data-role="signin-submit">Sign in</button>
+  </div>
+</div>
+<div id="main" hidden>
+  <span data-role="current-user">u</span><button data-role="signout">Sign out</button>
+  <button data-role="room-create">+</button>
+  <div id="rf" hidden><input data-role="room-name-input"><button data-role="room-name-submit">Create</button></div>
+  <ul data-role="room-list" id="rooms"></ul><ul data-role="online-users"></ul>
+  <main id="room" hidden>
+    <ul data-role="message-list" id="msgs"></ul>
+    <input data-role="message-input"><button data-role="leave-room" hidden>Leave</button>
+  </main>
+</div>
+<script>
+const $=t=>document.querySelector(`[data-role="${t}"]`);
+$('signup-submit').onclick=()=>{landing.hidden=true;main.hidden=false};
+$('signin-toggle').onclick=()=>{signin.hidden=false};
+$('room-create').onclick=()=>{rf.hidden=false};
+$('room-name-submit').onclick=()=>{const li=document.createElement('li');li.setAttribute('data-role','room-item');li.textContent=$('room-name-input').value;li.onclick=()=>room.hidden=false;rooms.appendChild(li)};
+$('message-input').onkeydown=e=>{if(e.key!=='Enter')return;const li=document.createElement('li');li.setAttribute('data-role','message-item');li.textContent=e.target.value;msgs.appendChild(li);e.target.value=''};
+</script></body></html>
diff --git a/tools/stack-bench/linter/lint.ts b/tools/stack-bench/linter/lint.ts
new file mode 100644
index 00000000000..1137466279b
--- /dev/null
+++ b/tools/stack-bench/linter/lint.ts
@@ -0,0 +1,237 @@
+#!/usr/bin/env node
+// Scenario-stage hooks require scenario setup and are not linted here.
+
+import { chromium } from 'playwright';
+import type { Page } from 'playwright';
+import { readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { parseArgs as parseNodeArgs } from 'node:util';
+import { loadTrack, DEFAULT_TRACK } from '../src/composition/tracks.js';
+import { emptyArtifactIdentities, writeArtifact } from '../src/evidence/artifacts.js';
+import { stableElementSelector } from '../src/actions/element-selector.js';
+
+const CHECK_TIMEOUT = 5000;
+
+export interface LintHook {
+  id: string;
+  element: string;
+  stage: string;
+  check: 'visible' | 'attached';
+  note: string;
+  revealedBy?: string;
+}
+
+export interface LintResult {
+  id: string;
+  status: 'PASS' | 'FAIL' | 'BLOCKED' | 'SCENARIO';
+  detail?: string;
+}
+
+export interface LintArgs {
+  url?: string;
+  track: string;
+  level: number;
+  json: boolean;
+  headed: boolean;
+  out?: string;
+  label?: string;
+  parentAttemptId?: string;
+  credentialAliases?: unknown;
+  hooks: string[];
+}
+
+export interface LintWalkContext {
+  page: Page;
+  args: LintArgs;
+  hooks: LintHook[];
+  byStage(stage: string): LintHook[];
+  blocked(stage: string): void;
+  checkHook(page: Page, hook: LintHook, results: LintResult[]): Promise<boolean>;
+  results: LintResult[];
+  uniq: string;
+  tid(id: string): string;
+  CHECK_TIMEOUT: number;
+}
+
+function parseArgs(argv: string[]): LintArgs {
+  const { values } = parseNodeArgs({ args: argv.slice(2), options: {
+    url: { type: 'string' }, track: { type: 'string' }, level: { type: 'string' },
+    json: { type: 'boolean' }, out: { type: 'string' }, label: { type: 'string' },
+    'parent-attempt-id': { type: 'string' }, 'credential-aliases-json': { type: 'string' },
+    hook: { type: 'string', multiple: true }, headed: { type: 'boolean' },
+  } });
+  const args: LintArgs = { url: values.url, track: values.track ?? DEFAULT_TRACK,
+    level: values.level === undefined ? 1 : Number(values.level), json: values.json ?? false,
+    headed: values.headed ?? false, out: values.out, label: values.label,
+    parentAttemptId: values['parent-attempt-id'],
+    credentialAliases: values['credential-aliases-json'] === undefined
+      ? undefined : JSON.parse(values['credential-aliases-json']),
+    hooks: values.hook ?? [] };
+  if (!args.url || !Number.isInteger(args.level) || args.level < 1) {
+    console.error('Usage: node dist/linter/lint.js --url <app-url> --level <N> [--json] [--headed]');
+    process.exit(2);
+  }
+  return args;
+}
+
+export function selectHooks(hooks: LintHook[], selectedIds: string[] = []): LintHook[] {
+  if (!selectedIds.length) return hooks;
+  const remaining = new Set(selectedIds);
+  const selected = hooks.filter(hook => remaining.delete(hook.id));
+  const unknown: LintHook[] = [...remaining].sort().map(id => ({
+    id,
+    element: `the selected application control ${id}`,
+    stage: 'scenario',
+    check: 'visible',
+    note: 'checked by the selected feature suite',
+  }));
+  return [...selected, ...unknown];
+}
+
+export function loadHooks(level: number, track: { contracts: string }, selectedIds: string[] = []): LintHook[] {
+  const CONTRACTS_DIR = track.contracts;
+  const files = readdirSync(CONTRACTS_DIR).filter(f => /^\d+-[a-z-]+\.json$/.test(f)).sort();
+  const hooks = [];
+  for (const f of files) {
+    const contract = JSON.parse(readFileSync(join(CONTRACTS_DIR, f), 'utf8')) as {
+      level: number; hooks: LintHook[];
+    };
+    if (contract.level <= level) hooks.push(...contract.hooks);
+  }
+  if (hooks.length === 0 && selectedIds.length === 0) {
+    console.error(`No contracts found for level ${level} in ${CONTRACTS_DIR}`);
+    process.exit(2);
+  }
+  return selectHooks(hooks, selectedIds);
+}
+
+const tid = stableElementSelector;
+const uniq = Date.now().toString(36).slice(-5);
+
+async function checkHook(page: Page, hook: LintHook, results: LintResult[]): Promise<boolean> {
+  const loc = page.locator(tid(hook.id)).first();
+  try {
+    if (hook.revealedBy && !(await loc.count())) {
+      await page.locator(tid(hook.revealedBy)).first().click({ timeout: CHECK_TIMEOUT });
+    }
+    await loc.waitFor({
+      state: hook.check === 'visible' ? 'visible' : 'attached',
+      timeout: CHECK_TIMEOUT,
+    });
+    results.push({ id: hook.id, status: 'PASS' });
+    return true;
+  } catch {
+    results.push({
+      id: hook.id,
+      status: 'FAIL',
+      detail: `no element matching ${tid(hook.id)} became ${hook.check} during contract stage ${JSON.stringify(hook.stage)}` +
+        (hook.revealedBy ? ` (after clicking ${tid(hook.revealedBy)})` : '') +
+        ` — expected: ${hook.element}`,
+    });
+    return false;
+  }
+}
+
+export function completeUnvisitedHooks(hooks: LintHook[], results: LintResult[]): LintResult[] {
+  const visited = new Set(results.map(result => result.id));
+  for (const hook of hooks) {
+    if (visited.has(hook.id)) continue;
+    results.push(hook.stage === 'scenario'
+      ? { id: hook.id, status: 'SCENARIO', detail: hook.note }
+      : { id: hook.id, status: 'BLOCKED',
+          detail: `the core flow did not visit contract stage ${JSON.stringify(hook.stage)}` });
+  }
+  return results;
+}
+
+export function completeAbortedHooks(hooks: LintHook[], results: LintResult[], error: unknown): LintResult[] {
+  const visited = new Set(results.map(result => result.id));
+  const detail = String(error instanceof Error ? error.message : error ?? 'unknown error')
+    .split(/\r?\n/).map(line => line.trim()).filter(Boolean).slice(0, 6).join(' ').slice(0, 800);
+  results.push({ id: 'core-flow', status: 'FAIL', detail: `core flow aborted: ${detail}` });
+  for (const hook of hooks) {
+    if (visited.has(hook.id)) continue;
+    if (hook.stage === 'scenario') {
+      results.push({ id: hook.id, status: 'SCENARIO', detail: hook.note });
+    } else {
+      results.push({ id: hook.id, status: 'BLOCKED', detail: 'core flow aborted' });
+    }
+  }
+  return results;
+}
+
+async function run() {
+  const args = parseArgs(process.argv);
+  const track = loadTrack(args.track);
+  const hooks = loadHooks(args.level, track, args.hooks);
+  const byStage = (stage: string): LintHook[] => hooks.filter(h => h.stage === stage);
+  const results: LintResult[] = [];
+  const blocked = (stage: string): void => {
+    for (const h of hooks.filter(x => x.stage === stage)) {
+      results.push({ id: h.id, status: 'BLOCKED', detail: 'earlier core flow step failed' });
+    }
+  };
+
+  const browser = await chromium.launch({ headless: !args.headed });
+  const page = await browser.newContext().then(c => c.newPage());
+  page.setDefaultTimeout(CHECK_TIMEOUT);
+
+  try {
+    // The core flow is the one part of linting that is entirely
+    // application-specific, so each track brings its own.
+    const { walk } = await import(pathToFileURL(track.walk).href) as {
+      walk(context: LintWalkContext): Promise<void>;
+    };
+    await walk({ page, args, hooks, byStage, blocked, checkHook, results, uniq, tid, CHECK_TIMEOUT });
+    // Every lintable hook must record explicit evidence.
+    completeUnvisitedHooks(hooks, results);
+  } catch (err: unknown) {
+    console.error(`Core flow aborted: ${err instanceof Error ? err.message : String(err)}`);
+    completeAbortedHooks(hooks, results, err);
+  } finally {
+    await browser.close();
+  }
+
+  const failures = results.filter(r => r.status === 'FAIL' || r.status === 'BLOCKED');
+  const report = {
+    label: args.label ?? null,
+    url: args.url,
+    level: args.level,
+    selectedHooks: args.hooks.length ? [...new Set(args.hooks)].sort() : null,
+    pass: failures.length === 0,
+    counts: {
+      lintable: results.filter(r => r.status !== 'SCENARIO').length,
+      pass: results.filter(r => r.status === 'PASS').length,
+      fail: results.filter(r => r.status === 'FAIL').length,
+      blocked: results.filter(r => r.status === 'BLOCKED').length,
+      scenario: results.filter(r => r.status === 'SCENARIO').length,
+    },
+    results,
+  };
+  if (args.out) {
+    const id = `${args.parentAttemptId ?? args.label ?? 'lint'}-contract-lint`;
+    writeArtifact(args.out, {
+      kind: 'contract_lint', id,
+      attempt: { id, parentId: args.parentAttemptId ?? null },
+      identities: emptyArtifactIdentities(),
+      payload: report,
+    });
+    if (!args.json) console.log(`\nLint report written to ${args.out}`);
+  }
+  if (args.json) {
+    console.log(JSON.stringify(report, null, 2));
+  } else {
+    for (const r of results) {
+      console.log(`${r.status.padEnd(9)} ${r.id}${r.detail ? ` — ${r.detail}` : ''}`);
+    }
+    console.log(failures.length === 0
+      ? report.counts.pass > 0
+        ? `\nAPPLICATION CONTRACT PASS (${report.counts.pass} interfaces)`
+        : `\nAPPLICATION CONTRACT DEFERRED (${report.counts.scenario} interfaces checked during feature grading)`
+      : `\nAPPLICATION CONTRACT FAIL (${failures.length} interfaces missing or blocked)`);
+  }
+  process.exit(failures.length === 0 ? 0 : 1);
+}
+
+if (process.argv[1] && fileURLToPath(import.meta.url) === process.argv[1]) run();
diff --git a/tools/stack-bench/package-lock.json b/tools/stack-bench/package-lock.json
new file mode 100644
index 00000000000..430532137f5
--- /dev/null
+++ b/tools/stack-bench/package-lock.json
@@ -0,0 +1,136 @@
+{
+  "name": "@spacetimedb/stack-bench",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "@spacetimedb/stack-bench",
+      "dependencies": {
+        "eventsource-parser": "3.1.1",
+        "playwright": "1.62.1",
+        "semver": "7.7.4",
+        "zod": "4.5.4"
+      },
+      "devDependencies": {
+        "@types/node": "22.15.30",
+        "@types/semver": "7.8.0",
+        "typescript": "5.6.3"
+      },
+      "engines": {
+        "node": ">=22"
+      }
+    },
+    "node_modules/@types/node": {
+      "version": "22.15.30",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.15.30.tgz",
+      "integrity": "sha512-6Q7lr06bEHdlfplU6YRbgG1SFBdlsfNC4/lX+SkhiTs0cpJkOElmWls8PxDFv4yY/xKb8Y6SO0OmSX4wgqTZbA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": "~6.21.0"
+      }
+    },
+    "node_modules/@types/semver": {
+      "version": "7.8.0",
+      "resolved": "https://registry.npmjs.org/@types/semver/-/semver-7.8.0.tgz",
+      "integrity": "sha512-1mAINjtQCXXeLkJ9ehXkwOcBpqtLxiVtKhpUf83DdRNdQKV0iXZpaHYqRr7nj+wvxuJzoAmAwXI+sCNMv1CzLQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/eventsource-parser": {
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/eventsource-parser/-/eventsource-parser-3.1.1.tgz",
+      "integrity": "sha512-EKN1vKAMcZ8MlYMpaNuxN6R9yakzH6uajHcHVTqWJzvu5pWw9DyhbP35HH8MVBQ+dZjAfDxk+A8NiR9KWaXiyQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.2",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz",
+      "integrity": "sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==",
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/playwright": {
+      "version": "1.62.1",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.62.1.tgz",
+      "integrity": "sha512-0M+L3LAD8/nm554LOla9Ayx0j0tmFZ0FBcoQ7F1VuVHpM/XpiC8RcDzBQB8W5+hA8L22THxELzeF+2WcUzvcLg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "playwright-core": "1.62.1"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "optionalDependencies": {
+        "fsevents": "2.3.2"
+      }
+    },
+    "node_modules/playwright-core": {
+      "version": "1.62.1",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.62.1.tgz",
+      "integrity": "sha512-wPYSwEBJY9GHraISXqyqtx0na0LpO3XEX7jNDhntbex7tzUS7kLnZsOlFruFJB4Hi/rhDMjXGqHewDZ68nYZVw==",
+      "license": "Apache-2.0",
+      "bin": {
+        "playwright-core": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/semver": {
+      "version": "7.7.4",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
+      "integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==",
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.6.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.6.3.tgz",
+      "integrity": "sha512-hjcS1mhfuyi4WW8IWtjP7brDrG2cuDZukyrYrSauoXGNgx0S7zceP07adYkJycEr56BOUTNPzbInooiN3fn1qw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/undici-types": {
+      "version": "6.21.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
+      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/zod": {
+      "version": "4.5.4",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.5.4.tgz",
+      "integrity": "sha512-sC95tT5iHHH9gtpj6A81kh+NEaRAUFN+qlUPDUbRfOMvNf5QCBqsb3WgvnpVtK5Y+4UfA6KqufotuTvMGiTlsA==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/colinhacks"
+      }
+    }
+  }
+}
diff --git a/tools/stack-bench/package.json b/tools/stack-bench/package.json
new file mode 100644
index 00000000000..5754cd5ad7b
--- /dev/null
+++ b/tools/stack-bench/package.json
@@ -0,0 +1,85 @@
+{
+  "name": "@spacetimedb/stack-bench",
+  "private": true,
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "npm run clean && tsc -p tsconfig.build.json && node dist/scripts/copy-dashboard-assets.js",
+    "clean": "node --eval \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
+    "lint": "eslint appliance commands container dashboard grader linter scripts src tests",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "bootstrap:browsers": "playwright install chromium",
+    "prebench": "npm run build --silent",
+    "bench": "node dist/commands/bench.js",
+    "prepreflight": "npm run build",
+    "preflight": "node dist/commands/preflight.js",
+    "prerecover": "npm run build",
+    "recover": "node dist/commands/recovery.js recover",
+    "prerelease:bundle": "npm run build --silent",
+    "release:bundle": "node dist/src/releases/release-bundle.js",
+    "release:source": "npm run build --silent && node dist/src/releases/release-source.js --json",
+    "preverify:release": "npm run build --silent",
+    "verify:release": "node dist/src/releases/release-manifest.js verify",
+    "precheck:scenarios": "npm run build --silent",
+    "check:scenarios": "node dist/commands/check-scenarios.js --track chat && node dist/commands/check-scenarios.js --track ecommerce --recipe sequential-l1-2.5.0.json && node dist/commands/check-scenarios.js --track ecommerce --recipe sequential-l2-1.6.0.json && node dist/commands/check-scenarios.js --track ecommerce --recipe sequential-l3-1.0.0.json && node dist/commands/check-scenarios.js --track ecommerce --recipe progression-catalog-2.0.2.json && node dist/commands/check-scenarios.js --track ecommerce --recipe progression-depth3-2.0.2.json",
+    "precheck:mutations": "npm run build",
+    "check:mutations": "node dist/commands/check-mutations.js",
+    "precheck:definition-snapshots": "npm run build --silent",
+    "check:definition-snapshots": "node dist/commands/definition-snapshots.js",
+    "precheck:composition": "npm run build --silent",
+    "check:composition": "node dist/commands/check-composition.js",
+    "precheck:prompts": "npm run build --silent",
+    "check:prompts": "node --test dist/tests/dependency-neutral-prompt.contract.js",
+    "precheck:calibration": "npm run build --silent",
+    "check:calibration": "node dist/commands/check-calibration.js",
+    "precheck:references": "npm run build --silent",
+    "check:references": "node dist/src/references/reference-fixtures.js",
+    "pregraph": "npm run build",
+    "graph": "node dist/commands/progression-graph.js tracks/ecommerce/progression/ecommerce-2.0.2.json",
+    "pack": "npm run build --silent && node dist/commands/composition-cli.js pack",
+    "recipe": "npm run build --silent && node dist/commands/composition-cli.js recipe",
+    "precampaign": "npm run build --silent",
+    "campaign": "node dist/commands/campaign-cli.js",
+    "predashboard": "npm run build --silent",
+    "dashboard": "node dist/dashboard/dashboard-server.js",
+    "prerepair": "npm run build",
+    "repair": "node dist/commands/repair-cli.js",
+    "pretest": "npm run build --silent",
+    "test": "node --test --test-concurrency=4 dist/tests/*.test.js",
+    "pretest:dashboard": "npm run build --silent",
+    "test:dashboard": "node --test dist/tests/dashboard/*.test.js",
+    "pretest:all": "npm run build --silent",
+    "test:all": "node --test --test-concurrency=4 dist/tests/*.test.js dist/tests/dashboard/*.test.js dist/tests/*.contract.js",
+    "pretest:contracts": "npm run build --silent",
+    "test:contracts": "node --test --test-concurrency=4 dist/tests/*.contract.js",
+    "pretest:mutation-definitions": "npm run build --silent",
+    "test:mutation-definitions": "node --test --test-concurrency=4 dist/tests/*.mutation.js",
+    "pretest:integration": "npm run build --silent",
+    "test:integration": "node --test --test-concurrency=1 dist/tests/*.integration.js",
+    "pretest:container": "npm run build --silent",
+    "test:container": "node dist/commands/container-smoke.js",
+    "pretest:references": "npm run build --silent",
+    "test:references": "node dist/src/references/reference-build.js",
+    "prequalify:reference": "npm run build --silent",
+    "qualify:reference": "node dist/src/references/reference-live.js",
+    "pretest:faults": "npm run build --silent",
+    "test:faults": "node dist/commands/fault-injection.js",
+    "pretest:loop": "npm run build",
+    "test:loop": "node dist/commands/test-loop.js",
+    "pretest:null": "npm run build --silent",
+    "test:null": "node dist/commands/null-control.js"
+  },
+  "dependencies": {
+    "eventsource-parser": "3.1.1",
+    "playwright": "1.62.1",
+    "semver": "7.7.4",
+    "zod": "4.5.4"
+  },
+  "devDependencies": {
+    "@types/node": "22.15.30",
+    "@types/semver": "7.8.0",
+    "typescript": "5.6.3"
+  }
+}
diff --git a/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/mongodb-mutation.json b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/mongodb-mutation.json
new file mode 100644
index 00000000000..52af6dabd49
--- /dev/null
+++ b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/mongodb-mutation.json
@@ -0,0 +1,375 @@
+{
+  "artifactSchemaVersion": 2,
+  "kind": "reference_qualification",
+  "id": "reference-live-mongodb-20260831090827-14",
+  "attempt": {
+    "id": "reference-live-mongodb-20260831090827-14",
+    "parentId": null
+  },
+  "timestamps": {
+    "startedAt": "2026-08-31T09:08:27.961Z",
+    "completedAt": "2026-08-31T09:33:10.960Z"
+  },
+  "identities": {
+    "engine": {
+      "id": "stack-bench",
+      "version": null,
+      "sha256": "39da14d55d1ca82f41d18305dcb3e86aa7d5098c69a2bf6ba74533affbfbecc9",
+      "state": null
+    },
+    "recipe": {
+      "id": "ecommerce.progression-depth3",
+      "version": "2.0.1",
+      "sha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+      "state": "qualified"
+    },
+    "fixture": {
+      "id": "ecommerce-reference-mongodb",
+      "version": null,
+      "sha256": "24d445f18cdcb25b9ab06dd4f4582003b348edaf0be0b97c27ec9fbb06751b1e",
+      "state": "active"
+    },
+    "calibration": {
+      "id": "ecommerce.progression-depth3-calibration",
+      "version": "2.0.1",
+      "sha256": "dd91493c5066018cbfd949d6e14d64dc029deb634e93d796752caee3da97682c",
+      "state": "draft"
+    },
+    "experiment": null,
+    "agentAdapter": null,
+    "stackAdapter": {
+      "id": "mongodb",
+      "version": null,
+      "sha256": null,
+      "state": null
+    },
+    "packs": []
+  },
+  "payload": {
+    "fixture": "ecommerce-reference-mongodb",
+    "fixtureSha256": "24d445f18cdcb25b9ab06dd4f4582003b348edaf0be0b97c27ec9fbb06751b1e",
+    "requiredRepetitions": 1,
+    "isolation": "docker",
+    "runner": {
+      "schemaVersion": 1,
+      "mode": "appliance",
+      "platform": "linux",
+      "architecture": "x64",
+      "dockerEngineVersion": "29.6.2",
+      "dockerOs": "linux",
+      "dockerArchitecture": "x86_64",
+      "kernelVersion": "6.6.87.2-microsoft-standard-WSL2",
+      "cpuCount": 32,
+      "memoryBytes": 49232838656
+    },
+    "qualificationScope": {
+      "checksSha256": "a982217993be2d229e13b4006427ce15666263d1d6e333eb241c4431df59cdf7",
+      "executableSha256": "68ad187165516dd353c091557caeca8b243fee27321deaf5e3a8468be0cb1bf9",
+      "kind": "mutation",
+      "mutationSha256": "c0000b5eb59c74c6676d3b247e6eece4de43b7ce09fc8a4990423c971f3c14ab",
+      "recipe": {
+        "contentSha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+        "id": "ecommerce.progression-depth3",
+        "version": "2.0.1"
+      },
+      "schemaVersion": 2,
+      "stack": {
+        "id": "mongodb",
+        "reference": {
+          "id": "ecommerce-reference-mongodb",
+          "sourceSha256": "24d445f18cdcb25b9ab06dd4f4582003b348edaf0be0b97c27ec9fbb06751b1e"
+        },
+        "version": "1.2.0"
+      },
+      "sha256": "0c8285228b8787503a139c0bb7b88d8a57c15c524aa2ddfd2a20a8ee5b85d0f0"
+    },
+    "mutationControl": true,
+    "qualifiedCheckKeys": [
+      "ecommerce.feature.accounts.accounts.1a",
+      "ecommerce.feature.accounts.accounts.1b",
+      "ecommerce.feature.accounts.accounts.1c",
+      "ecommerce.feature.accounts.accounts.1d",
+      "ecommerce.feature.cart-checkout.cart.4a",
+      "ecommerce.feature.cart-checkout.cart.4d",
+      "ecommerce.feature.catalog.catalog-ranking.2b",
+      "ecommerce.feature.catalog.catalog-search.2d",
+      "ecommerce.feature.catalog.catalog-values.2a",
+      "ecommerce.feature.purchasing.purchase-order.3c",
+      "ecommerce.feature.reviews.reviews.6a",
+      "ecommerce.feature.warehouse-admin.access-boundary.7a",
+      "ecommerce.feature.warehouse-admin.admin-write.103a",
+      "ecommerce.feature.warehouse-admin.warehouse-stock.7c",
+      "ecommerce.feature.warehouse-admin.warehouse-view.7b",
+      "ecommerce.inventory-operations.operational-views.5a",
+      "ecommerce.inventory-operations.operational-views.5b",
+      "ecommerce.inventory-operations.operational-views.5c",
+      "ecommerce.inventory-operations.operational-views.5d",
+      "ecommerce.inventory-operations.stock-conservation.202a",
+      "ecommerce.inventory-operations.stock-conservation.202b",
+      "ecommerce.inventory-operations.stock-conservation.202c",
+      "ecommerce.inventory-operations.stock-conservation.202d",
+      "ecommerce.inventory-operations.warehouse-transfer.2a",
+      "ecommerce.inventory-operations.warehouse-transfer.2b",
+      "ecommerce.inventory-operations.warehouse-transfer.2c",
+      "ecommerce.l3.deferred-access.scheduled-work-access.317a",
+      "ecommerce.l3.deferred-durability.restart-survival.311a",
+      "ecommerce.l3.deferred-integrity.exactly-once.311a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.302a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.305a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.306a",
+      "ecommerce.l3.server-time.server-time.312a",
+      "ecommerce.operations-access.fulfilment-queue.1a",
+      "ecommerce.operations-access.fulfilment-queue.1b",
+      "ecommerce.operations-access.fulfilment-queue.1c",
+      "ecommerce.operations-access.fulfilment-queue.1d",
+      "ecommerce.operations-access.operator-authorization.201a",
+      "ecommerce.operations-access.operator-authorization.201c",
+      "ecommerce.operations-access.order-owner.204a",
+      "ecommerce.progression.catalog-management.catalog-management.622a",
+      "ecommerce.progression.catalog-management.catalog-management.622b",
+      "ecommerce.progression.customer-profile.customer-profile.620a",
+      "ecommerce.progression.customer-profile.customer-profile.620b",
+      "ecommerce.progression.faceted-search.faceted-search.401a",
+      "ecommerce.progression.faceted-search.faceted-search.402a",
+      "ecommerce.progression.managed-support.managed-support-privacy.613b",
+      "ecommerce.progression.managed-support.managed-support-shared.613a",
+      "ecommerce.progression.notification-preferences.notification-preferences-persistence.630a",
+      "ecommerce.progression.notification-preferences.notification-preferences-privacy.630b",
+      "ecommerce.progression.promotion-rules.promotion-rule-access.620b",
+      "ecommerce.progression.promotion-rules.promotion-rule-values.620a",
+      "ecommerce.progression.staff-access.staff-access.601a",
+      "ecommerce.progression.staff-access.staff-access.601b",
+      "ecommerce.progression.staff-roles.staff-roles.621a",
+      "ecommerce.progression.staff-roles.staff-roles.621b",
+      "ecommerce.progression.stock-alerts.stock-alert-delivery.631a",
+      "ecommerce.progression.stock-alerts.stock-alert-privacy.631b",
+      "ecommerce.progression.support-history.support-history-persistence.612a",
+      "ecommerce.progression.support-history.support-history-privacy.612b",
+      "ecommerce.progression.support-intake.support-intake.610a",
+      "ecommerce.progression.support-triage.support-assignment.611a",
+      "ecommerce.progression.support-triage.support-priority.611b",
+      "ecommerce.progression.support-triage.support-status.611c",
+      "ecommerce.returns-pricing.cancellation-and-return.3a",
+      "ecommerce.returns-pricing.cancellation-and-return.3b",
+      "ecommerce.returns-pricing.refund-accounting.203a",
+      "ecommerce.spec.access-control.cart-boundary.109a",
+      "ecommerce.spec.access-control.cart-boundary.109b",
+      "ecommerce.spec.access-control.order-ownership.106a",
+      "ecommerce.spec.access-control.purchase-attribution.102a",
+      "ecommerce.spec.access-control.purchase-session.101a",
+      "ecommerce.spec.access-control.review-eligibility.108a",
+      "ecommerce.spec.access-control.review-eligibility.108b",
+      "ecommerce.spec.access-control.signed-out-purchase.3a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203b",
+      "ecommerce.spec.concurrency-safety.last-unit.201a",
+      "ecommerce.spec.concurrency-safety.last-unit.201b",
+      "ecommerce.spec.concurrency-safety.last-unit.201c",
+      "ecommerce.spec.concurrency-safety.restock-race.202a",
+      "ecommerce.spec.external-data-sync.external-stock.901a",
+      "ecommerce.spec.external-data-sync.external-stock.901c",
+      "ecommerce.spec.external-data-sync.external-stock.901d",
+      "ecommerce.spec.live-state.open-list.902a",
+      "ecommerce.spec.live-state.purchase-stock.3b",
+      "ecommerce.spec.live-state.ranking.2c",
+      "ecommerce.spec.live-state.rating.6c",
+      "ecommerce.spec.live-state.shared-cart.4c",
+      "ecommerce.spec.state-durability.account-state-recovery.105a",
+      "ecommerce.spec.state-durability.account-state-recovery.105b",
+      "ecommerce.spec.state-durability.cart-reload.4b",
+      "ecommerce.spec.state-durability.session-reload.1e",
+      "ecommerce.spec.transactional-integrity.books-balance.107a",
+      "ecommerce.spec.transactional-integrity.books-balance.107b",
+      "ecommerce.spec.transactional-integrity.server-price.104a",
+      "ecommerce.spec.transactional-integrity.unique-review.6b"
+    ],
+    "runs": [
+      {
+        "repetition": 1,
+        "processError": null,
+        "harnessSha256Before": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "harnessSha256After": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "ok": true,
+        "failures": [],
+        "score": "162/162",
+        "imageId": "sha256:eccec6ea3861befc3ef0a05beb3f8ac13e0af2d0a1ef77c1a7beb3c0eb2aa075",
+        "criteria": 97,
+        "zeroPointCriteria": 0,
+        "outcome": "passed",
+        "packRuntime": {
+          "packs": [
+            {
+              "id": "ecommerce.feature.accounts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.cart",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-discovery",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-items",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.checkout",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.purchasing",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.reviews",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.warehouse-admin",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.inventory-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.order-cancellation-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.recommendations",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.sales-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.stock-transfers-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-durability-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-integrity-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.scheduled-restocks-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.server-time-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.cancellation-accounting-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.catalog-management",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.customer-profile",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.faceted-search",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.fulfilment-queue",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.inventory-conservation-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.managed-support",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.notification-preferences",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.operations-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.promotion-rules",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-access",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-roles",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.stock-alerts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-history",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-intake",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-triage",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.access-control",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.concurrency-safety",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.external-data-sync",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.live-state",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.state-durability",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.transactional-integrity",
+              "exceeded": false
+            }
+          ]
+        },
+        "mutations": {
+          "caught": 92,
+          "total": 92
+        }
+      }
+    ],
+    "stable": true,
+    "sameImage": true,
+    "sameHarness": true,
+    "harnessSha256": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+    "ok": true
+  }
+}
diff --git a/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/mongodb-reference.json b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/mongodb-reference.json
new file mode 100644
index 00000000000..12924373965
--- /dev/null
+++ b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/mongodb-reference.json
@@ -0,0 +1,372 @@
+{
+  "artifactSchemaVersion": 2,
+  "kind": "reference_qualification",
+  "id": "reference-live-mongodb-20260831090827-14-reference",
+  "attempt": {
+    "id": "reference-live-mongodb-20260831090827-14-reference",
+    "parentId": null
+  },
+  "timestamps": {
+    "startedAt": "2026-08-31T09:08:27.961Z",
+    "completedAt": "2026-08-31T09:33:10.961Z"
+  },
+  "identities": {
+    "engine": {
+      "id": "stack-bench",
+      "version": null,
+      "sha256": "39da14d55d1ca82f41d18305dcb3e86aa7d5098c69a2bf6ba74533affbfbecc9",
+      "state": null
+    },
+    "recipe": {
+      "id": "ecommerce.progression-depth3",
+      "version": "2.0.1",
+      "sha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+      "state": "qualified"
+    },
+    "fixture": {
+      "id": "ecommerce-reference-mongodb",
+      "version": null,
+      "sha256": "24d445f18cdcb25b9ab06dd4f4582003b348edaf0be0b97c27ec9fbb06751b1e",
+      "state": "active"
+    },
+    "calibration": {
+      "id": "ecommerce.progression-depth3-calibration",
+      "version": "2.0.1",
+      "sha256": "dd91493c5066018cbfd949d6e14d64dc029deb634e93d796752caee3da97682c",
+      "state": "draft"
+    },
+    "experiment": null,
+    "agentAdapter": null,
+    "stackAdapter": {
+      "id": "mongodb",
+      "version": null,
+      "sha256": null,
+      "state": null
+    },
+    "packs": []
+  },
+  "payload": {
+    "fixture": "ecommerce-reference-mongodb",
+    "fixtureSha256": "24d445f18cdcb25b9ab06dd4f4582003b348edaf0be0b97c27ec9fbb06751b1e",
+    "requiredRepetitions": 1,
+    "isolation": "docker",
+    "runner": {
+      "schemaVersion": 1,
+      "mode": "appliance",
+      "platform": "linux",
+      "architecture": "x64",
+      "dockerEngineVersion": "29.6.2",
+      "dockerOs": "linux",
+      "dockerArchitecture": "x86_64",
+      "kernelVersion": "6.6.87.2-microsoft-standard-WSL2",
+      "cpuCount": 32,
+      "memoryBytes": 49232838656
+    },
+    "qualificationScope": {
+      "checksSha256": "a982217993be2d229e13b4006427ce15666263d1d6e333eb241c4431df59cdf7",
+      "executableSha256": "b806484f7bb42170561e17fa8605b9fd3646d7299d2f2138fa0990e672d26759",
+      "kind": "reference",
+      "mutationSha256": null,
+      "recipe": {
+        "contentSha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+        "id": "ecommerce.progression-depth3",
+        "version": "2.0.1"
+      },
+      "schemaVersion": 2,
+      "stack": {
+        "id": "mongodb",
+        "reference": {
+          "id": "ecommerce-reference-mongodb",
+          "sourceSha256": "24d445f18cdcb25b9ab06dd4f4582003b348edaf0be0b97c27ec9fbb06751b1e"
+        },
+        "version": "1.2.0"
+      },
+      "sha256": "bb8635a5a87f917cd40d5efe01128a16627811d09837967d49b0e0df4af641e4"
+    },
+    "mutationControl": false,
+    "qualifiedCheckKeys": [
+      "ecommerce.feature.accounts.accounts.1a",
+      "ecommerce.feature.accounts.accounts.1b",
+      "ecommerce.feature.accounts.accounts.1c",
+      "ecommerce.feature.accounts.accounts.1d",
+      "ecommerce.feature.cart-checkout.cart.4a",
+      "ecommerce.feature.cart-checkout.cart.4d",
+      "ecommerce.feature.catalog.catalog-ranking.2b",
+      "ecommerce.feature.catalog.catalog-search.2d",
+      "ecommerce.feature.catalog.catalog-values.2a",
+      "ecommerce.feature.purchasing.purchase-order.3c",
+      "ecommerce.feature.reviews.reviews.6a",
+      "ecommerce.feature.warehouse-admin.access-boundary.7a",
+      "ecommerce.feature.warehouse-admin.admin-write.103a",
+      "ecommerce.feature.warehouse-admin.warehouse-stock.7c",
+      "ecommerce.feature.warehouse-admin.warehouse-view.7b",
+      "ecommerce.inventory-operations.operational-views.5a",
+      "ecommerce.inventory-operations.operational-views.5b",
+      "ecommerce.inventory-operations.operational-views.5c",
+      "ecommerce.inventory-operations.operational-views.5d",
+      "ecommerce.inventory-operations.stock-conservation.202a",
+      "ecommerce.inventory-operations.stock-conservation.202b",
+      "ecommerce.inventory-operations.stock-conservation.202c",
+      "ecommerce.inventory-operations.stock-conservation.202d",
+      "ecommerce.inventory-operations.warehouse-transfer.2a",
+      "ecommerce.inventory-operations.warehouse-transfer.2b",
+      "ecommerce.inventory-operations.warehouse-transfer.2c",
+      "ecommerce.l3.deferred-access.scheduled-work-access.317a",
+      "ecommerce.l3.deferred-durability.restart-survival.311a",
+      "ecommerce.l3.deferred-integrity.exactly-once.311a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.302a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.305a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.306a",
+      "ecommerce.l3.server-time.server-time.312a",
+      "ecommerce.operations-access.fulfilment-queue.1a",
+      "ecommerce.operations-access.fulfilment-queue.1b",
+      "ecommerce.operations-access.fulfilment-queue.1c",
+      "ecommerce.operations-access.fulfilment-queue.1d",
+      "ecommerce.operations-access.operator-authorization.201a",
+      "ecommerce.operations-access.operator-authorization.201c",
+      "ecommerce.operations-access.order-owner.204a",
+      "ecommerce.progression.catalog-management.catalog-management.622a",
+      "ecommerce.progression.catalog-management.catalog-management.622b",
+      "ecommerce.progression.customer-profile.customer-profile.620a",
+      "ecommerce.progression.customer-profile.customer-profile.620b",
+      "ecommerce.progression.faceted-search.faceted-search.401a",
+      "ecommerce.progression.faceted-search.faceted-search.402a",
+      "ecommerce.progression.managed-support.managed-support-privacy.613b",
+      "ecommerce.progression.managed-support.managed-support-shared.613a",
+      "ecommerce.progression.notification-preferences.notification-preferences-persistence.630a",
+      "ecommerce.progression.notification-preferences.notification-preferences-privacy.630b",
+      "ecommerce.progression.promotion-rules.promotion-rule-access.620b",
+      "ecommerce.progression.promotion-rules.promotion-rule-values.620a",
+      "ecommerce.progression.staff-access.staff-access.601a",
+      "ecommerce.progression.staff-access.staff-access.601b",
+      "ecommerce.progression.staff-roles.staff-roles.621a",
+      "ecommerce.progression.staff-roles.staff-roles.621b",
+      "ecommerce.progression.stock-alerts.stock-alert-delivery.631a",
+      "ecommerce.progression.stock-alerts.stock-alert-privacy.631b",
+      "ecommerce.progression.support-history.support-history-persistence.612a",
+      "ecommerce.progression.support-history.support-history-privacy.612b",
+      "ecommerce.progression.support-intake.support-intake.610a",
+      "ecommerce.progression.support-triage.support-assignment.611a",
+      "ecommerce.progression.support-triage.support-priority.611b",
+      "ecommerce.progression.support-triage.support-status.611c",
+      "ecommerce.returns-pricing.cancellation-and-return.3a",
+      "ecommerce.returns-pricing.cancellation-and-return.3b",
+      "ecommerce.returns-pricing.refund-accounting.203a",
+      "ecommerce.spec.access-control.cart-boundary.109a",
+      "ecommerce.spec.access-control.cart-boundary.109b",
+      "ecommerce.spec.access-control.order-ownership.106a",
+      "ecommerce.spec.access-control.purchase-attribution.102a",
+      "ecommerce.spec.access-control.purchase-session.101a",
+      "ecommerce.spec.access-control.review-eligibility.108a",
+      "ecommerce.spec.access-control.review-eligibility.108b",
+      "ecommerce.spec.access-control.signed-out-purchase.3a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203b",
+      "ecommerce.spec.concurrency-safety.last-unit.201a",
+      "ecommerce.spec.concurrency-safety.last-unit.201b",
+      "ecommerce.spec.concurrency-safety.last-unit.201c",
+      "ecommerce.spec.concurrency-safety.restock-race.202a",
+      "ecommerce.spec.external-data-sync.external-stock.901a",
+      "ecommerce.spec.external-data-sync.external-stock.901c",
+      "ecommerce.spec.external-data-sync.external-stock.901d",
+      "ecommerce.spec.live-state.open-list.902a",
+      "ecommerce.spec.live-state.purchase-stock.3b",
+      "ecommerce.spec.live-state.ranking.2c",
+      "ecommerce.spec.live-state.rating.6c",
+      "ecommerce.spec.live-state.shared-cart.4c",
+      "ecommerce.spec.state-durability.account-state-recovery.105a",
+      "ecommerce.spec.state-durability.account-state-recovery.105b",
+      "ecommerce.spec.state-durability.cart-reload.4b",
+      "ecommerce.spec.state-durability.session-reload.1e",
+      "ecommerce.spec.transactional-integrity.books-balance.107a",
+      "ecommerce.spec.transactional-integrity.books-balance.107b",
+      "ecommerce.spec.transactional-integrity.server-price.104a",
+      "ecommerce.spec.transactional-integrity.unique-review.6b"
+    ],
+    "runs": [
+      {
+        "repetition": 1,
+        "processError": null,
+        "harnessSha256Before": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "harnessSha256After": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "ok": true,
+        "failures": [],
+        "score": "162/162",
+        "imageId": "sha256:eccec6ea3861befc3ef0a05beb3f8ac13e0af2d0a1ef77c1a7beb3c0eb2aa075",
+        "criteria": 97,
+        "zeroPointCriteria": 0,
+        "outcome": "passed",
+        "packRuntime": {
+          "packs": [
+            {
+              "id": "ecommerce.feature.accounts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.cart",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-discovery",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-items",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.checkout",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.purchasing",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.reviews",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.warehouse-admin",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.inventory-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.order-cancellation-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.recommendations",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.sales-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.stock-transfers-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-durability-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-integrity-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.scheduled-restocks-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.server-time-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.cancellation-accounting-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.catalog-management",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.customer-profile",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.faceted-search",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.fulfilment-queue",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.inventory-conservation-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.managed-support",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.notification-preferences",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.operations-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.promotion-rules",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-access",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-roles",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.stock-alerts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-history",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-intake",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-triage",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.access-control",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.concurrency-safety",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.external-data-sync",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.live-state",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.state-durability",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.transactional-integrity",
+              "exceeded": false
+            }
+          ]
+        },
+        "mutations": null
+      }
+    ],
+    "stable": true,
+    "sameImage": true,
+    "sameHarness": true,
+    "harnessSha256": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+    "ok": true
+  }
+}
diff --git a/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/null.json b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/null.json
new file mode 100644
index 00000000000..583729e54a7
--- /dev/null
+++ b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/null.json
@@ -0,0 +1,1064 @@
+{
+  "artifactSchemaVersion": 2,
+  "kind": "null_control",
+  "id": "null-control-2026-08-31T09-08-27-453Z",
+  "attempt": {
+    "id": "null-control-2026-08-31T09-08-27-453Z",
+    "parentId": null
+  },
+  "timestamps": {
+    "startedAt": "2026-08-31T09:08:27.454Z",
+    "completedAt": "2026-08-31T09:31:55.804Z"
+  },
+  "identities": {
+    "engine": {
+      "id": "stack-bench",
+      "version": null,
+      "sha256": "39da14d55d1ca82f41d18305dcb3e86aa7d5098c69a2bf6ba74533affbfbecc9",
+      "state": null
+    },
+    "recipe": {
+      "id": "ecommerce.progression-depth3",
+      "version": "2.0.1",
+      "sha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+      "state": "qualified"
+    },
+    "fixture": null,
+    "calibration": {
+      "id": "ecommerce.progression-depth3-calibration",
+      "version": "2.0.1",
+      "sha256": "dd91493c5066018cbfd949d6e14d64dc029deb634e93d796752caee3da97682c",
+      "state": "draft"
+    },
+    "experiment": null,
+    "agentAdapter": null,
+    "stackAdapter": null,
+    "packs": []
+  },
+  "payload": {
+    "runner": {
+      "schemaVersion": 1,
+      "mode": "appliance",
+      "platform": "linux",
+      "architecture": "x64",
+      "dockerEngineVersion": "29.6.2",
+      "dockerOs": "linux",
+      "dockerArchitecture": "x86_64",
+      "kernelVersion": "6.6.87.2-microsoft-standard-WSL2",
+      "cpuCount": 32,
+      "memoryBytes": 49232838656
+    },
+    "qualificationScope": {
+      "checksSha256": "a982217993be2d229e13b4006427ce15666263d1d6e333eb241c4431df59cdf7",
+      "executableSha256": "58b6187b453a4229b1ff3f403e4d38765468eabc487e137d6f789ee125cbc91a",
+      "kind": "null",
+      "mutationSha256": null,
+      "recipe": {
+        "contentSha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+        "id": "ecommerce.progression-depth3",
+        "version": "2.0.1"
+      },
+      "schemaVersion": 2,
+      "stack": null,
+      "sha256": "74b60e3dbd22ab3ecf33746db29354e5bd065ce8f0d644ddd390956d12ab802b"
+    },
+    "tracks": [
+      "ecommerce"
+    ],
+    "ok": true,
+    "summary": {
+      "criteria": 97,
+      "points": 162,
+      "expectedFailures": {
+        "criteria": 97,
+        "points": 162
+      },
+      "vacuousPasses": {
+        "criteria": 0,
+        "points": 0
+      },
+      "oracleGaps": {
+        "criteria": 0,
+        "points": 0
+      },
+      "unscored": {
+        "criteria": 0,
+        "passed": 0,
+        "failed": 0,
+        "inconclusive": 0
+      }
+    },
+    "criteria": [
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-account-create-2.4.0.json",
+        "feature": 1,
+        "criterion": "1a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-account-duplicate-2.4.0.json",
+        "feature": 1,
+        "criterion": "1b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-account-password-2.4.0.json",
+        "feature": 1,
+        "criterion": "1c",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-account-reload-2.4.0.json",
+        "feature": 1,
+        "criterion": "1e",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-account-signout-2.4.0.json",
+        "feature": 1,
+        "criterion": "1d",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-admin-write-staff-1.0.0.json",
+        "feature": 103,
+        "criterion": "103a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-buying-2.4.0.json",
+        "feature": 3,
+        "criterion": "3b",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-cart-2.4.0.json",
+        "feature": 4,
+        "criterion": "4b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-cart-2.4.0.json",
+        "feature": 4,
+        "criterion": "4c",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-cart-boundary-2.4.0.json",
+        "feature": 109,
+        "criterion": "109a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-cart-boundary-2.4.0.json",
+        "feature": 109,
+        "criterion": "109b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-catalog-ranking-1.0.0.json",
+        "feature": 2,
+        "criterion": "2b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-catalog-search-1.0.0.json",
+        "feature": 2,
+        "criterion": "2d",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-catalog-values-1.0.0.json",
+        "feature": 2,
+        "criterion": "2a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-core-2.4.0.json",
+        "feature": 2,
+        "criterion": "2c",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-duplicate-checkout-2.3.1.json",
+        "feature": 203,
+        "criterion": "203a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-duplicate-checkout-2.3.1.json",
+        "feature": 203,
+        "criterion": "203b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-external-live-sync-1.1.0.json",
+        "feature": 901,
+        "criterion": "901a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-external-reconnect-sync-1.1.0.json",
+        "feature": 901,
+        "criterion": "901d",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-external-server-restart-sync-1.1.0.json",
+        "feature": 901,
+        "criterion": "901c",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-last-unit-2.3.1.json",
+        "feature": 201,
+        "criterion": "201a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-last-unit-2.3.1.json",
+        "feature": 201,
+        "criterion": "201b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-last-unit-2.3.1.json",
+        "feature": 201,
+        "criterion": "201c",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-order-ownership-2.4.0.json",
+        "feature": 106,
+        "criterion": "106a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-purchase-attribution-2.4.0.json",
+        "feature": 102,
+        "criterion": "102a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-purchase-session-2.4.0.json",
+        "feature": 101,
+        "criterion": "101a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-restock-race-2.3.0.json",
+        "feature": 202,
+        "criterion": "202a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-review-eligibility-2.4.0.json",
+        "feature": 108,
+        "criterion": "108a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-review-eligibility-2.4.0.json",
+        "feature": 108,
+        "criterion": "108b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-review-rating-live-2.4.0.json",
+        "feature": 6,
+        "criterion": "6c",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-review-uniqueness-2.4.0.json",
+        "feature": 6,
+        "criterion": "6b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-review-visibility-2.4.0.json",
+        "feature": 6,
+        "criterion": "6a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-server-price-2.4.0.json",
+        "feature": 104,
+        "criterion": "104a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-warehouse-admin-staff-1.0.0.json",
+        "feature": 7,
+        "criterion": "7a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-warehouse-admin-staff-1.0.0.json",
+        "feature": 7,
+        "criterion": "7b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/01-warehouse-stock-live-staff-1.0.0.json",
+        "feature": 7,
+        "criterion": "7c",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-fulfilment-access-1.0.0.json",
+        "feature": 1,
+        "criterion": "1d",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-fulfilment-live-1.0.0.json",
+        "feature": 1,
+        "criterion": "1a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-fulfilment-ship-1.0.0.json",
+        "feature": 1,
+        "criterion": "1c",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-invariants.json",
+        "feature": 203,
+        "criterion": "203a",
+        "points": 3,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-low-stock-1.4.0.json",
+        "feature": 5,
+        "criterion": "5a",
+        "points": 3,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-operational-best-sellers-1.0.0.json",
+        "feature": 5,
+        "criterion": "5d",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-operational-category-totals-1.0.0.json",
+        "feature": 5,
+        "criterion": "5b",
+        "points": 3,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-operational-recommendations-1.0.0.json",
+        "feature": 5,
+        "criterion": "5c",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-order-cancellation-core-1.0.0.json",
+        "feature": 3,
+        "criterion": "3a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-order-cancellation-history-1.0.0.json",
+        "feature": 3,
+        "criterion": "3b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-queue-warehouse-1.4.0.json",
+        "feature": 1,
+        "criterion": "1b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-self-contained-1.4.0.json",
+        "feature": 202,
+        "criterion": "202b",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-self-contained-1.4.0.json",
+        "feature": 202,
+        "criterion": "202c",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-server-actions-1.1.0.json",
+        "feature": 201,
+        "criterion": "201c",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-server-actions-1.1.0.json",
+        "feature": 202,
+        "criterion": "202d",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-server-actions-1.1.0.json",
+        "feature": 204,
+        "criterion": "204a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-strengthened-1.4.0.json",
+        "feature": 2,
+        "criterion": "2a",
+        "points": 3,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-strengthened-1.4.0.json",
+        "feature": 2,
+        "criterion": "2c",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-strengthened-1.4.0.json",
+        "feature": 201,
+        "criterion": "201a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-strengthened-1.4.0.json",
+        "feature": 202,
+        "criterion": "202a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/02-transfer-totals-1.4.0.json",
+        "feature": 2,
+        "criterion": "2b",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/03-deferred-access-1.0.0.json",
+        "feature": 317,
+        "criterion": "317a",
+        "points": 3,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/03-deferred-durability-1.0.0.json",
+        "feature": 311,
+        "criterion": "311a",
+        "points": 4,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/03-deferred-integrity-1.0.0.json",
+        "feature": 311,
+        "criterion": "311a",
+        "points": 3,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/03-scheduled-restocks-1.0.0.json",
+        "feature": 302,
+        "criterion": "302a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/03-scheduled-restocks-1.0.0.json",
+        "feature": 305,
+        "criterion": "305a",
+        "points": 3,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/03-scheduled-restocks-1.0.0.json",
+        "feature": 306,
+        "criterion": "306a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/03-server-time-1.0.0.json",
+        "feature": 312,
+        "criterion": "312a",
+        "points": 3,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-account-state-reconnect-1.0.0.json",
+        "feature": 105,
+        "criterion": "105b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-account-state-reload-1.0.1.json",
+        "feature": 105,
+        "criterion": "105a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-books-balance-1.0.0.json",
+        "feature": 107,
+        "criterion": "107a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-books-balance-1.0.0.json",
+        "feature": 107,
+        "criterion": "107b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-cart-checkout-1.0.0.json",
+        "feature": 4,
+        "criterion": "4a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-cart-checkout-1.0.0.json",
+        "feature": 4,
+        "criterion": "4d",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-catalog-management-1.0.1.json",
+        "feature": 622,
+        "criterion": "622a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-catalog-management-1.0.1.json",
+        "feature": 622,
+        "criterion": "622b",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-customer-profile-1.0.0.json",
+        "feature": 620,
+        "criterion": "620a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-customer-profile-1.0.0.json",
+        "feature": 620,
+        "criterion": "620b",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-faceted-filters-1.0.0.json",
+        "feature": 401,
+        "criterion": "401a",
+        "points": 3,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-faceted-pagination-1.0.0.json",
+        "feature": 402,
+        "criterion": "402a",
+        "points": 3,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-managed-support-privacy-1.0.0.json",
+        "feature": 613,
+        "criterion": "613b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-managed-support-shared-1.0.0.json",
+        "feature": 613,
+        "criterion": "613a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-notification-preferences-1.0.0.json",
+        "feature": 630,
+        "criterion": "630a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-notification-preferences-1.0.0.json",
+        "feature": 630,
+        "criterion": "630b",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-open-list-live-1.0.0.json",
+        "feature": 902,
+        "criterion": "902a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-promotion-rules-1.0.0.json",
+        "feature": 620,
+        "criterion": "620a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-promotion-rules-1.0.0.json",
+        "feature": 620,
+        "criterion": "620b",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-purchasing-1.0.0.json",
+        "feature": 3,
+        "criterion": "3c",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-signed-out-purchase-1.0.0.json",
+        "feature": 3,
+        "criterion": "3a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-staff-access-1.0.0.json",
+        "feature": 601,
+        "criterion": "601a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-staff-access-1.0.0.json",
+        "feature": 601,
+        "criterion": "601b",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-staff-roles-1.0.0.json",
+        "feature": 621,
+        "criterion": "621a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-staff-roles-1.0.0.json",
+        "feature": 621,
+        "criterion": "621b",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-stock-alerts-1.0.0.json",
+        "feature": 631,
+        "criterion": "631a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-stock-alerts-1.0.0.json",
+        "feature": 631,
+        "criterion": "631b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-support-history-1.0.0.json",
+        "feature": 612,
+        "criterion": "612a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-support-history-1.0.0.json",
+        "feature": 612,
+        "criterion": "612b",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-support-intake-1.0.0.json",
+        "feature": 610,
+        "criterion": "610a",
+        "points": 2,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-support-triage-1.0.0.json",
+        "feature": 611,
+        "criterion": "611a",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-support-triage-1.0.0.json",
+        "feature": 611,
+        "criterion": "611b",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      },
+      {
+        "track": "ecommerce",
+        "level": 3,
+        "scenario": "scenarios/progression-support-triage-1.0.0.json",
+        "feature": 611,
+        "criterion": "611c",
+        "points": 1,
+        "status": "expected_fail",
+        "evidenceStatus": "failed"
+      }
+    ]
+  }
+}
diff --git a/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/postgres-mutation.json b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/postgres-mutation.json
new file mode 100644
index 00000000000..7049527c39e
--- /dev/null
+++ b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/postgres-mutation.json
@@ -0,0 +1,375 @@
+{
+  "artifactSchemaVersion": 2,
+  "kind": "reference_qualification",
+  "id": "reference-live-postgres-20260831090828-14",
+  "attempt": {
+    "id": "reference-live-postgres-20260831090828-14",
+    "parentId": null
+  },
+  "timestamps": {
+    "startedAt": "2026-08-31T09:08:28.070Z",
+    "completedAt": "2026-08-31T09:32:37.415Z"
+  },
+  "identities": {
+    "engine": {
+      "id": "stack-bench",
+      "version": null,
+      "sha256": "39da14d55d1ca82f41d18305dcb3e86aa7d5098c69a2bf6ba74533affbfbecc9",
+      "state": null
+    },
+    "recipe": {
+      "id": "ecommerce.progression-depth3",
+      "version": "2.0.1",
+      "sha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+      "state": "qualified"
+    },
+    "fixture": {
+      "id": "ecommerce-reference-postgres",
+      "version": null,
+      "sha256": "f8f6152cebd68acc2af46a3e4cbf208664db17a7db58e0276d8e10ea6750aaf5",
+      "state": "active"
+    },
+    "calibration": {
+      "id": "ecommerce.progression-depth3-calibration",
+      "version": "2.0.1",
+      "sha256": "dd91493c5066018cbfd949d6e14d64dc029deb634e93d796752caee3da97682c",
+      "state": "draft"
+    },
+    "experiment": null,
+    "agentAdapter": null,
+    "stackAdapter": {
+      "id": "postgres",
+      "version": null,
+      "sha256": null,
+      "state": null
+    },
+    "packs": []
+  },
+  "payload": {
+    "fixture": "ecommerce-reference-postgres",
+    "fixtureSha256": "f8f6152cebd68acc2af46a3e4cbf208664db17a7db58e0276d8e10ea6750aaf5",
+    "requiredRepetitions": 1,
+    "isolation": "docker",
+    "runner": {
+      "schemaVersion": 1,
+      "mode": "appliance",
+      "platform": "linux",
+      "architecture": "x64",
+      "dockerEngineVersion": "29.6.2",
+      "dockerOs": "linux",
+      "dockerArchitecture": "x86_64",
+      "kernelVersion": "6.6.87.2-microsoft-standard-WSL2",
+      "cpuCount": 32,
+      "memoryBytes": 49232838656
+    },
+    "qualificationScope": {
+      "checksSha256": "a982217993be2d229e13b4006427ce15666263d1d6e333eb241c4431df59cdf7",
+      "executableSha256": "d8d3a75d12a7b2fedcffdfd11ab76b1918005335ca8f6fb56f101b691d4002ad",
+      "kind": "mutation",
+      "mutationSha256": "dfc4af2d598882ef734492c81f4ff76972a249c11b762fd42e32eba93784267f",
+      "recipe": {
+        "contentSha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+        "id": "ecommerce.progression-depth3",
+        "version": "2.0.1"
+      },
+      "schemaVersion": 2,
+      "stack": {
+        "id": "postgres",
+        "reference": {
+          "id": "ecommerce-reference-postgres",
+          "sourceSha256": "f8f6152cebd68acc2af46a3e4cbf208664db17a7db58e0276d8e10ea6750aaf5"
+        },
+        "version": "1.3.0"
+      },
+      "sha256": "e53420120b3f74ee9267baaf4ac4e3714de205fb992b79af937b6424f941b709"
+    },
+    "mutationControl": true,
+    "qualifiedCheckKeys": [
+      "ecommerce.feature.accounts.accounts.1a",
+      "ecommerce.feature.accounts.accounts.1b",
+      "ecommerce.feature.accounts.accounts.1c",
+      "ecommerce.feature.accounts.accounts.1d",
+      "ecommerce.feature.cart-checkout.cart.4a",
+      "ecommerce.feature.cart-checkout.cart.4d",
+      "ecommerce.feature.catalog.catalog-ranking.2b",
+      "ecommerce.feature.catalog.catalog-search.2d",
+      "ecommerce.feature.catalog.catalog-values.2a",
+      "ecommerce.feature.purchasing.purchase-order.3c",
+      "ecommerce.feature.reviews.reviews.6a",
+      "ecommerce.feature.warehouse-admin.access-boundary.7a",
+      "ecommerce.feature.warehouse-admin.admin-write.103a",
+      "ecommerce.feature.warehouse-admin.warehouse-stock.7c",
+      "ecommerce.feature.warehouse-admin.warehouse-view.7b",
+      "ecommerce.inventory-operations.operational-views.5a",
+      "ecommerce.inventory-operations.operational-views.5b",
+      "ecommerce.inventory-operations.operational-views.5c",
+      "ecommerce.inventory-operations.operational-views.5d",
+      "ecommerce.inventory-operations.stock-conservation.202a",
+      "ecommerce.inventory-operations.stock-conservation.202b",
+      "ecommerce.inventory-operations.stock-conservation.202c",
+      "ecommerce.inventory-operations.stock-conservation.202d",
+      "ecommerce.inventory-operations.warehouse-transfer.2a",
+      "ecommerce.inventory-operations.warehouse-transfer.2b",
+      "ecommerce.inventory-operations.warehouse-transfer.2c",
+      "ecommerce.l3.deferred-access.scheduled-work-access.317a",
+      "ecommerce.l3.deferred-durability.restart-survival.311a",
+      "ecommerce.l3.deferred-integrity.exactly-once.311a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.302a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.305a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.306a",
+      "ecommerce.l3.server-time.server-time.312a",
+      "ecommerce.operations-access.fulfilment-queue.1a",
+      "ecommerce.operations-access.fulfilment-queue.1b",
+      "ecommerce.operations-access.fulfilment-queue.1c",
+      "ecommerce.operations-access.fulfilment-queue.1d",
+      "ecommerce.operations-access.operator-authorization.201a",
+      "ecommerce.operations-access.operator-authorization.201c",
+      "ecommerce.operations-access.order-owner.204a",
+      "ecommerce.progression.catalog-management.catalog-management.622a",
+      "ecommerce.progression.catalog-management.catalog-management.622b",
+      "ecommerce.progression.customer-profile.customer-profile.620a",
+      "ecommerce.progression.customer-profile.customer-profile.620b",
+      "ecommerce.progression.faceted-search.faceted-search.401a",
+      "ecommerce.progression.faceted-search.faceted-search.402a",
+      "ecommerce.progression.managed-support.managed-support-privacy.613b",
+      "ecommerce.progression.managed-support.managed-support-shared.613a",
+      "ecommerce.progression.notification-preferences.notification-preferences-persistence.630a",
+      "ecommerce.progression.notification-preferences.notification-preferences-privacy.630b",
+      "ecommerce.progression.promotion-rules.promotion-rule-access.620b",
+      "ecommerce.progression.promotion-rules.promotion-rule-values.620a",
+      "ecommerce.progression.staff-access.staff-access.601a",
+      "ecommerce.progression.staff-access.staff-access.601b",
+      "ecommerce.progression.staff-roles.staff-roles.621a",
+      "ecommerce.progression.staff-roles.staff-roles.621b",
+      "ecommerce.progression.stock-alerts.stock-alert-delivery.631a",
+      "ecommerce.progression.stock-alerts.stock-alert-privacy.631b",
+      "ecommerce.progression.support-history.support-history-persistence.612a",
+      "ecommerce.progression.support-history.support-history-privacy.612b",
+      "ecommerce.progression.support-intake.support-intake.610a",
+      "ecommerce.progression.support-triage.support-assignment.611a",
+      "ecommerce.progression.support-triage.support-priority.611b",
+      "ecommerce.progression.support-triage.support-status.611c",
+      "ecommerce.returns-pricing.cancellation-and-return.3a",
+      "ecommerce.returns-pricing.cancellation-and-return.3b",
+      "ecommerce.returns-pricing.refund-accounting.203a",
+      "ecommerce.spec.access-control.cart-boundary.109a",
+      "ecommerce.spec.access-control.cart-boundary.109b",
+      "ecommerce.spec.access-control.order-ownership.106a",
+      "ecommerce.spec.access-control.purchase-attribution.102a",
+      "ecommerce.spec.access-control.purchase-session.101a",
+      "ecommerce.spec.access-control.review-eligibility.108a",
+      "ecommerce.spec.access-control.review-eligibility.108b",
+      "ecommerce.spec.access-control.signed-out-purchase.3a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203b",
+      "ecommerce.spec.concurrency-safety.last-unit.201a",
+      "ecommerce.spec.concurrency-safety.last-unit.201b",
+      "ecommerce.spec.concurrency-safety.last-unit.201c",
+      "ecommerce.spec.concurrency-safety.restock-race.202a",
+      "ecommerce.spec.external-data-sync.external-stock.901a",
+      "ecommerce.spec.external-data-sync.external-stock.901c",
+      "ecommerce.spec.external-data-sync.external-stock.901d",
+      "ecommerce.spec.live-state.open-list.902a",
+      "ecommerce.spec.live-state.purchase-stock.3b",
+      "ecommerce.spec.live-state.ranking.2c",
+      "ecommerce.spec.live-state.rating.6c",
+      "ecommerce.spec.live-state.shared-cart.4c",
+      "ecommerce.spec.state-durability.account-state-recovery.105a",
+      "ecommerce.spec.state-durability.account-state-recovery.105b",
+      "ecommerce.spec.state-durability.cart-reload.4b",
+      "ecommerce.spec.state-durability.session-reload.1e",
+      "ecommerce.spec.transactional-integrity.books-balance.107a",
+      "ecommerce.spec.transactional-integrity.books-balance.107b",
+      "ecommerce.spec.transactional-integrity.server-price.104a",
+      "ecommerce.spec.transactional-integrity.unique-review.6b"
+    ],
+    "runs": [
+      {
+        "repetition": 1,
+        "processError": null,
+        "harnessSha256Before": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "harnessSha256After": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "ok": true,
+        "failures": [],
+        "score": "162/162",
+        "imageId": "sha256:eccec6ea3861befc3ef0a05beb3f8ac13e0af2d0a1ef77c1a7beb3c0eb2aa075",
+        "criteria": 97,
+        "zeroPointCriteria": 0,
+        "outcome": "passed",
+        "packRuntime": {
+          "packs": [
+            {
+              "id": "ecommerce.feature.accounts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.cart",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-discovery",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-items",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.checkout",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.purchasing",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.reviews",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.warehouse-admin",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.inventory-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.order-cancellation-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.recommendations",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.sales-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.stock-transfers-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-durability-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-integrity-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.scheduled-restocks-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.server-time-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.cancellation-accounting-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.catalog-management",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.customer-profile",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.faceted-search",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.fulfilment-queue",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.inventory-conservation-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.managed-support",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.notification-preferences",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.operations-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.promotion-rules",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-access",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-roles",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.stock-alerts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-history",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-intake",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-triage",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.access-control",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.concurrency-safety",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.external-data-sync",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.live-state",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.state-durability",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.transactional-integrity",
+              "exceeded": false
+            }
+          ]
+        },
+        "mutations": {
+          "caught": 92,
+          "total": 92
+        }
+      }
+    ],
+    "stable": true,
+    "sameImage": true,
+    "sameHarness": true,
+    "harnessSha256": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+    "ok": true
+  }
+}
diff --git a/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/postgres-reference.json b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/postgres-reference.json
new file mode 100644
index 00000000000..4815a24c19b
--- /dev/null
+++ b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/postgres-reference.json
@@ -0,0 +1,372 @@
+{
+  "artifactSchemaVersion": 2,
+  "kind": "reference_qualification",
+  "id": "reference-live-postgres-20260831090828-14-reference",
+  "attempt": {
+    "id": "reference-live-postgres-20260831090828-14-reference",
+    "parentId": null
+  },
+  "timestamps": {
+    "startedAt": "2026-08-31T09:08:28.070Z",
+    "completedAt": "2026-08-31T09:32:37.416Z"
+  },
+  "identities": {
+    "engine": {
+      "id": "stack-bench",
+      "version": null,
+      "sha256": "39da14d55d1ca82f41d18305dcb3e86aa7d5098c69a2bf6ba74533affbfbecc9",
+      "state": null
+    },
+    "recipe": {
+      "id": "ecommerce.progression-depth3",
+      "version": "2.0.1",
+      "sha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+      "state": "qualified"
+    },
+    "fixture": {
+      "id": "ecommerce-reference-postgres",
+      "version": null,
+      "sha256": "f8f6152cebd68acc2af46a3e4cbf208664db17a7db58e0276d8e10ea6750aaf5",
+      "state": "active"
+    },
+    "calibration": {
+      "id": "ecommerce.progression-depth3-calibration",
+      "version": "2.0.1",
+      "sha256": "dd91493c5066018cbfd949d6e14d64dc029deb634e93d796752caee3da97682c",
+      "state": "draft"
+    },
+    "experiment": null,
+    "agentAdapter": null,
+    "stackAdapter": {
+      "id": "postgres",
+      "version": null,
+      "sha256": null,
+      "state": null
+    },
+    "packs": []
+  },
+  "payload": {
+    "fixture": "ecommerce-reference-postgres",
+    "fixtureSha256": "f8f6152cebd68acc2af46a3e4cbf208664db17a7db58e0276d8e10ea6750aaf5",
+    "requiredRepetitions": 1,
+    "isolation": "docker",
+    "runner": {
+      "schemaVersion": 1,
+      "mode": "appliance",
+      "platform": "linux",
+      "architecture": "x64",
+      "dockerEngineVersion": "29.6.2",
+      "dockerOs": "linux",
+      "dockerArchitecture": "x86_64",
+      "kernelVersion": "6.6.87.2-microsoft-standard-WSL2",
+      "cpuCount": 32,
+      "memoryBytes": 49232838656
+    },
+    "qualificationScope": {
+      "checksSha256": "a982217993be2d229e13b4006427ce15666263d1d6e333eb241c4431df59cdf7",
+      "executableSha256": "10f59cd1c82887afe4a34fe58383e2d195abf5e9850711f28d0e4ef3c7b2dec9",
+      "kind": "reference",
+      "mutationSha256": null,
+      "recipe": {
+        "contentSha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+        "id": "ecommerce.progression-depth3",
+        "version": "2.0.1"
+      },
+      "schemaVersion": 2,
+      "stack": {
+        "id": "postgres",
+        "reference": {
+          "id": "ecommerce-reference-postgres",
+          "sourceSha256": "f8f6152cebd68acc2af46a3e4cbf208664db17a7db58e0276d8e10ea6750aaf5"
+        },
+        "version": "1.3.0"
+      },
+      "sha256": "4ffd5ac32ec6379796867f311f9013178dfb0587c3242d2ba061d554abae2a01"
+    },
+    "mutationControl": false,
+    "qualifiedCheckKeys": [
+      "ecommerce.feature.accounts.accounts.1a",
+      "ecommerce.feature.accounts.accounts.1b",
+      "ecommerce.feature.accounts.accounts.1c",
+      "ecommerce.feature.accounts.accounts.1d",
+      "ecommerce.feature.cart-checkout.cart.4a",
+      "ecommerce.feature.cart-checkout.cart.4d",
+      "ecommerce.feature.catalog.catalog-ranking.2b",
+      "ecommerce.feature.catalog.catalog-search.2d",
+      "ecommerce.feature.catalog.catalog-values.2a",
+      "ecommerce.feature.purchasing.purchase-order.3c",
+      "ecommerce.feature.reviews.reviews.6a",
+      "ecommerce.feature.warehouse-admin.access-boundary.7a",
+      "ecommerce.feature.warehouse-admin.admin-write.103a",
+      "ecommerce.feature.warehouse-admin.warehouse-stock.7c",
+      "ecommerce.feature.warehouse-admin.warehouse-view.7b",
+      "ecommerce.inventory-operations.operational-views.5a",
+      "ecommerce.inventory-operations.operational-views.5b",
+      "ecommerce.inventory-operations.operational-views.5c",
+      "ecommerce.inventory-operations.operational-views.5d",
+      "ecommerce.inventory-operations.stock-conservation.202a",
+      "ecommerce.inventory-operations.stock-conservation.202b",
+      "ecommerce.inventory-operations.stock-conservation.202c",
+      "ecommerce.inventory-operations.stock-conservation.202d",
+      "ecommerce.inventory-operations.warehouse-transfer.2a",
+      "ecommerce.inventory-operations.warehouse-transfer.2b",
+      "ecommerce.inventory-operations.warehouse-transfer.2c",
+      "ecommerce.l3.deferred-access.scheduled-work-access.317a",
+      "ecommerce.l3.deferred-durability.restart-survival.311a",
+      "ecommerce.l3.deferred-integrity.exactly-once.311a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.302a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.305a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.306a",
+      "ecommerce.l3.server-time.server-time.312a",
+      "ecommerce.operations-access.fulfilment-queue.1a",
+      "ecommerce.operations-access.fulfilment-queue.1b",
+      "ecommerce.operations-access.fulfilment-queue.1c",
+      "ecommerce.operations-access.fulfilment-queue.1d",
+      "ecommerce.operations-access.operator-authorization.201a",
+      "ecommerce.operations-access.operator-authorization.201c",
+      "ecommerce.operations-access.order-owner.204a",
+      "ecommerce.progression.catalog-management.catalog-management.622a",
+      "ecommerce.progression.catalog-management.catalog-management.622b",
+      "ecommerce.progression.customer-profile.customer-profile.620a",
+      "ecommerce.progression.customer-profile.customer-profile.620b",
+      "ecommerce.progression.faceted-search.faceted-search.401a",
+      "ecommerce.progression.faceted-search.faceted-search.402a",
+      "ecommerce.progression.managed-support.managed-support-privacy.613b",
+      "ecommerce.progression.managed-support.managed-support-shared.613a",
+      "ecommerce.progression.notification-preferences.notification-preferences-persistence.630a",
+      "ecommerce.progression.notification-preferences.notification-preferences-privacy.630b",
+      "ecommerce.progression.promotion-rules.promotion-rule-access.620b",
+      "ecommerce.progression.promotion-rules.promotion-rule-values.620a",
+      "ecommerce.progression.staff-access.staff-access.601a",
+      "ecommerce.progression.staff-access.staff-access.601b",
+      "ecommerce.progression.staff-roles.staff-roles.621a",
+      "ecommerce.progression.staff-roles.staff-roles.621b",
+      "ecommerce.progression.stock-alerts.stock-alert-delivery.631a",
+      "ecommerce.progression.stock-alerts.stock-alert-privacy.631b",
+      "ecommerce.progression.support-history.support-history-persistence.612a",
+      "ecommerce.progression.support-history.support-history-privacy.612b",
+      "ecommerce.progression.support-intake.support-intake.610a",
+      "ecommerce.progression.support-triage.support-assignment.611a",
+      "ecommerce.progression.support-triage.support-priority.611b",
+      "ecommerce.progression.support-triage.support-status.611c",
+      "ecommerce.returns-pricing.cancellation-and-return.3a",
+      "ecommerce.returns-pricing.cancellation-and-return.3b",
+      "ecommerce.returns-pricing.refund-accounting.203a",
+      "ecommerce.spec.access-control.cart-boundary.109a",
+      "ecommerce.spec.access-control.cart-boundary.109b",
+      "ecommerce.spec.access-control.order-ownership.106a",
+      "ecommerce.spec.access-control.purchase-attribution.102a",
+      "ecommerce.spec.access-control.purchase-session.101a",
+      "ecommerce.spec.access-control.review-eligibility.108a",
+      "ecommerce.spec.access-control.review-eligibility.108b",
+      "ecommerce.spec.access-control.signed-out-purchase.3a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203b",
+      "ecommerce.spec.concurrency-safety.last-unit.201a",
+      "ecommerce.spec.concurrency-safety.last-unit.201b",
+      "ecommerce.spec.concurrency-safety.last-unit.201c",
+      "ecommerce.spec.concurrency-safety.restock-race.202a",
+      "ecommerce.spec.external-data-sync.external-stock.901a",
+      "ecommerce.spec.external-data-sync.external-stock.901c",
+      "ecommerce.spec.external-data-sync.external-stock.901d",
+      "ecommerce.spec.live-state.open-list.902a",
+      "ecommerce.spec.live-state.purchase-stock.3b",
+      "ecommerce.spec.live-state.ranking.2c",
+      "ecommerce.spec.live-state.rating.6c",
+      "ecommerce.spec.live-state.shared-cart.4c",
+      "ecommerce.spec.state-durability.account-state-recovery.105a",
+      "ecommerce.spec.state-durability.account-state-recovery.105b",
+      "ecommerce.spec.state-durability.cart-reload.4b",
+      "ecommerce.spec.state-durability.session-reload.1e",
+      "ecommerce.spec.transactional-integrity.books-balance.107a",
+      "ecommerce.spec.transactional-integrity.books-balance.107b",
+      "ecommerce.spec.transactional-integrity.server-price.104a",
+      "ecommerce.spec.transactional-integrity.unique-review.6b"
+    ],
+    "runs": [
+      {
+        "repetition": 1,
+        "processError": null,
+        "harnessSha256Before": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "harnessSha256After": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "ok": true,
+        "failures": [],
+        "score": "162/162",
+        "imageId": "sha256:eccec6ea3861befc3ef0a05beb3f8ac13e0af2d0a1ef77c1a7beb3c0eb2aa075",
+        "criteria": 97,
+        "zeroPointCriteria": 0,
+        "outcome": "passed",
+        "packRuntime": {
+          "packs": [
+            {
+              "id": "ecommerce.feature.accounts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.cart",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-discovery",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-items",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.checkout",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.purchasing",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.reviews",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.warehouse-admin",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.inventory-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.order-cancellation-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.recommendations",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.sales-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.stock-transfers-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-durability-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-integrity-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.scheduled-restocks-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.server-time-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.cancellation-accounting-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.catalog-management",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.customer-profile",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.faceted-search",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.fulfilment-queue",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.inventory-conservation-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.managed-support",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.notification-preferences",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.operations-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.promotion-rules",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-access",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-roles",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.stock-alerts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-history",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-intake",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-triage",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.access-control",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.concurrency-safety",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.external-data-sync",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.live-state",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.state-durability",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.transactional-integrity",
+              "exceeded": false
+            }
+          ]
+        },
+        "mutations": null
+      }
+    ],
+    "stable": true,
+    "sameImage": true,
+    "sameHarness": true,
+    "harnessSha256": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+    "ok": true
+  }
+}
diff --git a/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/spacetime-mutation.json b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/spacetime-mutation.json
new file mode 100644
index 00000000000..6fde26cc811
--- /dev/null
+++ b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/spacetime-mutation.json
@@ -0,0 +1,375 @@
+{
+  "artifactSchemaVersion": 2,
+  "kind": "reference_qualification",
+  "id": "reference-live-spacetime-20260831090827-14",
+  "attempt": {
+    "id": "reference-live-spacetime-20260831090827-14",
+    "parentId": null
+  },
+  "timestamps": {
+    "startedAt": "2026-08-31T09:08:27.717Z",
+    "completedAt": "2026-08-31T09:29:23.477Z"
+  },
+  "identities": {
+    "engine": {
+      "id": "stack-bench",
+      "version": null,
+      "sha256": "39da14d55d1ca82f41d18305dcb3e86aa7d5098c69a2bf6ba74533affbfbecc9",
+      "state": null
+    },
+    "recipe": {
+      "id": "ecommerce.progression-depth3",
+      "version": "2.0.1",
+      "sha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+      "state": "qualified"
+    },
+    "fixture": {
+      "id": "ecommerce-reference-spacetime",
+      "version": null,
+      "sha256": "8806e01bcd4d44fa7c7c491f722c2412d568605a9d666545dafcc0bdf2a2b4f5",
+      "state": "active"
+    },
+    "calibration": {
+      "id": "ecommerce.progression-depth3-calibration",
+      "version": "2.0.1",
+      "sha256": "dd91493c5066018cbfd949d6e14d64dc029deb634e93d796752caee3da97682c",
+      "state": "draft"
+    },
+    "experiment": null,
+    "agentAdapter": null,
+    "stackAdapter": {
+      "id": "spacetime",
+      "version": null,
+      "sha256": null,
+      "state": null
+    },
+    "packs": []
+  },
+  "payload": {
+    "fixture": "ecommerce-reference-spacetime",
+    "fixtureSha256": "8806e01bcd4d44fa7c7c491f722c2412d568605a9d666545dafcc0bdf2a2b4f5",
+    "requiredRepetitions": 1,
+    "isolation": "docker",
+    "runner": {
+      "schemaVersion": 1,
+      "mode": "appliance",
+      "platform": "linux",
+      "architecture": "x64",
+      "dockerEngineVersion": "29.6.2",
+      "dockerOs": "linux",
+      "dockerArchitecture": "x86_64",
+      "kernelVersion": "6.6.87.2-microsoft-standard-WSL2",
+      "cpuCount": 32,
+      "memoryBytes": 49232838656
+    },
+    "qualificationScope": {
+      "checksSha256": "a982217993be2d229e13b4006427ce15666263d1d6e333eb241c4431df59cdf7",
+      "executableSha256": "3d512023e270c2b55c1c1eeeee70b1b6d70261814754e24b618f5c66bd086a0a",
+      "kind": "mutation",
+      "mutationSha256": "75829fe1839442ba6f4c4385ca89583ac7e287b077878850d463615b19752cb9",
+      "recipe": {
+        "contentSha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+        "id": "ecommerce.progression-depth3",
+        "version": "2.0.1"
+      },
+      "schemaVersion": 2,
+      "stack": {
+        "id": "spacetime",
+        "reference": {
+          "id": "ecommerce-reference-spacetime",
+          "sourceSha256": "8806e01bcd4d44fa7c7c491f722c2412d568605a9d666545dafcc0bdf2a2b4f5"
+        },
+        "version": "1.0.0"
+      },
+      "sha256": "9666859fecd693bca13467e59a649fc286ca42a1f9ed118073d32effd43129c5"
+    },
+    "mutationControl": true,
+    "qualifiedCheckKeys": [
+      "ecommerce.feature.accounts.accounts.1a",
+      "ecommerce.feature.accounts.accounts.1b",
+      "ecommerce.feature.accounts.accounts.1c",
+      "ecommerce.feature.accounts.accounts.1d",
+      "ecommerce.feature.cart-checkout.cart.4a",
+      "ecommerce.feature.cart-checkout.cart.4d",
+      "ecommerce.feature.catalog.catalog-ranking.2b",
+      "ecommerce.feature.catalog.catalog-search.2d",
+      "ecommerce.feature.catalog.catalog-values.2a",
+      "ecommerce.feature.purchasing.purchase-order.3c",
+      "ecommerce.feature.reviews.reviews.6a",
+      "ecommerce.feature.warehouse-admin.access-boundary.7a",
+      "ecommerce.feature.warehouse-admin.admin-write.103a",
+      "ecommerce.feature.warehouse-admin.warehouse-stock.7c",
+      "ecommerce.feature.warehouse-admin.warehouse-view.7b",
+      "ecommerce.inventory-operations.operational-views.5a",
+      "ecommerce.inventory-operations.operational-views.5b",
+      "ecommerce.inventory-operations.operational-views.5c",
+      "ecommerce.inventory-operations.operational-views.5d",
+      "ecommerce.inventory-operations.stock-conservation.202a",
+      "ecommerce.inventory-operations.stock-conservation.202b",
+      "ecommerce.inventory-operations.stock-conservation.202c",
+      "ecommerce.inventory-operations.stock-conservation.202d",
+      "ecommerce.inventory-operations.warehouse-transfer.2a",
+      "ecommerce.inventory-operations.warehouse-transfer.2b",
+      "ecommerce.inventory-operations.warehouse-transfer.2c",
+      "ecommerce.l3.deferred-access.scheduled-work-access.317a",
+      "ecommerce.l3.deferred-durability.restart-survival.311a",
+      "ecommerce.l3.deferred-integrity.exactly-once.311a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.302a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.305a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.306a",
+      "ecommerce.l3.server-time.server-time.312a",
+      "ecommerce.operations-access.fulfilment-queue.1a",
+      "ecommerce.operations-access.fulfilment-queue.1b",
+      "ecommerce.operations-access.fulfilment-queue.1c",
+      "ecommerce.operations-access.fulfilment-queue.1d",
+      "ecommerce.operations-access.operator-authorization.201a",
+      "ecommerce.operations-access.operator-authorization.201c",
+      "ecommerce.operations-access.order-owner.204a",
+      "ecommerce.progression.catalog-management.catalog-management.622a",
+      "ecommerce.progression.catalog-management.catalog-management.622b",
+      "ecommerce.progression.customer-profile.customer-profile.620a",
+      "ecommerce.progression.customer-profile.customer-profile.620b",
+      "ecommerce.progression.faceted-search.faceted-search.401a",
+      "ecommerce.progression.faceted-search.faceted-search.402a",
+      "ecommerce.progression.managed-support.managed-support-privacy.613b",
+      "ecommerce.progression.managed-support.managed-support-shared.613a",
+      "ecommerce.progression.notification-preferences.notification-preferences-persistence.630a",
+      "ecommerce.progression.notification-preferences.notification-preferences-privacy.630b",
+      "ecommerce.progression.promotion-rules.promotion-rule-access.620b",
+      "ecommerce.progression.promotion-rules.promotion-rule-values.620a",
+      "ecommerce.progression.staff-access.staff-access.601a",
+      "ecommerce.progression.staff-access.staff-access.601b",
+      "ecommerce.progression.staff-roles.staff-roles.621a",
+      "ecommerce.progression.staff-roles.staff-roles.621b",
+      "ecommerce.progression.stock-alerts.stock-alert-delivery.631a",
+      "ecommerce.progression.stock-alerts.stock-alert-privacy.631b",
+      "ecommerce.progression.support-history.support-history-persistence.612a",
+      "ecommerce.progression.support-history.support-history-privacy.612b",
+      "ecommerce.progression.support-intake.support-intake.610a",
+      "ecommerce.progression.support-triage.support-assignment.611a",
+      "ecommerce.progression.support-triage.support-priority.611b",
+      "ecommerce.progression.support-triage.support-status.611c",
+      "ecommerce.returns-pricing.cancellation-and-return.3a",
+      "ecommerce.returns-pricing.cancellation-and-return.3b",
+      "ecommerce.returns-pricing.refund-accounting.203a",
+      "ecommerce.spec.access-control.cart-boundary.109a",
+      "ecommerce.spec.access-control.cart-boundary.109b",
+      "ecommerce.spec.access-control.order-ownership.106a",
+      "ecommerce.spec.access-control.purchase-attribution.102a",
+      "ecommerce.spec.access-control.purchase-session.101a",
+      "ecommerce.spec.access-control.review-eligibility.108a",
+      "ecommerce.spec.access-control.review-eligibility.108b",
+      "ecommerce.spec.access-control.signed-out-purchase.3a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203b",
+      "ecommerce.spec.concurrency-safety.last-unit.201a",
+      "ecommerce.spec.concurrency-safety.last-unit.201b",
+      "ecommerce.spec.concurrency-safety.last-unit.201c",
+      "ecommerce.spec.concurrency-safety.restock-race.202a",
+      "ecommerce.spec.external-data-sync.external-stock.901a",
+      "ecommerce.spec.external-data-sync.external-stock.901c",
+      "ecommerce.spec.external-data-sync.external-stock.901d",
+      "ecommerce.spec.live-state.open-list.902a",
+      "ecommerce.spec.live-state.purchase-stock.3b",
+      "ecommerce.spec.live-state.ranking.2c",
+      "ecommerce.spec.live-state.rating.6c",
+      "ecommerce.spec.live-state.shared-cart.4c",
+      "ecommerce.spec.state-durability.account-state-recovery.105a",
+      "ecommerce.spec.state-durability.account-state-recovery.105b",
+      "ecommerce.spec.state-durability.cart-reload.4b",
+      "ecommerce.spec.state-durability.session-reload.1e",
+      "ecommerce.spec.transactional-integrity.books-balance.107a",
+      "ecommerce.spec.transactional-integrity.books-balance.107b",
+      "ecommerce.spec.transactional-integrity.server-price.104a",
+      "ecommerce.spec.transactional-integrity.unique-review.6b"
+    ],
+    "runs": [
+      {
+        "repetition": 1,
+        "processError": null,
+        "harnessSha256Before": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "harnessSha256After": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "ok": true,
+        "failures": [],
+        "score": "162/162",
+        "imageId": "sha256:eccec6ea3861befc3ef0a05beb3f8ac13e0af2d0a1ef77c1a7beb3c0eb2aa075",
+        "criteria": 97,
+        "zeroPointCriteria": 0,
+        "outcome": "passed",
+        "packRuntime": {
+          "packs": [
+            {
+              "id": "ecommerce.feature.accounts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.cart",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-discovery",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-items",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.checkout",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.purchasing",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.reviews",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.warehouse-admin",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.inventory-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.order-cancellation-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.recommendations",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.sales-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.stock-transfers-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-durability-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-integrity-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.scheduled-restocks-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.server-time-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.cancellation-accounting-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.catalog-management",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.customer-profile",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.faceted-search",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.fulfilment-queue",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.inventory-conservation-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.managed-support",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.notification-preferences",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.operations-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.promotion-rules",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-access",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-roles",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.stock-alerts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-history",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-intake",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-triage",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.access-control",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.concurrency-safety",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.external-data-sync",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.live-state",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.state-durability",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.transactional-integrity",
+              "exceeded": false
+            }
+          ]
+        },
+        "mutations": {
+          "caught": 97,
+          "total": 97
+        }
+      }
+    ],
+    "stable": true,
+    "sameImage": true,
+    "sameHarness": true,
+    "harnessSha256": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+    "ok": true
+  }
+}
diff --git a/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/spacetime-reference.json b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/spacetime-reference.json
new file mode 100644
index 00000000000..26cea0e8d56
--- /dev/null
+++ b/tools/stack-bench/qualification-evidence/ecommerce-progression-depth3-2.0.1/spacetime-reference.json
@@ -0,0 +1,372 @@
+{
+  "artifactSchemaVersion": 2,
+  "kind": "reference_qualification",
+  "id": "reference-live-spacetime-20260831090827-14-reference",
+  "attempt": {
+    "id": "reference-live-spacetime-20260831090827-14-reference",
+    "parentId": null
+  },
+  "timestamps": {
+    "startedAt": "2026-08-31T09:08:27.717Z",
+    "completedAt": "2026-08-31T09:29:23.478Z"
+  },
+  "identities": {
+    "engine": {
+      "id": "stack-bench",
+      "version": null,
+      "sha256": "39da14d55d1ca82f41d18305dcb3e86aa7d5098c69a2bf6ba74533affbfbecc9",
+      "state": null
+    },
+    "recipe": {
+      "id": "ecommerce.progression-depth3",
+      "version": "2.0.1",
+      "sha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+      "state": "qualified"
+    },
+    "fixture": {
+      "id": "ecommerce-reference-spacetime",
+      "version": null,
+      "sha256": "8806e01bcd4d44fa7c7c491f722c2412d568605a9d666545dafcc0bdf2a2b4f5",
+      "state": "active"
+    },
+    "calibration": {
+      "id": "ecommerce.progression-depth3-calibration",
+      "version": "2.0.1",
+      "sha256": "dd91493c5066018cbfd949d6e14d64dc029deb634e93d796752caee3da97682c",
+      "state": "draft"
+    },
+    "experiment": null,
+    "agentAdapter": null,
+    "stackAdapter": {
+      "id": "spacetime",
+      "version": null,
+      "sha256": null,
+      "state": null
+    },
+    "packs": []
+  },
+  "payload": {
+    "fixture": "ecommerce-reference-spacetime",
+    "fixtureSha256": "8806e01bcd4d44fa7c7c491f722c2412d568605a9d666545dafcc0bdf2a2b4f5",
+    "requiredRepetitions": 1,
+    "isolation": "docker",
+    "runner": {
+      "schemaVersion": 1,
+      "mode": "appliance",
+      "platform": "linux",
+      "architecture": "x64",
+      "dockerEngineVersion": "29.6.2",
+      "dockerOs": "linux",
+      "dockerArchitecture": "x86_64",
+      "kernelVersion": "6.6.87.2-microsoft-standard-WSL2",
+      "cpuCount": 32,
+      "memoryBytes": 49232838656
+    },
+    "qualificationScope": {
+      "checksSha256": "a982217993be2d229e13b4006427ce15666263d1d6e333eb241c4431df59cdf7",
+      "executableSha256": "9cdd1c8cccaf7ecd5e5d3039b0a0cf5c41a42c355ab085d9816b2d064706c2b9",
+      "kind": "reference",
+      "mutationSha256": null,
+      "recipe": {
+        "contentSha256": "4c808d5e5fb076ff0993937d7a9f940dad4191351c362518e1c667a34324bd49",
+        "id": "ecommerce.progression-depth3",
+        "version": "2.0.1"
+      },
+      "schemaVersion": 2,
+      "stack": {
+        "id": "spacetime",
+        "reference": {
+          "id": "ecommerce-reference-spacetime",
+          "sourceSha256": "8806e01bcd4d44fa7c7c491f722c2412d568605a9d666545dafcc0bdf2a2b4f5"
+        },
+        "version": "1.0.0"
+      },
+      "sha256": "571714687a2bd1202e4a97268094411a979a6376069826475f73755c980761db"
+    },
+    "mutationControl": false,
+    "qualifiedCheckKeys": [
+      "ecommerce.feature.accounts.accounts.1a",
+      "ecommerce.feature.accounts.accounts.1b",
+      "ecommerce.feature.accounts.accounts.1c",
+      "ecommerce.feature.accounts.accounts.1d",
+      "ecommerce.feature.cart-checkout.cart.4a",
+      "ecommerce.feature.cart-checkout.cart.4d",
+      "ecommerce.feature.catalog.catalog-ranking.2b",
+      "ecommerce.feature.catalog.catalog-search.2d",
+      "ecommerce.feature.catalog.catalog-values.2a",
+      "ecommerce.feature.purchasing.purchase-order.3c",
+      "ecommerce.feature.reviews.reviews.6a",
+      "ecommerce.feature.warehouse-admin.access-boundary.7a",
+      "ecommerce.feature.warehouse-admin.admin-write.103a",
+      "ecommerce.feature.warehouse-admin.warehouse-stock.7c",
+      "ecommerce.feature.warehouse-admin.warehouse-view.7b",
+      "ecommerce.inventory-operations.operational-views.5a",
+      "ecommerce.inventory-operations.operational-views.5b",
+      "ecommerce.inventory-operations.operational-views.5c",
+      "ecommerce.inventory-operations.operational-views.5d",
+      "ecommerce.inventory-operations.stock-conservation.202a",
+      "ecommerce.inventory-operations.stock-conservation.202b",
+      "ecommerce.inventory-operations.stock-conservation.202c",
+      "ecommerce.inventory-operations.stock-conservation.202d",
+      "ecommerce.inventory-operations.warehouse-transfer.2a",
+      "ecommerce.inventory-operations.warehouse-transfer.2b",
+      "ecommerce.inventory-operations.warehouse-transfer.2c",
+      "ecommerce.l3.deferred-access.scheduled-work-access.317a",
+      "ecommerce.l3.deferred-durability.restart-survival.311a",
+      "ecommerce.l3.deferred-integrity.exactly-once.311a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.302a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.305a",
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.306a",
+      "ecommerce.l3.server-time.server-time.312a",
+      "ecommerce.operations-access.fulfilment-queue.1a",
+      "ecommerce.operations-access.fulfilment-queue.1b",
+      "ecommerce.operations-access.fulfilment-queue.1c",
+      "ecommerce.operations-access.fulfilment-queue.1d",
+      "ecommerce.operations-access.operator-authorization.201a",
+      "ecommerce.operations-access.operator-authorization.201c",
+      "ecommerce.operations-access.order-owner.204a",
+      "ecommerce.progression.catalog-management.catalog-management.622a",
+      "ecommerce.progression.catalog-management.catalog-management.622b",
+      "ecommerce.progression.customer-profile.customer-profile.620a",
+      "ecommerce.progression.customer-profile.customer-profile.620b",
+      "ecommerce.progression.faceted-search.faceted-search.401a",
+      "ecommerce.progression.faceted-search.faceted-search.402a",
+      "ecommerce.progression.managed-support.managed-support-privacy.613b",
+      "ecommerce.progression.managed-support.managed-support-shared.613a",
+      "ecommerce.progression.notification-preferences.notification-preferences-persistence.630a",
+      "ecommerce.progression.notification-preferences.notification-preferences-privacy.630b",
+      "ecommerce.progression.promotion-rules.promotion-rule-access.620b",
+      "ecommerce.progression.promotion-rules.promotion-rule-values.620a",
+      "ecommerce.progression.staff-access.staff-access.601a",
+      "ecommerce.progression.staff-access.staff-access.601b",
+      "ecommerce.progression.staff-roles.staff-roles.621a",
+      "ecommerce.progression.staff-roles.staff-roles.621b",
+      "ecommerce.progression.stock-alerts.stock-alert-delivery.631a",
+      "ecommerce.progression.stock-alerts.stock-alert-privacy.631b",
+      "ecommerce.progression.support-history.support-history-persistence.612a",
+      "ecommerce.progression.support-history.support-history-privacy.612b",
+      "ecommerce.progression.support-intake.support-intake.610a",
+      "ecommerce.progression.support-triage.support-assignment.611a",
+      "ecommerce.progression.support-triage.support-priority.611b",
+      "ecommerce.progression.support-triage.support-status.611c",
+      "ecommerce.returns-pricing.cancellation-and-return.3a",
+      "ecommerce.returns-pricing.cancellation-and-return.3b",
+      "ecommerce.returns-pricing.refund-accounting.203a",
+      "ecommerce.spec.access-control.cart-boundary.109a",
+      "ecommerce.spec.access-control.cart-boundary.109b",
+      "ecommerce.spec.access-control.order-ownership.106a",
+      "ecommerce.spec.access-control.purchase-attribution.102a",
+      "ecommerce.spec.access-control.purchase-session.101a",
+      "ecommerce.spec.access-control.review-eligibility.108a",
+      "ecommerce.spec.access-control.review-eligibility.108b",
+      "ecommerce.spec.access-control.signed-out-purchase.3a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203b",
+      "ecommerce.spec.concurrency-safety.last-unit.201a",
+      "ecommerce.spec.concurrency-safety.last-unit.201b",
+      "ecommerce.spec.concurrency-safety.last-unit.201c",
+      "ecommerce.spec.concurrency-safety.restock-race.202a",
+      "ecommerce.spec.external-data-sync.external-stock.901a",
+      "ecommerce.spec.external-data-sync.external-stock.901c",
+      "ecommerce.spec.external-data-sync.external-stock.901d",
+      "ecommerce.spec.live-state.open-list.902a",
+      "ecommerce.spec.live-state.purchase-stock.3b",
+      "ecommerce.spec.live-state.ranking.2c",
+      "ecommerce.spec.live-state.rating.6c",
+      "ecommerce.spec.live-state.shared-cart.4c",
+      "ecommerce.spec.state-durability.account-state-recovery.105a",
+      "ecommerce.spec.state-durability.account-state-recovery.105b",
+      "ecommerce.spec.state-durability.cart-reload.4b",
+      "ecommerce.spec.state-durability.session-reload.1e",
+      "ecommerce.spec.transactional-integrity.books-balance.107a",
+      "ecommerce.spec.transactional-integrity.books-balance.107b",
+      "ecommerce.spec.transactional-integrity.server-price.104a",
+      "ecommerce.spec.transactional-integrity.unique-review.6b"
+    ],
+    "runs": [
+      {
+        "repetition": 1,
+        "processError": null,
+        "harnessSha256Before": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "harnessSha256After": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+        "ok": true,
+        "failures": [],
+        "score": "162/162",
+        "imageId": "sha256:eccec6ea3861befc3ef0a05beb3f8ac13e0af2d0a1ef77c1a7beb3c0eb2aa075",
+        "criteria": 97,
+        "zeroPointCriteria": 0,
+        "outcome": "passed",
+        "packRuntime": {
+          "packs": [
+            {
+              "id": "ecommerce.feature.accounts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.cart",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-discovery",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.catalog-items",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.checkout",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.purchasing",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.reviews",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.feature.warehouse-admin",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.inventory-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.order-cancellation-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.recommendations",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.sales-dashboard",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l2.stock-transfers-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-durability-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.deferred-integrity-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.scheduled-restocks-features",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.l3.server-time-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.cancellation-accounting-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.catalog-management",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.customer-profile",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.faceted-search",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.fulfilment-queue",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.inventory-conservation-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.managed-support",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.notification-preferences",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.operations-access-specifications",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.promotion-rules",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-access",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.staff-roles",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.stock-alerts",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-history",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-intake",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.progression.support-triage",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.access-control",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.concurrency-safety",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.external-data-sync",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.live-state",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.state-durability",
+              "exceeded": false
+            },
+            {
+              "id": "ecommerce.spec.transactional-integrity",
+              "exceeded": false
+            }
+          ]
+        },
+        "mutations": null
+      }
+    ],
+    "stable": true,
+    "sameImage": true,
+    "sameHarness": true,
+    "harnessSha256": "55130157ba3c8b6364c6e8f0a9453479a4d8c7ecaa50cfaec92953bde488b13e",
+    "ok": true
+  }
+}
diff --git a/tools/stack-bench/reference-apps/README.md b/tools/stack-bench/reference-apps/README.md
new file mode 100644
index 00000000000..7993b1c3d4d
--- /dev/null
+++ b/tools/stack-bench/reference-apps/README.md
@@ -0,0 +1,68 @@
+# Reference applications
+
+Reference applications validate the grader. They are simple, auditable fixtures,
+not product examples or recommended application designs.
+
+`registry.json` is the source of truth for fixture identity and status:
+
+- `blocked`: no acceptable source and check set exists;
+- `candidate`: exact source is present, but qualification is incomplete;
+- `active`: the exact source passed its required reference and mutation gates.
+
+One cumulative source tree can serve several recipes when each registry entry
+binds the same source hash. Qualification evidence remains separate for each
+recipe and calibration.
+
+## Promotion requirements
+
+An active fixture must satisfy all of these conditions:
+
+1. Dependencies install from committed lockfiles in the benchmark build image.
+2. The app starts in Docker with run-specific ports and database or module names.
+3. Every required scored and supporting check passes for the exact recipe.
+4. The source contains no secrets, generated bindings, build output,
+   transcripts, grader output, or mutation backups.
+5. Each mutation has an exact source anchor and produces the intended conclusive
+   failure without unrelated failures.
+6. The registry records the qualified source hash.
+
+Compile success or an old full score does not promote a fixture.
+
+## Compile fixtures
+
+Run the model-free Docker compile check from `tools/stack-bench`:
+
+```bash
+npm run test:references
+```
+
+Compile one changed fixture with:
+
+```bash
+npm run test:references -- --fixture <fixture-id>
+```
+
+The command copies source into a temporary workspace. It does not edit the
+registered fixture. Compile success is not live grading evidence.
+
+## Live qualification
+
+Run the repetition plan declared by the selected calibration:
+
+```bash
+npm run qualify:reference -- --backend <mongodb|postgres|spacetime>
+```
+
+The qualifier binds the exact recipe, fixture, source, engine, image, stack,
+runner, and check identities. It also verifies lease and resource cleanup.
+
+Add `--mutations` only when mutation evidence is required. The qualifier first
+checks the clean baseline, then applies each selected defect through the same
+isolated Docker lifecycle.
+
+During development, select only affected defects with `--mutation-id <id>`.
+Targeted output is diagnostic evidence. The complete set requires
+`--release-candidate` and is used only for release qualification.
+
+Do not edit a registered reference during qualification. A changed source hash
+requires new evidence.
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/client/index.html b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/index.html
new file mode 100644
index 00000000000..8b77d8835cc
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/index.html
@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Storefront</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/client/package-lock.json b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/package-lock.json
new file mode 100644
index 00000000000..1c05ce6c7c3
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/package-lock.json
@@ -0,0 +1,1046 @@
+{
+  "name": "client",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "client",
+      "version": "1.0.0",
+      "dependencies": {
+        "react": "^18.3.1",
+        "react-dom": "^18.3.1",
+        "socket.io-client": "^4.7.5"
+      },
+      "devDependencies": {
+        "@types/react": "^18.3.3",
+        "@types/react-dom": "^18.3.0",
+        "@vitejs/plugin-react": "^6.1.0",
+        "typescript": "^5.5.3",
+        "vite": "^8.2.2"
+      }
+    },
+    "node_modules/@oxc-project/types": {
+      "version": "0.146.0",
+      "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.146.0.tgz",
+      "integrity": "sha512-XC0QsnnhVe7sLIWmYmdPw7x5P0h4W8vUU3Nv1ySgWXtvCz8NizoAEpGXA0sOYoJQV2Rl13LgURAHQ5cI5ILCSA==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/Boshen"
+      }
+    },
+    "node_modules/@rolldown/binding-android-arm-eabi": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.5.tgz",
+      "integrity": "sha512-DLe/i+l8ynIBY7XEQ191TeZvCoowIGa18R+dIV30GW7DiOtp74i/xX8hs8GUjW5ARV7VZuie3d6AumSmCwbeRA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-android-arm64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.5.tgz",
+      "integrity": "sha512-zXcwKlQApYAOELHd8PwKDFkagYF9Wy4e0RJ+0qnzl9Pjnpj75TEG8ufv40p2J7kCEfwZAsNiuzRIyNNMWT38ig==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-darwin-arm64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.5.tgz",
+      "integrity": "sha512-dK4QakI42nzWgJT5sm4y4y/O//D4OxM75/cH28RLV+nzIN9AY+YsbuUVrUTjlLjXR6vpyxFbSsbmNuJ6BP9sww==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-darwin-x64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.5.tgz",
+      "integrity": "sha512-fqSALaUu1Wjd1nK2uW2kJDWdLCc8lx1IcY+MTY26Aurfdx19anlzhqXOgCFbBFQnlFDTn4TC1/7Nz4Bl2mLP3A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-freebsd-x64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.5.tgz",
+      "integrity": "sha512-/vCnNxlkxs9tKxNDcyWUePpJ/PgTzxIaVhoM5SmG8UV+GR/IcPam4VYxi7GIMo7PSDuNqlJqvprqii9NqqVCMw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm-gnueabihf": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.5.tgz",
+      "integrity": "sha512-abk0NLA519LxRCszmbE0jYKuQ9YPocOXTiOXOo6Yr+YAT95VH+PtqYAjOJvGKt3viEd/x4qzabAlwd5bHOOARg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm64-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.5.tgz",
+      "integrity": "sha512-Y7eALiJ8lr0M2HH103Js+g7V34wf6snlpZLAsHI90uLhr3PVlNsbFVAXJC9d/V6BnPyKtpSwI+NcB/RLxsQxuA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm64-musl": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.5.tgz",
+      "integrity": "sha512-xMvZgnbZg4YVnR/AX2b3oOPDTFYJvUVaJg5FedA/LuvexAtXibZQej4cnTkw3rjsJ/ggUROB64TdtETiim+FYA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-ppc64-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.5.tgz",
+      "integrity": "sha512-GRjeqTUDHTo5GwntsLaAMcBahG3nlpjftXWZLN73HiYQlhwEowvarFgQnRnQZtIp4keXX7quXFbG38uPZBa2EA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-s390x-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.5.tgz",
+      "integrity": "sha512-vLNTR45F2Uwc8AufkNXPmB4VliaXs+FvcheEogIzOXzO4l+LzieXF5A/TWxLy5HtqpsRCHUfd0lPVrrdgXdLHQ==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-x64-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.5.tgz",
+      "integrity": "sha512-Mgj59/HTuYeK9Gz2MA+mBWKnHsAgkBSec15ZMb1st3oIfFbX7gCjOae7GydHhzcyQi9Z/7M1QuN9bR3oFqF0jQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-x64-musl": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.5.tgz",
+      "integrity": "sha512-mY8AP0/ichsbhAxGnLa3d3+MwV0EfgrPND2bplI3Ym8T6R2pJ0N87bvrKVwNXmdy3jnr6eQBecdqx/HMknBmpA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-openharmony-arm64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.5.tgz",
+      "integrity": "sha512-8SLssA2oweAxyRgDp789ACfRb/3P+zNRJpzZxSizxF9m8NUDQ4+3xjo8ttjhVGGw6Qxb70oZiEtIjaKikCO7Yw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-win32-arm64-msvc": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.5.tgz",
+      "integrity": "sha512-vGbruD5zquhoc8D9SViXgN2FBJtNdTyQ4DtG+SWiEGlJiAzoKcZ2xp+xuXCffhubVdt0NJlTZqkeRuERy7g8Cw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-win32-x64-msvc": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.5.tgz",
+      "integrity": "sha512-e/SXpgISz+IoqVcSSI0rx/d/he8zqLex+/rCWpnHpmVfmPIUjag9H6P7zotf0gJHwPUhQxZ/mF8tr6acebT9yw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/pluginutils": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz",
+      "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@socket.io/component-emitter": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/@socket.io/component-emitter/-/component-emitter-3.1.2.tgz",
+      "integrity": "sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA==",
+      "license": "MIT"
+    },
+    "node_modules/@types/prop-types": {
+      "version": "15.7.15",
+      "resolved": "https://registry.npmjs.org/@types/prop-types/-/prop-types-15.7.15.tgz",
+      "integrity": "sha512-F6bEyamV9jKGAFBEmlQnesRPGOQqS2+Uwi0Em15xenOxHaf2hv6L8YCVn3rPdPJOiJfPiCnLIRyvwVaqMY3MIw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/react": {
+      "version": "18.3.31",
+      "resolved": "https://registry.npmjs.org/@types/react/-/react-18.3.31.tgz",
+      "integrity": "sha512-vfEqpXTvwT91yhmwdfouStN2hSKwTvyRs8qpLfADyrq/kxDw0hZM7Wk9Ug1FELj8hIby+S/+kQCSRFF32nv2Qw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/prop-types": "*",
+        "csstype": "^3.2.2"
+      }
+    },
+    "node_modules/@types/react-dom": {
+      "version": "18.3.7",
+      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-18.3.7.tgz",
+      "integrity": "sha512-MEe3UeoENYVFXzoXEWsvcpg6ZvlrFNlOQ7EOsvhI3CfAXwzPfO8Qwuxd40nepsYKqyyVQnTdEfv68q91yLcKrQ==",
+      "dev": true,
+      "license": "MIT",
+      "peerDependencies": {
+        "@types/react": "^18.0.0"
+      }
+    },
+    "node_modules/@vitejs/plugin-react": {
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-6.1.0.tgz",
+      "integrity": "sha512-qd2BzUBehkov86WFhg0JkEFEYyCLG9uPCe6qWTY/kRlss9OvJrOF2UbIWT7p+8IzZHkEu0DNGHc4HSv+JdDLsw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@rolldown/pluginutils": "^1.0.1"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "peerDependencies": {
+        "@rolldown/plugin-babel": "^0.1.7 || ^0.2.0",
+        "babel-plugin-react-compiler": "^1.0.0",
+        "oxc-transform-react": "^0.145.0",
+        "vite": "^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@rolldown/plugin-babel": {
+          "optional": true
+        },
+        "babel-plugin-react-compiler": {
+          "optional": true
+        },
+        "oxc-transform-react": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/csstype": {
+      "version": "3.2.3",
+      "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
+      "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/detect-libc": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/engine.io-client": {
+      "version": "6.6.6",
+      "resolved": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-6.6.6.tgz",
+      "integrity": "sha512-iY6QdftLQ9pyiPoX082bpf/u1UewnOaJrtJIF9T0++QB34lZrj0uP+Q/bj8AlUsAxqhnkTV2BS8SBZSxOmoV5Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@socket.io/component-emitter": "~3.1.0",
+        "debug": "~4.4.1",
+        "engine.io-parser": "~5.2.1",
+        "ws": "~8.21.0",
+        "xmlhttprequest-ssl": "~2.1.1"
+      }
+    },
+    "node_modules/engine.io-parser": {
+      "version": "5.2.3",
+      "resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.3.tgz",
+      "integrity": "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/js-tokens": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
+      "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==",
+      "license": "MIT"
+    },
+    "node_modules/lightningcss": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz",
+      "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==",
+      "dev": true,
+      "license": "MPL-2.0",
+      "dependencies": {
+        "detect-libc": "^2.0.3"
+      },
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      },
+      "optionalDependencies": {
+        "lightningcss-android-arm64": "1.33.0",
+        "lightningcss-darwin-arm64": "1.33.0",
+        "lightningcss-darwin-x64": "1.33.0",
+        "lightningcss-freebsd-x64": "1.33.0",
+        "lightningcss-linux-arm-gnueabihf": "1.33.0",
+        "lightningcss-linux-arm64-gnu": "1.33.0",
+        "lightningcss-linux-arm64-musl": "1.33.0",
+        "lightningcss-linux-x64-gnu": "1.33.0",
+        "lightningcss-linux-x64-musl": "1.33.0",
+        "lightningcss-win32-arm64-msvc": "1.33.0",
+        "lightningcss-win32-x64-msvc": "1.33.0"
+      }
+    },
+    "node_modules/lightningcss-android-arm64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz",
+      "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-arm64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz",
+      "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-x64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz",
+      "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-freebsd-x64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz",
+      "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm-gnueabihf": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz",
+      "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-gnu": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz",
+      "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-musl": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz",
+      "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-gnu": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz",
+      "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-musl": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz",
+      "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-arm64-msvc": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz",
+      "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-x64-msvc": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz",
+      "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/loose-envify": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
+      "integrity": "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",
+      "license": "MIT",
+      "dependencies": {
+        "js-tokens": "^3.0.0 || ^4.0.0"
+      },
+      "bin": {
+        "loose-envify": "cli.js"
+      }
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
+    "node_modules/picocolors": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
+      "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/picomatch": {
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz",
+      "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/postcss": {
+      "version": "8.5.26",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz",
+      "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "nanoid": "^3.3.17",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/react": {
+      "version": "18.3.1",
+      "resolved": "https://registry.npmjs.org/react/-/react-18.3.1.tgz",
+      "integrity": "sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ==",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/react-dom": {
+      "version": "18.3.1",
+      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-18.3.1.tgz",
+      "integrity": "sha512-5m4nQKp+rZRb09LNH59GM4BxTh9251/ylbKIbpe7TpGxfJ+9kv6BLkLBXIjjspbgbnIBNqlI23tRnTWT0snUIw==",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0",
+        "scheduler": "^0.23.2"
+      },
+      "peerDependencies": {
+        "react": "^18.3.1"
+      }
+    },
+    "node_modules/rolldown": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.5.tgz",
+      "integrity": "sha512-VD2IE5PUG4Oj8zz2VGykiYd5wbnjdIiSsNQb8Qu5B+noEp+A78mu2iVvpp27g8es14Tk9rofNs5Tku9iQCS4fA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@oxc-project/types": "=0.146.0",
+        "@rolldown/pluginutils": "^1.0.0"
+      },
+      "bin": {
+        "rolldown": "bin/cli.mjs"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "optionalDependencies": {
+        "@rolldown/binding-android-arm-eabi": "1.2.5",
+        "@rolldown/binding-android-arm64": "1.2.5",
+        "@rolldown/binding-darwin-arm64": "1.2.5",
+        "@rolldown/binding-darwin-x64": "1.2.5",
+        "@rolldown/binding-freebsd-x64": "1.2.5",
+        "@rolldown/binding-linux-arm-gnueabihf": "1.2.5",
+        "@rolldown/binding-linux-arm64-gnu": "1.2.5",
+        "@rolldown/binding-linux-arm64-musl": "1.2.5",
+        "@rolldown/binding-linux-ppc64-gnu": "1.2.5",
+        "@rolldown/binding-linux-s390x-gnu": "1.2.5",
+        "@rolldown/binding-linux-x64-gnu": "1.2.5",
+        "@rolldown/binding-linux-x64-musl": "1.2.5",
+        "@rolldown/binding-openharmony-arm64": "1.2.5",
+        "@rolldown/binding-win32-arm64-msvc": "1.2.5",
+        "@rolldown/binding-win32-x64-msvc": "1.2.5"
+      }
+    },
+    "node_modules/scheduler": {
+      "version": "0.23.2",
+      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.2.tgz",
+      "integrity": "sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ==",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0"
+      }
+    },
+    "node_modules/socket.io-client": {
+      "version": "4.8.3",
+      "resolved": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-4.8.3.tgz",
+      "integrity": "sha512-uP0bpjWrjQmUt5DTHq9RuoCBdFJF10cdX9X+a368j/Ft0wmaVgxlrjvK3kjvgCODOMMOz9lcaRzxmso0bTWZ/g==",
+      "license": "MIT",
+      "dependencies": {
+        "@socket.io/component-emitter": "~3.1.0",
+        "debug": "~4.4.1",
+        "engine.io-client": "~6.6.1",
+        "socket.io-parser": "~4.2.4"
+      },
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/socket.io-parser": {
+      "version": "4.2.7",
+      "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.7.tgz",
+      "integrity": "sha512-IH/iSeO9T6gz1KkFleGDWkG9N3dl4jXVYUtMhIqH10Md0ttMer8nUNWiP1DKuNrybD2xBrixLJdCC9J6ECoYkg==",
+      "license": "MIT",
+      "dependencies": {
+        "@socket.io/component-emitter": "~3.1.0",
+        "debug": "~4.4.1"
+      },
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/source-map-js": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
+      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.4"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/vite": {
+      "version": "8.2.2",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-8.2.2.tgz",
+      "integrity": "sha512-cFKLV/PRgAUlIRm5WjMjJ86jrftzpqcgH+Us+DS8mI3CDNiH30Whrz8uHL3+MOLPAgqbMBAqWdAHAphOAM+z/Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "lightningcss": "^1.33.0",
+        "picomatch": "^4.0.5",
+        "postcss": "^8.5.26",
+        "rolldown": "~1.2.4",
+        "tinyglobby": "^0.2.17"
+      },
+      "bin": {
+        "vite": "bin/vite.js"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "funding": {
+        "url": "https://github.com/vitejs/vite?sponsor=1"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      },
+      "peerDependencies": {
+        "@types/node": "^20.19.0 || >=22.12.0",
+        "@vitejs/devtools": "^0.4.0 || ^0.5.0",
+        "esbuild": "^0.27.0 || ^0.28.0",
+        "jiti": ">=1.21.0",
+        "less": "^4.0.0",
+        "sass": "^1.70.0",
+        "sass-embedded": "^1.70.0",
+        "stylus": ">=0.54.8",
+        "sugarss": "^5.0.0",
+        "terser": "^5.16.0",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        },
+        "@vitejs/devtools": {
+          "optional": true
+        },
+        "esbuild": {
+          "optional": true
+        },
+        "jiti": {
+          "optional": true
+        },
+        "less": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "sass-embedded": {
+          "optional": true
+        },
+        "stylus": {
+          "optional": true
+        },
+        "sugarss": {
+          "optional": true
+        },
+        "terser": {
+          "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/ws": {
+      "version": "8.21.3",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.3.tgz",
+      "integrity": "sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      },
+      "peerDependencies": {
+        "bufferutil": "^4.0.1",
+        "utf-8-validate": ">=5.0.2"
+      },
+      "peerDependenciesMeta": {
+        "bufferutil": {
+          "optional": true
+        },
+        "utf-8-validate": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/xmlhttprequest-ssl": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/xmlhttprequest-ssl/-/xmlhttprequest-ssl-2.1.2.tgz",
+      "integrity": "sha512-TEU+nJVUUnA4CYJFLvK5X9AOeH4KvDvhIfm0vV1GaQRtchnG0hgK5p8hw/xjv8cunWYCsiPCSDzObPyhEwq3KQ==",
+      "engines": {
+        "node": ">=0.4.0"
+      }
+    }
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/client/package.json b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/package.json
new file mode 100644
index 00000000000..4817027566c
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/package.json
@@ -0,0 +1,23 @@
+{
+  "name": "client",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "vite build",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "socket.io-client": "^4.7.5"
+  },
+  "devDependencies": {
+    "@types/react": "^18.3.3",
+    "@types/react-dom": "^18.3.0",
+    "@vitejs/plugin-react": "^6.1.0",
+    "typescript": "^5.5.3",
+    "vite": "^8.2.2"
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/App.tsx b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/App.tsx
new file mode 100644
index 00000000000..31898e68cf9
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/App.tsx
@@ -0,0 +1,1456 @@
+import React, { useEffect, useMemo, useRef, useState, useCallback } from "react";
+import { io, Socket } from "socket.io-client";
+import { ProgressionPanel } from "./ProgressionPanel";
+
+const TOKEN_KEY = "mongodb_shop_token";
+const CATALOG_PAGE_SIZE = 10;
+
+interface ItemT {
+  id: string;
+  name: string;
+  price: number;
+  description?: string;
+  category: string;
+  stock: number;
+  purchaseCount: number;
+  variants?: string[];
+}
+
+interface ReviewT {
+  id: string;
+  itemId: string;
+  userId: string;
+  username: string;
+  rating: number;
+  comment: string;
+  createdAt: string;
+}
+
+interface ItemDetailT {
+  id: string;
+  name: string;
+  price: number;
+  description: string;
+  stock: number;
+  reviews: ReviewT[];
+  average: number;
+}
+
+interface CartLineT {
+  itemId: string;
+  name: string;
+  price: number;
+  stock: number;
+  quantity: number;
+  reservationSeconds?: number;
+  expired?: boolean;
+}
+
+interface CartT {
+  items: CartLineT[];
+  total: number;
+  promotionCode?: string;
+  discount?: number;
+}
+
+interface OrderLineT {
+  itemId: string;
+  name: string;
+  price: number;
+  quantity: number;
+  returned?: boolean;
+  warehouseNames?: string[];
+}
+
+interface OrderT {
+  id: string;
+  items: OrderLineT[];
+  total: number;
+  status: "pending" | "shipped" | "delivered" | "cancelled" | "refunded";
+  discount?: number;
+  refundTotal?: number;
+  createdAt: string;
+  payments?: Array<{ id: string; amount: number; status: string }>;
+}
+
+interface UserT {
+  id: string;
+  username: string;
+  isAdmin: boolean;
+  isStaff: boolean;
+  roles?: string[];
+}
+
+interface AdminLocationT {
+  id: string;
+  itemId: string;
+  itemName: string;
+  warehouseId: string;
+  warehouseName: string;
+  quantity: number;
+}
+
+interface CategoryTotalT {
+  category: string;
+  units: number;
+  revenue: number;
+}
+
+interface AdminOverviewT {
+  items: Array<{ id: string; name: string; price: number; stock: number; category: string }>;
+  warehouses: Array<{ id: string; name: string; total: number }>;
+  locations: AdminLocationT[];
+  revenue: number;
+  categories: CategoryTotalT[];
+  lowStock: Array<{ id: string; name: string; stock: number }>;
+  queueDepth: number;
+}
+
+interface FulfilmentQueueT {
+  orders: OrderT[];
+  depth: number;
+}
+
+function useTransientError(): [string, (msg: string) => void] {
+  const [message, setMessage] = useState("");
+  const timer = useRef<ReturnType<typeof setTimeout> | null>(null);
+  const show = useCallback((msg: string) => {
+    setMessage(msg);
+    if (timer.current) clearTimeout(timer.current);
+    timer.current = setTimeout(() => setMessage(""), 5000);
+  }, []);
+  return [message, show];
+}
+
+async function apiFetch(path: string, token: string | null, options: RequestInit = {}) {
+  const headers: Record<string, string> = { "Content-Type": "application/json" };
+  if (token) headers.Authorization = `Bearer ${token}`;
+  const res = await fetch(path, { ...options, headers: { ...headers, ...(options.headers as any) } });
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok) throw new Error(data.error || "Request failed");
+  return data;
+}
+
+export default function App() {
+  const [token, setToken] = useState<string | null>(() => localStorage.getItem(TOKEN_KEY));
+  const [currentUser, setCurrentUser] = useState<UserT | null>(null);
+  const [initializing, setInitializing] = useState(true);
+  const [items, setItems] = useState<ItemT[]>([]);
+  const [searchQuery, setSearchQuery] = useState("");
+  const [categoryFilter, setCategoryFilter] = useState("");
+  const [minimumPrice, setMinimumPrice] = useState("");
+  const [maximumPrice, setMaximumPrice] = useState("");
+  const [inStockOnly, setInStockOnly] = useState(false);
+  const [searchPage, setSearchPage] = useState(0);
+  const [cart, setCart] = useState<CartT>({ items: [], total: 0 });
+  // Keep floating panels mutually exclusive so navigation remains reachable.
+  const [activeView, setActiveView] = useState<"cart" | "orders" | "admin" | "fulfilment" | null>(null);
+  const cartOpen = activeView === "cart";
+  const ordersOpen = activeView === "orders";
+  const [orders, setOrders] = useState<OrderT[]>([]);
+  const adminOpen = activeView === "admin";
+  const [adminOverview, setAdminOverview] = useState<AdminOverviewT | null>(null);
+  const fulfilmentOpen = activeView === "fulfilment";
+  const [fulfilmentQueue, setFulfilmentQueue] = useState<FulfilmentQueueT>({ orders: [], depth: 0 });
+  const [recommended, setRecommended] = useState<ItemT[]>([]);
+  const [selectedItemId, setSelectedItemId] = useState<string | null>(null);
+  const [itemDetail, setItemDetail] = useState<ItemDetailT | null>(null);
+
+  const [buyError, showBuyError] = useTransientError();
+  const [orderError, showOrderError] = useTransientError();
+  const [promotionCode, setPromotionCode] = useState("");
+  const [promotionError, setPromotionError] = useState("");
+
+  const socketRef = useRef<Socket | null>(null);
+
+  const saveSession = (tok: string, user: UserT) => {
+    localStorage.setItem(TOKEN_KEY, tok);
+    setToken(tok);
+    setCurrentUser(user);
+  };
+
+  const clearSession = () => {
+    localStorage.removeItem(TOKEN_KEY);
+    setToken(null);
+    setCurrentUser(null);
+    setCart({ items: [], total: 0 });
+    setOrders([]);
+    setAdminOverview(null);
+    setFulfilmentQueue({ orders: [], depth: 0 });
+    setActiveView(null);
+  };
+
+  const refreshItems = useCallback(async () => {
+    const data = await apiFetch("/api/items", null);
+    setItems(data.items);
+  }, []);
+
+  const refreshCart = useCallback(async (tok: string) => {
+    const data = await apiFetch("/api/cart", tok);
+    setCart(data);
+  }, []);
+
+  useEffect(() => {
+    if (!token || cart.items.length === 0) return;
+    const timer = setInterval(() => refreshCart(token).catch(() => undefined), 1000);
+    return () => clearInterval(timer);
+  }, [token, cart.items.length, refreshCart]);
+
+  const refreshAdmin = useCallback(async (tok: string) => {
+    const data = await apiFetch("/api/admin/overview", tok);
+    setAdminOverview(data);
+  }, []);
+
+  const refreshFulfilment = useCallback(async (tok: string) => {
+    const data = await apiFetch("/api/fulfilment/queue", tok);
+    setFulfilmentQueue(data);
+  }, []);
+
+  const refreshRecommended = useCallback(async (tok: string | null) => {
+    const data = await apiFetch("/api/recommended", tok);
+    setRecommended(data.items);
+  }, []);
+
+  // Initial load: restore session, fetch the live catalogue, and (if signed
+  // in) the account's cart. A page opened fresh always asks for current
+  // numbers rather than trusting anything cached.
+  useEffect(() => {
+    let cancelled = false;
+    (async () => {
+      try {
+        await refreshItems();
+      } catch (err) {
+        console.error(err);
+      }
+      const tok = localStorage.getItem(TOKEN_KEY);
+      if (tok) {
+        try {
+          const me = await apiFetch("/api/auth/me", tok);
+          if (!cancelled) {
+            setCurrentUser(me.user);
+            await refreshCart(tok);
+            if (me.user.isAdmin) await refreshAdmin(tok);
+            if (me.user.isStaff || me.user.isAdmin) await refreshFulfilment(tok);
+            await refreshRecommended(tok);
+          }
+        } catch {
+          clearSession();
+        }
+      } else {
+        await refreshRecommended(null).catch((err) => console.error(err));
+      }
+      if (!cancelled) setInitializing(false);
+    })();
+    return () => {
+      cancelled = true;
+    };
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, []);
+
+  // Socket connection follows the current token. On every (re)connect —
+  // including after the server was down and the page never reloaded — pull a
+  // fresh snapshot instead of trusting whatever events were missed.
+  useEffect(() => {
+    const socket = io({ auth: token ? { token } : {} });
+    socketRef.current = socket;
+
+    socket.on("connect", () => {
+      refreshItems().catch((err) => console.error(err));
+      if (token) {
+        refreshCart(token).catch((err) => console.error(err));
+      }
+    });
+
+    socket.on("items:update", (data: ItemT[]) => setItems(data));
+    socket.on("cart:update", (data: CartT) => setCart(data));
+    socket.on("admin:update", (data: AdminOverviewT) => setAdminOverview(data));
+    socket.on("orders:update", (data: OrderT[]) => setOrders(data));
+    socket.on("fulfilment:update", (data: FulfilmentQueueT) => setFulfilmentQueue(data));
+    socket.on("recommended:update", (data: ItemT[]) => setRecommended(data));
+    socket.on("progression:update", () => {
+      refreshItems().catch((err) => console.error(err));
+      refreshRecommended(token).catch((err) => console.error(err));
+      if (token) {
+        refreshCart(token).catch((err) => console.error(err));
+        apiFetch("/api/orders", token).then(data => setOrders(data.orders)).catch(() => undefined);
+      }
+    });
+    socket.on("reviews:update", (payload: { itemId: string; reviews: ReviewT[]; average: number }) => {
+      setItemDetail((prev) => (prev && prev.id === payload.itemId ? { ...prev, reviews: payload.reviews, average: payload.average } : prev));
+    });
+
+    return () => {
+      socket.disconnect();
+    };
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [token]);
+
+  useEffect(() => {
+    if (currentUser?.isAdmin && token) {
+      refreshAdmin(token).catch((err) => console.error(err));
+    }
+    if ((currentUser?.isStaff || currentUser?.isAdmin) && token) {
+      refreshFulfilment(token).catch((err) => console.error(err));
+    }
+  }, [currentUser, token, refreshAdmin, refreshFulfilment]);
+
+  useEffect(() => {
+    if (!selectedItemId) {
+      setItemDetail(null);
+      return;
+    }
+    let cancelled = false;
+    apiFetch(`/api/items/${selectedItemId}`, token)
+      .then((data) => {
+        if (!cancelled) setItemDetail(data.item);
+      })
+      .catch((err) => console.error(err));
+    return () => {
+      cancelled = true;
+    };
+  }, [selectedItemId, token]);
+
+  // Escape closes whichever overlay is open.
+  useEffect(() => {
+    const onKeyDown = (e: KeyboardEvent) => {
+      if (e.key !== "Escape") return;
+      if (selectedItemId) setSelectedItemId(null);
+      else if (activeView) setActiveView(null);
+    };
+    window.addEventListener("keydown", onKeyDown);
+    return () => window.removeEventListener("keydown", onKeyDown);
+  }, [selectedItemId, activeView]);
+
+  const handleSignUp = async (username: string, password: string) => {
+    const data = await apiFetch("/api/auth/signup", null, { method: "POST", body: JSON.stringify({ username, password }) });
+    saveSession(data.token, data.user);
+  };
+
+  const handleSignIn = async (username: string, password: string) => {
+    const data = await apiFetch("/api/auth/signin", null, { method: "POST", body: JSON.stringify({ username, password }) });
+    saveSession(data.token, data.user);
+  };
+
+  const handleSignOut = () => {
+    clearSession();
+  };
+
+  const handleBuyNow = async (itemId: string) => {
+    try {
+      await apiFetch(`/api/items/${itemId}/buy`, token, { method: "POST" });
+    } catch (err: any) {
+      showBuyError(err.message);
+    }
+  };
+
+  const handleAddToCart = async (itemId: string) => {
+    try {
+      const data = await apiFetch("/api/cart", token, { method: "POST", body: JSON.stringify({ itemId, quantity: 1 }) });
+      setCart(data);
+    } catch (err: any) {
+      showBuyError(err.message);
+    }
+  };
+
+  const handleQuantityChange = async (itemId: string, quantity: number) => {
+    try {
+      const data = await apiFetch(`/api/cart/${itemId}`, token, { method: "PATCH", body: JSON.stringify({ quantity }) });
+      setCart(data);
+    } catch (err: any) {
+      showBuyError(err.message);
+    }
+  };
+
+  const handleRemove = async (itemId: string) => {
+    try {
+      const data = await apiFetch(`/api/cart/${itemId}`, token, { method: "DELETE" });
+      setCart(data);
+    } catch (err: any) {
+      showBuyError(err.message);
+    }
+  };
+
+  const handleCheckout = async () => {
+    try {
+      await apiFetch("/api/checkout", token, { method: "POST" });
+    } catch (err: any) {
+      showBuyError(err.message);
+    }
+  };
+
+  const handleApplyPromotion = async () => {
+    setPromotionError("");
+    try {
+      const data = await apiFetch("/api/progression/cart/promotion", token, {
+        method: "POST", body: JSON.stringify({ code: promotionCode }),
+      });
+      setCart((value) => ({ ...value, promotionCode: data.promotion.code,
+        discount: data.promotion.discount }));
+    } catch (err: any) {
+      setPromotionError(err.message);
+    }
+  };
+
+  const openOrders = async () => {
+    setActiveView("orders");
+    if (token) {
+      try {
+        const data = await apiFetch("/api/orders", token);
+        setOrders(data.orders);
+      } catch (err) {
+        console.error(err);
+      }
+    }
+  };
+
+  const openAdmin = async () => {
+    setActiveView("admin");
+    if (token) {
+      try {
+        await refreshAdmin(token);
+      } catch (err) {
+        console.error(err);
+      }
+    }
+  };
+
+  const openFulfilment = async () => {
+    setActiveView("fulfilment");
+    if (token) {
+      try {
+        await refreshFulfilment(token);
+      } catch (err) {
+        console.error(err);
+      }
+    }
+  };
+
+  const [reviewError, setReviewError] = useState("");
+  const handleReviewSubmit = async (itemId: string, rating: number, comment: string) => {
+    setReviewError("");
+    try {
+      const data = await apiFetch(`/api/items/${itemId}/reviews`, token, {
+        method: "POST",
+        body: JSON.stringify({ rating, comment }),
+      });
+      setItemDetail(data.item);
+    } catch (err: any) {
+      setReviewError(err.message);
+    }
+  };
+
+  const handleRestock = async (itemId: string, warehouseId: string, quantity: number) => {
+    try {
+      const data = await apiFetch("/api/admin/restock", token, {
+        method: "POST",
+        body: JSON.stringify({ itemId, warehouseId, quantity }),
+      });
+      setAdminOverview(data);
+    } catch (err: any) {
+      showBuyError(err.message);
+    }
+  };
+
+  const handleTransfer = async (itemId: string, fromWarehouseId: string, toWarehouseId: string, quantity: number) => {
+    try {
+      const data = await apiFetch("/api/admin/transfer", token, {
+        method: "POST",
+        body: JSON.stringify({ itemId, fromWarehouseId, toWarehouseId, quantity }),
+      });
+      setAdminOverview(data);
+    } catch (err: any) {
+      showOrderError(err.message);
+    }
+  };
+
+  const handlePriceChange = async (itemId: string, price: number) => {
+    try {
+      const data = await apiFetch("/api/admin/price", token, {
+        method: "POST",
+        body: JSON.stringify({ itemId, price }),
+      });
+      setAdminOverview(data);
+    } catch (err: any) {
+      showOrderError(err.message);
+    }
+  };
+
+  const handleShipOrder = async (orderId: string) => {
+    try {
+      await apiFetch("/api/fulfilment/ship", token, {
+        method: "POST",
+        body: JSON.stringify({ orderId }),
+      });
+    } catch (err: any) {
+      showOrderError(err.message);
+    }
+  };
+
+  const handleCancelOrder = async (orderId: string) => {
+    try {
+      const data = await apiFetch(`/api/orders/${orderId}/cancel`, token, { method: "POST" });
+      setOrders((prev) => prev.map((o) => (o.id === orderId ? data.order : o)));
+    } catch (err: any) {
+      showOrderError(err.message);
+    }
+  };
+
+  const handleReturnItem = async (orderId: string, itemId: string) => {
+    try {
+      const data = await apiFetch(`/api/orders/${orderId}/items/${itemId}/return`, token, { method: "POST" });
+      setOrders((prev) => prev.map((o) => (o.id === orderId ? data.order : o)));
+    } catch (err: any) {
+      showOrderError(err.message);
+    }
+  };
+
+  const filteredItems = useMemo(() => {
+    const q = searchQuery.trim().toLowerCase();
+    const min = minimumPrice === "" ? -Infinity : Number(minimumPrice);
+    const max = maximumPrice === "" ? Infinity : Number(maximumPrice);
+    return items.filter((it) => (!q || it.name.toLowerCase().includes(q))
+      && (!categoryFilter || it.category === categoryFilter)
+      && it.price >= min && it.price <= max && (!inStockOnly || it.stock > 0));
+  }, [items, searchQuery, categoryFilter, minimumPrice, maximumPrice, inStockOnly]);
+  const searchResults = filteredItems.slice(searchPage * CATALOG_PAGE_SIZE,
+    searchPage * CATALOG_PAGE_SIZE + CATALOG_PAGE_SIZE);
+
+  const cartCount = cart.items.reduce((s, l) => s + l.quantity, 0);
+  const selectedItem = items.find((it) => it.id === selectedItemId) || null;
+  const isCustomer = !!currentUser && !currentUser.isAdmin && !currentUser.isStaff;
+
+  return (
+    <div className="app">
+      {initializing && (
+        <div className="loading-screen">
+          <div className="spinner" />
+          <div>Connecting to Storefront...</div>
+        </div>
+      )}
+
+      <header className="header">
+        <h1 className="app-title" data-role="app-title">
+          Storefront
+        </h1>
+        <button className="btn btn-ghost" data-role="catalog-link" onClick={() => setActiveView(null)}>
+          Catalog
+        </button>
+        <input
+          className="input search-input"
+          data-role="search-input"
+          placeholder="Search items..."
+          value={searchQuery}
+          onChange={(e) => { setSearchQuery(e.target.value); setSearchPage(0); }}
+          onKeyDown={(e) => {
+            if (e.key === "Escape") setSearchQuery("");
+          }}
+        />
+        <div className="header-spacer" />
+        <div className="header-actions">
+          <button className="btn btn-ghost" data-role="cart-toggle" onClick={() => setActiveView("cart")}>
+            Cart <span className="badge" data-role="cart-count">{cartCount}</span>
+          </button>
+          {currentUser && (
+            <button className="btn btn-ghost" data-role="orders-toggle" onClick={openOrders}>
+              Orders
+            </button>
+          )}
+          {currentUser?.isAdmin && (
+            <button className="btn btn-ghost" data-role="admin-link" onClick={openAdmin}>
+              Admin
+            </button>
+          )}
+          {(currentUser?.isStaff || currentUser?.isAdmin) && (
+            <button className="btn btn-ghost" data-role="staff-link" onClick={openFulfilment}>
+              Fulfilment <span className="badge">{fulfilmentQueue.depth}</span>
+            </button>
+          )}
+          {currentUser ? (
+            <>
+              <span className="current-user" data-role="current-user">
+                {currentUser.username}
+              </span>
+              <button className="btn btn-ghost btn-sm" data-role="signout" onClick={handleSignOut}>
+                Sign out
+              </button>
+            </>
+          ) : (
+            <AuthBox onSignUp={handleSignUp} onSignIn={handleSignIn} />
+          )}
+        </div>
+      </header>
+
+      <div className="content-row" style={cartOpen || ordersOpen ? { marginRight: 420 } : undefined}>
+        <main className="main">
+          {buyError && (
+            <div className="toast" data-role="buy-error">
+              {buyError}
+            </div>
+          )}
+
+          <section>
+              <div className="progression-filters">
+                <select data-role="category-filter" value={categoryFilter}
+                  onChange={(e) => { setCategoryFilter(e.target.value); setSearchPage(0); }}>
+                  <option value="">All categories</option>
+                  {[...new Set(items.map((item) => item.category))].sort().map(category =>
+                    <option key={category}>{category}</option>)}
+                </select>
+                <input data-role="minimum-price" type="number" placeholder="Minimum price"
+                  value={minimumPrice} onChange={(e) => { setMinimumPrice(e.target.value); setSearchPage(0); }} />
+                <input data-role="maximum-price" type="number" placeholder="Maximum price"
+                  value={maximumPrice} onChange={(e) => { setMaximumPrice(e.target.value); setSearchPage(0); }} />
+                <button className={`btn btn-sm ${inStockOnly ? "btn-primary" : "btn-ghost"}`}
+                  data-role="in-stock-filter" onClick={() => { setInStockOnly(value => !value); setSearchPage(0); }}>
+                  In stock
+                </button>
+              </div>
+              <h2 className="section-title">Catalog</h2>
+              <div className="item-list" data-role="item-list">
+                <div className="search-results" data-role="search-results">
+                  {searchResults.map((item) => (
+                    <ItemCard
+                      key={item.id}
+                      item={item}
+                      isCustomer={isCustomer}
+                      onOpen={() => setSelectedItemId(item.id)}
+                      onBuy={() => handleBuyNow(item.id)}
+                      onAddToCart={() => handleAddToCart(item.id)}
+                    />
+                  ))}
+                </div>
+              </div>
+              <div className="pager">
+                <button data-role="search-previous-page" className="btn btn-ghost btn-sm"
+                  disabled={searchPage === 0} onClick={() => setSearchPage(page => Math.max(0, page - 1))}>Previous</button>
+                <button data-role="search-next-page" className="btn btn-ghost btn-sm"
+                  disabled={(searchPage + 1) * CATALOG_PAGE_SIZE >= filteredItems.length}
+                  onClick={() => setSearchPage(page => page + 1)}>Next</button>
+              </div>
+            </section>
+
+          <section style={{ marginTop: 32 }}>
+            <h2 className="section-title">Recommended for you</h2>
+            <div className="item-list" data-role="recommended-list">
+              {recommended.length === 0 ? (
+                <div className="empty-state">Nothing recommended yet</div>
+              ) : (
+                recommended.map((item, index) => (
+                  <div data-role="recommended-item" key={item.id}>
+                    <span data-role="recommendation-rank">{index + 1}</span>
+                    <ItemCard item={item} isCustomer={isCustomer} testId={null}
+                      onOpen={() => setSelectedItemId(item.id)} onBuy={() => handleBuyNow(item.id)}
+                      onAddToCart={() => handleAddToCart(item.id)} />
+                    {currentUser && <button className="btn btn-ghost btn-sm" data-role="dismiss-recommendation"
+                      onClick={async () => { await apiFetch(`/api/progression/recommendations/${item.id}/dismiss`, token,
+                        { method: "POST" }); setRecommended(value => value.filter(entry => entry.id !== item.id)); }}>
+                      Dismiss
+                    </button>}
+                  </div>
+                ))
+              )}
+            </div>
+          </section>
+          <ProgressionPanel token={token} user={currentUser} items={items} orders={orders}
+            onSignIn={handleSignIn} onRefreshItems={refreshItems}
+            onRefreshCart={() => token ? refreshCart(token) : Promise.resolve()} />
+          {!activeView && (currentUser?.isStaff || currentUser?.isAdmin) &&
+            <ProgressionPanel token={token} user={currentUser} items={items} orders={orders}
+              onSignIn={handleSignIn} onRefreshItems={refreshItems}
+              onRefreshCart={() => token ? refreshCart(token) : Promise.resolve()} staffOnly />}
+        </main>
+
+        {selectedItem && (
+          <ItemDetailPanel
+            item={selectedItem}
+            detail={itemDetail}
+            isCustomer={isCustomer}
+            reviewError={reviewError}
+            onClose={() => {
+              setSelectedItemId(null);
+              setReviewError("");
+            }}
+            onBuy={() => handleBuyNow(selectedItem.id)}
+            onAddToCart={() => handleAddToCart(selectedItem.id)}
+            onSubmitReview={(rating, comment) => handleReviewSubmit(selectedItem.id, rating, comment)}
+          />
+        )}
+      </div>
+
+      <div className={`backdrop${cartOpen ? " open" : ""}`} onClick={() => setActiveView(null)} />
+      <div className={`panel${cartOpen ? " open" : ""}`}>
+        <div className="panel-header">
+          <h2>Cart</h2>
+          <button className="close-btn" onClick={() => setActiveView(null)}>
+            ×
+          </button>
+        </div>
+        <div data-role="cart-panel">
+          {cart.items.length === 0 ? (
+            <div className="empty-state" data-role="empty-cart">
+              Your cart is empty
+            </div>
+          ) : (
+            <>
+              {cart.items.map((line) => (
+                <CartLineRow
+                  key={line.itemId}
+                  line={line}
+                  onQuantityChange={(qty) => handleQuantityChange(line.itemId, qty)}
+                  onRemove={() => handleRemove(line.itemId)}
+                />
+              ))}
+              <div className="cart-promotion-row">
+                <input className="input" data-role="cart-promotion" value={promotionCode}
+                  onChange={(e) => setPromotionCode(e.target.value)} placeholder="Promotion code" />
+                <button className="btn btn-ghost" data-role="apply-promotion" onClick={handleApplyPromotion}>Apply</button>
+              </div>
+              {promotionError && <div className="auth-error" data-role="promotion-error">{promotionError}</div>}
+              <div className="cart-summary">
+                <span>Total</span>
+                <span data-role="cart-total">${cart.total.toFixed(2)}</span>
+              </div>
+              <button className="btn btn-primary" data-role="checkout-submit" style={{ marginTop: 16, width: "100%" }} onClick={handleCheckout}>
+                Checkout
+              </button>
+            </>
+          )}
+        </div>
+      </div>
+
+      <div className={`backdrop${ordersOpen ? " open" : ""}`} onClick={() => setActiveView(null)} />
+      <div className={`panel${ordersOpen ? " open" : ""}`}>
+        <div className="panel-header">
+          <h2>Order history</h2>
+          <button className="close-btn" onClick={() => setActiveView(null)}>
+            ×
+          </button>
+        </div>
+        {orderError && (
+          <div className="auth-error" data-role="order-error">
+            {orderError}
+          </div>
+        )}
+        <div data-role="order-list">
+          {orders.length === 0 ? (
+            <div className="empty-state">You haven't placed any orders yet</div>
+          ) : (
+            orders.map((order) => (
+              <div className="order-item" data-role="order-item" data-entity-id={String(order.id)}
+                data-ship-input={JSON.stringify({ orderId: order.id })}
+                data-cancel-input={JSON.stringify({ orderId: order.id })} key={order.id}>
+                <div className="order-item-header">
+                  <span>{new Date(order.createdAt).toLocaleString()}</span>
+                  <span data-role="order-status">{order.status}</span>
+                </div>
+                <div>{order.items.map((l) => `${l.name} ×${l.quantity}${l.returned ? " (returned)" : ""}`).join(", ")}</div>
+                <div className="order-total" data-role="order-total">
+                  ${order.total.toFixed(2)}
+                </div>
+                <div data-role="order-discount">{Number(order.discount || 0).toFixed(2)}</div>
+                <div data-role="order-refund-total">{Number(order.refundTotal || 0).toFixed(2)}</div>
+                {(order.payments ?? []).map((payment) => (
+                  <div data-role="payment-record" key={payment.id}>
+                    <span data-role="payment-status">{payment.status}</span>
+                    <span data-role="payment-amount">{Number(payment.amount).toFixed(2)}</span>
+                  </div>
+                ))}
+                {order.status === "refunded" && order.items.map(line =>
+                  <div data-role="refund-entry" key={`refund-${line.itemId}`}>{line.name}</div>)}
+                <div className="order-item-actions">
+                  {order.status === "pending" && (
+                    <button className="btn btn-danger btn-sm" data-role="cancel-order" onClick={() => handleCancelOrder(order.id)}>
+                      Cancel order
+                    </button>
+                  )}
+                  {order.status === "shipped" &&
+                    order.items
+                      .filter((l) => !l.returned)
+                      .map((l) => (
+                        <button
+                          key={l.itemId}
+                          className="btn btn-ghost btn-sm"
+                          data-role="return-item"
+                          onClick={() => handleReturnItem(order.id, l.itemId)}
+                        >
+                          Return {l.name}
+                        </button>
+                      ))}
+                </div>
+              </div>
+            ))
+          )}
+        </div>
+      </div>
+
+      {fulfilmentOpen && (currentUser?.isStaff || currentUser?.isAdmin) && (
+        <FulfilmentPanel queue={fulfilmentQueue} onClose={() => setActiveView(null)}
+          onShip={handleShipOrder} orderError={orderError}>
+          <ProgressionPanel token={token} user={currentUser} items={items} orders={orders}
+            onSignIn={handleSignIn} onRefreshItems={refreshItems}
+            onRefreshCart={() => token ? refreshCart(token) : Promise.resolve()} staffOnly />
+        </FulfilmentPanel>
+      )}
+
+      {adminOpen && currentUser?.isAdmin && (
+        <AdminPanel
+          overview={adminOverview}
+          onClose={() => setActiveView(null)}
+          onRestock={handleRestock}
+          onTransfer={handleTransfer}
+          onPriceChange={handlePriceChange}
+          orderError={orderError}
+        >
+          <ProgressionPanel token={token} user={currentUser} items={items} orders={orders}
+            onSignIn={handleSignIn} onRefreshItems={refreshItems}
+            onRefreshCart={() => token ? refreshCart(token) : Promise.resolve()} staffOnly />
+        </AdminPanel>
+      )}
+    </div>
+  );
+}
+
+function ItemCard({
+  item,
+  isCustomer,
+  onOpen,
+  onBuy,
+  onAddToCart,
+  testId = "item-card",
+}: {
+  item: ItemT;
+  isCustomer: boolean;
+  onOpen: () => void;
+  onBuy: () => void;
+  onAddToCart: () => void;
+  testId?: string | null;
+}) {
+  const outOfStock = item.stock === 0;
+  return (
+    <div className={`item-card${outOfStock ? " out-of-stock-card" : ""}`} data-role={testId ?? undefined}
+      data-buy-input={JSON.stringify({ itemId: item.id })} onClick={onOpen}>
+      <div className="item-name" data-role="item-name">
+        {item.name}
+      </div>
+      <div className="item-row">
+        <span className="item-price" data-role="item-price">
+          ${item.price.toFixed(2)}
+        </span>
+      </div>
+      <div className="item-row">
+        <span className={`item-stock${item.stock > 0 && item.stock <= 5 ? " low" : ""}`} data-role="item-stock">
+          {item.stock}
+        </span>
+        {outOfStock && (
+          <span className="pill-danger" data-role="out-of-stock">
+            Out of stock
+          </span>
+        )}
+      </div>
+      {isCustomer && (
+        <div className="item-actions" onClick={(e) => e.stopPropagation()}>
+          <button className="btn btn-primary btn-sm" data-role="buy-now" disabled={outOfStock} onClick={onBuy}>
+            Buy now
+          </button>
+          <button className="btn btn-ghost btn-sm" data-role="add-to-cart" disabled={outOfStock} onClick={onAddToCart}>
+            Add to cart
+          </button>
+        </div>
+      )}
+      {(item.variants || []).map(variant =>
+        <span data-role="item-variant" className="pill-warning" key={variant}>{variant}</span>)}
+      {isCustomer && outOfStock && <button data-role="stock-alert" className="btn btn-ghost btn-sm"
+        onClick={async () => { await apiFetch("/api/progression/stock-alerts", localStorage.getItem(TOKEN_KEY),
+          { method: "POST", body: JSON.stringify({ itemId: item.id }) }); }}>Notify me</button>}
+    </div>
+  );
+}
+
+function ItemDetailPanel({
+  item,
+  detail,
+  isCustomer,
+  reviewError,
+  onClose,
+  onBuy,
+  onAddToCart,
+  onSubmitReview,
+}: {
+  item: ItemT;
+  detail: ItemDetailT | null;
+  isCustomer: boolean;
+  reviewError: string;
+  onClose: () => void;
+  onBuy: () => void;
+  onAddToCart: () => void;
+  onSubmitReview: (rating: number, comment: string) => void;
+}) {
+  const [rating, setRating] = useState(5);
+  const [comment, setComment] = useState("");
+  const outOfStock = item.stock === 0;
+
+  const submit = (e: React.FormEvent) => {
+    e.preventDefault();
+    onSubmitReview(rating, comment);
+    setComment("");
+  };
+
+  return (
+      <div className="item-detail" data-role="item-detail">
+        <div className="panel-header">
+          <h2 data-role="item-name">{item.name}</h2>
+          <button className="close-btn" onClick={onClose}>
+            ×
+          </button>
+        </div>
+        <div className="item-row">
+          <span data-role="item-price" className="item-price">
+            ${item.price.toFixed(2)}
+          </span>
+          <span data-role="item-stock" className={item.stock > 0 && item.stock <= 5 ? "item-stock low" : "item-stock"}>
+            {item.stock} in stock
+          </span>
+        </div>
+        {outOfStock && (
+          <span className="pill-danger" data-role="out-of-stock">
+            Out of stock
+          </span>
+        )}
+        <p className="detail-description">{detail?.description || "Loading description..."}</p>
+
+        {isCustomer && (
+          <div className="item-actions">
+            <button className="btn btn-primary" data-role="buy-now" disabled={outOfStock} onClick={onBuy}>
+              Buy now
+            </button>
+            <button className="btn btn-ghost" data-role="add-to-cart" disabled={outOfStock} onClick={onAddToCart}>
+              Add to cart
+            </button>
+          </div>
+        )}
+
+        <h3 style={{ marginTop: 24 }}>
+          Reviews — average <span data-role="review-average">{(detail?.average ?? 0).toFixed(1)}</span>
+        </h3>
+        {!detail || detail.reviews.length === 0 ? (
+          <div className="empty-state">No reviews yet</div>
+        ) : (
+          detail.reviews.map((r) => (
+            <div className="review-item" data-role="review-item" key={r.id}>
+              <div className="review-item-header">
+                <span>{r.username}</span>
+                <span className="stars">{"★".repeat(r.rating)}</span>
+              </div>
+              <div>{r.comment}</div>
+            </div>
+          ))
+        )}
+
+        {isCustomer && (
+          <form className="review-form" onSubmit={submit}>
+            <select data-role="review-rating" value={rating} onChange={(e) => setRating(Number(e.target.value))}>
+              {[5, 4, 3, 2, 1].map((n) => (
+                <option key={n} value={n}>
+                  {n} star{n > 1 ? "s" : ""}
+                </option>
+              ))}
+            </select>
+            <input
+              className="input"
+              data-role="review-input"
+              placeholder="Write a review..."
+              value={comment}
+              onChange={(e) => setComment(e.target.value)}
+            />
+            <button className="btn btn-primary" data-role="review-submit" type="submit">
+              Submit review
+            </button>
+          </form>
+        )}
+        {reviewError && (
+          <div className="auth-error" data-role="review-error">
+            {reviewError}
+          </div>
+        )}
+      </div>
+  );
+}
+
+function CartLineRow({
+  line,
+  onQuantityChange,
+  onRemove,
+}: {
+  line: CartLineT;
+  onQuantityChange: (qty: number) => void;
+  onRemove: () => void;
+}) {
+  const [value, setValue] = useState(String(line.quantity));
+
+  useEffect(() => {
+    setValue(String(line.quantity));
+  }, [line.quantity]);
+
+  const commit = () => {
+    const qty = Number(value);
+    if (Number.isInteger(qty) && qty >= 1 && qty !== line.quantity) {
+      onQuantityChange(qty);
+    } else {
+      setValue(String(line.quantity));
+    }
+  };
+
+  return (
+    <div className="cart-item" data-role="cart-item"
+      data-cart-input={JSON.stringify({ itemId: line.itemId, quantity: -3 })}>
+      <span className="cart-item-name">{line.name}</span>
+      <span data-role="cart-reservation-timer">{line.reservationSeconds || 0}</span>
+      {line.expired && <span data-role="cart-item-expired">Expired</span>}
+      <input
+        type="number"
+        min={1}
+        className="input cart-quantity-input"
+        data-role="cart-quantity"
+        value={value}
+        onChange={(e) => setValue(e.target.value)}
+        onBlur={commit}
+        onKeyDown={(e) => {
+          if (e.key === "Enter") {
+            e.preventDefault();
+            commit();
+          }
+        }}
+      />
+      <span className="cart-line-price">${(line.price * line.quantity).toFixed(2)}</span>
+      <button className="btn btn-danger btn-sm" data-role="cart-remove" onClick={onRemove}>
+        Remove
+      </button>
+    </div>
+  );
+}
+
+function AuthBox({
+  onSignUp,
+  onSignIn,
+}: {
+  onSignUp: (username: string, password: string) => Promise<void>;
+  onSignIn: (username: string, password: string) => Promise<void>;
+}) {
+  const [signUpUsername, setSignUpUsername] = useState("");
+  const [signUpPassword, setSignUpPassword] = useState("");
+  const [signUpError, setSignUpError] = useState("");
+
+  const [showSignIn, setShowSignIn] = useState(false);
+  const [signInUsername, setSignInUsername] = useState("");
+  const [signInPassword, setSignInPassword] = useState("");
+  const [signInError, setSignInError] = useState("");
+
+  const submitSignUp = async (e: React.FormEvent) => {
+    e.preventDefault();
+    setSignUpError("");
+    try {
+      await onSignUp(signUpUsername.trim(), signUpPassword);
+    } catch (err: any) {
+      setSignUpError(err.message);
+    }
+  };
+
+  const submitSignIn = async (e: React.FormEvent) => {
+    e.preventDefault();
+    setSignInError("");
+    try {
+      await onSignIn(signInUsername.trim(), signInPassword);
+    } catch (err: any) {
+      setSignInError(err.message);
+    }
+  };
+
+  return (
+    <div className="auth-box">
+      <form className="auth-form" onSubmit={submitSignUp}>
+        <input
+          className="input"
+          data-role="signup-username"
+          placeholder="Username"
+          value={signUpUsername}
+          onChange={(e) => setSignUpUsername(e.target.value)}
+        />
+        <input
+          className="input"
+          data-role="signup-password"
+          type="password"
+          placeholder="Password"
+          value={signUpPassword}
+          onChange={(e) => setSignUpPassword(e.target.value)}
+        />
+        <button className="btn btn-primary btn-sm" data-role="signup-submit" type="submit">
+          Sign up
+        </button>
+        {signUpError && (
+          <div className="auth-error" data-role="auth-error">
+            {signUpError}
+          </div>
+        )}
+      </form>
+      <button className="link-btn" data-role="signin-toggle" onClick={() => setShowSignIn((s) => !s)}>
+        {showSignIn ? "Hide sign in" : "Already have an account? Sign in"}
+      </button>
+      {showSignIn && (
+        <form className="auth-form" onSubmit={submitSignIn}>
+          <input
+            className="input"
+            data-role="signin-username"
+            placeholder="Username"
+            value={signInUsername}
+            onChange={(e) => setSignInUsername(e.target.value)}
+          />
+          <input
+            className="input"
+            data-role="signin-password"
+            type="password"
+            placeholder="Password"
+            value={signInPassword}
+            onChange={(e) => setSignInPassword(e.target.value)}
+          />
+          <button className="btn btn-primary btn-sm" data-role="signin-submit" type="submit">
+            Sign in
+          </button>
+          {signInError && (
+            <div className="auth-error" data-role="auth-error">
+              {signInError}
+            </div>
+          )}
+        </form>
+      )}
+    </div>
+  );
+}
+
+function AdminPanel({
+  overview,
+  onClose,
+  onRestock,
+  onTransfer,
+  onPriceChange,
+  orderError,
+  children,
+}: {
+  overview: AdminOverviewT | null;
+  onClose: () => void;
+  onRestock: (itemId: string, warehouseId: string, quantity: number) => void;
+  onTransfer: (itemId: string, fromWarehouseId: string, toWarehouseId: string, quantity: number) => void;
+  onPriceChange: (itemId: string, price: number) => void;
+  orderError: string;
+  children?: React.ReactNode;
+}) {
+  const [restockValues, setRestockValues] = useState<Record<string, string>>({});
+  const [globalRestock, setGlobalRestock] = useState({ item: "", warehouse: "", quantity: "" });
+  const [priceValues, setPriceValues] = useState<Record<string, string>>({});
+  const [transferValues, setTransferValues] = useState<
+    Record<string, { from: string; to: string; qty: string }>
+  >({});
+
+  if (!overview) {
+    return (
+      <div className="admin-panel" data-role="admin-panel">
+        <div className="panel-header">
+          <h2>Admin</h2>
+          <button className="close-btn" onClick={onClose}>
+            ×
+          </button>
+        </div>
+        <div className="empty-state">Loading admin data...</div>
+      </div>
+    );
+  }
+
+  const warehouses = overview.warehouses;
+
+  const transferFor = (itemId: string) =>
+    transferValues[itemId] || { from: warehouses[0]?.id || "", to: warehouses[1]?.id || warehouses[0]?.id || "", qty: "" };
+
+  return (
+    <div className="admin-panel" data-role="admin-panel">
+      <div className="panel-header">
+        <h2>Admin</h2>
+        <button className="close-btn" onClick={onClose}>
+          ×
+        </button>
+      </div>
+
+      {orderError && (
+        <div className="auth-error" data-role="order-error">
+          {orderError}
+        </div>
+      )}
+
+      <div className="admin-revenue-box">
+        Total revenue: <span className="value" data-role="admin-revenue">${overview.revenue.toFixed(2)}</span>
+      </div>
+
+      <div className="progression-card">
+        <input data-role="restock-item" placeholder="Item" value={globalRestock.item}
+          onChange={(event) => setGlobalRestock(value => ({ ...value, item: event.target.value }))} />
+        <input data-role="restock-warehouse" placeholder="Warehouse" value={globalRestock.warehouse}
+          onChange={(event) => setGlobalRestock(value => ({ ...value, warehouse: event.target.value }))} />
+        <input data-role="restock-quantity" placeholder="Quantity" value={globalRestock.quantity}
+          onChange={(event) => setGlobalRestock(value => ({ ...value, quantity: event.target.value }))} />
+        <button data-role="restock-submit" className="btn btn-primary" onClick={() => {
+          const item = overview.items.find(entry => entry.name === globalRestock.item);
+          const warehouse = overview.warehouses.find(entry => entry.name === globalRestock.warehouse);
+          const quantity = Number(globalRestock.quantity);
+          if (item && warehouse && Number.isInteger(quantity) && quantity > 0) {
+            onRestock(item.id, warehouse.id, quantity);
+          }
+        }}>Restock</button>
+      </div>
+
+      <div className="admin-grid">
+        <div>
+          <h3 className="section-title">Items</h3>
+          {overview.items.map((it) => {
+            const transfer = transferFor(it.id);
+            return (
+              <div className="admin-item-row" data-role="admin-item-row"
+                data-price-input={JSON.stringify({ itemId: it.id,
+                  price: it.name === "Gaming Mouse" ? 1 : it.price })}
+                data-transfer-input={it.name === "Headphones" && warehouses.length >= 2
+                  ? JSON.stringify({
+                    itemId: it.id,
+                    fromWarehouseId: warehouses.find((warehouse) => warehouse.name === "East")?.id
+                      ?? warehouses[0].id,
+                    toWarehouseId: warehouses.find((warehouse) => warehouse.name === "West")?.id
+                      ?? warehouses[1].id,
+                    quantity: 25,
+                  })
+                  : undefined} key={it.id}>
+                <span>{it.name}</span>
+                <span data-role="admin-stock">{it.stock}</span>
+                <div className="admin-price-controls">
+                  <input
+                    type="number"
+                    min={0.01}
+                    step={0.01}
+                    className="input price-input"
+                    data-role="price-input"
+                    placeholder={it.price.toFixed(2)}
+                    value={priceValues[it.id] ?? ""}
+                    onChange={(e) => setPriceValues((prev) => ({ ...prev, [it.id]: e.target.value }))}
+                  />
+                  <button
+                    className="btn btn-primary btn-sm"
+                    data-role="price-submit"
+                    onClick={() => {
+                      const price = Number(priceValues[it.id]);
+                      if (Number.isFinite(price) && price > 0) {
+                        onPriceChange(it.id, price);
+                        setPriceValues((prev) => ({ ...prev, [it.id]: "" }));
+                      }
+                    }}
+                  >
+                    Set price
+                  </button>
+                </div>
+                <div className="admin-transfer-controls">
+                  <select
+                    className="input"
+                    data-role="transfer-from"
+                    value={transfer.from}
+                    onChange={(e) =>
+                      setTransferValues((prev) => ({ ...prev, [it.id]: { ...transferFor(it.id), from: e.target.value } }))
+                    }
+                  >
+                    {warehouses.map((w) => (
+                      <option key={w.id} value={w.id}>
+                        {w.name}
+                      </option>
+                    ))}
+                  </select>
+                  <select
+                    className="input"
+                    data-role="transfer-to"
+                    value={transfer.to}
+                    onChange={(e) =>
+                      setTransferValues((prev) => ({ ...prev, [it.id]: { ...transferFor(it.id), to: e.target.value } }))
+                    }
+                  >
+                    {warehouses.map((w) => (
+                      <option key={w.id} value={w.id}>
+                        {w.name}
+                      </option>
+                    ))}
+                  </select>
+                  <input
+                    type="number"
+                    min={1}
+                    className="input transfer-qty-input"
+                    data-role="transfer-qty"
+                    value={transfer.qty}
+                    onChange={(e) =>
+                      setTransferValues((prev) => ({ ...prev, [it.id]: { ...transferFor(it.id), qty: e.target.value } }))
+                    }
+                  />
+                  <button
+                    className="btn btn-ghost btn-sm"
+                    data-role="transfer-submit"
+                    onClick={() => {
+                      const qty = Number(transfer.qty);
+                      if (Number.isInteger(qty) && qty >= 1 && transfer.from && transfer.to && transfer.from !== transfer.to) {
+                        onTransfer(it.id, transfer.from, transfer.to, qty);
+                        setTransferValues((prev) => ({ ...prev, [it.id]: { ...transferFor(it.id), qty: "" } }));
+                      }
+                    }}
+                  >
+                    Transfer
+                  </button>
+                </div>
+              </div>
+            );
+          })}
+        </div>
+        <div>
+          <h3 className="section-title">Warehouses</h3>
+          <div style={{ marginBottom: 16 }}>
+            {overview.warehouses.map((w) => (
+              <span className="admin-warehouse-item" data-role="admin-warehouse-item" key={w.id}>
+                {w.name} — <span data-role="warehouse-total">{w.total}</span>
+              </span>
+            ))}
+          </div>
+          <h3 className="section-title">Stock by warehouse</h3>
+          {overview.locations.map((loc) => (
+            <div className="admin-location-row" data-role="admin-location-row"
+              data-restock-input={JSON.stringify({ itemId: loc.itemId,
+                warehouseId: loc.warehouseId, quantity: 1 })} key={loc.id}>
+              <span>
+                {loc.itemName} @ {loc.warehouseName}
+              </span>
+              <span data-role="admin-location-qty">{loc.quantity}</span>
+              <div className="admin-restock-controls">
+                <input
+                  type="number"
+                  min={1}
+                  className="input restock-input"
+                  data-role="restock-input"
+                  value={restockValues[loc.id] ?? ""}
+                  onChange={(e) => setRestockValues((prev) => ({ ...prev, [loc.id]: e.target.value }))}
+                  onKeyDown={(e) => {
+                    if (e.key === "Enter") {
+                      e.preventDefault();
+                      const qty = Number(restockValues[loc.id]);
+                      if (Number.isInteger(qty) && qty >= 1) {
+                        onRestock(loc.itemId, loc.warehouseId, qty);
+                        setRestockValues((prev) => ({ ...prev, [loc.id]: "" }));
+                      }
+                    }
+                  }}
+                />
+                <button
+                  className="btn btn-primary btn-sm"
+                  data-role="restock-submit"
+                  onClick={() => {
+                    const qty = Number(restockValues[loc.id]);
+                    if (Number.isInteger(qty) && qty >= 1) {
+                      onRestock(loc.itemId, loc.warehouseId, qty);
+                      setRestockValues((prev) => ({ ...prev, [loc.id]: "" }));
+                    }
+                  }}
+                >
+                  Restock
+                </button>
+              </div>
+            </div>
+          ))}
+        </div>
+      </div>
+
+      <div className="admin-grid" style={{ marginTop: 24 }}>
+        <div>
+          <h3 className="section-title">Low stock</h3>
+          <div data-role="low-stock-list">
+            {overview.lowStock.length === 0 ? (
+              <div className="empty-state">Nothing is running low</div>
+            ) : (
+              overview.lowStock.map((it) => (
+                <div className="admin-item-row" data-role="low-stock-item" key={it.id}>
+                  <span>{it.name}</span>
+                  <span>{it.stock}</span>
+                </div>
+              ))
+            )}
+          </div>
+        </div>
+        <div>
+          <h3 className="section-title">Category totals</h3>
+          {overview.categories.map((c) => (
+            <div className="admin-item-row" data-role="category-row" key={c.category}>
+              <span>{c.category}</span>
+              <span data-role="category-units">{c.units}</span>
+              <span data-role="category-revenue">${c.revenue.toFixed(2)}</span>
+            </div>
+          ))}
+        </div>
+      </div>
+      {children}
+    </div>
+  );
+}
+
+function FulfilmentPanel({
+  queue,
+  onClose,
+  onShip,
+  orderError,
+  children,
+}: {
+  queue: FulfilmentQueueT;
+  onClose: () => void;
+  onShip: (orderId: string) => void;
+  orderError: string;
+  children?: React.ReactNode;
+}) {
+  return (
+    <div className="admin-panel" data-role="fulfilment-panel">
+      <div className="panel-header">
+        <h2>Fulfilment queue</h2>
+        <button className="close-btn" onClick={onClose}>
+          ×
+        </button>
+      </div>
+
+      {orderError && (
+        <div className="auth-error" data-role="order-error">
+          {orderError}
+        </div>
+      )}
+
+      <div className="admin-revenue-box">
+        Orders waiting: <span className="value" data-role="queue-depth">{queue.depth}</span>
+      </div>
+
+      {queue.orders.length === 0 ? (
+        <div className="empty-state">Nothing waiting to ship</div>
+      ) : (
+        queue.orders.map((order) => (
+          <div className="order-item" data-role="queue-item" key={order.id}>
+            <div className="order-item-header">
+              <span>{new Date(order.createdAt).toLocaleString()}</span>
+            </div>
+            <div>{order.items.map((l) => `${l.name} ×${l.quantity}`).join(", ")}</div>
+            <div>
+              {order.items.map((l, idx) => (
+                <span className="pill-warning" data-role="queue-warehouse" key={`${l.itemId}-${idx}`}>
+                  {(l.warehouseNames || []).join(", ") || "Unknown"}
+                </span>
+              ))}
+            </div>
+            <button className="btn btn-primary btn-sm" data-role="ship-submit" style={{ marginTop: 8 }} onClick={() => onShip(order.id)}>
+              Mark shipped
+            </button>
+          </div>
+        ))
+      )}
+      {children}
+    </div>
+  );
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/ProgressionPanel.tsx b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/ProgressionPanel.tsx
new file mode 100644
index 00000000000..8499198b1cb
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/ProgressionPanel.tsx
@@ -0,0 +1,331 @@
+import React, { useCallback, useEffect, useState } from "react";
+
+type User = { username: string; isAdmin: boolean; isStaff: boolean; roles?: string[] };
+type Item = { id: string; name: string };
+type Order = { id: string; items: Array<{ name: string }>; total: number };
+
+async function request(path: string, token: string | null, options: RequestInit = {}) {
+  const response = await fetch(path, { ...options, headers: {
+    "Content-Type": "application/json", ...(token ? { Authorization: `Bearer ${token}` } : {}),
+  } });
+  const data = await response.json().catch(() => ({}));
+  if (!response.ok) throw new Error(data.error || "Request failed");
+  return data;
+}
+
+function nameFor(items: Item[], id: unknown) {
+  return items.find(item => item.id === String(id))?.name || String(id || "Unknown item");
+}
+
+export function ProgressionPanel({ token, user, items, orders, onSignIn, onRefreshItems,
+  onRefreshCart, staffOnly = false }: {
+  token: string | null;
+  user: User | null;
+  items: Item[];
+  orders: Order[];
+  onSignIn: (username: string, password: string) => Promise<void>;
+  onRefreshItems: () => Promise<void>;
+  onRefreshCart: () => Promise<void>;
+  staffOnly?: boolean;
+}) {
+  const [state, setState] = useState<any>({ tickets: [], promotions: [], notifications: [],
+    scheduledRestocks: [], ledger: [], reorderRules: [], activities: [], staffUsers: [], orders: [] });
+  const [error, setError] = useState("");
+  const [staffName, setStaffName] = useState("");
+  const [staffPassword, setStaffPassword] = useState("");
+  const [profileOpen, setProfileOpen] = useState(false);
+  const [supportOpen, setSupportOpen] = useState(false);
+  const [notificationsOpen, setNotificationsOpen] = useState(false);
+  const [profileName, setProfileName] = useState("");
+  const [profileAddress, setProfileAddress] = useState("");
+  const [supportEmail, setSupportEmail] = useState("");
+  const [supportSubject, setSupportSubject] = useState("");
+  const [supportMessage, setSupportMessage] = useState("");
+  const [supportReference, setSupportReference] = useState("");
+  const [restoreWarning, setRestoreWarning] = useState("");
+
+  const refresh = useCallback(async () => {
+    try {
+      const next = await request("/api/progression/state", token);
+      setState(next);
+      if (next.profile) {
+        setProfileName(next.profile.name || "");
+        setProfileAddress(next.profile.address || "");
+      }
+    } catch (err: any) {
+      setError(err.message);
+    }
+  }, [token]);
+
+  useEffect(() => {
+    refresh();
+    const timer = setInterval(refresh, 1000);
+    return () => clearInterval(timer);
+  }, [refresh]);
+
+  const act = async (path: string, options: RequestInit = {}) => {
+    setError("");
+    try {
+      const result = await request(path, token, options);
+      await refresh();
+      return result;
+    } catch (err: any) {
+      setError(err.message);
+      return null;
+    }
+  };
+
+  if (staffOnly) {
+    if (!(user?.isStaff || user?.isAdmin)) return null;
+    return <StaffTools user={user} state={state} items={items}
+      orders={orders.length ? orders : state.orders || []} act={act}
+      onRefreshItems={onRefreshItems} />;
+  }
+
+  const submitSupport = async () => {
+    const result = await act("/api/progression/support", { method: "POST", body: JSON.stringify({
+      email: supportEmail, subject: supportSubject, message: supportMessage,
+    }) });
+    if (result) setSupportReference(result.ticket.reference);
+  };
+
+  const saveProfile = () => act("/api/progression/profile", { method: "PUT",
+    body: JSON.stringify({ name: profileName, address: profileAddress }) });
+  const preference = state.preference || { order: false, stock: false };
+
+  return <section className="progression-panel">
+    {!user ? <div className="progression-card staff-signin">
+      <h3>Staff sign in</h3>
+      <input data-role="staff-signin-username" value={staffName}
+        onChange={event => setStaffName(event.target.value)} placeholder="Username" />
+      <input data-role="staff-signin-password" type="password" value={staffPassword}
+        onChange={event => setStaffPassword(event.target.value)} placeholder="Password" />
+      <button data-role="staff-signin-submit" className="btn btn-ghost" onClick={() => onSignIn(staffName, staffPassword)}>Sign in</button>
+    </div> : <span data-role="staff-current-user" className="progression-current-user">{user.username}</span>}
+
+    <nav className="progression-nav">
+      {user && <button data-role="profile-link" className="btn btn-ghost" onClick={() => setProfileOpen(value => !value)}>Profile</button>}
+      <button data-role="support-link" className="btn btn-ghost" onClick={() => setSupportOpen(value => !value)}>Support</button>
+      {user && <button data-role="notification-settings" className="btn btn-ghost" onClick={() => setNotificationsOpen(value => !value)}>Notification settings</button>}
+      {user && <button data-role="notifications-toggle" className="btn btn-ghost" onClick={() => setNotificationsOpen(value => !value)}>Notifications</button>}
+    </nav>
+
+    {profileOpen && user && <div className="progression-card">
+      <h3>Profile</h3>
+      <input data-role="profile-name" value={profileName} onChange={event => setProfileName(event.target.value)} placeholder="Name" />
+      <input data-role="profile-address" value={profileAddress} onChange={event => setProfileAddress(event.target.value)} placeholder="Address" />
+      <button data-role="profile-save" className="btn btn-primary" onClick={saveProfile}>Save</button>
+      <p data-role="profile-address-summary">{state.profile?.address || ""}</p>
+    </div>}
+
+    {supportOpen && <div className="progression-card">
+      <h3>Support</h3>
+      <input data-role="support-email" value={supportEmail} onChange={event => setSupportEmail(event.target.value)} placeholder="Email" />
+      <input data-role="support-subject" value={supportSubject} onChange={event => setSupportSubject(event.target.value)} placeholder="Subject" />
+      <textarea data-role="support-message" value={supportMessage} onChange={event => setSupportMessage(event.target.value)} placeholder="Message" />
+      <button data-role="support-submit" className="btn btn-primary" onClick={submitSupport}>Submit</button>
+      {supportReference && <span data-role="support-reference">{supportReference}</span>}
+      {(state.tickets || []).map((ticket: any) => <SupportTicket key={ticket.id} ticket={ticket}
+        user={user} orders={state.orders || orders} act={act} />)}
+    </div>}
+
+    {notificationsOpen && user && <div className="progression-card">
+      <h3>Notifications</h3>
+      <button data-role="notification-order" data-state={preference.order ? "on" : "off"} className="btn btn-ghost"
+        onClick={() => setState((value: any) => ({ ...value, preference: { ...preference, order: !preference.order } }))}>
+        Order notifications {preference.order ? "on" : "off"}
+      </button>
+      <button data-role="notification-stock" data-state={preference.stock ? "on" : "off"} className="btn btn-ghost"
+        onClick={() => setState((value: any) => ({ ...value, preference: { ...preference, stock: !preference.stock } }))}>
+        Stock notifications {preference.stock ? "on" : "off"}
+      </button>
+      <span data-role="notification-unread-count">{(state.notifications || []).length}</span>
+      <button data-role="notification-save" className="btn btn-primary" onClick={() => act("/api/progression/preferences", {
+        method: "PUT", body: JSON.stringify(preference),
+      })}>Save</button>
+      {(state.notifications || []).map((notification: any) =>
+        <div data-role="notification-item" key={notification.id}>{notification.message}</div>)}
+    </div>}
+
+    {state.archive && <div data-role="expired-cart" className="progression-card">
+      <span data-role="cart-expired-notice">Your cart expired</span>
+      <button data-role="restore-cart" className="btn btn-primary" onClick={async () => {
+        const result = await act("/api/progression/cart/restore", { method: "POST" });
+        if (result) {
+          setRestoreWarning(result.unavailable.join(", "));
+          await onRefreshCart();
+        }
+      }}>Restore cart</button>
+    </div>}
+    {restoreWarning && <div data-role="cart-restore-warning">{restoreWarning}</div>}
+    {error && <div className="auth-error">{error}</div>}
+  </section>;
+}
+
+function SupportTicket({ ticket, user, orders, act }: any) {
+  const [assignee, setAssignee] = useState(ticket.assignee || "");
+  const [priority, setPriority] = useState(ticket.priority || "normal");
+  const [status, setStatus] = useState(ticket.status || "new");
+  const [reply, setReply] = useState("");
+  const [orderId, setOrderId] = useState("");
+  const staff = user?.isStaff || user?.isAdmin;
+  const order = ticket.order;
+  const actionInput = JSON.stringify({ caseId: ticket.id, orderId });
+  return <article data-role="support-ticket" data-entity-id={ticket.id} className="support-ticket">
+    <strong>{ticket.subject}</strong> <span data-role="support-status">{ticket.status}</span>
+    <span>{ticket.reference}</span>
+    {staff && <>
+      <input data-role="support-assignee" value={assignee} onChange={event => setAssignee(event.target.value)} placeholder="Assignee" />
+      <input data-role="support-priority" value={priority} onChange={event => setPriority(event.target.value)} placeholder="Priority" />
+      <input data-role="support-status-input" value={status} onChange={event => setStatus(event.target.value)} placeholder="Status" />
+      <button data-role="support-update" className="btn btn-ghost" onClick={() => act(`/api/progression/support/${ticket.id}`, {
+        method: "PATCH", body: JSON.stringify({ assignee, priority, status }),
+      })}>Update</button>
+    </>}
+    {!order && !staff && <div>
+      {(orders || []).map((entry: any) => <button key={entry.id} data-role="support-order-option"
+        className="btn btn-ghost btn-sm" onClick={() => setOrderId(entry.id)}>
+        {entry.items.map((line: any) => line.name).join(", ")}
+      </button>)}
+      <button data-role="support-link-order" data-action-input={actionInput} className="btn btn-ghost"
+        onClick={() => act(`/api/support/cases/${ticket.id}/order`, { method: "POST", body: JSON.stringify({ orderId }) })}>
+        Link order
+      </button>
+    </div>}
+    {order && <div data-role="support-order">{order.items.map((line: any) => line.name).join(", ")}</div>}
+    {staff && order && <button data-role="support-refund" data-action-input={JSON.stringify({ caseId: ticket.id })}
+      className="btn btn-danger" onClick={() => act(`/api/support/cases/${ticket.id}/refund`, { method: "POST" })}>Refund</button>}
+    <span data-role="support-refund-total">{Number(ticket.refundTotal || 0).toFixed(2)}</span>
+    {(ticket.replies || []).map((entry: any) => <div data-role="support-reply-item" key={entry.id || entry.createdAt}>{entry.username}: {entry.body}</div>)}
+    <input data-role="support-reply" value={reply} onChange={event => setReply(event.target.value)} placeholder="Reply" />
+    <button data-role="support-reply-submit" className="btn btn-ghost" onClick={() => act(`/api/progression/support/${ticket.id}/replies`, {
+      method: "POST", body: JSON.stringify({ body: reply }),
+    })}>Reply</button>
+  </article>;
+}
+
+function StaffTools({ user, state, items, orders, act, onRefreshItems }: any) {
+  const [section, setSection] = useState("support");
+  const [catalog, setCatalog] = useState({ name: "", category: "", price: "", variants: "" });
+  const [promotion, setPromotion] = useState({ code: "", discount: "", limit: "",
+    start: new Date(Date.now() - 60_000).toISOString().slice(0, 16),
+    end: new Date(Date.now() + 86_400_000).toISOString().slice(0, 16) });
+  const [restock, setRestock] = useState({ item: "", warehouse: "East", quantity: "", delaySeconds: "" });
+  const [reorder, setReorder] = useState({ item: "", threshold: "", quantity: "" });
+  const [roles, setRoles] = useState<Record<string, string>>({});
+  const findItem = (name: string) => items.find((entry: any) => entry.name === name);
+
+  return <div className="progression-staff-tools">
+    <nav className="progression-nav">
+      <button data-role="promotions-link" onClick={() => setSection("promotions")}>Promotions</button>
+      <button data-role="reorder-link" onClick={() => setSection("reorder")}>Reorder</button>
+      <button data-role="activity-link" onClick={() => setSection("activity")}>Activity</button>
+    </nav>
+
+    {user.isAdmin && <div className="progression-card">
+      <h3>Staff roles</h3>
+      {(state.staffUsers || []).map((entry: any) => <div data-role="staff-role-row" data-account-id={entry.id} key={entry.username}>
+        <span>{entry.username} {entry.roles?.join(", ")}</span>
+        <input data-role="staff-role-select"
+          value={roles[entry.username] ?? entry.roles?.join(", ") ?? ""}
+          onChange={event => setRoles(value => ({ ...value, [entry.username]: event.target.value }))} />
+        <button data-role="staff-role-save" onClick={() => act("/api/progression/staff/roles", {
+          method: "POST", body: JSON.stringify({ username: entry.username,
+            roles: (roles[entry.username] || "").split(",").map(value => value.trim()).filter(Boolean) }),
+        })}>Save</button>
+      </div>)}
+    </div>}
+
+    {user.isAdmin && <div className="progression-card">
+      <h3>Catalog</h3>
+      <input data-role="catalog-name" value={catalog.name} placeholder="Name"
+        onChange={event => setCatalog(value => ({ ...value, name: event.target.value }))} />
+      <input data-role="catalog-category" value={catalog.category} placeholder="Category"
+        onChange={event => setCatalog(value => ({ ...value, category: event.target.value }))} />
+      <input data-role="catalog-price" value={catalog.price} placeholder="Price"
+        onChange={event => setCatalog(value => ({ ...value, price: event.target.value }))} />
+      <input data-role="catalog-variants" value={catalog.variants} placeholder="Variants"
+        onChange={event => setCatalog(value => ({ ...value, variants: event.target.value }))} />
+      <button data-role="catalog-save" onClick={async () => {
+        await act("/api/progression/catalog", { method: "POST", body: JSON.stringify(catalog) });
+        await onRefreshItems();
+      }}>Save product</button>
+    </div>}
+
+    {(state.tickets || []).map((ticket: any) => <SupportTicket key={ticket.id} ticket={ticket}
+      user={user} orders={orders} act={act} />)}
+
+    {section === "promotions" && <div className="progression-card">
+      <h3>Promotions</h3>
+      <input data-role="promotion-code" value={promotion.code} placeholder="Code"
+        onChange={event => setPromotion(value => ({ ...value, code: event.target.value }))} />
+      <input data-role="promotion-discount" value={promotion.discount} placeholder="Discount"
+        onChange={event => setPromotion(value => ({ ...value, discount: event.target.value }))} />
+      <input data-role="promotion-start" type="datetime-local" value={promotion.start}
+        onChange={event => setPromotion(value => ({ ...value, start: event.target.value }))} />
+      <input data-role="promotion-end" type="datetime-local" value={promotion.end}
+        onChange={event => setPromotion(value => ({ ...value, end: event.target.value }))} />
+      <input data-role="promotion-limit" value={promotion.limit} placeholder="Limit"
+        onChange={event => setPromotion(value => ({ ...value, limit: event.target.value }))} />
+      <button data-role="promotion-submit" data-promotion-code={promotion.code} onClick={() => act("/api/progression/promotions", {
+        method: "POST", body: JSON.stringify(promotion),
+      })}>Save promotion</button>
+      {(state.promotions || []).map((entry: any) => <div data-role="promotion-item" className="promotion-item" key={entry.id}>
+        <strong>{entry.code}</strong>
+        <span data-role="promotion-discount">{entry.discount}</span>
+        <span data-role="promotion-start">{entry.start}</span>
+        <span data-role="promotion-end">{entry.end}</span>
+        <span data-role="promotion-limit">{entry.limit}</span>
+        <span data-role="promotion-report">
+          <span data-role="promotion-redemptions">{entry.redemptions}</span>
+          <span data-role="promotion-revenue">{Number(entry.revenue).toFixed(2)}</span>
+        </span>
+      </div>)}
+    </div>}
+
+    <div className="progression-card">
+      <h3>Scheduled restocks</h3>
+      <input data-role="schedule-restock-item" value={restock.item} placeholder="Item"
+        onChange={event => setRestock(value => ({ ...value, item: event.target.value }))} />
+      <input data-role="schedule-restock-warehouse" value={restock.warehouse} placeholder="Warehouse"
+        onChange={event => setRestock(value => ({ ...value, warehouse: event.target.value }))} />
+      <input data-role="schedule-restock-qty" value={restock.quantity} placeholder="Quantity"
+        onChange={event => setRestock(value => ({ ...value, quantity: event.target.value }))} />
+      <input data-role="schedule-restock-delay" value={restock.delaySeconds} placeholder="Delay"
+        onChange={event => setRestock(value => ({ ...value, delaySeconds: event.target.value }))} />
+      <button data-role="schedule-restock-submit" data-action-input={JSON.stringify(restock)}
+        onClick={() => act("/api/admin/scheduled-restocks", { method: "POST", body: JSON.stringify({
+          itemId: findItem(restock.item)?.id, warehouseId: state.warehouses?.find((entry: any) => entry.name === restock.warehouse)?.id,
+          quantity: Number(restock.quantity), delaySeconds: Number(restock.delaySeconds),
+        }) })}>Schedule</button>
+      {(state.scheduledRestocks || []).map((entry: any) => <div data-role="pending-restock-item" data-entity-id={entry.id} key={entry.id}>
+        {nameFor(items, entry.itemId)} <span data-role="pending-restock-remaining">{Math.max(0, Math.ceil((new Date(entry.dueAt).getTime() - Date.now()) / 1000))}</span>
+        <button data-role="pending-restock-cancel" onClick={() => act(`/api/admin/scheduled-restocks/${entry.id}`, { method: "DELETE" })}>Cancel</button>
+      </div>)}
+      {(state.ledger || []).map((entry: any) => <div data-role="stock-ledger-entry" key={entry.id}>{nameFor(items, entry.itemId)} +{entry.quantity}</div>)}
+    </div>
+
+    {section === "reorder" && <div className="progression-card">
+      <input data-role="reorder-item" value={reorder.item} onChange={event => setReorder(value => ({ ...value, item: event.target.value }))} />
+      <input data-role="reorder-threshold" value={reorder.threshold} onChange={event => setReorder(value => ({ ...value, threshold: event.target.value }))} />
+      <input data-role="reorder-quantity" value={reorder.quantity} onChange={event => setReorder(value => ({ ...value, quantity: event.target.value }))} />
+      <button data-role="reorder-submit" onClick={() => act("/api/progression/reorder-rules", { method: "POST", body: JSON.stringify({
+        itemId: findItem(reorder.item)?.id, threshold: Number(reorder.threshold), quantity: Number(reorder.quantity),
+      }) })}>Save rule</button>
+      {(state.reorderRules || []).map((entry: any) => <div data-role="reorder-rule-item" key={entry.id}>{nameFor(items, entry.itemId)} {entry.threshold} / {entry.quantity}</div>)}
+    </div>}
+
+    {section === "activity" && <div className="progression-card">
+      {(state.activities || []).map((entry: any) => <div data-role="activity-entry" key={entry.id}>
+        <span data-role="activity-actor">{entry.actor}</span>
+        <span data-role="activity-action">{entry.action}</span>
+        <span data-role="activity-subject">{entry.subject}</span>
+        <time data-role="activity-time">{entry.createdAt}</time>
+      </div>)}
+    </div>}
+
+    {(orders || []).filter((order: any) => order.status === "delivered").map((order: any) =>
+      <div data-role="completed-order-item" key={order.id}>{order.items.map((line: any) => line.name).join(", ")}
+        <span data-role="completed-order-status">{order.status}</span></div>)}
+  </div>;
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/index.css b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/index.css
new file mode 100644
index 00000000000..ab1f5321f4d
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/index.css
@@ -0,0 +1,744 @@
+:root {
+  --primary: #00ed64;
+  --primary-hover: #00c957;
+  --secondary: #00684a;
+  --bg: #001e2b;
+  --surface: #023430;
+  --surface-2: #033d38;
+  --border: #1c2d38;
+  --text: #e8edeb;
+  --text-muted: #889397;
+  --accent: #00ed64;
+  --success: #00ed64;
+  --warning: #ffc010;
+  --danger: #ff4f4f;
+  --sp-1: 8px;
+  --sp-2: 12px;
+  --sp-3: 16px;
+  --sp-4: 24px;
+}
+
+* {
+  box-sizing: border-box;
+}
+
+html,
+body,
+#root {
+  height: 100%;
+}
+
+body {
+  margin: 0;
+  background: var(--bg);
+  color: var(--text);
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+}
+
+button {
+  font-family: inherit;
+  cursor: pointer;
+}
+
+input,
+select,
+textarea {
+  font-family: inherit;
+}
+
+.app {
+  min-height: 100%;
+  display: flex;
+  flex-direction: column;
+}
+
+/* ---------- Header ---------- */
+
+.header {
+  position: sticky;
+  top: 0;
+  /* Stays above every panel/backdrop/admin view so header controls (search,
+     cart, orders, admin, sign out) remain usable even while another panel is
+     left open — panels here are non-modal with respect to navigation. */
+  z-index: 90;
+  display: flex;
+  align-items: center;
+  gap: var(--sp-3);
+  padding: var(--sp-2) var(--sp-4);
+  background: var(--surface);
+  border-bottom: 1px solid var(--border);
+}
+
+.app-title {
+  margin: 0;
+  font-size: 1.25rem;
+  font-weight: 700;
+  color: var(--primary);
+  white-space: nowrap;
+}
+
+.search-input {
+  flex: 1;
+  max-width: 420px;
+}
+
+.header-spacer {
+  flex: 1;
+}
+
+.header-actions {
+  display: flex;
+  align-items: center;
+  gap: var(--sp-2);
+}
+
+.current-user {
+  color: var(--text);
+  font-weight: 600;
+  margin-right: var(--sp-1);
+}
+
+/* ---------- Inputs & buttons ---------- */
+
+.input {
+  width: 100%;
+  background: var(--bg);
+  border: 1px solid var(--border);
+  color: var(--text);
+  border-radius: 8px;
+  padding: 10px 12px;
+  font-size: 0.9rem;
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s;
+}
+
+.input::placeholder {
+  color: var(--text-muted);
+}
+
+.input:focus {
+  border-color: var(--primary);
+  box-shadow: 0 0 0 3px rgba(0, 237, 100, 0.2);
+}
+
+.btn {
+  border-radius: 8px;
+  border: 1px solid transparent;
+  padding: 9px 16px;
+  font-size: 0.9rem;
+  font-weight: 600;
+  transition: background 0.15s, opacity 0.15s;
+  white-space: nowrap;
+}
+
+.btn-primary {
+  background: var(--primary);
+  color: #00251a;
+}
+
+.btn-primary:hover:not(:disabled) {
+  background: var(--primary-hover);
+}
+
+.btn-ghost {
+  background: transparent;
+  border: 1px solid var(--border);
+  color: var(--text);
+}
+
+.btn-ghost:hover:not(:disabled) {
+  border-color: var(--primary);
+  color: var(--primary);
+}
+
+.btn-danger {
+  background: transparent;
+  border: 1px solid var(--danger);
+  color: var(--danger);
+}
+
+.btn-danger:hover:not(:disabled) {
+  background: rgba(255, 79, 79, 0.1);
+}
+
+.btn:disabled {
+  opacity: 0.45;
+  cursor: not-allowed;
+}
+
+.btn-sm {
+  padding: 5px 10px;
+  font-size: 0.8rem;
+}
+
+/* ---------- Badges ---------- */
+
+.badge {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-width: 22px;
+  height: 22px;
+  padding: 0 6px;
+  border-radius: 999px;
+  background: var(--primary);
+  color: #00251a;
+  font-size: 0.75rem;
+  font-weight: 700;
+}
+
+.badge-muted {
+  background: var(--border);
+  color: var(--text-muted);
+}
+
+.pill-danger {
+  display: inline-block;
+  padding: 2px 10px;
+  border-radius: 999px;
+  background: rgba(255, 79, 79, 0.15);
+  color: var(--danger);
+  font-size: 0.75rem;
+  font-weight: 700;
+}
+
+.pill-warning {
+  display: inline-block;
+  padding: 2px 10px;
+  border-radius: 999px;
+  background: rgba(255, 192, 16, 0.15);
+  color: var(--warning);
+  font-size: 0.75rem;
+  font-weight: 700;
+}
+
+/* ---------- Layout ---------- */
+
+.content-row {
+  flex: 1;
+  display: flex;
+  align-items: flex-start;
+  max-width: 1400px;
+  width: 100%;
+  margin: 0 auto;
+}
+
+.main {
+  flex: 1;
+  min-width: 0;
+  padding: var(--sp-4);
+  width: 100%;
+}
+
+.section-title {
+  font-size: 1.1rem;
+  font-weight: 700;
+  margin: 0 0 var(--sp-3);
+  color: var(--text);
+}
+
+.item-list,
+.search-results {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(220px, 1fr));
+  gap: var(--sp-3);
+}
+
+/* ---------- Item card ---------- */
+
+.item-card {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: 12px;
+  padding: var(--sp-3);
+  display: flex;
+  flex-direction: column;
+  gap: var(--sp-1);
+  cursor: pointer;
+  transition: border-color 0.15s, transform 0.1s;
+}
+
+.item-card:hover {
+  border-color: var(--primary);
+}
+
+.item-card.out-of-stock-card {
+  opacity: 0.7;
+}
+
+.item-name {
+  font-weight: 700;
+  font-size: 1rem;
+}
+
+.item-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+}
+
+.item-price {
+  font-weight: 700;
+  text-align: right;
+  color: var(--text);
+}
+
+.item-stock {
+  color: var(--text-muted);
+  font-size: 0.85rem;
+}
+
+.item-stock.low {
+  color: var(--warning);
+  font-weight: 700;
+}
+
+.item-actions {
+  display: flex;
+  gap: var(--sp-1);
+  margin-top: var(--sp-1);
+}
+
+.item-actions .btn {
+  flex: 1;
+}
+
+/* ---------- Panels ---------- */
+
+.backdrop {
+  position: fixed;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.5);
+  z-index: 30;
+  opacity: 0;
+  pointer-events: none;
+  transition: opacity 0.2s ease;
+}
+
+.backdrop.open {
+  opacity: 1;
+  /* Purely decorative: panels reflow the main content area away from their
+     own footprint (see .content-row inline margin), so the backdrop never
+     needs to capture clicks to protect anything underneath it — and must
+     not, since header/grid controls stay reachable while a panel is left
+     open between unrelated interactions. */
+  pointer-events: none;
+}
+
+.panel {
+  position: fixed;
+  top: 0;
+  right: 0;
+  bottom: 0;
+  width: min(420px, 100%);
+  background: var(--surface);
+  border-left: 1px solid var(--border);
+  z-index: 31;
+  transform: translateX(100%);
+  transition: transform 0.25s ease;
+  display: flex;
+  flex-direction: column;
+  padding: var(--sp-4);
+  overflow-y: auto;
+}
+
+.panel.open {
+  transform: translateX(0);
+}
+
+.panel-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  margin-bottom: var(--sp-3);
+}
+
+.panel-header h2 {
+  margin: 0;
+  font-size: 1.1rem;
+}
+
+.close-btn {
+  background: transparent;
+  border: none;
+  color: var(--text-muted);
+  font-size: 1.3rem;
+  line-height: 1;
+}
+
+.close-btn:hover {
+  color: var(--text);
+}
+
+/* ---------- Cart ---------- */
+
+.cart-item {
+  display: flex;
+  align-items: center;
+  gap: var(--sp-2);
+  padding: var(--sp-2) 0;
+  border-bottom: 1px solid var(--border);
+}
+
+.cart-item-name {
+  flex: 1;
+  font-weight: 600;
+}
+
+.cart-quantity-input {
+  width: 56px;
+  text-align: center;
+}
+
+.cart-line-price {
+  min-width: 70px;
+  text-align: right;
+  color: var(--text-muted);
+  font-size: 0.85rem;
+}
+
+.cart-summary {
+  margin-top: var(--sp-3);
+  padding-top: var(--sp-3);
+  border-top: 1px solid var(--border);
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  font-weight: 700;
+  font-size: 1.05rem;
+}
+
+/* ---------- Orders ---------- */
+
+.order-item {
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: var(--sp-2) var(--sp-3);
+  margin-bottom: var(--sp-2);
+}
+
+.order-item-header {
+  display: flex;
+  justify-content: space-between;
+  font-size: 0.8rem;
+  color: var(--text-muted);
+  margin-bottom: var(--sp-1);
+}
+
+.order-total {
+  font-weight: 700;
+  margin-top: var(--sp-1);
+  text-align: right;
+}
+
+/* ---------- Item detail ---------- */
+
+.item-detail {
+  background: var(--surface);
+  border-left: 1px solid var(--border);
+  flex-shrink: 0;
+  width: min(420px, 100%);
+  padding: var(--sp-4);
+  position: sticky;
+  top: 61px;
+  max-height: calc(100vh - 61px);
+  overflow-y: auto;
+}
+
+@media (max-width: 800px) {
+  .item-detail {
+    position: fixed;
+    top: 61px;
+    right: 0;
+    bottom: 0;
+    z-index: 25;
+    max-height: none;
+    box-shadow: -8px 0 24px rgba(0, 0, 0, 0.4);
+  }
+}
+
+.detail-description {
+  color: var(--text-muted);
+  margin: var(--sp-2) 0 var(--sp-3);
+}
+
+.review-item {
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: var(--sp-2) var(--sp-3);
+  margin-bottom: var(--sp-2);
+}
+
+.review-item-header {
+  display: flex;
+  justify-content: space-between;
+  font-size: 0.8rem;
+  color: var(--text-muted);
+}
+
+.review-form {
+  display: flex;
+  gap: var(--sp-2);
+  margin-top: var(--sp-3);
+  flex-wrap: wrap;
+}
+
+.review-form select {
+  background: var(--bg);
+  border: 1px solid var(--border);
+  color: var(--text);
+  border-radius: 8px;
+  padding: 9px 10px;
+}
+
+.review-form .input {
+  flex: 1;
+  min-width: 160px;
+}
+
+/* ---------- Admin ---------- */
+
+.admin-panel {
+  position: fixed;
+  inset: 0;
+  z-index: 35;
+  background: var(--bg);
+  overflow-y: auto;
+  padding: var(--sp-4);
+}
+
+.admin-grid {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: var(--sp-4);
+}
+
+@media (max-width: 900px) {
+  .admin-grid {
+    grid-template-columns: 1fr;
+  }
+}
+
+.admin-item-row,
+.admin-location-row {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: var(--sp-2);
+  padding: var(--sp-2);
+  border-bottom: 1px solid var(--border);
+  flex-wrap: wrap;
+}
+
+.admin-restock-controls,
+.admin-price-controls,
+.admin-transfer-controls {
+  display: flex;
+  align-items: center;
+  gap: var(--sp-1);
+}
+
+.restock-input,
+.price-input {
+  width: 70px;
+}
+
+.admin-transfer-controls select {
+  background: var(--bg);
+  border: 1px solid var(--border);
+  color: var(--text);
+  border-radius: 8px;
+  padding: 9px 8px;
+  font-size: 0.85rem;
+}
+
+.transfer-qty-input {
+  width: 56px;
+}
+
+.admin-warehouse-item {
+  padding: var(--sp-1) var(--sp-2);
+  background: var(--surface-2);
+  border-radius: 8px;
+  border: 1px solid var(--border);
+  margin-right: var(--sp-1);
+  display: inline-block;
+}
+
+.order-item-actions {
+  display: flex;
+  flex-wrap: wrap;
+  gap: var(--sp-1);
+  margin-top: var(--sp-2);
+}
+
+.admin-revenue-box {
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: var(--sp-3);
+  margin-bottom: var(--sp-3);
+  font-size: 1.2rem;
+  font-weight: 700;
+}
+
+.admin-revenue-box .value {
+  color: var(--primary);
+}
+
+/* ---------- Auth ---------- */
+
+.auth-box {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: 12px;
+  padding: var(--sp-3);
+  display: flex;
+  flex-direction: column;
+  gap: var(--sp-2);
+  min-width: 220px;
+}
+
+.auth-form {
+  display: flex;
+  flex-direction: column;
+  gap: var(--sp-1);
+}
+
+.auth-error {
+  color: var(--danger);
+  font-size: 0.8rem;
+}
+
+.link-btn {
+  background: none;
+  border: none;
+  color: var(--primary);
+  font-size: 0.8rem;
+  text-decoration: underline;
+  padding: 0;
+  align-self: flex-start;
+}
+
+/* ---------- Feedback ---------- */
+
+.toast {
+  position: fixed;
+  top: 76px;
+  left: 50%;
+  transform: translateX(-50%);
+  background: var(--danger);
+  color: #2a0000;
+  font-weight: 600;
+  padding: 10px 18px;
+  border-radius: 8px;
+  z-index: 60;
+  box-shadow: 0 4px 12px rgba(0, 0, 0, 0.35);
+}
+
+.empty-state {
+  color: var(--text-muted);
+  text-align: center;
+  padding: var(--sp-4);
+}
+
+.loading-screen {
+  position: fixed;
+  inset: 0;
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  gap: var(--sp-2);
+  background: var(--bg);
+  color: var(--text-muted);
+  z-index: 100;
+}
+
+.spinner {
+  width: 36px;
+  height: 36px;
+  border-radius: 50%;
+  border: 3px solid var(--border);
+  border-top-color: var(--primary);
+  animation: spin 0.8s linear infinite;
+}
+
+@keyframes spin {
+  to {
+    transform: rotate(360deg);
+  }
+}
+
+.muted {
+  color: var(--text-muted);
+  font-size: 0.85rem;
+}
+
+.stars {
+  color: var(--warning);
+}
+
+.progression-panel {
+  margin-top: 32px;
+  display: grid;
+  gap: 16px;
+}
+
+.progression-nav,
+.progression-filters,
+.cart-promotion-row {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px;
+}
+
+.progression-card,
+.support-ticket {
+  display: grid;
+  gap: 10px;
+  padding: 16px;
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  background: var(--surface);
+}
+
+.support-ticket {
+  margin-top: 12px;
+}
+
+.progression-card input,
+.progression-card textarea,
+.progression-filters input,
+.progression-filters select {
+  min-width: 150px;
+  padding: 9px 10px;
+  border: 1px solid var(--border);
+  border-radius: 7px;
+  background: var(--bg);
+  color: var(--text);
+}
+
+.progression-current-user {
+  color: var(--text-muted);
+}
+
+.progression-staff-tools {
+  display: grid;
+  gap: 16px;
+  margin-top: 24px;
+}
+
+.promotion-item,
+.pager {
+  display: flex;
+  gap: 12px;
+  align-items: center;
+}
+
+.pager {
+  justify-content: flex-end;
+  margin-top: 12px;
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/main.tsx b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/main.tsx
new file mode 100644
index 00000000000..9b67590a069
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/src/main.tsx
@@ -0,0 +1,10 @@
+import React from "react";
+import ReactDOM from "react-dom/client";
+import App from "./App";
+import "./index.css";
+
+ReactDOM.createRoot(document.getElementById("root")!).render(
+  <React.StrictMode>
+    <App />
+  </React.StrictMode>
+);
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/client/tsconfig.json b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/tsconfig.json
new file mode 100644
index 00000000000..da113c82b79
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/tsconfig.json
@@ -0,0 +1,16 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "useDefineForClassFields": true,
+    "lib": ["ES2020", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "skipLibCheck": true,
+    "moduleResolution": "Bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx",
+    "strict": false
+  },
+  "include": ["src"]
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/client/vite.config.ts b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/vite.config.ts
new file mode 100644
index 00000000000..08359474a7c
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/client/vite.config.ts
@@ -0,0 +1,24 @@
+import { defineConfig } from "vite";
+import react from "@vitejs/plugin-react";
+
+const apiPort = Number(process.env.API_PORT) || 6401;
+const vitePort = Number(process.env.VITE_PORT) || 6673;
+
+export default defineConfig({
+  plugins: [react()],
+  server: {
+    host: "0.0.0.0",
+    port: vitePort,
+    proxy: {
+      "/api": {
+        target: `http://localhost:${apiPort}`,
+        changeOrigin: true,
+      },
+      "/socket.io": {
+        target: `http://localhost:${apiPort}`,
+        ws: true,
+        changeOrigin: true,
+      },
+    },
+  },
+});
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/package.json b/tools/stack-bench/reference-apps/ecommerce/mongodb/package.json
new file mode 100644
index 00000000000..88476f194b8
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/package.json
@@ -0,0 +1,7 @@
+{
+  "name": "stack-bench-ecommerce-mongodb-reference",
+  "private": true,
+  "scripts": {
+    "start": "npm --prefix server run start"
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/reference.json b/tools/stack-bench/reference-apps/ecommerce/mongodb/reference.json
new file mode 100644
index 00000000000..71356eeb87f
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/reference.json
@@ -0,0 +1,8 @@
+{
+  "schemaVersion": 1,
+  "kind": "node-api",
+  "installDirectories": ["server", "client"],
+  "server": { "directory": "server" },
+  "client": { "directory": "client" },
+  "requiredEnvironment": ["DATABASE_URL", "JWT_SECRET", "PORT"]
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/server/package-lock.json b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/package-lock.json
new file mode 100644
index 00000000000..caed184e440
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/package-lock.json
@@ -0,0 +1,2128 @@
+{
+  "name": "server",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "server",
+      "version": "1.0.0",
+      "dependencies": {
+        "bcryptjs": "^2.4.3",
+        "cors": "^2.8.5",
+        "dotenv": "^16.4.5",
+        "express": "^4.19.2",
+        "jsonwebtoken": "^9.0.2",
+        "mongoose": "^8.5.0",
+        "socket.io": "^4.7.5"
+      },
+      "devDependencies": {
+        "@types/cors": "^2.8.17",
+        "@types/express": "^4.17.21",
+        "@types/jsonwebtoken": "^9.0.6",
+        "@types/node": "^20.14.9",
+        "tsx": "^4.16.2",
+        "typescript": "^5.5.3"
+      }
+    },
+    "node_modules/@esbuild/aix-ppc64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.2.tgz",
+      "integrity": "sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "aix"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.2.tgz",
+      "integrity": "sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.2.tgz",
+      "integrity": "sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.2.tgz",
+      "integrity": "sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.2.tgz",
+      "integrity": "sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.2.tgz",
+      "integrity": "sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.2.tgz",
+      "integrity": "sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.2.tgz",
+      "integrity": "sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.2.tgz",
+      "integrity": "sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.2.tgz",
+      "integrity": "sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ia32": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.2.tgz",
+      "integrity": "sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-loong64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.2.tgz",
+      "integrity": "sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-mips64el": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.2.tgz",
+      "integrity": "sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ppc64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.2.tgz",
+      "integrity": "sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-riscv64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.2.tgz",
+      "integrity": "sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-s390x": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.2.tgz",
+      "integrity": "sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.2.tgz",
+      "integrity": "sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.2.tgz",
+      "integrity": "sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.2.tgz",
+      "integrity": "sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.2.tgz",
+      "integrity": "sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.2.tgz",
+      "integrity": "sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openharmony-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.2.tgz",
+      "integrity": "sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/sunos-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.2.tgz",
+      "integrity": "sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.2.tgz",
+      "integrity": "sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-ia32": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.2.tgz",
+      "integrity": "sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.2.tgz",
+      "integrity": "sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@mongodb-js/saslprep": {
+      "version": "1.4.13",
+      "resolved": "https://registry.npmjs.org/@mongodb-js/saslprep/-/saslprep-1.4.13.tgz",
+      "integrity": "sha512-E3Sv4eCYAlKYUTx8S3ioQcDUscOif+8zZ5OnW1IzJ+Tt+EO+ke8mn+Y3FX6N1H79picwbdOavVOb1jPi2EOyrg==",
+      "license": "MIT",
+      "dependencies": {
+        "sparse-bitfield": "^3.0.3"
+      }
+    },
+    "node_modules/@socket.io/component-emitter": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/@socket.io/component-emitter/-/component-emitter-3.1.2.tgz",
+      "integrity": "sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA==",
+      "license": "MIT"
+    },
+    "node_modules/@types/body-parser": {
+      "version": "1.19.6",
+      "resolved": "https://registry.npmjs.org/@types/body-parser/-/body-parser-1.19.6.tgz",
+      "integrity": "sha512-HLFeCYgz89uk22N5Qg3dvGvsv46B8GLvKKo1zKG4NybA8U2DiEO3w9lqGg29t/tfLRJpJ6iQxnVw4OnB7MoM9g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/connect": "*",
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/connect": {
+      "version": "3.4.38",
+      "resolved": "https://registry.npmjs.org/@types/connect/-/connect-3.4.38.tgz",
+      "integrity": "sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/cors": {
+      "version": "2.8.19",
+      "resolved": "https://registry.npmjs.org/@types/cors/-/cors-2.8.19.tgz",
+      "integrity": "sha512-mFNylyeyqN93lfe/9CSxOGREz8cpzAhH+E93xJ4xWQf62V8sQ/24reV2nyzUWM6H6Xji+GGHpkbLe7pVoUEskg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/express": {
+      "version": "4.17.25",
+      "resolved": "https://registry.npmjs.org/@types/express/-/express-4.17.25.tgz",
+      "integrity": "sha512-dVd04UKsfpINUnK0yBoYHDF3xu7xVH4BuDotC/xGuycx4CgbP48X/KF/586bcObxT0HENHXEU8Nqtu6NR+eKhw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/body-parser": "*",
+        "@types/express-serve-static-core": "^4.17.33",
+        "@types/qs": "*",
+        "@types/serve-static": "^1"
+      }
+    },
+    "node_modules/@types/express-serve-static-core": {
+      "version": "4.19.9",
+      "resolved": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-4.19.9.tgz",
+      "integrity": "sha512-QP2ESEe/ImWY0HDwNAnK9PvEffUyhLTnWkk7KXzHfyeWAnlrDe1fN77bXl6ia8KT3wPlmA7t9/VPRpnf4Ex9sg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*",
+        "@types/qs": "*",
+        "@types/range-parser": "*",
+        "@types/send": "*"
+      }
+    },
+    "node_modules/@types/http-errors": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/@types/http-errors/-/http-errors-2.0.5.tgz",
+      "integrity": "sha512-r8Tayk8HJnX0FztbZN7oVqGccWgw98T/0neJphO91KkmOzug1KkofZURD4UaD5uH8AqcFLfdPErnBod0u71/qg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/jsonwebtoken": {
+      "version": "9.0.10",
+      "resolved": "https://registry.npmjs.org/@types/jsonwebtoken/-/jsonwebtoken-9.0.10.tgz",
+      "integrity": "sha512-asx5hIG9Qmf/1oStypjanR7iKTv0gXQ1Ov/jfrX6kS/EO0OFni8orbmGCn0672NHR3kXHwpAwR+B368ZGN/2rA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/ms": "*",
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/mime": {
+      "version": "1.3.5",
+      "resolved": "https://registry.npmjs.org/@types/mime/-/mime-1.3.5.tgz",
+      "integrity": "sha512-/pyBZWSLD2n0dcHE3hq8s8ZvcETHtEuF+3E7XVt0Ig2nvsVQXdghHVcEkIWjy9A0wKfTn97a/PSDYohKIlnP/w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/ms": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/@types/ms/-/ms-2.1.0.tgz",
+      "integrity": "sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/node": {
+      "version": "20.19.43",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.19.43.tgz",
+      "integrity": "sha512-6oYBAi5ikg4Pl+kGsoYtawUMBT2zZMCvPNF7pVLnHZfd1zf38DRiWn/gT01RYCdUqkv7Fhr+C9ot4/tb+2sVvA==",
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": "~6.21.0"
+      }
+    },
+    "node_modules/@types/qs": {
+      "version": "6.15.1",
+      "resolved": "https://registry.npmjs.org/@types/qs/-/qs-6.15.1.tgz",
+      "integrity": "sha512-GZHUBZR9hckSUhrxmp1nG6NwdpM9fCunJwyThLW1X3AyHgd9IlHb6VANpQQqDr2o/qQp6McZ3y/IA2rVzKzSbw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/range-parser": {
+      "version": "1.2.7",
+      "resolved": "https://registry.npmjs.org/@types/range-parser/-/range-parser-1.2.7.tgz",
+      "integrity": "sha512-hKormJbkJqzQGhziax5PItDUTMAM9uE2XXQmM37dyd4hVM+5aVl7oVxMVUiVQn2oCQFN/LKCZdvSM0pFRqbSmQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/send": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/@types/send/-/send-1.2.1.tgz",
+      "integrity": "sha512-arsCikDvlU99zl1g69TcAB3mzZPpxgw0UQnaHeC1Nwb015xp8bknZv5rIfri9xTOcMuaVgvabfIRA7PSZVuZIQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/serve-static": {
+      "version": "1.15.10",
+      "resolved": "https://registry.npmjs.org/@types/serve-static/-/serve-static-1.15.10.tgz",
+      "integrity": "sha512-tRs1dB+g8Itk72rlSI2ZrW6vZg0YrLI81iQSTkMmOqnqCaNr/8Ek4VwWcN5vZgCYWbg/JJSGBlUaYGAOP73qBw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/http-errors": "*",
+        "@types/node": "*",
+        "@types/send": "<1"
+      }
+    },
+    "node_modules/@types/serve-static/node_modules/@types/send": {
+      "version": "0.17.6",
+      "resolved": "https://registry.npmjs.org/@types/send/-/send-0.17.6.tgz",
+      "integrity": "sha512-Uqt8rPBE8SY0RK8JB1EzVOIZ32uqy8HwdxCnoCOsYrvnswqmFZ/k+9Ikidlk/ImhsdvBsloHbAlewb2IEBV/Og==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/mime": "^1",
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/webidl-conversions": {
+      "version": "7.0.3",
+      "resolved": "https://registry.npmjs.org/@types/webidl-conversions/-/webidl-conversions-7.0.3.tgz",
+      "integrity": "sha512-CiJJvcRtIgzadHCYXw7dqEnMNRjhGZlYK05Mj9OyktqV8uVT8fD2BFOB7S1uwBE3Kj2Z+4UyPmFw/Ixgw/LAlA==",
+      "license": "MIT"
+    },
+    "node_modules/@types/whatwg-url": {
+      "version": "11.0.5",
+      "resolved": "https://registry.npmjs.org/@types/whatwg-url/-/whatwg-url-11.0.5.tgz",
+      "integrity": "sha512-coYR071JRaHa+xoEvvYqvnIHaVqaYrLPbsufM9BF63HkwI5Lgmy2QR8Q5K/lYDYo5AK82wOvSOS0UsLTpTG7uQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/webidl-conversions": "*"
+      }
+    },
+    "node_modules/@types/ws": {
+      "version": "8.18.1",
+      "resolved": "https://registry.npmjs.org/@types/ws/-/ws-8.18.1.tgz",
+      "integrity": "sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/accepts": {
+      "version": "1.3.8",
+      "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
+      "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-types": "~2.1.34",
+        "negotiator": "0.6.3"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/array-flatten": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
+      "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==",
+      "license": "MIT"
+    },
+    "node_modules/base64id": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/base64id/-/base64id-2.0.0.tgz",
+      "integrity": "sha512-lGe34o6EHj9y3Kts9R4ZYs/Gr+6N7MCaMlIFA3F1R2O5/m7K06AxfSeO5530PEERE6/WyEg3lsuyw4GHlPZHog==",
+      "license": "MIT",
+      "engines": {
+        "node": "^4.5.0 || >= 5.9"
+      }
+    },
+    "node_modules/bcryptjs": {
+      "version": "2.4.3",
+      "resolved": "https://registry.npmjs.org/bcryptjs/-/bcryptjs-2.4.3.tgz",
+      "integrity": "sha512-V/Hy/X9Vt7f3BbPJEi8BdVFMByHi+jNXrYkW3huaybV/kQ0KJg0Y6PkEMbn+zeT+i+SiKZ/HMqJGIIt4LZDqNQ==",
+      "license": "MIT"
+    },
+    "node_modules/body-parser": {
+      "version": "1.20.6",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.6.tgz",
+      "integrity": "sha512-p5tAzS57i5MV9fZFDj9LeIiTZEufbSe2eDozP+ElheSUq1m74CRq1jI4mYNDdVs9vQztXFLuk/Gd6BWTdwRJ5g==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "content-type": "~1.0.5",
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "destroy": "~1.2.0",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "on-finished": "~2.4.1",
+        "qs": "~6.15.1",
+        "raw-body": "~2.5.3",
+        "type-is": "~1.6.18",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
+      }
+    },
+    "node_modules/bson": {
+      "version": "6.10.4",
+      "resolved": "https://registry.npmjs.org/bson/-/bson-6.10.4.tgz",
+      "integrity": "sha512-WIsKqkSC0ABoBJuT1LEX+2HEvNmNKKgnTAyd0fL8qzK4SH2i9NXg+t08YtdZp/V9IZ33cxe3iV4yM0qg8lMQng==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=16.20.1"
+      }
+    },
+    "node_modules/buffer-equal-constant-time": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz",
+      "integrity": "sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==",
+      "license": "BSD-3-Clause"
+    },
+    "node_modules/bytes": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
+      "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/call-bind-apply-helpers": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/call-bound": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "get-intrinsic": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/content-disposition": {
+      "version": "0.5.4",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
+      "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
+      "license": "MIT",
+      "dependencies": {
+        "safe-buffer": "5.2.1"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/content-type": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+      "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie": {
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie-signature": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.7.tgz",
+      "integrity": "sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==",
+      "license": "MIT"
+    },
+    "node_modules/cors": {
+      "version": "2.8.6",
+      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
+      "integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
+      "license": "MIT",
+      "dependencies": {
+        "object-assign": "^4",
+        "vary": "^1"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.0.0"
+      }
+    },
+    "node_modules/depd": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+      "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/destroy": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
+      "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
+      }
+    },
+    "node_modules/dotenv": {
+      "version": "16.6.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
+      "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
+    "node_modules/dunder-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "gopd": "^1.2.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/ecdsa-sig-formatter": {
+      "version": "1.0.11",
+      "resolved": "https://registry.npmjs.org/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.11.tgz",
+      "integrity": "sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "safe-buffer": "^5.0.1"
+      }
+    },
+    "node_modules/ee-first": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
+      "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
+      "license": "MIT"
+    },
+    "node_modules/encodeurl": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
+      "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/engine.io": {
+      "version": "6.6.9",
+      "resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.9.tgz",
+      "integrity": "sha512-clKkw4C7nJ22mGgoVcCg6V/W/TxdNyIOTr89k2ONZu81qqkddPFDF0LXcbAwhzPD8DjkiRCjzuiO6Y+fkpD4vg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/cors": "^2.8.12",
+        "@types/node": ">=10.0.0",
+        "@types/ws": "^8.5.12",
+        "accepts": "~1.3.4",
+        "base64id": "2.0.0",
+        "cookie": "~0.7.2",
+        "cors": "~2.8.5",
+        "debug": "~4.4.1",
+        "engine.io-parser": "~5.2.1",
+        "ws": "~8.21.0"
+      },
+      "engines": {
+        "node": ">=10.2.0"
+      }
+    },
+    "node_modules/engine.io-parser": {
+      "version": "5.2.3",
+      "resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.3.tgz",
+      "integrity": "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/engine.io/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/engine.io/node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/es-define-property": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+      "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-errors": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
+      "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-object-atoms": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
+      "integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/esbuild": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.2.tgz",
+      "integrity": "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "@esbuild/aix-ppc64": "0.28.2",
+        "@esbuild/android-arm": "0.28.2",
+        "@esbuild/android-arm64": "0.28.2",
+        "@esbuild/android-x64": "0.28.2",
+        "@esbuild/darwin-arm64": "0.28.2",
+        "@esbuild/darwin-x64": "0.28.2",
+        "@esbuild/freebsd-arm64": "0.28.2",
+        "@esbuild/freebsd-x64": "0.28.2",
+        "@esbuild/linux-arm": "0.28.2",
+        "@esbuild/linux-arm64": "0.28.2",
+        "@esbuild/linux-ia32": "0.28.2",
+        "@esbuild/linux-loong64": "0.28.2",
+        "@esbuild/linux-mips64el": "0.28.2",
+        "@esbuild/linux-ppc64": "0.28.2",
+        "@esbuild/linux-riscv64": "0.28.2",
+        "@esbuild/linux-s390x": "0.28.2",
+        "@esbuild/linux-x64": "0.28.2",
+        "@esbuild/netbsd-arm64": "0.28.2",
+        "@esbuild/netbsd-x64": "0.28.2",
+        "@esbuild/openbsd-arm64": "0.28.2",
+        "@esbuild/openbsd-x64": "0.28.2",
+        "@esbuild/openharmony-arm64": "0.28.2",
+        "@esbuild/sunos-x64": "0.28.2",
+        "@esbuild/win32-arm64": "0.28.2",
+        "@esbuild/win32-ia32": "0.28.2",
+        "@esbuild/win32-x64": "0.28.2"
+      }
+    },
+    "node_modules/escape-html": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
+      "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==",
+      "license": "MIT"
+    },
+    "node_modules/etag": {
+      "version": "1.8.1",
+      "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
+      "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/express": {
+      "version": "4.22.2",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.22.2.tgz",
+      "integrity": "sha512-IuL+Elrou2ZvCFHs18/CIzy2Nzvo25nZ1/D2eIZlz7c+QUayAcYoiM2BthCjs+EBHVpjYjcuLDAiCWgeIX3X1Q==",
+      "license": "MIT",
+      "dependencies": {
+        "accepts": "~1.3.8",
+        "array-flatten": "1.1.1",
+        "body-parser": "~1.20.5",
+        "content-disposition": "~0.5.4",
+        "content-type": "~1.0.4",
+        "cookie": "~0.7.1",
+        "cookie-signature": "~1.0.6",
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "etag": "~1.8.1",
+        "finalhandler": "~1.3.1",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.0",
+        "merge-descriptors": "1.0.3",
+        "methods": "~1.1.2",
+        "on-finished": "~2.4.1",
+        "parseurl": "~1.3.3",
+        "path-to-regexp": "~0.1.12",
+        "proxy-addr": "~2.0.7",
+        "qs": "~6.15.1",
+        "range-parser": "~1.2.1",
+        "safe-buffer": "5.2.1",
+        "send": "~0.19.0",
+        "serve-static": "~1.16.2",
+        "setprototypeof": "1.2.0",
+        "statuses": "~2.0.1",
+        "type-is": "~1.6.18",
+        "utils-merge": "1.0.1",
+        "vary": "~1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/finalhandler": {
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz",
+      "integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "2.6.9",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "on-finished": "~2.4.1",
+        "parseurl": "~1.3.3",
+        "statuses": "~2.0.2",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/forwarded": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
+      "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/fresh": {
+      "version": "0.5.2",
+      "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
+      "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/function-bind": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-intrinsic": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+      "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "es-define-property": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "es-object-atoms": "^1.1.1",
+        "function-bind": "^1.1.2",
+        "get-proto": "^1.0.1",
+        "gopd": "^1.2.0",
+        "has-symbols": "^1.1.0",
+        "hasown": "^2.0.2",
+        "math-intrinsics": "^1.1.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+      "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+      "license": "MIT",
+      "dependencies": {
+        "dunder-proto": "^1.0.1",
+        "es-object-atoms": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/gopd": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+      "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/has-symbols": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+      "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/hasown": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
+      "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
+      "license": "MIT",
+      "dependencies": {
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/http-errors": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+      "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
+      "license": "MIT",
+      "dependencies": {
+        "depd": "~2.0.0",
+        "inherits": "~2.0.4",
+        "setprototypeof": "~1.2.0",
+        "statuses": "~2.0.2",
+        "toidentifier": "~1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/iconv-lite": {
+      "version": "0.4.24",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
+      "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==",
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+      "license": "ISC"
+    },
+    "node_modules/ipaddr.js": {
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
+      "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/jsonwebtoken": {
+      "version": "9.0.3",
+      "resolved": "https://registry.npmjs.org/jsonwebtoken/-/jsonwebtoken-9.0.3.tgz",
+      "integrity": "sha512-MT/xP0CrubFRNLNKvxJ2BYfy53Zkm++5bX9dtuPbqAeQpTVe0MQTFhao8+Cp//EmJp244xt6Drw/GVEGCUj40g==",
+      "license": "MIT",
+      "dependencies": {
+        "jws": "^4.0.1",
+        "lodash.includes": "^4.3.0",
+        "lodash.isboolean": "^3.0.3",
+        "lodash.isinteger": "^4.0.4",
+        "lodash.isnumber": "^3.0.3",
+        "lodash.isplainobject": "^4.0.6",
+        "lodash.isstring": "^4.0.1",
+        "lodash.once": "^4.0.0",
+        "ms": "^2.1.1",
+        "semver": "^7.5.4"
+      },
+      "engines": {
+        "node": ">=12",
+        "npm": ">=6"
+      }
+    },
+    "node_modules/jsonwebtoken/node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/jwa": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/jwa/-/jwa-2.0.1.tgz",
+      "integrity": "sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==",
+      "license": "MIT",
+      "dependencies": {
+        "buffer-equal-constant-time": "^1.0.1",
+        "ecdsa-sig-formatter": "1.0.11",
+        "safe-buffer": "^5.0.1"
+      }
+    },
+    "node_modules/jws": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/jws/-/jws-4.0.1.tgz",
+      "integrity": "sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==",
+      "license": "MIT",
+      "dependencies": {
+        "jwa": "^2.0.1",
+        "safe-buffer": "^5.0.1"
+      }
+    },
+    "node_modules/kareem": {
+      "version": "2.6.3",
+      "resolved": "https://registry.npmjs.org/kareem/-/kareem-2.6.3.tgz",
+      "integrity": "sha512-C3iHfuGUXK2u8/ipq9LfjFfXFxAZMQJJq7vLS45r3D9Y2xQ/m4S8zaR4zMLFWh9AsNPXmcFfUDhTEO8UIC/V6Q==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=12.0.0"
+      }
+    },
+    "node_modules/lodash.includes": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/lodash.includes/-/lodash.includes-4.3.0.tgz",
+      "integrity": "sha512-W3Bx6mdkRTGtlJISOvVD/lbqjTlPPUDTMnlXZFnVwi9NKJ6tiAk6LVdlhZMm17VZisqhKcgzpO5Wz91PCt5b0w==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isboolean": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz",
+      "integrity": "sha512-Bz5mupy2SVbPHURB98VAcw+aHh4vRV5IPNhILUCsOzRmsTmSQ17jIuqopAentWoehktxGd9e/hbIXq980/1QJg==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isinteger": {
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz",
+      "integrity": "sha512-DBwtEWN2caHQ9/imiNeEA5ys1JoRtRfY3d7V9wkqtbycnAmTvRRmbHKDV4a0EYc678/dia0jrte4tjYwVBaZUA==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isnumber": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz",
+      "integrity": "sha512-QYqzpfwO3/CWf3XP+Z+tkQsfaLL/EnUlXWVkIk5FUPc4sBdTehEqZONuyRt2P67PXAk+NXmTBcc97zw9t1FQrw==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isplainobject": {
+      "version": "4.0.6",
+      "resolved": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz",
+      "integrity": "sha512-oSXzaWypCMHkPC3NvBEaPHf0KsA5mvPrOPgQWDsbg8n7orZ290M0BmC/jgRZ4vcJ6DTAhjrsSYgdsW/F+MFOBA==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.isstring": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/lodash.isstring/-/lodash.isstring-4.0.1.tgz",
+      "integrity": "sha512-0wJxfxH1wgO3GrbuP+dTTk7op+6L41QCXbGINEmD+ny/G/eCqGzxyCsh7159S+mgDDcoarnBw6PC1PS5+wUGgw==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.once": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/lodash.once/-/lodash.once-4.1.1.tgz",
+      "integrity": "sha512-Sb487aTOCr9drQVL8pIxOzVhafOjZN9UU54hiN8PU3uAiSV7lx1yYNpbNmex2PK6dSJoNTSJUUswT651yww3Mg==",
+      "license": "MIT"
+    },
+    "node_modules/math-intrinsics": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+      "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/media-typer": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
+      "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/memory-pager": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/memory-pager/-/memory-pager-1.5.0.tgz",
+      "integrity": "sha512-ZS4Bp4r/Zoeq6+NLJpP+0Zzm0pR8whtGPf1XExKLJBAczGMnSi3It14OiNCStjQjM6NU1okjQGSxgEZN8eBYKg==",
+      "license": "MIT"
+    },
+    "node_modules/merge-descriptors": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz",
+      "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/methods": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
+      "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
+      "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
+      "license": "MIT",
+      "bin": {
+        "mime": "cli.js"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/mime-db": {
+      "version": "1.52.0",
+      "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
+      "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime-types": {
+      "version": "2.1.35",
+      "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
+      "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-db": "1.52.0"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mongodb": {
+      "version": "6.20.0",
+      "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-6.20.0.tgz",
+      "integrity": "sha512-Tl6MEIU3K4Rq3TSHd+sZQqRBoGlFsOgNrH5ltAcFBV62Re3Fd+FcaVf8uSEQFOJ51SDowDVttBTONMfoYWrWlQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@mongodb-js/saslprep": "^1.3.0",
+        "bson": "^6.10.4",
+        "mongodb-connection-string-url": "^3.0.2"
+      },
+      "engines": {
+        "node": ">=16.20.1"
+      },
+      "peerDependencies": {
+        "@aws-sdk/credential-providers": "^3.188.0",
+        "@mongodb-js/zstd": "^1.1.0 || ^2.0.0",
+        "gcp-metadata": "^5.2.0",
+        "kerberos": "^2.0.1",
+        "mongodb-client-encryption": ">=6.0.0 <7",
+        "snappy": "^7.3.2",
+        "socks": "^2.7.1"
+      },
+      "peerDependenciesMeta": {
+        "@aws-sdk/credential-providers": {
+          "optional": true
+        },
+        "@mongodb-js/zstd": {
+          "optional": true
+        },
+        "gcp-metadata": {
+          "optional": true
+        },
+        "kerberos": {
+          "optional": true
+        },
+        "mongodb-client-encryption": {
+          "optional": true
+        },
+        "snappy": {
+          "optional": true
+        },
+        "socks": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/mongodb-connection-string-url": {
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/mongodb-connection-string-url/-/mongodb-connection-string-url-3.0.2.tgz",
+      "integrity": "sha512-rMO7CGo/9BFwyZABcKAWL8UJwH/Kc2x0g72uhDWzG48URRax5TCIcJ7Rc3RZqffZzO/Gwff/jyKwCU9TN8gehA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@types/whatwg-url": "^11.0.2",
+        "whatwg-url": "^14.1.0 || ^13.0.0"
+      }
+    },
+    "node_modules/mongoose": {
+      "version": "8.24.2",
+      "resolved": "https://registry.npmjs.org/mongoose/-/mongoose-8.24.2.tgz",
+      "integrity": "sha512-5+H3MSHNJCcr9M+lVplekrZ4/Dyn3N1dOpvgn9gMwvHJhunc4G8SQcBVd/btBQoVdspVNPjx8Pw03YWBv6uTJg==",
+      "license": "MIT",
+      "dependencies": {
+        "bson": "^6.10.4",
+        "kareem": "2.6.3",
+        "mongodb": "~6.20.0",
+        "mpath": "0.9.0",
+        "mquery": "5.0.0",
+        "ms": "2.1.3",
+        "sift": "17.1.3"
+      },
+      "engines": {
+        "node": ">=16.20.1"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/mongoose"
+      }
+    },
+    "node_modules/mongoose/node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/mpath": {
+      "version": "0.9.0",
+      "resolved": "https://registry.npmjs.org/mpath/-/mpath-0.9.0.tgz",
+      "integrity": "sha512-ikJRQTk8hw5DEoFVxHG1Gn9T/xcjtdnOKIU1JTmGjZZlg9LST2mBLmcX3/ICIbgJydT2GOc15RnNy5mHmzfSew==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=4.0.0"
+      }
+    },
+    "node_modules/mquery": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/mquery/-/mquery-5.0.0.tgz",
+      "integrity": "sha512-iQMncpmEK8R8ncT8HJGsGc9Dsp8xcgYMVSbs5jgnm1lFHTZqMJTUWTDx1LBO8+mK3tPNZWFLBghQEIOULSTHZg==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "4.x"
+      },
+      "engines": {
+        "node": ">=14.0.0"
+      }
+    },
+    "node_modules/mquery/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/mquery/node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
+    "node_modules/negotiator": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
+      "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/object-assign": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
+      "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/object-inspect": {
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/on-finished": {
+      "version": "2.4.1",
+      "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
+      "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+      "license": "MIT",
+      "dependencies": {
+        "ee-first": "1.1.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/parseurl": {
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
+      "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/path-to-regexp": {
+      "version": "0.1.13",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz",
+      "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==",
+      "license": "MIT"
+    },
+    "node_modules/proxy-addr": {
+      "version": "2.0.7",
+      "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
+      "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+      "license": "MIT",
+      "dependencies": {
+        "forwarded": "0.2.0",
+        "ipaddr.js": "1.9.1"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/punycode": {
+      "version": "2.3.1",
+      "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
+      "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/qs": {
+      "version": "6.15.3",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.3.tgz",
+      "integrity": "sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "es-define-property": "^1.0.1",
+        "side-channel": "^1.1.1"
+      },
+      "engines": {
+        "node": ">=0.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/range-parser": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
+      "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/raw-body": {
+      "version": "2.5.3",
+      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz",
+      "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/safe-buffer": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT"
+    },
+    "node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/send": {
+      "version": "0.19.2",
+      "resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz",
+      "integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "destroy": "1.2.0",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "etag": "~1.8.1",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.1",
+        "mime": "1.6.0",
+        "ms": "2.1.3",
+        "on-finished": "~2.4.1",
+        "range-parser": "~1.2.1",
+        "statuses": "~2.0.2"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/send/node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/serve-static": {
+      "version": "1.16.3",
+      "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz",
+      "integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==",
+      "license": "MIT",
+      "dependencies": {
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "parseurl": "~1.3.3",
+        "send": "~0.19.1"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/setprototypeof": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
+      "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
+      "license": "ISC"
+    },
+    "node_modules/side-channel": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
+      "integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4",
+        "side-channel-list": "^1.0.1",
+        "side-channel-map": "^1.0.1",
+        "side-channel-weakmap": "^1.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-list": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+      "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-map": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+      "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-weakmap": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+      "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3",
+        "side-channel-map": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/sift": {
+      "version": "17.1.3",
+      "resolved": "https://registry.npmjs.org/sift/-/sift-17.1.3.tgz",
+      "integrity": "sha512-Rtlj66/b0ICeFzYTuNvX/EF1igRbbnGSvEyT79McoZa/DeGhMyC5pWKOEsZKnpkqtSeovd5FL/bjHWC3CIIvCQ==",
+      "license": "MIT"
+    },
+    "node_modules/socket.io": {
+      "version": "4.8.3",
+      "resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.8.3.tgz",
+      "integrity": "sha512-2Dd78bqzzjE6KPkD5fHZmDAKRNe3J15q+YHDrIsy9WEkqttc7GY+kT9OBLSMaPbQaEd0x1BjcmtMtXkfpc+T5A==",
+      "license": "MIT",
+      "dependencies": {
+        "accepts": "~1.3.4",
+        "base64id": "~2.0.0",
+        "cors": "~2.8.5",
+        "debug": "~4.4.1",
+        "engine.io": "~6.6.0",
+        "socket.io-adapter": "~2.5.2",
+        "socket.io-parser": "~4.2.4"
+      },
+      "engines": {
+        "node": ">=10.2.0"
+      }
+    },
+    "node_modules/socket.io-adapter": {
+      "version": "2.5.8",
+      "resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.5.8.tgz",
+      "integrity": "sha512-6Oy52pbg+kvdCVvjcN+FnY7BvxZ7cIHNScbvztT/It5d0vbwoJoVZmF2gjJmnV0/4WlXRfG15zc45ySk9Ah8bw==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "~4.4.1",
+        "ws": "~8.21.0"
+      }
+    },
+    "node_modules/socket.io-adapter/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/socket.io-adapter/node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/socket.io-parser": {
+      "version": "4.2.7",
+      "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.7.tgz",
+      "integrity": "sha512-IH/iSeO9T6gz1KkFleGDWkG9N3dl4jXVYUtMhIqH10Md0ttMer8nUNWiP1DKuNrybD2xBrixLJdCC9J6ECoYkg==",
+      "license": "MIT",
+      "dependencies": {
+        "@socket.io/component-emitter": "~3.1.0",
+        "debug": "~4.4.1"
+      },
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/socket.io-parser/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/socket.io-parser/node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/socket.io/node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/socket.io/node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/sparse-bitfield": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/sparse-bitfield/-/sparse-bitfield-3.0.3.tgz",
+      "integrity": "sha512-kvzhi7vqKTfkh0PZU+2D2PIllw2ymqJKujUcyPMd9Y75Nv4nPbGJZXNhxsgdQab2BmlDct1YnfQCguEvHr7VsQ==",
+      "license": "MIT",
+      "dependencies": {
+        "memory-pager": "^1.0.2"
+      }
+    },
+    "node_modules/statuses": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+      "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/toidentifier": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
+      "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.6"
+      }
+    },
+    "node_modules/tr46": {
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/tr46/-/tr46-5.1.1.tgz",
+      "integrity": "sha512-hdF5ZgjTqgAntKkklYw0R03MG2x/bSzTtkxmIRw/sTNV8YXsCJ1tfLAX23lhxhHJlEf3CRCOCGGWw3vI3GaSPw==",
+      "license": "MIT",
+      "dependencies": {
+        "punycode": "^2.3.1"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx": {
+      "version": "4.23.11",
+      "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.23.11.tgz",
+      "integrity": "sha512-Ry2oTEUnhBdeEdWIztY8kf3/nBGnPnjMLVGL0YfdRXMORuPER5NlKmayqxtxRxwB1xBN+RivRaJfe7PM1rtiyw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "esbuild": "~0.28.0"
+      },
+      "bin": {
+        "tsx": "dist/cli.mjs"
+      },
+      "engines": {
+        "node": ">=18.0.0"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      }
+    },
+    "node_modules/type-is": {
+      "version": "1.6.18",
+      "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
+      "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==",
+      "license": "MIT",
+      "dependencies": {
+        "media-typer": "0.3.0",
+        "mime-types": "~2.1.24"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/undici-types": {
+      "version": "6.21.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
+      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
+      "license": "MIT"
+    },
+    "node_modules/unpipe": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
+      "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/utils-merge": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
+      "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4.0"
+      }
+    },
+    "node_modules/vary": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
+      "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/webidl-conversions": {
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-7.0.0.tgz",
+      "integrity": "sha512-VwddBukDzu71offAQR975unBIGqfKZpM+8ZX6ySk8nYhVoo5CYaZyzt3YBvYtRtO+aoGlqxPg/B87NGVZ/fu6g==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/whatwg-url": {
+      "version": "14.2.0",
+      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-14.2.0.tgz",
+      "integrity": "sha512-De72GdQZzNTUBBChsXueQUnPKDkg/5A5zp7pFDuQAj5UFoENpiACU0wlCvzpAGnTkj++ihpKwKyYewn/XNUbKw==",
+      "license": "MIT",
+      "dependencies": {
+        "tr46": "^5.1.0",
+        "webidl-conversions": "^7.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/ws": {
+      "version": "8.21.3",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.3.tgz",
+      "integrity": "sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      },
+      "peerDependencies": {
+        "bufferutil": "^4.0.1",
+        "utf-8-validate": ">=5.0.2"
+      },
+      "peerDependenciesMeta": {
+        "bufferutil": {
+          "optional": true
+        },
+        "utf-8-validate": {
+          "optional": true
+        }
+      }
+    }
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/server/package.json b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/package.json
new file mode 100644
index 00000000000..2252910f4f9
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/package.json
@@ -0,0 +1,29 @@
+{
+  "name": "server",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "start": "tsx src/index.ts",
+    "typecheck": "tsc --noEmit",
+    "test": "tsx --test src/*.test.ts"
+  },
+  "dependencies": {
+    "bcryptjs": "^2.4.3",
+    "cors": "^2.8.5",
+    "dotenv": "^16.4.5",
+    "express": "^4.19.2",
+    "jsonwebtoken": "^9.0.2",
+    "mongoose": "^8.5.0",
+    "socket.io": "^4.7.5"
+  },
+  "devDependencies": {
+    "@types/cors": "^2.8.17",
+    "@types/express": "^4.17.21",
+    "@types/jsonwebtoken": "^9.0.6",
+    "@types/node": "^20.14.9",
+    "tsx": "^4.16.2",
+    "typescript": "^5.5.3"
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/index.ts b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/index.ts
new file mode 100644
index 00000000000..0dc654c5cc3
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/index.ts
@@ -0,0 +1,1071 @@
+import "dotenv/config";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import express from "express";
+import cors from "cors";
+import http from "http";
+import { Server as SocketIOServer } from "socket.io";
+import mongoose, { Types } from "mongoose";
+import bcrypt from "bcryptjs";
+import jwt from "jsonwebtoken";
+import { Item, Warehouse, Stock, User, Cart, Order, Review } from "./models.js";
+import { Dismissal, Payment, Promotion } from "./progression-models.js";
+import { installProgressionRoutes } from "./progression.js";
+import { releaseStock, reserveStock } from "./stock-reservations.js";
+
+const PORT = Number(process.env.PORT) || 6401;
+const DATABASE_URL = process.env.DATABASE_URL || "mongodb://localhost:6537/stackbench_ecom_run0";
+const JWT_SECRET = process.env.JWT_SECRET || "stack-bench-reference-only-secret-2026";
+
+const app = express();
+app.use(cors());
+app.use(express.json());
+
+const server = http.createServer(app);
+const io = new SocketIOServer(server, {
+  cors: { origin: "*" },
+});
+
+// ---------------------------------------------------------------------------
+// Seeding
+// ---------------------------------------------------------------------------
+
+const CATALOGUE: Array<{ name: string; price: number; east: number; west: number; description: string }> = [
+  { name: "Air Purifier", price: 189.0, east: 60, west: 40, description: "HEPA filtration for cleaner indoor air." },
+  { name: "Bluetooth Speaker", price: 79.5, east: 50, west: 50, description: "Portable speaker with rich, room-filling sound." },
+  { name: "Coffee Grinder", price: 64.0, east: 70, west: 30, description: "Burr grinder for consistent, fresh grounds." },
+  { name: "Desk Lamp", price: 42.0, east: 55, west: 45, description: "Adjustable LED lamp for any desk setup." },
+  { name: "Espresso Machine", price: 449.0, east: 80, west: 20, description: "Café-quality espresso at home." },
+  { name: "Gaming Mouse", price: 59.0, east: 50, west: 50, description: "Precision optical mouse built for gaming." },
+  { name: "Headphones", price: 199.0, east: 60, west: 40, description: "Over-ear headphones with active noise cancelling." },
+  { name: "Induction Cooktop", price: 329.0, east: 50, west: 50, description: "Fast, efficient induction cooking surface." },
+  { name: "Keyboard", price: 89.0, east: 70, west: 30, description: "Mechanical keyboard with tactile switches." },
+  { name: "Laptop Stand", price: 29.0, east: 90, west: 10, description: "Ergonomic aluminum stand for laptops." },
+  { name: "Mirrorless Camera", price: 1299.0, east: 2, west: 1, description: "Compact mirrorless camera for enthusiasts." },
+  { name: "USB Cable", price: 65.0, east: 0, west: 0, description: "USB cable currently awaiting restock." },
+  { name: "Webcam", price: 69.0, east: 60, west: 40, description: "1080p webcam for calls and streaming." },
+];
+
+const CATEGORIES = ["Home", "Audio", "Computing", "Photo"] as const;
+
+const CATEGORY_MAP: Record<string, string> = {
+  "Air Purifier": "Home",
+  "Desk Lamp": "Home",
+  "Induction Cooktop": "Home",
+  "Espresso Machine": "Home",
+  "Coffee Grinder": "Home",
+  "Bluetooth Speaker": "Audio",
+  "Headphones": "Audio",
+  "Gaming Mouse": "Computing",
+  "Keyboard": "Computing",
+  "Laptop Stand": "Computing",
+  "USB Cable": "Home",
+  "Webcam": "Computing",
+  "Mirrorless Camera": "Photo",
+};
+
+async function seed() {
+  const itemCount = await Item.countDocuments();
+  if (itemCount > 0) {
+    console.log("Catalogue already seeded, skipping.");
+  } else {
+    console.log("Seeding catalogue...");
+    const east = await Warehouse.create({ name: "East" });
+    const west = await Warehouse.create({ name: "West" });
+    for (const entry of CATALOGUE) {
+      const item = await Item.create({
+        name: entry.name,
+        price: entry.price,
+        description: entry.description,
+        category: CATEGORY_MAP[entry.name] || "Uncategorized",
+      });
+      await Stock.create({ item_id: item._id, warehouse_id: east._id, quantity: entry.east });
+      await Stock.create({ item_id: item._id, warehouse_id: west._id, quantity: entry.west });
+    }
+    console.log("Catalogue seeded.");
+  }
+
+  // Backfill category on items left over from a level-1 deployment, without
+  // touching price/description/stock that may already reflect real usage.
+  for (const [name, category] of Object.entries(CATEGORY_MAP)) {
+    await Item.updateOne({ name, category: { $ne: category } }, { $set: { category } });
+  }
+
+  const admin = await User.findOne({ username: "admin" });
+  if (!admin) {
+    console.log("Seeding admin account...");
+    const passwordHash = await bcrypt.hash("stackbench-admin-2026", 10);
+    const adminUser = await User.create({ username: "admin", passwordHash, isAdmin: true });
+    await Cart.create({ userId: adminUser._id, items: [] });
+  }
+
+  const staff = await User.findOne({ username: "staff" });
+  if (!staff) {
+    console.log("Seeding staff account...");
+    const passwordHash = await bcrypt.hash("stackbench-staff-2026", 10);
+    const staffUser = await User.create({ username: "staff", passwordHash, isStaff: true });
+    await Cart.create({ userId: staffUser._id, items: [] });
+  }
+
+  const customer = await User.findOne({ username: "customer" });
+  if (!customer) {
+    const passwordHash = await bcrypt.hash("stackbench-customer-2026", 10);
+    const customerUser = await User.create({ username: "customer", passwordHash });
+    await Cart.create({ userId: customerUser._id, items: [] });
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Aggregation helpers — always computed live from the source-of-truth
+// collections so external writes (ERP sync, warehouse scanner, nightly stock
+// corrections) are reflected the moment anyone asks, with no cache to go stale.
+// ---------------------------------------------------------------------------
+
+async function getStockByItem(): Promise<Map<string, number>> {
+  const rows = await Stock.aggregate([{ $group: { _id: "$item_id", total: { $sum: "$quantity" } } }]);
+  const map = new Map<string, number>();
+  for (const row of rows) map.set(row._id.toString(), row.total);
+  return map;
+}
+
+// Only orders that are still standing, and only line items that were kept
+// (not returned), count as purchases — this feeds both the best-seller
+// ranking and revenue, so a cancellation or return removes its influence
+// from both at once.
+async function getPurchaseCounts(): Promise<Map<string, number>> {
+  const rows = await Order.aggregate([
+    { $match: { status: { $ne: "cancelled" } } },
+    { $unwind: "$items" },
+    { $match: { "items.returned": { $ne: true } } },
+    { $group: { _id: "$items.itemId", total: { $sum: "$items.quantity" } } },
+  ]);
+  const map = new Map<string, number>();
+  for (const row of rows) map.set(row._id.toString(), row.total);
+  return map;
+}
+
+async function getRevenue(): Promise<number> {
+  const rows = await Order.aggregate([
+    { $match: { status: { $ne: "cancelled" } } },
+    { $unwind: "$items" },
+    { $match: { "items.returned": { $ne: true } } },
+    { $group: { _id: null, total: { $sum: { $multiply: ["$items.price", "$items.quantity"] } } } },
+  ]);
+  return rows[0]?.total || 0;
+}
+
+async function getCategoryTotals() {
+  const rows = await Order.aggregate([
+    { $match: { status: { $ne: "cancelled" } } },
+    { $unwind: "$items" },
+    { $match: { "items.returned": { $ne: true } } },
+    { $lookup: { from: "item", localField: "items.itemId", foreignField: "_id", as: "itemDoc" } },
+    { $unwind: "$itemDoc" },
+    {
+      $group: {
+        _id: "$itemDoc.category",
+        units: { $sum: "$items.quantity" },
+        revenue: { $sum: { $multiply: ["$items.price", "$items.quantity"] } },
+      },
+    },
+  ]);
+  const map = new Map(rows.map((r) => [r._id as string, r]));
+  return CATEGORIES.map((category) => ({
+    category,
+    units: map.get(category)?.units || 0,
+    revenue: map.get(category)?.revenue || 0,
+  }));
+}
+
+async function getWarehouseTotals(): Promise<Map<string, number>> {
+  const rows = await Stock.aggregate([{ $group: { _id: "$warehouse_id", total: { $sum: "$quantity" } } }]);
+  const map = new Map<string, number>();
+  for (const row of rows) map.set(row._id.toString(), row.total);
+  return map;
+}
+
+async function getItemsLive() {
+  const [items, stockMap, purchaseMap] = await Promise.all([Item.find(), getStockByItem(), getPurchaseCounts()]);
+  const enriched = items.map((it) => {
+    const json = it.toJSON();
+    const id = it._id.toString();
+    return {
+      ...json,
+      id,
+      stock: stockMap.get(id) || 0,
+      purchaseCount: purchaseMap.get(id) || 0,
+    };
+  });
+  enriched.sort((a, b) => {
+    if (b.purchaseCount !== a.purchaseCount) return b.purchaseCount - a.purchaseCount;
+    return a.name.localeCompare(b.name);
+  });
+  return enriched;
+}
+
+async function getRecommendedItems(userId: string | null) {
+  const itemsLive = await getItemsLive();
+  if (!userId) return itemsLive.slice(0, 10);
+
+  const purchasedAgg = await Order.aggregate([
+    { $match: { userId: new Types.ObjectId(userId), status: { $ne: "cancelled" } } },
+    { $unwind: "$items" },
+    { $match: { "items.returned": { $ne: true } } },
+    { $group: { _id: "$items.itemId" } },
+  ]);
+  const purchasedItemIds = purchasedAgg.map((r) => r._id.toString());
+  if (purchasedItemIds.length === 0) return [];
+
+  const purchasedItems = await Item.find({ _id: { $in: purchasedItemIds } });
+  const categories = new Set(purchasedItems.map((i) => i.category));
+
+  const cart = await Cart.findOne({ userId });
+  const cartItemIds = new Set((cart?.items || []).map((l) => l.itemId.toString()));
+  const dismissedItemIds = new Set((await Dismissal.find({ userId })).map(entry => entry.itemId.toString()));
+
+  return itemsLive.filter((it) => categories.has(it.category) && !cartItemIds.has(it.id)
+    && !dismissedItemIds.has(it.id));
+}
+
+async function getFulfilmentQueue() {
+  const [orders, warehouses] = await Promise.all([
+    Order.find({ status: "pending" }).sort({ createdAt: 1 }),
+    Warehouse.find(),
+  ]);
+  const whMap = new Map(warehouses.map((w) => [w._id.toString(), w.name]));
+  return orders.map((o) => {
+    const json = o.toJSON() as any;
+    json.items = json.items.map((line: any) => ({
+      ...line,
+      warehouseNames: (line.allocations || []).map((a: any) => whMap.get(a.warehouseId.toString()) || "Unknown"),
+    }));
+    return json;
+  });
+}
+
+async function getItemDetail(itemId: string) {
+  const item = await Item.findById(itemId);
+  if (!item) return null;
+  const [stockMap, reviews] = await Promise.all([
+    getStockByItem(),
+    Review.find({ itemId }).sort({ createdAt: -1 }),
+  ]);
+  const average = reviews.length ? reviews.reduce((s, r) => s + r.rating, 0) / reviews.length : 0;
+  return {
+    ...item.toJSON(),
+    stock: stockMap.get(itemId) || 0,
+    reviews: reviews.map((r) => r.toJSON()),
+    average,
+  };
+}
+
+async function getAdminOverview() {
+  const [items, warehouses, stockRows, stockMap, revenue, categories, warehouseTotals, queueDepth] =
+    await Promise.all([
+      Item.find(),
+      Warehouse.find(),
+      Stock.find(),
+      getStockByItem(),
+      getRevenue(),
+      getCategoryTotals(),
+      getWarehouseTotals(),
+      Order.countDocuments({ status: "pending" }),
+    ]);
+  const itemMap = new Map(items.map((i) => [i._id.toString(), i]));
+  const warehouseMap = new Map(warehouses.map((w) => [w._id.toString(), w]));
+  const itemsOut = items.map((it) => {
+    const json = it.toJSON();
+    const id = it._id.toString();
+    return { ...json, id, stock: stockMap.get(id) || 0 };
+  });
+  const locations = stockRows.map((row) => {
+    const itemId = row.item_id.toString();
+    const warehouseId = row.warehouse_id.toString();
+    return {
+      id: row._id.toString(),
+      itemId,
+      itemName: itemMap.get(itemId)?.name || "Unknown",
+      warehouseId,
+      warehouseName: warehouseMap.get(warehouseId)?.name || "Unknown",
+      quantity: row.quantity,
+    };
+  });
+  const lowStock = itemsOut
+    .filter((it) => it.stock <= 10)
+    .sort((a, b) => a.stock - b.stock);
+  const warehousesOut = warehouses.map((w) => ({ ...w.toJSON(), total: warehouseTotals.get(w._id.toString()) || 0 }));
+  return {
+    items: itemsOut,
+    warehouses: warehousesOut,
+    locations,
+    revenue,
+    categories,
+    lowStock,
+    queueDepth,
+  };
+}
+
+async function getCartLive(userId: string) {
+  let cart = await Cart.findOne({ userId });
+  if (!cart) cart = await Cart.create({ userId, items: [] });
+  const stockMap = await getStockByItem();
+  const itemIds = cart.items.map((l) => l.itemId);
+  const items = await Item.find({ _id: { $in: itemIds } });
+  const itemMap = new Map(items.map((i) => [i._id.toString(), i]));
+  const lines = cart.items.map((line) => {
+    const itemId = line.itemId.toString();
+    const item = itemMap.get(itemId);
+    return {
+      itemId,
+      name: item?.name || "Unknown item",
+      price: item?.price || 0,
+      stock: stockMap.get(itemId) || 0,
+      quantity: line.quantity,
+      reservationSeconds: line.reservationExpiresAt
+        ? Math.max(0, Math.ceil((line.reservationExpiresAt.getTime() - Date.now()) / 1000)) : 0,
+      expired: Boolean(line.reservationExpiresAt && line.reservationExpiresAt.getTime() <= Date.now()),
+    };
+  });
+  const total = lines.reduce((s, l) => s + l.price * l.quantity, 0);
+  return { items: lines, total, promotionCode: cart.promotionCode || "",
+    discount: cart.discount || 0 };
+}
+
+// ---------------------------------------------------------------------------
+// Broadcasting
+// ---------------------------------------------------------------------------
+
+let lastItemsSnapshot = "";
+let lastAdminSnapshot = "";
+let lastFulfilmentSnapshot = "";
+const lastRecommendedSnapshot = new Map<string, string>();
+
+// userId -> number of live sockets for that user, so the poll below only
+// recomputes recommendations for accounts someone is actually watching.
+const connectedUsers = new Map<string, number>();
+
+async function broadcastItems() {
+  const items = await getItemsLive();
+  const snapshot = JSON.stringify(items);
+  if (snapshot !== lastItemsSnapshot) {
+    lastItemsSnapshot = snapshot;
+    io.emit("items:update", items);
+  }
+}
+
+async function broadcastAdmin() {
+  const overview = await getAdminOverview();
+  const snapshot = JSON.stringify(overview);
+  if (snapshot !== lastAdminSnapshot) {
+    lastAdminSnapshot = snapshot;
+    io.to("admins").emit("admin:update", overview);
+  }
+}
+
+async function broadcastFulfilment() {
+  const queue = await getFulfilmentQueue();
+  const snapshot = JSON.stringify(queue);
+  if (snapshot !== lastFulfilmentSnapshot) {
+    lastFulfilmentSnapshot = snapshot;
+    io.to("staff").emit("fulfilment:update", { orders: queue, depth: queue.length });
+  }
+}
+
+async function broadcastReviews(itemId: string) {
+  const reviews = await Review.find({ itemId }).sort({ createdAt: -1 });
+  const average = reviews.length ? reviews.reduce((s, r) => s + r.rating, 0) / reviews.length : 0;
+  io.emit("reviews:update", { itemId, reviews: reviews.map((r) => r.toJSON()), average });
+}
+
+async function broadcastCart(userId: string) {
+  const cart = await getCartLive(userId);
+  io.to(`user:${userId}`).emit("cart:update", cart);
+}
+
+async function broadcastCartsContainingItem(itemId: Types.ObjectId) {
+  const userIds = await Cart.distinct("userId", { "items.itemId": itemId });
+  await Promise.all(userIds.map((userId) => broadcastCart(String(userId))));
+}
+
+async function broadcastOrders(userId: string) {
+  io.to(`user:${userId}`).emit("orders:update", await ordersForUser(userId));
+}
+
+async function ordersForUser(userId: string | Types.ObjectId) {
+  const orders = await Order.find({ userId }).sort({ createdAt: -1 });
+  const payments = await Payment.find({ orderId: { $in: orders.map(order => order._id) } });
+  const byOrder = new Map<string, typeof payments>();
+  for (const payment of payments) {
+    const key = String(payment.orderId);
+    byOrder.set(key, [...(byOrder.get(key) ?? []), payment]);
+  }
+  return orders.map(order => ({
+    ...order.toJSON(),
+    payments: (byOrder.get(String(order._id)) ?? []).map(payment => payment.toJSON()),
+  }));
+}
+
+async function broadcastRecommendedForUser(userId: string) {
+  const items = await getRecommendedItems(userId);
+  const snapshot = JSON.stringify(items);
+  if (lastRecommendedSnapshot.get(userId) !== snapshot) {
+    lastRecommendedSnapshot.set(userId, snapshot);
+    io.to(`user:${userId}`).emit("recommended:update", items);
+  }
+}
+
+async function broadcastRecommendedForAll() {
+  for (const userId of connectedUsers.keys()) {
+    await broadcastRecommendedForUser(userId);
+  }
+}
+
+// Safety net for data written outside the app (ERP sync, warehouse scanner,
+// nightly corrections) and for pages left open across a server restart: since
+// every read above is a live aggregation with no cache, a short poll simply
+// notices when the underlying numbers differ from what clients were last told
+// and pushes the correction — no change-stream/replica-set dependency needed.
+setInterval(() => {
+  broadcastItems().catch((err) => console.error("broadcastItems poll failed", err));
+  broadcastAdmin().catch((err) => console.error("broadcastAdmin poll failed", err));
+  broadcastFulfilment().catch((err) => console.error("broadcastFulfilment poll failed", err));
+  broadcastRecommendedForAll().catch((err) => console.error("broadcastRecommended poll failed", err));
+}, 1500);
+
+// ---------------------------------------------------------------------------
+// Auth helpers
+// ---------------------------------------------------------------------------
+
+function signToken(userId: string) {
+  return jwt.sign({ sub: userId }, JWT_SECRET, { expiresIn: "30d" });
+}
+
+function objectId(value: unknown): Types.ObjectId | null {
+  return typeof value === "string" && Types.ObjectId.isValid(value)
+    ? new Types.ObjectId(value) : null;
+}
+
+async function userFromToken(token: string | undefined) {
+  if (!token) return null;
+  try {
+    const payload = jwt.verify(token, JWT_SECRET) as { sub: string };
+    return await User.findById(payload.sub);
+  } catch {
+    return null;
+  }
+}
+
+function extractToken(req: express.Request): string | undefined {
+  const header = req.headers.authorization;
+  if (header && header.startsWith("Bearer ")) return header.slice(7);
+  return undefined;
+}
+
+async function requireAuth(req: express.Request, res: express.Response, next: express.NextFunction) {
+  const user = await userFromToken(extractToken(req));
+  if (!user) return res.status(401).json({ error: "Sign in required" });
+  (req as any).user = user;
+  next();
+}
+
+async function requireAdmin(req: express.Request, res: express.Response, next: express.NextFunction) {
+  const user = (req as any).user;
+  if (!user || !user.isAdmin) return res.status(403).json({ error: "Admin access required" });
+  next();
+}
+
+// Admins can do everything staff can, so this gate accepts either role.
+async function requireStaff(req: express.Request, res: express.Response, next: express.NextFunction) {
+  const user = (req as any).user;
+  if (!user || !(user.isStaff || user.isAdmin)) return res.status(403).json({ error: "Staff access required" });
+  next();
+}
+
+function publicUser(user: any) {
+  return { id: user._id.toString(), username: user.username, isAdmin: user.isAdmin,
+    isStaff: user.isStaff, roles: user.roles || [] };
+}
+
+// ---------------------------------------------------------------------------
+// Auth routes
+// ---------------------------------------------------------------------------
+
+app.post("/api/auth/signup", async (req, res) => {
+  const { username, password } = req.body || {};
+  if (typeof username !== "string" || typeof password !== "string" || !username.trim() || !password) {
+    return res.status(400).json({ error: "Username and password are required" });
+  }
+  const existing = await User.findOne({ username: username.trim() });
+  if (existing) return res.status(409).json({ error: "Username is already taken" });
+  const passwordHash = await bcrypt.hash(password, 10);
+  try {
+    const user = await User.create({ username: username.trim(), passwordHash, isAdmin: false });
+    await Cart.create({ userId: user._id, items: [] });
+    const token = signToken(user._id.toString());
+    res.json({ token, user: publicUser(user) });
+  } catch (err: any) {
+    if (err?.code === 11000) return res.status(409).json({ error: "Username is already taken" });
+    throw err;
+  }
+});
+
+app.post("/api/auth/signin", async (req, res) => {
+  const { username, password } = req.body || {};
+  if (typeof username !== "string" || typeof password !== "string") {
+    return res.status(400).json({ error: "Username and password are required" });
+  }
+  const user = await User.findOne({ username: username.trim() });
+  if (!user) return res.status(401).json({ error: "Invalid username or password" });
+  const valid = await bcrypt.compare(password, user.passwordHash);
+  if (!valid) return res.status(401).json({ error: "Invalid username or password" });
+  const token = signToken(user._id.toString());
+  res.json({ token, user: publicUser(user) });
+});
+
+app.get("/api/auth/me", requireAuth, async (req, res) => {
+  res.json({ user: publicUser((req as any).user) });
+});
+
+// ---------------------------------------------------------------------------
+// Item routes
+// ---------------------------------------------------------------------------
+
+app.get("/api/items", async (_req, res) => {
+  const items = await getItemsLive();
+  res.json({ items });
+});
+
+app.get("/api/items/:id", async (req, res) => {
+  if (!Types.ObjectId.isValid(req.params.id)) return res.status(404).json({ error: "Item not found" });
+  const detail = await getItemDetail(req.params.id);
+  if (!detail) return res.status(404).json({ error: "Item not found" });
+  res.json({ item: detail });
+});
+
+app.post("/api/items/:id/buy", requireAuth, async (req, res) => {
+  const itemId = req.params.id;
+  if (!Types.ObjectId.isValid(itemId)) return res.status(404).json({ error: "Item not found" });
+  const item = await Item.findById(itemId);
+  if (!item) return res.status(404).json({ error: "Item not found" });
+  const reservedWarehouseIds = await reserveStock(item._id, 1);
+  if (!reservedWarehouseIds) return res.status(400).json({ error: "Item is out of stock" });
+
+  const user = (req as any).user;
+  const order = await Order.create({
+    userId: user._id,
+    items: [
+      {
+        itemId: item._id,
+        name: item.name,
+        price: item.price,
+        quantity: 1,
+        allocations: [{ warehouseId: reservedWarehouseIds[0], quantity: 1 }],
+      },
+    ],
+    total: item.price,
+  });
+  await Payment.create({ orderId: order._id, userId: user._id, amount: order.total, status: "paid" });
+
+  await Promise.all([
+    broadcastItems(),
+    broadcastAdmin(),
+    broadcastFulfilment(),
+    broadcastOrders(user._id.toString()),
+    broadcastRecommendedForUser(user._id.toString()),
+  ]);
+  res.json({ order: order.toJSON() });
+});
+
+// ---------------------------------------------------------------------------
+// Cart routes
+// ---------------------------------------------------------------------------
+
+app.get("/api/cart", requireAuth, async (req, res) => {
+  const cart = await getCartLive((req as any).user._id.toString());
+  res.json(cart);
+});
+
+// Adds `qty` to an existing line or pushes a new one, entirely via atomic
+// Mongo updates (no read-modify-write) so concurrent requests for the same
+// item from different tabs/clients can never both observe "no line yet" and
+// both push a duplicate line — MongoDB serializes per-document writes, so at
+// most one of the two update filters below can match at a time.
+async function addToCart(userId: string, itemId: Types.ObjectId, qty: number,
+  reservedWarehouseIds: Types.ObjectId[]) {
+  try {
+    await Cart.updateOne({ userId }, { $setOnInsert: { userId, items: [] } }, { upsert: true });
+  } catch (err: any) {
+    if (err?.code !== 11000) throw err;
+  }
+
+  for (let attempt = 0; attempt < 10; attempt++) {
+    const incResult = await Cart.updateOne(
+      { userId, "items.itemId": itemId },
+      { $inc: { "items.$.quantity": qty },
+        $set: { "items.$.reservationExpiresAt": new Date(Date.now() + 90_000),
+          inactiveExpiresAt: new Date(Date.now() + 300_000) },
+        $push: { "items.$.reservedWarehouseIds": { $each: reservedWarehouseIds } } }
+    );
+    if (incResult.matchedCount > 0) return;
+
+    const pushResult = await Cart.updateOne(
+      { userId, "items.itemId": { $ne: itemId } },
+      { $push: { items: { itemId, quantity: qty,
+        reservationExpiresAt: new Date(Date.now() + 90_000), reservedWarehouseIds } },
+        $set: { inactiveExpiresAt: new Date(Date.now() + 300_000) } }
+    );
+    if (pushResult.matchedCount > 0) return;
+  }
+  throw new Error("Failed to update cart line after repeated concurrent conflicts");
+}
+
+app.post("/api/cart", requireAuth, async (req, res) => {
+  const { itemId, quantity } = req.body || {};
+  const qty = quantity === undefined ? 1 : Number(quantity);
+  if (!Types.ObjectId.isValid(itemId)) return res.status(400).json({ error: "Invalid item" });
+  if (!Number.isInteger(qty) || qty < 1) return res.status(400).json({ error: "Quantity must be at least 1" });
+  const item = await Item.findById(itemId);
+  if (!item) return res.status(404).json({ error: "Item not found" });
+  const userId = (req as any).user._id.toString();
+  const reservedWarehouseIds = await reserveStock(item._id, qty);
+  if (!reservedWarehouseIds) return res.status(400).json({ error: "Not enough stock is available" });
+  try {
+    await addToCart(userId, item._id, qty, reservedWarehouseIds);
+  } catch (error) {
+    await releaseStock(item._id, reservedWarehouseIds);
+    throw error;
+  }
+
+  await Promise.all([broadcastCart(userId), broadcastRecommendedForUser(userId)]);
+  res.json(await getCartLive(userId));
+});
+
+app.patch("/api/cart/:itemId", requireAuth, async (req, res) => {
+  const { itemId } = req.params;
+  const { quantity } = req.body || {};
+  const qty = Number(quantity);
+  if (!Number.isInteger(qty) || qty < 1) {
+    return res.status(400).json({ error: "Quantity must be at least 1" });
+  }
+  const userId = (req as any).user._id.toString();
+  const cart = await Cart.findOne({ userId });
+  const line = cart?.items.find((l) => l.itemId.toString() === itemId);
+  if (!cart || !line) return res.status(404).json({ error: "Item is not in your cart" });
+  const held = [...(line.reservedWarehouseIds || [])] as Types.ObjectId[];
+  const needed = Math.max(0, qty - held.length);
+  const added = needed ? await reserveStock(line.itemId as Types.ObjectId, needed) : [];
+  if (added === null) return res.status(400).json({ error: "Not enough stock is available" });
+  const kept = held.slice(0, qty);
+  const released = held.slice(qty);
+  line.quantity = qty;
+  line.reservedWarehouseIds = [...kept, ...added] as any;
+  line.reservationExpiresAt = new Date(Date.now() + 90_000);
+  cart.inactiveExpiresAt = new Date(Date.now() + 300_000);
+  try {
+    await cart.save();
+  } catch (error) {
+    await releaseStock(line.itemId as Types.ObjectId, added);
+    throw error;
+  }
+  await releaseStock(line.itemId as Types.ObjectId, released);
+
+  await broadcastCart(userId);
+  res.json(await getCartLive(userId));
+});
+
+app.delete("/api/cart/:itemId", requireAuth, async (req, res) => {
+  const { itemId } = req.params;
+  const userId = (req as any).user._id.toString();
+  const cart = await Cart.findOne({ userId });
+  if (cart) {
+    const removed = cart.items.find((line) => line.itemId.toString() === itemId);
+    cart.items = cart.items.filter((l) => l.itemId.toString() !== itemId) as any;
+    cart.inactiveExpiresAt = new Date(Date.now() + 300_000);
+    await cart.save();
+    if (removed) await releaseStock(removed.itemId as Types.ObjectId,
+      [...(removed.reservedWarehouseIds || [])] as Types.ObjectId[]);
+  }
+  await Promise.all([broadcastCart(userId), broadcastRecommendedForUser(userId)]);
+  res.json(await getCartLive(userId));
+});
+
+// ---------------------------------------------------------------------------
+// Checkout
+// ---------------------------------------------------------------------------
+
+app.post("/api/checkout", requireAuth, async (req, res) => {
+  const userId = (req as any).user._id.toString();
+
+  // Atomically claim the cart's current contents so a concurrent double-click
+  // can't both see a full cart and both produce an order.
+  const claimedCart = await Cart.findOneAndUpdate({ userId },
+    { $set: { items: [], promotionCode: "", discount: 0 } });
+  const allLines = claimedCart?.items || [];
+  const originalLines = allLines.filter(line => !line.reservationExpiresAt
+    || line.reservationExpiresAt.getTime() > Date.now());
+  const expiredLines = allLines.filter(line => line.reservationExpiresAt
+    && line.reservationExpiresAt.getTime() <= Date.now());
+  if (originalLines.length === 0) {
+    await Cart.updateOne({ userId }, { $set: { items: expiredLines } });
+    return res.status(400).json({ error: allLines.length ? "Your reservation expired" : "Your cart is empty" });
+  }
+
+  const items = await Item.find({ _id: { $in: originalLines.map((l) => l.itemId) } });
+  const itemMap = new Map(items.map((i) => [i._id.toString(), i]));
+
+  let failure: string | null = null;
+  const orderLines: Array<{
+    itemId: Types.ObjectId;
+    name: string;
+    price: number;
+    quantity: number;
+    allocations: Array<{ warehouseId: Types.ObjectId; quantity: number }>;
+  }> = [];
+
+  for (const line of originalLines) {
+    const item = itemMap.get(line.itemId.toString());
+    if (!item) {
+      failure = "An item in your cart no longer exists";
+      break;
+    }
+    const warehouseIds = [...(line.reservedWarehouseIds || [])] as Types.ObjectId[];
+    if (warehouseIds.length < line.quantity) {
+      failure = `The reservation for ${item.name} expired`;
+      break;
+    }
+    const allocationCounts = new Map<string, { warehouseId: Types.ObjectId; quantity: number }>();
+    for (const wId of warehouseIds) {
+      const key = wId.toString();
+      const existing = allocationCounts.get(key);
+      if (existing) existing.quantity += 1;
+      else allocationCounts.set(key, { warehouseId: wId, quantity: 1 });
+    }
+    orderLines.push({
+      itemId: item._id,
+      name: item.name,
+      price: item.price,
+      quantity: line.quantity,
+      allocations: Array.from(allocationCounts.values()),
+    });
+  }
+
+  if (failure) {
+    await Cart.updateOne({ userId }, { $set: { items: allLines } });
+    return res.status(400).json({ error: failure });
+  }
+
+  const subtotal = orderLines.reduce((s, l) => s + l.price * l.quantity, 0);
+  const discount = Math.round(subtotal * Number(claimedCart?.discount || 0)) / 100;
+  const total = Math.max(0, subtotal - discount);
+  if (claimedCart?.promotionCode) {
+    const now = new Date();
+    const promotion = await Promotion.findOneAndUpdate({ code: claimedCart.promotionCode,
+      start: { $lte: now }, end: { $gte: now }, $expr: { $lt: ["$redemptions", "$limit"] } },
+    { $inc: { redemptions: 1, revenue: total } });
+    if (!promotion) {
+      await Cart.updateOne({ userId }, { $set: { items: allLines,
+        promotionCode: claimedCart.promotionCode, discount: claimedCart.discount } });
+      return res.status(400).json({ error: "Promotion is expired or unavailable" });
+    }
+  }
+  const order = await Order.create({ userId, items: orderLines, total, discount });
+  await Payment.create({ orderId: order._id, userId, amount: total, status: "paid" });
+  if (expiredLines.length) await Cart.updateOne({ userId }, { $set: { items: expiredLines } });
+
+  await Promise.all([
+    broadcastItems(),
+    broadcastAdmin(),
+    broadcastCart(userId),
+    broadcastFulfilment(),
+    broadcastOrders(userId),
+    broadcastRecommendedForUser(userId),
+  ]);
+  res.json({ order: order.toJSON() });
+});
+
+// ---------------------------------------------------------------------------
+// Orders
+// ---------------------------------------------------------------------------
+
+app.get("/api/orders", requireAuth, async (req, res) => {
+  res.json({ orders: await ordersForUser((req as any).user._id) });
+});
+
+// Gives every unit an order line reserved back to the exact warehouse it was
+// taken from, so a cancel/return never creates or destroys stock — it only
+// ever undoes the specific allocations recorded at purchase time.
+async function restoreAllocations(allocations: Array<{ warehouseId: any; quantity: number }>, itemId: any) {
+  for (const alloc of allocations) {
+    await Stock.updateOne({ item_id: itemId, warehouse_id: alloc.warehouseId }, { $inc: { quantity: alloc.quantity } });
+  }
+}
+
+app.post("/api/orders/:id/cancel", requireAuth, async (req, res) => {
+  const user = (req as any).user;
+  const orderId = objectId(req.params.id);
+  const order = orderId ? await Order.findOne({ _id: orderId, userId: user._id }) : null;
+  if (!order) return res.status(404).json({ error: "Order not found" });
+  if (order.status !== "pending") {
+    return res.status(400).json({ error: "Order has already shipped and cannot be cancelled" });
+  }
+
+  for (const line of order.items) {
+    await restoreAllocations(line.allocations as any, line.itemId);
+  }
+  order.status = "cancelled";
+  await order.save();
+
+  const userId = user._id.toString();
+  await Promise.all([
+    broadcastItems(),
+    broadcastAdmin(),
+    broadcastFulfilment(),
+    broadcastOrders(userId),
+    broadcastRecommendedForUser(userId),
+  ]);
+  res.json({ order: order.toJSON() });
+});
+
+app.post("/api/orders/:id/items/:itemId/return", requireAuth, async (req, res) => {
+  const user = (req as any).user;
+  const orderId = objectId(req.params.id);
+  const order = orderId ? await Order.findOne({ _id: orderId, userId: user._id }) : null;
+  if (!order) return res.status(404).json({ error: "Order not found" });
+  if (order.status !== "shipped") {
+    return res.status(400).json({ error: "Only items from a shipped order can be returned" });
+  }
+  const line = order.items.find((l) => l.itemId.toString() === req.params.itemId);
+  if (!line) return res.status(404).json({ error: "Item not found in this order" });
+  if (line.returned) return res.status(400).json({ error: "Item has already been returned" });
+
+  await restoreAllocations(line.allocations as any, line.itemId);
+  line.returned = true;
+  await order.save();
+
+  const userId = user._id.toString();
+  await Promise.all([
+    broadcastItems(),
+    broadcastAdmin(),
+    broadcastOrders(userId),
+    broadcastRecommendedForUser(userId),
+  ]);
+  res.json({ order: order.toJSON() });
+});
+
+// ---------------------------------------------------------------------------
+// Reviews
+// ---------------------------------------------------------------------------
+
+app.post("/api/items/:id/reviews", requireAuth, async (req, res) => {
+  const itemId = objectId(req.params.id);
+  if (!itemId) return res.status(404).json({ error: "Item not found" });
+  const { rating, comment } = req.body || {};
+  const ratingNum = Number(rating);
+  if (!Number.isInteger(ratingNum) || ratingNum < 1 || ratingNum > 5) {
+    return res.status(400).json({ error: "Rating must be between 1 and 5" });
+  }
+  const user = (req as any).user;
+  const hasPurchased = await Order.exists({ userId: user._id, "items.itemId": itemId });
+  if (!hasPurchased) {
+    return res.status(403).json({ error: "You can only review items you have purchased" });
+  }
+
+  await Review.findOneAndUpdate(
+    { itemId, userId: user._id },
+    { itemId, userId: user._id, username: user.username, rating: ratingNum,
+      comment: typeof comment === "string" ? comment : "" },
+    { upsert: true, new: true, setDefaultsOnInsert: true }
+  );
+
+  await broadcastReviews(String(itemId));
+  const detail = await getItemDetail(String(itemId));
+  res.json({ item: detail });
+});
+
+// ---------------------------------------------------------------------------
+// Admin
+// ---------------------------------------------------------------------------
+
+app.get("/api/admin/overview", requireAuth, requireAdmin, async (_req, res) => {
+  res.json(await getAdminOverview());
+});
+
+app.post("/api/admin/restock", requireAuth, requireAdmin, async (req, res) => {
+  const { itemId, warehouseId, quantity } = req.body || {};
+  const qty = Number(quantity);
+  if (!Types.ObjectId.isValid(itemId) || !Types.ObjectId.isValid(warehouseId)) {
+    return res.status(400).json({ error: "Invalid item or warehouse" });
+  }
+  if (!Number.isInteger(qty) || qty < 1) {
+    return res.status(400).json({ error: "Restock quantity must be a positive integer" });
+  }
+  const [item, warehouse] = await Promise.all([Item.findById(itemId), Warehouse.findById(warehouseId)]);
+  if (!item || !warehouse) return res.status(404).json({ error: "Item or warehouse not found" });
+
+  await Stock.findOneAndUpdate(
+    { item_id: item._id, warehouse_id: warehouse._id },
+    { $inc: { quantity: qty } },
+    { upsert: true }
+  );
+
+  await Promise.all([broadcastItems(), broadcastAdmin()]);
+  res.json(await getAdminOverview());
+});
+
+// A transfer only ever moves units between two warehouse rows for the same
+// item — it never touches the item's total, and a source that doesn't hold
+// enough is refused atomically (the conditional $gte in the filter) so the
+// transfer changes nothing rather than leaving a warehouse short.
+app.post("/api/admin/transfer", requireAuth, requireAdmin, async (req, res) => {
+  const { itemId, fromWarehouseId, toWarehouseId, quantity } = req.body || {};
+  const qty = Number(quantity);
+  if (!Types.ObjectId.isValid(itemId) || !Types.ObjectId.isValid(fromWarehouseId) || !Types.ObjectId.isValid(toWarehouseId)) {
+    return res.status(400).json({ error: "Invalid item or warehouse" });
+  }
+  if (fromWarehouseId === toWarehouseId) {
+    return res.status(400).json({ error: "Source and destination warehouses must differ" });
+  }
+  if (!Number.isInteger(qty) || qty < 1) {
+    return res.status(400).json({ error: "Transfer quantity must be a positive integer" });
+  }
+
+  const source = await Stock.findOneAndUpdate(
+    { item_id: itemId, warehouse_id: fromWarehouseId, quantity: { $gte: qty } },
+    { $inc: { quantity: -qty } }
+  );
+  if (!source) return res.status(400).json({ error: "Source warehouse does not hold enough stock" });
+
+  await Stock.findOneAndUpdate(
+    { item_id: itemId, warehouse_id: toWarehouseId },
+    { $inc: { quantity: qty } },
+    { upsert: true }
+  );
+
+  await Promise.all([broadcastItems(), broadcastAdmin(), broadcastRecommendedForAll()]);
+  res.json(await getAdminOverview());
+});
+
+app.post("/api/admin/price", requireAuth, requireAdmin, async (req, res) => {
+  const { itemId, price } = req.body || {};
+  const priceNum = Number(price);
+  if (!Types.ObjectId.isValid(itemId)) return res.status(400).json({ error: "Invalid item" });
+  if (!Number.isFinite(priceNum) || priceNum <= 0) {
+    return res.status(400).json({ error: "Price must be a positive number" });
+  }
+  const item = await Item.findByIdAndUpdate(itemId, { price: priceNum }, { new: true });
+  if (!item) return res.status(404).json({ error: "Item not found" });
+
+  await Promise.all([
+    broadcastItems(),
+    broadcastAdmin(),
+    broadcastRecommendedForAll(),
+    broadcastCartsContainingItem(item._id),
+  ]);
+  res.json(await getAdminOverview());
+});
+
+// ---------------------------------------------------------------------------
+// Fulfilment
+// ---------------------------------------------------------------------------
+
+app.get("/api/fulfilment/queue", requireAuth, requireStaff, async (_req, res) => {
+  const orders = await getFulfilmentQueue();
+  res.json({ orders, depth: orders.length });
+});
+
+app.post("/api/fulfilment/ship", requireAuth, requireStaff, async (req, res) => {
+  const orderId = objectId(req.body?.orderId);
+  const order = orderId ? await Order.findById(orderId) : null;
+  if (!order) return res.status(404).json({ error: "Order not found" });
+  if (order.status !== "pending") {
+    return res.status(400).json({ error: "Order is not waiting to be shipped" });
+  }
+  order.status = "shipped";
+  await order.save();
+
+  await Promise.all([broadcastFulfilment(), broadcastAdmin(), broadcastOrders(order.userId.toString())]);
+  res.json({ order: order.toJSON() });
+});
+
+// ---------------------------------------------------------------------------
+// Recommendations
+// ---------------------------------------------------------------------------
+
+app.get("/api/recommended", async (req, res) => {
+  const user = await userFromToken(extractToken(req));
+  const items = await getRecommendedItems(user ? user._id.toString() : null);
+  res.json({ items });
+});
+
+// ---------------------------------------------------------------------------
+// Error handling
+// ---------------------------------------------------------------------------
+
+installProgressionRoutes(app, io, { jwtSecret: JWT_SECRET, ordersForUser });
+
+const clientDist = join(fileURLToPath(new URL(".", import.meta.url)), "../../client/dist");
+app.use(express.static(clientDist));
+app.get(/^\/(?!api(?:\/|$)).*/, (_req, res) => res.sendFile(join(clientDist, "index.html")));
+
+app.use((err: any, _req: express.Request, res: express.Response, _next: express.NextFunction) => {
+  console.error(err);
+  res.status(500).json({ error: "Internal server error" });
+});
+
+// ---------------------------------------------------------------------------
+// Socket.io
+// ---------------------------------------------------------------------------
+
+io.on("connection", async (socket) => {
+  const token = socket.handshake.auth?.token as string | undefined;
+  const user = await userFromToken(token);
+  let userId: string | null = null;
+  if (user) {
+    userId = user._id.toString();
+    socket.join(`user:${userId}`);
+    if (user.isAdmin) socket.join("admins");
+    if (user.isStaff || user.isAdmin) socket.join("staff");
+    connectedUsers.set(userId, (connectedUsers.get(userId) || 0) + 1);
+  }
+
+  socket.on("disconnect", () => {
+    if (!userId) return;
+    const remaining = (connectedUsers.get(userId) || 1) - 1;
+    if (remaining <= 0) connectedUsers.delete(userId);
+    else connectedUsers.set(userId, remaining);
+  });
+
+  try {
+    socket.emit("items:update", await getItemsLive());
+    socket.emit("recommended:update", await getRecommendedItems(userId));
+    if (user) {
+      socket.emit("cart:update", await getCartLive(userId!));
+      socket.emit("orders:update", await ordersForUser(userId!));
+    }
+    if (user?.isAdmin) socket.emit("admin:update", await getAdminOverview());
+    if (user?.isStaff || user?.isAdmin) {
+      const queue = await getFulfilmentQueue();
+      socket.emit("fulfilment:update", { orders: queue, depth: queue.length });
+    }
+  } catch (err) {
+    console.error("Failed to send initial snapshot", err);
+  }
+});
+
+// ---------------------------------------------------------------------------
+// Startup
+// ---------------------------------------------------------------------------
+
+async function main() {
+  await mongoose.connect(DATABASE_URL);
+  console.log("Connected to MongoDB");
+  await seed();
+  server.listen(PORT, () => {
+    console.log(`API server listening on port ${PORT}`);
+  });
+}
+
+main().catch((err) => {
+  console.error("Fatal startup error", err);
+  process.exit(1);
+});
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/models.ts b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/models.ts
new file mode 100644
index 00000000000..203ad9e43ea
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/models.ts
@@ -0,0 +1,130 @@
+import mongoose, { Schema } from "mongoose";
+
+const idTransform = {
+  virtuals: true,
+  versionKey: false,
+  transform: (_doc: any, ret: any) => {
+    ret.id = ret._id.toString();
+    delete ret._id;
+    return ret;
+  },
+};
+
+// Fixed shape tables — external systems (ERP sync, warehouse scanner, nightly
+// stock corrections) read and write these collections directly, using exactly
+// these collection and field names. The app itself always treats `stock` as
+// the single source of truth for quantities, never a cached total.
+
+const ItemSchema = new Schema(
+  {
+    name: { type: String, required: true },
+    price: { type: Number, required: true },
+    description: { type: String, default: "" },
+    category: { type: String, default: "Uncategorized" },
+    variants: { type: [String], default: [] },
+  },
+  { collection: "item", toJSON: idTransform, toObject: idTransform }
+);
+
+const WarehouseSchema = new Schema(
+  {
+    name: { type: String, required: true },
+  },
+  { collection: "warehouse", toJSON: idTransform, toObject: idTransform }
+);
+
+const StockSchema = new Schema(
+  {
+    item_id: { type: Schema.Types.ObjectId, ref: "Item", required: true },
+    warehouse_id: { type: Schema.Types.ObjectId, ref: "Warehouse", required: true },
+    quantity: { type: Number, required: true, default: 0 },
+  },
+  { collection: "stock", toJSON: idTransform, toObject: idTransform }
+);
+StockSchema.index({ item_id: 1, warehouse_id: 1 }, { unique: true });
+
+// App-owned data — free to model however is convenient.
+
+const UserSchema = new Schema(
+  {
+    username: { type: String, required: true, unique: true },
+    passwordHash: { type: String, required: true },
+    isAdmin: { type: Boolean, default: false },
+    isStaff: { type: Boolean, default: false },
+    roles: { type: [String], default: [] },
+  },
+  { timestamps: true, toJSON: idTransform, toObject: idTransform }
+);
+
+const CartLineSchema = new Schema(
+  {
+    itemId: { type: Schema.Types.ObjectId, ref: "Item", required: true },
+    quantity: { type: Number, required: true, min: 1 },
+    reservationExpiresAt: { type: Date, default: null },
+    reservedWarehouseIds: { type: [Schema.Types.ObjectId], default: [] },
+  },
+  { _id: false }
+);
+
+const CartSchema = new Schema(
+  {
+    userId: { type: Schema.Types.ObjectId, ref: "User", required: true, unique: true },
+    items: { type: [CartLineSchema], default: [] },
+    promotionCode: { type: String, default: "" },
+    discount: { type: Number, default: 0 },
+    inactiveExpiresAt: { type: Date, default: null },
+  },
+  { timestamps: true, toJSON: idTransform, toObject: idTransform }
+);
+
+const AllocationSchema = new Schema(
+  {
+    warehouseId: { type: Schema.Types.ObjectId, ref: "Warehouse", required: true },
+    quantity: { type: Number, required: true },
+  },
+  { _id: false }
+);
+
+const OrderLineSchema = new Schema(
+  {
+    itemId: { type: Schema.Types.ObjectId, ref: "Item", required: true },
+    name: { type: String, required: true },
+    price: { type: Number, required: true },
+    quantity: { type: Number, required: true },
+    allocations: { type: [AllocationSchema], default: [] },
+    returned: { type: Boolean, default: false },
+  },
+  { _id: false }
+);
+
+const OrderSchema = new Schema(
+  {
+    userId: { type: Schema.Types.ObjectId, ref: "User", required: true },
+    items: { type: [OrderLineSchema], default: [] },
+    total: { type: Number, required: true },
+    status: { type: String, enum: ["pending", "shipped", "delivered", "cancelled", "refunded"], default: "pending" },
+    discount: { type: Number, default: 0 },
+    refundTotal: { type: Number, default: 0 },
+  },
+  { timestamps: true, toJSON: idTransform, toObject: idTransform }
+);
+
+const ReviewSchema = new Schema(
+  {
+    itemId: { type: Schema.Types.ObjectId, ref: "Item", required: true },
+    userId: { type: Schema.Types.ObjectId, ref: "User", required: true },
+    username: { type: String, required: true },
+    rating: { type: Number, required: true, min: 1, max: 5 },
+    comment: { type: String, default: "" },
+  },
+  { timestamps: true, toJSON: idTransform, toObject: idTransform }
+);
+ReviewSchema.index({ itemId: 1, userId: 1 }, { unique: true });
+
+export const Item = mongoose.model("Item", ItemSchema);
+export const Warehouse = mongoose.model("Warehouse", WarehouseSchema);
+export const Stock = mongoose.model("Stock", StockSchema);
+export const User = mongoose.model("User", UserSchema);
+export const Cart = mongoose.model("Cart", CartSchema);
+export const Order = mongoose.model("Order", OrderSchema);
+export const Review = mongoose.model("Review", ReviewSchema);
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/progression-models.ts b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/progression-models.ts
new file mode 100644
index 00000000000..88a5591b00c
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/progression-models.ts
@@ -0,0 +1,123 @@
+import mongoose, { Schema } from "mongoose";
+
+const options = { timestamps: true, toJSON: { virtuals: true, versionKey: false,
+  transform: (_doc: unknown, value: any) => { value.id = String(value._id); delete value._id; } } };
+
+const ProfileSchema = new Schema({
+  userId: { type: Schema.Types.ObjectId, ref: "User", required: true, unique: true },
+  name: { type: String, required: true },
+  address: { type: String, required: true },
+}, options);
+
+const ReplySchema = new Schema({
+  userId: { type: Schema.Types.ObjectId, ref: "User", required: true },
+  username: { type: String, required: true },
+  body: { type: String, required: true },
+  createdAt: { type: Date, default: Date.now },
+}, { _id: true, toJSON: { virtuals: true } });
+
+const SupportTicketSchema = new Schema({
+  reference: { type: String, required: true, unique: true },
+  userId: { type: Schema.Types.ObjectId, ref: "User", default: null },
+  email: { type: String, default: "" },
+  subject: { type: String, required: true },
+  message: { type: String, required: true },
+  status: { type: String, default: "new" },
+  priority: { type: String, default: "normal" },
+  assignee: { type: String, default: "" },
+  orderId: { type: Schema.Types.ObjectId, ref: "Order", default: null },
+  replies: { type: [ReplySchema], default: [] },
+  refundTotal: { type: Number, default: 0 },
+}, options);
+
+const PromotionSchema = new Schema({
+  code: { type: String, required: true, unique: true, uppercase: true },
+  discount: { type: Number, required: true, min: 0, max: 100 },
+  start: { type: Date, required: true },
+  end: { type: Date, required: true },
+  limit: { type: Number, required: true, min: 1 },
+  redemptions: { type: Number, default: 0 },
+  revenue: { type: Number, default: 0 },
+}, options);
+
+const PreferenceSchema = new Schema({
+  userId: { type: Schema.Types.ObjectId, ref: "User", required: true, unique: true },
+  order: { type: Boolean, default: false },
+  stock: { type: Boolean, default: false },
+}, options);
+
+const NotificationSchema = new Schema({
+  userId: { type: Schema.Types.ObjectId, ref: "User", required: true },
+  key: { type: String, required: true },
+  type: { type: String, required: true },
+  message: { type: String, required: true },
+}, options);
+NotificationSchema.index({ userId: 1, key: 1 }, { unique: true });
+
+const StockAlertSchema = new Schema({
+  userId: { type: Schema.Types.ObjectId, ref: "User", required: true },
+  itemId: { type: Schema.Types.ObjectId, ref: "Item", required: true },
+  sent: { type: Boolean, default: false },
+}, options);
+StockAlertSchema.index({ userId: 1, itemId: 1 }, { unique: true });
+
+const ScheduledRestockSchema = new Schema({
+  itemId: { type: Schema.Types.ObjectId, ref: "Item", required: true },
+  warehouseId: { type: Schema.Types.ObjectId, ref: "Warehouse", required: true },
+  quantity: { type: Number, required: true, min: 1 },
+  dueAt: { type: Date, required: true },
+  status: { type: String, enum: ["pending", "applied", "cancelled"], default: "pending" },
+  source: { type: String, default: "scheduled" },
+}, options);
+
+const StockLedgerSchema = new Schema({
+  restockId: { type: Schema.Types.ObjectId, ref: "ScheduledRestock", required: true, unique: true },
+  itemId: { type: Schema.Types.ObjectId, ref: "Item", required: true },
+  warehouseId: { type: Schema.Types.ObjectId, ref: "Warehouse", required: true },
+  quantity: { type: Number, required: true },
+}, options);
+
+const ReorderRuleSchema = new Schema({
+  itemId: { type: Schema.Types.ObjectId, ref: "Item", required: true, unique: true },
+  threshold: { type: Number, required: true, min: 0 },
+  quantity: { type: Number, required: true, min: 1 },
+}, options);
+
+const ActivitySchema = new Schema({
+  actorId: { type: Schema.Types.ObjectId, ref: "User", required: true },
+  actor: { type: String, required: true },
+  action: { type: String, required: true },
+  subject: { type: String, required: true },
+}, options);
+
+const PaymentSchema = new Schema({
+  orderId: { type: Schema.Types.ObjectId, ref: "Order", required: true, unique: true },
+  userId: { type: Schema.Types.ObjectId, ref: "User", required: true },
+  amount: { type: Number, required: true },
+  status: { type: String, default: "paid" },
+}, options);
+
+const DismissalSchema = new Schema({
+  userId: { type: Schema.Types.ObjectId, ref: "User", required: true },
+  itemId: { type: Schema.Types.ObjectId, ref: "Item", required: true },
+}, options);
+DismissalSchema.index({ userId: 1, itemId: 1 }, { unique: true });
+
+const CartArchiveSchema = new Schema({
+  userId: { type: Schema.Types.ObjectId, ref: "User", required: true, unique: true },
+  items: { type: [{ itemId: Schema.Types.ObjectId, quantity: Number }], default: [] },
+}, options);
+
+export const Profile = mongoose.model("ProgressionProfile", ProfileSchema);
+export const SupportTicket = mongoose.model("ProgressionSupportTicket", SupportTicketSchema);
+export const Promotion = mongoose.model("ProgressionPromotion", PromotionSchema);
+export const Preference = mongoose.model("ProgressionPreference", PreferenceSchema);
+export const Notification = mongoose.model("ProgressionNotification", NotificationSchema);
+export const StockAlert = mongoose.model("ProgressionStockAlert", StockAlertSchema);
+export const ScheduledRestock = mongoose.model("ProgressionScheduledRestock", ScheduledRestockSchema);
+export const StockLedger = mongoose.model("ProgressionStockLedger", StockLedgerSchema);
+export const ReorderRule = mongoose.model("ProgressionReorderRule", ReorderRuleSchema);
+export const Activity = mongoose.model("ProgressionActivity", ActivitySchema);
+export const Payment = mongoose.model("ProgressionPayment", PaymentSchema);
+export const Dismissal = mongoose.model("ProgressionDismissal", DismissalSchema);
+export const CartArchive = mongoose.model("ProgressionCartArchive", CartArchiveSchema);
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/progression.ts b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/progression.ts
new file mode 100644
index 00000000000..6a61a2b5e03
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/progression.ts
@@ -0,0 +1,504 @@
+import type express from "express";
+import { Router } from "express";
+import type { Server as SocketIOServer } from "socket.io";
+import jwt from "jsonwebtoken";
+import { Types } from "mongoose";
+
+import { Cart, Item, Order, Stock, User, Warehouse } from "./models.js";
+import {
+  Activity, CartArchive, Dismissal, Notification, Payment, Preference, Profile, Promotion,
+  ReorderRule, ScheduledRestock, StockAlert, StockLedger, SupportTicket,
+} from "./progression-models.js";
+import { releaseStock, reserveStock } from "./stock-reservations.js";
+
+type Request = express.Request & { progressionUser?: any };
+
+function cleanText(value: unknown) {
+  return typeof value === "string" ? value.trim() : "";
+}
+
+function number(value: unknown) {
+  const parsed = Number(value);
+  return Number.isFinite(parsed) ? parsed : NaN;
+}
+
+function objectId(value: unknown): Types.ObjectId | null {
+  return typeof value === "string" && Types.ObjectId.isValid(value)
+    ? new Types.ObjectId(value) : null;
+}
+
+function publicUser(user: any) {
+  return { id: String(user._id), username: user.username, isAdmin: user.isAdmin,
+    isStaff: user.isStaff, roles: user.roles || [] };
+}
+
+export function installProgressionRoutes(app: express.Express, io: SocketIOServer,
+  { jwtSecret, ordersForUser }: {
+    jwtSecret: string;
+    ordersForUser: (userId: string | Types.ObjectId) => Promise<any[]>;
+  }) {
+  const router = Router();
+  const supportRouter = Router();
+  const adminRouter = Router();
+
+  async function userFromRequest(req: express.Request) {
+    const header = req.headers.authorization;
+    if (!header?.startsWith("Bearer ")) return null;
+    try {
+      const payload = jwt.verify(header.slice(7), jwtSecret) as { sub: string };
+      return await User.findById(payload.sub);
+    } catch {
+      return null;
+    }
+  }
+
+  async function optionalAuth(req: Request, _res: express.Response, next: express.NextFunction) {
+    req.progressionUser = await userFromRequest(req);
+    next();
+  }
+
+  async function auth(req: Request, res: express.Response, next: express.NextFunction) {
+    req.progressionUser = await userFromRequest(req);
+    if (!req.progressionUser) return res.status(401).json({ error: "Sign in required" });
+    next();
+  }
+
+  function staff(req: Request, res: express.Response, next: express.NextFunction) {
+    if (!(req.progressionUser?.isStaff || req.progressionUser?.isAdmin)) {
+      return res.status(403).json({ error: "Staff access required" });
+    }
+    next();
+  }
+
+  function admin(req: Request, res: express.Response, next: express.NextFunction) {
+    if (!req.progressionUser?.isAdmin) return res.status(403).json({ error: "Admin access required" });
+    next();
+  }
+
+  function changed(userId?: string) {
+    io.emit("progression:update", { userId: userId || null });
+  }
+
+  async function recordActivity(user: any, action: string, subject: string) {
+    await Activity.create({ actorId: user._id, actor: user.username, action, subject });
+  }
+
+  async function ownedTicket(req: Request, id: string) {
+    const ticketId = objectId(id);
+    if (!ticketId) return null;
+    const ticket = await SupportTicket.findById(ticketId);
+    if (!ticket) return null;
+    const user = req.progressionUser;
+    if (user?.isStaff || user?.isAdmin || (ticket.userId && String(ticket.userId) === String(user?._id))) {
+      return ticket;
+    }
+    return null;
+  }
+
+  async function ensurePayments(userId: Types.ObjectId) {
+    const orders = await Order.find({ userId, status: { $nin: ["cancelled"] } });
+    for (const order of orders) {
+      await Payment.updateOne({ orderId: order._id }, {
+        $setOnInsert: { orderId: order._id, userId, amount: order.total, status: "paid" },
+      }, { upsert: true });
+    }
+  }
+
+  router.get("/state", optionalAuth, async (req: Request, res) => {
+    const user = req.progressionUser;
+    const isStaff = Boolean(user?.isStaff || user?.isAdmin);
+    if (user) await ensurePayments(user._id);
+    const ticketFilter = isStaff ? {} : user ? { userId: user._id } : { _id: null };
+    const orderIds = user ? (await Order.find({ userId: user._id }).select("_id")).map(order => order._id) : [];
+    const [profile, tickets, promotions, preference, notifications, scheduledRestocks,
+      ledger, reorderRules, activities, payments, dismissals, archive, staffUsers, ownOrders,
+      warehouses] = await Promise.all([
+      user ? Profile.findOne({ userId: user._id }) : null,
+      SupportTicket.find(ticketFilter).sort({ createdAt: -1 }),
+      isStaff ? Promotion.find().sort({ createdAt: -1 }) : [],
+      user ? Preference.findOne({ userId: user._id }) : null,
+      user ? Notification.find({ userId: user._id }).sort({ createdAt: -1 }) : [],
+      isStaff ? ScheduledRestock.find({ status: "pending" }).sort({ dueAt: 1 }) : [],
+      isStaff ? StockLedger.find().sort({ createdAt: -1 }).limit(20) : [],
+      isStaff ? ReorderRule.find() : [],
+      isStaff ? Activity.find().sort({ createdAt: -1 }).limit(30) : [],
+      user ? Payment.find({ orderId: { $in: orderIds } }) : [],
+      user ? Dismissal.find({ userId: user._id }) : [],
+      user ? CartArchive.findOne({ userId: user._id }) : null,
+      user?.isAdmin ? User.find({ isStaff: true }).sort({ username: 1 }) : [],
+      isStaff ? Order.find().sort({ createdAt: -1 })
+        : user ? Order.find({ userId: user._id }).sort({ createdAt: -1 }) : [],
+      isStaff ? Warehouse.find().sort({ name: 1 }) : [],
+    ]);
+    const ticketJson = await Promise.all(tickets.map(async ticket => {
+      const value = ticket.toJSON() as any;
+      value.order = ticket.orderId ? await Order.findById(ticket.orderId) : null;
+      return value;
+    }));
+    res.json({
+      user: user ? publicUser(user) : null,
+      profile, tickets: ticketJson, promotions, preference: preference || { order: false, stock: false },
+      notifications, scheduledRestocks, ledger, reorderRules, activities, payments,
+      dismissals: dismissals.map(item => String(item.itemId)), archive,
+      staffUsers: staffUsers.map(publicUser), orders: ownOrders, warehouses,
+    });
+  });
+
+  router.put("/profile", auth, async (req: Request, res) => {
+    const name = cleanText(req.body?.name);
+    const address = cleanText(req.body?.address);
+    if (!name || !address) return res.status(400).json({ error: "Name and address are required" });
+    const profile = await Profile.findOneAndUpdate({ userId: req.progressionUser._id },
+      { userId: req.progressionUser._id, name, address }, { upsert: true, new: true });
+    changed(String(req.progressionUser._id));
+    res.json({ profile });
+  });
+
+  router.post("/staff/roles", auth, admin, async (req: Request, res) => {
+    const username = cleanText(req.body?.username);
+    const roles = Array.isArray(req.body?.roles) ? req.body.roles.map(cleanText).filter(Boolean) : [];
+    const target = await User.findOne({ username });
+    if (!target) return res.status(404).json({ error: "Account not found" });
+    target.roles = roles;
+    target.isStaff = roles.length > 0 || target.isStaff;
+    await target.save();
+    await recordActivity(req.progressionUser, "updated roles", username);
+    changed();
+    res.json({ user: publicUser(target) });
+  });
+
+  router.post("/catalog", auth, staff, async (req: Request, res) => {
+    const name = cleanText(req.body?.name);
+    const price = number(req.body?.price);
+    const category = cleanText(req.body?.category) || "Uncategorized";
+    const variants = cleanText(req.body?.variants).split(",").map(value => value.trim()).filter(Boolean);
+    if (!name || !(price >= 0)) return res.status(400).json({ error: "Name and price are required" });
+    const item = await Item.create({ name, price, category, variants });
+    const warehouses = await Warehouse.find();
+    await Stock.insertMany(warehouses.map(warehouse => ({ item_id: item._id,
+      warehouse_id: warehouse._id, quantity: 0 })));
+    await recordActivity(req.progressionUser, "created catalog item", name);
+    changed();
+    res.json({ item });
+  });
+
+  router.post("/support", optionalAuth, async (req: Request, res) => {
+    const subject = cleanText(req.body?.subject);
+    const message = cleanText(req.body?.message);
+    const email = cleanText(req.body?.email);
+    if (!subject || !message || (!req.progressionUser && !email)) {
+      return res.status(400).json({ error: "Contact, subject, and message are required" });
+    }
+    const ticket = await SupportTicket.create({
+      reference: `SUP-${Date.now().toString(36).toUpperCase()}`,
+      userId: req.progressionUser?._id || null, email, subject, message,
+    });
+    changed(req.progressionUser ? String(req.progressionUser._id) : undefined);
+    res.status(201).json({ ticket });
+  });
+
+  router.patch("/support/:id", auth, staff, async (req: Request, res) => {
+    const update: Record<string, string> = {};
+    for (const key of ["assignee", "priority", "status"]) {
+      const value = cleanText(req.body?.[key]);
+      if (value) update[key] = value;
+    }
+    const ticketId = objectId(req.params.id);
+    const ticket = ticketId
+      ? await SupportTicket.findByIdAndUpdate(ticketId, { $set: update }, { new: true }) : null;
+    if (!ticket) return res.status(404).json({ error: "Case not found" });
+    changed(ticket.userId ? String(ticket.userId) : undefined);
+    res.json({ ticket });
+  });
+
+  router.post("/support/:id/replies", auth, async (req: Request, res) => {
+    const ticket = await ownedTicket(req, req.params.id);
+    if (!ticket) return res.status(404).json({ error: "Case not found" });
+    const body = cleanText(req.body?.body);
+    if (!body) return res.status(400).json({ error: "Reply is required" });
+    ticket.replies.push({ userId: req.progressionUser._id, username: req.progressionUser.username,
+      body } as any);
+    await ticket.save();
+    changed(ticket.userId ? String(ticket.userId) : undefined);
+    res.json({ ticket });
+  });
+
+  supportRouter.post("/cases/:caseId/order", auth, async (req: Request, res) => {
+    const ticketId = objectId(req.params.caseId);
+    const ticket = ticketId && await SupportTicket.findOne({ _id: ticketId,
+      userId: req.progressionUser._id });
+    if (!ticket) return res.status(404).json({ error: "Case not found" });
+    const orderId = objectId(req.body?.orderId);
+    if (!orderId) return res.status(403).json({ error: "Order does not belong to this account" });
+    const order = await Order.findOne({ _id: orderId, userId: req.progressionUser._id });
+    if (!order) return res.status(403).json({ error: "Order does not belong to this account" });
+    ticket.orderId = order._id;
+    await ticket.save();
+    changed(String(req.progressionUser._id));
+    res.json({ ticket });
+  });
+
+  supportRouter.post("/cases/:caseId/refund", auth, staff, async (req: Request, res) => {
+    const ticketId = objectId(req.params.caseId);
+    const ticket = ticketId ? await SupportTicket.findById(ticketId) : null;
+    if (!ticket?.orderId) return res.status(404).json({ error: "Order-linked case not found" });
+    if (ticket.refundTotal > 0) {
+      return res.status(409).json({ error: "Order has already been refunded" });
+    }
+    const order = await Order.findOneAndUpdate({ _id: ticket.orderId,
+      status: { $nin: ["refunded", "cancelled"] } }, { $set: { status: "refunded" } }, { new: true });
+    if (!order) return res.status(409).json({ error: "Order has already been refunded" });
+    for (const line of order.items) {
+      if (line.returned) continue;
+      for (const allocation of line.allocations) {
+        await Stock.updateOne({ item_id: line.itemId, warehouse_id: allocation.warehouseId },
+          { $inc: { quantity: allocation.quantity } });
+      }
+    }
+    order.refundTotal = order.total;
+    ticket.status = "resolved";
+    ticket.refundTotal = order.total;
+    await Promise.all([order.save(), ticket.save(), Payment.updateOne({ orderId: order._id },
+      { $set: { status: "refunded" } })]);
+    await Notification.updateOne({ userId: order.userId, key: `refund:${order._id}` }, {
+      $setOnInsert: { userId: order.userId, key: `refund:${order._id}`, type: "refund",
+        message: `Refunded ${order.items.map(item => item.name).join(", ")}` },
+    }, { upsert: true });
+    await recordActivity(req.progressionUser, "refunded support case", ticket.reference);
+    changed(String(order.userId));
+    io.to(`user:${order.userId}`).emit("orders:update", await ordersForUser(order.userId));
+    res.json({ ticket, order });
+  });
+
+  router.post("/promotions", auth, staff, async (req: Request, res) => {
+    const code = cleanText(req.body?.code).toUpperCase();
+    const discount = number(req.body?.discount);
+    const limit = number(req.body?.limit);
+    const start = new Date(req.body?.start);
+    const end = new Date(req.body?.end);
+    if (!code || !(discount > 0 && discount <= 100) || !(limit >= 1)
+      || !Number.isFinite(start.getTime()) || !Number.isFinite(end.getTime()) || end <= start) {
+      return res.status(400).json({ error: "Promotion values are invalid" });
+    }
+    const promotion = await Promotion.findOneAndUpdate({ code },
+      { code, discount, limit, start, end }, { upsert: true, new: true });
+    await recordActivity(req.progressionUser, "created promotion", code);
+    changed();
+    res.json({ promotion });
+  });
+
+  router.post("/cart/promotion", auth, async (req: Request, res) => {
+    const code = cleanText(req.body?.code).toUpperCase();
+    const promotion = await Promotion.findOne({ code });
+    const now = new Date();
+    if (!promotion || promotion.start > now || promotion.end < now
+      || promotion.redemptions >= promotion.limit) {
+      return res.status(400).json({ error: "Promotion is expired or unavailable" });
+    }
+    const cart = await Cart.findOneAndUpdate({ userId: req.progressionUser._id },
+      { $set: { promotionCode: code, discount: promotion.discount } }, { new: true });
+    changed(String(req.progressionUser._id));
+    res.json({ promotion, cart });
+  });
+
+  router.put("/preferences", auth, async (req: Request, res) => {
+    const preference = await Preference.findOneAndUpdate({ userId: req.progressionUser._id }, {
+      userId: req.progressionUser._id, order: Boolean(req.body?.order), stock: Boolean(req.body?.stock),
+    }, { upsert: true, new: true });
+    changed(String(req.progressionUser._id));
+    res.json({ preference });
+  });
+
+  router.post("/stock-alerts", auth, async (req: Request, res) => {
+    const itemId = objectId(req.body?.itemId);
+    const item = itemId ? await Item.findById(itemId) : null;
+    if (!item) return res.status(404).json({ error: "Item not found" });
+    const alert = await StockAlert.findOneAndUpdate({ userId: req.progressionUser._id,
+      itemId: item._id }, { $setOnInsert: { userId: req.progressionUser._id, itemId: item._id,
+      sent: false } }, { upsert: true, new: true });
+    res.json({ alert });
+  });
+
+  const scheduleRestock = async (req: Request, res: express.Response) => {
+    const itemId = objectId(req.body?.itemId);
+    const warehouseId = objectId(req.body?.warehouseId);
+    const item = itemId ? await Item.findById(itemId) : null;
+    const warehouse = warehouseId ? await Warehouse.findById(warehouseId) : null;
+    const quantity = number(req.body?.quantity);
+    const delaySeconds = number(req.body?.delaySeconds);
+    if (!item || !warehouse || !(quantity >= 1) || !(delaySeconds >= 1)) {
+      return res.status(400).json({ error: "Scheduled restock values are invalid" });
+    }
+    const restock = await ScheduledRestock.create({ itemId: item._id, warehouseId: warehouse._id,
+      quantity, dueAt: new Date(Date.now() + delaySeconds * 1000) });
+    changed();
+    res.status(201).json({ restock });
+  };
+
+  const cancelScheduledRestock = async (req: Request, res: express.Response) => {
+    const restockId = objectId(req.params.id);
+    const restock = restockId && await ScheduledRestock.findOneAndUpdate(
+      { _id: restockId, status: "pending" },
+      { $set: { status: "cancelled" } }, { new: true });
+    if (!restock) return res.status(404).json({ error: "Pending restock not found" });
+    changed();
+    res.json({ restock });
+  };
+  router.post("/scheduled-restocks", auth, staff, scheduleRestock);
+  router.delete("/scheduled-restocks/:id", auth, staff, cancelScheduledRestock);
+  adminRouter.post("/scheduled-restocks", auth, staff, scheduleRestock);
+  adminRouter.delete("/scheduled-restocks/:id", auth, staff, cancelScheduledRestock);
+
+  router.post("/reorder-rules", auth, staff, async (req: Request, res) => {
+    const itemId = objectId(req.body?.itemId);
+    const item = itemId ? await Item.findById(itemId) : null;
+    const threshold = number(req.body?.threshold);
+    const quantity = number(req.body?.quantity);
+    if (!item || !(threshold >= 0) || !(quantity >= 1)) {
+      return res.status(400).json({ error: "Reorder rule values are invalid" });
+    }
+    const rule = await ReorderRule.findOneAndUpdate({ itemId: item._id },
+      { itemId: item._id, threshold, quantity }, { upsert: true, new: true });
+    await recordActivity(req.progressionUser, "updated reorder rule", item.name);
+    changed();
+    res.json({ rule });
+  });
+
+  router.post("/recommendations/:itemId/dismiss", auth, async (req: Request, res) => {
+    await Dismissal.updateOne({ userId: req.progressionUser._id, itemId: req.params.itemId },
+      { $setOnInsert: { userId: req.progressionUser._id, itemId: req.params.itemId } },
+      { upsert: true });
+    changed(String(req.progressionUser._id));
+    res.json({ dismissed: true });
+  });
+
+  router.post("/cart/restore", auth, async (req: Request, res) => {
+    const currentCart = await Cart.findOne({ userId: req.progressionUser._id });
+    if (currentCart?.items.length) {
+      return res.status(409).json({ error: "Empty the current cart before restoring an expired cart" });
+    }
+    const archive = await CartArchive.findOneAndDelete({ userId: req.progressionUser._id });
+    if (!archive) return res.status(404).json({ error: "No expired cart is available" });
+    const restored: any[] = [];
+    const unavailable: string[] = [];
+    for (const archived of archive.items) {
+      const item = await Item.findById(archived.itemId);
+      const total = await Stock.aggregate([{ $match: { item_id: archived.itemId } },
+        { $group: { _id: null, total: { $sum: "$quantity" } } }]);
+      const quantity = Math.min(Number(archived.quantity), total[0]?.total || 0);
+      const reservedWarehouseIds = item && quantity > 0
+        ? await reserveStock(archived.itemId as Types.ObjectId, quantity) : null;
+      if (!item || !reservedWarehouseIds) unavailable.push(item?.name || "Unavailable item");
+      else restored.push({ itemId: archived.itemId, quantity,
+        reservationExpiresAt: new Date(Date.now() + 90_000), reservedWarehouseIds });
+    }
+    const restoredCart = await Cart.findOneAndUpdate({ userId: req.progressionUser._id,
+      items: { $size: 0 } }, { $set: { items: restored,
+      inactiveExpiresAt: new Date(Date.now() + 300_000) } });
+    if (!restoredCart) {
+      for (const line of restored) await releaseStock(line.itemId,
+        line.reservedWarehouseIds as Types.ObjectId[]);
+      await CartArchive.create({ userId: req.progressionUser._id, items: archive.items });
+      return res.status(409).json({ error: "The cart changed while it was being restored" });
+    }
+    changed(String(req.progressionUser._id));
+    res.json({ restored: restored.length, unavailable });
+  });
+
+  app.use("/api/progression", router);
+  app.use("/api/support", supportRouter);
+  app.use("/api/admin", adminRouter);
+
+  async function processTimers() {
+    const now = new Date();
+
+    const reservationCarts = await Cart.find({ items: { $elemMatch: {
+      reservationExpiresAt: { $lte: now }, "reservedWarehouseIds.0": { $exists: true },
+    } } });
+    for (const cart of reservationCarts) {
+      for (const line of cart.items.filter(value => value.reservationExpiresAt
+        && value.reservationExpiresAt <= now && value.reservedWarehouseIds?.length)) {
+        const result = await Cart.updateOne({ _id: cart._id, items: { $elemMatch: {
+          itemId: line.itemId, reservationExpiresAt: line.reservationExpiresAt,
+          "reservedWarehouseIds.0": { $exists: true },
+        } } }, { $set: { "items.$.reservedWarehouseIds": [] } }, { timestamps: false });
+        if (result.modifiedCount) await releaseStock(line.itemId as Types.ObjectId,
+          [...line.reservedWarehouseIds] as Types.ObjectId[]);
+      }
+    }
+    const due = await ScheduledRestock.find({ status: "pending", dueAt: { $lte: now } });
+    for (const restock of due) {
+      const claimed = await ScheduledRestock.findOneAndUpdate({ _id: restock._id, status: "pending" },
+        { $set: { status: "applied" } }, { new: true });
+      if (!claimed) continue;
+      await Stock.updateOne({ item_id: claimed.itemId, warehouse_id: claimed.warehouseId },
+        { $inc: { quantity: claimed.quantity } });
+      await StockLedger.updateOne({ restockId: claimed._id }, { $setOnInsert: {
+        restockId: claimed._id, itemId: claimed.itemId, warehouseId: claimed.warehouseId,
+        quantity: claimed.quantity,
+      } }, { upsert: true });
+    }
+
+    const shipped = await Order.find({ status: "shipped", updatedAt: { $lte: new Date(Date.now() - 60_000) } });
+    for (const order of shipped) {
+      order.status = "delivered";
+      await order.save();
+      const preference = await Preference.findOne({ userId: order.userId });
+      if (preference?.order !== false) {
+        await Notification.updateOne({ userId: order.userId, key: `delivery:${order._id}` },
+          { $setOnInsert: { userId: order.userId, key: `delivery:${order._id}`, type: "delivery",
+            message: `Delivered ${order.items.map(item => item.name).join(", ")}` } }, { upsert: true });
+      }
+      io.to(`user:${order.userId}`).emit("orders:update", await ordersForUser(order.userId));
+    }
+
+    const expiredCarts = await Cart.find({ items: { $ne: [] }, inactiveExpiresAt: { $lte: now } });
+    for (const cart of expiredCarts) {
+      const claimed = await Cart.findOneAndUpdate({ _id: cart._id, items: { $ne: [] },
+        inactiveExpiresAt: { $lte: now } }, { $set: { items: [], inactiveExpiresAt: null } });
+      if (!claimed) continue;
+      const expired = claimed.items.map(item => ({ itemId: item.itemId, quantity: item.quantity }));
+      if (!expired.length) continue;
+      for (const line of claimed.items) await releaseStock(line.itemId as Types.ObjectId,
+        [...(line.reservedWarehouseIds || [])] as Types.ObjectId[]);
+      await CartArchive.updateOne({ userId: cart.userId },
+        { $set: { userId: cart.userId, items: expired } },
+        { upsert: true });
+    }
+
+    const rules = await ReorderRule.find();
+    for (const rule of rules) {
+      const total = await Stock.aggregate([{ $match: { item_id: rule.itemId } },
+        { $group: { _id: null, total: { $sum: "$quantity" } } }]);
+      if ((total[0]?.total || 0) > rule.threshold) continue;
+      const pending = await ScheduledRestock.exists({ itemId: rule.itemId, status: "pending" });
+      if (!pending) {
+        const warehouse = await Warehouse.findOne().sort({ name: 1 });
+        if (warehouse) await ScheduledRestock.create({ itemId: rule.itemId,
+          warehouseId: warehouse._id, quantity: rule.quantity,
+          dueAt: new Date(Date.now() + 60_000), source: "automatic" });
+      }
+    }
+
+    const alerts = await StockAlert.find({ sent: false });
+    for (const alert of alerts) {
+      const total = await Stock.aggregate([{ $match: { item_id: alert.itemId } },
+        { $group: { _id: null, total: { $sum: "$quantity" } } }]);
+      if ((total[0]?.total || 0) < 1) continue;
+      const preference = await Preference.findOne({ userId: alert.userId });
+      if (preference?.stock !== false) {
+        const item = await Item.findById(alert.itemId);
+        await Notification.updateOne({ userId: alert.userId, key: `stock:${alert.itemId}` },
+          { $setOnInsert: { userId: alert.userId, key: `stock:${alert.itemId}`, type: "stock",
+            message: `${item?.name || "Item"} is back in stock` } }, { upsert: true });
+      }
+      alert.sent = true;
+      await alert.save();
+    }
+    if (due.length || shipped.length || expiredCarts.length || reservationCarts.length) changed();
+  }
+
+  const timer = setInterval(() => processTimers().catch(error =>
+    console.error("progression timer failed", error)), 1000);
+  timer.unref();
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/stock-reservations.test.ts b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/stock-reservations.test.ts
new file mode 100644
index 00000000000..28b632bcb5d
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/stock-reservations.test.ts
@@ -0,0 +1,31 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { reserveWithModel } from "./stock-reservations.js";
+
+test("only one simultaneous cart can reserve the final unit", async () => {
+  const itemId = "item-1" as any;
+  const warehouseId = "warehouse-1" as any;
+  let quantity = 1;
+  const model = {
+    async findOneAndUpdate() {
+      await Promise.resolve();
+      if (quantity < 1) return null;
+      quantity -= 1;
+      return { warehouse_id: warehouseId };
+    },
+    async updateOne() {
+      quantity += 1;
+      return { modifiedCount: 1 };
+    },
+  } as any;
+
+  const results = await Promise.all([
+    reserveWithModel(model, itemId, 1),
+    reserveWithModel(model, itemId, 1),
+  ]);
+
+  assert.equal(results.filter(Boolean).length, 1);
+  assert.equal(results.filter(result => result === null).length, 1);
+  assert.equal(quantity, 0);
+});
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/stock-reservations.ts b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/stock-reservations.ts
new file mode 100644
index 00000000000..9c6f17bd021
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/src/stock-reservations.ts
@@ -0,0 +1,38 @@
+import type { Types } from "mongoose";
+
+import { Stock } from "./models.js";
+
+type StockModel = Pick<typeof Stock, "findOneAndUpdate" | "updateOne">;
+
+export async function reserveWithModel(model: StockModel, itemId: Types.ObjectId, quantity: number) {
+  const warehouseIds: Types.ObjectId[] = [];
+  for (let index = 0; index < quantity; index += 1) {
+    const stock = await model.findOneAndUpdate(
+      { item_id: itemId, quantity: { $gte: 1 } },
+      { $inc: { quantity: -1 } },
+      { sort: { quantity: -1 } },
+    );
+    if (!stock) {
+      await releaseWithModel(model, itemId, warehouseIds);
+      return null;
+    }
+    warehouseIds.push(stock.warehouse_id as Types.ObjectId);
+  }
+  return warehouseIds;
+}
+
+export async function releaseWithModel(model: StockModel, itemId: Types.ObjectId,
+  warehouseIds: Types.ObjectId[]) {
+  for (const warehouseId of warehouseIds) {
+    await model.updateOne({ item_id: itemId, warehouse_id: warehouseId },
+      { $inc: { quantity: 1 } });
+  }
+}
+
+export function reserveStock(itemId: Types.ObjectId, quantity: number) {
+  return reserveWithModel(Stock, itemId, quantity);
+}
+
+export function releaseStock(itemId: Types.ObjectId, warehouseIds: Types.ObjectId[]) {
+  return releaseWithModel(Stock, itemId, warehouseIds);
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/server/tsconfig.json b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/tsconfig.json
new file mode 100644
index 00000000000..e0630534d41
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/server/tsconfig.json
@@ -0,0 +1,14 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "lib": ["ES2022"],
+    "strict": false,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true,
+    "types": ["node"]
+  },
+  "include": ["src"]
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/mongodb/start.sh b/tools/stack-bench/reference-apps/ecommerce/mongodb/start.sh
new file mode 100644
index 00000000000..4619dcf9eff
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/mongodb/start.sh
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+set -e
+[ -d server/node_modules ] || npm --prefix server ci --no-audit --no-fund
+[ -d client/node_modules ] || npm --prefix client ci --no-audit --no-fund
+npm --prefix client run build
+exec npm run start
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/client/index.html b/tools/stack-bench/reference-apps/ecommerce/postgres/client/index.html
new file mode 100644
index 00000000000..8b77d8835cc
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/client/index.html
@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Storefront</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/client/package-lock.json b/tools/stack-bench/reference-apps/ecommerce/postgres/client/package-lock.json
new file mode 100644
index 00000000000..1c05ce6c7c3
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/client/package-lock.json
@@ -0,0 +1,1046 @@
+{
+  "name": "client",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "client",
+      "version": "1.0.0",
+      "dependencies": {
+        "react": "^18.3.1",
+        "react-dom": "^18.3.1",
+        "socket.io-client": "^4.7.5"
+      },
+      "devDependencies": {
+        "@types/react": "^18.3.3",
+        "@types/react-dom": "^18.3.0",
+        "@vitejs/plugin-react": "^6.1.0",
+        "typescript": "^5.5.3",
+        "vite": "^8.2.2"
+      }
+    },
+    "node_modules/@oxc-project/types": {
+      "version": "0.146.0",
+      "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.146.0.tgz",
+      "integrity": "sha512-XC0QsnnhVe7sLIWmYmdPw7x5P0h4W8vUU3Nv1ySgWXtvCz8NizoAEpGXA0sOYoJQV2Rl13LgURAHQ5cI5ILCSA==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/Boshen"
+      }
+    },
+    "node_modules/@rolldown/binding-android-arm-eabi": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.5.tgz",
+      "integrity": "sha512-DLe/i+l8ynIBY7XEQ191TeZvCoowIGa18R+dIV30GW7DiOtp74i/xX8hs8GUjW5ARV7VZuie3d6AumSmCwbeRA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-android-arm64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.5.tgz",
+      "integrity": "sha512-zXcwKlQApYAOELHd8PwKDFkagYF9Wy4e0RJ+0qnzl9Pjnpj75TEG8ufv40p2J7kCEfwZAsNiuzRIyNNMWT38ig==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-darwin-arm64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.5.tgz",
+      "integrity": "sha512-dK4QakI42nzWgJT5sm4y4y/O//D4OxM75/cH28RLV+nzIN9AY+YsbuUVrUTjlLjXR6vpyxFbSsbmNuJ6BP9sww==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-darwin-x64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.5.tgz",
+      "integrity": "sha512-fqSALaUu1Wjd1nK2uW2kJDWdLCc8lx1IcY+MTY26Aurfdx19anlzhqXOgCFbBFQnlFDTn4TC1/7Nz4Bl2mLP3A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-freebsd-x64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.5.tgz",
+      "integrity": "sha512-/vCnNxlkxs9tKxNDcyWUePpJ/PgTzxIaVhoM5SmG8UV+GR/IcPam4VYxi7GIMo7PSDuNqlJqvprqii9NqqVCMw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm-gnueabihf": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.5.tgz",
+      "integrity": "sha512-abk0NLA519LxRCszmbE0jYKuQ9YPocOXTiOXOo6Yr+YAT95VH+PtqYAjOJvGKt3viEd/x4qzabAlwd5bHOOARg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm64-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.5.tgz",
+      "integrity": "sha512-Y7eALiJ8lr0M2HH103Js+g7V34wf6snlpZLAsHI90uLhr3PVlNsbFVAXJC9d/V6BnPyKtpSwI+NcB/RLxsQxuA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm64-musl": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.5.tgz",
+      "integrity": "sha512-xMvZgnbZg4YVnR/AX2b3oOPDTFYJvUVaJg5FedA/LuvexAtXibZQej4cnTkw3rjsJ/ggUROB64TdtETiim+FYA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-ppc64-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.5.tgz",
+      "integrity": "sha512-GRjeqTUDHTo5GwntsLaAMcBahG3nlpjftXWZLN73HiYQlhwEowvarFgQnRnQZtIp4keXX7quXFbG38uPZBa2EA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-s390x-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.5.tgz",
+      "integrity": "sha512-vLNTR45F2Uwc8AufkNXPmB4VliaXs+FvcheEogIzOXzO4l+LzieXF5A/TWxLy5HtqpsRCHUfd0lPVrrdgXdLHQ==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-x64-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.5.tgz",
+      "integrity": "sha512-Mgj59/HTuYeK9Gz2MA+mBWKnHsAgkBSec15ZMb1st3oIfFbX7gCjOae7GydHhzcyQi9Z/7M1QuN9bR3oFqF0jQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-x64-musl": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.5.tgz",
+      "integrity": "sha512-mY8AP0/ichsbhAxGnLa3d3+MwV0EfgrPND2bplI3Ym8T6R2pJ0N87bvrKVwNXmdy3jnr6eQBecdqx/HMknBmpA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-openharmony-arm64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.5.tgz",
+      "integrity": "sha512-8SLssA2oweAxyRgDp789ACfRb/3P+zNRJpzZxSizxF9m8NUDQ4+3xjo8ttjhVGGw6Qxb70oZiEtIjaKikCO7Yw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-win32-arm64-msvc": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.5.tgz",
+      "integrity": "sha512-vGbruD5zquhoc8D9SViXgN2FBJtNdTyQ4DtG+SWiEGlJiAzoKcZ2xp+xuXCffhubVdt0NJlTZqkeRuERy7g8Cw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-win32-x64-msvc": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.5.tgz",
+      "integrity": "sha512-e/SXpgISz+IoqVcSSI0rx/d/he8zqLex+/rCWpnHpmVfmPIUjag9H6P7zotf0gJHwPUhQxZ/mF8tr6acebT9yw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/pluginutils": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz",
+      "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@socket.io/component-emitter": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/@socket.io/component-emitter/-/component-emitter-3.1.2.tgz",
+      "integrity": "sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA==",
+      "license": "MIT"
+    },
+    "node_modules/@types/prop-types": {
+      "version": "15.7.15",
+      "resolved": "https://registry.npmjs.org/@types/prop-types/-/prop-types-15.7.15.tgz",
+      "integrity": "sha512-F6bEyamV9jKGAFBEmlQnesRPGOQqS2+Uwi0Em15xenOxHaf2hv6L8YCVn3rPdPJOiJfPiCnLIRyvwVaqMY3MIw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/react": {
+      "version": "18.3.31",
+      "resolved": "https://registry.npmjs.org/@types/react/-/react-18.3.31.tgz",
+      "integrity": "sha512-vfEqpXTvwT91yhmwdfouStN2hSKwTvyRs8qpLfADyrq/kxDw0hZM7Wk9Ug1FELj8hIby+S/+kQCSRFF32nv2Qw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/prop-types": "*",
+        "csstype": "^3.2.2"
+      }
+    },
+    "node_modules/@types/react-dom": {
+      "version": "18.3.7",
+      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-18.3.7.tgz",
+      "integrity": "sha512-MEe3UeoENYVFXzoXEWsvcpg6ZvlrFNlOQ7EOsvhI3CfAXwzPfO8Qwuxd40nepsYKqyyVQnTdEfv68q91yLcKrQ==",
+      "dev": true,
+      "license": "MIT",
+      "peerDependencies": {
+        "@types/react": "^18.0.0"
+      }
+    },
+    "node_modules/@vitejs/plugin-react": {
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-6.1.0.tgz",
+      "integrity": "sha512-qd2BzUBehkov86WFhg0JkEFEYyCLG9uPCe6qWTY/kRlss9OvJrOF2UbIWT7p+8IzZHkEu0DNGHc4HSv+JdDLsw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@rolldown/pluginutils": "^1.0.1"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "peerDependencies": {
+        "@rolldown/plugin-babel": "^0.1.7 || ^0.2.0",
+        "babel-plugin-react-compiler": "^1.0.0",
+        "oxc-transform-react": "^0.145.0",
+        "vite": "^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@rolldown/plugin-babel": {
+          "optional": true
+        },
+        "babel-plugin-react-compiler": {
+          "optional": true
+        },
+        "oxc-transform-react": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/csstype": {
+      "version": "3.2.3",
+      "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
+      "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/detect-libc": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/engine.io-client": {
+      "version": "6.6.6",
+      "resolved": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-6.6.6.tgz",
+      "integrity": "sha512-iY6QdftLQ9pyiPoX082bpf/u1UewnOaJrtJIF9T0++QB34lZrj0uP+Q/bj8AlUsAxqhnkTV2BS8SBZSxOmoV5Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@socket.io/component-emitter": "~3.1.0",
+        "debug": "~4.4.1",
+        "engine.io-parser": "~5.2.1",
+        "ws": "~8.21.0",
+        "xmlhttprequest-ssl": "~2.1.1"
+      }
+    },
+    "node_modules/engine.io-parser": {
+      "version": "5.2.3",
+      "resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.3.tgz",
+      "integrity": "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/js-tokens": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
+      "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==",
+      "license": "MIT"
+    },
+    "node_modules/lightningcss": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz",
+      "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==",
+      "dev": true,
+      "license": "MPL-2.0",
+      "dependencies": {
+        "detect-libc": "^2.0.3"
+      },
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      },
+      "optionalDependencies": {
+        "lightningcss-android-arm64": "1.33.0",
+        "lightningcss-darwin-arm64": "1.33.0",
+        "lightningcss-darwin-x64": "1.33.0",
+        "lightningcss-freebsd-x64": "1.33.0",
+        "lightningcss-linux-arm-gnueabihf": "1.33.0",
+        "lightningcss-linux-arm64-gnu": "1.33.0",
+        "lightningcss-linux-arm64-musl": "1.33.0",
+        "lightningcss-linux-x64-gnu": "1.33.0",
+        "lightningcss-linux-x64-musl": "1.33.0",
+        "lightningcss-win32-arm64-msvc": "1.33.0",
+        "lightningcss-win32-x64-msvc": "1.33.0"
+      }
+    },
+    "node_modules/lightningcss-android-arm64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz",
+      "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-arm64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz",
+      "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-x64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz",
+      "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-freebsd-x64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz",
+      "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm-gnueabihf": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz",
+      "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-gnu": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz",
+      "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-musl": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz",
+      "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-gnu": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz",
+      "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-musl": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz",
+      "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-arm64-msvc": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz",
+      "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-x64-msvc": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz",
+      "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/loose-envify": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
+      "integrity": "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",
+      "license": "MIT",
+      "dependencies": {
+        "js-tokens": "^3.0.0 || ^4.0.0"
+      },
+      "bin": {
+        "loose-envify": "cli.js"
+      }
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
+    "node_modules/picocolors": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
+      "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/picomatch": {
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz",
+      "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/postcss": {
+      "version": "8.5.26",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz",
+      "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "nanoid": "^3.3.17",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/react": {
+      "version": "18.3.1",
+      "resolved": "https://registry.npmjs.org/react/-/react-18.3.1.tgz",
+      "integrity": "sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ==",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/react-dom": {
+      "version": "18.3.1",
+      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-18.3.1.tgz",
+      "integrity": "sha512-5m4nQKp+rZRb09LNH59GM4BxTh9251/ylbKIbpe7TpGxfJ+9kv6BLkLBXIjjspbgbnIBNqlI23tRnTWT0snUIw==",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0",
+        "scheduler": "^0.23.2"
+      },
+      "peerDependencies": {
+        "react": "^18.3.1"
+      }
+    },
+    "node_modules/rolldown": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.5.tgz",
+      "integrity": "sha512-VD2IE5PUG4Oj8zz2VGykiYd5wbnjdIiSsNQb8Qu5B+noEp+A78mu2iVvpp27g8es14Tk9rofNs5Tku9iQCS4fA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@oxc-project/types": "=0.146.0",
+        "@rolldown/pluginutils": "^1.0.0"
+      },
+      "bin": {
+        "rolldown": "bin/cli.mjs"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "optionalDependencies": {
+        "@rolldown/binding-android-arm-eabi": "1.2.5",
+        "@rolldown/binding-android-arm64": "1.2.5",
+        "@rolldown/binding-darwin-arm64": "1.2.5",
+        "@rolldown/binding-darwin-x64": "1.2.5",
+        "@rolldown/binding-freebsd-x64": "1.2.5",
+        "@rolldown/binding-linux-arm-gnueabihf": "1.2.5",
+        "@rolldown/binding-linux-arm64-gnu": "1.2.5",
+        "@rolldown/binding-linux-arm64-musl": "1.2.5",
+        "@rolldown/binding-linux-ppc64-gnu": "1.2.5",
+        "@rolldown/binding-linux-s390x-gnu": "1.2.5",
+        "@rolldown/binding-linux-x64-gnu": "1.2.5",
+        "@rolldown/binding-linux-x64-musl": "1.2.5",
+        "@rolldown/binding-openharmony-arm64": "1.2.5",
+        "@rolldown/binding-win32-arm64-msvc": "1.2.5",
+        "@rolldown/binding-win32-x64-msvc": "1.2.5"
+      }
+    },
+    "node_modules/scheduler": {
+      "version": "0.23.2",
+      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.2.tgz",
+      "integrity": "sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ==",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0"
+      }
+    },
+    "node_modules/socket.io-client": {
+      "version": "4.8.3",
+      "resolved": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-4.8.3.tgz",
+      "integrity": "sha512-uP0bpjWrjQmUt5DTHq9RuoCBdFJF10cdX9X+a368j/Ft0wmaVgxlrjvK3kjvgCODOMMOz9lcaRzxmso0bTWZ/g==",
+      "license": "MIT",
+      "dependencies": {
+        "@socket.io/component-emitter": "~3.1.0",
+        "debug": "~4.4.1",
+        "engine.io-client": "~6.6.1",
+        "socket.io-parser": "~4.2.4"
+      },
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/socket.io-parser": {
+      "version": "4.2.7",
+      "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.7.tgz",
+      "integrity": "sha512-IH/iSeO9T6gz1KkFleGDWkG9N3dl4jXVYUtMhIqH10Md0ttMer8nUNWiP1DKuNrybD2xBrixLJdCC9J6ECoYkg==",
+      "license": "MIT",
+      "dependencies": {
+        "@socket.io/component-emitter": "~3.1.0",
+        "debug": "~4.4.1"
+      },
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/source-map-js": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
+      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.4"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/vite": {
+      "version": "8.2.2",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-8.2.2.tgz",
+      "integrity": "sha512-cFKLV/PRgAUlIRm5WjMjJ86jrftzpqcgH+Us+DS8mI3CDNiH30Whrz8uHL3+MOLPAgqbMBAqWdAHAphOAM+z/Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "lightningcss": "^1.33.0",
+        "picomatch": "^4.0.5",
+        "postcss": "^8.5.26",
+        "rolldown": "~1.2.4",
+        "tinyglobby": "^0.2.17"
+      },
+      "bin": {
+        "vite": "bin/vite.js"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "funding": {
+        "url": "https://github.com/vitejs/vite?sponsor=1"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      },
+      "peerDependencies": {
+        "@types/node": "^20.19.0 || >=22.12.0",
+        "@vitejs/devtools": "^0.4.0 || ^0.5.0",
+        "esbuild": "^0.27.0 || ^0.28.0",
+        "jiti": ">=1.21.0",
+        "less": "^4.0.0",
+        "sass": "^1.70.0",
+        "sass-embedded": "^1.70.0",
+        "stylus": ">=0.54.8",
+        "sugarss": "^5.0.0",
+        "terser": "^5.16.0",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        },
+        "@vitejs/devtools": {
+          "optional": true
+        },
+        "esbuild": {
+          "optional": true
+        },
+        "jiti": {
+          "optional": true
+        },
+        "less": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "sass-embedded": {
+          "optional": true
+        },
+        "stylus": {
+          "optional": true
+        },
+        "sugarss": {
+          "optional": true
+        },
+        "terser": {
+          "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/ws": {
+      "version": "8.21.3",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.3.tgz",
+      "integrity": "sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      },
+      "peerDependencies": {
+        "bufferutil": "^4.0.1",
+        "utf-8-validate": ">=5.0.2"
+      },
+      "peerDependenciesMeta": {
+        "bufferutil": {
+          "optional": true
+        },
+        "utf-8-validate": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/xmlhttprequest-ssl": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/xmlhttprequest-ssl/-/xmlhttprequest-ssl-2.1.2.tgz",
+      "integrity": "sha512-TEU+nJVUUnA4CYJFLvK5X9AOeH4KvDvhIfm0vV1GaQRtchnG0hgK5p8hw/xjv8cunWYCsiPCSDzObPyhEwq3KQ==",
+      "engines": {
+        "node": ">=0.4.0"
+      }
+    }
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/client/package.json b/tools/stack-bench/reference-apps/ecommerce/postgres/client/package.json
new file mode 100644
index 00000000000..176d3eeaf7e
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/client/package.json
@@ -0,0 +1,22 @@
+{
+  "name": "client",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "vite build"
+  },
+  "dependencies": {
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "socket.io-client": "^4.7.5"
+  },
+  "devDependencies": {
+    "@types/react": "^18.3.3",
+    "@types/react-dom": "^18.3.0",
+    "@vitejs/plugin-react": "^6.1.0",
+    "typescript": "^5.5.3",
+    "vite": "^8.2.2"
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/App.tsx b/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/App.tsx
new file mode 100644
index 00000000000..aaed4bf77e0
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/App.tsx
@@ -0,0 +1,1400 @@
+import { type ReactNode, useEffect, useMemo, useRef, useState } from "react";
+import { io, Socket } from "socket.io-client";
+import { ProgressionPanel } from "./ProgressionPanel";
+
+type Item = { id: number; name: string; price: number; stock: number; purchaseCount: number; category: string; variants?: string[] };
+type Account = { id: number; username: string; isAdmin: boolean; isStaff: boolean } | null;
+type CartLine = { itemId: number; name: string; price: number; quantity: number; lineTotal: number; expired?: boolean; reservationSeconds?: number };
+type CartState = { items: CartLine[]; total: number; expiredAt?: string | null };
+type OrderLine = { orderItemId: number; itemId: number; name: string; quantity: number; price: number; returned: boolean };
+type Order = { id: number; createdAt: string; total: number; status: "pending" | "shipped" | "delivered" | "cancelled"; discount?: number; paymentStatus?: string; paymentAmount?: number; refundTotal?: number; items: OrderLine[] };
+type Review = { id: number; accountId: number; username: string; rating: number; comment: string; createdAt: string };
+type AdminItem = { id: number; name: string; price: number; stock: number; category: string };
+type AdminLocation = { itemId: number; itemName: string; warehouseId: number; warehouseName: string; quantity: number };
+type AdminWarehouse = { id: number; name: string; total: number };
+type LowStockItem = { id: number; name: string; stock: number };
+type CategoryTotal = { category: string; units: number; revenue: number };
+type AdminState = {
+  items: AdminItem[];
+  warehouses: AdminWarehouse[];
+  locations: AdminLocation[];
+  revenue: number;
+  lowStock: LowStockItem[];
+  categoryTotals: CategoryTotal[];
+  queueDepth: number;
+};
+type QueueItem = { id: number; createdAt: string; items: { name: string; quantity: number; warehouse: string }[] };
+type QueueState = { queue: QueueItem[]; depth: number };
+
+let toastId = 0;
+const CATALOG_PAGE_SIZE = 10;
+type Toast = { id: number; kind: "buy-error" | "auth-error" | "review-error" | "order-error"; message: string };
+
+async function api<T = any>(path: string, opts: RequestInit = {}): Promise<T> {
+  const res = await fetch(path, {
+    credentials: "include",
+    headers: { "Content-Type": "application/json" },
+    ...opts,
+  });
+  let body: any = null;
+  try {
+    body = await res.json();
+  } catch {
+    body = null;
+  }
+  if (!res.ok) {
+    const message = body?.error || `request failed (${res.status})`;
+    throw new Error(message);
+  }
+  return body as T;
+}
+
+function money(n: number): string {
+  return `$${n.toFixed(2)}`;
+}
+
+export default function App() {
+  const [connected, setConnected] = useState(false);
+  const [initialLoaded, setInitialLoaded] = useState(false);
+  const [account, setAccount] = useState<Account>(null);
+  const [items, setItems] = useState<Item[]>([]);
+  const [cart, setCart] = useState<CartState>({ items: [], total: 0 });
+  const [orders, setOrders] = useState<Order[]>([]);
+  const [admin, setAdmin] = useState<AdminState | null>(null);
+  const [queue, setQueue] = useState<QueueState>({ queue: [], depth: 0 });
+  const [recommended, setRecommended] = useState<Item[]>([]);
+  const [search, setSearch] = useState("");
+  const [categoryFilter, setCategoryFilter] = useState("");
+  const [minimumPrice, setMinimumPrice] = useState("");
+  const [maximumPrice, setMaximumPrice] = useState("");
+  const [inStockOnly, setInStockOnly] = useState(false);
+  const [searchPage, setSearchPage] = useState(0);
+  const [openItemId, setOpenItemId] = useState<number | null>(null);
+  const [itemDetail, setItemDetail] = useState<{ reviews: Review[]; average: number | null } | null>(null);
+  const [cartOpen, setCartOpen] = useState(false);
+  const [ordersOpen, setOrdersOpen] = useState(false);
+  const [adminOpen, setAdminOpen] = useState(() => sessionStorage.getItem("admin-open") === "1");
+  const [fulfilmentOpen, setFulfilmentOpen] = useState(() => sessionStorage.getItem("fulfilment-open") === "1");
+  const [showSignin, setShowSignin] = useState(false);
+  const [toasts, setToasts] = useState<Toast[]>([]);
+  const [progression, setProgression] = useState<any>({});
+
+  const socketRef = useRef<Socket | null>(null);
+  const cartObservationRef = useRef(0);
+
+  function applyCartResponse(state: CartState, observedAtRequest: number) {
+    // A socket update may carry state committed after this request began. Do
+    // not let a slower HTTP response roll the live cart back to an older view.
+    if (cartObservationRef.current === observedAtRequest) setCart(state);
+  }
+
+  function pushToast(kind: Toast["kind"], message: string) {
+    const id = ++toastId;
+    setToasts((t) => [...t, { id, kind, message }]);
+    setTimeout(() => setToasts((t) => t.filter((x) => x.id !== id)), 4000);
+  }
+
+  async function reloadProgression() {
+    setProgression(await api("/api/progression"));
+  }
+
+  useEffect(() => {
+    let cancelled = false;
+    (async () => {
+      try {
+        const [me, catalog, rec] = await Promise.all([
+          api<{ account: Account }>("/api/me"),
+          api<{ items: Item[] }>("/api/items"),
+          api<{ items: Item[] }>("/api/recommended"),
+        ]);
+        if (cancelled) return;
+        setAccount(me.account);
+        setItems(catalog.items);
+        setRecommended(rec.items);
+      } catch (err) {
+        console.error(err);
+      } finally {
+        if (!cancelled) setInitialLoaded(true);
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+
+  useEffect(() => {
+    const socket = io({ path: "/socket.io" });
+    socketRef.current = socket;
+    socket.on("connect", () => setConnected(true));
+    socket.on("disconnect", () => setConnected(false));
+    socket.on("items:update", (payload: { items: Item[] }) => setItems(payload.items));
+    socket.on("cart:update", (payload: CartState) => {
+      cartObservationRef.current += 1;
+      setCart(payload);
+    });
+    socket.on("orders:update", (payload: { orders: Order[] }) => setOrders(payload.orders));
+    socket.on("admin:update", (payload: AdminState) => setAdmin(payload));
+    socket.on("queue:update", (payload: QueueState) => setQueue(payload));
+    socket.on("recommended:update", (payload: { items: Item[] }) => setRecommended(payload.items));
+    socket.on("progression:update", setProgression);
+    socket.on("review:update", (payload: { itemId: number; reviews: Review[]; average: number | null }) => {
+      setOpenItemId((current) => {
+        if (current === payload.itemId) {
+          setItemDetail({ reviews: payload.reviews, average: payload.average });
+        }
+        return current;
+      });
+    });
+    return () => {
+      socket.disconnect();
+    };
+  }, []);
+
+  useEffect(() => {
+    sessionStorage.setItem("admin-open", adminOpen ? "1" : "0");
+  }, [adminOpen]);
+
+  useEffect(() => {
+    sessionStorage.setItem("fulfilment-open", fulfilmentOpen ? "1" : "0");
+  }, [fulfilmentOpen]);
+
+  useEffect(() => {
+    const observedAtRequest = ++cartObservationRef.current;
+    api("/api/progression").then(setProgression).catch(() => {});
+    if (!account) {
+      setCart({ items: [], total: 0 });
+      setOrders([]);
+      setAdmin(null);
+      setQueue({ queue: [], depth: 0 });
+      return;
+    }
+    api<CartState>("/api/cart").then(state => applyCartResponse(state, observedAtRequest)).catch(() => {});
+    api<{ orders: Order[] }>("/api/orders").then((r) => setOrders(r.orders)).catch(() => {});
+    if (account.isAdmin) {
+      api<AdminState>("/api/admin/state").then(setAdmin).catch(() => {});
+    }
+    if (account.isAdmin || account.isStaff) {
+      api<QueueState>("/api/fulfilment/queue").then(setQueue).catch(() => {});
+    }
+    api<{ items: Item[] }>("/api/recommended").then((r) => setRecommended(r.items)).catch(() => {});
+  }, [account]);
+
+  useEffect(() => {
+    if (openItemId == null) {
+      setItemDetail(null);
+      return;
+    }
+    api<{ item: Item; reviews: Review[]; average: number | null }>(`/api/items/${openItemId}`)
+      .then((r) => setItemDetail({ reviews: r.reviews, average: r.average }))
+      .catch(() => {});
+  }, [openItemId]);
+
+  useEffect(() => {
+    function onKey(e: KeyboardEvent) {
+      if (e.key === "Escape") {
+        setCartOpen(false);
+        setOrdersOpen(false);
+        setAdminOpen(false);
+        setFulfilmentOpen(false);
+        setOpenItemId(null);
+      }
+    }
+    window.addEventListener("keydown", onKey);
+    return () => window.removeEventListener("keydown", onKey);
+  }, []);
+
+  const visibleItems = useMemo(() => {
+    const q = search.trim().toLowerCase();
+    return items.filter((item) => (!q || item.name.toLowerCase().includes(q))
+      && (!categoryFilter || item.category === categoryFilter)
+      && (!minimumPrice || item.price >= Number(minimumPrice))
+      && (!maximumPrice || item.price <= Number(maximumPrice))
+      && (!inStockOnly || item.stock > 0))
+      .sort((a, b) => b.purchaseCount - a.purchaseCount || a.name.localeCompare(b.name))
+      .slice(searchPage * CATALOG_PAGE_SIZE,
+        searchPage * CATALOG_PAGE_SIZE + CATALOG_PAGE_SIZE);
+  }, [items, search, categoryFilter, minimumPrice, maximumPrice, inStockOnly, searchPage]);
+  const filteredItemCount = items.filter((item) => (!search.trim() || item.name.toLowerCase().includes(search.trim().toLowerCase()))
+    && (!categoryFilter || item.category === categoryFilter)
+    && (!minimumPrice || item.price >= Number(minimumPrice))
+    && (!maximumPrice || item.price <= Number(maximumPrice))
+    && (!inStockOnly || item.stock > 0)).length;
+
+  function handleSearchChange(value: string) {
+    setSearch(value);
+    setSearchPage(0);
+    setCartOpen(false);
+    setOrdersOpen(false);
+    setAdminOpen(false);
+    setFulfilmentOpen(false);
+  }
+
+  function resyncSocket() {
+    // Cookies changed (signed in/out) — reconnect so the server re-reads
+    // the session cookie and joins this socket to the right rooms.
+    const socket = socketRef.current;
+    if (socket) {
+      socket.disconnect();
+      socket.connect();
+    }
+  }
+
+  async function handleSignup(username: string, password: string) {
+    try {
+      const r = await api<{ account: Account }>("/api/auth/signup", {
+        method: "POST",
+        body: JSON.stringify({ username, password }),
+      });
+      setAccount(r.account);
+      resyncSocket();
+    } catch (err: any) {
+      pushToast("auth-error", err.message);
+    }
+  }
+
+  async function handleSignin(username: string, password: string) {
+    try {
+      const r = await api<{ account: Account }>("/api/auth/signin", {
+        method: "POST",
+        body: JSON.stringify({ username, password }),
+      });
+      setAccount(r.account);
+      resyncSocket();
+    } catch (err: any) {
+      pushToast("auth-error", err.message);
+    }
+  }
+
+  async function handleSignout() {
+    try {
+      await api("/api/auth/signout", { method: "POST" });
+    } catch {
+      // ignore
+    }
+    setAccount(null);
+    setAdminOpen(false);
+    setFulfilmentOpen(false);
+    resyncSocket();
+  }
+
+  async function buyNow(itemId: number) {
+    try {
+      await api(`/api/items/${itemId}/buy`, { method: "POST" });
+    } catch (err: any) {
+      pushToast("buy-error", err.message);
+    }
+  }
+
+  async function requestStockAlert(itemId: number) {
+    try { await api(`/api/items/${itemId}/stock-alert`, { method: "POST" }); }
+    catch (err: any) { pushToast("order-error", err.message); }
+  }
+
+  async function addToCart(itemId: number) {
+    try {
+      const observedAtRequest = cartObservationRef.current;
+      const state = await api<CartState>("/api/cart", {
+        method: "POST",
+        body: JSON.stringify({ itemId, quantity: 1 }),
+      });
+      applyCartResponse(state, observedAtRequest);
+    } catch (err: any) {
+      pushToast("buy-error", err.message);
+    }
+  }
+
+  async function changeCartQuantity(itemId: number, quantity: number) {
+    try {
+      const observedAtRequest = cartObservationRef.current;
+      const state = await api<CartState>(`/api/cart/${itemId}`, {
+        method: "PATCH",
+        body: JSON.stringify({ quantity }),
+      });
+      applyCartResponse(state, observedAtRequest);
+    } catch (err: any) {
+      pushToast("buy-error", err.message);
+    }
+  }
+
+  async function removeCartLine(itemId: number) {
+    try {
+      const observedAtRequest = cartObservationRef.current;
+      const state = await api<CartState>(`/api/cart/${itemId}`, { method: "DELETE" });
+      applyCartResponse(state, observedAtRequest);
+    } catch (err: any) {
+      pushToast("buy-error", err.message);
+    }
+  }
+
+  async function checkout() {
+    try {
+      await api("/api/checkout", { method: "POST" });
+    } catch (err: any) {
+      pushToast("buy-error", err.message);
+    }
+  }
+
+  async function submitReview(itemId: number, rating: number, comment: string) {
+    try {
+      const r = await api<{ reviews: Review[]; average: number | null }>(`/api/items/${itemId}/reviews`, {
+        method: "POST",
+        body: JSON.stringify({ rating, comment }),
+      });
+      setItemDetail(r);
+    } catch (err: any) {
+      pushToast("review-error", err.message);
+    }
+  }
+
+  async function restock(itemId: number, warehouseId: number, quantity: number) {
+    try {
+      const state = await api<AdminState>("/api/admin/restock", {
+        method: "POST",
+        body: JSON.stringify({ itemId, warehouseId, quantity }),
+      });
+      setAdmin(state);
+    } catch (err: any) {
+      pushToast("buy-error", err.message);
+    }
+  }
+
+  async function transfer(itemId: number, fromWarehouseId: number, toWarehouseId: number, quantity: number) {
+    try {
+      const state = await api<AdminState>("/api/admin/transfer", {
+        method: "POST",
+        body: JSON.stringify({ itemId, fromWarehouseId, toWarehouseId, quantity }),
+      });
+      setAdmin(state);
+    } catch (err: any) {
+      pushToast("order-error", err.message);
+    }
+  }
+
+  async function changePrice(itemId: number, price: number) {
+    try {
+      const state = await api<AdminState>("/api/admin/price", {
+        method: "POST",
+        body: JSON.stringify({ itemId, price }),
+      });
+      setAdmin(state);
+    } catch (err: any) {
+      pushToast("buy-error", err.message);
+    }
+  }
+
+  async function cancelOrder(orderId: number) {
+    try {
+      await api(`/api/orders/${orderId}/cancel`, { method: "POST" });
+    } catch (err: any) {
+      pushToast("order-error", err.message);
+    }
+  }
+
+  async function returnItem(orderId: number, orderItemId: number) {
+    try {
+      await api(`/api/orders/${orderId}/return`, {
+        method: "POST",
+        body: JSON.stringify({ orderItemId }),
+      });
+    } catch (err: any) {
+      pushToast("order-error", err.message);
+    }
+  }
+
+  async function shipOrder(orderId: number) {
+    try {
+      const state = await api<QueueState>("/api/fulfilment/ship", {
+        method: "POST",
+        body: JSON.stringify({ orderId }),
+      });
+      setQueue(state);
+    } catch (err: any) {
+      pushToast("order-error", err.message);
+    }
+  }
+
+  if (!initialLoaded) {
+    return (
+      <div className="loading-screen">
+        <div className="spinner" />
+        <span>Connecting to Storefront...</span>
+      </div>
+    );
+  }
+
+  const detailItem = openItemId != null ? items.find((i) => i.id === openItemId) ?? null : null;
+  const cartItemIds = new Set(cart.items.map((l) => l.itemId));
+
+  return (
+    <div className="app">
+      <ToastArea toasts={toasts} />
+      <Header
+        account={account}
+        search={search}
+        setSearch={handleSearchChange}
+        cartCount={cart.items.reduce((s, l) => s + l.quantity, 0)}
+        onCartToggle={() => {
+          setOrdersOpen(false);
+          setAdminOpen(false);
+          setFulfilmentOpen(false);
+          setCartOpen(true);
+        }}
+        onCatalog={() => {
+          setCartOpen(false);
+          setOrdersOpen(false);
+          setAdminOpen(false);
+          setFulfilmentOpen(false);
+        }}
+        onOrdersToggle={() => {
+          setCartOpen(false);
+          setAdminOpen(false);
+          setFulfilmentOpen(false);
+          setOrdersOpen(true);
+        }}
+        onAdminToggle={() => {
+          setCartOpen(false);
+          setOrdersOpen(false);
+          setFulfilmentOpen(false);
+          setAdminOpen(true);
+        }}
+        onFulfilmentToggle={() => {
+          setCartOpen(false);
+          setOrdersOpen(false);
+          setAdminOpen(false);
+          setFulfilmentOpen(true);
+        }}
+        onSignout={handleSignout}
+        showSignin={showSignin}
+        setShowSignin={setShowSignin}
+        onSignup={handleSignup}
+        onSignin={handleSignin}
+        connected={connected}
+      />
+      <main className="main">
+        {detailItem && itemDetail && (
+          <ItemDetailPanel
+            item={detailItem}
+            reviews={itemDetail.reviews}
+            average={itemDetail.average}
+            account={account}
+            onClose={() => setOpenItemId(null)}
+            onSubmitReview={(rating, comment) => submitReview(detailItem.id, rating, comment)}
+          />
+        )}
+
+        {!account && <RecommendedSection items={recommended} />}
+
+        <div className="search-filters">
+          <select data-role="category-filter" value={categoryFilter} onChange={(event) => {
+            setCategoryFilter(event.target.value); setSearchPage(0);
+          }}><option value="">All categories</option>{[...new Set(items.map((item) => item.category))].sort().map((category) =>
+            <option key={category}>{category}</option>)}</select>
+          <input data-role="minimum-price" type="number" placeholder="Minimum price" value={minimumPrice}
+            onChange={(event) => { setMinimumPrice(event.target.value); setSearchPage(0); }} />
+          <input data-role="maximum-price" type="number" placeholder="Maximum price" value={maximumPrice}
+            onChange={(event) => { setMaximumPrice(event.target.value); setSearchPage(0); }} />
+          <button data-role="in-stock-filter" onClick={() => { setInStockOnly(!inStockOnly); setSearchPage(0); }}>
+            In stock: {inStockOnly ? "on" : "off"}
+          </button>
+        </div>
+
+        <h2 className="section-title">{search.trim() ? "Search results" : "Best sellers"}</h2>
+        <div data-role="search-results">
+          {visibleItems.length === 0 ? (
+            <div className="empty-state">No items found.</div>
+          ) : (
+            <div className="item-list" data-role="item-list">{visibleItems.map((it) => (
+              <ItemCard
+                key={it.id}
+                item={it}
+                account={account}
+                onOpen={() => setOpenItemId(it.id)}
+                onBuy={() => buyNow(it.id)}
+                onAddToCart={() => addToCart(it.id)}
+                onStockAlert={() => requestStockAlert(it.id)}
+              />
+            ))}</div>
+          )}
+        </div>
+        <div className="search-pagination">
+          <button data-role="search-previous-page" disabled={searchPage === 0} onClick={() => setSearchPage(searchPage - 1)}>Previous</button>
+          <button data-role="search-next-page"
+            disabled={(searchPage + 1) * CATALOG_PAGE_SIZE >= filteredItemCount}
+            onClick={() => setSearchPage(searchPage + 1)}>Next</button>
+        </div>
+      </main>
+
+      {account && (account.isAdmin || account.isStaff) && (
+        <nav className="progression-links">
+          <button data-role="promotions-link" onClick={() => {
+            setCartOpen(false);
+            setOrdersOpen(false);
+            setAdminOpen(false);
+            setFulfilmentOpen(true);
+          }}>Promotions</button>
+        </nav>
+      )}
+
+      {!(account?.isAdmin || account?.isStaff) &&
+        <ProgressionPanel account={account} items={items} orders={orders}
+          state={progression} reload={reloadProgression} />}
+
+      {cartOpen && (
+        <>
+          <div className="backdrop" onClick={() => setCartOpen(false)} />
+          <CartPanel
+            cart={cart}
+            onClose={() => setCartOpen(false)}
+            onChangeQuantity={changeCartQuantity}
+            onRemove={removeCartLine}
+            onCheckout={checkout}
+            onApplyPromotion={async (code) => {
+              await api("/api/cart/promotion", {
+                method: "POST",
+                body: JSON.stringify({ code }),
+              });
+              await reloadProgression();
+            }}
+          />
+        </>
+      )}
+
+      {ordersOpen && (
+        <>
+          <div className="backdrop" onClick={() => setOrdersOpen(false)} />
+          <OrdersPanel orders={orders} onClose={() => setOrdersOpen(false)} onCancel={cancelOrder} onReturn={returnItem} />
+        </>
+      )}
+
+      {adminOpen && account?.isAdmin && (
+        <>
+          <div className="backdrop" onClick={() => setAdminOpen(false)} />
+          <AdminPanel
+            admin={admin}
+            onClose={() => setAdminOpen(false)}
+            onRestock={restock}
+            onTransfer={transfer}
+            onChangePrice={changePrice}
+          >
+            <ProgressionPanel account={account} items={items} orders={orders}
+              state={progression} reload={reloadProgression} />
+          </AdminPanel>
+        </>
+      )}
+
+      {fulfilmentOpen && account && (account.isAdmin || account.isStaff) && (
+        <>
+          <div className="backdrop" onClick={() => setFulfilmentOpen(false)} />
+          <FulfilmentPanel queue={queue} onClose={() => setFulfilmentOpen(false)} onShip={shipOrder}>
+            <ProgressionPanel account={account} items={items} orders={orders}
+              state={progression} reload={reloadProgression} />
+          </FulfilmentPanel>
+        </>
+      )}
+    </div>
+  );
+}
+
+function ToastArea({ toasts }: { toasts: Toast[] }) {
+  return (
+    <div className="toast">
+      {toasts.map((t) => (
+        <div className="toast-item" key={t.id} data-role={t.kind}>
+          {t.message}
+        </div>
+      ))}
+    </div>
+  );
+}
+
+function Header(props: {
+  account: Account;
+  search: string;
+  setSearch: (s: string) => void;
+  cartCount: number;
+  onCatalog: () => void;
+  onCartToggle: () => void;
+  onOrdersToggle: () => void;
+  onAdminToggle: () => void;
+  onFulfilmentToggle: () => void;
+  onSignout: () => void;
+  showSignin: boolean;
+  setShowSignin: (b: boolean) => void;
+  onSignup: (u: string, p: string) => void;
+  onSignin: (u: string, p: string) => void;
+  connected: boolean;
+}) {
+  const {
+    account,
+    search,
+    setSearch,
+    cartCount,
+    onCatalog,
+    onCartToggle,
+    onOrdersToggle,
+    onAdminToggle,
+    onFulfilmentToggle,
+    onSignout,
+    showSignin,
+    setShowSignin,
+    onSignup,
+    onSignin,
+    connected,
+  } = props;
+
+  const [signupUsername, setSignupUsername] = useState("");
+  const [signupPassword, setSignupPassword] = useState("");
+  const [signinUsername, setSigninUsername] = useState("");
+  const [signinPassword, setSigninPassword] = useState("");
+
+  function submitSignup() {
+    if (!signupUsername || !signupPassword) return;
+    onSignup(signupUsername, signupPassword);
+    setSignupUsername("");
+    setSignupPassword("");
+  }
+
+  function submitSignin() {
+    if (!signinUsername || !signinPassword) return;
+    onSignin(signinUsername, signinPassword);
+    setSigninUsername("");
+    setSigninPassword("");
+  }
+
+  return (
+    <header className="header">
+      <h1 className="app-title" data-role="app-title">
+        Storefront
+      </h1>
+      <button className="btn btn-ghost btn-sm" data-role="catalog-link" onClick={onCatalog}>
+        Catalog
+      </button>
+      <input
+        className="input search-input"
+        data-role="search-input"
+        placeholder="Search items..."
+        value={search}
+        onChange={(e) => setSearch(e.target.value)}
+      />
+      <div className="header-actions">
+        {!connected && <span className="muted">reconnecting...</span>}
+        {account && !account.isAdmin && !account.isStaff && (
+          <button className="btn btn-ghost btn-sm" data-role="orders-toggle" onClick={onOrdersToggle}>
+            Orders
+          </button>
+        )}
+        <button className="btn btn-ghost btn-sm" data-role="cart-toggle" onClick={onCartToggle}>
+          Cart <span className="badge" data-role="cart-count">{cartCount}</span>
+        </button>
+        {account?.isAdmin && (
+          <button className="btn btn-ghost btn-sm" data-role="admin-link" onClick={onAdminToggle}>
+            Admin
+          </button>
+        )}
+        {account && (account.isStaff || account.isAdmin) && (
+          <button className="btn btn-ghost btn-sm" data-role="staff-link" onClick={onFulfilmentToggle}>
+            Fulfilment
+          </button>
+        )}
+      </div>
+      <div className="account-area">
+        {account ? (
+          <>
+            <span className="current-user" data-role="current-user">
+              {account.isAdmin || account.isStaff
+                ? <span data-role="staff-current-user">{account.username}</span>
+                : account.username}
+            </span>
+            <button className="btn btn-ghost btn-sm" data-role="signout" onClick={onSignout}>
+              Sign out
+            </button>
+          </>
+        ) : (
+          <div className="auth-forms">
+            <div className="auth-form-group">
+              <input
+                className="input"
+                data-role="signup-username"
+                placeholder="Username"
+                value={signupUsername}
+                onChange={(e) => setSignupUsername(e.target.value)}
+                onKeyDown={(e) => e.key === "Enter" && submitSignup()}
+              />
+              <input
+                className="input"
+                type="password"
+                data-role="signup-password"
+                placeholder="Password"
+                value={signupPassword}
+                onChange={(e) => setSignupPassword(e.target.value)}
+                onKeyDown={(e) => e.key === "Enter" && submitSignup()}
+              />
+              <button className="btn btn-sm" data-role="signup-submit" onClick={submitSignup}>
+                Sign up
+              </button>
+            </div>
+            <button className="link-btn" data-role="signin-toggle" onClick={() => setShowSignin(true)}>
+              Sign in
+            </button>
+            {showSignin && (
+              <div className="auth-form-group">
+                <input
+                  className="input"
+                  data-role="signin-username"
+                  placeholder="Username"
+                  value={signinUsername}
+                  onChange={(e) => setSigninUsername(e.target.value)}
+                  onKeyDown={(e) => e.key === "Enter" && submitSignin()}
+                />
+                <input
+                  className="input"
+                  type="password"
+                  data-role="signin-password"
+                  placeholder="Password"
+                  value={signinPassword}
+                  onChange={(e) => setSigninPassword(e.target.value)}
+                  onKeyDown={(e) => e.key === "Enter" && submitSignin()}
+                />
+                <button className="btn btn-sm" data-role="signin-submit" onClick={submitSignin}>
+                  Sign in
+                </button>
+              </div>
+            )}
+          </div>
+        )}
+      </div>
+    </header>
+  );
+}
+
+function RecommendedSection({ items }: { items: Item[] }) {
+  return (
+    <div className="recommended-section">
+      <h2 className="section-title">Recommended for you</h2>
+      <div className="recommended-list" data-role="recommended-list">
+        {items.length === 0 ? (
+          <div className="empty-state">Nothing recommended yet.</div>
+        ) : (
+          items.map((it, index) => (
+            <div className="recommended-item" data-role="recommended-item" key={it.id}>
+              <span data-role="recommendation-rank">{index + 1}</span>{' '}
+              <span className="item-name">{it.name}</span>
+              <span className="item-price">{money(it.price)}</span>
+            </div>
+          ))
+        )}
+      </div>
+    </div>
+  );
+}
+
+function ItemCard(props: {
+  item: Item;
+  account: Account;
+  onOpen: () => void;
+  onBuy: () => void;
+  onAddToCart: () => void;
+  onStockAlert: () => void;
+}) {
+  const { item, account, onOpen, onBuy, onAddToCart, onStockAlert } = props;
+  const outOfStock = item.stock <= 0;
+  const canBuy = !!account && !account.isAdmin && !account.isStaff;
+
+  return (
+    <div
+      className={`item-card${outOfStock ? " out-of-stock-card" : ""}`}
+      data-role="item-card"
+      data-buy-input={JSON.stringify({ itemId: item.id })}
+      onClick={onOpen}
+    >
+      <div className="item-row">
+        <span className="item-name" data-role="item-name">{item.name}</span>
+        {item.variants?.map((variant) => <span data-role="item-variant" key={variant}>{variant}</span>)}
+      </div>
+      <div className="item-row">
+        <span className="item-price" data-role="item-price">{money(item.price)}</span>
+      </div>
+      <div className="item-stock-row">
+        <span>
+          Stock: <span className={`item-stock${item.stock > 0 && item.stock <= 5 ? " low-stock" : ""}`} data-role="item-stock">{item.stock}</span>
+        </span>
+        {outOfStock && (
+          <span className="out-of-stock-badge" data-role="out-of-stock">
+            Out of stock
+          </span>
+        )}
+      </div>
+      {canBuy && (
+        <div className="item-card-actions" onClick={(e) => e.stopPropagation()}>
+          <button className="btn btn-sm" data-role="buy-now" disabled={outOfStock} onClick={onBuy}>
+            Buy now
+          </button>
+          <button className="btn btn-ghost btn-sm" data-role="add-to-cart" disabled={outOfStock} onClick={onAddToCart}>
+            Add to cart
+          </button>
+          {outOfStock && <button className="btn btn-ghost btn-sm" data-role="stock-alert" onClick={onStockAlert}>Notify me</button>}
+        </div>
+      )}
+    </div>
+  );
+}
+
+function ItemDetailPanel(props: {
+  item: Item;
+  reviews: Review[];
+  average: number | null;
+  account: Account;
+  onClose: () => void;
+  onSubmitReview: (rating: number, comment: string) => void;
+}) {
+  const { item, reviews, average, account, onClose, onSubmitReview } = props;
+  const [rating, setRating] = useState(5);
+  const [comment, setComment] = useState("");
+
+  function submit() {
+    if (!comment.trim()) return;
+    onSubmitReview(rating, comment.trim());
+    setComment("");
+  }
+
+  return (
+    <div className="item-detail" data-role="item-detail">
+      <div className="panel-header">
+        <h3>{item.name}</h3>
+        <button className="close-btn" onClick={onClose} aria-label="Close">
+          ×
+        </button>
+      </div>
+      <div className="item-detail-body">
+        <div className="item-row">
+          <span className="item-price">{money(item.price)}</span>
+        </div>
+        <div className="muted">Stock: {item.stock}</div>
+        <div className="rating-row">
+          <span>Average rating:</span>
+          <strong data-role="review-average">{average != null ? average.toFixed(1) : "—"}</strong>
+        </div>
+        <div className="stack">
+          <h4>Reviews</h4>
+          {reviews.length === 0 ? (
+            <div className="empty-state">No reviews yet. Be the first to write one.</div>
+          ) : (
+            reviews.map((r) => (
+              <div className="review-item" data-role="review-item" key={r.id}>
+                <div className="muted">
+                  {r.username} · {"★".repeat(r.rating)}{"☆".repeat(5 - r.rating)}
+                </div>
+                <div>{r.comment}</div>
+              </div>
+            ))
+          )}
+        </div>
+        {account && !account.isAdmin && !account.isStaff && (
+          <div className="review-form">
+            <h4>Write a review</h4>
+            <div className="review-form-row">
+              <select
+                className="input"
+                data-role="review-rating"
+                value={rating}
+                onChange={(e) => setRating(Number(e.target.value))}
+              >
+                {[5, 4, 3, 2, 1].map((n) => (
+                  <option key={n} value={n}>
+                    {n} star{n === 1 ? "" : "s"}
+                  </option>
+                ))}
+              </select>
+            </div>
+            <input
+              className="input"
+              data-role="review-input"
+              placeholder="Share your thoughts..."
+              value={comment}
+              onChange={(e) => setComment(e.target.value)}
+              onKeyDown={(e) => e.key === "Enter" && submit()}
+            />
+            <button className="btn btn-sm" data-role="review-submit" onClick={submit}>
+              Submit review
+            </button>
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}
+
+function CartPanel(props: {
+  cart: CartState;
+  onClose: () => void;
+  onChangeQuantity: (itemId: number, quantity: number) => void;
+  onRemove: (itemId: number) => void;
+  onCheckout: () => void;
+  onApplyPromotion: (code: string) => Promise<void>;
+}) {
+  const { cart, onClose, onChangeQuantity, onRemove, onCheckout, onApplyPromotion } = props;
+  const [openedAt] = useState(Date.now());
+  const [promotionCode, setPromotionCode] = useState("");
+  const [promotionError, setPromotionError] = useState("");
+  const [, setClock] = useState(0);
+  useEffect(() => {
+    const timer = window.setInterval(() => setClock((value) => value + 1), 1000);
+    return () => window.clearInterval(timer);
+  }, []);
+  const elapsed = Math.floor((Date.now() - openedAt) / 1000);
+  return (
+    <div className="panel" data-role="cart-panel">
+      <div className="panel-header">
+        <h3>Your cart</h3>
+        <button className="close-btn" onClick={onClose} aria-label="Close">
+          ×
+        </button>
+      </div>
+      {cart.items.length === 0 ? (
+        <div className="empty-state" data-role="empty-cart">
+          Your cart is empty.
+        </div>
+      ) : (
+        <div className="stack">
+          {cart.items.map((line) => (
+            <div className="cart-item" data-role="cart-item"
+              data-cart-input={JSON.stringify({ itemId: line.itemId, quantity: -3 })} key={line.itemId}>
+              <div className="cart-item-top">
+                <span className="item-name">{line.name}</span>
+                <span>{money(line.lineTotal)}</span>
+                <span data-role="cart-reservation-timer">{Math.max(0, (line.reservationSeconds ?? 0) - elapsed)}</span>
+                {line.expired && <span data-role="cart-item-expired">Expired</span>}
+              </div>
+              <div className="cart-item-top">
+                <div className="qty-controls">
+                  <button
+                    className="btn btn-ghost btn-sm"
+                    onClick={() => onChangeQuantity(line.itemId, Math.max(1, line.quantity - 1))}
+                    disabled={line.quantity <= 1}
+                  >
+                    −
+                  </button>
+                  <input
+                    className="input qty-input"
+                    data-role="cart-quantity"
+                    type="number"
+                    min={1}
+                    value={line.quantity}
+                    onChange={(e) => {
+                      const v = Number(e.target.value);
+                      if (Number.isInteger(v) && v >= 1) onChangeQuantity(line.itemId, v);
+                    }}
+                  />
+                  <button className="btn btn-ghost btn-sm" onClick={() => onChangeQuantity(line.itemId, line.quantity + 1)}>
+                    +
+                  </button>
+                </div>
+                <button className="btn btn-ghost btn-sm" data-role="cart-remove" onClick={() => onRemove(line.itemId)}>
+                  Remove
+                </button>
+              </div>
+            </div>
+          ))}
+        </div>
+      )}
+      {(cart.expiredAt || cart.items.some((line) => line.expired)) && <div data-role="cart-expired-notice">The cart expired.</div>}
+      <div className="stack">
+        <input className="input" data-role="cart-promotion" value={promotionCode}
+          placeholder="Promotion code" onChange={(event) => setPromotionCode(event.target.value)} />
+        <button className="btn btn-ghost" data-role="apply-promotion" onClick={async () => {
+          try { await onApplyPromotion(promotionCode); setPromotionError(""); }
+          catch (error) { setPromotionError(error instanceof Error ? error.message : "Promotion unavailable"); }
+        }}>Apply promotion</button>
+        {promotionError && <span data-role="promotion-error">{promotionError}</span>}
+      </div>
+      <div className="panel-footer">
+        <div className="cart-total" data-role="cart-total">
+          Total: {money(cart.total)}
+        </div>
+        <button className="btn" data-role="checkout-submit" disabled={cart.items.length === 0} onClick={onCheckout}>
+          Checkout
+        </button>
+      </div>
+    </div>
+  );
+}
+
+function OrdersPanel(props: {
+  orders: Order[];
+  onClose: () => void;
+  onCancel: (orderId: number) => void;
+  onReturn: (orderId: number, orderItemId: number) => void;
+}) {
+  const { orders, onClose, onCancel, onReturn } = props;
+  return (
+    <div className="panel" data-role="order-list">
+      <div className="panel-header">
+        <h3>Order history</h3>
+        <button className="close-btn" onClick={onClose} aria-label="Close">
+          ×
+        </button>
+      </div>
+      {orders.length === 0 ? (
+        <div className="empty-state">You haven't placed any orders yet.</div>
+      ) : (
+        <div className="stack">
+          {orders.map((o) => (
+            <div className="order-item" data-role="order-item" data-entity-id={String(o.id)}
+              data-ship-input={JSON.stringify({ orderId: o.id })}
+              data-cancel-input={JSON.stringify({ orderId: o.id })} key={o.id}>
+              <div className="order-item-top">
+                <span className="muted">{new Date(o.createdAt).toLocaleString()}</span>
+                <span className={`order-status order-status-${o.status}`} data-role="order-status">
+                  {o.status}
+                </span>
+              </div>
+              <div className="order-lines">
+                {o.items.map((l) => (
+                  <div className="order-line" key={l.orderItemId}>
+                    <span>
+                      {l.name} × {l.quantity}
+                      {l.returned ? " (returned)" : ""}
+                    </span>
+                    {(o.status === "shipped" || o.status === "delivered") && !l.returned && (
+                      <button
+                        className="btn btn-ghost btn-sm"
+                        data-role="return-item"
+                        onClick={() => onReturn(o.id, l.orderItemId)}
+                      >
+                        Return
+                      </button>
+                    )}
+                  </div>
+                ))}
+              </div>
+              <div data-role="payment-record">
+                <span data-role="payment-status">{o.paymentStatus}</span>
+                <span data-role="payment-amount">{money(o.paymentAmount ?? o.total)}</span>
+                <span data-role="order-discount">{money(o.discount ?? 0)}</span>
+                <span data-role="order-refund-total">{money(o.refundTotal ?? 0)}</span>
+                {(o.refundTotal ?? 0) > 0 && <span data-role="refund-entry">
+                  {o.items.map((item) => item.name).join(", ")} refund {money(o.refundTotal ?? 0)}
+                </span>}
+              </div>
+              <div className="order-item-top">
+                <div className="order-total" data-role="order-total">
+                  {money(o.total)}
+                </div>
+                {o.status === "pending" && (
+                  <button className="btn btn-ghost btn-sm" data-role="cancel-order" onClick={() => onCancel(o.id)}>
+                    Cancel order
+                  </button>
+                )}
+              </div>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
+
+function AdminPanel(props: {
+  admin: AdminState | null;
+  onClose: () => void;
+  onRestock: (itemId: number, warehouseId: number, quantity: number) => void;
+  onTransfer: (itemId: number, fromWarehouseId: number, toWarehouseId: number, quantity: number) => void;
+  onChangePrice: (itemId: number, price: number) => void;
+  children?: ReactNode;
+}) {
+  const { admin, onClose, onRestock, onTransfer, onChangePrice, children } = props;
+  const [restockAmounts, setRestockAmounts] = useState<Record<string, number>>({});
+  const [transferState, setTransferState] = useState<Record<number, { from: number; to: number; qty: number }>>({});
+  const [priceState, setPriceState] = useState<Record<number, number>>({});
+  const [namedRestock, setNamedRestock] = useState({ item: "", warehouse: "", quantity: "" });
+
+  if (!admin) {
+    return (
+      <div className="panel wide" data-role="admin-panel">
+        <div className="panel-header">
+          <h3>Admin</h3>
+          <button className="close-btn" onClick={onClose} aria-label="Close">
+            ×
+          </button>
+        </div>
+        <div className="empty-state">Loading admin data...</div>
+      </div>
+    );
+  }
+
+  function key(itemId: number, warehouseId: number) {
+    return `${itemId}:${warehouseId}`;
+  }
+
+  const warehouses = admin.warehouses;
+
+  function transferFor(itemId: number) {
+    return (
+      transferState[itemId] ?? {
+        from: warehouses[0]?.id ?? 0,
+        to: warehouses[1]?.id ?? warehouses[0]?.id ?? 0,
+        qty: 1,
+      }
+    );
+  }
+
+  return (
+    <div className="panel wide" data-role="admin-panel">
+      <div className="panel-header">
+        <h3>Admin</h3>
+        <button className="close-btn" onClick={onClose} aria-label="Close">
+          ×
+        </button>
+      </div>
+
+      <div className="admin-section">
+        <h4>Restock item</h4>
+        <input className="input" data-role="restock-item" value={namedRestock.item}
+          onChange={(event) => setNamedRestock({ ...namedRestock, item: event.target.value })} />
+        <input className="input" data-role="restock-warehouse" value={namedRestock.warehouse}
+          onChange={(event) => setNamedRestock({ ...namedRestock, warehouse: event.target.value })} />
+        <input className="input" data-role="restock-quantity" value={namedRestock.quantity}
+          onChange={(event) => setNamedRestock({ ...namedRestock, quantity: event.target.value })} />
+        <button className="btn btn-sm" data-role="restock-submit" onClick={() => {
+          const item = admin.items.find((entry) => entry.name.toLowerCase() === namedRestock.item.toLowerCase());
+          const warehouse = admin.warehouses.find((entry) => entry.name.toLowerCase() === namedRestock.warehouse.toLowerCase());
+          if (item && warehouse) onRestock(item.id, warehouse.id, Math.max(1, Number(namedRestock.quantity)));
+        }}>Restock</button>
+      </div>
+
+      <div className="revenue-box">
+        <span>Total revenue</span>
+        <strong data-role="admin-revenue">{admin.revenue.toFixed(2)}</strong>
+      </div>
+      <div className="revenue-box">
+        <span>Orders waiting to ship</span>
+        <strong data-role="queue-depth">{admin.queueDepth}</strong>
+      </div>
+
+      <div className="admin-section">
+        <h4>Warehouses</h4>
+        <div className="warehouse-list">
+          {admin.warehouses.map((w) => (
+            <span className="warehouse-chip" data-role="admin-warehouse-item" key={w.id}>
+              {w.name}: <span data-role="warehouse-total">{w.total}</span>
+            </span>
+          ))}
+        </div>
+      </div>
+
+      <div className="admin-section">
+        <h4>Low stock (≤ 10 units)</h4>
+        <div className="stack" data-role="low-stock-list">
+          {admin.lowStock.length === 0 ? (
+            <div className="empty-state">Nothing is low on stock.</div>
+          ) : (
+            admin.lowStock.map((it) => (
+              <div className="low-stock-item" data-role="low-stock-item" key={it.id}>
+                <span className="item-name">{it.name}</span>
+                <span className="low-stock-qty">{it.stock} left</span>
+              </div>
+            ))
+          )}
+        </div>
+      </div>
+
+      <div className="admin-section">
+        <h4>Category totals</h4>
+        <div className="stack">
+          {admin.categoryTotals.map((c) => (
+            <div className="category-row" data-role="category-row" key={c.category}>
+              <span className="item-name">{c.category}</span>
+              <span>
+                Units: <span data-role="category-units">{c.units}</span>
+              </span>
+              <span>
+                Revenue: <span data-role="category-revenue">{c.revenue.toFixed(2)}</span>
+              </span>
+            </div>
+          ))}
+        </div>
+      </div>
+
+      <div className="admin-section">
+        <h4>Items</h4>
+        <div className="stack">
+          {admin.items.map((it) => {
+            const t = transferFor(it.id);
+            const priceValue = priceState[it.id] ?? it.price;
+            return (
+              <div className="admin-item-row" data-role="admin-item-row"
+                data-price-input={JSON.stringify({ itemId: it.id, price: it.name === "Gaming Mouse" ? 1 : it.price })}
+                data-transfer-input={it.name === "Headphones" && warehouses.length >= 2 ? JSON.stringify({
+                  itemId: it.id, fromWarehouseId: warehouses.find((w) => w.name === "East")?.id ?? warehouses[0].id,
+                  toWarehouseId: warehouses.find((w) => w.name === "West")?.id ?? warehouses[1].id, quantity: 25,
+                }) : undefined} key={it.id}>
+                <div className="admin-row-top">
+                  <span className="item-name">{it.name}</span>
+                  <span className="muted">{it.category}</span>
+                </div>
+                <div className="muted">
+                  Total stock: <span data-role="admin-stock">{it.stock}</span>
+                </div>
+
+                <div className="price-form">
+                  <input
+                    className="input qty-input price-input"
+                    data-role="price-input"
+                    type="number"
+                    min={0.01}
+                    step="0.01"
+                    value={priceValue}
+                    onChange={(e) => setPriceState((prev) => ({ ...prev, [it.id]: Number(e.target.value) }))}
+                  />
+                  <button
+                    className="btn btn-sm"
+                    data-role="price-submit"
+                    onClick={() => onChangePrice(it.id, Number(priceValue))}
+                  >
+                    Set price
+                  </button>
+                </div>
+
+                <div className="transfer-form">
+                  <select
+                    className="input"
+                    data-role="transfer-from"
+                    value={t.from}
+                    onChange={(e) =>
+                      setTransferState((prev) => ({ ...prev, [it.id]: { ...t, from: Number(e.target.value) } }))
+                    }
+                  >
+                    {warehouses.map((w) => (
+                      <option key={w.id} value={w.id}>
+                        {w.name}
+                      </option>
+                    ))}
+                  </select>
+                  <span>→</span>
+                  <select
+                    className="input"
+                    data-role="transfer-to"
+                    value={t.to}
+                    onChange={(e) =>
+                      setTransferState((prev) => ({ ...prev, [it.id]: { ...t, to: Number(e.target.value) } }))
+                    }
+                  >
+                    {warehouses.map((w) => (
+                      <option key={w.id} value={w.id}>
+                        {w.name}
+                      </option>
+                    ))}
+                  </select>
+                  <input
+                    className="input qty-input"
+                    data-role="transfer-qty"
+                    type="number"
+                    min={1}
+                    value={t.qty}
+                    onChange={(e) =>
+                      setTransferState((prev) => ({ ...prev, [it.id]: { ...t, qty: Number(e.target.value) } }))
+                    }
+                  />
+                  <button
+                    className="btn btn-sm"
+                    data-role="transfer-submit"
+                    onClick={() => onTransfer(it.id, t.from, t.to, Math.max(1, Math.floor(t.qty)))}
+                  >
+                    Transfer
+                  </button>
+                </div>
+              </div>
+            );
+          })}
+        </div>
+      </div>
+
+      <div className="admin-section">
+        <h4>Stock by warehouse</h4>
+        <div className="stack">
+          {admin.locations.map((loc) => {
+            const k = key(loc.itemId, loc.warehouseId);
+            const amount = restockAmounts[k] ?? 1;
+            return (
+              <div className="admin-location-row" data-role="admin-location-row"
+                data-restock-input={JSON.stringify({ itemId: loc.itemId, warehouseId: loc.warehouseId, quantity: 1 })} key={k}>
+                <div className="admin-row-top">
+                  <span>
+                    {loc.itemName} @ {loc.warehouseName}
+                  </span>
+                  <span data-role="admin-location-qty">{loc.quantity}</span>
+                </div>
+                <div className="restock-form">
+                  <input
+                    className="input qty-input"
+                    data-role="restock-input"
+                    type="number"
+                    min={1}
+                    value={amount}
+                    onChange={(e) =>
+                      setRestockAmounts((prev) => ({ ...prev, [k]: Number(e.target.value) }))
+                    }
+                  />
+                  <button
+                    className="btn btn-sm"
+                    data-role="restock-submit"
+                    onClick={() => onRestock(loc.itemId, loc.warehouseId, Math.max(1, Math.floor(amount)))}
+                  >
+                    Restock
+                  </button>
+                </div>
+              </div>
+            );
+          })}
+        </div>
+      </div>
+      {children}
+    </div>
+  );
+}
+
+function FulfilmentPanel(props: { queue: QueueState; onClose: () => void;
+  onShip: (orderId: number) => void; children?: ReactNode }) {
+  const { queue, onClose, onShip, children } = props;
+  return (
+    <div className="panel wide" data-role="fulfilment-panel">
+      <div className="panel-header">
+        <h3>Fulfilment queue</h3>
+        <button className="close-btn" onClick={onClose} aria-label="Close">
+          ×
+        </button>
+      </div>
+      <div className="revenue-box">
+        <span>Orders waiting</span>
+        <strong data-role="queue-depth">{queue.depth}</strong>
+      </div>
+      {queue.queue.length === 0 ? (
+        <div className="empty-state">No orders waiting to ship.</div>
+      ) : (
+        <div className="stack">
+          {queue.queue.map((o) => (
+            <div className="queue-item" data-role="queue-item" key={o.id}>
+              <div className="muted">{new Date(o.createdAt).toLocaleString()}</div>
+              <div className="stack">
+                {o.items.map((line, idx) => (
+                  <div className="queue-line" key={idx}>
+                    <span>
+                      {line.name} × {line.quantity}
+                    </span>
+                    <span className="muted">
+                      from <span data-role="queue-warehouse">{line.warehouse}</span>
+                    </span>
+                  </div>
+                ))}
+              </div>
+              <button className="btn btn-sm" data-role="ship-submit" onClick={() => onShip(o.id)}>
+                Mark shipped
+              </button>
+            </div>
+          ))}
+        </div>
+      )}
+      {children}
+    </div>
+  );
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/ProgressionPanel.tsx b/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/ProgressionPanel.tsx
new file mode 100644
index 00000000000..2f8ec78a743
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/ProgressionPanel.tsx
@@ -0,0 +1,267 @@
+import { useEffect, useState } from "react";
+
+type Account = { id: number; username: string; isAdmin: boolean; isStaff: boolean } | null;
+type Item = { id: number; name: string; price: number; stock: number; category: string; variants?: string[] };
+type Order = {
+  id: number; status: string; total: number; discount?: number; paymentStatus?: string;
+  paymentAmount?: number; refundTotal?: number; items?: Array<{ name: string }>;
+};
+type ProgressionState = any;
+
+async function request(path: string, method = "GET", body?: unknown) {
+  const response = await fetch(path, {
+    method,
+    credentials: "include",
+    headers: { "Content-Type": "application/json" },
+    body: body === undefined ? undefined : JSON.stringify(body),
+  });
+  const result = await response.json().catch(() => ({}));
+  if (!response.ok) throw new Error(result.error || "request failed");
+  return result;
+}
+
+export function ProgressionPanel({
+  account, items, orders, state, reload,
+}: {
+  account: Account; items: Item[]; orders: Order[]; state: ProgressionState; reload: () => Promise<void>;
+}) {
+  const staff = Boolean(account?.isAdmin || account?.isStaff);
+  const [message, setMessage] = useState("");
+  const [profile, setProfile] = useState({ name: state?.profile?.name ?? "", address: state?.profile?.address ?? "" });
+  const [signin, setSignin] = useState({ username: "", password: "" });
+  const [support, setSupport] = useState({ email: "", subject: "", message: "" });
+  const [createdReference, setCreatedReference] = useState("");
+  const [catalog, setCatalog] = useState({ name: "", category: "", price: "", variants: "" });
+  const [promotion, setPromotion] = useState({ code: "", discount: "", start: "", end: "", limit: "" });
+  const [restock, setRestock] = useState({ item: "", warehouse: "East", quantity: "", delaySeconds: "90" });
+  const [reply, setReply] = useState<Record<number, string>>({});
+  const [supportOrders, setSupportOrders] = useState<Record<number, number>>({});
+  const [triage, setTriage] = useState<Record<number, {
+    assignee: string; priority: string; status: string;
+  }>>({});
+  const [reorders, setReorders] = useState<Record<number, { threshold: string; quantity: string }>>({});
+  const [preferences, setPreferences] = useState({ order: false, stock: false });
+
+  useEffect(() => {
+    if (state?.preferences) setPreferences(state.preferences);
+  }, [state?.preferences?.order, state?.preferences?.stock]);
+  useEffect(() => {
+    if (state?.profile) setProfile({ name: state.profile.name, address: state.profile.address });
+  }, [state?.profile?.name, state?.profile?.address]);
+
+  const run = async (work: () => Promise<unknown>) => {
+    try { await work(); setMessage(""); await reload(); }
+    catch (error) { setMessage(error instanceof Error ? error.message : "request failed"); }
+  };
+  return <section className="progression" data-role="progression-panel">
+    <h2>Progression features</h2>
+    <nav className="progression-links">
+      <a data-role="profile-link" href="#profile">Profile</a>
+      <a data-role="support-link" href="#support">Support</a>
+      {staff && <a data-role="promotions-link" href="#promotions">Promotions</a>}
+      {staff && <a data-role="activity-link" href="#activity">Activity</a>}
+      {staff && <a data-role="reorder-link" href="#reorders">Reorders</a>}
+    </nav>
+    {message && <p className="progression-error" data-role="progression-error"><span data-role="promotion-error">{message}</span></p>}
+
+    <div className="progression-grid">
+      <article className="progression-card">
+        <h3>Staff access</h3>
+        <input data-role="staff-signin-username" value={signin.username} placeholder="Username"
+          onChange={(event) => setSignin({ ...signin, username: event.target.value })} />
+        <input data-role="staff-signin-password" value={signin.password} type="password" placeholder="Password"
+          onChange={(event) => setSignin({ ...signin, password: event.target.value })} />
+        <button data-role="staff-signin-submit" onClick={() => run(async () => {
+          await request("/api/auth/signin", "POST", signin); window.location.reload();
+        })}>Sign in</button>
+        {account && <span data-role="staff-current-user">{account.username}</span>}
+      </article>
+
+      {account && <article className="progression-card" id="profile">
+        <h3>Profile</h3>
+        <input data-role="profile-name" value={profile.name} placeholder="Name"
+          onChange={(event) => setProfile({ ...profile, name: event.target.value })} />
+        <input data-role="profile-address" value={profile.address} placeholder="Address"
+          onChange={(event) => setProfile({ ...profile, address: event.target.value })} />
+        <button data-role="profile-save" onClick={() => run(() => request("/api/profile", "PUT", profile))}>Save profile</button>
+        <span data-role="profile-address-summary">{state?.profile?.address}</span>
+      </article>}
+
+      <article className="progression-card" id="support">
+        <h3>Support</h3>
+        <input data-role="support-email" value={support.email} placeholder="Email"
+          onChange={(event) => setSupport({ ...support, email: event.target.value })} />
+        <input data-role="support-subject" value={support.subject} placeholder="Subject"
+          onChange={(event) => setSupport({ ...support, subject: event.target.value })} />
+        <textarea data-role="support-message" value={support.message} placeholder="Message"
+          onChange={(event) => setSupport({ ...support, message: event.target.value })} />
+        <button data-role="support-submit" onClick={() => run(async () => {
+          const created = await request("/api/support/cases", "POST", support); setCreatedReference(created.reference);
+        })}>Open case</button>
+        {createdReference && <strong data-role="support-reference">{createdReference}</strong>}
+        {(state?.support ?? []).map((entry: any) => {
+          const draft = triage[entry.id] ?? {
+            assignee: entry.assignee ?? "", priority: entry.priority, status: entry.status,
+          };
+          const update = (field: keyof typeof draft, value: string) =>
+            setTriage((current) => ({ ...current,
+              [entry.id]: { ...draft, [field]: value } }));
+          return <div data-role="support-ticket" data-entity-id={entry.id} key={entry.id}>
+          <strong data-role="support-reference">{entry.reference}</strong>
+          <span>{entry.subject}</span>
+          <span data-role="support-status">{entry.status}</span>
+          {staff && <>
+            <input data-role="support-assignee" value={draft.assignee}
+              onChange={(event) => update("assignee", event.target.value)} />
+            <select data-role="support-priority" value={draft.priority}
+              onChange={(event) => update("priority", event.target.value)}>
+              <option>low</option><option>normal</option><option>high</option>
+            </select>
+            <select data-role="support-status-input" value={draft.status}
+              onChange={(event) => update("status", event.target.value)}>
+              <option>new</option><option>open</option><option>in progress</option><option>resolved</option>
+            </select>
+            <button data-role="support-update" onClick={() => run(() =>
+              request(`/api/support/cases/${entry.id}`, "PUT", draft))}>Update</button>
+          </>}
+          {account && orders.map((order) => <button data-role="support-order-option" key={order.id}
+            onClick={() => setSupportOrders({ ...supportOrders, [entry.id]: order.id })}>
+            {order.items?.map((item) => item.name).join(", ") || `Order ${order.id}`}
+          </button>)}
+          {account && supportOrders[entry.id] && <button data-role="support-link-order"
+            data-action-input={JSON.stringify({ caseId: entry.id, orderId: supportOrders[entry.id] })}
+            onClick={() => run(() => request(`/api/support/cases/${entry.id}/order`, "POST", { orderId: supportOrders[entry.id] }))}>Link order</button>}
+          {entry.orderId && <span data-role="support-order">Order {entry.orderId}</span>}
+          {staff && entry.orderId && <button data-role="support-refund"
+            data-action-input={JSON.stringify({ caseId: entry.id })}
+            onClick={() => run(() => request(`/api/support/cases/${entry.id}/refund`, "POST"))}>Refund order</button>}
+          <span data-role="support-refund-total">{entry.refundTotal}</span>
+          {entry.replies.map((item: any) => <div data-role="support-reply-item" key={item.id}>{item.username}: {item.message}</div>)}
+          {account && <><input data-role="support-reply" value={reply[entry.id] ?? ""}
+            onChange={(event) => setReply({ ...reply, [entry.id]: event.target.value })} />
+            <button data-role="support-reply-submit" onClick={() => run(() =>
+              request(`/api/support/cases/${entry.id}/replies`, "POST", { message: reply[entry.id] }))}>Reply</button></>}
+        </div>})}
+      </article>
+
+      {account && <article className="progression-card" data-role="notification-settings">
+        <h3>Notifications</h3>
+        <button data-role="notification-order" data-state={preferences.order ? "on" : "off"} onClick={() => setPreferences({ ...preferences, order: !preferences.order })}>
+          Order updates: {preferences.order ? "on" : "off"}
+        </button>
+        <button data-role="notification-stock" data-state={preferences.stock ? "on" : "off"} onClick={() => setPreferences({ ...preferences, stock: !preferences.stock })}>
+          Stock updates: {preferences.stock ? "on" : "off"}
+        </button>
+        <button data-role="notification-save" onClick={() => run(() =>
+          request("/api/notifications/preferences", "PUT", preferences))}>Save</button>
+        <span data-role="notifications-toggle">{state?.notifications?.length ?? 0}</span>
+        <span data-role="notification-unread-count">{state?.notifications?.filter((item: any) => !item.read).length ?? 0}</span>
+        {(state?.notifications ?? []).map((item: any) => <div data-role="notification-item" key={item.id}>{item.message}</div>)}
+      </article>}
+
+      {account && !staff && <article className="progression-card" data-role="recommendations">
+        <h3>Recommendations</h3>
+        {(state?.recommendations ?? []).map((item: any) => <div data-role="recommended-item" key={item.id}>
+          <span data-role="recommendation-rank">{item.rank}</span> {item.name}
+          <button data-role="dismiss-recommendation" onClick={() => run(() =>
+            request(`/api/recommendations/${item.id}/dismiss`, "POST"))}>Dismiss</button>
+        </div>)}
+      </article>}
+
+      {account && <article className="progression-card">
+        <h3>Orders and payment</h3>
+        {orders.map((order) => <div data-role="payment-record" key={order.id}>
+          <span data-role="payment-status">{order.paymentStatus}</span>
+          <span data-role="payment-amount">{order.paymentAmount?.toFixed(2)}</span>
+          <span data-role="order-discount">{order.discount?.toFixed(2)}</span>
+          <span data-role="order-refund-total">{order.refundTotal?.toFixed(2)}</span>
+          {order.refundTotal ? <span data-role="refund-entry">{order.items?.map((item) => item.name).join(", ")} refund {order.refundTotal.toFixed(2)}</span> : null}
+        </div>)}
+      </article>}
+
+      {(state?.expiredCarts ?? []).map((cart: any) => <article className="progression-card" data-role="expired-cart" key={cart.id}>
+        <h3>Expired cart</h3>
+        <button data-role="restore-cart" onClick={() => run(() => request(`/api/cart/recover/${cart.id}`, "POST"))}>Restore</button>
+        <span data-role="cart-restore-warning">Only available items are restored.</span>
+      </article>)}
+
+      {staff && <>
+        <article className="progression-card" id="promotions">
+          <h3>Catalog</h3>
+          <input data-role="catalog-name" value={catalog.name} onChange={(e) => setCatalog({ ...catalog, name: e.target.value })} placeholder="Name" />
+          <input data-role="catalog-category" value={catalog.category} onChange={(e) => setCatalog({ ...catalog, category: e.target.value })} placeholder="Category" />
+          <input data-role="catalog-price" value={catalog.price} onChange={(e) => setCatalog({ ...catalog, price: e.target.value })} placeholder="Price" />
+          <input data-role="catalog-variants" value={catalog.variants} onChange={(e) => setCatalog({ ...catalog, variants: e.target.value })} placeholder="Variants" />
+          <button data-role="catalog-save" onClick={() => run(() => request("/api/catalog/products", "POST", catalog))}>Save product</button>
+        </article>
+        <article className="progression-card" id="activity">
+          <h3>Scheduled restock</h3>
+          <input data-role="schedule-restock-item" value={restock.item} onChange={(e) => setRestock({ ...restock, item: e.target.value })} />
+          <input data-role="schedule-restock-warehouse" value={restock.warehouse} onChange={(e) => setRestock({ ...restock, warehouse: e.target.value })} />
+          <input data-role="schedule-restock-qty" value={restock.quantity} onChange={(e) => setRestock({ ...restock, quantity: e.target.value })} />
+          <input data-role="schedule-restock-delay" value={restock.delaySeconds} onChange={(e) => setRestock({ ...restock, delaySeconds: e.target.value })} />
+          <button data-role="schedule-restock-submit" data-action-input={JSON.stringify({
+            item: restock.item, warehouse: restock.warehouse, quantity: Number(restock.quantity),
+            delaySeconds: Number(restock.delaySeconds),
+          })} onClick={() => run(() =>
+            request("/api/admin/scheduled-restocks", "POST", { ...restock, quantity: Number(restock.quantity), delaySeconds: Number(restock.delaySeconds) }))}>Schedule</button>
+          {(state?.pendingRestocks ?? []).map((item: any) => <div data-role="pending-restock-item" data-entity-id={String(item.id)} key={item.id}>
+            <span>{item.item}</span>
+            <span data-role="pending-restock-remaining">{Math.max(0, Math.ceil((new Date(item.dueAt).valueOf() - Date.now()) / 1000))}</span>
+            <button data-role="pending-restock-cancel" onClick={() => run(() => request(`/api/admin/scheduled-restocks/${item.id}`, "DELETE"))}>Cancel</button>
+          </div>)}
+          {(state?.stockLedger ?? []).map((item: any) => <div data-role="stock-ledger-entry" key={item.id}>{item.item} +{item.quantity}</div>)}
+        </article>
+        <article className="progression-card" id="reorders">
+          <h3>Promotions</h3>
+          <input data-role="promotion-code" value={promotion.code} onChange={(e) => setPromotion({ ...promotion, code: e.target.value })} />
+          <input data-role="promotion-discount" value={promotion.discount} onChange={(e) => setPromotion({ ...promotion, discount: e.target.value })} />
+          <input data-role="promotion-start" type="datetime-local" value={promotion.start} onChange={(e) => setPromotion({ ...promotion, start: e.target.value })} />
+          <input data-role="promotion-end" type="datetime-local" value={promotion.end} onChange={(e) => setPromotion({ ...promotion, end: e.target.value })} />
+          <input data-role="promotion-limit" value={promotion.limit} onChange={(e) => setPromotion({ ...promotion, limit: e.target.value })} />
+          <button data-role="promotion-submit" data-promotion-code={promotion.code} onClick={() => run(() => request("/api/promotions", "POST", promotion))}>Save promotion</button>
+          {(state?.promotions ?? []).map((item: any) => <div data-role="promotion-item" key={item.id}>
+            <span>{item.code}</span>
+            <span data-role="promotion-discount">{item.discount}</span>
+            <span data-role="promotion-start">{item.start}</span>
+            <span data-role="promotion-end">{item.end}</span>
+            <span data-role="promotion-limit">{item.limit}</span>
+            <span data-role="promotion-report"><span data-role="promotion-redemptions">{item.redemptions}</span> <span data-role="promotion-revenue">{item.revenue}</span></span>
+          </div>)}
+        </article>
+        <article className="progression-card">
+          <h3>Roles and activity</h3>
+          {account?.isAdmin && (state?.roles ?? []).map((role: any) => <div data-role="staff-role-row" data-account-id={role.id} key={role.id}>{role.username}
+            <select data-role="staff-role-select" defaultValue={role.role} id={`role-${role.id}`}>
+              <option>support</option><option>catalog</option><option>inventory</option><option>fulfilment</option>
+            </select>
+            <button data-role="staff-role-save" onClick={() => run(() => request(`/api/staff/${role.id}/role`, "PUT", {
+              role: (document.getElementById(`role-${role.id}`) as HTMLSelectElement).value,
+            }))}>Save</button></div>)}
+          {(state?.activity ?? []).map((item: any) => <div data-role="activity-entry" key={item.id}>
+            <span data-role="activity-actor">{item.actor}</span> <span data-role="activity-action">{item.action}</span>
+            <span data-role="activity-subject">{item.subject}</span> <span data-role="activity-time">{item.time}</span>
+          </div>)}
+        </article>
+        <article className="progression-card">
+          <h3>Automatic reorder</h3>
+          {items.map((item) => <div key={item.id}>
+            <span data-role="reorder-item">{item.name}</span>
+            <input data-role="reorder-threshold" value={reorders[item.id]?.threshold ?? ""} onChange={(e) => setReorders({ ...reorders, [item.id]: { threshold: e.target.value, quantity: reorders[item.id]?.quantity ?? "" } })} />
+            <input data-role="reorder-quantity" value={reorders[item.id]?.quantity ?? ""} onChange={(e) => setReorders({ ...reorders, [item.id]: { threshold: reorders[item.id]?.threshold ?? "", quantity: e.target.value } })} />
+            <button data-role="reorder-submit" onClick={() => run(() => request(`/api/reorders/${item.id}`, "PUT", {
+              threshold: Number(reorders[item.id]?.threshold), quantity: Number(reorders[item.id]?.quantity),
+            }))}>Save</button>
+          </div>)}
+          {(state?.reorders ?? []).map((item: any) => <div data-role="reorder-rule-item" key={item.id}>{item.item}: {item.threshold}/{item.quantity}</div>)}
+        </article>
+        <article className="progression-card">
+          <h3>Completed orders</h3>
+          {(state?.completedOrders ?? []).map((order: any) => <div data-role="completed-order-item" key={order.id}>
+            {order.items} <span data-role="completed-order-status">{order.status}</span>
+          </div>)}
+        </article>
+      </>}
+    </div>
+  </section>;
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/index.css b/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/index.css
new file mode 100644
index 00000000000..d6d57e49419
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/index.css
@@ -0,0 +1,702 @@
+:root {
+  --primary: #336791;
+  --primary-hover: #008bb9;
+  --secondary: #0064a5;
+  --bg: #1a1a2e;
+  --surface: #16213e;
+  --border: #2a2a4a;
+  --text: #e8e8e8;
+  --text-muted: #848484;
+  --accent: #008bb9;
+  --success: #27ae60;
+  --warning: #f26522;
+  --danger: #cc3b03;
+}
+
+.progression {
+  width: min(1180px, calc(100% - 32px));
+  margin: 32px auto 72px;
+}
+
+.progression-links {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 12px;
+  margin-bottom: 18px;
+}
+
+.progression-links a {
+  color: var(--accent);
+}
+
+.progression-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
+  gap: 16px;
+}
+
+.progression-card {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+  padding: 18px;
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  background: var(--surface);
+}
+
+.progression-card input,
+.progression-card select,
+.progression-card textarea,
+.progression-card button {
+  min-height: 36px;
+}
+
+.progression-error {
+  color: var(--danger);
+}
+
+* {
+  box-sizing: border-box;
+}
+
+html, body, #root {
+  height: 100%;
+}
+
+body {
+  margin: 0;
+  background: var(--bg);
+  color: var(--text);
+  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+  font-size: 15px;
+}
+
+h1, h2, h3, h4 {
+  margin: 0;
+  font-weight: 700;
+}
+
+button {
+  font-family: inherit;
+  cursor: pointer;
+}
+
+input, select {
+  font-family: inherit;
+}
+
+.app {
+  display: flex;
+  flex-direction: column;
+  min-height: 100%;
+}
+
+/* Header */
+.header {
+  display: flex;
+  align-items: center;
+  gap: 16px;
+  padding: 12px 24px;
+  background: var(--surface);
+  border-bottom: 1px solid var(--border);
+  position: sticky;
+  top: 0;
+  z-index: 30;
+  flex-wrap: wrap;
+}
+
+.app-title {
+  font-size: 20px;
+  color: var(--text);
+  white-space: nowrap;
+}
+
+.search-input {
+  flex: 1;
+  min-width: 160px;
+}
+
+.input {
+  background: var(--bg);
+  border: 1px solid var(--border);
+  color: var(--text);
+  border-radius: 8px;
+  padding: 8px 12px;
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s;
+}
+
+.input::placeholder {
+  color: var(--text-muted);
+}
+
+.input:focus {
+  border-color: var(--primary);
+  box-shadow: 0 0 0 2px rgba(51, 103, 145, 0.4);
+}
+
+.btn {
+  border: none;
+  border-radius: 8px;
+  padding: 8px 16px;
+  font-weight: 600;
+  background: var(--primary);
+  color: #fff;
+  transition: background 0.15s, opacity 0.15s;
+}
+
+.btn:hover:not(:disabled) {
+  background: var(--primary-hover);
+}
+
+.btn:disabled {
+  opacity: 0.45;
+  cursor: not-allowed;
+}
+
+.btn-ghost {
+  background: transparent;
+  border: 1px solid var(--border);
+  color: var(--text);
+}
+
+.btn-ghost:hover:not(:disabled) {
+  border-color: var(--primary-hover);
+  color: var(--primary-hover);
+}
+
+.btn-danger {
+  background: var(--danger);
+}
+
+.btn-sm {
+  padding: 4px 10px;
+  font-size: 13px;
+}
+
+.header-actions {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+}
+
+.badge {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-width: 20px;
+  height: 20px;
+  padding: 0 6px;
+  border-radius: 999px;
+  background: var(--accent);
+  color: #fff;
+  font-size: 12px;
+  font-weight: 700;
+}
+
+.badge-warning {
+  background: var(--warning);
+}
+
+.account-area {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.auth-forms {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  flex-wrap: wrap;
+}
+
+.auth-form-group {
+  display: flex;
+  gap: 6px;
+  align-items: center;
+}
+
+.auth-form-group .input {
+  width: 120px;
+}
+
+.current-user {
+  font-weight: 600;
+  color: var(--text);
+}
+
+.error-text {
+  color: var(--danger);
+  font-size: 13px;
+  margin-top: 4px;
+}
+
+.toast {
+  position: fixed;
+  top: 16px;
+  right: 16px;
+  z-index: 1000;
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+}
+
+.toast-item {
+  background: var(--surface);
+  border: 1px solid var(--danger);
+  color: var(--text);
+  padding: 10px 16px;
+  border-radius: 8px;
+  box-shadow: 0 4px 16px rgba(0,0,0,0.4);
+  animation: fadeIn 0.2s ease-out;
+}
+
+@keyframes fadeIn {
+  from { opacity: 0; transform: translateY(-8px); }
+  to { opacity: 1; transform: translateY(0); }
+}
+
+/* Main */
+.main {
+  flex: 1;
+  padding: 24px;
+  max-width: 1200px;
+  width: 100%;
+  margin: 0 auto;
+}
+
+.section-title {
+  font-size: 18px;
+  margin-bottom: 16px;
+  color: var(--text);
+}
+
+.item-list {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(230px, 1fr));
+  gap: 16px;
+}
+
+.item-card {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: 12px;
+  padding: 16px;
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  cursor: pointer;
+  transition: border-color 0.15s, transform 0.1s;
+}
+
+.item-card:hover {
+  border-color: var(--primary-hover);
+}
+
+.item-card.out-of-stock-card {
+  opacity: 0.65;
+}
+
+.item-name {
+  font-weight: 600;
+  font-size: 15px;
+}
+
+.item-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+}
+
+.item-price {
+  font-weight: 700;
+  text-align: right;
+  color: var(--text);
+}
+
+.item-stock-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  font-size: 13px;
+  color: var(--text-muted);
+}
+
+.item-stock.low-stock {
+  color: var(--warning);
+  font-weight: 700;
+}
+
+.out-of-stock-badge {
+  display: inline-block;
+  padding: 2px 8px;
+  border-radius: 999px;
+  background: var(--danger);
+  color: #fff;
+  font-size: 11px;
+  font-weight: 700;
+}
+
+.item-card-actions {
+  display: flex;
+  gap: 8px;
+  margin-top: 4px;
+}
+
+.empty-state {
+  color: var(--text-muted);
+  padding: 32px;
+  text-align: center;
+}
+
+/* Panels */
+.backdrop {
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,0.5);
+  z-index: 20;
+  animation: fadeIn 0.15s ease-out;
+}
+
+.panel {
+  position: fixed;
+  top: 0;
+  right: 0;
+  height: 100%;
+  width: 380px;
+  max-width: 92vw;
+  background: var(--surface);
+  border-left: 1px solid var(--border);
+  z-index: 21;
+  display: flex;
+  flex-direction: column;
+  padding: 20px;
+  gap: 16px;
+  overflow-y: auto;
+  animation: slideIn 0.2s ease-out;
+}
+
+.panel.wide {
+  width: 640px;
+}
+
+@keyframes slideIn {
+  from { transform: translateX(100%); }
+  to { transform: translateX(0); }
+}
+
+.panel-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+}
+
+.close-btn {
+  background: transparent;
+  border: none;
+  color: var(--text-muted);
+  font-size: 20px;
+  line-height: 1;
+}
+
+.close-btn:hover {
+  color: var(--text);
+}
+
+.cart-item, .order-item, .admin-item-row, .admin-location-row {
+  background: var(--bg);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 12px;
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+
+.cart-item-top, .order-item-top, .admin-row-top {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: 8px;
+}
+
+.qty-controls {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+}
+
+.qty-input {
+  width: 50px;
+  text-align: center;
+}
+
+.cart-total, .order-total {
+  font-weight: 700;
+  font-size: 16px;
+  text-align: right;
+}
+
+.panel-footer {
+  border-top: 1px solid var(--border);
+  padding-top: 12px;
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+}
+
+.stack {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+}
+
+.muted {
+  color: var(--text-muted);
+  font-size: 12px;
+}
+
+/* Item detail */
+.item-detail {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: 12px;
+  padding: 20px;
+  margin-bottom: 24px;
+  animation: fadeIn 0.15s ease-out;
+}
+
+.item-detail-body {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+}
+
+.rating-row {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.review-item {
+  background: var(--bg);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 10px 12px;
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+
+.review-form {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  border-top: 1px solid var(--border);
+  padding-top: 12px;
+}
+
+.review-form-row {
+  display: flex;
+  gap: 8px;
+}
+
+/* Admin */
+.admin-section {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+}
+
+.revenue-box {
+  background: var(--bg);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 12px 16px;
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+}
+
+.warehouse-list {
+  display: flex;
+  gap: 8px;
+  flex-wrap: wrap;
+}
+
+.warehouse-chip {
+  padding: 4px 10px;
+  border-radius: 999px;
+  background: var(--bg);
+  border: 1px solid var(--border);
+  font-size: 13px;
+}
+
+.restock-form {
+  display: flex;
+  gap: 6px;
+  align-items: center;
+}
+
+.loading-screen {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  height: 100vh;
+  gap: 12px;
+  color: var(--text-muted);
+}
+
+.spinner {
+  width: 22px;
+  height: 22px;
+  border: 3px solid var(--border);
+  border-top-color: var(--primary-hover);
+  border-radius: 50%;
+  animation: spin 0.8s linear infinite;
+}
+
+@keyframes spin {
+  to { transform: rotate(360deg); }
+}
+
+.link-btn {
+  background: transparent;
+  border: none;
+  color: var(--accent);
+  text-decoration: underline;
+  font-size: 14px;
+  padding: 4px 0;
+}
+
+/* Recommended */
+.recommended-section {
+  margin-bottom: 28px;
+}
+
+.recommended-list {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(200px, 1fr));
+  gap: 12px;
+}
+
+.recommended-item {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 12px 14px;
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: 8px;
+}
+
+/* Order status + lines */
+.order-status {
+  font-size: 11px;
+  font-weight: 700;
+  text-transform: uppercase;
+  padding: 2px 8px;
+  border-radius: 999px;
+  background: var(--bg);
+  border: 1px solid var(--border);
+  color: var(--text-muted);
+}
+
+.order-status-pending {
+  color: var(--warning);
+  border-color: var(--warning);
+}
+
+.order-status-shipped {
+  color: var(--success);
+  border-color: var(--success);
+}
+
+.order-status-cancelled {
+  color: var(--danger);
+  border-color: var(--danger);
+}
+
+.order-lines {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+
+.order-line {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: 8px;
+  font-size: 13px;
+}
+
+/* Admin: low stock, category totals */
+.low-stock-item {
+  background: var(--bg);
+  border: 1px solid var(--warning);
+  border-radius: 10px;
+  padding: 8px 12px;
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+}
+
+.low-stock-qty {
+  color: var(--warning);
+  font-weight: 700;
+}
+
+.category-row {
+  background: var(--bg);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 8px 12px;
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  gap: 12px;
+  font-size: 13px;
+}
+
+/* Admin: price + transfer forms */
+.price-form,
+.transfer-form {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  flex-wrap: wrap;
+  margin-top: 6px;
+}
+
+.price-input {
+  width: 90px;
+}
+
+.transfer-form select {
+  min-width: 80px;
+}
+
+/* Fulfilment */
+.queue-item {
+  background: var(--bg);
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 12px;
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+}
+
+.queue-line {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  font-size: 13px;
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/main.tsx b/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/main.tsx
new file mode 100644
index 00000000000..9b67590a069
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/client/src/main.tsx
@@ -0,0 +1,10 @@
+import React from "react";
+import ReactDOM from "react-dom/client";
+import App from "./App";
+import "./index.css";
+
+ReactDOM.createRoot(document.getElementById("root")!).render(
+  <React.StrictMode>
+    <App />
+  </React.StrictMode>
+);
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/client/tsconfig.json b/tools/stack-bench/reference-apps/ecommerce/postgres/client/tsconfig.json
new file mode 100644
index 00000000000..d494c5f956c
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/client/tsconfig.json
@@ -0,0 +1,16 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "useDefineForClassFields": true,
+    "lib": ["ES2020", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "skipLibCheck": true,
+    "moduleResolution": "Bundler",
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx",
+    "strict": true
+  },
+  "include": ["src"]
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/client/vite.config.ts b/tools/stack-bench/reference-apps/ecommerce/postgres/client/vite.config.ts
new file mode 100644
index 00000000000..021e4481578
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/client/vite.config.ts
@@ -0,0 +1,23 @@
+import { defineConfig } from "vite";
+import react from "@vitejs/plugin-react";
+
+const apiPort = Number(process.env.API_PORT) || 6301;
+const vitePort = Number(process.env.VITE_PORT) || 6573;
+
+export default defineConfig({
+  plugins: [react()],
+  server: {
+    host: "0.0.0.0",
+    port: vitePort,
+    proxy: {
+      "/api": {
+        target: `http://localhost:${apiPort}`,
+        changeOrigin: true,
+      },
+      "/socket.io": {
+        target: `http://localhost:${apiPort}`,
+        ws: true,
+      },
+    },
+  },
+});
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/package.json b/tools/stack-bench/reference-apps/ecommerce/postgres/package.json
new file mode 100644
index 00000000000..dee506d8114
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/package.json
@@ -0,0 +1,7 @@
+{
+  "name": "stack-bench-ecommerce-postgres-reference",
+  "private": true,
+  "scripts": {
+    "start": "npm --prefix server run start"
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/reference.json b/tools/stack-bench/reference-apps/ecommerce/postgres/reference.json
new file mode 100644
index 00000000000..6468c306c7f
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/reference.json
@@ -0,0 +1,8 @@
+{
+  "schemaVersion": 1,
+  "kind": "node-api",
+  "installDirectories": ["server", "client"],
+  "server": { "directory": "server" },
+  "client": { "directory": "client" },
+  "requiredEnvironment": ["DATABASE_URL", "PORT"]
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/server/drizzle.config.ts b/tools/stack-bench/reference-apps/ecommerce/postgres/server/drizzle.config.ts
new file mode 100644
index 00000000000..dedf3817d03
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/server/drizzle.config.ts
@@ -0,0 +1,11 @@
+import { defineConfig } from 'drizzle-kit';
+import 'dotenv/config';
+
+export default defineConfig({
+  schema: './src/schema.ts',
+  out: './drizzle',
+  dialect: 'postgresql',
+  dbCredentials: {
+    url: process.env.DATABASE_URL!,
+  },
+});
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/server/package-lock.json b/tools/stack-bench/reference-apps/ecommerce/postgres/server/package-lock.json
new file mode 100644
index 00000000000..8ebfa6f48ba
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/server/package-lock.json
@@ -0,0 +1,3047 @@
+{
+  "name": "server",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "server",
+      "version": "1.0.0",
+      "dependencies": {
+        "cookie": "^1.1.1",
+        "cookie-parser": "^1.4.6",
+        "dotenv": "^16.4.5",
+        "drizzle-orm": "^0.45.2",
+        "express": "^4.19.2",
+        "pg": "^8.12.0",
+        "socket.io": "^4.7.5"
+      },
+      "devDependencies": {
+        "@types/cookie": "^0.6.0",
+        "@types/cookie-parser": "^1.4.7",
+        "@types/express": "^4.17.21",
+        "@types/node": "^20.14.9",
+        "@types/pg": "^8.11.6",
+        "drizzle-kit": "^0.31.10",
+        "tsx": "^4.16.2",
+        "typescript": "^5.5.3"
+      }
+    },
+    "node_modules/@drizzle-team/brocli": {
+      "version": "0.10.2",
+      "resolved": "https://registry.npmjs.org/@drizzle-team/brocli/-/brocli-0.10.2.tgz",
+      "integrity": "sha512-z33Il7l5dKjUgGULTqBsQBQwckHh5AbIuxhdsIxDDiZAzBOrZO6q9ogcWC65kU382AfynTfgNumVcNIjuIua6w==",
+      "dev": true,
+      "license": "Apache-2.0"
+    },
+    "node_modules/@esbuild-kit/core-utils": {
+      "version": "3.3.2",
+      "resolved": "https://registry.npmjs.org/@esbuild-kit/core-utils/-/core-utils-3.3.2.tgz",
+      "integrity": "sha512-sPRAnw9CdSsRmEtnsl2WXWdyquogVpB3yZ3dgwJfe8zrOzTsV7cJvmwrKVa+0ma5BoiGJ+BoqkMvawbayKUsqQ==",
+      "deprecated": "Merged into tsx: https://tsx.hirok.io",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "esbuild": "~0.18.20",
+        "source-map-support": "^0.5.21"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/android-arm": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.18.20.tgz",
+      "integrity": "sha512-fyi7TDI/ijKKNZTUJAQqiG5T7YjJXgnzkURqmGj13C6dCqckZBLdl4h7bkhHt/t0WP+zO9/zwroDvANaOqO5Sw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/android-arm64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.18.20.tgz",
+      "integrity": "sha512-Nz4rJcchGDtENV0eMKUNa6L12zz2zBDXuhj/Vjh18zGqB44Bi7MBMSXjgunJgjRhCmKOjnPuZp4Mb6OKqtMHLQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/android-x64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.18.20.tgz",
+      "integrity": "sha512-8GDdlePJA8D6zlZYJV/jnrRAi6rOiNaCC/JclcXpB+KIuvfBN4owLtgzY2bsxnx666XjJx2kDPUmnTtR8qKQUg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/darwin-arm64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.18.20.tgz",
+      "integrity": "sha512-bxRHW5kHU38zS2lPTPOyuyTm+S+eobPUnTNkdJEfAddYgEcll4xkT8DB9d2008DtTbl7uJag2HuE5NZAZgnNEA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/darwin-x64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.18.20.tgz",
+      "integrity": "sha512-pc5gxlMDxzm513qPGbCbDukOdsGtKhfxD1zJKXjCCcU7ju50O7MeAZ8c4krSJcOIJGFR+qx21yMMVYwiQvyTyQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.18.20.tgz",
+      "integrity": "sha512-yqDQHy4QHevpMAaxhhIwYPMv1NECwOvIpGCZkECn8w2WFHXjEwrBn3CeNIYsibZ/iZEUemj++M26W3cNR5h+Tw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/freebsd-x64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.18.20.tgz",
+      "integrity": "sha512-tgWRPPuQsd3RmBZwarGVHZQvtzfEBOreNuxEMKFcd5DaDn2PbBxfwLcj4+aenoh7ctXcbXmOQIn8HI6mCSw5MQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/linux-arm": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.18.20.tgz",
+      "integrity": "sha512-/5bHkMWnq1EgKr1V+Ybz3s1hWXok7mDFUMQ4cG10AfW3wL02PSZi5kFpYKrptDsgb2WAJIvRcDm+qIvXf/apvg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/linux-arm64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.18.20.tgz",
+      "integrity": "sha512-2YbscF+UL7SQAVIpnWvYwM+3LskyDmPhe31pE7/aoTMFKKzIc9lLbyGUpmmb8a8AixOL61sQ/mFh3jEjHYFvdA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/linux-ia32": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.18.20.tgz",
+      "integrity": "sha512-P4etWwq6IsReT0E1KHU40bOnzMHoH73aXp96Fs8TIT6z9Hu8G6+0SHSw9i2isWrD2nbx2qo5yUqACgdfVGx7TA==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/linux-loong64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.18.20.tgz",
+      "integrity": "sha512-nXW8nqBTrOpDLPgPY9uV+/1DjxoQ7DoB2N8eocyq8I9XuqJ7BiAMDMf9n1xZM9TgW0J8zrquIb/A7s3BJv7rjg==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/linux-mips64el": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.18.20.tgz",
+      "integrity": "sha512-d5NeaXZcHp8PzYy5VnXV3VSd2D328Zb+9dEq5HE6bw6+N86JVPExrA6O68OPwobntbNJ0pzCpUFZTo3w0GyetQ==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/linux-ppc64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.18.20.tgz",
+      "integrity": "sha512-WHPyeScRNcmANnLQkq6AfyXRFr5D6N2sKgkFo2FqguP44Nw2eyDlbTdZwd9GYk98DZG9QItIiTlFLHJHjxP3FA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/linux-riscv64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.18.20.tgz",
+      "integrity": "sha512-WSxo6h5ecI5XH34KC7w5veNnKkju3zBRLEQNY7mv5mtBmrP/MjNBCAlsM2u5hDBlS3NGcTQpoBvRzqBcRtpq1A==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/linux-s390x": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.18.20.tgz",
+      "integrity": "sha512-+8231GMs3mAEth6Ja1iK0a1sQ3ohfcpzpRLH8uuc5/KVDFneH6jtAJLFGafpzpMRO6DzJ6AvXKze9LfFMrIHVQ==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/linux-x64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.18.20.tgz",
+      "integrity": "sha512-UYqiqemphJcNsFEskc73jQ7B9jgwjWrSayxawS6UVFZGWrAAtkzjxSqnoclCXxWtfwLdzU+vTpcNYhpn43uP1w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/netbsd-x64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.18.20.tgz",
+      "integrity": "sha512-iO1c++VP6xUBUmltHZoMtCUdPlnPGdBom6IrO4gyKPFFVBKioIImVooR5I83nTew5UOYrk3gIJhbZh8X44y06A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/openbsd-x64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.18.20.tgz",
+      "integrity": "sha512-e5e4YSsuQfX4cxcygw/UCPIEP6wbIL+se3sxPdCiMbFLBWu0eiZOJ7WoD+ptCLrmjZBK1Wk7I6D/I3NglUGOxg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/sunos-x64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.18.20.tgz",
+      "integrity": "sha512-kDbFRFp0YpTQVVrqUd5FTYmWo45zGaXe0X8E1G/LKFC0v8x0vWrhOWSLITcCn63lmZIxfOMXtCfti/RxN/0wnQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/win32-arm64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.18.20.tgz",
+      "integrity": "sha512-ddYFR6ItYgoaq4v4JmQQaAI5s7npztfV4Ag6NrhiaW0RrnOXqBkgwZLofVTlq1daVTQNhtI5oieTvkRPfZrePg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/win32-ia32": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.18.20.tgz",
+      "integrity": "sha512-Wv7QBi3ID/rROT08SABTS7eV4hX26sVduqDOTe1MvGMjNd3EjOz4b7zeexIR62GTIEKrfJXKL9LFxTYgkyeu7g==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/@esbuild/win32-x64": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.18.20.tgz",
+      "integrity": "sha512-kTdfRcSiDfQca/y9QIkng02avJ+NCaQvrMejlsB3RRv5sE9rRoeBPISaZpKxHELzRxZyLvNts1P27W3wV+8geQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@esbuild-kit/core-utils/node_modules/esbuild": {
+      "version": "0.18.20",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.18.20.tgz",
+      "integrity": "sha512-ceqxoedUrcayh7Y7ZX6NdbbDzGROiyVBgC4PriJThBKSVPWnnFHZAkfI1lJT8QFkOwH4qOS2SJkS4wvpGl8BpA==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=12"
+      },
+      "optionalDependencies": {
+        "@esbuild/android-arm": "0.18.20",
+        "@esbuild/android-arm64": "0.18.20",
+        "@esbuild/android-x64": "0.18.20",
+        "@esbuild/darwin-arm64": "0.18.20",
+        "@esbuild/darwin-x64": "0.18.20",
+        "@esbuild/freebsd-arm64": "0.18.20",
+        "@esbuild/freebsd-x64": "0.18.20",
+        "@esbuild/linux-arm": "0.18.20",
+        "@esbuild/linux-arm64": "0.18.20",
+        "@esbuild/linux-ia32": "0.18.20",
+        "@esbuild/linux-loong64": "0.18.20",
+        "@esbuild/linux-mips64el": "0.18.20",
+        "@esbuild/linux-ppc64": "0.18.20",
+        "@esbuild/linux-riscv64": "0.18.20",
+        "@esbuild/linux-s390x": "0.18.20",
+        "@esbuild/linux-x64": "0.18.20",
+        "@esbuild/netbsd-x64": "0.18.20",
+        "@esbuild/openbsd-x64": "0.18.20",
+        "@esbuild/sunos-x64": "0.18.20",
+        "@esbuild/win32-arm64": "0.18.20",
+        "@esbuild/win32-ia32": "0.18.20",
+        "@esbuild/win32-x64": "0.18.20"
+      }
+    },
+    "node_modules/@esbuild-kit/esm-loader": {
+      "version": "2.6.5",
+      "resolved": "https://registry.npmjs.org/@esbuild-kit/esm-loader/-/esm-loader-2.6.5.tgz",
+      "integrity": "sha512-FxEMIkJKnodyA1OaCUoEvbYRkoZlLZ4d/eXFu9Fh8CbBBgP5EmZxrfTRyN0qpXZ4vOvqnE5YdRdcrmUUXuU+dA==",
+      "deprecated": "Merged into tsx: https://tsx.hirok.io",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@esbuild-kit/core-utils": "^3.3.2",
+        "get-tsconfig": "^4.7.0"
+      }
+    },
+    "node_modules/@esbuild/aix-ppc64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.25.12.tgz",
+      "integrity": "sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "aix"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.25.12.tgz",
+      "integrity": "sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.25.12.tgz",
+      "integrity": "sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.25.12.tgz",
+      "integrity": "sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.25.12.tgz",
+      "integrity": "sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.25.12.tgz",
+      "integrity": "sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.25.12.tgz",
+      "integrity": "sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.25.12.tgz",
+      "integrity": "sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.25.12.tgz",
+      "integrity": "sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.25.12.tgz",
+      "integrity": "sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ia32": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.25.12.tgz",
+      "integrity": "sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-loong64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.25.12.tgz",
+      "integrity": "sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-mips64el": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.25.12.tgz",
+      "integrity": "sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ppc64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.25.12.tgz",
+      "integrity": "sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-riscv64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.25.12.tgz",
+      "integrity": "sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-s390x": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.25.12.tgz",
+      "integrity": "sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.25.12.tgz",
+      "integrity": "sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.25.12.tgz",
+      "integrity": "sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.25.12.tgz",
+      "integrity": "sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.25.12.tgz",
+      "integrity": "sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.25.12.tgz",
+      "integrity": "sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openharmony-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.25.12.tgz",
+      "integrity": "sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/sunos-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.25.12.tgz",
+      "integrity": "sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-arm64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.25.12.tgz",
+      "integrity": "sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-ia32": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.25.12.tgz",
+      "integrity": "sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-x64": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.25.12.tgz",
+      "integrity": "sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@socket.io/component-emitter": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/@socket.io/component-emitter/-/component-emitter-3.1.2.tgz",
+      "integrity": "sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA==",
+      "license": "MIT"
+    },
+    "node_modules/@types/body-parser": {
+      "version": "1.19.6",
+      "resolved": "https://registry.npmjs.org/@types/body-parser/-/body-parser-1.19.6.tgz",
+      "integrity": "sha512-HLFeCYgz89uk22N5Qg3dvGvsv46B8GLvKKo1zKG4NybA8U2DiEO3w9lqGg29t/tfLRJpJ6iQxnVw4OnB7MoM9g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/connect": "*",
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/connect": {
+      "version": "3.4.38",
+      "resolved": "https://registry.npmjs.org/@types/connect/-/connect-3.4.38.tgz",
+      "integrity": "sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/cookie": {
+      "version": "0.6.0",
+      "resolved": "https://registry.npmjs.org/@types/cookie/-/cookie-0.6.0.tgz",
+      "integrity": "sha512-4Kh9a6B2bQciAhf7FSuMRRkUWecJgJu9nPnx3yzpsfXX/c50REIqpHY4C82bXP90qrLtXtkDxTZosYO3UpOwlA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/cookie-parser": {
+      "version": "1.4.10",
+      "resolved": "https://registry.npmjs.org/@types/cookie-parser/-/cookie-parser-1.4.10.tgz",
+      "integrity": "sha512-B4xqkqfZ8Wek+rCOeRxsjMS9OgvzebEzzLYw7NHYuvzb7IdxOkI0ZHGgeEBX4PUM7QGVvNSK60T3OvWj3YfBRg==",
+      "dev": true,
+      "license": "MIT",
+      "peerDependencies": {
+        "@types/express": "*"
+      }
+    },
+    "node_modules/@types/cors": {
+      "version": "2.8.19",
+      "resolved": "https://registry.npmjs.org/@types/cors/-/cors-2.8.19.tgz",
+      "integrity": "sha512-mFNylyeyqN93lfe/9CSxOGREz8cpzAhH+E93xJ4xWQf62V8sQ/24reV2nyzUWM6H6Xji+GGHpkbLe7pVoUEskg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/express": {
+      "version": "4.17.25",
+      "resolved": "https://registry.npmjs.org/@types/express/-/express-4.17.25.tgz",
+      "integrity": "sha512-dVd04UKsfpINUnK0yBoYHDF3xu7xVH4BuDotC/xGuycx4CgbP48X/KF/586bcObxT0HENHXEU8Nqtu6NR+eKhw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/body-parser": "*",
+        "@types/express-serve-static-core": "^4.17.33",
+        "@types/qs": "*",
+        "@types/serve-static": "^1"
+      }
+    },
+    "node_modules/@types/express-serve-static-core": {
+      "version": "4.19.9",
+      "resolved": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-4.19.9.tgz",
+      "integrity": "sha512-QP2ESEe/ImWY0HDwNAnK9PvEffUyhLTnWkk7KXzHfyeWAnlrDe1fN77bXl6ia8KT3wPlmA7t9/VPRpnf4Ex9sg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*",
+        "@types/qs": "*",
+        "@types/range-parser": "*",
+        "@types/send": "*"
+      }
+    },
+    "node_modules/@types/http-errors": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/@types/http-errors/-/http-errors-2.0.5.tgz",
+      "integrity": "sha512-r8Tayk8HJnX0FztbZN7oVqGccWgw98T/0neJphO91KkmOzug1KkofZURD4UaD5uH8AqcFLfdPErnBod0u71/qg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/mime": {
+      "version": "1.3.5",
+      "resolved": "https://registry.npmjs.org/@types/mime/-/mime-1.3.5.tgz",
+      "integrity": "sha512-/pyBZWSLD2n0dcHE3hq8s8ZvcETHtEuF+3E7XVt0Ig2nvsVQXdghHVcEkIWjy9A0wKfTn97a/PSDYohKIlnP/w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/node": {
+      "version": "20.19.43",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-20.19.43.tgz",
+      "integrity": "sha512-6oYBAi5ikg4Pl+kGsoYtawUMBT2zZMCvPNF7pVLnHZfd1zf38DRiWn/gT01RYCdUqkv7Fhr+C9ot4/tb+2sVvA==",
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": "~6.21.0"
+      }
+    },
+    "node_modules/@types/pg": {
+      "version": "8.21.0",
+      "resolved": "https://registry.npmjs.org/@types/pg/-/pg-8.21.0.tgz",
+      "integrity": "sha512-AYdtudzabjLZgVgRZmAnU8bAnVUXzuJX2IYHeSIiIHm68olD+LgQYCGWdtcNYnP0uq9c4S4NibVG3Ni7VbKW7Q==",
+      "devOptional": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*",
+        "pg-protocol": "*",
+        "pg-types": "^2.2.0"
+      }
+    },
+    "node_modules/@types/qs": {
+      "version": "6.15.1",
+      "resolved": "https://registry.npmjs.org/@types/qs/-/qs-6.15.1.tgz",
+      "integrity": "sha512-GZHUBZR9hckSUhrxmp1nG6NwdpM9fCunJwyThLW1X3AyHgd9IlHb6VANpQQqDr2o/qQp6McZ3y/IA2rVzKzSbw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/range-parser": {
+      "version": "1.2.7",
+      "resolved": "https://registry.npmjs.org/@types/range-parser/-/range-parser-1.2.7.tgz",
+      "integrity": "sha512-hKormJbkJqzQGhziax5PItDUTMAM9uE2XXQmM37dyd4hVM+5aVl7oVxMVUiVQn2oCQFN/LKCZdvSM0pFRqbSmQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/send": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/@types/send/-/send-1.2.1.tgz",
+      "integrity": "sha512-arsCikDvlU99zl1g69TcAB3mzZPpxgw0UQnaHeC1Nwb015xp8bknZv5rIfri9xTOcMuaVgvabfIRA7PSZVuZIQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/serve-static": {
+      "version": "1.15.10",
+      "resolved": "https://registry.npmjs.org/@types/serve-static/-/serve-static-1.15.10.tgz",
+      "integrity": "sha512-tRs1dB+g8Itk72rlSI2ZrW6vZg0YrLI81iQSTkMmOqnqCaNr/8Ek4VwWcN5vZgCYWbg/JJSGBlUaYGAOP73qBw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/http-errors": "*",
+        "@types/node": "*",
+        "@types/send": "<1"
+      }
+    },
+    "node_modules/@types/serve-static/node_modules/@types/send": {
+      "version": "0.17.6",
+      "resolved": "https://registry.npmjs.org/@types/send/-/send-0.17.6.tgz",
+      "integrity": "sha512-Uqt8rPBE8SY0RK8JB1EzVOIZ32uqy8HwdxCnoCOsYrvnswqmFZ/k+9Ikidlk/ImhsdvBsloHbAlewb2IEBV/Og==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/mime": "^1",
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/ws": {
+      "version": "8.18.1",
+      "resolved": "https://registry.npmjs.org/@types/ws/-/ws-8.18.1.tgz",
+      "integrity": "sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/accepts": {
+      "version": "1.3.8",
+      "resolved": "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz",
+      "integrity": "sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-types": "~2.1.34",
+        "negotiator": "0.6.3"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/array-flatten": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz",
+      "integrity": "sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==",
+      "license": "MIT"
+    },
+    "node_modules/base64id": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/base64id/-/base64id-2.0.0.tgz",
+      "integrity": "sha512-lGe34o6EHj9y3Kts9R4ZYs/Gr+6N7MCaMlIFA3F1R2O5/m7K06AxfSeO5530PEERE6/WyEg3lsuyw4GHlPZHog==",
+      "license": "MIT",
+      "engines": {
+        "node": "^4.5.0 || >= 5.9"
+      }
+    },
+    "node_modules/body-parser": {
+      "version": "1.20.6",
+      "resolved": "https://registry.npmjs.org/body-parser/-/body-parser-1.20.6.tgz",
+      "integrity": "sha512-p5tAzS57i5MV9fZFDj9LeIiTZEufbSe2eDozP+ElheSUq1m74CRq1jI4mYNDdVs9vQztXFLuk/Gd6BWTdwRJ5g==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "content-type": "~1.0.5",
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "destroy": "~1.2.0",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "on-finished": "~2.4.1",
+        "qs": "~6.15.1",
+        "raw-body": "~2.5.3",
+        "type-is": "~1.6.18",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
+      }
+    },
+    "node_modules/body-parser/node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.0.0"
+      }
+    },
+    "node_modules/body-parser/node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
+    "node_modules/buffer-from": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
+      "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/bytes": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz",
+      "integrity": "sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/call-bind-apply-helpers": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
+      "integrity": "sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/call-bound": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
+      "integrity": "sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "get-intrinsic": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/content-disposition": {
+      "version": "0.5.4",
+      "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz",
+      "integrity": "sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==",
+      "license": "MIT",
+      "dependencies": {
+        "safe-buffer": "5.2.1"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/content-type": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz",
+      "integrity": "sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-1.1.1.tgz",
+      "integrity": "sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/cookie-parser": {
+      "version": "1.4.7",
+      "resolved": "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.4.7.tgz",
+      "integrity": "sha512-nGUvgXnotP3BsjiLX2ypbQnWoGUPIIfHQNZkkC668ntrzGWEZVW70HDEB1qnNGMicPje6EttlIgzo51YSwNQGw==",
+      "license": "MIT",
+      "dependencies": {
+        "cookie": "0.7.2",
+        "cookie-signature": "1.0.6"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/cookie-parser/node_modules/cookie": {
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/cookie-signature": {
+      "version": "1.0.6",
+      "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
+      "integrity": "sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==",
+      "license": "MIT"
+    },
+    "node_modules/cors": {
+      "version": "2.8.6",
+      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.6.tgz",
+      "integrity": "sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==",
+      "license": "MIT",
+      "dependencies": {
+        "object-assign": "^4",
+        "vary": "^1"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/debug": {
+      "version": "4.4.3",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
+      "integrity": "sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "^2.1.3"
+      },
+      "engines": {
+        "node": ">=6.0"
+      },
+      "peerDependenciesMeta": {
+        "supports-color": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/depd": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+      "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/destroy": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz",
+      "integrity": "sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8",
+        "npm": "1.2.8000 || >= 1.4.16"
+      }
+    },
+    "node_modules/dotenv": {
+      "version": "16.6.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
+      "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
+    "node_modules/drizzle-kit": {
+      "version": "0.31.10",
+      "resolved": "https://registry.npmjs.org/drizzle-kit/-/drizzle-kit-0.31.10.tgz",
+      "integrity": "sha512-7OZcmQUrdGI+DUNNsKBn1aW8qSoKuTH7d0mYgSP8bAzdFzKoovxEFnoGQp2dVs82EOJeYycqRtciopszwUf8bw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@drizzle-team/brocli": "^0.10.2",
+        "@esbuild-kit/esm-loader": "^2.5.5",
+        "esbuild": "^0.25.4",
+        "tsx": "^4.21.0"
+      },
+      "bin": {
+        "drizzle-kit": "bin.cjs"
+      }
+    },
+    "node_modules/drizzle-orm": {
+      "version": "0.45.2",
+      "resolved": "https://registry.npmjs.org/drizzle-orm/-/drizzle-orm-0.45.2.tgz",
+      "integrity": "sha512-kY0BSaTNYWnoDMVoyY8uxmyHjpJW1geOmBMdSSicKo9CIIWkSxMIj2rkeSR51b8KAPB7m+qysjuHme5nKP+E5Q==",
+      "license": "Apache-2.0",
+      "peerDependencies": {
+        "@aws-sdk/client-rds-data": ">=3",
+        "@cloudflare/workers-types": ">=4",
+        "@electric-sql/pglite": ">=0.2.0",
+        "@libsql/client": ">=0.10.0",
+        "@libsql/client-wasm": ">=0.10.0",
+        "@neondatabase/serverless": ">=0.10.0",
+        "@op-engineering/op-sqlite": ">=2",
+        "@opentelemetry/api": "^1.4.1",
+        "@planetscale/database": ">=1.13",
+        "@prisma/client": "*",
+        "@tidbcloud/serverless": "*",
+        "@types/better-sqlite3": "*",
+        "@types/pg": "*",
+        "@types/sql.js": "*",
+        "@upstash/redis": ">=1.34.7",
+        "@vercel/postgres": ">=0.8.0",
+        "@xata.io/client": "*",
+        "better-sqlite3": ">=7",
+        "bun-types": "*",
+        "expo-sqlite": ">=14.0.0",
+        "gel": ">=2",
+        "knex": "*",
+        "kysely": "*",
+        "mysql2": ">=2",
+        "pg": ">=8",
+        "postgres": ">=3",
+        "sql.js": ">=1",
+        "sqlite3": ">=5"
+      },
+      "peerDependenciesMeta": {
+        "@aws-sdk/client-rds-data": {
+          "optional": true
+        },
+        "@cloudflare/workers-types": {
+          "optional": true
+        },
+        "@electric-sql/pglite": {
+          "optional": true
+        },
+        "@libsql/client": {
+          "optional": true
+        },
+        "@libsql/client-wasm": {
+          "optional": true
+        },
+        "@neondatabase/serverless": {
+          "optional": true
+        },
+        "@op-engineering/op-sqlite": {
+          "optional": true
+        },
+        "@opentelemetry/api": {
+          "optional": true
+        },
+        "@planetscale/database": {
+          "optional": true
+        },
+        "@prisma/client": {
+          "optional": true
+        },
+        "@tidbcloud/serverless": {
+          "optional": true
+        },
+        "@types/better-sqlite3": {
+          "optional": true
+        },
+        "@types/pg": {
+          "optional": true
+        },
+        "@types/sql.js": {
+          "optional": true
+        },
+        "@upstash/redis": {
+          "optional": true
+        },
+        "@vercel/postgres": {
+          "optional": true
+        },
+        "@xata.io/client": {
+          "optional": true
+        },
+        "better-sqlite3": {
+          "optional": true
+        },
+        "bun-types": {
+          "optional": true
+        },
+        "expo-sqlite": {
+          "optional": true
+        },
+        "gel": {
+          "optional": true
+        },
+        "knex": {
+          "optional": true
+        },
+        "kysely": {
+          "optional": true
+        },
+        "mysql2": {
+          "optional": true
+        },
+        "pg": {
+          "optional": true
+        },
+        "postgres": {
+          "optional": true
+        },
+        "prisma": {
+          "optional": true
+        },
+        "sql.js": {
+          "optional": true
+        },
+        "sqlite3": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/dunder-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
+      "integrity": "sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "gopd": "^1.2.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/ee-first": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz",
+      "integrity": "sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==",
+      "license": "MIT"
+    },
+    "node_modules/encodeurl": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/encodeurl/-/encodeurl-2.0.0.tgz",
+      "integrity": "sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/engine.io": {
+      "version": "6.6.9",
+      "resolved": "https://registry.npmjs.org/engine.io/-/engine.io-6.6.9.tgz",
+      "integrity": "sha512-clKkw4C7nJ22mGgoVcCg6V/W/TxdNyIOTr89k2ONZu81qqkddPFDF0LXcbAwhzPD8DjkiRCjzuiO6Y+fkpD4vg==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/cors": "^2.8.12",
+        "@types/node": ">=10.0.0",
+        "@types/ws": "^8.5.12",
+        "accepts": "~1.3.4",
+        "base64id": "2.0.0",
+        "cookie": "~0.7.2",
+        "cors": "~2.8.5",
+        "debug": "~4.4.1",
+        "engine.io-parser": "~5.2.1",
+        "ws": "~8.21.0"
+      },
+      "engines": {
+        "node": ">=10.2.0"
+      }
+    },
+    "node_modules/engine.io-parser": {
+      "version": "5.2.3",
+      "resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-5.2.3.tgz",
+      "integrity": "sha512-HqD3yTBfnBxIrbnM1DoD6Pcq8NECnh8d4As1Qgh0z5Gg3jRRIqijury0CL3ghu/edArpUYiYqQiDUQBIs4np3Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/engine.io/node_modules/cookie": {
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/es-define-property": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
+      "integrity": "sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-errors": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
+      "integrity": "sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/es-object-atoms": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
+      "integrity": "sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/esbuild": {
+      "version": "0.25.12",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.25.12.tgz",
+      "integrity": "sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "@esbuild/aix-ppc64": "0.25.12",
+        "@esbuild/android-arm": "0.25.12",
+        "@esbuild/android-arm64": "0.25.12",
+        "@esbuild/android-x64": "0.25.12",
+        "@esbuild/darwin-arm64": "0.25.12",
+        "@esbuild/darwin-x64": "0.25.12",
+        "@esbuild/freebsd-arm64": "0.25.12",
+        "@esbuild/freebsd-x64": "0.25.12",
+        "@esbuild/linux-arm": "0.25.12",
+        "@esbuild/linux-arm64": "0.25.12",
+        "@esbuild/linux-ia32": "0.25.12",
+        "@esbuild/linux-loong64": "0.25.12",
+        "@esbuild/linux-mips64el": "0.25.12",
+        "@esbuild/linux-ppc64": "0.25.12",
+        "@esbuild/linux-riscv64": "0.25.12",
+        "@esbuild/linux-s390x": "0.25.12",
+        "@esbuild/linux-x64": "0.25.12",
+        "@esbuild/netbsd-arm64": "0.25.12",
+        "@esbuild/netbsd-x64": "0.25.12",
+        "@esbuild/openbsd-arm64": "0.25.12",
+        "@esbuild/openbsd-x64": "0.25.12",
+        "@esbuild/openharmony-arm64": "0.25.12",
+        "@esbuild/sunos-x64": "0.25.12",
+        "@esbuild/win32-arm64": "0.25.12",
+        "@esbuild/win32-ia32": "0.25.12",
+        "@esbuild/win32-x64": "0.25.12"
+      }
+    },
+    "node_modules/escape-html": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz",
+      "integrity": "sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==",
+      "license": "MIT"
+    },
+    "node_modules/etag": {
+      "version": "1.8.1",
+      "resolved": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz",
+      "integrity": "sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/express": {
+      "version": "4.22.2",
+      "resolved": "https://registry.npmjs.org/express/-/express-4.22.2.tgz",
+      "integrity": "sha512-IuL+Elrou2ZvCFHs18/CIzy2Nzvo25nZ1/D2eIZlz7c+QUayAcYoiM2BthCjs+EBHVpjYjcuLDAiCWgeIX3X1Q==",
+      "license": "MIT",
+      "dependencies": {
+        "accepts": "~1.3.8",
+        "array-flatten": "1.1.1",
+        "body-parser": "~1.20.5",
+        "content-disposition": "~0.5.4",
+        "content-type": "~1.0.4",
+        "cookie": "~0.7.1",
+        "cookie-signature": "~1.0.6",
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "etag": "~1.8.1",
+        "finalhandler": "~1.3.1",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.0",
+        "merge-descriptors": "1.0.3",
+        "methods": "~1.1.2",
+        "on-finished": "~2.4.1",
+        "parseurl": "~1.3.3",
+        "path-to-regexp": "~0.1.12",
+        "proxy-addr": "~2.0.7",
+        "qs": "~6.15.1",
+        "range-parser": "~1.2.1",
+        "safe-buffer": "5.2.1",
+        "send": "~0.19.0",
+        "serve-static": "~1.16.2",
+        "setprototypeof": "1.2.0",
+        "statuses": "~2.0.1",
+        "type-is": "~1.6.18",
+        "utils-merge": "1.0.1",
+        "vary": "~1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.10.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/express/node_modules/cookie": {
+      "version": "0.7.2",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.2.tgz",
+      "integrity": "sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/express/node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.0.0"
+      }
+    },
+    "node_modules/express/node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
+    "node_modules/finalhandler": {
+      "version": "1.3.2",
+      "resolved": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.3.2.tgz",
+      "integrity": "sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "2.6.9",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "on-finished": "~2.4.1",
+        "parseurl": "~1.3.3",
+        "statuses": "~2.0.2",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/finalhandler/node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.0.0"
+      }
+    },
+    "node_modules/finalhandler/node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
+    "node_modules/forwarded": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz",
+      "integrity": "sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/fresh": {
+      "version": "0.5.2",
+      "resolved": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz",
+      "integrity": "sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/function-bind": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
+      "integrity": "sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-intrinsic": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
+      "integrity": "sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bind-apply-helpers": "^1.0.2",
+        "es-define-property": "^1.0.1",
+        "es-errors": "^1.3.0",
+        "es-object-atoms": "^1.1.1",
+        "function-bind": "^1.1.2",
+        "get-proto": "^1.0.1",
+        "gopd": "^1.2.0",
+        "has-symbols": "^1.1.0",
+        "hasown": "^2.0.2",
+        "math-intrinsics": "^1.1.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/get-proto": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
+      "integrity": "sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==",
+      "license": "MIT",
+      "dependencies": {
+        "dunder-proto": "^1.0.1",
+        "es-object-atoms": "^1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/get-tsconfig": {
+      "version": "4.14.3",
+      "resolved": "https://registry.npmjs.org/get-tsconfig/-/get-tsconfig-4.14.3.tgz",
+      "integrity": "sha512-++QEw4DIY7WGoukz+/+A/8dGYPT9l9yIadnmSgZ8Rjr3YVSVDipQSO9CdnJo9ePqFqUUqh+wk9uIaoiAwsiPkA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "resolve-pkg-maps": "^1.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/privatenumber/get-tsconfig?sponsor=1"
+      }
+    },
+    "node_modules/gopd": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
+      "integrity": "sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/has-symbols": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
+      "integrity": "sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/hasown": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.4.tgz",
+      "integrity": "sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==",
+      "license": "MIT",
+      "dependencies": {
+        "function-bind": "^1.1.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/http-errors": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/http-errors/-/http-errors-2.0.1.tgz",
+      "integrity": "sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==",
+      "license": "MIT",
+      "dependencies": {
+        "depd": "~2.0.0",
+        "inherits": "~2.0.4",
+        "setprototypeof": "~1.2.0",
+        "statuses": "~2.0.2",
+        "toidentifier": "~1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/iconv-lite": {
+      "version": "0.4.24",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
+      "integrity": "sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==",
+      "license": "MIT",
+      "dependencies": {
+        "safer-buffer": ">= 2.1.2 < 3"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/inherits": {
+      "version": "2.0.4",
+      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
+      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
+      "license": "ISC"
+    },
+    "node_modules/ipaddr.js": {
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz",
+      "integrity": "sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/math-intrinsics": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
+      "integrity": "sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
+    "node_modules/media-typer": {
+      "version": "0.3.0",
+      "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
+      "integrity": "sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/merge-descriptors": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.3.tgz",
+      "integrity": "sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/methods": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
+      "integrity": "sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime": {
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
+      "integrity": "sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==",
+      "license": "MIT",
+      "bin": {
+        "mime": "cli.js"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/mime-db": {
+      "version": "1.52.0",
+      "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
+      "integrity": "sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/mime-types": {
+      "version": "2.1.35",
+      "resolved": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
+      "integrity": "sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==",
+      "license": "MIT",
+      "dependencies": {
+        "mime-db": "1.52.0"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/ms": {
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+      "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
+      "license": "MIT"
+    },
+    "node_modules/negotiator": {
+      "version": "0.6.3",
+      "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz",
+      "integrity": "sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/object-assign": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
+      "integrity": "sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/object-inspect": {
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/on-finished": {
+      "version": "2.4.1",
+      "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz",
+      "integrity": "sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==",
+      "license": "MIT",
+      "dependencies": {
+        "ee-first": "1.1.1"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/parseurl": {
+      "version": "1.3.3",
+      "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
+      "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/path-to-regexp": {
+      "version": "0.1.13",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.13.tgz",
+      "integrity": "sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==",
+      "license": "MIT"
+    },
+    "node_modules/pg": {
+      "version": "8.23.0",
+      "resolved": "https://registry.npmjs.org/pg/-/pg-8.23.0.tgz",
+      "integrity": "sha512-Ip2EQCngowJLGOfCwkFhPXU7/ljlhn6Rxlmy4XYfL2Y+vyRM59+8uR2xqRWKdYmbXmxCFOAmKxBuSUCdF34qLg==",
+      "license": "MIT",
+      "dependencies": {
+        "pg-connection-string": "^2.14.0",
+        "pg-pool": "^3.14.0",
+        "pg-protocol": "^1.16.0",
+        "pg-types": "2.2.0",
+        "pgpass": "1.0.5"
+      },
+      "engines": {
+        "node": ">= 16.0.0"
+      },
+      "optionalDependencies": {
+        "pg-cloudflare": "^1.4.0"
+      },
+      "peerDependencies": {
+        "pg-native": ">=3.0.1"
+      },
+      "peerDependenciesMeta": {
+        "pg-native": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/pg-cloudflare": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/pg-cloudflare/-/pg-cloudflare-1.4.0.tgz",
+      "integrity": "sha512-Vo7z/6rrQYxpNRylp4Tlob2elzbh+N/MOQbxFVWCxS7oEx6jF53GTJFxK2WWpKuBRkmiin4Mt+xofFDjx09R0A==",
+      "license": "MIT",
+      "optional": true
+    },
+    "node_modules/pg-connection-string": {
+      "version": "2.14.0",
+      "resolved": "https://registry.npmjs.org/pg-connection-string/-/pg-connection-string-2.14.0.tgz",
+      "integrity": "sha512-XwWDGcLRGCXAR8F/AM5bG7Q+A3Wm2s6QeEjlOKZLlH3UYcguiqCWKyWXVag5TLTIjR7oOJUY8kcADaZgWPyLeg==",
+      "license": "MIT"
+    },
+    "node_modules/pg-int8": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/pg-int8/-/pg-int8-1.0.1.tgz",
+      "integrity": "sha512-WCtabS6t3c8SkpDBUlb1kjOs7l66xsGdKpIPZsg4wR+B3+u9UAum2odSsF9tnvxg80h4ZxLWMy4pRjOsFIqQpw==",
+      "license": "ISC",
+      "engines": {
+        "node": ">=4.0.0"
+      }
+    },
+    "node_modules/pg-pool": {
+      "version": "3.14.0",
+      "resolved": "https://registry.npmjs.org/pg-pool/-/pg-pool-3.14.0.tgz",
+      "integrity": "sha512-gKtPkFdQPU3DksooVLi9LsjZxrsBUZIpa+7aVx+LV5pNh0KzP4Zleud2po+ConrxbuXGBJ6Hfer6hdgpIBpBaw==",
+      "license": "MIT",
+      "peerDependencies": {
+        "pg": ">=8.0"
+      }
+    },
+    "node_modules/pg-protocol": {
+      "version": "1.16.0",
+      "resolved": "https://registry.npmjs.org/pg-protocol/-/pg-protocol-1.16.0.tgz",
+      "integrity": "sha512-sILXutLVjCLjcDuOmvhX5e2Z4cS5qG/6Bu3VkpFwdf/633ElGLpEh9bgmuI5I4sqKqkifQiGyiCcx1HdtrK7tg==",
+      "license": "MIT"
+    },
+    "node_modules/pg-types": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/pg-types/-/pg-types-2.2.0.tgz",
+      "integrity": "sha512-qTAAlrEsl8s4OiEQY69wDvcMIdQN6wdz5ojQiOy6YRMuynxenON0O5oCpJI6lshc6scgAY8qvJ2On/p+CXY0GA==",
+      "license": "MIT",
+      "dependencies": {
+        "pg-int8": "1.0.1",
+        "postgres-array": "~2.0.0",
+        "postgres-bytea": "~1.0.0",
+        "postgres-date": "~1.0.4",
+        "postgres-interval": "^1.1.0"
+      },
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/pgpass": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/pgpass/-/pgpass-1.0.5.tgz",
+      "integrity": "sha512-FdW9r/jQZhSeohs1Z3sI1yxFQNFvMcnmfuj4WBMUTxOrAyLMaTcE1aAMBiTlbMNaXvBCQuVi0R7hd8udDSP7ug==",
+      "license": "MIT",
+      "dependencies": {
+        "split2": "^4.1.0"
+      }
+    },
+    "node_modules/postgres-array": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/postgres-array/-/postgres-array-2.0.0.tgz",
+      "integrity": "sha512-VpZrUqU5A69eQyW2c5CA1jtLecCsN2U/bD6VilrFDWq5+5UIEVO7nazS3TEcHf1zuPYO/sqGvUvW62g86RXZuA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=4"
+      }
+    },
+    "node_modules/postgres-bytea": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/postgres-bytea/-/postgres-bytea-1.0.1.tgz",
+      "integrity": "sha512-5+5HqXnsZPE65IJZSMkZtURARZelel2oXUEO8rH83VS/hxH5vv1uHquPg5wZs8yMAfdv971IU+kcPUczi7NVBQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/postgres-date": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/postgres-date/-/postgres-date-1.0.7.tgz",
+      "integrity": "sha512-suDmjLVQg78nMK2UZ454hAG+OAW+HQPZ6n++TNDUX+L0+uUlLywnoxJKDou51Zm+zTCjrCl0Nq6J9C5hP9vK/Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/postgres-interval": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/postgres-interval/-/postgres-interval-1.2.0.tgz",
+      "integrity": "sha512-9ZhXKM/rw350N1ovuWHbGxnGh/SNJ4cnxHiM0rxE4VN41wsg8P8zWn9hv/buK00RP4WvlOyr/RBDiptyxVbkZQ==",
+      "license": "MIT",
+      "dependencies": {
+        "xtend": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/proxy-addr": {
+      "version": "2.0.7",
+      "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz",
+      "integrity": "sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==",
+      "license": "MIT",
+      "dependencies": {
+        "forwarded": "0.2.0",
+        "ipaddr.js": "1.9.1"
+      },
+      "engines": {
+        "node": ">= 0.10"
+      }
+    },
+    "node_modules/qs": {
+      "version": "6.15.3",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.3.tgz",
+      "integrity": "sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==",
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "es-define-property": "^1.0.1",
+        "side-channel": "^1.1.1"
+      },
+      "engines": {
+        "node": ">=0.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/range-parser": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
+      "integrity": "sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/raw-body": {
+      "version": "2.5.3",
+      "resolved": "https://registry.npmjs.org/raw-body/-/raw-body-2.5.3.tgz",
+      "integrity": "sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==",
+      "license": "MIT",
+      "dependencies": {
+        "bytes": "~3.1.2",
+        "http-errors": "~2.0.1",
+        "iconv-lite": "~0.4.24",
+        "unpipe": "~1.0.0"
+      },
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/resolve-pkg-maps": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/resolve-pkg-maps/-/resolve-pkg-maps-1.0.0.tgz",
+      "integrity": "sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/privatenumber/resolve-pkg-maps?sponsor=1"
+      }
+    },
+    "node_modules/safe-buffer": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+      "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/safer-buffer": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT"
+    },
+    "node_modules/send": {
+      "version": "0.19.2",
+      "resolved": "https://registry.npmjs.org/send/-/send-0.19.2.tgz",
+      "integrity": "sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "2.6.9",
+        "depd": "2.0.0",
+        "destroy": "1.2.0",
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "etag": "~1.8.1",
+        "fresh": "~0.5.2",
+        "http-errors": "~2.0.1",
+        "mime": "1.6.0",
+        "ms": "2.1.3",
+        "on-finished": "~2.4.1",
+        "range-parser": "~1.2.1",
+        "statuses": "~2.0.2"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/send/node_modules/debug": {
+      "version": "2.6.9",
+      "resolved": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
+      "integrity": "sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==",
+      "license": "MIT",
+      "dependencies": {
+        "ms": "2.0.0"
+      }
+    },
+    "node_modules/send/node_modules/debug/node_modules/ms": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
+      "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==",
+      "license": "MIT"
+    },
+    "node_modules/serve-static": {
+      "version": "1.16.3",
+      "resolved": "https://registry.npmjs.org/serve-static/-/serve-static-1.16.3.tgz",
+      "integrity": "sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==",
+      "license": "MIT",
+      "dependencies": {
+        "encodeurl": "~2.0.0",
+        "escape-html": "~1.0.3",
+        "parseurl": "~1.3.3",
+        "send": "~0.19.1"
+      },
+      "engines": {
+        "node": ">= 0.8.0"
+      }
+    },
+    "node_modules/setprototypeof": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz",
+      "integrity": "sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==",
+      "license": "ISC"
+    },
+    "node_modules/side-channel": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.1.tgz",
+      "integrity": "sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4",
+        "side-channel-list": "^1.0.1",
+        "side-channel-map": "^1.0.1",
+        "side-channel-weakmap": "^1.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-list": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.1.tgz",
+      "integrity": "sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "object-inspect": "^1.13.4"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-map": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
+      "integrity": "sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/side-channel-weakmap": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
+      "integrity": "sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==",
+      "license": "MIT",
+      "dependencies": {
+        "call-bound": "^1.0.2",
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.5",
+        "object-inspect": "^1.13.3",
+        "side-channel-map": "^1.0.1"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/socket.io": {
+      "version": "4.8.3",
+      "resolved": "https://registry.npmjs.org/socket.io/-/socket.io-4.8.3.tgz",
+      "integrity": "sha512-2Dd78bqzzjE6KPkD5fHZmDAKRNe3J15q+YHDrIsy9WEkqttc7GY+kT9OBLSMaPbQaEd0x1BjcmtMtXkfpc+T5A==",
+      "license": "MIT",
+      "dependencies": {
+        "accepts": "~1.3.4",
+        "base64id": "~2.0.0",
+        "cors": "~2.8.5",
+        "debug": "~4.4.1",
+        "engine.io": "~6.6.0",
+        "socket.io-adapter": "~2.5.2",
+        "socket.io-parser": "~4.2.4"
+      },
+      "engines": {
+        "node": ">=10.2.0"
+      }
+    },
+    "node_modules/socket.io-adapter": {
+      "version": "2.5.8",
+      "resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-2.5.8.tgz",
+      "integrity": "sha512-6Oy52pbg+kvdCVvjcN+FnY7BvxZ7cIHNScbvztT/It5d0vbwoJoVZmF2gjJmnV0/4WlXRfG15zc45ySk9Ah8bw==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "~4.4.1",
+        "ws": "~8.21.0"
+      }
+    },
+    "node_modules/socket.io-parser": {
+      "version": "4.2.7",
+      "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-4.2.7.tgz",
+      "integrity": "sha512-IH/iSeO9T6gz1KkFleGDWkG9N3dl4jXVYUtMhIqH10Md0ttMer8nUNWiP1DKuNrybD2xBrixLJdCC9J6ECoYkg==",
+      "license": "MIT",
+      "dependencies": {
+        "@socket.io/component-emitter": "~3.1.0",
+        "debug": "~4.4.1"
+      },
+      "engines": {
+        "node": ">=10.0.0"
+      }
+    },
+    "node_modules/source-map": {
+      "version": "0.6.1",
+      "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz",
+      "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/source-map-support": {
+      "version": "0.5.21",
+      "resolved": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz",
+      "integrity": "sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "buffer-from": "^1.0.0",
+        "source-map": "^0.6.0"
+      }
+    },
+    "node_modules/split2": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/split2/-/split2-4.2.0.tgz",
+      "integrity": "sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==",
+      "license": "ISC",
+      "engines": {
+        "node": ">= 10.x"
+      }
+    },
+    "node_modules/statuses": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+      "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/toidentifier": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz",
+      "integrity": "sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.6"
+      }
+    },
+    "node_modules/tsx": {
+      "version": "4.23.11",
+      "resolved": "https://registry.npmjs.org/tsx/-/tsx-4.23.11.tgz",
+      "integrity": "sha512-Ry2oTEUnhBdeEdWIztY8kf3/nBGnPnjMLVGL0YfdRXMORuPER5NlKmayqxtxRxwB1xBN+RivRaJfe7PM1rtiyw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "esbuild": "~0.28.0"
+      },
+      "bin": {
+        "tsx": "dist/cli.mjs"
+      },
+      "engines": {
+        "node": ">=18.0.0"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/aix-ppc64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.2.tgz",
+      "integrity": "sha512-XExcO+dvLKvVtNTibSTBej1NCAbaGhWn9Ww1ZPx80qsahhPFe/8jgWP0IchNe0F3HwkU7n8ejhH8bjonqht8mQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "aix"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/android-arm": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.2.tgz",
+      "integrity": "sha512-kXXoiPVVGQcnIYGOeaovwOURpniDBpSq4A03qkQ+BMQqtGG6HYap3xne9C1O1yo4TR3qxlCX5IqqmX6fFo2Lqg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/android-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.2.tgz",
+      "integrity": "sha512-5YfKeeI8qWfBZIX+u2xZC3Zlb3Os/gLS2sbEKM+I4ZOcsWmHS2WLysCcQZDAFRslDUU5Oiq44gf6PYN1vGwG5A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/android-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.2.tgz",
+      "integrity": "sha512-O387ite7SzUyCcy3JQX4P4bLtEA7bLLkx+esve5JHnyYfNTxcVpXZo9jhdB0lTKN44gztELTdU7nS8Nr16Fs1Q==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/darwin-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.2.tgz",
+      "integrity": "sha512-n4KqkOQrraxHJcgjM1RvwbigfQKIKJVpM7xp+KsxiyUSrRdIXnt73VhrPAx0fV44hgfmIVKjxMN9J1t5jySVkw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/darwin-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.2.tgz",
+      "integrity": "sha512-uq6suIWYP37qzGddBKPw5QEQPi6HiLGsO7UmkpfyaYNQ3D+rN6w6WfwH+nuqcGXWvawGwxOEroO4YGnFh95azw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.2.tgz",
+      "integrity": "sha512-n+I0BTSRIoy+d6RPKnEVwql5UwBJolytvY4mAOIEJorKlqgPII8ix6slVVrfZ5Tnj7glIZvloylbB/EJPMWEXw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/freebsd-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.2.tgz",
+      "integrity": "sha512-78XJTJkvPs0kz2w61301PJjXl4g7q3JqiYMZ/M/yVI73EHBrCRTgkhu9oqG7vPqq+a/yadEW8aD+agKlk5xrmg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-arm": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.2.tgz",
+      "integrity": "sha512-XlDnu2q5yoqems+xay6wSAcg9DDD7K9RLKZEBOMZm3ckNpJBvOX20tSfby8KfrrhINDyv9V2YVZKY/SpoGJI8w==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.2.tgz",
+      "integrity": "sha512-pW4AC0P3it8c7do9MVM4p51FzHzdM/TZrerurgRcHJ2WTa1VQ1CIq18xncfpBJw4ojkiZZrKW2yIBWBP92j6Ug==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-ia32": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.2.tgz",
+      "integrity": "sha512-CYbnj78HsIeA+DhgUKgFCfvNsTHFhMMrinUrMZpDXJXKN8T3XViTZ/+wtHeVxEWY8ewSzTFN+nRmSwO2tZaLUQ==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-loong64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.2.tgz",
+      "integrity": "sha512-buwkd8nsph4R+ajRvw0qM5Hja/TXQow3ptzWO2EbG/cqcIkHloRrdlBtQlshyYGTNFvfkfJ5tpPLVkY4DtsPfQ==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-mips64el": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.2.tgz",
+      "integrity": "sha512-ZVykbDyk7519VwiNb9Lcj9m8XM6v5V9uKPvrEMkkEedVewf+0itkhahp4HDpgERXhwLRpWFypsGbG/J8s0QjJA==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-ppc64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.2.tgz",
+      "integrity": "sha512-CAXl+Dtd9UUuJd8pKKdwh6MLm3MUMiqMPmhZ3tTSXPqfyQ3vDl6R5hZdZ/kYojK4ofXtdfSv1tFq8XzWx3heNQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-riscv64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.2.tgz",
+      "integrity": "sha512-GeXCej4IQtU1B+QlDV8W/RRvbzI3O/Stss+/bCXv4lZls5WGRtu2a+3JkA3i4qIUlMXpcHebWpF8AkJhATowuA==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-s390x": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.2.tgz",
+      "integrity": "sha512-3H1weTYZPxt/WOhByszQZybS9w5lKzUn1FDMsgEChbHWQwHYQQRfBxgCcZvPhjHfKyJjIievvMmEUawJrdY9Dg==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/linux-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.2.tgz",
+      "integrity": "sha512-4xTZr1FUmSoQW4XIWmit3tzQrUTZM+N3P0XV8xROKYF50XfI7xeO90+1bZvNwxIufQ9hDQVRJH5YhgPVF8A/HQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/netbsd-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.2.tgz",
+      "integrity": "sha512-sSATRjPeDBg3pdgHoQfoYBob11Kk1FGa9lui5RIHZCoCkJa9QKlvl3/vKz2usCmYYjs7ymJR/2Nnsqe+Hjt5nw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/netbsd-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.2.tgz",
+      "integrity": "sha512-lqnzCV+mM0gIADaKihiCg6ifgfU2L3h5E33rNQBN1Y4MaVGnzryzmvvf7UHxprpQdE8hpqLolJ9Rl+SkIRDpyw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/openbsd-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.2.tgz",
+      "integrity": "sha512-AL2qJILH7lNjrDmCQDvdxMfAUIv8KMNZOvrwAQ8i8//ntL9FflhOyMJ8OZSMBb8/AWXe3/5v5S20y3zCoZWKoQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/openbsd-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.2.tgz",
+      "integrity": "sha512-QtiuPytchRyC4rwUKhexJdQKvDuZ6hWloi3igqPQNUJCS1/v9EiO3UTOXR6A3FoMo4fnAKbWJdqaIwhOzh8qEw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/openharmony-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.2.tgz",
+      "integrity": "sha512-WkhYDmpTjLvGlScA1rwjRUmhl4k8oXR3cIbtqWmELgU/dFeHHlEllxDvdWcNJV9rbzCexB5vz8gtNewWLgCT7Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/sunos-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.2.tgz",
+      "integrity": "sha512-GPMSkTOtMnv2U2F8gxe4Io6qmVs+YKyp832Etqqxr0hFngmXQ3rzwytelm3GIn7T4VviRUlf3sOgBOiTdvaf7g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/win32-arm64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.2.tgz",
+      "integrity": "sha512-PIhhEkE9uPBleRBrQEJpUn7MBnibZzbGzYWPmY3x+YoVg/95zbjB4CxPPOQ8l5tYYM4mMaCthF8/1DIfBQQyWQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/win32-ia32": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.2.tgz",
+      "integrity": "sha512-YmJbfTlvU7Sdn9BB+4PRES4oB6pxgS37MAONj+hBr/cpXS1aBPKXxNnDbu+QCWPj0o9dgyxeq79g6c5P8KeuYA==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/@esbuild/win32-x64": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.2.tgz",
+      "integrity": "sha512-5ebpxr3nWMzrL/rnUI755Jkuee0bHL/Gq0WTF9lvcpv73wAp5eu8MfBUgWK9bhWvZjj7yX8etf/8tI8Ney695g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/tsx/node_modules/esbuild": {
+      "version": "0.28.2",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.2.tgz",
+      "integrity": "sha512-HKVLS8dvII+xoKW9kmqxbRKrnWEXfJJr/FZhhJmiqIB0e053QNYFqOBouTMO/k5sID4MvCiUCvv8b9M4h32wIA==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "@esbuild/aix-ppc64": "0.28.2",
+        "@esbuild/android-arm": "0.28.2",
+        "@esbuild/android-arm64": "0.28.2",
+        "@esbuild/android-x64": "0.28.2",
+        "@esbuild/darwin-arm64": "0.28.2",
+        "@esbuild/darwin-x64": "0.28.2",
+        "@esbuild/freebsd-arm64": "0.28.2",
+        "@esbuild/freebsd-x64": "0.28.2",
+        "@esbuild/linux-arm": "0.28.2",
+        "@esbuild/linux-arm64": "0.28.2",
+        "@esbuild/linux-ia32": "0.28.2",
+        "@esbuild/linux-loong64": "0.28.2",
+        "@esbuild/linux-mips64el": "0.28.2",
+        "@esbuild/linux-ppc64": "0.28.2",
+        "@esbuild/linux-riscv64": "0.28.2",
+        "@esbuild/linux-s390x": "0.28.2",
+        "@esbuild/linux-x64": "0.28.2",
+        "@esbuild/netbsd-arm64": "0.28.2",
+        "@esbuild/netbsd-x64": "0.28.2",
+        "@esbuild/openbsd-arm64": "0.28.2",
+        "@esbuild/openbsd-x64": "0.28.2",
+        "@esbuild/openharmony-arm64": "0.28.2",
+        "@esbuild/sunos-x64": "0.28.2",
+        "@esbuild/win32-arm64": "0.28.2",
+        "@esbuild/win32-ia32": "0.28.2",
+        "@esbuild/win32-x64": "0.28.2"
+      }
+    },
+    "node_modules/type-is": {
+      "version": "1.6.18",
+      "resolved": "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz",
+      "integrity": "sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==",
+      "license": "MIT",
+      "dependencies": {
+        "media-typer": "0.3.0",
+        "mime-types": "~2.1.24"
+      },
+      "engines": {
+        "node": ">= 0.6"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/undici-types": {
+      "version": "6.21.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
+      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
+      "license": "MIT"
+    },
+    "node_modules/unpipe": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz",
+      "integrity": "sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/utils-merge": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz",
+      "integrity": "sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4.0"
+      }
+    },
+    "node_modules/vary": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz",
+      "integrity": "sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/ws": {
+      "version": "8.21.3",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.3.tgz",
+      "integrity": "sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      },
+      "peerDependencies": {
+        "bufferutil": "^4.0.1",
+        "utf-8-validate": ">=5.0.2"
+      },
+      "peerDependenciesMeta": {
+        "bufferutil": {
+          "optional": true
+        },
+        "utf-8-validate": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/xtend": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
+      "integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.4"
+      }
+    }
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/server/package.json b/tools/stack-bench/reference-apps/ecommerce/postgres/server/package.json
new file mode 100644
index 00000000000..8b3d3cc76d1
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/server/package.json
@@ -0,0 +1,30 @@
+{
+  "name": "server",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "scripts": {
+    "dev": "tsx watch src/index.ts",
+    "start": "tsx src/index.ts",
+    "build": "tsc --noEmit"
+  },
+  "dependencies": {
+    "cookie": "^1.1.1",
+    "cookie-parser": "^1.4.6",
+    "dotenv": "^16.4.5",
+    "drizzle-orm": "^0.45.2",
+    "express": "^4.19.2",
+    "pg": "^8.12.0",
+    "socket.io": "^4.7.5"
+  },
+  "devDependencies": {
+    "@types/cookie": "^0.6.0",
+    "@types/cookie-parser": "^1.4.7",
+    "@types/express": "^4.17.21",
+    "@types/node": "^20.14.9",
+    "@types/pg": "^8.11.6",
+    "drizzle-kit": "^0.31.10",
+    "tsx": "^4.16.2",
+    "typescript": "^5.5.3"
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/auth.ts b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/auth.ts
new file mode 100644
index 00000000000..d94cbb8ab52
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/auth.ts
@@ -0,0 +1,21 @@
+import crypto from "node:crypto";
+
+export function hashPassword(password: string): string {
+  const salt = crypto.randomBytes(16).toString("hex");
+  const derived = crypto.scryptSync(password, salt, 64).toString("hex");
+  return `${salt}:${derived}`;
+}
+
+export function verifyPassword(password: string, stored: string): boolean {
+  const [salt, derived] = stored.split(":");
+  if (!salt || !derived) return false;
+  const candidate = crypto.scryptSync(password, salt, 64).toString("hex");
+  const a = Buffer.from(candidate, "hex");
+  const b = Buffer.from(derived, "hex");
+  if (a.length !== b.length) return false;
+  return crypto.timingSafeEqual(a, b);
+}
+
+export function newToken(): string {
+  return crypto.randomBytes(32).toString("hex");
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/db.ts b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/db.ts
new file mode 100644
index 00000000000..20491fb911c
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/db.ts
@@ -0,0 +1,14 @@
+import "dotenv/config";
+import pg from "pg";
+import { drizzle } from "drizzle-orm/node-postgres";
+import * as schema from "./schema.js";
+
+const { Pool } = pg;
+const connectionString = process.env.DATABASE_URL;
+if (!connectionString) throw new Error("DATABASE_URL is required");
+
+export const pool = new Pool({
+  connectionString,
+});
+
+export const db = drizzle(pool, { schema });
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/index.ts b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/index.ts
new file mode 100644
index 00000000000..6578a69ce7f
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/index.ts
@@ -0,0 +1,1038 @@
+import "dotenv/config";
+import { join } from "node:path";
+import { fileURLToPath } from "node:url";
+import express from "express";
+import type { Request, Response, NextFunction } from "express";
+import http from "node:http";
+import cookieParser from "cookie-parser";
+import { parse as parseCookie } from "cookie";
+import { Server as SocketIOServer } from "socket.io";
+import { sql, eq, and } from "drizzle-orm";
+import { db, pool } from "./db.js";
+import { item, warehouse, stock, account, session, cart, cartItem, orders, orderItem, review } from "./schema.js";
+import { hashPassword, verifyPassword, newToken } from "./auth.js";
+import { seed } from "./seed.js";
+import {
+  attachProgressionSocket,
+  checkoutReservedCart,
+  emitProgression,
+  initializeProgressionSchema,
+  processImmediateRestock,
+  processProgressionTimers,
+  registerProgression,
+  removeReservedCartItem,
+  reserveCartItem,
+  setReservedCartQuantity,
+  syncProgressionSocket,
+} from "./progression.js";
+
+const PORT = Number(process.env.PORT) || 6301;
+
+const app = express();
+app.use(express.json());
+app.use((req, res, next) => {
+  if (["GET", "HEAD", "OPTIONS"].includes(req.method) || !req.headers.origin) return next();
+  return URL.parse(req.headers.origin)?.host === req.headers.host
+    ? next() : res.status(403).json({ error: "cross-origin request refused" });
+});
+app.use(cookieParser());
+
+type AccountInfo = { id: number; username: string; isAdmin: boolean; isStaff: boolean };
+
+declare global {
+  // eslint-disable-next-line @typescript-eslint/no-namespace
+  namespace Express {
+    interface Request {
+      account?: AccountInfo | null;
+    }
+  }
+}
+
+async function loadAccountFromToken(token: string | undefined): Promise<AccountInfo | null> {
+  if (!token) return null;
+  const rows = await db
+    .select({ id: account.id, username: account.username, isAdmin: account.isAdmin, isStaff: account.isStaff })
+    .from(session)
+    .innerJoin(account, eq(account.id, session.accountId))
+    .where(eq(session.id, token))
+    .limit(1);
+  if (rows.length === 0) return null;
+  return rows[0];
+}
+
+app.use(async (req: Request, _res: Response, next: NextFunction) => {
+  const token = req.cookies?.sid as string | undefined;
+  req.account = await loadAccountFromToken(token);
+  next();
+});
+
+function requireAuth(req: Request, res: Response, next: NextFunction) {
+  if (!req.account) return res.status(401).json({ error: "sign in required" });
+  next();
+}
+
+function requireAdmin(req: Request, res: Response, next: NextFunction) {
+  if (!req.account) return res.status(401).json({ error: "sign in required" });
+  if (!req.account.isAdmin) return res.status(403).json({ error: "admin only" });
+  next();
+}
+
+function requireStaff(req: Request, res: Response, next: NextFunction) {
+  if (!req.account) return res.status(401).json({ error: "sign in required" });
+  if (!req.account.isAdmin && !req.account.isStaff) return res.status(403).json({ error: "staff only" });
+  next();
+}
+
+function asyncHandler(fn: (req: Request, res: Response) => Promise<void>) {
+  return (req: Request, res: Response, next: NextFunction) => {
+    fn(req, res).catch(next);
+  };
+}
+
+// ---------- shared query builders ----------
+
+async function buildCatalog() {
+  const result = await pool.query(`
+    SELECT i.id, i.name, i.price, i.category, i.variants, COALESCE(SUM(s.quantity), 0)::int AS stock,
+           COALESCE(p.cnt, 0)::int AS purchase_count
+    FROM item i
+    LEFT JOIN stock s ON s.item_id = i.id
+    LEFT JOIN (
+      SELECT oi.item_id, SUM(oi.quantity) AS cnt
+      FROM order_item oi
+      JOIN orders o ON o.id = oi.order_id
+      WHERE oi.returned = false AND o.status != 'cancelled'
+      GROUP BY oi.item_id
+    ) p ON p.item_id = i.id
+    GROUP BY i.id, p.cnt
+    ORDER BY purchase_count DESC, i.name ASC
+  `);
+  return result.rows.map((r) => ({
+    id: r.id,
+    name: r.name,
+    price: Number(r.price),
+    category: r.category,
+    variants: r.variants,
+    stock: r.stock,
+    purchaseCount: r.purchase_count,
+  }));
+}
+
+async function buildAdminState() {
+  const itemsResult = await pool.query(`
+    SELECT i.id, i.name, i.price, i.category, COALESCE(SUM(s.quantity), 0)::int AS stock
+    FROM item i
+    LEFT JOIN stock s ON s.item_id = i.id
+    GROUP BY i.id
+    ORDER BY i.name ASC
+  `);
+  const warehousesResult = await pool.query(`
+    SELECT w.id, w.name, COALESCE(SUM(s.quantity), 0)::int AS total
+    FROM warehouse w
+    LEFT JOIN stock s ON s.warehouse_id = w.id
+    GROUP BY w.id
+    ORDER BY w.id ASC
+  `);
+  const locationsResult = await pool.query(`
+    SELECT s.item_id, i.name AS item_name, s.warehouse_id, w.name AS warehouse_name, s.quantity
+    FROM stock s
+    JOIN item i ON i.id = s.item_id
+    JOIN warehouse w ON w.id = s.warehouse_id
+    ORDER BY i.name ASC, w.name ASC
+  `);
+  const revenueResult = await pool.query(`
+    SELECT
+      COALESCE((SELECT SUM(total - refund_total) FROM orders WHERE status != 'cancelled'), 0)
+      - COALESCE((
+          SELECT SUM(oi.quantity * oi.price)
+          FROM order_item oi JOIN orders o ON o.id = oi.order_id
+          WHERE oi.returned = true AND o.status != 'cancelled'
+        ), 0) AS revenue
+  `);
+  const categoryResult = await pool.query(`
+    SELECT i.category,
+           COALESCE(SUM(CASE WHEN oi.returned = false AND o.status != 'cancelled' THEN oi.quantity ELSE 0 END), 0)::int AS units,
+           COALESCE(SUM(CASE WHEN oi.returned = false AND o.status != 'cancelled' THEN oi.quantity * oi.price ELSE 0 END), 0) AS revenue
+    FROM item i
+    LEFT JOIN order_item oi ON oi.item_id = i.id
+    LEFT JOIN orders o ON o.id = oi.order_id
+    GROUP BY i.category
+    ORDER BY i.category ASC
+  `);
+  const queueDepthResult = await pool.query(`SELECT COUNT(*)::int AS n FROM orders WHERE status = 'pending'`);
+
+  const items = itemsResult.rows.map((r) => ({
+    id: r.id,
+    name: r.name,
+    price: Number(r.price),
+    category: r.category,
+    stock: r.stock,
+  }));
+
+  const lowStock = items
+    .filter((it) => it.stock <= 10)
+    .slice()
+    .sort((a, b) => a.stock - b.stock)
+    .map((it) => ({ id: it.id, name: it.name, stock: it.stock }));
+
+  return {
+    items,
+    warehouses: warehousesResult.rows.map((r) => ({ id: r.id, name: r.name, total: r.total })),
+    locations: locationsResult.rows.map((r) => ({
+      itemId: r.item_id,
+      itemName: r.item_name,
+      warehouseId: r.warehouse_id,
+      warehouseName: r.warehouse_name,
+      quantity: r.quantity,
+    })),
+    revenue: Number(revenueResult.rows[0].revenue),
+    lowStock,
+    categoryTotals: categoryResult.rows.map((r) => ({
+      category: r.category,
+      units: r.units,
+      revenue: Number(r.revenue),
+    })),
+    queueDepth: queueDepthResult.rows[0].n,
+  };
+}
+
+async function buildFulfilmentQueue() {
+  const ordersResult = await pool.query(
+    `SELECT id, created_at FROM orders WHERE status = 'pending' ORDER BY created_at ASC, id ASC`
+  );
+  const out = [];
+  for (const o of ordersResult.rows) {
+    const lines = await pool.query(
+      `SELECT oi.item_name, oi.quantity, w.name AS warehouse_name
+       FROM order_item oi JOIN warehouse w ON w.id = oi.warehouse_id
+       WHERE oi.order_id = $1
+       ORDER BY oi.id ASC`,
+      [o.id]
+    );
+    out.push({
+      id: o.id,
+      createdAt: o.created_at,
+      items: lines.rows.map((l) => ({ name: l.item_name, quantity: l.quantity, warehouse: l.warehouse_name })),
+    });
+  }
+  return out;
+}
+
+async function buildRecommended(accountId: number | null) {
+  const catalog = await buildCatalog();
+  if (accountId == null) {
+    return catalog.slice(0, 10);
+  }
+  const categoriesResult = await pool.query(
+    `SELECT DISTINCT i.category
+     FROM order_item oi JOIN orders o ON o.id = oi.order_id JOIN item i ON i.id = oi.item_id
+     WHERE o.account_id = $1 AND oi.returned = false AND o.status != 'cancelled'`,
+    [accountId]
+  );
+  const categories = new Set(categoriesResult.rows.map((r) => r.category));
+  if (categories.size === 0) return [];
+  const cartItemsResult = await pool.query(
+    `SELECT ci.item_id FROM cart c JOIN cart_item ci ON ci.cart_id = c.id WHERE c.account_id = $1`,
+    [accountId]
+  );
+  const inCart = new Set(cartItemsResult.rows.map((r) => r.item_id));
+  return catalog.filter((i) => categories.has(i.category) && !inCart.has(i.id)).slice(0, 10);
+}
+
+async function buildItemReviews(itemId: number) {
+  const rows = await pool.query(
+    `SELECT r.id, r.account_id, a.username, r.rating, r.comment, r.created_at
+     FROM review r JOIN account a ON a.id = r.account_id
+     WHERE r.item_id = $1
+     ORDER BY r.created_at DESC`,
+    [itemId]
+  );
+  const reviews = rows.rows.map((r) => ({
+    id: r.id,
+    accountId: r.account_id,
+    username: r.username,
+    rating: r.rating,
+    comment: r.comment,
+    createdAt: r.created_at,
+  }));
+  const average =
+    reviews.length > 0 ? reviews.reduce((sum, r) => sum + r.rating, 0) / reviews.length : null;
+  return { reviews, average };
+}
+
+async function buildCartState(accountId: number) {
+  const cartMeta = await pool.query(`SELECT expired_at FROM cart WHERE account_id = $1`, [accountId]);
+  const rows = await pool.query(
+    `SELECT ci.item_id, i.name, i.price, ci.quantity, ci.expired, ci.reserved_until,
+            EXTRACT(EPOCH FROM (ci.reserved_until - now()))::int AS reservation_seconds
+     FROM cart c
+     JOIN cart_item ci ON ci.cart_id = c.id
+     JOIN item i ON i.id = ci.item_id
+     WHERE c.account_id = $1
+     ORDER BY ci.id ASC`,
+    [accountId]
+  );
+  const items = rows.rows.map((r) => ({
+    itemId: r.item_id,
+    name: r.name,
+    price: Number(r.price),
+    quantity: r.quantity,
+    expired: r.expired,
+    reservationSeconds: Math.max(0, r.reservation_seconds ?? 0),
+    lineTotal: Number(r.price) * r.quantity,
+  }));
+  const total = items.reduce((sum, i) => sum + i.lineTotal, 0);
+  return { items, total, expiredAt: cartMeta.rows[0]?.expired_at ?? null };
+}
+
+async function buildOrders(accountId: number) {
+  const ordersResult = await pool.query(
+    `SELECT id, created_at, total, status, discount, payment_status, payment_amount, refund_total
+     FROM orders WHERE account_id = $1 ORDER BY created_at DESC`,
+    [accountId]
+  );
+  const out = [];
+  for (const o of ordersResult.rows) {
+    const linesResult = await pool.query(
+      `SELECT id, item_id, item_name, quantity, price, returned FROM order_item WHERE order_id = $1 ORDER BY id ASC`,
+      [o.id]
+    );
+    out.push({
+      id: o.id,
+      createdAt: o.created_at,
+      total: Number(o.total),
+      status: o.status,
+      discount: Number(o.discount),
+      paymentStatus: o.payment_status,
+      paymentAmount: Number(o.payment_amount),
+      refundTotal: Number(o.refund_total),
+      items: linesResult.rows.map((l) => ({
+        orderItemId: l.id,
+        itemId: l.item_id,
+        name: l.item_name,
+        quantity: l.quantity,
+        price: Number(l.price),
+        returned: l.returned,
+      })),
+    });
+  }
+  return out;
+}
+
+async function getOrCreateCart(accountId: number): Promise<number> {
+  const result = await pool.query(
+    `INSERT INTO cart (account_id) VALUES ($1)
+     ON CONFLICT (account_id) DO UPDATE SET account_id = excluded.account_id
+     RETURNING id`,
+    [accountId]
+  );
+  return result.rows[0].id;
+}
+
+// ---------- broadcasting ----------
+
+let io: SocketIOServer;
+let lastCatalogJson = "";
+let lastAdminJson = "";
+
+async function broadcastCatalog() {
+  const catalog = await buildCatalog();
+  const json = JSON.stringify(catalog);
+  if (json !== lastCatalogJson) {
+    lastCatalogJson = json;
+    io.emit("items:update", { items: catalog });
+    io.to("visitors").emit("recommended:update", {
+      items: catalog.slice(0, 10),
+    });
+  }
+  const adminState = await buildAdminState();
+  const adminJson = JSON.stringify(adminState);
+  if (adminJson !== lastAdminJson) {
+    lastAdminJson = adminJson;
+    io.to("admin").emit("admin:update", adminState);
+  }
+}
+
+async function broadcastCart(accountId: number) {
+  const state = await buildCartState(accountId);
+  io.to(`account:${accountId}`).emit("cart:update", state);
+}
+
+async function broadcastOrders(accountId: number) {
+  const ordersList = await buildOrders(accountId);
+  io.to(`account:${accountId}`).emit("orders:update", { orders: ordersList });
+}
+
+async function broadcastFulfilment() {
+  const queue = await buildFulfilmentQueue();
+  io.to("fulfilment").emit("queue:update", { queue, depth: queue.length });
+}
+
+async function broadcastRecommended(accountId: number) {
+  const list = await buildRecommended(accountId);
+  io.to(`account:${accountId}`).emit("recommended:update", { items: list });
+  await emitProgression();
+}
+
+// ---------- auth routes ----------
+
+app.post(
+  "/api/auth/signup",
+  asyncHandler(async (req, res) => {
+    const { username, password } = req.body ?? {};
+    if (typeof username !== "string" || typeof password !== "string" || !username.trim() || !password) {
+      res.status(400).json({ error: "username and password are required" });
+      return;
+    }
+    const existing = await db.select({ id: account.id }).from(account).where(eq(account.username, username)).limit(1);
+    if (existing.length > 0) {
+      res.status(409).json({ error: "username already taken" });
+      return;
+    }
+    const passwordHash = hashPassword(password);
+    const [created] = await db
+      .insert(account)
+      .values({ username, passwordHash, isAdmin: false, isStaff: false })
+      .returning({ id: account.id, username: account.username, isAdmin: account.isAdmin, isStaff: account.isStaff });
+    await getOrCreateCart(created.id);
+    const token = newToken();
+    await db.insert(session).values({ id: token, accountId: created.id });
+    res.cookie("sid", token, { httpOnly: true, sameSite: "lax", path: "/" });
+    res.json({ account: created });
+  })
+);
+
+app.post(
+  "/api/auth/signin",
+  asyncHandler(async (req, res) => {
+    const { username, password } = req.body ?? {};
+    if (typeof username !== "string" || typeof password !== "string") {
+      res.status(400).json({ error: "username and password are required" });
+      return;
+    }
+    const rows = await db.select().from(account).where(eq(account.username, username)).limit(1);
+    if (rows.length === 0 || !verifyPassword(password, rows[0].passwordHash)) {
+      res.status(401).json({ error: "invalid username or password" });
+      return;
+    }
+    const acc = rows[0];
+    const token = newToken();
+    await db.insert(session).values({ id: token, accountId: acc.id });
+    res.cookie("sid", token, { httpOnly: true, sameSite: "lax", path: "/" });
+    res.json({ account: { id: acc.id, username: acc.username, isAdmin: acc.isAdmin, isStaff: acc.isStaff } });
+  })
+);
+
+app.post(
+  "/api/auth/signout",
+  asyncHandler(async (req, res) => {
+    const token = req.cookies?.sid as string | undefined;
+    if (token) {
+      await db.delete(session).where(eq(session.id, token));
+    }
+    res.clearCookie("sid", { path: "/" });
+    res.json({ ok: true });
+  })
+);
+
+app.get(
+  "/api/me",
+  asyncHandler(async (req, res) => {
+    res.json({ account: req.account ?? null });
+  })
+);
+
+// ---------- catalog routes ----------
+
+app.get(
+  "/api/items",
+  asyncHandler(async (_req, res) => {
+    const catalog = await buildCatalog();
+    res.json({ items: catalog });
+  })
+);
+
+app.get(
+  "/api/items/:id",
+  asyncHandler(async (req, res) => {
+    const itemId = Number(req.params.id);
+    const rows = await db.select().from(item).where(eq(item.id, itemId)).limit(1);
+    if (rows.length === 0) {
+      res.status(404).json({ error: "item not found" });
+      return;
+    }
+    const stockRows = await pool.query(`SELECT COALESCE(SUM(quantity),0)::int AS stock FROM stock WHERE item_id = $1`, [itemId]);
+    const { reviews, average } = await buildItemReviews(itemId);
+    res.json({
+      item: {
+        id: rows[0].id,
+        name: rows[0].name,
+        price: Number(rows[0].price),
+        category: rows[0].category,
+        stock: stockRows.rows[0].stock,
+      },
+      reviews,
+      average,
+    });
+  })
+);
+
+app.post(
+  "/api/items/:id/buy",
+  requireAuth,
+  asyncHandler(async (req, res) => {
+    const itemId = Number(req.params.id);
+    const accountId = req.account!.id;
+
+    const client = await pool.connect();
+    try {
+      await client.query("BEGIN");
+      const decrement = await client.query(
+        `WITH target AS (
+           SELECT item_id, warehouse_id FROM stock
+           WHERE item_id = $1 AND quantity > 0
+           ORDER BY warehouse_id
+           FOR UPDATE
+           LIMIT 1
+         )
+         UPDATE stock s SET quantity = quantity - 1
+         FROM target t
+         WHERE s.item_id = t.item_id AND s.warehouse_id = t.warehouse_id
+         RETURNING s.item_id, s.warehouse_id`,
+        [itemId]
+      );
+      if (decrement.rowCount === 0) {
+        await client.query("ROLLBACK");
+        res.status(409).json({ error: "item is out of stock" });
+        return;
+      }
+      const warehouseId = decrement.rows[0].warehouse_id;
+      const itemRow = await client.query(`SELECT name, price FROM item WHERE id = $1`, [itemId]);
+      if (itemRow.rowCount === 0) {
+        await client.query("ROLLBACK");
+        res.status(404).json({ error: "item not found" });
+        return;
+      }
+      const { name, price } = itemRow.rows[0];
+      const orderResult = await client.query(
+        `INSERT INTO orders (account_id, total, status, payment_status, payment_amount)
+         VALUES ($1, $2, 'pending', 'paid', $2) RETURNING id`,
+        [accountId, price]
+      );
+      const orderId = orderResult.rows[0].id;
+      await client.query(
+        `INSERT INTO order_item (order_id, item_id, item_name, quantity, price, warehouse_id) VALUES ($1, $2, $3, 1, $4, $5)`,
+        [orderId, itemId, name, price, warehouseId]
+      );
+      await client.query("COMMIT");
+    } catch (err) {
+      await client.query("ROLLBACK");
+      throw err;
+    } finally {
+      client.release();
+    }
+
+    await broadcastCatalog();
+    await broadcastOrders(accountId);
+    await broadcastFulfilment();
+    await broadcastRecommended(accountId);
+    res.json({ ok: true });
+  })
+);
+
+// ---------- cart routes ----------
+
+app.get(
+  "/api/cart",
+  requireAuth,
+  asyncHandler(async (req, res) => {
+    const state = await buildCartState(req.account!.id);
+    res.json(state);
+  })
+);
+
+app.post(
+  "/api/cart",
+  requireAuth,
+  asyncHandler(async (req, res) => {
+    const { itemId, quantity } = req.body ?? {};
+    const qty = Number(quantity) || 1;
+    if (!Number.isInteger(itemId) || qty < 1) {
+      res.status(400).json({ error: "invalid item or quantity" });
+      return;
+    }
+    const accountId = req.account!.id;
+    try {
+      await reserveCartItem(accountId, itemId, qty);
+    } catch (error) {
+      res.status(409).json({ error: error instanceof Error ? error.message : "could not reserve stock" });
+      return;
+    }
+    const state = await buildCartState(accountId);
+    io.to(`account:${accountId}`).emit("cart:update", state);
+    await broadcastCatalog();
+    await broadcastRecommended(accountId);
+    res.json(state);
+  })
+);
+
+app.patch(
+  "/api/cart/:itemId",
+  requireAuth,
+  asyncHandler(async (req, res) => {
+    const itemId = Number(req.params.itemId);
+    const { quantity } = req.body ?? {};
+    if (!Number.isInteger(quantity) || quantity < 1) {
+      res.status(400).json({ error: "quantity must be at least 1" });
+      return;
+    }
+    const accountId = req.account!.id;
+    try { await setReservedCartQuantity(accountId, itemId, quantity); }
+    catch (error) { res.status(409).json({ error: error instanceof Error ? error.message : "could not reserve stock" }); return; }
+    const state = await buildCartState(accountId);
+    io.to(`account:${accountId}`).emit("cart:update", state);
+    await broadcastCatalog();
+    res.json(state);
+  })
+);
+
+app.delete(
+  "/api/cart/:itemId",
+  requireAuth,
+  asyncHandler(async (req, res) => {
+    const itemId = Number(req.params.itemId);
+    const accountId = req.account!.id;
+    await removeReservedCartItem(accountId, itemId);
+    const state = await buildCartState(accountId);
+    io.to(`account:${accountId}`).emit("cart:update", state);
+    await broadcastCatalog();
+    await broadcastRecommended(accountId);
+    res.json(state);
+  })
+);
+
+app.post(
+  "/api/checkout",
+  requireAuth,
+  asyncHandler(async (req, res) => {
+    const accountId = req.account!.id;
+    try {
+      await checkoutReservedCart(accountId);
+    } catch (error) {
+      res.status(409).json({ error: error instanceof Error ? error.message : "checkout failed" });
+      return;
+    }
+
+    await broadcastCatalog();
+    await broadcastCart(accountId);
+    await broadcastOrders(accountId);
+    await broadcastFulfilment();
+    await broadcastRecommended(accountId);
+    res.json({ ok: true });
+  })
+);
+
+app.get(
+  "/api/orders",
+  requireAuth,
+  asyncHandler(async (req, res) => {
+    const ordersList = await buildOrders(req.account!.id);
+    res.json({ orders: ordersList });
+  })
+);
+
+app.post(
+  "/api/orders/:id/cancel",
+  requireAuth,
+  asyncHandler(async (req, res) => {
+    const orderId = Number(req.params.id);
+    const accountId = req.account!.id;
+    const client = await pool.connect();
+    try {
+      await client.query("BEGIN");
+      const orderRow = await client.query(`SELECT id, account_id, status FROM orders WHERE id = $1 FOR UPDATE`, [orderId]);
+      if (orderRow.rowCount === 0 || orderRow.rows[0].account_id !== accountId) {
+        await client.query("ROLLBACK");
+        res.status(404).json({ error: "order not found" });
+        return;
+      }
+      if (orderRow.rows[0].status !== "pending") {
+        await client.query("ROLLBACK");
+        res.status(409).json({ error: "order has already shipped" });
+        return;
+      }
+      const lines = await client.query(`SELECT item_id, quantity, warehouse_id FROM order_item WHERE order_id = $1`, [orderId]);
+      for (const l of lines.rows) {
+        await client.query(
+          `INSERT INTO stock (item_id, warehouse_id, quantity) VALUES ($1, $2, $3)
+           ON CONFLICT (item_id, warehouse_id) DO UPDATE SET quantity = stock.quantity + excluded.quantity`,
+          [l.item_id, l.warehouse_id, l.quantity]
+        );
+      }
+      await client.query(`UPDATE orders SET status = 'cancelled' WHERE id = $1`, [orderId]);
+      await client.query("COMMIT");
+    } catch (err) {
+      await client.query("ROLLBACK");
+      throw err;
+    } finally {
+      client.release();
+    }
+
+    await broadcastCatalog();
+    await broadcastOrders(accountId);
+    await broadcastFulfilment();
+    await broadcastRecommended(accountId);
+    res.json({ ok: true });
+  })
+);
+
+app.post(
+  "/api/orders/:id/return",
+  requireAuth,
+  asyncHandler(async (req, res) => {
+    const orderId = Number(req.params.id);
+    const accountId = req.account!.id;
+    const { orderItemId } = req.body ?? {};
+    if (!Number.isInteger(orderItemId)) {
+      res.status(400).json({ error: "invalid item" });
+      return;
+    }
+    const client = await pool.connect();
+    try {
+      await client.query("BEGIN");
+      const orderRow = await client.query(`SELECT id, account_id, status FROM orders WHERE id = $1 FOR UPDATE`, [orderId]);
+      if (orderRow.rowCount === 0 || orderRow.rows[0].account_id !== accountId) {
+        await client.query("ROLLBACK");
+        res.status(404).json({ error: "order not found" });
+        return;
+      }
+      if (!['shipped', 'delivered'].includes(orderRow.rows[0].status)) {
+        await client.query("ROLLBACK");
+        res.status(409).json({ error: "order has not shipped" });
+        return;
+      }
+      const lineRow = await client.query(
+        `SELECT id, item_id, quantity, warehouse_id, returned FROM order_item WHERE id = $1 AND order_id = $2 FOR UPDATE`,
+        [orderItemId, orderId]
+      );
+      if (lineRow.rowCount === 0) {
+        await client.query("ROLLBACK");
+        res.status(404).json({ error: "item not found in order" });
+        return;
+      }
+      if (lineRow.rows[0].returned) {
+        await client.query("ROLLBACK");
+        res.status(409).json({ error: "item already returned" });
+        return;
+      }
+      const { item_id, quantity, warehouse_id } = lineRow.rows[0];
+      await client.query(
+        `INSERT INTO stock (item_id, warehouse_id, quantity) VALUES ($1, $2, $3)
+         ON CONFLICT (item_id, warehouse_id) DO UPDATE SET quantity = stock.quantity + excluded.quantity`,
+        [item_id, warehouse_id, quantity]
+      );
+      await client.query(`UPDATE order_item SET returned = true WHERE id = $1`, [orderItemId]);
+      await client.query("COMMIT");
+    } catch (err) {
+      await client.query("ROLLBACK");
+      throw err;
+    } finally {
+      client.release();
+    }
+
+    await broadcastCatalog();
+    await broadcastOrders(accountId);
+    await broadcastRecommended(accountId);
+    res.json({ ok: true });
+  })
+);
+
+// ---------- reviews ----------
+
+app.post(
+  "/api/items/:id/reviews",
+  requireAuth,
+  asyncHandler(async (req, res) => {
+    const itemId = Number(req.params.id);
+    const accountId = req.account!.id;
+    const { rating, comment } = req.body ?? {};
+    const ratingNum = Number(rating);
+    if (!Number.isInteger(ratingNum) || ratingNum < 1 || ratingNum > 5) {
+      res.status(400).json({ error: "rating must be between 1 and 5" });
+      return;
+    }
+    const purchased = await pool.query(
+      `SELECT 1 FROM order_item oi JOIN orders o ON o.id = oi.order_id
+       WHERE o.account_id = $1 AND oi.item_id = $2 LIMIT 1`,
+      [accountId, itemId]
+    );
+    if (purchased.rowCount === 0) {
+      res.status(403).json({ error: "you can only review items you have purchased" });
+      return;
+    }
+    await pool.query(
+      `INSERT INTO review (item_id, account_id, rating, comment) VALUES ($1, $2, $3, $4)
+       ON CONFLICT (item_id, account_id) DO UPDATE SET rating = excluded.rating, comment = excluded.comment`,
+      [itemId, accountId, ratingNum, String(comment ?? "")]
+    );
+    const { reviews, average } = await buildItemReviews(itemId);
+    io.emit("review:update", { itemId, reviews, average });
+    res.json({ reviews, average });
+  })
+);
+
+// ---------- fulfilment (staff + admin) ----------
+
+app.get(
+  "/api/fulfilment/queue",
+  requireStaff,
+  asyncHandler(async (_req, res) => {
+    const queue = await buildFulfilmentQueue();
+    res.json({ queue, depth: queue.length });
+  })
+);
+
+app.post(
+  "/api/fulfilment/ship",
+  requireStaff,
+  asyncHandler(async (req, res) => {
+    const { orderId } = req.body ?? {};
+    if (!Number.isInteger(orderId)) {
+      res.status(400).json({ error: "invalid order" });
+      return;
+    }
+    const result = await pool.query(
+      `UPDATE orders SET status = 'shipped', shipped_at = now()
+       WHERE id = $1 AND status = 'pending' RETURNING account_id`,
+      [orderId]
+    );
+    if (result.rowCount === 0) {
+      res.status(409).json({ error: "order is not waiting to ship" });
+      return;
+    }
+    const accountId = result.rows[0].account_id;
+    await broadcastFulfilment();
+    await broadcastOrders(accountId);
+    await broadcastCatalog();
+    const queue = await buildFulfilmentQueue();
+    res.json({ queue, depth: queue.length });
+  })
+);
+
+// ---------- recommendations ----------
+
+app.get(
+  "/api/recommended",
+  asyncHandler(async (req, res) => {
+    const list = await buildRecommended(req.account ? req.account.id : null);
+    res.json({ items: list });
+  })
+);
+
+// ---------- admin ----------
+
+app.get(
+  "/api/admin/state",
+  requireAdmin,
+  asyncHandler(async (_req, res) => {
+    const state = await buildAdminState();
+    res.json(state);
+  })
+);
+
+app.post(
+  "/api/admin/restock",
+  requireAdmin,
+  asyncHandler(async (req, res) => {
+    const { itemId, warehouseId, quantity } = req.body ?? {};
+    const qty = Number(quantity);
+    if (!Number.isInteger(itemId) || !Number.isInteger(warehouseId) || !Number.isInteger(qty) || qty < 1) {
+      res.status(400).json({ error: "invalid restock request" });
+      return;
+    }
+    await pool.query(
+      `INSERT INTO stock (item_id, warehouse_id, quantity) VALUES ($1, $2, $3)
+       ON CONFLICT (item_id, warehouse_id) DO UPDATE SET quantity = stock.quantity + excluded.quantity`,
+      [itemId, warehouseId, qty]
+    );
+    await processImmediateRestock(itemId);
+    await broadcastCatalog();
+    const state = await buildAdminState();
+    res.json(state);
+  })
+);
+
+app.post(
+  "/api/admin/transfer",
+  requireAdmin,
+  asyncHandler(async (req, res) => {
+    const { itemId, fromWarehouseId, toWarehouseId, quantity } = req.body ?? {};
+    const qty = Number(quantity);
+    if (
+      !Number.isInteger(itemId) ||
+      !Number.isInteger(fromWarehouseId) ||
+      !Number.isInteger(toWarehouseId) ||
+      !Number.isInteger(qty) ||
+      qty < 1 ||
+      fromWarehouseId === toWarehouseId
+    ) {
+      res.status(400).json({ error: "invalid transfer request" });
+      return;
+    }
+    const client = await pool.connect();
+    try {
+      await client.query("BEGIN");
+      // Lock both warehouse rows in a fixed order (regardless of transfer
+      // direction) so two transfers of the same item between the same two
+      // warehouses can never deadlock waiting on each other's locks.
+      const orderedWarehouseIds = [fromWarehouseId, toWarehouseId].sort((a, b) => a - b);
+      const lockedRows = await client.query(
+        `SELECT warehouse_id, quantity FROM stock WHERE item_id = $1 AND warehouse_id = ANY($2::int[]) ORDER BY warehouse_id ASC FOR UPDATE`,
+        [itemId, orderedWarehouseIds]
+      );
+      const fromRow = lockedRows.rows.find((r) => r.warehouse_id === fromWarehouseId);
+      const available = fromRow ? fromRow.quantity : 0;
+      if (available < qty) {
+        await client.query("ROLLBACK");
+        res.status(409).json({ error: "warehouse does not have enough stock to transfer" });
+        return;
+      }
+      await client.query(`UPDATE stock SET quantity = quantity - $1 WHERE item_id = $2 AND warehouse_id = $3`, [
+        qty,
+        itemId,
+        fromWarehouseId,
+      ]);
+      await client.query(
+        `INSERT INTO stock (item_id, warehouse_id, quantity) VALUES ($1, $2, $3)
+         ON CONFLICT (item_id, warehouse_id) DO UPDATE SET quantity = stock.quantity + excluded.quantity`,
+        [itemId, toWarehouseId, qty]
+      );
+      await client.query("COMMIT");
+    } catch (err) {
+      await client.query("ROLLBACK");
+      throw err;
+    } finally {
+      client.release();
+    }
+
+    await broadcastCatalog();
+    const state = await buildAdminState();
+    res.json(state);
+  })
+);
+
+app.post(
+  "/api/admin/price",
+  requireAdmin,
+  asyncHandler(async (req, res) => {
+    const { itemId, price } = req.body ?? {};
+    const priceNum = Number(price);
+    if (!Number.isInteger(itemId) || !Number.isFinite(priceNum) || priceNum <= 0) {
+      res.status(400).json({ error: "invalid price" });
+      return;
+    }
+    await pool.query(`UPDATE item SET price = $1 WHERE id = $2`, [priceNum.toFixed(2), itemId]);
+    await broadcastCatalog();
+    const cartAccounts = await pool.query(
+      `SELECT DISTINCT c.account_id FROM cart c JOIN cart_item ci ON ci.cart_id = c.id WHERE ci.item_id = $1`,
+      [itemId]
+    );
+    for (const row of cartAccounts.rows) {
+      await broadcastCart(row.account_id);
+    }
+    const state = await buildAdminState();
+    res.json(state);
+  })
+);
+
+registerProgression(app, {
+  pool,
+  requireAuth,
+  requireAdmin,
+  requireStaff,
+  broadcastCatalog,
+  broadcastCart,
+  broadcastOrders,
+  broadcastFulfilment,
+  buildRecommended,
+});
+
+const clientDist = join(fileURLToPath(new URL(".", import.meta.url)), "../../client/dist");
+app.use(express.static(clientDist));
+app.get(/^\/(?!api(?:\/|$)).*/, (_req, res) => res.sendFile(join(clientDist, "index.html")));
+
+// ---------- error handler ----------
+
+app.use((err: unknown, _req: Request, res: Response, _next: NextFunction) => {
+  console.error(err);
+  res.status(500).json({ error: "internal server error" });
+});
+
+// ---------- server + sockets ----------
+
+const httpServer = http.createServer(app);
+io = new SocketIOServer(httpServer, {
+  path: "/socket.io",
+});
+attachProgressionSocket(io);
+
+io.on("connection", async (socket) => {
+  const cookieHeader = socket.request.headers.cookie;
+  const cookies = cookieHeader ? parseCookie(cookieHeader) : {};
+  const token = cookies["sid"];
+  const acc = await loadAccountFromToken(token);
+
+  if (acc) {
+    socket.join(`account:${acc.id}`);
+    if (acc.isAdmin) socket.join("admin");
+    if (acc.isAdmin || acc.isStaff) socket.join("fulfilment");
+  } else {
+    socket.join("visitors");
+  }
+
+  try {
+    await syncProgressionSocket(socket, acc);
+    const catalog = await buildCatalog();
+    socket.emit("items:update", { items: catalog });
+    if (acc) {
+      const cartState = await buildCartState(acc.id);
+      socket.emit("cart:update", cartState);
+      const ordersList = await buildOrders(acc.id);
+      socket.emit("orders:update", { orders: ordersList });
+      if (acc.isAdmin) {
+        const adminState = await buildAdminState();
+        socket.emit("admin:update", adminState);
+      }
+      if (acc.isAdmin || acc.isStaff) {
+        const queue = await buildFulfilmentQueue();
+        socket.emit("queue:update", { queue, depth: queue.length });
+      }
+      const recommended = await buildRecommended(acc.id);
+      socket.emit("recommended:update", { items: recommended });
+    } else {
+      const recommended = await buildRecommended(null);
+      socket.emit("recommended:update", { items: recommended });
+    }
+  } catch (err) {
+    console.error("socket initial sync failed", err);
+  }
+});
+
+const POLL_INTERVAL_MS = 2000;
+setInterval(() => {
+  broadcastCatalog().catch((err) => console.error("poll broadcast failed", err));
+  processProgressionTimers().catch((err) => console.error("progression timer failed", err));
+}, POLL_INTERVAL_MS);
+
+async function main() {
+  await initializeProgressionSchema(pool);
+  await seed();
+  httpServer.listen(PORT, () => {
+    console.log(`PostgreSQL Shop server listening on port ${PORT}`);
+  });
+}
+
+main().catch((err) => {
+  console.error("fatal startup error", err);
+  process.exit(1);
+});
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/progression.ts b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/progression.ts
new file mode 100644
index 00000000000..0b0174aa15c
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/progression.ts
@@ -0,0 +1,896 @@
+import type { Request, RequestHandler, Response } from "express";
+import type { Express } from "express";
+import type { Pool, PoolClient } from "pg";
+import type { Server as SocketIOServer, Socket } from "socket.io";
+
+export type ProgressionAccount = {
+  id: number;
+  username: string;
+  isAdmin: boolean;
+  isStaff: boolean;
+};
+
+type AppRequest = Request & { account?: ProgressionAccount | null };
+
+type Dependencies = {
+  pool: Pool;
+  requireAuth: RequestHandler;
+  requireAdmin: RequestHandler;
+  requireStaff: RequestHandler;
+  broadcastCatalog: () => Promise<void>;
+  broadcastCart: (accountId: number) => Promise<void>;
+  broadcastOrders: (accountId: number) => Promise<void>;
+  broadcastFulfilment: () => Promise<void>;
+  buildRecommended: (accountId: number | null) => Promise<Array<{ id: number; name: string }>>;
+};
+
+let deps: Dependencies;
+let io: SocketIOServer | null = null;
+
+const asyncRoute = (fn: (req: AppRequest, res: Response) => Promise<void>): RequestHandler =>
+  (req, res, next) => void fn(req as AppRequest, res).catch(next);
+
+export async function initializeProgressionSchema(pool: Pool) {
+  await pool.query(`
+    CREATE TABLE IF NOT EXISTS promotion (
+      id serial PRIMARY KEY,
+      code text NOT NULL UNIQUE,
+      discount_percent numeric(5,2) NOT NULL,
+      start_at timestamptz NOT NULL,
+      end_at timestamptz NOT NULL,
+      redemption_limit integer NOT NULL,
+      redemptions integer NOT NULL DEFAULT 0,
+      revenue numeric(12,2) NOT NULL DEFAULT 0,
+      created_by integer REFERENCES account(id),
+      created_at timestamptz NOT NULL DEFAULT now()
+    );
+    ALTER TABLE account ADD COLUMN IF NOT EXISTS profile_name text NOT NULL DEFAULT '';
+    ALTER TABLE account ADD COLUMN IF NOT EXISTS profile_address text NOT NULL DEFAULT '';
+    ALTER TABLE account ADD COLUMN IF NOT EXISTS staff_role text NOT NULL DEFAULT '';
+    ALTER TABLE account ADD COLUMN IF NOT EXISTS notify_order boolean NOT NULL DEFAULT false;
+    ALTER TABLE account ADD COLUMN IF NOT EXISTS notify_stock boolean NOT NULL DEFAULT false;
+    ALTER TABLE item ADD COLUMN IF NOT EXISTS variants text[] NOT NULL DEFAULT '{}';
+    ALTER TABLE cart ADD COLUMN IF NOT EXISTS last_activity timestamptz NOT NULL DEFAULT now();
+    ALTER TABLE cart ADD COLUMN IF NOT EXISTS expired_at timestamptz;
+    ALTER TABLE cart ADD COLUMN IF NOT EXISTS promotion_id integer REFERENCES promotion(id);
+    ALTER TABLE cart_item ADD COLUMN IF NOT EXISTS reserved_until timestamptz;
+    ALTER TABLE cart_item ADD COLUMN IF NOT EXISTS expired boolean NOT NULL DEFAULT false;
+    CREATE TABLE IF NOT EXISTS cart_reservation_allocation (
+      cart_item_id integer NOT NULL REFERENCES cart_item(id) ON DELETE CASCADE,
+      warehouse_id integer NOT NULL REFERENCES warehouse(id),
+      quantity integer NOT NULL,
+      PRIMARY KEY (cart_item_id, warehouse_id)
+    );
+    ALTER TABLE orders ADD COLUMN IF NOT EXISTS shipped_at timestamptz;
+    ALTER TABLE orders ADD COLUMN IF NOT EXISTS delivered_at timestamptz;
+    ALTER TABLE orders ADD COLUMN IF NOT EXISTS promotion_id integer REFERENCES promotion(id);
+    ALTER TABLE orders ADD COLUMN IF NOT EXISTS discount numeric(12,2) NOT NULL DEFAULT 0;
+    ALTER TABLE orders ADD COLUMN IF NOT EXISTS payment_status text NOT NULL DEFAULT 'paid';
+    ALTER TABLE orders ADD COLUMN IF NOT EXISTS payment_amount numeric(12,2) NOT NULL DEFAULT 0;
+    ALTER TABLE orders ADD COLUMN IF NOT EXISTS refund_total numeric(12,2) NOT NULL DEFAULT 0;
+
+    CREATE TABLE IF NOT EXISTS support_case (
+      id serial PRIMARY KEY,
+      account_id integer REFERENCES account(id),
+      email text NOT NULL,
+      subject text NOT NULL,
+      message text NOT NULL,
+      reference text NOT NULL UNIQUE,
+      assignee text NOT NULL DEFAULT '',
+      priority text NOT NULL DEFAULT 'normal',
+      status text NOT NULL DEFAULT 'new',
+      order_id integer REFERENCES orders(id),
+      refund_total numeric(12,2) NOT NULL DEFAULT 0,
+      created_at timestamptz NOT NULL DEFAULT now(),
+      updated_at timestamptz NOT NULL DEFAULT now()
+    );
+    CREATE TABLE IF NOT EXISTS support_reply (
+      id serial PRIMARY KEY,
+      case_id integer NOT NULL REFERENCES support_case(id) ON DELETE CASCADE,
+      account_id integer NOT NULL REFERENCES account(id),
+      message text NOT NULL,
+      created_at timestamptz NOT NULL DEFAULT now()
+    );
+    CREATE TABLE IF NOT EXISTS notification (
+      id serial PRIMARY KEY,
+      account_id integer NOT NULL REFERENCES account(id) ON DELETE CASCADE,
+      kind text NOT NULL,
+      subject_key text NOT NULL,
+      message text NOT NULL,
+      read boolean NOT NULL DEFAULT false,
+      created_at timestamptz NOT NULL DEFAULT now(),
+      UNIQUE (account_id, kind, subject_key)
+    );
+    CREATE TABLE IF NOT EXISTS stock_alert_request (
+      account_id integer NOT NULL REFERENCES account(id) ON DELETE CASCADE,
+      item_id integer NOT NULL REFERENCES item(id) ON DELETE CASCADE,
+      fulfilled boolean NOT NULL DEFAULT false,
+      created_at timestamptz NOT NULL DEFAULT now(),
+      PRIMARY KEY (account_id, item_id)
+    );
+    CREATE TABLE IF NOT EXISTS scheduled_restock (
+      id serial PRIMARY KEY,
+      item_id integer NOT NULL REFERENCES item(id),
+      warehouse_id integer NOT NULL REFERENCES warehouse(id),
+      quantity integer NOT NULL,
+      due_at timestamptz NOT NULL,
+      cancelled boolean NOT NULL DEFAULT false,
+      applied boolean NOT NULL DEFAULT false,
+      automatic boolean NOT NULL DEFAULT false,
+      created_by integer REFERENCES account(id),
+      created_at timestamptz NOT NULL DEFAULT now()
+    );
+    CREATE TABLE IF NOT EXISTS stock_ledger (
+      id serial PRIMARY KEY,
+      item_id integer NOT NULL REFERENCES item(id),
+      warehouse_id integer NOT NULL REFERENCES warehouse(id),
+      quantity integer NOT NULL,
+      source text NOT NULL,
+      created_at timestamptz NOT NULL DEFAULT now()
+    );
+    CREATE TABLE IF NOT EXISTS staff_activity (
+      id serial PRIMARY KEY,
+      account_id integer NOT NULL REFERENCES account(id),
+      action text NOT NULL,
+      subject text NOT NULL,
+      created_at timestamptz NOT NULL DEFAULT now()
+    );
+    CREATE TABLE IF NOT EXISTS reorder_rule (
+      id serial PRIMARY KEY,
+      item_id integer NOT NULL UNIQUE REFERENCES item(id),
+      threshold integer NOT NULL,
+      quantity integer NOT NULL,
+      enabled boolean NOT NULL DEFAULT true,
+      created_by integer NOT NULL REFERENCES account(id),
+      created_at timestamptz NOT NULL DEFAULT now()
+    );
+    CREATE TABLE IF NOT EXISTS expired_cart (
+      id serial PRIMARY KEY,
+      account_id integer NOT NULL REFERENCES account(id) ON DELETE CASCADE,
+      items jsonb NOT NULL,
+      restored boolean NOT NULL DEFAULT false,
+      expired_at timestamptz NOT NULL DEFAULT now()
+    );
+    CREATE TABLE IF NOT EXISTS recommendation_dismissal (
+      account_id integer NOT NULL REFERENCES account(id) ON DELETE CASCADE,
+      item_id integer NOT NULL REFERENCES item(id) ON DELETE CASCADE,
+      created_at timestamptz NOT NULL DEFAULT now(),
+      PRIMARY KEY (account_id, item_id)
+    );
+    CREATE TABLE IF NOT EXISTS refund_entry (
+      id serial PRIMARY KEY,
+      order_id integer NOT NULL REFERENCES orders(id),
+      support_case_id integer NOT NULL REFERENCES support_case(id),
+      amount numeric(12,2) NOT NULL,
+      created_at timestamptz NOT NULL DEFAULT now(),
+      UNIQUE (order_id)
+    );
+  `);
+}
+
+async function one<T = any>(query: string, values: unknown[] = []): Promise<T | null> {
+  const result = await deps.pool.query(query, values);
+  return (result.rows[0] as T | undefined) ?? null;
+}
+
+async function recordActivity(client: PoolClient | Pool, accountId: number, action: string, subject: string) {
+  await client.query(
+    `INSERT INTO staff_activity (account_id, action, subject) VALUES ($1, $2, $3)`,
+    [accountId, action, subject],
+  );
+}
+
+async function visibleSupportCases(account: ProgressionAccount | null) {
+  if (!account) return [];
+  const where = account.isAdmin || account.isStaff ? "TRUE" : "sc.account_id = $1";
+  const values = account.isAdmin || account.isStaff ? [] : [account.id];
+  const cases = await deps.pool.query(
+    `SELECT sc.*, o.total AS order_total
+     FROM support_case sc LEFT JOIN orders o ON o.id = sc.order_id
+     WHERE ${where} ORDER BY sc.created_at DESC`,
+    values,
+  );
+  const replies = cases.rows.length === 0 ? { rows: [] } : await deps.pool.query(
+    `SELECT sr.*, a.username FROM support_reply sr JOIN account a ON a.id = sr.account_id
+     WHERE sr.case_id = ANY($1::int[]) ORDER BY sr.created_at ASC`,
+    [cases.rows.map((entry) => entry.id)],
+  );
+  return cases.rows.map((entry) => ({
+    id: entry.id,
+    accountId: entry.account_id,
+    email: entry.email,
+    subject: entry.subject,
+    message: entry.message,
+    reference: entry.reference,
+    assignee: entry.assignee,
+    priority: entry.priority,
+    status: entry.status,
+    orderId: entry.order_id,
+    refundTotal: Number(entry.refund_total),
+    replies: replies.rows.filter((reply) => reply.case_id === entry.id).map((reply) => ({
+      id: reply.id,
+      username: reply.username,
+      message: reply.message,
+      createdAt: reply.created_at,
+    })),
+  }));
+}
+
+export async function buildProgressionState(account: ProgressionAccount | null) {
+  const isStaff = Boolean(account && (account.isAdmin || account.isStaff));
+  const [profile, roles, promotions, preferences, notifications, completed, restocks, ledger,
+    activity, reorders, expired, support, recommendations] = await Promise.all([
+    account ? one(`SELECT profile_name, profile_address FROM account WHERE id = $1`, [account.id]) : null,
+    isStaff ? deps.pool.query(`SELECT id, username, staff_role FROM account WHERE is_staff = true ORDER BY username`) : { rows: [] },
+    isStaff ? deps.pool.query(`SELECT * FROM promotion ORDER BY created_at DESC`) : { rows: [] },
+    account ? one(`SELECT notify_order, notify_stock FROM account WHERE id = $1`, [account.id]) : null,
+    account ? deps.pool.query(`SELECT * FROM notification WHERE account_id = $1 ORDER BY created_at DESC`, [account.id]) : { rows: [] },
+    isStaff ? deps.pool.query(
+      `SELECT o.id, o.status, o.delivered_at, string_agg(oi.item_name, ', ' ORDER BY oi.id) AS items
+       FROM orders o JOIN order_item oi ON oi.order_id = o.id
+       WHERE o.status IN ('shipped', 'delivered') GROUP BY o.id ORDER BY o.id DESC`,
+    ) : { rows: [] },
+    isStaff ? deps.pool.query(
+      `SELECT sr.*, i.name AS item_name, w.name AS warehouse_name
+       FROM scheduled_restock sr JOIN item i ON i.id = sr.item_id JOIN warehouse w ON w.id = sr.warehouse_id
+       WHERE sr.cancelled = false AND sr.applied = false ORDER BY sr.due_at`,
+    ) : { rows: [] },
+    isStaff ? deps.pool.query(
+      `SELECT sl.*, i.name AS item_name, w.name AS warehouse_name
+       FROM stock_ledger sl JOIN item i ON i.id = sl.item_id JOIN warehouse w ON w.id = sl.warehouse_id
+       ORDER BY sl.created_at DESC LIMIT 30`,
+    ) : { rows: [] },
+    isStaff ? deps.pool.query(
+      `SELECT sa.*, a.username FROM staff_activity sa JOIN account a ON a.id = sa.account_id
+       ORDER BY sa.created_at DESC LIMIT 50`,
+    ) : { rows: [] },
+    isStaff ? deps.pool.query(
+      `SELECT rr.*, i.name AS item_name,
+        EXISTS (SELECT 1 FROM scheduled_restock sr WHERE sr.item_id = rr.item_id AND sr.automatic = true
+          AND sr.cancelled = false AND sr.applied = false) AS pending
+       FROM reorder_rule rr JOIN item i ON i.id = rr.item_id ORDER BY i.name`,
+    ) : { rows: [] },
+    account ? deps.pool.query(`SELECT * FROM expired_cart WHERE account_id = $1 AND restored = false ORDER BY expired_at DESC`, [account.id]) : { rows: [] },
+    visibleSupportCases(account),
+    account && !isStaff ? deps.buildRecommended(account.id) : [],
+  ]);
+
+  return {
+    profile: profile ? { name: profile.profile_name, address: profile.profile_address } : null,
+    roles: roles.rows.map((row) => ({ id: row.id, username: row.username, role: row.staff_role })),
+    promotions: promotions.rows.map((row) => ({
+      id: row.id, code: row.code, discount: Number(row.discount_percent),
+      start: new Date(row.start_at).toISOString().slice(0, 10),
+      end: new Date(row.end_at).toISOString().slice(0, 10),
+      limit: row.redemption_limit, redemptions: row.redemptions, revenue: Number(row.revenue),
+    })),
+    preferences: preferences ? { order: preferences.notify_order, stock: preferences.notify_stock } : null,
+    notifications: notifications.rows.map((row) => ({
+      id: row.id, kind: row.kind, message: row.message, read: row.read,
+    })),
+    completedOrders: completed.rows.map((row) => ({
+      id: row.id, status: row.status, items: row.items, deliveredAt: row.delivered_at,
+    })),
+    pendingRestocks: restocks.rows.map((row) => ({
+      id: row.id, item: row.item_name, warehouse: row.warehouse_name, quantity: row.quantity,
+      dueAt: row.due_at, automatic: row.automatic,
+    })),
+    stockLedger: ledger.rows.map((row) => ({
+      id: row.id, item: row.item_name, warehouse: row.warehouse_name,
+      quantity: row.quantity, source: row.source,
+    })),
+    activity: activity.rows.map((row) => ({
+      id: row.id, actor: row.username, action: row.action, subject: row.subject,
+      time: row.created_at,
+    })),
+    reorders: reorders.rows.map((row) => ({
+      id: row.id, item: row.item_name, threshold: row.threshold,
+      quantity: row.quantity, pending: row.pending,
+    })),
+    expiredCarts: expired.rows.map((row) => ({ id: row.id, items: row.items, expiredAt: row.expired_at })),
+    support,
+    recommendations: recommendations.map((row, index) => ({
+      id: row.id, name: row.name, rank: index + 1,
+    })),
+  };
+}
+
+export async function emitProgression() {
+  if (!io) return;
+  for (const socket of io.sockets.sockets.values()) {
+    const account = (socket.data.account as ProgressionAccount | null | undefined) ?? null;
+    socket.emit("progression:update", await buildProgressionState(account));
+  }
+}
+
+export async function syncProgressionSocket(socket: Socket, account: ProgressionAccount | null) {
+  socket.data.account = account;
+  socket.emit("progression:update", await buildProgressionState(account));
+}
+
+async function findItemAndWarehouse(itemValue: unknown, warehouseValue: unknown) {
+  const itemResult = await deps.pool.query(
+    `SELECT id, name FROM item WHERE id = $1 OR lower(name) = lower($2) LIMIT 1`,
+    [Number(itemValue) || -1, String(itemValue ?? "")],
+  );
+  const warehouseResult = await deps.pool.query(
+    `SELECT id, name FROM warehouse WHERE id = $1 OR lower(name) = lower($2) LIMIT 1`,
+    [Number(warehouseValue) || -1, String(warehouseValue ?? "")],
+  );
+  return { item: itemResult.rows[0], warehouse: warehouseResult.rows[0] };
+}
+
+async function processStockAlerts(client: PoolClient | Pool, itemId: number) {
+  const current = await client.query(`SELECT COALESCE(SUM(quantity), 0)::int AS total FROM stock WHERE item_id = $1`, [itemId]);
+  if (current.rows[0].total <= 0) return;
+  const requests = await client.query(
+    `UPDATE stock_alert_request SET fulfilled = true
+     WHERE item_id = $1 AND fulfilled = false RETURNING account_id`,
+    [itemId],
+  );
+  const itemRow = await client.query(`SELECT name FROM item WHERE id = $1`, [itemId]);
+  for (const request of requests.rows) {
+    await client.query(
+      `INSERT INTO notification (account_id, kind, subject_key, message)
+       VALUES ($1, 'stock', $2, $3) ON CONFLICT DO NOTHING`,
+      [request.account_id, String(itemId), `${itemRow.rows[0]?.name ?? "Item"} is back in stock`],
+    );
+  }
+}
+
+async function releaseReservation(client: PoolClient, cartItemId: number) {
+  const allocations = await client.query(
+    `DELETE FROM cart_reservation_allocation WHERE cart_item_id = $1
+     RETURNING warehouse_id, quantity`,
+    [cartItemId],
+  );
+  const item = await client.query(`SELECT item_id FROM cart_item WHERE id = $1`, [cartItemId]);
+  for (const allocation of allocations.rows) {
+    await client.query(
+      `UPDATE stock SET quantity = quantity + $1 WHERE item_id = $2 AND warehouse_id = $3`,
+      [allocation.quantity, item.rows[0].item_id, allocation.warehouse_id],
+    );
+  }
+}
+
+async function allocateReservation(client: PoolClient, cartItemId: number, itemId: number, quantity: number) {
+  const stockRows = await client.query(
+    `SELECT warehouse_id, quantity FROM stock WHERE item_id = $1 ORDER BY warehouse_id FOR UPDATE`,
+    [itemId],
+  );
+  const available = stockRows.rows.reduce((sum, row) => sum + row.quantity, 0);
+  if (available < quantity) throw new Error("not enough stock");
+  let remaining = quantity;
+  for (const row of stockRows.rows) {
+    const take = Math.min(remaining, row.quantity);
+    if (take <= 0) continue;
+    await client.query(
+      `UPDATE stock SET quantity = quantity - $1 WHERE item_id = $2 AND warehouse_id = $3`,
+      [take, itemId, row.warehouse_id],
+    );
+    await client.query(
+      `INSERT INTO cart_reservation_allocation (cart_item_id, warehouse_id, quantity)
+       VALUES ($1, $2, $3)
+       ON CONFLICT (cart_item_id, warehouse_id)
+       DO UPDATE SET quantity = cart_reservation_allocation.quantity + excluded.quantity`,
+      [cartItemId, row.warehouse_id, take],
+    );
+    remaining -= take;
+  }
+}
+
+export function registerProgression(app: Express, dependencies: Dependencies) {
+  deps = dependencies;
+
+  app.get("/api/progression", asyncRoute(async (req, res) => {
+    res.json(await buildProgressionState(req.account ?? null));
+  }));
+
+  app.put("/api/profile", dependencies.requireAuth, asyncRoute(async (req, res) => {
+    const name = String(req.body?.name ?? "").trim();
+    const address = String(req.body?.address ?? "").trim();
+    await deps.pool.query(`UPDATE account SET profile_name = $1, profile_address = $2 WHERE id = $3`,
+      [name, address, req.account!.id]);
+    await emitProgression();
+    res.json({ name, address });
+  }));
+
+  app.put("/api/staff/:id/role", dependencies.requireAdmin, asyncRoute(async (req, res) => {
+    const role = String(req.body?.role ?? "").trim();
+    const targetId = Number(req.params.id);
+    const updated = await deps.pool.query(
+      `UPDATE account SET staff_role = $1 WHERE id = $2 AND is_staff = true RETURNING username`,
+      [role, targetId],
+    );
+    if (updated.rowCount === 0) { res.status(404).json({ error: "staff account not found" }); return; }
+    await recordActivity(deps.pool, req.account!.id, "assign role", updated.rows[0].username);
+    await emitProgression();
+    res.json({ ok: true });
+  }));
+
+  app.post("/api/catalog/products", dependencies.requireStaff, asyncRoute(async (req, res) => {
+    const name = String(req.body?.name ?? "").trim();
+    const category = String(req.body?.category ?? "").trim();
+    const price = Number(req.body?.price);
+    const variants = Array.isArray(req.body?.variants)
+      ? req.body.variants.map(String).map((value: string) => value.trim()).filter(Boolean)
+      : String(req.body?.variants ?? "").split(",").map((value) => value.trim()).filter(Boolean);
+    if (!name || !category || !Number.isFinite(price) || price <= 0) {
+      res.status(400).json({ error: "valid product values are required" }); return;
+    }
+    const client = await deps.pool.connect();
+    try {
+      await client.query("BEGIN");
+      const created = await client.query(
+        `INSERT INTO item (name, category, price, variants) VALUES ($1, $2, $3, $4) RETURNING id`,
+        [name, category, price.toFixed(2), variants],
+      );
+      const warehouses = await client.query(`SELECT id FROM warehouse ORDER BY id`);
+      for (const warehouse of warehouses.rows) {
+        await client.query(`INSERT INTO stock (item_id, warehouse_id, quantity) VALUES ($1, $2, 0)`,
+          [created.rows[0].id, warehouse.id]);
+      }
+      await recordActivity(client, req.account!.id, "create product", name);
+      await client.query("COMMIT");
+    } catch (error) { await client.query("ROLLBACK"); throw error; } finally { client.release(); }
+    await deps.broadcastCatalog();
+    await emitProgression();
+    res.json({ ok: true });
+  }));
+
+  app.post("/api/support/cases", asyncRoute(async (req, res) => {
+    const suppliedEmail = String(req.body?.email ?? "").trim();
+    const email = suppliedEmail || (req.account ? `${req.account.username}@stackbench.local` : "");
+    const subject = String(req.body?.subject ?? "").trim();
+    const message = String(req.body?.message ?? "").trim();
+    if (!email || !subject || !message) { res.status(400).json({ error: "all ticket fields are required" }); return; }
+    const reference = `SB-${Date.now().toString(36).toUpperCase()}-${Math.random().toString(36).slice(2, 6).toUpperCase()}`;
+    const created = await deps.pool.query(
+      `INSERT INTO support_case (account_id, email, subject, message, reference)
+       VALUES ($1, $2, $3, $4, $5) RETURNING id`,
+      [req.account?.id ?? null, email, subject, message, reference],
+    );
+    await emitProgression();
+    res.json({ id: created.rows[0].id, reference });
+  }));
+
+  app.put("/api/support/cases/:id", dependencies.requireStaff, asyncRoute(async (req, res) => {
+    const id = Number(req.params.id);
+    const assignee = req.body?.assignee === undefined ? null : String(req.body.assignee);
+    const priority = req.body?.priority === undefined ? null : String(req.body.priority);
+    const status = req.body?.status === undefined ? null : String(req.body.status);
+    const updated = await deps.pool.query(
+      `UPDATE support_case SET assignee = COALESCE($1, assignee), priority = COALESCE($2, priority),
+       status = COALESCE($3, status), updated_at = now()
+       WHERE id = $4 RETURNING subject`, [assignee, priority, status, id]);
+    if (updated.rowCount === 0) { res.status(404).json({ error: "case not found" }); return; }
+    await recordActivity(deps.pool, req.account!.id, "update support", updated.rows[0].subject);
+    await emitProgression(); res.json({ ok: true });
+  }));
+
+  app.post("/api/support/cases/:id/replies", dependencies.requireAuth, asyncRoute(async (req, res) => {
+    const id = Number(req.params.id);
+    const message = String(req.body?.message ?? "").trim();
+    const current = await one<any>(`SELECT account_id FROM support_case WHERE id = $1`, [id]);
+    if (!current || (!req.account!.isAdmin && !req.account!.isStaff && current.account_id !== req.account!.id)) {
+      res.status(404).json({ error: "case not found" }); return;
+    }
+    if (!message) { res.status(400).json({ error: "reply is required" }); return; }
+    await deps.pool.query(`INSERT INTO support_reply (case_id, account_id, message) VALUES ($1, $2, $3)`,
+      [id, req.account!.id, message]);
+    await deps.pool.query(`UPDATE support_case SET updated_at = now() WHERE id = $1`, [id]);
+    await emitProgression(); res.json({ ok: true });
+  }));
+
+  app.post("/api/support/cases/:id/order", dependencies.requireAuth, asyncRoute(async (req, res) => {
+    const caseId = Number(req.params.id);
+    const orderId = Number(req.body?.orderId);
+    const support = await one<any>(`SELECT account_id FROM support_case WHERE id = $1`, [caseId]);
+    const order = await one<any>(`SELECT account_id FROM orders WHERE id = $1`, [orderId]);
+    if (!support || !order || support.account_id !== order.account_id
+      || (!req.account!.isAdmin && !req.account!.isStaff && order.account_id !== req.account!.id)) {
+      res.status(403).json({ error: "order does not belong to this case" }); return;
+    }
+    await deps.pool.query(`UPDATE support_case SET order_id = $1, updated_at = now() WHERE id = $2`, [orderId, caseId]);
+    await emitProgression(); res.json({ ok: true });
+  }));
+
+  app.post("/api/support/cases/:id/refund", dependencies.requireStaff, asyncRoute(async (req, res) => {
+    const caseId = Number(req.params.id);
+    const client = await deps.pool.connect();
+    let accountId = 0;
+    try {
+      await client.query("BEGIN");
+      const support = await client.query(`SELECT * FROM support_case WHERE id = $1 FOR UPDATE`, [caseId]);
+      if (!support.rows[0]?.order_id) { await client.query("ROLLBACK"); res.status(409).json({ error: "case has no order" }); return; }
+      const order = await client.query(`SELECT * FROM orders WHERE id = $1 FOR UPDATE`, [support.rows[0].order_id]);
+      if (Number(order.rows[0].refund_total) > 0) { await client.query("ROLLBACK"); res.status(409).json({ error: "order already refunded" }); return; }
+      const amount = Number(order.rows[0].payment_amount || order.rows[0].total);
+      accountId = order.rows[0].account_id;
+      await client.query(`UPDATE orders SET refund_total = $1 WHERE id = $2`, [amount, order.rows[0].id]);
+      await client.query(`UPDATE support_case SET refund_total = $1, status = 'resolved', updated_at = now() WHERE id = $2`, [amount, caseId]);
+      await client.query(`INSERT INTO refund_entry (order_id, support_case_id, amount) VALUES ($1, $2, $3)`, [order.rows[0].id, caseId, amount]);
+      await recordActivity(client, req.account!.id, "refund order", String(order.rows[0].id));
+      await client.query("COMMIT");
+    } catch (error) { await client.query("ROLLBACK"); throw error; } finally { client.release(); }
+    await deps.broadcastOrders(accountId); await deps.broadcastCatalog(); await emitProgression();
+    res.json({ ok: true });
+  }));
+
+  app.post("/api/promotions", dependencies.requireStaff, asyncRoute(async (req, res) => {
+    const code = String(req.body?.code ?? "").trim().toUpperCase();
+    const discount = Number(req.body?.discount);
+    const start = new Date(String(req.body?.start || "2000-01-01"));
+    const end = new Date(String(req.body?.end || "2100-01-01"));
+    const limit = Number(req.body?.limit);
+    if (!code || !(discount > 0 && discount <= 100) || Number.isNaN(start.valueOf())
+      || Number.isNaN(end.valueOf()) || !Number.isInteger(limit) || limit < 1 || start >= end) {
+      res.status(400).json({ error: "invalid promotion" }); return;
+    }
+    await deps.pool.query(
+      `INSERT INTO promotion (code, discount_percent, start_at, end_at, redemption_limit, created_by)
+       VALUES ($1, $2, $3, $4, $5, $6)
+       ON CONFLICT (code) DO UPDATE SET discount_percent = excluded.discount_percent,
+       start_at = excluded.start_at, end_at = excluded.end_at, redemption_limit = excluded.redemption_limit`,
+      [code, discount, start, end, limit, req.account!.id],
+    );
+    await recordActivity(deps.pool, req.account!.id, "create promotion", code);
+    await emitProgression(); res.json({ ok: true });
+  }));
+
+  app.post("/api/cart/promotion", dependencies.requireAuth, asyncRoute(async (req, res) => {
+    const code = String(req.body?.code ?? "").trim().toUpperCase();
+    const promotion = await one<any>(
+      `SELECT * FROM promotion WHERE code = $1 AND start_at <= now() AND end_at >= now()
+       AND redemptions < redemption_limit`, [code]);
+    if (!promotion) { res.status(409).json({ error: "promotion is expired or unavailable" }); return; }
+    await deps.pool.query(
+      `INSERT INTO cart (account_id, promotion_id, last_activity) VALUES ($1, $2, now())
+       ON CONFLICT (account_id) DO UPDATE SET promotion_id = excluded.promotion_id, last_activity = now()`,
+      [req.account!.id, promotion.id],
+    );
+    res.json({ ok: true, discount: Number(promotion.discount_percent) });
+  }));
+
+  app.put("/api/notifications/preferences", dependencies.requireAuth, asyncRoute(async (req, res) => {
+    const order = Boolean(req.body?.order);
+    const stock = Boolean(req.body?.stock);
+    await deps.pool.query(`UPDATE account SET notify_order = $1, notify_stock = $2 WHERE id = $3`,
+      [order, stock, req.account!.id]);
+    await emitProgression(); res.json({ order, stock });
+  }));
+
+  app.post("/api/items/:id/stock-alert", dependencies.requireAuth, asyncRoute(async (req, res) => {
+    const itemId = Number(req.params.id);
+    const total = await one<any>(`SELECT COALESCE(SUM(quantity), 0)::int AS total FROM stock WHERE item_id = $1`, [itemId]);
+    if (!total || total.total > 0) { res.status(409).json({ error: "item is already available" }); return; }
+    await deps.pool.query(
+      `INSERT INTO stock_alert_request (account_id, item_id) VALUES ($1, $2)
+       ON CONFLICT (account_id, item_id) DO UPDATE SET fulfilled = false, created_at = now()`,
+      [req.account!.id, itemId],
+    );
+    res.json({ ok: true });
+  }));
+
+  app.post("/api/admin/scheduled-restocks", dependencies.requireStaff, asyncRoute(async (req, res) => {
+    const quantity = Number(req.body?.quantity);
+    const delaySeconds = Number(req.body?.delaySeconds);
+    const found = await findItemAndWarehouse(req.body?.item, req.body?.warehouse);
+    if (!found.item || !found.warehouse || !Number.isInteger(quantity) || quantity < 1
+      || !Number.isFinite(delaySeconds) || delaySeconds < 1) {
+      res.status(400).json({ error: "invalid scheduled restock" }); return;
+    }
+    const created = await deps.pool.query(
+      `INSERT INTO scheduled_restock (item_id, warehouse_id, quantity, due_at, created_by)
+       VALUES ($1, $2, $3, now() + ($4 * interval '1 second'), $5) RETURNING id`,
+      [found.item.id, found.warehouse.id, quantity, delaySeconds, req.account!.id],
+    );
+    await recordActivity(deps.pool, req.account!.id, "schedule restock", found.item.name);
+    await emitProgression(); res.json({ id: created.rows[0].id });
+  }));
+
+  app.delete("/api/admin/scheduled-restocks/:id", dependencies.requireStaff, asyncRoute(async (req, res) => {
+    const updated = await deps.pool.query(
+      `UPDATE scheduled_restock SET cancelled = true WHERE id = $1 AND applied = false RETURNING item_id`,
+      [Number(req.params.id)],
+    );
+    if (updated.rowCount === 0) { res.status(404).json({ error: "pending restock not found" }); return; }
+    await emitProgression(); res.json({ ok: true });
+  }));
+
+  app.put("/api/reorders/:itemId", dependencies.requireStaff, asyncRoute(async (req, res) => {
+    const itemId = Number(req.params.itemId);
+    const threshold = Number(req.body?.threshold);
+    const quantity = Number(req.body?.quantity);
+    if (!Number.isInteger(itemId) || !Number.isInteger(threshold) || threshold < 0
+      || !Number.isInteger(quantity) || quantity < 1) {
+      res.status(400).json({ error: "invalid reorder rule" }); return;
+    }
+    await deps.pool.query(
+      `INSERT INTO reorder_rule (item_id, threshold, quantity, created_by) VALUES ($1, $2, $3, $4)
+       ON CONFLICT (item_id) DO UPDATE SET threshold = excluded.threshold, quantity = excluded.quantity,
+       enabled = true, created_by = excluded.created_by`, [itemId, threshold, quantity, req.account!.id]);
+    await recordActivity(deps.pool, req.account!.id, "save reorder rule", String(itemId));
+    await emitProgression(); res.json({ ok: true });
+  }));
+
+  app.post("/api/cart/recover/:id", dependencies.requireAuth, asyncRoute(async (req, res) => {
+    const id = Number(req.params.id);
+    const client = await deps.pool.connect();
+    const unavailable: string[] = [];
+    try {
+      await client.query("BEGIN");
+      const expired = await client.query(
+        `SELECT * FROM expired_cart WHERE id = $1 AND account_id = $2 AND restored = false FOR UPDATE`,
+        [id, req.account!.id],
+      );
+      if (!expired.rows[0]) { await client.query("ROLLBACK"); res.status(404).json({ error: "expired cart not found" }); return; }
+      const cartResult = await client.query(
+        `INSERT INTO cart (account_id, last_activity, expired_at) VALUES ($1, now(), null)
+         ON CONFLICT (account_id) DO UPDATE SET last_activity = now(), expired_at = null RETURNING id`,
+        [req.account!.id],
+      );
+      for (const saved of expired.rows[0].items as Array<{ itemId: number; name: string; quantity: number }>) {
+        const inserted = await client.query(
+          `INSERT INTO cart_item (cart_id, item_id, quantity, reserved_until, expired)
+           VALUES ($1, $2, $3, now() + interval '90 seconds', false)
+           ON CONFLICT (cart_id, item_id) DO UPDATE SET quantity = excluded.quantity,
+           reserved_until = excluded.reserved_until, expired = false RETURNING id`,
+          [cartResult.rows[0].id, saved.itemId, saved.quantity],
+        );
+        try {
+          await allocateReservation(client, inserted.rows[0].id, saved.itemId, saved.quantity);
+        } catch {
+          await client.query(`DELETE FROM cart_item WHERE id = $1`, [inserted.rows[0].id]);
+          unavailable.push(saved.name);
+        }
+      }
+      await client.query(`UPDATE expired_cart SET restored = true WHERE id = $1`, [id]);
+      await client.query("COMMIT");
+    } catch (error) { await client.query("ROLLBACK"); throw error; } finally { client.release(); }
+    await deps.broadcastCart(req.account!.id); await deps.broadcastCatalog(); await emitProgression();
+    res.json({ ok: true, unavailable });
+  }));
+
+  app.post("/api/recommendations/:itemId/dismiss", dependencies.requireAuth, asyncRoute(async (req, res) => {
+    await deps.pool.query(
+      `INSERT INTO recommendation_dismissal (account_id, item_id) VALUES ($1, $2) ON CONFLICT DO NOTHING`,
+      [req.account!.id, Number(req.params.itemId)],
+    );
+    await emitProgression(); res.json({ ok: true });
+  }));
+}
+
+export function attachProgressionSocket(server: SocketIOServer) {
+  io = server;
+}
+
+export async function processProgressionTimers() {
+  if (!deps) return;
+  const client = await deps.pool.connect();
+  const changedAccounts = new Set<number>();
+  let catalogChanged = false;
+  try {
+    await client.query("BEGIN");
+    const timerLock = await client.query(`SELECT pg_try_advisory_xact_lock(7392015) AS locked`);
+    if (!timerLock.rows[0].locked) {
+      await client.query("ROLLBACK");
+      return;
+    }
+
+    const expiredReservations = await client.query(
+      `SELECT ci.id, ci.item_id, c.account_id
+       FROM cart_item ci JOIN cart c ON c.id = ci.cart_id
+       WHERE ci.expired = false AND ci.reserved_until IS NOT NULL AND ci.reserved_until <= now()
+       FOR UPDATE OF ci`,
+    );
+    for (const line of expiredReservations.rows) {
+      await releaseReservation(client, line.id);
+      await client.query(`UPDATE cart_item SET expired = true WHERE id = $1`, [line.id]);
+      changedAccounts.add(line.account_id); catalogChanged = true;
+    }
+
+    const expiredCarts = await client.query(
+      `SELECT c.id, c.account_id FROM cart c
+       WHERE c.expired_at IS NULL AND c.last_activity <= now() - interval '5 minutes'
+       AND EXISTS (SELECT 1 FROM cart_item ci WHERE ci.cart_id = c.id) FOR UPDATE OF c`,
+    );
+    for (const cart of expiredCarts.rows) {
+      const lines = await client.query(
+        `SELECT ci.id, ci.item_id, i.name, ci.quantity, ci.expired FROM cart_item ci JOIN item i ON i.id = ci.item_id
+         WHERE ci.cart_id = $1 FOR UPDATE OF ci`, [cart.id]);
+      for (const line of lines.rows.filter((entry) => !entry.expired)) {
+        await releaseReservation(client, line.id);
+      }
+      await client.query(`INSERT INTO expired_cart (account_id, items) VALUES ($1, $2)`,
+        [cart.account_id, JSON.stringify(lines.rows.map((line) => ({ itemId: line.item_id, name: line.name, quantity: line.quantity })))]);
+      await client.query(`DELETE FROM cart_item WHERE cart_id = $1`, [cart.id]);
+      await client.query(`UPDATE cart SET expired_at = now() WHERE id = $1`, [cart.id]);
+      changedAccounts.add(cart.account_id); catalogChanged = true;
+    }
+
+    const delivered = await client.query(
+      `UPDATE orders SET status = 'delivered', delivered_at = now()
+       WHERE status = 'shipped' AND shipped_at <= now() - interval '60 seconds'
+       RETURNING id, account_id`,
+    );
+    for (const order of delivered.rows) {
+      changedAccounts.add(order.account_id);
+      const preference = await client.query(`SELECT notify_order FROM account WHERE id = $1`, [order.account_id]);
+      if (preference.rows[0]?.notify_order) {
+        const items = await client.query(`SELECT string_agg(item_name, ', ') AS names FROM order_item WHERE order_id = $1`, [order.id]);
+        await client.query(
+          `INSERT INTO notification (account_id, kind, subject_key, message)
+           VALUES ($1, 'delivery', $2, $3) ON CONFLICT DO NOTHING`,
+          [order.account_id, String(order.id), `${items.rows[0].names} delivered`],
+        );
+      }
+    }
+
+    const due = await client.query(
+      `SELECT * FROM scheduled_restock WHERE due_at <= now() AND cancelled = false AND applied = false FOR UPDATE`,
+    );
+    for (const restock of due.rows) {
+      await client.query(
+        `INSERT INTO stock (item_id, warehouse_id, quantity) VALUES ($1, $2, $3)
+         ON CONFLICT (item_id, warehouse_id) DO UPDATE SET quantity = stock.quantity + excluded.quantity`,
+        [restock.item_id, restock.warehouse_id, restock.quantity]);
+      await client.query(`UPDATE scheduled_restock SET applied = true WHERE id = $1`, [restock.id]);
+      await client.query(
+        `INSERT INTO stock_ledger (item_id, warehouse_id, quantity, source) VALUES ($1, $2, $3, $4)`,
+        [restock.item_id, restock.warehouse_id, restock.quantity, restock.automatic ? "automatic reorder" : "scheduled restock"]);
+      await processStockAlerts(client, restock.item_id); catalogChanged = true;
+    }
+
+    const rules = await client.query(
+      `SELECT rr.*, COALESCE(SUM(s.quantity), 0)::int AS available
+       FROM reorder_rule rr LEFT JOIN stock s ON s.item_id = rr.item_id
+       WHERE rr.enabled = true GROUP BY rr.id`,
+    );
+    for (const rule of rules.rows) {
+      if (rule.available > rule.threshold) continue;
+      const pending = await client.query(
+        `SELECT 1 FROM scheduled_restock WHERE item_id = $1 AND automatic = true
+         AND cancelled = false AND applied = false LIMIT 1`, [rule.item_id]);
+      if (pending.rowCount) continue;
+      const warehouse = await client.query(`SELECT id FROM warehouse ORDER BY id LIMIT 1`);
+      await client.query(
+        `INSERT INTO scheduled_restock (item_id, warehouse_id, quantity, due_at, automatic, created_by)
+         VALUES ($1, $2, $3, now() + interval '90 seconds', true, $4)`,
+        [rule.item_id, warehouse.rows[0].id, rule.quantity, rule.created_by]);
+    }
+
+    await client.query("COMMIT");
+  } catch (error) { await client.query("ROLLBACK"); throw error; } finally { client.release(); }
+
+  if (catalogChanged) await deps.broadcastCatalog();
+  for (const accountId of changedAccounts) {
+    await deps.broadcastCart(accountId);
+    await deps.broadcastOrders(accountId);
+  }
+  if (changedAccounts.size || catalogChanged) await deps.broadcastFulfilment();
+  await emitProgression();
+}
+
+export async function reserveCartItem(accountId: number, itemId: number, quantity: number) {
+  const client = await deps.pool.connect();
+  try {
+    await client.query("BEGIN");
+    const cart = await client.query(
+      `INSERT INTO cart (account_id, last_activity, expired_at) VALUES ($1, now(), null)
+       ON CONFLICT (account_id) DO UPDATE SET last_activity = now(), expired_at = null RETURNING id`, [accountId]);
+    const cartId = cart.rows[0].id;
+    const existing = await client.query(
+      `SELECT id, quantity, expired FROM cart_item WHERE cart_id = $1 AND item_id = $2 FOR UPDATE`, [cartId, itemId]);
+    if (existing.rows[0]?.expired) await releaseReservation(client, existing.rows[0].id);
+    const inserted = await client.query(
+      `INSERT INTO cart_item (cart_id, item_id, quantity, reserved_until, expired)
+       VALUES ($1, $2, $3, now() + interval '90 seconds', false)
+       ON CONFLICT (cart_id, item_id) DO UPDATE SET quantity = CASE WHEN cart_item.expired THEN excluded.quantity ELSE cart_item.quantity + excluded.quantity END,
+       reserved_until = excluded.reserved_until, expired = false RETURNING id`, [cartId, itemId, quantity]);
+    await allocateReservation(client, inserted.rows[0].id, itemId, quantity);
+    await client.query("COMMIT");
+  } catch (error) { await client.query("ROLLBACK"); throw error; } finally { client.release(); }
+}
+
+export async function setReservedCartQuantity(accountId: number, itemId: number, quantity: number) {
+  const client = await deps.pool.connect();
+  try {
+    await client.query("BEGIN");
+    const line = await client.query(
+      `SELECT ci.id, ci.quantity, ci.expired FROM cart c JOIN cart_item ci ON ci.cart_id = c.id
+       WHERE c.account_id = $1 AND ci.item_id = $2 FOR UPDATE OF ci`, [accountId, itemId]);
+    if (!line.rows[0]) throw new Error("item not in cart");
+    await releaseReservation(client, line.rows[0].id);
+    await allocateReservation(client, line.rows[0].id, itemId, quantity);
+    await client.query(
+      `UPDATE cart_item SET quantity = $1, reserved_until = now() + interval '90 seconds', expired = false
+       WHERE id = $2`, [quantity, line.rows[0].id]);
+    await client.query(`UPDATE cart SET last_activity = now(), expired_at = null WHERE account_id = $1`, [accountId]);
+    await client.query("COMMIT");
+  } catch (error) { await client.query("ROLLBACK"); throw error; } finally { client.release(); }
+}
+
+export async function removeReservedCartItem(accountId: number, itemId: number) {
+  const client = await deps.pool.connect();
+  try {
+    await client.query("BEGIN");
+    const line = await client.query(
+      `SELECT ci.id FROM cart c JOIN cart_item ci ON ci.cart_id = c.id
+       WHERE c.account_id = $1 AND ci.item_id = $2 FOR UPDATE OF ci`, [accountId, itemId]);
+    if (line.rows[0]) {
+      await releaseReservation(client, line.rows[0].id);
+      await client.query(`DELETE FROM cart_item WHERE id = $1`, [line.rows[0].id]);
+    }
+    await client.query(`UPDATE cart SET last_activity = now() WHERE account_id = $1`, [accountId]);
+    await client.query("COMMIT");
+  } catch (error) { await client.query("ROLLBACK"); throw error; } finally { client.release(); }
+}
+
+export async function checkoutReservedCart(accountId: number) {
+  const client = await deps.pool.connect();
+  try {
+    await client.query("BEGIN");
+    const cart = await client.query(
+      `SELECT id, promotion_id FROM cart WHERE account_id = $1 FOR UPDATE`, [accountId]);
+    if (!cart.rows[0]) throw new Error("cart is empty");
+    const lines = await client.query(
+      `SELECT ci.id, ci.item_id, ci.quantity, ci.expired, ci.reserved_until, i.name, i.price
+       FROM cart_item ci JOIN item i ON i.id = ci.item_id
+       WHERE ci.cart_id = $1 ORDER BY ci.item_id FOR UPDATE OF ci`, [cart.rows[0].id]);
+    if (lines.rows.length === 0) throw new Error("cart is empty");
+    if (lines.rows.some((line) => line.expired || !line.reserved_until || new Date(line.reserved_until) <= new Date())) {
+      throw new Error("cart contains an expired reservation");
+    }
+    const subtotal = lines.rows.reduce((sum, line) => sum + Number(line.price) * line.quantity, 0);
+    let discount = 0;
+    let promotionId: number | null = null;
+    if (cart.rows[0].promotion_id) {
+      const promotion = await client.query(
+        `SELECT * FROM promotion WHERE id = $1 FOR UPDATE`, [cart.rows[0].promotion_id]);
+      const current = promotion.rows[0];
+      if (!current || new Date(current.start_at) > new Date() || new Date(current.end_at) < new Date()
+        || current.redemptions >= current.redemption_limit) throw new Error("promotion is expired or unavailable");
+      promotionId = current.id;
+      discount = Number((subtotal * Number(current.discount_percent) / 100).toFixed(2));
+    }
+    const total = Number((subtotal - discount).toFixed(2));
+    const created = await client.query(
+      `INSERT INTO orders
+       (account_id, total, status, promotion_id, discount, payment_status, payment_amount)
+       VALUES ($1, $2, 'pending', $3, $4, 'paid', $2) RETURNING id`,
+      [accountId, total, promotionId, discount],
+    );
+    for (const line of lines.rows) {
+      const allocations = await client.query(
+        `SELECT warehouse_id, quantity FROM cart_reservation_allocation WHERE cart_item_id = $1 ORDER BY warehouse_id`,
+        [line.id],
+      );
+      if (allocations.rows.reduce((sum, row) => sum + row.quantity, 0) !== line.quantity) {
+        throw new Error("cart reservation is incomplete");
+      }
+      for (const allocation of allocations.rows) {
+        await client.query(
+          `INSERT INTO order_item (order_id, item_id, item_name, quantity, price, warehouse_id)
+           VALUES ($1, $2, $3, $4, $5, $6)`,
+          [created.rows[0].id, line.item_id, line.name, allocation.quantity, line.price, allocation.warehouse_id],
+        );
+      }
+    }
+    if (promotionId) {
+      await client.query(
+        `UPDATE promotion SET redemptions = redemptions + 1, revenue = revenue + $1 WHERE id = $2`,
+        [total, promotionId],
+      );
+    }
+    await client.query(`DELETE FROM cart_item WHERE cart_id = $1`, [cart.rows[0].id]);
+    await client.query(`UPDATE cart SET promotion_id = null, last_activity = now() WHERE id = $1`, [cart.rows[0].id]);
+    await client.query("COMMIT");
+    return created.rows[0].id as number;
+  } catch (error) { await client.query("ROLLBACK"); throw error; } finally { client.release(); }
+}
+
+export async function processImmediateRestock(itemId: number) {
+  await processStockAlerts(deps.pool, itemId);
+  await emitProgression();
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/schema.ts b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/schema.ts
new file mode 100644
index 00000000000..826371e6623
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/schema.ts
@@ -0,0 +1,102 @@
+import {
+  pgTable,
+  serial,
+  text,
+  integer,
+  numeric,
+  boolean,
+  timestamp,
+  primaryKey,
+  unique,
+} from "drizzle-orm/pg-core";
+
+export const item = pgTable("item", {
+  id: serial("id").primaryKey(),
+  name: text("name").notNull(),
+  price: numeric("price", { precision: 10, scale: 2 }).notNull(),
+  category: text("category").notNull().default(""),
+});
+
+export const warehouse = pgTable("warehouse", {
+  id: serial("id").primaryKey(),
+  name: text("name").notNull(),
+});
+
+export const stock = pgTable(
+  "stock",
+  {
+    itemId: integer("item_id").notNull().references(() => item.id),
+    warehouseId: integer("warehouse_id").notNull().references(() => warehouse.id),
+    quantity: integer("quantity").notNull().default(0),
+  },
+  (t) => ({
+    pk: primaryKey({ columns: [t.itemId, t.warehouseId] }),
+  })
+);
+
+export const account = pgTable("account", {
+  id: serial("id").primaryKey(),
+  username: text("username").notNull().unique(),
+  passwordHash: text("password_hash").notNull(),
+  isAdmin: boolean("is_admin").notNull().default(false),
+  isStaff: boolean("is_staff").notNull().default(false),
+  createdAt: timestamp("created_at").notNull().defaultNow(),
+});
+
+export const session = pgTable("session", {
+  id: text("id").primaryKey(),
+  accountId: integer("account_id").notNull().references(() => account.id, { onDelete: "cascade" }),
+  createdAt: timestamp("created_at").notNull().defaultNow(),
+});
+
+export const cart = pgTable("cart", {
+  id: serial("id").primaryKey(),
+  accountId: integer("account_id").notNull().unique().references(() => account.id, { onDelete: "cascade" }),
+});
+
+export const cartItem = pgTable(
+  "cart_item",
+  {
+    id: serial("id").primaryKey(),
+    cartId: integer("cart_id").notNull().references(() => cart.id, { onDelete: "cascade" }),
+    itemId: integer("item_id").notNull().references(() => item.id),
+    quantity: integer("quantity").notNull(),
+  },
+  (t) => ({
+    cartItemUnique: unique().on(t.cartId, t.itemId),
+  })
+);
+
+export const orders = pgTable("orders", {
+  id: serial("id").primaryKey(),
+  accountId: integer("account_id").notNull().references(() => account.id),
+  createdAt: timestamp("created_at").notNull().defaultNow(),
+  total: numeric("total", { precision: 10, scale: 2 }).notNull(),
+  status: text("status").notNull().default("pending"), // pending | shipped | cancelled
+});
+
+export const orderItem = pgTable("order_item", {
+  id: serial("id").primaryKey(),
+  orderId: integer("order_id").notNull().references(() => orders.id, { onDelete: "cascade" }),
+  itemId: integer("item_id").notNull().references(() => item.id),
+  itemName: text("item_name").notNull(),
+  quantity: integer("quantity").notNull(),
+  price: numeric("price", { precision: 10, scale: 2 }).notNull(),
+  warehouseId: integer("warehouse_id").notNull().references(() => warehouse.id),
+  returned: boolean("returned").notNull().default(false),
+});
+
+export const review = pgTable(
+  "review",
+  {
+    id: serial("id").primaryKey(),
+    itemId: integer("item_id").notNull().references(() => item.id),
+    accountId: integer("account_id").notNull().references(() => account.id),
+    rating: integer("rating").notNull(),
+    comment: text("comment").notNull().default(""),
+    createdAt: timestamp("created_at").notNull().defaultNow(),
+  },
+  (t) => ({
+    reviewUnique: unique().on(t.itemId, t.accountId),
+  })
+);
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/seed.ts b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/seed.ts
new file mode 100644
index 00000000000..b0a5898b214
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/server/src/seed.ts
@@ -0,0 +1,80 @@
+import { db } from "./db.js";
+import { item, warehouse, stock, account } from "./schema.js";
+import { hashPassword } from "./auth.js";
+import { sql } from "drizzle-orm";
+
+const ITEMS: Array<{ name: string; price: string; east: number; west: number; category: string }> = [
+  { name: "Air Purifier", price: "189.00", east: 60, west: 40, category: "Home" },
+  { name: "Bluetooth Speaker", price: "79.50", east: 50, west: 50, category: "Audio" },
+  { name: "Coffee Grinder", price: "64.00", east: 70, west: 30, category: "Home" },
+  { name: "Desk Lamp", price: "42.00", east: 55, west: 45, category: "Home" },
+  { name: "Espresso Machine", price: "449.00", east: 80, west: 20, category: "Home" },
+  { name: "Gaming Mouse", price: "59.00", east: 50, west: 50, category: "Computing" },
+  { name: "Headphones", price: "199.00", east: 60, west: 40, category: "Audio" },
+  { name: "Induction Cooktop", price: "329.00", east: 50, west: 50, category: "Home" },
+  { name: "Keyboard", price: "89.00", east: 70, west: 30, category: "Computing" },
+  { name: "Laptop Stand", price: "29.00", east: 90, west: 10, category: "Computing" },
+  { name: "Mirrorless Camera", price: "1299.00", east: 2, west: 1, category: "Photo" },
+  { name: "USB Cable", price: "65.00", east: 0, west: 0, category: "Home" },
+  { name: "Webcam", price: "69.00", east: 60, west: 40, category: "Computing" },
+];
+
+export async function seed() {
+  const existing = await db.select({ id: item.id }).from(item).limit(1);
+  if (existing.length === 0) {
+    const [east] = await db.insert(warehouse).values({ name: "East" }).returning();
+    const [west] = await db.insert(warehouse).values({ name: "West" }).returning();
+
+    for (const it of ITEMS) {
+      const [inserted] = await db
+        .insert(item)
+        .values({ name: it.name, price: it.price, category: it.category })
+        .returning();
+      await db.insert(stock).values([
+        { itemId: inserted.id, warehouseId: east.id, quantity: it.east },
+        { itemId: inserted.id, warehouseId: west.id, quantity: it.west },
+      ]);
+    }
+    console.log("Seeded catalogue:", ITEMS.length, "items across East/West warehouses");
+  } else {
+    // backfill categories for items that predate this column
+    for (const it of ITEMS) {
+      await db
+        .update(item)
+        .set({ category: it.category })
+        .where(sql`name = ${it.name} AND category = ''`);
+    }
+  }
+
+  const existingAdmin = await db.select({ id: account.id }).from(account).where(sql`username = 'admin'`).limit(1);
+  if (existingAdmin.length === 0) {
+    await db.insert(account).values({
+      username: "admin",
+      passwordHash: hashPassword("stackbench-admin-2026"),
+      isAdmin: true,
+    });
+    console.log("Seeded admin account");
+  }
+
+  const existingStaff = await db.select({ id: account.id }).from(account).where(sql`username = 'staff'`).limit(1);
+  if (existingStaff.length === 0) {
+    await db.insert(account).values({
+      username: "staff",
+      passwordHash: hashPassword("stackbench-staff-2026"),
+      isAdmin: false,
+      isStaff: true,
+    });
+    console.log("Seeded staff account");
+  }
+
+  const existingCustomer = await db.select({ id: account.id }).from(account).where(sql`username = 'customer'`).limit(1);
+  if (existingCustomer.length === 0) {
+    await db.insert(account).values({
+      username: "customer",
+      passwordHash: hashPassword("stackbench-customer-2026"),
+      isAdmin: false,
+      isStaff: false,
+    });
+    console.log("Seeded customer account");
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/server/tsconfig.json b/tools/stack-bench/reference-apps/ecommerce/postgres/server/tsconfig.json
new file mode 100644
index 00000000000..f36c9b75d9a
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/server/tsconfig.json
@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "lib": ["ES2022"],
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "resolveJsonModule": true,
+    "outDir": "dist",
+    "types": ["node"]
+  },
+  "include": ["src"]
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/postgres/start.sh b/tools/stack-bench/reference-apps/ecommerce/postgres/start.sh
new file mode 100644
index 00000000000..4619dcf9eff
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/postgres/start.sh
@@ -0,0 +1,6 @@
+#!/usr/bin/env bash
+set -e
+[ -d server/node_modules ] || npm --prefix server ci --no-audit --no-fund
+[ -d client/node_modules ] || npm --prefix client ci --no-audit --no-fund
+npm --prefix client run build
+exec npm run start
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/package-lock.json b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/package-lock.json
new file mode 100644
index 00000000000..ec9e7368b9f
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/package-lock.json
@@ -0,0 +1,173 @@
+{
+  "name": "spacetimedb-shop-backend",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "spacetimedb-shop-backend",
+      "version": "1.0.0",
+      "dependencies": {
+        "spacetimedb": "file:/deps/spacetimedb.tgz"
+      },
+      "devDependencies": {
+        "typescript": "~5.6.2"
+      }
+    },
+    "node_modules/base64-js": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
+      "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/headers-polyfill": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/headers-polyfill/-/headers-polyfill-4.0.3.tgz",
+      "integrity": "sha512-IScLbePpkvO846sIwOtOTDjutRMWdXdJmXdMvk6gCBHxFO8d+QKOQedyZSxFTTFYRSmlgSTDtXqqq4pcenBXLQ==",
+      "license": "MIT"
+    },
+    "node_modules/object-inspect": {
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/prettier": {
+      "version": "3.9.6",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.9.6.tgz",
+      "integrity": "sha512-OpN0zzVdiaiAhxpuuj5efpIS4sY9j7bY6uR5mnj5yPzGkdkjNKSJeUThPb60Jw29QuAZgA4o+/iB49kFiaBX6g==",
+      "license": "MIT",
+      "bin": {
+        "prettier": "bin/prettier.cjs"
+      },
+      "engines": {
+        "node": ">=14"
+      },
+      "funding": {
+        "url": "https://github.com/prettier/prettier?sponsor=1"
+      }
+    },
+    "node_modules/pure-rand": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/pure-rand/-/pure-rand-7.0.1.tgz",
+      "integrity": "sha512-oTUZM/NAZS8p7ANR3SHh30kXB+zK2r2BPcEn/awJIbOvq82WoMN4p62AWWp3Hhw50G0xMsw1mhIBLqHw64EcNQ==",
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/dubzzz"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fast-check"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/safe-stable-stringify": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/safe-stable-stringify/-/safe-stable-stringify-2.5.0.tgz",
+      "integrity": "sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/spacetimedb": {
+      "version": "2.8.3",
+      "resolved": "file:../../../deps/spacetimedb.tgz",
+      "integrity": "sha512-K2mS27VwWB5RUp7WaUEOn3oTu1TmvCR7KWnkK6yc/ipAzqZ5D/PPbLPshAJWIuWWThgGhE2vfUMjxigglXDGIg==",
+      "license": "ISC",
+      "dependencies": {
+        "base64-js": "^1.5.1",
+        "headers-polyfill": "^4.0.3",
+        "object-inspect": "^1.13.4",
+        "prettier": "^3.3.3",
+        "pure-rand": "^7.0.1",
+        "safe-stable-stringify": "^2.5.0",
+        "statuses": "^2.0.2",
+        "url-polyfill": "^1.1.14"
+      },
+      "peerDependencies": {
+        "@angular/core": ">=17.0.0",
+        "@tanstack/react-query": "^5.0.0",
+        "react": "^18.0.0 || ^19.0.0-0 || ^19.0.0",
+        "solid-js": "^1.6.0",
+        "svelte": "^4.0.0 || ^5.0.0",
+        "undici": "^6.19.2",
+        "vue": "^3.3.0"
+      },
+      "peerDependenciesMeta": {
+        "@angular/core": {
+          "optional": true
+        },
+        "@tanstack/react-query": {
+          "optional": true
+        },
+        "react": {
+          "optional": true
+        },
+        "solid-js": {
+          "optional": true
+        },
+        "svelte": {
+          "optional": true
+        },
+        "undici": {
+          "optional": true
+        },
+        "vue": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/statuses": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+      "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.6.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.6.3.tgz",
+      "integrity": "sha512-hjcS1mhfuyi4WW8IWtjP7brDrG2cuDZukyrYrSauoXGNgx0S7zceP07adYkJycEr56BOUTNPzbInooiN3fn1qw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/url-polyfill": {
+      "version": "1.1.14",
+      "resolved": "https://registry.npmjs.org/url-polyfill/-/url-polyfill-1.1.14.tgz",
+      "integrity": "sha512-p4f3TTAG6ADVF3mwbXw7hGw+QJyw5CnNGvYh5fCuQQZIiuKUswqcznyV3pGDP9j0TSmC4UvRKm8kl1QsX1diiQ==",
+      "license": "MIT"
+    }
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/package.json b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/package.json
new file mode 100644
index 00000000000..5b738de0b52
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/package.json
@@ -0,0 +1,12 @@
+{
+  "name": "spacetimedb-shop-backend",
+  "version": "1.0.0",
+  "type": "module",
+  "private": true,
+  "dependencies": {
+    "spacetimedb": "file:/deps/spacetimedb.tgz"
+  },
+  "devDependencies": {
+    "typescript": "~5.6.2"
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/src/index.ts b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/src/index.ts
new file mode 100644
index 00000000000..ac79b3382d9
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/src/index.ts
@@ -0,0 +1,1682 @@
+import {
+  t,
+  SenderError,
+  ScheduleAt,
+  type InferSchema,
+  type ReducerCtx,
+  type ViewCtx,
+} from 'spacetimedb/server';
+import spacetimedb, {
+  item,
+  warehouse,
+  stock,
+  account,
+  session,
+  cartItem,
+  customerOrder,
+  orderItem,
+  orderItemStock,
+  review,
+  itemStats,
+  category,
+  itemCategory,
+  customerProfile,
+  staffRole,
+  itemVariant,
+  paymentRecord,
+  staffActivity,
+  supportTicket,
+  supportReply,
+  promotion,
+  cartPromotion,
+  notificationPreference,
+  stockAlert,
+  notification,
+  reservation,
+  expiredCartItem,
+  cartExpiry,
+  scheduledRestock,
+  stockLedger,
+  deliverySchedule,
+  reorderRule,
+  recommendationDismissal,
+  maintenanceTick,
+} from './schema';
+import {
+  hasPendingRestockForRule,
+  isTicketCreator,
+  planStockAllocation,
+} from './progression-policy';
+
+export { default } from './schema';
+
+type S = InferSchema<typeof spacetimedb>;
+type Ctx = ReducerCtx<S>;
+type VCtx = ViewCtx<S>;
+
+// --- helpers ---
+
+function hashPassword(password: string): string {
+  const salted = 'stackbench-ecom-salt::' + password;
+  let hash = 0x811c9dc5;
+  for (let i = 0; i < salted.length; i++) {
+    hash ^= salted.charCodeAt(i);
+    hash = Math.imul(hash, 0x01000193);
+  }
+  let hash2 = 0x1505;
+  for (let i = 0; i < salted.length; i++) {
+    hash2 = (Math.imul(hash2, 33) ^ salted.charCodeAt(i)) >>> 0;
+  }
+  return (hash >>> 0).toString(16).padStart(8, '0') + hash2.toString(16).padStart(8, '0');
+}
+
+function getAccountId(ctx: Ctx | VCtx): bigint | null {
+  const s = ctx.db.session.identity.find(ctx.sender);
+  return s ? s.accountId : null;
+}
+
+function requireAccount(ctx: Ctx) {
+  const accountId = getAccountId(ctx);
+  if (accountId === null) throw new SenderError('You must be signed in.');
+  const acc = ctx.db.account.id.find(accountId);
+  if (!acc) throw new SenderError('You must be signed in.');
+  return acc;
+}
+
+function requireAdmin(ctx: Ctx) {
+  const acc = requireAccount(ctx);
+  if (!acc.isAdmin) throw new SenderError('Admin access required.');
+  return acc;
+}
+
+function requireStaffOrAdmin(ctx: Ctx) {
+  const acc = requireAccount(ctx);
+  if (!acc.isAdmin && !acc.isStaff) throw new SenderError('Staff or admin access required.');
+  return acc;
+}
+
+function requireOrderOwner(ctx: Ctx, orderId: bigint) {
+  const acc = requireAccount(ctx);
+  const order = ctx.db.customerOrder.id.find(orderId);
+  if (!order) throw new SenderError('Order not found.');
+  if (order.accountId !== acc.id) throw new SenderError('That is not your order.');
+  return order;
+}
+
+function totalStock(ctx: Ctx | VCtx, itemId: bigint): number {
+  let total = 0;
+  for (const row of ctx.db.stock.by_item_warehouse.filter(itemId)) {
+    total += row.quantity;
+  }
+  return total;
+}
+
+function decrementStockTracked(
+  ctx: Ctx,
+  itemId: bigint,
+  qty: number
+): Array<{ warehouseId: bigint; quantity: number }> {
+  let remaining = qty;
+  const rows = [...ctx.db.stock.by_item_warehouse.filter(itemId)];
+  const allocations: Array<{ warehouseId: bigint; quantity: number }> = [];
+  for (const row of rows) {
+    if (remaining <= 0) break;
+    const take = Math.min(row.quantity, remaining);
+    if (take <= 0) continue;
+    ctx.db.stock.by_item_warehouse.delete([row.item_id, row.warehouse_id]);
+    ctx.db.stock.insert({ ...row, quantity: row.quantity - take });
+    allocations.push({ warehouseId: row.warehouse_id, quantity: take });
+    remaining -= take;
+  }
+  if (remaining > 0) throw new SenderError('Not enough stock.');
+  return allocations;
+}
+
+function restoreStock(ctx: Ctx, itemId: bigint, warehouseId: bigint, quantity: number) {
+  let existing = null;
+  for (const row of ctx.db.stock.by_item_warehouse.filter([itemId, warehouseId])) {
+    existing = row;
+    break;
+  }
+  if (existing) {
+    ctx.db.stock.by_item_warehouse.delete([itemId, warehouseId]);
+    ctx.db.stock.insert({ ...existing, quantity: existing.quantity + quantity });
+  } else {
+    ctx.db.stock.insert({ item_id: itemId, warehouse_id: warehouseId, quantity });
+  }
+}
+
+function recordOrderItemStock(
+  ctx: Ctx,
+  orderItemId: bigint,
+  allocations: Array<{ warehouseId: bigint; quantity: number }>
+) {
+  for (const a of allocations) {
+    ctx.db.orderItemStock.insert({ id: 0n, orderItemId, warehouseId: a.warehouseId, quantity: a.quantity });
+  }
+}
+
+function restoreOrderItemStock(ctx: Ctx, orderItem: { id: bigint; itemId: bigint }) {
+  for (const alloc of ctx.db.orderItemStock.orderItemId.filter(orderItem.id)) {
+    restoreStock(ctx, orderItem.itemId, alloc.warehouseId, alloc.quantity);
+  }
+}
+
+function bumpPurchaseCount(ctx: Ctx, itemId: bigint, qty: number) {
+  const stats = ctx.db.itemStats.itemId.find(itemId);
+  if (stats) {
+    ctx.db.itemStats.itemId.update({ ...stats, purchaseCount: stats.purchaseCount + qty });
+  } else {
+    ctx.db.itemStats.insert({ itemId, purchaseCount: qty });
+  }
+}
+
+function decrementPurchaseCount(ctx: Ctx, itemId: bigint, qty: number) {
+  const stats = ctx.db.itemStats.itemId.find(itemId);
+  if (stats) {
+    ctx.db.itemStats.itemId.update({ ...stats, purchaseCount: Math.max(0, stats.purchaseCount - qty) });
+  }
+}
+
+function isOrderCounted(order: { status: string }): boolean {
+  return order.status !== 'cancelled';
+}
+
+function findCartLine(ctx: Ctx, accountId: bigint, itemId: bigint) {
+  for (const row of ctx.db.cartItem.byAccountItem.filter([accountId, itemId])) {
+    return row;
+  }
+  return null;
+}
+
+const SECOND = 1_000_000n;
+
+function nowMicros(ctx: Ctx): bigint {
+  return ctx.timestamp.microsSinceUnixEpoch;
+}
+
+function findReservations(ctx: Ctx, accountId: bigint, itemId: bigint) {
+  return [...ctx.db.reservation.byAccountItem.filter([accountId, itemId])];
+}
+
+function reserveUnits(ctx: Ctx, accountId: bigint, itemId: bigint, quantity: number) {
+  const rows = [...ctx.db.stock.by_item_warehouse.filter(itemId)];
+  const allocations = planStockAllocation(
+    rows.map(row => ({ warehouseId: row.warehouse_id, quantity: row.quantity })),
+    quantity,
+  );
+  if (!allocations) throw new SenderError('Not enough stock to reserve.');
+
+  const expiresMicros = nowMicros(ctx) + 90n * SECOND;
+  for (const allocation of allocations) {
+    const row = rows.find(candidate => candidate.warehouse_id === allocation.warehouseId);
+    if (!row) throw new SenderError('Warehouse stock not found.');
+    ctx.db.stock.by_item_warehouse.delete([row.item_id, row.warehouse_id]);
+    ctx.db.stock.insert({ ...row, quantity: row.quantity - allocation.quantity });
+    ctx.db.reservation.insert({
+      id: 0n,
+      accountId,
+      itemId,
+      warehouseId: row.warehouse_id,
+      quantity: allocation.quantity,
+      expiresMicros,
+      expired: false,
+    });
+  }
+}
+
+function releaseReservation(ctx: Ctx, row: {
+  id: bigint;
+  itemId: bigint;
+  warehouseId: bigint;
+  quantity: number;
+}) {
+  restoreStock(ctx, row.itemId, row.warehouseId, row.quantity);
+  ctx.db.reservation.id.delete(row.id);
+}
+
+function replaceReservation(ctx: Ctx, accountId: bigint, itemId: bigint, quantity: number) {
+  for (const row of findReservations(ctx, accountId, itemId)) {
+    if (!row.expired) restoreStock(ctx, row.itemId, row.warehouseId, row.quantity);
+    ctx.db.reservation.id.delete(row.id);
+  }
+  reserveUnits(ctx, accountId, itemId, quantity);
+}
+
+function touchCart(ctx: Ctx, accountId: bigint) {
+  const expiresMicros = nowMicros(ctx) + 300n * SECOND;
+  const row = ctx.db.cartExpiry.accountId.find(accountId);
+  if (row) ctx.db.cartExpiry.accountId.update({ ...row, expiresMicros, expired: false });
+  else ctx.db.cartExpiry.insert({ accountId, expiresMicros, expired: false });
+}
+
+function recordActivity(ctx: Ctx, actorAccountId: bigint, action: string, subject: string) {
+  ctx.db.staffActivity.insert({
+    id: 0n,
+    actorAccountId,
+    action,
+    subject,
+    createdMicros: nowMicros(ctx),
+  });
+}
+
+function notify(ctx: Ctx, accountId: bigint, kind: string, message: string) {
+  const preference = ctx.db.notificationPreference.accountId.find(accountId);
+  if (kind === 'delivery' && preference && !preference.orderEnabled) return;
+  if (kind === 'stock' && preference && !preference.stockEnabled) return;
+  ctx.db.notification.insert({ id: 0n, accountId, kind, message, unread: true });
+}
+
+function processReorderRules(ctx: Ctx, itemId: bigint) {
+  for (const rule of ctx.db.reorderRule.iter()) {
+    if (rule.itemId !== itemId || totalStock(ctx, itemId) > rule.threshold) continue;
+    const pending = hasPendingRestockForRule([...ctx.db.scheduledRestock.iter()], rule.id);
+    if (!pending) {
+      ctx.db.scheduledRestock.insert({
+        id: 0n,
+        itemId,
+        warehouseId: rule.warehouseId,
+        quantity: rule.quantity,
+        dueMicros: nowMicros(ctx) + 10n * SECOND,
+        status: 'pending',
+        reorderRuleId: rule.id,
+      });
+    }
+  }
+}
+
+function processMaintenance(ctx: Ctx) {
+  const now = nowMicros(ctx);
+  for (const row of [...ctx.db.reservation.iter()]) {
+    if (row.expired || row.expiresMicros > now) continue;
+    restoreStock(ctx, row.itemId, row.warehouseId, row.quantity);
+    ctx.db.reservation.id.update({ ...row, expired: true });
+  }
+  for (const expiry of [...ctx.db.cartExpiry.iter()]) {
+    if (expiry.expired || expiry.expiresMicros > now) continue;
+    for (const line of [...ctx.db.cartItem.byAccountItem.filter(expiry.accountId)]) {
+      ctx.db.expiredCartItem.insert({
+        id: 0n,
+        accountId: expiry.accountId,
+        itemId: line.itemId,
+        quantity: line.quantity,
+      });
+      for (const held of findReservations(ctx, expiry.accountId, line.itemId)) {
+        if (!held.expired) releaseReservation(ctx, held);
+        else ctx.db.reservation.id.delete(held.id);
+      }
+      ctx.db.cartItem.id.delete(line.id);
+    }
+    ctx.db.cartExpiry.accountId.update({ ...expiry, expired: true });
+  }
+  for (const pending of [...ctx.db.scheduledRestock.iter()]) {
+    if (pending.status !== 'pending' || pending.dueMicros > now) continue;
+    restoreStock(ctx, pending.itemId, pending.warehouseId, pending.quantity);
+    ctx.db.scheduledRestock.id.update({ ...pending, status: 'complete' });
+    ctx.db.stockLedger.insert({
+      id: 0n,
+      itemId: pending.itemId,
+      warehouseId: pending.warehouseId,
+      quantity: pending.quantity,
+      createdMicros: now,
+      source: 'scheduled restock',
+    });
+    for (const alert of [...ctx.db.stockAlert.itemId.filter(pending.itemId)]) {
+      if (alert.fulfilled) continue;
+      const name = ctx.db.item.id.find(pending.itemId)?.name ?? 'Item';
+      notify(ctx, alert.accountId, 'stock', `${name} is available again.`);
+      ctx.db.stockAlert.id.update({ ...alert, fulfilled: true });
+    }
+  }
+  for (const schedule of [...ctx.db.deliverySchedule.iter()]) {
+    if (schedule.completed || schedule.dueMicros > now) continue;
+    const order = ctx.db.customerOrder.id.find(schedule.orderId);
+    if (order && order.status === 'shipped') {
+      ctx.db.customerOrder.id.update({ ...order, status: 'delivered' });
+      notify(ctx, order.accountId, 'delivery', `Order ${order.id} was delivered.`);
+    }
+    ctx.db.deliverySchedule.orderId.update({ ...schedule, completed: true });
+  }
+}
+
+// --- lifecycle ---
+
+const CATALOGUE: Array<[string, number, number, number, string]> = [
+  ['Air Purifier', 189.0, 60, 40, 'Home'],
+  ['Bluetooth Speaker', 79.5, 50, 50, 'Audio'],
+  ['Coffee Grinder', 64.0, 70, 30, 'Home'],
+  ['Desk Lamp', 42.0, 55, 45, 'Home'],
+  ['Espresso Machine', 449.0, 80, 20, 'Home'],
+  ['Gaming Mouse', 59.0, 50, 50, 'Computing'],
+  ['Headphones', 199.0, 60, 40, 'Audio'],
+  ['Induction Cooktop', 329.0, 50, 50, 'Home'],
+  ['Keyboard', 89.0, 70, 30, 'Computing'],
+  ['Laptop Stand', 29.0, 90, 10, 'Computing'],
+  ['Mirrorless Camera', 1299.0, 2, 1, 'Photo'],
+  ['USB Cable', 65.0, 0, 0, 'Home'],
+  ['Webcam', 69.0, 60, 40, 'Computing'],
+];
+
+export const init = spacetimedb.init((ctx) => {
+  const hasItems = [...ctx.db.item.iter()].length > 0;
+
+  if (!hasItems) {
+    const east = ctx.db.warehouse.insert({ id: 0n, name: 'East' });
+    const west = ctx.db.warehouse.insert({ id: 0n, name: 'West' });
+
+    for (const [name, price, eastQty, westQty] of CATALOGUE) {
+      const it = ctx.db.item.insert({ id: 0n, name, price });
+      ctx.db.stock.insert({ item_id: it.id, warehouse_id: east.id, quantity: eastQty });
+      ctx.db.stock.insert({ item_id: it.id, warehouse_id: west.id, quantity: westQty });
+      ctx.db.itemStats.insert({ itemId: it.id, purchaseCount: 0 });
+    }
+  }
+
+  const hasCategories = [...ctx.db.category.iter()].length > 0;
+  if (!hasCategories) {
+    const categoryIdByName = new Map<string, bigint>();
+    for (const [, , , , categoryName] of CATALOGUE) {
+      if (categoryIdByName.has(categoryName)) continue;
+      const cat = ctx.db.category.insert({ id: 0n, name: categoryName });
+      categoryIdByName.set(categoryName, cat.id);
+    }
+    const itemsByName = new Map<string, bigint>();
+    for (const it of ctx.db.item.iter()) itemsByName.set(it.name, it.id);
+    for (const [name, , , , categoryName] of CATALOGUE) {
+      const itemId = itemsByName.get(name);
+      const categoryId = categoryIdByName.get(categoryName);
+      if (itemId === undefined || categoryId === undefined) continue;
+      ctx.db.itemCategory.insert({ itemId, categoryId });
+    }
+  }
+
+  if (!ctx.db.account.username.find('admin')) {
+    ctx.db.account.insert({
+      id: 0n,
+      username: 'admin',
+      passwordHash: hashPassword('stackbench-admin-2026'),
+      isAdmin: true,
+      isStaff: false,
+    });
+  }
+
+  if (!ctx.db.account.username.find('staff')) {
+    const staffAccount = ctx.db.account.insert({
+      id: 0n,
+      username: 'staff',
+      passwordHash: hashPassword('stackbench-staff-2026'),
+      isAdmin: false,
+      isStaff: true,
+    });
+    ctx.db.staffRole.insert({ accountId: staffAccount.id, role: 'operations' });
+  }
+
+  if (!ctx.db.account.username.find('customer')) {
+    ctx.db.account.insert({
+      id: 0n,
+      username: 'customer',
+      passwordHash: hashPassword('stackbench-customer-2026'),
+      isAdmin: false,
+      isStaff: false,
+    });
+  }
+
+  if ([...ctx.db.maintenanceTick.iter()].length === 0) {
+    ctx.db.maintenanceTick.insert({
+      id: 0n,
+      scheduledAt: ScheduleAt.time(nowMicros(ctx) + SECOND),
+    });
+  }
+});
+
+export const onConnect = spacetimedb.clientConnected((_ctx) => {});
+
+export const onDisconnect = spacetimedb.clientDisconnected((_ctx) => {});
+
+// --- auth ---
+
+export const signUp = spacetimedb.reducer(
+  { username: t.string(), password: t.string() },
+  (ctx, { username, password }) => {
+    const uname = username.trim();
+    if (uname.length === 0) throw new SenderError('Username is required.');
+    if (password.length === 0) throw new SenderError('Password is required.');
+    const existing = ctx.db.account.username.find(uname);
+    if (existing) throw new SenderError('That username is already taken.');
+
+    const acc = ctx.db.account.insert({
+      id: 0n,
+      username: uname,
+      passwordHash: hashPassword(password),
+      isAdmin: false,
+      isStaff: false,
+    });
+
+    const existingSession = ctx.db.session.identity.find(ctx.sender);
+    if (existingSession) {
+      ctx.db.session.identity.update({ ...existingSession, accountId: acc.id });
+    } else {
+      ctx.db.session.insert({ identity: ctx.sender, accountId: acc.id });
+    }
+  }
+);
+
+export const signIn = spacetimedb.reducer(
+  { username: t.string(), password: t.string() },
+  (ctx, { username, password }) => {
+    const acc = ctx.db.account.username.find(username.trim());
+    if (!acc || acc.passwordHash !== hashPassword(password)) {
+      throw new SenderError('Incorrect username or password.');
+    }
+
+    const existingSession = ctx.db.session.identity.find(ctx.sender);
+    if (existingSession) {
+      ctx.db.session.identity.update({ ...existingSession, accountId: acc.id });
+    } else {
+      ctx.db.session.insert({ identity: ctx.sender, accountId: acc.id });
+    }
+  }
+);
+
+export const signOut = spacetimedb.reducer((ctx) => {
+  const existingSession = ctx.db.session.identity.find(ctx.sender);
+  if (existingSession) ctx.db.session.identity.delete(ctx.sender);
+});
+
+// --- views ---
+
+export const currentUser = spacetimedb.view(
+  { name: 'current_user', public: true },
+  t.option(
+    t.object('CurrentUserView', {
+      id: t.u64(),
+      username: t.string(),
+      isAdmin: t.bool(),
+      isStaff: t.bool(),
+    })
+  ),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return undefined;
+    const acc = ctx.db.account.id.find(accountId);
+    if (!acc) return undefined;
+    return { id: acc.id, username: acc.username, isAdmin: acc.isAdmin, isStaff: acc.isStaff };
+  }
+);
+
+const CartLineView = t.object('CartLineView', {
+  itemId: t.u64(),
+  quantity: t.u32(),
+});
+
+export const myCart = spacetimedb.view(
+  { name: 'my_cart', public: true },
+  t.array(CartLineView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return [];
+    const out: Array<{ itemId: bigint; quantity: number }> = [];
+    for (const row of ctx.db.cartItem.byAccountItem.filter(accountId)) {
+      out.push({ itemId: row.itemId, quantity: row.quantity });
+    }
+    return out;
+  }
+);
+
+const MyOrderView = t.object('MyOrderView', {
+  orderId: t.u64(),
+  createdAt: t.timestamp(),
+  total: t.f64(),
+  status: t.string(),
+  discount: t.f64(),
+  refundedTotal: t.f64(),
+});
+
+export const myOrders = spacetimedb.view(
+  { name: 'my_orders', public: true },
+  t.array(MyOrderView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return [];
+    const rows = [...ctx.db.customerOrder.accountId.filter(accountId)];
+    rows.sort((a, b) => (b.createdAt.microsSinceUnixEpoch > a.createdAt.microsSinceUnixEpoch ? 1 : -1));
+    return rows.map((o) => ({
+      orderId: o.id,
+      createdAt: o.createdAt,
+      total: o.total,
+      status: o.status,
+      discount: o.discount,
+      refundedTotal: o.refundedTotal,
+    }));
+  }
+);
+
+const MyOrderItemView = t.object('MyOrderItemView', {
+  orderId: t.u64(),
+  itemId: t.u64(),
+  itemName: t.string(),
+  quantity: t.u32(),
+  unitPrice: t.f64(),
+  returned: t.bool(),
+});
+
+export const myOrderItems = spacetimedb.view(
+  { name: 'my_order_items', public: true },
+  t.array(MyOrderItemView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return [];
+    const out: Array<{
+      orderId: bigint;
+      itemId: bigint;
+      itemName: string;
+      quantity: number;
+      unitPrice: number;
+      returned: boolean;
+    }> = [];
+    for (const o of ctx.db.customerOrder.accountId.filter(accountId)) {
+      for (const li of ctx.db.orderItem.orderId.filter(o.id)) {
+        out.push({
+          orderId: o.id,
+          itemId: li.itemId,
+          itemName: li.itemName,
+          quantity: li.quantity,
+          unitPrice: li.unitPrice,
+          returned: li.returned,
+        });
+      }
+    }
+    return out;
+  }
+);
+
+const AdminRevenueView = t.object('AdminRevenueView', { total: t.f64() });
+
+export const adminRevenue = spacetimedb.view(
+  { name: 'admin_revenue', public: true },
+  t.option(AdminRevenueView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return { total: 0 };
+    const acc = ctx.db.account.id.find(accountId);
+    if (!acc || !acc.isAdmin) return { total: 0 };
+    let total = 0;
+    for (const o of ctx.db.customerOrder.iter()) {
+      if (!isOrderCounted(o)) continue;
+      for (const li of ctx.db.orderItem.orderId.filter(o.id)) {
+        if (li.returned) continue;
+        total += li.unitPrice * li.quantity;
+      }
+    }
+    return { total };
+  }
+);
+
+const QueueOrderView = t.object('QueueOrderView', {
+  orderId: t.u64(),
+  createdAt: t.timestamp(),
+  itemNames: t.array(t.string()),
+  warehouseNames: t.array(t.string()),
+});
+
+export const fulfilmentQueue = spacetimedb.view(
+  { name: 'fulfilment_queue', public: true },
+  t.array(QueueOrderView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return [];
+    const acc = ctx.db.account.id.find(accountId);
+    if (!acc || (!acc.isAdmin && !acc.isStaff)) return [];
+
+    const pending = [...ctx.db.customerOrder.iter()].filter((o) => o.status === 'pending');
+    pending.sort((a, b) => (a.createdAt.microsSinceUnixEpoch < b.createdAt.microsSinceUnixEpoch ? -1 : 1));
+
+    return pending.map((order) => {
+      const itemNames: string[] = [];
+      const warehouseNames: string[] = [];
+      for (const li of ctx.db.orderItem.orderId.filter(order.id)) {
+        for (const alloc of ctx.db.orderItemStock.orderItemId.filter(li.id)) {
+          itemNames.push(li.itemName);
+          const wh = ctx.db.warehouse.id.find(alloc.warehouseId);
+          warehouseNames.push(wh ? wh.name : 'Unknown');
+        }
+      }
+      return { orderId: order.id, createdAt: order.createdAt, itemNames, warehouseNames };
+    });
+  }
+);
+
+const CategoryTotalView = t.object('CategoryTotalView', {
+  categoryId: t.u64(),
+  name: t.string(),
+  unitsSold: t.u32(),
+  revenue: t.f64(),
+});
+
+export const categoryTotals = spacetimedb.view(
+  { name: 'category_totals', public: true },
+  t.array(CategoryTotalView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    const acc = accountId !== null ? ctx.db.account.id.find(accountId) : null;
+    if (!acc || !acc.isAdmin) return [];
+
+    const stats = new Map<bigint, { name: string; units: number; revenue: number }>();
+    for (const cat of ctx.db.category.iter()) stats.set(cat.id, { name: cat.name, units: 0, revenue: 0 });
+
+    for (const order of ctx.db.customerOrder.iter()) {
+      if (!isOrderCounted(order)) continue;
+      for (const li of ctx.db.orderItem.orderId.filter(order.id)) {
+        if (li.returned) continue;
+        const link = ctx.db.itemCategory.itemId.find(li.itemId);
+        if (!link) continue;
+        const s = stats.get(link.categoryId);
+        if (!s) continue;
+        s.units += li.quantity;
+        s.revenue += li.unitPrice * li.quantity;
+      }
+    }
+
+    return [...stats.entries()]
+      .map(([categoryId, s]) => ({ categoryId, name: s.name, unitsSold: s.units, revenue: s.revenue }))
+      .sort((a, b) => a.name.localeCompare(b.name));
+  }
+);
+
+const RecommendedItemView = t.object('RecommendedItemView', {
+  itemId: t.u64(),
+  name: t.string(),
+  price: t.f64(),
+  rank: t.u32(),
+});
+
+export const recommended = spacetimedb.view(
+  { name: 'recommended', public: true },
+  t.array(RecommendedItemView),
+  (ctx) => {
+    const purchaseCountOf = (id: bigint) => ctx.db.itemStats.itemId.find(id)?.purchaseCount ?? 0;
+    const accountId = getAccountId(ctx);
+
+    if (accountId === null) {
+      const items = [...ctx.db.item.iter()];
+      items.sort((a, b) => {
+        const diff = purchaseCountOf(b.id) - purchaseCountOf(a.id);
+        return diff !== 0 ? diff : a.name.localeCompare(b.name);
+      });
+      return items.slice(0, 10).map((i, index) => ({
+        itemId: i.id,
+        name: i.name,
+        price: i.price,
+        rank: index + 1,
+      }));
+    }
+
+    const purchasedCategoryIds = new Set<bigint>();
+    const purchasedItemIds = new Set<bigint>();
+    for (const order of ctx.db.customerOrder.accountId.filter(accountId)) {
+      if (!isOrderCounted(order)) continue;
+      for (const li of ctx.db.orderItem.orderId.filter(order.id)) {
+        if (li.returned) continue;
+        purchasedItemIds.add(li.itemId);
+        const link = ctx.db.itemCategory.itemId.find(li.itemId);
+        if (link) purchasedCategoryIds.add(link.categoryId);
+      }
+    }
+    if (purchasedCategoryIds.size === 0) return [];
+
+    const cartItemIds = new Set<bigint>();
+    for (const c of ctx.db.cartItem.byAccountItem.filter(accountId)) cartItemIds.add(c.itemId);
+    const dismissedItemIds = new Set<bigint>();
+    for (const row of ctx.db.recommendationDismissal.byAccountItem.filter(accountId)) {
+      dismissedItemIds.add(row.itemId);
+    }
+
+    const candidates: Array<{ itemId: bigint; name: string; price: number }> = [];
+    for (const link of ctx.db.itemCategory.iter()) {
+      if (!purchasedCategoryIds.has(link.categoryId)) continue;
+      if (purchasedItemIds.has(link.itemId)) continue;
+      if (cartItemIds.has(link.itemId)) continue;
+      if (dismissedItemIds.has(link.itemId)) continue;
+      const it = ctx.db.item.id.find(link.itemId);
+      if (!it) continue;
+      candidates.push({ itemId: it.id, name: it.name, price: it.price });
+    }
+
+    candidates.sort((a, b) => {
+      const diff = purchaseCountOf(b.itemId) - purchaseCountOf(a.itemId);
+      return diff !== 0 ? diff : a.name.localeCompare(b.name);
+    });
+    return candidates.map((item, index) => ({ ...item, rank: index + 1 }));
+  }
+);
+
+// --- cart & purchasing ---
+
+export const buyNow = spacetimedb.reducer({ itemId: t.u64() }, (ctx, { itemId }) => {
+  const acc = requireAccount(ctx);
+  const it = ctx.db.item.id.find(itemId);
+  if (!it) throw new SenderError('Item not found.');
+  if (totalStock(ctx, itemId) <= 0) throw new SenderError('This item is out of stock.');
+
+  const allocations = decrementStockTracked(ctx, itemId, 1);
+
+  const order = ctx.db.customerOrder.insert({
+    id: 0n,
+    accountId: acc.id,
+    createdAt: ctx.timestamp,
+    total: it.price,
+    status: 'pending',
+    discount: 0,
+    promotionId: undefined,
+    refundedTotal: 0,
+  });
+  const orderItemRow = ctx.db.orderItem.insert({
+    id: 0n,
+    orderId: order.id,
+    itemId: it.id,
+    itemName: it.name,
+    quantity: 1,
+    unitPrice: it.price,
+    returned: false,
+  });
+  recordOrderItemStock(ctx, orderItemRow.id, allocations);
+  bumpPurchaseCount(ctx, itemId, 1);
+  ctx.db.paymentRecord.insert({ id: 0n, orderId: order.id, amount: order.total, status: 'paid' });
+  processReorderRules(ctx, itemId);
+});
+
+export const addToCart = spacetimedb.reducer({ itemId: t.u64() }, (ctx, { itemId }) => {
+  const acc = requireAccount(ctx);
+  const it = ctx.db.item.id.find(itemId);
+  if (!it) throw new SenderError('Item not found.');
+
+  const existing = findCartLine(ctx, acc.id, itemId);
+  if (existing) {
+    replaceReservation(ctx, acc.id, itemId, existing.quantity + 1);
+    ctx.db.cartItem.id.update({ ...existing, quantity: existing.quantity + 1 });
+  } else {
+    reserveUnits(ctx, acc.id, itemId, 1);
+    ctx.db.cartItem.insert({ id: 0n, accountId: acc.id, itemId, quantity: 1 });
+  }
+  touchCart(ctx, acc.id);
+});
+
+export const updateCartQuantity = spacetimedb.reducer(
+  { itemId: t.u64(), quantity: t.i32() },
+  (ctx, { itemId, quantity }) => {
+    const acc = requireAccount(ctx);
+    if (quantity < 1) throw new SenderError('Quantity must be at least 1.');
+    const existing = findCartLine(ctx, acc.id, itemId);
+    if (!existing) throw new SenderError('That item is not in your cart.');
+    replaceReservation(ctx, acc.id, itemId, quantity);
+    ctx.db.cartItem.id.update({ ...existing, quantity });
+    touchCart(ctx, acc.id);
+  }
+);
+
+export const removeFromCart = spacetimedb.reducer({ itemId: t.u64() }, (ctx, { itemId }) => {
+  const acc = requireAccount(ctx);
+  const existing = findCartLine(ctx, acc.id, itemId);
+  if (existing) {
+    for (const held of findReservations(ctx, acc.id, itemId)) {
+      if (!held.expired) releaseReservation(ctx, held);
+      else ctx.db.reservation.id.delete(held.id);
+    }
+    ctx.db.cartItem.id.delete(existing.id);
+    touchCart(ctx, acc.id);
+  }
+});
+
+export const checkout = spacetimedb.reducer((ctx) => {
+  const acc = requireAccount(ctx);
+  const lines = [...ctx.db.cartItem.byAccountItem.filter(acc.id)];
+  if (lines.length === 0) throw new SenderError('Your cart is empty.');
+
+  let total = 0;
+  const priced: Array<{ itemId: bigint; name: string; quantity: number; price: number }> = [];
+  for (const line of lines) {
+    const it = ctx.db.item.id.find(line.itemId);
+    if (!it) throw new SenderError('An item in your cart no longer exists.');
+    const held = findReservations(ctx, acc.id, line.itemId);
+    if (held.length === 0 || held.some(row => row.expired) ||
+      held.reduce((sum, row) => sum + row.quantity, 0) !== line.quantity) {
+      throw new SenderError(`The reservation for ${it.name} has expired.`);
+    }
+    priced.push({ itemId: it.id, name: it.name, quantity: line.quantity, price: it.price });
+    total += it.price * line.quantity;
+  }
+
+  const applied = ctx.db.cartPromotion.accountId.find(acc.id);
+  const promo = applied ? ctx.db.promotion.id.find(applied.promotionId) : null;
+  const discount = promo ? total * (promo.discountPercent / 100) : 0;
+
+  const order = ctx.db.customerOrder.insert({
+    id: 0n,
+    accountId: acc.id,
+    createdAt: ctx.timestamp,
+    total: total - discount,
+    status: 'pending',
+    discount,
+    promotionId: promo?.id,
+    refundedTotal: 0,
+  });
+
+  for (const p of priced) {
+    const held = findReservations(ctx, acc.id, p.itemId);
+    if (held.length === 0) throw new SenderError('Reservation not found.');
+    const allocations = held.map(row => ({ warehouseId: row.warehouseId, quantity: row.quantity }));
+    const orderItemRow = ctx.db.orderItem.insert({
+      id: 0n,
+      orderId: order.id,
+      itemId: p.itemId,
+      itemName: p.name,
+      quantity: p.quantity,
+      unitPrice: p.price,
+      returned: false,
+    });
+    recordOrderItemStock(ctx, orderItemRow.id, allocations);
+    bumpPurchaseCount(ctx, p.itemId, p.quantity);
+    for (const row of held) ctx.db.reservation.id.delete(row.id);
+    processReorderRules(ctx, p.itemId);
+  }
+
+  for (const line of lines) ctx.db.cartItem.id.delete(line.id);
+  const expiry = ctx.db.cartExpiry.accountId.find(acc.id);
+  if (expiry) ctx.db.cartExpiry.accountId.delete(acc.id);
+  ctx.db.paymentRecord.insert({ id: 0n, orderId: order.id, amount: order.total, status: 'paid' });
+  if (promo) {
+    ctx.db.promotion.id.update({ ...promo, redemptions: promo.redemptions + 1 });
+    ctx.db.cartPromotion.accountId.delete(acc.id);
+  }
+});
+
+// --- reviews ---
+
+export const writeReview = spacetimedb.reducer(
+  { itemId: t.u64(), rating: t.u32(), comment: t.string() },
+  (ctx, { itemId, rating, comment }) => {
+    const acc = requireAccount(ctx);
+    if (rating < 1 || rating > 5) throw new SenderError('Rating must be between 1 and 5.');
+
+    let bought = false;
+    for (const o of ctx.db.customerOrder.accountId.filter(acc.id)) {
+      for (const li of ctx.db.orderItem.orderId.filter(o.id)) {
+        if (li.itemId === itemId) {
+          bought = true;
+          break;
+        }
+      }
+      if (bought) break;
+    }
+    if (!bought) throw new SenderError('You can only review items you have purchased.');
+
+    let existing = null;
+    for (const r of ctx.db.review.byItemAccount.filter([itemId, acc.id])) {
+      existing = r;
+      break;
+    }
+    if (existing) {
+      ctx.db.review.id.update({ ...existing, rating, comment, createdAt: ctx.timestamp });
+    } else {
+      ctx.db.review.insert({
+        id: 0n,
+        itemId,
+        accountId: acc.id,
+        rating,
+        comment,
+        createdAt: ctx.timestamp,
+      });
+    }
+  }
+);
+
+// --- admin ---
+
+export const adminRestock = spacetimedb.reducer(
+  { itemId: t.u64(), warehouseId: t.u64(), quantity: t.u32() },
+  (ctx, { itemId, warehouseId, quantity }) => {
+    requireAdmin(ctx);
+    if (quantity < 1) throw new SenderError('Restock quantity must be at least 1.');
+    const it = ctx.db.item.id.find(itemId);
+    if (!it) throw new SenderError('Item not found.');
+    const wh = ctx.db.warehouse.id.find(warehouseId);
+    if (!wh) throw new SenderError('Warehouse not found.');
+
+    let existing = null;
+    for (const row of ctx.db.stock.by_item_warehouse.filter([itemId, warehouseId])) {
+      existing = row;
+      break;
+    }
+    if (existing) {
+      ctx.db.stock.by_item_warehouse.delete([itemId, warehouseId]);
+      ctx.db.stock.insert({ ...existing, quantity: existing.quantity + quantity });
+    } else {
+      ctx.db.stock.insert({ item_id: itemId, warehouse_id: warehouseId, quantity });
+    }
+    for (const alert of [...ctx.db.stockAlert.itemId.filter(itemId)]) {
+      if (alert.fulfilled) continue;
+      notify(ctx, alert.accountId, 'stock', `${it.name} is available again.`);
+      ctx.db.stockAlert.id.update({ ...alert, fulfilled: true });
+    }
+  }
+);
+
+export const adminChangePrice = spacetimedb.reducer(
+  { itemId: t.u64(), price: t.f64() },
+  (ctx, { itemId, price }) => {
+    requireAdmin(ctx);
+    if (!(price > 0)) throw new SenderError('Price must be positive.');
+    const it = ctx.db.item.id.find(itemId);
+    if (!it) throw new SenderError('Item not found.');
+    ctx.db.item.id.update({ ...it, price });
+  }
+);
+
+export const adminTransferStock = spacetimedb.reducer(
+  { itemId: t.u64(), fromWarehouseId: t.u64(), toWarehouseId: t.u64(), quantity: t.u32() },
+  (ctx, { itemId, fromWarehouseId, toWarehouseId, quantity }) => {
+    requireAdmin(ctx);
+    if (quantity < 1) throw new SenderError('Transfer quantity must be at least 1.');
+    if (fromWarehouseId === toWarehouseId) throw new SenderError('Choose two different warehouses.');
+    if (!ctx.db.item.id.find(itemId)) throw new SenderError('Item not found.');
+    if (!ctx.db.warehouse.id.find(fromWarehouseId) || !ctx.db.warehouse.id.find(toWarehouseId)) {
+      throw new SenderError('Warehouse not found.');
+    }
+
+    let fromRow = null;
+    for (const row of ctx.db.stock.by_item_warehouse.filter([itemId, fromWarehouseId])) {
+      fromRow = row;
+      break;
+    }
+    const available = fromRow?.quantity ?? 0;
+    if (available < quantity) {
+      throw new SenderError(`Not enough stock in source warehouse: only ${available} available.`);
+    }
+
+    ctx.db.stock.by_item_warehouse.delete([itemId, fromWarehouseId]);
+    ctx.db.stock.insert({ item_id: itemId, warehouse_id: fromWarehouseId, quantity: available - quantity });
+
+    let toRow = null;
+    for (const row of ctx.db.stock.by_item_warehouse.filter([itemId, toWarehouseId])) {
+      toRow = row;
+      break;
+    }
+    if (toRow) {
+      ctx.db.stock.by_item_warehouse.delete([itemId, toWarehouseId]);
+      ctx.db.stock.insert({ ...toRow, quantity: toRow.quantity + quantity });
+    } else {
+      ctx.db.stock.insert({ item_id: itemId, warehouse_id: toWarehouseId, quantity });
+    }
+  }
+);
+
+// --- fulfilment ---
+
+export const shipOrder = spacetimedb.reducer({ orderId: t.u64() }, (ctx, { orderId }) => {
+  requireStaffOrAdmin(ctx);
+  const order = ctx.db.customerOrder.id.find(orderId);
+  if (!order) throw new SenderError('Order not found.');
+  if (order.status !== 'pending') throw new SenderError('Order is not pending.');
+  ctx.db.customerOrder.id.update({ ...order, status: 'shipped' });
+  const existing = ctx.db.deliverySchedule.orderId.find(orderId);
+  const schedule = { orderId, dueMicros: nowMicros(ctx) + 60n * SECOND, completed: false };
+  if (existing) ctx.db.deliverySchedule.orderId.update(schedule);
+  else ctx.db.deliverySchedule.insert(schedule);
+});
+
+// --- cancellation & returns ---
+
+export const cancelOrder = spacetimedb.reducer({ orderId: t.u64() }, (ctx, { orderId }) => {
+  const order = requireOrderOwner(ctx, orderId);
+  if (order.status !== 'pending') throw new SenderError('Order has already shipped.');
+
+  for (const li of ctx.db.orderItem.orderId.filter(order.id)) {
+    restoreOrderItemStock(ctx, li);
+    decrementPurchaseCount(ctx, li.itemId, li.quantity);
+    processReorderRules(ctx, li.itemId);
+  }
+  ctx.db.customerOrder.id.update({ ...order, status: 'cancelled' });
+});
+
+export const returnOrderItem = spacetimedb.reducer(
+  { orderId: t.u64(), itemId: t.u64() },
+  (ctx, { orderId, itemId }) => {
+    const order = requireOrderOwner(ctx, orderId);
+    if (order.status !== 'shipped') throw new SenderError('Order has not shipped yet.');
+
+    let target = null;
+    for (const li of ctx.db.orderItem.orderId.filter(order.id)) {
+      if (li.itemId === itemId) {
+        target = li;
+        break;
+      }
+    }
+    if (!target) throw new SenderError('Item not found in this order.');
+    if (target.returned) throw new SenderError('Item already returned.');
+
+    restoreOrderItemStock(ctx, target);
+    decrementPurchaseCount(ctx, target.itemId, target.quantity);
+    ctx.db.orderItem.id.update({ ...target, returned: true });
+    processReorderRules(ctx, target.itemId);
+  }
+);
+
+// --- progression maintenance ---
+
+export const processMaintenanceTick = spacetimedb.reducer(
+  { onSchedule: maintenanceTick },
+  { tick: maintenanceTick.rowType },
+  (ctx) => {
+    processMaintenance(ctx);
+    ctx.db.maintenanceTick.insert({
+      id: 0n,
+      scheduledAt: ScheduleAt.time(nowMicros(ctx) + SECOND),
+    });
+  }
+);
+
+export const saveProfile = spacetimedb.reducer(
+  { name: t.string(), address: t.string() },
+  (ctx, { name, address }) => {
+    const acc = requireAccount(ctx);
+    const row = { accountId: acc.id, name: name.trim(), address: address.trim() };
+    const existing = ctx.db.customerProfile.accountId.find(acc.id);
+    if (existing) ctx.db.customerProfile.accountId.update(row);
+    else ctx.db.customerProfile.insert(row);
+  }
+);
+
+export const assignStaffRole = spacetimedb.reducer(
+  { accountId: t.u64(), role: t.string() },
+  (ctx, { accountId, role }) => {
+    const actor = requireAdmin(ctx);
+    const target = ctx.db.account.id.find(accountId);
+    if (!target || (!target.isStaff && !target.isAdmin)) throw new SenderError('Staff account not found.');
+    const row = { accountId, role: role.trim() };
+    const existing = ctx.db.staffRole.accountId.find(accountId);
+    if (existing) ctx.db.staffRole.accountId.update(row);
+    else ctx.db.staffRole.insert(row);
+    recordActivity(ctx, actor.id, 'assigned role', target.username);
+  }
+);
+
+export const addCatalogProduct = spacetimedb.reducer(
+  { name: t.string(), categoryName: t.string(), price: t.f64(), variants: t.string() },
+  (ctx, { name, categoryName, price, variants }) => {
+    const actor = requireStaffOrAdmin(ctx);
+    const role = ctx.db.staffRole.accountId.find(actor.id)?.role ?? '';
+    if (!actor.isAdmin && role !== 'catalog') throw new SenderError('Catalog role required.');
+    if (price <= 0) throw new SenderError('Price must be positive.');
+    const product = ctx.db.item.insert({ id: 0n, name: name.trim(), price });
+    ctx.db.itemStats.insert({ itemId: product.id, purchaseCount: 0 });
+    let cat = ctx.db.category.name.find(categoryName.trim());
+    if (!cat) cat = ctx.db.category.insert({ id: 0n, name: categoryName.trim() });
+    ctx.db.itemCategory.insert({ itemId: product.id, categoryId: cat.id });
+    for (const variantName of variants.split(',').map(value => value.trim()).filter(Boolean)) {
+      ctx.db.itemVariant.insert({ id: 0n, itemId: product.id, name: variantName });
+    }
+    recordActivity(ctx, actor.id, 'added product', product.name);
+  }
+);
+
+export const createSupportTicket = spacetimedb.reducer(
+  { email: t.string(), subject: t.string(), message: t.string() },
+  (ctx, { email, subject, message }) => {
+    const accountId = getAccountId(ctx);
+    const reference = `SUP-${nowMicros(ctx)}-${accountId ?? 0n}`;
+    ctx.db.supportTicket.insert({
+      id: 0n,
+      reference,
+      creatorIdentity: ctx.sender,
+      accountId: accountId ?? undefined,
+      email: email.trim(),
+      subject: subject.trim(),
+      message: message.trim(),
+      status: 'new',
+      priority: 'normal',
+      assigneeId: undefined,
+      orderId: undefined,
+      refundTotal: 0,
+    });
+  }
+);
+
+function requireSupportAccess(ctx: Ctx, ticketId: bigint) {
+  const actor = requireAccount(ctx);
+  const ticket = ctx.db.supportTicket.id.find(ticketId);
+  if (!ticket) throw new SenderError('Support ticket not found.');
+  if (!actor.isAdmin && !actor.isStaff && ticket.accountId !== actor.id) {
+    throw new SenderError('That support ticket is private.');
+  }
+  return { actor, ticket };
+}
+
+export const triageSupport = spacetimedb.reducer(
+  { ticketId: t.u64(), assigneeId: t.u64(), priority: t.string(), status: t.string() },
+  (ctx, { ticketId, assigneeId, priority, status }) => {
+    requireStaffOrAdmin(ctx);
+    const ticket = ctx.db.supportTicket.id.find(ticketId);
+    if (!ticket) throw new SenderError('Support ticket not found.');
+    let nextAssigneeId = ticket.assigneeId;
+    if (assigneeId !== 0n) {
+      const assignee = ctx.db.account.id.find(assigneeId);
+      if (!assignee || (!assignee.isStaff && !assignee.isAdmin)) throw new SenderError('Assignee must be staff.');
+      nextAssigneeId = assigneeId;
+    }
+    ctx.db.supportTicket.id.update({ ...ticket, assigneeId: nextAssigneeId, priority, status });
+  }
+);
+
+export const replySupport = spacetimedb.reducer(
+  { ticketId: t.u64(), body: t.string() },
+  (ctx, { ticketId, body }) => {
+    const { actor } = requireSupportAccess(ctx, ticketId);
+    ctx.db.supportReply.insert({
+      id: 0n,
+      ticketId,
+      accountId: actor.id,
+      body: body.trim(),
+      createdMicros: nowMicros(ctx),
+    });
+  }
+);
+
+export const linkSupportOrder = spacetimedb.reducer(
+  { ticketId: t.u64(), orderId: t.u64() },
+  (ctx, { ticketId, orderId }) => {
+    const ticket = requireSupportAccess(ctx, ticketId).ticket;
+    const order = requireOrderOwner(ctx, orderId);
+    ctx.db.supportTicket.id.update({ ...ticket, orderId: order.id });
+  }
+);
+
+export const supportRefund = spacetimedb.reducer(
+  { ticketId: t.u64() },
+  (ctx, { ticketId }) => {
+    requireStaffOrAdmin(ctx);
+    const ticket = ctx.db.supportTicket.id.find(ticketId);
+    if (!ticket || ticket.orderId === undefined) throw new SenderError('The case has no linked order.');
+    const order = ctx.db.customerOrder.id.find(ticket.orderId);
+    if (!order) throw new SenderError('Order not found.');
+    if (order.refundedTotal > 0) throw new SenderError('The order was already refunded.');
+    ctx.db.customerOrder.id.update({ ...order, refundedTotal: order.total, status: 'refunded' });
+    ctx.db.supportTicket.id.update({ ...ticket, refundTotal: order.total, status: 'refunded' });
+    ctx.db.paymentRecord.insert({ id: 0n, orderId: order.id, amount: -order.total, status: 'refunded' });
+  }
+);
+
+export const createPromotion = spacetimedb.reducer(
+  {
+    code: t.string(),
+    discountPercent: t.f64(),
+    startMicros: t.i64(),
+    endMicros: t.i64(),
+    usageLimit: t.u32(),
+  },
+  (ctx, input) => {
+    requireStaffOrAdmin(ctx);
+    if (input.discountPercent <= 0 || input.discountPercent > 100) {
+      throw new SenderError('Discount must be between 0 and 100.');
+    }
+    if (input.endMicros <= input.startMicros) throw new SenderError('Promotion dates are invalid.');
+    ctx.db.promotion.insert({ id: 0n, ...input, code: input.code.trim(), redemptions: 0 });
+  }
+);
+
+export const applyPromotion = spacetimedb.reducer({ code: t.string() }, (ctx, { code }) => {
+  const acc = requireAccount(ctx);
+  const promo = ctx.db.promotion.code.find(code.trim());
+  const now = nowMicros(ctx);
+  if (!promo || promo.startMicros > now || promo.endMicros < now || promo.redemptions >= promo.usageLimit) {
+    throw new SenderError('Promotion is expired, exhausted, or unknown.');
+  }
+  const row = { accountId: acc.id, promotionId: promo.id };
+  const existing = ctx.db.cartPromotion.accountId.find(acc.id);
+  if (existing) ctx.db.cartPromotion.accountId.update(row);
+  else ctx.db.cartPromotion.insert(row);
+});
+
+export const saveNotificationPreferences = spacetimedb.reducer(
+  { orderEnabled: t.bool(), stockEnabled: t.bool() },
+  (ctx, input) => {
+    const acc = requireAccount(ctx);
+    const row = { accountId: acc.id, ...input };
+    const existing = ctx.db.notificationPreference.accountId.find(acc.id);
+    if (existing) ctx.db.notificationPreference.accountId.update(row);
+    else ctx.db.notificationPreference.insert(row);
+  }
+);
+
+export const requestStockAlert = spacetimedb.reducer({ itemId: t.u64() }, (ctx, { itemId }) => {
+  const acc = requireAccount(ctx);
+  if (totalStock(ctx, itemId) > 0) throw new SenderError('The item is already available.');
+  const duplicate = [...ctx.db.stockAlert.itemId.filter(itemId)]
+    .some(row => row.accountId === acc.id && !row.fulfilled);
+  if (!duplicate) ctx.db.stockAlert.insert({ id: 0n, accountId: acc.id, itemId, fulfilled: false });
+});
+
+export const scheduleRestock = spacetimedb.reducer(
+  { item: t.string(), warehouse: t.string(), quantity: t.u32(), delaySeconds: t.u32() },
+  (ctx, input) => {
+    requireAdmin(ctx);
+    const itemName = input.item.trim();
+    const warehouseName = input.warehouse.trim();
+    const item = [...ctx.db.item].find(row => row.name === itemName);
+    const warehouse = [...ctx.db.warehouse].find(row => row.name === warehouseName);
+    if (!item || !warehouse) {
+      throw new SenderError('Item or warehouse not found.');
+    }
+    ctx.db.scheduledRestock.insert({
+      id: 0n,
+      itemId: item.id,
+      warehouseId: warehouse.id,
+      quantity: input.quantity,
+      dueMicros: nowMicros(ctx) + BigInt(input.delaySeconds) * SECOND,
+      status: 'pending',
+      reorderRuleId: undefined,
+    });
+  }
+);
+
+export const cancelScheduledRestock = spacetimedb.reducer({ restockId: t.u64() }, (ctx, { restockId }) => {
+  requireAdmin(ctx);
+  const row = ctx.db.scheduledRestock.id.find(restockId);
+  if (!row || row.status !== 'pending') throw new SenderError('Pending restock not found.');
+  ctx.db.scheduledRestock.id.update({ ...row, status: 'cancelled' });
+});
+
+export const restoreExpiredCart = spacetimedb.reducer((ctx) => {
+  const acc = requireAccount(ctx);
+  for (const row of [...ctx.db.expiredCartItem.accountId.filter(acc.id)]) {
+    if (totalStock(ctx, row.itemId) < row.quantity) continue;
+    reserveUnits(ctx, acc.id, row.itemId, row.quantity);
+    ctx.db.cartItem.insert({ id: 0n, accountId: acc.id, itemId: row.itemId, quantity: row.quantity });
+    ctx.db.expiredCartItem.id.delete(row.id);
+  }
+  touchCart(ctx, acc.id);
+});
+
+export const saveReorderRule = spacetimedb.reducer(
+  { itemId: t.u64(), warehouseId: t.u64(), threshold: t.u32(), quantity: t.u32() },
+  (ctx, input) => {
+    requireStaffOrAdmin(ctx);
+    ctx.db.reorderRule.insert({ id: 0n, ...input });
+    processReorderRules(ctx, input.itemId);
+  }
+);
+
+export const dismissRecommendation = spacetimedb.reducer({ itemId: t.u64() }, (ctx, { itemId }) => {
+  const acc = requireAccount(ctx);
+  const exists = [...ctx.db.recommendationDismissal.byAccountItem.filter([acc.id, itemId])].length > 0;
+  if (!exists) ctx.db.recommendationDismissal.insert({ id: 0n, accountId: acc.id, itemId });
+});
+
+// --- progression views ---
+
+const ProfileView = t.object('ProfileView', {
+  accountId: t.u64(),
+  name: t.string(),
+  address: t.string(),
+});
+
+export const myProfile = spacetimedb.view(
+  { name: 'my_profile', public: true },
+  t.option(ProfileView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    return accountId === null ? undefined : ctx.db.customerProfile.accountId.find(accountId) ?? undefined;
+  }
+);
+
+const CatalogDetailView = t.object('CatalogDetailView', {
+  itemId: t.u64(),
+  category: t.string(),
+});
+
+export const catalogDetails = spacetimedb.view(
+  { name: 'catalog_details', public: true },
+  t.array(CatalogDetailView),
+  (ctx) => [...ctx.db.itemCategory.iter()].map(row => ({
+    itemId: row.itemId,
+    category: ctx.db.category.id.find(row.categoryId)?.name ?? '',
+  }))
+);
+
+const StaffRoleView = t.object('StaffRoleView', {
+  accountId: t.u64(),
+  username: t.string(),
+  role: t.string(),
+});
+
+export const staffRoles = spacetimedb.view(
+  { name: 'staff_roles', public: true },
+  t.array(StaffRoleView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    const actor = accountId === null ? null : ctx.db.account.id.find(accountId);
+    if (!actor || (!actor.isAdmin && !actor.isStaff)) return [];
+    return [...ctx.db.account.iter()].filter(row => row.isStaff || row.isAdmin).map(row => ({
+      accountId: row.id,
+      username: row.username,
+      role: ctx.db.staffRole.accountId.find(row.id)?.role ?? (row.isAdmin ? 'administrator' : ''),
+    }));
+  }
+);
+
+const PaymentView = t.object('PaymentView', {
+  orderId: t.u64(),
+  amount: t.f64(),
+  status: t.string(),
+});
+
+export const myPayments = spacetimedb.view(
+  { name: 'my_payments', public: true },
+  t.array(PaymentView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return [];
+    const orderIds = new Set([...ctx.db.customerOrder.accountId.filter(accountId)].map(row => row.id));
+    return [...ctx.db.paymentRecord.iter()].filter(row => orderIds.has(row.orderId))
+      .map(row => ({ orderId: row.orderId, amount: row.amount, status: row.status }));
+  }
+);
+
+const ActivityView = t.object('ActivityView', {
+  actor: t.string(),
+  action: t.string(),
+  subject: t.string(),
+  createdMicros: t.i64(),
+});
+
+export const activityHistory = spacetimedb.view(
+  { name: 'activity_history', public: true },
+  t.array(ActivityView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    const actor = accountId === null ? null : ctx.db.account.id.find(accountId);
+    if (!actor || (!actor.isAdmin && !actor.isStaff)) return [];
+    return [...ctx.db.staffActivity.iter()].map(row => ({
+      actor: ctx.db.account.id.find(row.actorAccountId)?.username ?? 'unknown',
+      action: row.action,
+      subject: row.subject,
+      createdMicros: row.createdMicros,
+    }));
+  }
+);
+
+const SupportTicketView = t.object('SupportTicketView', {
+  id: t.u64(),
+  reference: t.string(),
+  subject: t.string(),
+  status: t.string(),
+  priority: t.string(),
+  assignee: t.string(),
+  orderId: t.option(t.u64()),
+  refundTotal: t.f64(),
+});
+
+export const visibleSupportTickets = spacetimedb.view(
+  { name: 'visible_support_tickets', public: true },
+  t.array(SupportTicketView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    const actor = accountId === null ? null : ctx.db.account.id.find(accountId);
+    const sender = ctx.sender.toHexString();
+    return [...ctx.db.supportTicket.iter()]
+      .filter(row => isTicketCreator(sender, row.creatorIdentity.toHexString()) ||
+        !!actor && (actor.isAdmin || actor.isStaff || row.accountId === accountId))
+      .map(row => ({
+        id: row.id,
+        reference: row.reference,
+        subject: row.subject,
+        status: row.status,
+        priority: row.priority,
+        assignee: row.assigneeId === undefined ? '' : ctx.db.account.id.find(row.assigneeId)?.username ?? '',
+        orderId: row.orderId,
+        refundTotal: row.refundTotal,
+      }));
+  }
+);
+
+const SupportReplyView = t.object('SupportReplyView', {
+  ticketId: t.u64(),
+  author: t.string(),
+  body: t.string(),
+});
+
+export const visibleSupportReplies = spacetimedb.view(
+  { name: 'visible_support_replies', public: true },
+  t.array(SupportReplyView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return [];
+    const actor = ctx.db.account.id.find(accountId);
+    if (!actor) return [];
+    const allowed = new Set([...ctx.db.supportTicket.iter()]
+      .filter(row => actor.isAdmin || actor.isStaff || row.accountId === accountId)
+      .map(row => row.id));
+    return [...ctx.db.supportReply.iter()].filter(row => allowed.has(row.ticketId)).map(row => ({
+      ticketId: row.ticketId,
+      author: ctx.db.account.id.find(row.accountId)?.username ?? 'unknown',
+      body: row.body,
+    }));
+  }
+);
+
+const PreferenceView = t.object('PreferenceView', {
+  orderEnabled: t.bool(),
+  stockEnabled: t.bool(),
+});
+
+export const myNotificationPreferences = spacetimedb.view(
+  { name: 'my_notification_preferences', public: true },
+  t.option(PreferenceView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return undefined;
+    const row = ctx.db.notificationPreference.accountId.find(accountId);
+    return row ? { orderEnabled: row.orderEnabled, stockEnabled: row.stockEnabled } : undefined;
+  }
+);
+
+const NotificationView = t.object('NotificationView', {
+  id: t.u64(),
+  kind: t.string(),
+  message: t.string(),
+  unread: t.bool(),
+});
+
+export const myNotifications = spacetimedb.view(
+  { name: 'my_notifications', public: true },
+  t.array(NotificationView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return [];
+    return [...ctx.db.notification.accountId.filter(accountId)].map(row => ({
+      id: row.id,
+      kind: row.kind,
+      message: row.message,
+      unread: row.unread,
+    }));
+  }
+);
+
+const ReservationView = t.object('ReservationView', {
+  itemId: t.u64(),
+  expiresMicros: t.i64(),
+  expired: t.bool(),
+});
+
+export const myReservations = spacetimedb.view(
+  { name: 'my_reservations', public: true },
+  t.array(ReservationView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return [];
+    const reservations = new Map<bigint, { itemId: bigint; expiresMicros: bigint; expired: boolean }>();
+    for (const row of ctx.db.reservation.byAccountItem.filter(accountId)) {
+      const current = reservations.get(row.itemId);
+      reservations.set(row.itemId, {
+        itemId: row.itemId,
+        expiresMicros: current && current.expiresMicros < row.expiresMicros
+          ? current.expiresMicros
+          : row.expiresMicros,
+        expired: (current?.expired ?? false) || row.expired,
+      });
+    }
+    return [...reservations.values()];
+  }
+);
+
+const ExpiredCartView = t.object('ExpiredCartView', { itemId: t.u64(), quantity: t.u32() });
+
+export const myExpiredCart = spacetimedb.view(
+  { name: 'my_expired_cart', public: true },
+  t.array(ExpiredCartView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return [];
+    return [...ctx.db.expiredCartItem.accountId.filter(accountId)]
+      .map(row => ({ itemId: row.itemId, quantity: row.quantity }));
+  }
+);
+
+const RestockView = t.object('RestockView', {
+  id: t.u64(),
+  itemId: t.u64(),
+  warehouseId: t.u64(),
+  quantity: t.u32(),
+  dueMicros: t.i64(),
+  status: t.string(),
+});
+
+export const visibleRestocks = spacetimedb.view(
+  { name: 'visible_restocks', public: true },
+  t.array(RestockView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    const actor = accountId === null ? null : ctx.db.account.id.find(accountId);
+    if (!actor || (!actor.isAdmin && !actor.isStaff)) return [];
+    return [...ctx.db.scheduledRestock.iter()];
+  }
+);
+
+const LedgerView = t.object('LedgerView', {
+  itemId: t.u64(),
+  warehouseId: t.u64(),
+  quantity: t.u32(),
+  source: t.string(),
+});
+
+export const visibleStockLedger = spacetimedb.view(
+  { name: 'visible_stock_ledger', public: true },
+  t.array(LedgerView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    const actor = accountId === null ? null : ctx.db.account.id.find(accountId);
+    if (!actor || (!actor.isAdmin && !actor.isStaff)) return [];
+    return [...ctx.db.stockLedger.iter()].map(row => ({
+      itemId: row.itemId,
+      warehouseId: row.warehouseId,
+      quantity: row.quantity,
+      source: row.source,
+    }));
+  }
+);
+
+const CompletedOrderView = t.object('CompletedOrderView', {
+  orderId: t.u64(),
+  status: t.string(),
+  itemNames: t.array(t.string()),
+});
+
+export const completedOrders = spacetimedb.view(
+  { name: 'completed_orders', public: true },
+  t.array(CompletedOrderView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    const actor = accountId === null ? null : ctx.db.account.id.find(accountId);
+    if (!actor || (!actor.isAdmin && !actor.isStaff)) return [];
+    return [...ctx.db.customerOrder.iter()].filter(row => row.status !== 'pending')
+      .map(row => ({
+        orderId: row.id,
+        status: row.status,
+        itemNames: [...ctx.db.orderItem.orderId.filter(row.id)].map(itemRow => itemRow.itemName),
+      }));
+  }
+);
+
+const PromotionReportView = t.object('PromotionReportView', {
+  promotionId: t.u64(),
+  code: t.string(),
+  redemptions: t.u32(),
+  revenue: t.f64(),
+});
+
+const PromotionView = t.object('PromotionView', {
+  id: t.u64(),
+  code: t.string(),
+  discountPercent: t.f64(),
+  startMicros: t.i64(),
+  endMicros: t.i64(),
+  usageLimit: t.u32(),
+});
+
+export const visiblePromotions = spacetimedb.view(
+  { name: 'visible_promotions', public: true },
+  t.array(PromotionView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    const actor = accountId === null ? null : ctx.db.account.id.find(accountId);
+    if (!actor || (!actor.isAdmin && !actor.isStaff)) return [];
+    return [...ctx.db.promotion.iter()].map(row => ({
+      id: row.id,
+      code: row.code,
+      discountPercent: row.discountPercent,
+      startMicros: row.startMicros,
+      endMicros: row.endMicros,
+      usageLimit: row.usageLimit,
+    }));
+  }
+);
+
+export const promotionReports = spacetimedb.view(
+  { name: 'promotion_reports', public: true },
+  t.array(PromotionReportView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    const actor = accountId === null ? null : ctx.db.account.id.find(accountId);
+    if (!actor || (!actor.isAdmin && !actor.isStaff)) return [];
+    return [...ctx.db.promotion.iter()].map(promo => ({
+      promotionId: promo.id,
+      code: promo.code,
+      redemptions: promo.redemptions,
+      revenue: [...ctx.db.customerOrder.iter()]
+        .filter(order => order.promotionId === promo.id)
+        .reduce((total, order) => total + order.total, 0),
+    }));
+  }
+);
+
+export const visibleReorderRules = spacetimedb.view(
+  { name: 'visible_reorder_rules', public: true },
+  t.array(reorderRule.rowType),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    const actor = accountId === null ? null : ctx.db.account.id.find(accountId);
+    return actor && (actor.isAdmin || actor.isStaff) ? [...ctx.db.reorderRule.iter()] : [];
+  }
+);
+
+const DismissedRecommendationView = t.object('DismissedRecommendationView', { itemId: t.u64() });
+
+export const myDismissedRecommendations = spacetimedb.view(
+  { name: 'my_dismissed_recommendations', public: true },
+  t.array(DismissedRecommendationView),
+  (ctx) => {
+    const accountId = getAccountId(ctx);
+    if (accountId === null) return [];
+    return [...ctx.db.recommendationDismissal.byAccountItem.filter(accountId)]
+      .map(row => ({ itemId: row.itemId }));
+  }
+);
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/src/progression-policy.ts b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/src/progression-policy.ts
new file mode 100644
index 00000000000..195dd38bd72
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/src/progression-policy.ts
@@ -0,0 +1,38 @@
+export interface AvailableStock {
+  warehouseId: bigint;
+  quantity: number;
+}
+
+export interface StockAllocation {
+  warehouseId: bigint;
+  quantity: number;
+}
+
+export function planStockAllocation(
+  rows: readonly AvailableStock[],
+  quantity: number,
+): StockAllocation[] | null {
+  if (quantity < 1 || rows.reduce((sum, row) => sum + row.quantity, 0) < quantity) return null;
+
+  let remaining = quantity;
+  const allocations: StockAllocation[] = [];
+  for (const row of rows) {
+    if (remaining === 0) break;
+    const allocated = Math.min(row.quantity, remaining);
+    if (allocated === 0) continue;
+    allocations.push({ warehouseId: row.warehouseId, quantity: allocated });
+    remaining -= allocated;
+  }
+  return allocations;
+}
+
+export function isTicketCreator(senderIdentity: string, creatorIdentity: string): boolean {
+  return senderIdentity === creatorIdentity;
+}
+
+export function hasPendingRestockForRule(
+  rows: readonly { reorderRuleId?: bigint; status: string }[],
+  ruleId: bigint,
+): boolean {
+  return rows.some(row => row.reorderRuleId === ruleId && row.status === 'pending');
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/src/schema.ts b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/src/schema.ts
new file mode 100644
index 00000000000..15d5d96ade8
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/src/schema.ts
@@ -0,0 +1,423 @@
+import { schema, table, t } from 'spacetimedb/server';
+
+// --- Fixed contract tables (exact names/shapes; external systems may write these directly) ---
+
+export const item = table(
+  { name: 'item', public: true },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    name: t.string(),
+    price: t.f64(),
+  }
+);
+
+export const warehouse = table(
+  { name: 'warehouse', public: true },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    name: t.string(),
+  }
+);
+
+export const stock = table(
+  {
+    name: 'stock',
+    public: true,
+    indexes: [
+      { accessor: 'by_item_warehouse', algorithm: 'btree', columns: ['item_id', 'warehouse_id'] },
+    ],
+  },
+  {
+    item_id: t.u64(),
+    warehouse_id: t.u64(),
+    quantity: t.u32(),
+  }
+);
+
+// --- App-owned tables ---
+
+export const account = table(
+  { name: 'account' },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    username: t.string().unique(),
+    passwordHash: t.string(),
+    isAdmin: t.bool(),
+    isStaff: t.bool().default(false),
+  }
+);
+
+export const session = table(
+  { name: 'session' },
+  {
+    identity: t.identity().primaryKey(),
+    accountId: t.u64(),
+  }
+);
+
+export const cartItem = table(
+  {
+    name: 'cart_item',
+    indexes: [
+      { accessor: 'byAccountItem', algorithm: 'btree', columns: ['accountId', 'itemId'] },
+    ],
+  },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    accountId: t.u64(),
+    itemId: t.u64(),
+    quantity: t.u32(),
+  }
+);
+
+export const customerOrder = table(
+  {
+    name: 'customer_order',
+    indexes: [{ accessor: 'accountId', algorithm: 'btree', columns: ['accountId'] }],
+  },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    accountId: t.u64(),
+    createdAt: t.timestamp(),
+    total: t.f64(),
+    status: t.string().default('pending'),
+    discount: t.f64().default(0),
+    promotionId: t.option(t.u64()),
+    refundedTotal: t.f64().default(0),
+  }
+);
+
+export const orderItem = table(
+  {
+    name: 'order_item',
+    indexes: [{ accessor: 'orderId', algorithm: 'btree', columns: ['orderId'] }],
+  },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    orderId: t.u64(),
+    itemId: t.u64(),
+    itemName: t.string(),
+    quantity: t.u32(),
+    unitPrice: t.f64(),
+    returned: t.bool().default(false),
+  }
+);
+
+export const orderItemStock = table(
+  {
+    name: 'order_item_stock',
+    indexes: [{ accessor: 'orderItemId', algorithm: 'btree', columns: ['orderItemId'] }],
+  },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    orderItemId: t.u64(),
+    warehouseId: t.u64(),
+    quantity: t.u32(),
+  }
+);
+
+export const review = table(
+  {
+    name: 'review',
+    public: true,
+    indexes: [
+      { accessor: 'itemId', algorithm: 'btree', columns: ['itemId'] },
+      { accessor: 'byItemAccount', algorithm: 'btree', columns: ['itemId', 'accountId'] },
+    ],
+  },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    itemId: t.u64(),
+    accountId: t.u64(),
+    rating: t.u32(),
+    comment: t.string(),
+    createdAt: t.timestamp(),
+  }
+);
+
+export const itemStats = table(
+  { name: 'item_stats', public: true },
+  {
+    itemId: t.u64().primaryKey(),
+    purchaseCount: t.u32(),
+  }
+);
+
+export const category = table(
+  { name: 'category' },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    name: t.string().unique(),
+  }
+);
+
+export const itemCategory = table(
+  {
+    name: 'item_category',
+    indexes: [{ accessor: 'byCategory', algorithm: 'btree', columns: ['categoryId'] }],
+  },
+  {
+    itemId: t.u64().primaryKey(),
+    categoryId: t.u64(),
+  }
+);
+
+export const customerProfile = table(
+  { name: 'customer_profile' },
+  {
+    accountId: t.u64().primaryKey(),
+    name: t.string(),
+    address: t.string(),
+  }
+);
+
+export const staffRole = table(
+  { name: 'staff_role' },
+  {
+    accountId: t.u64().primaryKey(),
+    role: t.string(),
+  }
+);
+
+export const itemVariant = table(
+  { name: 'item_variant', public: true, indexes: [{ accessor: 'itemId', algorithm: 'btree', columns: ['itemId'] }] },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    itemId: t.u64(),
+    name: t.string(),
+  }
+);
+
+export const paymentRecord = table(
+  { name: 'payment_record', indexes: [{ accessor: 'orderId', algorithm: 'btree', columns: ['orderId'] }] },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    orderId: t.u64(),
+    amount: t.f64(),
+    status: t.string(),
+  }
+);
+
+export const staffActivity = table(
+  { name: 'staff_activity', indexes: [{ accessor: 'actorAccountId', algorithm: 'btree', columns: ['actorAccountId'] }] },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    actorAccountId: t.u64(),
+    action: t.string(),
+    subject: t.string(),
+    createdMicros: t.i64(),
+  }
+);
+
+export const supportTicket = table(
+  { name: 'support_ticket', indexes: [{ accessor: 'accountId', algorithm: 'btree', columns: ['accountId'] }] },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    reference: t.string().unique(),
+    creatorIdentity: t.identity(),
+    accountId: t.option(t.u64()),
+    email: t.string(),
+    subject: t.string(),
+    message: t.string(),
+    status: t.string(),
+    priority: t.string(),
+    assigneeId: t.option(t.u64()),
+    orderId: t.option(t.u64()),
+    refundTotal: t.f64(),
+  }
+);
+
+export const supportReply = table(
+  { name: 'support_reply', indexes: [{ accessor: 'ticketId', algorithm: 'btree', columns: ['ticketId'] }] },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    ticketId: t.u64(),
+    accountId: t.u64(),
+    body: t.string(),
+    createdMicros: t.i64(),
+  }
+);
+
+export const promotion = table(
+  { name: 'promotion' },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    code: t.string().unique(),
+    discountPercent: t.f64(),
+    startMicros: t.i64(),
+    endMicros: t.i64(),
+    usageLimit: t.u32(),
+    redemptions: t.u32(),
+  }
+);
+
+export const cartPromotion = table(
+  { name: 'cart_promotion' },
+  {
+    accountId: t.u64().primaryKey(),
+    promotionId: t.u64(),
+  }
+);
+
+export const notificationPreference = table(
+  { name: 'notification_preference' },
+  {
+    accountId: t.u64().primaryKey(),
+    orderEnabled: t.bool(),
+    stockEnabled: t.bool(),
+  }
+);
+
+export const stockAlert = table(
+  { name: 'stock_alert', indexes: [{ accessor: 'itemId', algorithm: 'btree', columns: ['itemId'] }] },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    accountId: t.u64(),
+    itemId: t.u64(),
+    fulfilled: t.bool(),
+  }
+);
+
+export const notification = table(
+  { name: 'notification', indexes: [{ accessor: 'accountId', algorithm: 'btree', columns: ['accountId'] }] },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    accountId: t.u64(),
+    kind: t.string(),
+    message: t.string(),
+    unread: t.bool(),
+  }
+);
+
+export const reservation = table(
+  { name: 'reservation', indexes: [{ accessor: 'byAccountItem', algorithm: 'btree', columns: ['accountId', 'itemId'] }] },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    accountId: t.u64(),
+    itemId: t.u64(),
+    warehouseId: t.u64(),
+    quantity: t.u32(),
+    expiresMicros: t.i64(),
+    expired: t.bool(),
+  }
+);
+
+export const expiredCartItem = table(
+  { name: 'expired_cart_item', indexes: [{ accessor: 'accountId', algorithm: 'btree', columns: ['accountId'] }] },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    accountId: t.u64(),
+    itemId: t.u64(),
+    quantity: t.u32(),
+  }
+);
+
+export const cartExpiry = table(
+  { name: 'cart_expiry' },
+  {
+    accountId: t.u64().primaryKey(),
+    expiresMicros: t.i64(),
+    expired: t.bool(),
+  }
+);
+
+export const scheduledRestock = table(
+  { name: 'scheduled_restock' },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    itemId: t.u64(),
+    warehouseId: t.u64(),
+    quantity: t.u32(),
+    dueMicros: t.i64(),
+    status: t.string(),
+    reorderRuleId: t.option(t.u64()),
+  }
+);
+
+export const stockLedger = table(
+  { name: 'stock_ledger' },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    itemId: t.u64(),
+    warehouseId: t.u64(),
+    quantity: t.u32(),
+    createdMicros: t.i64(),
+    source: t.string(),
+  }
+);
+
+export const deliverySchedule = table(
+  { name: 'delivery_schedule' },
+  {
+    orderId: t.u64().primaryKey(),
+    dueMicros: t.i64(),
+    completed: t.bool(),
+  }
+);
+
+export const reorderRule = table(
+  { name: 'reorder_rule' },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    itemId: t.u64(),
+    warehouseId: t.u64(),
+    threshold: t.u32(),
+    quantity: t.u32(),
+  }
+);
+
+export const recommendationDismissal = table(
+  { name: 'recommendation_dismissal', indexes: [{ accessor: 'byAccountItem', algorithm: 'btree', columns: ['accountId', 'itemId'] }] },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    accountId: t.u64(),
+    itemId: t.u64(),
+  }
+);
+
+export const maintenanceTick = table(
+  { name: 'maintenance_tick' },
+  {
+    id: t.u64().primaryKey().autoInc(),
+    scheduledAt: t.scheduleAt(),
+  }
+);
+
+const spacetimedb = schema({
+  item,
+  warehouse,
+  stock,
+  account,
+  session,
+  cartItem,
+  customerOrder,
+  orderItem,
+  orderItemStock,
+  review,
+  itemStats,
+  category,
+  itemCategory,
+  customerProfile,
+  staffRole,
+  itemVariant,
+  paymentRecord,
+  staffActivity,
+  supportTicket,
+  supportReply,
+  promotion,
+  cartPromotion,
+  notificationPreference,
+  stockAlert,
+  notification,
+  reservation,
+  expiredCartItem,
+  cartExpiry,
+  scheduledRestock,
+  stockLedger,
+  deliverySchedule,
+  reorderRule,
+  recommendationDismissal,
+  maintenanceTick,
+});
+
+export default spacetimedb;
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/tsconfig.json b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/tsconfig.json
new file mode 100644
index 00000000000..f339c1bc6d6
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/backend/spacetimedb/tsconfig.json
@@ -0,0 +1,13 @@
+{
+  "compilerOptions": {
+    "strict": true,
+    "skipLibCheck": true,
+    "moduleResolution": "bundler",
+    "target": "ESNext",
+    "lib": ["ES2021", "dom"],
+    "module": "ESNext",
+    "isolatedModules": true,
+    "noEmit": true
+  },
+  "include": ["./**/*"]
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/index.html b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/index.html
new file mode 100644
index 00000000000..8b77d8835cc
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/index.html
@@ -0,0 +1,12 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Storefront</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/package-lock.json b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/package-lock.json
new file mode 100644
index 00000000000..7e30b451268
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/package-lock.json
@@ -0,0 +1,1079 @@
+{
+  "name": "spacetimedb-shop-client",
+  "version": "0.0.1",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "spacetimedb-shop-client",
+      "version": "0.0.1",
+      "dependencies": {
+        "react": "^18.3.1",
+        "react-dom": "^18.3.1",
+        "spacetimedb": "file:/deps/spacetimedb.tgz"
+      },
+      "devDependencies": {
+        "@types/react": "^18.3.3",
+        "@types/react-dom": "^18.3.0",
+        "@vitejs/plugin-react": "^6.1.0",
+        "typescript": "~5.6.2",
+        "vite": "^8.2.2"
+      }
+    },
+    "node_modules/@oxc-project/types": {
+      "version": "0.146.0",
+      "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.146.0.tgz",
+      "integrity": "sha512-XC0QsnnhVe7sLIWmYmdPw7x5P0h4W8vUU3Nv1ySgWXtvCz8NizoAEpGXA0sOYoJQV2Rl13LgURAHQ5cI5ILCSA==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/Boshen"
+      }
+    },
+    "node_modules/@rolldown/binding-android-arm-eabi": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm-eabi/-/binding-android-arm-eabi-1.2.5.tgz",
+      "integrity": "sha512-DLe/i+l8ynIBY7XEQ191TeZvCoowIGa18R+dIV30GW7DiOtp74i/xX8hs8GUjW5ARV7VZuie3d6AumSmCwbeRA==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-android-arm64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.2.5.tgz",
+      "integrity": "sha512-zXcwKlQApYAOELHd8PwKDFkagYF9Wy4e0RJ+0qnzl9Pjnpj75TEG8ufv40p2J7kCEfwZAsNiuzRIyNNMWT38ig==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-darwin-arm64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.2.5.tgz",
+      "integrity": "sha512-dK4QakI42nzWgJT5sm4y4y/O//D4OxM75/cH28RLV+nzIN9AY+YsbuUVrUTjlLjXR6vpyxFbSsbmNuJ6BP9sww==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-darwin-x64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.2.5.tgz",
+      "integrity": "sha512-fqSALaUu1Wjd1nK2uW2kJDWdLCc8lx1IcY+MTY26Aurfdx19anlzhqXOgCFbBFQnlFDTn4TC1/7Nz4Bl2mLP3A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-freebsd-x64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.2.5.tgz",
+      "integrity": "sha512-/vCnNxlkxs9tKxNDcyWUePpJ/PgTzxIaVhoM5SmG8UV+GR/IcPam4VYxi7GIMo7PSDuNqlJqvprqii9NqqVCMw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm-gnueabihf": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.2.5.tgz",
+      "integrity": "sha512-abk0NLA519LxRCszmbE0jYKuQ9YPocOXTiOXOo6Yr+YAT95VH+PtqYAjOJvGKt3viEd/x4qzabAlwd5bHOOARg==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm64-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.2.5.tgz",
+      "integrity": "sha512-Y7eALiJ8lr0M2HH103Js+g7V34wf6snlpZLAsHI90uLhr3PVlNsbFVAXJC9d/V6BnPyKtpSwI+NcB/RLxsQxuA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-arm64-musl": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.2.5.tgz",
+      "integrity": "sha512-xMvZgnbZg4YVnR/AX2b3oOPDTFYJvUVaJg5FedA/LuvexAtXibZQej4cnTkw3rjsJ/ggUROB64TdtETiim+FYA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-ppc64-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.2.5.tgz",
+      "integrity": "sha512-GRjeqTUDHTo5GwntsLaAMcBahG3nlpjftXWZLN73HiYQlhwEowvarFgQnRnQZtIp4keXX7quXFbG38uPZBa2EA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-s390x-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.2.5.tgz",
+      "integrity": "sha512-vLNTR45F2Uwc8AufkNXPmB4VliaXs+FvcheEogIzOXzO4l+LzieXF5A/TWxLy5HtqpsRCHUfd0lPVrrdgXdLHQ==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-x64-gnu": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.2.5.tgz",
+      "integrity": "sha512-Mgj59/HTuYeK9Gz2MA+mBWKnHsAgkBSec15ZMb1st3oIfFbX7gCjOae7GydHhzcyQi9Z/7M1QuN9bR3oFqF0jQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-linux-x64-musl": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.2.5.tgz",
+      "integrity": "sha512-mY8AP0/ichsbhAxGnLa3d3+MwV0EfgrPND2bplI3Ym8T6R2pJ0N87bvrKVwNXmdy3jnr6eQBecdqx/HMknBmpA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-openharmony-arm64": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.2.5.tgz",
+      "integrity": "sha512-8SLssA2oweAxyRgDp789ACfRb/3P+zNRJpzZxSizxF9m8NUDQ4+3xjo8ttjhVGGw6Qxb70oZiEtIjaKikCO7Yw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-win32-arm64-msvc": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.2.5.tgz",
+      "integrity": "sha512-vGbruD5zquhoc8D9SViXgN2FBJtNdTyQ4DtG+SWiEGlJiAzoKcZ2xp+xuXCffhubVdt0NJlTZqkeRuERy7g8Cw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/binding-win32-x64-msvc": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.2.5.tgz",
+      "integrity": "sha512-e/SXpgISz+IoqVcSSI0rx/d/he8zqLex+/rCWpnHpmVfmPIUjag9H6P7zotf0gJHwPUhQxZ/mF8tr6acebT9yw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/pluginutils": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz",
+      "integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/prop-types": {
+      "version": "15.7.15",
+      "resolved": "https://registry.npmjs.org/@types/prop-types/-/prop-types-15.7.15.tgz",
+      "integrity": "sha512-F6bEyamV9jKGAFBEmlQnesRPGOQqS2+Uwi0Em15xenOxHaf2hv6L8YCVn3rPdPJOiJfPiCnLIRyvwVaqMY3MIw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/react": {
+      "version": "18.3.31",
+      "resolved": "https://registry.npmjs.org/@types/react/-/react-18.3.31.tgz",
+      "integrity": "sha512-vfEqpXTvwT91yhmwdfouStN2hSKwTvyRs8qpLfADyrq/kxDw0hZM7Wk9Ug1FELj8hIby+S/+kQCSRFF32nv2Qw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/prop-types": "*",
+        "csstype": "^3.2.2"
+      }
+    },
+    "node_modules/@types/react-dom": {
+      "version": "18.3.7",
+      "resolved": "https://registry.npmjs.org/@types/react-dom/-/react-dom-18.3.7.tgz",
+      "integrity": "sha512-MEe3UeoENYVFXzoXEWsvcpg6ZvlrFNlOQ7EOsvhI3CfAXwzPfO8Qwuxd40nepsYKqyyVQnTdEfv68q91yLcKrQ==",
+      "dev": true,
+      "license": "MIT",
+      "peerDependencies": {
+        "@types/react": "^18.0.0"
+      }
+    },
+    "node_modules/@vitejs/plugin-react": {
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-6.1.0.tgz",
+      "integrity": "sha512-qd2BzUBehkov86WFhg0JkEFEYyCLG9uPCe6qWTY/kRlss9OvJrOF2UbIWT7p+8IzZHkEu0DNGHc4HSv+JdDLsw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@rolldown/pluginutils": "^1.0.1"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "peerDependencies": {
+        "@rolldown/plugin-babel": "^0.1.7 || ^0.2.0",
+        "babel-plugin-react-compiler": "^1.0.0",
+        "oxc-transform-react": "^0.145.0",
+        "vite": "^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@rolldown/plugin-babel": {
+          "optional": true
+        },
+        "babel-plugin-react-compiler": {
+          "optional": true
+        },
+        "oxc-transform-react": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/base64-js": {
+      "version": "1.5.1",
+      "resolved": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz",
+      "integrity": "sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/feross"
+        },
+        {
+          "type": "patreon",
+          "url": "https://www.patreon.com/feross"
+        },
+        {
+          "type": "consulting",
+          "url": "https://feross.org/support"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/csstype": {
+      "version": "3.2.3",
+      "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
+      "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/detect-libc": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/fdir": {
+      "version": "6.5.0",
+      "resolved": "https://registry.npmjs.org/fdir/-/fdir-6.5.0.tgz",
+      "integrity": "sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "peerDependencies": {
+        "picomatch": "^3 || ^4"
+      },
+      "peerDependenciesMeta": {
+        "picomatch": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/headers-polyfill": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/headers-polyfill/-/headers-polyfill-4.0.3.tgz",
+      "integrity": "sha512-IScLbePpkvO846sIwOtOTDjutRMWdXdJmXdMvk6gCBHxFO8d+QKOQedyZSxFTTFYRSmlgSTDtXqqq4pcenBXLQ==",
+      "license": "MIT"
+    },
+    "node_modules/js-tokens": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
+      "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==",
+      "license": "MIT"
+    },
+    "node_modules/lightningcss": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.33.0.tgz",
+      "integrity": "sha512-WkUDrojuJs0xkgGf2udWxa3yGBRxPtxUkB79i6aCZLRgc7PM8fZe9TosfPDcvEpQZbuFASnHYmRLBLUbmLOIIA==",
+      "dev": true,
+      "license": "MPL-2.0",
+      "dependencies": {
+        "detect-libc": "^2.0.3"
+      },
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      },
+      "optionalDependencies": {
+        "lightningcss-android-arm64": "1.33.0",
+        "lightningcss-darwin-arm64": "1.33.0",
+        "lightningcss-darwin-x64": "1.33.0",
+        "lightningcss-freebsd-x64": "1.33.0",
+        "lightningcss-linux-arm-gnueabihf": "1.33.0",
+        "lightningcss-linux-arm64-gnu": "1.33.0",
+        "lightningcss-linux-arm64-musl": "1.33.0",
+        "lightningcss-linux-x64-gnu": "1.33.0",
+        "lightningcss-linux-x64-musl": "1.33.0",
+        "lightningcss-win32-arm64-msvc": "1.33.0",
+        "lightningcss-win32-x64-msvc": "1.33.0"
+      }
+    },
+    "node_modules/lightningcss-android-arm64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.33.0.tgz",
+      "integrity": "sha512-gEpRTalKdosp4Bb8qWtc2iOgE5SeIHlpS1up9bFq2wAyYhl1UdTObYiHe98zEM9SQvSoqQZ1IQD0JNpg3Ml5pg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-arm64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.33.0.tgz",
+      "integrity": "sha512-Sciaz8eenNTKn9b3t7+xr0ipTp9YxKQY4npwQ3mrRuL0BAVHBLyZxofhaKBAVtzmtRZ/zTyo0/to4B1uWG/Djg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-darwin-x64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.33.0.tgz",
+      "integrity": "sha512-Z5UPAxzrjlWNNyGy6i65cJzzvgJ5D3T6wMvs+gWpY9d7qRhANrxqAp6LhxIgZhWEw18RfJTGcRxjuLIBr+m8XQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-freebsd-x64": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.33.0.tgz",
+      "integrity": "sha512-QQM/Ti/hQajJwCY+RiWuCZ9sdtI/XQk7nDK5vC8kkdwixezOlDgvDx7+RT+QjK6FcFT4MpsuoBnHIo/O3StRRg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm-gnueabihf": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.33.0.tgz",
+      "integrity": "sha512-N7FVBe6iS24MlM6R/4RBTxGhQheZGs7tiQ9U32UtF75NzP5Q7xWPRqLBCKxlRQRk3rY1jCIPLzx7WzOhuUIRLQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-gnu": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.33.0.tgz",
+      "integrity": "sha512-j2v/itmy4HlNxlc6voKXYgBqNi0Ng2LShg4z7GufpEgs05P+2suBVyi9I6YHq5uoVFx9ETin3eCEhLVyXGQnKg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-musl": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.33.0.tgz",
+      "integrity": "sha512-yiO5ROMuYQgXbC60yjZU5CYSFZGKXL0HFATXt9mHJn1+zW55oCtMI9NfcVhYLMFDL7gV7oBPon/EmMMGg2OvtQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-gnu": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.33.0.tgz",
+      "integrity": "sha512-ar+Ju7LmcN0Jo4FpL4hpFybwNG9/3A/Br5KW2n2jyODg3MEZXaDYADdemoNS+BDNfMgKvylJLj4S5tyRActuAg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-musl": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.33.0.tgz",
+      "integrity": "sha512-RYiYbkokw0trfKqqzfF55lginwEPrD3OJDfTuJzFs1MK6iFnDenaz1fqLLtX4ITG3OktJQXOeTaw1awrBAlZPw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-arm64-msvc": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.33.0.tgz",
+      "integrity": "sha512-1K+MPfLSFVpphzpdbfkhlWk6wBrTObBzS2T6db10PNOZgR9GoVsAWzwNyuhUYYbTp23j+4RrncfujZ4uAzXvwA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-x64-msvc": {
+      "version": "1.33.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.33.0.tgz",
+      "integrity": "sha512-OlEICDx/Xl0FqSp4bry8zFnCvGpig3Gl4gCquvYwHuqJKEC1+n9NgDniFvqHGmMv1ZkqDJrDqKKSykTDX+ehuA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/loose-envify": {
+      "version": "1.4.0",
+      "resolved": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
+      "integrity": "sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==",
+      "license": "MIT",
+      "dependencies": {
+        "js-tokens": "^3.0.0 || ^4.0.0"
+      },
+      "bin": {
+        "loose-envify": "cli.js"
+      }
+    },
+    "node_modules/nanoid": {
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.cjs"
+      },
+      "engines": {
+        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
+      }
+    },
+    "node_modules/object-inspect": {
+      "version": "1.13.4",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
+      "integrity": "sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/picocolors": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
+      "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/picomatch": {
+      "version": "4.0.7",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.7.tgz",
+      "integrity": "sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/jonschlinkert"
+      }
+    },
+    "node_modules/postcss": {
+      "version": "8.5.26",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.26.tgz",
+      "integrity": "sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/postcss/"
+        },
+        {
+          "type": "tidelift",
+          "url": "https://tidelift.com/funding/github/npm/postcss"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "nanoid": "^3.3.17",
+        "picocolors": "^1.1.1",
+        "source-map-js": "^1.2.1"
+      },
+      "engines": {
+        "node": "^10 || ^12 || >=14"
+      }
+    },
+    "node_modules/prettier": {
+      "version": "3.9.6",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.9.6.tgz",
+      "integrity": "sha512-OpN0zzVdiaiAhxpuuj5efpIS4sY9j7bY6uR5mnj5yPzGkdkjNKSJeUThPb60Jw29QuAZgA4o+/iB49kFiaBX6g==",
+      "license": "MIT",
+      "bin": {
+        "prettier": "bin/prettier.cjs"
+      },
+      "engines": {
+        "node": ">=14"
+      },
+      "funding": {
+        "url": "https://github.com/prettier/prettier?sponsor=1"
+      }
+    },
+    "node_modules/pure-rand": {
+      "version": "7.0.1",
+      "resolved": "https://registry.npmjs.org/pure-rand/-/pure-rand-7.0.1.tgz",
+      "integrity": "sha512-oTUZM/NAZS8p7ANR3SHh30kXB+zK2r2BPcEn/awJIbOvq82WoMN4p62AWWp3Hhw50G0xMsw1mhIBLqHw64EcNQ==",
+      "funding": [
+        {
+          "type": "individual",
+          "url": "https://github.com/sponsors/dubzzz"
+        },
+        {
+          "type": "opencollective",
+          "url": "https://opencollective.com/fast-check"
+        }
+      ],
+      "license": "MIT"
+    },
+    "node_modules/react": {
+      "version": "18.3.1",
+      "resolved": "https://registry.npmjs.org/react/-/react-18.3.1.tgz",
+      "integrity": "sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ==",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0"
+      },
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/react-dom": {
+      "version": "18.3.1",
+      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-18.3.1.tgz",
+      "integrity": "sha512-5m4nQKp+rZRb09LNH59GM4BxTh9251/ylbKIbpe7TpGxfJ+9kv6BLkLBXIjjspbgbnIBNqlI23tRnTWT0snUIw==",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0",
+        "scheduler": "^0.23.2"
+      },
+      "peerDependencies": {
+        "react": "^18.3.1"
+      }
+    },
+    "node_modules/rolldown": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.2.5.tgz",
+      "integrity": "sha512-VD2IE5PUG4Oj8zz2VGykiYd5wbnjdIiSsNQb8Qu5B+noEp+A78mu2iVvpp27g8es14Tk9rofNs5Tku9iQCS4fA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@oxc-project/types": "=0.146.0",
+        "@rolldown/pluginutils": "^1.0.0"
+      },
+      "bin": {
+        "rolldown": "bin/cli.mjs"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "optionalDependencies": {
+        "@rolldown/binding-android-arm-eabi": "1.2.5",
+        "@rolldown/binding-android-arm64": "1.2.5",
+        "@rolldown/binding-darwin-arm64": "1.2.5",
+        "@rolldown/binding-darwin-x64": "1.2.5",
+        "@rolldown/binding-freebsd-x64": "1.2.5",
+        "@rolldown/binding-linux-arm-gnueabihf": "1.2.5",
+        "@rolldown/binding-linux-arm64-gnu": "1.2.5",
+        "@rolldown/binding-linux-arm64-musl": "1.2.5",
+        "@rolldown/binding-linux-ppc64-gnu": "1.2.5",
+        "@rolldown/binding-linux-s390x-gnu": "1.2.5",
+        "@rolldown/binding-linux-x64-gnu": "1.2.5",
+        "@rolldown/binding-linux-x64-musl": "1.2.5",
+        "@rolldown/binding-openharmony-arm64": "1.2.5",
+        "@rolldown/binding-win32-arm64-msvc": "1.2.5",
+        "@rolldown/binding-win32-x64-msvc": "1.2.5"
+      }
+    },
+    "node_modules/safe-stable-stringify": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/safe-stable-stringify/-/safe-stable-stringify-2.5.0.tgz",
+      "integrity": "sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/scheduler": {
+      "version": "0.23.2",
+      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.23.2.tgz",
+      "integrity": "sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ==",
+      "license": "MIT",
+      "dependencies": {
+        "loose-envify": "^1.1.0"
+      }
+    },
+    "node_modules/source-map-js": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
+      "integrity": "sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/spacetimedb": {
+      "version": "2.8.3",
+      "resolved": "file:../../deps/spacetimedb.tgz",
+      "integrity": "sha512-K2mS27VwWB5RUp7WaUEOn3oTu1TmvCR7KWnkK6yc/ipAzqZ5D/PPbLPshAJWIuWWThgGhE2vfUMjxigglXDGIg==",
+      "license": "ISC",
+      "dependencies": {
+        "base64-js": "^1.5.1",
+        "headers-polyfill": "^4.0.3",
+        "object-inspect": "^1.13.4",
+        "prettier": "^3.3.3",
+        "pure-rand": "^7.0.1",
+        "safe-stable-stringify": "^2.5.0",
+        "statuses": "^2.0.2",
+        "url-polyfill": "^1.1.14"
+      },
+      "peerDependencies": {
+        "@angular/core": ">=17.0.0",
+        "@tanstack/react-query": "^5.0.0",
+        "react": "^18.0.0 || ^19.0.0-0 || ^19.0.0",
+        "solid-js": "^1.6.0",
+        "svelte": "^4.0.0 || ^5.0.0",
+        "undici": "^6.19.2",
+        "vue": "^3.3.0"
+      },
+      "peerDependenciesMeta": {
+        "@angular/core": {
+          "optional": true
+        },
+        "@tanstack/react-query": {
+          "optional": true
+        },
+        "react": {
+          "optional": true
+        },
+        "solid-js": {
+          "optional": true
+        },
+        "svelte": {
+          "optional": true
+        },
+        "undici": {
+          "optional": true
+        },
+        "vue": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/statuses": {
+      "version": "2.0.2",
+      "resolved": "https://registry.npmjs.org/statuses/-/statuses-2.0.2.tgz",
+      "integrity": "sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 0.8"
+      }
+    },
+    "node_modules/tinyglobby": {
+      "version": "0.2.17",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.4"
+      },
+      "engines": {
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
+      }
+    },
+    "node_modules/typescript": {
+      "version": "5.6.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.6.3.tgz",
+      "integrity": "sha512-hjcS1mhfuyi4WW8IWtjP7brDrG2cuDZukyrYrSauoXGNgx0S7zceP07adYkJycEr56BOUTNPzbInooiN3fn1qw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/url-polyfill": {
+      "version": "1.1.14",
+      "resolved": "https://registry.npmjs.org/url-polyfill/-/url-polyfill-1.1.14.tgz",
+      "integrity": "sha512-p4f3TTAG6ADVF3mwbXw7hGw+QJyw5CnNGvYh5fCuQQZIiuKUswqcznyV3pGDP9j0TSmC4UvRKm8kl1QsX1diiQ==",
+      "license": "MIT"
+    },
+    "node_modules/vite": {
+      "version": "8.2.2",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-8.2.2.tgz",
+      "integrity": "sha512-cFKLV/PRgAUlIRm5WjMjJ86jrftzpqcgH+Us+DS8mI3CDNiH30Whrz8uHL3+MOLPAgqbMBAqWdAHAphOAM+z/Q==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "lightningcss": "^1.33.0",
+        "picomatch": "^4.0.5",
+        "postcss": "^8.5.26",
+        "rolldown": "~1.2.4",
+        "tinyglobby": "^0.2.17"
+      },
+      "bin": {
+        "vite": "bin/vite.js"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "funding": {
+        "url": "https://github.com/vitejs/vite?sponsor=1"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.3"
+      },
+      "peerDependencies": {
+        "@types/node": "^20.19.0 || >=22.12.0",
+        "@vitejs/devtools": "^0.4.0 || ^0.5.0",
+        "esbuild": "^0.27.0 || ^0.28.0",
+        "jiti": ">=1.21.0",
+        "less": "^4.0.0",
+        "sass": "^1.70.0",
+        "sass-embedded": "^1.70.0",
+        "stylus": ">=0.54.8",
+        "sugarss": "^5.0.0",
+        "terser": "^5.16.0",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        },
+        "@vitejs/devtools": {
+          "optional": true
+        },
+        "esbuild": {
+          "optional": true
+        },
+        "jiti": {
+          "optional": true
+        },
+        "less": {
+          "optional": true
+        },
+        "sass": {
+          "optional": true
+        },
+        "sass-embedded": {
+          "optional": true
+        },
+        "stylus": {
+          "optional": true
+        },
+        "sugarss": {
+          "optional": true
+        },
+        "terser": {
+          "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    }
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/package.json b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/package.json
new file mode 100644
index 00000000000..b538b4c462c
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/package.json
@@ -0,0 +1,23 @@
+{
+  "name": "spacetimedb-shop-client",
+  "private": true,
+  "version": "0.0.1",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "tsc -b && vite build",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "spacetimedb": "file:/deps/spacetimedb.tgz"
+  },
+  "devDependencies": {
+    "@types/react": "^18.3.3",
+    "@types/react-dom": "^18.3.0",
+    "@vitejs/plugin-react": "^6.1.0",
+    "typescript": "~5.6.2",
+    "vite": "^8.2.2"
+  }
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/App.tsx b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/App.tsx
new file mode 100644
index 00000000000..2b6448f2936
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/App.tsx
@@ -0,0 +1,580 @@
+import { useEffect, useMemo, useState } from 'react';
+import { useSpacetimeDB, useTable } from 'spacetimedb/react';
+import { DbConnection, tables } from './module_bindings';
+import ItemCard from './components/ItemCard';
+import ItemDetail from './components/ItemDetail';
+import CartPanel, { CartLine } from './components/CartPanel';
+import OrdersPanel, { OrderView } from './components/OrdersPanel';
+import AdminPanel from './components/AdminPanel';
+import FulfilmentPanel from './components/FulfilmentPanel';
+import AuthWidget from './components/AuthWidget';
+import ProgressionWorkbench from './components/ProgressionWorkbench';
+import { formatMoney } from './types';
+
+const LOW_STOCK_THRESHOLD = 10;
+const CATALOG_PAGE_SIZE = 10;
+type ActivePanel = 'cart' | 'orders' | 'admin' | 'staff' | null;
+
+function microsToDate(micros: bigint): Date {
+  return new Date(Number(micros / 1000n));
+}
+
+export default function App() {
+  const { isActive, token, getConnection } = useSpacetimeDB();
+  const conn = getConnection() as DbConnection | null;
+
+  useEffect(() => {
+    if (token) localStorage.setItem('auth_token', token);
+  }, [token]);
+
+  const [items] = useTable(tables.item);
+  const [warehouses] = useTable(tables.warehouse);
+  const [stocks] = useTable(tables.stock);
+  const [reviews] = useTable(tables.review);
+  const [itemStats] = useTable(tables.itemStats);
+  const [currentUserRows] = useTable(tables.currentUser);
+  const [cartRows] = useTable(tables.myCart);
+  const [orderRows] = useTable(tables.myOrders);
+  const [orderItemRows] = useTable(tables.myOrderItems);
+  const [revenueRows] = useTable(tables.adminRevenue);
+  const [queueRows] = useTable(tables.fulfilmentQueue);
+  const [categoryTotalRows] = useTable(tables.categoryTotals);
+  const [recommendedRows] = useTable(tables.recommended);
+  const [catalogDetailRows] = useTable(tables.catalogDetails);
+  const [itemVariantRows] = useTable(tables.itemVariant);
+  const [profileRows] = useTable(tables.myProfile);
+  const [staffRoleRows] = useTable(tables.staffRoles);
+  const [supportTicketRows] = useTable(tables.visibleSupportTickets);
+  const [supportReplyRows] = useTable(tables.visibleSupportReplies);
+  const [preferenceRows] = useTable(tables.myNotificationPreferences);
+  const [notificationRows] = useTable(tables.myNotifications);
+  const [reservationRows] = useTable(tables.myReservations);
+  const [expiredCartRows] = useTable(tables.myExpiredCart);
+  const [restockRows] = useTable(tables.visibleRestocks);
+  const [stockLedgerRows] = useTable(tables.visibleStockLedger);
+  const [paymentRows] = useTable(tables.myPayments);
+  const [activityRows] = useTable(tables.activityHistory);
+  const [promotionReportRows] = useTable(tables.promotionReports);
+  const [promotionRows] = useTable(tables.visiblePromotions);
+  const [reorderRuleRows] = useTable(tables.visibleReorderRules);
+  const [completedOrderRows] = useTable(tables.completedOrders);
+
+  const currentUser = currentUserRows[0] ?? null;
+  const isSignedIn = currentUser !== null;
+  const isAdmin = currentUser?.isAdmin ?? false;
+  const isStaff = currentUser?.isStaff ?? false;
+
+  const [searchQuery, setSearchQuery] = useState('');
+  const [selectedItemId, setSelectedItemId] = useState<bigint | null>(null);
+  const [activePanel, setActivePanel] = useState<ActivePanel>(null);
+  const [buyError, setBuyError] = useState<string | null>(null);
+  const [categoryFilter, setCategoryFilter] = useState('');
+  const [minimumPrice, setMinimumPrice] = useState('');
+  const [maximumPrice, setMaximumPrice] = useState('');
+  const [inStockOnly, setInStockOnly] = useState(false);
+  const [searchPage, setSearchPage] = useState(0);
+
+  useEffect(() => {
+    function onKeyDown(e: KeyboardEvent) {
+      if (e.key !== 'Escape') return;
+      setSelectedItemId(null);
+      setActivePanel(null);
+    }
+    window.addEventListener('keydown', onKeyDown);
+    return () => window.removeEventListener('keydown', onKeyDown);
+  }, []);
+
+  const stockByItem = useMemo(() => {
+    const map = new Map<bigint, number>();
+    for (const row of stocks) {
+      map.set(row.itemId, (map.get(row.itemId) ?? 0) + row.quantity);
+    }
+    return map;
+  }, [stocks]);
+
+  const stockByItemWarehouse = useMemo(() => {
+    const map = new Map<string, number>();
+    for (const row of stocks) {
+      map.set(`${row.itemId}-${row.warehouseId}`, row.quantity);
+    }
+    return map;
+  }, [stocks]);
+
+  const stockByWarehouse = useMemo(() => {
+    const map = new Map<bigint, number>();
+    for (const row of stocks) {
+      map.set(row.warehouseId, (map.get(row.warehouseId) ?? 0) + row.quantity);
+    }
+    return map;
+  }, [stocks]);
+
+  const lowStockItems = useMemo(
+    () =>
+      [...items]
+        .filter((i) => (stockByItem.get(i.id) ?? 0) <= LOW_STOCK_THRESHOLD)
+        .sort((a, b) => (stockByItem.get(a.id) ?? 0) - (stockByItem.get(b.id) ?? 0)),
+    [items, stockByItem]
+  );
+
+  const purchaseCountByItem = useMemo(() => {
+    const map = new Map<bigint, number>();
+    for (const row of itemStats) map.set(row.itemId, row.purchaseCount);
+    return map;
+  }, [itemStats]);
+
+  const reviewsByItem = useMemo(() => {
+    const map = new Map<bigint, (typeof reviews)[number][]>();
+    for (const row of reviews) {
+      const list = map.get(row.itemId) ?? [];
+      list.push(row);
+      map.set(row.itemId, list);
+    }
+    return map;
+  }, [reviews]);
+
+  const itemVariantsByItem = useMemo(() => {
+    const map = new Map<bigint, string[]>();
+    for (const row of itemVariantRows) {
+      map.set(row.itemId, [...(map.get(row.itemId) ?? []), row.name]);
+    }
+    return map;
+  }, [itemVariantRows]);
+
+  const purchasedItemIds = useMemo(() => {
+    const set = new Set<bigint>();
+    for (const li of orderItemRows) set.add(li.itemId);
+    return set;
+  }, [orderItemRows]);
+
+  const rankedItems = useMemo(() => {
+    const arr = [...items];
+    arr.sort((a, b) => {
+      const pa = purchaseCountByItem.get(a.id) ?? 0;
+      const pb = purchaseCountByItem.get(b.id) ?? 0;
+      if (pb !== pa) return pb - pa;
+      return a.name.localeCompare(b.name);
+    });
+    return arr;
+  }, [items, purchaseCountByItem]);
+
+  const filteredSearchResults = useMemo(() => {
+    const q = searchQuery.trim().toLowerCase();
+    const min = minimumPrice === '' ? -Infinity : Number(minimumPrice);
+    const max = maximumPrice === '' ? Infinity : Number(maximumPrice);
+    const categoryByItem = new Map(catalogDetailRows.map(row => [row.itemId, row.category]));
+    return [...items]
+      .filter(item => !q || item.name.toLowerCase().includes(q))
+      .filter(item => !categoryFilter || categoryByItem.get(item.id) === categoryFilter)
+      .filter(item => item.price >= min && item.price <= max)
+      .filter(item => !inStockOnly || (stockByItem.get(item.id) ?? 0) > 0)
+      .sort((a, b) => a.name.localeCompare(b.name));
+  }, [items, searchQuery, categoryFilter, minimumPrice, maximumPrice, inStockOnly, catalogDetailRows, stockByItem]);
+
+  const showingSearch = searchQuery.trim().length > 0 || categoryFilter !== ''
+    || minimumPrice !== '' || maximumPrice !== '' || inStockOnly;
+  const catalogItems = showingSearch ? filteredSearchResults : rankedItems;
+  const searchResults = catalogItems.slice(searchPage * CATALOG_PAGE_SIZE,
+    searchPage * CATALOG_PAGE_SIZE + CATALOG_PAGE_SIZE);
+  const categories = [...new Set(catalogDetailRows.map(row => row.category))].sort();
+
+  const cartLines: CartLine[] = useMemo(
+    () =>
+      cartRows
+        .map((c) => {
+          const item = items.find((i) => i.id === c.itemId);
+          if (!item) return null;
+          return {
+            itemId: c.itemId,
+            name: item.name,
+            price: item.price,
+            quantity: c.quantity,
+            stock: stockByItem.get(c.itemId) ?? 0,
+          };
+        })
+        .filter((x): x is CartLine => x !== null),
+    [cartRows, items, stockByItem]
+  );
+
+  const cartCount = cartLines.reduce((sum, l) => sum + l.quantity, 0);
+
+  const orderViews: OrderView[] = useMemo(
+    () =>
+      orderRows.map((o) => ({
+        orderId: o.orderId,
+        createdAt: microsToDate(o.createdAt.microsSinceUnixEpoch),
+        total: o.total,
+        status: o.status,
+        discount: o.discount,
+        refundedTotal: o.refundedTotal,
+        payments: paymentRows
+          .filter(payment => payment.orderId === o.orderId)
+          .map(payment => ({ amount: payment.amount, status: payment.status })),
+        items: orderItemRows
+          .filter((li) => li.orderId === o.orderId)
+          .map((li) => ({
+            itemId: li.itemId,
+            name: li.itemName,
+            quantity: li.quantity,
+            returned: li.returned,
+          })),
+      })),
+    [orderRows, orderItemRows, paymentRows]
+  );
+
+  const revenue = revenueRows[0]?.total ?? 0;
+
+  const selectedItem = selectedItemId !== null ? items.find((i) => i.id === selectedItemId) ?? null : null;
+  const selectedItemReviews = selectedItemId !== null ? reviewsByItem.get(selectedItemId) ?? [] : [];
+
+  const handleBuyNow = async (itemId: bigint) => {
+    setBuyError(null);
+    try {
+      await conn?.reducers.buyNow({ itemId });
+    } catch (err) {
+      setBuyError(err instanceof Error ? err.message : 'Could not complete purchase.');
+    }
+  };
+
+  const handleAddToCart = async (itemId: bigint) => {
+    setBuyError(null);
+    try {
+      await conn?.reducers.addToCart({ itemId });
+    } catch (err) {
+      setBuyError(err instanceof Error ? err.message : 'Could not add to cart.');
+    }
+  };
+
+  const handleStockAlert = async (itemId: bigint) => {
+    await conn?.reducers.requestStockAlert({ itemId });
+  };
+
+  const handleSignUp = async (username: string, password: string) => {
+    await conn?.reducers.signUp({ username, password });
+  };
+
+  const handleSignIn = async (username: string, password: string) => {
+    await conn?.reducers.signIn({ username, password });
+  };
+
+  const handleSignOut = async () => {
+    setActivePanel(null);
+    try {
+      await conn?.reducers.signOut({});
+    } catch {
+      // ignore
+    }
+  };
+
+  const handleChangeQuantity = async (itemId: bigint, quantity: number) => {
+    await conn?.reducers.updateCartQuantity({ itemId, quantity });
+  };
+
+  const handleRemove = async (itemId: bigint) => {
+    await conn?.reducers.removeFromCart({ itemId });
+  };
+
+  const handleCheckout = async () => {
+    await conn?.reducers.checkout({});
+  };
+
+  const handleSubmitReview = async (itemId: bigint, rating: number, comment: string) => {
+    await conn?.reducers.writeReview({ itemId, rating, comment });
+  };
+
+  const handleRestock = async (itemId: bigint, warehouseId: bigint, quantity: number) => {
+    await conn?.reducers.adminRestock({ itemId, warehouseId, quantity });
+  };
+
+  const handleChangePrice = async (itemId: bigint, price: number) => {
+    await conn?.reducers.adminChangePrice({ itemId, price });
+  };
+
+  const handleTransfer = async (
+    itemId: bigint,
+    fromWarehouseId: bigint,
+    toWarehouseId: bigint,
+    quantity: number
+  ) => {
+    await conn?.reducers.adminTransferStock({ itemId, fromWarehouseId, toWarehouseId, quantity });
+  };
+
+  const handleShipOrder = async (orderId: bigint) => {
+    await conn?.reducers.shipOrder({ orderId });
+  };
+
+  const handleCancelOrder = async (orderId: bigint) => {
+    await conn?.reducers.cancelOrder({ orderId });
+  };
+
+  const handleReturnItem = async (orderId: bigint, itemId: bigint) => {
+    await conn?.reducers.returnOrderItem({ orderId, itemId });
+  };
+
+  if (!isActive) {
+    return (
+      <div className="connecting">
+        <div className="spinner" />
+        <span>Connecting to SpacetimeDB...</span>
+      </div>
+    );
+  }
+
+  const progressionWorkbench = () => (
+    <ProgressionWorkbench
+      conn={conn}
+      items={items}
+      warehouses={warehouses}
+      orders={orderViews}
+      itemVariants={itemVariantRows}
+      profile={profileRows[0] ?? null}
+      staffRoles={staffRoleRows}
+      supportTickets={supportTicketRows}
+      supportReplies={supportReplyRows}
+      preferences={preferenceRows[0] ?? null}
+      notifications={notificationRows}
+      expiredCart={expiredCartRows}
+      restocks={restockRows}
+      stockLedger={stockLedgerRows}
+      activity={activityRows}
+      promotionReports={promotionReportRows}
+      promotions={promotionRows}
+      reorderRules={reorderRuleRows}
+      completedOrders={completedOrderRows}
+      isSignedIn={isSignedIn}
+      isStaff={isStaff}
+      isAdmin={isAdmin}
+    />
+  );
+
+  return (
+    <div className="app">
+      <header className="header">
+        <span className="app-title" data-role="app-title">
+          Storefront
+        </span>
+        <button type="button" className="btn btn-ghost btn-sm" data-role="catalog-link" onClick={() => setActivePanel(null)}>
+          Catalog
+        </button>
+        <input
+          type="text"
+          className="search-input"
+          data-role="search-input"
+          placeholder="Search items..."
+          value={searchQuery}
+          onChange={(e) => {
+            setSearchQuery(e.target.value);
+            setSearchPage(0);
+            setSelectedItemId(null);
+            setActivePanel(null);
+          }}
+        />
+        <input data-role="category-filter" list="category-options" placeholder="Category" value={categoryFilter} onChange={e => { setCategoryFilter(e.target.value); setSearchPage(0); }} />
+        <datalist id="category-options">{categories.map(category => <option key={category}>{category}</option>)}</datalist>
+        <input data-role="minimum-price" type="number" placeholder="Min" value={minimumPrice} onChange={e => { setMinimumPrice(e.target.value); setSearchPage(0); }} />
+        <input data-role="maximum-price" type="number" placeholder="Max" value={maximumPrice} onChange={e => { setMaximumPrice(e.target.value); setSearchPage(0); }} />
+        <label><input data-role="in-stock-filter" type="checkbox" checked={inStockOnly} onChange={e => { setInStockOnly(e.target.checked); setSearchPage(0); }} />In stock</label>
+        <div className="header-spacer" />
+        <div className="header-actions">
+          {isAdmin && (
+            <button
+              type="button"
+              className="btn btn-ghost btn-sm"
+              data-role="admin-link"
+              onClick={() => setActivePanel('admin')}
+            >
+              Admin
+            </button>
+          )}
+          {(isStaff || isAdmin) && (
+            <button
+              type="button"
+              className="btn btn-ghost btn-sm"
+              data-role="staff-link"
+              onClick={() => setActivePanel('staff')}
+            >
+              Fulfilment
+            </button>
+          )}
+          {isSignedIn && (
+            <button
+              type="button"
+              className="btn btn-ghost btn-sm"
+              data-role="orders-toggle"
+              onClick={() => setActivePanel('orders')}
+            >
+              Orders
+            </button>
+          )}
+          <button
+            type="button"
+            className="btn btn-ghost btn-sm"
+            data-role="cart-toggle"
+            onClick={() => setActivePanel('cart')}
+          >
+            Cart <span className="badge" data-role="cart-count" style={{ marginLeft: 6 }}>{cartCount}</span>
+          </button>
+          <AuthWidget
+            currentUsername={currentUser?.username ?? null}
+            onSignUp={handleSignUp}
+            onSignIn={handleSignIn}
+            onSignOut={handleSignOut}
+          />
+        </div>
+      </header>
+
+      <main className="main">
+        {buyError && (
+          <div className="error-text" data-role="buy-error" style={{ marginBottom: 16 }}>
+            {buyError}
+          </div>
+        )}
+
+        {selectedItem && (
+          <ItemDetail
+            item={selectedItem}
+            stock={stockByItem.get(selectedItem.id) ?? 0}
+            reviews={selectedItemReviews}
+            isSignedIn={isSignedIn}
+            hasPurchased={purchasedItemIds.has(selectedItem.id)}
+            onClose={() => setSelectedItemId(null)}
+            onSubmitReview={handleSubmitReview}
+          />
+        )}
+
+        <h1 className="section-title">{showingSearch ? 'Search results' : 'Best sellers'}</h1>
+        <div data-role="item-list">
+          <div className="item-list" data-role="search-results">
+            {searchResults.length === 0 && (
+              <div className="empty-state">No items match "{searchQuery}".</div>
+            )}
+            {searchResults.map((item) => (
+              <ItemCard
+                key={String(item.id)}
+                item={item}
+                stock={stockByItem.get(item.id) ?? 0}
+                isSignedIn={isSignedIn}
+                onOpen={setSelectedItemId}
+                onBuyNow={handleBuyNow}
+                onAddToCart={handleAddToCart}
+                onStockAlert={handleStockAlert}
+                variants={itemVariantsByItem.get(item.id) ?? []}
+              />
+            ))}
+          </div>
+        </div>
+        <div className="search-pagination">
+          <button className="btn btn-ghost btn-sm" data-role="search-previous-page"
+            disabled={searchPage === 0}
+            onClick={() => setSearchPage(page => Math.max(0, page - 1))}>Previous</button>
+          <button className="btn btn-ghost btn-sm" data-role="search-next-page"
+            disabled={(searchPage + 1) * CATALOG_PAGE_SIZE >= catalogItems.length}
+            onClick={() => setSearchPage(page => page + 1)}>Next</button>
+        </div>
+
+        <h1 className="section-title" style={{ marginTop: 32 }}>
+          Recommended for you
+        </h1>
+        <div data-role="recommendations">
+        <div className="recommended-list" data-role="recommended-list">
+          {recommendedRows.length === 0 && (
+            <div className="empty-state">Buy something to get recommendations.</div>
+          )}
+          {[...recommendedRows].sort((a, b) => a.rank - b.rank).map((r) => (
+            <div className="recommended-item" data-role="recommended-item" key={String(r.itemId)}>
+              <span>
+                {r.name} <span data-role="recommendation-rank">{r.rank}</span>
+                <span>{formatMoney(r.price)}</span>
+                <button className="btn btn-ghost btn-sm" data-role="dismiss-recommendation" onClick={() => conn?.reducers.dismissRecommendation({ itemId: r.itemId })}>Dismiss</button>
+              </span>
+            </div>
+          ))}
+        </div>
+        </div>
+
+        {activePanel !== 'admin' && activePanel !== 'staff' && progressionWorkbench()}
+      </main>
+
+      {activePanel === 'cart' && (
+        <CartPanel
+          lines={cartLines}
+          onClose={() => setActivePanel(null)}
+          onChangeQuantity={handleChangeQuantity}
+          onRemove={handleRemove}
+          onCheckout={handleCheckout}
+          reservations={reservationRows}
+          onApplyPromotion={(code) => conn?.reducers.applyPromotion({ code })}
+        />
+      )}
+
+      {activePanel === 'orders' && isSignedIn && (
+        <OrdersPanel
+          orders={orderViews}
+          onClose={() => setActivePanel(null)}
+          onCancel={handleCancelOrder}
+          onReturn={handleReturnItem}
+        />
+      )}
+
+      {activePanel === 'admin' && isAdmin && (
+        <>
+          <div className="backdrop" onClick={() => setActivePanel(null)} />
+          <div className="panel" style={{ width: 'min(900px, 96vw)' }}>
+            <div className="panel-header">
+              <h2>Admin</h2>
+              <button
+                type="button"
+                className="close-btn"
+                aria-label="Close"
+                onClick={() => setActivePanel(null)}
+              >
+                ×
+              </button>
+            </div>
+            <div className="panel-body">
+              <AdminPanel
+                items={items}
+                warehouses={warehouses}
+                stockOf={(itemId, warehouseId) => stockByItemWarehouse.get(`${itemId}-${warehouseId}`) ?? 0}
+                totalStockOf={(itemId) => stockByItem.get(itemId) ?? 0}
+                warehouseTotal={(warehouseId) => stockByWarehouse.get(warehouseId) ?? 0}
+                revenue={revenue}
+                categoryTotals={categoryTotalRows}
+                lowStockItems={lowStockItems}
+                onRestock={handleRestock}
+                onChangePrice={handleChangePrice}
+                onTransfer={handleTransfer}
+              />
+              <div className="admin-section">
+                <FulfilmentPanel queue={queueRows} onShip={handleShipOrder} />
+              </div>
+              {progressionWorkbench()}
+            </div>
+          </div>
+        </>
+      )}
+
+      {activePanel === 'staff' && (isStaff || isAdmin) && (
+        <>
+          <div className="backdrop" onClick={() => setActivePanel(null)} />
+          <div className="panel" style={{ width: 'min(700px, 96vw)' }}>
+            <div className="panel-header">
+              <h2>Fulfilment</h2>
+              <button
+                type="button"
+                className="close-btn"
+                aria-label="Close"
+                onClick={() => setActivePanel(null)}
+              >
+                ×
+              </button>
+            </div>
+            <div className="panel-body">
+              <FulfilmentPanel queue={queueRows} onShip={handleShipOrder} />
+              {progressionWorkbench()}
+            </div>
+          </div>
+        </>
+      )}
+    </div>
+  );
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/AdminPanel.tsx b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/AdminPanel.tsx
new file mode 100644
index 00000000000..7ad326bb76d
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/AdminPanel.tsx
@@ -0,0 +1,324 @@
+import { useState } from 'react';
+import { ItemRow, WarehouseRow, CategoryTotalRow, formatMoney } from '../types';
+
+interface AdminPanelProps {
+  items: readonly ItemRow[];
+  warehouses: readonly WarehouseRow[];
+  stockOf: (itemId: bigint, warehouseId: bigint) => number;
+  totalStockOf: (itemId: bigint) => number;
+  warehouseTotal: (warehouseId: bigint) => number;
+  revenue: number;
+  categoryTotals: readonly CategoryTotalRow[];
+  lowStockItems: readonly ItemRow[];
+  onRestock: (itemId: bigint, warehouseId: bigint, quantity: number) => Promise<void>;
+  onChangePrice: (itemId: bigint, price: number) => Promise<void>;
+  onTransfer: (
+    itemId: bigint,
+    fromWarehouseId: bigint,
+    toWarehouseId: bigint,
+    quantity: number
+  ) => Promise<void>;
+}
+
+export default function AdminPanel({
+  items,
+  warehouses,
+  stockOf,
+  totalStockOf,
+  warehouseTotal,
+  revenue,
+  categoryTotals,
+  lowStockItems,
+  onRestock,
+  onChangePrice,
+  onTransfer,
+}: AdminPanelProps) {
+  const [restockInputs, setRestockInputs] = useState<Record<string, string>>({});
+  const [restockErrors, setRestockErrors] = useState<Record<string, string>>({});
+  const [priceInputs, setPriceInputs] = useState<Record<string, string>>({});
+  const [transferInputs, setTransferInputs] = useState<
+    Record<string, { from: string; to: string; qty: string }>
+  >({});
+  const [itemErrors, setItemErrors] = useState<Record<string, string>>({});
+
+  const key = (itemId: bigint, warehouseId: bigint) => `${itemId}-${warehouseId}`;
+
+  const handleRestock = async (itemId: bigint, warehouseId: bigint) => {
+    const k = key(itemId, warehouseId);
+    const qty = Number(restockInputs[k] ?? '0');
+    setRestockErrors((e) => ({ ...e, [k]: '' }));
+    if (!Number.isFinite(qty) || qty < 1) {
+      setRestockErrors((e) => ({ ...e, [k]: 'Enter a quantity of at least 1.' }));
+      return;
+    }
+    try {
+      await onRestock(itemId, warehouseId, Math.floor(qty));
+      setRestockInputs((v) => ({ ...v, [k]: '' }));
+    } catch (err) {
+      setRestockErrors((e) => ({ ...e, [k]: err instanceof Error ? err.message : 'Restock failed.' }));
+    }
+  };
+
+  const handlePriceSubmit = async (itemId: bigint) => {
+    const k = String(itemId);
+    const price = Number(priceInputs[k] ?? '');
+    setItemErrors((e) => ({ ...e, [k]: '' }));
+    if (!Number.isFinite(price) || price <= 0) {
+      setItemErrors((e) => ({ ...e, [k]: 'Enter a positive price.' }));
+      return;
+    }
+    try {
+      await onChangePrice(itemId, price);
+      setPriceInputs((v) => ({ ...v, [k]: '' }));
+    } catch (err) {
+      setItemErrors((e) => ({ ...e, [k]: err instanceof Error ? err.message : 'Price change failed.' }));
+    }
+  };
+
+  const handleTransferSubmit = async (itemId: bigint) => {
+    const k = String(itemId);
+    const input = transferInputs[k] ?? { from: '', to: '', qty: '' };
+    const qty = Number(input.qty);
+    setItemErrors((e) => ({ ...e, [k]: '' }));
+    if (!input.from || !input.to) {
+      setItemErrors((e) => ({ ...e, [k]: 'Choose both warehouses.' }));
+      return;
+    }
+    if (!Number.isFinite(qty) || qty < 1) {
+      setItemErrors((e) => ({ ...e, [k]: 'Enter a quantity of at least 1.' }));
+      return;
+    }
+    try {
+      await onTransfer(itemId, BigInt(input.from), BigInt(input.to), Math.floor(qty));
+      setTransferInputs((v) => ({ ...v, [k]: { ...input, qty: '' } }));
+    } catch (err) {
+      setItemErrors((e) => ({ ...e, [k]: err instanceof Error ? err.message : 'Transfer failed.' }));
+    }
+  };
+
+  return (
+    <div className="admin-panel" data-role="admin-panel">
+      <div className="admin-section">
+        <h2 className="section-title">Revenue</h2>
+        <div className="admin-revenue" data-role="admin-revenue">
+          {formatMoney(revenue)}
+        </div>
+      </div>
+
+      <div className="admin-section">
+        <h2 className="section-title">Items</h2>
+        <table className="admin-table">
+          <thead>
+            <tr>
+              <th>Item</th>
+              <th>Price</th>
+              <th>Total stock</th>
+              <th>Change price</th>
+              <th>Transfer stock</th>
+            </tr>
+          </thead>
+          <tbody>
+            {items.map((item) => {
+              const k = String(item.id);
+              const transfer = transferInputs[k] ?? { from: '', to: '', qty: '' };
+              const east = warehouses.find((warehouse) => warehouse.name === 'East');
+              const west = warehouses.find((warehouse) => warehouse.name === 'West');
+              return (
+                <tr data-role="admin-item-row" key={k}
+                  data-price-input={item.name === 'Gaming Mouse'
+                    ? JSON.stringify({ itemId: Number(item.id), price: 1 }) : undefined}
+                  data-transfer-input={item.name === 'Headphones' && east && west
+                    ? JSON.stringify({ itemId: Number(item.id), fromWarehouseId: Number(east.id),
+                      toWarehouseId: Number(west.id), quantity: 25 }) : undefined}>
+                  <td>{item.name}</td>
+                  <td>{formatMoney(item.price)}</td>
+                  <td data-role="admin-stock">{totalStockOf(item.id)}</td>
+                  <td>
+                    <div className="inline-form">
+                      <input
+                        type="number"
+                        className="price-input"
+                        data-role="price-input"
+                        min={0.01}
+                        step={0.01}
+                        placeholder={item.price.toFixed(2)}
+                        value={priceInputs[k] ?? ''}
+                        onChange={(e) => setPriceInputs((v) => ({ ...v, [k]: e.target.value }))}
+                      />
+                      <button
+                        type="button"
+                        className="btn btn-ghost btn-sm"
+                        data-role="price-submit"
+                        onClick={() => handlePriceSubmit(item.id)}
+                      >
+                        Set
+                      </button>
+                    </div>
+                  </td>
+                  <td>
+                    <div className="inline-form">
+                      <select
+                        data-role="transfer-from"
+                        value={transfer.from}
+                        onChange={(e) =>
+                          setTransferInputs((v) => ({ ...v, [k]: { ...transfer, from: e.target.value } }))
+                        }
+                      >
+                        <option value="">From</option>
+                        {warehouses.map((wh) => (
+                          <option key={String(wh.id)} value={String(wh.id)}>
+                            {wh.name}
+                          </option>
+                        ))}
+                      </select>
+                      <select
+                        data-role="transfer-to"
+                        value={transfer.to}
+                        onChange={(e) =>
+                          setTransferInputs((v) => ({ ...v, [k]: { ...transfer, to: e.target.value } }))
+                        }
+                      >
+                        <option value="">To</option>
+                        {warehouses.map((wh) => (
+                          <option key={String(wh.id)} value={String(wh.id)}>
+                            {wh.name}
+                          </option>
+                        ))}
+                      </select>
+                      <input
+                        type="number"
+                        className="transfer-qty"
+                        data-role="transfer-qty"
+                        min={1}
+                        placeholder="qty"
+                        value={transfer.qty}
+                        onChange={(e) =>
+                          setTransferInputs((v) => ({ ...v, [k]: { ...transfer, qty: e.target.value } }))
+                        }
+                      />
+                      <button
+                        type="button"
+                        className="btn btn-ghost btn-sm"
+                        data-role="transfer-submit"
+                        onClick={() => handleTransferSubmit(item.id)}
+                      >
+                        Move
+                      </button>
+                    </div>
+                  </td>
+                </tr>
+              );
+            })}
+          </tbody>
+        </table>
+        {Object.entries(itemErrors).map(
+          ([k, msg]) =>
+            msg && (
+              <div className="error-text" data-role="order-error" key={k}>
+                {msg}
+              </div>
+            )
+        )}
+      </div>
+
+      <div className="admin-section">
+        <h2 className="section-title">Low stock</h2>
+        <div className="low-stock-list" data-role="low-stock-list">
+          {lowStockItems.length === 0 && <div className="empty-state">Nothing is running low.</div>}
+          {lowStockItems.map((item) => (
+            <div className="low-stock-item" data-role="low-stock-item" key={String(item.id)}>
+              {item.name}: {totalStockOf(item.id)} left
+            </div>
+          ))}
+        </div>
+      </div>
+
+      <div className="admin-section">
+        <h2 className="section-title">Warehouses</h2>
+        <div style={{ display: 'flex', gap: 8, flexWrap: 'wrap' }}>
+          {warehouses.map((wh) => (
+            <span className="badge badge-muted" data-role="admin-warehouse-item" key={String(wh.id)}>
+              {wh.name}: <span data-role="warehouse-total">{warehouseTotal(wh.id)}</span>
+            </span>
+          ))}
+        </div>
+      </div>
+
+      <div className="admin-section">
+        <h2 className="section-title">Category totals</h2>
+        <table className="admin-table">
+          <thead>
+            <tr>
+              <th>Category</th>
+              <th>Units sold</th>
+              <th>Revenue</th>
+            </tr>
+          </thead>
+          <tbody>
+            {categoryTotals.map((cat) => (
+              <tr data-role="category-row" key={String(cat.categoryId)}>
+                <td>{cat.name}</td>
+                <td data-role="category-units">{cat.unitsSold}</td>
+                <td data-role="category-revenue">{formatMoney(cat.revenue)}</td>
+              </tr>
+            ))}
+          </tbody>
+        </table>
+      </div>
+
+      <div className="admin-section">
+        <h2 className="section-title">Stock by warehouse</h2>
+        <table className="admin-table">
+          <thead>
+            <tr>
+              <th>Item</th>
+              <th>Warehouse</th>
+              <th>Quantity</th>
+              <th>Restock</th>
+            </tr>
+          </thead>
+          <tbody>
+            {items.map((item) =>
+              warehouses.map((wh) => {
+                const k = key(item.id, wh.id);
+                return (
+                  <tr data-role="admin-location-row" key={k}
+                    data-restock-input={JSON.stringify({ itemId: Number(item.id), warehouseId: Number(wh.id), quantity: Number(restockInputs[k] || 1) })}>
+                    <td>{item.name}</td>
+                    <td>{wh.name}</td>
+                    <td data-role="admin-location-qty">{stockOf(item.id, wh.id)}</td>
+                    <td>
+                      <div className="restock-form">
+                        <input
+                          type="number"
+                          className="restock-input"
+                          data-role="restock-input"
+                          min={1}
+                          placeholder="qty"
+                          value={restockInputs[k] ?? ''}
+                          onChange={(e) => setRestockInputs((v) => ({ ...v, [k]: e.target.value }))}
+                          onKeyDown={(e) => {
+                            if (e.key === 'Enter') handleRestock(item.id, wh.id);
+                          }}
+                        />
+                        <button
+                          type="button"
+                          className="btn btn-ghost btn-sm"
+                          data-role="restock-submit"
+                          onClick={() => handleRestock(item.id, wh.id)}
+                        >
+                          Add
+                        </button>
+                      </div>
+                      {restockErrors[k] && <div className="error-text">{restockErrors[k]}</div>}
+                    </td>
+                  </tr>
+                );
+              })
+            )}
+          </tbody>
+        </table>
+      </div>
+    </div>
+  );
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/AuthWidget.tsx b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/AuthWidget.tsx
new file mode 100644
index 00000000000..d15d5494d61
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/AuthWidget.tsx
@@ -0,0 +1,138 @@
+import { useState } from 'react';
+
+interface AuthWidgetProps {
+  currentUsername: string | null;
+  onSignUp: (username: string, password: string) => Promise<void>;
+  onSignIn: (username: string, password: string) => Promise<void>;
+  onSignOut: () => void;
+}
+
+export default function AuthWidget({
+  currentUsername,
+  onSignUp,
+  onSignIn,
+  onSignOut,
+}: AuthWidgetProps) {
+  const [showSignIn, setShowSignIn] = useState(false);
+  const [signUpUsername, setSignUpUsername] = useState('');
+  const [signUpPassword, setSignUpPassword] = useState('');
+  const [signInUsername, setSignInUsername] = useState('');
+  const [signInPassword, setSignInPassword] = useState('');
+  const [error, setError] = useState<string | null>(null);
+
+  if (currentUsername) {
+    return (
+      <div className="auth-widget">
+        <span className="current-user" data-role="current-user">
+          {currentUsername}
+        </span>
+        <span className="current-user" data-role="staff-current-user">{currentUsername}</span>
+        <button type="button" className="btn btn-ghost btn-sm" data-role="signout" onClick={onSignOut}>
+          Sign out
+        </button>
+      </div>
+    );
+  }
+
+  const submitSignUp = async () => {
+    setError(null);
+    try {
+      await onSignUp(signUpUsername.trim(), signUpPassword);
+      setSignUpUsername('');
+      setSignUpPassword('');
+    } catch (err) {
+      setError(err instanceof Error ? err.message : 'Sign up failed.');
+    }
+  };
+
+  const submitSignIn = async () => {
+    setError(null);
+    try {
+      await onSignIn(signInUsername.trim(), signInPassword);
+      setSignInUsername('');
+      setSignInPassword('');
+    } catch (err) {
+      setError(err instanceof Error ? err.message : 'Sign in failed.');
+    }
+  };
+
+  return (
+    <div className="auth-forms">
+      <div className="auth-form">
+        <input
+          type="text"
+          data-role="signup-username"
+          placeholder="Username"
+          value={signUpUsername}
+          onChange={(e) => setSignUpUsername(e.target.value)}
+          onKeyDown={(e) => {
+            if (e.key === 'Enter') submitSignUp();
+          }}
+        />
+        <input
+          type="password"
+          data-role="signup-password"
+          placeholder="Password"
+          value={signUpPassword}
+          onChange={(e) => setSignUpPassword(e.target.value)}
+          onKeyDown={(e) => {
+            if (e.key === 'Enter') submitSignUp();
+          }}
+        />
+        <button type="button" className="btn btn-primary btn-sm" data-role="signup-submit" onClick={submitSignUp}>
+          Sign up
+        </button>
+        {!showSignIn && (
+          <button
+            type="button"
+            className="btn btn-ghost btn-sm"
+            data-role="signin-toggle"
+            onClick={() => setShowSignIn(true)}
+          >
+            Sign in instead
+          </button>
+        )}
+      </div>
+
+      {showSignIn && (
+        <div className="auth-form">
+          <input
+            type="text"
+            data-role="signin-username"
+            placeholder="Username"
+            value={signInUsername}
+            onChange={(e) => setSignInUsername(e.target.value)}
+            onKeyDown={(e) => {
+              if (e.key === 'Enter') submitSignIn();
+            }}
+          />
+          <input
+            type="password"
+            data-role="signin-password"
+            placeholder="Password"
+            value={signInPassword}
+            onChange={(e) => setSignInPassword(e.target.value)}
+            onKeyDown={(e) => {
+              if (e.key === 'Enter') submitSignIn();
+            }}
+          />
+          <button type="button" className="btn btn-primary btn-sm" data-role="signin-submit" onClick={submitSignIn}>
+            Sign in
+          </button>
+        </div>
+      )}
+
+      <div className="auth-form staff-auth-form">
+        <input type="text" data-role="staff-signin-username" placeholder="Staff username" value={signInUsername} onChange={(e) => setSignInUsername(e.target.value)} />
+        <input type="password" data-role="staff-signin-password" placeholder="Staff password" value={signInPassword} onChange={(e) => setSignInPassword(e.target.value)} />
+        <button type="button" className="btn btn-ghost btn-sm" data-role="staff-signin-submit" onClick={submitSignIn}>Staff sign in</button>
+      </div>
+
+      {error && (
+        <div className="error-text" data-role="auth-error">
+          {error}
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/CartPanel.tsx b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/CartPanel.tsx
new file mode 100644
index 00000000000..5f7307b003a
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/CartPanel.tsx
@@ -0,0 +1,159 @@
+import { useEffect, useState } from 'react';
+import { formatMoney } from '../types';
+
+export interface CartLine {
+  itemId: bigint;
+  name: string;
+  price: number;
+  quantity: number;
+  stock: number;
+}
+
+interface CartPanelProps {
+  lines: CartLine[];
+  onClose: () => void;
+  onChangeQuantity: (itemId: bigint, quantity: number) => Promise<void>;
+  onRemove: (itemId: bigint) => Promise<void>;
+  onCheckout: () => Promise<void>;
+  reservations: readonly { itemId: bigint; expiresMicros: bigint; expired: boolean }[];
+  onApplyPromotion: (code: string) => Promise<void> | void;
+}
+
+export default function CartPanel({
+  lines,
+  onClose,
+  onChangeQuantity,
+  onRemove,
+  onCheckout,
+  reservations,
+  onApplyPromotion,
+}: CartPanelProps) {
+  const [error, setError] = useState<string | null>(null);
+  const [checkingOut, setCheckingOut] = useState(false);
+  const [promotionCode, setPromotionCode] = useState('');
+  const [promotionError, setPromotionError] = useState<string | null>(null);
+  const [, setClock] = useState(0);
+
+  useEffect(() => {
+    const timer = window.setInterval(() => setClock(value => value + 1), 1000);
+    return () => window.clearInterval(timer);
+  }, []);
+
+  const total = lines.reduce((sum, l) => sum + l.price * l.quantity, 0);
+
+  const handleCheckout = async () => {
+    setError(null);
+    setCheckingOut(true);
+    try {
+      await onCheckout();
+    } catch (err) {
+      setError(err instanceof Error ? err.message : 'Checkout failed.');
+    } finally {
+      setCheckingOut(false);
+    }
+  };
+
+  const handleQuantity = async (itemId: bigint, value: number) => {
+    setError(null);
+    try {
+      await onChangeQuantity(itemId, value);
+    } catch (err) {
+      setError(err instanceof Error ? err.message : 'Could not update quantity.');
+    }
+  };
+
+  return (
+    <>
+      <div className="backdrop" onClick={onClose} />
+      <div
+        className="panel"
+        data-role="cart-panel"
+        onKeyDown={(e) => {
+          if (e.key === 'Escape') onClose();
+        }}
+      >
+        <div className="panel-header">
+          <h2>Your cart</h2>
+          <button type="button" className="close-btn" aria-label="Close" onClick={onClose}>
+            ×
+          </button>
+        </div>
+        <div className="panel-body">
+          {lines.length === 0 && (
+            <div className="empty-state" data-role="empty-cart">
+              Your cart is empty. Add something you like!
+            </div>
+          )}
+          {lines.map((line) => (
+            <div
+              className="cart-item"
+              data-role="cart-item"
+              data-cart-input={JSON.stringify({ itemId: line.itemId.toString(), quantity: -3 })}
+              key={String(line.itemId)}
+            >
+              <div className="cart-item-info">
+                <div className="cart-item-name">{line.name}</div>
+                <div className="cart-item-price">{formatMoney(line.price)} each</div>
+              </div>
+              <input
+                type="number"
+                className="cart-quantity"
+                data-role="cart-quantity"
+                min={1}
+                value={line.quantity}
+                onChange={(e) => {
+                  const v = Number(e.target.value);
+                  if (Number.isFinite(v) && v >= 1) handleQuantity(line.itemId, v);
+                }}
+              />
+              <button
+                type="button"
+                className="btn btn-danger btn-sm"
+                data-role="cart-remove"
+                onClick={() => onRemove(line.itemId)}
+              >
+                Remove
+              </button>
+              {(() => {
+                const reservation = reservations.find(row => row.itemId === line.itemId);
+                if (!reservation || reservation.expired) return <span data-role="cart-item-expired">expired</span>;
+                const seconds = Math.max(0, Number((reservation.expiresMicros - BigInt(Date.now()) * 1000n) / 1_000_000n));
+                return <span data-role="cart-reservation-timer">{seconds}</span>;
+              })()}
+            </div>
+          ))}
+          {error && (
+            <div className="error-text" data-role="buy-error">
+              {error}
+            </div>
+          )}
+        </div>
+        <div className="panel-footer">
+          <div className="inline-form">
+            <input data-role="cart-promotion" value={promotionCode} onChange={event => setPromotionCode(event.target.value)} placeholder="Promotion code" />
+            <button className="btn btn-ghost btn-sm" data-role="apply-promotion" onClick={async () => {
+              setPromotionError(null);
+              try { await onApplyPromotion(promotionCode); }
+              catch (error) { setPromotionError(error instanceof Error ? error.message : 'Promotion refused.'); }
+            }}>Apply</button>
+          </div>
+          {promotionError && <div className="error-text" data-role="promotion-error">{promotionError}</div>}
+          <div className="cart-total-row">
+            <span>Total</span>
+            <span data-role="cart-total">{formatMoney(total)}</span>
+          </div>
+          <button
+            type="button"
+            className="btn btn-primary"
+            data-role="checkout-submit"
+            disabled={lines.length === 0 || checkingOut}
+            style={{ width: '100%', marginTop: 12 }}
+            onClick={handleCheckout}
+          >
+            Checkout
+          </button>
+        </div>
+      </div>
+    </>
+  );
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/FulfilmentPanel.tsx b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/FulfilmentPanel.tsx
new file mode 100644
index 00000000000..dfcbeff4b21
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/FulfilmentPanel.tsx
@@ -0,0 +1,58 @@
+import { useState } from 'react';
+import { QueueOrderRow } from '../types';
+
+interface FulfilmentPanelProps {
+  queue: readonly QueueOrderRow[];
+  onShip: (orderId: bigint) => Promise<void>;
+}
+
+export default function FulfilmentPanel({ queue, onShip }: FulfilmentPanelProps) {
+  const [errors, setErrors] = useState<Record<string, string>>({});
+
+  const handleShip = async (orderId: bigint) => {
+    const k = String(orderId);
+    setErrors((e) => ({ ...e, [k]: '' }));
+    try {
+      await onShip(orderId);
+    } catch (err) {
+      setErrors((e) => ({ ...e, [k]: err instanceof Error ? err.message : 'Could not ship order.' }));
+    }
+  };
+
+  return (
+    <div className="fulfilment-panel" data-role="fulfilment-panel">
+      <div className="fulfilment-header">
+        <h2 className="section-title">Fulfilment queue</h2>
+        <span className="muted">
+          Waiting: <span data-role="queue-depth">{queue.length}</span>
+        </span>
+      </div>
+      {queue.length === 0 && <div className="empty-state">No orders are waiting to ship.</div>}
+      {queue.map((order) => (
+        <div className="queue-item" data-role="queue-item" key={String(order.orderId)}>
+          <div className="queue-item-names">{order.itemNames.join(', ')}</div>
+          <div className="queue-item-warehouses">
+            {order.itemNames.map((name, i) => (
+              <span className="badge badge-muted" data-role="queue-warehouse" key={i}>
+                {name}: {order.warehouseNames[i]}
+              </span>
+            ))}
+          </div>
+          <button
+            type="button"
+            className="btn btn-primary btn-sm"
+            data-role="ship-submit"
+            onClick={() => handleShip(order.orderId)}
+          >
+            Mark shipped
+          </button>
+          {errors[String(order.orderId)] && (
+            <div className="error-text" data-role="order-error">
+              {errors[String(order.orderId)]}
+            </div>
+          )}
+        </div>
+      ))}
+    </div>
+  );
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/ItemCard.tsx b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/ItemCard.tsx
new file mode 100644
index 00000000000..15e64181831
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/ItemCard.tsx
@@ -0,0 +1,92 @@
+import { ItemRow } from '../types';
+import { formatMoney } from '../types';
+
+interface ItemCardProps {
+  item: ItemRow;
+  stock: number;
+  isSignedIn: boolean;
+  onOpen: (itemId: bigint) => void;
+  onBuyNow: (itemId: bigint) => void;
+  onAddToCart: (itemId: bigint) => void;
+  onStockAlert: (itemId: bigint) => void;
+  variants: readonly string[];
+}
+
+export default function ItemCard({
+  item,
+  stock,
+  isSignedIn,
+  onOpen,
+  onBuyNow,
+  onAddToCart,
+  onStockAlert,
+  variants,
+}: ItemCardProps) {
+  const outOfStock = stock <= 0;
+  const lowStock = !outOfStock && stock <= 5;
+
+  return (
+    <div className={`item-card${outOfStock ? ' out-of-stock-card' : ''}`} data-role="item-card" data-buy-input={JSON.stringify({ itemId: Number(item.id) })}>
+      <button
+        type="button"
+        className="item-card-name"
+        data-role="item-name"
+        onClick={() => onOpen(item.id)}
+      >
+        {item.name}
+      </button>
+      <div className="item-card-row">
+        <span>SKU {String(item.id)}</span>
+        <span className="item-price" data-role="item-price">
+          {formatMoney(item.price)}
+        </span>
+      </div>
+      {variants.map(variant => (
+        <span className="badge badge-muted" data-role="item-variant" key={variant}>{variant}</span>
+      ))}
+      <div className="item-card-row">
+        <span>
+          Stock:{' '}
+          <span
+            className={`item-stock${outOfStock ? ' stock-zero' : lowStock ? ' stock-low' : ''}`}
+            data-role="item-stock"
+          >
+            {stock}
+          </span>
+        </span>
+        {outOfStock && (
+          <span className="badge badge-danger" data-role="out-of-stock">
+            Out of stock
+          </span>
+        )}
+      </div>
+      {isSignedIn && (
+        <div className="item-card-actions">
+          <button
+            type="button"
+            className="btn btn-primary"
+            data-role="buy-now"
+            disabled={outOfStock}
+            onClick={() => onBuyNow(item.id)}
+          >
+            Buy now
+          </button>
+          <button
+            type="button"
+            className="btn btn-ghost"
+            data-role="add-to-cart"
+            disabled={outOfStock}
+            onClick={() => onAddToCart(item.id)}
+          >
+            Add to cart
+          </button>
+        </div>
+      )}
+      {isSignedIn && outOfStock && (
+        <button type="button" className="btn btn-ghost" data-role="stock-alert" onClick={() => onStockAlert(item.id)}>
+          Alert me
+        </button>
+      )}
+    </div>
+  );
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/ItemDetail.tsx b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/ItemDetail.tsx
new file mode 100644
index 00000000000..a267d2bdabd
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/ItemDetail.tsx
@@ -0,0 +1,127 @@
+import { useState } from 'react';
+import { ItemRow, ReviewRow, formatMoney } from '../types';
+
+interface ItemDetailProps {
+  item: ItemRow;
+  stock: number;
+  reviews: ReviewRow[];
+  isSignedIn: boolean;
+  hasPurchased: boolean;
+  onClose: () => void;
+  onSubmitReview: (itemId: bigint, rating: number, comment: string) => Promise<void>;
+}
+
+export default function ItemDetail({
+  item,
+  stock,
+  reviews,
+  isSignedIn,
+  hasPurchased,
+  onClose,
+  onSubmitReview,
+}: ItemDetailProps) {
+  const [rating, setRating] = useState('5');
+  const [comment, setComment] = useState('');
+  const [reviewError, setReviewError] = useState<string | null>(null);
+
+  const outOfStock = stock <= 0;
+  const avgRating =
+    reviews.length === 0
+      ? null
+      : reviews.reduce((sum, r) => sum + r.rating, 0) / reviews.length;
+
+  const submitReview = async () => {
+    setReviewError(null);
+    try {
+      await onSubmitReview(item.id, Number(rating), comment.trim());
+      setComment('');
+    } catch (err) {
+      setReviewError(err instanceof Error ? err.message : 'Could not submit review.');
+    }
+  };
+
+  return (
+    <div
+      className="inline-detail"
+      data-role="item-detail"
+      onKeyDown={(e) => {
+        if (e.key === 'Escape') onClose();
+      }}
+    >
+      <div className="panel-header">
+        <h2>{item.name}</h2>
+        <button type="button" className="close-btn" aria-label="Close" onClick={onClose}>
+          ×
+        </button>
+      </div>
+      <div className="panel-body">
+        <div className="detail-header">
+            <div>
+              <div className="muted">SKU {String(item.id)}</div>
+              <div>
+                Stock: <strong>{stock}</strong>
+                {outOfStock && <span className="badge badge-danger" style={{ marginLeft: 8 }}>Out of stock</span>}
+              </div>
+              <div className="muted">
+                Average rating: <span data-role="review-average">{avgRating === null ? '—' : avgRating.toFixed(1)}</span>{' '}
+                ({reviews.length} review{reviews.length === 1 ? '' : 's'})
+              </div>
+            </div>
+            <div className="detail-price">{formatMoney(item.price)}</div>
+          </div>
+
+          <div className="review-list">
+            <h3 className="section-title">Reviews</h3>
+            {reviews.length === 0 && <div className="empty-state">No reviews yet.</div>}
+            {reviews.map((r) => (
+              <div className="review-item" data-role="review-item" key={String(r.id)}>
+                <div className="review-item-rating">{'★'.repeat(r.rating)}{'☆'.repeat(5 - r.rating)}</div>
+                <div>{r.comment}</div>
+              </div>
+            ))}
+          </div>
+
+          {isSignedIn && (
+            <div className="review-form">
+              <h3 className="section-title">
+                {hasPurchased ? 'Write a review' : 'Purchase this item to write a review'}
+              </h3>
+              <label>
+                Rating
+                <select
+                  data-role="review-rating"
+                  value={rating}
+                  onChange={(e) => setRating(e.target.value)}
+                  style={{ marginLeft: 8 }}
+                >
+                  {[5, 4, 3, 2, 1].map((n) => (
+                    <option key={n} value={n}>
+                      {n}
+                    </option>
+                  ))}
+                </select>
+              </label>
+              <input
+                type="text"
+                data-role="review-input"
+                placeholder="Share your thoughts..."
+                value={comment}
+                onChange={(e) => setComment(e.target.value)}
+                onKeyDown={(e) => {
+                  if (e.key === 'Enter') submitReview();
+                }}
+              />
+              <button type="button" className="btn btn-primary" data-role="review-submit" onClick={submitReview}>
+                Submit review
+              </button>
+              {reviewError && (
+                <div className="error-text" data-role="review-error">
+                  {reviewError}
+                </div>
+              )}
+            </div>
+          )}
+        </div>
+      </div>
+  );
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/OrdersPanel.tsx b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/OrdersPanel.tsx
new file mode 100644
index 00000000000..b2589c13b0b
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/OrdersPanel.tsx
@@ -0,0 +1,144 @@
+import { useState } from 'react';
+import { formatMoney } from '../types';
+
+export interface OrderItemView {
+  itemId: bigint;
+  name: string;
+  quantity: number;
+  returned: boolean;
+}
+
+export interface OrderView {
+  orderId: bigint;
+  createdAt: Date;
+  total: number;
+  status: string;
+  discount: number;
+  refundedTotal: number;
+  payments: { amount: number; status: string }[];
+  items: OrderItemView[];
+}
+
+interface OrdersPanelProps {
+  orders: OrderView[];
+  onClose: () => void;
+  onCancel: (orderId: bigint) => Promise<void>;
+  onReturn: (orderId: bigint, itemId: bigint) => Promise<void>;
+}
+
+export default function OrdersPanel({ orders, onClose, onCancel, onReturn }: OrdersPanelProps) {
+  const [errors, setErrors] = useState<Record<string, string>>({});
+
+  const handleCancel = async (orderId: bigint) => {
+    const k = String(orderId);
+    setErrors((e) => ({ ...e, [k]: '' }));
+    try {
+      await onCancel(orderId);
+    } catch (err) {
+      setErrors((e) => ({ ...e, [k]: err instanceof Error ? err.message : 'Could not cancel order.' }));
+    }
+  };
+
+  const handleReturn = async (orderId: bigint, itemId: bigint) => {
+    const k = String(orderId);
+    setErrors((e) => ({ ...e, [k]: '' }));
+    try {
+      await onReturn(orderId, itemId);
+    } catch (err) {
+      setErrors((e) => ({ ...e, [k]: err instanceof Error ? err.message : 'Could not return item.' }));
+    }
+  };
+
+  return (
+    <>
+      <div className="backdrop" onClick={onClose} />
+      <div
+        className="panel"
+        onKeyDown={(e) => {
+          if (e.key === 'Escape') onClose();
+        }}
+      >
+        <div className="panel-header">
+          <h2>Order history</h2>
+          <button type="button" className="close-btn" aria-label="Close" onClick={onClose}>
+            ×
+          </button>
+        </div>
+        <div className="panel-body" data-role="order-list">
+          {orders.length === 0 && <div className="empty-state">You have no past orders yet.</div>}
+          {orders.map((order) => (
+            <div
+              className="order-item"
+              data-role="order-item"
+              data-entity-id={String(order.orderId)}
+              data-ship-input={JSON.stringify({ orderId: Number(order.orderId) })}
+              data-cancel-input={JSON.stringify({ orderId: Number(order.orderId) })}
+              key={String(order.orderId)}
+            >
+              <div className="order-item-names">{order.items.map((i) => i.name).join(', ')}</div>
+              <div className="order-item-meta">{order.createdAt.toLocaleString()}</div>
+              <div className="order-item-row">
+                <span className="order-status" data-role="order-status">
+                  {order.status}
+                </span>
+                <span className="order-total" data-role="order-total">
+                  {formatMoney(order.total)}
+                </span>
+              </div>
+              {order.discount > 0 && <div data-role="order-discount">Discount: {formatMoney(order.discount)}</div>}
+              {order.refundedTotal > 0 && <div data-role="order-refund-total">Refund: {formatMoney(order.refundedTotal)}</div>}
+              {order.payments.map((payment, index) => payment.status === 'refunded' ? (
+                <div data-role="refund-entry" key={`refund-${index}`}>
+                  {order.items.map(item => item.name).join(', ')}
+                  <span data-role="payment-amount">{formatMoney(payment.amount)}</span>
+                  <span data-role="payment-status">{payment.status}</span>
+                </div>
+              ) : (
+                <div data-role="payment-record" key={`payment-${index}`}>
+                  {order.items.map(item => item.name).join(', ')}
+                  <span data-role="payment-amount">{formatMoney(payment.amount)}</span>
+                  <span data-role="payment-status">{payment.status}</span>
+                </div>
+              ))}
+              <div className="order-item-lines">
+                {order.items.map((item) => (
+                  <div className="order-item-line" key={String(item.itemId)}>
+                    <span>
+                      {item.name} × {item.quantity}
+                      {item.returned && <span className="badge badge-muted" style={{ marginLeft: 6 }}>Returned</span>}
+                    </span>
+                    {order.status === 'shipped' && !item.returned && (
+                      <button
+                        type="button"
+                        className="btn btn-ghost btn-sm"
+                        data-role="return-item"
+                        onClick={() => handleReturn(order.orderId, item.itemId)}
+                      >
+                        Return
+                      </button>
+                    )}
+                  </div>
+                ))}
+              </div>
+              {order.status === 'pending' && (
+                <button
+                  type="button"
+                  className="btn btn-danger btn-sm"
+                  data-role="cancel-order"
+                  onClick={() => handleCancel(order.orderId)}
+                >
+                  Cancel order
+                </button>
+              )}
+              {errors[String(order.orderId)] && (
+                <div className="error-text" data-role="order-error">
+                  {errors[String(order.orderId)]}
+                </div>
+              )}
+            </div>
+          ))}
+        </div>
+      </div>
+    </>
+  );
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/ProgressionWorkbench.tsx b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/ProgressionWorkbench.tsx
new file mode 100644
index 00000000000..8f371c7bdfc
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/components/ProgressionWorkbench.tsx
@@ -0,0 +1,301 @@
+import { useEffect, useMemo, useState, type ChangeEvent } from 'react';
+import type { DbConnection } from '../module_bindings';
+import { formatMoney } from '../types';
+
+interface Item { id: bigint; name: string }
+interface Warehouse { id: bigint; name: string }
+interface Order { orderId: bigint; items: { name: string }[] }
+interface ItemVariant { id: bigint; itemId: bigint; name: string }
+interface Profile { name: string; address: string }
+interface StaffRole { accountId: bigint; username: string; role: string }
+interface SupportTicket {
+  id: bigint; reference: string; subject: string; status: string; priority: string;
+  assignee: string; orderId?: bigint; refundTotal: number;
+}
+interface SupportReply { ticketId: bigint; author: string; body: string }
+interface Preferences { orderEnabled: boolean; stockEnabled: boolean }
+interface Notification { id: bigint; message: string }
+interface ExpiredCartItem { itemId: bigint }
+interface Restock { id: bigint; itemId: bigint; dueMicros: bigint; status: string; reorderRuleId?: bigint }
+interface StockLedgerEntry { itemId: bigint; quantity: number }
+interface Activity { actor: string; action: string; subject: string; createdMicros: bigint }
+interface PromotionReport { promotionId: bigint; code: string; redemptions: number; revenue: number }
+interface Promotion { id: bigint; code: string; discountPercent: number; startMicros: bigint; endMicros: bigint; usageLimit: number }
+interface ReorderRule { id: bigint; itemId: bigint; threshold: number; quantity: number }
+interface CompletedOrder { orderId: bigint; itemNames: string[]; status: string }
+
+interface Props {
+  conn: DbConnection | null;
+  items: readonly Item[];
+  warehouses: readonly Warehouse[];
+  orders: readonly Order[];
+  itemVariants: readonly ItemVariant[];
+  profile: Profile | null;
+  staffRoles: readonly StaffRole[];
+  supportTickets: readonly SupportTicket[];
+  supportReplies: readonly SupportReply[];
+  preferences: Preferences | null;
+  notifications: readonly Notification[];
+  expiredCart: readonly ExpiredCartItem[];
+  restocks: readonly Restock[];
+  stockLedger: readonly StockLedgerEntry[];
+  activity: readonly Activity[];
+  promotionReports: readonly PromotionReport[];
+  promotions: readonly Promotion[];
+  reorderRules: readonly ReorderRule[];
+  completedOrders: readonly CompletedOrder[];
+  isSignedIn: boolean;
+  isStaff: boolean;
+  isAdmin: boolean;
+}
+
+const value = (event: ChangeEvent<HTMLInputElement | HTMLSelectElement | HTMLTextAreaElement>) =>
+  event.target.value;
+
+export default function ProgressionWorkbench(props: Props) {
+  const {
+    conn, items, warehouses, orders, itemVariants, profile, staffRoles, supportTickets,
+    supportReplies, preferences, notifications, expiredCart, restocks, stockLedger,
+    activity, promotionReports, promotions, reorderRules, completedOrders, isSignedIn, isStaff, isAdmin,
+  } = props;
+  const reducers = conn?.reducers;
+  const [profileName, setProfileName] = useState(profile?.name ?? '');
+  const [profileAddress, setProfileAddress] = useState(profile?.address ?? '');
+  const [supportEmail, setSupportEmail] = useState('');
+  const [supportSubject, setSupportSubject] = useState('');
+  const [supportMessage, setSupportMessage] = useState('');
+  const [supportSubmission, setSupportSubmission] = useState<{ subject: string; afterId: bigint } | null>(null);
+  const [triageByTicket, setTriageByTicket] = useState<Record<string, { assignee: string; priority: string; status: string }>>({});
+  const [replyByTicket, setReplyByTicket] = useState<Record<string, string>>({});
+  const [orderByTicket, setOrderByTicket] = useState<Record<string, string>>({});
+  const [catalog, setCatalog] = useState({ name: '', category: '', price: '', variants: '' });
+  const [promotion, setPromotion] = useState({ code: '', discount: '', start: '', end: '', limit: '' });
+  const [restock, setRestock] = useState({ item: '', warehouse: '', quantity: '', delay: '' });
+  const [reorder, setReorder] = useState({ item: '', warehouse: '', threshold: '', quantity: '' });
+  const [orderEnabled, setOrderEnabled] = useState(preferences?.orderEnabled ?? false);
+  const [stockEnabled, setStockEnabled] = useState(preferences?.stockEnabled ?? false);
+  const [, setClock] = useState(0);
+  const itemName = (id: bigint) => items.find(item => item.id === id)?.name ?? `Item ${String(id)}`;
+  const orderName = (orderId: bigint) => {
+    const order = orders.find(row => row.orderId === orderId);
+    return order?.items.map(item => item.name).join(', ') ?? `Order ${String(orderId)}`;
+  };
+  const variantsByItem = useMemo(() => {
+    const map = new Map<bigint, ItemVariant[]>();
+    for (const row of itemVariants) map.set(row.itemId, [...(map.get(row.itemId) ?? []), row]);
+    return map;
+  }, [itemVariants]);
+  const supportReference = useMemo(() => {
+    if (!supportSubmission) return '';
+    return supportTickets
+      .filter(ticket => ticket.subject === supportSubmission.subject && ticket.id > supportSubmission.afterId)
+      .sort((left, right) => left.id < right.id ? 1 : -1)[0]?.reference ?? '';
+  }, [supportSubmission, supportTickets]);
+
+  useEffect(() => {
+    setProfileName(profile?.name ?? '');
+    setProfileAddress(profile?.address ?? '');
+  }, [profile?.name, profile?.address]);
+
+  useEffect(() => {
+    setOrderEnabled(preferences?.orderEnabled ?? false);
+    setStockEnabled(preferences?.stockEnabled ?? false);
+  }, [preferences?.orderEnabled, preferences?.stockEnabled]);
+
+  useEffect(() => {
+    const timer = window.setInterval(() => setClock(clock => clock + 1), 1000);
+    return () => window.clearInterval(timer);
+  }, []);
+
+  const submitSupport = async () => {
+    const afterId = supportTickets.reduce((maximum, ticket) => ticket.id > maximum ? ticket.id : maximum, 0n);
+    setSupportSubmission({ subject: supportSubject.trim(), afterId });
+    await reducers?.createSupportTicket({ email: supportEmail, subject: supportSubject, message: supportMessage });
+  };
+
+  return (
+    <section className="progression-workbench">
+      <nav className="feature-links" aria-label="Account and staff tools">
+        {isSignedIn && <button className="btn btn-ghost btn-sm" data-role="profile-link">Profile</button>}
+        <button className="btn btn-ghost btn-sm" data-role="support-link">Support</button>
+        {(isStaff || isAdmin) && <button className="btn btn-ghost btn-sm" data-role="activity-link">Activity</button>}
+        {(isStaff || isAdmin) && <button className="btn btn-ghost btn-sm" data-role="promotions-link">Promotions</button>}
+        {isSignedIn && <button className="btn btn-ghost btn-sm" data-role="notification-settings">Notifications</button>}
+        {isSignedIn && <button className="btn btn-ghost btn-sm" data-role="notifications-toggle">Alerts</button>}
+        {(isStaff || isAdmin) && <button className="btn btn-ghost btn-sm" data-role="reorder-link">Reorder rules</button>}
+      </nav>
+
+      {isSignedIn && (
+        <section className="feature-card">
+          <h2>Customer profile</h2>
+          <input data-role="profile-name" value={profileName} onChange={e => setProfileName(value(e))} placeholder="Name" />
+          <input data-role="profile-address" value={profileAddress} onChange={e => setProfileAddress(value(e))} placeholder="Shipping address" />
+          <button className="btn btn-primary btn-sm" data-role="profile-save" onClick={() => reducers?.saveProfile({ name: profileName, address: profileAddress })}>Save profile</button>
+          <div data-role="profile-address-summary">{profile?.name} {profile?.address}</div>
+        </section>
+      )}
+
+      <section className="feature-card">
+        <h2>Support</h2>
+        <input data-role="support-email" value={supportEmail} onChange={e => setSupportEmail(value(e))} placeholder="Email" />
+        <input data-role="support-subject" value={supportSubject} onChange={e => setSupportSubject(value(e))} placeholder="Subject" />
+        <textarea data-role="support-message" value={supportMessage} onChange={e => setSupportMessage(value(e))} placeholder="Message" />
+        <button className="btn btn-primary btn-sm" data-role="support-submit" onClick={submitSupport}>Open ticket</button>
+        <div data-role="support-reference">{supportReference}</div>
+        {supportTickets.map(ticket => {
+          const key = String(ticket.id);
+          const actionInput = JSON.stringify({ caseId: Number(ticket.id) });
+          const triage = triageByTicket[key] ?? {
+            assignee: ticket.assignee ?? '',
+            priority: ticket.priority,
+            status: ticket.status,
+          };
+          return (
+            <article className="feature-row" data-role="support-ticket" data-entity-id={key} key={key}>
+              <strong>{ticket.subject}</strong>
+              <span>{ticket.reference}</span>
+              <span data-role="support-status">{ticket.status}</span>
+              {(isStaff || isAdmin) && (
+                <>
+                  <input data-role="support-assignee" value={triage.assignee} onChange={event => setTriageByTicket(current => ({ ...current, [key]: { ...triage, assignee: value(event) } }))} />
+                  <input data-role="support-priority" value={triage.priority} onChange={event => setTriageByTicket(current => ({ ...current, [key]: { ...triage, priority: value(event) } }))} />
+                  <input data-role="support-status-input" value={triage.status} onChange={event => setTriageByTicket(current => ({ ...current, [key]: { ...triage, status: value(event) } }))} />
+                  <button className="btn btn-ghost btn-sm" data-role="support-update" onClick={() => reducers?.triageSupport({
+                    ticketId: ticket.id,
+                    assigneeId: staffRoles.find(row => row.username === triage.assignee)?.accountId ?? 0n,
+                    priority: triage.priority,
+                    status: triage.status,
+                  })}>Update</button>
+                </>
+              )}
+              {isSignedIn && orders.map(order => (
+                <button className="btn btn-ghost btn-sm" data-role="support-order-option" key={String(order.orderId)} onClick={() => setOrderByTicket(v => ({ ...v, [key]: String(order.orderId) }))}>
+                  {orderName(order.orderId)}
+                </button>
+              ))}
+              {isSignedIn && (
+                <button className="btn btn-ghost btn-sm" data-role="support-link-order"
+                  data-action-input={JSON.stringify({ caseId: Number(ticket.id), orderId: Number(orderByTicket[key] ?? 0) })}
+                  onClick={() => reducers?.linkSupportOrder({ ticketId: ticket.id, orderId: BigInt(orderByTicket[key] ?? 0) })}>
+                  Link order
+                </button>
+              )}
+              {(isStaff || isAdmin) && ticket.orderId !== undefined && (
+                <button className="btn btn-danger btn-sm" data-role="support-refund" data-action-input={actionInput}
+                  onClick={() => reducers?.supportRefund({ ticketId: ticket.id })}>Refund order</button>
+              )}
+              <span data-role="support-order">{ticket.orderId === undefined ? '' : `Order ${String(ticket.orderId)}`}</span>
+              <span data-role="support-refund-total">{formatMoney(ticket.refundTotal)}</span>
+              {supportReplies.filter(reply => reply.ticketId === ticket.id).map((reply, index) => (
+                <div data-role="support-reply-item" key={index}>{reply.author}: {reply.body}</div>
+              ))}
+              <textarea data-role="support-reply" value={replyByTicket[key] ?? ''} onChange={e => setReplyByTicket(v => ({ ...v, [key]: value(e) }))} />
+              <button className="btn btn-ghost btn-sm" data-role="support-reply-submit" onClick={() => reducers?.replySupport({ ticketId: ticket.id, body: replyByTicket[key] ?? '' })}>Reply</button>
+            </article>
+          );
+        })}
+      </section>
+
+      {isAdmin && (
+        <section className="feature-card">
+          <h2>Staff roles</h2>
+          {staffRoles.map(row => (
+            <div className="feature-row" data-role="staff-role-row" data-account-id={String(row.accountId)} key={String(row.accountId)}>
+              <span>{row.username}</span>
+              <span data-role="staff-role-value">{row.role}</span>
+              <input data-role="staff-role-select" defaultValue={row.role} id={`role-${String(row.accountId)}`} />
+              <button className="btn btn-ghost btn-sm" data-role="staff-role-save" onClick={() => reducers?.assignStaffRole({
+                accountId: row.accountId,
+                role: (document.getElementById(`role-${String(row.accountId)}`) as HTMLSelectElement)?.value ?? 'warehouse',
+              })}>Save role</button>
+            </div>
+          ))}
+        </section>
+      )}
+
+      {(isStaff || isAdmin) && (
+        <section className="feature-card">
+          <h2>Catalog management</h2>
+          <input data-role="catalog-name" value={catalog.name} onChange={e => setCatalog({ ...catalog, name: value(e) })} placeholder="Name" />
+          <input data-role="catalog-category" value={catalog.category} onChange={e => setCatalog({ ...catalog, category: value(e) })} placeholder="Category" />
+          <input data-role="catalog-price" value={catalog.price} onChange={e => setCatalog({ ...catalog, price: value(e) })} placeholder="Price" />
+          <input data-role="catalog-variants" value={catalog.variants} onChange={e => setCatalog({ ...catalog, variants: value(e) })} placeholder="Variants" />
+          <button className="btn btn-primary btn-sm" data-role="catalog-save" onClick={() => reducers?.addCatalogProduct({ name: catalog.name, categoryName: catalog.category, price: Number(catalog.price), variants: catalog.variants })}>Add product</button>
+          {items.flatMap(item => (variantsByItem.get(item.id) ?? []).map(variant => <span data-role="item-variant" key={String(variant.id)}>{item.name}: {variant.name}</span>))}
+        </section>
+      )}
+
+      {(isStaff || isAdmin) && (
+        <section className="feature-card">
+          <h2>Promotions</h2>
+          <input data-role="promotion-code" value={promotion.code} onChange={e => setPromotion({ ...promotion, code: value(e) })} placeholder="Code" />
+          <input data-role="promotion-discount" value={promotion.discount} onChange={e => setPromotion({ ...promotion, discount: value(e) })} placeholder="Discount %" />
+          <input data-role="promotion-start" value={promotion.start} onChange={e => setPromotion({ ...promotion, start: value(e) })} placeholder="Start date" />
+          <input data-role="promotion-end" value={promotion.end} onChange={e => setPromotion({ ...promotion, end: value(e) })} placeholder="End date" />
+          <input data-role="promotion-limit" value={promotion.limit} onChange={e => setPromotion({ ...promotion, limit: value(e) })} placeholder="Limit" />
+          <button className="btn btn-primary btn-sm" data-role="promotion-submit" data-promotion-code={promotion.code} onClick={() => reducers?.createPromotion({
+            code: promotion.code,
+            discountPercent: Number(promotion.discount),
+            startMicros: BigInt(new Date(promotion.start).getTime()) * 1000n,
+            endMicros: BigInt(new Date(promotion.end).getTime()) * 1000n,
+            usageLimit: Number(promotion.limit),
+          })}>Create promotion</button>
+          {promotions.map(row => <div data-role="promotion-item" key={String(row.id)}>{row.code}: <span data-role="promotion-discount">{row.discountPercent}</span>% <span data-role="promotion-start">{new Date(Number(row.startMicros / 1000n)).toISOString().slice(0, 10)}</span> to <span data-role="promotion-end">{new Date(Number(row.endMicros / 1000n)).toISOString().slice(0, 10)}</span>, limit <span data-role="promotion-limit">{row.usageLimit}</span></div>)}
+          {promotionReports.map(row => <div data-role="promotion-report" key={String(row.promotionId)}>{row.code}: <span data-role="promotion-redemptions">{row.redemptions}</span> <span data-role="promotion-revenue">{formatMoney(row.revenue)}</span></div>)}
+        </section>
+      )}
+
+      {isSignedIn && (
+        <section className="feature-card">
+          <h2>Notification preferences</h2>
+          <button className="btn btn-ghost btn-sm" data-role="notification-order" data-state={orderEnabled ? 'on' : 'off'} onClick={() => setOrderEnabled((enabled: boolean) => !enabled)}>Order notifications: {orderEnabled ? 'on' : 'off'}</button>
+          <button className="btn btn-ghost btn-sm" data-role="notification-stock" data-state={stockEnabled ? 'on' : 'off'} onClick={() => setStockEnabled((enabled: boolean) => !enabled)}>Stock notifications: {stockEnabled ? 'on' : 'off'}</button>
+          <button className="btn btn-primary btn-sm" data-role="notification-save" onClick={() => reducers?.saveNotificationPreferences({ orderEnabled, stockEnabled })}>Save preferences</button>
+          {notifications.map(row => <div data-role="notification-item" key={String(row.id)}>{row.message}</div>)}
+        </section>
+      )}
+
+      {isAdmin && (
+        <section className="feature-card">
+          <h2>Scheduled restocks</h2>
+          <input data-role="schedule-restock-item" value={restock.item} onChange={e => setRestock({ ...restock, item: value(e) })} placeholder="Item" />
+          <input data-role="schedule-restock-warehouse" value={restock.warehouse} onChange={e => setRestock({ ...restock, warehouse: value(e) })} placeholder="Warehouse" />
+          <input data-role="schedule-restock-qty" value={restock.quantity} onChange={e => setRestock({ ...restock, quantity: value(e) })} placeholder="Quantity" />
+          <input data-role="schedule-restock-delay" value={restock.delay} onChange={e => setRestock({ ...restock, delay: value(e) })} placeholder="Delay seconds" />
+          <button className="btn btn-primary btn-sm" data-role="schedule-restock-submit"
+            data-action-input={JSON.stringify({ item: restock.item, warehouse: restock.warehouse, quantity: Number(restock.quantity), delaySeconds: Number(restock.delay) })}
+            onClick={() => reducers?.scheduleRestock({ item: restock.item, warehouse: restock.warehouse, quantity: Number(restock.quantity), delaySeconds: Number(restock.delay) })}>Schedule</button>
+          {restocks.filter(row => row.status === 'pending').map(row => <div data-role="pending-restock-item" data-entity-id={String(row.id)} key={String(row.id)}>{itemName(row.itemId)} <span data-role="pending-restock-remaining">{Math.max(0, Number((row.dueMicros - BigInt(Date.now()) * 1000n) / 1_000_000n))}</span><button data-role="pending-restock-cancel" onClick={() => reducers?.cancelScheduledRestock({ restockId: row.id })}>Cancel</button></div>)}
+          {stockLedger.map((row, index) => <div data-role="stock-ledger-entry" key={index}>{itemName(row.itemId)} +{row.quantity}</div>)}
+        </section>
+      )}
+
+      {(isStaff || isAdmin) && (
+        <section className="feature-card">
+          <h2>Automatic reorder</h2>
+          <input data-role="reorder-item" value={reorder.item} onChange={e => setReorder({ ...reorder, item: value(e) })} placeholder="Item" />
+          <input data-role="reorder-threshold" value={reorder.threshold} onChange={e => setReorder({ ...reorder, threshold: value(e) })} placeholder="Threshold" />
+          <input data-role="reorder-quantity" value={reorder.quantity} onChange={e => setReorder({ ...reorder, quantity: value(e) })} placeholder="Quantity" />
+          <button className="btn btn-primary btn-sm" data-role="reorder-submit" onClick={() => reducers?.saveReorderRule({ itemId: items.find(row => row.name === reorder.item)?.id ?? 0n, warehouseId: warehouses.find(row => row.name === reorder.warehouse)?.id ?? warehouses[0]?.id ?? 0n, threshold: Number(reorder.threshold), quantity: Number(reorder.quantity) })}>Save rule</button>
+          {reorderRules.map(row => {
+            const pending = restocks.some(restock => restock.reorderRuleId === row.id && restock.status === 'pending');
+            return <div data-role="reorder-rule-item" key={String(row.id)}>{itemName(row.itemId)} at {row.threshold}: {row.quantity} ({pending ? 'pending' : 'ready'})</div>;
+          })}
+        </section>
+      )}
+
+      {expiredCart.length > 0 && (
+        <section className="feature-card" data-role="expired-cart">
+          <h2>Expired cart</h2>
+          {expiredCart.map(row => <div data-role="cart-item" key={String(row.itemId)}>{itemName(row.itemId)} <span data-role="cart-item-expired">expired</span></div>)}
+          <div data-role="cart-expired-notice">Your reserved cart expired.</div>
+          <div data-role="cart-restore-warning">Unavailable: {expiredCart.map(row => itemName(row.itemId)).join(', ')}</div>
+          <button className="btn btn-primary btn-sm" data-role="restore-cart" onClick={() => reducers?.restoreExpiredCart({})}>Restore cart</button>
+        </section>
+      )}
+
+      {(isStaff || isAdmin) && activity.map((row, index) => <div className="feature-row" data-role="activity-entry" key={index}><span data-role="activity-actor">{row.actor}</span><span data-role="activity-action">{row.action}</span><span data-role="activity-subject">{row.subject}</span><span data-role="activity-time">{String(row.createdMicros)}</span></div>)}
+      {(isStaff || isAdmin) && completedOrders.map(row => <div data-role="completed-order-item" key={String(row.orderId)}>{row.itemNames.join(', ')} <span data-role="completed-order-status">{row.status}</span></div>)}
+    </section>
+  );
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/config.ts b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/config.ts
new file mode 100644
index 00000000000..34b26f9fbaf
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/config.ts
@@ -0,0 +1,7 @@
+function required(name: string, value: string | undefined): string {
+  if (!value) throw new Error(`Missing required ${name}`);
+  return value;
+}
+
+export const MODULE_NAME = required('VITE_MODULE_NAME', import.meta.env.VITE_MODULE_NAME);
+export const SPACETIMEDB_URI = required('VITE_SPACETIMEDB_URI', import.meta.env.VITE_SPACETIMEDB_URI);
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/index.css b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/index.css
new file mode 100644
index 00000000000..b385691e0c7
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/index.css
@@ -0,0 +1,776 @@
+:root {
+  --primary: #4cf490;
+  --primary-hover: #4cf490bf;
+  --secondary: #a880ff;
+  --bg: #0d0d0e;
+  --surface: #141416;
+  --surface-2: #1b1c1f;
+  --border: #202126;
+  --text: #e6e9f0;
+  --text-muted: #6f7987;
+  --accent: #02befa;
+  --success: #4cf490;
+  --warning: #fbdc8e;
+  --danger: #ff4c4c;
+  --gradient: linear-gradient(266deg, #4cf490 0%, #8a38f5 100%);
+  --radius: 10px;
+  --sp-1: 8px;
+  --sp-2: 12px;
+  --sp-3: 16px;
+  --sp-4: 24px;
+  --header-h: 64px;
+}
+
+.progression-workbench {
+  display: grid;
+  gap: 16px;
+  margin-top: 40px;
+}
+
+.feature-links,
+.feature-card,
+.feature-row {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  gap: 10px;
+}
+
+.feature-card {
+  padding: 16px;
+  border: 1px solid var(--border, #d8dee6);
+  border-radius: 8px;
+}
+
+.feature-card h2 {
+  flex-basis: 100%;
+  margin: 0 0 4px;
+}
+
+.feature-row {
+  flex-basis: 100%;
+  padding: 8px 0;
+  border-top: 1px solid var(--border, #d8dee6);
+}
+
+.search-pagination {
+  display: flex;
+  gap: 8px;
+  margin-top: 12px;
+}
+
+* {
+  box-sizing: border-box;
+}
+
+html,
+body,
+#root {
+  height: 100%;
+}
+
+body {
+  margin: 0;
+  font-family:
+    -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Helvetica, Arial, sans-serif;
+  background: var(--bg);
+  color: var(--text);
+}
+
+button,
+input,
+select,
+textarea {
+  font-family: inherit;
+  color: inherit;
+}
+
+a {
+  color: var(--accent);
+}
+
+.app {
+  min-height: 100%;
+  display: flex;
+  flex-direction: column;
+}
+
+/* Header */
+.header {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  gap: var(--sp-3);
+  padding: var(--sp-2) var(--sp-4);
+  min-height: var(--header-h);
+  background: var(--surface);
+  border-bottom: 1px solid var(--border);
+  position: sticky;
+  top: 0;
+  z-index: 30;
+}
+
+.app-title {
+  font-weight: 700;
+  font-size: 1.25rem;
+  background: var(--gradient);
+  -webkit-background-clip: text;
+  background-clip: text;
+  color: transparent;
+  white-space: nowrap;
+}
+
+.search-input {
+  flex: 1;
+  max-width: 420px;
+}
+
+.header-spacer {
+  flex: 1;
+}
+
+.header-actions {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  gap: var(--sp-2);
+}
+
+/* Inputs */
+input[type='text'],
+input[type='password'],
+input[type='number'],
+select {
+  background: var(--bg);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  color: var(--text);
+  padding: 10px 14px;
+  font-size: 0.9rem;
+  outline: none;
+  transition:
+    border-color 0.15s,
+    box-shadow 0.15s;
+}
+
+input::placeholder {
+  color: var(--text-muted);
+}
+
+input:focus,
+select:focus {
+  border-color: var(--primary);
+  box-shadow: 0 0 0 3px rgba(76, 244, 144, 0.2);
+}
+
+/* Buttons */
+.btn {
+  border-radius: var(--radius);
+  border: 1px solid transparent;
+  padding: 9px 16px;
+  font-size: 0.9rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition:
+    background 0.15s,
+    border-color 0.15s,
+    opacity 0.15s;
+  white-space: nowrap;
+}
+
+.btn-primary {
+  background: var(--primary);
+  color: #06110a;
+}
+
+.btn-primary:hover {
+  background: var(--primary-hover);
+}
+
+.btn-primary:disabled {
+  background: var(--border);
+  color: var(--text-muted);
+  cursor: not-allowed;
+}
+
+.btn-ghost {
+  background: transparent;
+  border-color: var(--border);
+  color: var(--text);
+}
+
+.btn-ghost:hover {
+  border-color: var(--secondary);
+  color: var(--secondary);
+}
+
+.btn-danger {
+  background: transparent;
+  border-color: var(--danger);
+  color: var(--danger);
+}
+
+.btn-danger:hover {
+  background: rgba(255, 76, 76, 0.12);
+}
+
+.btn-sm {
+  padding: 5px 10px;
+  font-size: 0.8rem;
+}
+
+/* Badges */
+.badge {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  min-width: 20px;
+  height: 20px;
+  padding: 0 6px;
+  border-radius: 999px;
+  font-size: 0.75rem;
+  font-weight: 700;
+  background: var(--primary);
+  color: #06110a;
+}
+
+.badge-muted {
+  background: var(--border);
+  color: var(--text-muted);
+}
+
+.badge-danger {
+  background: var(--danger);
+  color: #200404;
+}
+
+/* Layout */
+.main {
+  flex: 1;
+  padding: var(--sp-4);
+  max-width: 1200px;
+  width: 100%;
+  margin: 0 auto;
+}
+
+.section-title {
+  font-size: 1.1rem;
+  font-weight: 700;
+  margin: 0 0 var(--sp-3);
+}
+
+.item-list {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(220px, 1fr));
+  gap: var(--sp-3);
+}
+
+/* Item card */
+.item-card {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: var(--sp-3);
+  display: flex;
+  flex-direction: column;
+  gap: var(--sp-1);
+  transition:
+    border-color 0.15s,
+    transform 0.15s;
+}
+
+.item-card:hover {
+  border-color: var(--secondary);
+}
+
+.item-card.out-of-stock-card {
+  opacity: 0.65;
+}
+
+.item-card-name {
+  font-weight: 600;
+  font-size: 0.98rem;
+  cursor: pointer;
+  background: none;
+  border: none;
+  color: var(--text);
+  text-align: left;
+  padding: 0;
+}
+
+.item-card-name:hover {
+  color: var(--primary);
+}
+
+.item-card-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  font-size: 0.85rem;
+  color: var(--text-muted);
+}
+
+.item-price {
+  color: var(--text);
+  font-weight: 700;
+  text-align: right;
+}
+
+.item-stock {
+  font-variant-numeric: tabular-nums;
+}
+
+.stock-low {
+  color: var(--warning);
+}
+
+.stock-zero {
+  color: var(--danger);
+}
+
+.item-card-actions {
+  display: flex;
+  gap: var(--sp-1);
+  margin-top: var(--sp-1);
+}
+
+.item-card-actions .btn {
+  flex: 1;
+}
+
+/* Panels / overlay */
+.backdrop {
+  position: fixed;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.55);
+  z-index: 20;
+  animation: fadeIn 0.15s ease-out;
+}
+
+.panel {
+  position: fixed;
+  top: var(--header-h, 60px);
+  right: 0;
+  bottom: 0;
+  width: min(420px, 92vw);
+  background: var(--surface);
+  border-left: 1px solid var(--border);
+  box-shadow: -8px 0 24px rgba(0, 0, 0, 0.4);
+  z-index: 21;
+  display: flex;
+  flex-direction: column;
+  animation: slideIn 0.2s ease-out;
+}
+
+@keyframes fadeIn {
+  from {
+    opacity: 0;
+  }
+  to {
+    opacity: 1;
+  }
+}
+
+@keyframes slideIn {
+  from {
+    transform: translateX(100%);
+  }
+  to {
+    transform: translateX(0);
+  }
+}
+
+.panel-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: var(--sp-3);
+  border-bottom: 1px solid var(--border);
+}
+
+.panel-header h2 {
+  margin: 0;
+  font-size: 1.05rem;
+}
+
+.panel-body {
+  flex: 1;
+  overflow-y: auto;
+  padding: var(--sp-3);
+  display: flex;
+  flex-direction: column;
+  gap: var(--sp-2);
+}
+
+.panel-footer {
+  padding: var(--sp-3);
+  border-top: 1px solid var(--border);
+}
+
+.close-btn {
+  background: none;
+  border: none;
+  color: var(--text-muted);
+  font-size: 1.3rem;
+  cursor: pointer;
+  line-height: 1;
+}
+
+.close-btn:hover {
+  color: var(--text);
+}
+
+/* Cart */
+.cart-item {
+  display: flex;
+  align-items: center;
+  gap: var(--sp-2);
+  padding: var(--sp-2);
+  background: var(--surface-2);
+  border-radius: var(--radius);
+  border: 1px solid var(--border);
+}
+
+.cart-item-info {
+  flex: 1;
+  min-width: 0;
+}
+
+.cart-item-name {
+  font-weight: 600;
+  font-size: 0.9rem;
+}
+
+.cart-item-price {
+  font-size: 0.8rem;
+  color: var(--text-muted);
+}
+
+.cart-quantity {
+  width: 56px;
+  text-align: center;
+  padding: 6px;
+}
+
+.cart-total-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  font-weight: 700;
+  font-size: 1.05rem;
+}
+
+/* Orders */
+.order-item {
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: var(--sp-2);
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+
+.order-item-names {
+  font-size: 0.88rem;
+}
+
+.order-item-meta {
+  font-size: 0.78rem;
+  color: var(--text-muted);
+}
+
+.order-total {
+  font-weight: 700;
+}
+
+/* Item detail */
+.inline-detail {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  margin-bottom: var(--sp-4);
+  animation: fadeIn 0.15s ease-out;
+}
+
+.inline-detail .panel-body {
+  max-height: none;
+}
+
+.detail-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: flex-start;
+}
+
+.detail-price {
+  font-size: 1.4rem;
+  font-weight: 700;
+  text-align: right;
+}
+
+.review-list {
+  display: flex;
+  flex-direction: column;
+  gap: var(--sp-2);
+  margin-top: var(--sp-2);
+}
+
+.review-item {
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: var(--sp-2);
+}
+
+.review-item-rating {
+  color: var(--warning);
+  font-weight: 700;
+}
+
+.review-form {
+  display: flex;
+  flex-direction: column;
+  gap: var(--sp-2);
+  margin-top: var(--sp-3);
+  padding-top: var(--sp-3);
+  border-top: 1px solid var(--border);
+}
+
+/* Auth */
+.auth-widget {
+  display: flex;
+  align-items: center;
+  gap: var(--sp-1);
+}
+
+.auth-forms {
+  display: flex;
+  gap: var(--sp-3);
+  flex-wrap: wrap;
+}
+
+.auth-form {
+  display: flex;
+  gap: 6px;
+  align-items: center;
+}
+
+.auth-form input {
+  width: 130px;
+}
+
+.current-user {
+  font-weight: 600;
+  color: var(--primary);
+}
+
+/* Admin */
+.admin-panel {
+  display: flex;
+  flex-direction: column;
+  gap: var(--sp-4);
+}
+
+.admin-section {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: var(--sp-3);
+}
+
+table.admin-table {
+  width: 100%;
+  border-collapse: collapse;
+  font-size: 0.9rem;
+}
+
+table.admin-table th {
+  text-align: left;
+  color: var(--text-muted);
+  font-weight: 600;
+  padding: var(--sp-1);
+  border-bottom: 1px solid var(--border);
+}
+
+table.admin-table td {
+  padding: var(--sp-1);
+  border-bottom: 1px solid var(--border);
+}
+
+.admin-revenue {
+  font-size: 1.4rem;
+  font-weight: 700;
+  color: var(--primary);
+}
+
+.restock-form {
+  display: flex;
+  gap: 6px;
+  align-items: center;
+  justify-content: flex-end;
+}
+
+.restock-input {
+  width: 70px;
+  padding: 6px 8px;
+}
+
+/* States */
+.empty-state {
+  color: var(--text-muted);
+  font-size: 0.9rem;
+  padding: var(--sp-4) 0;
+  text-align: center;
+}
+
+.error-text {
+  color: var(--danger);
+  font-size: 0.85rem;
+  background: rgba(255, 76, 76, 0.1);
+  border: 1px solid rgba(255, 76, 76, 0.3);
+  border-radius: var(--radius);
+  padding: 8px 12px;
+}
+
+.connecting {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  height: 100vh;
+  gap: var(--sp-2);
+  color: var(--text-muted);
+}
+
+.spinner {
+  width: 20px;
+  height: 20px;
+  border: 3px solid var(--border);
+  border-top-color: var(--primary);
+  border-radius: 50%;
+  animation: spin 0.8s linear infinite;
+}
+
+@keyframes spin {
+  to {
+    transform: rotate(360deg);
+  }
+}
+
+.muted {
+  color: var(--text-muted);
+  font-size: 0.8rem;
+}
+
+/* Orders: status/lines */
+.order-item-row {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+}
+
+.order-status {
+  font-size: 0.8rem;
+  font-weight: 700;
+  text-transform: capitalize;
+  color: var(--secondary);
+}
+
+.order-item-lines {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+  margin-top: 4px;
+}
+
+.order-item-line {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  font-size: 0.85rem;
+}
+
+/* Admin: inline forms */
+.inline-form {
+  display: flex;
+  gap: 6px;
+  align-items: center;
+  flex-wrap: wrap;
+}
+
+.price-input {
+  width: 80px;
+  padding: 6px 8px;
+}
+
+.transfer-qty {
+  width: 64px;
+  padding: 6px 8px;
+}
+
+/* Low stock */
+.low-stock-list {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+
+.low-stock-item {
+  background: var(--surface-2);
+  border: 1px solid var(--warning);
+  border-radius: var(--radius);
+  padding: 8px 12px;
+  font-size: 0.9rem;
+}
+
+/* Recommended */
+.recommended-list {
+  display: grid;
+  grid-template-columns: repeat(auto-fill, minmax(200px, 1fr));
+  gap: var(--sp-2);
+}
+
+.recommended-item {
+  background: var(--surface);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: var(--sp-2);
+  display: flex;
+  justify-content: space-between;
+  gap: var(--sp-2);
+  font-size: 0.9rem;
+}
+
+/* Fulfilment */
+.fulfilment-panel {
+  display: flex;
+  flex-direction: column;
+  gap: var(--sp-2);
+}
+
+.fulfilment-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+}
+
+.queue-item {
+  background: var(--surface-2);
+  border: 1px solid var(--border);
+  border-radius: var(--radius);
+  padding: var(--sp-2);
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+
+.queue-item-names {
+  font-weight: 600;
+  font-size: 0.9rem;
+}
+
+.queue-item-warehouses {
+  display: flex;
+  gap: 6px;
+  flex-wrap: wrap;
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/main.tsx b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/main.tsx
new file mode 100644
index 00000000000..5f3b1c383a1
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/main.tsx
@@ -0,0 +1,29 @@
+import React, { useMemo } from 'react';
+import ReactDOM from 'react-dom/client';
+import { SpacetimeDBProvider } from 'spacetimedb/react';
+import { DbConnection } from './module_bindings';
+import { MODULE_NAME, SPACETIMEDB_URI } from './config';
+import App from './App';
+import './index.css';
+
+function Root() {
+  const connectionBuilder = useMemo(
+    () =>
+      DbConnection.builder()
+        .withUri(SPACETIMEDB_URI)
+        .withDatabaseName(MODULE_NAME)
+        .withToken(localStorage.getItem('auth_token') || undefined),
+    []
+  );
+  return (
+    <SpacetimeDBProvider connectionBuilder={connectionBuilder}>
+      <App />
+    </SpacetimeDBProvider>
+  );
+}
+
+ReactDOM.createRoot(document.getElementById('root')!).render(
+  <React.StrictMode>
+    <Root />
+  </React.StrictMode>
+);
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/types.ts b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/types.ts
new file mode 100644
index 00000000000..516462ec6b9
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/types.ts
@@ -0,0 +1,88 @@
+import type { Timestamp } from 'spacetimedb';
+
+export interface ItemRow {
+  id: bigint;
+  name: string;
+  price: number;
+}
+
+export interface WarehouseRow {
+  id: bigint;
+  name: string;
+}
+
+export interface StockRow {
+  itemId: bigint;
+  warehouseId: bigint;
+  quantity: number;
+}
+
+export interface ReviewRow {
+  id: bigint;
+  itemId: bigint;
+  accountId: bigint;
+  rating: number;
+  comment: string;
+  createdAt: Timestamp;
+}
+
+export interface ItemStatsRow {
+  itemId: bigint;
+  purchaseCount: number;
+}
+
+export interface CurrentUserRow {
+  id: bigint;
+  username: string;
+  isAdmin: boolean;
+  isStaff: boolean;
+}
+
+export interface MyCartRow {
+  itemId: bigint;
+  quantity: number;
+}
+
+export interface MyOrderRow {
+  orderId: bigint;
+  createdAt: Timestamp;
+  total: number;
+  status: string;
+}
+
+export interface MyOrderItemRow {
+  orderId: bigint;
+  itemId: bigint;
+  itemName: string;
+  quantity: number;
+  unitPrice: number;
+  returned: boolean;
+}
+
+export interface AdminRevenueRow {
+  total: number;
+}
+
+export interface QueueOrderRow {
+  orderId: bigint;
+  createdAt: Timestamp;
+  itemNames: string[];
+  warehouseNames: string[];
+}
+
+export interface CategoryTotalRow {
+  categoryId: bigint;
+  name: string;
+  unitsSold: number;
+  revenue: number;
+}
+
+export interface RecommendedItemRow {
+  itemId: bigint;
+  name: string;
+  price: number;
+}
+
+export function formatMoney(n: number): string {
+  return `$${n.toFixed(2)}`;
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/vite-env.d.ts b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/vite-env.d.ts
new file mode 100644
index 00000000000..11f02fe2a00
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/src/vite-env.d.ts
@@ -0,0 +1 @@
+/// <reference types="vite/client" />
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/tsconfig.json b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/tsconfig.json
new file mode 100644
index 00000000000..42e05216900
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/tsconfig.json
@@ -0,0 +1,17 @@
+{
+  "compilerOptions": {
+    "target": "ES2020",
+    "useDefineForClassFields": true,
+    "lib": ["ES2020", "DOM", "DOM.Iterable"],
+    "module": "ESNext",
+    "skipLibCheck": true,
+    "moduleResolution": "bundler",
+    "allowImportingTsExtensions": true,
+    "resolveJsonModule": true,
+    "isolatedModules": true,
+    "noEmit": true,
+    "jsx": "react-jsx",
+    "strict": true
+  },
+  "include": ["src"]
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/client/vite.config.ts b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/vite.config.ts
new file mode 100644
index 00000000000..262757e414a
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/client/vite.config.ts
@@ -0,0 +1,9 @@
+import { defineConfig } from 'vite';
+import react from '@vitejs/plugin-react';
+
+export default defineConfig({
+  plugins: [react()],
+  server: {
+    port: 6473,
+  },
+});
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/reference.json b/tools/stack-bench/reference-apps/ecommerce/spacetime/reference.json
new file mode 100644
index 00000000000..00b90c9d59c
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/reference.json
@@ -0,0 +1,10 @@
+{
+  "schemaVersion": 1,
+  "kind": "spacetime",
+  "frozenLock": false,
+  "installDirectories": ["backend/spacetimedb", "client"],
+  "moduleDirectory": "backend/spacetimedb",
+  "bindingsDirectory": "client/src/module_bindings",
+  "client": { "directory": "client", "script": "dev", "port": 6473 },
+  "requiredEnvironment": ["VITE_MODULE_NAME", "VITE_SPACETIMEDB_URI", "VITE_PORT"]
+}
diff --git a/tools/stack-bench/reference-apps/ecommerce/spacetime/start.sh b/tools/stack-bench/reference-apps/ecommerce/spacetime/start.sh
new file mode 100644
index 00000000000..1e3f9153667
--- /dev/null
+++ b/tools/stack-bench/reference-apps/ecommerce/spacetime/start.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+set -e
+: "${VITE_MODULE_NAME:?}"
+: "${VITE_SPACETIMEDB_URI:?}"
+: "${VITE_PORT:?}"
+[ -d backend/spacetimedb/node_modules ] || npm --prefix backend/spacetimedb ci --no-audit --no-fund
+[ -d client/node_modules ] || npm --prefix client ci --no-audit --no-fund
+/deps/spacetimedb-cli generate --lang typescript --module-path /app/backend/spacetimedb --out-dir /app/client/src/module_bindings --yes --no-config
+npm --prefix client run build
+exec npm --prefix client run dev -- --host 0.0.0.0 --port "$VITE_PORT" --strictPort
diff --git a/tools/stack-bench/reference-apps/registry.json b/tools/stack-bench/reference-apps/registry.json
new file mode 100644
index 00000000000..7004f962f01
--- /dev/null
+++ b/tools/stack-bench/reference-apps/registry.json
@@ -0,0 +1,86 @@
+{
+  "schemaVersion": 4,
+  "fixtures": [
+    {
+      "id": "ecommerce-reference-mongodb",
+      "backend": "mongodb",
+      "track": "ecommerce",
+      "level": 6,
+      "actionLevels": [1, 2, 3, 4, 5, 6],
+      "status": "candidate",
+      "recipes": [
+        "ecommerce.sequential-l1@2.5.0",
+        "ecommerce.sequential-l2@1.6.0",
+        "ecommerce.sequential-l3@1.0.0",
+        "ecommerce.progression-catalog@2.0.2",
+        "ecommerce.progression-depth3@2.0.2"
+      ],
+      "targetPath": "reference-apps/ecommerce/mongodb",
+      "origin": {
+        "kind": "authored",
+        "note": "Cumulative MongoDB reference shared by the registered ecommerce recipes."
+      },
+      "imported": {
+        "path": "reference-apps/ecommerce/mongodb",
+        "sourceSha256": "edb9732535b2273232a320b8e7b4ad6758991683a6bd06103f2ec4be07dafe20"
+      },
+      "mutationManifests": [
+        "grader/mutations/mongodb-ecommerce-2.0.1.json"
+      ]
+    },
+    {
+      "id": "ecommerce-reference-postgres",
+      "backend": "postgres",
+      "track": "ecommerce",
+      "level": 6,
+      "actionLevels": [1, 2, 3, 4, 5, 6],
+      "status": "candidate",
+      "recipes": [
+        "ecommerce.sequential-l1@2.5.0",
+        "ecommerce.sequential-l2@1.6.0",
+        "ecommerce.sequential-l3@1.0.0",
+        "ecommerce.progression-catalog@2.0.2",
+        "ecommerce.progression-depth3@2.0.2"
+      ],
+      "targetPath": "reference-apps/ecommerce/postgres",
+      "origin": {
+        "kind": "authored",
+        "note": "Cumulative PostgreSQL reference shared by the registered ecommerce recipes."
+      },
+      "imported": {
+        "path": "reference-apps/ecommerce/postgres",
+        "sourceSha256": "356a4fb0602bc1ca4ac5b272ae6d9a434039a7f8da71c2f237a8793988e86fe0"
+      },
+      "mutationManifests": [
+        "grader/mutations/postgres-ecommerce-2.0.1.json"
+      ]
+    },
+    {
+      "id": "ecommerce-reference-spacetime",
+      "backend": "spacetime",
+      "track": "ecommerce",
+      "level": 6,
+      "actionLevels": [1, 2, 3, 4, 5, 6],
+      "status": "candidate",
+      "recipes": [
+        "ecommerce.sequential-l1@2.5.0",
+        "ecommerce.sequential-l2@1.6.0",
+        "ecommerce.sequential-l3@1.0.0",
+        "ecommerce.progression-catalog@2.0.2",
+        "ecommerce.progression-depth3@2.0.2"
+      ],
+      "targetPath": "reference-apps/ecommerce/spacetime",
+      "origin": {
+        "kind": "authored",
+        "note": "Cumulative SpacetimeDB reference shared by the registered ecommerce recipes."
+      },
+      "imported": {
+        "path": "reference-apps/ecommerce/spacetime",
+        "sourceSha256": "f68523d7db3e236051b678a56dfdc278b88ed126dc4ef04b1f20fe2c20fcf3d6"
+      },
+      "mutationManifests": [
+        "grader/mutations/spacetime-ecommerce-2.0.1.json"
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/scripts/copy-dashboard-assets.ts b/tools/stack-bench/scripts/copy-dashboard-assets.ts
new file mode 100644
index 00000000000..97206790eea
--- /dev/null
+++ b/tools/stack-bench/scripts/copy-dashboard-assets.ts
@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+
+import { cpSync, mkdirSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+
+const root = resolve(import.meta.dirname, '..', '..');
+const source = join(root, 'dashboard', 'public');
+const target = join(root, 'dist', 'dashboard', 'public');
+
+mkdirSync(dirname(target), { recursive: true });
+cpSync(source, target, { recursive: true, filter: path => !path.endsWith('.ts') });
diff --git a/tools/stack-bench/src/actions/action-catalog.ts b/tools/stack-bench/src/actions/action-catalog.ts
new file mode 100644
index 00000000000..afdf1b78d9b
--- /dev/null
+++ b/tools/stack-bench/src/actions/action-catalog.ts
@@ -0,0 +1,135 @@
+import { createActionRegistry } from './action-contract.js';
+import type { ActionCategory, ActionImplementation, ActionPlugin } from './action-contract.js';
+import { ACTOR_TRANSPORT_ACTION_IMPLEMENTATIONS }
+  from './actor-transport-action-executors.js';
+import { BROWSER_ACTION_IMPLEMENTATIONS } from './browser-action-executors.js';
+import { RUNTIME_ACTION_IMPLEMENTATIONS } from './runtime-action-executors.js';
+import { ACTION_DEFINITIONS, ACTION_IDS,
+  compileActionInput } from '../composition/definition-compiler.js';
+import type { ActionId } from '../composition/definition-compiler.js';
+
+const ACTION_CATEGORY = {
+  callAction: 'transport',
+  callConcurrently: 'concurrency',
+  clearInput: 'browser-interaction',
+  click: 'browser-interaction',
+  clickConcurrently: 'concurrency',
+  closeClient: 'browser-interaction',
+  createRoom: 'browser-interaction',
+  dbSetStock: 'database',
+  ensureSignedIn: 'browser-interaction',
+  enterRoom: 'browser-interaction',
+  expect: 'browser-observation',
+  expectActorsWith: 'browser-observation',
+  expectActionOutcome: 'transport',
+  expectAgreement: 'browser-observation',
+  expectAllPresent: 'browser-observation',
+  expectCallOutcomes: 'concurrency',
+  expectElementCount: 'browser-observation',
+  expectForgeryRejected: 'transport',
+  expectNotReceived: 'transport',
+  expectNumber: 'browser-observation',
+  expectOrderMatches: 'browser-observation',
+  expectSequence: 'browser-observation',
+  expectReceived: 'transport',
+  expectReplayRejected: 'transport',
+  expectStable: 'browser-observation',
+  expectUnavailable: 'browser-observation',
+  fill: 'browser-interaction',
+  forgeWrite: 'transport',
+  freshClient: 'browser-interaction',
+  openClient: 'browser-interaction',
+  pressKey: 'browser-interaction',
+  race: 'concurrency',
+  recordNumber: 'browser-observation',
+  reload: 'browser-interaction',
+  replayAs: 'transport',
+  replayConcurrently: 'concurrency',
+  restartBackend: 'lifecycle',
+  runScript: 'application-process',
+  send: 'browser-interaction',
+  sendConcurrently: 'concurrency',
+  sendMany: 'browser-interaction',
+  setOffline: 'browser-interaction',
+  signIn: 'browser-interaction',
+  signUp: 'browser-interaction',
+  startAppServer: 'lifecycle',
+  stopAppServer: 'lifecycle',
+  typeInto: 'browser-interaction',
+  wait: 'timing',
+  waitUntilAbsent: 'browser-observation',
+} as const satisfies Record<ActionId, ActionCategory>;
+
+interface CategoryPolicy {
+  readonly timeoutMs: number;
+  readonly capabilities: readonly string[];
+  readonly sensitivity: readonly string[];
+}
+
+const CATEGORY_POLICY = {
+  'application-process': { timeoutMs: 90_000,
+    capabilities: ['application-files', 'subprocess'],
+    sensitivity: ['user-content', 'filesystem-path', 'process-output'] },
+  'browser-interaction': { timeoutMs: 60_000,
+    capabilities: ['actors', 'browser-interaction'], sensitivity: ['user-content'] },
+  'browser-observation': { timeoutMs: 300_000,
+    capabilities: ['actors', 'browser-observation'], sensitivity: [] },
+  concurrency: { timeoutMs: 120_000,
+    capabilities: ['actors', 'concurrency'], sensitivity: [] },
+  database: { timeoutMs: 90_000,
+    capabilities: ['clock', 'database-write'], sensitivity: [] },
+  // Must exceed the bounded stop, start, and readiness sequence.
+  lifecycle: { timeoutMs: 900_000,
+    capabilities: ['backend-lifecycle'], sensitivity: ['network-address'] },
+  timing: { timeoutMs: 360_000,
+    capabilities: ['actors', 'clock'], sensitivity: [] },
+  transport: { timeoutMs: 60_000,
+    capabilities: ['actors', 'transport-observation'],
+    sensitivity: ['user-content', 'network-address'] },
+} as const satisfies Record<ActionCategory, CategoryPolicy>;
+
+const ACTION_CAPABILITY_OVERRIDES: Partial<Record<ActionId, readonly string[]>> = {
+  callAction: ['actors', 'named-actions', 'transport-observation'],
+  callConcurrently: ['actors', 'named-actions'],
+  expectCallOutcomes: ['actors', 'named-actions'],
+  replayAs: ['actors', 'named-actions', 'transport-observation'],
+  startAppServer: ['application-lifecycle'],
+  stopAppServer: ['application-lifecycle'],
+};
+
+const ACTION_SENSITIVITY_OVERRIDES: Partial<Record<ActionId, readonly string[]>> = {
+  ensureSignedIn: ['credential'],
+  signIn: ['credential'],
+  signUp: ['credential'],
+};
+
+export const ACTION_IMPLEMENTATIONS = Object.freeze({
+  ...ACTOR_TRANSPORT_ACTION_IMPLEMENTATIONS,
+  ...BROWSER_ACTION_IMPLEMENTATIONS,
+  ...RUNTIME_ACTION_IMPLEMENTATIONS,
+} satisfies Record<ActionId, ActionImplementation>);
+
+export function actionPlugin(id: string): ActionPlugin {
+  if (!Object.hasOwn(ACTION_DEFINITIONS, id)) throw new Error(`cannot register unknown action ${id}`);
+  const actionId = id as ActionId;
+  const actionCategory = ACTION_CATEGORY[actionId];
+  const policy = CATEGORY_POLICY[actionCategory];
+  const capabilities = ACTION_CAPABILITY_OVERRIDES[actionId]
+    ?? policy.capabilities;
+  const sensitivity = ACTION_SENSITIVITY_OVERRIDES[actionId];
+  return {
+    id,
+    version: '1.0.0',
+    category: actionCategory,
+    compile: (input: unknown) =>
+      compileActionInput(input, { source: `action:${id}`, expectedAction: id }),
+    capabilities,
+    timeoutMs: policy.timeoutMs,
+    sensitivity: [...(sensitivity ?? []), ...policy.sensitivity],
+    execute: ACTION_IMPLEMENTATIONS[actionId],
+  };
+}
+
+export const ACTION_REGISTRY = createActionRegistry(ACTION_IDS.map(actionPlugin), {
+  expectedIds: ACTION_IDS,
+});
diff --git a/tools/stack-bench/src/actions/action-contract.ts b/tools/stack-bench/src/actions/action-contract.ts
new file mode 100644
index 00000000000..2c0128ba718
--- /dev/null
+++ b/tools/stack-bench/src/actions/action-contract.ts
@@ -0,0 +1,321 @@
+import { evidenceNowMs } from '../evidence/evidence-timing.js';
+import { isFinding } from './action-findings.js';
+import type { Finding } from './action-findings.js';
+
+type UnknownRecord = Record<string, unknown>;
+type ActionStatus = 'passed' | 'failed' | 'inconclusive' | 'harness_failure';
+type TimerHandle = ReturnType<typeof setTimeout>;
+
+export type ActionCategory =
+  | 'application-process'
+  | 'browser-interaction'
+  | 'browser-observation'
+  | 'concurrency'
+  | 'database'
+  | 'lifecycle'
+  | 'timing'
+  | 'transport';
+
+interface ActionImplementationArguments {
+  readonly input: unknown;
+  readonly capabilities: Readonly<Record<string, unknown>>;
+  readonly signal: AbortSignal;
+}
+
+export type ActionImplementation = (
+  arguments_: ActionImplementationArguments,
+) => unknown | Promise<unknown>;
+
+export function actionImplementation<Input, Capabilities>(
+  implementation: (arguments_: {
+    readonly input: Input;
+    readonly capabilities: Capabilities;
+    readonly signal: AbortSignal;
+  }) => unknown | Promise<unknown>,
+): ActionImplementation {
+  // Compilation and capability selection validate this static dispatch boundary.
+  return implementation as unknown as ActionImplementation;
+}
+
+export interface ActionPlugin {
+  readonly id: string;
+  readonly version: string;
+  readonly category: ActionCategory;
+  readonly compile: (input: unknown) => unknown;
+  readonly capabilities: readonly string[];
+  readonly timeoutMs: number;
+  readonly sensitivity: readonly string[];
+  readonly execute: ActionImplementation;
+}
+
+export interface ActionRegistry {
+  readonly ids: readonly string[];
+  get(id: string): ActionPlugin;
+}
+
+interface ActionRunContext {
+  readonly capabilities: Readonly<Record<string, unknown>>;
+  readonly signal: AbortSignal | null;
+}
+
+type ActionRunContextInput = Partial<ActionRunContext>;
+
+export interface ActionEvidence {
+  readonly schemaVersion: number;
+  readonly action: { readonly id: string; readonly version: string };
+  readonly status: ActionStatus;
+  readonly type: string;
+  readonly code: string;
+  readonly phase: 'execute';
+  readonly summary: string | null;
+  // The typed finding behind a failed or inconclusive action; null when the
+  // action passed or the harness itself failed.
+  readonly finding: Finding | null;
+  readonly observation: unknown;
+  readonly expected: unknown;
+  readonly retryable: boolean;
+  readonly timing: {
+    readonly startedAtMs: number;
+    readonly completedAtMs: number;
+    readonly durationMs: number;
+    readonly deadlineMs: number;
+  };
+  readonly attachments: readonly unknown[];
+  readonly sensitivity: readonly string[];
+}
+
+export const ACTION_EVIDENCE_SCHEMA_VERSION = 2;
+
+const object = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+// Every runtime capability the grader can hand an action. A stack declares
+// which of these it provides; an action declares which it needs.
+export const GRADING_CAPABILITY_IDS = Object.freeze([
+  'actors',
+  'application-files',
+  'application-lifecycle',
+  'backend-lifecycle',
+  'browser-interaction',
+  'browser-observation',
+  'clock',
+  'concurrency',
+  'database-write',
+  'named-actions',
+  'subprocess',
+  'transport-observation',
+] as const);
+
+export type GradingCapabilityId = (typeof GRADING_CAPABILITY_IDS)[number];
+
+export function createActionRegistry(
+  plugins: readonly ActionPlugin[],
+  { expectedIds = null }: { expectedIds?: readonly string[] | null } = {},
+): ActionRegistry {
+  const entries = new Map<string, ActionPlugin>();
+  const known = new Set<string>(GRADING_CAPABILITY_IDS);
+  for (const plugin of plugins) {
+    if (entries.has(plugin.id)) throw new Error(`duplicate action registration ${plugin.id}`);
+    const unknown = plugin.capabilities.filter(capability => !known.has(capability));
+    if (unknown.length) {
+      throw new Error(`action ${plugin.id} needs unknown capabilities ${unknown.join(', ')}`);
+    }
+    entries.set(plugin.id, plugin);
+  }
+  if (expectedIds !== null) {
+    const expected = new Set(expectedIds);
+    const missing = [...expected].filter(id => !entries.has(id));
+    const unknown = [...entries.keys()].filter(id => !expected.has(id));
+    if (missing.length || unknown.length) {
+      throw new Error(`action registry mismatch${missing.length ? `; missing ${missing.join(', ')}` : ''}`
+        + `${unknown.length ? `; unknown ${unknown.join(', ')}` : ''}`);
+    }
+  }
+  const ids = Object.freeze([...entries.keys()].sort());
+  return Object.freeze({
+    ids,
+    get(id: string): ActionPlugin {
+      const plugin = entries.get(id);
+      if (!plugin) throw new Error(`unknown registered action ${JSON.stringify(id)}`);
+      return plugin;
+    },
+  });
+}
+
+function createActionRunContext(value: ActionRunContextInput = {}): ActionRunContext {
+  const capabilities = value.capabilities ?? {};
+  return Object.freeze({ capabilities: Object.freeze({ ...capabilities }),
+    signal: value.signal ?? null });
+}
+
+class ClassifiedActionError extends Error {
+  readonly classification: 'application_failure' | 'inconclusive';
+  readonly details: UnknownRecord;
+
+  constructor(
+    classification: 'application_failure' | 'inconclusive',
+    message: string,
+    details: UnknownRecord = {},
+  ) {
+    super(message);
+    this.name = this.constructor.name;
+    this.classification = classification;
+    this.details = details;
+  }
+}
+
+export class ActionApplicationFailure extends ClassifiedActionError {
+  constructor(message: string, details: UnknownRecord = {}) {
+    super('application_failure', message, details);
+  }
+}
+
+export class ActionInconclusive extends ClassifiedActionError {
+  constructor(message: string, details: UnknownRecord = {}) {
+    super('inconclusive', message, details);
+  }
+}
+
+function evidence(
+  plugin: ActionPlugin,
+  startedAtMs: number,
+  completedAtMs: number,
+  status: ActionStatus,
+  code: string,
+  summary: unknown,
+  details: UnknownRecord = {},
+): ActionEvidence {
+  const safeCompletedAtMs = Math.max(startedAtMs, completedAtMs);
+  return {
+    schemaVersion: ACTION_EVIDENCE_SCHEMA_VERSION,
+    action: { id: plugin.id, version: plugin.version },
+    status,
+    type: `${plugin.category}-evidence`,
+    code,
+    phase: 'execute',
+    summary: summary == null ? null : String(summary).slice(0, 2_000),
+    finding: isFinding(details.finding) ? details.finding : null,
+    observation: details.observation ?? null,
+    expected: details.expected ?? null,
+    retryable: details.retryable === true,
+    timing: { startedAtMs, completedAtMs: safeCompletedAtMs,
+      durationMs: safeCompletedAtMs - startedAtMs,
+      deadlineMs: plugin.timeoutMs },
+    attachments: [],
+    sensitivity: [...plugin.sensitivity],
+  };
+}
+
+function structuredValue(value: unknown, seen: Set<object> = new Set()): boolean {
+  if (value === undefined || value === null || typeof value === 'string' || typeof value === 'boolean') return true;
+  if (typeof value === 'number') return Number.isFinite(value);
+  if (!object(value) && !Array.isArray(value)) return false;
+  if (seen.has(value)) return false;
+  const prototype = Object.getPrototypeOf(value);
+  if (!Array.isArray(value) && prototype !== Object.prototype && prototype !== null) return false;
+  seen.add(value);
+  const valid = (Array.isArray(value) ? value : Object.values(value))
+    .every(item => structuredValue(item, seen));
+  seen.delete(value);
+  return valid;
+}
+
+export async function executeAction(
+  registry: ActionRegistry,
+  id: string,
+  input: unknown,
+  runContext: ActionRunContextInput,
+  {
+    now = evidenceNowMs,
+    setTimer = setTimeout,
+    clearTimer = clearTimeout,
+  }: {
+    now?: () => number;
+    setTimer?: (callback: () => void, timeoutMs: number) => TimerHandle;
+    clearTimer?: (timer: TimerHandle) => void;
+  } = {},
+): Promise<ActionEvidence> {
+  const plugin = registry.get(id);
+  const context = createActionRunContext(runContext);
+  const startedAtMs = now();
+  let compiled;
+  try { compiled = plugin.compile(input); }
+  catch (error: unknown) {
+    return evidence(plugin, startedAtMs, now(), 'harness_failure', 'invalid_input',
+      error instanceof Error ? error.message : String(error));
+  }
+  const missing = plugin.capabilities.filter(capability => !Object.hasOwn(context.capabilities, capability));
+  if (missing.length) {
+    return evidence(plugin, startedAtMs, now(), 'harness_failure', 'missing_capability',
+      `missing action capabilities: ${missing.join(', ')}`, { retryable: false });
+  }
+  const capabilities = Object.freeze(Object.fromEntries(
+    plugin.capabilities.map(capability => [capability, context.capabilities[capability]])));
+  const controller = new AbortController();
+  const termination: {
+    current: { kind: 'cancelled' | 'deadline_exceeded'; reason: unknown } | null;
+  } = { current: null };
+  const abort = (kind: 'cancelled' | 'deadline_exceeded', reason: unknown): void => {
+    if (termination.current) return;
+    termination.current = { kind, reason };
+    controller.abort(reason);
+  };
+  const onCancel = () => abort('cancelled', context.signal?.reason ?? 'action cancelled');
+  if (context.signal?.aborted) onCancel();
+  else context.signal?.addEventListener('abort', onCancel, { once: true });
+  const timer = setTimer(() => abort('deadline_exceeded',
+    `action exceeded ${plugin.timeoutMs}ms deadline`), plugin.timeoutMs);
+  const stopped = new Promise<never>((_resolve, reject) => {
+    if (termination.current) reject(new Error(String(termination.current.reason)));
+    else controller.signal.addEventListener('abort', () => reject(new Error(
+      String(termination.current?.reason ?? controller.signal.reason))),
+      { once: true });
+  });
+  const execution = Promise.resolve().then(() => {
+    if (controller.signal.aborted) throw controller.signal.reason;
+    return plugin.execute({
+      input: compiled,
+      capabilities,
+      signal: controller.signal,
+    });
+  });
+  try {
+    const observation = await Promise.race([execution, stopped]);
+    if (!structuredValue(observation)) {
+      return evidence(plugin, startedAtMs, now(), 'harness_failure', 'invalid_evidence',
+        `${id} returned non-serializable evidence`);
+    }
+    return evidence(plugin, startedAtMs, now(), 'passed', 'completed', null, { observation });
+  } catch (error: unknown) {
+    // Do not start the next action while a timed-out implementation still runs.
+    // Every implementation has a bounded operation or observes this signal.
+    if (termination.current) await execution.catch(() => undefined);
+    if (termination.current?.kind === 'cancelled') {
+      return evidence(plugin, startedAtMs, now(), 'inconclusive', 'cancelled',
+        String(termination.current.reason), { retryable: true });
+    }
+    if (termination.current?.kind === 'deadline_exceeded') {
+      return evidence(plugin, startedAtMs, now(), 'harness_failure', 'deadline_exceeded',
+        String(termination.current.reason), { retryable: true });
+    }
+    if (error instanceof ActionApplicationFailure) {
+      if (!structuredValue(error.details?.observation) || !structuredValue(error.details?.expected)) {
+        return evidence(plugin, startedAtMs, now(), 'harness_failure', 'invalid_evidence',
+          `${id} returned non-serializable failure evidence`);
+      }
+      return evidence(plugin, startedAtMs, now(), 'failed', 'application_failure', error.message, error.details);
+    }
+    if (error instanceof ActionInconclusive) {
+      if (!structuredValue(error.details?.observation) || !structuredValue(error.details?.expected)) {
+        return evidence(plugin, startedAtMs, now(), 'harness_failure', 'invalid_evidence',
+          `${id} returned non-serializable inconclusive evidence`);
+      }
+      return evidence(plugin, startedAtMs, now(), 'inconclusive', 'inconclusive',
+        error.message, error.details);
+    }
+    return evidence(plugin, startedAtMs, now(), 'harness_failure', 'unclassified_exception',
+      error instanceof Error ? error.message : String(error), { retryable: false });
+  } finally {
+    clearTimer(timer);
+    context.signal?.removeEventListener('abort', onCancel);
+  }
+}
diff --git a/tools/stack-bench/src/actions/action-findings.ts b/tools/stack-bench/src/actions/action-findings.ts
new file mode 100644
index 00000000000..feff300d628
--- /dev/null
+++ b/tools/stack-bench/src/actions/action-findings.ts
@@ -0,0 +1,220 @@
+// Findings: the closed catalog of ways an action can fail. An executor never
+// fails with a sentence; it fails with a kind and its fields, and every reader
+// renders the finding from one template. Fields are things the coding agent
+// already has or the application produced: contract control names, action
+// ids, actor labels, numbers, counts, HTTP statuses. A scenario's own probe
+// text is never a field. `detail` is for a human reading the artifact and is
+// never rendered.
+
+import { z } from 'zod';
+
+interface Control { readonly control: string }
+interface Actor { readonly actor: string }
+interface Actors { readonly actors: readonly string[] }
+interface Action { readonly action: string }
+interface Status { readonly status: number | null }
+interface Detail { readonly detail?: string }
+
+export interface NumberExpectation {
+  readonly equals?: number;
+  readonly atLeast?: number;
+  readonly atMost?: number;
+}
+
+export interface Operation {
+  readonly reducer: string | null;
+  readonly path: string | null;
+  readonly method: string;
+}
+
+export type LifecycleTarget = 'app-server' | 'backend-runtime';
+
+// The application did not do what the criterion requires.
+export interface FailedFindingFields {
+  'control-missing': Control;
+  'control-present': Control;
+  'control-available': Control & Actor;
+  'control-not-ready': Control & Actors;
+  'control-blocked': Partial<Control> & Detail;
+  'control-empty': Control;
+  'control-unreadable': Control & Actors;
+  'value-mismatch': Control;
+  'text-unexpected': Control;
+  'value-unstable': Control;
+  'clients-disagree': Control & Actors;
+  'number-missing': Control;
+  'number-mismatch': Control & { readonly observed: number | null; readonly expected: NumberExpectation };
+  'count-mismatch': Control & { readonly observed: number; readonly expected: number };
+  'order-mismatch': Control & Partial<Actors>;
+  'entries-missing': { readonly expected: number; readonly missing: number; readonly duplicated: number };
+  'actors-with-control': Control & { readonly observed: number; readonly expected: number };
+  'too-many-per-actor': Control & { readonly maxEach: number };
+  'clicks-failed': Control & { readonly failed: number; readonly total: number } & Detail;
+  'choice-missing': Partial<Control> & Detail;
+  'page-timeout': Partial<Control> & Detail;
+  'page-crashed': Detail;
+  'page-error': Partial<Control> & Detail;
+  'app-control-failed': { readonly mode: string; readonly target: LifecycleTarget } & Detail;
+  'script-failed': { readonly script: string } & Detail;
+  'script-invalid': { readonly script: string };
+  'action-failed': Action;
+  'call-refused': Action & Actor & Status & { readonly operation: Operation | null };
+  'call-accepted': Action & Actor & Status & { readonly required: 'refused' | 'validation-refused' };
+  'call-error': Action & Actor & Status & { readonly required: 'refused' | 'validation-refused';
+    readonly operation: Operation | null };
+  'concurrent-calls-mismatch': Action & { readonly expected: number; readonly accepted: number;
+    readonly fired: number } & Detail;
+  'interface-missing': Control & Action & { readonly attribute: string };
+  'interface-invalid': Action & { readonly attribute: string; readonly missing?: readonly string[];
+    readonly unexpected?: readonly string[] } & Detail;
+  'replay-accepted': Actor & Status & Partial<Action>;
+  'replay-error': Status & Partial<Action>;
+  'forgery-accepted': Status & { readonly field: string };
+  'forgery-error': Status;
+  'message-delivered': Actor;
+  'stock-interface-missing': Detail;
+}
+
+// The harness could not measure. Never repair feedback.
+export interface InconclusiveFindingFields {
+  'assertion-without-action': Action;
+  'unknown-action': Action;
+  'action-without-parameters': Action;
+  'no-session': Actor & Partial<Action>;
+  'unresolved-action': Partial<Action>;
+  'replay-unavailable': Actor & Detail;
+  'forgery-unverifiable': Actor & Detail;
+  'not-observed': Actor;
+  'nothing-contended': Detail;
+  'no-backend-control': { readonly target: LifecycleTarget };
+  'control-refused': { readonly target: LifecycleTarget };
+  'database-write-failed': Detail;
+  'unsupported-backend': { readonly backend: string };
+  'app-directory-unknown': Record<string, never>;
+  'invalid-input': Detail;
+}
+
+export type FailedFindingKind = keyof FailedFindingFields;
+export type InconclusiveFindingKind = keyof InconclusiveFindingFields;
+export type FindingFields = FailedFindingFields & InconclusiveFindingFields;
+export type FindingKind = FailedFindingKind | InconclusiveFindingKind;
+export type FindingStatus = 'failed' | 'inconclusive';
+
+export type Finding = { [K in FindingKind]: { readonly kind: K; readonly fields: FindingFields[K] } }[FindingKind];
+
+type Renderers<Fields> = { readonly [K in keyof Fields]: (fields: Fields[K]) => string };
+
+const control = (name: string): string => `the ${name} control`;
+const names = (values: readonly string[]): string => values.join(', ');
+const http = (status: number | null): string => status ? `HTTP ${status}` : 'no server response';
+const operation = (value: Operation | null): string => {
+  if (!value) return '';
+  const parts = [value.reducer ? `the ${value.reducer} reducer` : null,
+    value.path ? `${value.method} ${value.path}` : null].filter(Boolean);
+  return parts.length ? `; the application interface names ${parts.join(' or ')}` : '';
+};
+const expectation = (value: NumberExpectation): string => [
+  value.equals === undefined ? null : `exactly ${value.equals}`,
+  value.atLeast === undefined ? null : `at least ${value.atLeast}`,
+  value.atMost === undefined ? null : `at most ${value.atMost}`,
+].filter(Boolean).join(' and ') || 'a number';
+const target = (value: LifecycleTarget): string =>
+  value === 'app-server' ? 'the application server' : 'the database runtime';
+
+export const FAILED_FINDINGS: Renderers<FailedFindingFields> = {
+  'control-missing': f => `${control(f.control)} did not appear`,
+  'control-present': f => `${control(f.control)} was shown when it must not be`,
+  'control-available': f => `${control(f.control)} stayed available to ${f.actor}`,
+  'control-not-ready': f => `${control(f.control)} never became usable for ${names(f.actors)}`,
+  'control-blocked': f => `${f.control ? control(f.control) : 'a control'} is covered by another element`,
+  'control-empty': f => `${control(f.control)} is empty`,
+  'control-unreadable': f => `${control(f.control)} is missing or unreadable for ${names(f.actors)}`,
+  'value-mismatch': f => `${control(f.control)} does not show the required value`,
+  'text-unexpected': f => `${control(f.control)} shows text that must not appear`,
+  'value-unstable': f => `${control(f.control)} changed while nothing happened`,
+  'clients-disagree': f => `${names(f.actors)} see different values in ${control(f.control)}`,
+  'number-missing': f => `${control(f.control)} shows no number`,
+  'number-mismatch': f => `${control(f.control)} reads ${f.observed ?? 'no number'}, `
+    + `expected ${expectation(f.expected)}`,
+  'count-mismatch': f => `${f.observed} ${f.control} entries shown, expected ${f.expected}`,
+  'order-mismatch': f => f.actors?.length
+    ? `${names(f.actors)} see ${control(f.control)} entries in different orders`
+    : `${control(f.control)} entries are not in the required order`,
+  'entries-missing': f => `of ${f.expected} entries, ${f.missing} missing and ${f.duplicated} duplicated`,
+  'actors-with-control': f => `${f.observed} actor(s) hold ${control(f.control)}, expected ${f.expected}`,
+  'too-many-per-actor': f => `an actor holds more than ${f.maxEach} of ${control(f.control)}`,
+  'clicks-failed': f => `${f.failed} of ${f.total} simultaneous clicks on ${control(f.control)} did not go through`,
+  'choice-missing': f => `${f.control ? control(f.control) : 'a control'} did not offer the required choice`,
+  'page-timeout': f => `${f.control ? control(f.control) : 'the page'} did not respond in time`,
+  'page-crashed': () => 'the page crashed',
+  'page-error': f => `${f.control ? control(f.control) : 'the page'} did not behave as required`,
+  'app-control-failed': f => `${target(f.target)} could not ${f.mode}`,
+  'script-failed': f => `${f.script} failed`,
+  'script-invalid': f => `${f.script} is not a script inside the application directory`,
+  'action-failed': f => `the ${f.action} step did not complete`,
+  'call-refused': f => `the ${f.action} action was refused for ${f.actor} (${http(f.status)})${operation(f.operation)}`,
+  'call-accepted': f => f.required === 'validation-refused'
+    ? `the ${f.action} action accepted invalid input from ${f.actor}`
+    : `the ${f.action} action was accepted for ${f.actor}, who must be refused`,
+  'call-error': f => `the ${f.action} action failed for ${f.actor} with ${http(f.status)} instead of `
+    + `${f.required === 'validation-refused' ? 'rejecting the input' : 'refusing the caller'}${operation(f.operation)}`,
+  'concurrent-calls-mismatch': f => `${f.accepted} of ${f.fired} simultaneous ${f.action} calls were accepted, expected ${f.expected}`,
+  'interface-missing': f => `${control(f.control)} exposes no ${f.attribute} for the ${f.action} action`,
+  'interface-invalid': f => f.missing?.length
+    ? `${f.attribute} for the ${f.action} action is missing ${names(f.missing)}`
+    : f.unexpected?.length
+      ? `${f.attribute} for the ${f.action} action contains unexpected ${names(f.unexpected)}`
+      : `${f.attribute} for the ${f.action} action is not valid`,
+  'replay-accepted': f => `a request replayed as ${f.actor}, who must be refused, was accepted (${http(f.status)})`,
+  'replay-error': f => `the replayed ${f.action ? `${f.action} action` : 'request'} failed with ${http(f.status)} instead of a refusal`,
+  'forgery-accepted': f => `a request with a tampered ${f.field} was accepted (${http(f.status)})`,
+  'forgery-error': f => `the tampered request failed with ${http(f.status)} instead of a refusal`,
+  'message-delivered': f => `a private message was delivered to ${f.actor}, who is not a participant`,
+  'stock-interface-missing': () => 'the stock data interface (item, warehouse, stock) is not available in the database',
+};
+
+export const INCONCLUSIVE_FINDINGS: Renderers<InconclusiveFindingFields> = {
+  'assertion-without-action': f => `no ${f.action} ran before this assertion`,
+  'unknown-action': f => `the track names no ${f.action} action`,
+  'action-without-parameters': f => `the ${f.action} action declares no named parameters`,
+  'no-session': f => `no session found for ${f.actor}${f.action ? `, so the ${f.action} action could not be issued` : ''}`,
+  'unresolved-action': f => `could not resolve where to send ${f.action ? `the ${f.action} action` : 'the action'} for this backend`,
+  'replay-unavailable': f => `could not issue the replay as ${f.actor}`,
+  'forgery-unverifiable': f => `could not verify the forgery refusal for ${f.actor}`,
+  'not-observed': f => `the message could not be observed reaching ${f.actor}`,
+  'nothing-contended': () => 'the requests never contended',
+  'no-backend-control': f => `no control over ${target(f.target)} was supplied`,
+  'control-refused': f => `control over ${target(f.target)} was refused on this host`,
+  'database-write-failed': () => 'the direct database write did not complete',
+  'unsupported-backend': f => `${f.backend} does not support this step`,
+  'app-directory-unknown': () => 'the application directory is unknown',
+  'invalid-input': () => 'the step input is invalid',
+};
+
+export const FAILED_FINDING_KINDS = Object.freeze(Object.keys(FAILED_FINDINGS).sort()) as readonly FailedFindingKind[];
+export const INCONCLUSIVE_FINDING_KINDS = Object.freeze(
+  Object.keys(INCONCLUSIVE_FINDINGS).sort()) as readonly InconclusiveFindingKind[];
+export const FINDING_KINDS = Object.freeze([...FAILED_FINDING_KINDS, ...INCONCLUSIVE_FINDING_KINDS].sort()) as readonly FindingKind[];
+
+export function finding<K extends FindingKind>(kind: K, fields: FindingFields[K]): Finding {
+  return { kind, fields } as Finding;
+}
+
+export function findingStatus(value: Finding): FindingStatus {
+  return value.kind in FAILED_FINDINGS ? 'failed' : 'inconclusive';
+}
+
+// The one sentence every reader shows for a finding.
+export function renderFinding(value: Finding): string {
+  const renderers = { ...FAILED_FINDINGS, ...INCONCLUSIVE_FINDINGS } as Renderers<FindingFields>;
+  return (renderers[value.kind] as (fields: unknown) => string)(value.fields);
+}
+
+export const findingSchema = z.strictObject({
+  kind: z.enum(FINDING_KINDS as [FindingKind, ...FindingKind[]]),
+  fields: z.record(z.string(), z.unknown()),
+});
+
+export function isFinding(value: unknown): value is Finding {
+  return findingSchema.safeParse(value).success;
+}
diff --git a/tools/stack-bench/src/actions/actor-action-runtime.ts b/tools/stack-bench/src/actions/actor-action-runtime.ts
new file mode 100644
index 00000000000..a590ab6f4ac
--- /dev/null
+++ b/tools/stack-bench/src/actions/actor-action-runtime.ts
@@ -0,0 +1,157 @@
+import { ActionApplicationFailure, ActionInconclusive } from './action-contract.js';
+import { finding, renderFinding } from './action-findings.js';
+import type { FailedFindingKind, FindingFields, InconclusiveFindingKind } from './action-findings.js';
+
+export type UnknownRecord = Record<string, unknown>;
+export type HeaderRecord = Record<string, string>;
+
+export interface Locator {
+  click(options?: unknown): Promise<void>;
+  count(): Promise<number>;
+  fill(value: string): Promise<void>;
+  first(): Locator;
+  getAttribute(name: string): Promise<string | null>;
+  innerText(): Promise<string>;
+  isVisible(): Promise<boolean>;
+  or(locator: Locator): Locator;
+  press(key: string): Promise<void>;
+  waitFor(options?: unknown): Promise<void>;
+}
+
+export interface BrowserResponse {
+  ok(): boolean;
+  status(): number;
+}
+
+export interface BrowserPage {
+  readonly request: {
+    fetch(url: string, options: UnknownRecord): Promise<BrowserResponse>;
+  };
+  evaluate<Result>(callback: () => Result): Promise<Result>;
+  getByRole(role: string, options: UnknownRecord): Locator;
+  locator(selector: string, options?: UnknownRecord): Locator;
+}
+
+export interface CapturedWrite {
+  readonly body: UnknownRecord | null;
+  readonly headers: HeaderRecord;
+  readonly method: string;
+  readonly url: string;
+}
+
+export interface ReplayResult {
+  readonly accepted?: boolean;
+  readonly applicationRejected?: boolean;
+  readonly inconclusive?: boolean;
+  readonly method?: string;
+  readonly namedAction?: string;
+  readonly reason?: string;
+  readonly status?: number;
+  readonly url?: string;
+}
+
+export interface ForgeResult {
+  readonly accepted?: boolean;
+  readonly inconclusive?: boolean;
+  readonly reason: string;
+  readonly status?: number;
+  readonly tamperedField?: string;
+}
+
+export interface ActionCall {
+  readonly accepted: boolean;
+  readonly action: string;
+  readonly applicationRejected: boolean;
+  readonly method: string;
+  readonly operation: {
+    readonly reducer: string | null;
+    readonly path: string | null;
+    readonly method: string;
+  };
+  readonly status: number;
+  readonly url: string;
+}
+
+export interface Actor {
+  readonly context: {
+    cookies(): Promise<readonly { readonly name: string; readonly value: string }[]>;
+  };
+  readonly lastWrite?: CapturedWrite;
+  readonly lastWsWrite?: { readonly event: string; readonly body: UnknownRecord };
+  readonly name: string;
+  readonly page: BrowserPage;
+  readonly received: readonly string[];
+  readonly writes: readonly CapturedWrite[];
+  actionCall?: ActionCall;
+  forge?: ForgeResult;
+  replay?: ReplayResult;
+  loc(testid: string, options?: UnknownRecord): Locator;
+  wasSent(value: string): boolean;
+}
+
+export interface BrowserCapability {
+  readonly defaultWithin: number;
+  roomName(value: string): string;
+  scopedUser(value: string): string;
+  sleep(milliseconds: number, signal: AbortSignal): Promise<void>;
+  testId(id: string): string;
+}
+
+export interface TransportCapability {
+  readonly defaultWithin: number;
+  readonly verification: {
+    unverified(message: string): void;
+    verified(message: string): void;
+  };
+  expand(value: string): string;
+  sleep(milliseconds: number, signal: AbortSignal): Promise<void>;
+}
+
+export interface ActorCapabilities {
+  readonly actors: { get(name: string): Actor | undefined };
+}
+
+export interface BrowserActorCapabilities extends ActorCapabilities {
+  readonly 'browser-interaction': BrowserCapability;
+}
+
+export interface TransportActorCapabilities extends ActorCapabilities {
+  readonly 'transport-observation': TransportCapability;
+}
+
+export interface ActorActionArguments<Input, Capabilities extends ActorCapabilities = ActorCapabilities> {
+  readonly capabilities: Capabilities;
+  readonly input: Input;
+  readonly signal: AbortSignal;
+}
+
+// The only ways an executor fails: a finding from the catalog. The error
+// message is the rendered finding, so every reader shows the same sentence.
+export function fail<K extends FailedFindingKind>(kind: K, fields: FindingFields[K]): never {
+  const value = finding(kind, fields);
+  throw new ActionApplicationFailure(renderFinding(value), { finding: value });
+}
+
+export function inconclusive<K extends InconclusiveFindingKind>(kind: K,
+  fields: FindingFields[K]): never {
+  const value = finding(kind, fields);
+  throw new ActionInconclusive(renderFinding(value), { finding: value });
+}
+
+export function actorFor<T>(
+  capabilities: { readonly actors: { get(name: string): T | undefined } },
+  name: string,
+): T {
+  const actor = capabilities.actors.get(name);
+  if (!actor) throw new Error(`harness did not create actor "${name}"`);
+  return actor;
+}
+
+export const browserFor = (capabilities: BrowserActorCapabilities): BrowserCapability =>
+  capabilities['browser-interaction'];
+
+export const transportFor = (capabilities: TransportActorCapabilities): TransportCapability =>
+  capabilities['transport-observation'];
+
+export const pad = (index: number, count: number): string =>
+  String(index).padStart(String(count).length, '0');
diff --git a/tools/stack-bench/src/actions/actor-transport-action-executors.ts b/tools/stack-bench/src/actions/actor-transport-action-executors.ts
new file mode 100644
index 00000000000..47b0b8dae07
--- /dev/null
+++ b/tools/stack-bench/src/actions/actor-transport-action-executors.ts
@@ -0,0 +1,470 @@
+import { actionImplementation } from './action-contract.js';
+import {
+  actorFor,
+  fail,
+  inconclusive,
+  transportFor,
+} from './actor-action-runtime.js';
+import type {
+  Actor,
+  ActorActionArguments,
+  CapturedWrite,
+  ForgeResult,
+  HeaderRecord,
+  TransportActorCapabilities,
+} from './actor-action-runtime.js';
+import { browserApplicationBoundary } from './browser-action-executors.js';
+import { harnessBrowserFailure } from '../evidence/harness-errors.js';
+import { createParser } from 'eventsource-parser';
+import { RUN_SCRIPT_ACTION_IMPLEMENTATION } from './application-process-action-executors.js';
+import { CHAT_ACTION_IMPLEMENTATIONS } from './chat-action-executors.js';
+import { NAMED_ACTION_IMPLEMENTATIONS } from './named-action-executors.js';
+import {
+  browserCredentials,
+  capturedCredentials,
+  namedActionRequest,
+} from './named-action-runtime.js';
+import type { NamedAction, NamedActionsCapability } from './named-action-runtime.js';
+
+export { createNamedActionsCapability } from './named-action-runtime.js';
+export type { ConcurrentCallResult } from './named-action-runtime.js';
+
+interface ActorInput {
+  readonly actor: string;
+}
+
+interface ForgeInput extends ActorInput {
+  readonly field?: 'room' | 'identity';
+  readonly fromActor?: string;
+  readonly settleMs?: number;
+  readonly text?: string;
+  readonly value?: unknown;
+}
+
+interface ReplayInput extends ActorInput {
+  readonly from: string;
+  readonly match: string;
+  readonly namedAction?: NamedAction;
+  readonly namedTarget?: {
+    readonly attribute: string;
+    readonly contains?: string;
+    readonly testid: string;
+    readonly valueType?: 'number' | 'string';
+  };
+  readonly settleMs?: number;
+  readonly swap?: { readonly find: string; readonly with: string };
+}
+
+interface ReceiveInput extends ActorInput {
+  readonly contains: string;
+  readonly within?: number;
+}
+
+type TransportCapabilities = TransportActorCapabilities;
+
+interface ReplayCapabilities extends TransportCapabilities {
+  readonly 'named-actions': NamedActionsCapability;
+}
+
+type TransportArguments<Input extends ActorInput> =
+  ActorActionArguments<Input, TransportCapabilities>;
+type ReplayArguments = ActorActionArguments<ReplayInput, ReplayCapabilities>;
+
+const IDENTITY_FIELD = /^(user_?id|sender_?id|author_?id|from_?user|identity)$/i;
+const CONTENT_FIELD = /^(content|text|message|body|msg)$/i;
+const ROOM_FIELD = /^(room_?id|channel_?id|conversation_?id)$/i;
+const AUTH_HEADER = /^(authorization|cookie|x-auth-token|x-session|x-token|x-user)$/i;
+const ID_FIELD = /^(?:_?id|[A-Za-z][A-Za-z0-9_]*_?id)$/i;
+const ID_KEY = /"(_?id|[A-Za-z][A-Za-z0-9_]*_?id)"\s*:\s*"?([A-Za-z0-9_-]{1,64})"?/gi;
+
+function replayUnavailable(actor: Actor, reason: string): never {
+  actor.replay = { inconclusive: true, reason };
+  inconclusive('replay-unavailable', { actor: actor.name, detail: reason });
+}
+const tokenRe = (token: string): RegExp => new RegExp(
+  `(?<![A-Za-z0-9_-])${token.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}(?![A-Za-z0-9_-])`, 'g');
+const mentions = (value: string, token: string): boolean => tokenRe(token).test(value);
+const swapToken = (value: string, from: string, to: string): string =>
+  value.replace(tokenRe(from), to);
+
+const normalizedIdKey = (key: string): string => key.replaceAll('_', '').toLowerCase();
+const numericLiteral = (value: string): boolean =>
+  /^-?(?:\d+\.?\d*|\.\d+)$/.test(value.trim());
+
+function transportJson(chunk: string): unknown[] {
+  const candidates = new Set([chunk]);
+  for (const line of chunk.split(/\r?\n/)) {
+    if (line.trim()) candidates.add(line.trim());
+  }
+  if (/^(?:data|event|id|retry):/m.test(chunk)) {
+    const parser = createParser({
+      maxBufferSize: 1024 * 1024,
+      onEvent: ({ data }) => { if (data) candidates.add(data); },
+    });
+    try { parser.feed(`${chunk}\n\n`); }
+    catch { /* Fall back to the other transport formats. */ }
+  }
+  const parsed: unknown[] = [];
+  for (const candidate of candidates) {
+    try {
+      parsed.push(JSON.parse(candidate));
+      continue;
+    } catch { /* try a Socket.IO event packet */ }
+    const socketEvent = candidate.match(/^42(?:\/[^,]+,)?\d*(\[.*\])$/s);
+    if (!socketEvent) continue;
+    const payload = socketEvent[1];
+    if (!payload) continue;
+    try { parsed.push(JSON.parse(payload)); } catch { /* malformed packet */ }
+  }
+  return parsed;
+}
+
+// Return nearby entity ids deepest first; fall back to text for streaming payloads.
+interface DiscoveredId {
+  readonly key: string;
+  readonly value: string;
+  readonly relationDepth: number | null;
+  readonly proximity: number;
+}
+
+function discoverIds(actor: Actor, needle: string): DiscoveredId[] {
+  const found = new Map<string, DiscoveredId>();
+  const add = (
+    key: string,
+    value: unknown,
+    relationDepth: number | null = null,
+    proximity = Number.MAX_SAFE_INTEGER,
+  ): void => {
+    if (typeof value !== 'string' && typeof value !== 'number') return;
+    const candidate = {
+      key: normalizedIdKey(key), value: String(value), relationDepth, proximity,
+    };
+    const identity = `${candidate.key}\0${candidate.value}\0${relationDepth ?? ''}`;
+    const previous = found.get(identity);
+    if (!previous || proximity < previous.proximity) found.set(identity, candidate);
+  };
+  const visit = (value: unknown): number | null => {
+    if (typeof value === 'string') return value.includes(needle) ? 0 : null;
+    if (!value || typeof value !== 'object') return null;
+    let nearest: number | null = null;
+    const children = Array.isArray(value) ? value : Object.values(value);
+    for (const child of children) {
+      const distance = visit(child);
+      if (distance !== null) nearest = nearest === null ? distance + 1 : Math.min(nearest, distance + 1);
+    }
+    if (nearest !== null && !Array.isArray(value)) {
+      for (const [key, candidate] of Object.entries(value)) {
+        if (ID_FIELD.test(key)) add(key, candidate, nearest);
+      }
+    }
+    return nearest;
+  };
+  for (const chunk of actor.received ?? []) {
+    const payloads = transportJson(chunk);
+    for (const payload of payloads) visit(payload);
+    if (payloads.length) continue;
+    // Opaque transport text is only safe for entity labels represented as a
+    // complete quoted value. Searching for a bare number such as "1" would
+    // associate it with almost every id in a payload and fabricate a retarget.
+    const quotedNeedle = JSON.stringify(needle);
+    const needleOffsets = [];
+    for (let index = chunk.indexOf(quotedNeedle); index !== -1;
+      index = chunk.indexOf(quotedNeedle, index + 1)) {
+      needleOffsets.push(index);
+    }
+    if (!needleOffsets.length) continue;
+    for (const match of chunk.matchAll(ID_KEY)) {
+      const proximity = Math.min(...needleOffsets.map(index => Math.abs((match.index ?? 0) - index)));
+      const key = match[1];
+      const value = match[2];
+      if (key !== undefined && value !== undefined) add(key, value, null, proximity);
+    }
+  }
+  return [...found.values()].sort((left, right) =>
+    (left.relationDepth ?? Number.MAX_SAFE_INTEGER) - (right.relationDepth ?? Number.MAX_SAFE_INTEGER)
+      || left.proximity - right.proximity);
+}
+
+export function replayHeaders(
+  write: Pick<CapturedWrite, 'headers'>,
+  overrides: HeaderRecord = {},
+): HeaderRecord {
+  const headers: HeaderRecord = {};
+  for (const [key, value] of Object.entries(write.headers ?? {})) headers[key.toLowerCase()] = value;
+  headers['content-type'] = 'application/json';
+  for (const [key, value] of Object.entries(overrides)) headers[key.toLowerCase()] = value;
+  for (const key of Object.keys(headers)) {
+    if (/^(content-length|host|connection|transfer-encoding|accept-encoding)$/i.test(key)) {
+      delete headers[key];
+    }
+  }
+  return headers;
+}
+
+async function forgeWrite({ input, capabilities, signal }: TransportArguments<ForgeInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const transport = transportFor(capabilities);
+  const write = actor.lastWrite;
+  if (!write) {
+    const websocket = actor.lastWsWrite;
+    if (websocket) {
+      const identityKey = Object.keys(websocket.body).find(key => IDENTITY_FIELD.test(key));
+      actor.forge = identityKey
+        ? { inconclusive: true, reason: `writes over WebSocket ("${websocket.event}") carrying a client-supplied "${identityKey}" — replay not attempted, treat as unverified` }
+        : { inconclusive: true, reason: `writes over WebSocket ("${websocket.event}") with no top-level identity field — the captured payload does not prove where identity comes from` };
+    } else {
+      actor.forge = { inconclusive: true, reason: 'no write request observed at all — the test did not exercise anything' };
+    }
+    return { attempted: false, classification: 'unverified' };
+  }
+  const body = { ...write.body };
+  const key = Object.keys(body).find(field => (input.field === 'room' ? ROOM_FIELD : IDENTITY_FIELD).test(field));
+  if (!key) {
+    actor.forge = { inconclusive: true,
+      reason: `write body has no top-level identity field (${Object.keys(body).join(',') || 'empty'}) — the captured request does not prove where identity comes from` };
+    return { attempted: false, classification: 'unverified' };
+  }
+  let value = input.value;
+  if (input.fromActor) {
+    const victim = actorFor(capabilities, input.fromActor);
+    const targetField = input.field === 'room' ? ROOM_FIELD : IDENTITY_FIELD;
+    const victimKey = Object.keys(victim.lastWrite?.body ?? {}).find(field => targetField.test(field));
+    if (!victimKey) {
+      const wsKey = victim.lastWsWrite && Object.keys(victim.lastWsWrite.body)
+        .find(field => targetField.test(field));
+      if (!wsKey) {
+        actor.forge = { inconclusive: true,
+          reason: `${input.fromActor} exposes no top-level ${input.field ?? 'identity'} field to use in the forgery` };
+        return { attempted: false, classification: 'unverified' };
+      }
+      value = victim.lastWsWrite.body[wsKey];
+    } else {
+      value = victim.lastWrite?.body?.[victimKey];
+    }
+  }
+  body[key] = value;
+  const contentKey = Object.keys(body).find(field => CONTENT_FIELD.test(field));
+  if (contentKey && input.text) body[contentKey] = input.text;
+  const response = await actor.page.request.fetch(write.url, {
+    method: write.method,
+    headers: replayHeaders(write),
+    data: JSON.stringify(body),
+  });
+  const forgeResult: ForgeResult = {
+    status: response.status(),
+    accepted: response.ok(),
+    tamperedField: key,
+    reason: 'tampered request sent',
+  };
+  actor.forge = forgeResult;
+  await transport.sleep(input.settleMs ?? 2000, signal);
+  return {
+    attempted: true,
+    status: forgeResult.status,
+    accepted: forgeResult.accepted,
+    tamperedField: key,
+  };
+}
+
+async function expectForgeryRejected({ input, capabilities }: TransportArguments<ActorInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const transport = transportFor(capabilities);
+  const forge = actor.forge;
+  if (!forge) inconclusive('assertion-without-action', { action: 'forgeWrite' });
+  if (forge.inconclusive) {
+    transport.verification.unverified(`${actor.name}: ${forge.reason}`);
+    inconclusive('forgery-unverifiable', { actor: actor.name, detail: forge.reason });
+  }
+  if (forge.accepted) {
+    fail('forgery-accepted', { field: forge.tamperedField ?? 'identity', status: forge.status ?? null });
+  }
+  if (forge.status !== 401 && forge.status !== 403) {
+    fail('forgery-error', { status: forge.status ?? null });
+  }
+  transport.verification.verified(
+    `${actor.name}: server refused the tampered "${forge.tamperedField}" (HTTP ${forge.status})`);
+  return { classification: 'verified', status: forge.status };
+}
+
+async function replayAs({ input, capabilities, signal }: ReplayArguments) {
+  const actor = actorFor(capabilities, input.actor);
+  const source = actorFor(capabilities, input.from);
+  const transport = transportFor(capabilities);
+  const needle = transport.expand(input.match).toLowerCase();
+  const write = [...source.writes].reverse()
+    .find(candidate => `${candidate.method} ${candidate.url} ${JSON.stringify(candidate.body)}`
+      .toLowerCase().includes(needle));
+  if (!write) {
+    if (input.namedAction) {
+      const named = capabilities['named-actions'];
+      const action = input.namedAction;
+      const args = [...(action.args ?? [])];
+      if (input.namedTarget) {
+        const target = source.loc(input.namedTarget.testid, { contains: input.namedTarget.contains });
+        await target.waitFor({ state: 'visible', timeout: transport.defaultWithin });
+        const rawValue = await target.getAttribute(input.namedTarget.attribute);
+        if (rawValue === null || rawValue === '') {
+          fail('interface-missing', { control: input.namedTarget.testid,
+            attribute: input.namedTarget.attribute, action: action.id ?? 'replay' });
+        }
+        let value: string | number = rawValue;
+        if (input.swap) {
+          value = value.replaceAll(transport.expand(input.swap.find),
+            transport.expand(input.swap.with));
+        }
+        if (input.namedTarget.valueType === 'number') {
+          value = Number(value);
+          if (!Number.isSafeInteger(value)) {
+            fail('interface-invalid', { action: action.id ?? 'replay',
+              attribute: input.namedTarget.attribute, detail: 'not a safe integer' });
+          }
+        }
+        args[0] = value;
+      } else if (input.swap) {
+        const find = transport.expand(input.swap.find);
+        const replacement = transport.expand(input.swap.with);
+        const index = args.findIndex(value => typeof value === 'string' && value.includes(find));
+        if (index < 0) {
+          replayUnavailable(actor,
+            `literal "${find}" does not appear in the arguments for named action "${action.id}"`);
+        }
+        args[index] = String(args[index]).replaceAll(find, replacement);
+      }
+      const mine = capturedCredentials(actor) ?? await browserCredentials(actor);
+      if (!mine) {
+        replayUnavailable(actor,
+          `no credentials found for ${actor.name} — an anonymous replay only shows that unauthenticated requests are refused`);
+      }
+      const request = namedActionRequest(named, action, { ...input, args });
+      if (!request?.url) {
+        replayUnavailable(actor,
+          `could not resolve where to send named action "${action.id}" for this backend`);
+      }
+      const response = await named.fetch(request.url, {
+        method: request.method ?? 'POST',
+        headers: { 'Content-Type': 'application/json', ...mine },
+        body: request.body,
+        signal,
+      }).catch(error => ({ status: 0, ok: false, error: error.message }));
+      actor.replay = { accepted: response.ok, status: response.status, url: request.url,
+        method: request.method ?? 'POST', namedAction: action.id,
+        applicationRejected: (request.applicationRejectionStatuses ?? []).includes(response.status) };
+      await transport.sleep(input.settleMs ?? 2000, signal);
+      return { attempted: true, accepted: actor.replay.accepted, status: actor.replay.status,
+        namedAction: action.id };
+    }
+    replayUnavailable(actor, source.lastWsWrite
+      ? `${input.from} writes over WebSocket ("${source.lastWsWrite.event}") — identity comes from the connection, replay not attempted`
+      : `no HTTP write from ${input.from} matching "${input.match}"`);
+  }
+  const mine = capturedCredentials(actor) ?? await browserCredentials(actor);
+  if (!mine) {
+    replayUnavailable(actor,
+      `no credentials found for ${actor.name} — an anonymous replay only shows that unauthenticated requests are refused`);
+  }
+  const credentials = { ...mine };
+  for (const key of Object.keys(write.headers)) {
+    if (AUTH_HEADER.test(key)
+      && !Object.keys(credentials).some(candidate => candidate.toLowerCase() === key.toLowerCase())) {
+      credentials[key] = '';
+    }
+  }
+  let url = write.url;
+  let data = write.body === null ? undefined : JSON.stringify(write.body);
+  if (input.swap) {
+    const find = transport.expand(input.swap.find);
+    const to = transport.expand(input.swap.with);
+    let fromToken = find;
+    let toToken = to;
+    if (!mentions(url, fromToken) && !mentions(data ?? '', fromToken)) {
+      if (numericLiteral(find) || numericLiteral(to)) {
+        replayUnavailable(actor,
+          `literal "${find}" does not appear in ${write.method} ${write.url} — the request has no value to edit`);
+      }
+      const candidates = [...discoverIds(source, find), ...discoverIds(actor, find)];
+      const resolvedFrom = candidates.find(candidate =>
+        mentions(url, candidate.value) || mentions(data ?? '', candidate.value));
+      const targets = [...discoverIds(source, to), ...discoverIds(actor, to)];
+      const matchingValues = new Set(targets.filter(candidate => candidate.value !== resolvedFrom?.value
+          && candidate.key === resolvedFrom?.key
+          && candidate.relationDepth === resolvedFrom?.relationDepth)
+        .map(candidate => candidate.value));
+      const resolvedTo = matchingValues.values().next();
+      if (!resolvedFrom || matchingValues.size !== 1 || resolvedTo.done) {
+        replayUnavailable(actor,
+          `could not resolve one matching id from "${find}" to "${to}" in ${write.method} ${write.url} — cannot retarget the replay safely`);
+      }
+      fromToken = resolvedFrom.value;
+      toToken = resolvedTo.value;
+    }
+    url = swapToken(url, fromToken, toToken);
+    if (data) data = swapToken(data, fromToken, toToken);
+  }
+  const response = await actor.page.request.fetch(url, {
+    method: write.method,
+    headers: replayHeaders(write, credentials),
+    ...(data === undefined ? {} : { data }),
+  }).catch(error => {
+    if (harnessBrowserFailure(error)) throw error;
+    return { status: () => 0, ok: () => false, error: error.message };
+  });
+  actor.replay = { accepted: response.ok(), status: response.status(), url, method: write.method };
+  await transport.sleep(input.settleMs ?? 2000, signal);
+  return { attempted: true, accepted: actor.replay.accepted, status: actor.replay.status };
+}
+
+async function expectReplayRejected({ input, capabilities }:
+    TransportArguments<ActorInput & { allowNotFound?: boolean }>) {
+  const actor = actorFor(capabilities, input.actor);
+  const transport = transportFor(capabilities);
+  const replay = actor.replay;
+  if (!replay) inconclusive('assertion-without-action', { action: 'replayAs' });
+  if (replay.inconclusive) {
+    transport.verification.unverified(`${actor.name}: ${replay.reason}`);
+    inconclusive('replay-unavailable', { actor: actor.name, detail: replay.reason ?? '' });
+  }
+  const named = replay.namedAction ? { action: replay.namedAction } : {};
+  if (replay.accepted) {
+    fail('replay-accepted', { actor: actor.name, status: replay.status ?? null, ...named });
+  }
+  const replayStatus = replay.status;
+  if (replayStatus !== 401 && replayStatus !== 403
+    && !(replayStatus === 404 && input.allowNotFound === true)
+    && replay.applicationRejected !== true) {
+    fail('replay-error', { status: replay.status ?? null, ...named });
+  }
+  transport.verification.verified(
+    `${actor.name}: server refused ${replay.method} ${replay.url} (HTTP ${replay.status})`);
+  return { classification: 'verified', status: replay.status };
+}
+
+async function expectReceived({ input, capabilities, signal }: TransportArguments<ReceiveInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const transport = transportFor(capabilities);
+  const needle = transport.expand(input.contains);
+  const deadline = Date.now() + (input.within ?? transport.defaultWithin);
+  while (!actor.wasSent(needle) && Date.now() < deadline) await transport.sleep(250, signal);
+  if (!actor.wasSent(needle)) inconclusive('not-observed', { actor: actor.name });
+  return { received: true, contains: needle };
+}
+
+async function expectNotReceived({ input, capabilities, signal }: TransportArguments<ReceiveInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const transport = transportFor(capabilities);
+  const needle = transport.expand(input.contains);
+  await transport.sleep(input.within ?? transport.defaultWithin, signal);
+  if (actor.wasSent(needle)) fail('message-delivered', { actor: actor.name });
+  return { received: false, contains: needle };
+}
+
+export const ACTOR_TRANSPORT_ACTION_IMPLEMENTATIONS = Object.freeze({
+  ...CHAT_ACTION_IMPLEMENTATIONS,
+  ...NAMED_ACTION_IMPLEMENTATIONS,
+  expectForgeryRejected: actionImplementation(expectForgeryRejected),
+  expectNotReceived: actionImplementation(expectNotReceived),
+  expectReceived: actionImplementation(browserApplicationBoundary(expectReceived)),
+  expectReplayRejected: actionImplementation(expectReplayRejected),
+  forgeWrite: actionImplementation(browserApplicationBoundary(forgeWrite)),
+  replayAs: actionImplementation(browserApplicationBoundary(replayAs)),
+  runScript: RUN_SCRIPT_ACTION_IMPLEMENTATION,
+});
diff --git a/tools/stack-bench/src/actions/application-process-action-executors.ts b/tools/stack-bench/src/actions/application-process-action-executors.ts
new file mode 100644
index 00000000000..21f7999ef83
--- /dev/null
+++ b/tools/stack-bench/src/actions/application-process-action-executors.ts
@@ -0,0 +1,95 @@
+import { execFile } from 'node:child_process';
+import { existsSync, realpathSync } from 'node:fs';
+import { isAbsolute, relative, resolve } from 'node:path';
+
+import { actionImplementation } from './action-contract.js';
+import { fail, inconclusive } from './actor-action-runtime.js';
+import type { ActionImplementation } from './action-contract.js';
+import { harnessProcessFailure } from '../evidence/harness-errors.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+function field(error: unknown, name: string): unknown {
+  return typeof error === 'object' && error !== null
+    ? (error as UnknownRecord)[name]
+    : undefined;
+}
+
+function inside(root: string, path: string): boolean {
+  const fromRoot = relative(root, path);
+  return Boolean(fromRoot) && fromRoot !== '..'
+    && !fromRoot.startsWith(`..${process.platform === 'win32' ? '\\' : '/'}`)
+    && !isAbsolute(fromRoot);
+}
+
+function executeNodeScript(path: string, args: readonly string[], root: string,
+  timeout: number, signal: AbortSignal): Promise<void> {
+  return new Promise((resolvePromise, reject) => {
+    execFile(process.execPath, [path, ...args], {
+      cwd: root,
+      encoding: 'utf8',
+      signal,
+      timeout,
+    }, (error, stdout, stderr) => {
+      if (!error) return resolvePromise();
+      Object.assign(error, { stdout, stderr });
+      reject(error);
+    });
+  });
+}
+
+interface ApplicationProcessCapabilities {
+  readonly 'application-files': {
+    readonly root?: string;
+    expand(value: string): string;
+  };
+  readonly subprocess: {
+    sleep(milliseconds: number, signal: AbortSignal): Promise<void>;
+  };
+}
+
+interface RunScriptInput {
+  readonly args?: readonly string[];
+  readonly script: string;
+  readonly settleMs?: number;
+  readonly timeoutMs?: number;
+}
+
+async function runScript({
+  capabilities,
+  input,
+  signal,
+}: {
+  readonly capabilities: ApplicationProcessCapabilities;
+  readonly input: RunScriptInput;
+  readonly signal: AbortSignal;
+}) {
+  const files = capabilities['application-files'];
+  const subprocess = capabilities.subprocess;
+  const action = input;
+  if (!files.root) inconclusive('app-directory-unknown', {});
+
+  const root = realpathSync(files.root);
+  const unresolved = resolve(root, action.script);
+  if (!inside(root, unresolved) || !existsSync(unresolved)) {
+    fail('script-invalid', { script: action.script });
+  }
+  const path = realpathSync(unresolved);
+  if (!inside(root, path)) fail('script-invalid', { script: action.script });
+
+  try {
+    await executeNodeScript(path, (action.args ?? []).map(files.expand), root,
+      action.timeoutMs ?? 60_000, signal);
+  } catch (error) {
+    if (signal.aborted) throw error;
+    const timedOut = field(error, 'killed') === true || field(error, 'code') === 'ETIMEDOUT';
+    if (!timedOut && harnessProcessFailure(error)) throw error;
+    const output = String(field(error, 'stdout') ?? '') + String(field(error, 'stderr') ?? '');
+    fail('script-failed', { script: action.script,
+      detail: output.trim().slice(-200) || String(field(error, 'message') ?? error) });
+  }
+  await subprocess.sleep(action.settleMs ?? 3000, signal);
+  return { script: action.script, completed: true };
+}
+
+export const RUN_SCRIPT_ACTION_IMPLEMENTATION: ActionImplementation = actionImplementation(runScript);
diff --git a/tools/stack-bench/src/actions/browser-action-executors.ts b/tools/stack-bench/src/actions/browser-action-executors.ts
new file mode 100644
index 00000000000..d058cf862e0
--- /dev/null
+++ b/tools/stack-bench/src/actions/browser-action-executors.ts
@@ -0,0 +1,642 @@
+import { actionImplementation, ActionApplicationFailure } from './action-contract.js';
+import type {
+  ActionImplementation,
+} from './action-contract.js';
+import { actorFor, fail, inconclusive, pad } from './actor-action-runtime.js';
+import { finding, renderFinding } from './action-findings.js';
+import { settledLocatorCount } from '../evidence/browser-evidence.js';
+import { harnessBrowserFailure } from '../evidence/harness-errors.js';
+
+interface Locator {
+  click(options?: unknown): Promise<void>;
+  count(): Promise<number>;
+  evaluate<Result>(callback: (element: { readonly tagName: string }) => Result): Promise<Result>;
+  fill(value: string): Promise<void>;
+  filter(options: unknown): Locator;
+  first(): Locator;
+  getAttribute(name: string): Promise<string | null>;
+  innerText(): Promise<string>;
+  inputValue(): Promise<string>;
+  isDisabled(): Promise<boolean>;
+  isVisible(): Promise<boolean>;
+  locator(selector: string, options?: unknown): Locator;
+  allInnerTexts(): Promise<string[]>;
+  press(key: string): Promise<void>;
+  selectOption(value: string | { readonly label: string }): Promise<unknown>;
+  type(text: string, options?: unknown): Promise<void>;
+  waitFor(options?: unknown): Promise<void>;
+}
+
+interface Page {
+  readonly keyboard: { press(key: string): Promise<void> };
+  locator(selector: string, options?: unknown): Locator;
+  reload(options?: unknown): Promise<unknown>;
+}
+
+interface LocatorScope {
+  readonly testid: string;
+  readonly contains?: string;
+  readonly containsAll?: readonly string[];
+}
+
+interface BrowserActor {
+  readonly page: Page;
+  loc(testid: string, options?: {
+    readonly contains?: string;
+    readonly scope?: { readonly testid: string; readonly contains?: string | RegExp };
+  }): Locator;
+}
+
+interface BrowserCapability {
+  readonly defaultWithin: number;
+  readonly recorded: {
+    get(key: string): number | undefined;
+    set(key: string, value: number): void;
+  };
+  expand(value: string | undefined): string | undefined;
+  sleep(milliseconds: number, signal: AbortSignal): Promise<void>;
+  testId(id: string): string;
+}
+
+interface BrowserCapabilities {
+  readonly actors: { get(name: string): BrowserActor | undefined };
+  readonly 'browser-interaction': BrowserCapability;
+  readonly 'browser-observation': BrowserCapability;
+  readonly clock: { sleep(milliseconds: number, signal: AbortSignal): Promise<void> };
+}
+
+interface CommonInput {
+  readonly actor: string;
+  readonly testid: string;
+  readonly contains?: string;
+  readonly in?: LocatorScope;
+  readonly within?: number;
+}
+
+interface BrowserArguments<Input> {
+  readonly input: Input;
+  readonly capabilities: BrowserCapabilities;
+  readonly signal: AbortSignal;
+}
+
+type InteractionInput = CommonInput & {
+  readonly text: string;
+  readonly enter?: boolean;
+  readonly settleMs?: number;
+  readonly key?: string;
+};
+type ExpectInput = CommonInput & {
+  readonly attribute?: string;
+  readonly absent?: boolean;
+  readonly count?: number;
+  readonly value?: string;
+  readonly notContains?: string;
+  readonly nonEmpty?: boolean;
+};
+type ElementCountInput = CommonInput & { readonly equals: number };
+type SequenceInput = CommonInput & { readonly equals: readonly string[] };
+type UnavailableInput = CommonInput;
+interface AllPresentInput {
+  readonly actor: string;
+  readonly count: number;
+  readonly prefix: string;
+  readonly within?: number;
+}
+type StableInput = CommonInput & { readonly samples?: number; readonly intervalMs?: number };
+type RecordNumberInput = CommonInput & { readonly as: string };
+type ExpectNumberInput = CommonInput & {
+  readonly equals?: number;
+  readonly relativeTo?: string;
+  readonly plus?: number;
+  readonly atLeast?: number;
+  readonly atMost?: number;
+};
+interface OrderMatchesInput {
+  readonly actors: readonly string[];
+  readonly prefix: string;
+}
+type AgreementInput = Omit<CommonInput, 'actor'> & {
+  readonly actors: readonly string[];
+  readonly numeric?: boolean;
+};
+type ActorsWithInput = Omit<CommonInput, 'actor'> & {
+  readonly actors: readonly string[];
+  readonly equals?: number;
+  readonly maxEach?: number;
+};
+
+const escapePattern = (value: string): string => value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+
+function interaction(capabilities: BrowserCapabilities): BrowserCapability {
+  return capabilities['browser-interaction'];
+}
+
+function observation(capabilities: BrowserCapabilities): BrowserCapability {
+  return capabilities['browser-observation'];
+}
+
+function inputScope(browser: BrowserCapability, value: LocatorScope | undefined):
+    { testid: string; contains?: string | RegExp } | undefined {
+  if (!value) return undefined;
+  if (value.containsAll !== undefined) {
+    if (!Array.isArray(value.containsAll) || value.containsAll.length === 0
+      || !value.containsAll.every(item => typeof item === 'string' && item.length > 0)) {
+      throw new TypeError('locator containsAll must be a non-empty string array');
+    }
+    const terms = value.containsAll.map(item => escapePattern(browser.expand(item) ?? ''));
+    return { testid: value.testid,
+      contains: new RegExp(`^${terms.map(term => `(?=[\\s\\S]*${term})`).join('')}[\\s\\S]*$`, 'i') };
+  }
+  return { testid: value.testid, contains: browser.expand(value.contains) };
+}
+
+async function readValue(loc: Locator): Promise<string> {
+  const tag = await loc.evaluate(element => element.tagName);
+  if (tag === 'INPUT' || tag === 'TEXTAREA' || tag === 'SELECT') {
+    return (await loc.inputValue()) || '';
+  }
+  return (await loc.innerText()) || '';
+}
+
+export function parseRenderedNumber(text: string | null | undefined): number | null {
+  const match = (text ?? '').replace(/[,\u00a0]/g, '').match(/-?\d+(\.\d+)?/);
+  return match ? Number(match[0]) : null;
+}
+
+async function clearInput({ input, capabilities }: BrowserArguments<{ actor: string }>) {
+  await actorFor(capabilities, input.actor).loc('message-input').fill('');
+  return { cleared: true };
+}
+
+async function click({ input, capabilities, signal }:
+    BrowserArguments<CommonInput & { settleMs?: number }>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = interaction(capabilities);
+  const scope = inputScope(browser, input.in);
+  await actor.loc(input.testid, { contains: browser.expand(input.contains), scope })
+    .click({ timeout: input.within ?? browser.defaultWithin });
+  if (input.settleMs) await browser.sleep(input.settleMs, signal);
+  return { clicked: input.testid };
+}
+
+async function fill({ input, capabilities, signal }: BrowserArguments<InteractionInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = interaction(capabilities);
+  const scope = inputScope(browser, input.in);
+  const loc = actor.loc(input.testid, { scope });
+  await loc.waitFor({ state: 'visible', timeout: input.within ?? browser.defaultWithin });
+  const text = browser.expand(input.text) ?? '';
+  const tag = await loc.evaluate(element => element.tagName);
+  if (tag === 'SELECT') {
+    await loc.selectOption(text).catch(async () => { await loc.selectOption({ label: text }); });
+  } else {
+    const type = tag === 'INPUT' ? await loc.getAttribute('type') : null;
+    const value = type === 'datetime-local' && /^\d{4}-\d{2}-\d{2}$/.test(text)
+      ? `${text}T00:00`
+      : type === 'date' && /^\d{4}-\d{2}-\d{2}T/.test(text) ? text.slice(0, 10) : text;
+    await loc.fill(value);
+  }
+  if (input.enter) await loc.press('Enter');
+  if (input.settleMs) await browser.sleep(input.settleMs, signal);
+  return { filled: input.testid };
+}
+
+async function pressKey({ input, capabilities, signal }:
+    BrowserArguments<{ actor: string; key?: string; settleMs?: number }>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = interaction(capabilities);
+  await actor.page.keyboard.press(input.key ?? 'Escape');
+  await browser.sleep(input.settleMs ?? 600, signal);
+  return { key: input.key ?? 'Escape' };
+}
+
+async function reload({ input, capabilities, signal }:
+    BrowserArguments<{ actor: string; settleMs?: number }>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = interaction(capabilities);
+  await actor.page.reload({ waitUntil: 'domcontentloaded' });
+  await browser.sleep(input.settleMs ?? 2500, signal);
+  return { reloaded: true };
+}
+
+async function typeInto({ input, capabilities }:
+    BrowserArguments<{ actor: string; text: string }>) {
+  const actor = actorFor(capabilities, input.actor);
+  const field = actor.loc('message-input');
+  await field.click();
+  await field.type(input.text, { delay: 40 });
+  return { typed: true };
+}
+
+async function wait({ input, capabilities, signal }:
+    BrowserArguments<{ actor: string; ms: number }>) {
+  actorFor(capabilities, input.actor);
+  await capabilities.clock.sleep(input.ms, signal);
+  return { waitedMs: input.ms };
+}
+
+async function expect({ input, capabilities, signal }: BrowserArguments<ExpectInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = observation(capabilities);
+  const within = input.within ?? browser.defaultWithin;
+  const contains = browser.expand(input.contains);
+  const scope = input.in
+    ? { testid: input.in.testid, contains: browser.expand(input.in.contains) }
+    : undefined;
+  const loc = actor.loc(input.testid, { contains, scope });
+
+  if (input.absent) {
+    const deadline = Date.now() + within;
+    while (Date.now() <= deadline) {
+      if (await loc.isVisible()) fail('control-present', { control: input.testid });
+      await browser.sleep(250, signal);
+    }
+    return { absent: true };
+  }
+
+  const visible = await loc.waitFor({ state: 'visible', timeout: within })
+    .then(() => true).catch(error => {
+      if (harnessBrowserFailure(error)) throw error;
+      return false;
+    });
+  if (!visible) fail('control-missing', { control: input.testid });
+
+  if (input.count !== undefined) {
+    const all = scope
+      ? actor.page.locator(browser.testId(scope.testid), { hasText: scope.contains })
+        .filter({ visible: true }).first().locator(browser.testId(input.testid))
+      : (contains
+        ? actor.page.locator(browser.testId(input.testid), { hasText: contains })
+        : actor.page.locator(browser.testId(input.testid)));
+    const count = visible ? await all.filter({ visible: true }).count() : 0;
+    if (input.count !== undefined && count !== input.count) {
+      fail('count-mismatch', { control: input.testid, expected: input.count, observed: count });
+    }
+  }
+  if (!visible) return { visible: false };
+
+  if (input.value !== undefined) {
+    const deadline = Date.now() + within;
+    const read = async () => input.attribute
+      ? await loc.getAttribute(input.attribute) ?? ''
+      : readValue(loc);
+    let value = await read();
+    while (value !== input.value && Date.now() <= deadline) {
+      await browser.sleep(250, signal);
+      value = await read();
+    }
+    if (value !== input.value) fail('value-mismatch', { control: input.testid });
+  }
+  if (input.notContains) {
+    const text = (await loc.innerText()) || '';
+    if (text.includes(input.notContains)) fail('text-unexpected', { control: input.testid });
+  }
+  if (input.nonEmpty) {
+    const text = (await readValue(loc)).trim();
+    if (!text) fail('control-empty', { control: input.testid });
+  }
+  return { visible: true, ...(input.value === undefined ? {} : {
+    ...(input.attribute ? { attribute: input.attribute } : {}), value: input.value,
+  }) };
+}
+
+async function waitUntilAbsent({ input, capabilities }: BrowserArguments<CommonInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = observation(capabilities);
+  const contains = browser.expand(input.contains);
+  const scope = inputScope(browser, input.in);
+  const loc = actor.loc(input.testid, { contains, scope });
+  const within = input.within ?? browser.defaultWithin;
+  const hidden = await loc.waitFor({ state: 'hidden', timeout: within })
+    .then(() => true).catch(error => {
+      if (harnessBrowserFailure(error)) throw error;
+      return false;
+    });
+  if (!hidden) fail('control-present', { control: input.testid });
+  return { absent: true };
+}
+
+async function expectElementCount({ input, capabilities, signal }:
+    BrowserArguments<ElementCountInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = observation(capabilities);
+  const within = input.within ?? 10000;
+  const deadline = Date.now() + within;
+  const root = input.in
+    ? actor.page.locator(browser.testId(input.in.testid),
+      input.in.contains ? { hasText: input.in.contains } : {}).filter({ visible: true }).first()
+    : actor.page;
+  for (;;) {
+    const count = await root.locator(browser.testId(input.testid),
+      input.contains ? { hasText: input.contains } : {}).filter({ visible: true }).count();
+    if (count === input.equals) return { count };
+    if (Date.now() > deadline) {
+      fail('count-mismatch', { control: input.testid, expected: input.equals, observed: count });
+    }
+    await browser.sleep(400, signal);
+  }
+}
+
+async function expectSequence({ input, capabilities, signal }: BrowserArguments<SequenceInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = observation(capabilities);
+  const within = input.within ?? browser.defaultWithin;
+  const deadline = Date.now() + within;
+  const root = input.in
+    ? actor.page.locator(browser.testId(input.in.testid),
+      input.in.contains ? { hasText: browser.expand(input.in.contains) } : {}).filter({ visible: true }).first()
+    : actor.page;
+  let seen: string[] = [];
+  for (;;) {
+    seen = (await root.locator(browser.testId(input.testid)).filter({ visible: true }).allInnerTexts())
+      .map(value => value.replace(/\s+/g, ' ').trim());
+    if (seen.length === input.equals.length
+      && seen.every((value, index) => value === browser.expand(input.equals[index]))) {
+      return { values: seen };
+    }
+    if (Date.now() > deadline) fail('order-mismatch', { control: input.testid });
+    await browser.sleep(250, signal);
+  }
+}
+
+async function expectUnavailable({ input, capabilities, signal }:
+    BrowserArguments<UnavailableInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = observation(capabilities);
+  const within = input.within ?? browser.defaultWithin;
+  const deadline = Date.now() + within;
+  const scope = input.in
+    ? actor.page.locator(browser.testId(input.in.testid),
+      input.in.contains ? { hasText: browser.expand(input.in.contains) } : {}).filter({ visible: true }).first()
+    : actor.page;
+  const loc = scope.locator(browser.testId(input.testid),
+    input.contains ? { hasText: browser.expand(input.contains) } : {}).filter({ visible: true }).first();
+  let reason = 'absent';
+  while (Date.now() <= deadline) {
+    if (await loc.isVisible()) {
+      const disabled = await loc.isDisabled();
+      const ariaDisabled = await loc.getAttribute('aria-disabled');
+      if (!disabled && ariaDisabled !== 'true') {
+        fail('control-available', { control: input.testid, actor: input.actor });
+      }
+      reason = 'disabled';
+    } else reason = 'absent';
+    await browser.sleep(250, signal);
+  }
+  return { unavailable: true, reason };
+}
+
+async function expectAllPresent({ input, capabilities, signal }:
+    BrowserArguments<AllPresentInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = observation(capabilities);
+  const within = input.within ?? 10000;
+  const deadline = Date.now() + within;
+  for (;;) {
+    const counts: number[] = [];
+    for (let index = 1; index <= input.count; index++) {
+      counts.push(await actor.page.locator(browser.testId('message-item'),
+        { hasText: `${input.prefix}-${pad(index, input.count)}` }).count());
+    }
+    const missing = counts.filter(count => count === 0).length;
+    const duplicated = counts.filter(count => count > 1).length;
+    if (!missing && !duplicated) return { missing, duplicated };
+    if (Date.now() > deadline) {
+      fail('entries-missing', { expected: input.count, missing, duplicated });
+    }
+    await browser.sleep(500, signal);
+  }
+}
+
+async function expectStable({ input, capabilities, signal }: BrowserArguments<StableInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = observation(capabilities);
+  const loc = actor.loc(input.testid, { contains: browser.expand(input.contains) });
+  await loc.waitFor({ state: 'visible', timeout: input.within ?? browser.defaultWithin });
+  const seen: string[] = [];
+  for (let index = 0; index < (input.samples ?? 4); index++) {
+    seen.push(((await loc.innerText()) || '').trim());
+    await browser.sleep(input.intervalMs ?? 700, signal);
+  }
+  const distinct = [...new Set(seen)];
+  if (distinct.length > 1) fail('value-unstable', { control: input.testid });
+  return { samples: seen };
+}
+
+async function recordNumber({ input, capabilities }: BrowserArguments<RecordNumberInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = observation(capabilities);
+  const scope = input.in
+    ? { testid: input.in.testid, contains: browser.expand(input.in.contains) }
+    : undefined;
+  const loc = actor.loc(input.testid, { contains: browser.expand(input.contains), scope });
+  await loc.waitFor({ state: 'visible', timeout: input.within ?? browser.defaultWithin });
+  const value = parseRenderedNumber(await readValue(loc));
+  if (value === null) fail('number-missing', { control: input.testid });
+  browser.recorded.set(input.as, value);
+  return { key: input.as, value };
+}
+
+async function expectNumber({ input, capabilities, signal }:
+    BrowserArguments<ExpectNumberInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = observation(capabilities);
+  const within = input.within ?? browser.defaultWithin;
+  const contains = browser.expand(input.contains);
+  const scope = input.in
+    ? { testid: input.in.testid, contains: browser.expand(input.in.contains) }
+    : undefined;
+  const loc = actor.loc(input.testid, { contains, scope });
+  await loc.waitFor({ state: 'visible', timeout: within }).catch(error => {
+    if (harnessBrowserFailure(error)) throw error;
+    fail('control-missing', { control: input.testid });
+  });
+
+  let equals = input.equals;
+  if (input.relativeTo !== undefined) {
+    const base = browser.recorded.get(input.relativeTo);
+    // A scenario that compares against a number it never recorded is not
+    // measuring the application.
+    if (base === undefined) inconclusive('assertion-without-action', { action: 'recordNumber' });
+    equals = base + (input.plus ?? 0);
+  }
+  const matches = (number: number): boolean => (equals === undefined || number === equals)
+    && (input.atLeast === undefined || number >= input.atLeast)
+    && (input.atMost === undefined || number <= input.atMost);
+
+  const deadline = Date.now() + within;
+  let last = null;
+  for (;;) {
+    last = parseRenderedNumber(await readValue(loc));
+    if (last !== null && matches(last)) return { value: last };
+    if (Date.now() > deadline) break;
+    await browser.sleep(250, signal);
+  }
+  fail('number-mismatch', { control: input.testid, observed: last, expected: {
+    ...(equals === undefined ? {} : { equals }),
+    ...(input.atLeast === undefined ? {} : { atLeast: input.atLeast }),
+    ...(input.atMost === undefined ? {} : { atMost: input.atMost }),
+  } });
+}
+
+async function expectOrderMatches({ input, capabilities }:
+    BrowserArguments<OrderMatchesInput>) {
+  const browser = observation(capabilities);
+  const sequences: Record<string, string[]> = {};
+  for (const name of input.actors) {
+    const actor = actorFor(capabilities, name);
+    const texts = await actor.page.locator(browser.testId('message-item')).allInnerTexts();
+    sequences[name] = texts.flatMap((text) => {
+      const matched = text.match(new RegExp(`${input.prefix}-\\d+`))?.[0];
+      return matched ? [matched] : [];
+    });
+  }
+  const [first, ...rest] = input.actors;
+  if (!first) throw new TypeError('expectOrderMatches requires at least one actor');
+  const firstSequence = sequences[first];
+  if (!firstSequence) throw new TypeError(`no sequence recorded for actor "${first}"`);
+  for (const other of rest) {
+    const otherSequence = sequences[other];
+    if (!otherSequence) throw new TypeError(`no sequence recorded for actor "${other}"`);
+    if (firstSequence.join('|') !== otherSequence.join('|')) {
+      fail('order-mismatch', { control: 'message-item', actors: [first, other] });
+    }
+  }
+  return { sequences };
+}
+
+async function expectAgreement({ input, capabilities, signal }:
+    BrowserArguments<AgreementInput>) {
+  const browser = observation(capabilities);
+  const contains = browser.expand(input.contains);
+  const scope = input.in
+    ? { testid: input.in.testid, contains: browser.expand(input.in.contains) }
+    : undefined;
+  const deadline = Date.now() + (input.within ?? 10000);
+  let seen: Record<string, string> = {};
+  for (;;) {
+    seen = {};
+    for (const name of input.actors) {
+      const actor = actorFor(capabilities, name);
+      const loc = actor.loc(input.testid, { contains, scope });
+      const visible = await loc.isVisible();
+      const text = !visible ? '<missing>' : (input.numeric
+        ? await readValue(loc)
+        : ((await loc.innerText()) || '<missing>')).trim() || '<missing>';
+      seen[name] = input.numeric ? String(parseRenderedNumber(text) ?? '<no number>') : text;
+    }
+    const missing = Object.entries(seen)
+      .filter(([, value]) => value === '<missing>' || value === '<no number>')
+      .map(([name]) => name);
+    if (!missing.length && new Set(Object.values(seen)).size === 1) return { seen };
+    if (Date.now() > deadline) {
+      if (missing.length) fail('control-unreadable', { control: input.testid, actors: missing });
+      fail('clients-disagree', { control: input.testid, actors: input.actors });
+    }
+    await browser.sleep(500, signal);
+  }
+}
+
+async function expectActorsWith({ input, capabilities }:
+    BrowserArguments<ActorsWithInput>) {
+  const browser = observation(capabilities);
+  const contains = browser.expand(input.contains);
+  const scope = input.in
+    ? { testid: input.in.testid, contains: browser.expand(input.in.contains) }
+    : undefined;
+  const counts = await Promise.all(input.actors.map(async (name): Promise<[string, number]> => {
+    const actor = actorFor(capabilities, name);
+    const loc = actor.loc(input.testid, { contains, scope });
+    const all = scope
+      ? actor.page.locator(browser.testId(scope.testid), { hasText: scope.contains }).first()
+        .locator(browser.testId(input.testid)).filter({ visible: true })
+      : (contains
+        ? actor.page.locator(browser.testId(input.testid), { hasText: contains }).filter({ visible: true })
+        : actor.page.locator(browser.testId(input.testid)).filter({ visible: true }));
+    await settledLocatorCount(loc, input.within ?? browser.defaultWithin);
+    return [name, await all.count()];
+  }));
+
+  const held = counts.filter(([, count]) => count > 0);
+  if (input.equals !== undefined && held.length !== input.equals) {
+    fail('actors-with-control', { control: input.testid, expected: input.equals, observed: held.length });
+  }
+  if (input.maxEach !== undefined) {
+    const maxEach = input.maxEach;
+    if (counts.some(([, count]) => count > maxEach)) {
+      fail('too-many-per-actor', { control: input.testid, maxEach });
+    }
+  }
+  return { counts: Object.fromEntries(counts) };
+}
+
+function errorField(error: unknown, field: string): unknown {
+  return typeof error === 'object' && error !== null
+    ? (error as Record<string, unknown>)[field]
+    : undefined;
+}
+
+function isExpectedBrowserFailure(error: unknown): boolean {
+  if (error instanceof ActionApplicationFailure) return true;
+  if (errorField(error, 'name') === 'TimeoutError') return true;
+  const stack = String(errorField(error, 'stack') ?? '');
+  const message = String(errorField(error, 'message') ?? error ?? '');
+  return /node_modules[\\/]playwright/.test(stack)
+    || /^(?:locator|page|keyboard|browserContext)\./i.test(message);
+}
+
+// The one place raw browser text is read: a Playwright error becomes a
+// finding by its shape. The text itself travels only as human detail.
+export function pageFailure(message: string): ActionApplicationFailure {
+  const control = message.match(/data-testid="([^"]+)"/)?.[1];
+  const named = control ? { control } : {};
+  const value = /Page crashed/i.test(message) ? finding('page-crashed', { detail: message })
+    : /selectOption/i.test(message) ? finding('choice-missing', { ...named, detail: message })
+    : /intercepts pointer events/i.test(message) ? finding('control-blocked', { ...named, detail: message })
+    : /timeout/i.test(message) ? finding('page-timeout', { ...named, detail: message })
+    : finding('page-error', { ...named, detail: message });
+  return new ActionApplicationFailure(renderFinding(value), { finding: value });
+}
+
+export function browserApplicationBoundary<Arguments, Result>(
+  implementation: (arguments_: Arguments) => Result | Promise<Result>,
+): (arguments_: Arguments) => Promise<Result> {
+  return async (args: Arguments): Promise<Result> => {
+    try {
+      return await implementation(args);
+    } catch (error) {
+      if (errorField(error, 'classification') || harnessBrowserFailure(error)) throw error;
+      if (isExpectedBrowserFailure(error)) throw pageFailure(String(errorField(error, 'message') ?? error));
+      throw error;
+    }
+  };
+}
+
+function contractBrowserAction<Input, Result>(
+  implementation: (arguments_: BrowserArguments<Input>) => Result | Promise<Result>,
+): ActionImplementation {
+  const bounded = browserApplicationBoundary(implementation);
+  return actionImplementation(bounded);
+}
+
+export const BROWSER_ACTION_IMPLEMENTATIONS = Object.freeze({
+  clearInput: contractBrowserAction(clearInput),
+  click: contractBrowserAction(click),
+  expect: contractBrowserAction(expect),
+  expectActorsWith: contractBrowserAction(expectActorsWith),
+  expectAgreement: contractBrowserAction(expectAgreement),
+  expectAllPresent: contractBrowserAction(expectAllPresent),
+  expectElementCount: contractBrowserAction(expectElementCount),
+  expectNumber: contractBrowserAction(expectNumber),
+  expectOrderMatches: contractBrowserAction(expectOrderMatches),
+  expectSequence: contractBrowserAction(expectSequence),
+  expectStable: contractBrowserAction(expectStable),
+  expectUnavailable: contractBrowserAction(expectUnavailable),
+  fill: contractBrowserAction(fill),
+  pressKey: contractBrowserAction(pressKey),
+  recordNumber: contractBrowserAction(recordNumber),
+  reload: contractBrowserAction(reload),
+  typeInto: contractBrowserAction(typeInto),
+  wait: contractBrowserAction(wait),
+  waitUntilAbsent: contractBrowserAction(waitUntilAbsent),
+});
diff --git a/tools/stack-bench/src/actions/chat-action-executors.ts b/tools/stack-bench/src/actions/chat-action-executors.ts
new file mode 100644
index 00000000000..b6dde689587
--- /dev/null
+++ b/tools/stack-bench/src/actions/chat-action-executors.ts
@@ -0,0 +1,171 @@
+import { actionImplementation } from './action-contract.js';
+import {
+  actorFor,
+  browserFor,
+  pad,
+} from './actor-action-runtime.js';
+import type { ActorActionArguments, BrowserActorCapabilities } from './actor-action-runtime.js';
+import { browserApplicationBoundary } from './browser-action-executors.js';
+
+type ChatArguments<Input extends { readonly actor: string }> =
+  ActorActionArguments<Input, BrowserActorCapabilities>;
+
+interface AccountInput {
+  readonly actor: string;
+  readonly exact?: boolean;
+  readonly expectFailure?: boolean;
+  readonly name: string;
+  readonly password?: string;
+  readonly readyTestid?: string;
+  readonly settleMs?: number;
+}
+
+interface RoomInput {
+  readonly actor: string;
+  readonly private?: boolean;
+  readonly room: string;
+}
+
+interface MessageInput {
+  readonly actor: string;
+  readonly text: string;
+}
+
+interface ManyMessagesInput {
+  readonly actor: string;
+  readonly count: number;
+  readonly delayMs?: number;
+  readonly prefix: string;
+}
+
+async function signUp({ input, capabilities, signal }: ChatArguments<AccountInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = browserFor(capabilities);
+  const user = input.exact ? input.name : browser.scopedUser(input.name);
+  const password = input.password ?? `pw-${user}`;
+  const username = actor.page.locator(browser.testId('signup-username')).first();
+  if (!(await username.isVisible())) {
+    const toggle = actor.loc('signin-toggle');
+    await username.or(toggle).first().waitFor({ state: 'visible', timeout: browser.defaultWithin });
+    if (!(await username.isVisible())) {
+      await toggle.click({ timeout: browser.defaultWithin });
+      await username.waitFor({ state: 'visible', timeout: browser.defaultWithin });
+    }
+  }
+  await username.fill(user);
+  await actor.page.locator(browser.testId('signup-password')).first().fill(password);
+  await actor.page.locator(browser.testId('signup-submit')).first().click();
+  if (input.expectFailure) {
+    await browser.sleep(input.settleMs ?? 2000, signal);
+    return { user, expectedFailure: true };
+  }
+  await actor.page.locator(browser.testId('current-user')).first()
+    .waitFor({ state: 'visible', timeout: browser.defaultWithin * 2 });
+  return { user, signedUp: true };
+}
+
+async function signIn({ input, capabilities, signal }: ChatArguments<AccountInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = browserFor(capabilities);
+  const user = input.exact ? input.name : browser.scopedUser(input.name);
+  const password = input.password ?? `pw-${user}`;
+  const username = actor.page.locator(browser.testId('signin-username')).first();
+  const toggle = actor.loc('signin-toggle');
+  if (!(await username.isVisible())) {
+    await username.or(toggle).first().waitFor({ state: 'visible', timeout: browser.defaultWithin });
+    if (!(await username.isVisible())) {
+      await toggle.click({ timeout: browser.defaultWithin });
+      await username.waitFor({ state: 'visible', timeout: browser.defaultWithin });
+    }
+  }
+  await username.fill(user);
+  await actor.page.locator(browser.testId('signin-password')).first().fill(password);
+  await actor.page.locator(browser.testId('signin-submit')).first().click();
+  if (input.expectFailure) {
+    await browser.sleep(input.settleMs ?? 2000, signal);
+    return { user, expectedFailure: true };
+  }
+  await actor.page.locator(browser.testId('current-user')).first()
+    .waitFor({ state: 'visible', timeout: browser.defaultWithin * 2 });
+  return { user, signedIn: true };
+}
+
+async function createRoom({ input, capabilities }: ChatArguments<RoomInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = browserFor(capabilities);
+  const room = browser.roomName(input.room);
+  const nameInput = actor.page.locator(browser.testId('room-name-input')).first();
+  if (!(await nameInput.isVisible())) {
+    await actor.page.locator(browser.testId('room-create')).first().click();
+  }
+  await nameInput.fill(room);
+  if (input.private) await actor.page.locator(browser.testId('room-private-toggle')).first().click();
+  await actor.page.locator(browser.testId('room-name-submit')).first().click();
+  await actor.page.locator(browser.testId('room-item'), { hasText: room }).first()
+    .waitFor({ state: 'visible', timeout: browser.defaultWithin });
+  return { room, private: input.private === true };
+}
+
+async function enterRoom({ input, capabilities, signal }: ChatArguments<RoomInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = browserFor(capabilities);
+  const room = browser.roomName(input.room);
+  const item = actor.page.locator(browser.testId('room-item'), { hasText: room }).first();
+  await item.waitFor({ state: 'visible', timeout: browser.defaultWithin });
+  await item.click();
+  const message = actor.loc('message-input');
+  if (!(await message.isVisible())) {
+    await browser.sleep(750, signal);
+    if (!(await message.isVisible())) await item.click();
+  }
+  await message.waitFor({ state: 'visible', timeout: browser.defaultWithin });
+  return { room, entered: true };
+}
+
+async function send({ input, capabilities }: ChatArguments<MessageInput>) {
+  const message = actorFor(capabilities, input.actor).loc('message-input');
+  await message.fill(input.text);
+  await message.press('Enter');
+  return { sent: input.text };
+}
+
+async function sendMany({ input, capabilities, signal }: ChatArguments<ManyMessagesInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = browserFor(capabilities);
+  const message = actor.loc('message-input');
+  for (let index = 1; index <= input.count; index++) {
+    await message.fill(`${input.prefix}-${pad(index, input.count)}`);
+    await message.press('Enter');
+    if (input.delayMs) await browser.sleep(input.delayMs, signal);
+  }
+  return { sent: input.count, prefix: input.prefix };
+}
+
+async function ensureSignedIn({ input, capabilities, signal }: ChatArguments<AccountInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = browserFor(capabilities);
+  const user = input.exact ? input.name : browser.scopedUser(input.name);
+  const currentUser = actor.page.locator(browser.testId('current-user')).first();
+  if (await currentUser.isVisible()) {
+    const signedInAs = await currentUser.innerText();
+    if (!signedInAs.includes(user)) {
+      throw new Error(`${actor.name} is already signed in as a different account`);
+    }
+    return { restored: false, user };
+  }
+  await signIn({ input, capabilities, signal });
+  await actor.page.locator(browser.testId(input.readyTestid ?? 'room-list')).first()
+    .waitFor({ state: 'attached', timeout: browser.defaultWithin });
+  await browser.sleep(input.settleMs ?? 1500, signal);
+  return { restored: true, user };
+}
+
+export const CHAT_ACTION_IMPLEMENTATIONS = Object.freeze({
+  createRoom: actionImplementation(browserApplicationBoundary(createRoom)),
+  ensureSignedIn: actionImplementation(browserApplicationBoundary(ensureSignedIn)),
+  enterRoom: actionImplementation(browserApplicationBoundary(enterRoom)),
+  send: actionImplementation(browserApplicationBoundary(send)),
+  sendMany: actionImplementation(browserApplicationBoundary(sendMany)),
+  signIn: actionImplementation(browserApplicationBoundary(signIn)),
+  signUp: actionImplementation(browserApplicationBoundary(signUp)),
+});
diff --git a/tools/stack-bench/src/actions/element-selector.ts b/tools/stack-bench/src/actions/element-selector.ts
new file mode 100644
index 00000000000..8df58c85bb1
--- /dev/null
+++ b/tools/stack-bench/src/actions/element-selector.ts
@@ -0,0 +1,6 @@
+export function stableElementSelector(name: string): string {
+  if (!/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/.test(name)) {
+    throw new Error(`invalid application interface name ${JSON.stringify(name)}`);
+  }
+  return `[data-role="${name}"],#${name}`;
+}
diff --git a/tools/stack-bench/src/actions/named-action-executors.ts b/tools/stack-bench/src/actions/named-action-executors.ts
new file mode 100644
index 00000000000..f9c61bc5843
--- /dev/null
+++ b/tools/stack-bench/src/actions/named-action-executors.ts
@@ -0,0 +1,232 @@
+import { actionImplementation } from './action-contract.js';
+import type { Operation } from './action-findings.js';
+import {
+  actorFor,
+  fail,
+  inconclusive,
+  transportFor,
+} from './actor-action-runtime.js';
+import type {
+  ActionCall,
+  ActorActionArguments,
+  ActorCapabilities,
+  HeaderRecord,
+  TransportActorCapabilities,
+} from './actor-action-runtime.js';
+import { browserApplicationBoundary } from './browser-action-executors.js';
+import {
+  browserCredentials,
+  capturedCredentials,
+  namedActionRequest,
+} from './named-action-runtime.js';
+import type {
+  NamedAction,
+  NamedActionsCapability,
+} from './named-action-runtime.js';
+
+interface CallActionInput {
+  readonly action: string;
+  readonly actor: string;
+  readonly authentication?: 'actor' | 'none';
+  readonly from?: string;
+  readonly input: {
+    readonly attribute: string;
+    readonly contains?: string;
+    readonly testid: string;
+  };
+  readonly namedAction?: NamedAction;
+  readonly settleMs?: number;
+}
+
+interface OutcomeInput {
+  readonly actor: string;
+  readonly outcome: 'accepted' | 'refused' | 'validation-refused';
+  readonly routeProvenBy?: string;
+}
+
+interface ConcurrentCallInput {
+  readonly action: string;
+  readonly actors: readonly string[];
+  readonly args?: readonly unknown[];
+  readonly body?: unknown;
+  readonly settleMs?: number;
+}
+
+interface ConcurrentOutcomeInput { readonly accepted?: number }
+
+interface NamedActionCapabilities extends ActorCapabilities {
+  readonly 'named-actions': NamedActionsCapability;
+}
+
+type NamedArguments<Input> = ActorActionArguments<Input, NamedActionCapabilities>;
+
+type NamedTransportCapabilities = NamedActionCapabilities & TransportActorCapabilities;
+
+type NamedTransportArguments<Input> =
+  ActorActionArguments<Input, NamedTransportCapabilities>;
+
+async function callAction({ input, capabilities, signal }: NamedTransportArguments<CallActionInput>) {
+  const caller = actorFor(capabilities, input.actor);
+  const source = actorFor(capabilities, input.from ?? input.actor);
+  const named = capabilities['named-actions'];
+  const transport = transportFor(capabilities);
+  const action = input.namedAction ?? named.resolve(input.action);
+  if (!action) inconclusive('unknown-action', { action: input.action });
+  if (!Array.isArray(action.params) || action.params.length === 0) {
+    inconclusive('action-without-parameters', { action: input.action });
+  }
+
+  const target = source.loc(input.input.testid, { contains: input.input.contains });
+  await target.waitFor({ state: 'attached', timeout: transport.defaultWithin });
+  const raw = await target.getAttribute(input.input.attribute);
+  if (raw === null || raw === '') {
+    fail('interface-missing', { control: input.input.testid, attribute: input.input.attribute,
+      action: input.action });
+  }
+  const invalid = (detail: string): never => fail('interface-invalid',
+    { action: input.action, attribute: input.input.attribute, detail });
+  let values: unknown;
+  try { values = JSON.parse(raw); }
+  catch { invalid('not JSON'); }
+  if (!values || typeof values !== 'object' || Array.isArray(values)) invalid('not an object');
+  const supplied = values as Record<string, unknown>;
+  const expected = action.params.map(param => param.name);
+  const unexpected = Object.keys(supplied).filter(name => !expected.includes(name));
+  if (unexpected.length) {
+    fail('interface-invalid', { action: input.action, attribute: input.input.attribute,
+      unexpected: unexpected.sort() });
+  }
+  const defaults = action.args ?? [];
+  const actionValues = Object.fromEntries(expected.map((name, index) =>
+    [name, Object.hasOwn(supplied, name) ? supplied[name] : defaults[index]]));
+  const missing = expected.filter(name => actionValues[name] === undefined);
+  if (missing.length) {
+    fail('interface-invalid', { action: input.action, attribute: input.input.attribute, missing });
+  }
+
+  let credentials: HeaderRecord = {};
+  if ((input.authentication ?? 'actor') === 'actor') {
+    const actorCredentials = capturedCredentials(caller) ?? await browserCredentials(caller);
+    if (!actorCredentials) inconclusive('no-session', { actor: caller.name, action: input.action });
+    credentials = actorCredentials;
+  }
+  const request = namedActionRequest(named, action, { values: actionValues });
+  if (!request?.url) inconclusive('unresolved-action', { action: input.action });
+  const response = await named.fetch(request.url, {
+    method: request.method ?? 'POST',
+    headers: { 'Content-Type': 'application/json', ...credentials },
+    body: request.body,
+    signal,
+  }).catch(error => ({ status: 0, ok: false, error: error.message }));
+  caller.actionCall = {
+    action: input.action,
+    accepted: response.ok,
+    status: response.status,
+    url: request.url,
+    method: request.method ?? 'POST',
+    applicationRejected: (request.applicationRejectionStatuses ?? []).includes(response.status),
+    operation: { reducer: action.reducer ?? null, path: action.path ?? null,
+      method: action.method ?? 'POST' },
+  };
+  await transport.sleep(input.settleMs ?? 2000, signal);
+  return { action: input.action, accepted: caller.actionCall.accepted,
+    status: caller.actionCall.status };
+}
+
+// A 404 names the operation the application interface promised; any other
+// status is the application's own answer.
+function missingOperation(call: ActionCall): Operation | null {
+  if (call.status !== 404 || !call.operation) return null;
+  return { reducer: call.operation.reducer, path: call.operation.path, method: call.operation.method };
+}
+
+async function expectActionOutcome({ input, capabilities }: NamedTransportArguments<OutcomeInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const transport = transportFor(capabilities);
+  const call = actor.actionCall;
+  if (!call) inconclusive('assertion-without-action', { action: 'callAction' });
+  const status = call.status || null;
+  if (input.outcome === 'accepted') {
+    if (!call.accepted) {
+      fail('call-refused', { action: call.action, actor: actor.name, status,
+        operation: missingOperation(call) });
+    }
+  } else if (input.outcome === 'validation-refused') {
+    if (call.accepted) {
+      fail('call-accepted', { action: call.action, actor: actor.name, status, required: 'validation-refused' });
+    }
+    if (![400, 409, 422].includes(call.status) && call.applicationRejected !== true) {
+      fail('call-error', { action: call.action, actor: actor.name, status,
+        required: 'validation-refused', operation: missingOperation(call) });
+    }
+  } else {
+    if (call.accepted) {
+      fail('call-accepted', { action: call.action, actor: actor.name, status, required: 'refused' });
+    }
+    const routeProof = input.routeProvenBy === undefined ? null
+      : actorFor(capabilities, input.routeProvenBy).actionCall;
+    const provenPrivateNotFound = call.status === 404 && routeProof?.accepted === true
+      && routeProof.action === call.action;
+    const deliberateRefusal = call.status === 401 || call.status === 403
+      || provenPrivateNotFound || call.applicationRejected === true;
+    if (!deliberateRefusal) {
+      fail('call-error', { action: call.action, actor: actor.name, status,
+        required: 'refused', operation: missingOperation(call) });
+    }
+  }
+  transport.verification.verified(
+    `${actor.name}: server ${input.outcome === 'accepted' ? 'accepted' : 'refused'} `
+      + `action "${call.action}" (HTTP ${call.status})`);
+  return { action: call.action, outcome: input.outcome, status: call.status,
+    classification: 'verified' };
+}
+
+async function callConcurrently({ input, capabilities, signal }: NamedArguments<ConcurrentCallInput>) {
+  const named = capabilities['named-actions'];
+  const action = named.resolve(input.action);
+  if (!action) inconclusive('unknown-action', { action: input.action });
+  const prepared: Array<{ name: string; credentials: HeaderRecord }> = [];
+  for (const name of input.actors) {
+    const actor = actorFor(capabilities, name);
+    const credentials = capturedCredentials(actor) ?? await browserCredentials(actor);
+    if (!credentials) inconclusive('no-session', { actor: name, action: input.action });
+    prepared.push({ name, credentials });
+  }
+  const request = named.request(action, input);
+  const requestUrl = request?.url;
+  if (!requestUrl) inconclusive('unresolved-action', { action: input.action });
+  const started = named.now();
+  const outcomes = await Promise.all(prepared.map(preparedActor =>
+    named.fetch(requestUrl, {
+      method: request.method ?? 'POST',
+      headers: { 'Content-Type': 'application/json', ...preparedActor.credentials },
+      body: request.body,
+      signal,
+    }).then(async response => ({ name: preparedActor.name, status: response.status, ok: response.ok,
+      text: response.ok ? '' : (await response.text()).slice(0, 120) }))
+      .catch(error => ({ name: preparedActor.name, status: 0, ok: false,
+        text: String(error.message).slice(0, 120) }))));
+  const result = { action: input.action, fired: prepared.length, ms: named.now() - started, outcomes };
+  named.lastCalls.set(result);
+  await named.sleep(input.settleMs ?? 3000, signal);
+  return result;
+}
+
+async function expectCallOutcomes({ input, capabilities }: NamedArguments<ConcurrentOutcomeInput>) {
+  const result = capabilities['named-actions'].lastCalls.get();
+  if (!result) inconclusive('assertion-without-action', { action: 'callConcurrently' });
+  const accepted = result.outcomes.filter(outcome => outcome.ok).length;
+  if (input.accepted !== undefined && accepted !== input.accepted) {
+    fail('concurrent-calls-mismatch', { action: result.action, expected: input.accepted, accepted,
+      fired: result.fired,
+      detail: `${result.outcomes.map(outcome => `${outcome.name}:${outcome.status}`).join(' ')} within ${result.ms}ms` });
+  }
+  return { accepted, fired: result.fired, outcomes: result.outcomes };
+}
+
+export const NAMED_ACTION_IMPLEMENTATIONS = Object.freeze({
+  callAction: actionImplementation(browserApplicationBoundary(callAction)),
+  callConcurrently: actionImplementation(browserApplicationBoundary(callConcurrently)),
+  expectActionOutcome: actionImplementation(expectActionOutcome),
+  expectCallOutcomes: actionImplementation(expectCallOutcomes),
+});
diff --git a/tools/stack-bench/src/actions/named-action-runtime.ts b/tools/stack-bench/src/actions/named-action-runtime.ts
new file mode 100644
index 00000000000..9ecc43748b2
--- /dev/null
+++ b/tools/stack-bench/src/actions/named-action-runtime.ts
@@ -0,0 +1,159 @@
+import { fail } from './actor-action-runtime.js';
+import type { Actor, HeaderRecord } from './actor-action-runtime.js';
+import { STACK_ADAPTER_REGISTRY } from '../stacks/stack-adapters.js';
+import type { NamedAction } from '../composition/tracks.js';
+import type { SpacetimeTarget } from '../stacks/stack-grading-operations.js';
+
+interface StorageLike {
+  readonly length: number;
+  getItem(key: string): string | null;
+  key(index: number): string | null;
+}
+
+declare const localStorage: StorageLike;
+declare const sessionStorage: StorageLike;
+
+export type { NamedAction } from '../composition/tracks.js';
+
+export interface NamedActionRequest {
+  readonly applicationRejectionStatuses?: readonly number[];
+  readonly body?: string | null;
+  readonly method?: string;
+  readonly url?: string | null;
+}
+
+export interface ConcurrentCallOutcome {
+  readonly name: string;
+  readonly ok: boolean;
+  readonly status: number;
+  readonly text: string;
+}
+
+export interface ConcurrentCallResult {
+  readonly action: string;
+  readonly fired: number;
+  readonly ms: number;
+  readonly outcomes: readonly ConcurrentCallOutcome[];
+}
+
+export interface NamedActionsCapability {
+  readonly lastCalls: {
+    get(): ConcurrentCallResult | null;
+    set(result: ConcurrentCallResult): void;
+  };
+  fetch(url: string, options: {
+    readonly body?: string | null;
+    readonly headers?: HeaderRecord;
+    readonly method?: string;
+    readonly signal?: AbortSignal;
+  }): Promise<{
+    readonly ok: boolean;
+    readonly status: number;
+    text(): Promise<string>;
+  }>;
+  now(): number;
+  request(action: NamedAction, input: unknown): NamedActionRequest | null;
+  resolve(id: string): NamedAction | null;
+  sleep(milliseconds: number, signal: AbortSignal): Promise<void>;
+}
+
+function errorField(error: unknown, field: string): unknown {
+  return typeof error === 'object' && error !== null
+    ? (error as Record<string, unknown>)[field]
+    : undefined;
+}
+
+export function namedActionRequest(named: NamedActionsCapability, action: NamedAction,
+  input: unknown): NamedActionRequest | null {
+  try { return named.request(action, input); }
+  catch (error) {
+    if (errorField(error, 'code') === 'invalid_named_action_input') {
+      fail('interface-invalid', { action: action.id ?? '', attribute: 'input',
+        detail: String(errorField(error, 'message') ?? 'invalid named action input') });
+    }
+    throw error;
+  }
+}
+
+export function capturedCredentials(actor: Actor): HeaderRecord | null {
+  const authHeader = /^(authorization|cookie|x-auth-token|x-session|x-token|x-user)$/i;
+  for (const write of [...(actor.writes ?? [])].reverse()) {
+    const headers = Object.entries(write.headers ?? {})
+      .filter(([key, value]) => authHeader.test(key) && value)
+      .map(([key, value]) => [key.toLowerCase(), value]);
+    if (headers.length) return Object.fromEntries(headers);
+  }
+  return null;
+}
+
+export async function browserCredentials(actor: Actor): Promise<HeaderRecord | null> {
+  const headers: HeaderRecord = {};
+  const cookies = await actor.context.cookies();
+  if (cookies.length) headers.Cookie = cookies.map(cookie => `${cookie.name}=${cookie.value}`).join('; ');
+  const tokens = await actor.page.evaluate(() => {
+    const credentialKey = /(?:^|[_-])(auth|jwt|session|token)(?:$|[_-])|(?:auth|jwt|session|token)$/i;
+    const excludedKey = /(?:csrf|refresh)/i;
+    const usable = (value: unknown): value is string =>
+      typeof value === 'string' && value.trim().length >= 8;
+    const found = new Set<string>();
+    const fromObject = (value: unknown): void => {
+      if (!value || typeof value !== 'object') return;
+      for (const [key, nested] of Object.entries(value)) {
+        if (!excludedKey.test(key) && credentialKey.test(key) && usable(nested)) {
+          found.add(nested.trim());
+        }
+      }
+    };
+    for (const storage of [localStorage, sessionStorage]) {
+      for (let index = 0; index < storage.length; index++) {
+        const key = storage.key(index) ?? '';
+        const value = storage.getItem(key) ?? '';
+        if (!excludedKey.test(key) && credentialKey.test(key) && usable(value)) {
+          found.add(value.trim());
+        }
+        try { fromObject(JSON.parse(value)); } catch { /* not JSON */ }
+      }
+    }
+    return [...found];
+  });
+  if (Array.isArray(tokens) && tokens.length === 1) headers.Authorization = `Bearer ${tokens[0]}`;
+  return Object.keys(headers).length ? headers : null;
+}
+
+type NamedFetch = NamedActionsCapability['fetch'];
+const defaultFetch: NamedFetch = (url, options) => fetch(url, options);
+
+export function createNamedActionsCapability({
+  actions,
+  backend,
+  url,
+  spacetime,
+  lastCalls,
+  sleep,
+  fetchImpl = defaultFetch,
+  now = () => Date.now(),
+}: {
+  readonly actions?: readonly NamedAction[];
+  readonly backend: string;
+  readonly url?: string | null;
+  readonly spacetime?: SpacetimeTarget | null;
+  readonly lastCalls: {
+    get(): ConcurrentCallResult | null;
+    set(result: ConcurrentCallResult): void;
+  };
+  readonly sleep: NamedActionsCapability['sleep'];
+  readonly fetchImpl?: NamedFetch;
+  readonly now?: () => number;
+}): NamedActionsCapability {
+  return Object.freeze({
+    resolve: (id: string) => (actions ?? []).find(action => action.id === id) ?? null,
+    request(action: NamedAction, input: unknown) {
+      return STACK_ADAPTER_REGISTRY.get(backend).namedAction.request(
+        { action, input, spacetime, url }) as NamedActionRequest | null;
+    },
+    fetch: fetchImpl,
+    lastCalls: Object.freeze({ get: lastCalls.get, set: lastCalls.set }),
+    now,
+    sleep,
+  });
+}
diff --git a/tools/stack-bench/src/actions/runtime-action-executors.ts b/tools/stack-bench/src/actions/runtime-action-executors.ts
new file mode 100644
index 00000000000..2c0a4e99275
--- /dev/null
+++ b/tools/stack-bench/src/actions/runtime-action-executors.ts
@@ -0,0 +1,479 @@
+import { execFileSync } from 'node:child_process';
+
+import { ActionApplicationFailure, ActionInconclusive, actionImplementation } from './action-contract.js';
+import { finding, isFinding } from './action-findings.js';
+import type {
+  ActionImplementation,
+} from './action-contract.js';
+import { actorFor, fail, inconclusive } from './actor-action-runtime.js';
+import { evidenceDisposition } from '../evidence/check-evidence.js';
+import type { CheckEvidenceStatus } from '../evidence/check-evidence.js';
+import { replayHeaders } from './actor-transport-action-executors.js';
+import { browserApplicationBoundary } from './browser-action-executors.js';
+import { harnessBrowserFailure, harnessProcessFailure } from '../evidence/harness-errors.js';
+import { STACK_ADAPTER_REGISTRY } from '../stacks/stack-adapters.js';
+import type { LeasedSpacetimeTarget } from '../runtime/spacetime-target.js';
+import type { RuntimeControlMode, RuntimeControlSpec } from '../runtime/backend-control.js';
+import type { TextCommandExecutor } from '../runtime/command-executor.js';
+
+type UnknownRecord = Record<string, unknown>;
+type Sleep = (milliseconds: number, signal: AbortSignal) => Promise<void>;
+type Exec = TextCommandExecutor;
+
+declare const navigator: { readonly onLine: boolean };
+
+interface CapturedWrite {
+  readonly body?: unknown;
+  readonly headers: Readonly<Record<string, string>>;
+  readonly method: string;
+  readonly url: string;
+}
+
+interface Locator {
+  click(options?: unknown): Promise<void>;
+  isEnabled(): Promise<boolean>;
+  waitFor(options?: unknown): Promise<void>;
+}
+
+interface Actor {
+  readonly lastWrite?: CapturedWrite | null;
+  readonly lastWrites?: Readonly<Record<string, CapturedWrite | undefined>>;
+  readonly page: {
+    readonly request: {
+      fetch(url: string, options: UnknownRecord): Promise<{ status(): number }>;
+    };
+    close(): Promise<void>;
+    context(): { setOffline(offline: boolean): Promise<void> };
+    evaluate<Result>(callback: () => Result): Promise<Result>;
+  };
+  readonly writes?: readonly CapturedWrite[];
+  loc(testid: string, options?: unknown): Locator;
+}
+
+interface ActionStep extends UnknownRecord {
+  readonly do: string;
+}
+
+interface ConcurrencyCapability {
+  readonly defaultWithin: number;
+  dispatch(step: ActionStep, signal: AbortSignal): Promise<unknown>;
+  expand(value: string | undefined): string | undefined;
+  sleep: Sleep;
+  testId(id: string): string;
+}
+
+interface LifecycleCapability {
+  operate(mode: 'restart' | 'start' | 'stop', settleMs: number, signal: AbortSignal): Promise<void>;
+}
+
+interface LifecycleConcurrencyCapabilities {
+  readonly actors: { get(name: string): Actor | undefined };
+  readonly 'application-lifecycle': LifecycleCapability;
+  readonly 'backend-lifecycle': LifecycleCapability;
+  readonly 'browser-interaction': {
+    readonly clients: {
+      fresh(actor: Actor, actorName: string): Promise<string>;
+      open(actor: Actor, settleMs: number, signal: AbortSignal): Promise<void>;
+    };
+    sleep: Sleep;
+  };
+  readonly clock: { sleep: Sleep };
+  readonly concurrency: ConcurrencyCapability;
+  readonly 'database-write': {
+    setStock(input: SetStockInput): unknown | Promise<unknown>;
+  };
+}
+
+interface ActionArguments<Input> {
+  readonly input: Input;
+  readonly capabilities: LifecycleConcurrencyCapabilities;
+  readonly signal: AbortSignal;
+}
+
+interface ReplayConcurrentlyInput {
+  readonly actors: readonly string[];
+  readonly match?: string;
+  readonly method?: string;
+  readonly settleMs?: number;
+}
+
+interface LocatorScope {
+  readonly contains?: string;
+  readonly testid: string;
+}
+
+interface ClickTarget {
+  readonly actor: string;
+  readonly in?: LocatorScope;
+}
+
+interface ClickConcurrentlyInput {
+  readonly actors: readonly string[];
+  readonly in?: LocatorScope;
+  readonly readyWithin?: number;
+  readonly settleMs?: number;
+  readonly targets?: readonly ClickTarget[];
+  readonly testid: string;
+  readonly within?: number;
+}
+
+interface RaceInput {
+  readonly branches: readonly (readonly ActionStep[])[];
+  readonly settleMs?: number;
+}
+
+interface ConcurrentSender {
+  readonly actor: string;
+  readonly count: number;
+  readonly delayMs?: number;
+  readonly prefix: string;
+}
+
+interface SendConcurrentlyInput {
+  readonly delayMs?: number;
+  readonly senders: readonly ConcurrentSender[];
+}
+
+interface SettleInput { readonly settleMs?: number }
+interface ActorInput { readonly actor: string; readonly settleMs?: number }
+interface OfflineInput extends ActorInput { readonly offline?: boolean }
+interface SetStockInput {
+  readonly item: string;
+  readonly quantity: number;
+  readonly settleMs: number;
+  readonly warehouse: string;
+}
+
+interface ProcessErrorShape {
+  readonly classification?: unknown;
+  readonly code?: unknown;
+  readonly message?: unknown;
+  readonly status?: unknown;
+  readonly stderr?: unknown;
+  readonly stdout?: unknown;
+  readonly stockInterface?: unknown;
+}
+
+interface NestedActionEvidence {
+  readonly status?: unknown;
+  readonly summary?: string | null;
+  readonly finding?: unknown;
+}
+
+const errorShape = (error: unknown): ProcessErrorShape =>
+  error !== null && typeof error === 'object' ? error as ProcessErrorShape : {};
+const errorEvidence = (error: unknown): NestedActionEvidence | null => {
+  if (error === null || typeof error !== 'object' || !('actionEvidence' in error)) return null;
+  const evidence = error.actionEvidence;
+  return evidence !== null && typeof evidence === 'object' ? evidence as NestedActionEvidence : null;
+};
+
+export function databaseWriteFailureDetail(error: unknown): string {
+  const value = errorShape(error);
+  const details = [value.message, value.stdout, value.stderr]
+    .map(value => Buffer.isBuffer(value) ? value.toString('utf8') : String(value ?? ''))
+    .map(value => value.trim()).filter(Boolean)
+    .filter((value, index, all) => all.indexOf(value) === index);
+  return details.join(' | ').slice(-600) || 'unknown database-write failure';
+}
+
+async function dispatchNested(
+  concurrency: ConcurrencyCapability,
+  step: ActionStep,
+  signal: AbortSignal,
+): Promise<unknown> {
+  try {
+    return await concurrency.dispatch(step, signal);
+  } catch (error) {
+    const evidence = errorEvidence(error);
+    const status = evidence?.status;
+    const disposition = typeof status === 'string'
+      ? evidenceDisposition(status as CheckEvidenceStatus)
+      : null;
+    // A nested step's own finding is the finding; the wrapper adds nothing.
+    const nested = isFinding(evidence?.finding) ? evidence.finding : null;
+    if (disposition?.applicationFailure) {
+      throw new ActionApplicationFailure(evidence?.summary ?? `${step.do} failed`,
+        { finding: nested ?? finding('action-failed', { action: step.do }) });
+    }
+    if (disposition?.outcomeKind === 'inconclusive') {
+      throw new ActionInconclusive(evidence?.summary ?? `${step.do} was inconclusive`,
+        { finding: nested ?? finding('invalid-input', { detail: `${step.do} was inconclusive` }) });
+    }
+    throw error;
+  }
+}
+
+async function replayConcurrently(
+  { input, capabilities, signal }: ActionArguments<ReplayConcurrentlyInput>,
+) {
+  const concurrency = capabilities.concurrency;
+  const method = input.method ?? 'POST';
+  const match = input.match;
+  const pick = (actor: Actor): CapturedWrite | undefined | null => {
+    if (match) {
+      return [...(actor.writes ?? [])].reverse()
+        .find(write => write.method === method && write.url.includes(match));
+    }
+    return actor.lastWrites?.[method] ?? actor.lastWrite;
+  };
+  const pending = input.actors.map(name => {
+    const actor = actorFor(capabilities, name);
+    return { actor, write: pick(actor) };
+  }).filter((candidate): candidate is { actor: Actor; write: CapturedWrite } =>
+    candidate.write !== null && candidate.write !== undefined);
+  if (pending.length < 2) {
+    inconclusive('nothing-contended', { detail: `${pending.length} write request(s) captured; `
+      + 'this backend may not write over HTTP, or the request carried no JSON body' });
+  }
+  const replies = await Promise.all(pending.map(({ actor, write }) =>
+    actor.page.request.fetch(write.url, {
+      method: write.method,
+      headers: replayHeaders(write),
+      data: write.body === undefined || write.body === null ? undefined : JSON.stringify(write.body),
+    }).then(response => response.status(), error =>
+      `error: ${String(errorShape(error).message ?? error).split('\n')[0]}`)));
+  const answered = replies.filter(status => typeof status === 'number');
+  if (answered.length < 2) {
+    inconclusive('nothing-contended', { detail: `${answered.length} of ${pending.length} replayed requests `
+      + `reached the server (responses: ${replies.join(', ')})` });
+  }
+  await concurrency.sleep(input.settleMs ?? 3000, signal);
+  return { attempted: pending.length, answered: answered.length, replies };
+}
+
+async function clickConcurrently(
+  { input, capabilities, signal }: ActionArguments<ClickConcurrentlyInput>,
+) {
+  const concurrency = capabilities.concurrency;
+  const targets: readonly ClickTarget[] = input.targets ?? input.actors.map(actor => ({ actor }));
+  const resolved = targets.map(target => {
+    const where = target.in ?? input.in;
+    const scope = where
+      ? { testid: where.testid, contains: concurrency.expand(where.contains) }
+      : undefined;
+    return { target, locator: actorFor(capabilities, target.actor).loc(input.testid, { scope }) };
+  });
+  const notReady = (await Promise.all(resolved.map(async ({ target, locator }) => {
+    try {
+      await locator.waitFor({ state: 'visible', timeout: input.readyWithin ?? 15000 });
+      return await locator.isEnabled() ? null : target.actor;
+    } catch (error) {
+      if (harnessBrowserFailure(error)) throw error;
+      return target.actor;
+    }
+  }))).filter(Boolean);
+  if (notReady.length) {
+    fail('control-not-ready', { control: input.testid, actors: notReady.map(String) });
+  }
+  const outcomes = await Promise.all(resolved.map(({ target, locator }) =>
+    locator.click({ timeout: input.within ?? concurrency.defaultWithin, force: true, noWaitAfter: true })
+      .then(() => null, error =>
+        `${target.actor}: ${String(errorShape(error).message ?? error).split('\n')[0]}`)));
+  const failed = outcomes.filter(Boolean);
+  if (failed.length) {
+    fail('clicks-failed', { control: input.testid, failed: failed.length, total: targets.length,
+      detail: failed.join(' | ') });
+  }
+  await concurrency.sleep(input.settleMs ?? 3000, signal);
+  return { dispatched: targets.length };
+}
+
+async function race({ input, capabilities, signal }: ActionArguments<RaceInput>) {
+  const concurrency = capabilities.concurrency;
+  await Promise.all(input.branches.map(async branch => {
+    for (const step of branch) await dispatchNested(concurrency, step, signal);
+  }));
+  await concurrency.sleep(input.settleMs ?? 2000, signal);
+  return { branches: input.branches.length };
+}
+
+async function sendConcurrently(
+  { input, capabilities, signal }: ActionArguments<SendConcurrentlyInput>,
+) {
+  const concurrency = capabilities.concurrency;
+  await Promise.all(input.senders.map(sender => dispatchNested(concurrency, {
+    do: 'sendMany',
+    actor: sender.actor,
+    prefix: sender.prefix,
+    count: sender.count,
+    delayMs: sender.delayMs ?? input.delayMs ?? 0,
+  }, signal)));
+  return { senders: input.senders.length,
+    messages: input.senders.reduce((total, sender) => total + sender.count, 0) };
+}
+
+async function restartBackend({ input, capabilities, signal }: ActionArguments<SettleInput>) {
+  await capabilities['backend-lifecycle'].operate('restart', input.settleMs ?? 10000, signal);
+  return { operation: 'restart' };
+}
+
+async function startAppServer({ input, capabilities, signal }: ActionArguments<SettleInput>) {
+  await capabilities['application-lifecycle'].operate('start', input.settleMs ?? 8000, signal);
+  return { operation: 'start' };
+}
+
+async function stopAppServer({ input, capabilities, signal }: ActionArguments<SettleInput>) {
+  await capabilities['application-lifecycle'].operate('stop', input.settleMs ?? 2000, signal);
+  return { operation: 'stop' };
+}
+
+async function dbSetStock({ input, capabilities, signal }: ActionArguments<SetStockInput>) {
+  let result: unknown;
+  try {
+    result = await capabilities['database-write'].setStock(input);
+  } catch (error) {
+    if (errorShape(error).classification || harnessProcessFailure(error)) throw error;
+    // The contract names the stock tables; an application without them has
+    // failed that interface. Any other write failure is the harness's.
+    if (errorShape(error).stockInterface === true) {
+      fail('stock-interface-missing', { detail: databaseWriteFailureDetail(error) });
+    }
+    inconclusive('database-write-failed', { detail: databaseWriteFailureDetail(error) });
+  }
+  await capabilities.clock.sleep(input.settleMs, signal);
+  return result;
+}
+
+async function setOffline({ input, capabilities, signal }: ActionArguments<OfflineInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const browser = capabilities['browser-interaction'];
+  const offline = input.offline !== false;
+  await actor.page.context().setOffline(offline);
+  await browser.sleep(input.settleMs ?? 500, signal);
+  const browserOnline = await actor.page.evaluate(() => navigator.onLine);
+  if (browserOnline === offline) {
+    throw new Error(`setOffline requested browser network ${offline ? 'offline' : 'online'}, `
+      + `but navigator.onLine remained ${browserOnline}`);
+  }
+  return { offline, browserOnline };
+}
+
+async function closeClient({ input, capabilities }: ActionArguments<ActorInput>) {
+  await actorFor(capabilities, input.actor).page.close();
+  return { closed: true };
+}
+
+async function openClient({ input, capabilities, signal }: ActionArguments<ActorInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  await capabilities['browser-interaction'].clients.open(actor, input.settleMs ?? 4000, signal);
+  return { opened: true };
+}
+
+async function freshClient({ input, capabilities }: ActionArguments<ActorInput>) {
+  const actor = actorFor(capabilities, input.actor);
+  const name = await capabilities['browser-interaction'].clients.fresh(actor, input.actor);
+  return { actor: name };
+}
+
+interface LifecycleCapabilityOptions {
+  readonly target: 'app-server' | 'backend-runtime';
+  readonly control: (
+    restartSpec: RuntimeControlSpec,
+    mode: RuntimeControlMode,
+    options: { readonly signal: AbortSignal },
+  ) => Promise<unknown>;
+  readonly restartSpec?: RuntimeControlSpec;
+  readonly sleep: Sleep;
+  // Called after the control command completes, so the caller knows which
+  // state the harness left the target in.
+  readonly onOperated?: (mode: 'restart' | 'start' | 'stop') => void;
+}
+
+export function createLifecycleCapability({ restartSpec, target,
+  sleep, control, onOperated = () => {},
+}: LifecycleCapabilityOptions): LifecycleCapability {
+  const application = target === 'app-server';
+  return Object.freeze({
+    async operate(mode: 'restart' | 'start' | 'stop', settleMs: number, signal: AbortSignal) {
+      if (!restartSpec) {
+        inconclusive('no-backend-control', { target });
+        return;
+      }
+      try {
+        await control(restartSpec, mode, { signal });
+      } catch (error) {
+        const value = errorShape(error);
+        if (value.status === 3) inconclusive('control-refused', { target });
+        // A generated app which cannot complete its own start/stop operation
+        // has failed the application contract. Backend-control timeouts and
+        // failures to launch the harness command still provide no app evidence.
+        if (harnessProcessFailure(error) && !(application && value.code === 'ETIMEDOUT')) throw error;
+        fail('app-control-failed', { mode, target,
+          detail: String(value.stdout || value.message || '').trim().slice(-200) });
+      }
+      onOperated(mode);
+      await sleep(settleMs, signal);
+    },
+  });
+}
+
+export interface DatabaseWriteLease {
+  readonly resources: {
+    readonly container: { readonly id: string; readonly name: string };
+    readonly database: string;
+  };
+}
+
+interface DatabaseWriteCapabilityOptions {
+  readonly backend?: string | null;
+  readonly databaseLease?: DatabaseWriteLease | null;
+  readonly skip?: boolean;
+  readonly exec?: Exec;
+  readonly expand: (value: string) => string;
+  readonly spacetime?: LeasedSpacetimeTarget | null;
+}
+
+export function createDatabaseWriteCapability({ backend, spacetime, databaseLease, skip = false, expand,
+  exec = execFileSync }: DatabaseWriteCapabilityOptions) {
+  return Object.freeze({
+    setStock(input: SetStockInput): unknown {
+      if (skip) return { skipped: true };
+      const item = expand(input.item);
+      const warehouse = expand(input.warehouse);
+      const quantity = Number(input.quantity);
+      if (!Number.isInteger(quantity)) {
+        inconclusive('invalid-input', { detail: `dbSetStock quantity ${input.quantity} is not a whole number` });
+      }
+      const adapter = backend ? STACK_ADAPTER_REGISTRY.get(backend) : undefined;
+      if (!adapter || !('databaseWrite' in adapter)) {
+        return inconclusive('unsupported-backend', { backend: backend ?? '<unset>' });
+      }
+      if (adapter.id === 'spacetime') {
+        return adapter.databaseWrite.setStock({ item, warehouse, quantity, spacetime: spacetime ?? undefined, exec });
+      }
+      if (!databaseLease) {
+        throw Object.assign(new Error('direct database writes require an authenticated backend lease'),
+          { classification: 'harness_failure' });
+      }
+      return adapter.databaseWrite.setStock({ item, warehouse, quantity, lease: databaseLease, exec });
+    },
+  });
+}
+
+function contractLifecycleAction<Input, Result>(
+  implementation: (arguments_: ActionArguments<Input>) => Result | Promise<Result>,
+): ActionImplementation {
+  return actionImplementation(implementation);
+}
+
+function contractBrowserLifecycleAction<Input, Result>(
+  implementation: (arguments_: ActionArguments<Input>) => Result | Promise<Result>,
+): ActionImplementation {
+  return contractLifecycleAction(browserApplicationBoundary(implementation));
+}
+
+export const RUNTIME_ACTION_IMPLEMENTATIONS = Object.freeze({
+  clickConcurrently: contractLifecycleAction(clickConcurrently),
+  closeClient: contractBrowserLifecycleAction(closeClient),
+  dbSetStock: contractLifecycleAction(dbSetStock),
+  freshClient: contractBrowserLifecycleAction(freshClient),
+  openClient: contractBrowserLifecycleAction(openClient),
+  race: contractLifecycleAction(race),
+  replayConcurrently: contractBrowserLifecycleAction(replayConcurrently),
+  restartBackend: contractLifecycleAction(restartBackend),
+  sendConcurrently: contractLifecycleAction(sendConcurrently),
+  setOffline: contractBrowserLifecycleAction(setOffline),
+  startAppServer: contractLifecycleAction(startAppServer),
+  stopAppServer: contractLifecycleAction(stopAppServer),
+});
diff --git a/tools/stack-bench/src/agents/agent-adapter-contract.ts b/tools/stack-bench/src/agents/agent-adapter-contract.ts
new file mode 100644
index 00000000000..cb694197fa8
--- /dev/null
+++ b/tools/stack-bench/src/agents/agent-adapter-contract.ts
@@ -0,0 +1,159 @@
+import { validatePricingAuthority } from '../evidence/pricing-authority.js';
+import { isExactSemanticVersion } from '../semantic-version.js';
+import { formatZodError } from '../zod-error.js';
+import { z } from 'zod';
+
+export const AGENT_ADAPTER_SCHEMA_VERSION = 5;
+
+const ID = /^[a-z][a-z0-9]*(?:[.:-][a-z0-9]+)*$/;
+type UnknownRecord = Record<string, unknown>;
+export type AgentMode = 'build' | 'upgrade' | 'resume' | 'fix';
+export type AgentCostLimit = 'native' | 'non-billable' | 'unsupported';
+
+export interface AgentAdapter {
+  readonly schemaVersion: 5;
+  readonly id: string;
+  readonly version: string;
+  readonly entrypoint: string;
+  readonly modes: readonly AgentMode[];
+  readonly deadlineMs: number;
+  readonly defaultModel: string;
+  readonly apiKeyEnvironmentVariable: string | null;
+  readonly credentialEnvironmentVariables: readonly string[];
+  readonly credentialFiles: readonly string[];
+  readonly outboundDestinations: readonly string[];
+  readonly requiredExecutables: readonly string[];
+  readonly credentialStatusCommand: readonly string[] | null;
+  readonly usesStackSkills: boolean;
+  readonly costLimit: AgentCostLimit;
+}
+
+export interface AgentRequest {
+  app: string;
+  mode: AgentMode;
+  level: number;
+  backend: string;
+  track: string;
+  runIndex: number;
+  model: string;
+  guidance: string;
+  adapterCostLimit?: AgentCostLimit;
+  maxBudgetUsd?: number | null;
+  pricing?: unknown;
+  recipe?: string | null;
+  guidanceDocument?: unknown;
+  credentialAliases?: Record<string, unknown> | null;
+  skills?: unknown[] | null;
+  skillIdentity?: unknown;
+  recipeTask?: unknown;
+}
+
+export interface AgentAdapterRegistry {
+  readonly ids: readonly string[];
+  get(id: string): AgentAdapter;
+}
+
+const object = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const unique = (items: readonly string[]) => new Set(items).size === items.length;
+const environmentVariableSchema = z.string().regex(/^[A-Z][A-Z0-9_]*$/);
+const agentAdapterSchema = z.strictObject({
+  schemaVersion: z.literal(AGENT_ADAPTER_SCHEMA_VERSION),
+  id: z.string().regex(ID),
+  version: z.string().refine(isExactSemanticVersion),
+  entrypoint: z.string().min(1),
+  modes: z.array(z.enum(['build', 'upgrade', 'resume', 'fix'])).min(1).refine(unique),
+  deadlineMs: z.number().int().min(1_000),
+  defaultModel: z.string().min(1),
+  apiKeyEnvironmentVariable: environmentVariableSchema.nullable(),
+  credentialEnvironmentVariables: z.array(environmentVariableSchema).refine(unique),
+  credentialFiles: z.array(z.string().min(1).refine(item => !item.startsWith('/')
+    && !/^[A-Za-z]:[\\/]/.test(item) && !item.split(/[\\/]/).includes('..'))).refine(unique),
+  outboundDestinations: z.array(z.string().refine(item => {
+    try { return new URL(item).protocol === 'https:'; } catch { return false; }
+  })).refine(unique),
+  requiredExecutables: z.array(z.string().regex(/^[a-zA-Z0-9][a-zA-Z0-9._+-]*$/)).refine(unique),
+  credentialStatusCommand: z.array(z.string().min(1).refine(item => !/[\r\n\0]/.test(item)))
+    .min(1).nullable(),
+  usesStackSkills: z.boolean(),
+  costLimit: z.enum(['native', 'non-billable', 'unsupported']),
+});
+
+export function defineAgentAdapter(value: unknown): AgentAdapter {
+  const parsed = agentAdapterSchema.safeParse(value);
+  if (!parsed.success) {
+    throw new Error(formatZodError(parsed.error, 'agent adapter'));
+  }
+  const adapter = parsed.data;
+  return Object.freeze({ ...adapter, modes: Object.freeze([...adapter.modes].sort()),
+    credentialEnvironmentVariables: Object.freeze(
+      [...adapter.credentialEnvironmentVariables].sort()),
+    credentialFiles: Object.freeze([...adapter.credentialFiles].sort()),
+    outboundDestinations: Object.freeze([...adapter.outboundDestinations].sort()),
+    requiredExecutables: Object.freeze([...adapter.requiredExecutables].sort()),
+    credentialStatusCommand: adapter.credentialStatusCommand === null ? null
+      : Object.freeze([...adapter.credentialStatusCommand]) });
+}
+
+export function createAgentAdapterRegistry(adapters: unknown): AgentAdapterRegistry {
+  if (!Array.isArray(adapters)) throw new Error('agent adapter registry requires an array');
+  const entries = new Map<string, AgentAdapter>();
+  for (const source of adapters) {
+    const adapter = defineAgentAdapter(source);
+    if (entries.has(adapter.id)) throw new Error(`duplicate agent adapter ${adapter.id}`);
+    entries.set(adapter.id, adapter);
+  }
+  const ids = Object.freeze([...entries.keys()].sort());
+  return Object.freeze({ ids, get(id: string) {
+    const adapter = entries.get(id);
+    if (!adapter) throw new Error(`unknown agent adapter ${JSON.stringify(id)}`);
+    return adapter;
+  } });
+}
+
+export function agentRecipeIdentity(
+  explicitRecipe: string | null | undefined,
+  recipeTask: unknown,
+): string | null {
+  const task = object(recipeTask) ? recipeTask : null;
+  const bound = task?.recipe;
+  if (!bound) return explicitRecipe ?? null;
+  if (!object(bound) || typeof bound.id !== 'string' || !bound.id
+    || typeof bound.version !== 'string' || !bound.version) {
+    throw new Error('recipe-bound agent task has an invalid recipe identity');
+  }
+  const identity = `${bound.id}@${bound.version}`;
+  if (explicitRecipe && explicitRecipe !== identity) {
+    throw new Error(`agent recipe ${explicitRecipe} does not match bound task ${identity}`);
+  }
+  return identity;
+}
+
+export function agentRequestArgv(adapter: AgentAdapter, request: AgentRequest): string[] {
+  if (!adapter.modes.includes(request.mode)) {
+    throw new Error(`agent adapter ${adapter.id} does not support mode ${request.mode}`);
+  }
+  if (request.maxBudgetUsd != null && adapter.costLimit === 'unsupported') {
+    throw new Error(`agent adapter ${adapter.id} cannot enforce a cost limit`);
+  }
+  return [adapter.entrypoint, '--mode', request.mode, '--backend', request.backend,
+    '--level', String(request.level), '--app', request.app, '--track', request.track,
+    '--run-index', String(request.runIndex), '--model', request.model,
+    '--guidance', request.guidance,
+    ...(request.recipe ? ['--recipe', request.recipe] : []),
+    ...(request.guidanceDocument
+      ? ['--guidance-document-json', JSON.stringify(request.guidanceDocument)] : []),
+    ...(request.credentialAliases && Object.keys(request.credentialAliases).length
+      ? ['--credential-aliases-json', JSON.stringify(request.credentialAliases)] : []),
+    ...(request.skillIdentity
+      ? ['--skill-identity-json', JSON.stringify(request.skillIdentity)] : []),
+    ...(!request.skillIdentity && Array.isArray(request.skills)
+      ? ['--skills-json', JSON.stringify(request.skills)] : []),
+    ...(request.recipeTask
+      ? ['--recipe-task-json', JSON.stringify(request.recipeTask)] : []),
+    ...(request.pricing
+      ? ['--pricing-json', JSON.stringify(validatePricingAuthority(request.pricing,
+        { at: 'agent request pricing' }))] : []),
+    ...(request.maxBudgetUsd != null && adapter.costLimit === 'native'
+      ? ['--max-budget-usd', String(request.maxBudgetUsd)] : [])];
+}
diff --git a/tools/stack-bench/src/agents/agent-adapters.ts b/tools/stack-bench/src/agents/agent-adapters.ts
new file mode 100644
index 00000000000..aced8045258
--- /dev/null
+++ b/tools/stack-bench/src/agents/agent-adapters.ts
@@ -0,0 +1,95 @@
+import { readFileSync } from 'node:fs';
+import { join, sep } from 'node:path';
+
+import { AGENT_ADAPTER_SCHEMA_VERSION, createAgentAdapterRegistry } from './agent-adapter-contract.js';
+import type {
+  AgentAdapter,
+  AgentCostLimit,
+  AgentMode,
+} from './agent-adapter-contract.js';
+import { AGENT_PROCESS_TIMEOUT_MS } from './coding-session-timeouts.js';
+import { DEFAULT_THROTTLE_MAX_WAIT_MS } from './coding-session-retry.js';
+import { sha256 } from '../evidence/provenance.js';
+
+import { compiledEntrypoint } from '../package-root.js';
+
+interface AdapterOptions {
+  modes?: AgentMode[];
+  apiKeyEnvironmentVariable?: string | null;
+  credentialEnvironmentVariables?: string[];
+  credentialFiles?: string[];
+  outboundDestinations?: string[];
+  requiredExecutables?: string[];
+  credentialStatusCommand?: string[] | null;
+  usesStackSkills?: boolean;
+  costLimit?: AgentCostLimit;
+  version?: string;
+  deadlineMs?: number;
+}
+
+export interface AgentAdapterIdentity {
+  id: string;
+  version: string;
+  sha256: string;
+}
+const CLAUDE_SUBSCRIPTION_STATUS_COMMAND = ['node', '-e',
+  "const {spawnSync}=require('node:child_process');"
+  + "const r=spawnSync('claude',['auth','status','--json'],{encoding:'utf8'});"
+  + "let s=null;try{s=JSON.parse(r.stdout)}catch{};"
+  + "process.exit(r.status===0&&s?.loggedIn===true&&['claude.ai','oauth_token'].includes(s?.authMethod)?0:1)"];
+const adapter = (id: string, entrypoint: string, defaultModel: string,
+  { modes = ['build', 'upgrade', 'resume', 'fix'], apiKeyEnvironmentVariable = null,
+    credentialEnvironmentVariables = [], credentialFiles = [], outboundDestinations = [],
+    requiredExecutables = [],
+    credentialStatusCommand = null, usesStackSkills = false,
+    costLimit = 'unsupported', version = '1.0.0',
+    deadlineMs = 75 * 60_000 }: AdapterOptions = {}): AgentAdapter => ({
+  schemaVersion: AGENT_ADAPTER_SCHEMA_VERSION,
+  id, version, entrypoint: compiledEntrypoint(...entrypoint.split(sep)), modes, defaultModel,
+  apiKeyEnvironmentVariable, credentialEnvironmentVariables, credentialFiles,
+  outboundDestinations, requiredExecutables, credentialStatusCommand, usesStackSkills, costLimit,
+  deadlineMs,
+});
+
+export const AGENT_ADAPTER_REGISTRY = createAgentAdapterRegistry([
+  adapter('claude-code', join('commands', 'agent.js'), 'claude-sonnet-5',
+    { apiKeyEnvironmentVariable: 'ANTHROPIC_API_KEY',
+      credentialEnvironmentVariables: ['CLAUDE_CODE_OAUTH_TOKEN'],
+      costLimit: 'native',
+      outboundDestinations: ['https://api.anthropic.com'], requiredExecutables: ['claude'],
+      // `claude auth status --json` exits zero even when it reports
+      // `loggedIn:false`; the adapter command must turn semantic logout into a
+      // failed preflight without making a provider request.
+      credentialStatusCommand: CLAUDE_SUBSCRIPTION_STATUS_COMMAND,
+      usesStackSkills: true, version: '1.17.2',
+      // Claude can wait through an account throttle. Local adapters keep the
+      // shorter default deadline because they have no provider wait state.
+      deadlineMs: AGENT_PROCESS_TIMEOUT_MS + DEFAULT_THROTTLE_MAX_WAIT_MS + 10 * 60_000 }),
+  adapter('deterministic', join('tests', 'fixtures', 'repair-agent.js'), 'deterministic',
+    { costLimit: 'non-billable', version: '1.3.0' }),
+  adapter('fault-injection', join('tests', 'fixtures', 'crash-agent.js'), 'fault-injection',
+    { modes: ['build'], costLimit: 'non-billable', version: '1.2.0' }),
+  adapter('reference-fixture', join('src', 'references', 'reference-agent.js'), 'reference-fixture',
+    { modes: ['build', 'upgrade', 'fix'], costLimit: 'non-billable', version: '1.4.0' }),
+]);
+
+export function agentAdapterIdentity(value: AgentAdapter): AgentAdapterIdentity {
+  return {
+    id: value.id,
+    version: value.version,
+    sha256: sha256(Buffer.concat([
+      Buffer.from(`${JSON.stringify({ schemaVersion: value.schemaVersion, id: value.id,
+        version: value.version, modes: value.modes, deadlineMs: value.deadlineMs,
+        defaultModel: value.defaultModel,
+        costLimit: value.costLimit,
+        apiKeyEnvironmentVariable: value.apiKeyEnvironmentVariable,
+        credentialEnvironmentVariables: value.credentialEnvironmentVariables,
+        credentialFiles: value.credentialFiles,
+        outboundDestinations: value.outboundDestinations,
+        requiredExecutables: value.requiredExecutables,
+        credentialStatusCommand: value.credentialStatusCommand,
+        usesStackSkills: value.usesStackSkills })}\0`),
+      readFileSync(value.entrypoint),
+    ])),
+  };
+}
diff --git a/tools/stack-bench/src/agents/agent-credentials.ts b/tools/stack-bench/src/agents/agent-credentials.ts
new file mode 100644
index 00000000000..feb48007663
--- /dev/null
+++ b/tools/stack-bench/src/agents/agent-credentials.ts
@@ -0,0 +1,42 @@
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+export interface AgentCredentialArgs {
+  apiKey?: string;
+  apiKeyFile?: string;
+}
+
+export interface CredentialAgentAdapter {
+  readonly id: string;
+  readonly apiKeyEnvironmentVariable?: string | null;
+}
+
+interface AgentCredentialOptions {
+  readonly env?: NodeJS.ProcessEnv;
+  readonly read?: (path: string, encoding: BufferEncoding) => string;
+}
+
+export function applyAgentCredential<TArgs extends AgentCredentialArgs>(
+  args: TArgs,
+  adapter: CredentialAgentAdapter,
+  { env = process.env, read = (path, encoding) => readFileSync(path, encoding) }:
+    AgentCredentialOptions = {},
+): void {
+  const adapterFileVariable = adapter.apiKeyEnvironmentVariable
+    ? `${adapter.apiKeyEnvironmentVariable}_FILE` : null;
+  const configuredKeyFile = (args.apiKeyFile ? resolve(args.apiKeyFile) : null)
+    ?? (env.STACK_BENCH_API_KEY_FILE ? resolve(env.STACK_BENCH_API_KEY_FILE) : null)
+    ?? (adapterFileVariable && env[adapterFileVariable] ? resolve(env[adapterFileVariable]) : null);
+  if ((args.apiKey || configuredKeyFile) && !adapter.apiKeyEnvironmentVariable) {
+    throw new Error(`agent adapter ${adapter.id} does not accept an API key`);
+  }
+  if (args.apiKey && configuredKeyFile) {
+    throw new Error('use only one of --api-key and --api-key-file');
+  }
+  if (configuredKeyFile) {
+    const value = read(configuredKeyFile, 'utf8').trim();
+    if (!value) throw new Error(`API key file is empty: ${configuredKeyFile}`);
+    args.apiKey = value;
+    args.apiKeyFile = configuredKeyFile;
+  }
+}
diff --git a/tools/stack-bench/src/agents/agent-materials.ts b/tools/stack-bench/src/agents/agent-materials.ts
new file mode 100644
index 00000000000..54506807a4b
--- /dev/null
+++ b/tools/stack-bench/src/agents/agent-materials.ts
@@ -0,0 +1,47 @@
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+const SKILL_ID = /^[a-z][a-z0-9-]*$/;
+
+export type ReadAgentMaterial = (path: string, encoding: 'utf8') => string;
+
+export interface ReadAgentSkillDocumentOptions {
+  read?: ReadAgentMaterial;
+}
+
+// Prompt material is part of the experiment identity. Git may check text out
+// with platform-specific line endings, so normalize it before use or hashing.
+export function normalizePromptText(text: string): string {
+  if (typeof text !== 'string') throw new Error('prompt material must be text');
+  return text.replace(/\r\n?/g, '\n');
+}
+
+function validateSkills(skills: string[]): string[] {
+  if (!Array.isArray(skills)
+    || skills.some(skill => typeof skill !== 'string' || !SKILL_ID.test(skill))
+    || new Set(skills).size !== skills.length) {
+    throw new Error('agent skills are invalid');
+  }
+  return skills;
+}
+
+export function selectAgentSkills(defaults: string[], requested: string[] | null = null): string[] {
+  validateSkills(defaults);
+  validateSkills(requested ?? []);
+  return [...(requested ?? defaults)];
+}
+
+export function agentSkillPaths(repository: string, skills: string[]): string[] {
+  return validateSkills(skills).map(skill => join(repository, 'skills', skill, 'SKILL.md'));
+}
+
+export function readAgentSkillDocuments(
+  repository: string,
+  skills: string[],
+  { read = (path, encoding) => readFileSync(path, encoding) }: ReadAgentSkillDocumentOptions = {},
+): string {
+  const strip = (markdown: string): string => markdown.replace(/^---\n[\s\S]*?\n---\n/, '');
+  return agentSkillPaths(repository, skills)
+    .map(path => strip(normalizePromptText(read(path, 'utf8'))))
+    .join('\n\n---\n\n');
+}
diff --git a/tools/stack-bench/src/agents/agent-result-contract.ts b/tools/stack-bench/src/agents/agent-result-contract.ts
new file mode 100644
index 00000000000..14a34000bbe
--- /dev/null
+++ b/tools/stack-bench/src/agents/agent-result-contract.ts
@@ -0,0 +1,309 @@
+import { pricingRatesEqual, validatePricingAuthority }
+  from '../evidence/pricing-authority.js';
+import type { PricingRates } from '../evidence/pricing-authority.js';
+import type { ClaudeUsage } from '../evidence/claude-usage-cost.js';
+import { formatZodError } from '../zod-error.js';
+import type { AgentMode, AgentRequest } from './agent-adapter-contract.js';
+import { z } from 'zod';
+
+export const AGENT_COST_RECEIPT_TOLERANCE_USD = 0.0001;
+
+type UnknownRecord = Record<string, unknown>;
+
+export interface AgentCostReceipt {
+  schemaVersion: 3;
+  source: 'credential-broker';
+  model: string;
+  maxBudgetUsd: number;
+  costUsd: number;
+  cliCostUsd: number | null;
+  calculatedCostUsd: number | null;
+  usage: ClaudeUsage | null;
+  pricingRates: PricingRates | null;
+  // `costUsd` is exact provider usage priced at `pricingRates` when `exact`;
+  // otherwise it also carries the cost ceiling of every estimated request and
+  // is an upper bound.
+  exact: boolean;
+  estimatedRequests: number;
+  estimatedByReason: Record<'no-usage' | 'response-aborted' | 'upstream-error', number>;
+  complete: boolean;
+  reconciled: boolean;
+  error: string | null;
+}
+
+export interface AgentCostReceiptEntry {
+  invocation: number;
+  receipt: AgentCostReceipt;
+}
+
+export interface AgentSessionFailure {
+  kind: 'provider_failure' | 'harness_failure';
+  phase: 'coding-session';
+  reason: string;
+  provider: unknown;
+  appFailures: [];
+  inconclusive: [];
+  harnessFailures: [];
+}
+
+export interface AgentUsage {
+  input: number;
+  output: number;
+  cacheWrite: number;
+  cacheRead: number;
+}
+
+export interface AgentTranscriptIdentity {
+  kind: string;
+  id: string;
+}
+
+export interface AgentThinking {
+  blocks?: number | null;
+  signatureBytes?: number | null;
+}
+
+export interface AgentSetup extends UnknownRecord {
+  session?: string;
+  isolation?: UnknownRecord & { imageId?: string | null };
+  providerThrottle?: { waits?: number | null; waitedMs?: number | null };
+  resources?: {
+    buildContainerMemory: {
+      currentBytes: number | null;
+      peakBytes: number | null;
+      limitBytes: number | null;
+    } | null;
+    memoryProbeError: string | null;
+  } | null;
+}
+
+export interface ValidatedAgentResult {
+  appDir: string;
+  mode: AgentMode;
+  level: number;
+  backend: string;
+  track: string;
+  model: string;
+  guidance: unknown;
+  stack?: unknown;
+  ok: boolean;
+  sessionId: string | null;
+  setup: AgentSetup;
+  costUsd: number;
+  tokens: number;
+  outputTokens: number;
+  turns: number;
+  promptBytes: number;
+  tokensPerTurn?: number | null;
+  durationMs: number;
+  usage: AgentUsage;
+  costReceipts: AgentCostReceiptEntry[];
+  costComplete: boolean;
+  transcript: AgentTranscriptIdentity | null;
+  thinking?: AgentThinking | null;
+  provenance?: UnknownRecord | null;
+  providerMetadata?: UnknownRecord | null;
+}
+
+const object = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const nonNegativeNumber = z.number().finite().nonnegative();
+const receiptUsageSchema = z.strictObject({
+  input: nonNegativeNumber,
+  output: nonNegativeNumber,
+  cacheWrite5m: nonNegativeNumber,
+  cacheWrite1h: nonNegativeNumber,
+  cacheRead: nonNegativeNumber,
+});
+const nonNegativeInteger = z.number().int().nonnegative();
+const receiptSchema = z.strictObject({
+  schemaVersion: z.literal(3),
+  source: z.literal('credential-broker'),
+  model: z.string().min(1),
+  maxBudgetUsd: z.number().finite().positive(),
+  costUsd: nonNegativeNumber,
+  cliCostUsd: nonNegativeNumber.nullable(),
+  calculatedCostUsd: nonNegativeNumber.nullable(),
+  usage: receiptUsageSchema.nullable(),
+  pricingRates: receiptUsageSchema.nullable(),
+  exact: z.boolean(),
+  estimatedRequests: nonNegativeInteger,
+  estimatedByReason: z.strictObject({
+    'no-usage': nonNegativeInteger,
+    'response-aborted': nonNegativeInteger,
+    'upstream-error': nonNegativeInteger,
+  }),
+  complete: z.boolean(),
+  reconciled: z.boolean(),
+  error: z.string().min(1).nullable(),
+});
+const resultSchema = z.strictObject({
+  appDir: z.string(),
+  mode: z.enum(['build', 'upgrade', 'resume', 'fix']),
+  level: z.number().int(),
+  track: z.string().optional(),
+  backend: z.string().optional(),
+  model: z.string().optional(),
+  guidance: z.unknown().optional(),
+  stack: z.unknown().optional(),
+  setup: z.looseObject({
+    session: z.string().min(1).optional(),
+    isolation: z.looseObject({ imageId: z.string().min(1).nullable().optional() }).optional(),
+    providerThrottle: z.looseObject({
+      waits: nonNegativeNumber.nullable().optional(),
+      waitedMs: nonNegativeNumber.nullable().optional(),
+    }).optional(),
+    resources: z.strictObject({
+      buildContainerMemory: z.strictObject({
+        currentBytes: nonNegativeNumber.nullable(),
+        peakBytes: nonNegativeNumber.nullable(),
+        limitBytes: nonNegativeNumber.nullable(),
+      }).nullable(),
+      memoryProbeError: z.string().min(1).nullable(),
+    }).nullable().optional(),
+  }),
+  costUsd: nonNegativeNumber,
+  tokens: nonNegativeNumber,
+  outputTokens: nonNegativeNumber,
+  usage: z.strictObject({
+    input: nonNegativeNumber,
+    output: nonNegativeNumber,
+    cacheWrite: nonNegativeNumber,
+    cacheRead: nonNegativeNumber,
+  }),
+  provenance: z.record(z.string(), z.unknown()).nullable().optional(),
+  turns: nonNegativeNumber,
+  promptBytes: nonNegativeNumber,
+  tokensPerTurn: nonNegativeNumber.nullable().optional(),
+  thinking: z.looseObject({
+    blocks: nonNegativeNumber.nullable().optional(),
+    signatureBytes: nonNegativeNumber.nullable().optional(),
+  }).nullable().optional(),
+  durationMs: nonNegativeNumber,
+  sessionId: z.string().min(1).nullable(),
+  ok: z.boolean(),
+  providerMetadata: z.record(z.string(), z.unknown()).nullable().optional(),
+  transcript: z.strictObject({ kind: z.string().min(1), id: z.string().min(1) }).nullable().optional(),
+  costReceipts: z.array(z.strictObject({ invocation: z.number().int().positive(),
+    receipt: z.unknown() })).optional(),
+});
+
+export function validateAgentCostReceipt(value: unknown, model: string, at: string): AgentCostReceipt {
+  const parsed = receiptSchema.safeParse(value);
+  if (!parsed.success) throw new Error(`${at} is invalid: ${formatZodError(parsed.error, at)}`);
+  const receipt = parsed.data;
+  if (receipt.model !== model || receipt.reconciled !== (receipt.error === null)) {
+    throw new Error(`${at} is invalid`);
+  }
+  if (receipt.reconciled && (!receipt.complete || receipt.usage === null
+    || receipt.pricingRates === null || receipt.cliCostUsd === null
+    || receipt.calculatedCostUsd === null)) {
+    throw new Error(`${at} is incomplete`);
+  }
+  return receipt;
+}
+
+function validateCostReceipts(value: unknown, model: string): AgentCostReceiptEntry[] {
+  if (!Array.isArray(value)) throw new Error('agent result costReceipts must be an array');
+  return value.map((entry, index) => {
+    const parsed = z.strictObject({ invocation: z.number().int().positive(),
+      receipt: z.unknown() }).safeParse(entry);
+    if (!parsed.success || parsed.data.invocation !== index + 1) {
+      throw new Error(`agent result costReceipts[${index}] is invalid`);
+    }
+    return { invocation: parsed.data.invocation,
+      receipt: validateAgentCostReceipt(parsed.data.receipt, model,
+        `agent result costReceipts[${index}].receipt`) };
+  });
+}
+
+export function validateAgentResult(value: unknown, request: AgentRequest): ValidatedAgentResult {
+  const parsed = resultSchema.safeParse(value);
+  if (!parsed.success) {
+    throw new Error(formatZodError(parsed.error, 'agent result'));
+  }
+  const result = parsed.data;
+  if (result.appDir !== request.app) throw new Error('agent result appDir does not match the request');
+  if (result.mode !== request.mode) throw new Error('agent result mode does not match the request');
+  if (result.level !== request.level) throw new Error('agent result level does not match the request');
+  if (result.backend !== undefined && result.backend !== request.backend) {
+    throw new Error('agent result backend does not match the request');
+  }
+  if (result.track !== undefined && result.track !== request.track) {
+    throw new Error('agent result track does not match the request');
+  }
+  if (result.model !== undefined && result.model !== request.model) {
+    throw new Error('agent result model does not match the request');
+  }
+  const setup: AgentSetup = result.setup;
+  const thinking = result.thinking;
+  const usage: AgentUsage = result.usage;
+  const costUsd = result.costUsd;
+  const costReceipts = validateCostReceipts(
+    result.costReceipts === undefined ? [] : result.costReceipts, request.model);
+  const pricing = request.pricing == null ? null
+    : validatePricingAuthority(request.pricing, { at: 'agent request pricing' });
+  const cappedNative = request.adapterCostLimit === 'native' && request.maxBudgetUsd != null;
+  if (cappedNative && pricing === null) {
+    throw new Error('agent request pricing is required for a native cost limit');
+  }
+  const receiptCostUsd = costReceipts.reduce((sum, { receipt }) => sum + receipt.costUsd, 0);
+  const costComplete = request.adapterCostLimit === 'non-billable'
+    || (cappedNative && costReceipts.length > 0
+      && costReceipts.every(({ receipt }) => receipt.complete && receipt.reconciled
+        && receipt.error === null && pricingRatesEqual(receipt.pricingRates, pricing?.rates))
+      && Math.abs(receiptCostUsd - costUsd) <= AGENT_COST_RECEIPT_TOLERANCE_USD);
+  if (result.ok && cappedNative && !costComplete) {
+    throw new Error('successful agent result requires complete reconciled broker cost proof');
+  }
+  if (request.maxBudgetUsd != null && request.adapterCostLimit === 'unsupported') {
+    throw new Error('agent result came from an adapter that cannot enforce a cost limit');
+  }
+  const transcript = result.transcript === null || result.transcript === undefined
+    ? (result.sessionId ? { kind: 'provider-session', id: result.sessionId } : null)
+    : result.transcript;
+  return {
+    appDir: request.app,
+    mode: request.mode,
+    level: request.level,
+    backend: request.backend,
+    track: request.track,
+    model: request.model,
+    guidance: result.guidance ?? request.guidance,
+    stack: result.stack,
+    ok: result.ok,
+    sessionId: result.sessionId,
+    setup,
+    thinking,
+    costUsd,
+    tokens: result.tokens,
+    outputTokens: result.outputTokens,
+    turns: result.turns,
+    promptBytes: result.promptBytes,
+    tokensPerTurn: result.tokensPerTurn,
+    durationMs: result.durationMs,
+    usage,
+    costReceipts,
+    costComplete,
+    transcript,
+    provenance: result.provenance,
+    providerMetadata: result.providerMetadata,
+  };
+}
+
+export function agentSessionFailure(value: unknown): AgentSessionFailure | null {
+  if (!object(value)) throw new Error('agent session result must be an object');
+  const result = value;
+  if (result.ok === true && result.sessionId) return null;
+  const providerMetadata = object(result.providerMetadata) ? result.providerMetadata : null;
+  const failureCode = providerMetadata?.failureCode;
+  const diagnostic = providerMetadata?.diagnostic;
+  const kind = typeof failureCode === 'string' && failureCode.startsWith('provider-')
+    ? 'provider_failure' : 'harness_failure';
+  return { kind, phase: 'coding-session',
+    reason: typeof diagnostic === 'string' && diagnostic ? diagnostic
+      : typeof failureCode === 'string' && failureCode ? failureCode
+      : result.sessionId ? 'coding session reported failure' : 'coding session did not run',
+    provider: providerMetadata?.failure ?? null,
+    appFailures: [], inconclusive: [], harnessFailures: [] };
+}
diff --git a/tools/stack-bench/src/agents/claude-terminal-recovery.ts b/tools/stack-bench/src/agents/claude-terminal-recovery.ts
new file mode 100644
index 00000000000..c7c73760868
--- /dev/null
+++ b/tools/stack-bench/src/agents/claude-terminal-recovery.ts
@@ -0,0 +1,402 @@
+import { spawn, type ChildProcessWithoutNullStreams } from 'node:child_process';
+import { closeSync, existsSync, openSync, readFileSync, readSync,
+  readdirSync, statSync } from 'node:fs';
+import { basename, join, sep } from 'node:path';
+
+import { claudeRatesForModel, normalizeClaudeUsage,
+  priceClaudeUsage } from '../evidence/claude-usage-cost.js';
+import { validatePricingRates } from '../evidence/pricing-authority.js';
+import type { PricingRates } from '../evidence/pricing-authority.js';
+
+const UUID_FILE = /^([0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12})\.jsonl$/i;
+
+export type ClaudeTranscriptSnapshot = Map<string, number>;
+
+type JsonObject = Record<string, unknown>;
+
+interface ClaudeCliResult extends JsonObject {
+  is_error: boolean;
+  session_id: string;
+  result: string;
+  total_cost_usd: number;
+  num_turns: number;
+  usage: JsonObject;
+}
+
+interface TranscriptMessage extends JsonObject {
+  id?: unknown;
+  model?: unknown;
+  stop_reason?: unknown;
+  content?: unknown;
+  usage?: unknown;
+}
+
+interface TranscriptRecord extends JsonObject {
+  type?: unknown;
+  isSidechain?: unknown;
+  sessionId?: unknown;
+  requestId?: unknown;
+  uuid?: unknown;
+  message?: unknown;
+}
+
+interface AssistantUsageRecord extends TranscriptRecord {
+  message: TranscriptMessage;
+}
+
+export interface ClaudeTerminalRecoveryEvidence {
+  schemaVersion: 1;
+  kind: 'terminal-transcript';
+  marker: string;
+  transcript: string;
+  costSource: 'transcript-usage';
+  pricedModels: string[];
+}
+
+export interface RecoveredClaudeTerminalResult {
+  is_error: false;
+  session_id: string;
+  result: string;
+  total_cost_usd: number;
+  num_turns: number;
+  usage: {
+    input_tokens: number;
+    output_tokens: number;
+    cache_creation_input_tokens: number;
+    cache_read_input_tokens: number;
+  };
+  terminal_recovery: ClaudeTerminalRecoveryEvidence;
+}
+
+interface RecoverClaudeTerminalOptions {
+  directory: string;
+  snapshot: ClaudeTranscriptSnapshot;
+  marker: string;
+  model: string;
+  pricingRates?: PricingRates | null;
+  resumeSession?: string | null;
+}
+
+export interface TerminalProcessRecoveryEvidence {
+  schemaVersion: 1;
+  kind: 'terminal-process';
+  marker: string;
+  transcript: string;
+  resultSource: 'cli-json';
+}
+
+export interface TranscriptAwareProcessResult {
+  status: number | null;
+  signal: NodeJS.Signals | null;
+  stdout: string;
+  stderr: string;
+  error: unknown;
+  terminalRecovery?: ClaudeTerminalRecoveryEvidence | TerminalProcessRecoveryEvidence;
+}
+
+interface RunTranscriptAwareProcessOptions {
+  command: string;
+  args: string[];
+  input?: string | null;
+  env?: NodeJS.ProcessEnv;
+  timeoutMs: number;
+  transcriptDirectory: string;
+  transcriptSnapshot: ClaudeTranscriptSnapshot;
+  marker: string;
+  model: string;
+  resumeSession?: string | null;
+  pricingRates?: PricingRates | null;
+  exitGraceMs?: number;
+  pollMs?: number;
+  maxBuffer?: number;
+  terminate?: (
+    child: ChildProcessWithoutNullStreams,
+    reason: string,
+  ) => unknown | PromiseLike<unknown>;
+}
+
+function isJsonObject(value: unknown): value is JsonObject {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function transcriptMessage(value: unknown): TranscriptMessage | null {
+  return isJsonObject(value) ? value : null;
+}
+
+function transcriptContent(message: TranscriptMessage): JsonObject[] {
+  return Array.isArray(message.content) ? message.content.filter(isJsonObject) : [];
+}
+
+function isAssistantUsageRecord(record: TranscriptRecord): record is AssistantUsageRecord {
+  const message = transcriptMessage(record.message);
+  return record.type === 'assistant' && message !== null && Boolean(message.usage);
+}
+
+export function snapshotClaudeTranscripts(directory: string): ClaudeTranscriptSnapshot {
+  const snapshot: ClaudeTranscriptSnapshot = new Map();
+  if (!existsSync(directory)) return snapshot;
+  (function walk(path: string): void {
+    for (const entry of readdirSync(path, { withFileTypes: true })) {
+      const child = join(path, entry.name);
+      if (entry.isDirectory()) walk(child);
+      else if (entry.name.endsWith('.jsonl')) snapshot.set(child, statSync(child).size);
+    }
+  })(directory);
+  return snapshot;
+}
+
+function markerPresent(text: string, marker: string): boolean {
+  return new RegExp(`(?:^|\\s)${marker}(?=\\s|$)`).test(text);
+}
+
+function addedRecords(path: string, initialSize: number): TranscriptRecord[] {
+  const tail = readFileSync(path).subarray(initialSize).toString('utf8');
+  return tail.split(/\r?\n/).filter(Boolean).flatMap((line): TranscriptRecord[] => {
+    try {
+      const parsed: unknown = JSON.parse(line);
+      return isJsonObject(parsed) ? [parsed] : [];
+    } catch { return []; }
+  });
+}
+
+export function parseCompleteClaudeCliResult(raw: unknown): ClaudeCliResult | null {
+  const value = String(raw ?? '').trim();
+  if (!value) return null;
+  let parsed: unknown = null;
+  try { parsed = JSON.parse(value); } catch {
+    for (const line of value.split(/\r?\n/).reverse()) {
+      try { parsed = JSON.parse(line); break; } catch { /* keep looking */ }
+    }
+  }
+  if (!isJsonObject(parsed)
+    || typeof parsed.is_error !== 'boolean'
+    || typeof parsed.session_id !== 'string' || !parsed.session_id
+    || typeof parsed.result !== 'string'
+    || typeof parsed.total_cost_usd !== 'number'
+    || !Number.isFinite(parsed.total_cost_usd) || parsed.total_cost_usd < 0
+    || typeof parsed.num_turns !== 'number'
+    || !Number.isSafeInteger(parsed.num_turns) || parsed.num_turns < 0
+    || !isJsonObject(parsed.usage)) {
+    return null;
+  }
+  try { normalizeClaudeUsage(parsed.usage); } catch { return null; }
+  return parsed as ClaudeCliResult;
+}
+
+function candidateTranscriptPaths(
+  directory: string,
+  snapshot: ClaudeTranscriptSnapshot,
+  resumeSession: string | null | undefined,
+): string[] {
+  const normalizedResume = resumeSession?.toLowerCase() ?? null;
+  if (normalizedResume) return [join(directory, `${normalizedResume}.jsonl`)];
+  return existsSync(directory)
+    ? readdirSync(directory).filter(name => UUID_FILE.test(name)).map(name => join(directory, name))
+      .filter(path => !snapshot.has(path))
+    : [];
+}
+
+function hasCompletionMarker(
+  directory: string,
+  snapshot: ClaudeTranscriptSnapshot,
+  marker: string,
+  resumeSession: string | null | undefined,
+): boolean {
+  for (const path of candidateTranscriptPaths(directory, snapshot, resumeSession)) {
+    if (!existsSync(path)) continue;
+    const size = statSync(path).size;
+    const initialSize = snapshot.get(path) ?? 0;
+    if (size <= initialSize) continue;
+    // The marker is at the end of the terminal text. A small tail probe avoids
+    // reparsing a growing multi-megabyte transcript four times per second.
+    const start = Math.max(initialSize, size - 128 * 1024);
+    const buffer = Buffer.allocUnsafe(size - start);
+    const handle = openSync(path, 'r');
+    try { readSync(handle, buffer, 0, buffer.length, start); }
+    finally { closeSync(handle); }
+    if (buffer.includes(Buffer.from(marker))
+      && buffer.includes(Buffer.from('"stop_reason":"end_turn"'))) return true;
+  }
+  return false;
+}
+
+export function recoverClaudeTerminalResult({ directory, snapshot, marker, model,
+  pricingRates = null, resumeSession = null }:
+  RecoverClaudeTerminalOptions): RecoveredClaudeTerminalResult | null {
+  if (!model) throw new Error('terminal recovery model is required');
+  const requestedRates = pricingRates === null ? null
+    : validatePricingRates(pricingRates, { at: 'terminal recovery pricing rates' });
+  const normalizedResume = resumeSession?.toLowerCase() ?? null;
+  const candidates = candidateTranscriptPaths(directory, snapshot, resumeSession);
+  const matches: RecoveredClaudeTerminalResult[] = [];
+  for (const path of candidates) {
+    if (!existsSync(path)) continue;
+    const initialSize = snapshot.get(path) ?? 0;
+    if (statSync(path).size <= initialSize) continue;
+    const sessionId = basename(path).match(UUID_FILE)?.[1];
+    if (!sessionId || (normalizedResume && sessionId.toLowerCase() !== normalizedResume)) continue;
+    const mainRecords = addedRecords(path, initialSize)
+      .filter((record): record is AssistantUsageRecord => isAssistantUsageRecord(record)
+        && record.isSidechain !== true && record.sessionId === sessionId);
+    const terminal = mainRecords.findLast(record => record.message.stop_reason === 'end_turn'
+      && transcriptContent(record.message).some(content => content.type === 'text'
+        && markerPresent(String(content.text ?? ''), marker)));
+    if (!terminal) continue;
+    const records = [...mainRecords];
+    const nestedRoot = join(directory, sessionId);
+    if (existsSync(nestedRoot)) {
+      for (const nestedPath of snapshotClaudeTranscripts(nestedRoot).keys()) {
+        if (!nestedPath.startsWith(`${nestedRoot}${sep}`)) continue;
+        records.push(...addedRecords(nestedPath, snapshot.get(nestedPath) ?? 0)
+          .filter(isAssistantUsageRecord));
+      }
+    }
+    const billed = new Map<string, AssistantUsageRecord>();
+    for (const record of records) {
+      const requestId = record.requestId ?? record.message.id ?? record.uuid;
+      if (typeof requestId !== 'string' || !requestId) {
+        throw Object.assign(new Error('terminal transcript usage has no stable request ID'),
+          { code: 'CLAUDE_TERMINAL_RECOVERY_UNAVAILABLE' });
+      }
+      const prior = billed.get(requestId);
+      if (prior && JSON.stringify([prior.message.model, normalizeClaudeUsage(prior.message.usage)])
+        !== JSON.stringify([record.message.model, normalizeClaudeUsage(record.message.usage)])) {
+        throw Object.assign(new Error(`terminal transcript usage changed for request ${requestId}`),
+          { code: 'CLAUDE_TERMINAL_RECOVERY_UNAVAILABLE' });
+      }
+      if (!prior) billed.set(requestId, record);
+    }
+    if (!billed.size) throw new Error('terminal transcript has no billable assistant usage');
+    const usage = { input_tokens: 0, output_tokens: 0,
+      cache_creation_input_tokens: 0, cache_read_input_tokens: 0 };
+    let totalCostUsd = 0;
+    const pricedModels = new Set<string>();
+    for (const record of billed.values()) {
+      const actualModel = record.message.model;
+      if (typeof actualModel !== 'string' || !actualModel) {
+        throw Object.assign(new Error('terminal transcript usage has no model'),
+          { code: 'CLAUDE_TERMINAL_RECOVERY_UNAVAILABLE' });
+      }
+      const rates = requestedRates ?? claudeRatesForModel(actualModel);
+      if (!rates) {
+        throw Object.assign(
+          new Error(`terminal recovery has no recorded pricing for model ${actualModel}`),
+          { code: 'CLAUDE_TERMINAL_RECOVERY_UNAVAILABLE' });
+      }
+      pricedModels.add(actualModel);
+      const item = record.message.usage;
+      totalCostUsd += priceClaudeUsage(item, rates);
+      const tokens = normalizeClaudeUsage(item);
+      usage.input_tokens += tokens.input;
+      usage.output_tokens += tokens.output;
+      usage.cache_creation_input_tokens += tokens.cacheWrite5m + tokens.cacheWrite1h;
+      usage.cache_read_input_tokens += tokens.cacheRead;
+    }
+    const result = transcriptContent(terminal.message)
+      .filter(content => content.type === 'text').map(content => content.text).join('\n');
+    matches.push({ is_error: false, session_id: sessionId, result,
+      total_cost_usd: totalCostUsd, num_turns: billed.size, usage,
+      terminal_recovery: { schemaVersion: 1, kind: 'terminal-transcript', marker,
+        transcript: basename(path), costSource: 'transcript-usage',
+        pricedModels: [...pricedModels].sort() } });
+  }
+  if (matches.length > 1) {
+    throw new Error('more than one active Claude transcript reached the completion marker');
+  }
+  return matches[0] ?? null;
+}
+
+export function runTranscriptAwareProcess({ command, args, input, env, timeoutMs,
+  transcriptDirectory, transcriptSnapshot, marker, model, resumeSession = null,
+  pricingRates = null,
+  exitGraceMs = 15_000, pollMs = 250, maxBuffer = 256 * 1024 * 1024,
+  terminate }: RunTranscriptAwareProcessOptions): Promise<TranscriptAwareProcessResult> {
+  return new Promise<TranscriptAwareProcessResult>(resolve => {
+    const child = spawn(command, args, { env, stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true });
+    const stdout: Buffer[] = [];
+    const stderr: Buffer[] = [];
+    let stdoutBytes = 0;
+    let stderrBytes = 0;
+    let error: unknown = null;
+    let recovered: RecoveredClaudeTerminalResult | null = null;
+    let recoveryError: unknown = null;
+    let terminalSeenAt: number | null = null;
+    let stopping = false;
+    const stop = (reason: string): void => {
+      if (stopping) return;
+      stopping = true;
+      Promise.resolve(terminate ? terminate(child, reason) : child.kill('SIGTERM'))
+        .catch(() => child.kill('SIGKILL'));
+    };
+    const append = (target: Buffer[], chunk: Buffer, stdoutStream: boolean): void => {
+      target.push(chunk);
+      if (stdoutStream) stdoutBytes += chunk.length; else stderrBytes += chunk.length;
+      if (stdoutBytes + stderrBytes > maxBuffer && !error) {
+        error = Object.assign(new Error('coding session output exceeded maxBuffer'), { code: 'ENOBUFS' });
+        stop('max-buffer');
+      }
+    };
+    child.stdout.on('data', chunk => append(stdout, chunk, true));
+    child.stderr.on('data', chunk => append(stderr, chunk, false));
+    child.once('error', value => { error = value; });
+    child.stdin.end(input ?? '');
+    const poll = setInterval(() => {
+      if (recovered) return;
+      if (recoveryError) {
+        if (terminalSeenAt !== null && Date.now() - terminalSeenAt >= exitGraceMs) {
+          stop('terminal-recovery-unavailable');
+        }
+        return;
+      }
+      try {
+        if (!hasCompletionMarker(transcriptDirectory, transcriptSnapshot, marker, resumeSession)) {
+          return;
+        }
+        const found = recoverClaudeTerminalResult({ directory: transcriptDirectory,
+          snapshot: transcriptSnapshot, marker, model, pricingRates, resumeSession });
+        if (!found) return;
+        if (terminalSeenAt === null) terminalSeenAt = Date.now();
+        if (Date.now() - terminalSeenAt >= exitGraceMs) {
+          recovered = found;
+          stop('terminal-transcript');
+        }
+      } catch (value) {
+        recoveryError = value;
+        if (isJsonObject(value) && value.code === 'CLAUDE_TERMINAL_RECOVERY_UNAVAILABLE') {
+          terminalSeenAt = Date.now();
+        }
+      }
+    }, pollMs);
+    const timeout = setTimeout(() => {
+      if (!error) error = Object.assign(new Error('coding session timed out'), { code: 'ETIMEDOUT' });
+      stop('timeout');
+    }, timeoutMs);
+    child.once('close', (status, signal) => {
+      clearInterval(poll);
+      clearTimeout(timeout);
+      const stdoutText = Buffer.concat(stdout).toString('utf8');
+      const stderrText = Buffer.concat(stderr).toString('utf8');
+      if (status === 0 && !error && parseCompleteClaudeCliResult(stdoutText)) {
+        resolve({ status, signal, stdout: stdoutText, stderr: stderrText, error: null });
+        return;
+      }
+      if (recovered) {
+        const cliResult = parseCompleteClaudeCliResult(stdoutText);
+        if (cliResult) {
+          const terminalRecovery: TerminalProcessRecoveryEvidence = {
+            schemaVersion: 1, kind: 'terminal-process', marker,
+            transcript: recovered.terminal_recovery.transcript, resultSource: 'cli-json' };
+          resolve({ status: 0, signal,
+            stdout: `${JSON.stringify({ ...cliResult, terminal_recovery: terminalRecovery })}\n`,
+            stderr: stderrText, error: null, terminalRecovery });
+          return;
+        }
+        resolve({ status: 0, signal, stdout: `${JSON.stringify(recovered)}\n`, stderr: stderrText,
+          error: null, terminalRecovery: recovered.terminal_recovery });
+        return;
+      }
+      if (recoveryError && !error && status !== 0) error = recoveryError;
+      resolve({ status, signal, stdout: stdoutText, stderr: stderrText, error });
+    });
+  });
+}
diff --git a/tools/stack-bench/src/agents/coding-session-retry.ts b/tools/stack-bench/src/agents/coding-session-retry.ts
new file mode 100644
index 00000000000..dd13ddc49df
--- /dev/null
+++ b/tools/stack-bench/src/agents/coding-session-retry.ts
@@ -0,0 +1,429 @@
+import { AGENT_COST_RECEIPT_TOLERANCE_USD, validateAgentCostReceipt }
+  from './agent-result-contract.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+interface CodingSessionResult {
+  api_error_status?: number | null;
+  terminal_reason?: string;
+  result?: string;
+  is_error?: boolean;
+  session_id?: string;
+  total_cost_usd?: number;
+  num_turns?: number;
+  usage?: UnknownRecord;
+  stack_bench_cost_receipt?: UnknownRecord;
+  stack_bench_credential_broker?: CodingSessionCredentialBroker;
+  stack_bench_resources?: unknown;
+  terminal_recovery?: unknown;
+}
+
+interface CodingSessionCredentialBroker {
+  endpointKind?: string;
+}
+
+interface CodingProcessError {
+  code?: string;
+  status?: number;
+  stdout?: unknown;
+  stderr?: unknown;
+}
+
+interface CodingProcessDiagnostic {
+  status?: unknown;
+  signal?: unknown;
+  cgroupMemory?: unknown;
+  container?: { ExitCode?: unknown; OOMKilled?: unknown };
+}
+
+interface ProviderSessionFailure {
+  code: 'provider-throttle' | 'provider-api-error' | 'credential-broker-unavailable'
+    | 'provider-connection-error' | 'provider-session-error';
+  status: number | null;
+}
+
+interface CodingSessionInterruption {
+  kind: 'provider-throttled' | 'provider-api-error' | 'credential-broker-unavailable'
+    | 'provider-connection-error' | 'coding-session-timeout' | 'coding-process-killed';
+  resumeSession: string | null;
+  recoverStoppedContainer: boolean;
+  terminalReason: string | null;
+  providerStatus: number | null;
+  diagnostic?: {
+    status: unknown;
+    signal: unknown;
+    containerExitCode: unknown;
+    oomKilled: unknown;
+  } | null;
+}
+
+interface RecordedCodingSessionInterruption extends CodingSessionInterruption {
+  invocation: number;
+  sessionId: string | null;
+  costUsd: number | null;
+  waitedMs?: number;
+}
+
+export interface CodingSessionInvocation {
+  input: string;
+  maxBudgetUsd: number | null;
+  resumeSession: string | null;
+  recoverStoppedContainer: boolean;
+  invocation: number;
+}
+
+interface CodingSessionRetryOptions {
+  invoke: (invocation: CodingSessionInvocation) => unknown;
+  prompt: string;
+  model: string;
+  retryLimit: number;
+  maxBudgetUsd?: number | null;
+  throttleMaxWaitMs?: number;
+  throttleJitterMs?: number;
+  sleep?: (milliseconds: number) => void;
+  log?: ((message: string) => void) | null;
+}
+
+interface AggregatedCodingSessionResult extends CodingSessionResult {
+  total_cost_usd: number;
+  num_turns: number;
+  usage: {
+    input_tokens: number;
+    output_tokens: number;
+    cache_creation_input_tokens: number;
+    cache_read_input_tokens: number;
+  };
+  stack_bench_cost_receipts: Array<{ invocation: number; receipt: unknown }>;
+}
+
+export interface CodingSessionRetryResult {
+  raw: string;
+  spawnError: string | null;
+  sessionResults: CodingSessionResult[];
+  interruptions: RecordedCodingSessionInterruption[];
+  throttle: {
+    waits: number;
+    waitedMs: number;
+    maxWaitMs: number;
+    jitterMs: number;
+  };
+  result: AggregatedCodingSessionResult;
+}
+
+const object = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function text(value: unknown): string {
+  return Buffer.isBuffer(value) ? value.toString('utf8') : String(value ?? '');
+}
+
+// Throttling consumes wait time, not interruption retries.
+const THROTTLE_STATUSES = new Set([429, 529]);
+const TRANSIENT_API_STATUSES = new Set([500, 502, 503, 504]);
+const THROTTLE_DELAYS_MS = [60_000, 120_000, 300_000, 600_000];
+export const DEFAULT_THROTTLE_MAX_WAIT_MS = 15 * 60_000;
+
+export function providerSessionFailure(
+  result: CodingSessionResult | null | undefined,
+): ProviderSessionFailure | null {
+  const status = result?.api_error_status ?? null;
+  if (result?.terminal_reason === 'api_error' && status !== null
+    && THROTTLE_STATUSES.has(status)) {
+    return { code: 'provider-throttle', status };
+  }
+  if (result?.terminal_reason === 'api_error' && status !== null
+    && TRANSIENT_API_STATUSES.has(status)) {
+    return { code: 'provider-api-error', status };
+  }
+  const detail = typeof result?.result === 'string' ? result.result : '';
+  if (result?.stack_bench_credential_broker?.endpointKind === 'local-credential-broker'
+    && /API Error:.*(?:Unable to connect to API|ConnectionRefused)/i.test(detail)) {
+    return { code: 'credential-broker-unavailable', status };
+  }
+  if (/API Error:.*(?:Unable to connect to API|ConnectionRefused)/i.test(detail)) {
+    return { code: 'provider-connection-error', status };
+  }
+  if (result?.terminal_reason === 'api_error') {
+    return { code: 'provider-session-error', status };
+  }
+  return null;
+}
+
+function synchronousSleep(ms: number): void {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+
+function codingSessionResult(value: unknown): CodingSessionResult | null {
+  if (!object(value)) return null;
+  if (value.api_error_status !== undefined && value.api_error_status !== null
+    && typeof value.api_error_status !== 'number') return null;
+  for (const key of ['terminal_reason', 'result', 'session_id'] as const) {
+    if (value[key] !== undefined && typeof value[key] !== 'string') return null;
+  }
+  if (value.is_error !== undefined && typeof value.is_error !== 'boolean') return null;
+  for (const key of ['total_cost_usd', 'num_turns'] as const) {
+    if (value[key] !== undefined && (!Number.isFinite(value[key]) || (value[key] as number) < 0)) {
+      return null;
+    }
+  }
+  if (value.usage !== undefined && !object(value.usage)) return null;
+  if (value.stack_bench_cost_receipt !== undefined
+    && !object(value.stack_bench_cost_receipt)) return null;
+  if (value.stack_bench_credential_broker !== undefined
+    && !object(value.stack_bench_credential_broker)) return null;
+  if (object(value.stack_bench_credential_broker)
+    && value.stack_bench_credential_broker.endpointKind !== undefined
+    && typeof value.stack_bench_credential_broker.endpointKind !== 'string') return null;
+  return value;
+}
+
+function parseResultLine(value: string): CodingSessionResult | null {
+  try { return codingSessionResult(JSON.parse(value)); } catch { return null; }
+}
+
+export function parseCodingSessionResult(raw: unknown): CodingSessionResult | null {
+  const value = text(raw).trim();
+  if (!value) return null;
+  const whole = parseResultLine(value);
+  if (whole) return whole;
+  for (const line of value.split(/\r?\n/).reverse()) {
+    const result = parseResultLine(line);
+    if (result) return result;
+  }
+  return null;
+}
+
+function codingProcessDiagnostic(
+  error: CodingProcessError | null | undefined,
+): CodingProcessDiagnostic | null {
+  const line = text(error?.stderr).split(/\r?\n/)
+    .find(item => item.startsWith('STACK_BENCH_CODING_PROCESS_DIAGNOSTIC '));
+  if (!line) return null;
+  try {
+    const parsed: unknown = JSON.parse(
+      line.slice('STACK_BENCH_CODING_PROCESS_DIAGNOSTIC '.length));
+    return object(parsed) ? parsed : null;
+  }
+  catch { return null; }
+}
+
+function completeBrokerReceiptCost(result: CodingSessionResult | null, model: string): number | null {
+  const resultCostUsd = result?.total_cost_usd;
+  if (typeof resultCostUsd !== 'number' || !Number.isFinite(resultCostUsd) || resultCostUsd < 0) {
+    return null;
+  }
+  try {
+    const receipt = validateAgentCostReceipt(result?.stack_bench_cost_receipt, model,
+      'coding session cost receipt');
+    return receipt.complete && receipt.reconciled && receipt.error === null
+      && Math.abs(receipt.costUsd - resultCostUsd) <= AGENT_COST_RECEIPT_TOLERANCE_USD
+      ? receipt.costUsd : null;
+  } catch { return null; }
+}
+
+export function codingSessionInterruption(
+  error: CodingProcessError | null,
+  result: CodingSessionResult | null,
+): CodingSessionInterruption | null {
+  const apiStatus = result?.api_error_status ?? null;
+  if (result?.terminal_reason === 'api_error' && apiStatus !== null
+    && THROTTLE_STATUSES.has(apiStatus)) {
+    // A throttled first request has no session yet; a null resumeSession makes
+    // the retry restart from the existing files instead of resuming.
+    return { kind: 'provider-throttled',
+      resumeSession: typeof result.session_id === 'string' && result.session_id
+        ? result.session_id : null,
+      recoverStoppedContainer: false, terminalReason: 'api_error',
+      providerStatus: apiStatus };
+  }
+  if (result?.terminal_reason === 'api_error' && apiStatus !== null
+    && TRANSIENT_API_STATUSES.has(apiStatus)
+    && typeof result.session_id === 'string' && result.session_id) {
+    return { kind: 'provider-api-error', resumeSession: result.session_id,
+      recoverStoppedContainer: false, terminalReason: 'api_error',
+      providerStatus: result.api_error_status ?? null };
+  }
+  const providerFailure = providerSessionFailure(result);
+  if (providerFailure?.code === 'credential-broker-unavailable'
+    && result && typeof result.session_id === 'string' && result.session_id) {
+    return { kind: 'credential-broker-unavailable', resumeSession: result.session_id,
+      recoverStoppedContainer: false, terminalReason: result.terminal_reason ?? null,
+      providerStatus: null };
+  }
+  if (providerFailure?.code === 'provider-connection-error'
+    && result && typeof result.session_id === 'string' && result.session_id) {
+    return { kind: 'provider-connection-error', resumeSession: result.session_id,
+      recoverStoppedContainer: false, terminalReason: result.terminal_reason ?? null,
+      providerStatus: providerFailure.status };
+  }
+  if (error?.code === 'ETIMEDOUT') {
+    return { kind: 'coding-session-timeout', resumeSession: null,
+      recoverStoppedContainer: false, terminalReason: null, providerStatus: null };
+  }
+  if (error?.status !== 137) return null;
+  const diagnostic = codingProcessDiagnostic(error);
+  const memory = String(diagnostic?.cgroupMemory ?? '');
+  const oomEvent = /(?:^|\n)oom(?:_kill)?\s+[1-9]\d*(?:\n|$)/m.test(memory);
+  if (diagnostic?.container?.OOMKilled === true || oomEvent) return null;
+  return { kind: 'coding-process-killed', resumeSession: null,
+    recoverStoppedContainer: true, terminalReason: null, providerStatus: null,
+    diagnostic: diagnostic ? {
+      status: diagnostic.status ?? null,
+      signal: diagnostic.signal ?? null,
+      containerExitCode: diagnostic.container?.ExitCode ?? null,
+      oomKilled: diagnostic.container?.OOMKilled ?? null,
+    } : null };
+}
+
+export function aggregateCodingSessionResults(
+  results: Array<CodingSessionResult | null | undefined>,
+): AggregatedCodingSessionResult {
+  const sessions = results.filter((result): result is CodingSessionResult => Boolean(result));
+  const last = sessions.at(-1) ?? {};
+  const usage = { input_tokens: 0, output_tokens: 0,
+    cache_creation_input_tokens: 0, cache_read_input_tokens: 0 };
+  const usageKeys = ['input_tokens', 'output_tokens', 'cache_creation_input_tokens',
+    'cache_read_input_tokens'] as const;
+  for (const result of sessions) {
+    for (const key of usageKeys) usage[key] += Number(result.usage?.[key] ?? 0);
+  }
+  return {
+    ...last,
+    total_cost_usd: sessions.reduce((sum, item) => sum + Number(item.total_cost_usd ?? 0), 0),
+    num_turns: sessions.reduce((sum, item) => sum + Number(item.num_turns ?? 0), 0),
+    usage,
+    stack_bench_cost_receipts: sessions.flatMap((item, index) =>
+      item.stack_bench_cost_receipt
+        ? [{ invocation: index + 1, receipt: structuredClone(item.stack_bench_cost_receipt) }]
+        : []),
+  };
+}
+
+export function codingSessionFailure(error: CodingProcessError): string {
+  const status = Number.isInteger(error?.status) ? `exit ${error.status}` : null;
+  const code = typeof error?.code === 'string' && error.code ? error.code : null;
+  const reason = code ?? status ?? 'nonzero exit';
+  const stderr = Buffer.isBuffer(error?.stderr)
+    ? error.stderr.toString('utf8') : String(error?.stderr ?? '');
+  const stdout = Buffer.isBuffer(error?.stdout)
+    ? error.stdout.toString('utf8') : String(error?.stdout ?? '');
+  const stdoutTail = stdout.trim().slice(-2000);
+  const stderrTail = stderr.trim().slice(-4000);
+  const killed = error?.status === 137
+    ? ' — process was forcibly killed; use the retained coding-process diagnostic to distinguish memory pressure from another kill'
+    : '';
+  return `coding session failed (${reason})${killed}`
+    + `${stdoutTail ? `\ninner stdout tail:\n${stdoutTail}` : ''}`
+    + `${stderrTail ? `\ninner stderr tail:\n${stderrTail}` : ''}`;
+}
+
+export function runCodingSessionWithRetries({ invoke, prompt, model, retryLimit, maxBudgetUsd = null,
+  throttleMaxWaitMs = DEFAULT_THROTTLE_MAX_WAIT_MS, throttleJitterMs = 0,
+  sleep = synchronousSleep, log = null }: CodingSessionRetryOptions): CodingSessionRetryResult {
+  if (typeof invoke !== 'function') throw new Error('coding session invoke function is required');
+  if (typeof model !== 'string' || !model) throw new Error('coding session model is required');
+  if (!Number.isInteger(retryLimit) || retryLimit < 0 || retryLimit > 3) {
+    throw new Error('coding interruption retry limit must be an integer from 0 to 3');
+  }
+  if (!Number.isInteger(throttleMaxWaitMs) || throttleMaxWaitMs < 0) {
+    throw new Error('provider throttle wait budget must be a non-negative integer of milliseconds');
+  }
+  if (!Number.isInteger(throttleJitterMs) || throttleJitterMs < 0 || throttleJitterMs > 60_000) {
+    throw new Error('provider throttle jitter must be an integer from 0 to 60000 milliseconds');
+  }
+  const say = log ?? ((message: string) => console.error(message));
+  let raw = '';
+  let spawnError: string | null = null;
+  const sessionResults: CodingSessionResult[] = [];
+  const interruptions: RecordedCodingSessionInterruption[] = [];
+  let resumeSession: string | null = null;
+  let recoverStoppedContainer = false;
+  // Track interruption attempts and throttle time separately.
+  let interruptionRetries = 0;
+  let throttleWaits = 0;
+  let throttleWaitedMs = 0;
+  for (let invocation = 0; ; invocation++) {
+    const priorCost = sessionResults.reduce((sum, item) =>
+      sum + Number(item.total_cost_usd ?? 0), 0);
+    const invocationBudget = maxBudgetUsd == null ? null
+      : Number((maxBudgetUsd - priorCost).toFixed(6));
+    if (invocationBudget !== null && invocationBudget <= 0) {
+      spawnError = `coding session exhausted its $${maxBudgetUsd} cost cap before recovery`;
+      break;
+    }
+    const input = resumeSession
+      ? 'The provider interrupted the previous response. Continue the same task from the existing files. '
+        + 'Verify the application is running and finish with the completion marker requested earlier.'
+      : invocation === 0 ? prompt
+        : 'A prior coding process was terminated. Continue this task from the existing files; do not start over.\n\n'
+          + prompt;
+    let error: CodingProcessError | null = null;
+    try {
+      raw = text(invoke({ input, maxBudgetUsd: invocationBudget, resumeSession,
+        recoverStoppedContainer, invocation }));
+    } catch (err) {
+      error = object(err) ? err : {};
+      raw = text(error.stdout);
+    }
+    const result = parseCodingSessionResult(raw);
+    if (result) sessionResults.push(result);
+    if (!error && result?.is_error === false) break;
+    const interruption = codingSessionInterruption(error, result);
+    const receiptCostUsd = completeBrokerReceiptCost(result, model);
+    if (interruption?.kind === 'credential-broker-unavailable') {
+      interruptions.push({ ...interruption, invocation: invocation + 1,
+        sessionId: result?.session_id ?? null, costUsd: receiptCostUsd });
+      spawnError = receiptCostUsd === null
+        ? 'local credential broker failed without a complete reconciled cost receipt; automatic recovery is disabled'
+        : 'local credential broker failed; automatic recovery is disabled';
+      break;
+    }
+    if (maxBudgetUsd !== null && interruption && receiptCostUsd === null) {
+      interruptions.push({ ...interruption, invocation: invocation + 1,
+        sessionId: result?.session_id ?? null, costUsd: null });
+      spawnError = 'coding session was interrupted without a complete reconciled broker cost receipt; automatic recovery is disabled';
+      break;
+    }
+    if (interruption?.kind === 'provider-throttled') {
+      const delay = THROTTLE_DELAYS_MS[
+        Math.min(throttleWaits, THROTTLE_DELAYS_MS.length - 1)]! + throttleJitterMs;
+      if (throttleWaitedMs + delay > throttleMaxWaitMs) {
+        spawnError = `provider stayed throttled (status ${interruption.providerStatus}) after `
+          + `${Math.round(throttleWaitedMs / 60_000)} minutes of waiting across `
+          + `${throttleWaits} retry attempt(s)`;
+        break;
+      }
+      say(`provider throttled (status ${interruption.providerStatus}); waiting `
+        + `${Math.round(delay / 1000)}s before `
+        + `${interruption.resumeSession ? `resuming session ${interruption.resumeSession}`
+          : 'restarting the coding session'} `
+        + `(${Math.round((throttleWaitedMs + delay) / 60_000)} of `
+        + `${Math.round(throttleMaxWaitMs / 60_000)} wait minutes used)`);
+      sleep(delay);
+      throttleWaits += 1;
+      throttleWaitedMs += delay;
+      interruptions.push({ ...interruption, invocation: invocation + 1,
+        sessionId: result?.session_id ?? null, waitedMs: delay,
+        costUsd: Number((result?.total_cost_usd ?? 0).toFixed(6)) });
+      resumeSession = interruption.resumeSession;
+      recoverStoppedContainer = interruption.recoverStoppedContainer;
+      continue;
+    }
+    if (!interruption || interruptionRetries === retryLimit) {
+      spawnError = codingSessionFailure(error ?? {
+        status: 1, stdout: raw, stderr: result?.result ?? 'coding session reported failure',
+      });
+      break;
+    }
+    interruptionRetries += 1;
+    interruptions.push({ ...interruption, invocation: invocation + 1,
+      sessionId: result?.session_id ?? null,
+      costUsd: Number((result?.total_cost_usd ?? 0).toFixed(6)) });
+    resumeSession = interruption.resumeSession;
+    recoverStoppedContainer = interruption.recoverStoppedContainer;
+  }
+  return { raw, spawnError, sessionResults, interruptions,
+    throttle: { waits: throttleWaits, waitedMs: throttleWaitedMs,
+      maxWaitMs: throttleMaxWaitMs, jitterMs: throttleJitterMs },
+    result: aggregateCodingSessionResults(sessionResults) };
+}
diff --git a/tools/stack-bench/src/agents/coding-session-timeouts.ts b/tools/stack-bench/src/agents/coding-session-timeouts.ts
new file mode 100644
index 00000000000..cb19cf4ac57
--- /dev/null
+++ b/tools/stack-bench/src/agents/coding-session-timeouts.ts
@@ -0,0 +1,3 @@
+// A coding turn includes installation, implementation, and local verification.
+export const CODING_SESSION_TIMEOUT_MS = 120 * 60_000;
+export const AGENT_PROCESS_TIMEOUT_MS = CODING_SESSION_TIMEOUT_MS + 3 * 60_000;
diff --git a/tools/stack-bench/src/agents/transcript-archive.ts b/tools/stack-bench/src/agents/transcript-archive.ts
new file mode 100644
index 00000000000..9bb2ac65468
--- /dev/null
+++ b/tools/stack-bench/src/agents/transcript-archive.ts
@@ -0,0 +1,51 @@
+import { copyFileSync, existsSync, mkdirSync, readdirSync, statSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+
+import { STACK_BENCH_ROOT } from '../package-root.js';
+import { stackBenchResultsRoot } from '../runtime/operational-paths.js';
+
+function transcriptStoreFor(appDirectory: string, storeRoot: string): string | null {
+  if (!existsSync(storeRoot)) return null;
+  const expected = resolve(appDirectory).replace(/[\\/:]/g, '-').toLowerCase();
+  const match = readdirSync(storeRoot).find(directory => {
+    const normalized = directory.toLowerCase();
+    return normalized === expected || normalized === expected.replace(/^-+/, '');
+  });
+  return match ? join(storeRoot, match) : null;
+}
+
+function collectTranscripts(directory: string, output: string[] = []): string[] {
+  for (const entry of readdirSync(directory, { withFileTypes: true })) {
+    const path = join(directory, entry.name);
+    if (entry.isDirectory()) collectTranscripts(path, output);
+    else if (entry.isFile() && entry.name.endsWith('.jsonl')) output.push(path);
+  }
+  return output;
+}
+
+export function archiveTranscripts(appDirectory: string, label: string,
+  outputDirectory = join(stackBenchResultsRoot(STACK_BENCH_ROOT), 'transcripts'),
+  storeRoot = join(homedir(), '.claude', 'projects')) {
+  mkdirSync(outputDirectory, { recursive: true });
+  const store = transcriptStoreFor(appDirectory, storeRoot);
+  if (!store) {
+    console.log(`  ${label}: NO TRANSCRIPT in the CLI store — already pruned, or never run`);
+    return { copied: 0, missing: 1, outputDirectory };
+  }
+
+  const destination = join(outputDirectory, label);
+  mkdirSync(destination, { recursive: true });
+  let copied = 0;
+  for (const source of collectTranscripts(store)) {
+    const relativeName = source.slice(store.length + 1).replace(/[\\/]/g, '__');
+    const target = join(destination, relativeName);
+    const sourceSize = statSync(source).size;
+    if (existsSync(target) && statSync(target).size >= sourceSize) continue;
+    copyFileSync(source, target);
+    copied += 1;
+    console.log(`  ${label}/${relativeName}  (${(sourceSize / 1024 / 1024).toFixed(1)} MB)`);
+  }
+  console.log(`\n${copied} transcript(s) archived to ${outputDirectory}`);
+  return { copied, missing: 0, outputDirectory };
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-admission.ts b/tools/stack-bench/src/campaigns/campaign-admission.ts
new file mode 100644
index 00000000000..af3e66c9b15
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-admission.ts
@@ -0,0 +1,448 @@
+import { randomUUID } from 'node:crypto';
+import { join, resolve } from 'node:path';
+import { z } from 'zod';
+
+import { AGENT_ADAPTER_REGISTRY } from '../agents/agent-adapters.js';
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import { DEFAULT_BUILD_IMAGE } from '../composition/product-config.js';
+import { loadTrack, portsFor, RUN_INDEX_CAP } from '../composition/tracks.js';
+import { emptyArtifactIdentities, readArtifact, writeArtifact } from '../evidence/artifacts.js';
+import { existingResourceLockKeys, resourceLockScope,
+  DEFAULT_SPACETIME_SERVER_URI, loopbackHttpUri } from '../runtime/backend-lease.js';
+import { probeLoopbackPort, runPreflight } from '../runtime/preflight.js';
+import type { PreflightReport } from '../runtime/preflight.js';
+import { STACK_ADAPTER_REGISTRY } from '../stacks/stack-adapters.js';
+import type { CompiledCampaignPlan } from './campaign-compiler.js';
+import type { RequestedScope } from './condition-compiler.js';
+import { campaignChildPath as contained } from './campaign-path.js';
+import { campaignExecutionEnvironment, campaignSlotEnvironment } from './campaign-runtime.js';
+import { formatZodError } from '../zod-error.js';
+import { listRunningCodingContainers } from '../../container/reconcile-build-container.js';
+
+const SMOKE_REUSE_MS = 15 * 60_000;
+type UnknownRecord = Record<string, unknown>;
+type AdmissionStatus = 'pass' | 'warn' | 'fail';
+
+interface CampaignAdmissionCheck {
+  id: string;
+  status: AdmissionStatus;
+  summary: string;
+}
+
+interface CampaignAdmissionReportRequest extends UnknownRecord {
+  agentAdapter: string;
+  runIndex: number;
+  backends: string[];
+  image: unknown;
+}
+
+interface CampaignAdmissionReport extends UnknownRecord {
+  schemaVersion: number;
+  ok: boolean;
+  request: CampaignAdmissionReportRequest;
+  checks: CampaignAdmissionCheck[];
+  summary: { passed: number; failed: number; warnings: number };
+}
+
+export interface CampaignAdmission extends UnknownRecord {
+  schemaVersion: number;
+  campaignId: string;
+  campaignSha256: string;
+  createdAt: string;
+  ok: boolean;
+  runtime: unknown;
+  agents: unknown;
+  conditions: unknown;
+  reports: CampaignAdmissionReport[];
+}
+
+export interface CampaignAdmissionPreflightRequest extends UnknownRecord {
+  backends: string[];
+  track: string;
+  levels: string;
+  levelList: number[];
+  runIndex: number;
+  parallelism: number;
+  agentAdapter: string;
+  guidance: string;
+  agentSkills: string[];
+  packIds: string[];
+  checkKeys: string[];
+  requestedScopes: RequestedScope[];
+  featureCatalog: CompiledCampaignPlan['featureCatalog'];
+  mode: CompiledCampaignPlan['definition']['mode'];
+  smoke: boolean;
+  image: string;
+  resultsDir: string;
+}
+
+export interface CampaignAdmissionResult {
+  id: string;
+  path: string;
+  payload: CampaignAdmission;
+  runIndices: number[];
+}
+
+interface CampaignAdmissionPlan {
+  id: string;
+  contentSha256: string;
+  definition: {
+    runtime: { buildImage: string | null };
+    track: string;
+    levels: unknown;
+    selection: { packs?: unknown; checks?: unknown };
+  };
+  agents: Array<{ adapter: string; model: string; identity: unknown }>;
+  conditions: unknown;
+  stacks: Array<{ id: string }>;
+  summary: { parallelism: number };
+}
+
+export interface CampaignAdmissionSmokeInput {
+  ok: boolean;
+  createdAt: string;
+  reports: Array<{
+    ok: boolean;
+    request: {
+      agentAdapter: string;
+      runIndex: number;
+      backends: string[];
+      image: unknown;
+    };
+    checks: Array<{ id: string; status: string; summary?: string }>;
+  }>;
+}
+
+export interface CampaignAdmissionSmokeRequest {
+  agentAdapter: string;
+  runIndex: number;
+  backend: string;
+  image: unknown;
+}
+
+export type CampaignAdmissionSmokeReuse =
+  | { reusable: false; reason: string }
+  | { reusable: true; reason: null; createdAt: string };
+
+const object = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+const admissionCheckSchema = z.looseObject({
+  id: z.string(),
+  status: z.enum(['pass', 'warn', 'fail']),
+  summary: z.string(),
+});
+const admissionReportSchema = z.looseObject({
+  schemaVersion: z.literal(1),
+  ok: z.boolean(),
+  request: z.looseObject({
+    agentAdapter: z.string(),
+    runIndex: z.number(),
+    backends: z.array(z.string()),
+    image: z.unknown(),
+  }),
+  checks: z.array(admissionCheckSchema),
+  summary: z.looseObject({ passed: z.number(), failed: z.number(), warnings: z.number() }),
+});
+const campaignAdmissionSchema = z.strictObject({
+  schemaVersion: z.literal(1),
+  campaignId: z.string(),
+  campaignSha256: z.string(),
+  createdAt: z.iso.datetime(),
+  ok: z.boolean(),
+  runtime: z.unknown(),
+  agents: z.unknown(),
+  conditions: z.unknown(),
+  reports: z.array(admissionReportSchema),
+});
+
+function validReport(value: unknown): value is CampaignAdmissionReport {
+  const parsed = admissionReportSchema.safeParse(value);
+  if (!parsed.success) return false;
+  const { checks, summary } = parsed.data;
+  return summary.passed === checks.filter(check => check.status === 'pass').length
+    && summary.failed === checks.filter(check => check.status === 'fail').length
+    && summary.warnings === checks.filter(check => check.status === 'warn').length
+    && parsed.data.ok === !checks.some(check => check.status === 'fail');
+}
+
+export function validateCampaignAdmission(
+  input: unknown,
+  plan: CampaignAdmissionPlan,
+  directory: string,
+): CampaignAdmission {
+  const parsed = campaignAdmissionSchema.safeParse(input);
+  if (!parsed.success) throw new Error(formatZodError(parsed.error, 'campaign admission'));
+  const admission = parsed.data;
+  if (admission.campaignId !== plan.id || admission.campaignSha256 !== plan.contentSha256) {
+    throw new Error('campaign admission identity or metadata is invalid');
+  }
+  if (canonicalDefinitionJson(admission.runtime) !== canonicalDefinitionJson(plan.definition.runtime)) {
+    throw new Error('campaign admission runtime does not match the compiled plan');
+  }
+  const expectedAgents = plan.agents.map(agent => ({ adapter: agent.adapter, model: agent.model,
+    identity: agent.identity }));
+  if (canonicalDefinitionJson(admission.agents) !== canonicalDefinitionJson(expectedAgents)) {
+    throw new Error('campaign admission agents do not match the compiled plan');
+  }
+  if (canonicalDefinitionJson(admission.conditions) !== canonicalDefinitionJson(plan.conditions)) {
+    throw new Error('campaign admission conditions do not match the compiled plan');
+  }
+  const adapters = [...new Set(plan.agents.map(agent => agent.adapter))].sort();
+  const runIndices = [...new Set(admission.reports.map(report => report.request.runIndex))]
+    .sort((a, b) => a - b);
+  if (runIndices.length !== plan.summary.parallelism
+    || runIndices.some(index => !Number.isInteger(index) || index < 0 || index > RUN_INDEX_CAP)) {
+    throw new Error('campaign admission run slots are incomplete or invalid');
+  }
+  if (admission.reports.length !== adapters.length * plan.summary.parallelism) {
+    throw new Error('campaign admission reports are incomplete');
+  }
+  const expectedBackends = plan.stacks.map(stack => stack.id);
+  const expectedResultsDir = resolve(directory);
+  for (const adapter of adapters) {
+    for (const runIndex of runIndices) {
+      const matches = admission.reports.filter(report => report.request.agentAdapter === adapter
+        && report.request.runIndex === runIndex);
+      if (matches.length !== 1) {
+        throw new Error(`campaign admission must contain one ${adapter} report for run slot ${runIndex}`);
+      }
+      const report = matches[0]!;
+      if (!validReport(report)) throw new Error(`campaign admission report for ${adapter} is malformed`);
+      const request = report.request;
+      if (canonicalDefinitionJson(request.backends) !== canonicalDefinitionJson(expectedBackends)
+        || request.track !== plan.definition.track
+        || canonicalDefinitionJson(request.levels) !== canonicalDefinitionJson(plan.definition.levels)
+        || request.runIndex !== runIndex
+        || request.parallelism !== plan.summary.parallelism
+        || canonicalDefinitionJson(request.packs)
+          !== canonicalDefinitionJson(plan.definition.selection.packs ?? [])
+        || canonicalDefinitionJson(request.checks)
+          !== canonicalDefinitionJson(plan.definition.selection.checks ?? [])
+        || request.smoke !== true
+        || (plan.definition.runtime.buildImage !== null
+          && request.image !== plan.definition.runtime.buildImage)
+        || typeof request.resultsDir !== 'string'
+        || resolve(request.resultsDir) !== expectedResultsDir) {
+        throw new Error(`campaign admission report for ${adapter} does not match the compiled scope`);
+      }
+    }
+  }
+  if (admission.ok !== admission.reports.every(report => report.ok)) {
+    throw new Error('campaign admission verdict does not match its reports');
+  }
+  return admission as CampaignAdmission;
+}
+
+// Until the cross-run isolation test passes, coding containers share one
+// network: one coding run at a time on the runner, across every campaign,
+// for the whole attempt from build through final grade. A stack-bench
+// coding container that is still running belongs to such an attempt.
+function refuseConcurrentCodingRuns(plan: CompiledCampaignPlan,
+  running: readonly string[]): void {
+  if (plan.summary.parallelism > 1) {
+    throw new Error(`parallelism ${plan.summary.parallelism} is refused until the cross-run `
+      + 'isolation test passes; compile the campaign with parallelism 1');
+  }
+  if (running.length) {
+    throw new Error(`another coding run is active on this runner (${running.join(', ')}); `
+      + 'one coding run at a time until the cross-run isolation test passes');
+  }
+}
+
+function availableRunIndices(plan: CompiledCampaignPlan, env: NodeJS.ProcessEnv,
+  probePort: (port: number | string) => { free: boolean }): number[] {
+  const track = loadTrack(plan.definition.track);
+  const lockRoot = resourceLockScope(env).root;
+  const selected: number[] = [];
+  for (let runIndex = 0; runIndex <= RUN_INDEX_CAP; runIndex += 1) {
+    const lockKeys = plan.stacks.map(stack =>
+      `slot:${plan.definition.track}:${stack.id}:run${runIndex}`);
+    if (existingResourceLockKeys({ root: lockRoot, keys: lockKeys }).length) continue;
+    const ports = new Set(plan.stacks.flatMap(stack => {
+      const assigned = portsFor(track, stack.id, runIndex);
+      return [assigned.vite, assigned.express].filter((port): port is number =>
+        typeof port === 'number');
+    }));
+    if (plan.stacks.some(stack => stack.id === 'spacetime')) {
+      const base = loopbackHttpUri(env.STACK_BENCH_STDB_URI ?? DEFAULT_SPACETIME_SERVER_URI);
+      ports.add(Number(base.port) + runIndex);
+    }
+    if ([...ports].every(port => probePort(port).free)) selected.push(runIndex);
+    if (selected.length === plan.summary.parallelism) return selected;
+  }
+  throw new Error(`only ${selected.length} of ${plan.summary.parallelism} required run slots are free`);
+}
+
+export function readCampaignAdmission(
+  directory: string,
+  id: string,
+  plan: CampaignAdmissionPlan,
+): CampaignAdmission {
+  const path = contained(directory, join('admissions', `${id}.json`), 'campaign admission');
+  const artifact = readArtifact(path, { expectedKind: 'campaign_admission', expectedId: id });
+  const experiment = artifact.identities.experiment;
+  if (!object(experiment) || experiment.sha256 !== plan.contentSha256) {
+    throw new Error(`campaign admission ${id} has the wrong experiment identity`);
+  }
+  return validateCampaignAdmission(artifact.payload, plan, directory);
+}
+
+const RESOURCE_FREE_REQUIREMENTS = Object.freeze({
+  docker: false,
+  services: false,
+  ports: false,
+  credentials: false,
+  providerAccess: false,
+});
+
+type AgentAdapter = ReturnType<typeof AGENT_ADAPTER_REGISTRY.get>;
+
+function hasNoAgentResources(agent: NonNullable<AgentAdapter>): boolean {
+  return agent.costLimit === 'non-billable'
+    && agent.apiKeyEnvironmentVariable === null
+    && agent.credentialEnvironmentVariables.length === 0
+    && agent.credentialFiles.length === 0
+    && agent.outboundDestinations.length === 0
+    && agent.requiredExecutables.length === 0
+    && agent.credentialStatusCommand === null;
+}
+
+function hasNoStackResources(stack: CompiledCampaignPlan['stacks'][number]): boolean {
+  const adapter = STACK_ADAPTER_REGISTRY.get(stack.id);
+  if (!('admission' in adapter)) return false;
+  return canonicalDefinitionJson(adapter.admission.requirements)
+    === canonicalDefinitionJson(RESOURCE_FREE_REQUIREMENTS);
+}
+
+export function campaignUsesNoExternalResources(plan: CompiledCampaignPlan): boolean {
+  return plan.stacks.every(hasNoStackResources)
+    && plan.agents.every(agent => {
+      const adapter = AGENT_ADAPTER_REGISTRY.get(agent.adapter);
+      return adapter ? hasNoAgentResources(adapter) : false;
+    });
+}
+
+function resourceFreeAdmissionReport(request: CampaignAdmissionPreflightRequest,
+  generatedAt: string): PreflightReport {
+  return {
+    schemaVersion: 1,
+    generatedAt,
+    request: {
+      backends: request.backends,
+      track: request.track,
+      levels: request.levelList,
+      runIndex: request.runIndex,
+      parallelism: request.parallelism,
+      agentAdapter: request.agentAdapter,
+      guidance: request.guidance,
+      packs: request.packIds,
+      checks: request.checkKeys,
+      recipe: request.recipe ?? null,
+      requestedScopeCount: request.requestedScopes?.length ?? 0,
+      image: request.image,
+      resultsDir: request.resultsDir,
+      agentSkills: request.agentSkills ?? null,
+      smoke: request.smoke,
+    },
+    ok: true,
+    summary: { passed: 1, failed: 0, warnings: 0 },
+    checks: [{ id: 'resources.none', status: 'pass',
+      summary: 'The selected stack and agent require no external resources' }],
+  };
+}
+
+export function runCampaignAdmission(plan: CompiledCampaignPlan, directory: string,
+  { env = process.env, preflight = runPreflight, now = new Date().toISOString(),
+    uuid = randomUUID, probePort = probeLoopbackPort,
+    codingContainers = listRunningCodingContainers }: {
+      env?: NodeJS.ProcessEnv;
+      codingContainers?: () => string[];
+      preflight?: (request: CampaignAdmissionPreflightRequest,
+        options?: { env: NodeJS.ProcessEnv }) => PreflightReport;
+      now?: string;
+      uuid?: () => string;
+      probePort?: (port: number | string) => { free: boolean };
+    } = {}): CampaignAdmissionResult {
+  const executionEnv = campaignExecutionEnvironment(plan, env);
+  const reports: PreflightReport[] = [];
+  const resourceFree = campaignUsesNoExternalResources(plan);
+  if (!resourceFree) refuseConcurrentCodingRuns(plan, codingContainers());
+  const runIndices = resourceFree
+    ? Array.from({ length: plan.summary.parallelism }, (_, index) => index)
+    : availableRunIndices(plan, executionEnv, probePort);
+  const guidanceModes = [...new Set(plan.conditions.map(condition => condition.guidance.mode))];
+  const agentSkills = [...new Set(plan.attempts.flatMap(attempt => attempt.skills))].sort();
+  for (const adapter of [...new Set(plan.agents.map(agent => agent.adapter))].sort()) {
+    for (const runIndex of runIndices) {
+      const request: CampaignAdmissionPreflightRequest = {
+        backends: plan.stacks.map(stack => stack.id),
+        track: plan.definition.track,
+        levels: `${Math.min(...plan.definition.levels)}-${Math.max(...plan.definition.levels)}`,
+        levelList: plan.definition.levels,
+        runIndex,
+        parallelism: plan.summary.parallelism,
+        agentAdapter: adapter,
+        guidance: guidanceModes.length === 1 ? guidanceModes[0]! : 'mixed',
+        agentSkills,
+        packIds: plan.definition.selection.packs ?? [],
+        checkKeys: plan.definition.selection.checks ?? [],
+        requestedScopes: plan.conditions.map(condition => condition.requested),
+        featureCatalog: plan.featureCatalog,
+        mode: plan.definition.mode,
+        smoke: true,
+        image: plan.definition.runtime.buildImage ?? executionEnv.STACK_BENCH_IMAGE
+          ?? DEFAULT_BUILD_IMAGE,
+        resultsDir: resolve(directory),
+      };
+      reports.push(resourceFree ? resourceFreeAdmissionReport(request, now) : preflight(request,
+        { env: campaignSlotEnvironment(executionEnv,
+          plan.stacks.some(stack => stack.id === 'spacetime') ? 'spacetime' : null, runIndex) }));
+    }
+  }
+  const id = `${plan.id}-admission-${now.replace(/[-:.TZ]/g, '').slice(0, 14)}-${uuid()}`;
+  const payload = validateCampaignAdmission({ schemaVersion: 1, campaignId: plan.id,
+    campaignSha256: plan.contentSha256, createdAt: now,
+    ok: reports.every(report => report.ok),
+    runtime: plan.definition.runtime,
+    agents: plan.agents.map(agent => ({ adapter: agent.adapter, model: agent.model,
+      identity: agent.identity })),
+    conditions: plan.conditions,
+    reports }, plan, directory);
+  const path = contained(directory, join('admissions', `${id}.json`), 'campaign admission');
+  writeArtifact(path, { kind: 'campaign_admission', id,
+    identities: emptyArtifactIdentities({ experiment: {
+      id: plan.id, version: plan.version, sha256: plan.contentSha256, state: plan.state,
+    } }), payload });
+  return { id, path, payload, runIndices };
+}
+
+export function campaignAdmissionSmokeReuse(
+  admission: CampaignAdmissionSmokeInput,
+  request: CampaignAdmissionSmokeRequest,
+  { now = Date.now(), maxAgeMs = SMOKE_REUSE_MS }: { now?: number; maxAgeMs?: number } = {},
+): CampaignAdmissionSmokeReuse {
+  if (admission.ok !== true) throw new Error('campaign admission did not pass');
+  const reports = admission.reports.filter(report =>
+    report.request.agentAdapter === request.agentAdapter
+    && report.request.runIndex === request.runIndex);
+  if (reports.length !== 1) throw new Error('campaign admission has no exact attempt report');
+  const report = reports[0]!;
+  if (report.ok !== true) throw new Error('campaign admission attempt report did not pass');
+  if (!report.request.backends.includes(request.backend)) {
+    throw new Error(`campaign admission does not cover stack ${request.backend}`);
+  }
+  if (report.request.image !== request.image) {
+    return { reusable: false, reason: 'build image changed after campaign admission' };
+  }
+  const createdAt = Date.parse(admission.createdAt);
+  const ageMs = now - createdAt;
+  if (!Number.isFinite(ageMs) || ageMs < -60_000 || ageMs > maxAgeMs) {
+    return { reusable: false, reason: 'campaign admission is not recent' };
+  }
+  const smoke = report.checks.find(check => check.id === 'smoke.container');
+  if (smoke?.status !== 'pass') {
+    return { reusable: false, reason: 'campaign admission has no passing container smoke check' };
+  }
+  return { reusable: true, reason: null, createdAt: admission.createdAt };
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-compiler.ts b/tools/stack-bench/src/campaigns/campaign-compiler.ts
new file mode 100644
index 00000000000..4f9fd644002
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-compiler.ts
@@ -0,0 +1,1234 @@
+import { readFileSync, realpathSync } from 'node:fs';
+import { isAbsolute, relative, resolve } from 'node:path';
+
+import { agentAdapterIdentity, AGENT_ADAPTER_REGISTRY } from '../agents/agent-adapters.js';
+import type { AgentAdapterIdentity } from '../agents/agent-adapters.js';
+import { resolveCalibrationForRelease } from '../composition/calibration-compiler.js';
+import { canonicalDefinitionJson, canonicalizeDefinition } from '../composition/definition-plan.js';
+import { currentEngineIdentity } from '../evidence/artifacts.js';
+import { sha256 } from '../evidence/provenance.js';
+import { PRICING_RATE_FIELDS, PRICING_UNIT, validatePricingRates }
+  from '../evidence/pricing-authority.js';
+import type { PricingRates } from '../evidence/pricing-authority.js';
+import { resolveRecipeRelease } from '../composition/recipe-release.js';
+import type { RecipeRelease } from '../composition/recipe-release.js';
+import { createBoundRecipeTaskRequest, createRecipeTaskRequest,
+  isModularRecipeTaskRequest } from '../composition/recipe-selection.js';
+import type { BoundRecipeTaskRequestResult,
+  ModularRecipeTaskRequestResult } from '../composition/recipe-selection.js';
+import type { RecipeBinding } from '../composition/recipe-release.js';
+import { compileDependencyPolicyInput, compileFeatureCatalogInput, progressionLevels,
+  selectFeatureCatalogLevels, validateDependencyPolicyInput, validateFeatureCatalogInput }
+  from '../progression/progression-definition.js';
+import type { CompiledDependencyPolicyDefinition, CompiledProgressionDefinition,
+  ProgressionInput } from '../progression/progression-definition.js';
+import type { ProgressionOwner } from '../progression/progression-state.js';
+import { STACK_BENCH_RUNNER_PLATFORM } from '../runtime/runner-environment.js';
+import { resolveProgressionRecipeLevelSelection, validateProgressionRecipeBindings }
+  from '../progression/progression-recipe-selection.js';
+import type { ProgressionRecipeSelections as ProgressionLevelSelection }
+  from '../progression/progression-recipe-selection.js';
+import { resolveFeatureCatalog } from '../progression/feature-catalog-selection.js';
+import { isExactSemanticVersion } from '../semantic-version.js';
+import { parseVersionedProgressionId } from '../progression/progression-identifiers.js';
+import { STACK_ADAPTER_REGISTRY } from '../stacks/stack-adapters.js';
+import type { StackAdapterIdentity } from '../stacks/stack-adapter-contract.js';
+import { listTracks, loadTrack, RUN_INDEX_CAP } from '../composition/tracks.js';
+import type { Track } from '../composition/tracks.js';
+import type { ConditionReference, ResolvedStudyCondition } from './condition-compiler.js';
+import { resolveStudyConditions, validateConditionReference } from './condition-compiler.js';
+import { describeStackTestabilityProblems, resolveStackTestability } from './stack-testability.js';
+import type { CampaignModeInput } from './campaign-mode.js';
+import { validateCampaignMode } from './campaign-mode.js';
+import type { DependencyWorkSelection }
+  from '../progression/dependency-definition.js';
+import { validateRepairPlan } from '../progression/repair-plan.js';
+import type { RepairPlan } from '../progression/repair-plan.js';
+
+type UnknownRecord = Record<string, unknown>;
+type CampaignState = 'draft' | 'frozen';
+type NonEmpty<T> = [T, ...T[]];
+type FeatureCatalogInput = ProgressionInput<CompiledProgressionDefinition>;
+type DependencyPolicyInput = ProgressionInput<CompiledDependencyPolicyDefinition>;
+
+interface CampaignMode extends CampaignModeInput {
+  workSelection?: DependencyWorkSelection;
+}
+
+export interface CampaignStackSelection {
+  id: string;
+  adapterVersion: string;
+  repetitions?: number;
+}
+
+export interface CampaignAgentSelection {
+  adapter: string;
+  adapterVersion: string;
+  model: string;
+}
+
+export interface CampaignLevelSelection {
+  level: number;
+  recipe: string;
+  features?: string[];
+  checks?: string[];
+}
+
+export interface CampaignSelection {
+  packs?: string[];
+  checks?: string[];
+  levels?: CampaignLevelSelection[];
+}
+
+export interface CampaignDefinition {
+  schemaVersion: number;
+  kind: 'campaign-manifest';
+  id: string;
+  version: string;
+  state: CampaignState;
+  title: string;
+  track: string;
+  mode: CampaignMode;
+  repair: RepairPlan;
+  levels: number[];
+  selection: CampaignSelection;
+  stacks: CampaignStackSelection[];
+  agents: CampaignAgentSelection[];
+  conditions: ConditionReference[];
+  repetitions: number;
+  ordering: { method: 'balanced-rotation'; seed: string };
+  parallelism: number;
+  budgets: {
+    attemptTimeoutMinutes: number;
+    maxCostUsdPerAttempt: number | null;
+  };
+  attemptPolicy: {
+    retries: number;
+    retryOn: string[];
+    excludeFromAnalysis: string[];
+  };
+  pricing: {
+    currency: 'USD';
+    unit: string;
+    capturedAt: string;
+    source: string;
+    models: Record<string, PricingRates>;
+  };
+  analysis: {
+    primaryMetric: string;
+    secondaryMetrics: string[];
+    dispersion: string;
+    invalidAttempts: 'report-separately';
+    missingData: 'no-imputation';
+    comparisonUnit: 'stack-agent-condition-recipe';
+  };
+  runtime: {
+    releaseManifestSha256: string | null;
+    controllerImage: string | null;
+    buildImage: string | null;
+    platform: typeof STACK_BENCH_RUNNER_PLATFORM;
+  };
+  featureCatalog?: string | FeatureCatalogInput['definition'];
+}
+
+interface Identity {
+  id: string;
+  version: string | null;
+  sha256: string | null;
+}
+
+interface RecipeIdentity extends UnknownRecord {
+  id: string;
+  version: string;
+  contentSha256: string;
+  meaningSha256: string;
+  executionSha256: string;
+}
+
+interface PublicBinding extends UnknownRecord {
+  level: number;
+  alias: string;
+  recipe: RecipeIdentity;
+  fixture: { id: string; version: string };
+  calibration: Identity | null;
+  selection: {
+    schemaVersion: number;
+    sha256: string;
+    completeness: string;
+    scoredPoints: number;
+    taskPacks: string[];
+    requested: unknown;
+  } | null;
+  task: {
+    sha256: string;
+    requirementSha256: string;
+    contractSha256: string;
+    requirementIds: string[];
+    contractIds: string[];
+  } | null;
+}
+
+interface BindingRecord {
+  level: number;
+  modular: CampaignLevelSelection | null;
+  binding: RecipeBinding;
+  calibration: ResolvedCalibration | null;
+  publicBinding: PublicBinding;
+  // The checks a pack selection grades; a modular selection resolves them per condition.
+  checkKeys: string[] | null;
+  qualificationStaleness: unknown[];
+}
+
+interface ResolvedCalibration {
+  id: string;
+  version: string;
+  state: string;
+  contentSha256: string;
+  qualificationSha256: string;
+  qualification: {
+    buildImage?: string;
+    stacks: Array<{ id: string; status: string }>;
+    checks?: string[];
+    featureCatalog?: { id: string; version: string; sha256: string };
+  };
+  qualificationStaleness: unknown[];
+}
+
+interface ResolvedStackIdentity extends UnknownRecord {
+  id: string;
+  version: string;
+  sha256: string | null;
+  state: string | null;
+}
+
+interface ResolvedAgent extends CampaignAgentSelection, UnknownRecord {
+  costLimit: string;
+  identity: AgentAdapterIdentity;
+}
+
+interface CampaignResolvedInputs {
+  bindings: PublicBinding[];
+  grading: CampaignGradingQualification;
+  stacks: ResolvedStackIdentity[];
+  agents: ResolvedAgent[];
+  conditions: ResolvedStudyCondition[];
+  featureCatalog: FeatureCatalogInput | null;
+  dependencyPolicy: DependencyPolicyInput | null;
+}
+
+export interface CampaignGradingQualification {
+  status: 'qualified' | 'pending';
+  levels: Array<{
+    level: number;
+    status: 'qualified' | 'pending';
+    reasons: string[];
+    evidenceSha256: string | null;
+  }>;
+}
+
+export interface CampaignAttemptPlan extends UnknownRecord {
+  id: string;
+  stack: string;
+  model: string;
+  guidance: string;
+  repetition: number;
+  order: number;
+  levels: number[];
+  agentAdapter: string;
+  skills: string[];
+  pricing: { unit: string; rates: PricingRates };
+  mode: CampaignMode;
+  condition: ResolvedStudyCondition;
+  featureCatalog?: FeatureCatalogInput['identity'];
+  dependencyPolicy?: DependencyPolicyInput['identity'];
+  parentAttemptId: string;
+}
+
+type ProgressionCampaign = Pick<CompiledCampaignPlan, 'id' | 'version' | 'contentSha256'> & {
+  definition: Pick<CampaignDefinition, 'track'>;
+};
+
+interface ProgressionAttempt {
+  id: string;
+  stack: string;
+  agentAdapter: string;
+  model: string;
+  condition: { sha256: string };
+}
+
+export function campaignProgressionOwner(plan: ProgressionCampaign, attempt: ProgressionAttempt,
+  { workspace = false }: { workspace?: boolean } = {}): ProgressionOwner {
+  return {
+    schemaVersion: 1,
+    campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+    attempt: {
+      id: attempt.id,
+      track: plan.definition.track,
+      stack: attempt.stack,
+      agentAdapter: attempt.agentAdapter,
+      model: attempt.model,
+      conditionSha256: attempt.condition.sha256,
+    },
+    ...(workspace ? { workspace: { appDirectory: 'source' } } : {}),
+  };
+}
+
+export interface CompiledCampaignPlan {
+  campaignSchemaVersion: number;
+  id: string;
+  version: string;
+  title: string;
+  state: CampaignState;
+  source: { sha256: string };
+  contentSha256: string;
+  definition: CampaignDefinition;
+  identities: { engine: Identity; [key: string]: unknown };
+  bindings: PublicBinding[];
+  stacks: ResolvedStackIdentity[];
+  agents: Array<CampaignAgentSelection & {
+    costLimit: string;
+    identity: AgentAdapterIdentity;
+  }>;
+  conditions: NonEmpty<ResolvedStudyCondition>;
+  attempts: NonEmpty<CampaignAttemptPlan>;
+  summary: {
+    attempts: number;
+    stacks: number;
+    agents: number;
+    conditions: number;
+    repetitions: number;
+    repetitionsByStack: Record<string, number>;
+    parallelism: number;
+  };
+  featureCatalog: FeatureCatalogInput | null;
+  dependencyPolicy: DependencyPolicyInput | null;
+}
+
+export type CalibrationResolver = (release: RecipeRelease, options: {
+  trackRoot: string; stackBenchRoot: string;
+}) => ResolvedCalibration | null;
+
+export type RecipeResolver = (
+  track: Track,
+  level: number,
+  requested?: string | null,
+) => RecipeBinding | null;
+
+export interface CompilerOptions {
+  stackBenchRoot?: string;
+  calibrationResolver?: CalibrationResolver;
+  recipeResolver?: RecipeResolver;
+}
+
+interface ValidationOptions {
+  requireCurrentInputs?: boolean;
+  calibrationResolver?: CalibrationResolver;
+  recipeResolver?: RecipeResolver;
+}
+
+export const CAMPAIGN_SCHEMA_VERSION = 7;
+import { STACK_BENCH_ROOT as ROOT } from '../package-root.js';
+const HASH = /^[a-f0-9]{64}$/;
+const ID = /^[a-z][a-z0-9]*(?:[.:-][a-z0-9]+)*$/;
+const ROOT_FIELDS = new Set(['schemaVersion', 'kind', 'id', 'version', 'state', 'title',
+  'track', 'mode', 'repair', 'levels', 'selection', 'stacks', 'agents', 'conditions', 'repetitions', 'ordering',
+  'parallelism', 'budgets', 'attemptPolicy', 'pricing', 'analysis', 'featureCatalog']);
+ROOT_FIELDS.add('runtime');
+const PACK_SELECTION_FIELDS = new Set(['packs', 'checks']);
+const MODULAR_SELECTION_FIELDS = new Set(['levels']);
+const MODULAR_LEVEL_FIELDS = new Set(['level', 'recipe', 'features', 'checks']);
+const PROGRESSION_LEVEL_FIELDS = new Set(['level', 'recipe']);
+const STACK_FIELDS = new Set(['id', 'adapterVersion', 'repetitions']);
+const AGENT_FIELDS = new Set(['adapter', 'adapterVersion', 'model']);
+const ORDERING_FIELDS = new Set(['method', 'seed']);
+const BUDGET_FIELDS = new Set(['attemptTimeoutMinutes', 'maxCostUsdPerAttempt']);
+const ATTEMPT_POLICY_FIELDS = new Set(['retries', 'retryOn', 'excludeFromAnalysis']);
+const PRICING_FIELDS = new Set(['currency', 'unit', 'capturedAt', 'source', 'models']);
+const PRICE_MODEL_FIELDS = new Set(PRICING_RATE_FIELDS);
+const ANALYSIS_FIELDS = new Set(['primaryMetric', 'secondaryMetrics', 'dispersion',
+  'invalidAttempts', 'missingData', 'comparisonUnit']);
+const RUNTIME_FIELDS = new Set(['releaseManifestSha256', 'controllerImage', 'buildImage', 'platform']);
+const RETRY_CAUSES = new Set(['provider_failure', 'harness_failure', 'inconclusive']);
+const EXCLUSION_CAUSES = new Set(['provider_failure', 'harness_failure', 'inconclusive',
+  'ungraded', 'contaminated']);
+const OUTCOME_METRICS = new Set(['firstBuildScoreRate', 'finalScoreRate', 'questlineAverageRate',
+  'totalCostUsd', 'totalTokens', 'totalDurationMs', 'repairs', 'correctionSuccessRate',
+  'correctionCostUsd', 'correctionSpendUsd', 'firstBuildCoverageRate', 'finalCoverageRate',
+  'invalidAttemptRate']);
+const DISPERSION = new Set(['median-iqr', 'mean-sd']);
+const IMAGE_DIGEST = /^[^\s@]+@sha256:[a-f0-9]{64}$/;
+const ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/;
+
+const object = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const requestedTaskMode = (request: UnknownRecord): string | undefined => {
+  const task = request.task;
+  if (task === null || typeof task !== 'object') return undefined;
+  const mode = Reflect.get(task, 'mode');
+  return typeof mode === 'string' ? mode : undefined;
+};
+
+function fail(at: string, message: string): never {
+  throw new Error(`invalid campaign at ${at}: ${message}`);
+}
+
+function strict<T>(value: T, at: string, fields: ReadonlySet<string>):
+  asserts value is T & UnknownRecord {
+  if (!object(value)) throw new Error(`invalid campaign at ${at}: must be an object`);
+  for (const key of Object.keys(value)) if (!fields.has(key)) fail(`${at}.${key}`, 'is unknown');
+}
+
+function string(value: unknown, at: string): string {
+  if (typeof value !== 'string' || !value.trim()) {
+    throw new Error(`invalid campaign at ${at}: must be a non-empty string`);
+  }
+  return value;
+}
+
+function identifier(value: unknown, at: string): string {
+  if (typeof value !== 'string' || !ID.test(value)) {
+    throw new Error(`invalid campaign at ${at}: is invalid`);
+  }
+  return value;
+}
+
+function version(value: unknown, at: string): string {
+  if (!isExactSemanticVersion(value)) {
+    throw new Error(`invalid campaign at ${at}: must be a semantic version`);
+  }
+  return value;
+}
+
+function integer(value: unknown, at: string, { min = 0, max = Number.MAX_SAFE_INTEGER }:
+  { min?: number; max?: number } = {}): number {
+  if (typeof value !== 'number' || !Number.isInteger(value) || value < min || value > max) {
+    throw new Error(`invalid campaign at ${at}: must be an integer from ${min} through ${max}`);
+  }
+  return value;
+}
+
+function finite(value: unknown, at: string, { min = 0 }: { min?: number } = {}): number {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value < min) {
+    throw new Error(`invalid campaign at ${at}: must be a number of at least ${min}`);
+  }
+  return value;
+}
+
+function exactArray<T>(value: unknown, at: string,
+  validate: (value: unknown, at: string) => T,
+  { nonEmpty = false, sort = false }: { nonEmpty?: boolean; sort?: boolean } = {}): T[] {
+  if (!Array.isArray(value)) {
+    throw new Error(`invalid campaign at ${at}: must be ${nonEmpty ? 'a non-empty' : 'an'} array`);
+  }
+  if (nonEmpty && value.length === 0) fail(at, 'must be a non-empty array');
+  const normalized = value.map((item, index) => validate(item, `${at}[${index}]`));
+  const keys = normalized.map(item => typeof item === 'string' ? item : canonicalDefinitionJson(item));
+  if (new Set(keys).size !== keys.length) fail(at, 'must not contain duplicates');
+  return sort ? normalized.sort((a, b) => canonicalDefinitionJson(a).localeCompare(canonicalDefinitionJson(b))) : normalized;
+}
+
+export function validateCampaignDefinition(input: unknown,
+  { source = '<campaign>' }: { source?: string } = {}): CampaignDefinition {
+  const cloned = structuredClone(input);
+  strict(cloned, source, ROOT_FIELDS);
+  const value = cloned as unknown as CampaignDefinition;
+  if (value.schemaVersion !== CAMPAIGN_SCHEMA_VERSION) fail(`${source}.schemaVersion`, 'is unsupported');
+  if (value.kind !== 'campaign-manifest') fail(`${source}.kind`, 'must be campaign-manifest');
+  identifier(value.id, `${source}.id`);
+  version(value.version, `${source}.version`);
+  if (!['draft', 'frozen'].includes(value.state)) fail(`${source}.state`, 'must be draft or frozen');
+  string(value.title, `${source}.title`);
+  identifier(value.track, `${source}.track`);
+  value.mode = validateCampaignMode(value.mode, { at: `${source}.mode` }) as CampaignMode;
+  value.repair = validateRepairPlan(value.repair, `${source}.repair`);
+  if (value.mode.id === 'sequential'
+    && (value.repair.selection !== 'batch'
+      || Object.keys(value.repair.budget).some(key => key !== 'total'))) {
+    fail(`${source}.repair`, 'sequential mode requires batch selection and one total budget');
+  }
+  if (value.mode.id === 'sequential' && value.repair.order !== 'declared') {
+    fail(`${source}.repair.order`, 'sequential mode has no feature order to shuffle');
+  }
+  if (value.mode.id === 'dependency' && value.featureCatalog === undefined) {
+    fail(`${source}.featureCatalog`, 'is required for dependency mode');
+  }
+  if (value.featureCatalog !== undefined) {
+    if (typeof value.featureCatalog === 'string') {
+      if (!parseVersionedProgressionId(value.featureCatalog)) {
+        fail(`${source}.featureCatalog`, 'must be an exact id@version reference');
+      }
+      value.levels = exactArray(value.levels, `${source}.levels`,
+        (level, at) => integer(level, at, { min: 1 }), { nonEmpty: true });
+    } else {
+      const featureCatalog = compileFeatureCatalogInput(value.featureCatalog);
+      value.featureCatalog = featureCatalog.definition;
+      const availableLevels = progressionLevels(featureCatalog);
+      value.levels ??= availableLevels;
+      value.levels = exactArray(value.levels, `${source}.levels`,
+        (level, at) => integer(level, at, { min: 1 }), { nonEmpty: true });
+      if (value.levels.some(level => !availableLevels.includes(level))) {
+        fail(`${source}.levels`, 'must exist in feature catalog');
+      }
+      if (value.levels.at(0) !== availableLevels.at(0)) {
+        fail(`${source}.levels`, 'must start at the first feature catalog level');
+      }
+    }
+  } else {
+    value.levels = exactArray(value.levels, `${source}.levels`,
+      (level, at) => integer(level, at, { min: 1 }), { nonEmpty: true });
+  }
+  for (let index = 1; index < value.levels.length; index += 1) {
+    if (value.levels[index] !== value.levels[index - 1]! + 1) {
+      fail(`${source}.levels`, 'must be ascending and contiguous');
+    }
+  }
+
+  const modularSelection = object(value.selection)
+    && Object.hasOwn(value.selection, 'levels');
+  if (value.featureCatalog && !modularSelection) {
+    fail(`${source}.selection`, 'feature catalog campaigns require recipe bindings by level');
+  }
+  strict(value.selection, `${source}.selection`,
+    modularSelection ? MODULAR_SELECTION_FIELDS : PACK_SELECTION_FIELDS);
+  if (modularSelection) {
+    value.selection.levels = exactArray(value.selection.levels, `${source}.selection.levels`,
+      (entry, at): CampaignLevelSelection => {
+        strict(entry, at, value.featureCatalog ? PROGRESSION_LEVEL_FIELDS : MODULAR_LEVEL_FIELDS);
+        integer(entry.level, `${at}.level`, { min: 1 });
+        if (typeof entry.recipe !== 'string'
+          || !/^[a-z][a-z0-9]*(?:[.:-][a-z0-9]+)*@\d+\.\d+\.\d+$/.test(entry.recipe)) {
+          fail(`${at}.recipe`, 'must be an exact id@version reference');
+        }
+        if (!value.featureCatalog) {
+          entry.features = exactArray(entry.features, `${at}.features`, string,
+            { nonEmpty: true, sort: true });
+          entry.checks = exactArray(entry.checks, `${at}.checks`, string, { sort: true });
+        }
+        return entry as unknown as CampaignLevelSelection;
+      }, { nonEmpty: true });
+    if (canonicalDefinitionJson(value.selection.levels.map(entry => entry.level))
+      !== canonicalDefinitionJson(value.levels)) {
+      fail(`${source}.selection.levels`, 'must bind every requested level once and in order');
+    }
+  } else {
+    value.selection.packs = exactArray(value.selection.packs, `${source}.selection.packs`, string,
+      { sort: true });
+    value.selection.checks = exactArray(value.selection.checks, `${source}.selection.checks`, string,
+      { sort: true });
+  }
+
+  value.stacks = exactArray(value.stacks, `${source}.stacks`, (stack, at): CampaignStackSelection => {
+    strict(stack, at, STACK_FIELDS);
+    identifier(stack.id, `${at}.id`);
+    version(stack.adapterVersion, `${at}.adapterVersion`);
+    if (stack.repetitions !== undefined) {
+      integer(stack.repetitions, `${at}.repetitions`, { min: 1, max: 100 });
+    }
+    return stack as unknown as CampaignStackSelection;
+  }, { nonEmpty: true, sort: true });
+  if (new Set(value.stacks.map(stack => stack.id)).size !== value.stacks.length) {
+    fail(`${source}.stacks`, 'must name each stack once');
+  }
+  value.agents = exactArray(value.agents, `${source}.agents`, (agent, at): CampaignAgentSelection => {
+    strict(agent, at, AGENT_FIELDS);
+    identifier(agent.adapter, `${at}.adapter`);
+    version(agent.adapterVersion, `${at}.adapterVersion`);
+    string(agent.model, `${at}.model`);
+    return agent as unknown as CampaignAgentSelection;
+  }, { nonEmpty: true, sort: true });
+  const agentKeys = value.agents.map(agent => canonicalDefinitionJson(agent));
+  if (new Set(agentKeys).size !== agentKeys.length) fail(`${source}.agents`, 'contains a duplicate configuration');
+  value.conditions = exactArray(value.conditions, `${source}.conditions`, (condition, at) =>
+    validateConditionReference(condition, at), { nonEmpty: true, sort: true });
+  integer(value.repetitions, `${source}.repetitions`, { min: 1, max: 100 });
+  value.parallelism ??= 1;
+  integer(value.parallelism, `${source}.parallelism`, { min: 1, max: RUN_INDEX_CAP + 1 });
+  for (const stack of value.stacks) stack.repetitions ??= value.repetitions;
+
+  strict(value.ordering, `${source}.ordering`, ORDERING_FIELDS);
+  if (value.ordering.method !== 'balanced-rotation') fail(`${source}.ordering.method`, 'must be balanced-rotation');
+  string(value.ordering.seed, `${source}.ordering.seed`);
+
+  strict(value.budgets, `${source}.budgets`, BUDGET_FIELDS);
+  integer(value.budgets.attemptTimeoutMinutes, `${source}.budgets.attemptTimeoutMinutes`, { min: 10, max: 480 });
+  if (value.budgets.maxCostUsdPerAttempt !== null) {
+    finite(value.budgets.maxCostUsdPerAttempt, `${source}.budgets.maxCostUsdPerAttempt`, { min: 0.01 });
+  }
+
+  strict(value.attemptPolicy, `${source}.attemptPolicy`, ATTEMPT_POLICY_FIELDS);
+  integer(value.attemptPolicy.retries, `${source}.attemptPolicy.retries`, { min: 0, max: 10 });
+  value.attemptPolicy.retryOn = exactArray(value.attemptPolicy.retryOn,
+    `${source}.attemptPolicy.retryOn`, (item, at) => {
+      if (typeof item !== 'string' || !RETRY_CAUSES.has(item)) fail(at, 'has an unsupported retry cause');
+      return item;
+    }, { sort: true });
+  value.attemptPolicy.excludeFromAnalysis = exactArray(value.attemptPolicy.excludeFromAnalysis,
+    `${source}.attemptPolicy.excludeFromAnalysis`, (item, at) => {
+      if (typeof item !== 'string' || !EXCLUSION_CAUSES.has(item)) fail(at, 'has an unsupported exclusion cause');
+      return item;
+    }, { sort: true });
+  if (value.attemptPolicy.retries > 0 && value.attemptPolicy.retryOn.length === 0) {
+    fail(`${source}.attemptPolicy.retryOn`, 'must name a cause when retries are enabled');
+  }
+
+  strict(value.runtime, `${source}.runtime`, RUNTIME_FIELDS);
+  for (const field of ['releaseManifestSha256', 'controllerImage', 'buildImage'] as const) {
+    if (value.runtime[field] !== null && typeof value.runtime[field] !== 'string') {
+      fail(`${source}.runtime.${field}`, 'must be a string or null');
+    }
+  }
+  if (value.runtime.releaseManifestSha256 !== null && !HASH.test(value.runtime.releaseManifestSha256)) {
+    fail(`${source}.runtime.releaseManifestSha256`, 'must be a SHA-256 digest or null');
+  }
+  for (const field of ['controllerImage', 'buildImage'] as const) {
+    if (value.runtime[field] !== null && !IMAGE_DIGEST.test(value.runtime[field])) {
+      fail(`${source}.runtime.${field}`, 'must be an exact image digest reference or null');
+    }
+  }
+  if (value.runtime.platform !== STACK_BENCH_RUNNER_PLATFORM) {
+    fail(`${source}.runtime.platform`, `must be ${STACK_BENCH_RUNNER_PLATFORM}`);
+  }
+
+  strict(value.pricing, `${source}.pricing`, PRICING_FIELDS);
+  if (value.pricing.currency !== 'USD') fail(`${source}.pricing.currency`, 'must be USD');
+  if (value.pricing.unit !== PRICING_UNIT) {
+    fail(`${source}.pricing.unit`, `must be ${PRICING_UNIT}`);
+  }
+  if (typeof value.pricing.capturedAt !== 'string' || !ISO.test(value.pricing.capturedAt)
+    || Number.isNaN(Date.parse(value.pricing.capturedAt))) {
+    fail(`${source}.pricing.capturedAt`, 'must be an ISO-8601 timestamp');
+  }
+  string(value.pricing.source, `${source}.pricing.source`);
+  if (!object(value.pricing.models) || Object.keys(value.pricing.models).length === 0) {
+    fail(`${source}.pricing.models`, 'must be a non-empty object');
+  }
+  for (const [model, rates] of Object.entries(value.pricing.models)) {
+    string(model, `${source}.pricing.models key`);
+    strict(rates, `${source}.pricing.models.${model}`, PRICE_MODEL_FIELDS);
+    try {
+      value.pricing.models[model] = validatePricingRates(rates,
+        { at: `${source}.pricing.models.${model}` });
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      fail(`${source}.pricing.models.${model}`, message
+        .replace(`${source}.pricing.models.${model} `, ''));
+    }
+  }
+  const selectedModels = new Set(value.agents.map(agent => agent.model));
+  for (const model of selectedModels) {
+    if (!Object.hasOwn(value.pricing.models, model)) fail(`${source}.pricing.models`, `has no rates for ${model}`);
+  }
+
+  strict(value.analysis, `${source}.analysis`, ANALYSIS_FIELDS);
+  if (!OUTCOME_METRICS.has(value.analysis.primaryMetric)) fail(`${source}.analysis.primaryMetric`, 'is unsupported');
+  value.analysis.secondaryMetrics = exactArray(value.analysis.secondaryMetrics,
+    `${source}.analysis.secondaryMetrics`, (item, at) => {
+      if (typeof item !== 'string' || !OUTCOME_METRICS.has(item)) fail(at, 'is unsupported');
+      return item;
+    });
+  if (value.analysis.secondaryMetrics.includes(value.analysis.primaryMetric)) {
+    fail(`${source}.analysis.secondaryMetrics`, 'must not repeat the primary metric');
+  }
+  if (!DISPERSION.has(value.analysis.dispersion)) fail(`${source}.analysis.dispersion`, 'is unsupported');
+  if (value.analysis.invalidAttempts !== 'report-separately') {
+    fail(`${source}.analysis.invalidAttempts`, 'must be report-separately');
+  }
+  if (value.analysis.missingData !== 'no-imputation') fail(`${source}.analysis.missingData`, 'must be no-imputation');
+  if (value.analysis.comparisonUnit !== 'stack-agent-condition-recipe') {
+    fail(`${source}.analysis.comparisonUnit`, 'must be stack-agent-condition-recipe');
+  }
+  if (value.state === 'frozen') {
+    if (value.budgets.maxCostUsdPerAttempt === null) {
+      fail(`${source}.budgets.maxCostUsdPerAttempt`, 'is required for a runnable test plan');
+    }
+    for (const field of ['controllerImage', 'buildImage'] as const) {
+      if (value.runtime[field] === null) {
+        fail(`${source}.runtime.${field}`, 'is required for a runnable test plan');
+      }
+    }
+  }
+  return canonicalizeDefinition(value) as unknown as CampaignDefinition;
+}
+
+function loadJson(path: string): unknown {
+  try { return JSON.parse(readFileSync(path, 'utf8')); }
+  catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    throw new Error(`cannot read campaign ${path}: ${message}`, { cause: error });
+  }
+}
+
+function exactSource(path: string): string {
+  if (!isAbsolute(path)) throw new Error('campaign path must be absolute after resolution');
+  return realpathSync(path);
+}
+
+function rotate<T>(values: T[], offset: number): T[] {
+  return [...values.slice(offset), ...values.slice(0, offset)];
+}
+
+function identityForStack(adapter: StackAdapterIdentity): ResolvedStackIdentity {
+  return { id: adapter.id, version: adapter.version, sha256: null, state: null };
+}
+
+function calibrationIdentity(value: ResolvedCalibration | null): PublicBinding['calibration'] {
+  return value ? { id: value.id, version: value.version, sha256: value.qualificationSha256 } : null;
+}
+
+function imageContentDigest(value: string | null): string | null {
+  return value?.slice(value.lastIndexOf('@') + 1) ?? null;
+}
+
+function campaignIdentityDocument(definition: CampaignDefinition, engine: Identity,
+  featureCatalog: FeatureCatalogInput | null, dependencyPolicy: DependencyPolicyInput | null,
+  bindings: PublicBinding[], stacks: ResolvedStackIdentity[], agents: CompiledCampaignPlan['agents'],
+  conditions: ResolvedStudyCondition[]): unknown {
+  return canonicalizeDefinition({ campaignSchemaVersion: CAMPAIGN_SCHEMA_VERSION,
+    definition, engine, ...(featureCatalog ? { featureCatalog: featureCatalog.identity } : {}),
+    ...(dependencyPolicy ? { dependencyPolicy } : {}),
+    bindings, stacks, agents, conditions });
+}
+
+function validatePublicBinding(input: unknown, expectedLevel: number, index: number): void {
+  const at = `compiled campaign bindings[${index}]`;
+  strict(input, at, new Set(['level', 'alias', 'recipe', 'fixture', 'calibration',
+    'selection', 'task']));
+  if (input.level !== expectedLevel || typeof input.alias !== 'string' || !input.alias) {
+    throw new Error(`${at} has an invalid level or alias`);
+  }
+  const recipe = input.recipe;
+  strict(recipe, `${at}.recipe`, new Set(['id', 'version', 'contentSha256',
+    'meaningSha256', 'executionSha256']));
+  if (!ID.test(String(recipe.id)) || !isExactSemanticVersion(recipe.version)
+    || ['contentSha256', 'meaningSha256', 'executionSha256']
+      .some(field => !HASH.test(String(recipe[field])))) {
+    throw new Error(`${at}.recipe is invalid`);
+  }
+  strict(input.fixture, `${at}.fixture`, new Set(['id', 'version']));
+  if (!ID.test(String(input.fixture.id)) || !isExactSemanticVersion(input.fixture.version)) {
+    throw new Error(`${at}.fixture is invalid`);
+  }
+  if (input.calibration !== null) {
+    strict(input.calibration, `${at}.calibration`, new Set(['id', 'version', 'sha256']));
+    if (!ID.test(String(input.calibration.id))
+      || !isExactSemanticVersion(input.calibration.version)
+      || !HASH.test(String(input.calibration.sha256))) {
+      throw new Error(`${at}.calibration is invalid`);
+    }
+  }
+  if (input.selection !== null) {
+    strict(input.selection, `${at}.selection`, new Set(['schemaVersion', 'sha256', 'completeness',
+      'scoredPoints', 'taskPacks', 'requested']));
+    if (!Number.isSafeInteger(input.selection.schemaVersion)
+      || !HASH.test(String(input.selection.sha256))
+      || !Number.isSafeInteger(input.selection.scoredPoints)
+      || !Array.isArray(input.selection.taskPacks)) {
+      throw new Error(`${at}.selection is invalid`);
+    }
+  }
+  const task = input.task;
+  if (task !== null) {
+    strict(task, `${at}.task`, new Set(['sha256', 'requirementSha256', 'contractSha256',
+      'requirementIds', 'contractIds']));
+    if (['sha256', 'requirementSha256', 'contractSha256']
+      .some(field => !HASH.test(String(task[field])))
+      || !Array.isArray(task.requirementIds) || !Array.isArray(task.contractIds)) {
+      throw new Error(`${at}.task is invalid`);
+    }
+  }
+}
+
+function expandAttempts(definition: CampaignDefinition, requestedLevels: number[],
+  featureCatalogIdentity: FeatureCatalogInput['identity'] | null,
+  dependencyPolicyIdentity: DependencyPolicyInput['identity'] | null,
+  stacks: ResolvedStackIdentity[], agents: CompiledCampaignPlan['agents'],
+  studyConditions: ResolvedStudyCondition[]): CampaignAttemptPlan[] {
+  const repetitionsByStack = new Map(definition.stacks.map(stack =>
+    [stack.id, stack.repetitions ?? definition.repetitions]));
+  const conditions = agents.flatMap((agent, agentIndex) => studyConditions.flatMap(
+    (condition, conditionIndex) => stacks.map(stack => ({
+      agent, agentIndex, condition, conditionIndex, stack,
+      key: canonicalDefinitionJson({ agent: { adapter: agent.adapter, model: agent.model },
+        condition: condition.sha256, stack: stack.id }),
+    })))).sort((left, right) => {
+    const leftHash = sha256(`${definition.ordering.seed}\0${left.key}`);
+    const rightHash = sha256(`${definition.ordering.seed}\0${right.key}`);
+    return leftHash.localeCompare(rightHash) || left.key.localeCompare(right.key);
+  });
+  const attempts: CampaignAttemptPlan[] = [];
+  const repetitions = Math.max(...repetitionsByStack.values());
+  for (let repetition = 1; repetition <= repetitions; repetition += 1) {
+    rotate(conditions, (repetition - 1) % conditions.length)
+      .filter(({ stack }) => repetition <= (repetitionsByStack.get(stack.id) ?? 0))
+      .forEach(({ agent, agentIndex, condition, conditionIndex, stack }, order) => attempts.push({
+        id: `${definition.id}-r${repetition}-c${conditionIndex + 1}-a${agentIndex + 1}-${stack.id}`,
+        repetition,
+        order: order + 1,
+        stack: stack.id,
+        agentAdapter: agent.adapter,
+        model: agent.model,
+        pricing: { unit: definition.pricing.unit,
+          rates: definition.pricing.models[agent.model]! },
+        condition: { id: condition.id, version: condition.version, sha256: condition.sha256,
+          requested: condition.requested, guidance: condition.guidance,
+          repair: condition.repair },
+        guidance: condition.guidance.mode,
+        skills: condition.guidance.skills[stack.id]!.ids,
+        mode: { id: definition.mode.id, version: definition.mode.version },
+        levels: requestedLevels,
+        ...(featureCatalogIdentity ? { featureCatalog: featureCatalogIdentity } : {}),
+        ...(dependencyPolicyIdentity ? { dependencyPolicy: dependencyPolicyIdentity } : {}),
+        parentAttemptId: definition.id,
+      }));
+  }
+  return attempts;
+}
+
+function resolveCampaignInputs(definition: CampaignDefinition, {
+  stackBenchRoot = ROOT,
+  calibrationResolver = resolveCalibrationForRelease,
+  recipeResolver = resolveRecipeRelease,
+}: CompilerOptions = {}): CampaignResolvedInputs {
+  if (!listTracks({ includeInternal: true }).includes(definition.track)) {
+    fail('track', `is unknown; available tracks: ${listTracks({ includeInternal: true }).join(', ')}`);
+  }
+  const track = loadTrack(definition.track);
+  let resolvedFeatureCatalog = null;
+  try {
+    resolvedFeatureCatalog = definition.featureCatalog
+      ? resolveFeatureCatalog(definition.featureCatalog, track) : null;
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    fail('featureCatalog', message.replace(/^feature catalog /, ''));
+  }
+  if (resolvedFeatureCatalog
+    && definition.levels.some(level => !progressionLevels(resolvedFeatureCatalog).includes(level))) {
+    fail('levels', 'must exist in feature catalog');
+  }
+  if (resolvedFeatureCatalog
+    && definition.levels[0] !== progressionLevels(resolvedFeatureCatalog)[0]) {
+    fail('levels', 'must start at the first feature catalog level');
+  }
+  const featureCatalog = resolvedFeatureCatalog
+    ? selectFeatureCatalogLevels(resolvedFeatureCatalog, definition.levels) : null;
+  const modularLevels = new Map<number, CampaignLevelSelection>((definition.selection.levels ?? [])
+    .map(selection => [selection.level, selection]));
+  const bindingRecords: BindingRecord[] = definition.levels.map(level => {
+    const modular = modularLevels.get(level) ?? null;
+    const binding = recipeResolver(track, level, modular?.recipe ?? null);
+    if (!binding) fail('levels', `L${level} has no recipe release`);
+    const selectedTask = modular ? null : createRecipeTaskRequest(binding, {
+      packIds: definition.selection.packs, checkKeys: definition.selection.checks });
+    const calibration = calibrationResolver(binding.release, {
+      trackRoot: track.dir, stackBenchRoot: resolve(stackBenchRoot),
+    });
+    const publicBinding: PublicBinding = {
+      level,
+      alias: binding.alias,
+      recipe: {
+        id: binding.release.id,
+        version: binding.release.version,
+        contentSha256: binding.release.contentSha256,
+        meaningSha256: binding.release.meaningSha256,
+        executionSha256: binding.release.executionSha256,
+      },
+      fixture: { id: binding.release.components.fixture.id,
+        version: binding.release.components.fixture.version },
+      calibration: calibrationIdentity(calibration),
+      selection: selectedTask ? {
+        schemaVersion: selectedTask.selection.schemaVersion,
+        sha256: selectedTask.selection.sha256,
+        completeness: selectedTask.selection.completeness,
+        scoredPoints: selectedTask.selection.scoredPoints,
+        taskPacks: selectedTask.selection.taskPacks,
+        requested: selectedTask.selection.requested,
+      } : null,
+      task: selectedTask ? {
+        sha256: selectedTask.task.sha256,
+        requirementSha256: selectedTask.task.requirementSha256,
+        contractSha256: selectedTask.task.contractSha256,
+        requirementIds: selectedTask.task.requirementIds,
+        contractIds: selectedTask.task.contractIds,
+      } : null,
+    };
+    return { level, modular, binding, calibration, publicBinding,
+      checkKeys: selectedTask ? selectedTask.selection.checks.map(check => check.stableKey) : null,
+      qualificationStaleness: calibration?.qualificationStaleness ?? [] };
+  });
+  const bindings = bindingRecords.map(record => record.publicBinding);
+  if (featureCatalog) {
+    for (const record of bindingRecords) {
+      const qualifiedCatalog = record.calibration?.qualification.featureCatalog;
+      if (qualifiedCatalog && (qualifiedCatalog.id !== resolvedFeatureCatalog!.identity.id
+        || qualifiedCatalog.version !== resolvedFeatureCatalog!.identity.version)) {
+        fail('featureCatalog', `L${record.level} calibration qualifies `
+          + `${qualifiedCatalog.id}@${qualifiedCatalog.version}, not `
+          + `${resolvedFeatureCatalog!.identity.id}@${resolvedFeatureCatalog!.identity.version}`);
+      }
+    }
+  }
+  let progressionSelections: Map<number, ProgressionLevelSelection> | null = null;
+  if (featureCatalog) {
+    validateProgressionRecipeBindings(featureCatalog, bindingRecords, { levels: definition.levels });
+    progressionSelections = new Map(bindingRecords.map(record =>
+      [record.level, resolveProgressionRecipeLevelSelection(record.binding,
+        featureCatalog, record.level, { cumulative: definition.mode.id === 'dependency' })]));
+  }
+  const gradingLevels: CampaignGradingQualification['levels'] = bindingRecords.map(record => {
+    const reasons: string[] = [];
+    const selected = progressionSelections?.get(record.level)?.grader.checkKeys ?? [];
+    const qualifiedChecks = new Set(record.calibration?.qualification.checks
+      ?? record.binding.release.checkCatalog.map(check => check.stableKey));
+    const missingChecks = selected.filter(check => !qualifiedChecks.has(check));
+    if (missingChecks.length > 0) reasons.push(`calibration does not cover ${missingChecks.length} selected checks`);
+    if (record.binding.release.state !== 'qualified') reasons.push('recipe is not qualified');
+    if (record.binding.status !== 'promoted') reasons.push('recipe is not promoted');
+    if (record.binding.release.components.fixture.state !== 'qualified') reasons.push('fixture is not qualified');
+    if (record.calibration?.state !== 'qualified') reasons.push('calibration is not qualified');
+    const supported = new Map((record.calibration?.qualification.stacks ?? [])
+      .map(stack => [stack.id, stack.status]));
+    for (const stack of definition.stacks) {
+      if (supported.get(stack.id) !== 'qualified') reasons.push(`${stack.id} is not qualified`);
+    }
+    const qualifiedImage = record.calibration?.qualification.buildImage;
+    if (!qualifiedImage || imageContentDigest(definition.runtime.buildImage) !== qualifiedImage) {
+      reasons.push('build image does not match qualification evidence');
+    }
+    if (record.qualificationStaleness.length > 0) {
+      reasons.push(`${record.qualificationStaleness.length} qualification artifacts are stale`);
+    }
+    return {
+      level: record.level,
+      status: reasons.length === 0 ? 'qualified' : 'pending',
+      reasons,
+      evidenceSha256: record.calibration?.contentSha256 ?? null,
+    };
+  });
+  const grading: CampaignGradingQualification = {
+    status: gradingLevels.some(level => level.status === 'pending') ? 'pending' : 'qualified',
+    levels: gradingLevels,
+  };
+
+  const stacks = definition.stacks.map(selection => {
+    const adapter = STACK_ADAPTER_REGISTRY.get(selection.id);
+    if (!adapter) fail('stacks', `has unknown adapter ${selection.id}`);
+    if (adapter.version !== selection.adapterVersion) fail('stacks', `${adapter.id} adapter is ${adapter.version}, not ${selection.adapterVersion}`);
+    return identityForStack(adapter);
+  });
+  // Every check a stack will be asked to measure must resolve on that stack
+  // before the campaign can run.
+  const measurable = (level: number, plan: RecipeBinding['plan'], checkKeys: readonly string[]): void => {
+    const problems = resolveStackTestability({ plan, checkKeys, trackActions: track.actions,
+      stacks: definition.stacks.map(selection => STACK_ADAPTER_REGISTRY.get(selection.id)) });
+    if (problems.length === 0) return;
+    fail('stacks', `L${level} selects checks a stack cannot measure: `
+      + describeStackTestabilityProblems(problems).join('; '));
+  };
+  for (const record of bindingRecords) {
+    if (record.checkKeys) measurable(record.level, record.binding.plan, record.checkKeys);
+  }
+  const agents = definition.agents.map(selection => {
+    const adapter = AGENT_ADAPTER_REGISTRY.get(selection.adapter);
+    if (!adapter) fail('agents', `has unknown adapter ${selection.adapter}`);
+    if (adapter.version !== selection.adapterVersion) fail('agents', `${adapter.id} adapter is ${adapter.version}, not ${selection.adapterVersion}`);
+    return { ...selection, costLimit: adapter.costLimit, identity: agentAdapterIdentity(adapter) };
+  });
+  if (definition.state === 'frozen' && agents.some(agent => agent.costLimit === 'unsupported')) {
+    fail('state', 'cannot freeze an agent adapter that does not enforce maxCostUsdPerAttempt');
+  }
+  const packRequested = modularLevels.size ? null : { track: definition.track, levels: bindings.map(binding => ({
+    level: binding.level,
+    recipe: binding.recipe,
+    selection: {
+      sha256: binding.selection!.sha256,
+      completeness: binding.selection!.completeness,
+      scoredPoints: binding.selection!.scoredPoints,
+      taskPacks: binding.selection!.taskPacks,
+      requested: binding.selection!.requested,
+    },
+    task: binding.task!,
+  })) };
+  const requestedForCondition = (ref: ConditionReference): unknown => {
+    if (!modularLevels.size) {
+      if (ref.specifications !== undefined) {
+        fail('conditions', 'pack selection cannot declare modular specifications');
+      }
+      return packRequested;
+    }
+    if (progressionSelections && ref.specifications !== undefined) {
+      fail('conditions', 'progression graph owns specification scope');
+    }
+    if (!progressionSelections && !ref.specifications) {
+      fail('conditions', 'modular selection requires specifications by level');
+    }
+    const declared = ref.specifications;
+    const specifications: Map<number, {
+      level: number; requested: string[]; expected: string[]; observed: string[];
+    }> | null = progressionSelections ? null
+      : new Map(declared!.levels.map(entry => [entry.level, entry]));
+    if (specifications && (specifications.size !== bindingRecords.length
+      || bindingRecords.some(record => !specifications.has(record.level)))) {
+      fail('conditions', 'specifications must bind every selected level exactly once');
+    }
+    return { track: definition.track, levels: bindingRecords.map(record => {
+      const declaredSpecifications = specifications?.get(record.level) ?? null;
+      const selected: BoundRecipeTaskRequestResult = progressionSelections?.get(record.level)?.grader
+        ?? createBoundRecipeTaskRequest(record.binding, {
+          featureIds: record.modular!.features,
+          checkKeys: record.modular!.checks,
+          requestedSpecifications: declaredSpecifications!.requested,
+          expectedSpecifications: declaredSpecifications!.expected,
+          observedSpecifications: declaredSpecifications!.observed,
+        });
+      // Every level here binds a modular recipe, so its task resolves per treatment.
+      if (!isModularRecipeTaskRequest(selected)) {
+        fail('levels', `L${record.level} did not resolve a modular recipe task`);
+      }
+      const modular: ModularRecipeTaskRequestResult = selected;
+      measurable(record.level, record.binding.plan,
+        [...modular.selection.scoredChecks, ...modular.selection.observedChecks]
+          .map(check => check.stableKey));
+      const taskMode = requestedTaskMode(modular.request);
+      return {
+        level: record.level,
+        recipe: record.publicBinding.recipe,
+        selection: {
+          schemaVersion: 3,
+          sha256: modular.selection.sha256,
+          scoredPoints: modular.selection.scoredPoints,
+          requested: modular.selection.requested,
+          promptPacks: modular.selection.promptPacks,
+          features: modular.selection.features,
+          specifications: modular.selection.specifications,
+          scoredChecks: modular.selection.scoredChecks.map(check => ({
+            stableKey: check.stableKey, points: check.points, treatment: check.treatment,
+          })),
+          observedChecks: modular.selection.observedChecks.map(check => ({
+            stableKey: check.stableKey, points: check.points, treatment: check.treatment,
+          })),
+        },
+        task: {
+          // The mode the request actually carries: only an action recipe
+          // records one, and this level reports what was requested.
+          ...(taskMode === undefined ? {} : { mode: taskMode }),
+          sha256: modular.task.sha256,
+          requirementSha256: modular.task.requirementSha256,
+          contractSha256: modular.task.contractSha256,
+          requirementIds: modular.task.requirementIds,
+          contractIds: modular.task.contractIds,
+        },
+      };
+    }) };
+  };
+  const conditions = resolveStudyConditions(definition.conditions, stacks.map(stack => stack.id), {
+    stackBenchRoot: resolve(stackBenchRoot), frozen: definition.state === 'frozen',
+    requested: requestedForCondition,
+  });
+  const dependencyPolicy = definition.mode.id === 'dependency'
+    ? compileDependencyPolicyInput(definition.repair, featureCatalog!, {
+      selectedLevels: definition.levels,
+      workSelection: definition.mode.workSelection,
+      ...(definition.repair.order === 'shuffled'
+        ? { nodeOrder: shuffledRepairOrder(featureCatalog!, definition.ordering.seed) } : {}),
+    }) : null;
+  return { bindings, grading, stacks, agents, conditions, featureCatalog, dependencyPolicy };
+}
+
+// A shuffled repair order is drawn once per campaign from its ordering seed,
+// within each dependency depth, and frozen in the dependency policy, so every
+// stack in the campaign repairs in the same order and the permutation is part
+// of the plan's identity. The catalog itself, and its qualification, are
+// unchanged.
+function shuffledRepairOrder(catalog: FeatureCatalogInput, seed: string): string[] {
+  const nodes = catalog.definition.nodes;
+  const levels = [...new Set(nodes.map(node => node.level))].sort((left, right) => left - right);
+  return levels.flatMap(level => {
+    const group = nodes.filter(node => node.level === level).map(node => node.id);
+    const random = seededRandom(`${seed}\0repair-order\0${level}`);
+    for (let index = group.length - 1; index > 0; index -= 1) {
+      const swap = Math.floor(random() * (index + 1));
+      [group[index], group[swap]] = [group[swap]!, group[index]!];
+    }
+    return group;
+  });
+}
+
+// mulberry32 seeded from the first 32 bits of the seed's SHA-256: small,
+// dependency-free, and identical on every platform.
+function seededRandom(seed: string): () => number {
+  let state = Number.parseInt(sha256(seed).slice(0, 8), 16) >>> 0;
+  return () => {
+    state = (state + 0x6d2b79f5) >>> 0;
+    let value = Math.imul(state ^ (state >>> 15), 1 | state);
+    value = (value + Math.imul(value ^ (value >>> 7), 61 | value)) ^ value;
+    return ((value ^ (value >>> 14)) >>> 0) / 4294967296;
+  };
+}
+
+export function campaignGradingQualification(plan: CompiledCampaignPlan,
+  options: CompilerOptions = {}): CampaignGradingQualification {
+  try {
+    const definition = validateCampaignDefinition({ ...plan.definition,
+      ...(plan.featureCatalog ? { featureCatalog: plan.featureCatalog.definition } : {}) },
+    { source: 'compiled campaign definition' });
+    const current = resolveCampaignInputs(definition, options);
+    if (canonicalDefinitionJson(plan.bindings) !== canonicalDefinitionJson(current.bindings)
+      || canonicalDefinitionJson(plan.featureCatalog?.identity ?? null)
+        !== canonicalDefinitionJson(current.featureCatalog?.identity ?? null)
+      || canonicalDefinitionJson(plan.dependencyPolicy?.identity ?? null)
+        !== canonicalDefinitionJson(current.dependencyPolicy?.identity ?? null)) {
+      throw new Error('grading inputs differ from the campaign');
+    }
+    return current.grading;
+  } catch (error) {
+    const reason = `qualification unavailable: ${error instanceof Error ? error.message : String(error)}`;
+    return { status: 'pending', levels: plan.definition.levels.map(level => ({
+      level, status: 'pending', reasons: [reason], evidenceSha256: null,
+    })) };
+  }
+}
+
+export function compileCampaignFile(path: string, {
+  stackBenchRoot = ROOT,
+  calibrationResolver = resolveCalibrationForRelease,
+  recipeResolver = resolveRecipeRelease,
+}: CompilerOptions = {}): CompiledCampaignPlan {
+  const absolute = exactSource(resolve(path));
+  const sourceDefinition = validateCampaignDefinition(loadJson(absolute), {
+    source: relative(process.cwd(), absolute).replaceAll('\\', '/'),
+  });
+  const requestedLevels = sourceDefinition.levels;
+  const { bindings, stacks, agents, conditions, featureCatalog, dependencyPolicy } =
+    resolveCampaignInputs(sourceDefinition, { stackBenchRoot, calibrationResolver, recipeResolver });
+  const resolvedDefinition: CampaignDefinition = featureCatalog
+    ? { ...sourceDefinition, featureCatalog: featureCatalog.definition }
+    : sourceDefinition;
+  const definition = structuredClone(resolvedDefinition);
+  if (featureCatalog) delete definition.featureCatalog;
+
+  const sourceSha256 = sha256(readFileSync(absolute));
+  const engine = currentEngineIdentity();
+  const identityDocument = campaignIdentityDocument(definition, engine, featureCatalog,
+    dependencyPolicy,
+    bindings, stacks, agents, conditions);
+  const contentSha256 = sha256(canonicalDefinitionJson(identityDocument));
+  const attempts = expandAttempts(definition, requestedLevels, featureCatalog?.identity ?? null,
+    dependencyPolicy?.identity ?? null, stacks, agents, conditions);
+  const repetitionsByStack = Object.fromEntries(definition.stacks.map(stack =>
+    [stack.id, stack.repetitions ?? definition.repetitions] as const).sort(([left], [right]) =>
+    left.localeCompare(right)));
+  return canonicalizeDefinition({
+    campaignSchemaVersion: CAMPAIGN_SCHEMA_VERSION,
+    id: definition.id,
+    version: definition.version,
+    state: definition.state,
+    title: definition.title,
+    source: { sha256: sourceSha256 },
+    contentSha256,
+    definition,
+    identities: { engine },
+    featureCatalog,
+    dependencyPolicy,
+    bindings,
+    stacks,
+    agents,
+    conditions,
+    attempts,
+    summary: { attempts: attempts.length, stacks: stacks.length, agents: agents.length,
+      conditions: conditions.length, repetitions: definition.repetitions,
+      repetitionsByStack, parallelism: definition.parallelism ?? 1 },
+  }) as unknown as CompiledCampaignPlan;
+}
+
+export function validateCompiledCampaignPlan(input: unknown, {
+  requireCurrentInputs = true,
+  calibrationResolver = resolveCalibrationForRelease,
+  recipeResolver = resolveRecipeRelease,
+}: ValidationOptions = {}): CompiledCampaignPlan {
+  if (!object(input)) throw new Error('compiled campaign plan must be an object');
+  const plan = canonicalizeDefinition(input) as unknown as CompiledCampaignPlan;
+  const fields = new Set(['campaignSchemaVersion', 'id', 'version', 'state', 'title', 'source',
+    'contentSha256', 'definition', 'identities', 'bindings', 'stacks', 'agents', 'conditions',
+    'attempts', 'summary', 'featureCatalog', 'dependencyPolicy']);
+  for (const key of Object.keys(plan)) if (!fields.has(key)) throw new Error(`compiled campaign plan.${key} is unknown`);
+  if (plan.campaignSchemaVersion !== CAMPAIGN_SCHEMA_VERSION) throw new Error('compiled campaign schema is unsupported');
+  const featureCatalog = plan.featureCatalog === null || plan.featureCatalog === undefined
+    ? null : validateFeatureCatalogInput(plan.featureCatalog);
+  const dependencyPolicy = plan.dependencyPolicy === null || plan.dependencyPolicy === undefined
+    ? null : validateDependencyPolicyInput(plan.dependencyPolicy, featureCatalog);
+  const definition = validateCampaignDefinition({ ...plan.definition,
+    ...(featureCatalog ? { featureCatalog: featureCatalog.definition } : {}) },
+  { source: 'compiled campaign definition' });
+  if ((definition.mode.id === 'dependency') !== Boolean(dependencyPolicy)) {
+    throw new Error('compiled campaign dependency policy does not match its mode');
+  }
+  const storedDefinition = structuredClone(definition);
+  if (featureCatalog) delete storedDefinition.featureCatalog;
+  if (canonicalDefinitionJson(storedDefinition) !== canonicalDefinitionJson(plan.definition)) {
+    throw new Error('compiled campaign definition does not match its feature catalog');
+  }
+  for (const field of ['id', 'version', 'state', 'title'] as const) {
+    if (plan[field] !== definition[field]) throw new Error(`compiled campaign ${field} does not match its definition`);
+  }
+  if (!object(plan.source) || Object.keys(plan.source).length !== 1 || !HASH.test(plan.source.sha256)) {
+    throw new Error('compiled campaign source identity is invalid');
+  }
+  if (!object(plan.identities) || !object(plan.identities.engine)) {
+    throw new Error('compiled campaign engine identity is missing');
+  }
+  if (!Array.isArray(plan.bindings) || plan.bindings.length !== definition.levels.length
+    || !Array.isArray(plan.stacks) || plan.stacks.length !== definition.stacks.length
+    || !Array.isArray(plan.agents) || plan.agents.length !== definition.agents.length
+    || !Array.isArray(plan.conditions) || plan.conditions.length !== definition.conditions.length) {
+    throw new Error('compiled campaign resolved inputs are incomplete');
+  }
+  plan.bindings.forEach((binding, index) => validatePublicBinding(binding,
+    definition.levels[index]!, index));
+  if (requireCurrentInputs) {
+    const currentEngine = currentEngineIdentity();
+    if (canonicalDefinitionJson(plan.identities.engine) !== canonicalDefinitionJson(currentEngine)) {
+      throw new Error('compiled campaign engine identity does not match this executable');
+    }
+    const resolved = resolveCampaignInputs(definition, { calibrationResolver, recipeResolver });
+    for (const field of ['bindings', 'stacks', 'agents', 'conditions',
+      'dependencyPolicy'] as const) {
+      if (canonicalDefinitionJson(plan[field]) !== canonicalDefinitionJson(resolved[field])) {
+        throw new Error(`compiled campaign ${field} do not match current resolved inputs`);
+      }
+    }
+    if (canonicalDefinitionJson(featureCatalog?.identity ?? null)
+      !== canonicalDefinitionJson(resolved.featureCatalog?.identity ?? null)) {
+      throw new Error('compiled campaign featureCatalog does not match current resolved inputs');
+    }
+  }
+  const expectedSha256 = sha256(canonicalDefinitionJson(campaignIdentityDocument(
+    storedDefinition, plan.identities.engine, featureCatalog, dependencyPolicy,
+    plan.bindings, plan.stacks,
+    plan.agents, plan.conditions)));
+  if (plan.contentSha256 !== expectedSha256) throw new Error('compiled campaign content identity does not match its inputs');
+  const expectedAttempts = expandAttempts(plan.definition, definition.levels,
+    featureCatalog?.identity ?? null, dependencyPolicy?.identity ?? null,
+    plan.stacks, plan.agents, plan.conditions);
+  if (canonicalDefinitionJson(plan.attempts) !== canonicalDefinitionJson(expectedAttempts)) {
+    throw new Error('compiled campaign attempt schedule does not match its inputs');
+  }
+  const repetitionsByStack = Object.fromEntries(definition.stacks.map(stack =>
+    [stack.id, stack.repetitions ?? definition.repetitions] as const).sort(([left], [right]) =>
+    left.localeCompare(right)));
+  const expectedSummary = { attempts: expectedAttempts.length, stacks: plan.stacks.length,
+    agents: plan.agents.length, conditions: plan.conditions.length,
+    repetitions: definition.repetitions, repetitionsByStack,
+    parallelism: definition.parallelism ?? 1 };
+  if (canonicalDefinitionJson(plan.summary) !== canonicalDefinitionJson(expectedSummary)) {
+    throw new Error('compiled campaign summary does not match its inputs');
+  }
+  return plan;
+}
+
+export function campaignIdentity(plan: CompiledCampaignPlan, options: ValidationOptions = {}): {
+  id: string; version: string; sha256: string; state: CampaignState;
+} {
+  const validated = validateCompiledCampaignPlan(plan, options);
+  return { id: validated.id, version: validated.version, sha256: validated.contentSha256,
+    state: validated.state };
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-extension.ts b/tools/stack-bench/src/campaigns/campaign-extension.ts
new file mode 100644
index 00000000000..3a3a9acae78
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-extension.ts
@@ -0,0 +1,134 @@
+import { existsSync, mkdirSync, mkdtempSync, renameSync, rmSync } from 'node:fs';
+import { basename, dirname, join, relative, resolve, sep } from 'node:path';
+
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import { ARTIFACT_FILE, readArtifact } from '../evidence/artifacts.js';
+import { hashDirectory, sha256 } from '../evidence/provenance.js';
+import { snapshotAppSource } from '../runtime/source-snapshot.js';
+import { compileCampaignFile } from './campaign-compiler.js';
+import type { CampaignAttemptPlan } from './campaign-compiler.js';
+import { campaignChildPath } from './campaign-path.js';
+import { inspectCampaign } from './campaign-runner.js';
+import { addCampaignExtensions, initializeCampaignDirectory, writeCampaignState }
+  from './campaign-scheduler.js';
+import type { CampaignExtensionSeed } from './campaign-scheduler.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+function key(attempt: CampaignAttemptPlan): string {
+  return canonicalDefinitionJson({
+    stack: attempt.stack,
+    model: attempt.model,
+    agentAdapter: attempt.agentAdapter,
+    repetition: attempt.repetition,
+    condition: { id: attempt.condition.id, version: attempt.condition.version,
+      guidance: attempt.condition.guidance, repair: attempt.condition.repair },
+  });
+}
+
+function object(value: unknown, at: string): UnknownRecord {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) {
+    throw new Error(`${at} must be an object`);
+  }
+  return value as UnknownRecord;
+}
+
+export function prepareCampaignExtension(targetCampaignFile: string, parentDirectory: string,
+  outputDirectory: string, fromDepth: number): void {
+  if (!Number.isSafeInteger(fromDepth) || fromDepth < 1) {
+    throw new Error('extension depth must be a positive integer');
+  }
+  const targetPlan = compileCampaignFile(resolve(targetCampaignFile));
+  if (targetPlan.definition.mode.id !== 'dependency') {
+    throw new Error('campaign extension requires a dependency campaign');
+  }
+  if (targetPlan.definition.mode.workSelection !== 'progressive') {
+    throw new Error('campaign extension target must use progressive work selection');
+  }
+  if (targetPlan.state !== 'frozen') {
+    throw new Error('campaign extension requires a complete target test plan');
+  }
+  const parent = inspectCampaign(resolve(parentDirectory), { requireCurrentInputs: false });
+  const target = resolve(outputDirectory);
+  if (existsSync(target)) throw new Error('extension output directory already exists');
+  const withinParent = relative(parent.paths.root, target);
+  if (withinParent === '' || (withinParent !== '..' && !withinParent.startsWith(`..${sep}`))) {
+    throw new Error('extension output must be outside the parent campaign directory');
+  }
+
+  const parentAttempts = new Map(parent.state.attempts.map(attempt => [key(attempt.plan), attempt]));
+  if (parentAttempts.size !== parent.state.attempts.length) {
+    throw new Error('parent campaign has ambiguous attempts for extension');
+  }
+
+  const prepared = targetPlan.attempts.map(attempt => {
+    if (!attempt.levels.includes(fromDepth) || !attempt.levels.some(level => level > fromDepth)) {
+      throw new Error(`target attempt ${attempt.id} does not continue after depth ${fromDepth}`);
+    }
+    const prior = parentAttempts.get(key(attempt));
+    if (!prior) throw new Error(`target attempt ${attempt.id} has no matching parent attempt`);
+    const execution = prior.executions.at(-1);
+    if (prior.status !== 'completed' || execution?.status !== 'completed') {
+      throw new Error(`parent attempt ${prior.plan.id} is not complete`);
+    }
+    const executionDirectory = campaignChildPath(parent.paths.root, execution.output,
+      'parent execution');
+    const runArtifact = readArtifact(join(executionDirectory, ARTIFACT_FILE.run),
+      { expectedKind: 'benchmark_run' });
+    const run = object(runArtifact.payload, 'parent run');
+    const levels = Array.isArray(run.levels) ? run.levels : [];
+    const level = levels.find(candidate => object(candidate, 'parent run level').level === fromDepth);
+    const levelRecord = object(level, `parent run depth ${fromDepth}`);
+    const outcome = object(levelRecord.outcome, `parent run depth ${fromDepth} outcome`);
+    if (levelRecord.graded !== true || outcome.kind !== 'passed') {
+      throw new Error(`parent attempt ${prior.plan.id} did not pass depth ${fromDepth}`);
+    }
+    const checkpointArtifact = readArtifact(
+      join(executionDirectory, `level-l${fromDepth}-checkpoint.json`),
+      { expectedKind: 'source_checkpoint' });
+    const checkpoint = object(checkpointArtifact.payload, 'parent source checkpoint');
+    const source = object(checkpoint.source, 'parent source checkpoint source');
+    const sourcePath = campaignChildPath(executionDirectory,
+      String(source.directory), 'parent checkpoint source');
+    const actual = hashDirectory(sourcePath);
+    if (source.sha256 !== actual.sha256 || source.files !== actual.files.length) {
+      throw new Error(`parent attempt ${prior.plan.id} checkpoint source does not match its evidence`);
+    }
+    return { attempt, prior, execution, runArtifact, sourcePath, actual };
+  });
+
+  mkdirSync(dirname(target), { recursive: true });
+  const temporary = mkdtempSync(join(dirname(target), `.${basename(target)}-`));
+  try {
+    const initialized = initializeCampaignDirectory(targetPlan, temporary);
+    const extensions: Record<string, CampaignExtensionSeed> = {};
+    for (const item of prepared) {
+      const source = `.private/extensions/${item.attempt.id}/source`;
+      snapshotAppSource(item.sourcePath, join(temporary, source));
+      const copied = hashDirectory(join(temporary, source));
+      if (copied.sha256 !== item.actual.sha256 || copied.files.length !== item.actual.files.length) {
+        throw new Error(`extension source copy failed for ${item.attempt.id}`);
+      }
+      extensions[item.attempt.id] = {
+        fromDepth,
+        source,
+        sourceSha256: copied.sha256,
+        sourceFiles: copied.files.length,
+        parent: {
+          campaignId: parent.plan.id,
+          campaignSha256: parent.plan.contentSha256,
+          attemptId: item.prior.plan.id,
+          executionId: item.execution.id,
+          runId: item.runArtifact.id,
+          runSha256: sha256(canonicalDefinitionJson(item.runArtifact)),
+        },
+      };
+    }
+    const state = addCampaignExtensions(initialized.state, extensions);
+    writeCampaignState(initialized.paths.state, initialized.plan, state);
+    renameSync(temporary, target);
+  } catch (error) {
+    rmSync(temporary, { recursive: true, force: true });
+    throw error;
+  }
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-inspection.ts b/tools/stack-bench/src/campaigns/campaign-inspection.ts
new file mode 100644
index 00000000000..921f7634dc7
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-inspection.ts
@@ -0,0 +1,441 @@
+import { existsSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+
+import { readCampaignState } from './campaign-scheduler.js';
+import type { CampaignAttemptState } from './campaign-scheduler.js';
+import { ARTIFACT_FILE, readArtifactPayload } from '../evidence/artifacts.js';
+import { progressionEngine } from '../progression/progression-engine.js';
+import { readProgressionState } from '../progression/progression-state.js';
+import { compileProgressionInput, dependencyRuntimeDefinition }
+  from '../progression/progression-definition.js';
+import type { DependencyEvent, DependencyState } from '../progression/dependency-mode.js';
+import { campaignGradingQualification, campaignProgressionOwner } from './campaign-compiler.js';
+import type { CampaignAttemptPlan, CompiledCampaignPlan } from './campaign-compiler.js';
+import type { DependencyPromptSelection } from '../progression/dependency-mode.js';
+import { validateCampaignRun } from './campaign-run-validation.js';
+
+interface Score {
+  score: number;
+  max: number;
+}
+
+interface CheckFailure {
+  stableKey?: string;
+  description?: string;
+}
+
+interface RunOutcome {
+  kind?: string;
+  phase?: string;
+  reason?: string | null;
+  appFailures?: Array<string | CheckFailure>;
+}
+
+interface RunNodeRepairs {
+  used?: number;
+}
+
+interface RunLevel {
+  level: number;
+  score: number;
+  max: number;
+  graded?: boolean;
+  durationSec?: number | null;
+  buildCostUsd?: number | null;
+  repairCostUsd?: number | null;
+  firstBuild?: Score & { outcome?: RunOutcome; missed?: Array<string | CheckFailure> };
+  repair?: { used?: number; status?: string | null; nodeRepairs?: RunNodeRepairs[] };
+  regression?: { score?: number | null; max?: number | null } | null;
+  resumedRepair?: unknown;
+  outcome?: RunOutcome;
+  missed?: Array<string | CheckFailure>;
+}
+
+interface BenchmarkRunPayload {
+  outcome?: RunOutcome;
+  totals?: Score & {
+    costUsd?: number | null;
+    costComplete?: boolean | null;
+    durationSec?: number | null;
+  };
+  backendLease?: { state?: string | null };
+  levels?: RunLevel[];
+}
+
+export interface CampaignRunLevelResult {
+  level: number;
+  firstScore: Score | null;
+  firstAbort: { phase: string; reason: string | null } | null;
+  finalScore: Score | null;
+  used: number;
+  repairStatus: string | null;
+  outcome: string | null;
+  durationSec: number | null;
+  costUsd: number | null;
+  failures: string[];
+  // Checks that passed and then failed: the regression suite's missing points.
+  regressions: number;
+  repairs: { used: number } | null;
+  continued: boolean;
+}
+
+export interface CampaignRunResult {
+  unreadable?: string;
+  outcome?: string;
+  outcomePhase?: string | null;
+  outcomeReason?: string | null;
+  score?: Score | null;
+  costUsd?: number | null;
+  costComplete?: boolean | null;
+  durationSec?: number | null;
+  cleanup?: string | null;
+  levels?: CampaignRunLevelResult[];
+}
+
+export function firstGradeAbort(firstBuild: (Score & { outcome?: RunOutcome }) | null | undefined): {
+  phase: string;
+  reason: string | null;
+} | null {
+  const outcome = firstBuild?.outcome;
+  if (!outcome || outcome.kind === 'passed' || !outcome.phase || outcome.phase === 'grading') {
+    return null;
+  }
+  return { phase: outcome.phase, reason: outcome.reason ?? null };
+}
+
+function readCampaignRunResult(path: string, plan: CompiledCampaignPlan,
+  attempt: CampaignAttemptPlan): CampaignRunResult | null {
+  if (!existsSync(path)) return null;
+  try {
+    const run = readArtifactPayload<BenchmarkRunPayload>(path, { expectedKind: 'benchmark_run' });
+    validateCampaignRun(plan, attempt, run, { resultDir: dirname(path) });
+    return {
+      outcome: run.outcome?.kind ?? 'ungraded',
+      outcomePhase: run.outcome?.phase ?? null,
+      outcomeReason: run.outcome?.reason ?? null,
+      score: run.totals ? { score: run.totals.score, max: run.totals.max } : null,
+      costUsd: run.totals?.costUsd ?? null,
+      costComplete: run.totals?.costComplete ?? null,
+      durationSec: run.totals?.durationSec ?? null,
+      cleanup: run.backendLease?.state ?? null,
+      levels: (run.levels ?? []).map(level => ({
+        level: level.level,
+        firstScore: level.firstBuild
+          ? { score: level.firstBuild.score, max: level.firstBuild.max } : null,
+        firstAbort: firstGradeAbort(level.firstBuild),
+        finalScore: level.graded ? { score: level.score, max: level.max } : null,
+        used: level.repair?.used ?? 0,
+        repairStatus: level.repair?.status ?? null,
+        outcome: level.outcome?.kind ?? null,
+        durationSec: level.durationSec ?? null,
+        costUsd: level.buildCostUsd == null && level.repairCostUsd == null
+          ? null : (level.buildCostUsd ?? 0) + (level.repairCostUsd ?? 0),
+        regressions: level.regression
+          ? Math.max(0, (level.regression.max ?? 0) - (level.regression.score ?? 0)) : 0,
+        repairs: level.repair?.nodeRepairs
+          ? { used: level.repair.nodeRepairs.reduce((total, node) => total + (node.used ?? 0), 0) }
+          : null,
+        continued: level.resumedRepair !== undefined && level.resumedRepair !== null,
+        failures: (level.outcome?.appFailures
+          ?? (level.graded ? [] : level.missed ?? level.firstBuild?.missed ?? [])).map(item =>
+          typeof item === 'string' ? item : item.stableKey ?? item.description ?? 'Failed check'),
+      })),
+    };
+  } catch (error) {
+    return { unreadable: error instanceof Error ? error.message : String(error) };
+  }
+}
+
+export function campaignFacts(plan: CompiledCampaignPlan) {
+  const requested = plan.attempts[0]?.condition.requested.levels;
+  return {
+    mode: plan.definition.mode?.id ?? 'sequential',
+    grading: campaignGradingQualification(plan),
+    agents: plan.agents.map(agent => ({
+      adapter: agent.adapter,
+      version: agent.adapterVersion,
+      model: agent.model,
+    })),
+    recipes: (requested ?? []).map(level => ({
+      level: level.level,
+      id: level.recipe?.id ?? null,
+      version: level.recipe?.version ?? null,
+    })),
+    runtime: {
+      controllerImage: plan.definition.runtime.controllerImage ?? null,
+      buildImage: plan.definition.runtime.buildImage ?? null,
+    },
+  };
+}
+
+export interface DependencyProgressNode {
+  id: string;
+  title: string;
+  depth: number;
+  questline: string;
+  dependencies: string[];
+  blockedBy: string[];
+  status: string;
+  repairs: { used: number };
+  exhaustionReason: unknown;
+  checks: { passed: number; failed: number; total: number };
+}
+
+export interface DependencyProgressScore {
+  status?: string;
+  questlineAveragePercentage?: number | null;
+  uniqueChecks?: { percentage?: number | null; availablePoints?: number; passedPoints?: number };
+  questlines?: Array<{
+    id: string;
+    percentage?: number | null;
+    availablePoints?: number;
+    passedPoints?: number;
+  }>;
+}
+
+export interface DependencyProgressQuestline {
+  id: string;
+  title: string;
+  nodes: string[];
+}
+
+export interface DependencyProgressEvidence {
+  attempt: number;
+  depth: number;
+  outcome: string;
+  runId: string | null;
+  sourceSha256: string | null;
+  selectionSha256: string | null;
+}
+
+export interface DependencyProgress {
+  phase: string;
+  activeDepths: number[];
+  attempts: {
+    total: number;
+    maxRemaining: number;
+    features: Array<Record<string, unknown>>;
+  };
+  work: {
+    current: DependencyProgressNode[];
+    working: DependencyProgressNode[];
+    passed: DependencyProgressNode[];
+    failed: DependencyProgressNode[];
+    blocked: DependencyProgressNode[];
+    waiting: DependencyProgressNode[];
+  };
+  nodes: DependencyProgressNode[];
+  questlines?: DependencyProgressQuestline[];
+  score?: DependencyProgressScore;
+  history?: {
+    firstTryPercentage: number;
+    repairAttempts: number;
+  };
+  // Checks that passed in one conclusive grade and failed in a later one.
+  regressions?: number;
+  evidence?: DependencyProgressEvidence[];
+  unreadable?: string;
+  [key: string]: unknown;
+}
+
+function dependencyHistory(state: DependencyState): {
+  history: NonNullable<DependencyProgress['history']>;
+  regressions: number;
+} {
+  const firstOutcomes = new Map<string, string>();
+  const lastOutcomes = new Map<string, string>();
+  const regressed = new Set<string>();
+  let replay = progressionEngine.initialize(state.definition);
+  let repairAttempts = 0;
+  for (const event of state.events as DependencyEvent[]) {
+    if (event.type === 'repairs-granted') {
+      replay = progressionEngine.grantRepairs(replay, event.grant);
+      continue;
+    }
+    // A completed coding session is one repair whether or not its grade finished.
+    if (event.result.completedRepair === true) repairAttempts += 1;
+    if (event.result.outcome === 'conclusive') {
+      for (const node of event.result.nodes) {
+        for (const check of node.checks) {
+          const key = `${node.id}\u0000${check.id}`;
+          if (!firstOutcomes.has(key)) firstOutcomes.set(key, check.outcome);
+          if (check.outcome === 'fail' && lastOutcomes.get(key) === 'pass') regressed.add(key);
+          if (check.outcome !== 'not-run') lastOutcomes.set(key, check.outcome);
+        }
+      }
+    }
+    replay = progressionEngine.recordResult(replay, event.result);
+  }
+  // First-try points over every selected point, the same scale as the final
+  // score, so the two read side by side.
+  let passed = 0;
+  let available = 0;
+  for (const node of state.definition.nodes) {
+    for (const check of node.gradingChecks) {
+      available += check.points;
+      if (firstOutcomes.get(`${node.id}\u0000${check.id}`) === 'pass') passed += check.points;
+    }
+  }
+  return {
+    history: {
+      firstTryPercentage: available ? (passed / available) * 100 : 0,
+      repairAttempts,
+    },
+    regressions: regressed.size,
+  };
+}
+
+export function dependencyProgress(plan: CompiledCampaignPlan, attempt: CampaignAttemptPlan,
+  executionDirectory: string | null): DependencyProgress | null {
+  if (attempt.mode?.id !== 'dependency' || !plan.featureCatalog
+    || !plan.dependencyPolicy || !executionDirectory) return null;
+  const statePath = join(executionDirectory, ARTIFACT_FILE.progressionState);
+  if (!existsSync(statePath)) return null;
+  try {
+    const stored = readProgressionState(statePath, {
+      progression: compileProgressionInput(dependencyRuntimeDefinition(
+        plan.featureCatalog, plan.dependencyPolicy)),
+      featureCatalogIdentity: plan.featureCatalog.identity,
+      dependencyPolicyIdentity: plan.dependencyPolicy.identity,
+      owner: campaignProgressionOwner(plan, attempt, { workspace: true }),
+    });
+    const state = stored.state;
+    const definitions = new Map(state.definition.nodes.map(node => [node.id, node]));
+    const nodes = Object.entries(state.nodes).map(([id, node]) => {
+      const definition = definitions.get(id);
+      if (!definition) throw new Error(`progression state has unknown node ${id}`);
+      const checks = Object.values(node.checks);
+      return {
+        id,
+        title: definition.title,
+        depth: definition.level,
+        // The questline and the dependency ids let a view draw the graph the
+        // engine walks, instead of re-deriving structure from prose.
+        questline: definition.questline,
+        dependencies: [...definition.dependencies],
+        blockedBy: definition.dependencies.filter(parentId => {
+          const parent = state.nodes[parentId];
+          return parent?.status === 'failed' || parent?.status === 'blocked';
+        }),
+        status: node.status,
+        repairs: { ...node.repairs },
+        exhaustionReason: node.exhaustionReason,
+        checks: {
+          passed: checks.filter(value => value === 'pass').length,
+          failed: checks.filter(value => value === 'fail').length,
+          total: checks.length,
+        },
+      };
+    });
+    const action = progressionEngine.nextAction(state);
+    const repair = action.type === 'terminal' ? null : action.repair;
+    const prompt = action.type === 'terminal' ? null : action.prompt as DependencyPromptSelection;
+    const currentIds = new Set(prompt?.nodeIds ?? []);
+    const activeDepths = [...new Set(nodes.filter(node => currentIds.has(node.id))
+      .map(node => node.depth))].sort((left, right) => left - right);
+    return {
+      phase: state.phase,
+      activeDepths,
+      attempts: {
+        total: state.attempts.length,
+        maxRemaining: repair?.remaining ?? 0,
+        features: repair?.nodeIds.map(nodeId => ({ nodeId })) ?? [],
+      },
+      work: {
+        current: nodes.filter(node => currentIds.has(node.id)),
+        working: nodes.filter(node => node.status === 'working'),
+        passed: nodes.filter(node => node.status === 'passed'),
+        failed: nodes.filter(node => node.status === 'failed'),
+        blocked: nodes.filter(node => node.status === 'blocked'),
+        waiting: nodes.filter(node => node.status === 'locked'),
+      },
+      questlines: state.definition.questlines.map(questline => ({
+        id: questline.id, title: questline.title,
+        // the declared, ordered membership — a view must never re-derive it
+        nodes: [...questline.nodes] })),
+      nodes,
+      score: progressionEngine.score(state),
+      ...dependencyHistory(state as DependencyState),
+      evidence: state.attempts.map((item, index) => ({
+        attempt: index + 1,
+        depth: item.level,
+        outcome: item.outcome,
+        runId: item.runId ?? null,
+        sourceSha256: item.sourceSha256 ?? null,
+        selectionSha256: item.selectionSha256 ?? null,
+      })),
+      stateSha256: stored.stateSha256,
+    };
+  } catch (error) {
+    return { unreadable: error instanceof Error ? error.message : String(error), phase: 'unreadable',
+      activeDepths: [], attempts: { total: 0, maxRemaining: 0, features: [] },
+      work: { current: [], working: [], passed: [], failed: [], blocked: [], waiting: [] },
+      nodes: [] };
+  }
+}
+
+export function inspectCampaignAttempt(plan: CompiledCampaignPlan, attempt: CampaignAttemptState,
+  directory: string) {
+  const execution = attempt.executions.at(-1) ?? null;
+  const executionDirectory = execution ? join(directory, execution.output) : null;
+  const artifactPath = (name: string): string | null => execution && executionDirectory
+    && existsSync(join(executionDirectory, name))
+    ? join(execution.output, name).replaceAll('\\', '/') : null;
+  return {
+    id: attempt.plan.id,
+    stack: attempt.plan.stack,
+    model: attempt.plan.model,
+    guidance: attempt.plan.guidance,
+    repetition: attempt.plan.repetition,
+    levels: attempt.plan.levels,
+    status: attempt.status,
+    executions: attempt.executions.length,
+    execution: execution ? {
+      id: execution.id,
+      ordinal: execution.ordinal,
+      status: execution.status,
+      outcome: execution.outcome,
+      reason: execution.reason,
+      output: execution.output,
+      startedAt: execution.startedAt,
+      completedAt: execution.completedAt,
+      runIndex: execution.runIndex,
+    } : null,
+    result: executionDirectory
+      ? readCampaignRunResult(join(executionDirectory, ARTIFACT_FILE.run), plan, attempt.plan)
+      : null,
+    artifacts: executionDirectory ? {
+      run: artifactPath(ARTIFACT_FILE.run),
+      progression: artifactPath(ARTIFACT_FILE.progressionState),
+      process: artifactPath(ARTIFACT_FILE.process),
+      preflight: artifactPath(ARTIFACT_FILE.preflight),
+      recovery: artifactPath(ARTIFACT_FILE.recovery),
+    } : null,
+    dependency: dependencyProgress(plan, attempt.plan, executionDirectory),
+  };
+}
+
+export function inspectCampaignSummary(directory: string) {
+  const { plan, state } = readCampaignState(directory, { requireCurrentInputs: false });
+  return {
+    schemaVersion: 1,
+    id: plan.id,
+    version: plan.version,
+    sha256: plan.contentSha256,
+    title: plan.title,
+    state: plan.state,
+    mode: plan.definition.mode?.id ?? 'sequential',
+    status: state.status,
+    track: plan.definition.track,
+    levels: plan.definition.levels,
+    stacks: plan.stacks.map(stack => stack.id),
+    repetitions: plan.definition.repetitions,
+    maxParallel: state.maxParallel,
+    createdAt: state.createdAt,
+    updatedAt: state.updatedAt,
+    summary: state.summary,
+    budgets: plan.definition.budgets,
+    facts: campaignFacts(plan),
+    attempts: state.attempts.map(attempt => inspectCampaignAttempt(plan, attempt, directory)),
+  };
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-lock.ts b/tools/stack-bench/src/campaigns/campaign-lock.ts
new file mode 100644
index 00000000000..5b0530f2ec7
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-lock.ts
@@ -0,0 +1,218 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { spawnSync } from 'node:child_process';
+import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { hostname } from 'node:os';
+import { join, resolve } from 'node:path';
+
+const VERSION = 2;
+const HASH = /^[a-f0-9]{64}$/;
+const SAFE_ID = /^[a-z0-9][a-z0-9.-]*$/;
+const CONTAINER_HOSTNAME_MOUNT = /\/containers\/([a-f0-9]{64})\/hostname(?=\s|$)/;
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const tokenHash = (token: string): string => createHash('sha256').update(token).digest('hex');
+const fail = (message: string): never => { throw new Error(`campaign lock: ${message}`); };
+
+export interface CampaignIdentity {
+  id: string;
+  contentSha256: string;
+}
+
+export interface CampaignLockRecord {
+  version: number;
+  campaignId: string;
+  campaignSha256: string;
+  ownerPid: number;
+  ownerInstance: string;
+  ownershipMarkerSha256: string;
+  acquiredAt: string;
+}
+
+export interface CampaignLock {
+  path: string;
+  token: string;
+  record: CampaignLockRecord;
+}
+
+interface InspectResult {
+  error?: Error;
+  status: number | null;
+  stdout?: string | null;
+  stderr?: string | null;
+}
+
+type InspectController = (instance: string) => InspectResult;
+type LockOwner = Pick<CampaignLockRecord, 'ownerInstance' | 'ownerPid'>;
+type OwnerAlive = (record: LockOwner, currentInstance: string) => boolean;
+
+function errorCode(error: unknown): string | undefined {
+  return error instanceof Error && 'code' in error && typeof error.code === 'string'
+    ? error.code : undefined;
+}
+
+function processAlive(pid: number): boolean {
+  try { process.kill(pid, 0); return true; }
+  catch (error) { return errorCode(error) === 'EPERM'; }
+}
+
+export function controllerInstance(env: NodeJS.ProcessEnv = process.env, {
+  readMountInfo = () => readFileSync('/proc/self/mountinfo', 'utf8'),
+  fallbackHostname = hostname,
+}: { readMountInfo?: () => string; fallbackHostname?: () => string } = {}): string {
+  const explicit = env.STACK_BENCH_CONTROLLER_INSTANCE?.trim();
+  if (explicit) return explicit;
+  try {
+    const containerId = readMountInfo().match(CONTAINER_HOSTNAME_MOUNT)?.[1];
+    if (containerId) return containerId;
+  } catch { /* /proc is unavailable outside Linux containers */ }
+  return fallbackHostname();
+}
+
+export function ownerAlive(record: LockOwner, currentInstance: string, {
+  inspect = instance => spawnSync('docker', ['inspect', '--type', 'container', '--format',
+    '{{.State.Running}}', instance], { encoding: 'utf8', stdio: 'pipe', timeout: 15_000 }),
+}: { inspect?: InspectController } = {}): boolean {
+  if (record.ownerInstance === currentInstance) return processAlive(record.ownerPid);
+  if (!HASH.test(record.ownerInstance)) {
+    fail(`cannot prove whether controller ${record.ownerInstance} is alive from ${currentInstance}`);
+  }
+  const result = inspect(record.ownerInstance);
+  if (result.error) {
+    fail(`cannot inspect controller ${record.ownerInstance}: ${result.error.message}`);
+  }
+  if (result.status === 0) {
+    const running = String(result.stdout ?? '').trim();
+    if (running === 'true') return true;
+    if (running === 'false') return false;
+    fail(`controller ${record.ownerInstance} returned an invalid Docker state`);
+  }
+  const detail = `${result.stderr ?? ''}${result.stdout ?? ''}`.trim();
+  const escaped = record.ownerInstance.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+  if (new RegExp(`(?:No such object|No such container):\\s*${escaped}(?:\\s|$)`, 'i').test(detail)) {
+    return false;
+  }
+  return fail(`cannot determine whether controller ${record.ownerInstance} is alive: `
+    + `${detail || `docker inspect exited ${result.status}`}`);
+}
+
+function validateRecord(input: unknown, path = '<campaign-lock>'): CampaignLockRecord {
+  if (!object(input)) return fail(`${path} must contain an object`);
+  const fields = new Set(['version', 'campaignId', 'campaignSha256', 'ownerPid',
+    'ownerInstance', 'ownershipMarkerSha256', 'acquiredAt']);
+  for (const key of Object.keys(input)) if (!fields.has(key)) fail(`${path}.${key} is unknown`);
+  for (const key of fields) if (!Object.hasOwn(input, key)) fail(`${path}.${key} is required`);
+  if (input.version !== VERSION) fail(`${path}.version is unsupported`);
+  if (typeof input.campaignId !== 'string' || !SAFE_ID.test(input.campaignId)) {
+    fail(`${path}.campaignId is invalid`);
+  }
+  for (const field of ['campaignSha256', 'ownershipMarkerSha256']) {
+    if (typeof input[field] !== 'string' || !HASH.test(input[field])) fail(`${path}.${field} is invalid`);
+  }
+  if (typeof input.ownerPid !== 'number' || !Number.isInteger(input.ownerPid)
+    || input.ownerPid <= 0) fail(`${path}.ownerPid is invalid`);
+  if (typeof input.ownerInstance !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/.test(input.ownerInstance)) {
+    fail(`${path}.ownerInstance is invalid`);
+  }
+  if (typeof input.acquiredAt !== 'string' || Number.isNaN(Date.parse(input.acquiredAt))) {
+    fail(`${path}.acquiredAt is invalid`);
+  }
+  return structuredClone(input) as unknown as CampaignLockRecord;
+}
+
+function readRecord(path: string): CampaignLockRecord | null {
+  let parsed: unknown;
+  try { parsed = JSON.parse(readFileSync(path, 'utf8')); }
+  catch (error) {
+    if (errorCode(error) === 'ENOENT') return null;
+    fail(`${path} is unreadable; refusing to steal it`);
+  }
+  return validateRecord(parsed, path);
+}
+
+export function campaignLockIsActive(directory: string, campaign: CampaignIdentity,
+  { currentInstance = controllerInstance(), alive = ownerAlive }:
+  { currentInstance?: string; alive?: OwnerAlive } = {}): boolean {
+  const path = join(resolve(directory), '.campaign.lock.json');
+  const record = readRecord(path);
+  if (record === null) return false;
+  if (!campaign || record.campaignId !== campaign.id
+    || record.campaignSha256 !== campaign.contentSha256) {
+    fail(`${path} does not belong to the stored campaign`);
+  }
+  return alive(record, currentInstance);
+}
+
+export function acquireCampaignLock(directory: string, campaign: CampaignIdentity,
+  { ownerPid = process.pid, ownerInstance = controllerInstance(), now = new Date().toISOString(), alive = ownerAlive,
+    uuid = randomUUID }: { ownerPid?: number; ownerInstance?: string; now?: string;
+      alive?: OwnerAlive; uuid?: () => string } = {}): CampaignLock {
+  const root = resolve(directory);
+  mkdirSync(root, { recursive: true });
+  const path = join(root, '.campaign.lock.json');
+  if (!campaign || typeof campaign.id !== 'string' || !SAFE_ID.test(campaign.id)
+    || typeof campaign.contentSha256 !== 'string' || !HASH.test(campaign.contentSha256)) {
+    fail('a compiled campaign identity is required');
+  }
+  if (!Number.isInteger(ownerPid) || ownerPid <= 0) fail('ownerPid is invalid');
+  if (typeof ownerInstance !== 'string' || !/^[A-Za-z0-9][A-Za-z0-9_.-]{0,127}$/.test(ownerInstance)) {
+    fail('ownerInstance is invalid');
+  }
+  if (typeof now !== 'string' || Number.isNaN(Date.parse(now))) fail('acquiredAt is invalid');
+  const token = uuid();
+  const record = validateRecord({
+    version: VERSION,
+    campaignId: campaign.id,
+    campaignSha256: campaign.contentSha256,
+    ownerPid,
+    ownerInstance,
+    ownershipMarkerSha256: tokenHash(token),
+    acquiredAt: now,
+  });
+  for (let attempt = 0; attempt < 4; attempt += 1) {
+    try {
+      writeFileSync(path, `${JSON.stringify(record, null, 2)}\n`, { flag: 'wx', mode: 0o600 });
+      return { path, token, record };
+    } catch (error) {
+      if (errorCode(error) !== 'EEXIST') throw error;
+      const existing = readRecord(path);
+      if (existing === null) continue;
+      if (alive(existing, ownerInstance)) {
+        fail(`${campaign.id} is already controlled by ${existing.ownerInstance} pid ${existing.ownerPid}`);
+      }
+      const stale = `${path}.stale-${uuid()}`;
+      try {
+        renameSync(path, stale);
+        rmSync(stale, { force: true });
+      } catch (renameError) {
+        if (errorCode(renameError) !== 'ENOENT') throw renameError;
+      }
+    }
+  }
+  return fail(`could not acquire ${campaign.id} after stale-lock contention`);
+}
+
+export function releaseCampaignLock(lock: CampaignLock): boolean {
+  const input: unknown = lock;
+  if (!object(input) || typeof input.path !== 'string' || typeof input.token !== 'string'
+    || !object(input.record)) fail('release requires the acquired lock handle');
+  const releasing = `${lock.path}.releasing-${randomUUID()}`;
+  try { renameSync(lock.path, releasing); }
+  catch (error) {
+    if (errorCode(error) === 'ENOENT') return false;
+    throw error;
+  }
+  const existing = readRecord(releasing);
+  if (existing === null) return fail(`${releasing} disappeared while releasing the campaign lock`);
+  const expected = validateRecord(lock.record);
+  if (existing.campaignId !== expected.campaignId
+    || existing.campaignSha256 !== expected.campaignSha256
+    || existing.ownerPid !== expected.ownerPid
+    || existing.ownerInstance !== expected.ownerInstance
+    || existing.ownershipMarkerSha256 !== tokenHash(lock.token)) {
+    try { renameSync(releasing, lock.path); }
+    catch { /* preserve the moved evidence if another owner already acquired */ }
+    fail(`${lock.path} no longer belongs to this controller; preserved ownership evidence at ${releasing}`);
+  }
+  rmSync(releasing);
+  return true;
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-mode.ts b/tools/stack-bench/src/campaigns/campaign-mode.ts
new file mode 100644
index 00000000000..488b104accb
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-mode.ts
@@ -0,0 +1,98 @@
+import {
+  DEFAULT_DEPENDENCY_WORK_SELECTION,
+  DEPENDENCY_MODE_VERSION,
+  isDependencyWorkSelection,
+} from '../progression/dependency-definition.js';
+import { isExactSemanticVersion } from '../semantic-version.js';
+
+export const CAMPAIGN_MODE_SCHEMA_VERSION = 1;
+
+const ID = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/;
+type UnknownRecord = Record<string, unknown>;
+
+export interface CampaignModeInput extends UnknownRecord {
+  id: string;
+  version: string;
+}
+
+export interface CampaignModeDefinition extends CampaignModeInput {
+  validate(value: CampaignModeInput, options: { at: string }): CampaignModeInput;
+}
+
+export interface CampaignModeRegistry {
+  ids: readonly string[];
+  validate(input: unknown, options?: { at?: string }): CampaignModeInput;
+}
+
+const object = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+function fail(message: string): never {
+  throw new Error(`invalid campaign mode: ${message}`);
+}
+
+function validateIdentity(value: unknown, at: string): asserts value is CampaignModeInput {
+  if (!object(value)) fail(`${at} must be an object`);
+  if (typeof value.id !== 'string' || !ID.test(value.id)) fail(`${at}.id is invalid`);
+  if (!isExactSemanticVersion(value.version)) {
+    fail(`${at}.version must be an exact semantic version`);
+  }
+}
+
+export function createCampaignModeRegistry(modes: CampaignModeDefinition[]): CampaignModeRegistry {
+  if (!Array.isArray(modes) || modes.length === 0) fail('registry requires at least one mode');
+  const entries = new Map<string, CampaignModeDefinition>();
+  for (const mode of modes) {
+    validateIdentity(mode, 'registry entry');
+    if (typeof mode.validate !== 'function') fail(`${mode.id}@${mode.version} requires validate()`);
+    const key = `${mode.id}@${mode.version}`;
+    if (entries.has(key)) fail(`registry repeats ${key}`);
+    entries.set(key, Object.freeze({ ...mode }));
+  }
+  return Object.freeze({
+    ids: Object.freeze([...entries.keys()].sort()),
+    validate(input: unknown, { at = 'mode' }: { at?: string } = {}) {
+      validateIdentity(input, at);
+      const key = `${input.id}@${input.version}`;
+      const mode = entries.get(key);
+      if (!mode) fail(`${at} selects unknown ${key}; available: ${[...entries.keys()].sort().join(', ')}`);
+      return mode.validate(structuredClone(input), { at });
+    },
+  });
+}
+
+const sequentialMode = {
+  id: 'sequential',
+  version: '1.0.0',
+  validate(value: CampaignModeInput, { at }: { at: string }): CampaignModeInput {
+    const fields = new Set(['id', 'version']);
+    for (const key of Object.keys(value)) {
+      if (!fields.has(key)) fail(`${at}.${key} is unknown for sequential mode`);
+    }
+    return { id: value.id, version: value.version };
+  },
+};
+
+const dependencyMode = {
+  id: 'dependency',
+  version: DEPENDENCY_MODE_VERSION,
+  validate(value: CampaignModeInput, { at }: { at: string }): CampaignModeInput {
+    const fields = new Set(['id', 'version', 'workSelection']);
+    for (const key of Object.keys(value)) {
+      if (!fields.has(key)) fail(`${at}.${key} is unknown for dependency mode`);
+    }
+    const workSelection = value.workSelection ?? DEFAULT_DEPENDENCY_WORK_SELECTION;
+    if (!isDependencyWorkSelection(workSelection)) {
+      fail(`${at}.workSelection must be "feature", "progressive", or "all-at-once"`);
+    }
+    return { id: value.id, version: value.version, workSelection };
+  },
+};
+
+export const CAMPAIGN_MODE_REGISTRY = createCampaignModeRegistry([
+  dependencyMode,
+  sequentialMode,
+]);
+
+export function validateCampaignMode(value: unknown, options?: { at?: string }): CampaignModeInput {
+  return CAMPAIGN_MODE_REGISTRY.validate(value, options);
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-path.ts b/tools/stack-bench/src/campaigns/campaign-path.ts
new file mode 100644
index 00000000000..cc32dbcc163
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-path.ts
@@ -0,0 +1,27 @@
+import { existsSync, lstatSync } from 'node:fs';
+import { join, relative, resolve, sep } from 'node:path';
+
+export const CAMPAIGN_FILE = Object.freeze({
+  plan: 'plan.json',
+  state: 'state.json',
+  reportJson: 'report.json',
+  reportHtml: 'report.html',
+});
+
+export function campaignChildPath(root: string, path: string, label: string): string {
+  const absoluteRoot = resolve(root);
+  const absolute = resolve(absoluteRoot, path);
+  const rel = relative(absoluteRoot, absolute);
+  if (rel === '..' || rel.startsWith(`..${sep}`) || rel === '') {
+    throw new Error(`${label} is not a child of the campaign directory`);
+  }
+  let cursor = absoluteRoot;
+  for (const segment of rel.split(sep)) {
+    cursor = join(cursor, segment);
+    if (!existsSync(cursor)) break;
+    if (lstatSync(cursor).isSymbolicLink()) {
+      throw new Error(`${label} contains a symbolic link: ${cursor}`);
+    }
+  }
+  return absolute;
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-progression-grant.ts b/tools/stack-bench/src/campaigns/campaign-progression-grant.ts
new file mode 100644
index 00000000000..08dce269320
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-progression-grant.ts
@@ -0,0 +1,322 @@
+import { cpSync, existsSync, lstatSync, mkdirSync, readdirSync, renameSync, rmSync }
+  from 'node:fs';
+import { dirname, join, relative, resolve, sep } from 'node:path';
+
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import { ARTIFACT_FILE } from '../evidence/artifacts.js';
+import { compileProgressionInput, dependencyRuntimeDefinition }
+  from '../progression/progression-definition.js';
+import type { CompiledDependencyPolicyDefinition, CompiledProgressionDefinition,
+  ProgressionInput } from '../progression/progression-definition.js';
+import { grantProgressionState, readProgressionState }
+  from '../progression/progression-state.js';
+import type { ProgressionOwner } from '../progression/progression-state.js';
+import { acquireCampaignLock, releaseCampaignLock } from './campaign-lock.js';
+import { campaignProgressionOwner } from './campaign-compiler.js';
+import { inspectCampaign } from './campaign-runner.js';
+import { scheduleDependencyContinuation, writeCampaignState }
+  from './campaign-scheduler.js';
+
+export interface CampaignDependencyRepairGrant {
+  attemptId: string;
+  grantId: string;
+  level: number;
+  nodeIds: string[];
+  repairs: number;
+}
+
+export interface GrantWorkspace {
+  directory: string;
+  relativePath: string;
+  created: boolean;
+}
+
+interface GrantContinuation extends Omit<CampaignDependencyRepairGrant, 'attemptId'> {
+  stateSha256: string;
+  resumeFrom: string;
+  scheduledAt?: string;
+}
+
+interface GrantAttemptPlan {
+  id: string;
+  stack: string;
+  agentAdapter: string;
+  model: string;
+  condition: { sha256: string };
+  mode?: { id?: string };
+}
+
+interface GrantExecution {
+  output: string;
+  status: string;
+  continuation?: GrantContinuation;
+}
+
+interface GrantCampaignSnapshot {
+  plan: {
+    id: string;
+    version: string;
+    contentSha256: string;
+    definition: { mode?: { id?: string }; track: string };
+    featureCatalog: ProgressionInput<CompiledProgressionDefinition> | null;
+    dependencyPolicy: ProgressionInput<CompiledDependencyPolicyDefinition> | null;
+  };
+  state: {
+    status: string;
+    attempts: Array<{
+      plan: GrantAttemptPlan;
+      status: string;
+      executions: GrantExecution[];
+    }>;
+  };
+  paths: { state: string };
+}
+
+interface StoredProgressionState {
+  state: {
+    phase?: string;
+    grants: Array<Omit<CampaignDependencyRepairGrant, 'attemptId'>>;
+  };
+  stateSha256: string;
+}
+
+interface ProgressionContextOptions extends Record<string, unknown> {
+  owner: ProgressionOwner;
+}
+
+interface ProgressionGrantOptions extends ProgressionContextOptions {
+  grant: Omit<CampaignDependencyRepairGrant, 'attemptId'>;
+  expectedStateSha256: string;
+}
+
+interface ProgressionGrantResult {
+  stateSha256: string;
+}
+
+interface GrantOptions {
+  inspect?: (directory: string, options: { requireCurrentInputs: boolean }) =>
+    GrantCampaignSnapshot;
+  readState?: (path: string, options: ProgressionContextOptions) => StoredProgressionState;
+  grantState?: (path: string, options: ProgressionGrantOptions) => ProgressionGrantResult;
+  schedule?: (state: GrantCampaignSnapshot['state'], attemptId: string, continuation: GrantContinuation,
+    options: { now: string }) => unknown;
+  writeState?: (path: string, plan: unknown, state: unknown) => unknown;
+  acquire?: (directory: string, plan: { id: string; contentSha256: string }) => unknown;
+  release?: (lock: unknown) => unknown;
+  prepareWorkspace?: typeof prepareGrantWorkspace;
+  now?: string;
+}
+
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function childPath(root: string, input: string, label: string): string {
+  const absoluteRoot = resolve(root);
+  const absolute = resolve(absoluteRoot, input);
+  const relation = relative(absoluteRoot, absolute);
+  if (!relation || relation === '..' || relation.startsWith(`..${sep}`)) {
+    throw new Error(`${label} is outside the campaign directory`);
+  }
+  return absolute;
+}
+
+const SAFE_ID = /^[a-z0-9][a-z0-9.-]*$/;
+const FEATURE_ID = /^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;
+
+function rejectSymlinks(path: string, label: string): void {
+  const stat = lstatSync(path);
+  if (stat.isSymbolicLink()) throw new Error(`${label} cannot be a symbolic link`);
+  if (!stat.isDirectory()) return;
+  for (const entry of readdirSync(path, { withFileTypes: true })) {
+    const child = join(path, entry.name);
+    if (entry.isSymbolicLink()) throw new Error(`${label} contains a symbolic link`);
+    if (entry.isDirectory()) rejectSymlinks(child, label);
+  }
+}
+
+export function prepareGrantWorkspace(root: string, executionDirectory: string,
+  attemptId: string, grantId: string): GrantWorkspace {
+  if (!SAFE_ID.test(attemptId) || !SAFE_ID.test(grantId)) {
+    throw new Error('grant workspace requires safe attempt and grant ids');
+  }
+  const execution = lstatSync(executionDirectory);
+  if (execution.isSymbolicLink() || !execution.isDirectory()) {
+    throw new Error('completed campaign execution must be a real directory');
+  }
+  const relativePath = `continuations/${attemptId}/${grantId}`;
+  const target = childPath(root, relativePath, 'grant workspace');
+  if (existsSync(target)) {
+    rejectSymlinks(target, 'grant workspace');
+    return { directory: target, relativePath, created: false };
+  }
+  mkdirSync(dirname(target), { recursive: true });
+  const temporary = `${target}.tmp-${process.pid}-${Date.now()}`;
+  const required = new Set(['source', ARTIFACT_FILE.progressionState, ARTIFACT_FILE.run, 'progression']);
+  for (const name of required) {
+    const source = join(executionDirectory, name);
+    if (!existsSync(source)) throw new Error(`completed campaign execution has no ${name}`);
+    rejectSymlinks(source, `completed campaign execution ${name}`);
+  }
+  try {
+    cpSync(executionDirectory, temporary, { recursive: true, errorOnExist: true,
+      filter: source => {
+        const rel = relative(executionDirectory, source);
+        if (!rel) return true;
+        const [top] = rel.split(/[\\/]/);
+        return required.has(top!) && !/[\\/]media([\\/]|$)/.test(rel);
+      } });
+    renameSync(temporary, target);
+  } finally {
+    rmSync(temporary, { recursive: true, force: true });
+  }
+  rejectSymlinks(target, 'grant workspace');
+  return { directory: target, relativePath, created: true };
+}
+
+function request(input: unknown): CampaignDependencyRepairGrant {
+  const value = structuredClone(input);
+  if (!isRecord(value)) {
+    throw new Error('dependency repair grant must be an object');
+  }
+  const fields = new Set(['attemptId', 'grantId', 'level', 'nodeIds', 'repairs']);
+  for (const key of Object.keys(value)) {
+    if (!fields.has(key)) throw new Error(`dependency repair grant.${key} is unknown`);
+  }
+  for (const field of ['attemptId', 'grantId']) {
+    if (typeof value[field] !== 'string' || !SAFE_ID.test(value[field])) {
+      throw new Error(`dependency repair grant.${field} is required`);
+    }
+  }
+  if (typeof value.level !== 'number' || !Number.isSafeInteger(value.level) || value.level < 1) {
+    throw new Error('dependency repair grant.level must be a positive integer');
+  }
+  if (typeof value.repairs !== 'number' || !Number.isSafeInteger(value.repairs)
+    || value.repairs < 1) {
+    throw new Error('dependency repair grant.repairs must be a positive safe integer');
+  }
+  if (!Array.isArray(value.nodeIds) || value.nodeIds.length === 0
+    || value.nodeIds.some(nodeId => typeof nodeId !== 'string' || !FEATURE_ID.test(nodeId))) {
+    throw new Error('dependency repair grant.nodeIds must be a non-empty feature list');
+  }
+  const nodeIds = [...new Set(value.nodeIds as string[])].sort();
+  if (nodeIds.length !== (value.nodeIds as string[]).length) {
+    throw new Error('dependency repair grant.nodeIds cannot contain duplicates');
+  }
+  return { attemptId: value.attemptId as string, grantId: value.grantId as string,
+    level: value.level, nodeIds, repairs: value.repairs };
+}
+
+function sameGrant(left: unknown, right: unknown): boolean {
+  return canonicalDefinitionJson(left) === canonicalDefinitionJson(right);
+}
+
+export function grantCampaignDependencyRepairs(directory: string, input: unknown, {
+  inspect = inspectCampaign,
+  readState = (path: string, options: ProgressionContextOptions): StoredProgressionState =>
+    readProgressionState(path, options),
+  grantState = grantProgressionState,
+  schedule = scheduleDependencyContinuation,
+  writeState = writeCampaignState,
+  acquire = acquireCampaignLock,
+  release = releaseCampaignLock as (lock: unknown) => boolean,
+  prepareWorkspace = prepareGrantWorkspace,
+  now = new Date().toISOString(),
+}: GrantOptions = {}): {
+    attemptId: string;
+    execution: string;
+    grant: Omit<CampaignDependencyRepairGrant, 'attemptId'>;
+    grantWorkspace: string;
+    stateSha256: string;
+    scheduled: true;
+  } {
+  const root = resolve(directory);
+  const desired = request(input);
+  const initial = inspect(root, { requireCurrentInputs: false });
+  const lock = acquire(root, initial.plan);
+  try {
+    const campaign = inspect(root, { requireCurrentInputs: false });
+    if (campaign.plan.contentSha256 !== initial.plan.contentSha256) {
+      throw new Error('campaign plan changed before the dependency repair grant');
+    }
+    if (campaign.plan.definition.mode?.id !== 'dependency'
+      || !campaign.plan.featureCatalog || !campaign.plan.dependencyPolicy) {
+      throw new Error('repair grants require one stored dependency campaign');
+    }
+    const attempt = campaign.state.attempts.find(item => item.plan.id === desired.attemptId);
+    if (!attempt) throw new Error(`campaign attempt ${desired.attemptId} does not exist`);
+    const execution = attempt.executions.at(-1);
+    if (!execution) throw new Error(`campaign attempt ${desired.attemptId} has no execution`);
+    const marker = execution.continuation;
+    if (marker !== undefined) {
+      const markedGrant = { grantId: marker.grantId, level: marker.level,
+        nodeIds: marker.nodeIds, repairs: marker.repairs };
+      if (!sameGrant(markedGrant, {
+        grantId: desired.grantId, level: desired.level,
+        nodeIds: desired.nodeIds, repairs: desired.repairs,
+      })) throw new Error(`campaign attempt ${desired.attemptId} has a different continuation`);
+    } else if (campaign.state.status !== 'completed' || attempt.status !== 'completed'
+      || execution.status !== 'completed') {
+      throw new Error('repair grants require one unextended completed campaign attempt');
+    }
+
+    const executionDirectory = childPath(root, execution.output, 'campaign execution');
+    const workspace = marker === undefined
+      ? prepareWorkspace(root, executionDirectory, desired.attemptId, desired.grantId)
+      : {
+          directory: childPath(root, marker.resumeFrom, 'grant workspace'),
+          relativePath: marker.resumeFrom,
+          created: false,
+        };
+    const progression = compileProgressionInput(dependencyRuntimeDefinition(
+      campaign.plan.featureCatalog, campaign.plan.dependencyPolicy));
+    const owner = campaignProgressionOwner(campaign.plan, attempt.plan, { workspace: true });
+    const statePath = join(workspace.directory, ARTIFACT_FILE.progressionState);
+    const stored = readState(statePath, {
+      progression,
+      featureCatalogIdentity: campaign.plan.featureCatalog.identity,
+      dependencyPolicyIdentity: campaign.plan.dependencyPolicy.identity,
+      owner,
+      requireCurrentEngine: true,
+    });
+    const grant = { grantId: desired.grantId, level: desired.level,
+      nodeIds: desired.nodeIds, repairs: desired.repairs };
+    const priorGrant = stored.state.grants.find(item => item.grantId === desired.grantId);
+    if (marker !== undefined) {
+      if (!priorGrant || !sameGrant(priorGrant, grant)
+        || stored.stateSha256 !== marker.stateSha256) {
+        throw new Error('campaign continuation marker does not match progression state');
+      }
+      return { attemptId: desired.attemptId, execution: execution.output,
+        grant, grantWorkspace: workspace.relativePath,
+        stateSha256: marker.stateSha256, scheduled: true };
+    }
+    let granted;
+    if (stored.state.phase === 'terminal') {
+      if (priorGrant) throw new Error(`duplicate dependency repair grant ${desired.grantId}`);
+      granted = grantState(statePath, {
+        progression,
+        featureCatalogIdentity: campaign.plan.featureCatalog.identity,
+        dependencyPolicyIdentity: campaign.plan.dependencyPolicy.identity,
+        owner,
+        grant,
+        expectedStateSha256: stored.stateSha256,
+      });
+    } else {
+      if (!priorGrant || !sameGrant(priorGrant, grant)) {
+        throw new Error('active progression state does not match the requested continuation grant');
+      }
+      granted = stored;
+    }
+
+    const next = schedule(campaign.state, desired.attemptId, {
+      ...grant, stateSha256: granted.stateSha256,
+      resumeFrom: workspace.relativePath,
+    }, { now });
+    writeState(campaign.paths.state, campaign.plan, next);
+    return { attemptId: desired.attemptId, execution: execution.output,
+      grant, grantWorkspace: workspace.relativePath,
+      stateSha256: granted.stateSha256, scheduled: true };
+  } finally {
+    release(lock);
+  }
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-report.ts b/tools/stack-bench/src/campaigns/campaign-report.ts
new file mode 100644
index 00000000000..fcd6b9a5b01
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-report.ts
@@ -0,0 +1,836 @@
+import { randomUUID } from 'node:crypto';
+import { mkdirSync, renameSync, writeFileSync } from 'node:fs';
+import { join, relative, resolve, sep } from 'node:path';
+
+import { ARTIFACT_FILE, emptyArtifactIdentities, readArtifactPayload, writeArtifact }
+  from '../evidence/artifacts.js';
+import { inspectCampaign } from './campaign-runner.js';
+import { validateCampaignRun } from './campaign-run-validation.js';
+import { canonicalDefinitionJson, canonicalizeDefinition } from '../composition/definition-plan.js';
+import { sha256 } from '../evidence/provenance.js';
+import { campaignGradingQualification } from './campaign-compiler.js';
+import type { CampaignAttemptPlan, CampaignGradingQualification,
+  CompiledCampaignPlan } from './campaign-compiler.js';
+import type { CampaignExecution, CampaignState } from './campaign-scheduler.js';
+import type { RunOutcome } from '../evidence/outcomes.js';
+import { CAMPAIGN_FILE } from './campaign-path.js';
+import type { BenchmarkRunRecord, GradeBundleSelection, RunLevelRecord, RunTotals }
+  from '../evidence/benchmark-run.js';
+
+export const CAMPAIGN_REPORT_SCHEMA_VERSION = 5;
+
+interface RunCheck {
+  executionId: string;
+  featureId: string | number;
+  criterionId: string;
+  points: number;
+  [key: string]: unknown;
+}
+
+export interface RunSelection extends Omit<GradeBundleSelection,
+'checks' | 'observedChecks'> {
+  sha256?: string;
+  checks?: RunCheck[];
+  observedChecks?: Array<{ points?: number; [key: string]: unknown }>;
+  specifications?: {
+    observed?: string[];
+    requested?: string[];
+    expected?: string[];
+  };
+  schemaVersion?: number;
+}
+
+interface RunObservation {
+  reportedChecks?: unknown[];
+  observedPoints?: number;
+  passedPoints?: number;
+  sourceSha256?: string;
+  artifact?: string;
+  outcome?: unknown;
+  selectionSha256?: string;
+  selectedChecks?: string[];
+  scoreContribution?: boolean;
+  repairVisible?: boolean;
+}
+
+interface RunLevel extends Omit<Partial<RunLevelRecord>,
+'selection' | 'firstBuild' | 'repair'> {
+  firstBuild?: {
+    score?: number;
+    max?: number;
+    outcome?: RunOutcome;
+    observations?: RunObservation;
+    source?: unknown;
+    [key: string]: unknown;
+  };
+  score?: number;
+  max?: number;
+  repairCostUsd?: number;
+  repairs?: number;
+  repair?: unknown;
+  outcome?: RunOutcome;
+  selection?: RunSelection;
+}
+
+export interface BenchmarkRun extends Partial<Pick<BenchmarkRunRecord,
+'id' | 'parentAttemptId' | 'outcome'>> {
+  levels?: RunLevel[];
+  condition?: { requested?: { levels?: Array<{ level: number; selection?: RunSelection }> } };
+  outcome?: RunOutcome;
+  totals?: Partial<RunTotals>;
+  progressionStatus?: {
+    phase?: string;
+    score?: { questlineAveragePercentage?: number | null; uniqueChecks?: {
+      gradedPoints?: number;
+      availablePoints?: number;
+      percentage?: number | null;
+    } };
+  };
+}
+
+export interface MetricSummary {
+  n: number;
+  center: number | null;
+  spread: { kind: string; [key: string]: number | string } | null;
+  min: number | null;
+  max: number | null;
+}
+
+export interface CampaignRunObservationSummary {
+  selectedChecks: number;
+  reportedChecks: number | null;
+  selectedPoints: number | null;
+  observedPoints: number | null;
+  passedPoints: number | null;
+  passRate: number | null;
+  coverageRate: number | null;
+  scoreContribution: false;
+  repairVisible: false;
+  levels: Array<{
+    level: number;
+    specifications: string[];
+    selectedChecks: number;
+    reportedChecks: number | null;
+    selectedPoints: number | null;
+    observedPoints: number | null;
+    passedPoints: number | null;
+    passRate: number | null;
+    coverageRate: number | null;
+    scoreContribution: false;
+    repairVisible: false;
+    sourceSha256: string | null;
+    artifact: string | null;
+    outcome: unknown;
+  }>;
+}
+
+interface CampaignReportCondition {
+  key: string;
+  stack: string;
+  agent: { adapter: string; model: string };
+  condition: { id: string; version: string; sha256: string; requested?: {
+    levels?: Array<{ level: number; selection?: RunSelection }> } };
+  sample: {
+    plannedAttempts: number;
+    completedAttempts: number;
+    invalidAttempts: number;
+    pendingAttempts: number;
+    executions: number;
+    invalidExecutions: number;
+    invalidExecutionRate: number;
+  };
+  metrics: Record<string, MetricSummary>;
+  firstBuildObservations: {
+    sample: { selectedAttempts: number; measuredAttempts: number };
+    metrics: { passRate: MetricSummary; coverageRate: MetricSummary };
+  } | null;
+}
+
+interface CampaignReportExecution {
+  id: string;
+  status: string;
+  outcome: unknown;
+  evidence: string;
+  admissionEvidence: string;
+  firstBuildObservations: CampaignRunObservationSummary | null;
+  metrics?: Record<string, number | null> | null;
+  [key: string]: unknown;
+}
+
+interface CampaignReportAttempt extends CampaignAttemptPlan {
+  status: string;
+  executions: CampaignReportExecution[];
+  metrics: Record<string, number | null> | null;
+  firstBuildObservations: CampaignRunObservationSummary | null;
+}
+
+export interface CampaignReport {
+  reportSchemaVersion: number;
+  campaign: { id: string; version: string; state: string; sha256: string; title: string };
+  scope: {
+    track: string;
+    levels: number[];
+    selection: unknown;
+    bindings: Array<{ level: number; [key: string]: unknown }>;
+    grading: CampaignGradingQualification;
+    stacks: Array<{ id: string; [key: string]: unknown }>;
+    agents: unknown[];
+    conditions: CampaignReportCondition['condition'][];
+    repetitions: number;
+    repetitionsByStack: Record<string, number>;
+    parallelism: number;
+    runtime: Record<string, unknown>;
+    pricing: Record<string, unknown>;
+  };
+  policy: { primaryMetric: string; secondaryMetrics: string[]; dispersion: string;
+    [key: string]: unknown };
+  attempts: CampaignReportAttempt[];
+  conditions: CampaignReportCondition[];
+  summary: { campaignStatus: string; plannedAttempts: number; completedAttempts: number;
+    invalidAttempts: number; invalidAttemptRate: number; pendingAttempts: number;
+    runningAttempts: number; executions: number; invalidExecutions: number;
+    invalidExecutionRate: number };
+  limitations: string[];
+  contentSha256: string;
+}
+
+const isRecord = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+const number = (value: unknown): number | null => typeof value === 'number' && Number.isFinite(value)
+  ? value : null;
+const ratio = (value: number | null, max: number | null): number | null =>
+  value !== null && max !== null && Number.isFinite(value) && Number.isFinite(max) && max > 0
+  ? Number((value / max).toFixed(6)) : null;
+const mean = (values: number[]): number =>
+  values.reduce((total, value) => total + value, 0) / values.length;
+
+export function formatDurationMs(value: unknown): string {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) return '—';
+  const totalSeconds = Math.round(value / 1000);
+  const hours = Math.floor(totalSeconds / 3600);
+  const minutes = Math.floor((totalSeconds % 3600) / 60);
+  const seconds = totalSeconds % 60;
+  if (hours) return `${hours}h ${minutes}m ${seconds}s`;
+  if (minutes) return `${minutes}m ${seconds}s`;
+  return `${seconds}s`;
+}
+
+function formatUsd(value: unknown): string {
+  return typeof value === 'number' && Number.isFinite(value)
+    ? `$${Number(value.toFixed(4))}` : '—';
+}
+
+function formatRate(value: unknown): string {
+  return typeof value === 'number' && Number.isFinite(value)
+    ? `${Number((value * 100).toFixed(2))}%` : '—';
+}
+
+function formatTokens(value: unknown): string {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) return '—';
+  if (value >= 1_000_000) return `${Number((value / 1_000_000).toFixed(1))}M tokens`;
+  if (value >= 1_000) return `${Math.round(value / 1_000)}k tokens`;
+  return `${Math.round(value)} tokens`;
+}
+
+function formatMetric(metric: string, value: unknown): string {
+  if (metric.endsWith('Rate')) return formatRate(value);
+  if (metric.endsWith('CostUsd') || metric.endsWith('SpendUsd')) return formatUsd(value);
+  if (metric === 'totalDurationMs') return formatDurationMs(value);
+  return typeof value === 'number' && Number.isFinite(value) ? String(value) : '—';
+}
+
+function declaredMax(measurableMax: unknown, outcome: RunOutcome | undefined,
+  selection: RunSelection | undefined): number | null {
+  if (typeof measurableMax !== 'number' || !Number.isFinite(measurableMax)
+    || measurableMax < 0) return null;
+  if (outcome?.inconclusive != null && !Array.isArray(outcome.inconclusive)) return null;
+  if (outcome?.harnessFailures != null && !Array.isArray(outcome.harnessFailures)) return null;
+  const unavailable = [...new Set([
+    ...(outcome?.inconclusive ?? []),
+    ...(outcome?.harnessFailures ?? []),
+  ])];
+  if (!unavailable.length) return measurableMax;
+  if (!Array.isArray(selection?.checks)) return null;
+  let unavailablePoints = 0;
+  for (const key of unavailable) {
+    const [executionId, featureId, criterionId, ...extra] = String(key).split('/');
+    if (extra.length || !executionId || !featureId || !criterionId) return null;
+    const check = selection.checks.find(item => item.executionId === executionId
+      && String(item.featureId) === featureId && String(item.criterionId) === criterionId);
+    if (!check || !Number.isFinite(check.points) || check.points < 0) return null;
+    unavailablePoints += check.points;
+  }
+  return measurableMax + unavailablePoints;
+}
+
+function quantile(sorted: number[], p: number): number {
+  if (sorted.length === 1) return sorted[0]!;
+  const index = (sorted.length - 1) * p;
+  const low = Math.floor(index);
+  const high = Math.ceil(index);
+  return sorted[low]! + (sorted[high]! - sorted[low]!) * (index - low);
+}
+
+// A spread needs a sample. Below three completed attempts the centre and the
+// range are reported and the spread stays null rather than describing noise.
+const MINIMUM_SPREAD_SAMPLE = 3;
+
+function summarize(values: Array<number | null | undefined>, dispersion: string): MetricSummary {
+  const present = values.filter((value): value is number => typeof value === 'number'
+    && Number.isFinite(value)).sort((a, b) => a - b);
+  if (!present.length) return { n: 0, center: null, spread: null, min: null, max: null };
+  const spreadable = present.length >= MINIMUM_SPREAD_SAMPLE;
+  if (dispersion === 'median-iqr') return {
+    n: present.length,
+    center: Number(quantile(present, 0.5).toFixed(6)),
+    spread: spreadable ? { kind: 'iqr', q1: Number(quantile(present, 0.25).toFixed(6)),
+      q3: Number(quantile(present, 0.75).toFixed(6)) } : null,
+    min: present[0]!, max: present.at(-1)!,
+  };
+  const center = mean(present);
+  const variance = present.length > 1
+    ? present.reduce((total, value) => total + ((value - center) ** 2), 0) / (present.length - 1)
+    : 0;
+  return { n: present.length, center: Number(center.toFixed(6)),
+    spread: spreadable ? { kind: 'sd', value: Number(Math.sqrt(variance).toFixed(6)) } : null,
+    min: present[0]!, max: present.at(-1)! };
+}
+
+export function campaignRunMetrics(run: BenchmarkRun): Record<string, number | null> {
+  const levels = run.levels ?? [];
+  const completeFirstBuild = levels.length > 0 && levels.every(level =>
+    number(level.firstBuild?.score) !== null && number(level.firstBuild?.max) !== null);
+  const firstScore = completeFirstBuild
+    ? levels.reduce((total, level) => total + level.firstBuild!.score!, 0) : null;
+  const firstMax = completeFirstBuild
+    ? levels.reduce((total, level) => total + level.firstBuild!.max!, 0) : null;
+  const correctionNeeded = completeFirstBuild
+    ? levels.some(level => level.firstBuild!.score! < level.firstBuild!.max!) : null;
+  const completeCorrectionSpend = correctionNeeded === true
+    && levels.every(level => number(level.repairCostUsd) !== null);
+  const correctionSpendUsd = completeCorrectionSpend
+    ? Number(levels.reduce((total, level) => total + level.repairCostUsd!, 0).toFixed(6)) : null;
+  const correctionSuccessRate = correctionNeeded !== true ? null
+    : run.outcome?.kind === 'passed' ? 1
+      : run.outcome?.kind === 'app_failure' ? 0 : null;
+  const firstDeclaredMaxima: Array<number | null> = completeFirstBuild
+    ? levels.map(level => declaredMax(level.firstBuild!.max, level.firstBuild!.outcome,
+      level.selection)) : [];
+  const finalMeasuredMaxima: Array<number | null> = levels.map(level => number(level.max));
+  const finalDeclaredMaxima: Array<number | null> = levels.map(level => declaredMax(level.max, level.outcome,
+    level.selection));
+  // Dependency mode scores passed points over every selected point in the
+  // graph, the same scale as the first build. The equal-weight questline
+  // average is a secondary view, because questlines range from 9 to 59 points.
+  const terminal = run.progressionStatus?.phase === 'terminal';
+  const progressionScore = run.progressionStatus === undefined
+    ? undefined
+    : terminal ? number(run.progressionStatus?.score?.uniqueChecks?.percentage) : null;
+  const questlineAverage = run.progressionStatus === undefined
+    ? null
+    : terminal ? number(run.progressionStatus?.score?.questlineAveragePercentage) : null;
+  const progressionCoverage = run.progressionStatus === undefined
+    ? undefined
+    : terminal
+      ? ratio(number(run.progressionStatus?.score?.uniqueChecks?.gradedPoints),
+        number(run.progressionStatus?.score?.uniqueChecks?.availablePoints)) : null;
+  // Time spent waiting for the provider to lift a rate limit is recorded per
+  // session and is not the stack's or the agent's to answer for.
+  const throttleWaitMs = levels.reduce((total, level) =>
+    total + (number(level.sessionTotals?.providerThrottle?.waitedMs) ?? 0), 0);
+  const durationMs = number(run.totals?.durationSec) === null
+    ? null : Math.max(0, (run.totals!.durationSec! * 1000) - throttleWaitMs);
+  return {
+    firstBuildScoreRate: ratio(firstScore, firstMax),
+    finalScoreRate: progressionScore === undefined
+      ? ratio(number(run.totals?.score), number(run.totals?.max))
+      : ratio(progressionScore, 100),
+    questlineAverageRate: ratio(questlineAverage, 100),
+    firstBuildCoverageRate: firstDeclaredMaxima.length
+      && firstDeclaredMaxima.every(Number.isFinite)
+      ? ratio(firstMax, firstDeclaredMaxima.reduce<number>((total, value) => total + (value ?? 0), 0)) : null,
+    finalCoverageRate: progressionCoverage === undefined
+      ? finalMeasuredMaxima.length
+        && finalMeasuredMaxima.every(Number.isFinite) && finalDeclaredMaxima.every(Number.isFinite)
+        ? ratio(finalMeasuredMaxima.reduce<number>((total, value) => total + (value ?? 0), 0),
+          finalDeclaredMaxima.reduce<number>((total, value) => total + (value ?? 0), 0)) : null
+      : progressionCoverage,
+    totalCostUsd: run.totals?.costComplete === true ? number(run.totals?.costUsd) : null,
+    totalTokens: number(run.totals?.tokens),
+    totalDurationMs: durationMs,
+    repairs: number(run.totals?.repairs),
+    correctionSuccessRate,
+    correctionCostUsd: correctionSuccessRate === 1 ? correctionSpendUsd : null,
+    correctionSpendUsd,
+  };
+}
+
+export function campaignRunFirstBuildObservations(
+  run: BenchmarkRun,
+): CampaignRunObservationSummary | null {
+  const actualByLevel = new Map<number, RunLevel>((run.levels ?? [])
+    .filter((level): level is RunLevel & { level: number } => Number.isInteger(level.level))
+    .map(level => [level.level, level]));
+  const plannedByLevel = new Map((run.condition?.requested?.levels ?? [])
+    .map(level => [level.level, level]));
+  const levelNumbers = [...new Set([...actualByLevel.keys(), ...plannedByLevel.keys()])]
+    .sort((left, right) => left - right);
+  const levels = levelNumbers.flatMap(levelNumber => {
+    const level = actualByLevel.get(levelNumber);
+    const planned = plannedByLevel.get(levelNumber);
+    const selected = Array.isArray(level?.selection?.observedChecks)
+      ? level.selection.observedChecks : planned?.selection?.observedChecks;
+    if (!Array.isArray(selected) || selected.length === 0) return [];
+    const observation = level?.firstBuild?.observations ?? null;
+    const selectedPoints = selected.every(check => typeof check?.points === 'number'
+      && Number.isFinite(check.points) && check.points >= 0)
+      ? selected.reduce((total, check) => total + check.points!, 0) : null;
+    return [{
+      level: levelNumber,
+      specifications: [...(level?.selection?.specifications?.observed
+        ?? planned?.selection?.specifications?.observed ?? [])],
+      selectedChecks: selected.length,
+      reportedChecks: Array.isArray(observation?.reportedChecks)
+        ? observation.reportedChecks.length : null,
+      selectedPoints,
+      observedPoints: number(observation?.observedPoints),
+      passedPoints: number(observation?.passedPoints),
+      passRate: ratio(number(observation?.passedPoints), number(observation?.observedPoints)),
+      coverageRate: ratio(number(observation?.observedPoints), selectedPoints),
+      scoreContribution: false as const,
+      repairVisible: false as const,
+      sourceSha256: observation?.sourceSha256 ?? null,
+      artifact: observation?.artifact ?? null,
+      outcome: observation?.outcome ?? null,
+    }];
+  });
+  if (!levels.length) return null;
+  const totalsComplete = levels.every(level => Number.isFinite(level.selectedPoints)
+    && Number.isFinite(level.observedPoints) && Number.isFinite(level.passedPoints));
+  const selectedPoints = levels.every(level => Number.isFinite(level.selectedPoints))
+    ? levels.reduce((total, level) => total + level.selectedPoints!, 0) : null;
+  const observedPoints = totalsComplete
+    ? levels.reduce((total, level) => total + level.observedPoints!, 0) : null;
+  const passedPoints = totalsComplete
+    ? levels.reduce((total, level) => total + level.passedPoints!, 0) : null;
+  return {
+    selectedChecks: levels.reduce((total, level) => total + level.selectedChecks, 0),
+    reportedChecks: levels.every(level => Number.isInteger(level.reportedChecks))
+      ? levels.reduce((total, level) => total + level.reportedChecks!, 0) : null,
+    selectedPoints,
+    observedPoints,
+    passedPoints,
+    passRate: ratio(passedPoints, observedPoints),
+    coverageRate: ratio(observedPoints, selectedPoints),
+    scoreContribution: false,
+    repairVisible: false,
+    levels,
+  };
+}
+
+function conditionKey(attempt: CampaignAttemptPlan): string {
+  return canonicalDefinitionJson({ stack: attempt.stack, agentAdapter: attempt.agentAdapter,
+    model: attempt.model, condition: attempt.condition?.sha256 }).trim();
+}
+
+function reportMetricNames(policy: CampaignReport['policy']): string[] {
+  return [...new Set([policy.primaryMetric, ...policy.secondaryMetrics,
+    'firstBuildCoverageRate', 'finalCoverageRate'])]
+    .filter(metric => metric !== 'invalidAttemptRate');
+}
+
+function reportConditions(rows: CampaignReportAttempt[], policy: CampaignReport['policy']):
+CampaignReportCondition[] {
+  const groups = new Map<string, CampaignReportAttempt[]>();
+  for (const row of rows) {
+    const key = conditionKey(row);
+    if (!groups.has(key)) groups.set(key, []);
+    groups.get(key)!.push(row);
+  }
+  const metricNames = reportMetricNames(policy);
+  return [...groups.entries()].map(([key, attempts]) => {
+    const completed = attempts.filter(attempt => attempt.status === 'completed');
+    const executions = attempts.flatMap(attempt => attempt.executions);
+    const invalidExecutions = executions.filter(execution => execution.status === 'invalid').length;
+    const observedAttempts = completed.filter((attempt): attempt is CampaignReportAttempt & {
+      firstBuildObservations: CampaignRunObservationSummary;
+    } => attempt.firstBuildObservations !== null);
+    const measuredObservedAttempts = observedAttempts.filter(attempt =>
+      Number.isFinite(attempt.firstBuildObservations.passRate));
+    return {
+      key: sha256(key),
+      stack: attempts[0]!.stack,
+      agent: { adapter: attempts[0]!.agentAdapter, model: attempts[0]!.model },
+      condition: attempts[0]!.condition,
+      sample: { plannedAttempts: attempts.length, completedAttempts: completed.length,
+        invalidAttempts: attempts.filter(attempt => attempt.status === 'invalid').length,
+        pendingAttempts: attempts.filter(attempt => attempt.status === 'pending').length,
+        executions: executions.length, invalidExecutions,
+        invalidExecutionRate: executions.length
+          ? Number((invalidExecutions / executions.length).toFixed(6)) : 0 },
+      metrics: { ...Object.fromEntries(metricNames.map(metric => [metric,
+        summarize(completed.map(attempt => attempt.metrics?.[metric]), policy.dispersion)])),
+      invalidAttemptRate: { n: attempts.length,
+        center: Number((attempts.filter(attempt => attempt.status === 'invalid').length
+          / attempts.length).toFixed(6)), spread: null, min: null, max: null } },
+      firstBuildObservations: observedAttempts.length ? {
+        sample: { selectedAttempts: observedAttempts.length,
+          measuredAttempts: measuredObservedAttempts.length },
+        metrics: {
+          passRate: summarize(observedAttempts.map(attempt =>
+            attempt.firstBuildObservations.passRate), policy.dispersion),
+          coverageRate: summarize(observedAttempts.map(attempt =>
+            attempt.firstBuildObservations.coverageRate), policy.dispersion),
+        },
+      } : null,
+    };
+  }).sort((left, right) => left.key.localeCompare(right.key));
+}
+
+function reportSummary(rows: CampaignReportAttempt[], campaignStatus: string):
+CampaignReport['summary'] {
+  const executions = rows.flatMap(attempt => attempt.executions);
+  const invalidAttempts = rows.filter(attempt => attempt.status === 'invalid').length;
+  const invalidExecutions = executions.filter(execution => execution.status === 'invalid').length;
+  return { campaignStatus, plannedAttempts: rows.length,
+    completedAttempts: rows.filter(attempt => attempt.status === 'completed').length,
+    invalidAttempts,
+    invalidAttemptRate: rows.length ? Number((invalidAttempts / rows.length).toFixed(6)) : 0,
+    pendingAttempts: rows.filter(attempt => attempt.status === 'pending').length,
+    runningAttempts: rows.filter(attempt => attempt.status === 'running').length,
+    executions: executions.length, invalidExecutions,
+    invalidExecutionRate: executions.length
+      ? Number((invalidExecutions / executions.length).toFixed(6)) : 0 };
+}
+
+function exactFields(value: unknown, fields: Set<string>, at: string): asserts value is Record<string, unknown> {
+  if (!isRecord(value)) {
+    throw new Error(`${at} must be an object`);
+  }
+  for (const key of Object.keys(value)) {
+    if (!fields.has(key)) throw new Error(`${at}.${key} is unknown`);
+  }
+}
+
+export function validateCampaignReport(input: unknown): CampaignReport {
+  if (!isRecord(input)) {
+    throw new Error('campaign report must be an object');
+  }
+  const fields = new Set(['reportSchemaVersion', 'campaign', 'scope', 'policy', 'attempts',
+    'conditions', 'summary', 'limitations', 'contentSha256']);
+  for (const key of Object.keys(input)) if (!fields.has(key)) throw new Error(`campaign report.${key} is unknown`);
+  if (input.reportSchemaVersion !== CAMPAIGN_REPORT_SCHEMA_VERSION
+    || !isRecord(input.campaign)
+    || typeof input.campaign.sha256 !== 'string'
+    || !/^[a-f0-9]{64}$/.test(input.campaign.sha256)
+    || !Array.isArray(input.attempts) || !Array.isArray(input.conditions)
+    || !Array.isArray(input.limitations) || !input.summary || typeof input.summary !== 'object') {
+    throw new Error('campaign report structure is invalid');
+  }
+  const report = input as unknown as CampaignReport;
+  exactFields(report.campaign, new Set(['id', 'version', 'state', 'sha256', 'title']),
+    'campaign report.campaign');
+  exactFields(report.scope, new Set(['track', 'levels', 'selection', 'bindings', 'grading', 'stacks',
+    'agents', 'conditions', 'repetitions', 'repetitionsByStack', 'parallelism',
+    'runtime', 'pricing']), 'campaign report.scope');
+  exactFields(report.policy, new Set(['primaryMetric', 'secondaryMetrics', 'dispersion',
+    'invalidAttempts', 'missingData', 'comparisonUnit']), 'campaign report.policy');
+  exactFields(report.summary, new Set(['campaignStatus', 'plannedAttempts', 'completedAttempts',
+    'invalidAttempts', 'invalidAttemptRate', 'pendingAttempts', 'runningAttempts', 'executions',
+    'invalidExecutions', 'invalidExecutionRate']), 'campaign report.summary');
+  if (typeof report.campaign.id !== 'string' || !report.campaign.id
+    || typeof report.campaign.title !== 'string' || !report.campaign.title
+    || typeof report.scope.track !== 'string' || !report.scope.track
+    || !Array.isArray(report.scope.levels) || !Array.isArray(report.scope.bindings)
+    || report.scope.bindings.some(binding => !isRecord(binding))
+    || !isRecord(report.scope.grading) || !Array.isArray(report.scope.grading.levels)
+    || !Array.isArray(report.scope.stacks) || !Array.isArray(report.scope.agents)
+    || !Array.isArray(report.scope.conditions)
+    || !Number.isInteger(report.scope.repetitions) || report.scope.repetitions < 1
+    || !report.scope.repetitionsByStack || typeof report.scope.repetitionsByStack !== 'object'
+    || Array.isArray(report.scope.repetitionsByStack)
+    || !Number.isInteger(report.scope.parallelism) || report.scope.parallelism < 1
+    || report.scope.parallelism > 21
+    || !report.scope.runtime || typeof report.scope.runtime !== 'object'
+    || !report.scope.pricing || typeof report.scope.pricing !== 'object') {
+    throw new Error('campaign report exact scope is invalid');
+  }
+  exactFields(report.scope.grading, new Set(['status', 'levels']),
+    'campaign report.scope.grading');
+  if (report.scope.levels.some(level => !Number.isSafeInteger(level) || level < 1)
+    || new Set(report.scope.levels).size !== report.scope.levels.length) {
+    throw new Error('campaign report.scope.levels must contain unique positive integers');
+  }
+  const expectedStackIds = report.scope.stacks.map(stack => stack.id).sort();
+  const boundLevels = report.scope.bindings.map(binding => binding.level);
+  const gradingLevels = report.scope.grading.levels.map(level => level.level);
+  if (canonicalDefinitionJson(boundLevels) !== canonicalDefinitionJson(report.scope.levels)
+    || canonicalDefinitionJson(gradingLevels) !== canonicalDefinitionJson(report.scope.levels)) {
+    throw new Error('campaign report scope levels do not match bindings and grading');
+  }
+  if (canonicalDefinitionJson(Object.keys(report.scope.repetitionsByStack).sort())
+      !== canonicalDefinitionJson(expectedStackIds)
+    || Object.values(report.scope.repetitionsByStack)
+      .some(value => !Number.isInteger(value) || value < 1)) {
+    throw new Error('campaign report stack repetitions are invalid');
+  }
+  for (const [index, row] of report.conditions.entries()) {
+    const at = `campaign report.conditions[${index}]`;
+    exactFields(row, new Set(['key', 'stack', 'agent', 'condition', 'sample', 'metrics',
+      'firstBuildObservations']), at);
+    if (typeof row.stack !== 'string' || !row.stack
+      || !row.condition || typeof row.condition !== 'object' || Array.isArray(row.condition)
+      || typeof row.condition.id !== 'string' || !row.condition.id
+      || typeof row.condition.version !== 'string' || !row.condition.version
+      || !/^[a-f0-9]{64}$/.test(row.condition.sha256)) {
+      throw new Error(`${at}.condition is invalid`);
+    }
+    if (row.firstBuildObservations !== null) {
+      exactFields(row.firstBuildObservations, new Set(['sample', 'metrics']),
+        `${at}.firstBuildObservations`);
+      exactFields(row.firstBuildObservations.sample,
+        new Set(['selectedAttempts', 'measuredAttempts']), `${at}.firstBuildObservations.sample`);
+      exactFields(row.firstBuildObservations.metrics, new Set(['passRate', 'coverageRate']),
+        `${at}.firstBuildObservations.metrics`);
+      if (!Number.isSafeInteger(row.firstBuildObservations.sample.selectedAttempts)
+        || row.firstBuildObservations.sample.selectedAttempts < 1
+        || !Number.isSafeInteger(row.firstBuildObservations.sample.measuredAttempts)
+        || row.firstBuildObservations.sample.measuredAttempts < 0
+        || row.firstBuildObservations.sample.measuredAttempts
+          > row.firstBuildObservations.sample.selectedAttempts) {
+        throw new Error(`${at}.firstBuildObservations.sample is invalid`);
+      }
+      for (const metric of ['passRate', 'coverageRate'] as const) {
+        const summary = row.firstBuildObservations.metrics[metric];
+        exactFields(summary, new Set(['n', 'center', 'spread', 'min', 'max']),
+          `${at}.firstBuildObservations.metrics.${metric}`);
+        if (!Number.isSafeInteger(summary.n) || summary.n < 0
+          || (summary.center !== null && (!Number.isFinite(summary.center)
+            || summary.center < 0 || summary.center > 1))) {
+          throw new Error(`${at}.firstBuildObservations.metrics.${metric} is invalid`);
+        }
+      }
+    }
+  }
+  if (!['qualified', 'pending'].includes(report.scope.grading.status)
+    || !Array.isArray(report.scope.grading.levels)
+    || report.scope.grading.levels.length !== report.scope.levels.length) {
+    throw new Error('campaign report.scope.grading is invalid');
+  }
+  for (const [index, level] of report.scope.grading.levels.entries()) {
+    const at = `campaign report.scope.grading.levels[${index}]`;
+    exactFields(level, new Set(['level', 'status', 'reasons', 'evidenceSha256']), at);
+    if (!Number.isSafeInteger(level.level)
+      || !['qualified', 'pending'].includes(level.status)
+      || !Array.isArray(level.reasons)
+      || level.reasons.some(reason => typeof reason !== 'string' || !reason)
+      || (level.evidenceSha256 !== null && !/^[a-f0-9]{64}$/.test(level.evidenceSha256))
+      || (level.status === 'qualified' && level.reasons.length > 0)
+      || (level.status === 'pending' && level.reasons.length === 0)) {
+      throw new Error(`${at} is invalid`);
+    }
+  }
+  const expectedGradingStatus = report.scope.grading.levels.some(level => level.status === 'pending')
+    ? 'pending' : 'qualified';
+  if (report.scope.grading.status !== expectedGradingStatus) {
+    throw new Error('campaign report.scope.grading status does not match its levels');
+  }
+  for (const [index, attempt] of report.attempts.entries()) {
+    if (!isRecord(attempt) || typeof attempt.id !== 'string' || !attempt.id
+      || typeof attempt.status !== 'string' || !Array.isArray(attempt.executions)
+      || (attempt.metrics !== null && !isRecord(attempt.metrics))) {
+      throw new Error(`campaign report.attempts[${index}] is invalid`);
+    }
+    for (const [executionIndex, execution] of attempt.executions.entries()) {
+      if (!isRecord(execution) || typeof execution.id !== 'string' || !execution.id
+        || typeof execution.status !== 'string') {
+        throw new Error(`campaign report.attempts[${index}].executions[${executionIndex}] is invalid`);
+      }
+    }
+  }
+  if (typeof report.summary.campaignStatus !== 'string'
+    || canonicalDefinitionJson(report.summary)
+      !== canonicalDefinitionJson(reportSummary(report.attempts, report.summary.campaignStatus))) {
+    throw new Error('campaign report summary does not match its attempts');
+  }
+  if (canonicalDefinitionJson(report.conditions)
+    !== canonicalDefinitionJson(reportConditions(report.attempts, report.policy))) {
+    throw new Error('campaign report conditions do not match its attempts');
+  }
+  if (report.limitations.some(item => typeof item !== 'string' || !item)) {
+    throw new Error('campaign report limitations are invalid');
+  }
+  const canonical = canonicalizeDefinition(report) as unknown as CampaignReport;
+  const { contentSha256, ...body } = canonical;
+  if (typeof contentSha256 !== 'string'
+    || contentSha256 !== sha256(canonicalDefinitionJson(body))) {
+    throw new Error('campaign report content identity is invalid');
+  }
+  return canonical;
+}
+
+export function buildCampaignReport(plan: CompiledCampaignPlan, state: CampaignState,
+  readRun: (attempt: CampaignAttemptPlan, execution: CampaignExecution) => BenchmarkRun,
+): CampaignReport {
+  if (state.campaignSha256 !== plan.contentSha256) throw new Error('report state does not match campaign plan');
+  const rows: CampaignReportAttempt[] = [];
+  for (const attempt of state.attempts) {
+    const executions = attempt.executions.map(execution => {
+      let run = null;
+      if (execution.status === 'completed') {
+        run = readRun(attempt.plan, execution);
+        if (!run || run.outcome?.kind !== execution.outcome) {
+          throw new Error(`completed execution ${execution.id} has missing or mismatched run evidence`);
+        }
+      }
+      return {
+        id: execution.id, ordinal: execution.ordinal, status: execution.status,
+        outcome: execution.outcome, reason: execution.reason, exitCode: execution.exitCode,
+        startedAt: execution.startedAt, completedAt: execution.completedAt,
+        admissionId: execution.admissionId,
+        admissionEvidence: `admissions/${execution.admissionId}.json`,
+        evidence: execution.status === 'completed'
+          ? `${execution.output}/${ARTIFACT_FILE.run}` : CAMPAIGN_FILE.state,
+        metrics: run ? campaignRunMetrics(run) : null,
+        firstBuildObservations: run ? campaignRunFirstBuildObservations(run) : null,
+      };
+    });
+    const latest = executions.at(-1);
+    rows.push({ ...attempt.plan, status: attempt.status, executions,
+      metrics: latest?.status === 'completed' ? latest.metrics : null,
+      firstBuildObservations: latest?.status === 'completed'
+        ? latest.firstBuildObservations : null });
+  }
+  const conditions = reportConditions(rows, plan.definition.analysis);
+  const grading = campaignGradingQualification(plan);
+  const body = canonicalizeDefinition({
+    reportSchemaVersion: CAMPAIGN_REPORT_SCHEMA_VERSION,
+    campaign: { id: plan.id, version: plan.version, state: plan.state,
+      sha256: plan.contentSha256, title: plan.title },
+    scope: { track: plan.definition.track, levels: plan.definition.levels,
+      selection: plan.definition.selection, bindings: plan.bindings, grading, stacks: plan.stacks,
+      conditions: plan.conditions,
+      agents: plan.agents, repetitions: plan.definition.repetitions,
+      repetitionsByStack: plan.summary.repetitionsByStack,
+      parallelism: plan.summary.parallelism,
+      runtime: plan.definition.runtime, pricing: plan.definition.pricing },
+    policy: plan.definition.analysis,
+    attempts: rows,
+    conditions,
+    summary: reportSummary(rows, state.status),
+    limitations: [
+      ...(grading.status === 'pending'
+        ? ['Grading qualification is pending. Treat these scores as provisional.'] : []),
+      'Statistics describe only the exact scope and conditions recorded above.',
+      'Score rates are passed points over all selected points; the questline average weighs every questline equally and is a secondary view.',
+      'Score rates use measurable points; read them with coverage and the typed execution outcome.',
+      'A spread is reported only from three or more completed attempts; below that, only the centre and the range.',
+      'Usage in USD is the provider CLI token count priced at the recorded API rates. It is not an invoice.',
+      'Durations exclude time spent waiting for the provider to lift a rate limit.',
+      'Results describe one coding agent and the model ids recorded per session. They do not generalize to other agents.',
+      'Observed specifications are diagnostic, contribute zero score, and are never shown to repairs.',
+      'Invalid executions are reported separately and are not imputed into outcome metrics.',
+      'The report makes no causal claim beyond the declared campaign design.',
+    ],
+  }) as unknown as Omit<CampaignReport, 'contentSha256'>;
+  return validateCampaignReport({ ...body, contentSha256: sha256(canonicalDefinitionJson(body)) });
+}
+
+function escape(value: unknown): string {
+  return String(value).replaceAll('&', '&amp;').replaceAll('<', '&lt;')
+    .replaceAll('>', '&gt;').replaceAll('"', '&quot;');
+}
+
+export function renderCampaignHtml(report: CampaignReport,
+  { evidencePrefix = '..' }: { evidencePrefix?: string } = {},
+): string {
+  report = validateCampaignReport(report);
+  const coverageMetric = report.policy.primaryMetric === 'finalScoreRate'
+    ? 'finalCoverageRate' : report.policy.primaryMetric === 'firstBuildScoreRate'
+      ? 'firstBuildCoverageRate' : null;
+  const primaryLabel = report.policy.primaryMetric === 'finalScoreRate'
+    ? 'Final score' : report.policy.primaryMetric === 'firstBuildScoreRate'
+      ? 'First-build score' : report.policy.primaryMetric;
+  const rows = report.conditions.map(condition => `<tr><td>${escape(condition.stack)}</td>`
+    + `<td>${escape(condition.agent.adapter)} / ${escape(condition.agent.model)}</td>`
+    + `<td>${escape(condition.condition.id)}@${escape(condition.condition.version)}</td>`
+    + `<td>${condition.sample.completedAttempts}/${condition.sample.plannedAttempts}</td>`
+    + `<td>${condition.sample.invalidExecutions}/${condition.sample.executions}</td>`
+    + `<td>${escape(formatMetric(report.policy.primaryMetric,
+      condition.metrics[report.policy.primaryMetric]?.center))}`
+    + ` (n=${condition.metrics[report.policy.primaryMetric]?.n ?? 0})`
+    + `<br><small>${coverageMetric
+      ? `${escape(formatRate(condition.metrics[coverageMetric]?.center))} coverage · ` : ''}`
+    + `${condition.metrics.questlineAverageRate?.center != null
+      ? `${escape(formatRate(condition.metrics.questlineAverageRate.center))} questline average · ` : ''}`
+    + `${escape(formatUsd(condition.metrics.totalCostUsd?.center))} API-equivalent usage`
+    + `${condition.metrics.totalTokens?.center != null
+      ? ` (${escape(formatTokens(condition.metrics.totalTokens.center))})` : ''} · `
+    + `${escape(formatDurationMs(condition.metrics.totalDurationMs?.center))}</small></td></tr>`).join('');
+  const treatmentRows = report.scope.conditions.flatMap(condition =>
+    (condition.requested?.levels ?? []).flatMap(level => {
+      const specifications = level.selection?.schemaVersion === 3
+        ? level.selection.specifications : null;
+      if (!specifications) return [];
+      const list = (values: string[]): string => values.length ? values.join(', ') : 'none';
+      return [`<tr><td>${escape(`${condition.id}@${condition.version}`)}</td>`
+        + `<td>L${escape(level.level)}</td>`
+        + `<td>${escape(list(specifications.requested ?? []))}</td>`
+        + `<td>${escape(list(specifications.expected ?? []))}</td>`
+        + `<td>${escape(list(specifications.observed ?? []))}</td></tr>`];
+    })).join('');
+  const treatmentSection = treatmentRows
+    ? `<h2>What this run asks for and tests</h2><p>The build brief lists what the coding agent is asked to build. Scored checks affect the result and may be included in repair feedback. Additional measurements are reported separately and do not affect the score or repairs.</p><table><thead><tr><th>Run setup</th><th>Level</th><th>Build brief + score</th><th>Score</th><th>Additional measurements</th></tr></thead><tbody>${treatmentRows}</tbody></table>`
+    : '';
+  const observationRows = report.conditions.filter((condition): condition is CampaignReportCondition & {
+    firstBuildObservations: NonNullable<CampaignReportCondition['firstBuildObservations']>;
+  } => condition.firstBuildObservations !== null)
+    .map(condition => `<tr><td>${escape(condition.stack)}</td>`
+      + `<td>${escape(condition.agent.adapter)} / ${escape(condition.agent.model)}</td>`
+      + `<td>${escape(condition.condition.id)}@${escape(condition.condition.version)}</td>`
+      + `<td>${condition.firstBuildObservations.sample.measuredAttempts}/${condition.firstBuildObservations.sample.selectedAttempts}</td>`
+      + `<td>${escape(formatRate(condition.firstBuildObservations.metrics.passRate.center))}`
+      + `<br><small>${escape(formatRate(condition.firstBuildObservations.metrics.coverageRate.center))} coverage</small></td></tr>`)
+    .join('');
+  const observationSection = observationRows ? `<h2>Additional first-build measurements</h2><p>These checks record selected behavior in the original build. They are shown separately, add no points to the score, and do not enter repair feedback.</p><table><thead><tr><th>Stack</th><th>Agent / model</th><th>Run setup</th><th>Measured</th><th>Pass rate</th></tr></thead><tbody>${observationRows}</tbody></table>` : '';
+  const qualificationWarning = report.scope.grading.status === 'pending'
+    ? '<div class="warn"><strong>Provisional scores.</strong> Grading qualification is pending.</div>'
+    : '';
+  return `<!doctype html>\n<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>${escape(report.campaign.title)}</title><style>body{font:16px system-ui;max-width:1100px;margin:40px auto;padding:0 20px;color:#17202a}code{font-size:.85em}table{border-collapse:collapse;width:100%}th,td{padding:.65rem;border-bottom:1px solid #ccd;text-align:left}.meta{color:#566} .warn{background:#fff4cf;padding:1rem}</style></head><body><h1>${escape(report.campaign.title)}</h1><p class="meta">Campaign <code>${escape(report.campaign.id)}</code> · ${escape(report.campaign.sha256)} · status ${escape(report.summary.campaignStatus)}</p>${qualificationWarning}<p>This report shows exactly what ran: ${report.summary.completedAttempts} completed of ${report.summary.plannedAttempts} planned attempts, with ${report.summary.invalidExecutions} invalid execution(s) retained.</p><h2>Conditions</h2><table><thead><tr><th>Stack</th><th>Agent / model</th><th>Study condition</th><th>Completed</th><th>Invalid executions</th><th>${escape(primaryLabel)}</th></tr></thead><tbody>${rows}</tbody></table>${treatmentSection}${observationSection}<h2>Scope</h2><pre>${escape(JSON.stringify(report.scope, null, 2))}</pre><h2>Attempts and raw evidence</h2><ul>${report.attempts.map(attempt => `<li><strong>${escape(attempt.id)}</strong> — ${escape(attempt.status)}${attempt.executions.map(execution => ` · <a href="${escape(`${evidencePrefix}/${execution.evidence}`)}">${escape(execution.id)}</a> (${escape(execution.outcome ?? execution.status)}) · <a href="${escape(`${evidencePrefix}/${execution.admissionEvidence}`)}">admission</a>${(execution.firstBuildObservations?.levels ?? []).filter(level => level.artifact).map(level => ` · <a href="${escape(`${evidencePrefix}/${execution.evidence.slice(0, -ARTIFACT_FILE.run.length)}${level.artifact}`)}">L${escape(level.level)} observations</a>`).join('')}`).join('')}</li>`).join('')}</ul><div class="warn"><strong>Limitations</strong><ul>${report.limitations.map(item => `<li>${escape(item)}</li>`).join('')}</ul></div><p class="meta">Report identity: <code>${escape(report.contentSha256)}</code></p></body></html>\n`;
+}
+
+export interface GeneratedCampaignReport { report: CampaignReport; reportPath: string;
+  htmlPath: string; relativeOutput: string }
+
+export function generateCampaignReport(directory: string,
+  { output: requestedOutput }: { output?: string } = {},
+): GeneratedCampaignReport {
+  let output = requestedOutput ?? join(resolve(directory), 'report');
+  const { plan, state, paths } = inspectCampaign(directory, { requireCurrentInputs: false });
+  if (state.status === 'running') throw new Error('cannot report while a campaign attempt is running');
+  output = resolve(output);
+  const outputRelative = relative(paths.root, output);
+  if (outputRelative === '' || outputRelative === '..' || outputRelative.startsWith(`..${sep}`)) {
+    throw new Error('report output must be a child of the campaign directory');
+  }
+  const report = buildCampaignReport(plan, state, (attempt, execution) =>
+    validateCampaignRun(plan, attempt,
+      readArtifactPayload(join(paths.root, execution.output, ARTIFACT_FILE.run),
+        { expectedKind: 'benchmark_run' }),
+      { resultDir: join(paths.root, execution.output) }) as BenchmarkRun);
+  mkdirSync(output, { recursive: true });
+  const reportPath = join(output, CAMPAIGN_FILE.reportJson);
+  writeArtifact(reportPath, { kind: 'campaign_report', id: `${plan.id}-report-${report.contentSha256.slice(0, 16)}`,
+    timestamps: { startedAt: state.createdAt, completedAt: state.updatedAt },
+    identities: emptyArtifactIdentities({ experiment: {
+      id: plan.id, version: plan.version, sha256: plan.contentSha256, state: plan.state,
+    } }), payload: report });
+  const htmlPath = join(output, CAMPAIGN_FILE.reportHtml);
+  const evidencePrefix = relative(output, paths.root).replaceAll('\\', '/') || '.';
+  const temporaryHtml = `${htmlPath}.${process.pid}.${randomUUID()}.tmp`;
+  writeFileSync(temporaryHtml, renderCampaignHtml(report, { evidencePrefix }), { flag: 'wx' });
+  renameSync(temporaryHtml, htmlPath);
+  return { report, reportPath, htmlPath,
+    relativeOutput: outputRelative.replaceAll('\\', '/') };
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-run-validation.ts b/tools/stack-bench/src/campaigns/campaign-run-validation.ts
new file mode 100644
index 00000000000..cbb55c69f37
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-run-validation.ts
@@ -0,0 +1,647 @@
+import { existsSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import { ARTIFACT_FILE, readArtifactPayload } from '../evidence/artifacts.js';
+import { durableCostLedger } from '../evidence/cost-proof.js';
+import { aggregateRunOutcome, classifyBundle } from '../evidence/outcomes.js';
+import type { OutcomeBundle, RunOutcome as EvidenceRunOutcome } from '../evidence/outcomes.js';
+import type { BenchmarkRunRecord, GradeBundleSelection, RunLevelRecord }
+  from '../evidence/benchmark-run.js';
+import { hashDirectory, sha256 } from '../evidence/provenance.js';
+import { dependencyRepairRecords } from '../progression/dependency-mode.js';
+import { liveProgressionStatus } from '../progression/live-progression.js';
+import { DEPENDENCY_MODE_POLICY } from '../progression/dependency-definition.js';
+import { compileProgressionInput, dependencyRuntimeDefinition }
+  from '../progression/progression-definition.js';
+import { readProgressionState } from '../progression/progression-state.js';
+import { campaignProgressionOwner } from './campaign-compiler.js';
+import type { CompiledCampaignPlan } from './campaign-compiler.js';
+import type { CampaignExtensionSeed } from './campaign-scheduler.js';
+import { repairBudgetLimit } from '../progression/repair-plan.js';
+import type { RepairPlan } from '../progression/repair-plan.js';
+
+type UnknownRecord = Record<string, unknown>;
+type PlannedLevel = CompiledCampaignPlan['conditions'][number]['requested']['levels'][number];
+type PlannedCheck = NonNullable<PlannedLevel['selection']['scoredChecks']>[number];
+const integer = (value: unknown): value is number =>
+  typeof value === 'number' && Number.isInteger(value);
+const safeInteger = (value: unknown): value is number =>
+  typeof value === 'number' && Number.isSafeInteger(value);
+const finite = (value: unknown): value is number =>
+  typeof value === 'number' && Number.isFinite(value);
+const record = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+export interface RunOutcome extends Partial<EvidenceRunOutcome>, UnknownRecord {
+  provider?: { providerStatus?: number | null };
+}
+
+interface RunRegression { score?: number; max?: number }
+interface RunSelection extends Omit<Partial<GradeBundleSelection>,
+'scoredChecks' | 'observedChecks'>, UnknownRecord {
+  specifications?: unknown;
+  scoredChecks?: PlannedCheck[];
+  observedChecks?: PlannedCheck[];
+  regressionChecks?: Array<{ stableKey?: string; points?: number }>;
+  scoredPoints?: number;
+  evaluationSha256?: string;
+  regressionPoints?: number;
+}
+
+interface RunObservation extends UnknownRecord {
+  selectedChecks?: unknown;
+  selectionSha256?: unknown;
+  scoreContribution?: unknown;
+  repairVisible?: unknown;
+  sourceSha256?: unknown;
+  reportedChecks?: unknown;
+  observedPoints?: unknown;
+  passedPoints?: unknown;
+  artifact?: unknown;
+}
+
+interface RunLevel extends Omit<Partial<RunLevelRecord>,
+'selection' | 'outcome' | 'firstBuild' | 'regression' | 'repair'>, UnknownRecord {
+  level: number;
+  score?: number;
+  max?: number;
+  graded?: boolean;
+  repairs?: number;
+  contractPass?: boolean;
+  selection?: RunSelection;
+  outcome?: RunOutcome;
+  repair?: { status?: string; limit?: number; used?: number; stopReason?: string;
+    nodeRepairs?: Array<{ nodeId?: string; used?: number; exhaustionReason?: string | null }> };
+  regression?: RunRegression | null;
+  firstBuild?: {
+    score?: number;
+    max?: number;
+    outcome?: RunOutcome;
+    regression?: RunRegression | null;
+    observations?: RunObservation;
+    source?: { sha256?: string };
+  };
+}
+
+export interface BenchmarkRun extends Partial<Pick<BenchmarkRunRecord,
+'parentAttemptId' | 'mode' | 'track' | 'backend' | 'model' | 'pricing' | 'guidance'
+| 'condition' | 'selectionRequest' | 'featureCatalog' | 'dependencyPolicy'
+>>, UnknownRecord {
+  id?: string | null;
+  artifactEnvelope?: {
+    attempt?: { parentId?: string };
+    identities?: {
+      agentAdapter?: { sha256?: string };
+      engine?: { sha256?: string };
+      experiment?: { id?: string; version?: string; sha256?: string; state?: string };
+      stackAdapter?: { id?: string; version?: string };
+    };
+  };
+  mode?: unknown;
+  track?: string;
+  backend?: string;
+  model?: string;
+  pricing?: unknown;
+  guidance?: string;
+  condition?: unknown;
+  selectionRequest?: unknown;
+  featureCatalog?: unknown;
+  dependencyPolicy?: unknown;
+  progressionOwner?: unknown;
+  progressionStatus?: unknown;
+  progressionSeed?: unknown;
+  skills?: unknown;
+  levels?: RunLevel[];
+  outcome?: RunOutcome;
+  validation?: { ladder?: {
+    policy?: string;
+    requestedLevels?: unknown;
+    completedLevels?: unknown;
+    stoppedAfterLevel?: unknown;
+    blockedLevels?: unknown;
+  } };
+  runtime?: { buildImage?: string | null };
+  totals?: { score?: number; max?: number; costUsd?: number | null; costComplete?: boolean };
+  backendLease?: { runId?: string; backend?: string; state?: string };
+  contaminated?: boolean;
+  contamination?: { verdict?: string };
+}
+
+interface GradeBundle extends UnknownRecord {
+  source?: { sha256?: string };
+  selection?: { sha256?: string };
+  totals?: { score?: number; max?: number };
+}
+
+interface ValidationCondition {
+  sha256: string;
+  requested?: CompiledCampaignPlan['conditions'][number]['requested'];
+}
+
+interface CampaignValidationAttempt {
+  id: string;
+  stack: string;
+  model: string;
+  guidance: string;
+  levels: number[];
+  agentAdapter: string;
+  skills: unknown;
+  pricing?: unknown;
+  mode: { id?: string; [key: string]: unknown };
+  condition: ValidationCondition;
+  featureCatalog?: CompiledCampaignPlan['attempts'][number]['featureCatalog'];
+  dependencyPolicy?: CompiledCampaignPlan['attempts'][number]['dependencyPolicy'];
+}
+
+interface CampaignValidationPlan {
+  id: string;
+  version: string;
+  state: string;
+  contentSha256: string;
+  definition: {
+    track: string;
+    selection: unknown;
+    runtime: { buildImage: string | null };
+    repair: RepairPlan;
+    budgets: { maxCostUsdPerAttempt: number | null };
+  };
+  identities: { engine: { sha256: string | null } };
+  agents: Array<{ adapter: string; model: string; costLimit: string;
+    identity: { sha256: string | null } }>;
+  stacks: Array<{ id: string; version: string | null }>;
+  conditions: ValidationCondition[];
+  featureCatalog: CompiledCampaignPlan['featureCatalog'];
+  dependencyPolicy: CompiledCampaignPlan['dependencyPolicy'];
+}
+
+export function expectedDependencyRunOutcomeKind(
+  levels: Array<{ level?: number; outcome?: { kind?: string } }>,
+  terminalOutcome: { kind?: string } | null | undefined): string | null {
+  const expected = aggregateRunOutcome(levels.map((level, index) => ({
+    level: level.level ?? index + 1,
+    ...(typeof level.outcome?.kind === 'string' ? { outcome: { kind: level.outcome.kind } } : {}),
+  }))).kind;
+  if (terminalOutcome?.kind !== 'passed' && expected === 'passed') return null;
+  return expected;
+}
+
+type Mismatch = (condition: unknown, field: string) => void;
+
+function validateDependencyRepairSummary(
+  state: ReturnType<typeof readProgressionState>['state'],
+  level: RunLevel,
+  mismatch: Mismatch,
+): void {
+  const at = `levels.L${level.level}.repair`;
+  const repairAttempts = state.attempts.filter(attempt =>
+    attempt.repair?.depth === level.level);
+  const repair = level.repair;
+  mismatch(!repair, at);
+  if (!repair) return;
+
+  const used = repairAttempts.length;
+  const priorRepairs = level.priorRepairs ?? 0;
+  mismatch(repair.used !== used, `${at}.used`);
+  mismatch(!integer(level.repairs) || level.repairs < 0
+    || !integer(priorRepairs) || priorRepairs < 0
+    || priorRepairs + level.repairs !== used,
+  `levels.L${level.level}.repairs`);
+  if (level.cumulativeRepairs !== undefined) {
+    mismatch(level.cumulativeRepairs !== used, `levels.L${level.level}.cumulativeRepairs`);
+  }
+  const repairedNodeIds = repairAttempts.flatMap(attempt => attempt.repair?.nodeIds ?? []);
+  const expectedNodeRepairs = dependencyRepairRecords(
+    state, level.level, repairedNodeIds);
+  mismatch(canonicalDefinitionJson(repair.nodeRepairs)
+    !== canonicalDefinitionJson(expectedNodeRepairs), `${at}.nodeRepairs`);
+}
+
+function validatePackageEvidence(run: BenchmarkRun, resultDir: string | null,
+  finalGradedLevel: RunLevel | null, mismatch: Mismatch): void {
+  if (resultDir === null || !finalGradedLevel
+    || !['passed', 'app_failure'].includes(run.outcome?.kind ?? '')) return;
+  if (!resultDir) {
+    mismatch(true, 'packageEvidence');
+    return;
+  }
+  let source = null;
+  let grading = null;
+  try {
+    const sourcePath = join(resolve(resultDir), 'source');
+    if (!existsSync(sourcePath)) throw new Error('missing source');
+    source = hashDirectory(sourcePath);
+  } catch {
+    mismatch(true, 'packageEvidence.source');
+  }
+  try {
+    const bundlePath = join(resolve(resultDir), 'grading', ARTIFACT_FILE.gradeBundle);
+    if (!existsSync(bundlePath)) throw new Error('missing grading bundle');
+    grading = readArtifactPayload(bundlePath, { expectedKind: 'grade_bundle' }) as GradeBundle;
+  } catch {
+    mismatch(true, 'packageEvidence.grading');
+  }
+  if (!source || !grading) return;
+  mismatch(grading.source?.sha256 !== source.sha256,
+    'packageEvidence.grading.sourceSha256');
+  mismatch(grading.selection?.sha256 !== finalGradedLevel.selection?.sha256,
+    'packageEvidence.grading.selectionSha256');
+  mismatch(grading.totals?.score !== finalGradedLevel.score
+    || grading.totals?.max !== finalGradedLevel.max, 'packageEvidence.grading.score');
+  const gradingOutcome = classifyBundle(grading as OutcomeBundle);
+  mismatch(gradingOutcome.kind !== finalGradedLevel.outcome?.kind
+    || canonicalDefinitionJson(gradingOutcome.appFailures)
+      !== canonicalDefinitionJson(finalGradedLevel.outcome?.appFailures ?? [])
+    || canonicalDefinitionJson(gradingOutcome.inconclusive)
+      !== canonicalDefinitionJson(finalGradedLevel.outcome?.inconclusive ?? [])
+    || canonicalDefinitionJson(gradingOutcome.harnessFailures)
+      !== canonicalDefinitionJson(finalGradedLevel.outcome?.harnessFailures ?? []),
+  'packageEvidence.grading.outcome');
+}
+
+function validateDependencyEvidence(plan: CampaignValidationPlan,
+  attempt: CampaignValidationAttempt, run: BenchmarkRun, resultDir: string | null,
+  expectedLevels: number[], interruptedPrefix: boolean, mismatch: Mismatch): void {
+  if (typeof resultDir !== 'string' || !resultDir) {
+    mismatch(true, 'progressionState');
+    return;
+  }
+  try {
+    const owner = campaignProgressionOwner(plan, attempt, { workspace: true });
+    const featureCatalog = plan.featureCatalog!;
+    const dependencyPolicy = plan.dependencyPolicy!;
+    const progression = compileProgressionInput(dependencyRuntimeDefinition(
+      featureCatalog, dependencyPolicy));
+    const stored = readProgressionState(join(resolve(resultDir), ARTIFACT_FILE.progressionState), {
+      progression,
+      featureCatalogIdentity: featureCatalog.identity,
+      dependencyPolicyIdentity: dependencyPolicy.identity,
+      owner,
+    });
+    const storedStatus = liveProgressionStatus(stored.state);
+    mismatch(canonicalDefinitionJson(run.progressionStatus)
+      !== canonicalDefinitionJson(storedStatus), 'progressionStatus');
+    const ladder = run.validation?.ladder;
+    mismatch(canonicalDefinitionJson(ladder?.requestedLevels)
+      !== canonicalDefinitionJson(expectedLevels), 'validation.ladder.requestedLevels');
+    const conclusiveLevels = [...new Set(stored.state.attempts
+      .filter(item => item.outcome === 'conclusive').map(item => item.level))];
+    mismatch(canonicalDefinitionJson(ladder?.completedLevels)
+      !== canonicalDefinitionJson(conclusiveLevels), 'validation.ladder.completedLevels');
+    for (const level of run.levels ?? []) {
+      const matching = [...stored.state.attempts].reverse().find(item =>
+        item.level === level.level && item.selectionSha256 === level.selection?.sha256);
+      mismatch(!matching, `levels.L${level.level}.progressionAttempt`);
+      if (!matching) continue;
+      const validScore = safeInteger(level.score) && safeInteger(level.max)
+        && level.max > 0 && level.score >= 0 && level.score <= level.max;
+      mismatch(matching.outcome === 'conclusive' && !validScore, `levels.L${level.level}.score`);
+      mismatch(matching.outcome === 'inconclusive' && level.graded !== false,
+        `levels.L${level.level}.graded`);
+      const codingInterruption = matching.outcome === 'inconclusive'
+        && level.outcome?.phase === 'coding-session';
+      mismatch(codingInterruption && matching.category !== level.outcome?.kind,
+        `levels.L${level.level}.progressionAttempt.category`);
+      mismatch(codingInterruption && matching.reason !== level.outcome?.reason,
+        `levels.L${level.level}.progressionAttempt.reason`);
+      if (matching.outcome === 'conclusive' || level.repair !== undefined
+        || stored.state.attempts.some(item => item.level === level.level && item.repair)) {
+        validateDependencyRepairSummary(stored.state, level, mismatch);
+      }
+    }
+    if (stored.state.phase === 'terminal') {
+      const points = storedStatus.score.uniqueChecks;
+      mismatch(run.totals?.score !== points.passedPoints
+        || run.totals?.max !== points.availablePoints, 'totals.score');
+      const expectedOutcome = expectedDependencyRunOutcomeKind(
+        run.levels ?? [], stored.state.terminalOutcome);
+      mismatch(expectedOutcome === null || run.outcome?.kind !== expectedOutcome, 'outcome.kind');
+    } else if (!interruptedPrefix) {
+      const seed = record(run.progressionSeed) ? run.progressionSeed : null;
+      const stoppedLevel = run.levels?.at(-1);
+      const stoppedDuringRecheck = seed !== null && safeInteger(seed.fromDepth)
+        && Array.isArray(seed.validatedDepths)
+        && seed.validatedDepths.length < seed.fromDepth
+        && stoppedLevel !== undefined && stoppedLevel.level <= seed.fromDepth
+        && stoppedLevel.outcome?.kind === 'app_failure';
+      mismatch(!stoppedDuringRecheck
+        && stored.state.attempts.at(-1)?.outcome !== 'inconclusive', 'progressionState.phase');
+    }
+  } catch {
+    mismatch(true, 'progressionState');
+  }
+}
+
+export function validateCampaignRun(plan: CampaignValidationPlan, attempt: CampaignValidationAttempt,
+  input: unknown, {
+  buildImage = null, resultDir = null, progressionSeed = null,
+}: { buildImage?: string | null; resultDir?: string | null;
+  progressionSeed?: CampaignExtensionSeed | null } = {}): BenchmarkRun {
+  if (!record(input)) throw new Error('campaign run must be an object');
+  const run = input as BenchmarkRun;
+  const agent = plan.agents.find(item => item.adapter === attempt.agentAdapter
+    && item.model === attempt.model);
+  const condition = plan.conditions.find(item => item.sha256 === attempt.condition?.sha256);
+  const expectedLevels = [...attempt.levels].sort((a, b) => a - b);
+  const actualLevels = (run.levels ?? []).map(level => level.level).sort((a, b) => a - b);
+  const dependencyMode = attempt.mode?.id === 'dependency';
+  const exactLevels = canonicalDefinitionJson(actualLevels) === canonicalDefinitionJson(expectedLevels);
+  const allAtOnceLevels = dependencyMode && attempt.mode?.workSelection === 'all-at-once'
+    && actualLevels.length === 1 && actualLevels[0] === expectedLevels.at(-1);
+  const ladder = run.validation?.ladder;
+  const lastActualLevel = actualLevels.at(-1) ?? null;
+  const blockedLevels = expectedLevels.slice(actualLevels.length);
+  const gatedPrefix = actualLevels.length > 0 && actualLevels.length < expectedLevels.length
+    && actualLevels.every((level, index) => level === expectedLevels[index])
+    && run.outcome?.kind === 'app_failure'
+    && ladder?.policy === 'pass-before-next-level'
+    && canonicalDefinitionJson(ladder.requestedLevels) === canonicalDefinitionJson(expectedLevels)
+    && canonicalDefinitionJson(ladder.completedLevels) === canonicalDefinitionJson(actualLevels)
+    && ladder.stoppedAfterLevel === lastActualLevel
+    && canonicalDefinitionJson(ladder.blockedLevels) === canonicalDefinitionJson(blockedLevels)
+    && run.levels?.at(-1)?.outcome?.kind === 'app_failure'
+    && run.levels.at(-1)?.repair?.status === 'budget-exhausted';
+  const interruptedPrefix = actualLevels.length < expectedLevels.length
+    && actualLevels.every((level, index) => level === expectedLevels[index])
+    && ['provider_failure', 'harness_failure', 'ungraded'].includes(run.outcome?.kind ?? '');
+  const dependencyPrefix = dependencyMode && actualLevels.length > 0
+    && actualLevels.length <= expectedLevels.length
+    && actualLevels.every((level, index) => level === expectedLevels[index])
+    && run.validation?.ladder?.policy === DEPENDENCY_MODE_POLICY;
+  const mismatches: string[] = [];
+  const mismatch = (condition: unknown, field: string): void => {
+    if (condition) mismatches.push(field);
+  };
+  const progressionStatus = run.progressionStatus && typeof run.progressionStatus === 'object'
+    && !Array.isArray(run.progressionStatus) ? run.progressionStatus as UnknownRecord : null;
+  const progressionLevel = dependencyMode && integer(progressionStatus?.level)
+    ? progressionStatus.level : null;
+  const gradedLevels = (run.levels ?? []).filter(level => safeInteger(level.score)
+    && safeInteger(level.max) && level.max > 0);
+  const finalGradedLevel = progressionLevel === null
+    ? gradedLevels.at(-1) ?? null
+    : gradedLevels.find(level => level.level === progressionLevel) ?? null;
+  validatePackageEvidence(run, resultDir, finalGradedLevel, mismatch);
+  mismatch(run.artifactEnvelope?.attempt?.parentId !== attempt.id, 'attempt.parentId');
+  mismatch(canonicalDefinitionJson(run.mode ?? null)
+    !== canonicalDefinitionJson(attempt.mode), 'mode');
+  mismatch(run.track !== plan.definition.track, 'track');
+  mismatch(run.backend !== attempt.stack, 'backend');
+  mismatch(run.model !== attempt.model, 'model');
+  mismatch(canonicalDefinitionJson(run.pricing ?? null)
+    !== canonicalDefinitionJson(attempt.pricing ?? null), 'pricing');
+  mismatch(run.guidance !== attempt.guidance, 'guidance');
+  mismatch(!condition || canonicalDefinitionJson(run.condition)
+    !== canonicalDefinitionJson(attempt.condition), 'condition');
+  mismatch(canonicalDefinitionJson(run.selectionRequest)
+    !== canonicalDefinitionJson(plan.definition.selection), 'selectionRequest');
+  mismatch(canonicalDefinitionJson(run.featureCatalog ?? null)
+    !== canonicalDefinitionJson(attempt.featureCatalog ?? null), 'featureCatalog');
+  mismatch(canonicalDefinitionJson(run.dependencyPolicy ?? null)
+    !== canonicalDefinitionJson(attempt.dependencyPolicy ?? null), 'dependencyPolicy');
+  const expectedProgressionOwner = attempt.dependencyPolicy
+    ? campaignProgressionOwner(plan, attempt) : null;
+  mismatch(canonicalDefinitionJson(run.progressionOwner ?? null)
+    !== canonicalDefinitionJson(expectedProgressionOwner), 'progressionOwner');
+  mismatch(canonicalDefinitionJson(run.skills) !== canonicalDefinitionJson(attempt.skills), 'skills');
+  const actualSeed = record(run.progressionSeed) ? run.progressionSeed : null;
+  const expectedSeed = progressionSeed === null ? null
+    : Object.fromEntries(Object.entries(progressionSeed).filter(([field]) => field !== 'source'));
+  const validatedDepths = actualSeed?.validatedDepths;
+  mismatch(canonicalDefinitionJson(actualSeed === null ? null
+    : Object.fromEntries(Object.entries(actualSeed).filter(([field]) => field !== 'validatedDepths')))
+    !== canonicalDefinitionJson(expectedSeed), 'progressionSeed');
+  if (progressionSeed !== null) {
+    const passedRechecks = (run.levels ?? []).filter(level => level.level <= progressionSeed.fromDepth
+      && level.graded === true && level.outcome?.kind === 'passed').map(level => level.level);
+    mismatch(canonicalDefinitionJson(validatedDepths)
+      !== canonicalDefinitionJson(passedRechecks), 'progressionSeed.validatedDepths');
+  }
+  mismatch(!exactLevels && !allAtOnceLevels && !interruptedPrefix && !gatedPrefix
+    && !dependencyPrefix, 'levels');
+  mismatch(run.artifactEnvelope?.identities?.agentAdapter?.sha256 !== agent?.identity.sha256,
+    'identities.agentAdapter.sha256');
+  mismatch(run.artifactEnvelope?.identities?.engine?.sha256 !== plan.identities.engine.sha256,
+    'identities.engine.sha256');
+  mismatch(run.artifactEnvelope?.identities?.experiment?.id !== plan.id
+    || run.artifactEnvelope?.identities?.experiment?.version !== plan.version
+    || run.artifactEnvelope?.identities?.experiment?.sha256 !== plan.contentSha256
+    || run.artifactEnvelope?.identities?.experiment?.state !== plan.state,
+  'identities.experiment');
+  mismatch(run.artifactEnvelope?.identities?.stackAdapter?.id !== attempt.stack,
+    'identities.stackAdapter.id');
+  mismatch(run.artifactEnvelope?.identities?.stackAdapter?.version
+    !== plan.stacks.find(item => item.id === attempt.stack)?.version,
+    'identities.stackAdapter.version');
+  mismatch(plan.definition.runtime.buildImage !== null
+    && run.runtime?.buildImage !== plan.definition.runtime.buildImage, 'runtime.buildImage');
+  mismatch(plan.definition.runtime.buildImage === null && buildImage !== null
+    && run.runtime?.buildImage !== buildImage, 'runtime.buildImage');
+  for (const level of run.levels ?? []) {
+    if (dependencyMode) continue;
+    const plannedLevel = condition?.requested?.levels?.find(item => item.level === level.level);
+    if (plannedLevel?.selection?.schemaVersion === 3) {
+      const selectionAt = `levels.L${level.level}.selection`;
+      const projectChecks = (checks: PlannedCheck[] | undefined) => checks?.map(check => ({
+        stableKey: check?.stableKey, points: check?.points, treatment: check?.treatment,
+      }));
+      // Missing selection fields are identity mismatches, not validator crashes.
+      const canonicalOrMissing = (value: unknown) => value === undefined
+        ? '"<missing>"' : canonicalDefinitionJson(value);
+      mismatch(level.selection?.schemaVersion !== 3, `${selectionAt}.schemaVersion`);
+      mismatch(level.selection?.sha256 !== plannedLevel.selection.sha256,
+        `${selectionAt}.sha256`);
+      mismatch(canonicalOrMissing(level.selection?.specifications)
+        !== canonicalDefinitionJson(plannedLevel.selection.specifications),
+      `${selectionAt}.specifications`);
+      mismatch(canonicalOrMissing(projectChecks(level.selection?.scoredChecks))
+        !== canonicalDefinitionJson(plannedLevel.selection.scoredChecks),
+      `${selectionAt}.scoredChecks`);
+      mismatch(canonicalOrMissing(projectChecks(level.selection?.observedChecks))
+        !== canonicalDefinitionJson(plannedLevel.selection.observedChecks),
+      `${selectionAt}.observedChecks`);
+      mismatch(level.selection?.scoredPoints !== plannedLevel.selection.scoredPoints,
+        `${selectionAt}.scoredPoints`);
+      const priorChecks = (condition?.requested?.levels ?? [])
+        .filter(item => item.level < level.level)
+        .flatMap(item => item.selection?.scoredChecks ?? []);
+      const expectedRegression = priorChecks.map(check => ({ stableKey: check.stableKey,
+        points: check.points }));
+      const actualRegression = (level.selection?.regressionChecks ?? []).map(check => ({
+        stableKey: check?.stableKey, points: check?.points,
+      }));
+      mismatch(canonicalDefinitionJson(actualRegression)
+        !== canonicalDefinitionJson(expectedRegression), `${selectionAt}.regressionChecks`);
+      const regressionPoints = expectedRegression.reduce((total, check) => total + check.points, 0);
+      if (regressionPoints > 0) {
+        const expectedEvaluationSha256 = sha256(Buffer.from(canonicalDefinitionJson({
+          schemaVersion: 1,
+          selectionSha256: plannedLevel.selection.sha256,
+          regressionChecks: expectedRegression.map(check => check.stableKey).sort(),
+        })));
+        mismatch(level.selection?.evaluationSha256 !== expectedEvaluationSha256,
+          `${selectionAt}.evaluationSha256`);
+        mismatch(level.selection?.regressionPoints !== regressionPoints,
+          `${selectionAt}.regressionPoints`);
+        const regressions: Array<[string, RunRegression | null | undefined]> = [
+          ['firstBuild', level.firstBuild?.regression], ['final', level.regression],
+        ];
+        for (const [name, regression] of regressions) {
+          mismatch(!safeInteger(regression?.score) || !safeInteger(regression?.max)
+            || regression.max !== regressionPoints || regression.score < 0
+            || regression.score > regression.max, `levels.L${level.level}.${name}.regression`);
+        }
+      } else {
+        mismatch(level.regression !== null && level.regression !== undefined,
+          `levels.L${level.level}.regression`);
+      }
+    }
+    const selectedChecks = level.selection?.observedChecks;
+    if (!Array.isArray(selectedChecks) || selectedChecks.length === 0) {
+      mismatch(level.firstBuild?.observations !== undefined,
+        `levels.L${level.level}.firstBuild.observations`);
+      continue;
+    }
+    const at = `levels.L${level.level}.firstBuild.observations`;
+    const observation = level.firstBuild?.observations;
+    const selectedKeys = selectedChecks.map(check => check?.stableKey);
+    const plannedKeys = plannedLevel?.selection?.observedChecks?.map(check => check.stableKey);
+    const selectedPoints = selectedChecks.every(check => Number.isSafeInteger(check?.points)
+      && check.points >= 0)
+      ? selectedChecks.reduce((total, check) => total + check.points, 0) : null;
+    mismatch(!observation || typeof observation !== 'object' || Array.isArray(observation), at);
+    if (!observation || typeof observation !== 'object' || Array.isArray(observation)) continue;
+    mismatch(new Set(selectedKeys).size !== selectedKeys.length
+      || selectedKeys.some(key => typeof key !== 'string' || !key), `${at}.selectedChecks`);
+    mismatch(canonicalDefinitionJson(observation.selectedChecks)
+      !== canonicalDefinitionJson(selectedKeys), `${at}.selectedChecks`);
+    mismatch(!plannedLevel || plannedLevel.selection?.sha256 !== level.selection?.sha256,
+      `levels.L${level.level}.selection.sha256`);
+    mismatch(!Array.isArray(plannedKeys)
+      || canonicalDefinitionJson(plannedKeys) !== canonicalDefinitionJson(selectedKeys),
+    `levels.L${level.level}.selection.observedChecks`);
+    mismatch(observation.selectionSha256 !== level.selection?.sha256, `${at}.selectionSha256`);
+    mismatch(observation.scoreContribution !== false, `${at}.scoreContribution`);
+    mismatch(observation.repairVisible !== false, `${at}.repairVisible`);
+    mismatch(observation.sourceSha256 !== (level.firstBuild?.source?.sha256 ?? null),
+      `${at}.sourceSha256`);
+    mismatch(!Array.isArray(observation.reportedChecks)
+      || new Set(observation.reportedChecks).size !== observation.reportedChecks.length
+      || observation.reportedChecks.some(key => !selectedKeys.includes(key)), `${at}.reportedChecks`);
+    const reportedPoints = Array.isArray(observation.reportedChecks)
+      ? observation.reportedChecks.reduce((total, key) => total
+        + (selectedChecks.find(check => check.stableKey === key)?.points ?? 0), 0) : null;
+    const numericEvidence = safeInteger(observation.observedPoints)
+      && observation.observedPoints >= 0 && safeInteger(observation.passedPoints)
+      && observation.passedPoints >= 0 && observation.passedPoints <= observation.observedPoints;
+    mismatch(observation.observedPoints !== null && !numericEvidence, `${at}.observedPoints`);
+    mismatch(observation.passedPoints !== null && !numericEvidence, `${at}.passedPoints`);
+    mismatch(numericEvidence && (selectedPoints === null
+      || (safeInteger(observation.observedPoints)
+        && (observation.observedPoints > selectedPoints
+          || observation.observedPoints !== reportedPoints))), `${at}.observedPoints`);
+    const exactArtifact = `first-build-l${level.level}-observed/${ARTIFACT_FILE.gradeBundle}`;
+    mismatch(observation.artifact !== null && observation.artifact !== exactArtifact, `${at}.artifact`);
+    mismatch(observation.artifact === null && numericEvidence, `${at}.artifact`);
+    mismatch(observation.artifact !== null && !numericEvidence, `${at}.artifact`);
+  }
+  if (!dependencyMode && (exactLevels || gatedPrefix)
+    && ['passed', 'app_failure'].includes(run.outcome?.kind ?? '')) {
+    const runOutcome = run.outcome!;
+    const levelOutcomes = (run.levels ?? []).map(level => level.outcome?.kind);
+    mismatch(runOutcome.kind === 'passed' && levelOutcomes.some(kind => kind !== 'passed'),
+      'outcome.kind');
+    mismatch(runOutcome.kind === 'app_failure'
+      && !levelOutcomes.some(kind => kind === 'app_failure'), 'outcome.kind');
+    const repairLimit = repairBudgetLimit(plan.definition.repair);
+    let cumulativeRepairs = 0;
+    for (const level of run.levels ?? []) {
+      const plannedLevel = condition?.requested?.levels?.find(item => item.level === level.level);
+      const repair = level.repair;
+      const at = `levels.L${level.level}.repair`;
+      const validObject = repair && typeof repair === 'object' && !Array.isArray(repair);
+      mismatch(!validObject, at);
+      if (!validObject) continue;
+      mismatch(!integer(level.repairs) || level.repairs < 0
+        || level.repairs > repairLimit, `levels.L${level.level}.repairs`);
+      cumulativeRepairs += integer(level.repairs) ? level.repairs : 0;
+      mismatch(repair.limit !== repairLimit, `${at}.limit`);
+      mismatch(repair.used !== cumulativeRepairs, `${at}.used`);
+      const validScore = integer(level.score) && integer(level.max)
+        && level.max > 0 && level.score >= 0 && level.score <= level.max;
+      mismatch(!validScore, `levels.L${level.level}.score`);
+      const declaredPoints = plannedLevel?.selection?.scoredPoints;
+      mismatch(!safeInteger(declaredPoints) || declaredPoints <= 0,
+        `levels.L${level.level}.plannedSelection.scoredPoints`);
+      mismatch(validScore && level.max !== declaredPoints, `levels.L${level.level}.max`);
+      const firstBuildScore = level.firstBuild?.score;
+      const firstBuildMax = level.firstBuild?.max;
+      const validFirstBuildScore = integer(firstBuildScore)
+        && integer(firstBuildMax) && firstBuildMax > 0
+        && firstBuildScore >= 0 && firstBuildScore <= firstBuildMax;
+      mismatch(!validFirstBuildScore, `levels.L${level.level}.firstBuild.score`);
+      mismatch(validFirstBuildScore && firstBuildMax !== declaredPoints,
+        `levels.L${level.level}.firstBuild.max`);
+      const outcomes: Array<[string, RunOutcome | undefined]> = [
+        ['firstBuild', level.firstBuild?.outcome], ['final', level.outcome],
+      ];
+      for (const [phase, outcome] of outcomes) {
+        const atOutcome = `levels.L${level.level}.${phase}.outcome`;
+        mismatch(!outcome || !['passed', 'app_failure'].includes(outcome.kind ?? ''),
+          `${atOutcome}.kind`);
+        mismatch(Array.isArray(outcome?.inconclusive) && outcome.inconclusive.length > 0,
+          `${atOutcome}.inconclusive`);
+        mismatch(Array.isArray(outcome?.harnessFailures) && outcome.harnessFailures.length > 0,
+          `${atOutcome}.harnessFailures`);
+      }
+      if (level.outcome?.kind === 'passed') {
+        const expected = integer(level.repairs) && level.repairs > 0
+          ? 'corrected' : 'not-needed';
+        mismatch(repair.status !== expected, `${at}.status`);
+        mismatch(validScore && level.score !== level.max, `levels.L${level.level}.score`);
+      } else if (level.outcome?.kind === 'app_failure') {
+        const exhausted = repair.status === 'budget-exhausted'
+          && repair.used === repair.limit;
+        const paused = repair.status === 'incomplete'
+          && integer(repair.used) && integer(repair.limit)
+          && repair.used > 0
+          && (repair.stopReason === 'no-source-change'
+            ? repair.used <= repair.limit
+            : repair.stopReason === 'repeated-findings'
+              && repair.used < repair.limit);
+        mismatch(!exhausted && !paused, `${at}.status`);
+        // A perfect level score does not excuse an inherited or contract regression.
+        const inheritedDeficit = integer(level.regression?.score)
+          && integer(level.regression?.max)
+          && level.regression.max > 0
+          && level.regression.score < level.regression.max;
+        const contractFailure = level.contractPass === false;
+        mismatch(validScore && level.score === level.max
+          && !inheritedDeficit && !contractFailure, `levels.L${level.level}.score`);
+      } else {
+        mismatch(true, `${at}.levelOutcome`);
+      }
+    }
+  }
+  if (dependencyMode) {
+    validateDependencyEvidence(plan, attempt, run, resultDir, expectedLevels,
+      interruptedPrefix, mismatch);
+  }
+  if (plan.definition.budgets.maxCostUsdPerAttempt !== null) {
+    const cost = run.totals?.costUsd;
+    const missingAllowed = interruptedPrefix && actualLevels.length === 0 && cost == null;
+    mismatch(!missingAllowed && (!finite(cost)
+      || cost > plan.definition.budgets.maxCostUsdPerAttempt), 'totals.costUsd');
+  }
+  if (agent?.costLimit === 'native') {
+    const agentFailed = ['provider_failure', 'harness_failure'].includes(run.outcome?.kind ?? '');
+    mismatch(!agentFailed && run.totals?.costComplete !== true, 'totals.costComplete');
+    mismatch(!agentFailed
+      && !durableCostLedger(run as Parameters<typeof durableCostLedger>[0]).complete,
+      'costEvidence');
+  }
+  if (mismatches.length) {
+    throw new Error(`${ARTIFACT_FILE.run} does not match its planned campaign attempt: ${mismatches.join(', ')}`);
+  }
+  return run;
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-runner.ts b/tools/stack-bench/src/campaigns/campaign-runner.ts
new file mode 100644
index 00000000000..aaae2e44125
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-runner.ts
@@ -0,0 +1,538 @@
+import { existsSync, mkdirSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+
+
+import { ARTIFACT_FILE, emptyArtifactIdentities, readArtifact, readArtifactPayload,
+  writeArtifact } from '../evidence/artifacts.js';
+import { durableCostLedger } from '../evidence/cost-proof.js';
+import { acquireCampaignLock, releaseCampaignLock } from './campaign-lock.js';
+import { compileCampaignFile } from './campaign-compiler.js';
+import type { CampaignAttemptPlan, CompiledCampaignPlan } from './campaign-compiler.js';
+import { claimNextAttempt, finishCampaignExecution, initializeCampaignDirectory,
+  markInterruptedExecution, readCampaignState, writeCampaignState } from './campaign-scheduler.js';
+import type { CampaignClaim, CampaignDirectory, CampaignExecutionResult, CampaignState }
+  from './campaign-scheduler.js';
+import type { CampaignExtensionSeed } from './campaign-scheduler.js';
+import { rescueSupervisedLease } from '../runtime/recovery.js';
+import { runBounded } from '../runtime/bounded-process.js';
+import type { BoundedProcessResult, RunBoundedOptions }
+  from '../runtime/bounded-process.js';
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import { RUN_INDEX_CAP } from '../composition/tracks.js';
+import { readCampaignAdmission, runCampaignAdmission } from './campaign-admission.js';
+import { campaignChildPath as contained } from './campaign-path.js';
+import { validateCampaignRun } from './campaign-run-validation.js';
+import type { BenchmarkRun } from './campaign-run-validation.js';
+import { campaignExecutionEnvironment, campaignSlotEnvironment } from './campaign-runtime.js';
+
+import { STACK_BENCH_ROOT as ROOT, compiledEntrypoint } from '../package-root.js';
+const BENCH = compiledEntrypoint('commands', 'bench.js');
+
+type UnknownRecord = Record<string, unknown>;
+const integer = (value: unknown): value is number =>
+  typeof value === 'number' && Number.isInteger(value);
+const finite = (value: unknown): value is number =>
+  typeof value === 'number' && Number.isFinite(value);
+
+interface RecoveryArtifact extends UnknownRecord {
+  runId?: string;
+  status?: string;
+  backend?: string;
+  cleanup?: { succeeded?: boolean; retained?: boolean };
+  resources?: {
+    backendState?: string;
+    buildContainer?: { running?: boolean };
+    listenerProcesses?: unknown[];
+    locks?: Array<{ released?: boolean }>;
+  };
+}
+
+interface CampaignProcessArtifact extends UnknownRecord {
+  executionId?: string;
+}
+
+interface RunnerProcessResult {
+  ok?: boolean;
+  code: number | null;
+  signal?: NodeJS.Signals | null;
+  timedOut: boolean;
+  cancelled?: boolean;
+  error?: Error | null;
+  logs?: BoundedProcessResult['logs'];
+  stdoutTail?: string;
+  stderrTail?: string;
+  buildImage?: string | null;
+}
+type ExecuteProcess = (command: string, argv: string[], options: RunBoundedOptions & {
+  signal?: AbortSignal | null;
+}) => Promise<RunnerProcessResult>;
+
+interface CampaignAdmissionAuthority {
+  id: string;
+  payload: { ok: boolean };
+  runIndices: number[];
+}
+
+interface CampaignInspection extends CampaignDirectory {
+  state: CampaignState;
+}
+
+interface RetryAuthority {
+  transient: boolean;
+  recoveryClean: boolean;
+  budgetKnown: boolean;
+  cause: string | null | undefined;
+}
+
+interface AttemptResult extends CampaignExecutionResult {
+  run?: BenchmarkRun | null;
+  retryAuthority?: RetryAuthority;
+  cleanupRequired?: boolean;
+  reason?: string;
+}
+
+
+export function attemptArgv(plan: CompiledCampaignPlan, attempt: CampaignAttemptPlan,
+  output: string, runIndex: unknown = undefined, campaignPlanPath: string | null = null,
+  progressionResumeFrom: string | null = null, campaignAdmissionId: string | null = null,
+  maxBudgetUsd: number | null | undefined = undefined,
+  extension: CampaignExtensionSeed | null = null): string[] {
+  if (!integer(runIndex) || runIndex < 0 || runIndex > RUN_INDEX_CAP) {
+    throw new Error(`attempt ${attempt.id} requires a run slot from 0 through ${RUN_INDEX_CAP}`);
+  }
+  const dependencyMode = attempt.mode?.id === 'dependency';
+  if (dependencyMode !== Boolean(attempt.dependencyPolicy)) {
+    throw new Error(`attempt ${attempt.id} mode and dependency policy do not match`);
+  }
+  const hasFeatureCatalog = Boolean(plan.featureCatalog);
+  if (hasFeatureCatalog !== Boolean(attempt.featureCatalog)) {
+    throw new Error(`attempt ${attempt.id} feature catalog does not match its campaign`);
+  }
+  if (!attempt.condition?.guidance?.documents?.[attempt.stack]) {
+    throw new Error(`attempt ${attempt.id} has no guidance document for ${attempt.stack}`);
+  }
+  const plannedPricing = { unit: plan.definition.pricing.unit,
+    rates: plan.definition.pricing.models[attempt.model] };
+  if (canonicalDefinitionJson(attempt.pricing) !== canonicalDefinitionJson(plannedPricing)) {
+    throw new Error(`attempt ${attempt.id} pricing does not match its campaign`);
+  }
+  const args = [BENCH];
+  if (typeof campaignPlanPath !== 'string' || !campaignPlanPath) {
+    throw new Error(`attempt ${attempt.id} requires its compiled campaign plan path`);
+  }
+  args.push('--campaign-file', resolve(campaignPlanPath), '--campaign-attempt-id', attempt.id);
+  if (campaignAdmissionId !== null) {
+    if (typeof campaignAdmissionId !== 'string' || !campaignAdmissionId) {
+      throw new Error(`attempt ${attempt.id} has an invalid campaign admission id`);
+    }
+    args.push('--campaign-admission-id', campaignAdmissionId);
+  }
+  if (hasFeatureCatalog) {
+    if (canonicalDefinitionJson(attempt.featureCatalog)
+      !== canonicalDefinitionJson(plan.featureCatalog?.identity)) {
+      throw new Error(`attempt ${attempt.id} feature catalog identity does not match its campaign`);
+    }
+  }
+  if (dependencyMode) {
+    if (progressionResumeFrom !== null) {
+      if (typeof progressionResumeFrom !== 'string' || !progressionResumeFrom) {
+        throw new Error(`attempt ${attempt.id} has an invalid progression resume directory`);
+      }
+      args.push('--progression-resume-from', resolve(progressionResumeFrom));
+    }
+    if (extension !== null) {
+      args.push('--seed-from', resolve(dirname(campaignPlanPath), extension.source),
+        '--seed-through', String(extension.fromDepth),
+        '--progression-seed-json', JSON.stringify(extension));
+    }
+  } else {
+    if (progressionResumeFrom !== null || extension !== null) {
+      throw new Error(`strict attempt ${attempt.id} cannot resume dependency progression state`);
+    }
+  }
+  args.push('--run-index', String(runIndex),
+    '--out', output);
+  const plannedBudget = plan.definition.budgets.maxCostUsdPerAttempt;
+  const executionBudget = maxBudgetUsd === undefined ? plannedBudget : maxBudgetUsd;
+  if (executionBudget !== null) {
+    if (!Number.isFinite(executionBudget) || executionBudget <= 0
+      || (plannedBudget !== null && executionBudget > plannedBudget)) {
+      throw new Error(`attempt ${attempt.id} has an invalid remaining cost budget`);
+    }
+    args.push('--max-budget-usd', String(Number(executionBudget.toFixed(6))));
+  }
+  return args;
+}
+
+
+const TRANSIENT_PROVIDER_STATUSES = new Set([500, 502, 503, 504, 529]);
+
+export function campaignRetryAuthority(run: BenchmarkRun | null | undefined, {
+  recoveryClean = false, requireCostReceipt = false,
+}: { recoveryClean?: boolean; requireCostReceipt?: boolean } = {}): RetryAuthority {
+  const outcome = run?.outcome;
+  const providerStatus = outcome?.provider?.providerStatus;
+  const providerTransient = outcome?.kind === 'provider_failure'
+    && outcome.phase === 'coding-session'
+    && outcome.reason !== 'provider-throttle-exhausted'
+    && ((typeof providerStatus === 'number' && TRANSIENT_PROVIDER_STATUSES.has(providerStatus))
+      || ['provider-api-error', 'provider-connection-error'].includes(outcome.reason ?? ''));
+  const transient = providerTransient;
+  const cost = run?.totals?.costUsd;
+  const budgetKnown = !requireCostReceipt || (run?.totals?.costComplete === true
+    && finite(cost) && cost >= 0);
+  return {
+    transient,
+    recoveryClean: recoveryClean === true,
+    budgetKnown,
+    cause: transient
+      ? providerStatus === null || providerStatus === undefined
+        ? outcome.reason : `provider-http-${providerStatus}`
+      : null,
+  };
+}
+
+function readAttemptResult(plan: CompiledCampaignPlan, attempt: CampaignAttemptPlan,
+  executionId: string, output: string, processResult: RunnerProcessResult,
+  extension: CampaignExtensionSeed | null = null): AttemptResult {
+  const withRetryAuthority = (result: AttemptResult): AttemptResult => ({ ...result,
+    retryAuthority: campaignRetryAuthority(result.run, {
+      recoveryClean: publicRecoveryProvesCleanup(output, attempt.stack, attempt.id,
+        executionId, result.run ?? null),
+      requireCostReceipt: plan.definition.budgets.maxCostUsdPerAttempt !== null,
+    }) });
+  if (processResult.cancelled === true) {
+    return withRetryAuthority({ exitCode: processResult.code, timedOut: false,
+      run: { outcome: { kind: 'scheduler_interrupted',
+        reason: 'campaign cancellation requested' } } });
+  }
+  const runPath = join(output, ARTIFACT_FILE.run);
+  let run = null;
+  let artifactError = null;
+  if (existsSync(runPath)) {
+    try {
+      run = readArtifactPayload(runPath, { expectedKind: 'benchmark_run' }) as BenchmarkRun;
+      validateCampaignRun(plan, attempt, run, {
+        buildImage: processResult.buildImage,
+        resultDir: output,
+        progressionSeed: extension,
+      });
+    }
+    catch (error) { artifactError = error instanceof Error ? error : new Error(String(error)); }
+  }
+  if (artifactError) {
+    const processDetail = processResult.code !== 0
+      ? processFailureDetail(processResult) : null;
+    return withRetryAuthority({ exitCode: processResult.code, timedOut: processResult.timedOut,
+      run: { outcome: { kind: 'harness_failure',
+        reason: `${processDetail ? `${processDetail}; ` : ''}partial ${ARTIFACT_FILE.run} is invalid: ${artifactError.message}` } } });
+  }
+  if (!run && processResult.code !== 0 && !processResult.timedOut) {
+    const detail = processFailureDetail(processResult);
+    return withRetryAuthority({ exitCode: processResult.code, timedOut: false, run: { outcome: {
+      kind: 'harness_failure', reason: detail || `attempt ended before producing ${ARTIFACT_FILE.run}` } } });
+  }
+  return withRetryAuthority({ exitCode: processResult.code, timedOut: processResult.timedOut, run });
+}
+
+export function remainingAttemptCostBudget(
+  plan: { definition: { budgets: { maxCostUsdPerAttempt: number | null } } },
+  claim: { attempt: { id: string }; priorOutputs?: string[] },
+  directory: string): number | null {
+  const cap = plan.definition.budgets.maxCostUsdPerAttempt;
+  if (cap === null) return null;
+  let spent = 0;
+  for (const output of claim.priorOutputs ?? []) {
+    const runPath = join(contained(directory, output, 'prior attempt output'), ARTIFACT_FILE.run);
+    if (!existsSync(runPath)) {
+      throw new Error(`cannot retry ${claim.attempt.id}: prior provider spend is unknown`);
+    }
+    const run = readArtifactPayload(runPath, { expectedKind: 'benchmark_run' }) as BenchmarkRun;
+    const ledger = durableCostLedger(run as Parameters<typeof durableCostLedger>[0]);
+    if (!ledger.complete) {
+      throw new Error(`cannot retry ${claim.attempt.id}: prior provider spend is unknown`);
+    }
+    spent += ledger.reportedCostUsd;
+  }
+  const remaining = Number((cap - spent).toFixed(6));
+  if (remaining <= 0) {
+    throw new Error(`cannot retry ${claim.attempt.id}: its $${cap} cost cap is exhausted`);
+  }
+  return remaining;
+}
+
+export function processFailureDetail(processResult: Partial<RunnerProcessResult>): string {
+  const text = processResult.stderrTail || processResult.stdoutTail
+    || processResult.error?.message || '';
+  const lines = text.split(/\r?\n/).map(line => line.trim()).filter(Boolean);
+  const explicit = lines.filter(line => /^Error:\s+/.test(line)).at(-1);
+  return (explicit ?? lines.slice(-4).join(' | ')).slice(0, 800);
+}
+
+function assertAdmissionReferences(plan: CompiledCampaignPlan, directory: string,
+  state: CampaignState): CampaignState {
+  const ids = [...new Set(state.attempts.flatMap(attempt =>
+    attempt.executions.map(execution => execution.admissionId)))];
+  for (const id of ids) {
+    const admission = readCampaignAdmission(directory, id, plan);
+    if (!admission.ok) throw new Error(`campaign execution references failed admission ${id}`);
+  }
+  return state;
+}
+
+export function inspectCampaign(directory: string, {
+  requireCurrentInputs = true,
+}: { requireCurrentInputs?: boolean } = {}): CampaignInspection {
+  const current = readCampaignState(directory, { requireCurrentInputs });
+  return { ...current,
+    state: assertAdmissionReferences(current.plan, current.paths.root, current.state) };
+}
+
+function publicRecoveryProvesCleanup(output: string, backend: string, attemptId: string,
+  executionId: string, currentRun: BenchmarkRun | null = null): boolean {
+  const runPath = join(output, ARTIFACT_FILE.run);
+  const processPath = join(output, ARTIFACT_FILE.process);
+  const recoveryPath = join(output, ARTIFACT_FILE.recovery);
+  if ((!currentRun && !existsSync(runPath)) || !existsSync(processPath) || !existsSync(recoveryPath)) {
+    return false;
+  }
+  try {
+    const run = currentRun ?? readArtifactPayload<BenchmarkRun>(runPath,
+      { expectedKind: 'benchmark_run' });
+    if (typeof run.id !== 'string' || !run.id
+      || run.backend !== backend
+      || run.artifactEnvelope?.attempt?.parentId !== attemptId
+      || run.backendLease?.runId !== run.id
+      || run.backendLease?.backend !== backend
+      || run.backendLease?.state !== 'released') return false;
+    const processArtifact = readArtifact<CampaignProcessArtifact>(processPath, {
+      expectedKind: 'campaign_process', expectedId: `${executionId}-process`,
+    });
+    if (processArtifact.attempt.id !== executionId
+      || processArtifact.attempt.parentId !== attemptId
+      || processArtifact.payload.executionId !== executionId) return false;
+    const artifact = readArtifact<RecoveryArtifact>(recoveryPath, {
+      expectedKind: 'recovery', expectedId: `${run.id}-recovery`,
+    });
+    const recovery = artifact.payload;
+    if (artifact.attempt.id !== `${run.id}-recovery`
+      || artifact.attempt.parentId !== run.id) return false;
+    return recovery.status === 'clean'
+      && recovery.runId === run.id
+      && recovery.backend === backend
+      && recovery.cleanup?.succeeded === true
+      && recovery.cleanup?.retained === false
+      && recovery.resources?.backendState === 'released'
+      && recovery.resources?.buildContainer?.running !== true
+      && Array.isArray(recovery.resources?.listenerProcesses)
+      && recovery.resources.listenerProcesses.length === 0
+      && Array.isArray(recovery.resources?.locks)
+      && recovery.resources.locks.every(resource => resource.released === true);
+  } catch {
+    return false;
+  }
+}
+
+export function reconcileCampaign(campaignFile: string, directory: string,
+  { rescue = rescueSupervisedLease }: {
+    rescue?: (supervisorState: string, output: string) => void;
+  } = {}): CampaignState {
+  const plan = compileCampaignFile(resolve(campaignFile));
+  const lock = acquireCampaignLock(directory, plan);
+  try {
+    const initialized = initializeCampaignDirectory(plan, directory);
+    const { state } = inspectCampaign(initialized.paths.root);
+    const running = state.attempts.filter(item => item.status === 'running');
+    if (!running.length) throw new Error('campaign has no running attempt to reconcile');
+    for (const attempt of running) {
+      const execution = attempt.executions.at(-1)!;
+      const output = contained(initialized.paths.root, execution.output, 'attempt output');
+      const supervisorState = contained(initialized.paths.root,
+        join('.private', `${execution.id}.supervisor.json`), 'supervisor state');
+      if (existsSync(supervisorState)) {
+        rescue(supervisorState, output);
+      } else if (!publicRecoveryProvesCleanup(output, attempt.plan.stack, attempt.plan.id,
+        execution.id)) {
+        throw new Error('running attempt has neither private supervisor authority nor public clean recovery proof');
+      }
+    }
+    let reconciled = state;
+    for (const attempt of running) {
+      reconciled = markInterruptedExecution(reconciled, attempt.executions.at(-1)!.id, {
+        reason: 'controller ended before recording completion; exact-owned cleanup was proven',
+      });
+    }
+    writeCampaignState(initialized.paths.state, plan, reconciled);
+    return reconciled;
+  } finally { releaseCampaignLock(lock); }
+}
+
+export async function executeCampaign(campaignFile: string, directory: string,
+  { mode = 'frozen', env = process.env, execute = runBounded as ExecuteProcess,
+    admit = runCampaignAdmission, rescue = rescueSupervisedLease, signal = null }: {
+      mode?: 'frozen' | 'model-free-trial';
+      env?: NodeJS.ProcessEnv;
+      execute?: ExecuteProcess;
+      admit?: (plan: CompiledCampaignPlan, directory: string,
+        options: { env: NodeJS.ProcessEnv }) => CampaignAdmissionAuthority;
+      rescue?: (supervisorState: string, output: string) => void;
+      signal?: AbortSignal | null;
+    } = {}): Promise<CampaignState> {
+  const plan = compileCampaignFile(resolve(campaignFile));
+  if (!['frozen', 'model-free-trial'].includes(mode)) {
+    throw new Error(`unknown campaign execution mode ${JSON.stringify(mode)}`);
+  }
+  if (mode === 'frozen' && plan.state !== 'frozen') {
+    throw new Error('campaign run requires a complete test plan; this plan is for inspection only');
+  }
+  if (mode === 'model-free-trial') {
+    if (plan.state !== 'draft') {
+      throw new Error('campaign trial requires a model-free draft; use campaign run for a complete test plan');
+    }
+    const billable = plan.agents.filter(agent => agent.costLimit !== 'non-billable');
+    if (billable.length) {
+      throw new Error(`campaign trial requires non-billable agent adapters; found ${billable
+        .map(agent => agent.adapter).join(', ')}`);
+    }
+    const nonzeroPricing = plan.agents.filter(agent => Object.values(
+      plan.definition.pricing.models[agent.model] ?? {}).some(value => value !== 0));
+    if (nonzeroPricing.length) {
+      throw new Error(`campaign trial requires zero pricing for every selected model; found ${nonzeroPricing
+        .map(agent => agent.model).join(', ')}`);
+    }
+  }
+  const executionEnv = campaignExecutionEnvironment(plan, env);
+  const lock = acquireCampaignLock(directory, plan);
+  try {
+    const initialized = initializeCampaignDirectory(plan, directory);
+    let { state } = inspectCampaign(initialized.paths.root);
+    if (state.attempts.some(attempt => attempt.status === 'running')) {
+      throw new Error('campaign has an unresolved running attempt; prove its owned resources are clean before reconciliation');
+    }
+    if (!state.attempts.some(attempt => attempt.status === 'pending')) return state;
+    const admission = admit(plan, initialized.paths.root, { env: executionEnv });
+    if (!admission?.payload?.ok || typeof admission.id !== 'string' || !admission.id) {
+      throw new Error('campaign-wide preflight admission failed; no attempt was claimed');
+    }
+    const runClaim = async (claim: CampaignClaim): Promise<AttemptResult> => {
+      const output = contained(initialized.paths.root, claim.output, 'attempt output');
+      // Create every execution output before preflight bind-mounts it.
+      mkdirSync(output, { recursive: true });
+      contained(initialized.paths.root, claim.output, 'attempt output');
+      const supervisorState = contained(initialized.paths.root,
+        join('.private', `${claim.executionId}.supervisor.json`), 'supervisor state');
+      let processResult: RunnerProcessResult;
+      try {
+        const remainingBudget = remainingAttemptCostBudget(plan, claim, initialized.paths.root);
+        processResult = await execute(process.execPath,
+        attemptArgv(plan, claim.attempt, output, claim.runIndex, initialized.paths.plan,
+          claim.attempt.mode?.id !== 'dependency' || claim.resumeFrom === null ? null
+            : contained(initialized.paths.root, claim.resumeFrom,
+              'progression resume directory'), admission.id, remainingBudget,
+          claim.extension), {
+          cwd: ROOT,
+          env: { ...campaignSlotEnvironment(executionEnv, claim.attempt.stack, claim.runIndex),
+            STACK_BENCH_SUPERVISOR_STATE: supervisorState },
+          stdio: 'inherit',
+          logs: { stdout: join(output, 'process.stdout.log'), stderr: join(output, 'process.stderr.log') },
+          timeoutMs: plan.definition.budgets.attemptTimeoutMinutes * 60_000,
+          signal,
+        });
+        processResult.buildImage = executionEnv.STACK_BENCH_IMAGE;
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        const reason = `attempt launcher failed: ${message}`;
+        if (existsSync(supervisorState)) {
+          try { rescue(supervisorState, output); }
+          catch (cleanupError) {
+            const cleanupMessage = cleanupError instanceof Error
+              ? cleanupError.message : String(cleanupError);
+            return { cleanupRequired: true,
+              reason: `${reason}; cleanup failed: ${cleanupMessage}` };
+          }
+        }
+        return { exitCode: null, timedOut: false,
+          run: { outcome: { kind: 'harness_failure', reason } } };
+      }
+      try {
+        writeArtifact(join(output, ARTIFACT_FILE.process), { kind: 'campaign_process',
+          id: `${claim.executionId}-process`,
+          attempt: { id: claim.executionId, parentId: claim.attempt.id },
+          identities: emptyArtifactIdentities({ experiment: {
+            id: plan.id, version: plan.version, sha256: plan.contentSha256, state: plan.state,
+          } }),
+          payload: { schemaVersion: 1, executionId: claim.executionId, runIndex: claim.runIndex,
+            exitCode: processResult.code ?? null, signal: processResult.signal ?? null,
+            timedOut: processResult.timedOut === true,
+            streams: processResult.logs ? Object.fromEntries(Object.entries(processResult.logs)
+              .map(([name, log]) => [name, { ...log, path: `process.${name}.log` }])) : null } });
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        const reason = `could not record campaign process evidence: ${message}`;
+        if (existsSync(supervisorState)) {
+          try { rescue(supervisorState, output); }
+          catch (cleanupError) {
+            const cleanupMessage = cleanupError instanceof Error
+              ? cleanupError.message : String(cleanupError);
+            return { cleanupRequired: true,
+              reason: `${reason}; cleanup failed: ${cleanupMessage}` };
+          }
+        }
+        return { exitCode: processResult.code ?? null, timedOut: false,
+          run: { outcome: { kind: 'harness_failure', reason } } };
+      }
+      let cleanupError: Error | null = null;
+      if (!processResult.ok && existsSync(supervisorState)) {
+        try { rescue(supervisorState, output); }
+        catch (error) {
+          cleanupError = error instanceof Error ? error : new Error(String(error));
+        }
+      }
+      if (cleanupError) {
+        return { cleanupRequired: true,
+          reason: `attempt cleanup failed: ${cleanupError.message}` };
+      }
+      return readAttemptResult(plan, claim.attempt, claim.executionId, output, processResult,
+        claim.extension);
+    };
+    const active = new Map<string, Promise<{ claim: CampaignClaim; result: AttemptResult }>>();
+    const invalidAtStart = state.summary.invalid;
+    let stopLaunching = signal?.aborted === true;
+    while (true) {
+      while (!stopLaunching && !signal?.aborted && active.size < plan.summary.parallelism) {
+        const next = claimNextAttempt(state, { admissionId: admission.id,
+          runIndices: admission.runIndices });
+        state = next.state;
+        if (!next.claim) break;
+        const claim = next.claim;
+        writeCampaignState(initialized.paths.state, plan, state);
+        const promise = runClaim(claim).then(result => ({ claim, result }),
+          error => ({ claim, result: { exitCode: null, timedOut: false,
+            run: { outcome: { kind: 'harness_failure',
+              reason: `campaign worker failed: ${error instanceof Error
+                ? error.message : String(error)}` } } } }));
+        active.set(claim.executionId, promise);
+      }
+      if (!active.size) return state;
+      const completed = await Promise.race(active.values());
+      active.delete(completed.claim.executionId);
+      if (signal?.aborted) stopLaunching = true;
+      if (completed.result.cleanupRequired === true) {
+        // Keep the execution running in durable state. Its private supervisor
+        // authority still exists, so reconcile can retry exact-owned cleanup.
+        // Marking it invalid here would strand that authority permanently.
+        stopLaunching = true;
+        continue;
+      }
+      state = finishCampaignExecution(state, completed.claim.executionId,
+        completed.result, {
+          retries: plan.definition.attemptPolicy.retries,
+          retryOn: plan.definition.attemptPolicy.retryOn,
+        });
+      writeCampaignState(initialized.paths.state, plan, state);
+      if (state.summary.invalid > invalidAtStart) stopLaunching = true;
+    }
+  } finally {
+    releaseCampaignLock(lock);
+  }
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-runtime.ts b/tools/stack-bench/src/campaigns/campaign-runtime.ts
new file mode 100644
index 00000000000..ba7f18245e1
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-runtime.ts
@@ -0,0 +1,88 @@
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { currentEngineIdentity } from '../evidence/artifacts.js';
+import { sha256 } from '../evidence/provenance.js';
+import { validateReleaseManifest } from '../releases/release-manifest.js';
+import { DEFAULT_SPACETIME_SERVER_URI, loopbackHttpUri } from '../runtime/backend-lease.js';
+
+interface CampaignRuntimePlan {
+  state: string;
+  identities: { engine?: { sha256?: string | null } };
+  definition: { runtime: {
+    releaseManifestSha256: string | null;
+    controllerImage: string | null;
+    buildImage: string | null;
+    platform: string;
+  } };
+}
+
+export function verifyCampaignRuntime(plan: CampaignRuntimePlan,
+  env: NodeJS.ProcessEnv = process.env): CampaignRuntimePlan['definition']['runtime'] {
+  if (plan.state !== 'frozen') return structuredClone(plan.definition.runtime);
+  const expected = plan.definition.runtime;
+  const plannedEngine = plan.identities?.engine;
+  if (!plannedEngine?.sha256 || currentEngineIdentity().sha256 !== plannedEngine.sha256) {
+    throw new Error('running Stack Bench engine does not match the recorded test plan');
+  }
+  if (env.STACK_BENCH_CONTROLLER_IMAGE !== expected.controllerImage) {
+    throw new Error('running controller image does not match the recorded test plan');
+  }
+  if (expected.releaseManifestSha256 === null) return structuredClone(expected);
+  if (typeof env.STACK_BENCH_RELEASE_MANIFEST !== 'string'
+    || env.STACK_BENCH_RELEASE_MANIFEST.trim() === '') {
+    throw new Error('STACK_BENCH_RELEASE_MANIFEST is required to run this test plan');
+  }
+  let bytes;
+  try { bytes = readFileSync(resolve(env.STACK_BENCH_RELEASE_MANIFEST)); }
+  catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    throw new Error(`cannot read the test plan release manifest: ${message}`, { cause: error });
+  }
+  if (sha256(bytes) !== expected.releaseManifestSha256) {
+    throw new Error('release manifest does not match the recorded test plan');
+  }
+  let manifest;
+  try { manifest = validateReleaseManifest(JSON.parse(bytes.toString('utf8'))); }
+  catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    throw new Error(`test plan release manifest is invalid: ${message}`, { cause: error });
+  }
+  const controller = manifest.images.find(image => image.role === 'controller');
+  const build = manifest.images.find(image => image.role === 'build-sandbox');
+  if (controller?.reference !== expected.controllerImage
+    || build?.reference !== expected.buildImage
+    || controller?.platform !== expected.platform
+    || build?.platform !== expected.platform) {
+    throw new Error('release manifest images do not match the recorded test plan');
+  }
+  return structuredClone(expected);
+}
+
+export function campaignExecutionEnvironment(plan: CampaignRuntimePlan,
+  env: NodeJS.ProcessEnv = process.env): NodeJS.ProcessEnv {
+  const executionEnv = { ...env };
+  if (plan.definition.runtime.buildImage !== null) {
+    if (executionEnv.STACK_BENCH_IMAGE
+      && executionEnv.STACK_BENCH_IMAGE !== plan.definition.runtime.buildImage) {
+      throw new Error('ambient STACK_BENCH_IMAGE conflicts with the campaign build image');
+    }
+    executionEnv.STACK_BENCH_IMAGE = plan.definition.runtime.buildImage;
+  }
+  verifyCampaignRuntime(plan, executionEnv);
+  return executionEnv;
+}
+
+export function campaignSlotEnvironment(env: NodeJS.ProcessEnv, stack: string | null,
+  runIndex: number): NodeJS.ProcessEnv {
+  const executionEnv = { ...env };
+  if (stack !== 'spacetime') return executionEnv;
+  const base = loopbackHttpUri(executionEnv.STACK_BENCH_STDB_URI ?? DEFAULT_SPACETIME_SERVER_URI);
+  const port = Number(base.port) + runIndex;
+  if (!Number.isInteger(runIndex) || runIndex < 0 || port > 65535) {
+    throw new Error(`campaign run slot ${runIndex} cannot allocate a SpacetimeDB host port`);
+  }
+  base.port = String(port);
+  executionEnv.STACK_BENCH_STDB_URI = base.toString().replace(/\/$/, '');
+  return executionEnv;
+}
diff --git a/tools/stack-bench/src/campaigns/campaign-scheduler.ts b/tools/stack-bench/src/campaigns/campaign-scheduler.ts
new file mode 100644
index 00000000000..f100c0c36e5
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/campaign-scheduler.ts
@@ -0,0 +1,656 @@
+import { existsSync, mkdirSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { z } from 'zod';
+
+import { ARTIFACT_FILE, emptyArtifactIdentities, readArtifact, writeArtifact }
+  from '../evidence/artifacts.js';
+import { campaignIdentity, validateCompiledCampaignPlan } from './campaign-compiler.js';
+import type { CampaignAttemptPlan, CompiledCampaignPlan } from './campaign-compiler.js';
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import { RUN_INDEX_CAP } from '../composition/tracks.js';
+import { formatZodError } from '../zod-error.js';
+import { CAMPAIGN_FILE } from './campaign-path.js';
+
+export const CAMPAIGN_STATE_SCHEMA_VERSION = 2;
+type AttemptStatus = 'pending' | 'running' | 'completed' | 'invalid';
+type ExecutionStatus = 'running' | 'completed' | 'invalid';
+type CampaignStatus = 'prepared' | 'running' | 'completed' | 'attention-required';
+type TerminalOutcome = 'passed' | 'app_failure';
+type InvalidOutcome = 'provider_failure' | 'harness_failure' | 'inconclusive'
+  | 'ungraded' | 'contaminated' | 'timed_out' | 'missing_artifact'
+  | 'scheduler_interrupted';
+type CampaignOutcome = TerminalOutcome | InvalidOutcome;
+
+export interface CampaignRetry {
+  requested: boolean;
+  transient: boolean;
+  recoveryClean: boolean;
+  budgetKnown: boolean;
+  scheduled: boolean;
+  cause: string | null;
+  reason: string;
+}
+
+export interface CampaignContinuation {
+  grantId: string;
+  level: number;
+  nodeIds: string[];
+  repairs: number;
+  stateSha256: string;
+  resumeFrom: string;
+  scheduledAt: string;
+}
+
+export interface CampaignExtensionSeed {
+  fromDepth: number;
+  source: string;
+  sourceSha256: string;
+  sourceFiles: number;
+  parent: {
+    campaignId: string;
+    campaignSha256: string;
+    attemptId: string;
+    executionId: string;
+    runId: string;
+    runSha256: string;
+  };
+}
+
+export interface CampaignExecution {
+  id: string;
+  ordinal: number;
+  status: string;
+  output: string;
+  startedAt: string;
+  completedAt: string | null;
+  exitCode: number | null;
+  outcome: CampaignOutcome | null;
+  reason: string | null;
+  admissionId: string;
+  runIndex: number;
+  retry: CampaignRetry | null;
+  continuation?: CampaignContinuation;
+}
+
+export interface CampaignAttemptState {
+  plan: CampaignAttemptPlan;
+  status: string;
+  executions: CampaignExecution[];
+  extension?: CampaignExtensionSeed;
+}
+
+export interface CampaignSummary {
+  total: number;
+  pending: number;
+  running: number;
+  completed: number;
+  invalid: number;
+  executions: number;
+  [key: string]: number;
+}
+
+export interface CampaignState {
+  schemaVersion: number;
+  campaignId: string;
+  campaignSha256: string;
+  status: CampaignStatus;
+  createdAt: string;
+  updatedAt: string;
+  maxParallel: number;
+  attempts: CampaignAttemptState[];
+  summary: CampaignSummary;
+}
+
+export interface CampaignClaim {
+  attempt: CampaignAttemptPlan;
+  executionId: string;
+  output: string;
+  runIndex: number;
+  resumeFrom: string | null;
+  priorOutputs: string[];
+  extension: CampaignExtensionSeed | null;
+}
+
+interface RunArtifact {
+  contaminated?: boolean;
+  contamination?: { verdict?: string };
+  outcome?: { kind?: string; reason?: string | null; inconclusive?: unknown };
+}
+
+export interface CampaignExecutionResult {
+  exitCode?: number | null;
+  timedOut?: boolean;
+  run?: RunArtifact | null;
+  retryAuthority?: {
+    transient?: boolean;
+    recoveryClean?: boolean;
+    budgetKnown?: boolean;
+    cause?: string | null;
+  };
+}
+
+const ATTEMPT_STATUSES = new Set<AttemptStatus>(['pending', 'running', 'completed', 'invalid']);
+const TERMINAL_OUTCOMES = new Set<string>(['passed', 'app_failure']);
+const INVALID_OUTCOMES = new Set<string>(['provider_failure', 'harness_failure', 'inconclusive',
+  'ungraded', 'contaminated', 'timed_out', 'missing_artifact', 'scheduler_interrupted']);
+const SAFE_ID = /^[a-z0-9][a-z0-9.-]*$/;
+const FEATURE_ID = /^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;
+const HASH = /^[a-f0-9]{64}$/;
+const fail = (message: string): never => { throw new Error(`invalid campaign state: ${message}`); };
+
+const timestampSchema = z.string().refine(value => !Number.isNaN(Date.parse(value)),
+  'must be an ISO timestamp');
+const retrySchema = z.strictObject({
+  requested: z.boolean(),
+  transient: z.boolean(),
+  recoveryClean: z.boolean(),
+  budgetKnown: z.boolean(),
+  scheduled: z.boolean(),
+  cause: z.string().min(1).nullable(),
+  reason: z.string().min(1),
+});
+const continuationSchema = z.strictObject({
+  grantId: z.string().min(1),
+  level: z.number().int(),
+  nodeIds: z.array(z.string()),
+  repairs: z.number().int(),
+  stateSha256: z.string(),
+  resumeFrom: z.string(),
+  scheduledAt: timestampSchema,
+});
+const extensionSeedSchema = z.strictObject({
+  fromDepth: z.number().int().positive(),
+  source: z.string().min(1),
+  sourceSha256: z.string().regex(HASH),
+  sourceFiles: z.number().int().nonnegative(),
+  parent: z.strictObject({
+    campaignId: z.string().min(1),
+    campaignSha256: z.string().regex(HASH),
+    attemptId: z.string().min(1),
+    executionId: z.string().min(1),
+    runId: z.string().min(1),
+    runSha256: z.string().regex(HASH),
+  }),
+});
+
+export function validateCampaignExtensionSeed(input: unknown): CampaignExtensionSeed {
+  const parsed = extensionSeedSchema.safeParse(structuredClone(input));
+  if (!parsed.success) {
+    throw new Error(`invalid campaign extension: ${formatZodError(parsed.error, 'extension')}`);
+  }
+  return parsed.data;
+}
+const executionSchema = z.strictObject({
+  id: z.string().min(1),
+  ordinal: z.number().int(),
+  status: z.enum(['running', 'completed', 'invalid']),
+  output: z.string().min(1),
+  startedAt: timestampSchema,
+  completedAt: timestampSchema.nullable(),
+  exitCode: z.number().int().nullable(),
+  outcome: z.enum(['passed', 'app_failure', 'provider_failure', 'harness_failure',
+    'inconclusive', 'ungraded', 'contaminated', 'timed_out', 'missing_artifact',
+    'scheduler_interrupted']).nullable(),
+  reason: z.string().min(1).nullable(),
+  admissionId: z.string().min(1),
+  runIndex: z.number().int(),
+  retry: retrySchema.nullable().optional(),
+  continuation: continuationSchema.optional(),
+});
+const campaignStateSchema = z.strictObject({
+  schemaVersion: z.literal(CAMPAIGN_STATE_SCHEMA_VERSION),
+  campaignId: z.string().min(1),
+  campaignSha256: z.string().regex(HASH),
+  status: z.enum(['prepared', 'running', 'completed', 'attention-required']),
+  createdAt: timestampSchema,
+  updatedAt: timestampSchema,
+  maxParallel: z.number().int(),
+  attempts: z.array(z.strictObject({
+    plan: z.looseObject({ id: z.string().min(1) }),
+    status: z.enum(['pending', 'running', 'completed', 'invalid']),
+    executions: z.array(executionSchema),
+    extension: extensionSeedSchema.optional(),
+  })).min(1),
+  summary: z.strictObject({
+    total: z.number().int(),
+    pending: z.number().int(),
+    running: z.number().int(),
+    completed: z.number().int(),
+    invalid: z.number().int(),
+    executions: z.number().int(),
+  }),
+});
+
+function string(value: unknown, at: string): string {
+  if (typeof value !== 'string' || !value) fail(`${at} is required`);
+  return value as string;
+}
+
+function recalculate(state: CampaignState, now: string): CampaignState {
+  const counts = Object.fromEntries([...ATTEMPT_STATUSES].sort().map(status =>
+    [status, state.attempts.filter(attempt => attempt.status === status).length])) as
+    Record<AttemptStatus, number>;
+  state.summary = { total: state.attempts.length, ...counts,
+    executions: state.attempts.reduce((total, attempt) => total + attempt.executions.length, 0) };
+  if (counts.running) state.status = 'running';
+  else if (counts.invalid) state.status = 'attention-required';
+  else if (counts.pending) state.status = 'prepared';
+  else state.status = 'completed';
+  state.updatedAt = now;
+  return state;
+}
+
+export function validateCampaignState(input: unknown): CampaignState {
+  const parsed = campaignStateSchema.safeParse(structuredClone(input));
+  if (!parsed.success) {
+    fail(formatZodError(parsed.error, 'document'));
+  }
+  const state = parsed.data as unknown as CampaignState;
+  if (!Number.isInteger(state.maxParallel) || state.maxParallel < 1
+    || state.maxParallel > RUN_INDEX_CAP + 1) {
+    fail(`maxParallel must be an integer from 1 through ${RUN_INDEX_CAP + 1}`);
+  }
+  if (Date.parse(state.updatedAt) < Date.parse(state.createdAt)) fail('updatedAt precedes createdAt');
+  const ids = new Set<string>();
+  let running = 0;
+  const runningSlots = new Set<number>();
+  for (const [index, attempt] of state.attempts.entries()) {
+    const at = `attempts[${index}]`;
+    if (!SAFE_ID.test(attempt.plan.id)) fail(`${at}.plan.id is not a safe path component`);
+    if (ids.has(attempt.plan.id)) fail(`${at}.plan.id duplicates ${attempt.plan.id}`);
+    ids.add(attempt.plan.id);
+    if (attempt.extension !== undefined) {
+      const extensionAt = `${at}.extension`;
+      if (attempt.plan.mode?.id !== 'dependency') {
+        fail(`${extensionAt} requires dependency mode`);
+      }
+      if (!attempt.plan.levels.includes(attempt.extension.fromDepth)
+        || !attempt.plan.levels.some(level => level > attempt.extension!.fromDepth)) {
+        fail(`${extensionAt}.fromDepth must precede another planned depth`);
+      }
+      const expectedSource = `.private/extensions/${attempt.plan.id}/source`;
+      if (attempt.extension.source !== expectedSource) {
+        fail(`${extensionAt}.source is not the exact extension source directory`);
+      }
+    }
+    let previousCompletedAt = null;
+    for (const [executionIndex, execution] of attempt.executions.entries()) {
+      const executionAt = `${at}.executions[${executionIndex}]`;
+      if (!Number.isInteger(execution.runIndex) || execution.runIndex < 0
+        || execution.runIndex > RUN_INDEX_CAP) fail(`${executionAt}.runIndex is invalid`);
+      if (execution.ordinal !== executionIndex + 1) fail(`${executionAt}.ordinal is not contiguous`);
+      if (execution.id !== `${attempt.plan.id}-execution${execution.ordinal}`) {
+        fail(`${executionAt}.id does not match its attempt and ordinal`);
+      }
+      if (executionIndex < attempt.executions.length - 1 && execution.status !== 'invalid'
+        && !(execution.status === 'completed' && execution.continuation !== undefined)) {
+        fail(`${executionAt} is historical but not invalid`);
+      }
+      if (execution.output !== `attempts/${attempt.plan.id}/execution-${execution.ordinal}`) {
+        fail(`${executionAt}.output is not the exact execution directory`);
+      }
+      if (Date.parse(execution.startedAt) < Date.parse(state.createdAt)) {
+        fail(`${executionAt}.startedAt precedes campaign creation`);
+      }
+      if (previousCompletedAt && Date.parse(execution.startedAt) < Date.parse(previousCompletedAt)) {
+        fail(`${executionAt}.startedAt overlaps the previous execution`);
+      }
+      if (execution.status === 'running') {
+        running += 1;
+        if (runningSlots.has(execution.runIndex)) fail(`${executionAt}.runIndex is already in use`);
+        runningSlots.add(execution.runIndex);
+        if (execution.completedAt !== null || execution.exitCode !== null
+          || execution.outcome !== null || execution.reason !== null
+          || (execution.retry !== undefined && execution.retry !== null)) {
+          fail(`${executionAt} running fields are inconsistent`);
+        }
+      } else {
+        const completedAt = execution.completedAt!;
+        if (Date.parse(completedAt) < Date.parse(execution.startedAt)) {
+          fail(`${executionAt}.completedAt precedes startedAt`);
+        }
+        previousCompletedAt = completedAt;
+        const outcome = execution.outcome!;
+        if (execution.status === 'completed'
+          && (execution.exitCode !== 0 || execution.reason !== null)) fail(`${executionAt} completed fields are inconsistent`);
+        if (execution.status === 'completed' && !TERMINAL_OUTCOMES.has(outcome)) {
+          fail(`${executionAt}.outcome is not terminal`);
+        }
+        if (execution.status === 'invalid') {
+          if (!INVALID_OUTCOMES.has(outcome)) fail(`${executionAt}.outcome is not invalid`);
+          if (execution.retry !== undefined) {
+            if (execution.retry === null) {
+              throw new Error(`invalid campaign state: ${executionAt}.retry must be an object`);
+            }
+            const retry = execution.retry;
+            if (retry.scheduled === true
+              && (retry.requested !== true || retry.transient !== true
+                || retry.recoveryClean !== true || retry.budgetKnown !== true)) {
+              fail(`${executionAt}.retry is scheduled without transient clean-recovery authority`);
+            }
+          }
+        }
+      }
+      if (execution.continuation !== undefined) {
+        const continuation = execution.continuation;
+        const continuationAt = `${executionAt}.continuation`;
+        if (attempt.plan.mode?.id !== 'dependency' || execution.status !== 'completed'
+          || continuation === undefined) {
+          fail(`${continuationAt} requires a completed dependency execution`);
+        }
+        if (!SAFE_ID.test(continuation.grantId)) {
+          fail(`${continuationAt}.grantId is not a safe path component`);
+        }
+        if (!Number.isSafeInteger(continuation.level)
+          || continuation.level < 1) fail(`${continuationAt}.level is invalid`);
+        if (!Array.isArray(continuation.nodeIds)
+          || continuation.nodeIds.length === 0
+          || continuation.nodeIds.some((nodeId, nodeIndex) =>
+            typeof nodeId !== 'string' || !FEATURE_ID.test(nodeId)
+            || (nodeIndex > 0
+              && continuation.nodeIds[nodeIndex - 1]!.localeCompare(nodeId) >= 0))) {
+          fail(`${continuationAt}.nodeIds must be sorted unique feature ids`);
+        }
+        if (!Number.isSafeInteger(continuation.repairs)
+          || continuation.repairs < 1) fail(`${continuationAt}.repairs is invalid`);
+        if (!HASH.test(continuation.stateSha256 ?? '')) {
+          fail(`${continuationAt}.stateSha256 is invalid`);
+        }
+        const expectedResume = `continuations/${attempt.plan.id}/${continuation.grantId}`;
+        if (continuation.resumeFrom !== expectedResume) {
+          fail(`${continuationAt}.resumeFrom is not the exact grant workspace`);
+        }
+        if (Date.parse(continuation.scheduledAt) < Date.parse(execution.completedAt!)) {
+          fail(`${continuationAt}.scheduledAt precedes execution completion`);
+        }
+        if (Date.parse(continuation.scheduledAt) > Date.parse(state.updatedAt)) {
+          fail(`${continuationAt}.scheduledAt is newer than campaign state`);
+        }
+      }
+      const eventAt = execution.completedAt ?? execution.startedAt;
+      if (Date.parse(eventAt) > Date.parse(state.updatedAt)) fail(`${executionAt} is newer than campaign updatedAt`);
+    }
+    const latest = attempt.executions.at(-1) ?? null;
+    if (attempt.status === 'pending' && latest !== null && latest.status !== 'invalid'
+      && !(latest.status === 'completed' && latest.continuation !== undefined)) {
+      fail(`${at} is pending without an invalid retryable execution`);
+    }
+    if (attempt.status === 'running' && latest?.status !== 'running') fail(`${at} has no running execution`);
+    if (attempt.status === 'completed' && latest?.status !== 'completed') fail(`${at} has no completed execution`);
+    if (attempt.status === 'invalid' && latest?.status !== 'invalid') fail(`${at} has no invalid execution`);
+  }
+  if (running > state.maxParallel) fail('running executions exceed maxParallel');
+  const expected = recalculate(structuredClone(state), state.updatedAt);
+  if (expected.status !== state.status
+    || Object.entries(expected.summary).some(([key, value]) => state.summary[key] !== value)) {
+    fail('summary or status does not match attempts');
+  }
+  return state;
+}
+
+export function createCampaignState(plan: CompiledCampaignPlan,
+  { now = new Date().toISOString() }: { now?: string } = {}): CampaignState {
+  const identity = campaignIdentity(plan);
+  const state: CampaignState = {
+    schemaVersion: CAMPAIGN_STATE_SCHEMA_VERSION,
+    campaignId: plan.id,
+    campaignSha256: identity.sha256,
+    status: 'prepared',
+    createdAt: now,
+    updatedAt: now,
+    maxParallel: plan.summary.parallelism,
+    attempts: plan.attempts.map(attempt => ({ plan: structuredClone(attempt),
+      status: 'pending', executions: [] })),
+    summary: { total: 0, pending: 0, running: 0, completed: 0, invalid: 0,
+      executions: 0 },
+  };
+  return recalculate(state, now);
+}
+
+export function claimNextAttempt(input: CampaignState,
+  { now = new Date().toISOString(), admissionId, runIndices }:
+  { now?: string; admissionId?: string; runIndices?: number[] } = {}): {
+    state: CampaignState;
+    claim: CampaignClaim | null;
+    capacityFull: boolean;
+  } {
+  const state = structuredClone(input);
+  const exactAdmissionId = string(admissionId, 'admissionId');
+  const availableSlots = runIndices
+    ?? Array.from({ length: state.maxParallel }, (_, index) => index);
+  if (availableSlots.length !== state.maxParallel
+    || new Set(availableSlots).size !== availableSlots.length
+    || availableSlots.some(index => !Number.isInteger(index) || index < 0
+      || index > RUN_INDEX_CAP)) fail('runIndices must contain one unique valid slot per worker');
+  const usedSlots = new Set(state.attempts.flatMap(attempt => attempt.executions
+    .filter(execution => execution.status === 'running').map(execution => execution.runIndex)));
+  const runIndex = availableSlots.find(index => !usedSlots.has(index));
+  if (runIndex === undefined) return { state, claim: null, capacityFull: true };
+  const attempt = state.attempts.find(candidate => candidate.status === 'pending');
+  if (!attempt) return { state, claim: null, capacityFull: false };
+  const previous = attempt.executions.at(-1) ?? null;
+  const resumeFrom = previous?.continuation?.resumeFrom
+    ?? (previous?.retry?.scheduled === true ? previous.output : null);
+  const priorOutputs = attempt.executions.map(execution => execution.output);
+  const ordinal = attempt.executions.length + 1;
+  const id = `${attempt.plan.id}-execution${ordinal}`;
+  const output = `attempts/${attempt.plan.id}/execution-${ordinal}`;
+  attempt.status = 'running';
+  attempt.executions.push({ id, ordinal, status: 'running', output, startedAt: now,
+    completedAt: null, exitCode: null, outcome: null, reason: null, retry: null,
+    admissionId: exactAdmissionId, runIndex });
+  return { state: recalculate(state, now),
+    claim: { attempt: structuredClone(attempt.plan), executionId: id, output, runIndex,
+      resumeFrom, priorOutputs, extension: structuredClone(attempt.extension ?? null) },
+    capacityFull: false };
+}
+
+export function addCampaignExtensions(input: unknown,
+  extensions: Readonly<Record<string, CampaignExtensionSeed>>,
+  { now = new Date().toISOString() }: { now?: string } = {}): CampaignState {
+  const state = validateCampaignState(input);
+  if (state.attempts.some(attempt => attempt.executions.length > 0)) {
+    throw new Error('campaign extensions must be attached before execution starts');
+  }
+  for (const attempt of state.attempts) {
+    const extension = extensions[attempt.plan.id];
+    if (!extension) throw new Error(`campaign attempt ${attempt.plan.id} has no extension source`);
+    attempt.extension = structuredClone(extension);
+  }
+  return recalculate(state, now);
+}
+
+export function scheduleDependencyContinuation(input: unknown, attemptId: string,
+  continuation: Omit<CampaignContinuation, 'scheduledAt'>,
+  { now = new Date().toISOString() }: { now?: string } = {}): CampaignState {
+  const state = validateCampaignState(input);
+  string(attemptId, 'attemptId');
+  if (state.status !== 'completed') {
+    throw new Error('dependency continuation requires a completed campaign');
+  }
+  const attempt = state.attempts.find(candidate => candidate.plan.id === attemptId);
+  if (!attempt) throw new Error(`campaign attempt ${attemptId} does not exist`);
+  if (attempt.plan.mode?.id !== 'dependency' || attempt.status !== 'completed') {
+    throw new Error(`campaign attempt ${attemptId} is not a completed dependency attempt`);
+  }
+  const execution = attempt.executions.at(-1);
+  if (execution?.status !== 'completed' || execution.continuation !== undefined) {
+    throw new Error(`campaign attempt ${attemptId} has no unextended completed execution`);
+  }
+  execution.continuation = { ...structuredClone(continuation),
+    nodeIds: [...(continuation?.nodeIds ?? [])].sort(), scheduledAt: now };
+  attempt.status = 'pending';
+  return recalculate(state, now);
+}
+
+export function classifyCampaignExecution({ exitCode = null, timedOut = false, run = null }:
+  CampaignExecutionResult = {}): {
+    status: Exclude<ExecutionStatus, 'running'>;
+    outcome: CampaignOutcome;
+    reason: string | null;
+  } {
+  if (timedOut) return { status: 'invalid', outcome: 'timed_out', reason: 'attempt deadline expired' };
+  if (run?.outcome?.kind === 'scheduler_interrupted') {
+    return { status: 'invalid', outcome: 'scheduler_interrupted',
+      reason: run.outcome?.reason ?? 'scheduler was interrupted' };
+  }
+  const observedOutcome = run?.outcome?.kind;
+  if (exitCode !== 0
+    && (observedOutcome === 'provider_failure' || observedOutcome === 'harness_failure')) {
+    const outcome = observedOutcome;
+    return { status: 'invalid', outcome,
+      reason: `attempt process exited ${exitCode ?? 'without a code'}: `
+        + `${run?.outcome?.reason ?? `${outcome.replace('_', ' ')} occurred`}` };
+  }
+  if (run?.contaminated === true) return { status: 'invalid', outcome: 'contaminated',
+    reason: run.contamination?.verdict ?? 'run was contaminated' };
+  if (exitCode !== 0) return { status: 'invalid', outcome: 'harness_failure',
+    reason: `attempt process exited ${exitCode ?? 'without a code'}` };
+  if (!run) return { status: 'invalid', outcome: 'missing_artifact',
+    reason: `${ARTIFACT_FILE.run} was not produced` };
+  const outcome = run.outcome?.kind ?? 'ungraded';
+  if (TERMINAL_OUTCOMES.has(outcome)) {
+    return { status: 'completed', outcome: outcome as TerminalOutcome, reason: null };
+  }
+  if (INVALID_OUTCOMES.has(outcome)) return { status: 'invalid', outcome: outcome as InvalidOutcome,
+    reason: run.outcome?.reason ?? (outcome === 'inconclusive'
+      ? 'one or more selected checks did not produce a pass-or-fail result'
+      : `run outcome was ${outcome}`) };
+  return { status: 'invalid', outcome: 'ungraded',
+    reason: `unknown run outcome ${outcome}; exit code ${exitCode ?? 'missing'}` };
+}
+
+export function finishCampaignExecution(input: CampaignState, executionId: string,
+  result: CampaignExecutionResult,
+  { retryOn = [], retries = 0, now = new Date().toISOString() }:
+  { retryOn?: string[]; retries?: number; now?: string } = {}): CampaignState {
+  const state = structuredClone(input);
+  const attempt = state.attempts.find(candidate => candidate.executions.at(-1)?.id === executionId);
+  if (!attempt || attempt.status !== 'running') throw new Error(`execution ${executionId} is not running`);
+  const execution = attempt.executions.at(-1);
+  if (!execution) throw new Error(`execution ${executionId} is not running`);
+  const classified = classifyCampaignExecution(result);
+  execution.status = classified.status;
+  execution.completedAt = now;
+  execution.exitCode = result.exitCode ?? null;
+  execution.outcome = classified.outcome;
+  execution.reason = classified.reason;
+  if (classified.status === 'completed') attempt.status = 'completed';
+  else {
+    const authority = result.retryAuthority ?? {};
+    const requested = retryOn.includes(classified.outcome);
+    const transient = authority.transient === true;
+    const recoveryClean = authority.recoveryClean === true;
+    const budgetKnown = authority.budgetKnown === true;
+    const budgetAvailable = attempt.executions.length <= retries;
+    const scheduled = requested && transient && recoveryClean && budgetKnown && budgetAvailable;
+    execution.retry = {
+      requested, transient, recoveryClean, budgetKnown, scheduled,
+      cause: typeof authority.cause === 'string' && authority.cause ? authority.cause : null,
+      reason: !requested ? 'outcome is not configured for retry'
+        : !transient ? 'failure is not explicitly transient'
+          : !recoveryClean ? 'clean recovery was not proven'
+            : !budgetKnown ? 'prior provider spend is unknown'
+            : !budgetAvailable ? 'retry budget is exhausted' : 'transient failure has clean recovery proof',
+    };
+    attempt.status = scheduled ? 'pending' : 'invalid';
+  }
+  return recalculate(state, now);
+}
+
+export function markInterruptedExecution(input: CampaignState, executionId: string,
+  { now = new Date().toISOString(), reason = 'scheduler process ended before recording completion',
+    retryOn = [] }: { now?: string; reason?: string; retryOn?: string[] } = {}): CampaignState {
+  const state = structuredClone(input);
+  const attempt = state.attempts.find(candidate => candidate.executions.at(-1)?.id === executionId);
+  if (!attempt || attempt.status !== 'running') throw new Error(`execution ${executionId} is not running`);
+  const execution = attempt.executions.at(-1);
+  if (!execution) throw new Error(`execution ${executionId} is not running`);
+  execution.status = 'invalid';
+  execution.completedAt = now;
+  execution.exitCode = null;
+  execution.outcome = 'scheduler_interrupted';
+  execution.reason = string(reason, 'interruption reason');
+  execution.retry = { requested: retryOn.includes(execution.outcome), transient: false,
+    recoveryClean: false, budgetKnown: false, scheduled: false, cause: null,
+    reason: 'operator reconciliation is required after scheduler interruption' };
+  attempt.status = 'invalid';
+  return recalculate(state, now);
+}
+
+export interface CampaignPaths {
+  root: string;
+  plan: string;
+  state: string;
+}
+
+function paths(directory: string): CampaignPaths {
+  const root = resolve(directory);
+  return { root, plan: join(root, CAMPAIGN_FILE.plan), state: join(root, CAMPAIGN_FILE.state) };
+}
+
+function identities(plan: CompiledCampaignPlan): ReturnType<typeof emptyArtifactIdentities> {
+  return emptyArtifactIdentities({ experiment: campaignIdentity(plan) });
+}
+
+function assertStateMatchesPlan(state: CampaignState, plan: CompiledCampaignPlan): CampaignState {
+  if (state.campaignId !== plan.id || state.campaignSha256 !== plan.contentSha256) {
+    throw new Error('campaign state belongs to a different campaign identity');
+  }
+  const planned = canonicalDefinitionJson(plan.attempts);
+  const materialized = canonicalDefinitionJson(state.attempts.map(attempt => attempt.plan));
+  if (planned !== materialized) throw new Error('campaign state attempt plan does not match the compiled campaign');
+  return state;
+}
+
+export interface CampaignDirectory {
+  paths: CampaignPaths;
+  plan: CompiledCampaignPlan;
+  state: CampaignState;
+}
+
+export function initializeCampaignDirectory(input: unknown, directory: string,
+  options: { now?: string } = {}): CampaignDirectory {
+  const plan = validateCompiledCampaignPlan(input);
+  const target = paths(directory);
+  mkdirSync(target.root, { recursive: true });
+  if (existsSync(target.plan)) {
+    const existingPlan = validateCompiledCampaignPlan(
+      readArtifact(target.plan, { expectedKind: 'campaign_plan' }).payload);
+    if (existingPlan.contentSha256 !== plan.contentSha256) {
+      throw new Error('campaign directory belongs to a different campaign identity');
+    }
+    if (!existsSync(target.state)) {
+      const recovered = createCampaignState(existingPlan, options);
+      writeCampaignState(target.state, existingPlan, recovered);
+      return { paths: target, plan: existingPlan, state: recovered };
+    }
+    const existingState = readArtifact(target.state, { expectedKind: 'campaign_state' }).payload;
+    return { paths: target, plan: existingPlan,
+      state: assertStateMatchesPlan(validateCampaignState(existingState), existingPlan) };
+  }
+  if (existsSync(target.state)) {
+    throw new Error('campaign state exists without its compiled plan; refusing to guess its identity');
+  }
+  const state = createCampaignState(plan, options);
+  writeArtifact(target.plan, { kind: 'campaign_plan', id: `${plan.id}-plan`,
+    identities: identities(plan), payload: plan });
+  writeCampaignState(target.state, plan, state);
+  return { paths: target, plan, state };
+}
+
+export function writeCampaignState(path: string, input: unknown, state: unknown): unknown {
+  const plan = validateCompiledCampaignPlan(input);
+  return writeArtifact(path, { kind: 'campaign_state', id: `${plan.id}-state`,
+    identities: identities(plan), payload: assertStateMatchesPlan(validateCampaignState(state), plan) });
+}
+
+export function readCampaignState(directory: string,
+  { requireCurrentInputs = true }: { requireCurrentInputs?: boolean } = {}): CampaignDirectory {
+  const target = paths(directory);
+  const plan = validateCompiledCampaignPlan(
+    readArtifact(target.plan, { expectedKind: 'campaign_plan' }).payload,
+    { requireCurrentInputs });
+  const state = validateCampaignState(readArtifact(target.state, { expectedKind: 'campaign_state' }).payload);
+  return { paths: target, plan, state: assertStateMatchesPlan(state, plan) };
+}
diff --git a/tools/stack-bench/src/campaigns/condition-compiler.ts b/tools/stack-bench/src/campaigns/condition-compiler.ts
new file mode 100644
index 00000000000..6b0ef3feab2
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/condition-compiler.ts
@@ -0,0 +1,528 @@
+import { readFileSync, realpathSync } from 'node:fs';
+import { dirname, isAbsolute, relative, resolve, sep } from 'node:path';
+
+import { canonicalDefinitionJson, canonicalizeDefinition } from '../composition/definition-plan.js';
+import { normalizePromptText, readAgentSkillDocuments } from '../agents/agent-materials.js';
+import { sha256 } from '../evidence/provenance.js';
+import { validateCredentialAliases } from '../composition/credential-aliases.js';
+import { isExactSemanticVersion, parseVersionedReference } from '../semantic-version.js';
+
+import { STACK_BENCH_ROOT as ROOT } from '../package-root.js';
+const CATALOG = resolve(ROOT, 'conditions', 'catalog.json');
+const ID = /^[a-z][a-z0-9]*(?:[.:-][a-z0-9]+)*$/;
+const HASH = /^[a-f0-9]{64}$/;
+type UnknownRecord = Record<string, unknown>;
+
+export type GuidanceMode = 'prescribed' | 'neutral';
+
+export function parseGuidanceMode(value: unknown): GuidanceMode {
+  if (value === 'neutral' || value === 'prescribed') return value;
+  throw new Error(`guidance must be neutral or prescribed, received ${JSON.stringify(value)}`);
+}
+
+const parseConditionReference = (value: unknown): { id: string; version: string } | null =>
+  parseVersionedReference(value, identifier => ID.test(identifier));
+
+interface IdentityProfile extends UnknownRecord {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: 'draft' | 'qualified';
+}
+
+interface Catalog {
+  value: { guidanceProfiles: Record<string, string>; repairPolicies: Record<string, string> };
+  root: string;
+}
+
+interface GuidanceProfile extends IdentityProfile {
+  mode: GuidanceMode;
+  material: { accessFacts: boolean; apiReference: boolean; designAdvice: boolean };
+  documents: Record<string, string>;
+  applicationInterfaces: Record<string, string>;
+  skills: Record<string, string[]>;
+  credentialAliases?: unknown;
+}
+
+export interface ResolvedGuidanceDocument {
+  path: string;
+  sha256: string;
+  bytes: number;
+  applicationInterface: 'http' | 'reducer';
+}
+export interface ResolvedSkills { ids: string[]; sha256: string; bytes: number }
+export interface ResolvedGuidanceProfile {
+  id: string;
+  version: string;
+  sha256: string;
+  state: 'draft' | 'qualified';
+  mode: GuidanceMode;
+  material: GuidanceProfile['material'];
+  documents: Record<string, ResolvedGuidanceDocument>;
+  skills: Record<string, ResolvedSkills>;
+  credentialAliases?: Readonly<Record<string, string>>;
+}
+
+interface RepairProfile extends IdentityProfile {
+  scoredEvidence: boolean;
+  observedEvidence: boolean;
+  scenarioValues: unknown;
+}
+
+interface ConditionSpecifications {
+  levels: Array<{ level: number; requested: string[]; expected: string[]; observed: string[] }>;
+}
+
+export interface ConditionReference {
+  id: string;
+  version: string;
+  guidanceProfile: string;
+  repairPolicy: string;
+  specifications?: ConditionSpecifications;
+}
+
+export interface RequestedSelectionScope {
+  features?: string[];
+  packs?: string[];
+  checks: string[];
+  specifications?: { requested?: string[]; expected?: string[]; observed?: string[] };
+  dependencyExpansion?: string;
+}
+
+interface RequestedSelection extends UnknownRecord {
+  schemaVersion?: number;
+  sha256: string;
+  scoredPoints: number;
+  completeness?: string;
+  requested: RequestedSelectionScope;
+  taskPacks?: string[];
+  promptPacks?: string[];
+  features?: string[];
+  specifications?: { requested: string[]; expected: string[]; observed: string[] };
+  scoredChecks?: Array<{ stableKey: string; points: number; treatment: string }>;
+  observedChecks?: Array<{ stableKey: string; points: number; treatment: string }>;
+}
+
+interface RequestedLevel extends UnknownRecord {
+  level: number;
+  recipe: { id: string; version: string; contentSha256: string;
+    meaningSha256: string; executionSha256: string };
+  selection: RequestedSelection;
+  task: UnknownRecord & { mode?: 'fresh' | 'upgrade'; sha256: string;
+    requirementSha256: string; contractSha256: string; requirementIds: string[];
+    contractIds: string[] };
+}
+
+export interface RequestedScope { track: string; levels: [RequestedLevel, ...RequestedLevel[]] }
+
+export interface ResolvedStudyCondition {
+  id: string;
+  version: string;
+  requested: RequestedScope;
+  guidance: ResolvedGuidanceProfile;
+  repair: { id: string; version: string; sha256: string; state: 'draft' | 'qualified';
+    scoredEvidence: true; observedEvidence: false; scenarioValues: 'withheld' };
+  sha256: string;
+}
+
+const object = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+function fail(at: string, message: string): never {
+  throw new Error(`invalid study condition at ${at}: ${message}`);
+}
+
+function strict(value: unknown, at: string, fields: Set<string>,
+  optional: Set<string> = new Set()): asserts value is UnknownRecord {
+  if (!object(value)) throw new Error(`invalid study condition at ${at}: must be an object`);
+  for (const key of Object.keys(value)) if (!fields.has(key)) fail(`${at}.${key}`, 'is unknown');
+  for (const key of fields) {
+    if (!optional.has(key) && !Object.hasOwn(value, key)) fail(`${at}.${key}`, 'is required');
+  }
+}
+
+function contained(root: string, path: string, at: string): string {
+  const absoluteRoot = realpathSync(root);
+  const absolute = realpathSync(resolve(absoluteRoot, path));
+  const rel = relative(absoluteRoot, absolute);
+  if (rel === '..' || rel.startsWith(`..${sep}`) || isAbsolute(rel)) fail(at, 'escapes the condition root');
+  return absolute;
+}
+
+function json(path: string, at: string): unknown {
+  try { return JSON.parse(readFileSync(path, 'utf8')); }
+  catch (error) { fail(at, `cannot be read: ${error instanceof Error ? error.message : String(error)}`); }
+}
+
+function identity(profile: IdentityProfile, resolved: unknown): {
+  id: string; version: string; sha256: string; state: 'draft' | 'qualified' } {
+  return { id: profile.id, version: profile.version,
+    sha256: sha256(canonicalDefinitionJson({ profile, resolved })), state: profile.state };
+}
+
+function validateIdentityFields(value: UnknownRecord, at: string, kind: string,
+  schemaVersions: number[] = [1]): void {
+  if (typeof value.schemaVersion !== 'number' || !schemaVersions.includes(value.schemaVersion)) {
+    fail(`${at}.schemaVersion`, `must be ${schemaVersions.join(' or ')}`);
+  }
+  if (value.kind !== kind) fail(`${at}.kind`, `must be ${kind}`);
+  if (typeof value.id !== 'string' || !ID.test(value.id)) fail(`${at}.id`, 'is invalid');
+  if (!isExactSemanticVersion(value.version)) {
+    fail(`${at}.version`, 'must be a semantic version');
+  }
+  if (typeof value.state !== 'string' || !['draft', 'qualified'].includes(value.state)) {
+    fail(`${at}.state`, 'must be draft or qualified');
+  }
+}
+
+function loadCatalog(path: string = CATALOG): Catalog {
+  const value = json(path, 'catalog');
+  strict(value, 'catalog', new Set(['schemaVersion', 'kind', 'guidanceProfiles',
+    'repairPolicies']));
+  if (value.schemaVersion !== 1 || value.kind !== 'study-condition-catalog') {
+    fail('catalog', 'has an unsupported schema or kind');
+  }
+  for (const field of ['guidanceProfiles', 'repairPolicies'] as const) {
+    const section = value[field];
+    if (!object(section)) fail(`catalog.${field}`, 'must be an object');
+    for (const [key, pathValue] of Object.entries(section)) {
+      if (!parseConditionReference(key) || typeof pathValue !== 'string' || !pathValue) {
+        fail(`catalog.${field}.${key}`, 'must map an id@version to a path');
+      }
+    }
+  }
+  return { value: value as unknown as Catalog['value'], root: dirname(path) };
+}
+
+function readProfile(catalog: Catalog, section: keyof Catalog['value'], reference: string): {
+  referenceIdentity: { id: string; version: string }; path: string; profile: unknown } {
+  const referenceIdentity = parseConditionReference(reference);
+  if (!referenceIdentity) fail(reference ?? '<missing>', 'must use id@version');
+  const rel = catalog.value[section][reference];
+  if (!rel) fail(reference, `is not in catalog.${section}`);
+  const path = contained(catalog.root, rel, reference);
+  const profile = json(path, reference);
+  return { referenceIdentity: referenceIdentity!, path, profile };
+}
+
+function loadProfile<T extends IdentityProfile>(catalog: Catalog,
+  section: keyof Catalog['value'], reference: string, kind: string, fields: Set<string>,
+  optional: Set<string> = new Set()): { profile: T; path: string } {
+  const { referenceIdentity, path, profile } = readProfile(catalog, section, reference);
+  strict(profile, reference, fields, optional);
+  validateIdentityFields(profile, reference, kind);
+  const typed = profile as T;
+  if (typed.id !== referenceIdentity.id || typed.version !== referenceIdentity.version) {
+    fail(reference, 'does not match the loaded profile identity');
+  }
+  return { profile: typed, path };
+}
+
+function resolveGuidance(catalog: Catalog, reference: string, stacks: readonly string[],
+  stackBenchRoot: string): ResolvedGuidanceProfile {
+  const fields = new Set(['schemaVersion', 'kind', 'id', 'version', 'state', 'mode', 'material',
+    'documents', 'applicationInterfaces', 'skills', 'credentialAliases']);
+  const { profile } = loadProfile<GuidanceProfile>(catalog, 'guidanceProfiles', reference,
+    'backend-guidance-profile', fields, new Set(['credentialAliases']));
+  const mode = parseGuidanceMode(profile.mode);
+  strict(profile.material, `${reference}.material`, new Set(['accessFacts', 'apiReference', 'designAdvice']));
+  for (const field of ['accessFacts', 'apiReference', 'designAdvice'] as const) {
+    if (typeof profile.material[field] !== 'boolean') fail(`${reference}.material.${field}`, 'must be boolean');
+  }
+  if (mode === 'neutral' && profile.material.designAdvice) {
+    fail(`${reference}.material.designAdvice`, 'must be false for neutral guidance');
+  }
+  if (!object(profile.documents)) fail(`${reference}.documents`, 'must be an object');
+  if (!object(profile.applicationInterfaces)) {
+    fail(`${reference}.applicationInterfaces`, 'must be an object');
+  }
+  if (!object(profile.skills)) fail(`${reference}.skills`, 'must be an object');
+  const documents: Record<string, ResolvedGuidanceDocument> = {};
+  const skills: Record<string, ResolvedSkills> = {};
+  for (const stack of stacks) {
+    const rel = profile.documents[stack];
+    if (typeof rel !== 'string' || !rel) fail(`${reference}.documents.${stack}`, 'is required');
+    const path = contained(stackBenchRoot, rel, `${reference}.documents.${stack}`);
+    const bytes = Buffer.from(normalizePromptText(readFileSync(path, 'utf8')), 'utf8');
+    const applicationInterface = profile.applicationInterfaces[stack];
+    if (applicationInterface !== 'http' && applicationInterface !== 'reducer') {
+      fail(`${reference}.applicationInterfaces.${stack}`, 'must be http or reducer');
+    }
+    documents[stack] = { path: relative(stackBenchRoot, path).split(sep).join('/'),
+      sha256: sha256(bytes), bytes: bytes.length, applicationInterface };
+    const ids = profile.skills[stack];
+    if (!Array.isArray(ids) || new Set(ids).size !== ids.length
+      || ids.some(id => typeof id !== 'string' || !/^[a-z][a-z0-9-]*$/.test(id))) {
+      fail(`${reference}.skills.${stack}`, 'must contain unique skill ids');
+    }
+    const skillIds = ids as string[];
+    let text = '';
+    try { text = readAgentSkillDocuments(resolve(stackBenchRoot, '..', '..'), skillIds); }
+    catch (error) {
+      fail(`${reference}.skills.${stack}`,
+        `cannot be read: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    skills[stack] = { ids: [...skillIds], sha256: sha256(text), bytes: Buffer.byteLength(text) };
+  }
+  const hasCredentialAliases = Object.hasOwn(profile, 'credentialAliases');
+  const base = { mode, material: profile.material, documents, skills };
+  if (!hasCredentialAliases) return { ...identity(profile, { documents, skills }), ...base };
+  const credentialAliases = validateCredentialAliases(profile.credentialAliases,
+    `${reference}.credentialAliases`);
+  return { ...identity(profile, { documents, skills, credentialAliases }), ...base,
+    credentialAliases };
+}
+
+// Campaign compilation and review tooling must resolve profiles identically.
+export function resolveGuidanceProfile(reference: string, stacks: readonly string[],
+  { stackBenchRoot = ROOT, catalogPath = CATALOG }:
+  { stackBenchRoot?: string; catalogPath?: string } = {}): ResolvedGuidanceProfile {
+  if (!Array.isArray(stacks) || stacks.length === 0
+    || new Set(stacks).size !== stacks.length
+    || stacks.some(stack => typeof stack !== 'string' || !ID.test(stack))) {
+    fail('stacks', 'must contain unique stack ids');
+  }
+  return resolveGuidance(loadCatalog(catalogPath), reference, stacks, resolve(stackBenchRoot));
+}
+
+export function resolveDefaultGuidanceForStack(mode: string,
+  stack: string): ResolvedGuidanceProfile | null {
+  const reference = parseGuidanceMode(mode) === 'neutral'
+    ? 'neutral@1.8.0' : 'prescribed@1.2.0';
+  const catalog = loadCatalog();
+  const { profile } = readProfile(catalog, 'guidanceProfiles', reference);
+  if (object(profile) && object(profile.documents) && !Object.hasOwn(profile.documents, stack)) {
+    return null;
+  }
+  return resolveGuidance(catalog, reference, [stack], ROOT);
+}
+
+function resolveRepair(catalog: Catalog, reference: string): ResolvedStudyCondition['repair'] {
+  const fields = new Set(['schemaVersion', 'kind', 'id', 'version', 'state',
+    'scoredEvidence', 'observedEvidence', 'scenarioValues']);
+  const { profile } = loadProfile<RepairProfile>(catalog, 'repairPolicies', reference,
+    'repair-policy', fields);
+  if (typeof profile.scoredEvidence !== 'boolean' || typeof profile.observedEvidence !== 'boolean') {
+    fail(reference, 'repair evidence fields must be boolean');
+  }
+  if (!profile.scoredEvidence) {
+    fail(`${reference}.scoredEvidence`, 'must be true until no-evidence repair is implemented');
+  }
+  if (profile.observedEvidence) fail(`${reference}.observedEvidence`, 'must be false');
+  // Scenario-chosen values never reach the coding agent; a report describes
+  // the behaviour that failed, not the probe that found it.
+  if (profile.scenarioValues !== 'withheld') {
+    fail(`${reference}.scenarioValues`, 'must be withheld');
+  }
+  return { ...identity(profile, null), scoredEvidence: true, observedEvidence: false,
+    scenarioValues: 'withheld' };
+}
+
+export function validateConditionReference(input: unknown, at = 'condition'): ConditionReference {
+  if (!object(input)) fail(at, 'must be an object');
+  const value = structuredClone(input) as UnknownRecord;
+  const fields = new Set(['id', 'version', 'guidanceProfile', 'repairPolicy',
+    'specifications']);
+  for (const key of Object.keys(value)) if (!fields.has(key)) fail(`${at}.${key}`, 'is unknown');
+  for (const key of ['id', 'version', 'guidanceProfile', 'repairPolicy']) {
+    if (!Object.hasOwn(value, key)) fail(`${at}.${key}`, 'is required');
+  }
+  if (typeof value.id !== 'string' || !ID.test(value.id)) fail(`${at}.id`, 'is invalid');
+  if (!isExactSemanticVersion(value.version)) {
+    fail(`${at}.version`, 'must be a semantic version');
+  }
+  for (const field of ['guidanceProfile', 'repairPolicy'] as const) {
+    const reference = value[field];
+    if (!parseConditionReference(reference)) {
+      fail(`${at}.${field}`, 'must use id@version');
+    }
+  }
+  if (value.specifications !== undefined) {
+    strict(value.specifications, `${at}.specifications`, new Set(['levels']));
+    if (!Array.isArray(value.specifications.levels) || value.specifications.levels.length === 0) {
+      fail(`${at}.specifications.levels`, 'must be a non-empty array');
+    }
+    const specifications = value.specifications as unknown as ConditionSpecifications;
+    const seen = new Set<number>();
+    specifications.levels.forEach((entry, index) => {
+      const levelAt = `${at}.specifications.levels[${index}]`;
+      strict(entry, levelAt, new Set(['level', 'requested', 'expected', 'observed']));
+      if (!Number.isSafeInteger(entry.level) || entry.level < 1 || seen.has(entry.level)) {
+        fail(`${levelAt}.level`, 'must be a unique positive integer');
+      }
+      seen.add(entry.level);
+      for (const field of ['requested', 'expected', 'observed'] as const) {
+        if (!Array.isArray(entry[field]) || new Set(entry[field]).size !== entry[field].length
+          || entry[field].some(reference => !parseConditionReference(reference))) {
+          fail(`${levelAt}.${field}`, 'must contain unique exact id@version references');
+        }
+        entry[field] = [...entry[field]].sort();
+      }
+      const treatments = new Map();
+      for (const field of ['requested', 'expected', 'observed'] as const) {
+        for (const reference of entry[field]) {
+          if (treatments.has(reference)) {
+            fail(levelAt, `cannot treat ${reference} as both ${treatments.get(reference)} and ${field}`);
+          }
+          treatments.set(reference, field);
+        }
+      }
+    });
+    specifications.levels.sort((left, right) => left.level - right.level);
+  }
+  return canonicalizeDefinition(value) as unknown as ConditionReference;
+}
+
+function validateRequestedScope(input: unknown): RequestedScope {
+  strict(input, 'requested', new Set(['track', 'levels']));
+  if (typeof input.track !== 'string' || !ID.test(input.track)) {
+    fail('requested.track', 'is invalid');
+  }
+  if (!Array.isArray(input.levels) || input.levels.length === 0) {
+    fail('requested.levels', 'must be a non-empty array');
+  }
+  const scope = input as unknown as RequestedScope;
+  const levels = scope.levels.map((entry, index) => {
+    const at = `requested.levels[${index}]`;
+    strict(entry, at, new Set(['level', 'recipe', 'selection', 'task']));
+    if (!Number.isSafeInteger(entry.level) || entry.level < 1) fail(`${at}.level`, 'must be positive');
+    strict(entry.recipe, `${at}.recipe`, new Set(['id', 'version', 'contentSha256',
+      'meaningSha256', 'executionSha256']));
+    if (!ID.test(entry.recipe.id) || !isExactSemanticVersion(entry.recipe.version)
+      || (['contentSha256', 'meaningSha256', 'executionSha256'] as const)
+        .some(field => !HASH.test(entry.recipe[field]))) {
+      fail(`${at}.recipe`, 'has an invalid identity');
+    }
+    const modular = entry.selection?.schemaVersion === 3;
+    strict(entry.selection, `${at}.selection`, modular
+      ? new Set(['schemaVersion', 'sha256', 'scoredPoints', 'requested',
+        'features', 'specifications', 'promptPacks', 'scoredChecks', 'observedChecks'])
+      : new Set(['sha256', 'completeness', 'scoredPoints', 'requested', 'taskPacks']));
+    if (!HASH.test(entry.selection.sha256)
+      || !Number.isSafeInteger(entry.selection.scoredPoints) || entry.selection.scoredPoints < 0
+      || (!modular && (typeof entry.selection.completeness !== 'string'
+        || !['full', 'subset'].includes(entry.selection.completeness)))) {
+      fail(`${at}.selection`, 'has an invalid identity');
+    }
+    const requested: UnknownRecord = { ...structuredClone(entry.selection.requested) };
+    const dependencyExpansion = requested?.dependencyExpansion;
+    if (modular) delete requested.dependencyExpansion;
+    strict(requested, `${at}.selection.requested`, modular
+      ? new Set(['features', 'specifications', 'checks']) : new Set(['packs', 'checks']));
+    if (dependencyExpansion !== undefined && dependencyExpansion !== 'exact') {
+      fail(`${at}.selection.requested.dependencyExpansion`, 'must be exact');
+    }
+    const packs = modular ? entry.selection.promptPacks : entry.selection.taskPacks;
+    if (!Array.isArray(packs)
+      || new Set(packs).size !== packs.length
+      || packs.some(value => typeof value !== 'string' || !value)) {
+      fail(`${at}.selection.${modular ? 'promptPacks' : 'taskPacks'}`, 'must contain unique non-empty strings');
+    }
+    for (const field of modular ? ['features', 'checks'] as const : ['packs', 'checks'] as const) {
+      const requestedValues = entry.selection.requested[field];
+      if (!Array.isArray(requestedValues)
+        || new Set(requestedValues).size !== requestedValues.length
+        || requestedValues.some(value => typeof value !== 'string' || !value)) {
+        fail(`${at}.selection.requested.${field}`, 'must contain unique non-empty strings');
+      }
+    }
+    if (modular) {
+      strict(entry.selection.requested.specifications,
+        `${at}.selection.requested.specifications`, new Set(['requested', 'expected', 'observed']));
+      strict(entry.selection.specifications, `${at}.selection.specifications`,
+        new Set(['requested', 'expected', 'observed']));
+      if (!Array.isArray(entry.selection.features)
+        || new Set(entry.selection.features).size !== entry.selection.features.length
+        || entry.selection.features.some(item => typeof item !== 'string' || !item)) {
+        fail(`${at}.selection.features`, 'must contain unique non-empty strings');
+      }
+      const checkGroups: Array<['scoredChecks' | 'observedChecks', Set<string>]> = [
+        ['scoredChecks', new Set(['requested', 'expected'])],
+        ['observedChecks', new Set(['observed'])],
+      ];
+      for (const [field, treatments] of checkGroups) {
+        const checks = entry.selection[field];
+        if (!Array.isArray(checks)) fail(`${at}.selection.${field}`, 'must be an array');
+        const keys = new Set();
+        for (const [index, check] of checks.entries()) {
+          const checkAt = `${at}.selection.${field}[${index}]`;
+          strict(check, checkAt, new Set(['stableKey', 'points', 'treatment']));
+          if (typeof check.stableKey !== 'string' || !check.stableKey || keys.has(check.stableKey)) {
+            fail(`${checkAt}.stableKey`, 'must be a unique non-empty string');
+          }
+          keys.add(check.stableKey);
+          if (!Number.isSafeInteger(check.points) || check.points < 0) {
+            fail(`${checkAt}.points`, 'must be a non-negative integer');
+          }
+          if (!treatments.has(check.treatment)) {
+            fail(`${checkAt}.treatment`, `must be ${[...treatments].join(' or ')}`);
+          }
+        }
+      }
+      const requestedSpecifications = entry.selection.requested.specifications;
+      if (!object(requestedSpecifications)) {
+        fail(`${at}.selection.requested.specifications`, 'must be an object');
+      }
+      for (const specifications of [requestedSpecifications,
+        entry.selection.specifications!]) {
+        for (const field of ['requested', 'expected', 'observed'] as const) {
+          if (!Array.isArray(specifications[field])
+            || new Set(specifications[field]).size !== specifications[field].length
+            || specifications[field].some(reference => typeof reference !== 'string'
+              || !parseConditionReference(reference))) {
+            fail(`${at}.selection.specifications.${field}`,
+              'must contain unique exact id@version references');
+          }
+        }
+      }
+    }
+    strict(entry.task, `${at}.task`, new Set([
+      ...(Object.hasOwn(entry.task ?? {}, 'mode') ? ['mode'] : []),
+      'sha256', 'requirementSha256', 'contractSha256', 'requirementIds', 'contractIds',
+    ]));
+    if (entry.task.mode !== undefined && !['fresh', 'upgrade'].includes(entry.task.mode)) {
+      fail(`${at}.task.mode`, 'must be fresh or upgrade');
+    }
+    for (const field of ['sha256', 'requirementSha256', 'contractSha256'] as const) {
+      if (!HASH.test(entry.task[field])) fail(`${at}.task.${field}`, 'must be a SHA-256 digest');
+    }
+    for (const field of ['requirementIds', 'contractIds'] as const) {
+      if (!Array.isArray(entry.task[field])
+        || new Set(entry.task[field]).size !== entry.task[field].length
+        || entry.task[field].some(value => typeof value !== 'string' || !value)) {
+        fail(`${at}.task.${field}`, 'must contain unique non-empty strings');
+      }
+    }
+    return entry;
+  });
+  if (new Set(levels.map(entry => entry.level)).size !== levels.length) {
+    fail('requested.levels', 'must not repeat a level');
+  }
+  return canonicalizeDefinition(scope) as unknown as RequestedScope;
+}
+
+export function resolveStudyConditions(inputs: unknown[], stacks: string[],
+  { stackBenchRoot = ROOT, catalogPath = CATALOG, frozen = false, requested }:
+  { stackBenchRoot?: string; catalogPath?: string; frozen?: boolean;
+    requested?: unknown | ((reference: ConditionReference, index: number) => unknown) }
+  = {}): [ResolvedStudyCondition, ...ResolvedStudyCondition[]] {
+  if (!Array.isArray(inputs) || inputs.length === 0) fail('conditions', 'must be a non-empty array');
+  const catalog = loadCatalog(catalogPath);
+  const resolved: ResolvedStudyCondition[] = inputs.map((input, index) => {
+    const ref = validateConditionReference(input, `conditions[${index}]`);
+    const requestedScope = validateRequestedScope(
+      typeof requested === 'function' ? requested(ref, index) : requested);
+    const guidance = resolveGuidance(catalog, ref.guidanceProfile, stacks, resolve(stackBenchRoot));
+    const repair = resolveRepair(catalog, ref.repairPolicy);
+    if (frozen && [guidance, repair].some(profile => profile.state !== 'qualified')) {
+      fail(`conditions[${index}]`, 'cannot freeze with a draft component');
+    }
+    const content = { id: ref.id, version: ref.version, requested: requestedScope,
+      guidance, repair };
+    return { ...content, sha256: sha256(canonicalDefinitionJson(content)) };
+  });
+  const keys = resolved.map(condition => `${condition.id}@${condition.version}`);
+  if (new Set(keys).size !== keys.length) fail('conditions', 'must not duplicate id@version');
+  return resolved.sort((a, b) => `${a.id}@${a.version}`
+    .localeCompare(`${b.id}@${b.version}`)) as [ResolvedStudyCondition, ...ResolvedStudyCondition[]];
+}
diff --git a/tools/stack-bench/src/campaigns/progression-reference-campaign-audit.ts b/tools/stack-bench/src/campaigns/progression-reference-campaign-audit.ts
new file mode 100644
index 00000000000..dd8ce87bb33
--- /dev/null
+++ b/tools/stack-bench/src/campaigns/progression-reference-campaign-audit.ts
@@ -0,0 +1,231 @@
+import { relative, resolve, sep } from 'node:path';
+
+import { resolveRecipeRelease }
+  from '../composition/recipe-release.js';
+import type { RecipeBinding, RecipeRelease } from '../composition/recipe-release.js';
+import { loadTrack } from '../composition/tracks.js';
+import type { Track } from '../composition/tracks.js';
+import { auditProgressionReferenceRun }
+  from '../progression/progression-reference-audit.js';
+import type { ProgressionReferenceAuditReport }
+  from '../progression/progression-reference-audit.js';
+import type { ProgressionOwner } from '../progression/progression-state.js';
+import { readCampaignState } from './campaign-scheduler.js';
+import { campaignProgressionOwner } from './campaign-compiler.js';
+import type { CampaignAttemptPlan, CompiledCampaignPlan } from './campaign-compiler.js';
+import { compileProgressionInput, dependencyRuntimeDefinition }
+  from '../progression/progression-definition.js';
+import type { ProgressionInput } from '../progression/progression-definition.js';
+
+interface CampaignExecutionView {
+  id: string;
+  output: string;
+}
+
+interface CampaignAttemptView {
+  plan: CampaignAttemptPlan;
+  status: string;
+  executions: CampaignExecutionView[];
+}
+
+interface CampaignAuditStore {
+  paths: { root: string };
+  plan: CompiledCampaignPlan;
+  state: { status: string; attempts: CampaignAttemptView[] };
+}
+
+interface CampaignRunAuditInput {
+  outputDir: string;
+  progression: ProgressionInput;
+  featureCatalogIdentity: unknown;
+  dependencyPolicyIdentity: unknown;
+  owner: ProgressionOwner;
+  recipeBindings: Map<number, RecipeBinding>;
+  release: RecipeRelease;
+}
+
+interface RunAuditSummary {
+  ok: boolean;
+  graphOwned: ProgressionReferenceAuditReport['graphOwned'];
+  finalCatalogAudit: {
+    status: string;
+    checks: number;
+    points: number;
+    zeroPointChecks: number;
+    additionalChecks: Array<{ stableKey: string; points: number }>;
+  };
+}
+type AuditRun = (input: CampaignRunAuditInput) => RunAuditSummary;
+type ReadState = (directory: string,
+  options?: { requireCurrentInputs?: boolean }) => CampaignAuditStore;
+type ResolveRelease = (track: Track, level: number, requested: string) => RecipeBinding | null;
+
+interface CampaignAuditOptions {
+  auditRun?: AuditRun;
+  readState?: ReadState;
+  resolveRelease?: ResolveRelease;
+}
+
+interface ReferenceCampaignAttemptAudit {
+  id: string;
+  stack: string;
+  execution: string;
+  ok: boolean;
+  progressionGraph: {
+    complete: boolean;
+    nodes: { covered: number; total: number };
+    checks: { covered: number; total: number };
+    points: number;
+    missingNodes: string[];
+    missingChecks: string[];
+  };
+  fullRecipeCatalog: {
+    status: string;
+    checks: number;
+    points: number;
+    zeroPointChecks: number;
+    outsideGraph: Array<{ stableKey: string; points: number }>;
+  };
+}
+
+export interface ReferenceCampaignAudit {
+  ok: boolean;
+  [key: string]: unknown;
+}
+
+export interface DetailedReferenceCampaignAudit extends ReferenceCampaignAudit {
+  schemaVersion: 1;
+  campaign: { id: string; version: string; sha256: string };
+  attempts: ReferenceCampaignAttemptAudit[];
+}
+
+function childPath(root: string, path: string): string {
+  const absoluteRoot = resolve(root);
+  const absolute = resolve(absoluteRoot, path);
+  const relation = relative(absoluteRoot, absolute);
+  if (!relation || relation === '..' || relation.startsWith(`..${sep}`)) {
+    throw new Error('reference audit execution output is outside the campaign directory');
+  }
+  return absolute;
+}
+
+function exactRecipeBindings(plan: CompiledCampaignPlan,
+  resolveRelease: ResolveRelease): { bindings: Map<number, RecipeBinding>; release: RecipeRelease } {
+  const track = loadTrack(plan.definition.track);
+  const bindings = new Map<number, RecipeBinding>();
+  let release: RecipeRelease | null = null;
+  for (const planned of plan.bindings) {
+    const reference = `${planned.recipe.id}@${planned.recipe.version}`;
+    const binding = resolveRelease(track, planned.level, reference);
+    if (!binding || binding.release.contentSha256 !== planned.recipe.contentSha256) {
+      throw new Error(`reference audit recipe binding for L${planned.level} changed after planning`);
+    }
+    if (release !== null && (binding.release.id !== release.id
+      || binding.release.version !== release.version
+      || binding.release.contentSha256 !== release.contentSha256)) {
+      throw new Error('reference audit requires one exact recipe release across all levels');
+    }
+    release ??= binding.release;
+    bindings.set(planned.level, binding);
+  }
+  if (release === null) throw new Error('reference audit has no recipe bindings');
+  return { bindings, release };
+}
+
+function summarizeAttempt(attempt: CampaignAttemptPlan, execution: CampaignExecutionView,
+  audit: RunAuditSummary): ReferenceCampaignAttemptAudit {
+  return {
+    id: attempt.id,
+    stack: attempt.stack,
+    execution: execution.id,
+    ok: audit.ok,
+    progressionGraph: {
+      complete: audit.graphOwned.complete,
+      nodes: { covered: audit.graphOwned.coveredNodes, total: audit.graphOwned.nodes },
+      checks: { covered: audit.graphOwned.coveredChecks, total: audit.graphOwned.checks },
+      points: audit.graphOwned.points,
+      missingNodes: audit.graphOwned.missingNodes,
+      missingChecks: audit.graphOwned.missingChecks,
+    },
+    fullRecipeCatalog: {
+      status: audit.finalCatalogAudit.status,
+      checks: audit.finalCatalogAudit.checks,
+      points: audit.finalCatalogAudit.points,
+      zeroPointChecks: audit.finalCatalogAudit.zeroPointChecks,
+      outsideGraph: audit.finalCatalogAudit.additionalChecks,
+    },
+  };
+}
+
+export function auditProgressionReferenceCampaign(directory: string, {
+  auditRun = auditProgressionReferenceRun,
+  readState = readCampaignState,
+  resolveRelease = resolveRecipeRelease,
+}: CampaignAuditOptions = {}): DetailedReferenceCampaignAudit | null {
+  const { plan, state, paths } = readState(directory, { requireCurrentInputs: false });
+  if (state.status !== 'completed') {
+    throw new Error('reference campaign audit requires a completed campaign');
+  }
+  const selected = state.attempts.filter(attempt =>
+    attempt.plan.mode?.id === 'dependency'
+    && attempt.plan.agentAdapter === 'reference-fixture');
+  if (selected.length === 0) return null;
+  if (!plan.featureCatalog || !plan.dependencyPolicy) {
+    throw new Error('reference campaign audit requires a feature catalog and dependency policy');
+  }
+  const progression = compileProgressionInput(dependencyRuntimeDefinition(
+    plan.featureCatalog, plan.dependencyPolicy));
+  const featureCatalogIdentity = plan.featureCatalog.identity;
+  const dependencyPolicyIdentity = plan.dependencyPolicy.identity;
+  const { bindings, release } = exactRecipeBindings(plan, resolveRelease);
+  const attempts = selected.map(attempt => {
+    if (attempt.status !== 'completed') {
+      throw new Error(`reference campaign attempt ${attempt.plan.id} is not completed`);
+    }
+    const execution = attempt.executions.at(-1);
+    if (!execution) {
+      throw new Error(`reference campaign attempt ${attempt.plan.id} has no execution`);
+    }
+    const audit = auditRun({
+      outputDir: childPath(paths.root, execution.output),
+      progression,
+      featureCatalogIdentity,
+      dependencyPolicyIdentity,
+      owner: campaignProgressionOwner(plan, attempt.plan, { workspace: true }),
+      recipeBindings: bindings,
+      release,
+    });
+    return summarizeAttempt(attempt.plan, execution, audit);
+  });
+  return {
+    schemaVersion: 1,
+    campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+    ok: attempts.every(attempt => attempt.ok),
+    attempts,
+  };
+}
+
+export function formatProgressionReferenceCampaignAudit(
+  report: DetailedReferenceCampaignAudit): string;
+export function formatProgressionReferenceCampaignAudit(
+  report: ReferenceCampaignAudit | null): string | null;
+export function formatProgressionReferenceCampaignAudit(
+  report: ReferenceCampaignAudit | null): string | null {
+  if (report === null) return null;
+  if (!Array.isArray(report.attempts)) {
+    throw new Error('reference campaign audit report has no attempts');
+  }
+  const attempts = report.attempts as ReferenceCampaignAttemptAudit[];
+  const incomplete = !report.ok && attempts.every(attempt =>
+    attempt.progressionGraph.complete && attempt.fullRecipeCatalog.status === 'not-run');
+  const lines = [`Reference progression audit: ${report.ok ? 'PASS' : incomplete ? 'INCOMPLETE' : 'FAIL'}`];
+  for (const attempt of attempts) {
+    const graph = attempt.progressionGraph;
+    const catalog = attempt.fullRecipeCatalog;
+    lines.push(`${attempt.stack}: graph ${graph.nodes.covered}/${graph.nodes.total} nodes, `
+      + `${graph.checks.covered}/${graph.checks.total} checks, ${graph.points} points; `
+      + `full recipe catalog ${catalog.status}, ${catalog.checks} checks, ${catalog.points} points, `
+      + `${catalog.outsideGraph.length} outside the graph`);
+  }
+  return lines.join('\n');
+}
diff --git a/tools/stack-bench/src/campaigns/stack-testability.ts b/tools/stack-bench/src/campaigns/stack-testability.ts
new file mode 100644
index 00000000000..7718529e13a
Binary files /dev/null and b/tools/stack-bench/src/campaigns/stack-testability.ts differ
diff --git a/tools/stack-bench/src/composition/agent-visible-contract.ts b/tools/stack-bench/src/composition/agent-visible-contract.ts
new file mode 100644
index 00000000000..b57c7386710
--- /dev/null
+++ b/tools/stack-bench/src/composition/agent-visible-contract.ts
@@ -0,0 +1,51 @@
+import { applyCredentialAliases } from './credential-aliases.js';
+type StackApplicationInterface = 'http' | 'reducer';
+const INTERFACE_SECTION = /<!-- interface:(http|reducer) -->([\s\S]*?)<!-- \/interface -->/g;
+const INTERNAL_LANGUAGE = /\b(?:stack\s*bench|benchmark|harness|grader|graded|grading|scored|scoring|tests?|testing|evaluation|criterion|testids?|external client|run configuration)\b|data-testid/i;
+
+export function assertAgentVisibleText(text: string): string {
+  const disclosure = text.match(INTERNAL_LANGUAGE)?.[0];
+  if (disclosure) {
+    throw new Error(`agent-facing text contains internal language ${JSON.stringify(disclosure)}`);
+  }
+  return text;
+}
+
+function selectedInterfaceText(value: unknown, selected: StackApplicationInterface | null): string {
+  const source = String(value ?? '');
+  let sections = 0;
+  const output = source.replace(INTERFACE_SECTION, (_section, kind, content: string) => {
+    sections += 1;
+    return kind === selected ? content : '';
+  });
+  if (/<!--\s*(?:interface:|\/interface)/.test(output)) {
+    throw new Error('interface-scoped contract has invalid markers');
+  }
+  if (sections && !selected) {
+    throw new Error('interface-scoped contract requires a selected application interface');
+  }
+  return output.replace(/\n{3,}/g, '\n\n');
+}
+
+// Agent-facing documents are authored as agent-facing text. Reject accidental
+// benchmark disclosure instead of trying to rewrite prose at runtime.
+export function agentVisibleContractText(
+  value: unknown,
+  credentialAliases: Readonly<Record<string, string>> = {},
+  applicationInterface: StackApplicationInterface | null = null,
+): string {
+  const text = applyCredentialAliases(
+    selectedInterfaceText(value, applicationInterface), credentialAliases);
+  return assertAgentVisibleText(text);
+}
+
+// Contract tables declare stable interface names in their first column.
+export function contractInterfaceNames(contractText: unknown): string[] {
+  const matches = String(contractText ?? '').matchAll(
+    /^\s*\|\s*`([a-z][a-z0-9]*(?:-[a-z0-9]+)+)`\s*\|/gm,
+  );
+  const ids = [...matches]
+    .map((match) => match[1])
+    .filter((id): id is string => id !== undefined);
+  return [...new Set(ids)].sort();
+}
diff --git a/tools/stack-bench/src/composition/calibration-compiler.ts b/tools/stack-bench/src/composition/calibration-compiler.ts
new file mode 100644
index 00000000000..78ab96b6c4a
--- /dev/null
+++ b/tools/stack-bench/src/composition/calibration-compiler.ts
@@ -0,0 +1,1361 @@
+import { existsSync, readFileSync, readdirSync, realpathSync } from 'node:fs';
+import { dirname, join, relative, resolve, sep } from 'node:path';
+
+import { compilePromotionFile } from './composition-compiler.js';
+import { canonicalDefinitionJson, canonicalizeDefinition, readDefinitionJson }
+  from './definition-plan.js';
+import { mutationTargetKeys, validateMutationDefinitions } from '../evidence/mutation-analysis.js';
+import type { MutationDefinition } from '../evidence/mutation-analysis.js';
+import { sha256 } from '../evidence/provenance.js';
+import { loadReferenceRegistry, validateReferenceRegistry } from '../references/reference-fixtures.js';
+import { readArtifact } from '../evidence/artifacts.js';
+import { executionPlanForRelease } from './recipe-release.js';
+import { missingRunnerObservation } from '../runtime/runner-environment.js';
+import { qualificationScopeIdentity, validateQualificationScopeIdentity } from './qualification-scope.js';
+import type { RecipeCheck, RecipeExecution, RecipeRelease } from './recipe-release.js';
+import { resolveFeatureCatalog } from '../progression/feature-catalog-selection.js';
+import { progressionLevels, selectFeatureCatalogLevels }
+  from '../progression/progression-definition.js';
+import { isExactSemanticVersion } from '../semantic-version.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+// Each compiler validates a cloned record field by field and returns that same
+// record. The intersection is what lets the proven record be read back as the
+// shape it was proven to be.
+type Validated<T> = T & UnknownRecord;
+
+const isMember = (allowed: Set<string>, value: unknown): boolean =>
+  typeof value === 'string' && allowed.has(value);
+
+const isOneOf = (value: unknown, allowed: readonly string[]): boolean =>
+  typeof value === 'string' && allowed.includes(value);
+
+export interface CalibrationReference {
+  backend: string;
+  id: string;
+  sourceSha256: string;
+  status?: string;
+  targetPath?: string;
+}
+
+export interface CalibrationMutation {
+  backend: string;
+  path: string;
+  sha256: string;
+  referenceId: string;
+  status?: string;
+  executionSha256?: string;
+  targets: Array<{ id: string; stableKeys: string[] }>;
+}
+
+export interface CalibrationEvidence {
+  kind: 'reference' | 'mutation' | 'null';
+  stack?: string;
+  repetition: number;
+  path: string;
+  sha256: string;
+}
+
+export interface CalibrationControl {
+  stableKey: string;
+  role: string;
+  promotionPolicy: string;
+  mutationTargets: string[];
+  reason?: string;
+}
+
+export interface CalibrationDefinition {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  track: string;
+  recipe: {
+    path: string;
+    id: string;
+    version: string;
+    meaningSha256: string;
+    executionSha256: string;
+    contentSha256: string;
+  };
+  fixture: { id: string; version: string; sourceSha256: string };
+  references: { registryPath: string; entries: CalibrationReference[] };
+  mutations: CalibrationMutation[];
+  nullControl: { pointBearing: string; zeroPoint: string; repetitions: number };
+  controls: CalibrationControl[];
+  qualification: {
+    exactCombinationRequired: boolean;
+    referenceRepetitions: number;
+    mutationRepetitions: number;
+    checks?: string[];
+    featureCatalog?: { id: string; version: string; sha256: string };
+    runner?: { schemaVersion: number; mode: string; platform: string; architecture: string };
+    stacks: Array<{ id: string; status: string }>;
+    evidence: CalibrationEvidence[];
+    buildImage?: string;
+  };
+  equivalenceDecisions: Array<{
+    fromExecutionSha256: string;
+    toExecutionSha256: string;
+    rationale: string;
+    evidence: Array<{ path: string; sha256: string }>;
+  }>;
+  qualificationReuse?: {
+    sourceRecipe: { id: string; version: string; contentSha256: string; executionSha256: string };
+    sourceCalibration: { id: string; version: string; sha256: string };
+    rationale: string;
+    evidence: Array<{ path: string; sha256: string }>;
+    scopes: Array<{
+      kind: 'reference' | 'mutation' | 'null';
+      stack?: string;
+      fromExecutableSha256: string;
+      toExecutableSha256: string;
+    }>;
+  };
+  promotion: {
+    catalogPath: string;
+    catalogSha256: string;
+    alias: string;
+    coveredAliases?: string[];
+    status: string;
+  };
+}
+
+export interface QualificationStaleness {
+  kind: string;
+  stack: string | null;
+  repetition: number;
+  path: string;
+  reason: string;
+}
+
+export interface CalibrationPlan extends Omit<CalibrationDefinition, 'schemaVersion' | 'kind'> {
+  calibrationSchemaVersion: number;
+  contentSha256: string;
+  qualificationSha256: string;
+  qualificationStaleness: QualificationStaleness[];
+}
+
+export interface CalibrationContext {
+  // Evidence is verified while the calibration is still being compiled, before
+  // it carries its plan hashes.
+  calibration: CalibrationDefinition | CalibrationPlan;
+  qualificationIdentity: CalibrationIdentity;
+  release: RecipeRelease;
+  references: CalibrationReference[];
+  execution: RecipeExecution[];
+  stackBenchRoot: string;
+}
+
+export interface CalibrationIdentity {
+  id: string;
+  version: string;
+  sha256: string;
+}
+
+export const CALIBRATION_SCHEMA_VERSION = 1;
+
+const HASH = /^[a-f0-9]{64}$/;
+const ID = /^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;
+const STATES = new Set(['draft', 'qualified', 'retired']);
+const STACK_STATES = new Set(['candidate', 'qualified', 'unsupported']);
+const CONTROL_POLICIES = new Map([
+  ['promotion-gate', 'must-pass-reference-and-kill-declared-mutant'],
+  ['precondition', 'must-pass-reference'],
+  ['diagnostic', 'record-only-until-calibrated'],
+]);
+
+const isObject = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+function fail(at: string, message: string): never {
+  throw new Error(`invalid calibration at ${at}: ${message}`);
+}
+
+function strictObject(value: unknown, at: string,
+  fields: Set<string>): asserts value is UnknownRecord {
+  if (!isObject(value)) fail(at, 'must be an object');
+  for (const key of Object.keys(value)) if (!fields.has(key)) fail(`${at}.${key}`, 'unknown field');
+}
+
+function string(value: unknown, at: string): string {
+  if (typeof value !== 'string' || !value.trim()) fail(at, 'must be a non-empty string');
+  return value;
+}
+
+function exactHash(value: unknown, at: string): string {
+  const text = string(value, at);
+  if (!HASH.test(text)) fail(at, 'must be 64 lowercase hexadecimal characters');
+  return text;
+}
+
+function exactId(value: unknown, at: string): string {
+  const text = string(value, at);
+  if (!ID.test(text)) fail(at, 'must be a stable lowercase id');
+  return text;
+}
+
+function exactVersion(value: unknown, at: string): string {
+  const text = string(value, at);
+  if (!isExactSemanticVersion(text)) fail(at, 'must be an exact semantic version');
+  return text;
+}
+
+function array(value: unknown, at: string,
+  { nonEmpty = false }: { nonEmpty?: boolean } = {}): unknown[] {
+  if (!Array.isArray(value) || (nonEmpty && value.length === 0)) {
+    fail(at, `must be a${nonEmpty ? ' non-empty' : 'n'} array`);
+  }
+  return value;
+}
+
+function contained(root: string, from: string, path: unknown,
+  at: string): { absolute: string; relative: string } {
+  const text = string(path, at);
+  const lexicalRoot = resolve(root);
+  const candidate = resolve(from, text);
+  const rel = relative(lexicalRoot, candidate);
+  if (rel === '..' || rel.startsWith(`..${sep}`)) fail(at, `escapes ${lexicalRoot}`);
+  if (!existsSync(candidate)) fail(at, `does not exist: ${text}`);
+  const realRoot = realpathSync(lexicalRoot);
+  const target = realpathSync(candidate);
+  const realRel = relative(realRoot, target);
+  if (realRel === '..' || realRel.startsWith(`..${sep}`)) fail(at, `escapes ${realRoot}`);
+  return { absolute: target, relative: realRel.replaceAll('\\', '/') };
+}
+
+const ROOT_FIELDS = new Set([
+  'schemaVersion', 'kind', 'id', 'version', 'state', 'title', 'track', 'recipe',
+  'fixture', 'references', 'mutations', 'nullControl', 'controls', 'qualification',
+  'equivalenceDecisions', 'qualificationReuse', 'promotion',
+]);
+const RECIPE_FIELDS = new Set([
+  'path', 'id', 'version', 'meaningSha256', 'executionSha256', 'contentSha256',
+]);
+const FIXTURE_FIELDS = new Set(['id', 'version', 'sourceSha256']);
+const REFERENCES_FIELDS = new Set(['registryPath', 'entries']);
+const REFERENCE_FIELDS = new Set(['backend', 'id', 'sourceSha256']);
+const MUTATION_FIELDS = new Set(['backend', 'path', 'sha256', 'referenceId']);
+const NULL_FIELDS = new Set(['pointBearing', 'zeroPoint', 'repetitions']);
+const CONTROL_FIELDS = new Set(['stableKey', 'role', 'promotionPolicy', 'mutationTargets', 'reason']);
+const QUALIFICATION_FIELDS = new Set([
+  'exactCombinationRequired', 'referenceRepetitions', 'mutationRepetitions', 'checks',
+  'featureCatalog', 'runner',
+  'stacks', 'evidence',
+]);
+const FEATURE_CATALOG_FIELDS = new Set(['id', 'version', 'sha256']);
+const RUNNER_FIELDS = new Set(['schemaVersion', 'mode', 'platform', 'architecture']);
+const STACK_FIELDS = new Set(['id', 'status']);
+const EVIDENCE_FIELDS = new Set(['kind', 'stack', 'repetition', 'path', 'sha256']);
+const EQUIVALENCE_EVIDENCE_FIELDS = new Set(['path', 'sha256']);
+const EQUIVALENCE_FIELDS = new Set([
+  'fromExecutionSha256', 'toExecutionSha256', 'rationale', 'evidence',
+]);
+const QUALIFICATION_REUSE_FIELDS = new Set([
+  'sourceRecipe', 'sourceCalibration', 'rationale', 'evidence', 'scopes',
+]);
+const QUALIFICATION_REUSE_RECIPE_FIELDS = new Set([
+  'id', 'version', 'contentSha256', 'executionSha256',
+]);
+const QUALIFICATION_REUSE_CALIBRATION_FIELDS = new Set(['id', 'version', 'sha256']);
+const QUALIFICATION_REUSE_SCOPE_FIELDS = new Set([
+  'kind', 'stack', 'fromExecutableSha256', 'toExecutableSha256',
+]);
+const PROMOTION_FIELDS = new Set([
+  'catalogPath', 'catalogSha256', 'alias', 'coveredAliases', 'status',
+]);
+
+export function compileCalibrationDefinition(input: unknown,
+  { source = '<calibration>' }: { source?: string } = {}): CalibrationDefinition {
+  const value = structuredClone(input);
+  strictObject(value, source, ROOT_FIELDS);
+  if (value.schemaVersion !== CALIBRATION_SCHEMA_VERSION) fail(`${source}.schemaVersion`, 'must be 1');
+  if (value.kind !== 'calibration-manifest') fail(`${source}.kind`, 'must be "calibration-manifest"');
+  exactId(value.id, `${source}.id`);
+  exactVersion(value.version, `${source}.version`);
+  if (!isMember(STATES, value.state)) fail(`${source}.state`, 'must be draft, qualified, or retired');
+  string(value.title, `${source}.title`);
+  exactId(value.track, `${source}.track`);
+
+  const recipe = value.recipe;
+  strictObject(recipe, `${source}.recipe`, RECIPE_FIELDS);
+  string(recipe.path, `${source}.recipe.path`);
+  exactId(recipe.id, `${source}.recipe.id`);
+  exactVersion(recipe.version, `${source}.recipe.version`);
+  for (const [field, hash] of [['meaningSha256', recipe.meaningSha256],
+    ['executionSha256', recipe.executionSha256],
+    ['contentSha256', recipe.contentSha256]] as const) {
+    exactHash(hash, `${source}.recipe.${field}`);
+  }
+
+  const fixture = value.fixture;
+  strictObject(fixture, `${source}.fixture`, FIXTURE_FIELDS);
+  exactId(fixture.id, `${source}.fixture.id`);
+  exactVersion(fixture.version, `${source}.fixture.version`);
+  exactHash(fixture.sourceSha256, `${source}.fixture.sourceSha256`);
+
+  const references = value.references;
+  strictObject(references, `${source}.references`, REFERENCES_FIELDS);
+  string(references.registryPath, `${source}.references.registryPath`);
+  const referenceEntries = array(references.entries, `${source}.references.entries`,
+    { nonEmpty: true });
+  const referenceIds = new Set<unknown>();
+  const backends = new Set<unknown>();
+  referenceEntries.forEach((entry: unknown, index: number) => {
+    const at = `${source}.references.entries[${index}]`;
+    strictObject(entry, at, REFERENCE_FIELDS);
+    string(entry.backend, `${at}.backend`);
+    exactId(entry.id, `${at}.id`);
+    exactHash(entry.sourceSha256, `${at}.sourceSha256`);
+    if (referenceIds.has(entry.id)) fail(`${at}.id`, `duplicates ${entry.id}`);
+    if (backends.has(entry.backend)) fail(`${at}.backend`, `duplicates ${entry.backend}`);
+    referenceIds.add(entry.id);
+    backends.add(entry.backend);
+  });
+
+  const mutations = array(value.mutations, `${source}.mutations`, { nonEmpty: true });
+  const mutationBackends = new Set<unknown>();
+  mutations.forEach((entry: unknown, index: number) => {
+    const at = `${source}.mutations[${index}]`;
+    strictObject(entry, at, MUTATION_FIELDS);
+    string(entry.backend, `${at}.backend`);
+    string(entry.path, `${at}.path`);
+    exactHash(entry.sha256, `${at}.sha256`);
+    exactId(entry.referenceId, `${at}.referenceId`);
+    if (!referenceIds.has(entry.referenceId)) fail(`${at}.referenceId`, 'does not name a selected reference');
+    if (mutationBackends.has(entry.backend)) fail(`${at}.backend`, `duplicates ${entry.backend}`);
+    mutationBackends.add(entry.backend);
+  });
+
+  const nullControl = value.nullControl;
+  strictObject(nullControl, `${source}.nullControl`, NULL_FIELDS);
+  if (nullControl.pointBearing !== 'must-fail-conclusively') {
+    fail(`${source}.nullControl.pointBearing`, 'must be must-fail-conclusively');
+  }
+  if (nullControl.zeroPoint !== 'typed-policy') {
+    fail(`${source}.nullControl.zeroPoint`, 'must be typed-policy');
+  }
+  if (!Number.isInteger(nullControl.repetitions) || Number(nullControl.repetitions) < 1) {
+    fail(`${source}.nullControl.repetitions`, 'must be a positive integer');
+  }
+
+  const controls = array(value.controls, `${source}.controls`);
+  const controlKeys = new Set<unknown>();
+  controls.forEach((control: unknown, index: number) => {
+    const at = `${source}.controls[${index}]`;
+    strictObject(control, at, CONTROL_FIELDS);
+    string(control.stableKey, `${at}.stableKey`);
+    const role = String(control.role);
+    if (!CONTROL_POLICIES.has(role)) fail(`${at}.role`, 'has an unknown control role');
+    if (control.promotionPolicy !== CONTROL_POLICIES.get(role)) {
+      fail(`${at}.promotionPolicy`, `must be ${CONTROL_POLICIES.get(role)} for ${role}`);
+    }
+    const mutationTargets = array(control.mutationTargets ?? [], `${at}.mutationTargets`);
+    control.mutationTargets = mutationTargets;
+    mutationTargets.forEach((target, targetIndex) => string(target, `${at}.mutationTargets[${targetIndex}]`));
+    if (new Set(mutationTargets).size !== mutationTargets.length) {
+      fail(`${at}.mutationTargets`, 'must not contain duplicates');
+    }
+    if (role === 'promotion-gate' && mutationTargets.length === 0) {
+      fail(`${at}.mutationTargets`, 'promotion-gate controls require a declared mutant');
+    }
+    if (role !== 'promotion-gate' && mutationTargets.length > 0) {
+      fail(`${at}.mutationTargets`, 'is allowed only for promotion-gate controls');
+    }
+    if (control.reason !== undefined) string(control.reason, `${at}.reason`);
+    if (role === 'diagnostic' && control.reason === undefined) {
+      fail(`${at}.reason`, 'is required for diagnostic controls');
+    }
+    if (controlKeys.has(control.stableKey)) fail(`${at}.stableKey`, `duplicates ${control.stableKey}`);
+    controlKeys.add(control.stableKey);
+  });
+
+  const qualification = value.qualification;
+  strictObject(qualification, `${source}.qualification`, QUALIFICATION_FIELDS);
+  if (qualification.exactCombinationRequired !== true) {
+    fail(`${source}.qualification.exactCombinationRequired`, 'must be true');
+  }
+  for (const [field, repetitions] of [['referenceRepetitions', qualification.referenceRepetitions],
+    ['mutationRepetitions', qualification.mutationRepetitions]] as const) {
+    if (!Number.isInteger(repetitions) || Number(repetitions) < 1) {
+      fail(`${source}.qualification.${field}`, 'must be a positive integer');
+    }
+  }
+  if (qualification.checks !== undefined) {
+    const checks = array(qualification.checks, `${source}.qualification.checks`, { nonEmpty: true });
+    checks.forEach((key, index) => string(key, `${source}.qualification.checks[${index}]`));
+    if (new Set(checks).size !== checks.length) {
+      fail(`${source}.qualification.checks`, 'must not contain duplicates');
+    }
+  }
+  const featureCatalog = qualification.featureCatalog;
+  if (featureCatalog !== undefined) {
+    const at = `${source}.qualification.featureCatalog`;
+    strictObject(featureCatalog, at, FEATURE_CATALOG_FIELDS);
+    string(featureCatalog.id, `${at}.id`);
+    if (!isExactSemanticVersion(featureCatalog.version)) {
+      fail(`${at}.version`, 'must be an exact semantic version');
+    }
+    exactHash(featureCatalog.sha256, `${at}.sha256`);
+  }
+  const runner = qualification.runner;
+  if (runner !== undefined) {
+    const at = `${source}.qualification.runner`;
+    strictObject(runner, at, RUNNER_FIELDS);
+    if (runner.schemaVersion !== 1) fail(`${at}.schemaVersion`, 'must be 1');
+    if (runner.mode !== 'appliance') fail(`${at}.mode`, 'must be appliance');
+    string(runner.platform, `${at}.platform`);
+    string(runner.architecture, `${at}.architecture`);
+  }
+  const stacks = array(qualification.stacks, `${source}.qualification.stacks`, { nonEmpty: true });
+  const stackIds = new Set<unknown>();
+  stacks.forEach((stack: unknown, index: number) => {
+    const at = `${source}.qualification.stacks[${index}]`;
+    strictObject(stack, at, STACK_FIELDS);
+    string(stack.id, `${at}.id`);
+    if (!isMember(STACK_STATES, stack.status)) {
+      fail(`${at}.status`, 'must be candidate, qualified, or unsupported');
+    }
+    if (stackIds.has(stack.id)) fail(`${at}.id`, `duplicates ${stack.id}`);
+    stackIds.add(stack.id);
+  });
+  const evidence = array(qualification.evidence, `${source}.qualification.evidence`);
+  evidence.forEach((entry: unknown, index: number) => {
+    const at = `${source}.qualification.evidence[${index}]`;
+    strictObject(entry, at, EVIDENCE_FIELDS);
+    if (!isOneOf(entry.kind, ['reference', 'mutation', 'null'])) {
+      fail(`${at}.kind`, 'must be reference, mutation, or null');
+    }
+    if (!Number.isInteger(entry.repetition) || Number(entry.repetition) < 1) {
+      fail(`${at}.repetition`, 'must be a positive integer');
+    }
+    if (entry.kind === 'null') {
+      if (entry.stack !== undefined) fail(`${at}.stack`, 'is not allowed for null evidence');
+    } else string(entry.stack, `${at}.stack`);
+    string(entry.path, `${at}.path`);
+    exactHash(entry.sha256, `${at}.sha256`);
+  });
+
+  const equivalenceDecisions = array(value.equivalenceDecisions ?? [],
+    `${source}.equivalenceDecisions`);
+  value.equivalenceDecisions = equivalenceDecisions;
+  equivalenceDecisions.forEach((decision: unknown, index: number) => {
+    const at = `${source}.equivalenceDecisions[${index}]`;
+    strictObject(decision, at, EQUIVALENCE_FIELDS);
+    exactHash(decision.fromExecutionSha256, `${at}.fromExecutionSha256`);
+    exactHash(decision.toExecutionSha256, `${at}.toExecutionSha256`);
+    if (decision.fromExecutionSha256 === decision.toExecutionSha256) fail(at, 'must compare different execution hashes');
+    string(decision.rationale, `${at}.rationale`);
+    const decisionEvidence = array(decision.evidence, `${at}.evidence`, { nonEmpty: true });
+    decisionEvidence.forEach((entry: unknown, evidenceIndex: number) => {
+      strictObject(entry, `${at}.evidence[${evidenceIndex}]`, EQUIVALENCE_EVIDENCE_FIELDS);
+      string(entry.path, `${at}.evidence[${evidenceIndex}].path`);
+      exactHash(entry.sha256, `${at}.evidence[${evidenceIndex}].sha256`);
+    });
+  });
+
+  if (value.qualificationReuse !== undefined) {
+    const reuse = value.qualificationReuse;
+    const at = `${source}.qualificationReuse`;
+    strictObject(reuse, at, QUALIFICATION_REUSE_FIELDS);
+    const sourceRecipe = reuse.sourceRecipe;
+    strictObject(sourceRecipe, `${at}.sourceRecipe`, QUALIFICATION_REUSE_RECIPE_FIELDS);
+    exactId(sourceRecipe.id, `${at}.sourceRecipe.id`);
+    exactVersion(sourceRecipe.version, `${at}.sourceRecipe.version`);
+    exactHash(sourceRecipe.contentSha256, `${at}.sourceRecipe.contentSha256`);
+    exactHash(sourceRecipe.executionSha256, `${at}.sourceRecipe.executionSha256`);
+    const sourceCalibration = reuse.sourceCalibration;
+    strictObject(sourceCalibration, `${at}.sourceCalibration`,
+      QUALIFICATION_REUSE_CALIBRATION_FIELDS);
+    exactId(sourceCalibration.id, `${at}.sourceCalibration.id`);
+    exactVersion(sourceCalibration.version, `${at}.sourceCalibration.version`);
+    exactHash(sourceCalibration.sha256, `${at}.sourceCalibration.sha256`);
+    string(reuse.rationale, `${at}.rationale`);
+    const reuseEvidence = array(reuse.evidence, `${at}.evidence`, { nonEmpty: true });
+    reuseEvidence.forEach((entry: unknown, index: number) => {
+      const evidenceAt = `${at}.evidence[${index}]`;
+      strictObject(entry, evidenceAt, EQUIVALENCE_EVIDENCE_FIELDS);
+      string(entry.path, `${evidenceAt}.path`);
+      exactHash(entry.sha256, `${evidenceAt}.sha256`);
+    });
+    const scopes = array(reuse.scopes, `${at}.scopes`, { nonEmpty: true });
+    const scopeKeys = new Set<string>();
+    scopes.forEach((scope: unknown, index: number) => {
+      const scopeAt = `${at}.scopes[${index}]`;
+      strictObject(scope, scopeAt, QUALIFICATION_REUSE_SCOPE_FIELDS);
+      if (!isOneOf(scope.kind, ['reference', 'mutation', 'null'])) {
+        fail(`${scopeAt}.kind`, 'must be reference, mutation, or null');
+      }
+      if (scope.kind === 'null') {
+        if (scope.stack !== undefined) fail(`${scopeAt}.stack`, 'is not allowed for null reuse');
+      } else string(scope.stack, `${scopeAt}.stack`);
+      exactHash(scope.fromExecutableSha256, `${scopeAt}.fromExecutableSha256`);
+      exactHash(scope.toExecutableSha256, `${scopeAt}.toExecutableSha256`);
+      if (scope.fromExecutableSha256 === scope.toExecutableSha256) {
+        fail(scopeAt, 'must compare different executable hashes');
+      }
+      const key = `${scope.kind}:${scope.stack ?? ''}`;
+      if (scopeKeys.has(key)) fail(scopeAt, `duplicates ${key}`);
+      scopeKeys.add(key);
+    });
+  }
+
+  const promotion = value.promotion;
+  strictObject(promotion, `${source}.promotion`, PROMOTION_FIELDS);
+  string(promotion.catalogPath, `${source}.promotion.catalogPath`);
+  exactHash(promotion.catalogSha256, `${source}.promotion.catalogSha256`);
+  const alias = String(promotion.alias);
+  if (!/^L[1-9]\d*$/.test(alias)) fail(`${source}.promotion.alias`, 'must be an L1-style alias');
+  if (promotion.coveredAliases !== undefined) {
+    const coveredAliases = array(promotion.coveredAliases, `${source}.promotion.coveredAliases`,
+      { nonEmpty: true });
+    const covered = new Set<unknown>();
+    for (const [index, entry] of coveredAliases.entries()) {
+      if (!/^L[1-9]\d*$/.test(String(entry))) {
+        fail(`${source}.promotion.coveredAliases[${index}]`, 'must be an L1-style alias');
+      }
+      if (covered.has(entry)) fail(`${source}.promotion.coveredAliases`, `duplicates ${entry}`);
+      covered.add(entry);
+    }
+    if (!covered.has(promotion.alias)) {
+      fail(`${source}.promotion.coveredAliases`, `must include ${promotion.alias}`);
+    }
+  }
+  if (!isOneOf(promotion.status, ['candidate', 'promoted', 'retired'])) {
+    fail(`${source}.promotion.status`, 'must be candidate, promoted, or retired');
+  }
+  return value as Validated<CalibrationDefinition>;
+}
+
+function verifyEvidence(entries: unknown, stackBenchRoot: string,
+  at: string): CalibrationEvidence[] {
+  return array(entries, at).map((entry: unknown, index: number): CalibrationEvidence => {
+    if (!isObject(entry)) fail(`${at}[${index}]`, 'must be an object');
+    const ref = contained(stackBenchRoot, stackBenchRoot, entry.path, `${at}[${index}].path`);
+    const digest = sha256(readFileSync(ref.absolute));
+    if (digest !== entry.sha256) fail(`${at}[${index}].sha256`, `stale digest for ${entry.path}`);
+    return { ...entry, path: ref.relative, sha256: digest } as Validated<CalibrationEvidence>;
+  });
+}
+
+function evidenceFailure(at: string, message: string): never {
+  fail(at, `qualification artifact ${message}`);
+}
+
+export class QualificationEvidenceStaleError extends Error {
+  readonly code = 'qualification_evidence_stale';
+  readonly at: string;
+  readonly reason: string;
+
+  constructor(at: string, reason: string) {
+    super(`${at} qualification artifact is stale: ${reason}`);
+    this.name = 'QualificationEvidenceStaleError';
+    this.at = at;
+    this.reason = reason;
+  }
+}
+
+// Optional chaining over a value the type system knows nothing about: an
+// artifact is JSON from disk, so every step may be absent.
+const read = (value: unknown, ...path: readonly string[]): unknown => {
+  let current = value;
+  for (const key of path) {
+    if (current === null || current === undefined) return undefined;
+    current = Reflect.get(Object(current), key);
+  }
+  return current;
+};
+
+function exactEvidenceIdentity(actual: unknown, expected: unknown, at: string): void {
+  if (!actual || read(actual, 'id') !== read(expected, 'id')
+    || read(actual, 'version') !== read(expected, 'version')
+    || read(actual, 'sha256') !== read(expected, 'sha256')) {
+    evidenceFailure(at, `has wrong ${at.split('.').at(-1)} identity`);
+  }
+}
+
+function evidenceIdentityMatches(actual: unknown, expected: unknown): boolean {
+  return read(actual, 'id') === read(expected, 'id')
+    && read(actual, 'version') === read(expected, 'version')
+    && read(actual, 'sha256') === read(expected, 'sha256');
+}
+
+function qualificationEvidenceOrigin(artifact: UnknownRecord,
+  calibration: CalibrationDefinition | CalibrationPlan, qualificationIdentity: CalibrationIdentity,
+  release: RecipeRelease, at: string): 'current' | 'reused' {
+  const identities = artifact.identities;
+  const currentRecipe = { id: release.id, version: release.version, sha256: release.contentSha256 };
+  const current = evidenceIdentityMatches(read(identities, 'recipe'), currentRecipe)
+    && evidenceIdentityMatches(read(identities, 'calibration'), qualificationIdentity);
+  if (current) return 'current';
+  const reuse = calibration.qualificationReuse;
+  const sourceRecipe = reuse && { id: reuse.sourceRecipe.id, version: reuse.sourceRecipe.version,
+    sha256: reuse.sourceRecipe.contentSha256 };
+  if (reuse && evidenceIdentityMatches(read(identities, 'recipe'), sourceRecipe)
+    && evidenceIdentityMatches(read(identities, 'calibration'), reuse.sourceCalibration)) {
+    return 'reused';
+  }
+  evidenceFailure(at, 'has mismatched recipe or calibration identities');
+}
+
+type ReuseDecision = {
+  sourceRecipe: { id: string; version: string; contentSha256: string; executionSha256: string };
+  sourceCalibration: { id: string; version: string; sha256: string };
+  scopes: Array<{ kind: string; stack?: string;
+    fromExecutableSha256: string; toExecutableSha256: string }>;
+};
+
+type ReusableScope = {
+  schemaVersion?: unknown;
+  kind?: unknown;
+  executableSha256?: unknown;
+  recipe?: unknown;
+  checksSha256?: unknown;
+  stack?: unknown;
+  mutationSha256?: unknown;
+};
+
+export function canReuseQualificationScope({ actual, expected, artifact, calibration, entry }: {
+  actual: ReusableScope;
+  expected: ReusableScope;
+  artifact: { identities?: UnknownRecord };
+  calibration: { qualificationReuse?: ReuseDecision };
+  entry: { kind: string; stack?: string };
+}): boolean {
+  const reuse = calibration?.qualificationReuse;
+  if (!reuse) return false;
+  const decision = reuse.scopes.find(scope => scope.kind === entry.kind
+    && (scope.stack ?? null) === (entry.stack ?? null));
+  if (!decision) return false;
+  const sourceScopeRecipe = { id: reuse.sourceRecipe.id, version: reuse.sourceRecipe.version,
+    contentSha256: reuse.sourceRecipe.contentSha256 };
+  const sourceArtifactRecipe = { id: reuse.sourceRecipe.id, version: reuse.sourceRecipe.version,
+    sha256: reuse.sourceRecipe.contentSha256 };
+  const stackInputs = (value: unknown) => isObject(value)
+    ? { id: value.id, reference: value.reference } : value;
+  return actual.schemaVersion === expected.schemaVersion
+    && actual.kind === expected.kind
+    && actual.executableSha256 === decision.fromExecutableSha256
+    && expected.executableSha256 === decision.toExecutableSha256
+    && evidenceIdentityMatches(read(artifact.identities, 'recipe'), sourceArtifactRecipe)
+    && evidenceIdentityMatches(read(artifact.identities, 'calibration'), reuse.sourceCalibration)
+    && canonicalDefinitionJson(actual.recipe) === canonicalDefinitionJson(sourceScopeRecipe)
+    && actual.checksSha256 === expected.checksSha256
+    && canonicalDefinitionJson(stackInputs(actual.stack))
+      === canonicalDefinitionJson(stackInputs(expected.stack))
+    && actual.mutationSha256 === expected.mutationSha256;
+}
+
+export function currentLevelPoints(
+  release: { checkCatalog: Array<Pick<RecipeCheck, 'executionId' | 'points'>> },
+  execution: RecipeExecution[]): number {
+  if (!Array.isArray(execution) || execution.length === 0) {
+    throw new Error('qualification requires a typed execution plan');
+  }
+  const ownership = new Map();
+  for (const entry of execution) {
+    if (typeof entry?.id !== 'string' || !entry.id || ownership.has(entry.id)
+      || !['current', 'inherited'].includes(entry.ownership?.kind)) {
+      throw new Error('qualification received an invalid typed execution plan');
+    }
+    ownership.set(entry.id, entry.ownership.kind);
+  }
+  const selected = new Set();
+  let points = 0;
+  for (const check of release.checkCatalog) {
+    const kind = ownership.get(check.executionId);
+    if (!kind) throw new Error(`typed execution plan is missing ${check.executionId}`);
+    selected.add(check.executionId);
+    if (kind === 'current') points += check.points;
+  }
+  const empty = [...ownership.keys()].filter(id => !selected.has(id));
+  if (empty.length) throw new Error(`typed execution plan has no checks for ${empty.join(', ')}`);
+  return points;
+}
+
+export function hasExactSelectedPackRuntime(
+  packRuntime: unknown,
+  release: { checkCatalog: Array<{ packId?: string }> }): boolean {
+  const packs = read(packRuntime, 'packs');
+  if (!Array.isArray(packs)) return false;
+  const expected = new Set(release.checkCatalog.map(check => check.packId));
+  const observed = new Set(packs.map(pack => read(pack, 'id')));
+  return packs.length === observed.size && observed.size === expected.size
+    && [...expected].every(id => observed.has(id))
+    && packs.every(pack => read(pack, 'exceeded') === false);
+}
+
+export function validateQualificationEvidenceArtifact(artifact: unknown,
+  entry: CalibrationEvidence,
+  { calibration, qualificationIdentity, release, references, execution, stackBenchRoot,
+    enforceQualificationScope = true }: CalibrationContext
+    & { enforceQualificationScope?: boolean }): void {
+  const at = `evidence.${entry.kind}:${entry.stack ?? ''}:${entry.repetition}`;
+  if (!isObject(artifact)) evidenceFailure(at, 'is not an artifact');
+  qualificationEvidenceOrigin(artifact, calibration, qualificationIdentity, release, at);
+  if (!read(artifact, 'identities', 'engine', 'sha256')) {
+    evidenceFailure(at, 'has no engine content identity');
+  }
+  if (calibration.qualification.runner !== undefined) {
+    for (const [field, expected] of Object.entries(calibration.qualification.runner)) {
+      if (read(artifact, 'payload', 'runner', field) !== expected) {
+        evidenceFailure(at, 'has the wrong controller runner environment');
+      }
+    }
+    const observed = read(artifact, 'payload', 'runner');
+    const missing = missingRunnerObservation(isObject(observed) ? observed : null);
+    if (missing.length) evidenceFailure(at,
+      `has no complete appliance runner observation (missing ${missing.join(', ')})`);
+  }
+
+  const scoredChecks = release.checkCatalog.filter(check => check.points > 0);
+  const zeroPointChecks = release.checkCatalog.filter(check => check.points === 0);
+  if (entry.kind === 'null') {
+    if (artifact.kind !== 'null_control') evidenceFailure(at, `is ${artifact.kind}, not null_control`);
+    const payload = artifact.payload;
+    if (read(payload, 'ok') !== true) evidenceFailure(at, 'did not pass');
+    if (canonicalDefinitionJson(read(payload, 'tracks'))
+      !== canonicalDefinitionJson([release.track])) {
+      evidenceFailure(at, 'targets another track');
+    }
+    const summary = read(payload, 'summary');
+    const expectedPoints = scoredChecks.reduce((sum, check) => sum + check.points, 0);
+    if (read(summary, 'criteria') !== scoredChecks.length
+      || read(summary, 'points') !== expectedPoints
+      || read(summary, 'expectedFailures', 'criteria') !== scoredChecks.length
+      || read(summary, 'expectedFailures', 'points') !== expectedPoints
+      || read(summary, 'vacuousPasses', 'criteria') !== 0
+      || read(summary, 'vacuousPasses', 'points') !== 0
+      || read(summary, 'oracleGaps', 'criteria') !== 0
+      || read(summary, 'oracleGaps', 'points') !== 0
+      || read(summary, 'unscored', 'criteria') !== zeroPointChecks.length
+      || read(summary, 'unscored', 'passed') !== 0
+      || read(summary, 'unscored', 'failed') !== zeroPointChecks.length
+      || read(summary, 'unscored', 'inconclusive') !== 0) {
+      evidenceFailure(at, 'does not prove the complete null policy');
+    }
+    const expected = new Map(scoredChecks.map(check => [
+      `${check.source}:${check.featureId}:${check.criterionId}`, check,
+    ]));
+    const qualificationLevel = Number(calibration.promotion.alias.slice(1));
+    const results = read(payload, 'criteria') ?? [];
+    if (!Array.isArray(results)) evidenceFailure(at, 'has no criteria list');
+    for (const result of results) {
+      const key = `${read(result, 'scenario')}:${read(result, 'feature')}:${read(result, 'criterion')}`;
+      const check = expected.get(key);
+      if (!check || read(result, 'track') !== release.track
+        || read(result, 'level') !== qualificationLevel
+        || read(result, 'points') !== check.points
+        || read(result, 'status') !== 'expected_fail'
+        || read(result, 'evidenceStatus') !== 'failed') {
+        evidenceFailure(at, `contains invalid null result ${key}`);
+      }
+      expected.delete(key);
+    }
+    if (expected.size !== 0) evidenceFailure(at, 'does not cover every selected check exactly once');
+    if (enforceQualificationScope) validateCurrentQualificationScope(artifact, entry,
+      { calibration, release, references, stackBenchRoot }, at);
+    return;
+  }
+
+  if (artifact.kind !== 'reference_qualification') {
+    evidenceFailure(at, `is ${artifact.kind}, not reference_qualification`);
+  }
+  const reference = references.find(candidate => candidate.backend === entry.stack);
+  if (!reference) evidenceFailure(at, `targets undeclared stack ${entry.stack}`);
+  exactEvidenceIdentity(read(artifact, 'identities', 'fixture'),
+    { id: reference.id, version: null, sha256: reference.sourceSha256 }, `${at}.fixture`);
+  if (read(artifact, 'identities', 'stackAdapter', 'id') !== entry.stack) {
+    evidenceFailure(at, 'has wrong stack adapter');
+  }
+  const payload = artifact.payload;
+  if (read(payload, 'diagnostic') === true) {
+    evidenceFailure(at, 'is targeted diagnostic evidence, not qualification evidence');
+  }
+  if (calibration.qualification.checks !== undefined) {
+    const qualifiedKeys = read(payload, 'qualifiedCheckKeys') ?? [];
+    if (!Array.isArray(qualifiedKeys)) evidenceFailure(at, 'has no qualified check keys');
+    const actualChecks = [...qualifiedKeys].sort();
+    const expectedChecks = release.checkCatalog.map(check => check.stableKey).sort();
+    if (canonicalDefinitionJson(actualChecks) !== canonicalDefinitionJson(expectedChecks)) {
+      evidenceFailure(at, 'does not prove the exact selected checks');
+    }
+  }
+  const mutationControl = entry.kind === 'mutation';
+  const requiredRepetitions = mutationControl
+    ? calibration.qualification.mutationRepetitions : calibration.qualification.referenceRepetitions;
+  const harnessSha256 = read(payload, 'harnessSha256');
+  if (read(payload, 'fixture') !== reference.id
+    || read(payload, 'fixtureSha256') !== reference.sourceSha256
+    || read(payload, 'requiredRepetitions') !== requiredRepetitions
+    || read(payload, 'isolation') !== 'docker'
+    || read(payload, 'mutationControl') !== mutationControl || read(payload, 'ok') !== true
+    || read(payload, 'stable') !== true || read(payload, 'sameImage') !== true
+    || read(payload, 'sameHarness') !== true
+    || !harnessSha256 || read(payload, 'runs', 'length') !== requiredRepetitions) {
+    evidenceFailure(at, 'does not satisfy the repeated Docker gate');
+  }
+  const repetitions = new Set<unknown>();
+  const expectedRunScore = currentLevelPoints(release, execution);
+  const runs = read(payload, 'runs');
+  if (!Array.isArray(runs)) evidenceFailure(at, 'has no repetition list');
+  for (const run of runs) {
+    const repetition = read(run, 'repetition');
+    repetitions.add(repetition);
+    const mutations = read(run, 'mutations');
+    if (read(run, 'ok') !== true || read(run, 'processError') !== null
+      || read(run, 'outcome') !== 'passed'
+      || read(run, 'score') !== `${expectedRunScore}/${expectedRunScore}`
+      || read(run, 'criteria') !== release.scoring.checks
+      || read(run, 'zeroPointCriteria') !== zeroPointChecks.length
+      || !read(run, 'imageId') || read(run, 'harnessSha256Before') !== harnessSha256
+      || read(run, 'harnessSha256After') !== harnessSha256
+      || read(run, 'failures', 'length') !== 0
+      || !hasExactSelectedPackRuntime(read(run, 'packRuntime'), release)) {
+      evidenceFailure(at, `contains failed or incomplete repetition ${repetition}`);
+    }
+    if (mutationControl) {
+      if (!mutations || Number(read(mutations, 'total')) < 1
+        || read(mutations, 'caught') !== read(mutations, 'total')) {
+        evidenceFailure(at, `did not catch every mutation in repetition ${repetition}`);
+      }
+    } else if (mutations !== null) {
+      evidenceFailure(at, `reference repetition ${repetition} contains mutation results`);
+    }
+  }
+  if (repetitions.size !== requiredRepetitions
+    || !Array.from({ length: requiredRepetitions }, (_, index) => index + 1)
+      .every(repetition => repetitions.has(repetition))) {
+    evidenceFailure(at, 'does not contain the exact repetition set');
+  }
+  if (!repetitions.has(entry.repetition)) evidenceFailure(at, 'does not contain its declared repetition');
+  if (enforceQualificationScope) validateCurrentQualificationScope(artifact, entry,
+    { calibration, release, references, stackBenchRoot }, at);
+}
+
+function validateCurrentQualificationScope(artifact: UnknownRecord, entry: CalibrationEvidence,
+  { calibration, release, references, stackBenchRoot }:
+    Pick<CalibrationContext, 'calibration' | 'release' | 'references' | 'stackBenchRoot'>,
+  at: string): void {
+  const actual = read(artifact, 'payload', 'qualificationScope');
+  if (!isObject(actual)) throw new QualificationEvidenceStaleError(at,
+    'legacy broad-hash evidence has no scoped qualification identity');
+  try { validateQualificationScopeIdentity(actual, `${at}.qualificationScope`); }
+  catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    evidenceFailure(at, `has an invalid scoped identity: ${message}`);
+  }
+  const reference = entry.kind === 'null' ? null
+    : references.find(candidate => candidate.backend === entry.stack);
+  const mutation = entry.kind === 'mutation'
+    ? calibration.mutations.find(candidate => candidate.backend === entry.stack) : null;
+  const expected = qualificationScopeIdentity({
+    kind: entry.kind,
+    release,
+    stack: entry.stack ?? null,
+    reference,
+    mutation,
+    stackBenchRoot,
+  });
+  if (actual.sha256 !== expected.sha256) {
+    if (canReuseQualificationScope({ actual, expected, artifact, calibration, entry })) return;
+    const changed = ['executableSha256', 'checksSha256', 'mutationSha256']
+      .filter(field => actual[field] !== read(expected, field));
+    if (canonicalDefinitionJson(actual.recipe) !== canonicalDefinitionJson(expected.recipe)) {
+      changed.push('recipe');
+    }
+    if (canonicalDefinitionJson(actual.stack) !== canonicalDefinitionJson(expected.stack)) {
+      changed.push('stack');
+    }
+    throw new QualificationEvidenceStaleError(at,
+      `scoped inputs changed (${changed.length ? changed.join(', ') : 'identity'})`);
+  }
+}
+
+function verifyQualificationEvidence(entries: CalibrationEvidence[], stackBenchRoot: string,
+  at: string, context: Omit<CalibrationContext, 'stackBenchRoot'>):
+  { entries: CalibrationEvidence[]; staleness: QualificationStaleness[]; buildImage?: string } {
+  const artifacts = new Map();
+  const normalized = verifyEvidence(entries, stackBenchRoot, at);
+  const images = new Set<string>();
+  const runners = new Set();
+  const staleness: QualificationStaleness[] = [];
+  normalized.forEach((entry, index) => {
+    let artifact = artifacts.get(entry.path);
+    if (!artifact) {
+      try { artifact = readArtifact(resolve(stackBenchRoot, entry.path)); }
+      catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        fail(`${at}[${index}].path`, `is not a valid artifact: ${message}`);
+      }
+      artifacts.set(entry.path, artifact);
+    }
+    validateQualificationEvidenceArtifact(artifact, entry,
+      { ...context, stackBenchRoot, enforceQualificationScope: false });
+    try {
+      validateCurrentQualificationScope(artifact, entry,
+        { ...context, stackBenchRoot }, `${at}[${index}]`);
+    } catch (error) {
+      if (!(error instanceof QualificationEvidenceStaleError)) throw error;
+      staleness.push({ kind: entry.kind, stack: entry.stack ?? null,
+        repetition: entry.repetition, path: entry.path, reason: error.reason });
+    }
+    if (context.calibration.qualification.runner !== undefined) {
+      runners.add(canonicalDefinitionJson(read(artifact, 'payload', 'runner')));
+    }
+    if (entry.kind !== 'null') {
+      const runs = read(artifact, 'payload', 'runs');
+      if (Array.isArray(runs)) for (const run of runs) {
+        const imageId = read(run, 'imageId');
+        if (typeof imageId === 'string') images.add(imageId);
+      }
+    }
+  });
+  if (images.size > 1) fail(at, 'qualification artifacts use different build images');
+  if (runners.size > 1) fail(at, 'qualification artifacts use different appliance runner environments');
+  const buildImage = [...images][0];
+  return { entries: normalized, staleness, ...(buildImage ? { buildImage } : {}) };
+}
+
+export function mutationExecutionSha256(manifest: UnknownRecord,
+  mutations: unknown = manifest.mutations): string {
+  const { status: _status, mutations: _mutations, ...fields } = manifest;
+  const execution = { ...fields, mutations };
+  return sha256(canonicalDefinitionJson(canonicalizeDefinition(execution)));
+}
+
+type IdentifiableCalibration = Partial<CalibrationDefinition>
+  & Pick<CalibrationDefinition, 'id' | 'version'>;
+
+export function calibrationQualificationIdentity(
+  calibration: IdentifiableCalibration): CalibrationIdentity {
+  if (!calibration || typeof calibration !== 'object') {
+    throw new Error('calibration qualification identity requires a compiled calibration');
+  }
+  const document = canonicalizeDefinition({
+    schemaVersion: CALIBRATION_SCHEMA_VERSION,
+    id: calibration.id,
+    version: calibration.version,
+    track: calibration.track,
+    recipe: {
+      id: calibration.recipe?.id,
+      version: calibration.recipe?.version,
+      meaningSha256: calibration.recipe?.meaningSha256,
+      executionSha256: calibration.recipe?.executionSha256,
+      contentSha256: calibration.recipe?.contentSha256,
+    },
+    fixture: { id: calibration.fixture?.id, version: calibration.fixture?.version },
+    references: (calibration.references?.entries ?? []).map(entry => ({
+      backend: entry.backend, id: entry.id, sourceSha256: entry.sourceSha256,
+    })).sort((a, b) => a.backend.localeCompare(b.backend)),
+    mutations: (calibration.mutations ?? []).map(entry => ({
+      backend: entry.backend, referenceId: entry.referenceId,
+      executionSha256: entry.executionSha256,
+    })).sort((a, b) => a.backend.localeCompare(b.backend)),
+    nullControl: calibration.nullControl,
+    controls: (calibration.controls ?? []).map(control => ({ ...control,
+      mutationTargets: [...control.mutationTargets].sort(),
+    })).sort((a, b) => a.stableKey.localeCompare(b.stableKey)),
+    qualification: {
+      exactCombinationRequired: calibration.qualification?.exactCombinationRequired,
+      referenceRepetitions: calibration.qualification?.referenceRepetitions,
+      mutationRepetitions: calibration.qualification?.mutationRepetitions,
+      ...(calibration.qualification?.checks
+        ? { checks: [...calibration.qualification.checks].sort() } : {}),
+      ...(calibration.qualification?.featureCatalog
+        ? { featureCatalog: calibration.qualification.featureCatalog } : {}),
+      ...(calibration.qualification?.runner ? { runner: calibration.qualification.runner } : {}),
+      stacks: (calibration.qualification?.stacks ?? []).map(stack => ({
+        id: stack.id, supported: stack.status !== 'unsupported',
+      })).sort((a, b) => a.id.localeCompare(b.id)),
+    },
+    equivalenceDecisions: calibration.equivalenceDecisions,
+    ...(calibration.qualificationReuse ? { qualificationReuse: calibration.qualificationReuse } : {}),
+  });
+  return { id: calibration.id, version: calibration.version,
+    sha256: sha256(canonicalDefinitionJson(document)) };
+}
+
+export function calibrationQualificationRelease<
+  T extends Pick<RecipeRelease, 'scoring' | 'checkCatalog'>>(
+  calibration: { qualification: { checks?: string[] } },
+  release: T,
+  execution: RecipeExecution[],
+  { source = '<calibration>' }: { source?: string } = {}):
+  { release: T; execution: RecipeExecution[] } {
+  const requested = new Set(calibration.qualification.checks
+    ?? release.checkCatalog.map(check => check.stableKey));
+  const checkCatalog = release.checkCatalog.filter(check => requested.delete(check.stableKey));
+  if (requested.size) {
+    fail(`${source}.qualification.checks`, `contains unknown checks: ${
+      [...requested].sort().join(', ')}`);
+  }
+  if (checkCatalog.length === 0) fail(`${source}.qualification.checks`, 'selects no checks');
+  const executionIds = new Set(checkCatalog.map(check => check.executionId));
+  return {
+    release: { ...release, checkCatalog, scoring: { ...release.scoring,
+      checks: checkCatalog.length,
+      points: checkCatalog.reduce((total, check) => total + check.points, 0) } },
+    execution: execution.filter(entry => executionIds.has(entry.id)),
+  };
+}
+
+export function compileCalibrationFile(calibrationPath: string,
+  { trackRoot, stackBenchRoot, release }:
+    { trackRoot: string; stackBenchRoot?: string; release: RecipeRelease }): CalibrationPlan {
+  if (!release) throw new Error('calibration compilation requires the resolved recipe release');
+  const root = realpathSync(resolve(trackRoot));
+  const benchRoot = realpathSync(resolve(stackBenchRoot ?? resolve(root, '..', '..')));
+  const calibrationRef = contained(root, root, calibrationPath, 'calibration path');
+  const absolute = calibrationRef.absolute;
+  const source = relative(root, absolute).replaceAll('\\', '/');
+  const calibration = compileCalibrationDefinition(
+    readDefinitionJson(absolute, 'calibration'), { source });
+  if (calibration.track !== release.track) fail(`${source}.track`, `expected ${release.track}`);
+  for (const [field, declared] of [['id', calibration.recipe.id],
+    ['version', calibration.recipe.version],
+    ['meaningSha256', calibration.recipe.meaningSha256],
+    ['executionSha256', calibration.recipe.executionSha256],
+    ['contentSha256', calibration.recipe.contentSha256]] as const) {
+    if (declared !== release[field]) {
+      fail(`${source}.recipe.${field}`, `does not match resolved recipe ${release.id}@${release.version}`);
+    }
+  }
+  const recipeRef = contained(root, dirname(absolute), calibration.recipe.path, `${source}.recipe.path`);
+  if (!release.sourceManifest.some(entry => entry.path === recipeRef.relative && entry.kinds.includes('recipe'))) {
+    fail(`${source}.recipe.path`, 'does not name the resolved recipe source');
+  }
+  const execution = executionPlanForRelease(recipeRef.absolute, {
+    trackRoot: root,
+    level: Number(calibration.promotion.alias.slice(1)),
+  });
+  if (calibration.qualification.featureCatalog) {
+    const declared = calibration.qualification.featureCatalog;
+    const fullCatalog = resolveFeatureCatalog(`${declared.id}@${declared.version}`,
+      { dir: root, name: release.track });
+    const qualificationLevel = Number(calibration.promotion.alias.slice(1));
+    const levels = progressionLevels(fullCatalog).filter(level => level <= qualificationLevel);
+    const catalog = selectFeatureCatalogLevels(fullCatalog, levels);
+    if (catalog.identity.sha256 !== declared.sha256) {
+      fail(`${source}.qualification.featureCatalog.sha256`, 'is stale');
+    }
+    const catalogChecks = catalog.definition.nodes
+      .flatMap(node => node.gradingChecks.map(check => check.id)).sort();
+    const selectedChecks = [...(calibration.qualification.checks ?? [])].sort();
+    if (canonicalDefinitionJson(catalogChecks) !== canonicalDefinitionJson(selectedChecks)) {
+      fail(`${source}.qualification.checks`, 'does not match the feature catalog level selection');
+    }
+  }
+  const { release: qualificationRelease, execution: qualificationExecution }
+    = calibrationQualificationRelease(calibration, release, execution, { source });
+  if (calibration.fixture.id !== release.components.fixture.id
+    || calibration.fixture.version !== release.components.fixture.version) {
+    fail(`${source}.fixture`, 'does not match the resolved fixture identity');
+  }
+  if (release.components.fixture.sha256 !== calibration.fixture.sourceSha256) {
+    fail(`${source}.fixture.sourceSha256`, 'does not match the resolved fixture source');
+  }
+
+  const registryRef = contained(benchRoot, benchRoot, calibration.references.registryPath,
+    `${source}.references.registryPath`);
+  const registry = loadReferenceRegistry(registryRef.absolute);
+  const registryValidation = validateReferenceRegistry(registry, { root: benchRoot });
+  if (!registryValidation.ok) fail(`${source}.references`, registryValidation.issues.join('; '));
+  const references = calibration.references.entries.map((selection, index) => {
+    const entry = registry.fixtures.find(candidate => candidate.id === selection.id);
+    const at = `${source}.references.entries[${index}]`;
+    if (!entry) fail(`${at}.id`, 'is absent from the reference registry');
+    if (entry.backend !== selection.backend || entry.track !== release.track) {
+      fail(at, 'targets a different backend or track');
+    }
+    if (read(entry, 'imported', 'sourceSha256') !== selection.sourceSha256) {
+      fail(`${at}.sourceSha256`, 'is stale');
+    }
+    return {
+      ...selection,
+      status: entry.status,
+      ...(entry.targetPath ? { targetPath: entry.targetPath } : {}),
+    };
+  });
+
+  const releaseStableKeys = new Set(release.checkCatalog.map(check => check.stableKey));
+  const qualifiedStableKeys = new Set(qualificationRelease.checkCatalog.map(check => check.stableKey));
+  const mutationTargetRefs = new Map();
+  const mutationCoverage = new Map();
+  const mutations = calibration.mutations.map((selection, index) => {
+    const at = `${source}.mutations[${index}]`;
+    const ref = contained(benchRoot, benchRoot, selection.path, `${at}.path`);
+    const digest = sha256(readFileSync(ref.absolute));
+    if (digest !== selection.sha256) fail(`${at}.sha256`, `stale digest for ${selection.path}`);
+    const manifest = readDefinitionJson(ref.absolute, 'mutation manifest');
+    if (!isObject(manifest)) fail(at, 'mutation manifest must be an object');
+    if (manifest.schemaVersion !== 2 || manifest.level !== undefined) {
+      fail(at, 'mutation manifest must use schema 2 and must not own a level');
+    }
+    const reference = references.find(candidate => candidate.id === selection.referenceId);
+    if (!reference || reference.backend !== selection.backend) fail(`${at}.referenceId`, 'does not match mutation backend');
+    if (manifest.backend !== selection.backend || manifest.track !== release.track) {
+      fail(at, 'mutation manifest targets another benchmark');
+    }
+    if (manifest.fixtureSha256 !== reference.sourceSha256) fail(at, 'mutation fixture hash does not match its reference');
+    const declared = manifest.mutations;
+    if (!Array.isArray(declared)) fail(at, 'mutation manifest must declare an array of mutations');
+    const definitions = validateMutationDefinitions(declared as MutationDefinition[],
+      { defaultScenario: typeof manifest.scenario === 'string' ? manifest.scenario : null,
+        requireScenario: true });
+    if (!definitions.ok) fail(at, `invalid mutation definitions: ${definitions.issues.map(issue => issue.kind).join(', ')}`);
+    const selectedMutations = [];
+    const targets = [];
+    const covered = mutationCoverage.get(selection.backend) ?? new Set();
+    for (const mutation of declared) {
+      const stableKeys = mutationTargetKeys(mutation);
+      const scopedKeys = stableKeys.filter(stableKey => qualifiedStableKeys.has(stableKey));
+      if (scopedKeys.length === 0) {
+        if (calibration.qualification.checks === undefined) {
+          fail(at, `mutation ${mutation.id} targets unknown recipe checks: ${stableKeys.join(', ')}`);
+        }
+        continue;
+      }
+      if (scopedKeys.length !== stableKeys.length) {
+        fail(at, `mutation ${mutation.id} spans qualification scope and unrelated checks`);
+      }
+      for (const stableKey of scopedKeys) {
+        if (!releaseStableKeys.has(stableKey)) {
+          fail(at, `mutation ${mutation.id} targets unknown recipe check ${stableKey}`);
+        }
+      }
+      selectedMutations.push(mutation);
+      for (const stableKey of scopedKeys) covered.add(stableKey);
+      const targetRef = `${selection.backend}:${mutation.id}`;
+      mutationTargetRefs.set(targetRef, new Set(scopedKeys));
+      targets.push({ id: mutation.id, stableKeys: scopedKeys });
+    }
+    mutationCoverage.set(selection.backend, covered);
+    return { ...selection, path: ref.relative, status: string(manifest.status, `${at}.status`),
+      executionSha256: mutationExecutionSha256(manifest, selectedMutations), targets };
+  });
+
+  if (calibration.promotion.status !== 'retired') {
+    const scoredKeys = qualificationRelease.checkCatalog.filter(check => check.points > 0)
+      .map(check => check.stableKey);
+    for (const stack of calibration.qualification.stacks.filter(stack =>
+      stack.status !== 'unsupported')) {
+      const covered = mutationCoverage.get(stack.id) ?? new Set();
+      const missing = scoredKeys.filter(key => !covered.has(key));
+      if (missing.length) {
+        fail(`${source}.mutations`, `${stack.id} does not cover scored checks: ${missing.join(', ')}`);
+      }
+    }
+  }
+
+  const zeroPoint = new Set(qualificationRelease.checkCatalog.filter(check => check.points === 0)
+    .map(check => check.stableKey));
+  const controls = calibration.controls.map((control, index) => {
+    const at = `${source}.controls[${index}]`;
+    if (!zeroPoint.delete(control.stableKey)) fail(`${at}.stableKey`, 'is not an unassigned zero-point check');
+    for (const target of control.mutationTargets) {
+      const stableKeys = mutationTargetRefs.get(target);
+      if (!stableKeys) fail(`${at}.mutationTargets`, `unknown mutation ${target}`);
+      if (!stableKeys.has(control.stableKey)) fail(`${at}.mutationTargets`, `${target} does not target this check`);
+    }
+    return control;
+  });
+  if (zeroPoint.size) fail(`${source}.controls`, `missing zero-point checks: ${[...zeroPoint].sort().join(', ')}`);
+
+  let qualificationReuse = calibration.qualificationReuse;
+  if (qualificationReuse) {
+    if (qualificationReuse.sourceRecipe.executionSha256 !== calibration.recipe.executionSha256) {
+      fail(`${source}.qualificationReuse.sourceRecipe.executionSha256`,
+        'must match the current recipe execution identity');
+    }
+    qualificationReuse.scopes.forEach((scope, index) => {
+      const reference = scope.kind === 'null' ? null
+        : references.find(candidate => candidate.backend === scope.stack) ?? null;
+      const mutation = scope.kind === 'mutation'
+        ? mutations.find(candidate => candidate.backend === scope.stack) ?? null : null;
+      const expected = qualificationScopeIdentity({
+        kind: scope.kind,
+        release: qualificationRelease,
+        stack: scope.stack ?? null,
+        reference,
+        mutation,
+        stackBenchRoot: benchRoot,
+      });
+      if (scope.toExecutableSha256 !== expected.executableSha256) {
+        fail(`${source}.qualificationReuse.scopes[${index}].toExecutableSha256`, 'is stale');
+      }
+    });
+    qualificationReuse = { ...qualificationReuse,
+      evidence: verifyEvidence(qualificationReuse.evidence, benchRoot,
+        `${source}.qualificationReuse.evidence`) };
+  }
+  const calibrated = { ...calibration, qualificationReuse,
+    references: { ...calibration.references, entries: references },
+    mutations } as Validated<CalibrationDefinition>;
+  const qualificationIdentity = calibrationQualificationIdentity(calibrated);
+  const verifiedEvidence = verifyQualificationEvidence(calibration.qualification.evidence, benchRoot,
+    `${source}.qualification.evidence`, {
+      calibration: calibrated,
+      qualificationIdentity,
+      release: qualificationRelease,
+      references,
+      execution: qualificationExecution,
+    });
+  const evidence = verifiedEvidence.entries;
+  const equivalenceDecisions = calibration.equivalenceDecisions.map((decision, index) => ({
+    ...decision,
+    evidence: verifyEvidence(decision.evidence, benchRoot, `${source}.equivalenceDecisions[${index}].evidence`),
+  }));
+  const catalogRef = contained(root, root, calibration.promotion.catalogPath,
+    `${source}.promotion.catalogPath`);
+  const catalogDigest = sha256(readFileSync(catalogRef.absolute));
+  if (catalogDigest !== calibration.promotion.catalogSha256) fail(`${source}.promotion.catalogSha256`, 'catalog digest is stale');
+  const catalog = compilePromotionFile(catalogRef.absolute, { trackRoot: root });
+  const aliasEntries = catalog.entries.filter(entry => entry.alias === calibration.promotion.alias
+    && entry.status === calibration.promotion.status);
+  if (!aliasEntries.some(entry => entry.recipe.id === release.id && entry.recipe.version === release.version)) {
+    fail(`${source}.promotion`, 'does not resolve to this recipe at the declared status');
+  }
+  if (calibration.promotion.status === 'promoted' && calibration.state !== 'qualified') {
+    fail(`${source}.promotion.status`, 'a promoted alias requires a qualified calibration');
+  }
+
+  if (calibration.state === 'qualified') {
+    if (release.state !== 'qualified') fail(`${source}.state`, 'cannot qualify a draft or retired recipe');
+    if (references.some(entry => entry.status !== 'active')) fail(`${source}.references`, 'qualified calibration requires active references');
+    if (mutations.some(entry => entry.status !== 'active')) fail(`${source}.mutations`, 'qualified calibration requires active mutations');
+    if (calibration.qualification.stacks.some(stack => stack.status !== 'qualified'
+      && stack.status !== 'unsupported')) {
+      fail(`${source}.qualification.stacks`, 'every supported stack must be qualified');
+    }
+    if (evidence.length === 0) fail(`${source}.qualification.evidence`, 'qualified calibration requires evidence');
+  }
+
+  const supportedStacks = new Set(calibration.qualification.stacks
+    .filter(stack => stack.status !== 'unsupported').map(stack => stack.id));
+  const referenceStacks = new Set(references.map(entry => entry.backend));
+  const mutationStacks = new Set(mutations.map(entry => entry.backend));
+  for (const stack of supportedStacks) {
+    if (!referenceStacks.has(stack)) fail(`${source}.references`, `missing supported stack ${stack}`);
+    if (!mutationStacks.has(stack)) fail(`${source}.mutations`, `missing supported stack ${stack}`);
+  }
+  for (const stack of referenceStacks) {
+    if (!supportedStacks.has(stack)) fail(`${source}.references`, `undeclared or unsupported stack ${stack}`);
+  }
+  for (const stack of mutationStacks) {
+    if (!supportedStacks.has(stack)) fail(`${source}.mutations`, `undeclared or unsupported stack ${stack}`);
+  }
+  if (calibration.state === 'qualified') {
+    const expectedEvidence = [];
+    for (const stack of supportedStacks) {
+      for (let repetition = 1; repetition <= calibration.qualification.referenceRepetitions; repetition += 1) {
+        expectedEvidence.push(`reference:${stack}:${repetition}`);
+      }
+      for (let repetition = 1; repetition <= calibration.qualification.mutationRepetitions; repetition += 1) {
+        expectedEvidence.push(`mutation:${stack}:${repetition}`);
+      }
+    }
+    for (let repetition = 1; repetition <= calibration.nullControl.repetitions; repetition += 1) {
+      expectedEvidence.push(`null::${repetition}`);
+    }
+    const actualEvidence = evidence.map(entry => `${entry.kind}:${entry.stack ?? ''}:${entry.repetition}`);
+    if (new Set(actualEvidence).size !== actualEvidence.length
+      || canonicalDefinitionJson([...actualEvidence].sort()) !== canonicalDefinitionJson(expectedEvidence.sort())) {
+      fail(`${source}.qualification.evidence`, 'must contain exactly the declared reference, mutation, and null repetitions');
+    }
+  }
+
+  const planInput = {
+    calibrationSchemaVersion: CALIBRATION_SCHEMA_VERSION,
+    id: calibration.id,
+    version: calibration.version,
+    state: calibration.state,
+    title: calibration.title,
+    track: calibration.track,
+    recipe: { ...calibration.recipe, path: recipeRef.relative },
+    fixture: calibration.fixture,
+    references: { registryPath: registryRef.relative,
+      entries: references.sort((a, b) => a.backend.localeCompare(b.backend)) },
+    mutations: mutations.map(entry => ({ ...entry,
+      targets: entry.targets.map(target => ({ ...target, stableKeys: [...target.stableKeys].sort() }))
+        .sort((a, b) => a.id.localeCompare(b.id)),
+    })).sort((a, b) => a.backend.localeCompare(b.backend)),
+    nullControl: calibration.nullControl,
+    controls: controls.map(control => ({ ...control,
+      mutationTargets: [...control.mutationTargets].sort() }))
+      .sort((a, b) => a.stableKey.localeCompare(b.stableKey)),
+    qualification: { ...calibration.qualification,
+      ...(verifiedEvidence.buildImage ? { buildImage: verifiedEvidence.buildImage } : {}),
+      stacks: [...calibration.qualification.stacks].sort((a, b) => a.id.localeCompare(b.id)),
+      evidence: evidence.sort((a, b) => `${a.kind}:${a.stack ?? ''}:${a.repetition}`
+        .localeCompare(`${b.kind}:${b.stack ?? ''}:${b.repetition}`)) },
+    equivalenceDecisions: equivalenceDecisions.sort((a, b) =>
+      `${a.fromExecutionSha256}:${a.toExecutionSha256}`
+        .localeCompare(`${b.fromExecutionSha256}:${b.toExecutionSha256}`)),
+    ...(qualificationReuse ? { qualificationReuse: { ...qualificationReuse,
+      scopes: [...qualificationReuse.scopes].sort((a, b) => `${a.kind}:${a.stack ?? ''}`
+        .localeCompare(`${b.kind}:${b.stack ?? ''}`)) } } : {}),
+    promotion: { ...calibration.promotion, catalogPath: catalogRef.relative },
+  };
+  const plan = canonicalizeDefinition(planInput);
+  if (!isObject(plan)) fail(source, 'could not be canonicalized');
+  const qualificationSha256 = calibrationQualificationIdentity(planInput).sha256;
+  return { ...plan, qualificationSha256,
+    contentSha256: sha256(canonicalDefinitionJson({ ...plan, qualificationSha256 })),
+    qualificationStaleness: verifiedEvidence.staleness } as CalibrationPlan;
+}
+
+export function calibrationCoversAlias(calibration: CalibrationPlan,
+  release: RecipeRelease, alias: string,
+  { catalog, catalogPath, trackRoot }:
+    { catalog: unknown; catalogPath: string; trackRoot: string }): boolean {
+  const exactAlias = calibration.promotion.alias === alias;
+  const coveredAliases = calibration.promotion.coveredAliases ?? [calibration.promotion.alias];
+  if (!coveredAliases.includes(alias)) return false;
+  if (!exactAlias && !calibration.qualification.featureCatalog) return false;
+  const requestedLevel = Number(alias.slice(1));
+  const qualifiedLevel = Number(calibration.promotion.alias.slice(1));
+  if (!Number.isInteger(requestedLevel) || requestedLevel < 1 || requestedLevel > qualifiedLevel) {
+    return false;
+  }
+  const entries = read(catalog, 'entries');
+  if (!Array.isArray(entries)) return false;
+  return entries.some(entry => read(entry, 'alias') === alias
+    && read(entry, 'status') === calibration.promotion.status
+    && read(entry, 'recipe', 'id') === release.id
+    && read(entry, 'recipe', 'version') === release.version
+    && calibration.recipe.contentSha256 === release.contentSha256
+    && contained(trackRoot, dirname(catalogPath), read(entry, 'recipe', 'path'),
+      `calibration alias ${alias}`).relative === calibration.recipe.path);
+}
+
+export function resolveCalibrationForRelease(release: RecipeRelease | null,
+  { trackRoot, stackBenchRoot, alias = null }:
+    { trackRoot: string; stackBenchRoot?: string; alias?: string | null }): CalibrationPlan | null {
+  if (!release) return null;
+  const root = realpathSync(resolve(trackRoot));
+  const directory = join(root, 'composition', 'calibrations');
+  if (!existsSync(directory)) return null;
+  const matches = [];
+  for (const name of readdirSync(directory).filter(file => file.endsWith('.json')).sort()) {
+    const path = join(directory, name);
+    const raw = readDefinitionJson(path, 'calibration');
+    if (read(raw, 'recipe', 'id') !== release.id
+      || read(raw, 'recipe', 'version') !== release.version
+      || read(raw, 'recipe', 'contentSha256') !== release.contentSha256) continue;
+    matches.push(compileCalibrationFile(path, { trackRoot: root, stackBenchRoot, release }));
+  }
+  const selected = alias === null ? matches : matches.filter(calibration => {
+    const catalogPath = resolve(root, calibration.promotion.catalogPath);
+    const catalog = compilePromotionFile(catalogPath, { trackRoot: root });
+    return calibrationCoversAlias(calibration, release, alias,
+      { catalog, catalogPath, trackRoot: root });
+  });
+  if (selected.length > 1) {
+    const scope = alias === null ? '' : ` for ${alias}`;
+    throw new Error(`multiple calibrations match ${release.id}@${release.version}${scope} (${release.contentSha256})`);
+  }
+  return selected[0] ?? null;
+}
diff --git a/tools/stack-bench/src/composition/composition-compiler.ts b/tools/stack-bench/src/composition/composition-compiler.ts
new file mode 100644
index 00000000000..ae725c149c1
--- /dev/null
+++ b/tools/stack-bench/src/composition/composition-compiler.ts
@@ -0,0 +1,1211 @@
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
+import { dirname, relative, resolve, sep } from 'node:path';
+
+import { compileScenarioDefinition } from './definition-compiler.js';
+import { readDefinitionJson } from './definition-plan.js';
+import { isExactSemanticVersion } from '../semantic-version.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+// Each compiler validates a cloned record field by field and returns that same
+// record. The intersection is what lets the proven record be read back as the
+// shape it was proven to be.
+type Validated<T> = T & UnknownRecord;
+
+import type { CompiledFeature, CompiledScenarioDefinition, CompiledStep } from './definition-compiler.js';
+
+export interface TaskFragmentDefinition {
+  id: string;
+  path: string;
+  order: number;
+  from?: string;
+  until?: string;
+  modes?: string[];
+  requiresFeatures?: string[];
+}
+
+export interface CompiledTaskFragment
+  extends Omit<TaskFragmentDefinition, 'from' | 'until' | 'modes'> {
+  from: string | null;
+  until: string | null;
+  modes: string[];
+  text: string;
+}
+
+export interface CompiledOwnedTaskFragment extends CompiledTaskFragment {
+  owners: string[];
+  ownerConditions?: Array<{
+    owner: string;
+    modes: string[];
+    requiresFeatures: string[];
+  }>;
+  requiresFeatures?: string[];
+}
+
+export interface PackCheck {
+  id: string;
+  stableId?: string;
+  source: string;
+  feature: number;
+  criteria?: string[];
+  role: string;
+  observations?: string[];
+  requiresFeatures?: string[];
+}
+
+export type CompiledPackBudget =
+  | { status: 'unmeasured'; maxRuntimeMs?: never }
+  | { status: 'bounded'; maxRuntimeMs: number };
+
+export interface CompiledPackDefinition {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  stableId?: string;
+  version: string;
+  state: string;
+  title: string;
+  description?: string;
+  moduleType?: string;
+  requiresPacks: string[];
+  conflictsWith: string[];
+  capabilities: string[];
+  evidence: string[];
+  budget: CompiledPackBudget;
+  task: ValidatedTaskFragmentSet;
+  checks: PackCheck[];
+}
+
+export interface FixtureItem {
+  name: string;
+  price: string;
+  category: string;
+  stock: Record<string, number>;
+}
+
+export interface FixtureAccount {
+  username: string;
+  password: string;
+  roles: string[];
+}
+
+export interface CompiledFixtureDefinition {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  warehouses: string[];
+  items: FixtureItem[];
+  accounts: FixtureAccount[];
+  empty: string[];
+}
+
+export interface SelectedCheckGroup {
+  packId: string;
+  packVersion: string;
+  stablePackId?: string;
+  moduleType?: string;
+  checkGroupId: string;
+  role: string;
+  observations?: string[];
+  requiresFeatures?: string[];
+  source: string;
+  feature: CompiledFeature;
+  actions: string[];
+}
+
+export interface SelectedCheck {
+  stableKey: string;
+  packId: string;
+  stablePackId?: string;
+  checkGroupId: string;
+  criterionId: string;
+  role: string;
+  observations?: string[];
+  requiresFeatures?: string[];
+  source: string;
+  featureId: number;
+  description: string;
+  sourcePoints: number;
+  points: number;
+}
+
+export interface CompiledRecipePlan {
+  compositionSchemaVersion: number;
+  recipe: {
+    id: string;
+    version: string;
+    state: string;
+    title: string;
+    track: string;
+    sequence: { level: number } | null;
+    task: {
+      mode: string;
+      baseRecipe: { id: string; version: string; path: string } | null;
+      requirements: CompiledOwnedTaskFragment[];
+      contracts: CompiledOwnedTaskFragment[];
+      requirementText: string;
+      contractText: string;
+    };
+  };
+  fixture: CompiledFixtureDefinition;
+  packs: Array<{
+    id: string;
+    stableId?: string;
+    version: string;
+    state: string;
+    title: string;
+    moduleType?: string;
+    path: string;
+    includeRoles: string[];
+    includeCheckGroups?: string[];
+    requiresPacks: string[];
+    capabilities: string[];
+    evidence: string[];
+    budget: CompiledPackBudget;
+    task: { requirementIds: string[]; contractIds: string[] };
+    actions: string[];
+  }>;
+  capabilities: string[];
+  execution: Array<{ id: string; source: string; checkGroups: SelectedCheckGroup[] }>;
+  checks: SelectedCheck[];
+  scoring: { mode: string; checks: number; points: number };
+}
+
+export interface PromotionEntry {
+  alias: string;
+  status: string;
+  recipe: { id: string; version: string; path: string };
+}
+
+export interface CompiledPromotionDefinition {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  entries: PromotionEntry[];
+}
+
+export interface CompiledPromotionCatalog {
+  compositionSchemaVersion: number;
+  catalog: { id: string; version: string; state: string; title: string };
+  entries: PromotionEntry[];
+}
+
+export type CompiledRecipeRelease = CompiledRecipePlan;
+
+export const COMPOSITION_SCHEMA_VERSION = 1;
+
+const ID = /^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;
+const STATES = new Set(['draft', 'qualified', 'retired']);
+const ROLES = new Set(['feature', 'guarantee', 'control']);
+const MODULE_TYPES = new Set(['feature', 'specification']);
+const BUDGET_STATUSES = new Set(['unmeasured', 'bounded']);
+const OBSERVATIONS = new Set(['requested', 'unmentioned']);
+
+const isMember = (allowed: Set<string>, value: unknown): boolean =>
+  typeof value === 'string' && allowed.has(value);
+
+const isOneOf = (value: unknown, allowed: readonly string[]): boolean =>
+  typeof value === 'string' && allowed.includes(value);
+
+const isObject = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+function fail(at: string, message: string): never {
+  throw new Error(`invalid benchmark composition at ${at}: ${message}`);
+}
+
+function strictObject(value: unknown, at: string,
+  allowed: Set<string>): asserts value is UnknownRecord {
+  if (!isObject(value)) fail(at, 'must be an object');
+  for (const key of Object.keys(value)) {
+    if (!allowed.has(key)) fail(`${at}.${key}`, 'unknown field');
+  }
+}
+
+function string(value: unknown, at: string,
+  { nonEmpty = true }: { nonEmpty?: boolean } = {}): string {
+  if (typeof value !== 'string' || (nonEmpty && value.trim().length === 0)) {
+    fail(at, `must be a${nonEmpty ? ' non-empty' : ''} string`);
+  }
+  return value;
+}
+
+function id(value: unknown, at: string): string {
+  const text = string(value, at);
+  if (!ID.test(text)) fail(at, 'must contain lowercase letters, numbers, dots, dashes, or underscores');
+  return text;
+}
+
+function version(value: unknown, at: string): string {
+  const text = string(value, at);
+  if (!isExactSemanticVersion(text)) fail(at, 'must be an exact semantic version');
+  return text;
+}
+
+function exactRef(value: unknown, at: string): string {
+  const text = string(value, at);
+  const split = text.lastIndexOf('@');
+  if (split < 1) fail(at, 'must be an exact id@version reference');
+  id(text.slice(0, split), `${at} id`);
+  version(text.slice(split + 1), `${at} version`);
+  return text;
+}
+
+function uniqueStrings(value: unknown, at: string): string[] {
+  if (!Array.isArray(value)) fail(at, 'must be an array');
+  const seen = new Set<string>();
+  return value.map((item, index) => {
+    const text = string(item, `${at}[${index}]`);
+    if (seen.has(text)) fail(`${at}[${index}]`, `duplicates ${JSON.stringify(text)}`);
+    seen.add(text);
+    return text;
+  });
+}
+
+function identityFields(value: UnknownRecord, at: string, kind: string): void {
+  if (value.schemaVersion !== COMPOSITION_SCHEMA_VERSION) {
+    fail(`${at}.schemaVersion`, `must be ${COMPOSITION_SCHEMA_VERSION}`);
+  }
+  if (value.kind !== kind) fail(`${at}.kind`, `must be ${JSON.stringify(kind)}`);
+  id(value.id, `${at}.id`);
+  version(value.version, `${at}.version`);
+  if (!isMember(STATES, value.state)) fail(`${at}.state`, 'must be draft, qualified, or retired');
+  string(value.title, `${at}.title`);
+}
+
+function contained(root: string, from: string, path: unknown,
+  at: string): { absolute: string; relative: string } {
+  const text = string(path, at);
+  const lexicalRoot = resolve(root);
+  const candidate = resolve(from, text);
+  const lexicalRelative = relative(lexicalRoot, candidate);
+  if (lexicalRelative === '..' || lexicalRelative.startsWith(`..${sep}`)) {
+    fail(at, `escapes ${lexicalRoot}`);
+  }
+  if (!existsSync(candidate)) fail(at, `does not exist: ${text}`);
+  const rootPath = realpathSync(lexicalRoot);
+  const target = realpathSync(candidate);
+  const rel = relative(rootPath, target);
+  if (rel === '..' || rel.startsWith(`..${sep}`)) fail(at, `escapes ${rootPath}`);
+  return { absolute: target, relative: rel.replaceAll('\\', '/') };
+}
+
+const PACK_FIELDS = new Set([
+  'schemaVersion', 'kind', 'id', 'version', 'state', 'title', 'description',
+  'moduleType', 'stableId', 'requiresPacks', 'conflictsWith', 'capabilities', 'evidence', 'budget',
+  'task', 'checks',
+]);
+const CHECK_REF_FIELDS = new Set([
+  'id', 'stableId', 'source', 'feature', 'criteria', 'role', 'observations', 'requiresFeatures',
+]);
+const BUDGET_FIELDS = new Set(['status', 'maxRuntimeMs']);
+const PACK_TASK_FIELDS = new Set(['requirements', 'contracts']);
+const TASK_FRAGMENT_FIELDS = new Set([
+  'id', 'path', 'order', 'from', 'until', 'modes', 'requiresFeatures',
+]);
+const TASK_MODES = new Set(['fresh', 'upgrade']);
+const RECIPE_TASK_MODES = new Set([...TASK_MODES, 'action']);
+
+type ValidatedTaskFragment = {
+  id: string;
+  path: string;
+  order: number;
+  from?: string;
+  until?: string;
+  modes: string[];
+  requiresFeatures?: string[];
+};
+
+type ValidatedTaskFragmentSet = {
+  requirements: ValidatedTaskFragment[];
+  contracts: ValidatedTaskFragment[];
+};
+
+function taskFragmentDefinition(fragment: unknown, at: string): ValidatedTaskFragment {
+  strictObject(fragment, at, TASK_FRAGMENT_FIELDS);
+  id(fragment.id, `${at}.id`);
+  string(fragment.path, `${at}.path`);
+  if (!Number.isInteger(fragment.order) || Number(fragment.order) < 0) {
+    fail(`${at}.order`, 'must be a non-negative integer');
+  }
+  if (fragment.from !== undefined) string(fragment.from, `${at}.from`);
+  if (fragment.until !== undefined) string(fragment.until, `${at}.until`);
+  const modes = uniqueStrings(fragment.modes ?? ['fresh', 'upgrade'], `${at}.modes`);
+  fragment.modes = modes;
+  if (modes.length === 0) fail(`${at}.modes`, 'must not be empty');
+  for (const mode of modes) {
+    if (!isMember(TASK_MODES, mode)) fail(`${at}.modes`, `unknown task mode ${mode}`);
+  }
+  if (fragment.requiresFeatures !== undefined) {
+    const requiresFeatures = uniqueStrings(fragment.requiresFeatures, `${at}.requiresFeatures`).sort();
+    fragment.requiresFeatures = requiresFeatures;
+    if (requiresFeatures.length === 0) fail(`${at}.requiresFeatures`, 'must not be empty');
+    for (const featureId of requiresFeatures) id(featureId, `${at}.requiresFeatures`);
+  }
+  return fragment as ValidatedTaskFragment;
+}
+
+function taskFragmentSet(value: unknown, at: string): ValidatedTaskFragmentSet {
+  strictObject(value, at, PACK_TASK_FIELDS);
+  const seen = new Set<string>();
+  const compile = (fragments: unknown, kind: string): ValidatedTaskFragment[] => {
+    if (!Array.isArray(fragments)) fail(`${at}.${kind}`, 'must be an array');
+    return fragments.map((fragment, index) => {
+      const compiled = taskFragmentDefinition(fragment, `${at}.${kind}[${index}]`);
+      const key = `${kind}:${compiled.id}`;
+      if (seen.has(key)) fail(`${at}.${kind}[${index}].id`, `duplicates ${JSON.stringify(compiled.id)}`);
+      seen.add(key);
+      return compiled;
+    });
+  };
+  return {
+    requirements: compile(value.requirements ?? [], 'requirements'),
+    contracts: compile(value.contracts ?? [], 'contracts'),
+  };
+}
+
+export function resolveTaskFragment(fragmentInput: unknown,
+  { trackRoot, source = '<task-fragment>', sourceCache = new Map<string, string>() }:
+    { trackRoot: string; source?: string; sourceCache?: Map<string, string> }):
+  CompiledTaskFragment {
+  if (!trackRoot) throw new Error('task fragment resolution requires trackRoot');
+  const fragment = taskFragmentDefinition(structuredClone(fragmentInput), source);
+  const root = resolve(trackRoot);
+  const sourceRef = contained(root, root, fragment.path, `${source}.path`);
+  let sourceText = sourceCache.get(sourceRef.relative);
+  if (sourceText === undefined) {
+    sourceText = readFileSync(sourceRef.absolute, 'utf8');
+    sourceCache.set(sourceRef.relative, sourceText);
+  }
+  let start = 0;
+  if (fragment.from !== undefined) {
+    start = sourceText.indexOf(fragment.from);
+    if (start < 0) fail(`${source}.from`, `marker not found in ${sourceRef.relative}`);
+    if (sourceText.indexOf(fragment.from, start + 1) >= 0) {
+      fail(`${source}.from`, `marker is not unique in ${sourceRef.relative}`);
+    }
+  }
+  let end = sourceText.length;
+  if (fragment.until !== undefined) {
+    end = sourceText.indexOf(fragment.until, start);
+    if (end < 0) fail(`${source}.until`, `marker not found after fragment start in ${sourceRef.relative}`);
+    if (sourceText.indexOf(fragment.until, end + 1) >= 0) {
+      fail(`${source}.until`, `marker is not unique in ${sourceRef.relative}`);
+    }
+  }
+  if (end <= start) fail(source, 'must select non-empty text in source order');
+  return {
+    id: fragment.id,
+    path: sourceRef.relative,
+    order: fragment.order,
+    from: fragment.from ?? null,
+    until: fragment.until ?? null,
+    modes: [...fragment.modes].sort(),
+    ...(fragment.requiresFeatures === undefined ? {} : { requiresFeatures: fragment.requiresFeatures }),
+    text: sourceText.slice(start, end),
+  };
+}
+
+export function compilePackDefinition(input: unknown,
+  { source = '<pack>' }: { source?: string } = {}): CompiledPackDefinition {
+  const pack = structuredClone(input);
+  strictObject(pack, source, PACK_FIELDS);
+  identityFields(pack, source, 'test-pack');
+  if (pack.stableId !== undefined) id(pack.stableId, `${source}.stableId`);
+  if (pack.moduleType !== undefined && !isMember(MODULE_TYPES, pack.moduleType)) {
+    fail(`${source}.moduleType`, 'must be feature or specification');
+  }
+  if (pack.description !== undefined) string(pack.description, `${source}.description`);
+  const requiresPacks = uniqueStrings(pack.requiresPacks ?? [], `${source}.requiresPacks`);
+  const conflictsWith = uniqueStrings(pack.conflictsWith ?? [], `${source}.conflictsWith`);
+  pack.requiresPacks = requiresPacks;
+  pack.conflictsWith = conflictsWith;
+  requiresPacks.forEach((ref, index) => exactRef(ref, `${source}.requiresPacks[${index}]`));
+  conflictsWith.forEach((ref, index) => exactRef(ref, `${source}.conflictsWith[${index}]`));
+  const capabilities = uniqueStrings(pack.capabilities ?? [], `${source}.capabilities`);
+  pack.capabilities = capabilities;
+  if (capabilities.length === 0) fail(`${source}.capabilities`, 'must not be empty');
+  const evidence = uniqueStrings(pack.evidence ?? [], `${source}.evidence`);
+  pack.evidence = evidence;
+  if (evidence.length === 0) fail(`${source}.evidence`, 'must not be empty');
+  const budget = pack.budget;
+  strictObject(budget, `${source}.budget`, BUDGET_FIELDS);
+  if (!isMember(BUDGET_STATUSES, budget.status)) {
+    fail(`${source}.budget.status`, 'must be unmeasured or bounded');
+  }
+  if (budget.status === 'bounded') {
+    if (!Number.isInteger(budget.maxRuntimeMs) || Number(budget.maxRuntimeMs) < 1) {
+      fail(`${source}.budget.maxRuntimeMs`, 'must be a positive integer for a bounded budget');
+    }
+  } else if (budget.maxRuntimeMs !== undefined) {
+    fail(`${source}.budget.maxRuntimeMs`, 'is allowed only for a bounded budget');
+  }
+  if (pack.state === 'qualified' && budget.status !== 'bounded') {
+    fail(`${source}.budget`, 'qualified packs require a bounded runtime budget');
+  }
+  const task = taskFragmentSet(pack.task, `${source}.task`);
+  pack.task = task;
+  if (task.requirements.length === 0) {
+    fail(`${source}.task.requirements`, 'must not be empty');
+  }
+  const checks = pack.checks;
+  if (!Array.isArray(checks) || checks.length === 0) {
+    fail(`${source}.checks`, 'must be a non-empty array');
+  }
+  const taskFragments = [...task.requirements, ...task.contracts];
+  if (pack.moduleType === 'feature'
+    && taskFragments.some(fragment => fragment.requiresFeatures !== undefined)) {
+    fail(`${source}.task`, 'feature module fragments cannot declare specification applicability');
+  }
+  if (pack.moduleType === 'specification'
+    && task.requirements.some(fragment => fragment.requiresFeatures === undefined)) {
+    fail(`${source}.task.requirements`,
+      'specification requirement fragments must declare applicable feature modules');
+  }
+  const checkIds = new Set<string>();
+  const validatedChecks = checks.map((check: unknown, index: number) => {
+    const at = `${source}.checks[${index}]`;
+    strictObject(check, at, CHECK_REF_FIELDS);
+    const checkId = id(check.id, `${at}.id`);
+    if (checkIds.has(checkId)) fail(`${at}.id`, `duplicate check group ${checkId}`);
+    checkIds.add(checkId);
+    if (check.stableId !== undefined) id(check.stableId, `${at}.stableId`);
+    string(check.source, `${at}.source`);
+    if (!Number.isInteger(check.feature) || Number(check.feature) < 1) {
+      fail(`${at}.feature`, 'must be a positive integer');
+    }
+    if (check.criteria !== undefined) {
+      const criteria = uniqueStrings(check.criteria, `${at}.criteria`);
+      check.criteria = criteria;
+      if (criteria.length === 0) fail(`${at}.criteria`, 'must not be empty');
+      for (const criterion of criteria) id(criterion, `${at}.criteria`);
+    }
+    if (!isMember(ROLES, check.role)) fail(`${at}.role`, 'must be feature, guarantee, or control');
+    if (check.observations !== undefined) {
+      const observations = uniqueStrings(check.observations, `${at}.observations`).sort();
+      check.observations = observations;
+      if (observations.length === 0) fail(`${at}.observations`, 'must not be empty');
+      for (const observation of observations) {
+        if (!isMember(OBSERVATIONS, observation)) {
+          fail(`${at}.observations`, `unknown observation class ${observation}`);
+        }
+      }
+    }
+    if (check.requiresFeatures !== undefined) {
+      const requiresFeatures = uniqueStrings(check.requiresFeatures, `${at}.requiresFeatures`).sort();
+      check.requiresFeatures = requiresFeatures;
+      if (requiresFeatures.length === 0) fail(`${at}.requiresFeatures`, 'must not be empty');
+      for (const featureId of requiresFeatures) id(featureId, `${at}.requiresFeatures`);
+    }
+    return check;
+  });
+  if (pack.moduleType === 'feature') {
+    if (validatedChecks.some(check => check.role === 'guarantee')) {
+      fail(`${source}.checks`, 'feature modules cannot own guarantee checks');
+    }
+    if (validatedChecks.some(check => Array.isArray(check.observations)
+      && check.observations.includes('unmentioned'))) {
+      fail(`${source}.checks`, 'feature modules cannot own evaluations without prompting');
+    }
+    // A feature check can need another feature to prepare its grading scenario.
+    // This does not add a product dependency.
+  }
+  if (pack.moduleType === 'specification') {
+    if (validatedChecks.some(check => check.role === 'feature')) {
+      fail(`${source}.checks`, 'specification modules cannot own feature checks');
+    }
+    if (validatedChecks.some(check => check.observations === undefined)) {
+      fail(`${source}.checks`, 'specification modules must declare prompted and/or unprompted evaluation');
+    }
+    if (validatedChecks.some(check => check.requiresFeatures === undefined)) {
+      fail(`${source}.checks`, 'specification checks must declare applicable feature modules');
+    }
+  }
+  return pack as Validated<CompiledPackDefinition>;
+}
+
+const FIXTURE_FIELDS = new Set([
+  'schemaVersion', 'kind', 'id', 'version', 'state', 'title', 'warehouses',
+  'items', 'accounts', 'empty',
+]);
+const ITEM_FIELDS = new Set(['name', 'price', 'category', 'stock']);
+const ACCOUNT_FIELDS = new Set(['username', 'password', 'roles']);
+
+export function compileFixtureDefinition(input: unknown,
+  { source = '<fixture>' }: { source?: string } = {}): CompiledFixtureDefinition {
+  const fixture = structuredClone(input);
+  strictObject(fixture, source, FIXTURE_FIELDS);
+  identityFields(fixture, source, 'fixture-set');
+  const warehouses = uniqueStrings(fixture.warehouses, `${source}.warehouses`);
+  fixture.warehouses = warehouses;
+  if (warehouses.length === 0) fail(`${source}.warehouses`, 'must not be empty');
+  const items = fixture.items;
+  if (!Array.isArray(items) || items.length === 0) {
+    fail(`${source}.items`, 'must be a non-empty array');
+  }
+  const itemNames = new Set<unknown>();
+  items.forEach((item: unknown, index: number) => {
+    const at = `${source}.items[${index}]`;
+    strictObject(item, at, ITEM_FIELDS);
+    const name = string(item.name, `${at}.name`);
+    if (itemNames.has(name)) fail(`${at}.name`, `duplicate item ${name}`);
+    itemNames.add(name);
+    const price = string(item.price, `${at}.price`);
+    if (!/^\d+\.\d{2}$/.test(price)) fail(`${at}.price`, 'must be a decimal string with two places');
+    string(item.category, `${at}.category`);
+    const stock = item.stock;
+    strictObject(stock, `${at}.stock`, new Set(warehouses));
+    for (const warehouse of warehouses) {
+      if (!Number.isInteger(stock[warehouse]) || Number(stock[warehouse]) < 0) {
+        fail(`${at}.stock.${warehouse}`, 'must be a non-negative integer');
+      }
+    }
+    for (const warehouse of warehouses) {
+      if (!(warehouse in stock)) fail(`${at}.stock.${warehouse}`, 'is required');
+    }
+  });
+  const accounts = fixture.accounts;
+  if (!Array.isArray(accounts)) fail(`${source}.accounts`, 'must be an array');
+  const usernames = new Set<unknown>();
+  accounts.forEach((account: unknown, index: number) => {
+    const at = `${source}.accounts[${index}]`;
+    strictObject(account, at, ACCOUNT_FIELDS);
+    const username = string(account.username, `${at}.username`);
+    if (usernames.has(username)) fail(`${at}.username`, `duplicate account ${username}`);
+    usernames.add(username);
+    string(account.password, `${at}.password`);
+    const roles = uniqueStrings(account.roles, `${at}.roles`);
+    account.roles = roles;
+    if (roles.length === 0) fail(`${at}.roles`, 'must not be empty');
+  });
+  fixture.empty = uniqueStrings(fixture.empty ?? [], `${source}.empty`);
+  return fixture as Validated<CompiledFixtureDefinition>;
+}
+
+const RECIPE_FIELDS = new Set([
+  'schemaVersion', 'kind', 'id', 'version', 'state', 'title', 'track',
+  'fixture', 'task', 'packs', 'execution', 'scoring', 'sequence',
+]);
+const FILE_REF_FIELDS = new Set(['path', 'id', 'version']);
+const TASK_FIELDS = new Set(['mode', 'baseRecipe', 'framing']);
+const PACK_SELECTION_FIELDS = new Set(['path', 'id', 'version', 'includeRoles',
+  'includeCheckGroups']);
+const EXECUTION_FIELDS = new Set(['id', 'source']);
+const SCORING_FIELDS = new Set(['mode', 'weights']);
+const SEQUENCE_FIELDS = new Set(['level']);
+
+type FileRef = { path: string; id: string; version: string };
+
+type ValidatedRecipe = {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  track: string;
+  fixture: FileRef;
+  task: ({ mode: 'upgrade'; baseRecipe: FileRef }
+    | { mode: 'fresh' | 'action'; baseRecipe?: undefined })
+    & { framing: ValidatedTaskFragmentSet };
+  packs: Array<FileRef & { includeRoles: string[]; includeCheckGroups?: string[] }>;
+  execution: 'all-selected-sources' | Array<{ id: string; source: string }>;
+  scoring: { mode: 'explicit'; weights: Record<string, number> }
+    | { mode: 'source-points'; weights?: undefined };
+  sequence?: { level: number };
+} & UnknownRecord;
+
+type FragmentKind = 'requirements' | 'contracts';
+
+type ComposedFragment = CompiledOwnedTaskFragment;
+
+type SelectedPack = {
+  selection: ValidatedRecipe['packs'][number];
+  pack: CompiledPackDefinition;
+  path: string;
+};
+
+function validateFileRef(ref: unknown, at: string): asserts ref is FileRef {
+  strictObject(ref, at, FILE_REF_FIELDS);
+  string(ref.path, `${at}.path`);
+  id(ref.id, `${at}.id`);
+  version(ref.version, `${at}.version`);
+}
+
+export function compileRecipeDefinition(input: unknown,
+  { source = '<recipe>' }: { source?: string } = {}): ValidatedRecipe {
+  const recipe = structuredClone(input);
+  strictObject(recipe, source, RECIPE_FIELDS);
+  identityFields(recipe, source, 'benchmark-recipe');
+  id(recipe.track, `${source}.track`);
+  validateFileRef(recipe.fixture, `${source}.fixture`);
+  const task = recipe.task;
+  strictObject(task, `${source}.task`, TASK_FIELDS);
+  if (!isMember(RECIPE_TASK_MODES, task.mode)) {
+    fail(`${source}.task.mode`, 'must be fresh, upgrade, or action');
+  }
+  if (task.mode === 'upgrade') {
+    validateFileRef(task.baseRecipe, `${source}.task.baseRecipe`);
+  } else if (task.baseRecipe !== undefined) {
+    fail(`${source}.task.baseRecipe`, 'is allowed only for upgrade recipes');
+  }
+  const scoring = recipe.scoring;
+  if (task.mode !== 'action' && recipe.execution === 'all-selected-sources') {
+    fail(source, 'automatic execution requires an action recipe');
+  }
+  const framing = taskFragmentSet(task.framing, `${source}.task.framing`);
+  task.framing = framing;
+  if (framing.requirements.length === 0) {
+    fail(`${source}.task.framing.requirements`, 'must not be empty');
+  }
+  const packs = recipe.packs;
+  if (!Array.isArray(packs) || packs.length === 0) fail(`${source}.packs`, 'must not be empty');
+  const packIds = new Set<unknown>();
+  packs.forEach((selection: unknown, index: number) => {
+    const at = `${source}.packs[${index}]`;
+    strictObject(selection, at, PACK_SELECTION_FIELDS);
+    validateFileRef({ path: selection.path, id: selection.id, version: selection.version }, at);
+    if (packIds.has(selection.id)) fail(`${at}.id`, `duplicate selected pack ${selection.id}`);
+    packIds.add(selection.id);
+    const includeRoles = uniqueStrings(selection.includeRoles, `${at}.includeRoles`);
+    selection.includeRoles = includeRoles;
+    for (const role of includeRoles) {
+      if (!isMember(ROLES, role)) fail(`${at}.includeRoles`, `unknown role ${role}`);
+    }
+    if (selection.includeCheckGroups !== undefined) {
+      selection.includeCheckGroups = uniqueStrings(selection.includeCheckGroups,
+        `${at}.includeCheckGroups`);
+    }
+  });
+  const execution = recipe.execution;
+  if (execution !== 'all-selected-sources') {
+    if (!Array.isArray(execution) || execution.length === 0) {
+      fail(`${source}.execution`, 'must be a non-empty array or "all-selected-sources"');
+    }
+    const executionIds = new Set<unknown>();
+    const executionSources = new Set<unknown>();
+    execution.forEach((entry: unknown, index: number) => {
+      const at = `${source}.execution[${index}]`;
+      strictObject(entry, at, EXECUTION_FIELDS);
+      string(entry.id, `${at}.id`);
+      string(entry.source, `${at}.source`);
+      if (executionIds.has(entry.id)) fail(`${at}.id`, `duplicate execution id ${entry.id}`);
+      if (executionSources.has(entry.source)) fail(`${at}.source`, `duplicate execution source ${entry.source}`);
+      executionIds.add(entry.id);
+      executionSources.add(entry.source);
+    });
+  }
+  strictObject(scoring, `${source}.scoring`, SCORING_FIELDS);
+  if (!isOneOf(scoring.mode, ['source-points', 'explicit'])) {
+    fail(`${source}.scoring.mode`, 'must be source-points or explicit');
+  }
+  const weights = scoring.weights;
+  if (scoring.mode === 'explicit') {
+    if (!isObject(weights)) fail(`${source}.scoring.weights`, 'must be an object');
+    for (const [key, points] of Object.entries(weights)) {
+      string(key, `${source}.scoring.weights key`);
+      if (!Number.isInteger(points) || Number(points) < 0) {
+        fail(`${source}.scoring.weights.${key}`, 'must be a non-negative integer');
+      }
+    }
+  } else if (weights !== undefined) {
+    fail(`${source}.scoring.weights`, 'is allowed only with explicit scoring');
+  }
+  const sequence = recipe.sequence;
+  if (sequence !== undefined) {
+    strictObject(sequence, `${source}.sequence`, SEQUENCE_FIELDS);
+    if (!Number.isInteger(sequence.level) || Number(sequence.level) < 1) {
+      fail(`${source}.sequence.level`, 'must be a positive integer');
+    }
+    if (Number(sequence.level) === 1 && task.mode !== 'fresh') {
+      fail(`${source}.task.mode`, 'sequence level 1 must use fresh mode');
+    }
+    if (Number(sequence.level) > 1 && task.mode !== 'upgrade') {
+      fail(`${source}.task.mode`, 'sequence levels after 1 must use upgrade mode');
+    }
+  } else if (task.mode !== 'action') {
+    fail(`${source}.sequence`, 'is required for fresh and upgrade recipes');
+  }
+  return recipe as ValidatedRecipe;
+}
+
+export function compileRecipeFile(recipePath: string,
+  { trackRoot, availableCapabilities = null, recipeStack = [] }:
+    { trackRoot?: string; availableCapabilities?: string[] | null; recipeStack?: string[] } = {}):
+  CompiledRecipePlan {
+  const absoluteRecipe = realpathSync(resolve(recipePath));
+  const root = resolve(trackRoot ?? dirname(dirname(dirname(absoluteRecipe))));
+  const compositionRoot = resolve(root, 'composition');
+  const recipeSource = relative(root, absoluteRecipe).replaceAll('\\', '/');
+  if (recipeStack.includes(absoluteRecipe)) {
+    fail(recipeSource, `recipe dependency cycle: ${[...recipeStack, absoluteRecipe]
+      .map(path => relative(root, path).replaceAll('\\', '/')).join(' -> ')}`);
+  }
+  const recipe = compileRecipeDefinition(readDefinitionJson(absoluteRecipe, 'recipe'),
+    { source: recipeSource });
+  if (recipe.track !== root.split(sep).at(-1)) {
+    fail(`${recipeSource}.track`, `must match track directory ${root.split(sep).at(-1)}`);
+  }
+
+  const fixtureRef = contained(compositionRoot, dirname(absoluteRecipe), recipe.fixture.path,
+    `${recipeSource}.fixture.path`);
+  const fixture = compileFixtureDefinition(readDefinitionJson(fixtureRef.absolute, 'fixture'), {
+    source: relative(root, fixtureRef.absolute).replaceAll('\\', '/'),
+  });
+  if (fixture.id !== recipe.fixture.id || fixture.version !== recipe.fixture.version) {
+    fail(`${recipeSource}.fixture`, `expected ${recipe.fixture.id}@${recipe.fixture.version}, found ${fixture.id}@${fixture.version}`);
+  }
+  let baseRecipe: { id: string; version: string; path: string } | null = null;
+  if (recipe.task.mode === 'upgrade') {
+    const at = `${recipeSource}.task.baseRecipe`;
+    const base = recipe.task.baseRecipe;
+    const ref = contained(compositionRoot, dirname(absoluteRecipe), base.path, `${at}.path`);
+    const plan = compileRecipeFile(ref.absolute, { trackRoot: root, availableCapabilities,
+      recipeStack: [...recipeStack, absoluteRecipe] });
+    if (plan.recipe.id !== base.id || plan.recipe.version !== base.version) {
+      fail(at, `expected ${base.id}@${base.version}, found ${plan.recipe.id}@${plan.recipe.version}`);
+    }
+    if (recipe.state === 'qualified' && plan.recipe.state !== 'qualified') {
+      fail(at, `qualified upgrade recipe selects ${plan.recipe.state} base ${plan.recipe.id}@${plan.recipe.version}`);
+    }
+    baseRecipe = { id: plan.recipe.id, version: plan.recipe.version, path: ref.relative };
+  }
+
+  const selectedPacks: SelectedPack[] = [];
+  const selectedByRef = new Map<string, CompiledPackDefinition>();
+  for (const [index, selection] of recipe.packs.entries()) {
+    const at = `${recipeSource}.packs[${index}]`;
+    const packRef = contained(compositionRoot, dirname(absoluteRecipe), selection.path, `${at}.path`);
+    const pack = compilePackDefinition(readDefinitionJson(packRef.absolute, 'pack'), {
+      source: relative(root, packRef.absolute).replaceAll('\\', '/'),
+    });
+    if (pack.id !== selection.id || pack.version !== selection.version) {
+      fail(at, `expected ${selection.id}@${selection.version}, found ${pack.id}@${pack.version}`);
+    }
+    if (selection.includeRoles.length === 0
+      && (recipe.task.mode !== 'action' || pack.moduleType === undefined)) {
+      fail(`${at}.includeRoles`, 'can be empty only for an action catalog dependency');
+    }
+    const ref = `${pack.id}@${pack.version}`;
+    for (const groupId of selection.includeCheckGroups ?? []) {
+      const group = pack.checks.find(check => check.id === groupId);
+      if (!group) {
+        fail(`${at}.includeCheckGroups`, `unknown check group ${groupId}`);
+      }
+      if (!selection.includeRoles.includes(group.role)) {
+        fail(`${at}.includeCheckGroups`, `check group ${groupId} has excluded role ${group.role}`);
+      }
+    }
+    selectedByRef.set(ref, pack);
+    selectedPacks.push({ selection, pack, path: packRef.relative });
+  }
+  for (const { pack } of selectedPacks) {
+    for (const required of pack.requiresPacks) {
+      const dependency = selectedByRef.get(required);
+      if (!dependency) fail(`${pack.id}.requiresPacks`, `missing ${required}`);
+      if (pack.moduleType === 'feature' && dependency.moduleType !== 'feature') {
+        fail(`${pack.id}.requiresPacks`, `feature modules cannot depend on ${required}`);
+      }
+      if (pack.moduleType === 'specification' && dependency.moduleType === 'feature') {
+        fail(`${pack.id}.requiresPacks`,
+          `specification modules cannot add ${required}; use check applicability`);
+      }
+    }
+    for (const conflict of pack.conflictsWith) {
+      if (selectedByRef.has(conflict)) fail(`${pack.id}.conflictsWith`, `conflicts with selected ${conflict}`);
+    }
+  }
+  const featureModuleIds = new Set(selectedPacks
+    .filter(({ pack }) => pack.moduleType === 'feature').map(({ pack }) => pack.id));
+  const missingFeatureModules = (requiresFeatures: readonly string[] | undefined): string[] =>
+    (requiresFeatures ?? []).filter(featureId => !featureModuleIds.has(featureId));
+  // Check groups scope grading. Feature dependencies scope prompt fragments.
+  const omitForScopedSelection = (selection: { includeCheckGroups?: string[] },
+    requiresFeatures: readonly string[] | undefined): boolean =>
+    selection.includeCheckGroups !== undefined && missingFeatureModules(requiresFeatures).length > 0;
+  if (recipe.state === 'qualified') {
+    if (fixture.state !== 'qualified') {
+      fail(`${recipeSource}.fixture`, `qualified recipe selects ${fixture.state} fixture ${fixture.id}@${fixture.version}`);
+    }
+    for (const { pack } of selectedPacks) {
+      if (pack.state !== 'qualified') {
+        fail(`${recipeSource}.packs`, `qualified recipe selects ${pack.state} pack ${pack.id}@${pack.version}`);
+      }
+    }
+  }
+  const visitState = new Map<string, 'visiting' | 'done'>();
+  const visit = (ref: string, chain: readonly string[] = []): void => {
+    if (visitState.get(ref) === 'done') return;
+    if (visitState.get(ref) === 'visiting') {
+      fail(`${recipeSource}.packs`, `dependency cycle: ${[...chain, ref].join(' -> ')}`);
+    }
+    visitState.set(ref, 'visiting');
+    const pack = selectedByRef.get(ref);
+    if (!pack) fail(`${recipeSource}.packs`, `missing ${ref}`);
+    for (const required of pack.requiresPacks) visit(required, [...chain, ref]);
+    visitState.set(ref, 'done');
+  };
+  for (const ref of selectedByRef.keys()) visit(ref);
+
+  const fragmentSources = new Map<string, string>();
+  const composedFragments: Record<FragmentKind, Map<string, ComposedFragment>> = {
+    requirements: new Map(), contracts: new Map(),
+  };
+  const moduleTypeById = new Map<string, string | undefined>(
+    selectedPacks.map(({ pack }) => [pack.id, pack.moduleType]));
+  const addFragment = (kind: FragmentKind, fragment: ValidatedTaskFragment, owner: string): void => {
+    if (recipe.task.mode !== 'action' && !fragment.modes.includes(recipe.task.mode)) return;
+    const at = `${owner}.task.${kind}.${fragment.id}`;
+    const definition = resolveTaskFragment(fragment, { trackRoot: root, source: at,
+      sourceCache: fragmentSources });
+    const current = composedFragments[kind].get(fragment.id);
+    if (current) {
+      const comparable = (value: object): string => JSON.stringify({ ...value, owners: undefined,
+        order: undefined, modes: undefined, requiresFeatures: undefined,
+        ownerConditions: undefined });
+      if (comparable(current) !== comparable(definition)) {
+        fail(at, `shared fragment ${fragment.id} does not match its other owner`);
+      }
+      const condition = (value: { modes: string[]; requiresFeatures?: string[] }):
+        { modes: string[]; requiresFeatures: string[] } => ({
+        modes: value.modes,
+        requiresFeatures: value.requiresFeatures ?? [],
+      });
+      const differs = JSON.stringify(condition(current)) !== JSON.stringify(condition(definition));
+      if ((differs || current.order !== definition.order)
+        && (moduleTypeById.get(owner) !== 'feature'
+          || current.owners.some(existingOwner => moduleTypeById.get(existingOwner) !== 'feature'))) {
+        fail(at, `shared fragment ${fragment.id} does not match its other owner`);
+      }
+      if (current.ownerConditions) {
+        current.ownerConditions.push({ owner, ...condition(definition) });
+      } else if (differs) {
+        current.ownerConditions = current.owners.map(existingOwner => ({
+          owner: existingOwner, ...condition(current),
+        }));
+        current.ownerConditions.push({ owner, ...condition(definition) });
+        delete current.requiresFeatures;
+      }
+      current.order = Math.min(current.order, definition.order);
+      current.modes = [...new Set([...current.modes, ...definition.modes])].sort();
+      current.owners.push(owner);
+      return;
+    }
+    composedFragments[kind].set(fragment.id, { ...definition, owners: [owner] });
+  };
+  for (const fragment of recipe.task.framing.requirements) addFragment('requirements', fragment, 'recipe');
+  for (const fragment of recipe.task.framing.contracts) addFragment('contracts', fragment, 'recipe');
+  for (const { pack, selection } of selectedPacks) {
+    if (selection.includeRoles.length === 0) continue;
+    for (const fragment of pack.task.requirements) {
+      if (omitForScopedSelection(selection, fragment.requiresFeatures)) continue;
+      const missing = missingFeatureModules(fragment.requiresFeatures);
+      if (missing.length) {
+        fail(`${pack.id}.${fragment.id}.requiresFeatures`,
+          `references missing feature module ${missing.join(', ')}`);
+      }
+      addFragment('requirements', fragment, pack.id);
+    }
+    for (const fragment of pack.task.contracts) {
+      if (omitForScopedSelection(selection, fragment.requiresFeatures)) continue;
+      const missing = missingFeatureModules(fragment.requiresFeatures);
+      if (missing.length) {
+        fail(`${pack.id}.${fragment.id}.requiresFeatures`,
+          `references missing feature module ${missing.join(', ')}`);
+      }
+      addFragment('contracts', fragment, pack.id);
+    }
+  }
+  const orderedFragments = (kind: FragmentKind): ComposedFragment[] =>
+    [...composedFragments[kind].values()]
+      .sort((left, right) => left.order - right.order || left.id.localeCompare(right.id))
+      .map(fragment => ({ ...fragment, owners: [...fragment.owners].sort() }));
+  const taskRequirements = orderedFragments('requirements');
+  const taskContracts = orderedFragments('contracts');
+  if (taskRequirements.length === 0) fail(`${recipeSource}.task`, 'composes no requirements');
+
+  const scenarioCache = new Map<string, CompiledScenarioDefinition>();
+  const selectedFeatures: SelectedCheckGroup[] = [];
+  const claimedCriteria = new Set<string>();
+  const actionsForSteps = (steps: readonly CompiledStep[]): string[] => {
+    const actions: string[] = [];
+    for (const step of steps) {
+      actions.push(step.do);
+      if (step.do === 'race') {
+        const branches = step.branches;
+        if (Array.isArray(branches)) {
+          for (const branch of branches) actions.push(...actionsForSteps(branch));
+        }
+      }
+    }
+    return actions;
+  };
+  for (const { selection, pack, path } of selectedPacks) {
+    const roles = new Set(selection.includeRoles);
+    const selectedGroups = selection.includeCheckGroups === undefined
+      ? null : new Set(selection.includeCheckGroups);
+    const included = pack.checks.filter(check => roles.has(check.role)
+      && (selectedGroups === null || selectedGroups.has(check.id)));
+    for (const role of roles) {
+      if (!included.some(check => check.role === role)) {
+        fail(`${recipeSource}.packs.${pack.id}.includeRoles`, `pack has no ${role} check groups`);
+      }
+    }
+    for (const check of included) {
+      const missing = missingFeatureModules(check.requiresFeatures);
+      if (missing.length) {
+        fail(`${pack.id}.${check.id}.requiresFeatures`,
+          `references missing feature module ${missing.join(', ')}`);
+      }
+      const scenarioRef = contained(root, root, check.source, `${path}.${check.id}.source`);
+      let scenario = scenarioCache.get(scenarioRef.relative);
+      if (!scenario) {
+        scenario = compileScenarioDefinition(
+          readDefinitionJson(scenarioRef.absolute, 'scenario'), {
+          source: scenarioRef.relative,
+        });
+        scenarioCache.set(scenarioRef.relative, scenario);
+      }
+      const feature = scenario.features.find(candidate => candidate.id === check.feature);
+      if (!feature) fail(`${path}.${check.id}.feature`, `feature ${check.feature} not found in ${check.source}`);
+      const criteria = check.criteria === undefined
+        ? feature.criteria
+        : check.criteria.map(criterionId => {
+          const criterion = feature.criteria.find(candidate => candidate.id === criterionId);
+          if (!criterion) fail(`${path}.${check.id}.criteria`,
+            `criterion ${criterionId} not found in ${check.source} feature ${check.feature}`);
+          return criterion;
+        });
+      for (const criterion of criteria) {
+        const criterionRef = `${scenarioRef.relative}#${check.feature}#${criterion.id}`;
+        if (claimedCriteria.has(criterionRef)) {
+          fail(`${path}.${check.id}`, `criterion already selected: ${criterionRef}`);
+        }
+        claimedCriteria.add(criterionRef);
+      }
+      const selectedFeature = { ...feature, criteria };
+      selectedFeatures.push({
+        packId: pack.id,
+        packVersion: pack.version,
+        ...(pack.stableId === undefined ? {} : { stablePackId: pack.stableId }),
+        ...(pack.moduleType === undefined ? {} : { moduleType: pack.moduleType }),
+        // `id` identifies this source slice inside the pack. `stableId` keeps
+        // its published score keys unchanged when one criterion moves to a
+        // focused, independently versioned scenario.
+        checkGroupId: check.stableId ?? check.id,
+        role: check.role,
+        ...(check.observations === undefined ? {} : { observations: check.observations }),
+        ...(check.requiresFeatures === undefined ? {} : { requiresFeatures: check.requiresFeatures }),
+        source: scenarioRef.relative,
+        feature: selectedFeature,
+        actions: [...new Set([
+          ...actionsForSteps(selectedFeature.setup),
+          ...selectedFeature.criteria.flatMap(criterion => actionsForSteps(criterion.steps)),
+        ])].sort(),
+      });
+    }
+  }
+
+  const bySource = new Map<string, SelectedCheckGroup[]>();
+  for (const selected of selectedFeatures) {
+    const group = bySource.get(selected.source);
+    if (group) group.push(selected);
+    else bySource.set(selected.source, [selected]);
+  }
+  const executionEntries = recipe.execution === 'all-selected-sources'
+    ? [...bySource.keys()].sort().map((source, index) => ({
+      id: `selected-source-${String(index + 1).padStart(3, '0')}`,
+      source,
+    }))
+    : recipe.execution;
+  const execution = executionEntries.map(entry => {
+    const normalized = contained(root, root, entry.source, `${recipeSource}.execution.${entry.id}.source`).relative;
+    const selected = bySource.get(normalized);
+    if (!selected) fail(`${recipeSource}.execution.${entry.id}`, `source has no selected check groups: ${normalized}`);
+    bySource.delete(normalized);
+    const scenario = scenarioCache.get(normalized);
+    if (!scenario) fail(`${recipeSource}.execution.${entry.id}`, `source was not compiled: ${normalized}`);
+    const scenarioOrder = scenario.features.map(feature => feature.id);
+    const criterionOrder = (featureId: number): string[] =>
+      scenario.features.find(feature => feature.id === featureId)
+        ?.criteria.map(criterion => criterion.id) ?? [];
+    const firstCriterion = (group: SelectedCheckGroup): string =>
+      group.feature.criteria[0]?.id ?? '';
+    return { id: entry.id, source: normalized, checkGroups: selected.slice()
+      .sort((a, b) => scenarioOrder.indexOf(a.feature.id) - scenarioOrder.indexOf(b.feature.id)
+        || criterionOrder(a.feature.id).indexOf(firstCriterion(a))
+          - criterionOrder(b.feature.id).indexOf(firstCriterion(b))) };
+  });
+  if (bySource.size) {
+    fail(`${recipeSource}.execution`, `missing selected sources: ${[...bySource.keys()].sort().join(', ')}`);
+  }
+
+  const checks: Array<Omit<SelectedCheck, 'points'> & { points?: number }> = [];
+  const stableKeys = new Set<string>();
+  for (const suite of execution) {
+    for (const group of suite.checkGroups) {
+      for (const criterion of group.feature.criteria) {
+        const stableKey = `${group.stablePackId ?? group.packId}.${group.checkGroupId}.${criterion.id}`;
+        if (stableKeys.has(stableKey)) fail(recipeSource, `duplicate stable check key ${stableKey}`);
+        stableKeys.add(stableKey);
+        checks.push({
+          stableKey,
+          packId: group.packId,
+          ...(group.stablePackId === undefined ? {} : { stablePackId: group.stablePackId }),
+          checkGroupId: group.checkGroupId,
+          criterionId: criterion.id,
+          role: group.role,
+          ...(group.observations === undefined ? {} : { observations: group.observations }),
+          ...(group.requiresFeatures === undefined ? {} : { requiresFeatures: group.requiresFeatures }),
+          source: group.source,
+          featureId: group.feature.id,
+          description: criterion.desc,
+          sourcePoints: criterion.points ?? 1,
+        });
+      }
+    }
+  }
+  if (recipe.scoring.mode === 'explicit') {
+    const weightKeys = new Set(Object.keys(recipe.scoring.weights));
+    for (const key of stableKeys) if (!weightKeys.delete(key)) fail(`${recipeSource}.scoring.weights`, `missing ${key}`);
+    if (weightKeys.size) fail(`${recipeSource}.scoring.weights`, `unknown checks: ${[...weightKeys].sort().join(', ')}`);
+  }
+  const scoring = recipe.scoring;
+  for (const check of checks) {
+    check.points = scoring.mode === 'explicit'
+      ? scoring.weights[check.stableKey] : check.sourcePoints;
+  }
+  const scoredChecks = checks as SelectedCheck[];
+
+  const capabilities = [...new Set(selectedPacks.flatMap(({ pack }) => pack.capabilities))].sort();
+  if (availableCapabilities !== null) {
+    const available = new Set(availableCapabilities);
+    const missing = capabilities.filter(capability => !available.has(capability));
+    if (missing.length) fail(`${recipeSource}.packs`, `unsupported capabilities: ${missing.join(', ')}`);
+  }
+  return {
+    compositionSchemaVersion: COMPOSITION_SCHEMA_VERSION,
+    recipe: {
+      id: recipe.id,
+      version: recipe.version,
+      state: recipe.state,
+      title: recipe.title,
+      track: recipe.track,
+      sequence: recipe.sequence ?? null,
+      task: {
+        mode: recipe.task.mode,
+        baseRecipe,
+        requirements: taskRequirements,
+        contracts: taskContracts,
+        requirementText: taskRequirements.map(fragment => fragment.text).join(''),
+        contractText: taskContracts.map(fragment => fragment.text).join(''),
+      },
+    },
+    fixture,
+    packs: selectedPacks.map(({ selection, pack, path }) => ({
+      id: pack.id,
+      version: pack.version,
+      state: pack.state,
+      title: pack.title,
+      ...(pack.stableId === undefined ? {} : { stableId: pack.stableId }),
+      ...(pack.moduleType === undefined ? {} : { moduleType: pack.moduleType }),
+      path,
+      includeRoles: selection.includeRoles,
+      ...(selection.includeCheckGroups === undefined
+        ? {} : { includeCheckGroups: selection.includeCheckGroups }),
+      requiresPacks: pack.requiresPacks,
+      capabilities: pack.capabilities,
+      evidence: pack.evidence,
+      budget: pack.budget,
+      task: {
+        requirementIds: taskRequirements.filter(fragment => fragment.owners.includes(pack.id))
+          .map(fragment => fragment.id),
+        contractIds: taskContracts.filter(fragment => fragment.owners.includes(pack.id))
+          .map(fragment => fragment.id),
+      },
+      actions: [...new Set(selectedFeatures.filter(feature => feature.packId === pack.id)
+        .flatMap(feature => feature.actions))].sort(),
+    })),
+    capabilities,
+    execution,
+    checks: scoredChecks,
+    scoring: {
+      mode: scoring.mode,
+      checks: scoredChecks.length,
+      points: scoredChecks.reduce((total, check) => total + check.points, 0),
+    },
+  };
+}
+
+const PROMOTION_FIELDS = new Set([
+  'schemaVersion', 'kind', 'id', 'version', 'state', 'title', 'entries',
+]);
+const PROMOTION_ENTRY_FIELDS = new Set(['alias', 'status', 'recipe']);
+
+export function compilePromotionDefinition(input: unknown,
+  { source = '<promotion-catalog>' }: { source?: string } = {}): CompiledPromotionDefinition {
+  const catalog = structuredClone(input);
+  strictObject(catalog, source, PROMOTION_FIELDS);
+  identityFields(catalog, source, 'promotion-catalog');
+  if (!Array.isArray(catalog.entries)) fail(`${source}.entries`, 'must be an array');
+  if (catalog.entries.length === 0 && catalog.state !== 'draft') {
+    fail(`${source}.entries`, 'must be non-empty once the catalog is qualified');
+  }
+  const activeAliases = new Set<unknown>();
+  const candidates = new Set<string>();
+  catalog.entries.forEach((entry, index) => {
+    const at = `${source}.entries[${index}]`;
+    strictObject(entry, at, PROMOTION_ENTRY_FIELDS);
+    const alias = string(entry.alias, `${at}.alias`);
+    if (!/^L[1-9]\d*$/.test(alias)) fail(`${at}.alias`, 'must look like L1, L2, and so on');
+    if (!isOneOf(entry.status, ['candidate', 'promoted', 'retired'])) {
+      fail(`${at}.status`, 'must be candidate, promoted, or retired');
+    }
+    validateFileRef(entry.recipe, `${at}.recipe`);
+    if (entry.status === 'promoted') {
+      if (activeAliases.has(entry.alias)) fail(`${at}.alias`, `duplicate promoted alias ${entry.alias}`);
+      activeAliases.add(entry.alias);
+    }
+    const candidate = `${entry.alias}:${entry.recipe.id}@${entry.recipe.version}`;
+    if (candidates.has(candidate)) fail(at, `duplicate alias target ${candidate}`);
+    candidates.add(candidate);
+  });
+  return catalog as Validated<CompiledPromotionDefinition>;
+}
+
+export function compilePromotionFile(catalogPath: string,
+  { trackRoot }: { trackRoot?: string } = {}): CompiledPromotionCatalog {
+  const absoluteCatalog = resolve(catalogPath);
+  const root = resolve(trackRoot ?? dirname(dirname(absoluteCatalog)));
+  const compositionRoot = resolve(root, 'composition');
+  const source = relative(root, absoluteCatalog).replaceAll('\\', '/');
+  const catalog = compilePromotionDefinition(
+    readDefinitionJson(absoluteCatalog, 'promotion catalog'), { source });
+  const entries = catalog.entries.map((entry, index) => {
+    const at = `${source}.entries[${index}].recipe`;
+    const ref = contained(compositionRoot, dirname(absoluteCatalog), entry.recipe.path, `${at}.path`);
+    const plan = compileRecipeFile(ref.absolute, { trackRoot: root });
+    if (plan.recipe.id !== entry.recipe.id || plan.recipe.version !== entry.recipe.version) {
+      fail(at, `expected ${entry.recipe.id}@${entry.recipe.version}, found ${plan.recipe.id}@${plan.recipe.version}`);
+    }
+    if (entry.status === 'promoted' && plan.recipe.state !== 'qualified') {
+      fail(at, `cannot promote ${plan.recipe.id}@${plan.recipe.version} while it is ${plan.recipe.state}`);
+    }
+    if (entry.status !== 'retired' && plan.recipe.state === 'retired') {
+      fail(at, `cannot use retired recipe ${plan.recipe.id}@${plan.recipe.version} as ${entry.status}`);
+    }
+    return { alias: entry.alias, status: entry.status, recipe: {
+      id: plan.recipe.id, version: plan.recipe.version, path: ref.relative,
+    } };
+  });
+  return {
+    compositionSchemaVersion: COMPOSITION_SCHEMA_VERSION,
+    catalog: { id: catalog.id, version: catalog.version, state: catalog.state, title: catalog.title },
+    entries,
+  };
+}
diff --git a/tools/stack-bench/src/composition/credential-aliases.ts b/tools/stack-bench/src/composition/credential-aliases.ts
new file mode 100644
index 00000000000..be8c944cf30
--- /dev/null
+++ b/tools/stack-bench/src/composition/credential-aliases.ts
@@ -0,0 +1,63 @@
+type MutableRecord = Record<string, unknown>;
+
+const isRecord = (value: unknown): value is MutableRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+export function validateCredentialAliases(
+  input: unknown,
+  at = 'credentialAliases',
+): Readonly<Record<string, string>> {
+  if (input === undefined || input === null) return Object.freeze({});
+  if (!isRecord(input)) throw new Error(`${at} must be an object`);
+
+  const entries = Object.entries(input);
+  const targets = new Set<string>();
+  for (const [source, target] of entries) {
+    if (!source || typeof target !== 'string' || !target) {
+      throw new Error(`${at} must map non-empty strings to non-empty strings`);
+    }
+    if (source === target) throw new Error(`${at}.${source} must change the credential`);
+    if (targets.has(target)) throw new Error(`${at} target ${target} is duplicated`);
+    targets.add(target);
+  }
+
+  return Object.freeze(Object.fromEntries(
+    entries
+      .map(([source, target]) => [source, target as string] as const)
+      .sort(([left], [right]) => left.localeCompare(right)),
+  ));
+}
+
+export function applyCredentialAliases(value: unknown, aliases: unknown): string {
+  const entries = Object.entries(validateCredentialAliases(aliases))
+    .sort(([left], [right]) => right.length - left.length || left.localeCompare(right));
+  if (!entries.length) return String(value ?? '');
+  const targets = new Map(entries);
+  const pattern = new RegExp(entries
+    .map(([source]) => source.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'))
+    .join('|'), 'g');
+  return String(value ?? '').replace(pattern, source => targets.get(source) ?? source);
+}
+
+export function materializeScenarioCredentials<T>(input: T, aliases?: unknown): T {
+  const resolved = validateCredentialAliases(aliases);
+  if (Object.keys(resolved).length === 0) return input;
+
+  const scenario = structuredClone(input);
+  const visit = (value: unknown): void => {
+    if (Array.isArray(value)) {
+      value.forEach(visit);
+      return;
+    }
+    if (!isRecord(value)) return;
+    for (const [field, child] of Object.entries(value)) {
+      if ((field === 'password' || field === 'text') && typeof child === 'string') {
+        value[field] = applyCredentialAliases(child, resolved);
+      } else {
+        visit(child);
+      }
+    }
+  };
+  visit(scenario);
+  return scenario;
+}
diff --git a/tools/stack-bench/src/composition/definition-compiler.ts b/tools/stack-bench/src/composition/definition-compiler.ts
new file mode 100644
index 00000000000..48b169d9056
--- /dev/null
+++ b/tools/stack-bench/src/composition/definition-compiler.ts
@@ -0,0 +1,631 @@
+// Validate and normalize scenario definitions before resource acquisition.
+
+type UnknownRecord = Record<string, unknown>;
+
+export interface CompiledStep {
+  do: string;
+  action?: string;
+  actor?: string;
+  actors?: string[];
+  as?: string;
+  branches?: CompiledStep[][];
+  count?: number;
+  equals?: number | string[];
+  from?: string;
+  fromActor?: string;
+  input?: UnknownRecord;
+  item?: string;
+  namedAction?: UnknownRecord;
+  nonEmpty?: boolean;
+  outcome?: string;
+  plus?: number;
+  quantity?: number;
+  relativeTo?: string;
+  settleMs?: number;
+  testid?: string;
+  text?: string;
+  contains?: string;
+  absent?: boolean;
+  warehouse?: string;
+  in?: {
+    testid?: string;
+    contains?: string;
+    [key: string]: unknown;
+  };
+  [key: string]: unknown;
+}
+
+export interface CompiledCriterion {
+  id: string;
+  desc: string;
+  note?: string;
+  points: number;
+  provenBy?: string;
+  steps: CompiledStep[];
+  statedBy?: string;
+  withheld?: string;
+  [key: string]: unknown;
+}
+
+export interface CompiledFeature {
+  id: number;
+  name: string;
+  actors?: string[];
+  max?: number;
+  setup: CompiledStep[];
+  criteria: CompiledCriterion[];
+  [key: string]: unknown;
+}
+
+export interface CompiledScenarioDefinition {
+  schemaVersion: number;
+  level: number;
+  features: CompiledFeature[];
+  [key: string]: unknown;
+}
+
+export interface CompiledTrackSuite {
+  id: string;
+  inherit: 'none' | 'all-higher-levels';
+  spec: string;
+}
+
+export interface CompiledTrackManifest extends Record<string, unknown> {
+  schemaVersion: number;
+  suites: Record<string, CompiledTrackSuite[]>;
+  title?: string;
+  slug?: string;
+  internal?: boolean;
+  validatedThrough?: number;
+  plannedThrough?: number;
+  portOffset?: number;
+  restartProbe?: string;
+  reseedOnReset?: boolean;
+  databaseProvenance?: { action: string; markerParameter: string; body: Record<string, string> };
+  actions?: unknown[];
+}
+
+export const DEFINITION_SCHEMA_VERSION = 1;
+
+const string = (value: unknown): value is string => typeof value === 'string';
+const nonEmptyString = (value: unknown): value is string =>
+  string(value) && value.trim().length > 0;
+const number = (value: unknown): value is number =>
+  typeof value === 'number' && Number.isFinite(value);
+const positiveNumber = (value: unknown): value is number => number(value) && value > 0;
+const nonNegativeNumber = (value: unknown): value is number => number(value) && value >= 0;
+const integer = (value: unknown): value is number => Number.isInteger(value);
+const positiveInteger = (value: unknown): value is number => integer(value) && value > 0;
+const nonNegativeInteger = (value: unknown): value is number => integer(value) && value >= 0;
+const boolean = (value: unknown): value is boolean => typeof value === 'boolean';
+const object = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const array = (value: unknown): value is unknown[] => Array.isArray(value);
+const stringArray = (value: unknown): value is string[] =>
+  array(value) && value.every(nonEmptyString);
+const anyArray = (value: unknown): value is unknown[] => array(value);
+const scalar = (value: unknown): boolean =>
+  value === null || ['string', 'number', 'boolean'].includes(typeof value);
+const relativePath = (value: unknown): boolean => nonEmptyString(value)
+  && !/^(?:[A-Za-z]:[\\/]|[\\/])/.test(value)
+  && !value.split(/[\\/]/).includes('..');
+const processTimeout = (value: unknown): boolean =>
+  number(value) && value > 0 && value <= 85_000;
+
+type FieldPredicate = (value: unknown) => boolean;
+
+interface ActionDefinition {
+  required: Record<string, FieldPredicate>;
+  fields: Record<string, FieldPredicate>;
+}
+
+const oneOf = (value: unknown, allowed: readonly string[]): boolean =>
+  string(value) && allowed.includes(value);
+
+function fields(required: Record<string, FieldPredicate>,
+  optional: Record<string, FieldPredicate> = {}) {
+  return { required, fields: Object.fromEntries([
+    ['do', nonEmptyString],
+    ...Object.entries(required),
+    ...Object.entries(optional),
+  ]) };
+}
+
+const actor = { actor: nonEmptyString };
+const actors = { actors: stringArray };
+const settle = { settleMs: nonNegativeNumber };
+const within = { within: positiveNumber };
+const locator = { in: object };
+
+export const ACTION_DEFINITIONS = Object.freeze({
+  callAction: fields({ ...actor, action: nonEmptyString, input: object },
+    { from: nonEmptyString, authentication: nonEmptyString, namedAction: object, ...settle }),
+  callConcurrently: fields({ ...actors, action: nonEmptyString, settleMs: nonNegativeNumber },
+    { args: anyArray, body: object }),
+  clearInput: fields(actor),
+  click: fields({ ...actor, testid: nonEmptyString },
+    { contains: string, ...locator, ...settle, ...within }),
+  clickConcurrently: fields({ ...actors, testid: nonEmptyString, settleMs: nonNegativeNumber },
+    { ...locator, targets: anyArray, readyWithin: positiveNumber, ...within }),
+  closeClient: fields(actor),
+  createRoom: fields({ ...actor, room: nonEmptyString }, { private: boolean }),
+  dbSetStock: fields({ item: nonEmptyString, warehouse: nonEmptyString,
+    quantity: integer, settleMs: nonNegativeNumber }),
+  ensureSignedIn: fields({ ...actor, name: nonEmptyString },
+    { password: string, exact: boolean, readyTestid: nonEmptyString, ...settle }),
+  enterRoom: fields({ ...actor, room: nonEmptyString }),
+  expect: fields({ ...actor, testid: nonEmptyString },
+    { contains: string, notContains: string, value: string, nonEmpty: boolean,
+      count: nonNegativeInteger, attribute: nonEmptyString,
+      absent: boolean, ...locator, ...within }),
+  expectActorsWith: fields({ ...actors, testid: nonEmptyString, contains: string,
+    equals: nonNegativeInteger, maxEach: nonNegativeInteger }),
+  expectActionOutcome: fields({ ...actor,
+    outcome: value => oneOf(value, ['accepted', 'refused', 'validation-refused']) },
+  { routeProvenBy: nonEmptyString }),
+  expectAgreement: fields({ ...actors, testid: nonEmptyString },
+    { numeric: boolean, ...locator, ...within }),
+  expectAllPresent: fields({ ...actor, prefix: string, count: nonNegativeInteger,
+    within: positiveNumber }),
+  expectCallOutcomes: fields({ accepted: nonNegativeInteger }),
+  expectElementCount: fields({ ...actor, testid: nonEmptyString, equals: nonNegativeInteger },
+    { contains: string, ...locator, ...within }),
+  expectForgeryRejected: fields(actor),
+  expectNotReceived: fields({ ...actor, contains: string }, within),
+  expectNumber: fields({ ...actor, testid: nonEmptyString },
+    { equals: number, atLeast: number, atMost: number, relativeTo: nonEmptyString, plus: number,
+      ...locator, ...within }),
+  expectOrderMatches: fields({ ...actors, prefix: string }),
+  expectSequence: fields({ ...actor, testid: nonEmptyString, equals: stringArray },
+    { ...locator, ...within }),
+  expectReceived: fields({ ...actor, contains: string, within: positiveNumber }),
+  expectReplayRejected: fields(actor, { allowNotFound: boolean }),
+  expectStable: fields({ ...actor, testid: nonEmptyString },
+    { samples: positiveInteger, intervalMs: positiveNumber, ...within }),
+  expectUnavailable: fields({ ...actor, testid: nonEmptyString },
+    { contains: string, ...locator, ...within }),
+  fill: fields({ ...actor, testid: nonEmptyString, text: string },
+    { enter: boolean, ...locator, ...settle, ...within }),
+  forgeWrite: fields({ ...actor, fromActor: nonEmptyString, settleMs: nonNegativeNumber },
+    { field: value => oneOf(value, ['room', 'identity']), text: string, value: scalar }),
+  freshClient: fields(actor),
+  openClient: fields(actor, settle),
+  pressKey: fields({ ...actor, key: nonEmptyString }, settle),
+  race: fields({ branches: anyArray, settleMs: nonNegativeNumber }),
+  recordNumber: fields({ ...actor, testid: nonEmptyString, as: nonEmptyString },
+    { ...locator, ...within }),
+  reload: fields({ ...actor, settleMs: number }),
+  replayAs: fields({ ...actor, from: nonEmptyString, match: string },
+    { swap: object, namedAction: object, namedTarget: object, ...settle }),
+  replayConcurrently: fields({ ...actors, settleMs: nonNegativeNumber },
+    { match: string, method: nonEmptyString }),
+  restartBackend: fields({ settleMs: nonNegativeNumber }),
+  runScript: fields({ script: relativePath, args: anyArray }, { ...settle, timeoutMs: processTimeout }),
+  send: fields({ ...actor, text: string }),
+  sendConcurrently: fields({ senders: anyArray, delayMs: nonNegativeNumber }),
+  sendMany: fields({ ...actor, prefix: string, count: positiveInteger,
+    delayMs: nonNegativeNumber }),
+  setOffline: fields(actor, { offline: boolean, ...settle }),
+  signIn: fields({ ...actor, name: nonEmptyString },
+    { password: string, exact: boolean, expectFailure: boolean }),
+  signUp: fields({ ...actor, name: nonEmptyString },
+    { password: string, exact: boolean, expectFailure: boolean }),
+  startAppServer: fields({}, settle),
+  stopAppServer: fields({}, settle),
+  typeInto: fields({ ...actor, text: string }),
+  wait: fields({ ...actor, ms: nonNegativeNumber }),
+  waitUntilAbsent: fields({ ...actor, testid: nonEmptyString },
+    { contains: string, ...locator, ...within }),
+} satisfies Record<string, ActionDefinition>);
+
+export type ActionId = keyof typeof ACTION_DEFINITIONS;
+
+export const ACTION_IDS: readonly ActionId[] = Object.freeze(
+  Object.keys(ACTION_DEFINITIONS).sort() as ActionId[],
+);
+
+function fail(at: string, message: string): never {
+  throw new Error(`invalid benchmark definition at ${at}: ${message}`);
+}
+
+function strictObject(value: unknown, at: string, allowed: Set<string>): asserts value is UnknownRecord {
+  if (!object(value)) fail(at, 'must be an object');
+  for (const key of Object.keys(value)) {
+    if (!allowed.has(key)) fail(`${at}.${key}`, 'unknown field');
+  }
+}
+
+function validateLocator(value: unknown, at: string): void {
+  strictObject(value, at, new Set(['testid', 'contains', 'containsAll']));
+  if (!nonEmptyString(value.testid)) fail(`${at}.testid`, 'must be a non-empty string');
+  if (value.contains !== undefined && !string(value.contains)) fail(`${at}.contains`, 'must be a string');
+  if (value.containsAll !== undefined
+    && (!stringArray(value.containsAll) || value.containsAll.length === 0)) {
+    fail(`${at}.containsAll`, 'must be a non-empty string array');
+  }
+  if (value.contains !== undefined && value.containsAll !== undefined) {
+    fail(at, 'cannot use both contains and containsAll');
+  }
+}
+
+function validateSwap(value: unknown, at: string): void {
+  strictObject(value, at, new Set(['find', 'with']));
+  if (!string(value.find)) fail(`${at}.find`, 'must be a string');
+  if (!string(value.with)) fail(`${at}.with`, 'must be a string');
+}
+
+function validateNamedTarget(value: unknown, at: string): void {
+  strictObject(value, at, new Set(['testid', 'contains', 'attribute', 'valueType']));
+  if (!nonEmptyString(value.testid)) fail(`${at}.testid`, 'must be a non-empty string');
+  if (value.contains !== undefined && !string(value.contains)) fail(`${at}.contains`, 'must be a string');
+  if (!nonEmptyString(value.attribute)) fail(`${at}.attribute`, 'must be a non-empty string');
+  if (value.valueType !== undefined && !oneOf(value.valueType, ['number', 'string'])) {
+    fail(`${at}.valueType`, 'must be "number" or "string"');
+  }
+}
+
+function validateActionInput(value: unknown, at: string): void {
+  strictObject(value, at, new Set(['testid', 'contains', 'attribute']));
+  if (!nonEmptyString(value.testid)) fail(`${at}.testid`, 'must be a non-empty string');
+  if (value.contains !== undefined && !string(value.contains)) fail(`${at}.contains`, 'must be a string');
+  if (!nonEmptyString(value.attribute)) fail(`${at}.attribute`, 'must be a non-empty string');
+}
+
+function validateNamedActionParams(value: unknown,
+  at: string): asserts value is UnknownRecord[] {
+  if (!array(value)) fail(at, 'must be an array');
+  const names = new Set<string>();
+  value.forEach((param, index) => {
+    const where = `${at}[${index}]`;
+    strictObject(param, where, new Set(['name', 'in', 'placeholder', 'wireType']));
+    const name = param.name;
+    if (!nonEmptyString(name)) fail(`${where}.name`, 'must be a non-empty string');
+    if (names.has(name)) fail(`${where}.name`, `duplicates ${JSON.stringify(name)}`);
+    names.add(name);
+    if (!oneOf(param.in, ['path', 'body'])) fail(`${where}.in`, 'must be "path" or "body"');
+    if (param.in === 'path') {
+      if (!nonEmptyString(param.placeholder)) fail(`${where}.placeholder`, 'is required for a path parameter');
+    } else if (param.placeholder !== undefined) {
+      fail(`${where}.placeholder`, 'is allowed only for a path parameter');
+    }
+    if (param.wireType !== undefined && param.wireType !== 'u64') {
+      fail(`${where}.wireType`, 'must be "u64"');
+    }
+  });
+}
+
+function validateInlineNamedAction(value: unknown,
+  at: string): asserts value is UnknownRecord & { params?: UnknownRecord[] } {
+  strictObject(value, at, new Set(['id', 'path', 'method', 'reducer', 'args', 'params']));
+  const path = value.path;
+  if (!nonEmptyString(value.id)) fail(`${at}.id`, 'must be a non-empty string');
+  if (!nonEmptyString(path)) fail(`${at}.path`, 'must be a non-empty string');
+  if (!nonEmptyString(value.reducer)) fail(`${at}.reducer`, 'must be a non-empty string');
+  if (!path.startsWith('/')) fail(`${at}.path`, 'must be an absolute HTTP path');
+  if (value.method !== undefined
+      && !oneOf(value.method, ['DELETE', 'PATCH', 'POST', 'PUT'])) {
+    fail(`${at}.method`, 'must be "DELETE", "PATCH", "POST", or "PUT"');
+  }
+  if (!anyArray(value.args)) fail(`${at}.args`, 'must be an array');
+  const params = value.params;
+  if (params !== undefined) {
+    validateNamedActionParams(params, `${at}.params`);
+    params.filter(param => param.in === 'path').forEach((param, index) => {
+      if (!path.includes(String(param.placeholder))) {
+        fail(`${at}.params[${index}].placeholder`, `does not appear in path ${JSON.stringify(path)}`);
+      }
+    });
+  }
+}
+
+function validateSenders(value: unknown, at: string): void {
+  if (!array(value) || value.length === 0) fail(at, 'must be a non-empty array');
+  const actors = new Set<string>();
+  value.forEach((sender, index) => {
+    const where = `${at}[${index}]`;
+    strictObject(sender, where, new Set(['actor', 'prefix', 'count', 'delayMs']));
+    if (!nonEmptyString(sender.actor)) fail(`${where}.actor`, 'must be a non-empty string');
+    actors.add(sender.actor);
+    if (!string(sender.prefix)) fail(`${where}.prefix`, 'must be a string');
+    if (!positiveInteger(sender.count)) fail(`${where}.count`, 'must be a positive integer');
+    if (sender.delayMs !== undefined && !nonNegativeNumber(sender.delayMs)) {
+      fail(`${where}.delayMs`, 'must be a non-negative number');
+    }
+  });
+  if (actors.size < 2) {
+    fail(at, 'must contain at least two distinct actors');
+  }
+}
+
+function validateTargets(value: unknown, actors: readonly string[], at: string): void {
+  if (!array(value) || value.length === 0) fail(at, 'must be a non-empty array');
+  value.forEach((target, index) => {
+    const where = `${at}[${index}]`;
+    strictObject(target, where, new Set(['actor', 'in']));
+    const targetActor = target.actor;
+    if (!nonEmptyString(targetActor)) fail(`${where}.actor`, 'must be a non-empty string');
+    if (!actors.includes(targetActor)) fail(`${where}.actor`, 'must name an actor in the action population');
+    if (target.in !== undefined) validateLocator(target.in, `${where}.in`);
+  });
+}
+
+function validateStep(step: unknown, at: string): asserts step is CompiledStep {
+  if (!object(step)) fail(at, 'must be an object');
+  if (!nonEmptyString(step.do)) fail(`${at}.do`, 'must be a non-empty string');
+  if (!Object.hasOwn(ACTION_DEFINITIONS, step.do)) {
+    fail(`${at}.do`, `unknown action ${JSON.stringify(step.do)}`);
+  }
+  const definition: ActionDefinition = ACTION_DEFINITIONS[step.do as ActionId];
+  strictObject(step, at, new Set(Object.keys(definition.fields)));
+  for (const [name, validator] of Object.entries(definition.required)) {
+    if (step[name] === undefined) fail(`${at}.${name}`, 'is required');
+    if (!validator(step[name])) fail(`${at}.${name}`, 'has the wrong type or value');
+  }
+  for (const [name, value] of Object.entries(step)) {
+    const validator = definition.fields[name];
+    if (validator && !validator(value)) fail(`${at}.${name}`, 'has the wrong type or value');
+  }
+  if (step.in) validateLocator(step.in, `${at}.in`);
+  if (step.swap) validateSwap(step.swap, `${at}.swap`);
+  if (step.namedAction) validateInlineNamedAction(step.namedAction, `${at}.namedAction`);
+  if (step.namedTarget) validateNamedTarget(step.namedTarget, `${at}.namedTarget`);
+  if (step.do === 'callAction') {
+    validateActionInput(step.input, `${at}.input`);
+    const namedAction = step.namedAction;
+    if (namedAction) {
+      validateInlineNamedAction(namedAction, `${at}.namedAction`);
+      if (namedAction.id !== step.action) fail(`${at}.namedAction.id`, 'must match action');
+      if (!namedAction.params?.length) {
+        fail(`${at}.namedAction.params`, 'must be a non-empty array');
+      }
+    }
+    if (step.authentication !== undefined && !oneOf(step.authentication, ['actor', 'none'])) {
+      fail(`${at}.authentication`, 'must be "actor" or "none"');
+    }
+  }
+  if (step.do === 'replayAs' && step.namedTarget && !step.namedAction) {
+    fail(at, 'replayAs namedTarget requires namedAction');
+  }
+  if (step.do === 'sendConcurrently') validateSenders(step.senders, `${at}.senders`);
+  if (step.do === 'clickConcurrently' || step.do === 'replayConcurrently') {
+    const population = step.actors;
+    if (!stringArray(population) || new Set(population).size < 2) {
+      fail(`${at}.actors`, 'must contain at least two distinct actors');
+    }
+    if (step.do === 'clickConcurrently' && step.targets) {
+      validateTargets(step.targets, population, `${at}.targets`);
+    }
+  }
+  if (step.do === 'callConcurrently') {
+    const population = step.actors;
+    if (!stringArray(population) || new Set(population).size < 2) {
+      fail(`${at}.actors`, 'must contain at least two distinct actors');
+    }
+  }
+  if (step.do === 'expectAgreement' || step.do === 'expectOrderMatches') {
+    const population = step.actors;
+    if (!stringArray(population) || new Set(population).size < 2) {
+      fail(`${at}.actors`, 'must contain at least two distinct actors');
+    }
+  }
+  if (step.do === 'race') {
+    const branches = step.branches;
+    if (!array(branches) || branches.length < 2) {
+      fail(`${at}.branches`, 'must contain at least two branches');
+    }
+    branches.forEach((branch, branchIndex) => {
+      if (!array(branch) || branch.length === 0) {
+        fail(`${at}.branches[${branchIndex}]`, 'must be a non-empty step array');
+      }
+      branch.forEach((nested, stepIndex) =>
+        validateStep(nested, `${at}.branches[${branchIndex}][${stepIndex}]`));
+    });
+  }
+  if (step.do === 'expectNumber'
+    && !['equals', 'atLeast', 'atMost', 'relativeTo'].some(name => step[name] !== undefined)) {
+    fail(at, 'expectNumber requires equals, atLeast, atMost, or relativeTo');
+  }
+  if (step.do === 'setOffline' && step.offline === undefined) step.offline = true;
+}
+
+export function compileActionInput(input: unknown,
+  { source = '<action>', expectedAction = null }:
+    { source?: string; expectedAction?: string | null } = {}): CompiledStep {
+  const action = structuredClone(input);
+  validateStep(action, source);
+  if (expectedAction !== null && action.do !== expectedAction) {
+    fail(`${source}.do`, `declares ${JSON.stringify(action.do)}, expected ${JSON.stringify(expectedAction)}`);
+  }
+  return action;
+}
+
+const SCENARIO_FIELDS = new Set([
+  'schemaVersion', 'blocked_on', 'features', 'level', 'name', 'note', 'status', 'track',
+  'why_it_matters', 'writeUrlPattern',
+]);
+const FEATURE_FIELDS = new Set(['actors', 'criteria', 'id', 'max', 'name', 'note', 'setup']);
+const CRITERION_FIELDS = new Set([
+  'desc', 'id', 'note', 'points', 'provenBy', 'statedBy', 'steps', 'withheld',
+]);
+
+export function compileScenarioDefinition(input: unknown,
+  { source = '<scenario>', expectedLevel = null }:
+    { source?: string; expectedLevel?: number | null } = {}): CompiledScenarioDefinition {
+  const scenario = structuredClone(input);
+  strictObject(scenario, source, SCENARIO_FIELDS);
+  if (scenario.schemaVersion !== DEFINITION_SCHEMA_VERSION) {
+    fail(`${source}.schemaVersion`, `unsupported version ${scenario.schemaVersion}`);
+  }
+  if (!integer(scenario.level) || scenario.level < 1) fail(`${source}.level`, 'must be a positive integer');
+  if (expectedLevel !== null && scenario.level !== Number(expectedLevel)) {
+    fail(`${source}.level`, `declares L${scenario.level}, expected L${Number(expectedLevel)}`);
+  }
+  if (scenario.name !== undefined && !nonEmptyString(scenario.name)) {
+    fail(`${source}.name`, 'must be a non-empty string');
+  }
+  if (!array(scenario.features) || scenario.features.length === 0) {
+    fail(`${source}.features`, 'must be a non-empty array');
+  }
+  const featureIds = new Set();
+  const criterionKeys = new Set();
+  scenario.features.forEach((feature, featureIndex) => {
+    const featureAt = `${source}.features[${featureIndex}]`;
+    strictObject(feature, featureAt, FEATURE_FIELDS);
+    if (!integer(feature.id) || feature.id < 1) fail(`${featureAt}.id`, 'must be a positive integer');
+    if (featureIds.has(feature.id)) fail(`${featureAt}.id`, `duplicate feature id ${feature.id}`);
+    featureIds.add(feature.id);
+    if (!nonEmptyString(feature.name)) fail(`${featureAt}.name`, 'must be a non-empty string');
+    if (feature.actors !== undefined && !stringArray(feature.actors)) {
+      fail(`${featureAt}.actors`, 'must be an array of non-empty strings');
+    }
+    if (feature.max !== undefined && (!integer(feature.max) || feature.max < 0)) {
+      fail(`${featureAt}.max`, 'must be a non-negative integer');
+    }
+    if (!array(feature.setup)) fail(`${featureAt}.setup`, 'must be an array');
+    feature.setup.forEach((step, stepIndex) => validateStep(step, `${featureAt}.setup[${stepIndex}]`));
+    if (!array(feature.criteria) || feature.criteria.length === 0) {
+      fail(`${featureAt}.criteria`, 'must be a non-empty array');
+    }
+    let points = 0;
+    feature.criteria.forEach((criterion, criterionIndex) => {
+      const criterionAt = `${featureAt}.criteria[${criterionIndex}]`;
+      strictObject(criterion, criterionAt, CRITERION_FIELDS);
+      if (!nonEmptyString(criterion.id)) fail(`${criterionAt}.id`, 'must be a non-empty string');
+      const key = `${feature.id}:${criterion.id}`;
+      if (criterionKeys.has(key)) fail(`${criterionAt}.id`, `duplicate criterion key ${key}`);
+      criterionKeys.add(key);
+      if (!nonEmptyString(criterion.desc)) fail(`${criterionAt}.desc`, 'must be a non-empty string');
+      const criterionPoints = criterion.points ?? 1;
+      if (!integer(criterionPoints) || criterionPoints < 0) {
+        fail(`${criterionAt}.points`, 'must be a non-negative integer');
+      }
+      // Materialize the default so downstream scoring always receives a number.
+      criterion.points = criterionPoints;
+      points += criterionPoints;
+      if (!array(criterion.steps)) fail(`${criterionAt}.steps`, 'must be an array');
+      if (criterion.steps.length === 0 && (criterionPoints !== 0 || !nonEmptyString(criterion.withheld))) {
+        fail(`${criterionAt}.steps`, 'may be empty only for an explicitly withheld zero-point criterion');
+      }
+      criterion.steps.forEach((step, stepIndex) =>
+        validateStep(step, `${criterionAt}.steps[${stepIndex}]`));
+    });
+    if (feature.max !== undefined && feature.max !== points) {
+      fail(`${featureAt}.max`, `is ${feature.max}, but criteria total ${points}`);
+    }
+  });
+  scenario.schemaVersion = DEFINITION_SCHEMA_VERSION;
+  return scenario as CompiledScenarioDefinition;
+}
+
+const TRACK_FIELDS = new Set([
+  'schemaVersion', 'actions', 'databaseProvenance', 'internal', 'plannedThrough', 'portOffset', 'reseedOnReset',
+  'restartProbe', 'slug', 'suites', 'title', 'validatedThrough',
+]);
+const SUITE_FIELDS = new Set(['id', 'inherit', 'spec']);
+const NAMED_ACTION_FIELDS = new Set(['args', 'id', 'params', 'path', 'reducer']);
+const DATABASE_PROVENANCE_FIELDS = new Set(['action', 'body', 'markerParameter']);
+export function compileTrackManifest(input: unknown,
+  { source = '<track>' }: { source?: string } = {}): CompiledTrackManifest {
+  const manifest = structuredClone(input);
+  if (!object(manifest)) fail(source, 'must be an object');
+  strictObject(manifest, source, TRACK_FIELDS);
+  if (manifest.schemaVersion !== DEFINITION_SCHEMA_VERSION) {
+    fail(`${source}.schemaVersion`, `unsupported version ${manifest.schemaVersion}`);
+  }
+  if (!nonEmptyString(manifest.title)) fail(`${source}.title`, 'must be a non-empty string');
+  if (manifest.slug !== undefined && !string(manifest.slug)) fail(`${source}.slug`, 'must be a string');
+  for (const key of ['validatedThrough', 'plannedThrough', 'portOffset']) {
+    if (!integer(manifest[key]) || manifest[key] < 0) fail(`${source}.${key}`, 'must be a non-negative integer');
+  }
+  if (!nonEmptyString(manifest.restartProbe) || !manifest.restartProbe.startsWith('/')) {
+    fail(`${source}.restartProbe`, 'must be an absolute HTTP path');
+  }
+  if (manifest.internal !== undefined && !boolean(manifest.internal)) fail(`${source}.internal`, 'must be boolean');
+  if (manifest.reseedOnReset !== undefined && !boolean(manifest.reseedOnReset)) {
+    fail(`${source}.reseedOnReset`, 'must be boolean');
+  }
+  if (manifest.databaseProvenance !== undefined) {
+    strictObject(manifest.databaseProvenance, `${source}.databaseProvenance`,
+      DATABASE_PROVENANCE_FIELDS);
+    for (const field of ['action', 'markerParameter']) {
+      if (!nonEmptyString(manifest.databaseProvenance[field])) {
+        fail(`${source}.databaseProvenance.${field}`, 'must be a non-empty string');
+      }
+    }
+    if (!object(manifest.databaseProvenance.body)
+      || Object.keys(manifest.databaseProvenance.body).length === 0) {
+      fail(`${source}.databaseProvenance.body`, 'must be a non-empty object');
+    }
+    for (const [field, value] of Object.entries(manifest.databaseProvenance.body)) {
+      if (!nonEmptyString(field) || typeof value !== 'string') {
+        fail(`${source}.databaseProvenance.body.${field}`, 'must be a string');
+      }
+    }
+  }
+  if (!object(manifest.suites) || Object.keys(manifest.suites).length === 0) {
+    fail(`${source}.suites`, 'must be a non-empty level map');
+  }
+  for (const [level, suites] of Object.entries(manifest.suites)) {
+    if (!/^[1-9]\d*$/.test(level)) fail(`${source}.suites.${level}`, 'level key must be a positive integer');
+    if (!array(suites) || suites.length === 0) fail(`${source}.suites.${level}`, 'must be a non-empty array');
+    const ids = new Set();
+    suites.forEach((suite, index) => {
+      const at = `${source}.suites.${level}[${index}]`;
+      strictObject(suite, at, SUITE_FIELDS);
+      if (!nonEmptyString(suite.id)) fail(`${at}.id`, 'must be a non-empty string');
+      if (ids.has(suite.id)) fail(`${at}.id`, `duplicate suite id ${suite.id}`);
+      ids.add(suite.id);
+      if (!nonEmptyString(suite.spec)) fail(`${at}.spec`, 'must be a non-empty string');
+      if (!oneOf(suite.inherit, ['none', 'all-higher-levels'])) {
+        fail(`${at}.inherit`, 'must be none or all-higher-levels');
+      }
+    });
+  }
+  if (manifest.actions !== undefined) {
+    if (!array(manifest.actions)) fail(`${source}.actions`, 'must be an array');
+    const ids = new Set<string>();
+    manifest.actions.forEach((action, index) => {
+      const at = `${source}.actions[${index}]`;
+      strictObject(action, at, NAMED_ACTION_FIELDS);
+      const actionPath = action.path;
+      for (const [key, field] of
+        [['id', action.id], ['path', actionPath], ['reducer', action.reducer]] as const) {
+        if (!nonEmptyString(field)) fail(`${at}.${key}`, 'must be a non-empty string');
+      }
+      if (!nonEmptyString(actionPath) || !actionPath.startsWith('/')) {
+        fail(`${at}.path`, 'must be an absolute HTTP path');
+      }
+      if (!array(action.args)) fail(`${at}.args`, 'must be an array');
+      const actionParams = action.params;
+      if (actionParams !== undefined) {
+        validateNamedActionParams(actionParams, `${at}.params`);
+        actionParams.filter(param => param.in === 'path')
+          .forEach((param, paramIndex) => {
+          if (!actionPath.includes(String(param.placeholder))) {
+            fail(`${at}.params[${paramIndex}].placeholder`,
+              `does not appear in path ${JSON.stringify(actionPath)}`);
+          }
+        });
+      }
+      const actionId = String(action.id);
+      if (ids.has(actionId)) fail(`${at}.id`, `duplicate named action ${actionId}`);
+      ids.add(actionId);
+    });
+  }
+  const provenance = manifest.databaseProvenance;
+  if (object(provenance)) {
+    const actionName = provenance.action;
+    const action = manifest.actions?.find(candidate =>
+      object(candidate) && candidate.id === actionName);
+    if (!object(action)) {
+      fail(`${source}.databaseProvenance.action`, 'must name one declared action');
+    }
+    if (!object(provenance.body)
+      || !Object.hasOwn(provenance.body, String(provenance.markerParameter))) {
+      fail(`${source}.databaseProvenance.markerParameter`,
+        'must name one field in the provenance body');
+    }
+  }
+  manifest.schemaVersion = DEFINITION_SCHEMA_VERSION;
+  return manifest as CompiledTrackManifest;
+}
diff --git a/tools/stack-bench/src/composition/definition-plan.ts b/tools/stack-bench/src/composition/definition-plan.ts
new file mode 100644
index 00000000000..cea1a42b90e
--- /dev/null
+++ b/tools/stack-bench/src/composition/definition-plan.ts
@@ -0,0 +1,95 @@
+import { readFileSync } from 'node:fs';
+import { relative, resolve, sep } from 'node:path';
+
+import {
+  DEFINITION_SCHEMA_VERSION,
+  compileScenarioDefinition,
+  compileTrackManifest,
+} from './definition-compiler.js';
+import { TRACK_MANIFEST_FILE, TRACKS_DIR } from './tracks.js';
+
+export type CanonicalDefinition = null | boolean | number | string
+  | CanonicalDefinition[] | { [key: string]: CanonicalDefinition };
+type UnknownRecord = Record<string, unknown>;
+
+const record = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value)
+  && Object.getPrototypeOf(value) === Object.prototype;
+
+export function readDefinitionJson<T = unknown>(path: string, label = 'benchmark definition'): T {
+  try {
+    return JSON.parse(readFileSync(path, 'utf8')) as T;
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    throw new Error(`cannot read ${label} ${path}: ${message}`, { cause: error });
+  }
+}
+
+function containedPath(root: string, path: string, label: string): {
+  path: string; relative: string;
+} {
+  const resolvedRoot = resolve(root);
+  const resolvedPath = resolve(resolvedRoot, path);
+  const rel = relative(resolvedRoot, resolvedPath);
+  if (rel === '..' || rel.startsWith(`..${sep}`)) {
+    throw new Error(`${label} escapes track directory: ${path}`);
+  }
+  return { path: resolvedPath, relative: rel.replaceAll('\\', '/') };
+}
+
+// Object key order is not semantic JSON. Array order is retained because suite,
+// feature, criterion, step, race-branch, and argument ordering is executable.
+export function canonicalizeDefinition(value: unknown, at = '$'): CanonicalDefinition {
+  if (value === null || typeof value === 'string' || typeof value === 'boolean') return value;
+  if (typeof value === 'number' && Number.isFinite(value)) return value;
+  if (Array.isArray(value)) {
+    return value.map((item, index) => canonicalizeDefinition(item, `${at}[${index}]`));
+  }
+  if (record(value)) {
+    return Object.fromEntries(Object.keys(value).sort()
+      .map(key => [key, canonicalizeDefinition(value[key], `${at}.${key}`)]));
+  }
+  throw new Error(`definition plan at ${at} is not canonical JSON data`);
+}
+
+export function canonicalDefinitionJson(value: unknown): string {
+  return `${JSON.stringify(canonicalizeDefinition(value), null, 2)}\n`;
+}
+
+export function compileTrackPlan(name: string, {
+  tracksDir = TRACKS_DIR,
+}: { tracksDir?: string } = {}): CanonicalDefinition {
+  if (typeof name !== 'string' || !/^[a-z0-9][a-z0-9_-]*$/.test(name)) {
+    throw new Error(`invalid track name ${JSON.stringify(name)}`);
+  }
+  const track = containedPath(tracksDir, name, 'track').path;
+  const manifestPath = containedPath(track, TRACK_MANIFEST_FILE, 'manifest').path;
+  const manifest = compileTrackManifest(readDefinitionJson(manifestPath), { source: manifestPath });
+  const scenarios = new Map<string, unknown>();
+  const levels: Array<{ level: number; suites: Array<{
+    id: string; inherit: 'none' | 'all-higher-levels'; scenario: string;
+  }> }> = [];
+
+  for (const level of Object.keys(manifest.suites).map(Number).sort((a, b) => a - b)) {
+    const declaredSuites = manifest.suites[String(level)];
+    if (!declaredSuites) throw new Error(`track L${level} has no suites`);
+    const suites = declaredSuites.map(suite => {
+      const spec = containedPath(track, suite.spec, `L${level} suite ${suite.id}`);
+      if (!scenarios.has(spec.relative)) {
+        scenarios.set(spec.relative,
+          compileScenarioDefinition(readDefinitionJson(spec.path), { source: spec.path }));
+      }
+      return { id: suite.id, inherit: suite.inherit, scenario: spec.relative };
+    });
+    levels.push({ level, suites });
+  }
+
+  return canonicalizeDefinition({
+    definitionSchemaVersion: DEFINITION_SCHEMA_VERSION,
+    track: name,
+    manifest,
+    levels,
+    scenarios: [...scenarios.entries()].sort(([a], [b]) => a.localeCompare(b))
+      .map(([path, definition]) => ({ path, definition })),
+  });
+}
diff --git a/tools/stack-bench/src/composition/pack-budget.ts b/tools/stack-bench/src/composition/pack-budget.ts
new file mode 100644
index 00000000000..8c157a8121d
--- /dev/null
+++ b/tools/stack-bench/src/composition/pack-budget.ts
@@ -0,0 +1,314 @@
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
+import { dirname, isAbsolute, resolve, sep } from 'node:path';
+
+import { ARTIFACT_FILE, currentEngineIdentity, readArtifact } from '../evidence/artifacts.js';
+import type { Artifact, ArtifactIdentity }
+  from '../evidence/artifacts.js';
+import { calibrationQualificationIdentity } from './calibration-compiler.js';
+import type { CalibrationPlan } from './calibration-compiler.js';
+import { canonicalDefinitionJson } from './definition-plan.js';
+import { nonNegativeInteger, PACK_RUNTIME_METRIC } from './pack-runtime.js';
+import { sha256 } from '../evidence/provenance.js';
+import type { RecipeBinding } from './recipe-release.js';
+import { missingRunnerObservation } from '../runtime/runner-environment.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+export interface PackRuntimeEntry {
+  id: string;
+  checkCount: unknown;
+  setupRuntimeMs: unknown;
+  criterionRuntimeMs: unknown;
+  measuredRuntimeMs: unknown;
+}
+
+export interface PackRuntime {
+  schemaVersion: number;
+  metric: string;
+  packs: PackRuntimeEntry[];
+}
+
+export interface ReferenceRun {
+  repetition: number;
+  ok: boolean;
+  output?: string;
+  packRuntime: PackRuntime;
+}
+
+export interface RunnerObservation extends UnknownRecord {
+  schemaVersion?: number;
+  mode?: string;
+  platform?: string;
+  architecture?: string;
+  dockerEngineVersion?: string;
+  dockerOs?: string;
+  dockerArchitecture?: string;
+  kernelVersion?: string;
+  cpuCount?: number;
+  memoryBytes?: number;
+}
+
+export interface ReferenceQualificationPayload {
+  fixture: string;
+  fixtureSha256: string;
+  requiredRepetitions: number;
+  isolation: string;
+  mutationControl: boolean;
+  runner?: RunnerObservation;
+  stable: boolean;
+  sameImage: boolean;
+  sameHarness: boolean;
+  ok: boolean;
+  runs: ReferenceRun[];
+}
+
+export interface PackBudgetEvidence {
+  path: string;
+  sha256: string;
+  artifact: Artifact<ReferenceQualificationPayload>;
+  runtimeCalibration: Pick<ArtifactIdentity, 'id' | 'version' | 'sha256'> | null;
+}
+
+export interface PackRuntimeSample {
+  stack: string;
+  repetition: number;
+  packId: string;
+  checkCount: number;
+  setupRuntimeMs: number;
+  criterionRuntimeMs: number;
+  measuredRuntimeMs: number;
+}
+
+export interface PackBudgetRecommendation {
+  packId: string;
+  sampleCount: number;
+  observedMinRuntimeMs: number;
+  observedMaxRuntimeMs: number;
+  maxRuntimeMs: number;
+}
+
+export interface PackBudgetResult {
+  measuredEngine: ArtifactIdentity;
+  measuredRunner: RunnerObservation;
+  samples: PackRuntimeSample[];
+  recommendations: PackBudgetRecommendation[];
+}
+
+export const PACK_BUDGET_POLICY = Object.freeze({
+  id: 'max-observed-times-two-rounded-up-1s-v1',
+  metric: PACK_RUNTIME_METRIC,
+  multiplier: 2,
+  roundUpMs: 1_000,
+  minimumMs: 1_000,
+});
+
+function requireSupportedBudgetRunner(runner: RunnerObservation | undefined,
+  expectedRunner: object | null | undefined, path: string): void {
+  if (!expectedRunner) throw new Error('selected calibration does not declare a qualification runner');
+  for (const [field, expected] of Object.entries(expectedRunner)) {
+    if (identityField(runner, field) !== expected) {
+      throw new Error(`${path} is not supported appliance timing evidence: runner.${field} must be ${expected}`);
+    }
+  }
+  const missing = missingRunnerObservation(runner);
+  if (missing.length) {
+    throw new Error(`${path} is not supported appliance timing evidence: runner observation is missing ${missing.join(', ')}`);
+  }
+}
+
+function identityField(value: unknown, field: string): unknown {
+  return value !== null && typeof value === 'object' && !Array.isArray(value)
+    ? Reflect.get(value, field) : null;
+}
+
+function equalIdentity(actual: unknown, expected: unknown, at: string): void {
+  for (const field of ['id', 'version', 'sha256']) {
+    if ((identityField(actual, field) ?? null) !== (identityField(expected, field) ?? null)) {
+      throw new Error(`${at}.${field} does not match the selected qualification scope`);
+    }
+  }
+}
+
+function equalIdentityFields(actual: unknown, expected: unknown, fields: readonly string[],
+  at: string): void {
+  for (const field of fields) {
+    if ((identityField(actual, field) ?? null) !== (identityField(expected, field) ?? null)) {
+      throw new Error(`${at}.${field} does not match the selected qualification scope`);
+    }
+  }
+}
+
+export function recommendPackBudgets({ binding, calibration, evidence }: {
+  binding: RecipeBinding;
+  calibration: CalibrationPlan;
+  evidence: PackBudgetEvidence[];
+}): PackBudgetResult {
+  if (!binding?.release || !binding?.plan || !calibration) {
+    throw new Error('pack budget recommendation requires a compiled recipe and calibration');
+  }
+  if (!Array.isArray(evidence) || evidence.length === 0) throw new Error('reference evidence is required');
+  const calibrationIdentity = calibrationQualificationIdentity(calibration);
+  const expectedStacks = calibration.qualification.stacks
+    .filter(stack => stack.status !== 'unsupported').map(stack => stack.id).sort();
+  const expectedPackCounts = new Map(binding.plan.packs.map(pack => [pack.id,
+    binding.release.checkCatalog.filter(check => check.packId === pack.id).length]));
+  const stacks = new Set<string>();
+  const samples: PackRuntimeSample[] = [];
+  let measuredEngine: ArtifactIdentity | null = null;
+  let measuredRunner: RunnerObservation | null = null;
+
+  for (const item of evidence) {
+    const artifact = item.artifact;
+    if (artifact?.kind !== 'reference_qualification') throw new Error(`${item.path} is not reference qualification evidence`);
+    const payload = artifact.payload;
+    if (payload.mutationControl !== false) throw new Error(`${item.path} is mutation evidence, not a pristine reference`);
+    if (!payload.ok || !payload.stable || !payload.sameImage || !payload.sameHarness) {
+      throw new Error(`${item.path} is not a passing stable reference qualification`);
+    }
+    equalIdentity(artifact.identities.recipe, { id: binding.release.id, version: binding.release.version,
+      sha256: binding.release.contentSha256 }, `${item.path}.identities.recipe`);
+    equalIdentity(artifact.identities.calibration, calibrationIdentity,
+      `${item.path}.identities.calibration`);
+    equalIdentity(item.runtimeCalibration, { id: calibration.id, version: calibration.version,
+      sha256: calibration.contentSha256 }, `${item.path}.retainedRuntimeCalibration`);
+    const stack = artifact.identities.stackAdapter?.id;
+    if (typeof stack !== 'string' || !expectedStacks.includes(stack)) {
+      throw new Error(`${item.path} has unexpected stack ${stack ?? '<missing>'}`);
+    }
+    if (stacks.has(stack)) throw new Error(`reference evidence repeats stack ${stack}`);
+    stacks.add(stack);
+    const expectedReference = calibration.references.entries.find(entry => entry.backend === stack);
+    if (!expectedReference) throw new Error(`${item.path} has unexpected stack ${stack}`);
+    equalIdentity(artifact.identities.fixture, { id: expectedReference.id, version: null,
+      sha256: expectedReference.sourceSha256 }, `${item.path}.identities.fixture`);
+    if (payload.fixture !== expectedReference.id || payload.fixtureSha256 !== expectedReference.sourceSha256) {
+      throw new Error(`${item.path} fixture does not match the selected ${stack} reference`);
+    }
+    if (payload.isolation !== 'docker') throw new Error(`${item.path} was not produced in Docker`);
+    requireSupportedBudgetRunner(payload.runner, calibration.qualification.runner, item.path);
+    if (measuredRunner === null) {
+      if (!payload.runner) throw new Error(`${item.path} has no runner observation`);
+      measuredRunner = payload.runner;
+    }
+    else if (canonicalDefinitionJson(payload.runner) !== canonicalDefinitionJson(measuredRunner)) {
+      throw new Error(`${item.path} was measured on a different appliance runner environment`);
+    }
+    if (payload.requiredRepetitions !== calibration.qualification.referenceRepetitions
+      || payload.runs?.length !== payload.requiredRepetitions) {
+      throw new Error(`${item.path} does not contain the declared reference repetitions`);
+    }
+    if (measuredEngine === null) {
+      if (!artifact.identities.engine) throw new Error(`${item.path} has no engine identity`);
+      measuredEngine = artifact.identities.engine;
+    }
+    else equalIdentity(artifact.identities.engine, measuredEngine, `${item.path}.identities.engine`);
+
+    const repetitions = new Set();
+    for (const run of payload.runs) {
+      if (!Number.isInteger(run.repetition) || run.repetition < 1
+        || run.repetition > payload.requiredRepetitions || repetitions.has(run.repetition)) {
+        throw new Error(`${item.path} has invalid or repeated repetition ${run.repetition}`);
+      }
+      repetitions.add(run.repetition);
+      if (!run.ok) throw new Error(`${item.path} repetition ${run.repetition} did not pass`);
+      const runtime = run.packRuntime;
+      if (runtime?.schemaVersion !== 1 || runtime.metric !== PACK_RUNTIME_METRIC
+        || !Array.isArray(runtime.packs)) {
+        throw new Error(`${item.path} repetition ${run.repetition} has no supported pack runtime evidence`);
+      }
+      const seenPacks = new Set();
+      for (const pack of runtime.packs) {
+        if (!expectedPackCounts.has(pack.id)) throw new Error(`${item.path} measured unknown pack ${pack.id}`);
+        if (seenPacks.has(pack.id)) throw new Error(`${item.path} repeats measured pack ${pack.id}`);
+        seenPacks.add(pack.id);
+        const checkCount = nonNegativeInteger(pack.checkCount,
+          `${item.path}.${pack.id}.checkCount`);
+        if (checkCount !== expectedPackCounts.get(pack.id)) {
+          throw new Error(`${item.path} measured ${checkCount} checks for ${pack.id}; expected ${expectedPackCounts.get(pack.id)}`);
+        }
+        const setupRuntimeMs = nonNegativeInteger(pack.setupRuntimeMs,
+          `${item.path}.${pack.id}.setupRuntimeMs`);
+        const criterionRuntimeMs = nonNegativeInteger(pack.criterionRuntimeMs,
+          `${item.path}.${pack.id}.criterionRuntimeMs`);
+        const measuredRuntimeMs = nonNegativeInteger(pack.measuredRuntimeMs,
+          `${item.path}.${pack.id}.measuredRuntimeMs`);
+        if (measuredRuntimeMs !== setupRuntimeMs + criterionRuntimeMs) {
+          throw new Error(`${item.path}.${pack.id}.measuredRuntimeMs does not equal its components`);
+        }
+        samples.push({ stack, repetition: run.repetition, packId: pack.id, checkCount,
+          setupRuntimeMs, criterionRuntimeMs, measuredRuntimeMs });
+      }
+      const missing = [...expectedPackCounts.keys()].filter(id => !seenPacks.has(id));
+      if (missing.length) throw new Error(`${item.path} repetition ${run.repetition} is missing packs: ${missing.join(', ')}`);
+    }
+  }
+  const missingStacks = expectedStacks.filter(stack => !stacks.has(stack));
+  if (missingStacks.length || stacks.size !== expectedStacks.length) {
+    throw new Error(`reference evidence must cover each supported stack exactly once; missing ${missingStacks.join(', ') || 'none'}`);
+  }
+  if (!measuredEngine || !measuredRunner) throw new Error('reference evidence is incomplete');
+  equalIdentity(measuredEngine, currentEngineIdentity(), 'reference evidence engine');
+  samples.sort((a, b) => a.packId.localeCompare(b.packId)
+    || a.stack.localeCompare(b.stack) || a.repetition - b.repetition);
+  const recommendations = [...expectedPackCounts.keys()].sort().map(packId => {
+    const observed = samples.filter(sample => sample.packId === packId).map(sample => sample.measuredRuntimeMs);
+    const observedMaxRuntimeMs = Math.max(...observed);
+    const maxRuntimeMs = Math.max(PACK_BUDGET_POLICY.minimumMs,
+      Math.ceil(observedMaxRuntimeMs * PACK_BUDGET_POLICY.multiplier / PACK_BUDGET_POLICY.roundUpMs)
+        * PACK_BUDGET_POLICY.roundUpMs);
+    return { packId, sampleCount: observed.length,
+      observedMinRuntimeMs: Math.min(...observed), observedMaxRuntimeMs, maxRuntimeMs };
+  });
+  return { measuredEngine, measuredRunner, samples, recommendations };
+}
+
+function containedRunPath(artifactPath: string, runOutput: unknown): string {
+  if (typeof runOutput !== 'string' || !runOutput || isAbsolute(runOutput)) {
+    throw new Error(`${artifactPath} contains an invalid absolute run output`);
+  }
+  const base = realpathSync(resolve(dirname(artifactPath)));
+  const requested = resolve(base, runOutput);
+  if (!existsSync(requested)) throw new Error(`${artifactPath} retained run is missing ${requested}`);
+  const output = realpathSync(requested);
+  if (output !== base && !output.startsWith(`${base}${sep}`)) {
+    throw new Error(`${artifactPath} run output escapes its evidence directory`);
+  }
+  return output;
+}
+
+export function loadPackBudgetEvidence(paths: string[]): PackBudgetEvidence[] {
+  return paths.map(path => {
+    const artifact = readArtifact<ReferenceQualificationPayload>(path,
+      { expectedKind: 'reference_qualification' });
+    let runtimeCalibration: ArtifactIdentity | null = null;
+    for (const run of artifact.payload.runs ?? []) {
+      const output = containedRunPath(path, run.output);
+      const bundlePath = resolve(output, 'grading', ARTIFACT_FILE.gradeBundle);
+      const runPath = resolve(output, ARTIFACT_FILE.run);
+      if (!existsSync(runPath)) throw new Error(`${path} retained run is missing ${runPath}`);
+      if (!existsSync(bundlePath)) throw new Error(`${path} retained run is missing ${bundlePath}`);
+      const raw = readArtifact(runPath, { expectedKind: 'benchmark_run' });
+      const bundle = readArtifact<{ packRuntime: PackRuntime }>(bundlePath,
+        { expectedKind: 'grade_bundle' });
+      equalIdentity(raw.identities.engine, artifact.identities.engine,
+        `${path} retained run ${run.repetition}.identities.engine`);
+      equalIdentityFields(raw.identities.stackAdapter, artifact.identities.stackAdapter, ['id'],
+        `${path} retained run ${run.repetition}.identities.stackAdapter`);
+      equalIdentityFields(raw.identities.agentAdapter, { id: 'reference-fixture' }, ['id'],
+        `${path} retained run ${run.repetition}.identities.agentAdapter`);
+      for (const identity of ['engine', 'recipe', 'stackAdapter'] as const) {
+        equalIdentity(bundle.identities[identity], artifact.identities[identity],
+          `${path} retained run ${run.repetition}.identities.${identity}`);
+      }
+      equalIdentityFields(bundle.identities.calibration, artifact.identities.calibration,
+        ['id', 'version'], `${path} retained run ${run.repetition}.identities.calibration`);
+      if (runtimeCalibration === null) runtimeCalibration = bundle.identities.calibration;
+      else equalIdentity(bundle.identities.calibration, runtimeCalibration,
+        `${path} retained run ${run.repetition}.identities.calibration`);
+      if (canonicalDefinitionJson(bundle.payload.packRuntime) !== canonicalDefinitionJson(run.packRuntime)) {
+        throw new Error(`${path} pack runtime summary differs from retained run ${run.repetition}`);
+      }
+    }
+    return { path, sha256: sha256(readFileSync(path)), artifact, runtimeCalibration };
+  });
+}
diff --git a/tools/stack-bench/src/composition/pack-runtime.ts b/tools/stack-bench/src/composition/pack-runtime.ts
new file mode 100644
index 00000000000..94adb496c51
--- /dev/null
+++ b/tools/stack-bench/src/composition/pack-runtime.ts
@@ -0,0 +1,191 @@
+import { criterionEvidence, validateCheckEvidence } from '../evidence/check-evidence.js';
+import type { CompletedGradeReport } from '../evidence/grade-report.js';
+import type { CompiledPackBudget } from './composition-compiler.js';
+
+export const PACK_RUNTIME_METRIC = 'pack-check-wall-clock-sum-v1' as const;
+
+export interface PackRuntimeMeasurement {
+  id: string;
+  checkCount: number;
+  setupRuntimeMs: number;
+  criterionRuntimeMs: number;
+  measuredRuntimeMs: number;
+}
+
+export interface PackRuntimeEvidence {
+  schemaVersion: 1;
+  metric: typeof PACK_RUNTIME_METRIC;
+  packs: PackRuntimeMeasurement[];
+}
+
+interface PackDefinition {
+  id: string;
+  budget: CompiledPackBudget;
+}
+
+export interface AggregatedPackRuntimeMeasurement extends PackRuntimeMeasurement {
+  budget: CompiledPackBudget;
+  exceeded: boolean | null;
+}
+
+export interface AggregatedPackRuntimeEvidence {
+  schemaVersion: 1;
+  metric: typeof PACK_RUNTIME_METRIC;
+  packs: AggregatedPackRuntimeMeasurement[];
+}
+
+export function nonNegativeInteger(value: unknown, at: string): number {
+  if (typeof value !== 'number' || !Number.isInteger(value) || value < 0) {
+    throw new Error(`${at} must be a non-negative integer`);
+  }
+  return value;
+}
+
+export function measureGradePackRuntime(report: CompletedGradeReport): PackRuntimeEvidence {
+  const selected = report.selection?.checks;
+  if (!Array.isArray(selected) || selected.length === 0) {
+    throw new Error('pack runtime measurement requires a non-empty recipe selection');
+  }
+  const byKey = new Map<string, string>();
+  for (const check of selected) {
+    if (typeof check.stableKey !== 'string' || !check.stableKey
+      || typeof check.packId !== 'string' || !check.packId) {
+      throw new Error('pack runtime selection requires stableKey and packId');
+    }
+    if (byKey.has(check.stableKey)) {
+      throw new Error(`pack runtime selection repeats ${check.stableKey}`);
+    }
+    byKey.set(check.stableKey, check.packId);
+  }
+
+  const totals = new Map<string, PackRuntimeMeasurement>();
+  const seen = new Set<string>();
+  for (const feature of report.features) {
+    const featurePacks = new Set<string>();
+    for (const criterion of feature.criteria ?? []) {
+      const stableKey = criterion.stableKey;
+      if (typeof stableKey !== 'string') {
+        throw new Error(`graded criterion has unknown stable key ${String(stableKey ?? '<missing>')}`);
+      }
+      const packId = byKey.get(stableKey);
+      if (!packId) throw new Error(`graded criterion has unknown stable key ${stableKey}`);
+      if (seen.has(stableKey)) throw new Error(`graded criterion repeats stable key ${stableKey}`);
+      seen.add(stableKey);
+      featurePacks.add(packId);
+      const evidence = criterionEvidence(criterion);
+      const durationMs = nonNegativeInteger(evidence.timing.durationMs, `${stableKey} durationMs`);
+      const current = totals.get(packId) ?? {
+        id: packId,
+        checkCount: 0,
+        setupRuntimeMs: 0,
+        criterionRuntimeMs: 0,
+        measuredRuntimeMs: 0,
+      };
+      current.checkCount += 1;
+      // A setup failure projects one setup observation onto every affected
+      // criterion. Count that shared setup once per pack below.
+      if (evidence.phase === 'assertion') current.criterionRuntimeMs += durationMs;
+      totals.set(packId, current);
+    }
+    const setupEvidence = validateCheckEvidence(feature.setupEvidence, {
+      at: `feature ${String(feature.id ?? '<unknown>')}.setupEvidence`,
+    });
+    if (setupEvidence.phase !== 'setup') {
+      throw new Error(`feature ${String(feature.id ?? '<unknown>')}.setupEvidence must use setup phase`);
+    }
+    const setupRuntimeMs = nonNegativeInteger(
+      setupEvidence.timing.durationMs,
+      `feature ${String(feature.id ?? '<unknown>')} setup durationMs`,
+    );
+    // If two packs share a feature, each is charged the complete setup it would
+    // require when selected alone. This deliberately avoids timing-order or
+    // scoring-weight allocation rules.
+    for (const packId of featurePacks) {
+      const total = totals.get(packId);
+      if (total) total.setupRuntimeMs += setupRuntimeMs;
+    }
+  }
+  const missing = [...byKey.keys()].filter((key) => !seen.has(key));
+  if (missing.length) throw new Error(`pack runtime evidence is missing ${missing.join(', ')}`);
+  for (const measured of totals.values()) {
+    measured.measuredRuntimeMs = measured.setupRuntimeMs + measured.criterionRuntimeMs;
+  }
+  return {
+    schemaVersion: 1,
+    metric: PACK_RUNTIME_METRIC,
+    packs: [...totals.values()].sort((left, right) => left.id.localeCompare(right.id)),
+  };
+}
+
+export function aggregatePackRuntime(
+  suiteReports: Array<{ packRuntime?: PackRuntimeEvidence }>,
+  packDefinitions: PackDefinition[],
+): AggregatedPackRuntimeEvidence {
+  if (!Array.isArray(suiteReports)) throw new Error('suiteReports must be an array');
+  if (!Array.isArray(packDefinitions)) throw new Error('packDefinitions must be an array');
+  const definitions = new Map<string, PackDefinition>();
+  for (const pack of packDefinitions) {
+    if (definitions.has(pack.id)) throw new Error(`packDefinitions repeats ${pack.id}`);
+    definitions.set(pack.id, pack);
+  }
+  const totals = new Map<string, PackRuntimeMeasurement>();
+  for (const report of suiteReports) {
+    if (!report?.packRuntime) continue;
+    if (report.packRuntime.schemaVersion !== 1 || report.packRuntime.metric !== PACK_RUNTIME_METRIC
+      || !Array.isArray(report.packRuntime.packs)) {
+      throw new Error('suite pack runtime uses an unsupported measurement format');
+    }
+    for (const measured of report.packRuntime.packs) {
+      const definition = definitions.get(measured.id);
+      if (!definition) throw new Error(`suite measured unselected pack ${measured.id}`);
+      const checkCount = nonNegativeInteger(measured.checkCount, `${measured.id} checkCount`);
+      const setupRuntimeMs = nonNegativeInteger(measured.setupRuntimeMs, `${measured.id} setupRuntimeMs`);
+      const criterionRuntimeMs = nonNegativeInteger(
+        measured.criterionRuntimeMs,
+        `${measured.id} criterionRuntimeMs`,
+      );
+      const measuredRuntimeMs = nonNegativeInteger(
+        measured.measuredRuntimeMs,
+        `${measured.id} measuredRuntimeMs`,
+      );
+      if (measuredRuntimeMs !== setupRuntimeMs + criterionRuntimeMs) {
+        throw new Error(`${measured.id} measuredRuntimeMs must equal setupRuntimeMs + criterionRuntimeMs`);
+      }
+      const current = totals.get(measured.id) ?? {
+        id: measured.id,
+        checkCount: 0,
+        setupRuntimeMs: 0,
+        criterionRuntimeMs: 0,
+        measuredRuntimeMs: 0,
+      };
+      current.checkCount += checkCount;
+      current.setupRuntimeMs += setupRuntimeMs;
+      current.criterionRuntimeMs += criterionRuntimeMs;
+      current.measuredRuntimeMs += measuredRuntimeMs;
+      totals.set(measured.id, current);
+    }
+  }
+  return {
+    schemaVersion: 1,
+    metric: PACK_RUNTIME_METRIC,
+    packs: [...totals.values()]
+      .sort((left, right) => left.id.localeCompare(right.id))
+      .map((measured) => {
+        const definition = definitions.get(measured.id);
+        if (!definition) throw new Error(`pack definition is missing ${measured.id}`);
+        const budget = structuredClone(definition.budget);
+        const maxRuntimeMs = budget.status === 'bounded' ? budget.maxRuntimeMs : null;
+        return {
+          ...measured,
+          budget,
+          exceeded: maxRuntimeMs === null ? null : measured.measuredRuntimeMs > maxRuntimeMs,
+        };
+      }),
+  };
+}
+
+export function exceededPackBudgets(
+  runtime: { packs?: AggregatedPackRuntimeMeasurement[] } | null | undefined,
+): AggregatedPackRuntimeMeasurement[] {
+  return (runtime?.packs ?? []).filter((pack) => pack.exceeded === true);
+}
diff --git a/tools/stack-bench/src/composition/product-config.ts b/tools/stack-bench/src/composition/product-config.ts
new file mode 100644
index 00000000000..b689740c9df
--- /dev/null
+++ b/tools/stack-bench/src/composition/product-config.ts
@@ -0,0 +1,51 @@
+export const DEFAULT_BUILD_IMAGE = 'stack-bench-build:2.1.226';
+
+export const PREFLIGHT_RESOURCE_FLOORS = Object.freeze({
+  cpuCount: 4,
+  memoryBytes: 8 * 1024 ** 3,
+  resultDiskBytes: 10 * 1024 ** 3,
+  clockSkewMs: 5_000,
+});
+
+// Every build container runs with the same enforced Docker limits. Keep this policy
+// in one place so admission, container creation, reuse checks, and evidence
+// cannot disagree about the resources assigned to an attempt.
+export const BUILD_CONTAINER_RESOURCE_LIMITS = Object.freeze({
+  cpuCount: 2,
+  memoryBytes: 4 * 1024 ** 3,
+  memorySwapBytes: 4 * 1024 ** 3,
+  pids: 512,
+});
+
+// The single-attempt floor covers shared grader, browser, database, and controller
+// work. Each additional attempt adds one build-container allowance.
+export const ADDITIONAL_ATTEMPT_RESOURCE_FLOORS = Object.freeze({
+  cpuCount: BUILD_CONTAINER_RESOURCE_LIMITS.cpuCount + 1,
+  memoryBytes: BUILD_CONTAINER_RESOURCE_LIMITS.memoryBytes,
+});
+
+export interface ResourceFloors {
+  readonly cpuCount: number;
+  readonly memoryBytes: number;
+  readonly resultDiskBytes: number;
+  readonly clockSkewMs: number;
+}
+
+export function preflightResourceFloors(parallelism = 1): Readonly<ResourceFloors> {
+  if (!Number.isInteger(parallelism) || parallelism < 1) {
+    throw new Error('parallelism must be a positive integer');
+  }
+  // The single-run floor includes shared services. Each extra attempt adds its
+  // build-container allowance; recorded peaks inform future changes to this estimate.
+  return Object.freeze({
+    ...PREFLIGHT_RESOURCE_FLOORS,
+    cpuCount: PREFLIGHT_RESOURCE_FLOORS.cpuCount
+      + ((parallelism - 1) * ADDITIONAL_ATTEMPT_RESOURCE_FLOORS.cpuCount),
+    memoryBytes: PREFLIGHT_RESOURCE_FLOORS.memoryBytes
+      + ((parallelism - 1) * ADDITIONAL_ATTEMPT_RESOURCE_FLOORS.memoryBytes),
+  });
+}
+
+export const BUILD_OUTBOUND_DESTINATIONS = Object.freeze([
+  'https://registry.npmjs.org',
+]);
diff --git a/tools/stack-bench/src/composition/qualification-scope.ts b/tools/stack-bench/src/composition/qualification-scope.ts
new file mode 100644
index 00000000000..070804406db
--- /dev/null
+++ b/tools/stack-bench/src/composition/qualification-scope.ts
@@ -0,0 +1,296 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, extname, join, relative, resolve } from 'node:path';
+import { z } from 'zod';
+
+import { canonicalDefinitionJson, canonicalizeDefinition } from './definition-plan.js';
+import { hashFiles, sha256 } from '../evidence/provenance.js';
+import { stackAdapterVersion } from '../stacks/stack-identities.js';
+import { formatZodError } from '../zod-error.js';
+
+export const QUALIFICATION_SCOPE_SCHEMA_VERSION = 2;
+
+export type QualificationKind = 'reference' | 'mutation' | 'null';
+
+interface QualificationCheck {
+  stableKey: string;
+  executionId: unknown;
+  source?: unknown;
+  featureId?: unknown;
+  criterionId?: unknown;
+  points: unknown;
+}
+
+interface QualificationRelease {
+  id: string;
+  version: string;
+  contentSha256: string;
+  track: string;
+  checkCatalog: QualificationCheck[];
+}
+
+interface QualificationReference {
+  backend: string;
+  id: string;
+  sourceSha256: string;
+}
+
+interface QualificationMutation {
+  backend: string;
+  executionSha256?: string;
+}
+
+interface QualificationStackIdentity {
+  id: string;
+  reference: { id: string; sourceSha256: string };
+  version: string;
+}
+
+interface QualificationScopeDocument {
+  checksSha256: string;
+  executableSha256: string;
+  kind: QualificationKind;
+  mutationSha256: string | null;
+  recipe: { contentSha256: string; id: string; version: string };
+  schemaVersion: number;
+  stack: QualificationStackIdentity | null;
+}
+
+export interface QualificationScopeIdentity extends QualificationScopeDocument {
+  sha256: string;
+}
+
+export interface QualificationScopeInput {
+  kind: QualificationKind;
+  release: QualificationRelease;
+  stack?: string | null;
+  reference?: QualificationReference | null;
+  mutation?: QualificationMutation | null;
+  stackBenchRoot: string;
+}
+
+const KINDS = new Set<QualificationKind>(['reference', 'mutation', 'null']);
+const DIGEST = /^[a-f0-9]{64}$/;
+const qualificationScopeSchema = z.strictObject({
+  schemaVersion: z.literal(QUALIFICATION_SCOPE_SCHEMA_VERSION),
+  kind: z.enum(['reference', 'mutation', 'null']),
+  executableSha256: z.string().regex(DIGEST),
+  recipe: z.strictObject({
+    id: z.string().min(1), version: z.string().min(1), contentSha256: z.string().regex(DIGEST),
+  }),
+  checksSha256: z.string().regex(DIGEST),
+  stack: z.strictObject({
+    id: z.string().min(1),
+    version: z.string().min(1),
+    reference: z.strictObject({ id: z.string().min(1), sourceSha256: z.string().regex(DIGEST) }),
+  }).nullable(),
+  mutationSha256: z.string().regex(DIGEST).nullable(),
+  sha256: z.string().regex(DIGEST),
+});
+const KIND_ENTRYPOINTS: Readonly<Record<QualificationKind, readonly string[]>> = Object.freeze({
+  reference: ['commands/bench.ts', 'src/references/reference-live.ts'],
+  mutation: ['commands/bench.ts', 'src/references/reference-live.ts', 'grader/mutation-test.ts'],
+  null: ['commands/null-control.ts', 'grader/grade.ts'],
+});
+const CHILD_ENTRYPOINTS: Readonly<Record<string, readonly string[]>> = Object.freeze({
+  'commands/bench.ts': ['commands/run-suite.ts'],
+  'src/references/reference-live.ts': ['src/references/reference-agent.ts'],
+  'src/references/reference-agent.ts': ['container/run-build.ts'],
+  'commands/run-suite.ts': [
+    'commands/check-actions.ts',
+    'commands/reset-backend.ts',
+    'grader/grade.ts',
+    'linter/lint.ts',
+  ],
+  'grader/mutation-test.ts': ['grader/grade.ts'],
+});
+const STACK_OWNED_MODULES = new Map<string, string>([
+  ['src/stacks/backends/mongodb-adapter.ts', 'mongodb'],
+  ['src/stacks/backends/mongodb-identity.ts', 'mongodb'],
+  ['src/stacks/backends/mongodb-operations.ts', 'mongodb'],
+  ['src/stacks/backends/postgres-adapter.ts', 'postgres'],
+  ['src/stacks/backends/postgres-identity.ts', 'postgres'],
+  ['src/stacks/backends/postgres-operations.ts', 'postgres'],
+  ['src/stacks/backends/spacetime-adapter.ts', 'spacetime'],
+  ['src/stacks/backends/spacetime-identity.ts', 'spacetime'],
+  ['src/stacks/backends/spacetime-operations.ts', 'spacetime'],
+  ['src/stacks/backends/stub-adapter.ts', 'stub'],
+  ['src/stacks/backends/stub-identity.ts', 'stub'],
+]);
+const STACK_OWNED_ROOT = 'src/stacks/backends/';
+const BACKEND_ONLY_MODULES = new Set(['src/stacks/stack-adapters.ts']);
+const RUNTIME_INPUTS = Object.freeze([
+  'package.json',
+  'package-lock.json',
+  'docker-compose.yaml',
+  'appliance/Controller.Dockerfile',
+  'appliance/docker-compose.yaml',
+]);
+
+function fail(message: string): never {
+  throw new Error(`qualification scope: ${message}`);
+}
+
+function resolveLocalImport(from: string, specifier: string, root: string): string {
+  const base = resolve(dirname(from), specifier);
+  const extension = extname(base);
+  const candidates = extension
+    ? [base, ...(extension === '.js' ? [`${base.slice(0, -extension.length)}.ts`] : [])]
+    : [base, `${base}.js`, `${base}.ts`, `${base}.json`,
+      join(base, 'index.js'), join(base, 'index.ts')];
+  const match = candidates.find(candidate => existsSync(candidate));
+  if (!match) fail(`unmapped local import ${specifier} from ${relative(root, from).replaceAll('\\', '/')}`);
+  const rel = relative(root, match);
+  if (rel === '..' || rel.startsWith(`..\\`) || rel.startsWith('../')) {
+    fail(`local import escapes Stack Bench: ${specifier}`);
+  }
+  return match;
+}
+
+function localImports(path: string, root: string): string[] {
+  if (!/\.(?:js|ts)$/.test(path)) return [];
+  const source = readFileSync(path, 'utf8');
+  const imports: string[] = [];
+  const staticPattern = /\b(?:import|export)\s+(?:[^'";]*?\s+from\s+)?['"]([^'"]+)['"]/g;
+  const dynamicPattern = /\bimport\s*\(\s*(['"])([^'"]+)\1\s*\)/g;
+  for (const pattern of [staticPattern, dynamicPattern]) {
+    for (const match of source.matchAll(pattern)) {
+      if (/^(?:import|export)\s+type\b/.test(match[0])) continue;
+      const specifier = match[pattern === dynamicPattern ? 2 : 1];
+      if (specifier?.startsWith('.')) {
+        imports.push(resolveLocalImport(path, specifier, root));
+      }
+    }
+  }
+  const dynamicCalls = source.match(/\bimport\s*\(/g)?.length ?? 0;
+  const literalDynamicCalls = [...source.matchAll(dynamicPattern)].length;
+  const relativePath = relative(root, path).replaceAll('\\', '/');
+  const trackLoaderCall = ['import', '(pathToFileURL(track.walk).href)'].join('');
+  const declaredTrackLoader = relativePath === 'linter/lint.ts'
+    && source.includes(trackLoaderCall);
+  if (dynamicCalls !== literalDynamicCalls + (declaredTrackLoader ? 1 : 0)) {
+    fail(`unmapped dynamic import in ${relativePath}`);
+  }
+  return imports;
+}
+
+function moduleOwner(relativePath: string): string | null {
+  if (BACKEND_ONLY_MODULES.has(relativePath)) return '*';
+  if (!relativePath.startsWith(STACK_OWNED_ROOT)) return null;
+  const owner = STACK_OWNED_MODULES.get(relativePath);
+  if (!owner) fail(`unmapped stack-owned module ${relativePath}`);
+  return owner;
+}
+
+function moduleGraph(root: string, entrypoints: readonly string[], {
+  stack,
+}: { stack: string | null }): string[] {
+  const pending = entrypoints.map(path => resolve(root, path));
+  const files = new Set<string>();
+  while (pending.length) {
+    const path = pending.pop();
+    if (!path) continue;
+    if (files.has(path)) continue;
+    const relativePath = relative(root, path).replaceAll('\\', '/');
+    if (!existsSync(path)) fail(`mapped input does not exist: ${relativePath}`);
+    const owner = moduleOwner(relativePath);
+    if (owner && (stack === null || (owner !== '*' && owner !== stack))) continue;
+    files.add(path);
+    pending.push(...localImports(path, root));
+    pending.push(...(CHILD_ENTRYPOINTS[relativePath] ?? []).map(child => resolve(root, child)));
+  }
+  return [...files];
+}
+
+function checkIdentity(release: QualificationRelease): string {
+  if (!Array.isArray(release.checkCatalog) || release.checkCatalog.length === 0) {
+    fail('a resolved recipe check catalog is required');
+  }
+  const checks = release.checkCatalog.map(check => ({
+    stableKey: check.stableKey,
+    executionId: check.executionId,
+    source: check.source,
+    featureId: check.featureId,
+    criterionId: check.criterionId,
+    points: check.points,
+  })).sort((a, b) => a.stableKey.localeCompare(b.stableKey));
+  if (checks.some(check => typeof check.stableKey !== 'string' || !check.stableKey)) {
+    fail('every selected check requires a stable key');
+  }
+  if (new Set(checks.map(check => check.stableKey)).size !== checks.length) {
+    fail('selected check stable keys must be unique');
+  }
+  return sha256(canonicalDefinitionJson(canonicalizeDefinition(checks)));
+}
+
+export function qualificationScopeIdentity({ kind, release, stack = null, reference = null,
+  mutation = null, stackBenchRoot }: QualificationScopeInput): QualificationScopeIdentity {
+  if (!KINDS.has(kind)) fail(`unknown evidence kind ${JSON.stringify(kind)}`);
+  const root = resolve(stackBenchRoot);
+  if (!existsSync(root)) fail(`Stack Bench root does not exist: ${root}`);
+  if (!release?.id || !release?.version || !release?.contentSha256 || !release?.track) {
+    fail('a resolved recipe release is required');
+  }
+  if (kind === 'null') {
+    if (stack !== null || reference !== null || mutation !== null) {
+      fail('null evidence cannot declare a stack, reference, or mutation');
+    }
+  } else {
+    if (typeof stack !== 'string' || !stack) fail(`${kind} evidence requires a stack`);
+    if (!reference || reference.backend !== stack || !reference.id || !reference.sourceSha256) {
+      fail(`${kind} evidence requires its exact stack reference`);
+    }
+    if (kind === 'mutation' && (!mutation || mutation.backend !== stack
+      || !mutation.executionSha256)) {
+      fail('mutation evidence requires its exact stack mutation input');
+    }
+    if (kind === 'reference' && mutation !== null) fail('reference evidence cannot declare a mutation');
+  }
+
+  const files = moduleGraph(root, KIND_ENTRYPOINTS[kind], { stack });
+  for (const input of RUNTIME_INPUTS) {
+    const path = resolve(root, input);
+    if (!existsSync(path)) fail(`mapped runtime input does not exist: ${input}`);
+    files.push(path);
+  }
+  const trackWalk = resolve(root, 'tracks', release.track, 'walk.ts');
+  if (!existsSync(trackWalk)) fail(`mapped track walk does not exist: tracks/${release.track}/walk.ts`);
+  files.push(trackWalk);
+  const executable = hashFiles(files, { base: root });
+  const adapter = stack === null ? null : { id: stack, version: stackAdapterVersion(stack) };
+  const document: QualificationScopeDocument = {
+    checksSha256: checkIdentity(release),
+    executableSha256: executable.sha256,
+    kind,
+    mutationSha256: mutation?.executionSha256 ?? null,
+    recipe: { contentSha256: release.contentSha256, id: release.id, version: release.version },
+    schemaVersion: QUALIFICATION_SCOPE_SCHEMA_VERSION,
+    stack: adapter && reference ? { id: adapter.id,
+      reference: { id: reference.id, sourceSha256: reference.sourceSha256 },
+      version: adapter.version } : null,
+  };
+  return { ...document, sha256: sha256(canonicalDefinitionJson(document)) };
+}
+
+function assertQualificationScopeIdentity(value: unknown, at: string):
+  asserts value is QualificationScopeIdentity {
+  const parsed = qualificationScopeSchema.safeParse(value);
+  if (!parsed.success) fail(formatZodError(parsed.error, at));
+  const scope = parsed.data;
+  if (scope.kind === 'null') {
+    if (scope.stack !== null || scope.mutationSha256 !== null) fail(`${at} has invalid null scope`);
+  } else {
+    if (!scope.stack) fail(`${at}.stack is invalid`);
+    if (scope.kind === 'mutation' ? scope.mutationSha256 === null
+      : scope.mutationSha256 !== null) fail(`${at}.mutationSha256 is invalid`);
+  }
+  const { sha256: claimed, ...document } = scope;
+  if (sha256(canonicalDefinitionJson(canonicalizeDefinition(document))) !== claimed) {
+    fail(`${at}.sha256 does not match its fields`);
+  }
+}
+
+export function validateQualificationScopeIdentity(value: unknown,
+  at = 'qualificationScope'): QualificationScopeIdentity {
+  assertQualificationScopeIdentity(value, at);
+  return structuredClone(value);
+}
diff --git a/tools/stack-bench/src/composition/recipe-release.ts b/tools/stack-bench/src/composition/recipe-release.ts
new file mode 100644
index 00000000000..c35dc6ae4fe
--- /dev/null
+++ b/tools/stack-bench/src/composition/recipe-release.ts
@@ -0,0 +1,957 @@
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
+import { dirname, join, relative, resolve } from 'node:path';
+import { z } from 'zod';
+
+import { compilePromotionFile, compileRecipeFile } from './composition-compiler.js';
+import { compileScenarioDefinition, compileTrackManifest } from './definition-compiler.js';
+import { canonicalDefinitionJson, canonicalizeDefinition, readDefinitionJson }
+  from './definition-plan.js';
+import { sha256 } from '../evidence/provenance.js';
+import type {
+  CompiledOwnedTaskFragment,
+  CompiledPromotionCatalog,
+  CompiledRecipePlan,
+} from './composition-compiler.js';
+import type { CompiledStep } from './definition-compiler.js';
+import { TRACK_MANIFEST_FILE, type Track } from './tracks.js';
+
+export const RECIPE_RELEASE_SCHEMA_VERSION = 2;
+
+export interface RecipeCheck {
+  stableKey: string;
+  executionId: string;
+  points: number;
+  packId?: string;
+  stablePackId?: string;
+  packVersion?: string;
+  checkGroupId?: string;
+  role?: string;
+  observations?: string[];
+  requiresFeatures?: string[];
+  source?: string;
+  featureId?: number;
+  criterionId?: string;
+  description?: string;
+  treatment?: string;
+}
+
+export interface RecipeTaskFragment {
+  id: string;
+  path: string;
+  order: number;
+  from: string | null;
+  until: string | null;
+  owners: string[];
+  ownerConditions?: Array<{ owner: string; modes: string[]; requiresFeatures: string[] }>;
+  modes: string[];
+  requiresFeatures?: string[];
+  sha256: string;
+}
+
+export interface RecipePackComponent {
+  id: string;
+  version: string;
+  state: string;
+  path: string;
+  sha256: string;
+  includeRoles: string[];
+  includeCheckGroups?: string[];
+  stableId?: string;
+  moduleType?: string;
+  requiresPacks: string[];
+}
+
+export interface RecipeReleaseIdentity extends Record<string, unknown> {
+  recipeReleaseSchemaVersion: number;
+  id: string;
+  version: string;
+  state: string;
+  track: string;
+  meaningSha256: string;
+  executionSha256: string;
+  contentSha256: string;
+  sourceManifestSha256: string;
+}
+
+interface RecipeSourceManifestEntry {
+  path: string;
+  sha256: string;
+  kinds: string[];
+}
+
+export interface RecipeRelease extends RecipeReleaseIdentity {
+  title: string;
+  sequence: { level: number } | null;
+  capabilities: string[];
+  scoring: { mode: string; checks: number; points: number };
+  checkCatalog: RecipeCheck[];
+  sourceManifest: RecipeSourceManifestEntry[];
+  components: {
+    fixture: { id: string; version: string; state: string; path: string; sha256: string };
+    packs: RecipePackComponent[];
+  };
+  task: {
+    mode: string;
+    baseRecipe: RecipeReleaseIdentity | null;
+    requirements: RecipeTaskFragment[];
+    contracts: RecipeTaskFragment[];
+    requirementSha256: string;
+    contractSha256: string;
+    composedSha256: string;
+  };
+}
+
+export type RecipeExecutionOwnership =
+  | { kind: 'current'; level?: number }
+  | { kind: 'inherited'; fromLevel?: number };
+
+export interface RecipeExecution {
+  id: string;
+  source?: string;
+  ownership: RecipeExecutionOwnership;
+}
+
+interface RecipeCatalogIdentity {
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  path: string;
+  sha256: string;
+}
+
+export interface RecipeBinding {
+  alias: string;
+  status: string;
+  catalog: RecipeCatalogIdentity;
+  recipePath: string;
+  plan: CompiledRecipePlan;
+  release: RecipeRelease;
+  execution: RecipeExecution[];
+}
+
+export type ExactRecipeRequest = string | {
+  id: string;
+  version: string;
+  contentSha256?: string;
+};
+
+interface RecipeTaskDocuments {
+  requirements: Array<CompiledOwnedTaskFragment & { sha256: string }>;
+  contracts: Array<CompiledOwnedTaskFragment & { sha256: string }>;
+  requirementText: string;
+  contractText: string;
+}
+
+interface RecipeCheckDetail extends RecipeCheck {
+  packId: string;
+  packVersion: string;
+  checkGroupId: string;
+  role: string;
+  source: string;
+  featureId: number;
+  criterionId: string;
+  description: string;
+  featureName: string;
+  note: unknown;
+  statedBy: unknown;
+  provenBy: unknown;
+  withheld: unknown;
+  sourcePoints: number;
+  semantics: unknown[];
+}
+
+interface ResolvedExactRecipe {
+  id: string;
+  version: string;
+  contentSha256?: string;
+}
+
+export interface RecipeGradeRelease extends RecipeReleaseIdentity {
+  selection: { alias: string; status: string; catalog: RecipeCatalogIdentity };
+  executionId: string;
+  checks: RecipeCheck[];
+}
+
+export interface BundledRecipeRelease extends RecipeRelease {
+  selection: { alias: string; status: string; catalog: RecipeCatalogIdentity };
+}
+
+type UnknownRecord = Record<string, unknown>;
+
+const recipeReleaseSchema = z.looseObject({
+  recipeReleaseSchemaVersion: z.number(),
+  id: z.string(),
+  version: z.string(),
+  state: z.string(),
+  title: z.string(),
+  track: z.string(),
+  meaningSha256: z.string(),
+  executionSha256: z.string(),
+  contentSha256: z.string(),
+  sourceManifestSha256: z.string(),
+  capabilities: z.array(z.unknown()),
+  checkCatalog: z.array(z.unknown()),
+  sourceManifest: z.array(z.unknown()),
+  scoring: z.looseObject({}),
+  components: z.looseObject({ fixture: z.looseObject({}), packs: z.array(z.unknown()) }),
+  task: z.looseObject({ requirements: z.array(z.unknown()), contracts: z.array(z.unknown()) }),
+});
+const gradeRecipeReleaseSchema = z.looseObject({
+  selection: z.looseObject({}),
+  executionId: z.string(),
+  checks: z.array(z.unknown()),
+  contentSha256: z.string(),
+});
+const bundledRecipeReleaseSchema = z.looseObject({ selection: z.looseObject({}) });
+
+function record(value: unknown): value is UnknownRecord {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function recipeFixturePath(value: unknown, source: string): string {
+  if (!record(value) || !record(value.fixture) || typeof value.fixture.path !== 'string') {
+    throw new Error(`recipe ${source} has no fixture path`);
+  }
+  return value.fixture.path;
+}
+
+function assertRecipeRelease(value: unknown): asserts value is RecipeRelease {
+  if (!recipeReleaseSchema.safeParse(value).success) {
+    throw new Error('compiled recipe release is not valid');
+  }
+}
+
+function assertRecipeGradeRelease(value: unknown): asserts value is RecipeGradeRelease {
+  if (!gradeRecipeReleaseSchema.safeParse(value).success) {
+    throw new Error('compiled grade recipe release is not valid');
+  }
+}
+
+function assertBundledRecipeRelease(value: unknown): asserts value is BundledRecipeRelease {
+  if (!bundledRecipeReleaseSchema.safeParse(value).success) {
+    throw new Error('bundled recipe release has no selection');
+  }
+  assertRecipeRelease(value);
+}
+
+function sortedTrackActions(value: unknown): Array<UnknownRecord & { id: string }> {
+  if (!Array.isArray(value) || value.some(action => !record(action) || typeof action.id !== 'string')) {
+    throw new Error('track manifest actions must have string ids');
+  }
+  return value.sort((left, right) => left.id.localeCompare(right.id));
+}
+
+
+const SHA256 = /^[a-f0-9]{64}$/;
+const EXECUTION_ONLY_STEP_FIELDS = new Set([
+  'actor', 'actors', 'testid', 'in', 'within', 'settleMs', 'ms', 'intervalMs',
+  'delayMs', 'readyTestid', 'samples', 'secondsAhead',
+]);
+const ASSERTION_CONTAINS_ACTIONS = new Set([
+  'expect', 'expectActorsWith', 'expectElementCount', 'expectNotReceived', 'expectReceived',
+  'expectUnavailable',
+]);
+
+function trackRelative(trackRoot: string, path: string): string {
+  return relative(resolve(trackRoot), realpathSync(path)).replaceAll('\\', '/');
+}
+
+function semanticStep(step: CompiledStep): unknown {
+  if (step.do === 'race') {
+    return {
+      do: step.do,
+      branches: Array.isArray(step.branches)
+        ? step.branches.map(branch => Array.isArray(branch) ? branch.map(semanticStep) : [])
+        : [],
+    };
+  }
+  return Object.fromEntries(Object.entries(step)
+    .filter(([key]) => !EXECUTION_ONLY_STEP_FIELDS.has(key)
+      && (key !== 'contains' || ASSERTION_CONTAINS_ACTIONS.has(step.do)))
+    .map(([key, value]) => [key, canonicalizeDefinition(value)]));
+}
+
+function taskDocuments(plan: CompiledRecipePlan): RecipeTaskDocuments {
+  const compact = (fragment: CompiledOwnedTaskFragment) => ({
+    id: fragment.id,
+    path: fragment.path,
+    order: fragment.order,
+    from: fragment.from,
+    until: fragment.until,
+    modes: fragment.modes,
+    owners: fragment.owners,
+    ...(fragment.ownerConditions === undefined
+      ? {} : { ownerConditions: fragment.ownerConditions }),
+    ...(fragment.requiresFeatures === undefined
+      ? {} : { requiresFeatures: fragment.requiresFeatures }),
+    sha256: sha256(fragment.text),
+    text: fragment.text,
+  });
+  return {
+    requirements: plan.recipe.task.requirements.map(compact),
+    contracts: plan.recipe.task.contracts.map(compact),
+    requirementText: plan.recipe.task.requirementText,
+    contractText: plan.recipe.task.contractText,
+  };
+}
+
+function checkDetails(plan: CompiledRecipePlan): RecipeCheckDetail[] {
+  const details: RecipeCheckDetail[] = [];
+  for (const execution of plan.execution) {
+    for (const group of execution.checkGroups) {
+      for (const criterion of group.feature.criteria) {
+        const stableKey = `${group.stablePackId ?? group.packId}.${group.checkGroupId}.${criterion.id}`;
+        const compiled = plan.checks.find(check => check.stableKey === stableKey);
+        if (!compiled) throw new Error(`compiled recipe lost check ${stableKey}`);
+        details.push({
+          stableKey,
+          executionId: execution.id,
+          packId: group.packId,
+          ...(group.stablePackId === undefined ? {} : { stablePackId: group.stablePackId }),
+          packVersion: group.packVersion,
+          checkGroupId: group.checkGroupId,
+          role: group.role,
+          ...(group.observations === undefined ? {} : { observations: group.observations }),
+          ...(group.requiresFeatures === undefined ? {} : { requiresFeatures: group.requiresFeatures }),
+          source: group.source,
+          featureId: group.feature.id,
+          featureName: group.feature.name,
+          criterionId: criterion.id,
+          description: criterion.desc,
+          note: criterion.note ?? null,
+          statedBy: criterion.statedBy ?? null,
+          provenBy: criterion.provenBy ?? null,
+          withheld: criterion.withheld ?? null,
+          points: compiled.points,
+          sourcePoints: compiled.sourcePoints,
+          semantics: criterion.steps.map(semanticStep),
+        });
+      }
+    }
+  }
+  return details;
+}
+
+function sourceEntry(trackRoot: string, path: string, kind: string): RecipeSourceManifestEntry {
+  const absolute = realpathSync(path);
+  return { path: trackRelative(trackRoot, absolute), sha256: sha256(readFileSync(absolute)), kinds: [kind] };
+}
+
+function mergeSources(entries: RecipeSourceManifestEntry[]): RecipeSourceManifestEntry[] {
+  const merged = new Map<string, RecipeSourceManifestEntry>();
+  for (const entry of entries) {
+    const current = merged.get(entry.path);
+    if (current && current.sha256 !== entry.sha256) {
+      throw new Error(`source ${entry.path} produced conflicting digests`);
+    }
+    if (current) current.kinds.push(...entry.kinds);
+    else merged.set(entry.path, structuredClone(entry));
+  }
+  return [...merged.values()].map(entry => ({ ...entry, kinds: [...new Set(entry.kinds)].sort() }))
+    .sort((a, b) => a.path.localeCompare(b.path));
+}
+
+function releaseIdentity(release: RecipeRelease): RecipeReleaseIdentity {
+  return {
+    recipeReleaseSchemaVersion: release.recipeReleaseSchemaVersion,
+    id: release.id,
+    version: release.version,
+    state: release.state,
+    track: release.track,
+    meaningSha256: release.meaningSha256,
+    executionSha256: release.executionSha256,
+    contentSha256: release.contentSha256,
+    sourceManifestSha256: release.sourceManifestSha256,
+  };
+}
+
+export function recipeReleaseIdentity(release: RecipeRelease): RecipeReleaseIdentity {
+  return canonicalizeDefinition(releaseIdentity(release)) as RecipeReleaseIdentity;
+}
+
+export function buildRecipeRelease(recipePath: string, {
+  trackRoot,
+}: { trackRoot?: string } = {}): RecipeRelease {
+  const absoluteRecipe = realpathSync(resolve(recipePath));
+  const root = realpathSync(resolve(trackRoot ?? dirname(dirname(dirname(absoluteRecipe)))));
+  const plan = compileRecipeFile(absoluteRecipe, { trackRoot: root });
+  const rawRecipe = readDefinitionJson(absoluteRecipe, 'recipe');
+  const trackManifestPath = join(root, TRACK_MANIFEST_FILE);
+  const trackManifest = compileTrackManifest(
+    readDefinitionJson(trackManifestPath, 'track manifest'), {
+    source: trackManifestPath,
+  });
+  const documents = taskDocuments(plan);
+  const details = checkDetails(plan);
+
+  let baseRelease = null;
+  if (plan.recipe.task.baseRecipe) {
+    baseRelease = buildRecipeRelease(join(root, 'composition', plan.recipe.task.baseRecipe.path), {
+      trackRoot: root,
+    });
+  }
+
+  const meaningDocument = canonicalizeDefinition({
+    schemaVersion: RECIPE_RELEASE_SCHEMA_VERSION,
+    track: plan.recipe.track,
+    task: {
+      mode: plan.recipe.task.mode,
+      baseMeaningSha256: baseRelease?.meaningSha256 ?? null,
+      requirements: documents.requirements.map(({ id, owners, ownerConditions,
+        requiresFeatures, text }) => ({
+        id, owners, ...(ownerConditions === undefined ? {} : { ownerConditions }),
+        ...(requiresFeatures === undefined ? {} : { requiresFeatures }), text,
+      })),
+      contracts: documents.contracts.map(({ id, owners, ownerConditions,
+        requiresFeatures, text }) => ({
+        id, owners, ...(ownerConditions === undefined ? {} : { ownerConditions }),
+        ...(requiresFeatures === undefined ? {} : { requiresFeatures }), text,
+      })),
+    },
+    checks: details.map(detail => ({
+      stableKey: detail.stableKey,
+      packId: detail.packId,
+      checkGroupId: detail.checkGroupId,
+      role: detail.role,
+      ...(detail.observations === undefined ? {} : { observations: detail.observations }),
+      ...(detail.requiresFeatures === undefined ? {} : { requiresFeatures: detail.requiresFeatures }),
+      source: detail.source,
+      featureId: detail.featureId,
+      featureName: detail.featureName,
+      criterionId: detail.criterionId,
+      description: detail.description,
+      note: detail.note,
+      statedBy: detail.statedBy,
+      provenBy: detail.provenBy,
+      withheld: detail.withheld,
+      points: detail.points,
+      semantics: detail.semantics,
+    })),
+  });
+
+  const scenarioDefinitions = Object.fromEntries(plan.execution.map(execution => {
+    const path = join(root, execution.source);
+    const scenario = compileScenarioDefinition(readDefinitionJson(path, 'scenario'),
+      { source: path });
+    return [execution.source, {
+      level: scenario.level,
+      writeUrlPattern: scenario.writeUrlPattern ?? null,
+    }];
+  }));
+  const executionDocument = canonicalizeDefinition({
+    schemaVersion: RECIPE_RELEASE_SCHEMA_VERSION,
+    track: plan.recipe.track,
+    task: {
+      mode: plan.recipe.task.mode,
+      baseExecutionSha256: baseRelease?.executionSha256 ?? null,
+    },
+    fixture: {
+      warehouses: plan.fixture.warehouses,
+      items: plan.fixture.items,
+      accounts: plan.fixture.accounts,
+      empty: plan.fixture.empty,
+    },
+    packs: plan.packs.map(pack => ({
+      id: pack.id,
+      ...(pack.stableId === undefined ? {} : { stableId: pack.stableId }),
+      ...(pack.moduleType === undefined ? {} : { moduleType: pack.moduleType }),
+      includeRoles: [...pack.includeRoles].sort(),
+      ...(pack.includeCheckGroups === undefined
+        ? {} : { includeCheckGroups: [...pack.includeCheckGroups].sort() }),
+      capabilities: [...pack.capabilities].sort(),
+      evidence: [...pack.evidence].sort(),
+      budget: pack.budget,
+      actions: [...pack.actions].sort(),
+    })).sort((a, b) => a.id.localeCompare(b.id)),
+    capabilities: plan.capabilities,
+    runtime: {
+      portOffset: trackManifest.portOffset ?? 0,
+      restartProbe: trackManifest.restartProbe ?? '/',
+      reseedOnReset: trackManifest.reseedOnReset ?? false,
+      actions: sortedTrackActions(structuredClone(trackManifest.actions ?? [])),
+    },
+    execution: plan.execution.map(execution => ({
+      id: execution.id,
+      source: execution.source,
+      scenario: scenarioDefinitions[execution.source],
+      checkGroups: execution.checkGroups.map(group => ({
+        packId: group.packId,
+        ...(group.stablePackId === undefined ? {} : { stablePackId: group.stablePackId }),
+        checkGroupId: group.checkGroupId,
+        role: group.role,
+        ...(group.observations === undefined ? {} : { observations: group.observations }),
+        ...(group.requiresFeatures === undefined ? {} : { requiresFeatures: group.requiresFeatures }),
+        source: group.source,
+        feature: {
+          id: group.feature.id,
+          actors: group.feature.actors,
+          setup: group.feature.setup,
+          criteria: group.feature.criteria.map(criterion => ({
+            id: criterion.id,
+            steps: criterion.steps,
+          })),
+        },
+      })),
+    })),
+  });
+
+  const meaningSha256 = sha256(canonicalDefinitionJson(meaningDocument));
+  const executionSha256 = sha256(canonicalDefinitionJson(executionDocument));
+  const contentSha256 = sha256(canonicalDefinitionJson({
+    schemaVersion: RECIPE_RELEASE_SCHEMA_VERSION,
+    meaningSha256,
+    executionSha256,
+  }));
+
+  const fixturePath = realpathSync(resolve(dirname(absoluteRecipe), recipeFixturePath(rawRecipe, absoluteRecipe)));
+  const ownSources = [
+    sourceEntry(root, trackManifestPath, 'track-manifest'),
+    sourceEntry(root, absoluteRecipe, 'recipe'),
+    sourceEntry(root, fixturePath, 'fixture'),
+    ...plan.packs.map(pack => sourceEntry(root, join(root, 'composition', pack.path), 'pack')),
+    ...plan.execution.map(execution => sourceEntry(root, join(root, execution.source), 'scenario')),
+    ...documents.requirements.map(fragment => sourceEntry(root, join(root, fragment.path), 'requirement-source')),
+    ...documents.contracts.map(fragment => sourceEntry(root, join(root, fragment.path), 'contract-source')),
+  ];
+  const sourceManifest = mergeSources([
+    ...ownSources,
+    ...(baseRelease?.sourceManifest ?? []),
+  ]);
+  const packSource = (pack: CompiledRecipePlan['packs'][number]) => {
+    const path = trackRelative(root, join(root, 'composition', pack.path));
+    const source = sourceManifest.find(entry => entry.path === path && entry.kinds.includes('pack'));
+    if (!source) throw new Error(`recipe release lost pack source ${path}`);
+    return { path, sha256: source.sha256 };
+  };
+
+  const release = canonicalizeDefinition({
+    recipeReleaseSchemaVersion: RECIPE_RELEASE_SCHEMA_VERSION,
+    id: plan.recipe.id,
+    version: plan.recipe.version,
+    state: plan.recipe.state,
+    title: plan.recipe.title,
+    track: plan.recipe.track,
+    sequence: plan.recipe.sequence,
+    task: {
+      mode: plan.recipe.task.mode,
+      baseRecipe: baseRelease ? recipeReleaseIdentity(baseRelease) : null,
+      requirements: documents.requirements.map(({ text: _text, ...fragment }) => fragment),
+      contracts: documents.contracts.map(({ text: _text, ...fragment }) => fragment),
+      requirementSha256: sha256(documents.requirementText),
+      contractSha256: sha256(documents.contractText),
+      composedSha256: sha256(`${documents.requirementText}\n${documents.contractText}`),
+    },
+    components: {
+      fixture: { id: plan.fixture.id, version: plan.fixture.version, state: plan.fixture.state,
+        path: trackRelative(root, fixturePath), sha256: sha256(readFileSync(fixturePath)) },
+      packs: plan.packs.map(pack => ({ id: pack.id, version: pack.version, state: pack.state,
+        ...packSource(pack), includeRoles: [...pack.includeRoles].sort(),
+        ...(pack.includeCheckGroups === undefined
+          ? {} : { includeCheckGroups: [...pack.includeCheckGroups].sort() }),
+        ...(pack.stableId === undefined ? {} : { stableId: pack.stableId }),
+        ...(pack.moduleType === undefined ? {} : { moduleType: pack.moduleType }),
+        requiresPacks: [...pack.requiresPacks].sort() }))
+        .sort((a, b) => a.id.localeCompare(b.id)),
+    },
+    capabilities: plan.capabilities,
+    scoring: plan.scoring,
+    meaningSha256,
+    executionSha256,
+    contentSha256,
+    sourceManifestSha256: sha256(canonicalDefinitionJson(sourceManifest)),
+    sourceManifest,
+    checkCatalog: details.map(detail => ({
+      stableKey: detail.stableKey,
+      executionId: detail.executionId,
+      packId: detail.packId,
+      ...(detail.stablePackId === undefined ? {} : { stablePackId: detail.stablePackId }),
+      packVersion: detail.packVersion,
+      checkGroupId: detail.checkGroupId,
+      role: detail.role,
+      ...(detail.observations === undefined ? {} : { observations: detail.observations }),
+      ...(detail.requiresFeatures === undefined ? {} : { requiresFeatures: detail.requiresFeatures }),
+      source: detail.source,
+      featureId: detail.featureId,
+      criterionId: detail.criterionId,
+      description: detail.description,
+      points: detail.points,
+    })),
+  });
+  assertRecipeRelease(release);
+  return release;
+}
+
+function sequentialBasePlan(plan: CompiledRecipePlan, track: { dir: string }, level: number): CompiledRecipePlan {
+  if (plan.recipe.sequence?.level !== Number(level) || Number(level) <= 1) {
+    throw new Error(`${plan.recipe.id}@${plan.recipe.version} is not sequential L${level}`);
+  }
+  const base = plan.recipe.task.baseRecipe;
+  if (!base) throw new Error(`${plan.recipe.id}@${plan.recipe.version} has no sequential base recipe`);
+  const basePlan = compileRecipeFile(join(track.dir, 'composition', base.path), {
+    trackRoot: track.dir,
+  });
+  const candidateByKey = new Map(plan.checks.map(check => [check.stableKey, check]));
+  for (const check of basePlan.checks) {
+    const carried = candidateByKey.get(check.stableKey);
+    if (!carried || canonicalDefinitionJson(carried) !== canonicalDefinitionJson(check)) {
+      throw new Error(`${plan.recipe.id}@${plan.recipe.version} does not carry base check ${check.stableKey} exactly`);
+    }
+  }
+  return basePlan;
+}
+
+function executionStableKeys(execution: CompiledRecipePlan['execution'][number]): string[] {
+  return execution.checkGroups.flatMap(group => group.feature.criteria.map(criterion =>
+    `${group.stablePackId ?? group.packId}.${group.checkGroupId}.${criterion.id}`));
+}
+
+// Preserve check ownership through the exact base-recipe chain.
+function sequentialUpgradeExecutionPlan(
+  plan: CompiledRecipePlan,
+  track: { dir: string },
+  level: number,
+): RecipeExecution[] {
+  const base = plan.recipe.task.baseRecipe;
+  if (!base) throw new Error(`${plan.recipe.id}@${plan.recipe.version} has no sequential base recipe`);
+  const basePlan = compileRecipeFile(join(track.dir, 'composition', base.path), {
+    trackRoot: track.dir,
+  });
+  const baseLevel = basePlan.recipe.sequence?.level;
+  if (baseLevel === undefined || !Number.isInteger(baseLevel)
+      || baseLevel < 1 || baseLevel !== Number(level) - 1) {
+    throw new Error(`${plan.recipe.id}@${plan.recipe.version} must inherit exact L${Number(level) - 1}, `
+      + `not L${baseLevel}`);
+  }
+  const baseExecution = executionPlanForRecipe(basePlan, track, baseLevel);
+  const baseById = new Map(basePlan.execution.map(execution => [execution.id, execution]));
+  const baseOrigins = new Map<string, number>();
+  for (const owned of baseExecution) {
+    const execution = baseById.get(owned.id);
+    if (!execution) throw new Error(`base recipe lost execution ${owned.id}`);
+    const origin = owned.ownership.kind === 'inherited'
+      ? owned.ownership.fromLevel : owned.ownership.level;
+    if (origin === undefined) throw new Error(`base recipe execution ${owned.id} has no owner level`);
+    for (const stableKey of executionStableKeys(execution)) baseOrigins.set(stableKey, origin);
+  }
+
+  return plan.execution.map(execution => {
+    const stableKeys = executionStableKeys(execution);
+    const inherited = stableKeys.filter(stableKey => baseOrigins.has(stableKey));
+    if (inherited.length === 0) {
+      return { id: execution.id, source: execution.source,
+        ownership: { kind: 'current' as const, level: Number(level) } };
+    }
+    if (inherited.length !== stableKeys.length) {
+      throw new Error(`${plan.recipe.id}@${plan.recipe.version} execution ${execution.id} `
+        + 'mixes inherited and current-level checks');
+    }
+    const origins = new Set<number>();
+    for (const stableKey of inherited) {
+      const origin = baseOrigins.get(stableKey);
+      if (origin === undefined) throw new Error(`base recipe lost check owner ${stableKey}`);
+      origins.add(origin);
+    }
+    if (origins.size !== 1) {
+      throw new Error(`${plan.recipe.id}@${plan.recipe.version} execution ${execution.id} `
+        + `mixes checks owned by levels ${[...origins].sort((a, b) => a - b).join(', ')}`);
+    }
+    return { id: execution.id, source: execution.source,
+      ownership: { kind: 'inherited' as const, fromLevel: [...origins][0] ?? baseLevel } };
+  });
+}
+
+export function executionPlanForRecipe(
+  plan: CompiledRecipePlan,
+  track: { dir: string },
+  level: number,
+): RecipeExecution[] {
+  const sequenceLevel = plan.recipe.sequence?.level;
+  if (sequenceLevel !== undefined && sequenceLevel !== Number(level)) {
+    throw new Error(`${plan.recipe.id}@${plan.recipe.version} is sequential L${sequenceLevel}, not L${level}`);
+  }
+  if (sequenceLevel !== undefined && sequenceLevel > 1) {
+    return sequentialUpgradeExecutionPlan(plan, track, level);
+  }
+  return plan.execution.map(execution => ({
+    id: execution.id,
+    source: execution.source,
+    ownership: { kind: 'current' as const, level: Number(level) },
+  }));
+}
+
+export function executionPlanForRelease(recipePath: string, {
+  trackRoot,
+  level,
+}: { trackRoot: string; level: number }): RecipeExecution[] {
+  if (!Number.isInteger(Number(level)) || Number(level) < 1) {
+    throw new Error('typed execution ownership requires a positive level');
+  }
+  const root = realpathSync(resolve(trackRoot));
+  const plan = compileRecipeFile(recipePath, { trackRoot: root });
+  return executionPlanForRecipe(plan, { dir: root }, Number(level));
+}
+
+function assertInitialSequentialBase(
+  plan: CompiledRecipePlan,
+  promotionCatalog: CompiledPromotionCatalog,
+  track: { dir: string },
+  level: number,
+): void {
+  const numericLevel = Number(level);
+  if (numericLevel <= 1) {
+    throw new Error(`${plan.recipe.id}@${plan.recipe.version} cannot have a base at L${numericLevel}`);
+  }
+  const lowerAlias = `L${numericLevel - 1}`;
+  const currentBase = promotionCatalog.entries.filter(entry =>
+    entry.alias === lowerAlias && entry.status !== 'retired');
+  if (currentBase.length !== 1) {
+    throw new Error(`${plan.recipe.id}@${plan.recipe.version} sequential L${numericLevel} `
+      + `requires exactly one current ${lowerAlias} base; found ${currentBase.length}`);
+  }
+  const embedded = sequentialBasePlan(plan, track, level);
+  const selected = currentBase[0];
+  if (!selected) throw new Error(`${lowerAlias} base selection disappeared`);
+  if (embedded.recipe.id !== selected.recipe.id || embedded.recipe.version !== selected.recipe.version) {
+    throw new Error(`${plan.recipe.id}@${plan.recipe.version} sequential L${numericLevel} base `
+      + `${embedded.recipe.id}@${embedded.recipe.version} is not current ${lowerAlias} `
+      + `${selected.recipe.id}@${selected.recipe.version}`);
+  }
+  const baseRecipe = plan.recipe.task.baseRecipe;
+  if (!baseRecipe) throw new Error(`${plan.recipe.id}@${plan.recipe.version} lost its base recipe`);
+  const embeddedRelease = buildRecipeRelease(join(track.dir, 'composition', baseRecipe.path), {
+    trackRoot: track.dir,
+  });
+  const currentRelease = buildRecipeRelease(join(track.dir, 'composition', selected.recipe.path), {
+    trackRoot: track.dir,
+  });
+  if (embeddedRelease.contentSha256 !== currentRelease.contentSha256) {
+    throw new Error(`${plan.recipe.id}@${plan.recipe.version} sequential L${numericLevel} `
+      + `does not bind the exact current ${lowerAlias} content`);
+  }
+}
+
+function assertSequentialContinuity(
+  plan: CompiledRecipePlan,
+  previousPlans: CompiledRecipePlan[],
+  track: Track,
+  level: number,
+): void {
+  if (previousPlans.length === 0) {
+    throw new Error(`${plan.recipe.id}@${plan.recipe.version} has no sequential L${level} baseline`);
+  }
+  for (const previousPlan of previousPlans) {
+    sequentialBasePlan(previousPlan, track, level);
+  }
+  const basePlan = sequentialBasePlan(plan, track, level);
+  const retainedLevelChecks = previousPlans.flatMap(previousPlan => {
+    const previousBase = previousPlan.recipe.task.baseRecipe;
+    if (!previousBase) {
+      throw new Error(`${previousPlan.recipe.id}@${previousPlan.recipe.version} has no L${level} base recipe`);
+    }
+    const previousBasePlan = compileRecipeFile(join(track.dir, 'composition', previousBase.path), {
+      trackRoot: track.dir,
+    });
+    const previousBaseKeys = new Set(previousBasePlan.checks.map(check => check.stableKey));
+    return previousPlan.checks.filter(check => !previousBaseKeys.has(check.stableKey));
+  });
+  const required = new Set([
+    ...basePlan.checks.map(check => check.stableKey),
+    ...retainedLevelChecks.map(check => check.stableKey),
+  ]);
+  const actual = new Set(plan.checks.map(check => check.stableKey));
+  const missing = [...required].filter(stableKey => !actual.has(stableKey));
+  const added = [...actual].filter(stableKey => !required.has(stableKey));
+  if (missing.length || added.length) {
+    throw new Error(`${plan.recipe.id}@${plan.recipe.version} changes the sequential L${level} check set`);
+  }
+  const candidate = new Map(plan.checks.map(check => [check.stableKey, check]));
+  for (const previous of retainedLevelChecks) {
+    const next = candidate.get(previous.stableKey);
+    if (!next) throw new Error(`${plan.recipe.id}@${plan.recipe.version} lost check ${previous.stableKey}`);
+    if (next.points < previous.points || (previous.points > 0 && next.points !== previous.points)) {
+      throw new Error(`${plan.recipe.id}@${plan.recipe.version} changes the established score for ${previous.stableKey}`);
+    }
+  }
+}
+
+export function validateExactRecipeRequest(requested: unknown): ResolvedExactRecipe | null {
+  if (requested === null || requested === undefined) return null;
+  if (typeof requested === 'string') {
+    const separator = requested.lastIndexOf('@');
+    if (separator < 1 || separator === requested.length - 1) {
+      throw new Error('--recipe must be an exact <id>@<version> reference');
+    }
+    return { id: requested.slice(0, separator), version: requested.slice(separator + 1) };
+  }
+  if (!record(requested)
+    || typeof requested.id !== 'string' || typeof requested.version !== 'string') {
+    throw new Error('exact recipe selection requires an id and version');
+  }
+  const fields = new Set(['id', 'version', 'contentSha256']);
+  if (Object.keys(requested).some(field => !fields.has(field))) {
+    throw new Error('exact recipe selection contains an unknown field');
+  }
+  const contentSha256 = requested.contentSha256;
+  if (contentSha256 !== undefined
+    && (typeof contentSha256 !== 'string' || !SHA256.test(contentSha256))) {
+    throw new Error('exact recipe selection contentSha256 must be a SHA-256 digest');
+  }
+  return { id: requested.id, version: requested.version,
+    ...(contentSha256 !== undefined ? { contentSha256 } : {}) };
+}
+
+// Resolve either the promoted level alias or an exact catalog release.
+export function resolveRecipeRelease(
+  track: Track,
+  level: number,
+  requested: ExactRecipeRequest | null = null,
+): RecipeBinding | null {
+  const catalogPath = join(track.dir, 'composition', 'promotions.json');
+  if (!existsSync(catalogPath)) return null;
+  let selectedCatalogPath = catalogPath;
+  const promotionCatalog = compilePromotionFile(catalogPath, { trackRoot: track.dir });
+  let catalog = promotionCatalog;
+  const alias = `L${Number(level)}`;
+  const exact = validateExactRecipeRequest(requested);
+  if (!exact && !catalog.entries.some(entry => entry.alias === alias)) return null;
+  const promoted = catalog.entries.filter(entry => entry.alias === alias && entry.status === 'promoted');
+  const candidates = catalog.entries.filter(entry => entry.alias === alias && entry.status === 'candidate');
+  let choices = exact
+    ? catalog.entries.filter(entry => entry.alias === alias && entry.recipe.id === exact.id
+      && entry.recipe.version === exact.version && entry.status !== 'retired')
+    : (promoted.length ? promoted : candidates);
+  const candidateCatalogPath = join(track.dir, 'composition', 'candidates.json');
+  if (exact && choices.length === 0 && existsSync(candidateCatalogPath)) {
+    const candidateCatalog = compilePromotionFile(candidateCatalogPath, { trackRoot: track.dir });
+    choices = candidateCatalog.entries.filter(entry => entry.alias === alias
+      && entry.recipe.id === exact.id && entry.recipe.version === exact.version
+      && entry.status !== 'retired');
+    if (choices.length) {
+      catalog = candidateCatalog;
+      selectedCatalogPath = candidateCatalogPath;
+    }
+  }
+  if (choices.length !== 1) {
+    const kind = exact ? `catalogued ${exact.id}@${exact.version}`
+      : `${promoted.length ? 'promoted' : 'candidate'} recipe`;
+    throw new Error(`${alias} requires exactly one ${kind}; found ${choices.length}`);
+  }
+  const selection = choices[0];
+  if (!selection) throw new Error(`${alias} recipe selection disappeared`);
+  const recipePath = join(track.dir, 'composition', selection.recipe.path);
+  const plan = compileRecipeFile(recipePath, { trackRoot: track.dir });
+  const sequenceLevel = plan.recipe.sequence?.level;
+  if (sequenceLevel !== undefined && sequenceLevel !== Number(level)) {
+    throw new Error(`${plan.recipe.id}@${plan.recipe.version} is sequential L${sequenceLevel}, not ${alias}`);
+  }
+  if (sequenceLevel !== undefined && sequenceLevel > 1) {
+    if (selection.status === 'candidate' && promoted.length > 0) {
+      const promotedEntry = promoted[0];
+      if (!promotedEntry) throw new Error(`${alias} promoted recipe selection disappeared`);
+      const promotedPlan = compileRecipeFile(join(track.dir, 'composition', promotedEntry.recipe.path),
+        { trackRoot: track.dir });
+      assertSequentialContinuity(plan, [promotedPlan], track, level);
+    } else {
+      const previousPlans = promotionCatalog.entries
+        .filter(entry => entry.alias === alias && entry.status === 'retired')
+        .map(entry => compileRecipeFile(join(track.dir, 'composition', entry.recipe.path),
+          { trackRoot: track.dir }));
+      if (previousPlans.length === 0) assertInitialSequentialBase(plan, promotionCatalog, track, level);
+      else assertSequentialContinuity(plan, previousPlans, track, level);
+    }
+  } else if (sequenceLevel === undefined && (!plan.packs.length
+    || plan.packs.some(pack => pack.moduleType === undefined
+      || !['feature', 'specification'].includes(pack.moduleType)))) {
+    throw new Error(`${plan.recipe.id}@${plan.recipe.version} is neither sequential nor modular`);
+  }
+  const release = buildRecipeRelease(recipePath, { trackRoot: track.dir });
+  if (exact?.contentSha256 && release.contentSha256 !== exact.contentSha256) {
+    throw new Error(`${exact.id}@${exact.version} content changed: expected ${exact.contentSha256}, `
+      + `resolved ${release.contentSha256}`);
+  }
+  return {
+    alias,
+    status: selection.status,
+    catalog: { ...catalog.catalog, path: trackRelative(track.dir, selectedCatalogPath),
+      sha256: sha256(readFileSync(selectedCatalogPath)) },
+    recipePath,
+    plan,
+    execution: executionPlanForRecipe(plan, track, level),
+    release,
+  };
+}
+
+export function requireRecipeRelease(
+  track: Track,
+  level: number,
+  requested: ExactRecipeRequest | null = null,
+): RecipeBinding {
+  const binding = resolveRecipeRelease(track, level, requested);
+  if (!binding) {
+    throw new Error(`L${level} has no recipe release`);
+  }
+  return binding;
+}
+
+export function gradeRecipeRelease(
+  binding: RecipeBinding | null,
+  executionId: string,
+  featureId: number | null = null,
+): RecipeGradeRelease | null {
+  if (!binding) return null;
+  const checks = binding.release.checkCatalog.filter(check => check.executionId === executionId
+    && (featureId === null || check.featureId === featureId));
+  if (!checks.length) throw new Error(`recipe ${binding.release.id} has no execution ${executionId}`);
+  const release = canonicalizeDefinition({
+    ...recipeReleaseIdentity(binding.release),
+    selection: { alias: binding.alias, status: binding.status, catalog: binding.catalog },
+    executionId,
+    checks,
+  });
+  assertRecipeGradeRelease(release);
+  return release;
+}
+
+export function resolveGradeRecipeArtifactBinding(
+  track: Track,
+  level: number,
+  specPath: string,
+  featureId: number | null = null,
+  requested: ExactRecipeRequest | null = null,
+): { release: RecipeGradeRelease; sourceRelease: RecipeRelease } | null {
+  const binding = resolveRecipeRelease(track, level, requested);
+  if (!binding) return null;
+  const absoluteSpec = realpathSync(specPath);
+  const execution = binding.plan.execution.find(candidate =>
+    realpathSync(join(track.dir, candidate.source)) === absoluteSpec);
+  if (!execution) {
+    throw new Error(`recipe ${binding.release.id}@${binding.release.version} does not select scenario ${specPath}`);
+  }
+  const gradeRelease = gradeRecipeRelease(binding, execution.id, featureId);
+  if (!gradeRelease) throw new Error(`recipe ${binding.release.id} grade release disappeared`);
+  return {
+    release: gradeRelease,
+    sourceRelease: binding.release,
+  };
+}
+
+export function resolveGradeRecipeRelease(
+  track: Track,
+  level: number,
+  specPath: string,
+  featureId: number | null = null,
+  requested: ExactRecipeRequest | null = null,
+): RecipeGradeRelease | null {
+  return resolveGradeRecipeArtifactBinding(track, level, specPath, featureId, requested)?.release ?? null;
+}
+
+export function bundleRecipeRelease(binding: RecipeBinding | null): BundledRecipeRelease | null {
+  if (!binding) return null;
+  const release = canonicalizeDefinition({
+    ...binding.release,
+    selection: { alias: binding.alias, status: binding.status, catalog: binding.catalog },
+  });
+  assertBundledRecipeRelease(release);
+  return release;
+}
diff --git a/tools/stack-bench/src/composition/recipe-selection.ts b/tools/stack-bench/src/composition/recipe-selection.ts
new file mode 100644
index 00000000000..81fe687c9be
--- /dev/null
+++ b/tools/stack-bench/src/composition/recipe-selection.ts
@@ -0,0 +1,774 @@
+import { canonicalDefinitionJson } from './definition-plan.js';
+import { sha256 } from '../evidence/provenance.js';
+import type { CompiledFeature } from './definition-compiler.js';
+import type { RecipeCheck, RecipeRelease } from './recipe-release.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+export interface RecipeSelection {
+  schemaVersion: number;
+  recipe: { id: string; version: string; contentSha256: string };
+  requested: {
+    packs?: string[];
+    checks: string[];
+    features?: string[];
+    specifications?: Record<string, string[]>;
+    dependencyExpansion?: string;
+  };
+  taskPacks: string[];
+  sha256: string;
+  completeness: 'full' | 'subset';
+  scoredPoints: number;
+  checks: RecipeCheck[];
+  features?: string[];
+  promptPacks?: string[];
+  taskSelectionSha256?: string;
+}
+
+export interface ModularSelectionOptions {
+  featureIds?: string[];
+  requestedSpecifications?: string[];
+  expectedSpecifications?: string[];
+  observedSpecifications?: string[];
+  packIds?: string[];
+  checkKeys?: string[];
+  dependencyExpansion?: string;
+}
+
+// A check carries the treatment that selected it into a modular recipe.
+export type TreatedCheck = RecipeCheck & { treatment: string };
+
+// A modular selection names features and specification treatments; it has no
+// pack list or completeness, which only a pack selection can answer.
+export interface ModularRecipeSelection {
+  schemaVersion: number;
+  recipe: { id: string; version: string; contentSha256: string };
+  requested: RecipeSelection['requested'];
+  features: string[];
+  specifications: Record<string, string[]>;
+  promptPacks: string[];
+  scoredChecks: TreatedCheck[];
+  checks: TreatedCheck[];
+  observedChecks: TreatedCheck[];
+  scoredPoints: number;
+  taskSelectionSha256: string;
+  sha256: string;
+}
+
+export interface RecipeSelectionOptions {
+  packIds?: string[];
+  checkKeys?: string[];
+}
+
+export interface SelectedRecipeRelease extends RecipeRelease {
+  selection: RecipeSelection;
+}
+
+// What composing a task reads from either kind of selection.
+// A compiled scenario, narrowed to what selecting checks reads from it.
+export interface ScenarioSelectionSource {
+  features: CompiledFeature[];
+}
+
+export interface ComposableSelection {
+  schemaVersion: number;
+  recipe: { contentSha256: string };
+  sha256: string;
+  taskSelectionSha256?: string;
+  taskPacks?: string[];
+  promptPacks?: string[];
+  features?: string[];
+  requested?: {
+    features?: string[];
+    specifications?: Record<string, string[]>;
+  };
+}
+
+export interface ComposedRecipeTask {
+  schemaVersion: number;
+  recipeContentSha256: string;
+  selectionSha256: string;
+  taskMode?: string;
+  requirementIds: string[];
+  contractIds: string[];
+  requirementSha256: string;
+  contractSha256: string;
+  sha256: string;
+  requirementText: string;
+  contractText: string;
+}
+
+export interface RecipeTaskRequestResult {
+  request: UnknownRecord;
+  selection: RecipeSelection & {
+    promptPacks?: string[];
+    features?: string[];
+    specifications?: { requested: string[]; expected: string[]; observed: string[] };
+  };
+  task: ComposedRecipeTask;
+}
+
+export interface RecipeTaskPlan {
+  packs: Array<{ id: string; stableId?: string; moduleType?: string }>;
+  recipe: { task: { mode: string; requirements: RecipeTaskDocument[];
+    contracts: RecipeTaskDocument[] } };
+}
+
+export interface RecipeTaskDocument {
+  id: string;
+  owners: string[];
+  modes: string[];
+  text: string;
+  ownerConditions?: Array<{ owner: string; modes: string[]; requiresFeatures: string[] }>;
+  requiresFeatures?: string[];
+}
+
+export interface ModularRecipePack {
+  id: string;
+  version: string;
+  stableId?: string;
+  moduleType?: string;
+  requiresPacks: string[];
+}
+
+export interface ModularRecipeRelease {
+  id: string;
+  version: string;
+  contentSha256: string;
+  components: { packs: ModularRecipePack[] };
+  checkCatalog: RecipeCheck[];
+}
+
+export interface RecipeTaskBinding {
+  release: RecipeRelease;
+  plan: RecipeTaskPlan;
+}
+
+export interface ModularRecipeTaskBinding {
+  release: ModularRecipeRelease;
+  plan: RecipeTaskPlan;
+}
+
+// Only a modular request resolves its checks per treatment.
+export interface ModularRecipeTaskRequestResult {
+  request: ModularTaskRequest;
+  selection: ModularRecipeSelection;
+  task: ComposedRecipeTask;
+  taskMode?: string | null;
+}
+
+export interface ModularTaskRequest extends UnknownRecord {
+  schemaVersion: 3;
+  recipe: { id: string; version: string; contentSha256: string };
+  selection: {
+    sha256: string;
+    requested: RecipeSelection['requested'];
+    promptPacks: string[];
+    resolved: { features: string[]; specifications: Record<string, string[]>;
+      promptPacks: string[]; taskSelectionSha256: string };
+    scoredChecks: string[];
+    observedChecks: string[];
+  };
+  task: { mode?: string; sha256: string; requirementSha256: string; contractSha256: string };
+}
+
+// A bound request follows the release: modular releases resolve treatments,
+// pack-based releases resolve packs.
+export type BoundRecipeTaskRequestResult =
+  RecipeTaskRequestResult | ModularRecipeTaskRequestResult;
+
+export const isModularRecipeTaskRequest = (value: BoundRecipeTaskRequestResult):
+  value is ModularRecipeTaskRequestResult => 'scoredChecks' in value.selection;
+
+
+
+function unique(values: readonly unknown[], label: string): string[] {
+  const normalized = values.map(value => String(value).trim()).filter(Boolean);
+  const seen = new Set();
+  for (const value of normalized) {
+    if (seen.has(value)) throw new Error(`${label} repeats ${value}`);
+    seen.add(value);
+  }
+  return normalized;
+}
+
+function exactModuleRef(value: string, label: string):
+  { id: string; version: string; ref: string } {
+  const split = value.lastIndexOf('@');
+  if (split < 1 || split === value.length - 1) {
+    throw new Error(`${label} must use an exact id@version reference`);
+  }
+  return { id: value.slice(0, split), version: value.slice(split + 1), ref: value };
+}
+
+// Assign each selected specification one exclusive treatment.
+export function resolveModularRecipeSelection(release: ModularRecipeRelease, {
+  featureIds = [], requestedSpecifications = [], expectedSpecifications = [],
+  observedSpecifications = [], checkKeys = [], dependencyExpansion = 'recursive',
+}: ModularSelectionOptions = {}): ModularRecipeSelection {
+  if (!release?.contentSha256 || !Array.isArray(release.checkCatalog)
+    || !Array.isArray(release.components?.packs)) {
+    throw new Error('modular selection requires a compiled recipe release');
+  }
+  const modules: ModularRecipePack[] = release.components.packs;
+  if (!modules.length
+    || modules.some(module => !['feature', 'specification'].includes(module.moduleType ?? ''))) {
+    throw new Error('modular selection requires every recipe module to declare feature or specification');
+  }
+  const features = new Map(modules.filter(module => module.moduleType === 'feature')
+    .map(module => [module.id, module]));
+  const specifications = new Map(modules.filter(module => module.moduleType === 'specification')
+    .map(module => [`${module.id}@${module.version}`, module]));
+  const requestedFeatures = unique(featureIds, 'features');
+  const inputTreatments = {
+    requested: unique(requestedSpecifications, 'requested specifications'),
+    expected: unique(expectedSpecifications, 'expected specifications'),
+    observed: unique(observedSpecifications, 'observed specifications'),
+  };
+  const selectedCheckKeys = unique(checkKeys, 'selected scored checks');
+  if (!['recursive', 'exact'].includes(dependencyExpansion)) {
+    throw new Error('dependencyExpansion must be recursive or exact');
+  }
+  const assigned = new Map();
+  for (const [treatment, refs] of Object.entries(inputTreatments)) {
+    for (const ref of refs) {
+      if (assigned.has(ref)) {
+        throw new Error(`specification ${ref} cannot be both ${assigned.get(ref)} and ${treatment}`);
+      }
+      assigned.set(ref, treatment);
+    }
+  }
+  for (const id of requestedFeatures) {
+    if (!features.has(id)) throw new Error(`recipe has no feature module ${id}`);
+  }
+  for (const [treatment, refs] of Object.entries(inputTreatments)) {
+    for (const value of refs) {
+      const parsed = exactModuleRef(value, `${treatment} specification`);
+      if (!specifications.has(parsed.ref)) {
+        throw new Error(`recipe has no ${treatment} specification ${parsed.ref}`);
+      }
+    }
+  }
+
+  const featureSet = new Set(requestedFeatures.length ? requestedFeatures : features.keys());
+  const treatmentSets: Record<string, Set<string>> = Object.fromEntries(
+    Object.entries(inputTreatments).map(([treatment, refs]) => [treatment, new Set(refs)]));
+  const moduleByRef = new Map(modules.map(module => [`${module.id}@${module.version}`, module]));
+  const visit = (module: ModularRecipePack | undefined, target: string,
+    chain: readonly string[] = []): void => {
+    if (!module) return;
+    const ref = `${module.id}@${module.version}`;
+    if (chain.includes(ref)) throw new Error(`recipe module dependency cycle: ${[...chain, ref].join(' -> ')}`);
+    for (const requiredRef of module.requiresPacks ?? []) {
+      const required = moduleByRef.get(requiredRef);
+      if (!required) throw new Error(`recipe module ${ref} requires missing ${requiredRef}`);
+      if (required.moduleType === 'feature' && target === 'feature') featureSet.add(required.id);
+      else if (required.moduleType === 'feature') {
+        throw new Error(`specification module ${ref} cannot add feature ${requiredRef}; use check applicability`);
+      } else if (target === 'feature') {
+        throw new Error(`feature module ${ref} cannot depend on specification ${requiredRef}`);
+      } else treatmentSets[target]?.add(requiredRef);
+      visit(required, required.moduleType === 'feature' ? 'feature' : target, [...chain, ref]);
+    }
+  };
+  if (dependencyExpansion === 'recursive') {
+    for (const id of [...featureSet]) visit(features.get(id), 'feature');
+    for (const [treatment, refs] of Object.entries(treatmentSets)) {
+      for (const ref of [...refs]) visit(specifications.get(ref), treatment);
+    }
+  }
+  const selectedStableFamilies = new Set([...featureSet]
+    .map(id => features.get(id)?.stableId)
+    .filter((stableId): stableId is string => Boolean(stableId)));
+  const resolvedAssignments = new Map<string, string>();
+  for (const [treatment, refs] of Object.entries(treatmentSets)) {
+    for (const ref of refs) {
+      if (resolvedAssignments.has(ref)) {
+        throw new Error(`specification dependency ${ref} cannot be both ${resolvedAssignments.get(ref)} and ${treatment}`);
+      }
+      resolvedAssignments.set(ref, treatment);
+    }
+  }
+
+  const idsFor = (treatment: string): Set<string> => new Set([...treatmentSets[treatment] ?? []]
+    .map(ref => exactModuleRef(ref, `${treatment} specification`).id));
+  const requestedIds = idsFor('requested');
+  const expectedIds = idsFor('expected');
+  const observedIds = idsFor('observed');
+  const promptPacks = new Set([...featureSet, ...requestedIds]);
+  const applies = (check: RecipeCheck): boolean => check.requiresFeatures === undefined
+    || check.requiresFeatures.every(featureId => featureSet.has(featureId)
+      || selectedStableFamilies.has(features.get(featureId)?.stableId ?? ''));
+  const selectChecks = (ids: ReadonlySet<string>, observation: string, treatment: string):
+    Array<RecipeCheck & { treatment: string }> => release.checkCatalog
+    .filter(check => ids.has(check.packId ?? '') && applies(check)
+      && (check.observations === undefined
+        ? observation === 'requested' : check.observations.includes(observation)))
+    .map(check => ({ ...check, treatment }));
+  const pointBearing = <T extends RecipeCheck>(checks: readonly T[]): T[] =>
+    checks.filter(check => check.points > 0);
+  const eligibleFeatureChecks = selectChecks(featureSet, 'requested', 'requested');
+  const eligibleRequestedSpecChecks = selectChecks(requestedIds, 'requested', 'requested');
+  const eligibleExpectedChecks = selectChecks(expectedIds, 'unmentioned', 'expected');
+  const observedChecks = selectChecks(observedIds, 'unmentioned', 'observed');
+  const featureChecks = pointBearing(eligibleFeatureChecks);
+  const requestedSpecChecks = pointBearing(eligibleRequestedSpecChecks);
+  const expectedChecks = pointBearing(eligibleExpectedChecks);
+  const checksByTreatment: Record<string, Array<RecipeCheck & { treatment: string }>> = {
+    requested: eligibleRequestedSpecChecks,
+    expected: eligibleExpectedChecks,
+    observed: observedChecks };
+  for (const [treatment, refs] of Object.entries(treatmentSets)) {
+    for (const ref of refs) {
+      const id = exactModuleRef(ref, `${treatment} specification`).id;
+      if (!checksByTreatment[treatment]?.some(check => check.packId === id)) {
+        const observation = treatment === 'requested'
+          ? 'prompted evaluation' : 'evaluation without prompting';
+        throw new Error(`${treatment} specification ${ref} has no ${observation}`);
+      }
+    }
+  }
+  const allEligibleChecks = [...eligibleFeatureChecks, ...eligibleRequestedSpecChecks,
+    ...eligibleExpectedChecks];
+  const allScoredChecks = [...featureChecks, ...requestedSpecChecks, ...expectedChecks];
+  const availableChecks = new Set(allEligibleChecks.map(check => check.stableKey));
+  for (const key of selectedCheckKeys) {
+    if (!availableChecks.has(key)) {
+      throw new Error(`check ${key} is outside the requested/expected feature and specification scope`);
+    }
+  }
+  const scoredChecks = selectedCheckKeys.length
+    ? allEligibleChecks.filter(check => selectedCheckKeys.includes(check.stableKey)) : allScoredChecks;
+  // A prompt can introduce a feature before another graph node makes its checks runnable.
+  const deferredFeatureChecks = requestedFeatures.length > 0 && selectedCheckKeys.length === 0
+    && requestedFeatures.every(featureId => release.checkCatalog.some(check =>
+      check.packId === featureId && check.points > 0));
+  if (!scoredChecks.length && !deferredFeatureChecks) {
+    throw new Error('modular selection contains no scored checks');
+  }
+  const observedKeys = new Set(observedChecks.map(check => check.stableKey));
+  const checkOverlap = scoredChecks.filter(check => observedKeys.has(check.stableKey));
+  if (checkOverlap.length) throw new Error('scored and observed checks must be disjoint');
+
+  const identityDocument = {
+    schemaVersion: 3,
+    recipeContentSha256: release.contentSha256,
+    features: [...featureSet].sort(),
+    specifications: Object.fromEntries(Object.entries(treatmentSets)
+      .map(([treatment, refs]) => [treatment, [...refs].sort()])),
+    scoredChecks: scoredChecks.map(check => check.stableKey).sort(),
+    observedChecks: observedChecks.map(check => check.stableKey).sort(),
+  };
+  const taskSelectionDocument = {
+    schemaVersion: 3,
+    recipeContentSha256: release.contentSha256,
+    promptPacks: [...promptPacks].sort(),
+  };
+  const requested = {
+    features: [...requestedFeatures].sort(),
+    specifications: Object.fromEntries(Object.entries(inputTreatments)
+      .map(([treatment, refs]) => [treatment, [...refs].sort()])),
+    checks: [...selectedCheckKeys].sort(),
+    ...(dependencyExpansion === 'exact' ? { dependencyExpansion } : {}),
+  };
+  return {
+    schemaVersion: 3,
+    recipe: { id: release.id, version: release.version, contentSha256: release.contentSha256 },
+    requested,
+    features: [...featureSet].sort(),
+    specifications: identityDocument.specifications,
+    promptPacks: [...promptPacks].sort(),
+    scoredChecks,
+    checks: scoredChecks,
+    observedChecks,
+    scoredPoints: scoredChecks.reduce((total, check) => total + check.points, 0),
+    taskSelectionSha256: sha256(canonicalDefinitionJson(taskSelectionDocument)),
+    sha256: sha256(canonicalDefinitionJson(identityDocument)),
+  };
+}
+
+// Checks may narrow grading but cannot expand the requested task.
+export function resolveRecipeSelection(release: RecipeRelease,
+  { packIds = [], checkKeys = [] }: RecipeSelectionOptions = {}): RecipeSelection {
+  if (!release?.contentSha256 || !Array.isArray(release.checkCatalog)
+    || !Array.isArray(release.components?.packs)) {
+    throw new Error('recipe selection requires a compiled recipe release');
+  }
+  const requestedPacks = unique(packIds, '--pack');
+  const requestedChecks = unique(checkKeys, '--check');
+  const availablePacks = new Map(release.components.packs.map(pack => [pack.id, pack]));
+  const availableChecks = new Set(release.checkCatalog.map(check => check.stableKey));
+  for (const id of requestedPacks) if (!availablePacks.has(id)) throw new Error(`recipe has no pack ${id}`);
+  for (const key of requestedChecks) if (!availableChecks.has(key)) throw new Error(`recipe has no check ${key}`);
+
+  // No --pack means the recipe's complete requested task. A pack selection is
+  // a smaller requested task, closed over declared dependencies. Checks never
+  // add requirements: they may only narrow measurement inside that task.
+  const taskPacks = new Set(requestedPacks.length ? requestedPacks : availablePacks.keys());
+  const visit = (id: string, chain: readonly string[] = []): void => {
+    if (chain.includes(id)) throw new Error(`recipe pack dependency cycle: ${[...chain, id].join(' -> ')}`);
+    const pack = availablePacks.get(id);
+    if (!pack) throw new Error(`recipe pack dependency is missing ${id}`);
+    if (!Array.isArray(pack.requiresPacks)) {
+      throw new Error(`recipe pack ${id} has no dependency metadata`);
+    }
+    for (const reference of pack.requiresPacks) {
+      const split = String(reference).lastIndexOf('@');
+      const requiredId = String(reference).slice(0, split);
+      const version = String(reference).slice(split + 1);
+      const required = availablePacks.get(requiredId);
+      if (split < 1 || !required || required.version !== version) {
+        throw new Error(`recipe pack ${id} requires missing ${reference}`);
+      }
+      taskPacks.add(requiredId);
+      visit(requiredId, [...chain, id]);
+    }
+  };
+  [...taskPacks].forEach(id => visit(id));
+
+  for (const key of requestedChecks) {
+    const check = release.checkCatalog.find(candidate => candidate.stableKey === key);
+    if (!taskPacks.has(check?.packId ?? '')) {
+      throw new Error(`check ${key} belongs to unrequested pack ${check?.packId}`);
+    }
+  }
+
+  const checks = new Set(requestedChecks);
+  const benchmarkChecks = release.checkCatalog.filter(check => check.points > 0);
+  const selected = release.checkCatalog.filter(check => taskPacks.has(check.packId ?? '')
+    && (checks.size ? checks.has(check.stableKey) : check.points > 0));
+  if (!selected.length) throw new Error('pack/check request selects no checks');
+  const selectedKeys = new Set(selected.map(check => check.stableKey));
+
+  const identityDocument = {
+    schemaVersion: 1,
+    recipeContentSha256: release.contentSha256,
+    taskPacks: [...taskPacks].sort(),
+    checks: selected.map(check => check.stableKey).sort(),
+  };
+  return {
+    schemaVersion: 1,
+    recipe: { id: release.id, version: release.version, contentSha256: release.contentSha256 },
+    requested: { packs: [...requestedPacks].sort(), checks: [...requestedChecks].sort() },
+    taskPacks: [...taskPacks].sort(),
+    sha256: sha256(canonicalDefinitionJson(identityDocument)),
+    completeness: benchmarkChecks.every(check => selectedKeys.has(check.stableKey)) ? 'full' : 'subset',
+    scoredPoints: selected.reduce((total, check) => total + check.points, 0),
+    checks: selected.map(({ stableKey, executionId, packId, checkGroupId, source,
+      featureId, criterionId, description, points }) => ({ stableKey, executionId, packId,
+      checkGroupId, source, featureId, criterionId, description, points })),
+  };
+}
+
+export function selectRecipeRelease(release: RecipeRelease,
+  options: RecipeSelectionOptions = {}): SelectedRecipeRelease {
+  const selection = resolveRecipeSelection(release, options);
+  const selectedKeys = new Set(selection.checks.map(check => check.stableKey));
+  const selectedPacks = new Set(selection.taskPacks);
+  return {
+    ...release,
+    selection,
+    components: { ...release.components,
+      packs: release.components.packs.filter(pack => selectedPacks.has(pack.id)) },
+    checkCatalog: release.checkCatalog.filter(check => selectedKeys.has(check.stableKey)),
+  };
+}
+
+export function composeSelectedRecipeTask(plan: RecipeTaskPlan,
+  selection: ComposableSelection,
+  { taskMode = null }: { taskMode?: string | null } = {}): ComposedRecipeTask {
+  const taskPacks = selection?.schemaVersion === 3 ? selection.promptPacks : selection?.taskPacks;
+  if (!plan?.recipe?.task || !Array.isArray(taskPacks)
+    || typeof selection.sha256 !== 'string') {
+    throw new Error('selected task requires a compiled recipe plan and selection');
+  }
+  const owners = new Set(['recipe', ...taskPacks]);
+  const features = new Set(selection.features ?? []);
+  const featureModules = new Map(plan.packs.filter(pack => pack.moduleType === 'feature')
+    .map(pack => [pack.id, pack]));
+  const selectedStableFamilies = new Set([...features]
+    .map(id => featureModules.get(id)?.stableId)
+    .filter(Boolean));
+  const featureApplies = (featureId: string): boolean => features.has(featureId)
+    || selectedStableFamilies.has(featureModules.get(featureId)?.stableId);
+  const actionSelectable = plan.recipe.task.mode === 'action';
+  const mode = taskMode ?? plan.recipe.task.mode;
+  if (!['fresh', 'upgrade'].includes(mode)) {
+    throw new Error('selected task mode must be fresh or upgrade');
+  }
+  if (!actionSelectable && mode !== plan.recipe.task.mode) {
+    throw new Error(`recipe task mode is ${plan.recipe.task.mode}, not ${mode}`);
+  }
+  const requestedOwners = new Set([
+    ...(selection.requested?.features ?? []),
+    ...Object.values(selection.requested?.specifications ?? {}).flat()
+      .map(reference => reference.slice(0, reference.lastIndexOf('@'))),
+  ]);
+  const select = (fragments: readonly RecipeTaskDocument[]): RecipeTaskDocument[] => {
+    const ownersWithCurrentText = new Set(fragments.flatMap(fragment =>
+      fragment.ownerConditions
+        ? fragment.ownerConditions.filter(entry => entry.modes.includes(mode)).map(entry => entry.owner)
+        : fragment.modes.includes(mode) ? fragment.owners : []));
+    const modeApplies = (owner: string, modes: string[]): boolean => modes.includes(mode)
+      || (actionSelectable && requestedOwners.has(owner) && !ownersWithCurrentText.has(owner));
+    return fragments.filter(fragment => fragment.ownerConditions
+      ? fragment.ownerConditions.some(entry => owners.has(entry.owner)
+        && modeApplies(entry.owner, entry.modes) && entry.requiresFeatures.every(featureApplies))
+      : fragment.owners.some(owner => owners.has(owner) && modeApplies(owner, fragment.modes))
+        && (fragment.requiresFeatures === undefined
+          || fragment.requiresFeatures.every(featureApplies)));
+  };
+  const requirements = select(plan.recipe.task.requirements);
+  const contracts = select(plan.recipe.task.contracts);
+  const compose = (fragments: readonly RecipeTaskDocument[]): string =>
+    selection.schemaVersion === 3
+    ? `${fragments.map(fragment => fragment.text.trimEnd()).join('\n\n')}\n`
+    : fragments.map(fragment => fragment.text).join('');
+  const requirementText = compose(requirements);
+  const contractText = compose(contracts);
+  const identity = {
+    schemaVersion: 1,
+    recipeContentSha256: selection.recipe.contentSha256,
+    selectionSha256: selection.taskSelectionSha256 ?? selection.sha256,
+    ...(actionSelectable ? { taskMode: mode } : {}),
+    requirementIds: requirements.map(fragment => fragment.id),
+    contractIds: contracts.map(fragment => fragment.id),
+    requirementSha256: sha256(requirementText),
+    contractSha256: sha256(contractText),
+  };
+  return { ...identity, sha256: sha256(canonicalDefinitionJson(identity)),
+    requirementText, contractText };
+}
+
+function same(left: unknown, right: unknown): boolean {
+  return canonicalDefinitionJson(left) === canonicalDefinitionJson(right);
+}
+
+export function createRecipeTaskRequest(binding: RecipeTaskBinding,
+  options: RecipeSelectionOptions = {}): RecipeTaskRequestResult {
+  if (!binding?.release || !binding?.plan) {
+    throw new Error('recipe task request requires a resolved recipe binding');
+  }
+  const selection = resolveRecipeSelection(binding.release, options);
+  const task = composeSelectedRecipeTask(binding.plan, selection);
+  const request = {
+    schemaVersion: 1,
+    recipe: { id: binding.release.id, version: binding.release.version,
+      contentSha256: binding.release.contentSha256 },
+    selection: { sha256: selection.sha256, requested: selection.requested,
+      taskPacks: selection.taskPacks },
+    task: { sha256: task.sha256, requirementSha256: task.requirementSha256,
+      contractSha256: task.contractSha256 },
+  };
+  return { request, selection, task };
+}
+
+export function createModularRecipeTaskRequest(binding: ModularRecipeTaskBinding,
+  options: ModularSelectionOptions & { taskMode?: string | null } = {}): ModularRecipeTaskRequestResult {
+  if (!binding?.release || !binding?.plan) {
+    throw new Error('modular recipe task request requires a resolved recipe binding');
+  }
+  const selection = resolveModularRecipeSelection(binding.release, options);
+  const actionSelectable = binding.plan.recipe.task.mode === 'action';
+  const taskMode = options.taskMode ?? binding.plan.recipe.task.mode;
+  const task = composeSelectedRecipeTask(binding.plan, selection, {
+    taskMode,
+  });
+  const request: ModularTaskRequest = {
+    schemaVersion: 3,
+    recipe: { id: binding.release.id, version: binding.release.version,
+      contentSha256: binding.release.contentSha256 },
+    selection: {
+      sha256: selection.sha256,
+      requested: selection.requested,
+      promptPacks: selection.promptPacks,
+      resolved: { features: selection.features, specifications: selection.specifications,
+        promptPacks: selection.promptPacks, taskSelectionSha256: selection.taskSelectionSha256 },
+      scoredChecks: selection.scoredChecks.map(check => check.stableKey),
+      observedChecks: selection.observedChecks.map(check => check.stableKey),
+    },
+    task: { ...(actionSelectable ? { mode: taskMode } : {}),
+      sha256: task.sha256, requirementSha256: task.requirementSha256,
+      contractSha256: task.contractSha256 },
+  };
+  return { request, selection, task,
+    taskMode };
+}
+
+const record = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+const isOneOfMode = (value: unknown): boolean =>
+  typeof value === 'string' && ['fresh', 'upgrade'].includes(value);
+
+type StoredTaskRequest = {
+  schemaVersion?: unknown;
+  recipe?: unknown;
+  task?: unknown;
+  selection?: {
+    requested?: {
+      packs?: string[];
+      checks?: string[];
+      features?: string[];
+      specifications?: { requested?: string[]; expected?: string[]; observed?: string[] };
+      dependencyExpansion?: string;
+    };
+  };
+};
+
+export function resolveRecipeTaskRequest(binding: RecipeTaskBinding,
+  request: StoredTaskRequest): RecipeTaskRequestResult {
+  if (!request || typeof request !== 'object' || Array.isArray(request)
+    || request.schemaVersion !== 1 || !request.recipe || !request.selection || !request.task) {
+    throw new Error('recipe task request is invalid');
+  }
+  const resolved = createRecipeTaskRequest(binding, {
+    packIds: request.selection.requested?.packs,
+    checkKeys: request.selection.requested?.checks,
+  });
+  if (!same(resolved.request, request)) {
+    throw new Error('recipe task changed after request resolution');
+  }
+  return resolved;
+}
+
+export function resolveModularRecipeTaskRequest(binding: ModularRecipeTaskBinding,
+  request: StoredTaskRequest): ModularRecipeTaskRequestResult {
+  if (!request || typeof request !== 'object' || Array.isArray(request)
+    || request.schemaVersion !== 3 || !request.recipe || !request.selection || !request.task) {
+    throw new Error('modular recipe task request is invalid');
+  }
+  const requested = request.selection.requested;
+  const options = {
+    featureIds: requested?.features,
+    requestedSpecifications: requested?.specifications?.requested,
+    expectedSpecifications: requested?.specifications?.expected,
+    observedSpecifications: requested?.specifications?.observed,
+    checkKeys: requested?.checks,
+    dependencyExpansion: requested?.dependencyExpansion,
+  };
+  const actionSelectable = binding.plan?.recipe?.task?.mode === 'action';
+  const requestedMode = record(request.task) ? request.task.mode : undefined;
+  const taskMode = actionSelectable
+    ? requestedMode : binding.plan?.recipe?.task?.mode;
+  if ((actionSelectable && !isOneOfMode(taskMode))
+    || (!actionSelectable && requestedMode !== undefined)) {
+    throw new Error('modular recipe task mode is invalid');
+  }
+  const resolved = createModularRecipeTaskRequest(binding,
+    { ...options, taskMode: typeof taskMode === 'string' ? taskMode : null });
+  if (!same(resolved.request, request)) {
+    throw new Error('modular recipe task changed after request resolution');
+  }
+  return resolved;
+}
+
+type BoundRecipeTaskBinding = RecipeTaskBinding | ModularRecipeTaskBinding;
+
+function isRecipeTaskBinding(binding: BoundRecipeTaskBinding): binding is RecipeTaskBinding {
+  return 'title' in binding.release;
+}
+
+export function isModularRecipeRelease(release: ModularRecipeRelease): boolean {
+  const modules = release?.components?.packs;
+  return Array.isArray(modules) && modules.length > 0
+    && modules.every(module => ['feature', 'specification'].includes(module.moduleType ?? ''));
+}
+
+export function createBoundRecipeTaskRequest(binding: BoundRecipeTaskBinding,
+  options: ModularSelectionOptions & { taskMode?: string | null } = {}): BoundRecipeTaskRequestResult {
+  if (!binding?.release) throw new Error('bound recipe task requires a recipe release');
+  if (isModularRecipeRelease(binding.release)) {
+    if ((options.packIds ?? []).length) throw new Error('modular recipes use feature modules, not packs');
+    return createModularRecipeTaskRequest(binding, options);
+  }
+  if ((options.featureIds ?? []).length || (options.requestedSpecifications ?? []).length
+    || (options.expectedSpecifications ?? []).length
+    || (options.observedSpecifications ?? []).length) {
+    throw new Error('pack-based recipes do not support modular feature/specification selection');
+  }
+  if (!isRecipeTaskBinding(binding)) {
+    throw new Error('pack-based recipes require a compiled recipe release');
+  }
+  return createRecipeTaskRequest(binding, options);
+}
+
+export function resolveBoundRecipeTaskRequest(binding: BoundRecipeTaskBinding,
+  request: StoredTaskRequest): BoundRecipeTaskRequestResult {
+  if (!binding?.release) throw new Error('bound recipe task requires a recipe release');
+  if (isModularRecipeRelease(binding.release)) {
+    if (request?.schemaVersion !== 3) throw new Error('modular recipe requires a schema-3 task request');
+    return resolveModularRecipeTaskRequest(binding, request);
+  }
+  if (request?.schemaVersion !== 1) throw new Error('pack-based recipe requires a schema-1 task request');
+  if (!isRecipeTaskBinding(binding)) {
+    throw new Error('pack-based recipes require a compiled recipe release');
+  }
+  return resolveRecipeTaskRequest(binding, request);
+}
+
+// Remove expected and observed treatments from the coding-process request.
+export function createAgentVisibleTaskRequest(binding: BoundRecipeTaskBinding,
+  selected: StoredTaskRequest & { request?: StoredTaskRequest }): UnknownRecord {
+  const resolved = resolveBoundRecipeTaskRequest(binding, selected?.request ?? selected);
+  if (resolved.request.schemaVersion === 1) return resolved.request;
+  if (!isModularRecipeTaskRequest(resolved)) {
+    throw new Error('schema-3 task request did not resolve modular treatments');
+  }
+  const requested = resolved.selection.requested;
+  const visible = createBoundRecipeTaskRequest(binding, {
+    featureIds: requested.features,
+    requestedSpecifications: requested.specifications?.requested ?? [],
+    expectedSpecifications: [],
+    observedSpecifications: [],
+    // Check filters control grading, never prompt composition. Keeping them in
+    // the coding-process request could disclose an expected check name after
+    // its owning specification has been deliberately removed.
+    checkKeys: [],
+    dependencyExpansion: requested.dependencyExpansion,
+    taskMode: resolved.taskMode,
+  });
+  if (visible.task.sha256 !== resolved.task.sha256) {
+    throw new Error('undisclosed treatment removal changed the agent task');
+  }
+  return visible.request;
+}
+
+// Filter a compiled scenario by stable recipe keys. This validates the entire
+// mapping before a browser is launched, so a stale or cross-suite selection
+// cannot turn into a plausible-looking partial score.
+export function selectScenarioChecks(spec: ScenarioSelectionSource,
+  recipeRelease: { checks?: RecipeCheck[] } | null,
+  selectedStableKeys: readonly string[] = []): ScenarioSelectionSource & { checks: RecipeCheck[] } {
+  const requested = unique(selectedStableKeys, '--selected-check');
+  if (!requested.length) return { features: spec.features, checks: recipeRelease?.checks ?? [] };
+  if (!recipeRelease?.checks) throw new Error('selected checks require a recipe-bound scenario');
+  const byKey = new Map(recipeRelease.checks.map(check => [check.stableKey, check]));
+  const selected = requested.map(key => {
+    const check = byKey.get(key);
+    if (!check) throw new Error(`recipe execution has no selected check ${key}`);
+    return check;
+  });
+  const selectedCriteria = new Map<string, Set<string>>();
+  for (const check of selected) {
+    const key = String(check.featureId);
+    const criteria = selectedCriteria.get(key) ?? new Set();
+    criteria.add(String(check.criterionId));
+    selectedCriteria.set(key, criteria);
+  }
+  const features = spec.features.flatMap(feature => {
+    const criteria = selectedCriteria.get(String(feature.id));
+    if (!criteria) return [];
+    const filtered = feature.criteria.filter(criterion => criteria.has(String(criterion.id)));
+    if (filtered.length !== criteria.size) {
+      const found = new Set(filtered.map(criterion => String(criterion.id)));
+      const missing = [...criteria].filter(id => !found.has(id));
+      throw new Error(`scenario feature ${feature.id} has no selected criterion ${missing.join(', ')}`);
+    }
+    return [{ ...feature, criteria: filtered }];
+  });
+  const foundFeatures = new Set(features.map(feature => String(feature.id)));
+  const missingFeatures = [...selectedCriteria.keys()].filter(id => !foundFeatures.has(id));
+  if (missingFeatures.length) throw new Error(`scenario has no selected feature ${missingFeatures.join(', ')}`);
+  return { features, checks: selected };
+}
diff --git a/tools/stack-bench/src/composition/tracks.ts b/tools/stack-bench/src/composition/tracks.ts
new file mode 100644
index 00000000000..32a876c9635
--- /dev/null
+++ b/tools/stack-bench/src/composition/tracks.ts
@@ -0,0 +1,235 @@
+import { readFileSync, readdirSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+
+import { compileTrackManifest } from './definition-compiler.js';
+import type { StackRunPorts } from '../stacks/stack-adapter-contract.js';
+import { STACK_ADAPTER_REGISTRY, stackPortAllocations } from '../stacks/stack-adapters.js';
+
+import { STACK_BENCH_ROOT as ROOT } from '../package-root.js';
+
+export interface TrackSuite {
+  id: string;
+  spec: string;
+  inherit?: 'none' | 'all-higher-levels';
+  inherited?: boolean;
+  fromLevel?: number;
+}
+
+export interface TrackDatabaseProvenance {
+  action: string;
+  markerParameter: string;
+  body: Record<string, string>;
+}
+
+export interface NamedActionParameter {
+  name: string;
+  in?: 'body' | 'path';
+  placeholder?: string;
+  wireType?: string;
+}
+
+export interface NamedAction {
+  id?: string;
+  path?: string;
+  method?: string;
+  reducer?: string;
+  args?: readonly unknown[];
+  params?: readonly NamedActionParameter[];
+}
+
+export interface TrackAction extends NamedAction {
+  id: string;
+  path: string;
+  reducer: string;
+  args: unknown[];
+}
+
+export interface Track {
+  name: string;
+  dir: string;
+  schemaVersion: number;
+  title: string;
+  slug: string;
+  internal: boolean;
+  validatedThrough: number;
+  plannedThrough: number;
+  portOffset: number;
+  restartProbe: string;
+  reseedOnReset: boolean;
+  databaseProvenance: TrackDatabaseProvenance | null;
+  suites: Record<string, TrackSuite[]>;
+  actions: TrackAction[];
+  prompts: string;
+  contracts: string;
+  scenarios: string;
+  walk: string;
+}
+
+export type TrackDefinition = Track;
+
+// A compiled manifest resolves suites without the paths loadTrack adds.
+export interface TrackSuiteSource {
+  name: string;
+  dir: string;
+  suites: Record<string, TrackSuite[]>;
+}
+
+export const TRACKS_DIR = join(ROOT, 'tracks');
+export const TRACK_MANIFEST_FILE = 'track.json';
+export const DEFAULT_TRACK = 'chat';
+
+export function listTracks({ includeInternal = false }: { includeInternal?: boolean } = {}): string[] {
+  if (!existsSync(TRACKS_DIR)) return [];
+  return readdirSync(TRACKS_DIR, { withFileTypes: true })
+    .filter(e => e.isDirectory() && existsSync(join(TRACKS_DIR, e.name, TRACK_MANIFEST_FILE)))
+    .filter(e => includeInternal
+      || !JSON.parse(readFileSync(join(TRACKS_DIR, e.name, TRACK_MANIFEST_FILE), 'utf8')).internal)
+    .map(e => e.name)
+    .sort();
+}
+
+export function loadTrack(name: string = DEFAULT_TRACK): Track {
+  const dir = join(TRACKS_DIR, name);
+  const manifest = join(dir, TRACK_MANIFEST_FILE);
+  if (!existsSync(manifest)) {
+    throw new Error(
+      `Unknown track "${name}". Available: ${listTracks({ includeInternal: true }).join(', ') || 'none'}`,
+    );
+  }
+  const m = compileTrackManifest(JSON.parse(readFileSync(manifest, 'utf8')) as unknown,
+    { source: manifest });
+  return {
+    name,
+    dir,
+    schemaVersion: m.schemaVersion,
+    title: m.title ?? name,
+    // Distinguishes track-owned ports, databases, and result paths.
+    slug: m.slug ?? '',
+    internal: !!m.internal,
+    // Only validated levels may be published as baselines.
+    validatedThrough: m.validatedThrough ?? 0,
+    plannedThrough: m.plannedThrough ?? Math.max(...Object.keys(m.suites ?? {}).map(Number), 0),
+    portOffset: m.portOffset ?? 0,
+    // What to poll after restarting the app's server to know it is back.
+    restartProbe: m.restartProbe ?? '/',
+    // Set when the application seeds fixture data at startup: wiping the
+    // database also wipes the seed, so the server has to be restarted before
+    // grading can assume it is there.
+    reseedOnReset: m.reseedOnReset ?? false,
+    databaseProvenance: m.databaseProvenance ?? null,
+    suites: m.suites ?? {},
+    actions: (m.actions ?? []) as TrackAction[],
+    prompts: join(dir, 'prompts'),
+    contracts: join(dir, 'contracts'),
+    scenarios: join(dir, 'scenarios'),
+    walk: join(ROOT, 'dist', 'tracks', name, 'walk.js'),
+  };
+}
+
+export function isDeclaredLevel(track: TrackDefinition | null | undefined, level: number): boolean {
+  return Number.isInteger(level) && level >= 1 && Boolean(track?.suites?.[String(level)]);
+}
+
+export const PORT_BASES = Object.freeze(stackPortAllocations());
+
+// Keep run ports inside the collision-free range checked below.
+export const RUN_INDEX_CAP = 20;
+
+export function portsFor(track: TrackDefinition, backend: string, runIndex: number): StackRunPorts {
+  if (!Number.isInteger(runIndex) || runIndex < 0 || runIndex > RUN_INDEX_CAP) {
+    throw new Error(`--run-index must be an integer from 0 through ${RUN_INDEX_CAP}`);
+  }
+  const adapter = STACK_ADAPTER_REGISTRY.get(backend);
+  return adapter.ports.forRun({
+    trackOffset: track.portOffset,
+    runIndex,
+  });
+}
+
+// Every (track, backend, run-index) combination must own its ports outright.
+// Run at startup: a new track whose offset collides with an existing window
+// fails loudly here, instead of silently grading the wrong application.
+export function assertNoPortCollisions(): void {
+  const owner = new Map<number, string>();
+  // The database containers' host ports are fixed and shared by design, but no
+  // track window may land on them either.
+  for (const [backend, base] of Object.entries(PORT_BASES)) {
+    if (base.db) owner.set(base.db, `${backend} database container`);
+  }
+  for (const name of listTracks({ includeInternal: true })) {
+    const track = loadTrack(name);
+    for (const backend of STACK_ADAPTER_REGISTRY.ids) {
+      for (let i = 0; i <= RUN_INDEX_CAP; i++) {
+        const p = portsFor(track, backend, i);
+        for (const port of [p.vite, p.express]) {
+          if (port == null) continue;
+          const who = `${name}/${backend}/run${i}`;
+          if (owner.has(port)) {
+            throw new Error(`port ${port} is claimed by both ${owner.get(port)} and ${who} — adjust the new track's portOffset`);
+          }
+          owner.set(port, who);
+        }
+      }
+    }
+  }
+}
+
+// Keep builds outside the harness tree and below the platform path limit.
+export function workRoot(): string {
+  return process.env.STACK_BENCH_WORK_DIR ?? join(tmpdir(), 'stack-bench-runs');
+}
+
+// A stamped directory isolates each run while allowing its levels to share the
+// same application source for sequential upgrades.
+export const workDirFor = (track: TrackDefinition, backend: string, runIndex: number,
+  stamp?: string): string =>
+  join(workRoot(), resultsName(track, backend, runIndex) + (stamp ? `-${stamp}` : ''));
+
+// Each run gets a separate application database and module. Result names remain
+// operator-facing and include the selected stack.
+export const dbName = (track: Pick<TrackDefinition, 'slug'>, runIndex: number): string =>
+  `app${track.slug ? `_${track.slug}` : ''}_run${runIndex}`;
+
+export const moduleName = (track: Pick<TrackDefinition, 'slug'>, runIndex: number): string =>
+  `app${track.slug ? `-${track.slug}` : ''}-run${runIndex}`;
+
+export const resultsName = (track: TrackDefinition, backend: string, runIndex: number): string =>
+  `${backend}${track.slug ? `-${track.slug}` : ''}-run${runIndex}`;
+
+export function levelPrompt(track: TrackDefinition, level: number): string {
+  const prefix = String(level).padStart(2, '0') + '-';
+  const file = existsSync(track.prompts)
+    ? readdirSync(track.prompts).find(f => f.startsWith(prefix))
+    : null;
+  if (!file) throw new Error(`No prompt for level ${level} in ${track.prompts}`);
+  return readFileSync(join(track.prompts, file), 'utf8');
+}
+
+export function appendix(track: TrackDefinition, level: number): string {
+  const f = join(track.contracts, `appendix-${String(level).padStart(2, '0')}.md`);
+  return existsSync(f) ? readFileSync(f, 'utf8') : '';
+}
+
+// Re-run earlier guarantee suites so later levels cannot hide regressions.
+export function suitesFor(track: TrackSuiteSource, level: number): TrackSuite[] {
+  const at = (lvl: number): TrackSuite[] => (track.suites[String(lvl)] ?? [])
+    .map(suite => ({ ...suite, spec: join(track.dir, suite.spec) }));
+  if (!track.suites[String(level)]) {
+    throw new Error(`No scenario suites declared for ${track.name} level ${level}`);
+  }
+  const declared = at(level);
+
+  // Deduplicate inherited guarantees; the current declaration wins.
+  const seen = new Set(declared.map(suite => suite.spec));
+  const inherited: TrackSuite[] = [];
+  for (let lvl = 1; lvl < level; lvl++) {
+    for (const suite of at(lvl)) {
+      if (suite.inherit !== 'all-higher-levels' || seen.has(suite.spec)) continue;
+      seen.add(suite.spec);
+      // Bundle keys must remain unique across inherited suites.
+      inherited.push({ ...suite, id: `${suite.id}@L${lvl}`, inherited: true, fromLevel: lvl });
+    }
+  }
+  return [...declared, ...inherited];
+}
diff --git a/tools/stack-bench/src/evidence/artifact-identities.ts b/tools/stack-bench/src/evidence/artifact-identities.ts
new file mode 100644
index 00000000000..b6df2d61286
--- /dev/null
+++ b/tools/stack-bench/src/evidence/artifact-identities.ts
@@ -0,0 +1,194 @@
+import type { Dirent } from 'node:fs';
+import { z } from 'zod';
+
+import { STACK_BENCH_ROOT } from '../package-root.js';
+import { hashDirectory } from './provenance.js';
+import { formatZodError } from '../zod-error.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+export interface ArtifactIdentity {
+  id: string;
+  version: string | null;
+  sha256: string | null;
+  state: string | null;
+}
+
+export interface EngineArtifactIdentity extends ArtifactIdentity {
+  id: 'stack-bench';
+  version: null;
+  sha256: string;
+  state: null;
+}
+
+export const ARTIFACT_IDENTITY_KEYS = Object.freeze([
+  'engine', 'recipe', 'fixture', 'calibration', 'experiment', 'agentAdapter', 'stackAdapter',
+] as const);
+
+type ArtifactIdentityKey = typeof ARTIFACT_IDENTITY_KEYS[number];
+
+export type ArtifactIdentities = Record<ArtifactIdentityKey, ArtifactIdentity | null> & {
+  packs: ArtifactIdentity[];
+};
+
+const HASH = /^[a-f0-9]{64}$/;
+const identityShape = {
+  id: z.string().min(1),
+  version: z.string().min(1).nullable().optional(),
+  sha256: z.string().regex(HASH).nullable().optional(),
+  state: z.string().min(1).nullable().optional(),
+};
+const identitySchema = z.strictObject(identityShape);
+const completeIdentitySchema = z.strictObject({
+  id: identityShape.id,
+  version: identityShape.version.unwrap(),
+  sha256: identityShape.sha256.unwrap(),
+  state: identityShape.state.unwrap(),
+});
+const optionalIdentitySchema = identitySchema.nullable().optional();
+const identitiesSchema = z.strictObject({
+  engine: optionalIdentitySchema,
+  recipe: optionalIdentitySchema,
+  fixture: optionalIdentitySchema,
+  calibration: optionalIdentitySchema,
+  experiment: optionalIdentitySchema,
+  agentAdapter: optionalIdentitySchema,
+  stackAdapter: optionalIdentitySchema,
+  packs: z.array(identitySchema).optional(),
+});
+let cachedEngineIdentity: EngineArtifactIdentity | null = null;
+
+const isObject = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function fail(message: string): never {
+  throw new Error(`invalid artifact: ${message}`);
+}
+
+function asObject(value: unknown, message: string): UnknownRecord {
+  if (!isObject(value)) fail(message);
+  return value;
+}
+
+function identity(value: unknown, at: string, requireComplete: boolean): ArtifactIdentity | null {
+  if (value === null) return null;
+  const fields = ['id', 'version', 'sha256', 'state'] as const;
+  if (requireComplete) {
+    const candidate = asObject(value, `${at} must be an object or null`);
+    for (const field of fields) {
+      if (!Object.hasOwn(candidate, field)) fail(`${at}.${field} is required`);
+    }
+  }
+  const parsed = (requireComplete ? completeIdentitySchema : identitySchema).safeParse(value);
+  if (!parsed.success) {
+    fail(formatZodError(parsed.error, at));
+  }
+  const candidate = parsed.data;
+  return {
+    id: candidate.id,
+    version: candidate.version ?? null,
+    sha256: candidate.sha256 ?? null,
+    state: candidate.state ?? null,
+  };
+}
+
+export function validateArtifactIdentities(
+  value: unknown,
+  {
+    requireEngine = false,
+    requireComplete = false,
+    sortPacks = true,
+  }: { requireEngine?: boolean; requireComplete?: boolean; sortPacks?: boolean } = {},
+): ArtifactIdentities {
+  const allowed = new Set([...ARTIFACT_IDENTITY_KEYS, 'packs']);
+  if (requireComplete) {
+    const candidate = asObject(value, 'identities must be an object');
+    for (const key of allowed) {
+      if (!Object.hasOwn(candidate, key)) fail(`identities.${key} is required`);
+    }
+  }
+  const parsed = identitiesSchema.safeParse(value);
+  if (!parsed.success) {
+    fail(formatZodError(parsed.error, 'identities'));
+  }
+  const candidate = parsed.data;
+  const packsValue = candidate.packs ?? [];
+  const normalized: ArtifactIdentities = {
+    engine: identity(candidate.engine ?? null, 'identities.engine', requireComplete),
+    recipe: identity(candidate.recipe ?? null, 'identities.recipe', requireComplete),
+    fixture: identity(candidate.fixture ?? null, 'identities.fixture', requireComplete),
+    calibration: identity(candidate.calibration ?? null, 'identities.calibration', requireComplete),
+    experiment: identity(candidate.experiment ?? null, 'identities.experiment', requireComplete),
+    agentAdapter: identity(candidate.agentAdapter ?? null, 'identities.agentAdapter', requireComplete),
+    stackAdapter: identity(candidate.stackAdapter ?? null, 'identities.stackAdapter', requireComplete),
+    packs: packsValue.map((item, index) => {
+      const pack = identity(item, `identities.packs[${index}]`, requireComplete);
+      if (pack === null) fail(`identities.packs[${index}] must not be null`);
+      return pack;
+    }),
+  };
+  if (requireEngine && normalized.engine === null) fail('identities.engine is required');
+  const packIds = new Set<string>();
+  for (const pack of normalized.packs) {
+    const key = `${pack.id}@${pack.version ?? ''}:${pack.sha256 ?? ''}`;
+    if (packIds.has(key)) fail(`identities.packs duplicates ${key}`);
+    packIds.add(key);
+  }
+  if (sortPacks) {
+    normalized.packs.sort((a, b) => `${a.id}@${a.version ?? ''}`.localeCompare(`${b.id}@${b.version ?? ''}`));
+  }
+  return normalized;
+}
+
+export function currentEngineIdentity(): EngineArtifactIdentity {
+  if (cachedEngineIdentity) return structuredClone(cachedEngineIdentity);
+  const excludedRoots = new Set([
+    'archive', 'local-notes', 'media', 'qualification-evidence', 'reference-apps', 'results',
+    'tests', 'tracks', 'transcripts',
+  ]);
+  const exclude = (name: string, entry: Dirent): boolean => {
+    const parts = name.split('/');
+    if (parts.some(part => part.startsWith('.')) || excludedRoots.has(parts[0] ?? '')
+      || parts.includes('node_modules')) return true;
+    if (entry.isDirectory()) return false;
+    if (name === 'dependency-manifest.json') return true;
+    return !(/\.(?:ts|js|json|ya?ml|sh)$/.test(name) || /(?:^|\/)Dockerfile$/.test(name));
+  };
+  const executable = hashDirectory(STACK_BENCH_ROOT, { exclude });
+  cachedEngineIdentity = { id: 'stack-bench', version: null, sha256: executable.sha256, state: null };
+  return structuredClone(cachedEngineIdentity);
+}
+
+export function emptyArtifactIdentities(overrides: UnknownRecord = {}): ArtifactIdentities {
+  return validateArtifactIdentities({ engine: currentEngineIdentity(), packs: [], ...overrides },
+    { requireEngine: true });
+}
+
+export function recipeArtifactIdentities(
+  recipeRelease: unknown,
+  overrides: UnknownRecord = {},
+): ArtifactIdentities {
+  if (!recipeRelease) return emptyArtifactIdentities(overrides);
+  const release = asObject(recipeRelease, 'recipe release must be an object');
+  const components = release.components === undefined
+    ? {} : asObject(release.components, 'recipe release components must be an object');
+  const fixture = components.fixture == null
+    ? null : asObject(components.fixture, 'recipe release fixture must be an object');
+  const packsValue = components.packs ?? [];
+  if (!Array.isArray(packsValue)) fail('recipe release packs must be an array');
+  return emptyArtifactIdentities({
+    recipe: { id: release.id, version: release.version,
+      sha256: release.contentSha256, state: release.state },
+    fixture: fixture ? {
+      id: fixture.id,
+      version: fixture.version,
+      sha256: fixture.sha256 ?? null,
+      state: fixture.state,
+    } : null,
+    packs: packsValue.map((value, index) => {
+      const pack = asObject(value, `recipe release packs[${index}] must be an object`);
+      return { id: pack.id, version: pack.version, sha256: pack.sha256 ?? null, state: pack.state };
+    }),
+    ...overrides,
+  });
+}
diff --git a/tools/stack-bench/src/evidence/artifact-layout.ts b/tools/stack-bench/src/evidence/artifact-layout.ts
new file mode 100644
index 00000000000..f06a26b140e
--- /dev/null
+++ b/tools/stack-bench/src/evidence/artifact-layout.ts
@@ -0,0 +1,12 @@
+export const ARTIFACT_FILE = Object.freeze({
+  run: 'run.json',
+  gradeBundle: 'bundle.json',
+  backendLease: 'backend-lease.json',
+  progressionState: 'progression-state.json',
+  contractLint: 'contract-lint.json',
+  actions: 'actions.json',
+  mutationControl: 'mutation-control.json',
+  recovery: 'recovery.json',
+  process: 'process.json',
+  preflight: 'preflight.json',
+});
diff --git a/tools/stack-bench/src/evidence/artifact-schema.ts b/tools/stack-bench/src/evidence/artifact-schema.ts
new file mode 100644
index 00000000000..2ee3cfd3923
--- /dev/null
+++ b/tools/stack-bench/src/evidence/artifact-schema.ts
@@ -0,0 +1,1030 @@
+import { validateCheckEvidence } from './check-evidence.js';
+import type { CheckEvidence } from './check-evidence.js';
+import { z } from 'zod';
+import { runOutcomeKind } from './outcomes.js';
+import { RUNNER_OBSERVATION_FIELDS } from '../runtime/runner-environment.js';
+import { ARTIFACT_FILE } from './artifact-layout.js';
+import {
+  ARTIFACT_IDENTITY_KEYS as IDENTITY_KEYS,
+  currentEngineIdentity,
+  emptyArtifactIdentities,
+  recipeArtifactIdentities,
+  validateArtifactIdentities,
+} from './artifact-identities.js';
+import type {
+  ArtifactIdentities,
+  ArtifactIdentity,
+  EngineArtifactIdentity,
+} from './artifact-identities.js';
+import { formatZodError } from '../zod-error.js';
+import { REPAIR_EXHAUSTION_REASONS } from '../progression/repair-plan.js';
+
+export {
+  currentEngineIdentity,
+  emptyArtifactIdentities,
+  recipeArtifactIdentities,
+};
+export type {
+  ArtifactIdentities,
+  ArtifactIdentity,
+  EngineArtifactIdentity,
+};
+
+export const ARTIFACT_SCHEMA_VERSION = 2;
+
+export const ARTIFACT_KINDS = Object.freeze([
+  'action_check',
+  'benchmark_run',
+  'backend_lease_evidence',
+  'bug_report_quality',
+  'campaign_admission',
+  'campaign_process',
+  'campaign_plan',
+  'campaign_report',
+  'campaign_state',
+  'contract_lint',
+  'grade',
+  'grade_bundle',
+  'mutation_control',
+  'null_control',
+  'pack_budget_measurement',
+  'performance_run',
+  'preflight',
+  'progression_state',
+  'repair_continuation',
+  'repair_process',
+  'reference_build',
+  'reference_qualification',
+  'recovery',
+  'source_checkpoint',
+] as const);
+
+export type ArtifactKind = typeof ARTIFACT_KINDS[number];
+type UnknownRecord = Record<string, unknown>;
+
+export interface Artifact<TPayload extends object = UnknownRecord> {
+  artifactSchemaVersion: 2;
+  kind: ArtifactKind;
+  id: string;
+  attempt: { id: string; parentId: string | null };
+  timestamps: { startedAt: string; completedAt: string | null };
+  identities: ArtifactIdentities;
+  payload: TPayload;
+}
+
+export interface CreateArtifactInput {
+  kind: unknown;
+  id: string;
+  attempt?: unknown;
+  timestamps?: unknown;
+  identities?: unknown;
+  payload?: unknown;
+}
+
+const KIND_SET = new Set<string>(ARTIFACT_KINDS);
+const SECRET_KEYS = new Set([
+  'apikey', 'authorization', 'credential', 'credentials', 'leasetoken', 'ownershiptoken',
+  'password', 'secret',
+]);
+const BENCHMARK_RUN_PAYLOAD_FIELDS = new Set(['status', 'mode', 'track', 'backend', 'model', 'guidance',
+  'condition', 'stack', 'setup', 'backendLease', 'backendDiagnostics', 'validation', 'levels',
+  'contaminated', 'contamination', 'mutationControl', 'totals', 'outcome', 'selectionRequest',
+  'skills', 'runtime', 'pricing', 'featureCatalog', 'dependencyPolicy', 'progressionOwner', 'progressionStatus',
+  'progressionResume', 'progressionSeed']);
+const PAYLOAD_FIELDS = Object.freeze({
+  action_check: new Set(['backend', 'results', 'missing']),
+  backend_lease_evidence: new Set(['version', 'runId', 'backend', 'track', 'runIndex', 'ownerPid',
+    'createdAt', 'stoppedAt', 'releasedAt', 'state', 'resources', 'ownership']),
+  benchmark_run: BENCHMARK_RUN_PAYLOAD_FIELDS,
+  bug_report_quality: new Set(['bugs', 'vague', 'vaguePct']),
+  campaign_admission: new Set(['schemaVersion', 'campaignId', 'campaignSha256', 'createdAt',
+    'ok', 'runtime', 'agents', 'conditions', 'reports']),
+  campaign_process: new Set(['schemaVersion', 'executionId', 'runIndex', 'exitCode', 'signal', 'timedOut',
+    'streams']),
+  campaign_plan: new Set(['campaignSchemaVersion', 'id', 'version', 'state', 'title', 'source',
+    'contentSha256', 'definition', 'identities', 'bindings', 'stacks', 'agents', 'conditions',
+    'attempts', 'summary', 'featureCatalog', 'dependencyPolicy']),
+  campaign_report: new Set(['reportSchemaVersion', 'campaign', 'scope', 'policy', 'attempts',
+    'conditions', 'summary', 'limitations', 'contentSha256']),
+  campaign_state: new Set(['schemaVersion', 'campaignId', 'campaignSha256', 'status',
+    'createdAt', 'updatedAt', 'maxParallel', 'attempts', 'summary']),
+  contract_lint: new Set(['label', 'url', 'level', 'selectedHooks', 'pass', 'counts', 'results']),
+  grade: new Set(['definitionSchemaVersion', 'recipeRelease', 'label', 'url', 'level', 'runId',
+    'total', 'max', 'features', 'environment', 'inconclusive', 'selection', 'packRuntime']),
+  grade_bundle: new Set(['definitionSchemaVersion', 'recipeRelease', 'calibration', 'label', 'track',
+    'backend', 'url', 'app', 'level', 'suites', 'totals', 'code', 'error', 'outcome', 'provenance',
+    'actions', 'selection', 'packRuntime', 'observation', 'source']),
+  mutation_control: new Set(['durationMs', 'app', 'mutations', 'manifestStatus', 'fixtureSha256',
+    'spec', 'backend', 'track', 'shard', 'ok', 'outcome', 'baseline', 'summary', 'results',
+    'checkpoint']),
+  null_control: new Set(['durationMs', 'runner', 'qualificationScope', 'tracks', 'ok', 'summary', 'criteria']),
+  pack_budget_measurement: new Set(['schemaVersion', 'track', 'level', 'policy', 'evidence',
+    'runner', 'samples', 'recommendations']),
+  performance_run: new Set(['label', 'backend', 'url', 'clients', 'rounds', 'warmupDiscarded',
+    'seededBefore', 'sent', 'delivered', 'lost', 'elapsedMs', 'deliveryLatencyMs', 'server',
+    'cpuSecondsPer1kDelivered']),
+  preflight: new Set(['schemaVersion', 'generatedAt', 'request', 'ok', 'summary', 'checks']),
+  progression_state: new Set(['schemaVersion', 'owner', 'featureCatalog', 'dependencyPolicy',
+    'events', 'resume', 'stateSha256']),
+  repair_continuation: new Set([...BENCHMARK_RUN_PAYLOAD_FIELDS, 'continuation']),
+  repair_process: new Set(['schemaVersion', 'parentRunId', 'level', 'repairsGranted',
+    'exitCode', 'signal', 'timedOut', 'streams']),
+  reference_build: new Set(['isolation', 'image', 'fixtures', 'ok']),
+  reference_qualification: new Set(['fixture', 'fixtureSha256', 'requiredRepetitions', 'isolation',
+    'runner', 'qualificationScope', 'mutationControl', 'runs', 'stable', 'sameImage', 'sameHarness',
+    'harnessSha256', 'qualifiedCheckKeys', 'featureCatalog', 'diagnostic', 'ok']),
+  recovery: new Set(['schemaVersion', 'status', 'runId', 'backend', 'reason', 'cleanup',
+    'resources', 'instructions']),
+  source_checkpoint: new Set(['schemaVersion', 'track', 'backend', 'level', 'source',
+    'repair', 'outcome', 'selectionSha256']),
+});
+const PAYLOAD_SCHEMAS = Object.fromEntries(Object.entries(PAYLOAD_FIELDS).map(([kind, fields]) => [
+  kind,
+  z.strictObject(Object.fromEntries([...fields].map(field => [field, z.unknown().optional()]))),
+])) as unknown as Record<ArtifactKind, z.ZodType<UnknownRecord>>;
+const HASH = /^[a-f0-9]{64}$/;
+const ISO = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/;
+const artifactTimestampSchema = z.string().regex(ISO).refine(value => !Number.isNaN(Date.parse(value)));
+const artifactEnvelopeSchema = z.strictObject({
+  artifactSchemaVersion: z.literal(ARTIFACT_SCHEMA_VERSION),
+  kind: z.enum(ARTIFACT_KINDS),
+  id: z.string().min(1),
+  attempt: z.strictObject({ id: z.string().min(1), parentId: z.string().min(1).nullable() }),
+  timestamps: z.strictObject({
+    startedAt: artifactTimestampSchema,
+    completedAt: artifactTimestampSchema.nullable(),
+  }),
+  identities: z.record(z.string(), z.unknown()),
+  payload: z.record(z.string(), z.unknown()),
+});
+
+const isObject = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const isSafeInteger = (value: unknown): value is number => Number.isSafeInteger(value);
+const isInteger = (value: unknown): value is number => Number.isInteger(value);
+const isFiniteNumber = (value: unknown): value is number =>
+  typeof value === 'number' && Number.isFinite(value);
+const isHash = (value: unknown): value is string => typeof value === 'string' && HASH.test(value);
+function fail(message: string): never {
+  throw new Error(`invalid artifact: ${message}`);
+}
+
+function asObject(value: unknown, message: string): UnknownRecord {
+  if (!isObject(value)) fail(message);
+  return value;
+}
+
+function validateRunOutcome(value: unknown, at: string): void {
+  const outcome = asObject(value, `${at} must be an object`);
+  try { runOutcomeKind(outcome.kind); }
+  catch { fail(`${at}.kind is invalid`); }
+}
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+function normalizeKind(kind: unknown): ArtifactKind {
+  if (typeof kind !== 'string' || !KIND_SET.has(kind)) {
+    fail(`unknown kind ${JSON.stringify(kind)}`);
+  }
+  return kind as ArtifactKind;
+}
+
+function timestamp(value: unknown, at: string): string {
+  if (typeof value !== 'string' || !ISO.test(value) || Number.isNaN(Date.parse(value))) {
+    fail(`${at} must be an ISO-8601 UTC timestamp`);
+  }
+  return value;
+}
+
+function validatePayload(kind: ArtifactKind, input: unknown): UnknownRecord {
+  const parsed = PAYLOAD_SCHEMAS[kind].safeParse(input);
+  if (!parsed.success) {
+    fail(formatZodError(parsed.error, `${kind} payload`));
+  }
+  const payload = parsed.data;
+  const arrayWhenPresent = (field: string): unknown[] | undefined => {
+    const value = payload[field];
+    if (value !== undefined && !Array.isArray(value)) {
+      fail(`${kind} payload.${field} must be an array when present`);
+    }
+    return value;
+  };
+  const objectWhenPresent = (field: string): UnknownRecord | undefined => {
+    const value = payload[field];
+    if (value !== undefined && !isObject(value)) {
+      fail(`${kind} payload.${field} must be an object when present`);
+    }
+    return value;
+  };
+  const runnerWhenPresent = () => {
+    const runner = objectWhenPresent('runner');
+    if (runner === undefined) return;
+    const allowed = new Set(['schemaVersion', 'mode', 'platform', 'architecture', 'hostname',
+      'containersRunning',
+      ...RUNNER_OBSERVATION_FIELDS]);
+    for (const key of Object.keys(runner)) {
+      if (!allowed.has(key)) fail(`${kind} payload.runner.${key} is unknown`);
+    }
+    if (runner.schemaVersion !== 1) fail(`${kind} payload.runner.schemaVersion must be 1`);
+    if (!['appliance', 'local-controller'].includes(String(runner.mode))) {
+      fail(`${kind} payload.runner.mode is invalid`);
+    }
+    for (const field of ['platform', 'architecture']) {
+      if (typeof runner[field] !== 'string' || !runner[field]) {
+        fail(`${kind} payload.runner.${field} must be a non-empty string`);
+      }
+    }
+    const observedFields = RUNNER_OBSERVATION_FIELDS.filter(field => runner[field] !== undefined);
+    if (runner.mode === 'appliance' && observedFields.length > 0) {
+      for (const field of ['dockerEngineVersion', 'dockerOs', 'dockerArchitecture', 'kernelVersion']) {
+        if (typeof runner[field] !== 'string' || !runner[field]) {
+          fail(`${kind} payload.runner.${field} must be a non-empty string for an appliance runner`);
+        }
+      }
+      for (const field of ['cpuCount', 'memoryBytes']) {
+        if (!isSafeInteger(runner[field]) || runner[field] < 1) {
+          fail(`${kind} payload.runner.${field} must be a positive integer for an appliance runner`);
+        }
+      }
+    } else if (runner.mode !== 'appliance') {
+      for (const field of RUNNER_OBSERVATION_FIELDS) {
+        if (runner[field] !== undefined) {
+          fail(`${kind} payload.runner.${field} is only valid for an appliance runner`);
+        }
+      }
+    }
+  };
+  if (['benchmark_run', 'repair_continuation'].includes(kind)) {
+    for (const [index, levelValue] of (arrayWhenPresent('levels') ?? []).entries()) {
+      const level = asObject(levelValue, `${kind} payload.levels[${index}] must be an object`);
+      if (level.outcome !== undefined) {
+        validateRunOutcome(level.outcome, `${kind} payload.levels[${index}].outcome`);
+      }
+    }
+    if (payload.outcome !== undefined) validateRunOutcome(payload.outcome, `${kind} payload.outcome`);
+  }
+  if (['benchmark_run', 'repair_continuation'].includes(kind)
+    && payload.progressionStatus !== undefined) {
+    const progressionStatus = objectWhenPresent('progressionStatus');
+    if (progressionStatus === undefined || !isObject(payload.featureCatalog)
+      || !isObject(payload.dependencyPolicy)) {
+      fail(`${kind} payload.progressionStatus requires featureCatalog and dependencyPolicy`);
+    }
+    const fields = new Set(['stateArtifact', 'phase', 'level', 'attempts', 'score']);
+    for (const key of Object.keys(progressionStatus)) {
+      if (!fields.has(key)) fail(`${kind} payload.progressionStatus.${key} is unknown`);
+    }
+    if (progressionStatus.stateArtifact !== ARTIFACT_FILE.progressionState) {
+      fail(`${kind} payload.progressionStatus.stateArtifact is invalid`);
+    }
+    if (!['active', 'terminal'].includes(String(progressionStatus.phase))) {
+      fail(`${kind} payload.progressionStatus.phase is invalid`);
+    }
+    const numericFields = [['level', 1], ['attempts', 0]] as const;
+    for (const [field, minimum] of numericFields) {
+      if (!isSafeInteger(progressionStatus[field]) || progressionStatus[field] < minimum) {
+        fail(`${kind} payload.progressionStatus.${field} is invalid`);
+      }
+    }
+    if (!isObject(progressionStatus.score)) {
+      fail(`${kind} payload.progressionStatus.score must be an object`);
+    }
+  }
+  if (kind === 'benchmark_run' && payload.progressionResume !== undefined) {
+    const progressionResume = asObject(payload.progressionResume,
+      'benchmark_run payload.progressionResume must be an object');
+    const fields = new Set(['priorRunId', 'priorRunSha256', 'stateSha256',
+      'action', 'inheritedLevels', 'priorTotals']);
+    for (const key of Object.keys(progressionResume)) {
+      if (!fields.has(key)) fail(`benchmark_run payload.progressionResume.${key} is unknown`);
+    }
+    if (typeof progressionResume.priorRunId !== 'string' || !progressionResume.priorRunId) {
+      fail('benchmark_run payload.progressionResume.priorRunId is invalid');
+    }
+    for (const field of ['priorRunSha256', 'stateSha256']) {
+      if (!isHash(progressionResume[field])) {
+        fail(`benchmark_run payload.progressionResume.${field} is invalid`);
+      }
+    }
+    const action = progressionResume.action;
+    if (!isObject(action) || !['build', 'repair', 'terminal'].includes(String(action.type))
+      || (action.type !== 'terminal' && (!isSafeInteger(action.level) || action.level < 1))) {
+      fail('benchmark_run payload.progressionResume.action is invalid');
+    }
+    if (!Array.isArray(progressionResume.inheritedLevels)
+      || progressionResume.inheritedLevels.some(level => !isSafeInteger(level) || level < 1)) {
+      fail('benchmark_run payload.progressionResume.inheritedLevels is invalid');
+    }
+    if (progressionResume.priorTotals !== null && !isObject(progressionResume.priorTotals)) {
+      fail('benchmark_run payload.progressionResume.priorTotals is invalid');
+    }
+  }
+  if (kind === 'benchmark_run' && payload.progressionSeed !== undefined) {
+    const seed = asObject(payload.progressionSeed,
+      'benchmark_run payload.progressionSeed must be an object');
+    const fields = new Set(['fromDepth', 'sourceSha256', 'sourceFiles', 'parent',
+      'validatedDepths']);
+    for (const key of Object.keys(seed)) {
+      if (!fields.has(key)) fail(`benchmark_run payload.progressionSeed.${key} is unknown`);
+    }
+    if (!isSafeInteger(seed.fromDepth) || seed.fromDepth < 1
+      || !isHash(seed.sourceSha256)
+      || !isSafeInteger(seed.sourceFiles) || seed.sourceFiles < 0) {
+      fail('benchmark_run payload.progressionSeed source is invalid');
+    }
+    const parent = asObject(seed.parent,
+      'benchmark_run payload.progressionSeed.parent must be an object');
+    const parentFields = new Set(['campaignId', 'campaignSha256', 'attemptId', 'executionId',
+      'runId', 'runSha256']);
+    for (const key of Object.keys(parent)) {
+      if (!parentFields.has(key)) fail(`benchmark_run payload.progressionSeed.parent.${key} is unknown`);
+    }
+    for (const field of ['campaignId', 'attemptId', 'executionId', 'runId']) {
+      if (typeof parent[field] !== 'string' || !parent[field]) {
+        fail(`benchmark_run payload.progressionSeed.parent.${field} is invalid`);
+      }
+    }
+    for (const field of ['campaignSha256', 'runSha256']) {
+      if (!isHash(parent[field])) {
+        fail(`benchmark_run payload.progressionSeed.parent.${field} is invalid`);
+      }
+    }
+    const validatedDepths = seed.validatedDepths;
+    const fromDepth = seed.fromDepth;
+    if (!Array.isArray(validatedDepths)
+      || validatedDepths.some(depth => !isSafeInteger(depth) || depth < 1)
+      || validatedDepths.some((depth, index) => index > 0
+        && validatedDepths[index - 1] >= depth)
+      || validatedDepths.some(depth => typeof fromDepth !== 'number' || depth > fromDepth)) {
+      fail('benchmark_run payload.progressionSeed.validatedDepths is invalid');
+    }
+  }
+  if (kind === 'progression_state') {
+    if (payload.schemaVersion !== 4) fail('progression_state payload.schemaVersion must be 4');
+    objectWhenPresent('owner');
+    objectWhenPresent('featureCatalog');
+    objectWhenPresent('dependencyPolicy');
+    arrayWhenPresent('events');
+    if (!isHash(payload.stateSha256)) {
+      fail('progression_state payload.stateSha256 is invalid');
+    }
+    if (payload.resume !== undefined) {
+      const resume = asObject(payload.resume, 'progression_state payload.resume must be an object');
+      const resumeFields = new Set(['actionSha256', 'source']);
+      for (const key of Object.keys(resume)) {
+        if (!resumeFields.has(key)) fail(`progression_state payload.resume.${key} is unknown`);
+      }
+      if (!isHash(resume.actionSha256)) {
+        fail('progression_state payload.resume.actionSha256 is invalid');
+      }
+      const source = asObject(resume.source, 'progression_state payload.resume.source must be an object');
+      const sourceFields = new Set(['directory', 'sha256', 'files']);
+      for (const key of Object.keys(source)) {
+        if (!sourceFields.has(key)) fail(`progression_state payload.resume.source.${key} is unknown`);
+      }
+      if (typeof source.directory !== 'string' || !source.directory) {
+        fail('progression_state payload.resume.source.directory is invalid');
+      }
+      if (!isHash(source.sha256)) {
+        fail('progression_state payload.resume.source.sha256 is invalid');
+      }
+      if (!isSafeInteger(source.files) || source.files < 0) {
+        fail('progression_state payload.resume.source.files is invalid');
+      }
+    }
+  }
+  if (kind === 'repair_continuation') {
+    const continuation = objectWhenPresent('continuation');
+    if (continuation === undefined) fail('repair_continuation payload.continuation is required');
+    const fields = new Set(['schemaVersion', 'rootRunId', 'parentRunId', 'level', 'grantIndex',
+      'repairsGranted', 'cumulativeRepairsBefore', 'cumulativeRepairsAfter', 'parentCheckpointSha256',
+      'baseline', 'resumeSetup', 'downstreamLevelsToRerun', 'cumulativeCostBeforeUsd',
+      'cumulativeCostAfterUsd', 'cumulativeDurationBeforeSec', 'cumulativeDurationAfterSec']);
+    for (const key of Object.keys(continuation)) {
+      if (!fields.has(key)) fail(`repair_continuation payload.continuation.${key} is unknown`);
+    }
+    if (continuation.schemaVersion !== 2) {
+      fail('repair_continuation payload.continuation.schemaVersion must be 2');
+    }
+    for (const field of ['rootRunId', 'parentRunId']) {
+      if (typeof continuation[field] !== 'string' || !continuation[field]) {
+        fail(`repair_continuation payload.continuation.${field} is required`);
+      }
+    }
+    for (const field of ['level', 'grantIndex', 'repairsGranted', 'cumulativeRepairsBefore',
+      'cumulativeRepairsAfter']) {
+      if (!isSafeInteger(continuation[field]) || continuation[field] < 0) {
+        fail(`repair_continuation payload.continuation.${field} must be a non-negative integer`);
+      }
+    }
+    const level = continuation.level;
+    const grantIndex = continuation.grantIndex;
+    const repairsGranted = continuation.repairsGranted;
+    const cumulativeRepairsBefore = continuation.cumulativeRepairsBefore;
+    const cumulativeRepairsAfter = continuation.cumulativeRepairsAfter;
+    if (!isSafeInteger(level) || !isSafeInteger(grantIndex) || !isSafeInteger(repairsGranted)
+      || !isSafeInteger(cumulativeRepairsBefore) || !isSafeInteger(cumulativeRepairsAfter)) {
+      fail('repair_continuation payload.continuation repair accounting is invalid');
+    }
+    if (level < 1 || grantIndex < 1 || repairsGranted < 1
+      || cumulativeRepairsAfter < cumulativeRepairsBefore
+      || cumulativeRepairsAfter > cumulativeRepairsBefore + repairsGranted) {
+      fail('repair_continuation payload.continuation repair accounting is invalid');
+    }
+    if (!isHash(continuation.parentCheckpointSha256)) {
+      fail('repair_continuation payload.continuation.parentCheckpointSha256 is invalid');
+    }
+    const cumulativeFields = [['cumulativeCostBeforeUsd', 'cumulativeCostAfterUsd'],
+      ['cumulativeDurationBeforeSec', 'cumulativeDurationAfterSec']] as const;
+    for (const [before, after] of cumulativeFields) {
+      const beforeValue = continuation[before];
+      const afterValue = continuation[after];
+      if (!isFiniteNumber(beforeValue) || beforeValue < 0
+        || !isFiniteNumber(afterValue) || afterValue < beforeValue) {
+        fail(`repair_continuation payload.continuation.${after} is invalid`);
+      }
+    }
+    const downstreamLevels = continuation.downstreamLevelsToRerun;
+    if (!Array.isArray(downstreamLevels)
+      || downstreamLevels.some(item => !isSafeInteger(item) || item <= level)
+      || new Set(downstreamLevels).size !== downstreamLevels.length) {
+      fail('repair_continuation payload.continuation.downstreamLevelsToRerun is invalid');
+    }
+    if (continuation.baseline !== null) {
+      const baseline = asObject(continuation.baseline,
+        'repair_continuation payload.continuation.baseline must be an object or null');
+      const baselineFields = new Set(['score', 'max', 'selectionSha256', 'sourceSha256',
+        'outcome', 'reproduced', 'mismatches']);
+      for (const key of Object.keys(baseline)) {
+        if (!baselineFields.has(key)) fail(`repair_continuation payload.continuation.baseline.${key} is unknown`);
+      }
+      const scoreValid = baseline.score === null && baseline.max === null
+        || isSafeInteger(baseline.score) && isSafeInteger(baseline.max)
+          && baseline.max >= 1 && baseline.score >= 0 && baseline.score <= baseline.max;
+      const sourceValid = baseline.sourceSha256 === null
+        || isHash(baseline.sourceSha256);
+      if (!scoreValid
+        || (baseline.selectionSha256 !== null && !isHash(baseline.selectionSha256))
+        || !sourceValid || !isObject(baseline.outcome) || typeof baseline.reproduced !== 'boolean'
+        || !Array.isArray(baseline.mismatches)
+        || baseline.mismatches.some(item => typeof item !== 'string' || !item)
+        || (baseline.reproduced && (baseline.sourceSha256 === null || baseline.score === null))) {
+        fail('repair_continuation payload.continuation.baseline is invalid');
+      }
+      validateRunOutcome(baseline.outcome,
+        'repair_continuation payload.continuation.baseline.outcome');
+    }
+    if (continuation.resumeSetup !== null) {
+      const setup = asObject(continuation.resumeSetup,
+        'repair_continuation payload.continuation.resumeSetup must be an object or null');
+      const setupFields = new Set(['sessionId', 'costUsd', 'durationMs', 'sourceVerified']);
+      for (const key of Object.keys(setup)) {
+        if (!setupFields.has(key)) fail(`repair_continuation payload.continuation.resumeSetup.${key} is unknown`);
+      }
+      if (setup.sessionId !== null && (typeof setup.sessionId !== 'string' || !setup.sessionId)) {
+        fail('repair_continuation payload.continuation.resumeSetup.sessionId is invalid');
+      }
+      if (!isFiniteNumber(setup.costUsd) || setup.costUsd < 0
+        || !isFiniteNumber(setup.durationMs) || setup.durationMs < 0
+        || typeof setup.sourceVerified !== 'boolean') {
+        fail('repair_continuation payload.continuation.resumeSetup is invalid');
+      }
+    }
+  }
+  if (kind === 'campaign_process') {
+    if (payload.schemaVersion !== 1) fail('campaign_process payload.schemaVersion must be 1');
+    if (typeof payload.executionId !== 'string' || !payload.executionId) {
+      fail('campaign_process payload.executionId is required');
+    }
+    if (payload.runIndex !== undefined
+      && (!isInteger(payload.runIndex) || payload.runIndex < 0)) {
+      fail('campaign_process payload.runIndex must be a non-negative integer');
+    }
+    if (payload.exitCode !== null && !isInteger(payload.exitCode)) {
+      fail('campaign_process payload.exitCode must be an integer or null');
+    }
+    if (payload.signal !== null && typeof payload.signal !== 'string') {
+      fail('campaign_process payload.signal must be a string or null');
+    }
+    if (typeof payload.timedOut !== 'boolean') fail('campaign_process payload.timedOut must be boolean');
+    if (payload.streams !== null) {
+      const streams = objectWhenPresent('streams');
+      if (streams === undefined) fail('campaign_process payload.streams must be an object or null');
+      for (const [name, stream] of Object.entries(streams)) {
+        if (!['stdout', 'stderr'].includes(name) || !isObject(stream)) {
+          fail(`campaign_process payload.streams.${name} is invalid`);
+        }
+        const allowed = new Set(['path', 'sha256', 'bytes', 'retainedBytes', 'truncated']);
+        for (const key of Object.keys(stream)) {
+          if (!allowed.has(key)) fail(`campaign_process payload.streams.${name}.${key} is unknown`);
+        }
+        if (stream.path !== `process.${name}.log`) fail(`campaign_process payload.streams.${name}.path is invalid`);
+        if (!isHash(stream.sha256)) fail(`campaign_process payload.streams.${name}.sha256 is invalid`);
+        const bytes = stream.bytes;
+        const retainedBytes = stream.retainedBytes;
+        if (!isSafeInteger(bytes) || bytes < 0 || !isSafeInteger(retainedBytes)
+          || retainedBytes < 0 || retainedBytes > bytes) {
+          fail(`campaign_process payload.streams.${name} byte counts are invalid`);
+        }
+        if (stream.truncated !== (bytes > retainedBytes)) {
+          fail(`campaign_process payload.streams.${name}.truncated is inconsistent`);
+        }
+      }
+    }
+  }
+  if (kind === 'repair_process') {
+    if (payload.schemaVersion !== 2) fail('repair_process payload.schemaVersion must be 2');
+    if (typeof payload.parentRunId !== 'string' || !payload.parentRunId) {
+      fail('repair_process payload.parentRunId is required');
+    }
+    for (const field of ['level', 'repairsGranted']) {
+      if (!isSafeInteger(payload[field]) || payload[field] < 1) {
+        fail(`repair_process payload.${field} must be a positive integer`);
+      }
+    }
+    if (payload.exitCode !== null && !isInteger(payload.exitCode)) {
+      fail('repair_process payload.exitCode must be an integer or null');
+    }
+    if (payload.signal !== null && typeof payload.signal !== 'string') {
+      fail('repair_process payload.signal must be a string or null');
+    }
+    if (typeof payload.timedOut !== 'boolean') fail('repair_process payload.timedOut must be boolean');
+    if (payload.streams !== null && !isObject(payload.streams)) {
+      fail('repair_process payload.streams must be an object or null');
+    }
+    const repairStreams = payload.streams === null ? {} : payload.streams;
+    if (!isObject(repairStreams)) fail('repair_process payload.streams must be an object or null');
+    for (const [name, stream] of Object.entries(repairStreams)) {
+      if (!['stdout', 'stderr'].includes(name) || !isObject(stream)) {
+        fail(`repair_process payload.streams.${name} is invalid`);
+      }
+      const allowed = new Set(['path', 'sha256', 'bytes', 'retainedBytes', 'truncated']);
+      for (const key of Object.keys(stream)) {
+        if (!allowed.has(key)) fail(`repair_process payload.streams.${name}.${key} is unknown`);
+      }
+      const bytes = stream.bytes;
+      const retainedBytes = stream.retainedBytes;
+      if (stream.path !== `process.${name}.log` || !isHash(stream.sha256)
+        || !isSafeInteger(bytes) || bytes < 0
+        || !isSafeInteger(retainedBytes) || retainedBytes < 0
+        || retainedBytes > bytes || stream.truncated !== (bytes > retainedBytes)) {
+        fail(`repair_process payload.streams.${name} is inconsistent`);
+      }
+    }
+  }
+  const validateGradeFeatures = (features: unknown, at: string): void => {
+    if (!Array.isArray(features)) return;
+    features.forEach((feature, featureIndex) => {
+      if (!isObject(feature)) fail(`${at}[${featureIndex}] must be an object`);
+      if (feature.setupEvidence === undefined) fail(`${at}[${featureIndex}].setupEvidence is required`);
+      try { validateCheckEvidence(feature.setupEvidence,
+        { at: `${at}[${featureIndex}].setupEvidence` }); }
+      catch (error) { fail(errorMessage(error)); }
+      const setupEvidence = asObject(feature.setupEvidence, `${at}[${featureIndex}].setupEvidence must be an object`);
+      if (setupEvidence.phase !== 'setup') {
+        fail(`${at}[${featureIndex}].setupEvidence must use setup phase`);
+      }
+      if (feature.criteria !== undefined && !Array.isArray(feature.criteria)) {
+        fail(`${at}[${featureIndex}].criteria must be an array when present`);
+      }
+      const criteria = feature.criteria ?? [];
+      if (!Array.isArray(criteria)) fail(`${at}[${featureIndex}].criteria must be an array when present`);
+      criteria.forEach((criterion, criterionIndex) => {
+        const criterionAt = `${at}[${featureIndex}].criteria[${criterionIndex}]`;
+        if (!isObject(criterion)) fail(`${criterionAt} must be an object`);
+        for (const obsolete of ['passed', 'inconclusive', 'detail']) {
+          if (Object.hasOwn(criterion, obsolete)) fail(`${criterionAt}.${obsolete} is obsolete; use evidence`);
+        }
+        if (criterion.evidence === undefined) fail(`${criterionAt}.evidence is required`);
+        try { validateCheckEvidence(criterion.evidence, { at: `${criterionAt}.evidence` }); }
+        catch (error) { fail(errorMessage(error)); }
+        if (criterion.statedBy !== undefined
+          && (typeof criterion.statedBy !== 'string' || !criterion.statedBy.trim())) {
+          fail(`${criterionAt}.statedBy must be a non-empty string when present`);
+        }
+      });
+    });
+  };
+  if (kind === 'grade') {
+    return validateGradePayload(payload);
+  }
+  if (kind === 'grade_bundle') {
+    objectWhenPresent('suites'); objectWhenPresent('totals');
+    if (payload.outcome !== undefined) validateRunOutcome(payload.outcome,
+      'grade_bundle payload.outcome');
+    const observation = payload.observation ?? 'scored';
+    if (!['scored', 'observed'].includes(String(observation))) {
+      fail('grade_bundle payload.observation must be scored or observed');
+    }
+    if (payload.source !== undefined
+      && (!isObject(payload.source) || Object.keys(payload.source).length !== 1
+        || !isHash(payload.source.sha256))) {
+      fail('grade_bundle payload.source must contain its application SHA-256');
+    }
+    if (observation === 'observed') {
+      if (payload.source === undefined) {
+        fail('grade_bundle observed payload.source must contain its first-build SHA-256');
+      }
+      const selection = asObject(payload.selection,
+        'grade_bundle observed selection must be diagnostic and contribute zero score');
+      if (selection.observation !== 'observed' || selection.scoredPoints !== 0
+        || !isSafeInteger(selection.observedPoints) || selection.observedPoints < 0) {
+        fail('grade_bundle observed selection must be diagnostic and contribute zero score');
+      }
+    }
+    const suites = payload.suites ?? {};
+    if (!isObject(suites)) fail('grade_bundle payload.suites must be an object when present');
+    for (const [suiteId, suite] of Object.entries(suites)) {
+      if (isObject(suite)) validateGradeFeatures(suite.features, `grade_bundle payload.suites.${suiteId}.features`);
+    }
+  }
+  if (kind === 'mutation_control') {
+    arrayWhenPresent('results');
+    if (payload.outcome !== undefined) validateRunOutcome(payload.outcome,
+      'mutation_control payload.outcome');
+    if (payload.shard !== undefined) {
+      if (!isObject(payload.shard)) fail('mutation_control payload.shard must be an object');
+      const allowed = new Set(['index', 'count', 'mutationIds']);
+      for (const key of Object.keys(payload.shard)) {
+        if (!allowed.has(key)) fail(`mutation_control payload.shard.${key} is unknown`);
+      }
+      const { index, count, mutationIds } = payload.shard;
+      if (!isSafeInteger(count) || count < 1
+        || !isSafeInteger(index) || index < 0 || index >= count) {
+        fail('mutation_control payload.shard coordinates are invalid');
+      }
+      if (!Array.isArray(mutationIds) || mutationIds.length === 0
+        || mutationIds.some(id => typeof id !== 'string' || !id)
+        || new Set(mutationIds).size !== mutationIds.length) {
+        fail('mutation_control payload.shard.mutationIds must contain unique non-empty strings');
+      }
+      const results = payload.results ?? [];
+      if (!Array.isArray(results)) fail('mutation_control payload.results must be an array when present');
+      const resultIds = results.map(result => isObject(result) ? result.id : undefined);
+      if (resultIds.some(id => typeof id !== 'string' || !id)
+        || new Set(resultIds).size !== resultIds.length
+        || resultIds.some(id => !mutationIds.includes(id))) {
+        fail('mutation_control payload.results must be a unique subset of the assigned mutation IDs');
+      }
+      const checkpoint = payload.checkpoint;
+      const checkpointStatus = isObject(checkpoint) ? checkpoint.status : undefined;
+      const partial = checkpointStatus === 'running' || checkpointStatus === 'incomplete';
+      if (!partial && resultIds.length !== mutationIds.length) {
+        fail('complete mutation_control payload.shard.mutationIds must match the exact result set');
+      }
+    }
+  }
+  if (kind === 'null_control') {
+    arrayWhenPresent('criteria'); objectWhenPresent('qualificationScope'); runnerWhenPresent();
+  }
+  if (kind === 'pack_budget_measurement') {
+    objectWhenPresent('policy'); arrayWhenPresent('evidence'); arrayWhenPresent('samples');
+    arrayWhenPresent('recommendations'); runnerWhenPresent();
+  }
+  if (kind === 'performance_run') { objectWhenPresent('deliveryLatencyMs'); objectWhenPresent('server'); }
+  if (kind === 'reference_build') arrayWhenPresent('fixtures');
+  if (kind === 'reference_qualification') {
+    for (const field of ['fixture', 'requiredRepetitions', 'runs']) {
+      if (!Object.hasOwn(payload, field)) fail(`reference_qualification payload.${field} is required`);
+    }
+    if (typeof payload.fixture !== 'string' || !payload.fixture) {
+      fail('reference_qualification payload.fixture must be a non-empty string');
+    }
+    if (!isSafeInteger(payload.requiredRepetitions) || payload.requiredRepetitions < 1) {
+      fail('reference_qualification payload.requiredRepetitions must be a positive integer');
+    }
+    arrayWhenPresent('runs'); objectWhenPresent('qualificationScope'); runnerWhenPresent();
+  }
+  if (kind === 'recovery') {
+    if (payload.schemaVersion !== 1) fail('recovery payload.schemaVersion must be 1');
+    if (!['clean', 'retained', 'quarantined'].includes(String(payload.status))) {
+      fail('recovery payload.status is invalid');
+    }
+    for (const field of ['runId', 'backend']) {
+      if (typeof payload[field] !== 'string' || !payload[field]) {
+        fail(`recovery payload.${field} must be a non-empty string`);
+      }
+    }
+    if (payload.reason !== null && typeof payload.reason !== 'string') {
+      fail('recovery payload.reason must be a string or null');
+    }
+    const cleanup = objectWhenPresent('cleanup');
+    if (!cleanup || typeof cleanup.succeeded !== 'boolean' || typeof cleanup.retained !== 'boolean') {
+      fail('recovery payload.cleanup is invalid');
+    }
+    const resources = objectWhenPresent('resources');
+    if (!resources || typeof resources.backendState !== 'string'
+      || !Array.isArray(resources.listenerProcesses) || !Array.isArray(resources.locks)) {
+      fail('recovery payload.resources is invalid');
+    }
+    for (const process of resources.listenerProcesses) {
+      if (!isObject(process) || !isSafeInteger(process.pid) || process.pid <= 0
+        || typeof process.startMarker !== 'string' || !/^\d+$/.test(process.startMarker)) {
+        fail('recovery payload.resources.listenerProcesses is invalid');
+      }
+    }
+    const instructions = arrayWhenPresent('instructions');
+    if (!instructions || instructions.some(item => typeof item !== 'string')) {
+      fail('recovery payload.instructions is invalid');
+    }
+    if (payload.status === 'clean' && (!cleanup.succeeded || cleanup.retained)) {
+      fail('recovery clean status conflicts with cleanup');
+    }
+  }
+  if (kind === 'source_checkpoint') {
+    if (payload.schemaVersion !== 3) fail('source_checkpoint payload.schemaVersion must be 3');
+    for (const field of ['track', 'backend']) {
+      if (typeof payload[field] !== 'string' || !payload[field]) {
+        fail(`source_checkpoint payload.${field} must be a non-empty string`);
+      }
+    }
+    if (!isSafeInteger(payload.level) || payload.level < 1) {
+      fail('source_checkpoint payload.level must be a positive integer');
+    }
+    const source = objectWhenPresent('source');
+    if (source === undefined) fail('source_checkpoint payload.source is required');
+    const sourceFields = new Set(['directory', 'sha256', 'files']);
+    for (const key of Object.keys(source)) {
+      if (!sourceFields.has(key)) fail(`source_checkpoint payload.source.${key} is unknown`);
+    }
+    if (source.directory !== `level-l${payload.level}-source`) {
+      fail('source_checkpoint payload.source.directory does not match its level');
+    }
+    if (!isHash(source.sha256)) {
+      fail('source_checkpoint payload.source.sha256 is invalid');
+    }
+    if (!isSafeInteger(source.files) || source.files < 0) {
+      fail('source_checkpoint payload.source.files must be a non-negative integer');
+    }
+    const repair = objectWhenPresent('repair');
+    if (repair === undefined) fail('source_checkpoint payload.repair is required');
+    const repairFields = new Set(['status', 'limit', 'used', 'stallLimitRounds',
+      'stopReason', 'nodeRepairs']);
+    for (const key of Object.keys(repair)) {
+      if (!repairFields.has(key)) fail(`source_checkpoint payload.repair.${key} is unknown`);
+    }
+    if (!['ungraded', 'not-needed', 'corrected', 'budget-exhausted', 'incomplete']
+      .includes(String(repair.status))) fail('source_checkpoint payload.repair.status is invalid');
+    for (const field of ['limit', 'used']) {
+      if (!isSafeInteger(repair[field]) || repair[field] < 0) {
+        fail(`source_checkpoint payload.repair.${field} must be a non-negative integer`);
+      }
+    }
+    if (repair.stallLimitRounds !== undefined
+      && (!isSafeInteger(repair.stallLimitRounds) || repair.stallLimitRounds < 0)) {
+      fail('source_checkpoint payload.repair.stallLimitRounds must be a non-negative integer');
+    }
+    if (!isSafeInteger(repair.used) || !isSafeInteger(repair.limit)) {
+      fail('source_checkpoint payload.repair counts must be non-negative integers');
+    }
+    if (repair.used > repair.limit) {
+      fail('source_checkpoint payload.repair.used exceeds its budget');
+    }
+    if (repair.nodeRepairs !== undefined) {
+      if (!Array.isArray(repair.nodeRepairs)) {
+        fail('source_checkpoint payload.repair node repairs are invalid');
+      }
+      const ids = new Set<string>();
+      let prior: string | null = null;
+      for (const [index, counter] of repair.nodeRepairs.entries()) {
+        if (!isObject(counter)) fail(`source_checkpoint payload.repair.nodeRepairs[${index}] is invalid`);
+        const fields = new Set(['nodeId', 'used', 'exhaustionReason']);
+        for (const key of Object.keys(counter)) {
+          if (!fields.has(key)) fail(`source_checkpoint payload.repair.nodeRepairs[${index}].${key} is unknown`);
+        }
+        if (typeof counter.nodeId !== 'string' || !counter.nodeId || ids.has(counter.nodeId)
+          || (prior !== null && prior.localeCompare(counter.nodeId) >= 0)
+          || !isSafeInteger(counter.used) || counter.used < 0
+          || (counter.exhaustionReason !== null
+            && (typeof counter.exhaustionReason !== 'string'
+              || !(REPAIR_EXHAUSTION_REASONS as readonly string[]).includes(counter.exhaustionReason)))) {
+          fail(`source_checkpoint payload.repair.nodeRepairs[${index}] is invalid`);
+        }
+        ids.add(counter.nodeId);
+        prior = counter.nodeId;
+      }
+    }
+    if (repair.stopReason !== null && typeof repair.stopReason !== 'string') {
+      fail('source_checkpoint payload.repair.stopReason must be a string or null');
+    }
+    validateRunOutcome(payload.outcome, 'source_checkpoint payload.outcome');
+    if (payload.selectionSha256 !== null && !isHash(payload.selectionSha256)) {
+      fail('source_checkpoint payload.selectionSha256 is invalid');
+    }
+  }
+  if (kind === 'contract_lint') { arrayWhenPresent('results'); objectWhenPresent('counts'); }
+  if (kind === 'action_check') { arrayWhenPresent('results'); arrayWhenPresent('missing'); }
+  return payload;
+}
+
+function rejectSecrets(value: unknown, at: string = '$', seen: Set<object> = new Set()): void {
+  if (value === null || typeof value !== 'object') return;
+  if (seen.has(value)) fail(`${at} contains a cycle`);
+  seen.add(value);
+  if (Array.isArray(value)) value.forEach((item, index) => rejectSecrets(item, `${at}[${index}]`, seen));
+  else {
+    for (const [key, item] of Object.entries(value)) {
+      const normalizedKey = key.toLowerCase().replaceAll(/[^a-z0-9]/g, '');
+      if (SECRET_KEYS.has(normalizedKey)) fail(`${at}.${key} is secret-bearing and cannot be public`);
+      rejectSecrets(item, `${at}.${key}`, seen);
+    }
+  }
+  seen.delete(value);
+}
+
+export function createArtifact<TPayload extends object>(
+  input: CreateArtifactInput & { payload: TPayload },
+): Artifact<TPayload>;
+export function createArtifact(input: CreateArtifactInput): Artifact;
+export function createArtifact(input: CreateArtifactInput): Artifact {
+  const { kind, id, attempt = null, timestamps = null, identities = null, payload = {} } = input;
+  const normalizedKind = normalizeKind(kind);
+  if (typeof id !== 'string' || !id) fail('id must be a non-empty string');
+  const now = new Date().toISOString();
+  const normalizedTimestamps = timestamps === null
+    ? {} : asObject(timestamps, 'timestamps must be an object or null');
+  const startedAt = timestamp(normalizedTimestamps.startedAt ?? now, 'timestamps.startedAt');
+  const completedAt = normalizedTimestamps.completedAt == null
+    ? null : timestamp(normalizedTimestamps.completedAt, 'timestamps.completedAt');
+  if (completedAt && Date.parse(completedAt) < Date.parse(startedAt)) {
+    fail('timestamps.completedAt precedes timestamps.startedAt');
+  }
+  const normalizedAttempt = attempt === null
+    ? { id, parentId: null } : asObject(attempt, 'attempt must be an object or null');
+  if (typeof normalizedAttempt.id !== 'string' || !normalizedAttempt.id) {
+    fail('attempt.id must be a non-empty string');
+  }
+  if (normalizedAttempt.parentId !== null && normalizedAttempt.parentId !== undefined
+    && (typeof normalizedAttempt.parentId !== 'string' || !normalizedAttempt.parentId)) {
+    fail('attempt.parentId must be a non-empty string or null');
+  }
+  const identityInput = identities === null
+    ? {} : asObject(identities, 'identities must be an object or null');
+  const identityDefaults: UnknownRecord = { packs: [], ...identityInput };
+  if (!Object.hasOwn(identityInput, 'engine')) identityDefaults.engine = currentEngineIdentity();
+  const artifact: Artifact = {
+    artifactSchemaVersion: ARTIFACT_SCHEMA_VERSION,
+    kind: normalizedKind,
+    id,
+    attempt: { id: normalizedAttempt.id, parentId: normalizedAttempt.parentId ?? null },
+    timestamps: { startedAt, completedAt },
+    identities: validateArtifactIdentities(identityDefaults,
+      { requireEngine: true }),
+    payload: validatePayload(normalizedKind, structuredClone(payload)),
+  };
+  rejectSecrets(artifact);
+  return artifact;
+}
+
+export function validateArtifact<TPayload extends object = UnknownRecord>(
+  input: unknown,
+  options?: { source?: string },
+): Artifact<TPayload>;
+export function validateArtifact(
+  input: unknown,
+  { source = '<artifact>' }: { source?: string } = {},
+): Artifact {
+  if (!isObject(input)) fail(`${source} must be an object`);
+  if (input.artifactSchemaVersion !== ARTIFACT_SCHEMA_VERSION) {
+    fail(`${source} uses unsupported schema ${input.artifactSchemaVersion ?? 'missing'}`);
+  }
+  if (!isObject(input.attempt) || !Object.hasOwn(input.attempt, 'id')
+    || !Object.hasOwn(input.attempt, 'parentId')) fail(`${source}.attempt is incomplete`);
+  if (!isObject(input.timestamps) || !Object.hasOwn(input.timestamps, 'startedAt')
+    || !Object.hasOwn(input.timestamps, 'completedAt')) fail(`${source}.timestamps is incomplete`);
+  if (!Object.hasOwn(input, 'identities')) fail(`${source}.identities is required`);
+  if (!isObject(input.identities)) fail(`${source}.identities must be an object`);
+  for (const key of [...IDENTITY_KEYS, 'packs']) {
+    if (!Object.hasOwn(input.identities, key)) fail(`${source}.identities.${key} is required`);
+  }
+  const parsed = artifactEnvelopeSchema.safeParse(structuredClone(input));
+  if (!parsed.success) {
+    fail(formatZodError(parsed.error, source));
+  }
+  const candidate = parsed.data;
+  const { startedAt, completedAt } = candidate.timestamps;
+  if (completedAt && Date.parse(completedAt) < Date.parse(startedAt)) {
+    fail(`${source}.timestamps.completedAt precedes timestamps.startedAt`);
+  }
+  const artifact: Artifact = {
+    artifactSchemaVersion: ARTIFACT_SCHEMA_VERSION,
+    kind: candidate.kind,
+    id: candidate.id,
+    attempt: candidate.attempt,
+    timestamps: { startedAt, completedAt },
+    identities: validateArtifactIdentities(candidate.identities,
+      { requireEngine: true, requireComplete: true, sortPacks: false }),
+    payload: validatePayload(candidate.kind, structuredClone(candidate.payload)),
+  };
+  rejectSecrets(artifact);
+  return artifact;
+}
+
+export interface GradeArtifactCriterion {
+  id: string;
+  desc: string;
+  points: number;
+  stableKey: string | null;
+  evidence: CheckEvidence;
+  serverCheck?: string;
+  // The sentence the coding agent was given for this behaviour.
+  statedBy?: string;
+}
+
+export interface GradeArtifactFeature {
+  id: number;
+  name: string;
+  score: number;
+  setupEvidence: CheckEvidence;
+  criteria: GradeArtifactCriterion[];
+  max: number;
+}
+
+export interface GradeArtifactSelection {
+  sha256: string;
+  checks: Array<{ stableKey: string; points: number }>;
+}
+
+export interface GradeArtifactPayload extends UnknownRecord {
+  total: number;
+  max: number;
+  features: GradeArtifactFeature[];
+  selection: GradeArtifactSelection | null;
+  inconclusive: Array<{ points: number }>;
+}
+
+export function validateGradePayload(payload: UnknownRecord): GradeArtifactPayload {
+  const number = (value: unknown, at: string): number => {
+    if (!isFiniteNumber(value) || value < 0) fail(`${at} must be a non-negative number`);
+    return value;
+  };
+  const selectionValue = payload.selection;
+  const selection = selectionValue === undefined || selectionValue === null ? null : (() => {
+    const value = asObject(selectionValue, 'grade payload.selection must be an object');
+    if (typeof value.sha256 !== 'string' || !value.sha256 || !Array.isArray(value.checks)) {
+      fail('grade payload.selection is invalid');
+    }
+    return { ...value, sha256: value.sha256, checks: value.checks.map((check, index) => {
+      const entry = asObject(check, `grade payload.selection.checks[${index}] must be an object`);
+      if (typeof entry.stableKey !== 'string' || !entry.stableKey) {
+        fail(`grade payload.selection.checks[${index}].stableKey is invalid`);
+      }
+      return { ...entry, stableKey: entry.stableKey,
+        points: number(entry.points, `grade payload.selection.checks[${index}].points`) };
+    }) };
+  })();
+  if (!Array.isArray(payload.features)) fail('grade payload.features must be an array');
+  const features = payload.features.map((feature, featureIndex) => {
+    const value = asObject(feature, `grade payload.features[${featureIndex}] must be an object`);
+    if (!Array.isArray(value.criteria)) fail(`grade payload.features[${featureIndex}].criteria must be an array`);
+    const setupEvidence = validateCheckEvidence(value.setupEvidence,
+      { at: `grade payload.features[${featureIndex}].setupEvidence` });
+    if (setupEvidence.phase !== 'setup') {
+      fail(`grade payload.features[${featureIndex}].setupEvidence must use setup phase`);
+    }
+    if (!Number.isSafeInteger(value.id) || Number(value.id) < 1
+      || typeof value.name !== 'string' || !value.name) {
+      fail(`grade payload.features[${featureIndex}] identity is invalid`);
+    }
+    return { ...value, id: Number(value.id), name: value.name,
+    score: number(value.score, `grade payload.features[${featureIndex}].score`), setupEvidence,
+    criteria: value.criteria.map((criterion, criterionIndex) => {
+      const entry = asObject(criterion,
+        `grade payload.features[${featureIndex}].criteria[${criterionIndex}] must be an object`);
+      for (const obsolete of ['passed', 'inconclusive', 'detail']) {
+        if (Object.hasOwn(entry, obsolete)) {
+          fail(`grade payload.features[${featureIndex}].criteria[${criterionIndex}].${obsolete} is obsolete; use evidence`);
+        }
+      }
+      if (entry.evidence === undefined) {
+        fail(`grade payload.features[${featureIndex}].criteria[${criterionIndex}].evidence is required`);
+      }
+      if (entry.stableKey !== undefined && entry.stableKey !== null
+        && (typeof entry.stableKey !== 'string' || !entry.stableKey)) {
+        fail(`grade payload.features[${featureIndex}].criteria[${criterionIndex}].stableKey is invalid`);
+      }
+      if (typeof entry.id !== 'string' || !entry.id
+        || typeof entry.desc !== 'string' || !entry.desc
+        || (entry.serverCheck !== undefined && typeof entry.serverCheck !== 'string')) {
+        fail(`grade payload.features[${featureIndex}].criteria[${criterionIndex}] identity is invalid`);
+      }
+      return { ...entry, id: entry.id, desc: entry.desc,
+        points: number(entry.points,
+          `grade payload.features[${featureIndex}].criteria[${criterionIndex}].points`),
+        stableKey: entry.stableKey ?? null, evidence: validateCheckEvidence(entry.evidence,
+          { at: `grade payload.features[${featureIndex}].criteria[${criterionIndex}].evidence` }),
+        ...(entry.serverCheck === undefined ? {} : { serverCheck: entry.serverCheck }) };
+    }), max: number(value.max, `grade payload.features[${featureIndex}].max`) };
+  });
+  const inconclusive = payload.inconclusive === undefined ? [] : (() => {
+    if (!Array.isArray(payload.inconclusive)) fail('grade payload.inconclusive must be an array');
+    return payload.inconclusive.map((entry, index) => {
+      const value = asObject(entry, `grade payload.inconclusive[${index}] must be an object`);
+      return { points: number(value.points, `grade payload.inconclusive[${index}].points`) };
+    });
+  })();
+  return { ...payload, total: number(payload.total, 'grade payload.total'),
+    max: number(payload.max, 'grade payload.max'), features, selection, inconclusive };
+}
diff --git a/tools/stack-bench/src/evidence/artifact-store.ts b/tools/stack-bench/src/evidence/artifact-store.ts
new file mode 100644
index 00000000000..9ddc0f26cbf
--- /dev/null
+++ b/tools/stack-bench/src/evidence/artifact-store.ts
@@ -0,0 +1,129 @@
+import { randomUUID } from 'node:crypto';
+import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { dirname } from 'node:path';
+
+import type { CostRun } from './cost-proof.js';
+import { recipeArtifactIdentities } from './artifact-identities.js';
+import {
+  ARTIFACT_SCHEMA_VERSION,
+  createArtifact,
+  validateArtifact,
+  validateGradePayload,
+} from './artifact-schema.js';
+import type {
+  Artifact,
+  ArtifactKind,
+  GradeArtifactPayload,
+} from './artifact-schema.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+export interface ArtifactReadOptions {
+  expectedId?: string | null;
+  expectedKind?: ArtifactKind | null;
+}
+
+const isObject = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function object(value: unknown, message: string): UnknownRecord {
+  if (!isObject(value)) throw new Error(`invalid artifact: ${message}`);
+  return value;
+}
+
+export function writeArtifact(path: string, input: unknown): Artifact {
+  const candidate = object(input, `${path} must be an object`);
+  if (candidate.artifactSchemaVersion !== undefined
+    && candidate.artifactSchemaVersion !== ARTIFACT_SCHEMA_VERSION) {
+    throw new Error(`invalid artifact: ${path} uses unsupported schema ${candidate.artifactSchemaVersion}`);
+  }
+  const artifact = candidate.artifactSchemaVersion === ARTIFACT_SCHEMA_VERSION
+    ? validateArtifact(candidate, { source: path })
+    : createArtifact({
+      kind: candidate.kind,
+      id: typeof candidate.id === 'string' ? candidate.id : '',
+      attempt: candidate.attempt,
+      timestamps: candidate.timestamps,
+      identities: candidate.identities,
+      payload: candidate.payload,
+    });
+  mkdirSync(dirname(path), { recursive: true });
+  const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
+  try {
+    writeFileSync(temporary, `${JSON.stringify(artifact, null, 2)}\n`, { flag: 'wx' });
+    renameSync(temporary, path);
+  } catch (error) {
+    rmSync(temporary, { force: true });
+    throw error;
+  }
+  return artifact;
+}
+
+export function readArtifact<TPayload extends object = UnknownRecord>(
+  path: string,
+  { expectedId = null, expectedKind = null }: ArtifactReadOptions = {},
+): Artifact<TPayload> {
+  let input: unknown;
+  try {
+    input = JSON.parse(readFileSync(path, 'utf8'));
+  } catch (error) {
+    throw new Error(`cannot read artifact ${path}: ${error instanceof Error ? error.message : String(error)}`,
+      { cause: error });
+  }
+  const artifact = validateArtifact(input, { source: path });
+  if (expectedId !== null && artifact.id !== expectedId) {
+    throw new Error(`artifact ${path} belongs to ${artifact.id}, not ${expectedId}`);
+  }
+  if (expectedKind !== null && artifact.kind !== expectedKind) {
+    throw new Error(`artifact ${path} is ${artifact.kind}, not ${expectedKind}`);
+  }
+  return artifact as Artifact<TPayload>;
+}
+
+export function artifactPayload<TPayload extends object>(artifact: Artifact<TPayload>): TPayload & UnknownRecord {
+  return { ...artifact.payload, artifactSchemaVersion: artifact.artifactSchemaVersion,
+    kind: artifact.kind, id: artifact.id, artifactEnvelope: {
+      attempt: artifact.attempt,
+      timestamps: artifact.timestamps,
+      identities: artifact.identities,
+    } };
+}
+
+export function readArtifactPayload<TPayload extends object = UnknownRecord>(
+  path: string,
+  options: ArtifactReadOptions = {},
+): TPayload & UnknownRecord {
+  return artifactPayload(readArtifact<TPayload>(path, options));
+}
+
+export function readGradeArtifactPayload(path: string): GradeArtifactPayload {
+  return validateGradePayload(readArtifactPayload(path, { expectedKind: 'grade' }));
+}
+
+// Run producers use a flat in-memory record. Only the schema-v2 envelope reaches disk.
+export function writeRunJson(path: string, run: unknown): Artifact {
+  if (!isObject(run) || typeof run.id !== 'string' || !run.id) {
+    throw new Error('run artifact requires a non-empty id');
+  }
+  if (run.artifactSchemaVersion !== undefined
+    && run.artifactSchemaVersion !== ARTIFACT_SCHEMA_VERSION) {
+    throw new Error(`run artifact schema ${run.artifactSchemaVersion} is not supported`);
+  }
+  const { id, kind = 'benchmark_run', startedAt, completedAt, generatedAt,
+    identities, attempt, parentAttemptId, artifactSchemaVersion: _schema, ...payload } = run;
+  return writeArtifact(path, {
+    kind,
+    id,
+    attempt: attempt ?? { id, parentId: parentAttemptId ?? null },
+    timestamps: { startedAt: startedAt ?? generatedAt ?? new Date().toISOString(),
+      completedAt: completedAt ?? null },
+    identities: identities ?? recipeArtifactIdentities(payload.recipeRelease, {
+      stackAdapter: payload.backend ? { id: payload.backend } : null,
+    }),
+    payload,
+  });
+}
+
+export function readRunJson(path: string, expectedRunId?: string): CostRun & UnknownRecord {
+  return readArtifactPayload(path, { expectedId: expectedRunId }) as CostRun & UnknownRecord;
+}
diff --git a/tools/stack-bench/src/evidence/artifacts.ts b/tools/stack-bench/src/evidence/artifacts.ts
new file mode 100644
index 00000000000..994e61cf296
--- /dev/null
+++ b/tools/stack-bench/src/evidence/artifacts.ts
@@ -0,0 +1,4 @@
+// Stable public artifact API. Storage, schema, and identity details have separate owners.
+export * from './artifact-schema.js';
+export * from './artifact-store.js';
+export * from './artifact-layout.js';
diff --git a/tools/stack-bench/src/evidence/benchmark-run.ts b/tools/stack-bench/src/evidence/benchmark-run.ts
new file mode 100644
index 00000000000..4daa99e4987
--- /dev/null
+++ b/tools/stack-bench/src/evidence/benchmark-run.ts
@@ -0,0 +1,370 @@
+import type { ArtifactIdentities } from './artifacts.js';
+import type { OutcomeBundle, RunOutcome } from './outcomes.js';
+import type { SessionMetricsInput, SessionMetricsSummary } from './session-metrics.js';
+import type { PublicBackendLease } from '../runtime/backend-lease.js';
+import type { LevelCheckpoint } from '../runtime/source-checkpoint.js';
+import type { ValidatedAgentResult } from '../agents/agent-result-contract.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+export interface GradeBundleCheck {
+  stableKey: string;
+  points: number;
+  executionId?: string;
+  packId?: string;
+}
+
+export interface GradeBundleCriterion {
+  id?: string;
+  stableKey?: string;
+  points?: number;
+  evidence?: unknown;
+}
+
+export interface GradeBundleFeature {
+  id?: string;
+  name?: string;
+  criteria?: GradeBundleCriterion[];
+  cleanupEvidence?: { status?: string };
+}
+
+export interface GradeBundleSuite {
+  total?: number;
+  max?: number;
+  pass?: boolean;
+  features?: GradeBundleFeature[];
+  results?: Array<{ id: string; status: string; detail?: string }>;
+  cleanupEvidence?: { status?: string };
+}
+
+export interface GradeBundleSelection {
+  sha256?: string;
+  checks?: GradeBundleCheck[];
+  scoredChecks?: GradeBundleCheck[];
+  observedChecks?: GradeBundleCheck[];
+  attemptedChecks?: string[];
+  reportedChecks?: string[];
+  notRun?: unknown[];
+}
+
+export interface GradeBundleTotals {
+  score?: number | null;
+  max?: number | null;
+  dirty?: boolean;
+  contractPass?: boolean | null;
+  regression?: { score?: number | null; max?: number | null } | null;
+}
+
+export interface GradeBundlePayload extends OutcomeBundle {
+  suites?: Record<string, GradeBundleSuite>;
+  totals?: GradeBundleTotals;
+  selection?: GradeBundleSelection | null;
+  code?: unknown;
+  error?: string;
+  outcome?: RunOutcome;
+  source?: { sha256: string };
+}
+
+export interface RunSessionRecord {
+  round?: number;
+  sessionId: string | null;
+  costUsd: number;
+  durationMs: number;
+  usage: SessionMetricsInput['usage'];
+  costReceipts: unknown[];
+  costComplete: boolean;
+  providerThrottle: SessionMetricsInput['providerThrottle'];
+  resources: ValidatedAgentResult['setup']['resources'];
+  tokens: number | null;
+  outputTokens: number | null;
+  turns: number | null;
+  promptBytes: number | null;
+  thinking: SessionMetricsInput['thinking'];
+  transcript: unknown;
+  provenance: unknown;
+  providerMetadata: unknown;
+}
+
+// A completed repair whose grade did not finish. The source is kept beside the
+// run so a resume grades it instead of paying for another coding session.
+export interface RunRepairCandidate {
+  directory: string;
+  sha256: string;
+  files: number;
+}
+
+export interface RunRepairRecord {
+  status: string;
+  limit: number;
+  used: number;
+  stopReason: string | null;
+  nodeRepairs?: Array<{
+    nodeId: string;
+    used: number;
+    exhaustionReason: string | null;
+  }>;
+  candidate?: RunRepairCandidate;
+}
+
+export interface RunLevelRecord {
+  level: number;
+  graded: boolean;
+  score: number | null;
+  max: number | null;
+  selection: GradeBundleSelection | null;
+  outcome: RunOutcome;
+  error?: string;
+  code?: unknown;
+  firstBuild?: UnknownRecord;
+  baseline?: UnknownRecord;
+  resumedRepair?: UnknownRecord;
+  regression?: { score?: number | null; max?: number | null } | null;
+  contractPass?: boolean | null;
+  buildSessions?: RunSessionRecord[];
+  resumeSession?: RunSessionRecord;
+  repairSessions?: RunSessionRecord[];
+  buildCostUsd?: number;
+  resumeCostUsd?: number;
+  repairCostUsd?: number;
+  costUsd?: number;
+  repairs?: number;
+  durationMs?: number;
+  durationSec?: number;
+  sessionTotals?: SessionMetricsSummary;
+  repairHistory?: Array<{
+    round: number;
+    beforeScore: number | null;
+    beforeMax: number | null;
+    afterScore: number | null;
+    afterMax: number | null;
+    result: string;
+    remainingFailures: string[];
+  }>;
+  tokens?: number;
+  usage?: SessionMetricsSummary['usage'];
+  turns?: number;
+  promptBytes?: number;
+  tokensPerTurn?: number | null;
+  thinking?: SessionMetricsSummary['thinking'];
+  priorRepairs?: number;
+  cumulativeRepairs?: number;
+  repair?: RunRepairRecord;
+  checkpoint?: LevelCheckpoint | null;
+  stalled?: boolean;
+  regressed?: boolean;
+}
+
+export interface RunTotals {
+  score: number;
+  max: number;
+  costUsd: number | null;
+  costComplete: boolean;
+  repairs: number;
+  sessions: number;
+  tokens: number;
+  outputTokens: number;
+  turns: number;
+  modelDurationMs: number;
+  durationSec: number;
+  ungraded: number[];
+  priorExecutionCostUsd?: number | null;
+  currentExecutionCostUsd?: number;
+  cumulativeCostUsd?: number | null;
+}
+
+export interface RunProgressionResume {
+  priorRunId: string;
+  priorRunSha256: string;
+  stateSha256: string | null;
+  action: { type: string; level?: number };
+  inheritedLevels: number[];
+  priorTotals: RunTotals | null;
+}
+
+export interface RunProgressionSeed {
+  fromDepth: number;
+  sourceSha256: string;
+  sourceFiles: number;
+  parent: {
+    campaignId: string;
+    campaignSha256: string;
+    attemptId: string;
+    executionId: string;
+    runId: string;
+    runSha256: string;
+  };
+  validatedDepths: number[];
+}
+
+export interface RunProgressionStatus {
+  stateArtifact: string;
+  phase: 'active' | 'terminal';
+  level: number;
+  attempts: number;
+  score: {
+    uniqueChecks: { passedPoints: number; availablePoints: number };
+  };
+}
+
+export interface RunContinuation {
+  cumulativeRepairsBefore: number;
+  cumulativeCostBeforeUsd: number;
+  cumulativeDurationBeforeSec: number;
+  cumulativeRepairsAfter?: number;
+  cumulativeCostAfterUsd?: number | null;
+  cumulativeDurationAfterSec?: number;
+  resumeSetup?: UnknownRecord | null;
+  baseline?: UnknownRecord | null;
+}
+
+export interface BenchmarkRunRecord {
+  id: string;
+  startedAt: string;
+  completedAt?: string;
+  parentAttemptId: string | null;
+  identities: ArtifactIdentities;
+  mode: unknown;
+  track: string;
+  backend: string;
+  model: string;
+  pricing: unknown;
+  guidance: string;
+  condition: unknown;
+  skills: unknown[];
+  runtime: { buildImage: string; url: string };
+  selectionRequest: unknown;
+  featureCatalog: unknown;
+  dependencyPolicy: unknown;
+  progressionOwner?: UnknownRecord;
+  progressionStatus?: RunProgressionStatus;
+  progressionResume?: RunProgressionResume;
+  progressionSeed?: RunProgressionSeed;
+  progressionResumeFrom?: unknown;
+  backendLease: PublicBackendLease;
+  backendDiagnostics?: unknown;
+  validation: {
+    ladder: {
+      policy: string | undefined;
+      requestedLevels: number[];
+      completedLevels: number[];
+      stoppedAfterLevel: number | null;
+      blockedLevels: number[];
+    };
+  };
+  levels: RunLevelRecord[];
+  continuation?: RunContinuation;
+  setup?: UnknownRecord & {
+    session?: string;
+    isolation?: { imageId?: string | null };
+  };
+  contaminated?: boolean;
+  contamination?: unknown;
+  mutationControl?: UnknownRecord & { ok?: boolean; skipped?: boolean; outcome?: RunOutcome | null;
+    processError?: string | null; imageId?: string | null };
+  outcome?: RunOutcome;
+  totals?: RunTotals;
+}
+
+export function addCostUsd(...values: Array<number | null | undefined>): number {
+  let total = 0;
+  for (const value of values) total += value ?? 0;
+  return Number(total.toFixed(6));
+}
+
+export function runSessionRecord(
+  session: ValidatedAgentResult,
+  round: number | null = null,
+): RunSessionRecord {
+  return {
+    ...(round === null ? {} : { round }),
+    sessionId: session.sessionId ?? null,
+    costUsd: session.costUsd,
+    durationMs: session.durationMs,
+    usage: session.usage ?? null,
+    costReceipts: session.costReceipts ?? [],
+    costComplete: session.costComplete === true,
+    providerThrottle: session.setup?.providerThrottle ?? null,
+    resources: session.setup?.resources ?? null,
+    tokens: session.tokens ?? null,
+    outputTokens: session.outputTokens ?? null,
+    turns: session.turns ?? null,
+    promptBytes: session.promptBytes ?? null,
+    thinking: session.thinking ?? null,
+    transcript: session.transcript ?? null,
+    provenance: session.provenance ?? null,
+    providerMetadata: session.providerMetadata ?? null,
+  };
+}
+
+interface RunTotalsLevel {
+  level: number;
+  graded?: boolean;
+  score?: number | null;
+  max?: number | null;
+  buildCostUsd?: number | null;
+  resumeCostUsd?: number | null;
+  repairCostUsd?: number | null;
+  repairs?: number | null;
+  sessionTotals?: {
+    sessions?: number;
+    tokens?: number;
+    outputTokens?: number;
+    turns?: number;
+    durationMs?: number;
+  };
+}
+
+export interface RunTotalsInput {
+  levels: RunTotalsLevel[];
+  progressionStatus?: Pick<RunProgressionStatus, 'score'>;
+  progressionResume?: {
+    inheritedLevels: number[];
+    priorTotals: Pick<RunTotals, 'costUsd' | 'costComplete'> | null;
+  };
+  totals?: BenchmarkRunRecord['totals'];
+}
+
+export function finalizeRunTotals(
+  run: RunTotalsInput,
+  started: number,
+  { now = Date.now(), costComplete = true }: { now?: number; costComplete?: boolean } = {},
+) {
+  const inherited = new Set(run.progressionResume?.inheritedLevels ?? []);
+  const currentLevels = run.levels.filter(level => !inherited.has(level.level));
+  const currentExecutionCostUsd = addCostUsd(currentLevels.reduce((n, level) => n
+    + (level.buildCostUsd ?? level.resumeCostUsd ?? 0)
+    + (level.repairCostUsd ?? 0), 0));
+  const priorExecutionCostUsd = run.progressionResume?.priorTotals?.costUsd ?? null;
+  const cumulativeCostUsd = run.progressionResume
+    ? (typeof priorExecutionCostUsd === 'number'
+      ? addCostUsd(priorExecutionCostUsd, currentExecutionCostUsd) : null)
+    : currentExecutionCostUsd;
+  const progressionPoints = run.progressionStatus?.score?.uniqueChecks;
+  const progressionScore = progressionPoints
+    && Number.isSafeInteger(progressionPoints.passedPoints)
+    && Number.isSafeInteger(progressionPoints.availablePoints)
+    ? { score: progressionPoints.passedPoints, max: progressionPoints.availablePoints }
+    : null;
+  run.totals = {
+    score: progressionScore?.score
+      ?? run.levels.reduce((n, level) => n + (level.score ?? 0), 0),
+    max: progressionScore?.max
+      ?? run.levels.reduce((n, level) => n + (level.max ?? 0), 0),
+    costUsd: cumulativeCostUsd,
+    costComplete: costComplete && (!run.progressionResume
+      || (typeof priorExecutionCostUsd === 'number'
+        && run.progressionResume.priorTotals?.costComplete !== false)),
+    ...(run.progressionResume ? { priorExecutionCostUsd, currentExecutionCostUsd,
+      cumulativeCostUsd } : {}),
+    repairs: run.levels.reduce((n, level) => n + (level.repairs ?? 0), 0),
+    sessions: run.levels.reduce((n, level) => n + (level.sessionTotals?.sessions ?? 0), 0),
+    tokens: run.levels.reduce((n, level) => n + (level.sessionTotals?.tokens ?? 0), 0),
+    outputTokens: run.levels.reduce((n, level) => n + (level.sessionTotals?.outputTokens ?? 0), 0),
+    turns: run.levels.reduce((n, level) => n + (level.sessionTotals?.turns ?? 0), 0),
+    modelDurationMs: run.levels.reduce((n, level) => n
+      + (level.sessionTotals?.durationMs ?? 0), 0),
+    durationSec: Math.round((now - started) / 1000),
+    ungraded: run.levels.filter(level => !level.graded).map(level => level.level),
+  };
+  return run.totals;
+}
diff --git a/tools/stack-bench/src/evidence/browser-evidence.ts b/tools/stack-bench/src/evidence/browser-evidence.ts
new file mode 100644
index 00000000000..9c83f55ceee
--- /dev/null
+++ b/tools/stack-bench/src/evidence/browser-evidence.ts
@@ -0,0 +1,21 @@
+// A missing optional element counts as zero. Other browser failures remain errors.
+
+interface CountableLocator {
+  count(): Promise<number>;
+  waitFor(options: { readonly state: 'visible'; readonly timeout: number }): Promise<void>;
+}
+
+const errorName = (error: unknown): unknown =>
+  error !== null && typeof error === 'object' && 'name' in error ? error.name : undefined;
+
+export async function settledLocatorCount(
+  locator: CountableLocator,
+  timeoutMs: number,
+): Promise<number> {
+  try {
+    await locator.waitFor({ state: 'visible', timeout: timeoutMs });
+  } catch (error) {
+    if (errorName(error) !== 'TimeoutError') throw error;
+  }
+  return locator.count();
+}
diff --git a/tools/stack-bench/src/evidence/check-evidence.ts b/tools/stack-bench/src/evidence/check-evidence.ts
new file mode 100644
index 00000000000..40184ef8eac
--- /dev/null
+++ b/tools/stack-bench/src/evidence/check-evidence.ts
@@ -0,0 +1,292 @@
+import { findingSchema } from '../actions/action-findings.js';
+import type { Finding } from '../actions/action-findings.js';
+import { z } from 'zod';
+import { formatZodError } from '../zod-error.js';
+
+export const CHECK_EVIDENCE_SCHEMA_VERSION = 2;
+
+export const CHECK_EVIDENCE_STATUSES = Object.freeze([
+  'passed',
+  'failed',
+  'inconclusive',
+  'harness_failure',
+] as const);
+
+export const CHECK_EVIDENCE_PHASES = Object.freeze(['setup', 'assertion'] as const);
+
+export type CheckEvidenceStatus = typeof CHECK_EVIDENCE_STATUSES[number];
+export type CheckEvidencePhase = typeof CHECK_EVIDENCE_PHASES[number];
+export type CheckOutcomeKind =
+  | 'passed'
+  | 'app_failure'
+  | 'inconclusive'
+  | 'harness_failure';
+
+export interface CheckEvidenceDisposition {
+  status: CheckEvidenceStatus;
+  label: string;
+  outcomeKind: CheckOutcomeKind;
+  passed: boolean;
+  measured: boolean;
+  applicationFailure: boolean;
+  repairable: boolean;
+}
+
+export interface CheckEvidenceTiming {
+  startedAtMs: number;
+  completedAtMs: number;
+  durationMs: number;
+}
+
+export interface CheckEvidenceActionEntry {
+  actor: string | null;
+  evidence: unknown;
+}
+
+export interface CheckEvidenceAttachment {
+  kind: string;
+  ref: string;
+}
+
+export interface CheckEvidence {
+  schemaVersion: 2;
+  status: CheckEvidenceStatus;
+  code: string;
+  phase: CheckEvidencePhase;
+  actor: string | null;
+  summary: string | null;
+  // The typed finding behind a failed or inconclusive check, from its
+  // failing action; null when the check passed or the harness failed.
+  finding: Finding | null;
+  observation: unknown;
+  expected: unknown;
+  retryable: boolean;
+  timing: CheckEvidenceTiming;
+  actions: CheckEvidenceActionEntry[];
+  attachments: CheckEvidenceAttachment[];
+  sensitivity: string[];
+}
+
+export interface CreateCheckEvidenceInput {
+  status: CheckEvidenceStatus;
+  code: string;
+  phase: CheckEvidencePhase;
+  actor?: string | null;
+  summary?: string | null;
+  observation?: unknown;
+  expected?: unknown;
+  retryable?: boolean;
+  startedAtMs: number;
+  completedAtMs: number;
+  actions?: readonly CheckEvidenceActionEntry[];
+  attachments?: readonly CheckEvidenceAttachment[];
+  sensitivity?: readonly string[];
+  finding?: Finding | null;
+}
+
+// This is the single semantic interpretation of a check/action status. Keep
+// diagnostic prose out of this table: summaries are presentation evidence and
+// must never decide scoring, repair eligibility, or run outcome.
+export const CHECK_EVIDENCE_DISPOSITIONS = Object.freeze({
+  passed: Object.freeze({
+    status: 'passed', label: 'PASS', outcomeKind: 'passed', passed: true,
+    measured: true, applicationFailure: false, repairable: false,
+  }),
+  failed: Object.freeze({
+    status: 'failed', label: 'FAIL', outcomeKind: 'app_failure', passed: false,
+    measured: true, applicationFailure: true, repairable: true,
+  }),
+  inconclusive: Object.freeze({
+    status: 'inconclusive', label: 'INCONCLUSIVE', outcomeKind: 'inconclusive', passed: false,
+    measured: false, applicationFailure: false, repairable: false,
+  }),
+  harness_failure: Object.freeze({
+    status: 'harness_failure', label: 'HARNESS FAILURE', outcomeKind: 'harness_failure',
+    passed: false, measured: false, applicationFailure: false, repairable: false,
+  }),
+} satisfies Record<CheckEvidenceStatus, CheckEvidenceDisposition>);
+
+const STATUS = new Set<string>(CHECK_EVIDENCE_STATUSES);
+const CODE = /^[a-z][a-z0-9_]*(?:[.:-][a-z0-9_]+)*$/;
+const nonEmptyStringSchema = z.string().refine(value => value.trim().length > 0);
+const timingSchema = z.strictObject({
+  startedAtMs: z.number().finite().nonnegative(),
+  completedAtMs: z.number().finite().nonnegative(),
+  durationMs: z.number().finite().nonnegative(),
+});
+const actionTimingSchema = timingSchema.extend({ deadlineMs: z.number().finite().nonnegative() });
+const actionEvidenceSchema = z.strictObject({
+  schemaVersion: z.literal(2),
+  action: z.strictObject({ id: nonEmptyStringSchema, version: nonEmptyStringSchema }),
+  status: z.enum(CHECK_EVIDENCE_STATUSES),
+  type: nonEmptyStringSchema,
+  code: nonEmptyStringSchema,
+  phase: nonEmptyStringSchema,
+  summary: z.string().nullable(),
+  finding: findingSchema.nullable(),
+  observation: z.unknown(),
+  expected: z.unknown(),
+  retryable: z.boolean(),
+  timing: actionTimingSchema,
+  attachments: z.array(z.unknown()),
+  sensitivity: z.array(nonEmptyStringSchema),
+});
+const checkEvidenceSchema = z.strictObject({
+  schemaVersion: z.literal(CHECK_EVIDENCE_SCHEMA_VERSION),
+  status: z.enum(CHECK_EVIDENCE_STATUSES),
+  code: z.string().regex(CODE),
+  phase: z.enum(CHECK_EVIDENCE_PHASES),
+  actor: nonEmptyStringSchema.nullable(),
+  summary: z.string().nullable(),
+  finding: findingSchema.nullable(),
+  observation: z.unknown(),
+  expected: z.unknown(),
+  retryable: z.boolean(),
+  timing: timingSchema,
+  actions: z.array(z.strictObject({ actor: nonEmptyStringSchema.nullable(),
+    evidence: actionEvidenceSchema })),
+  attachments: z.array(z.strictObject({ kind: nonEmptyStringSchema, ref: nonEmptyStringSchema })),
+  sensitivity: z.array(nonEmptyStringSchema),
+});
+
+function structured(value: unknown, at: string, seen = new Set<object>()): void {
+  if (value === null || typeof value === 'string' || typeof value === 'boolean') return;
+  if (typeof value === 'number' && Number.isFinite(value)) return;
+  if (typeof value !== 'object' || seen.has(value)) {
+    throw new Error(`${at} must be finite, acyclic JSON data`);
+  }
+  const prototype = Object.getPrototypeOf(value);
+  if (!Array.isArray(value) && prototype !== Object.prototype && prototype !== null) {
+    throw new Error(`${at} must be plain JSON data`);
+  }
+  seen.add(value);
+  if (Array.isArray(value)) {
+    value.forEach((item, index) => structured(item, `${at}[${index}]`, seen));
+  } else {
+    for (const [key, item] of Object.entries(value)) structured(item, `${at}.${key}`, seen);
+  }
+  seen.delete(value);
+}
+
+function validateTiming(
+  value: CheckEvidenceTiming & { deadlineMs?: number },
+  at: string,
+): void {
+  if (value.completedAtMs < value.startedAtMs) throw new Error(`${at} completes before it starts`);
+  if (value.durationMs !== value.completedAtMs - value.startedAtMs) {
+    throw new Error(`${at}.durationMs does not match its endpoints`);
+  }
+}
+
+function validateStringList(value: string[], at: string): void {
+  if (new Set(value).size !== value.length) throw new Error(`${at} contains duplicates`);
+}
+
+function isCheckEvidenceStatus(value: unknown): value is CheckEvidenceStatus {
+  return typeof value === 'string' && STATUS.has(value);
+}
+
+function validateActionEvidence(value: z.infer<typeof actionEvidenceSchema>, at: string): void {
+  structured(value.observation, `${at}.observation`);
+  structured(value.expected, `${at}.expected`);
+  validateTiming(value.timing, `${at}.timing`);
+  structured(value.attachments, `${at}.attachments`);
+  validateStringList(value.sensitivity, `${at}.sensitivity`);
+}
+
+export function validateCheckEvidence(
+  value: unknown,
+  { at = 'check evidence' }: { at?: string } = {},
+): CheckEvidence {
+  const parsed = checkEvidenceSchema.safeParse(value);
+  if (!parsed.success) {
+    throw new Error(formatZodError(parsed.error, at));
+  }
+  const evidence = parsed.data;
+  structured(evidence.observation, `${at}.observation`);
+  structured(evidence.expected, `${at}.expected`);
+  validateTiming(evidence.timing, `${at}.timing`);
+  evidence.actions.forEach((entry, index) => {
+    const entryAt = `${at}.actions[${index}]`;
+    validateActionEvidence(entry.evidence, `${entryAt}.evidence`);
+  });
+  validateStringList(evidence.sensitivity, `${at}.sensitivity`);
+  return value as CheckEvidence;
+}
+
+export function createCheckEvidence({
+  status,
+  code,
+  phase,
+  actor = null,
+  summary = null,
+  observation = null,
+  expected = null,
+  finding = null,
+  retryable = false,
+  startedAtMs,
+  completedAtMs,
+  actions = [],
+  attachments = [],
+  sensitivity = [],
+}: CreateCheckEvidenceInput): CheckEvidence {
+  const value = {
+    schemaVersion: CHECK_EVIDENCE_SCHEMA_VERSION,
+    status,
+    code,
+    phase,
+    actor,
+    summary: summary == null ? null : String(summary).slice(0, 2_000),
+    finding,
+    observation,
+    expected,
+    retryable,
+    timing: {
+      startedAtMs,
+      completedAtMs,
+      durationMs: Math.max(0, completedAtMs - startedAtMs),
+    },
+    actions: actions.map(entry => ({ actor: entry.actor ?? null, evidence: entry.evidence })),
+    attachments: attachments.map(attachment => ({ ...attachment })),
+    sensitivity: [...new Set(sensitivity)].sort(),
+  };
+  return validateCheckEvidence(value);
+}
+
+export function criterionEvidence(criterion: {
+  id?: string;
+  evidence?: unknown;
+} | null | undefined): CheckEvidence {
+  if (criterion?.evidence === undefined) {
+    throw new Error(`criterion ${criterion?.id ?? '<unknown>'}.evidence is required`);
+  }
+  return validateCheckEvidence(criterion.evidence, {
+    at: `criterion ${criterion.id ?? '<unknown>'}.evidence`,
+  });
+}
+
+export function evidenceDisposition(
+  value: CheckEvidence | CheckEvidenceStatus,
+): CheckEvidenceDisposition {
+  const status = typeof value === 'string' ? value : value?.status;
+  if (!isCheckEvidenceStatus(status)) {
+    throw new Error(`check evidence status is invalid: ${String(status)}`);
+  }
+  return CHECK_EVIDENCE_DISPOSITIONS[status];
+}
+
+export function evidenceIsMeasured(evidence: CheckEvidence): boolean {
+  return evidenceDisposition(evidence).measured;
+}
+
+export function evidencePassed(evidence: CheckEvidence): boolean {
+  return evidenceDisposition(evidence).passed;
+}
+
+export function evidenceIsApplicationFailure(evidence: CheckEvidence): boolean {
+  return evidenceDisposition(evidence).applicationFailure;
+}
+
+export function evidenceIsRepairable(evidence: CheckEvidence): boolean {
+  return evidenceDisposition(evidence).repairable;
+}
diff --git a/tools/stack-bench/src/evidence/claude-usage-cost.ts b/tools/stack-bench/src/evidence/claude-usage-cost.ts
new file mode 100644
index 00000000000..193306f86ef
--- /dev/null
+++ b/tools/stack-bench/src/evidence/claude-usage-cost.ts
@@ -0,0 +1,68 @@
+import {
+  validatePricingRates,
+  type PricingRates,
+} from './pricing-authority.js';
+
+export const CLAUDE_SONNET_RATES: Readonly<PricingRates> = Object.freeze({
+  input: 2.00,
+  output: 10.00,
+  cacheWrite5m: 2.50,
+  cacheWrite1h: 4.00,
+  cacheRead: 0.20,
+});
+
+export function claudeRatesForModel(model: unknown): Readonly<PricingRates> | null {
+  return typeof model === 'string' && /^claude-sonnet-5(?:$|-)/.test(model)
+    ? CLAUDE_SONNET_RATES : null;
+}
+
+export interface ClaudeUsage {
+  input: number;
+  output: number;
+  cacheRead: number;
+  cacheWrite5m: number;
+  cacheWrite1h: number;
+}
+
+const nonNegativeNumber = (value: unknown, field: keyof ClaudeUsage): number => {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) {
+    throw new Error(`Claude usage ${field} is incomplete`);
+  }
+  return value;
+};
+
+export function normalizeClaudeUsage(usage: unknown): ClaudeUsage {
+  if (!usage || typeof usage !== 'object') throw new Error('complete Claude usage is required');
+  const source = usage as Record<string, unknown>;
+  const cacheCreationValue = source.cache_creation;
+  const cacheCreation = cacheCreationValue && typeof cacheCreationValue === 'object'
+    ? cacheCreationValue as Record<string, unknown>
+    : {};
+  const hasCacheBreakdown = Object.hasOwn(cacheCreation, 'ephemeral_5m_input_tokens')
+    || Object.hasOwn(cacheCreation, 'ephemeral_1h_input_tokens');
+  return {
+    input: nonNegativeNumber(source.input_tokens, 'input'),
+    output: nonNegativeNumber(source.output_tokens, 'output'),
+    cacheRead: nonNegativeNumber(source.cache_read_input_tokens, 'cacheRead'),
+    cacheWrite5m: hasCacheBreakdown
+      ? nonNegativeNumber(cacheCreation.ephemeral_5m_input_tokens ?? 0, 'cacheWrite5m')
+      : nonNegativeNumber(source.cache_creation_input_tokens, 'cacheWrite5m'),
+    cacheWrite1h: nonNegativeNumber(
+      cacheCreation.ephemeral_1h_input_tokens ?? 0,
+      'cacheWrite1h',
+    ),
+  };
+}
+
+export function priceClaudeUsage(
+  usage: unknown,
+  rates: unknown = CLAUDE_SONNET_RATES,
+): number {
+  const validatedRates = validatePricingRates(rates, { at: 'Claude pricing rates' });
+  const values = normalizeClaudeUsage(usage);
+  return values.input * validatedRates.input / 1e6
+    + values.output * validatedRates.output / 1e6
+    + values.cacheRead * validatedRates.cacheRead / 1e6
+    + values.cacheWrite5m * validatedRates.cacheWrite5m / 1e6
+    + values.cacheWrite1h * validatedRates.cacheWrite1h / 1e6;
+}
diff --git a/tools/stack-bench/src/evidence/cost-proof.ts b/tools/stack-bench/src/evidence/cost-proof.ts
new file mode 100644
index 00000000000..2f776b2bb76
--- /dev/null
+++ b/tools/stack-bench/src/evidence/cost-proof.ts
@@ -0,0 +1,142 @@
+export interface CostReceiptEntry {
+  receipt?: {
+    complete?: boolean;
+    reconciled?: boolean;
+    error?: unknown;
+    costUsd?: number;
+    exact?: boolean;
+  };
+  [key: string]: unknown;
+}
+
+export interface CostSession {
+  costUsd: number;
+  costComplete?: boolean;
+  costReceipts?: CostReceiptEntry[];
+  [key: string]: unknown;
+}
+
+export interface CostLevel {
+  level: number;
+  buildSessions?: CostSession[];
+  resumeSession?: CostSession;
+  repairSessions?: CostSession[];
+}
+
+export interface CostRun {
+  id?: string | null;
+  levels?: CostLevel[];
+  pricing?: unknown;
+  totals?: {
+    costComplete?: boolean;
+    costUsd?: number;
+  };
+}
+
+export interface CostLedgerRow {
+  level: number;
+  kind: 'build' | 'resume' | 'repair';
+  index: number;
+  sessionCostUsd: number;
+  costComplete: boolean;
+  receipts: CostReceiptEntry[];
+  receiptCostUsd: number;
+  differenceUsd: number;
+  complete: boolean;
+  // False when a receipt charged a request its cost ceiling instead of exact
+  // provider usage; the row's cost is then an upper bound.
+  exact: boolean;
+}
+
+export interface CostLedger {
+  complete: boolean;
+  exact: boolean;
+  differenceUsd: number;
+  receiptCostUsd: number;
+  reportedCostUsd: number;
+  rows: CostLedgerRow[];
+  runId: string | null;
+  pricing: unknown;
+}
+
+interface SessionCostRow {
+  level: number;
+  kind: CostLedgerRow['kind'];
+  index: number;
+  sessionCostUsd: number;
+  costComplete: boolean;
+  receipts: CostReceiptEntry[];
+}
+
+function cost(value: unknown, at: string): number {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value < 0) {
+    throw new Error(`${at} must be a non-negative number`);
+  }
+  return value;
+}
+
+const roundUsd = (value: number): number => Number(value.toFixed(6));
+
+function sessionRows(run: CostRun): SessionCostRow[] {
+  const rows: SessionCostRow[] = [];
+  for (const [levelIndex, level] of (run.levels ?? []).entries()) {
+    if (!Number.isSafeInteger(level.level) || level.level < 1) {
+      throw new Error(`levels[${levelIndex}].level must be a positive integer`);
+    }
+    const groups: Array<[CostLedgerRow['kind'], CostSession[]]> = [
+      ['build', level.buildSessions ?? []],
+      ['resume', level.resumeSession ? [level.resumeSession] : []],
+      ['repair', level.repairSessions ?? []],
+    ];
+    for (const [kind, sessions] of groups) {
+      for (const [index, session] of sessions.entries()) {
+        rows.push({
+          level: level.level,
+          kind,
+          index: index + 1,
+          sessionCostUsd: cost(session.costUsd,
+            `levels[${levelIndex}].${kind}[${index}].costUsd`),
+          costComplete: session.costComplete === true,
+          receipts: session.costReceipts ?? [],
+        });
+      }
+    }
+  }
+  return rows;
+}
+
+export function durableCostLedger(run: CostRun): CostLedger {
+  const rows = sessionRows(run).map(row => {
+    const receiptCostUsd = roundUsd(row.receipts.reduce(
+      (sum, entry, index) => sum + cost(entry?.receipt?.costUsd,
+        `level ${row.level} ${row.kind} receipt[${index}].costUsd`),
+      0,
+    ));
+    const receiptsComplete = (row.receipts.length === 0 && row.sessionCostUsd === 0)
+      || (row.receipts.length > 0 && row.receipts.every(entry => entry?.receipt?.complete === true
+        && entry.receipt.reconciled === true && entry.receipt.error === null));
+    const differenceUsd = roundUsd(row.sessionCostUsd - receiptCostUsd);
+    return {
+      ...row,
+      receiptCostUsd,
+      differenceUsd,
+      complete: row.costComplete && receiptsComplete && Math.abs(differenceUsd) <= 0.0001,
+      exact: row.receipts.every(entry => entry?.receipt?.exact !== false),
+    };
+  });
+  const reportedCostUsd = roundUsd(run.totals?.costUsd === undefined
+    ? 0 : cost(run.totals.costUsd, 'totals.costUsd'));
+  const receiptCostUsd = roundUsd(rows.reduce((sum, row) => sum + row.receiptCostUsd, 0));
+  const differenceUsd = roundUsd(reportedCostUsd - receiptCostUsd);
+  return {
+    runId: run.id ?? null,
+    pricing: run.pricing ?? null,
+    reportedCostUsd,
+    receiptCostUsd,
+    differenceUsd,
+    complete: run.totals?.costComplete === true && rows.every(row => row.complete)
+      && Math.abs(differenceUsd) <= 0.0001,
+    exact: rows.every(row => row.exact),
+    rows,
+  };
+}
diff --git a/tools/stack-bench/src/evidence/diagnostic-sanitizer.ts b/tools/stack-bench/src/evidence/diagnostic-sanitizer.ts
new file mode 100644
index 00000000000..eac27337f95
--- /dev/null
+++ b/tools/stack-bench/src/evidence/diagnostic-sanitizer.ts
@@ -0,0 +1,70 @@
+const ANSI = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m|\\[\\d+m`, 'g');
+const TEST_SELECTOR = /\[(?:data-role|data-testid|data-test|data-cy)\s*=\s*(?:"[^"]*"|'[^']*'|[^\]\s]+)\](?:,\s*#[a-z0-9_.:-]+)?/gi;
+const LOCATOR_CALL = /\b(?:page\.)?(?:locator|getByTestId|getByRole|getByText|getByLabel|getByPlaceholder|getByAltText|getByTitle|waitForSelector)\((?:[^()]|\([^()]*\))*\)/gi;
+const LOCAL_URL = /\b(?:https?:\/\/)?(?:localhost|127\.0\.0\.1|0\.0\.0\.0|host\.docker\.internal)(?::\d+)?(?:\/[^\s'"`)]+)?/gi;
+const WEB_URL = /\b(?:https?|wss?):\/\/[^\s'"`)]+/gi;
+const WINDOWS_PATH = /\b[A-Za-z]:[\\/][^\s'"`)]*/g;
+const HARNESS_PATH = /\/(?:app|workspace|root|home|tmp|mnt|tools\/stack-bench)(?:\/[^\s'"`):]*)*/g;
+const BEARER_CREDENTIAL = /\b(?:authorization\s*:\s*)?bearer\s+[A-Za-z0-9._~+/-]+=*/gi;
+const NAMED_CREDENTIAL = /["']?(?:anthropic_api_key|claude_code_oauth_token|api[_-]?key|access[_-]?token|auth[_-]?token|oauth[_-]?token|password|secret)["']?\s*[:=]\s*(?:"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*'|[^\s,;}\]]+)/gi;
+const PREFIXED_CREDENTIAL = /\b(?:sk|key)-[A-Za-z0-9_-]{16,}\b/g;
+const URL_CREDENTIAL = /\b([a-z][a-z0-9+.-]*:\/\/)[^\s/@]+:[^\s/@]+@/gi;
+
+export function redactCredentials(value: unknown): string {
+  return String(value ?? '')
+    .replace(BEARER_CREDENTIAL, '[redacted credential]')
+    .replace(NAMED_CREDENTIAL, '[redacted credential]')
+    .replace(PREFIXED_CREDENTIAL, '[redacted credential]')
+    .replace(URL_CREDENTIAL, '$1[redacted credential]@');
+}
+
+interface CleanOptions {
+  callLog?: boolean;
+}
+
+function clean(value: unknown, limit: number, { callLog = true }: CleanOptions = {}): string {
+  let raw = String(value ?? '').replace(ANSI, ' ');
+  let reasons = '';
+  if (callLog) {
+    const callLogAt = raw.search(/Call log:/i);
+    if (callLogAt !== -1) {
+      const log = raw.slice(callLogAt);
+      const selectedReasons = [...log.matchAll(/^\s*-\s+(.*)$/gm)]
+        .map(match => match[1]?.trim() ?? '')
+        .filter(line => line.length > 0)
+        .filter(line => !/^(?:waiting for|retrying|attempting|scrolling|done scrolling|waiting \d|\d+\s*[×x]\s+)/i.test(line))
+        .filter(line => !/^locator resolved to/i.test(line))
+        .map(line => clean(line, 120, { callLog: false }))
+        .filter(Boolean);
+      reasons = [...new Set(selectedReasons)].slice(0, 2).join('; ');
+      raw = raw.slice(0, callLogAt);
+    }
+  }
+
+  let result = redactCredentials(raw)
+    .replace(/^\s*at\s+.*$/gm, ' ')
+    .replace(/\bfile:\/\/\/?[^\s'"`)]+/gi, 'a file')
+    .replace(LOCAL_URL, 'the app')
+    .replace(WEB_URL, 'a service')
+    .replace(WINDOWS_PATH, 'a file')
+    .replace(HARNESS_PATH, 'a file')
+    .replace(TEST_SELECTOR, 'the control')
+    .replace(LOCATOR_CALL, 'the control')
+    .replace(/\b(?:within|after|timeout(?: of)?)\s+\d+(?:\.\d+)?\s*(?:ms|milliseconds?|s|seconds?)\b/gi,
+      'in time')
+    .replace(/\b\d+(?:\.\d+)?\s*(?:ms|milliseconds?|s|seconds?)\b/gi, '')
+    .replace(/\bin time exceeded\b/gi, 'did not respond in time')
+    .replace(/\s+/g, ' ')
+    .trim();
+  if (reasons) result = `${result}${result ? ' ' : ''}(${reasons})`;
+  if (/^(?:setup failed|timeout(?: exceeded)?[.\s]*)$/i.test(result)) return '';
+  return result.length > limit ? `${result.slice(0, limit - 3)}...` : result;
+}
+
+export function sanitiseDiagnostic(detail: unknown = '', limit = 220): string {
+  return clean(detail, limit);
+}
+
+export function sanitiseConsoleError(detail: unknown = ''): string {
+  return sanitiseDiagnostic(detail, 360).replaceAll('`', "'");
+}
diff --git a/tools/stack-bench/src/evidence/evidence-presentation.ts b/tools/stack-bench/src/evidence/evidence-presentation.ts
new file mode 100644
index 00000000000..0cd1a004aa6
--- /dev/null
+++ b/tools/stack-bench/src/evidence/evidence-presentation.ts
@@ -0,0 +1,58 @@
+import {
+  evidenceDisposition,
+  type CheckEvidence,
+} from './check-evidence.js';
+import { sanitiseDiagnostic } from './diagnostic-sanitizer.js';
+import type { RunLevelRecord } from './benchmark-run.js';
+
+export function evidenceStatusLabel(evidence: CheckEvidence): string {
+  return evidenceDisposition(evidence).label;
+}
+
+interface RenderEvidenceOptions {
+  includeSummary?: boolean;
+}
+
+export function renderEvidenceConsoleLine(
+  evidence: CheckEvidence,
+  subject: string,
+  { includeSummary = true }: RenderEvidenceOptions = {},
+): string {
+  const label = evidenceStatusLabel(evidence);
+  const summary = includeSummary ? sanitiseDiagnostic(evidence.summary, 600) : '';
+  return `${label} ${subject}${summary ? `: ${summary}` : ''}`;
+}
+
+interface LevelSummaryInput {
+  level: number;
+  graded: boolean;
+  score?: number | null;
+  max?: number | null;
+  firstBuild?: RunLevelRecord['firstBuild'];
+  baseline?: RunLevelRecord['baseline'];
+  repairs?: number;
+  buildCostUsd?: number;
+  resumeCostUsd?: number;
+  repairCostUsd?: number;
+  durationSec?: number;
+  durationMs?: number;
+  error?: string;
+  repair?: RunLevelRecord['repair'];
+}
+
+export function formatLevelSummary(level: LevelSummaryInput): string {
+  const starting = level.firstBuild?.score != null
+    ? `${level.firstBuild.score}/${level.firstBuild.max} unaided -> `
+    : level.baseline?.score != null ? `${level.baseline.score}/${level.baseline.max} resumed -> ` : '';
+  const score = level.graded ? `${starting}${level.score}/${level.max}` : 'NOT GRADED';
+  const repairs = Number.isInteger(level.repairs) ? level.repairs : 0;
+  const repairLabel = `${repairs} ${repairs === 1 ? 'repair' : 'repairs'}`;
+  const totalCost = (level.buildCostUsd ?? level.resumeCostUsd ?? 0) + (level.repairCostUsd ?? 0);
+  const durationSec = Number.isFinite(level.durationSec)
+    ? level.durationSec : Math.round((level.durationMs ?? 0) / 1000);
+  const status = level.error
+    ? `stopped: ${level.error.replaceAll('-', ' ')}`
+    : level.repair?.status?.replaceAll('-', ' ') ?? 'complete';
+  return `L${level.level}: ${score} | ${repairLabel} | $${totalCost.toFixed(2)} total`
+    + ` ($${(level.repairCostUsd ?? 0).toFixed(2)} repairs) | ${status} | ${durationSec}s`;
+}
diff --git a/tools/stack-bench/src/evidence/evidence-timing.ts b/tools/stack-bench/src/evidence/evidence-timing.ts
new file mode 100644
index 00000000000..b1d0be13b86
--- /dev/null
+++ b/tools/stack-bench/src/evidence/evidence-timing.ts
@@ -0,0 +1,6 @@
+import { performance } from 'node:perf_hooks';
+
+// Evidence needs epoch-shaped timestamps, but Date.now() can move backwards
+// when a VM or NTP corrects its wall clock. Anchor the process's monotonic clock
+// to its epoch start so elapsed work always produces coherent evidence.
+export const evidenceNowMs = (): number => Math.floor(performance.timeOrigin + performance.now());
diff --git a/tools/stack-bench/src/evidence/grade-report.ts b/tools/stack-bench/src/evidence/grade-report.ts
new file mode 100644
index 00000000000..715e6b25ed2
--- /dev/null
+++ b/tools/stack-bench/src/evidence/grade-report.ts
@@ -0,0 +1,52 @@
+import type { CheckEvidence, CheckEvidencePhase, CheckEvidenceStatus }
+  from './check-evidence.js';
+
+export interface GradeCleanupFailure {
+  actor: string | null;
+  stage: string;
+  reason: string;
+}
+
+export interface GradeCriterionResult {
+  id: string;
+  desc: string;
+  points: number;
+  evidence: CheckEvidence;
+  stableKey?: string;
+  serverCheck?: string;
+}
+
+export interface CompletedGradeFeatureResult {
+  id: number;
+  name: string;
+  score: number;
+  max: number;
+  criteria: GradeCriterionResult[];
+  consoleErrors: string[];
+  setupEvidence: CheckEvidence;
+  cleanupEvidence?: { status: 'harness_failure'; failures: GradeCleanupFailure[] };
+  inconclusive?: Array<{
+    id: string;
+    points: number;
+    status: CheckEvidenceStatus;
+    code: string;
+    phase: CheckEvidencePhase;
+    summary: string | null;
+  }>;
+  screenshots?: string[];
+  videos?: string[];
+  unverified?: string[];
+  verified?: string[];
+}
+
+export interface GradeSelectionCheck {
+  stableKey: string;
+  packId: string;
+}
+
+export interface CompletedGradeReport {
+  selection: { checks: GradeSelectionCheck[] } | null;
+  features: CompletedGradeFeatureResult[];
+  total: number;
+  max: number;
+}
diff --git a/tools/stack-bench/src/evidence/harness-errors.ts b/tools/stack-bench/src/evidence/harness-errors.ts
new file mode 100644
index 00000000000..6c99187a6eb
--- /dev/null
+++ b/tools/stack-bench/src/evidence/harness-errors.ts
@@ -0,0 +1,58 @@
+// Only spawn and timeout failures are harness failures; command exits can describe app defects.
+const INFRASTRUCTURE_CODES = new Set(['ETIMEDOUT', 'ENOENT', 'EACCES', 'EPERM', 'EPIPE']);
+const BROWSER_INFRASTRUCTURE_FAILURE = Symbol('browserInfrastructureFailure');
+
+interface ErrorDetails {
+  readonly [BROWSER_INFRASTRUCTURE_FAILURE]?: unknown;
+  readonly code?: unknown;
+  readonly message?: unknown;
+  readonly path?: unknown;
+  readonly spawnfile?: unknown;
+  readonly stderr?: unknown;
+  readonly stdout?: unknown;
+}
+
+const errorDetails = (error: unknown): ErrorDetails =>
+  error !== null && (typeof error === 'object' || typeof error === 'function')
+    ? error as ErrorDetails
+    : {};
+
+export function harnessProcessFailure(error: unknown): string | null {
+  if (!error) return null;
+  const value = errorDetails(error);
+  const detail = `${String(value.message ?? '')}\n${String(value.stderr ?? '')}\n${String(value.stdout ?? '')}`;
+  if (/No such container:/i.test(detail)) {
+    return 'database container selected by the harness is unavailable';
+  }
+  if (typeof value.code !== 'string' || !INFRASTRUCTURE_CODES.has(value.code)) return null;
+  const command = String(value.path ?? value.spawnfile ?? 'child process');
+  return `${command} failed in the harness (${value.code})`;
+}
+
+export function browserInfrastructureFailure(stage: string, error: unknown): Error {
+  const message = errorDetails(error).message;
+  const failure = new Error(`browser ${stage} failed: ${String(message ?? error)}`,
+    { cause: error });
+  Object.defineProperty(failure, BROWSER_INFRASTRUCTURE_FAILURE, { value: true });
+  return failure;
+}
+
+export async function runBrowserInfrastructureOperation<Result>(
+  stage: string,
+  operation: () => Result | Promise<Result>,
+): Promise<Result> {
+  try { return await operation(); }
+  catch (error) { throw browserInfrastructureFailure(stage, error); }
+}
+
+// Browser control failures are not proof that an application invariant failed.
+// Navigation stays outside the explicit infrastructure wrapper, so ordinary
+// application reachability failures keep their application-failure outcome.
+export function harnessBrowserFailure(error: unknown): string | null {
+  const value = errorDetails(error);
+  const message = String(value.message ?? error ?? '');
+  if (value[BROWSER_INFRASTRUCTURE_FAILURE]) return message;
+  if (!/(?:Target|Page) crashed|Target page, context or browser has been closed/i.test(message)) return null;
+  const firstLine = message.split(/\r?\n/, 1)[0] ?? '';
+  return `browser target failed in the harness (${firstLine.slice(0, 200)})`;
+}
diff --git a/tools/stack-bench/src/evidence/mutation-analysis.ts b/tools/stack-bench/src/evidence/mutation-analysis.ts
new file mode 100644
index 00000000000..3fcea4734d1
--- /dev/null
+++ b/tools/stack-bench/src/evidence/mutation-analysis.ts
@@ -0,0 +1,556 @@
+import { readFileSync } from 'node:fs';
+import { resolve, sep } from 'node:path';
+import { criterionEvidence, evidenceDisposition } from './check-evidence.js';
+import type { CheckEvidenceStatus, CheckOutcomeKind } from './check-evidence.js';
+import type { RecipeRelease } from '../composition/recipe-release.js';
+import { STACK_BENCH_ROOT } from '../package-root.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+export interface MutationEditDefinition {
+  file?: unknown;
+  find?: unknown;
+  replace?: unknown;
+}
+
+export interface MutationDefinition {
+  id?: unknown;
+  desc?: unknown;
+  file?: unknown;
+  find?: unknown;
+  replace?: unknown;
+  edits?: unknown;
+  targets?: unknown;
+  scenario?: unknown;
+  breaks?: unknown;
+  kills?: unknown;
+  [key: string]: unknown;
+}
+
+export interface MutationFileEdit {
+  file: string;
+  find: string;
+  replace: string;
+}
+
+export interface MutationValidationIssue {
+  kind: string;
+  mutation?: unknown;
+}
+
+export interface MutationManifest {
+  scenario?: unknown;
+  mutations?: MutationDefinition[];
+}
+
+export interface LoadedMutationEdit extends MutationEditDefinition {
+  find: string;
+  replace: string;
+  file?: string;
+}
+
+export interface LoadedMutationDefinition extends MutationDefinition {
+  id: string;
+  desc?: string;
+  file?: string;
+  scenario?: string;
+  targets: string[];
+  edits: LoadedMutationEdit[];
+}
+
+export interface LoadedMutationManifest extends MutationManifest {
+  schemaVersion: 2;
+  status: string;
+  fixtureSha256: string;
+  backend: string;
+  track: string;
+  level?: unknown;
+  note?: unknown;
+  scenario?: string;
+  mutations: LoadedMutationDefinition[];
+}
+
+function object(value: unknown): value is UnknownRecord {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function exact(value: UnknownRecord, allowed: ReadonlySet<string>, at: string): void {
+  const unknown = Object.keys(value).filter(key => !allowed.has(key));
+  if (unknown.length) throw new Error(`${at} has unknown fields: ${unknown.join(', ')}`);
+}
+
+function requiredString(value: unknown, at: string): string {
+  if (typeof value !== 'string' || !value) throw new Error(`${at} must be a non-empty string`);
+  return value;
+}
+
+function optionalString(value: unknown, at: string): string | undefined {
+  return value === undefined ? undefined : requiredString(value, at);
+}
+
+function stringList(value: unknown, at: string): string[] {
+  if (!Array.isArray(value) || value.length === 0) throw new Error(`${at} must be a non-empty string array`);
+  return value.map((item, index) => requiredString(item, `${at}[${index}]`));
+}
+
+function loadedMutationEdit(value: unknown, at: string): LoadedMutationEdit {
+  if (!object(value)) throw new Error(`${at} must be an object`);
+  exact(value, new Set(['file', 'find', 'replace']), at);
+  const file = optionalString(value.file, `${at}.file`);
+  return { ...value, find: requiredString(value.find, `${at}.find`),
+    replace: requiredString(value.replace, `${at}.replace`),
+    ...(file === undefined ? {} : { file }) };
+}
+
+function loadedMutation(value: unknown, at: string): LoadedMutationDefinition {
+  if (!object(value)) throw new Error(`${at} must be an object`);
+  exact(value, new Set(['id', 'desc', 'file', 'find', 'replace', 'edits', 'targets', 'scenario', 'breaks',
+    'kills']), at);
+  if (!Array.isArray(value.edits) || value.edits.length === 0) {
+    throw new Error(`${at}.edits must be a non-empty array`);
+  }
+  const file = optionalString(value.file, `${at}.file`);
+  const desc = optionalString(value.desc, `${at}.desc`);
+  const scenario = optionalString(value.scenario, `${at}.scenario`);
+  return { ...value, id: requiredString(value.id, `${at}.id`),
+    targets: stringList(value.targets, `${at}.targets`),
+    edits: value.edits.map((edit, index) => loadedMutationEdit(edit, `${at}.edits[${index}]`)),
+    ...(desc === undefined ? {} : { desc }),
+    ...(file === undefined ? {} : { file }),
+    ...(scenario === undefined ? {} : { scenario }) };
+}
+
+export function readMutationManifest(path: string): LoadedMutationManifest {
+  const value: unknown = JSON.parse(readFileSync(path, 'utf8'));
+  if (!object(value)) throw new Error(`mutation manifest ${path} must be an object`);
+  exact(value, new Set(['schemaVersion', 'status', 'fixtureSha256', 'backend', 'track', 'scenario',
+    'note', 'mutations']), `mutation manifest ${path}`);
+  if (value.schemaVersion !== 2) throw new Error(`mutation manifest ${path} must use schema version 2`);
+  if (!Array.isArray(value.mutations) || value.mutations.length === 0) {
+    throw new Error(`mutation manifest ${path}.mutations must be a non-empty array`);
+  }
+  const scenario = optionalString(value.scenario, `${path}.scenario`);
+  const status = requiredString(value.status, `${path}.status`);
+  if (!['candidate', 'active'].includes(status)) {
+    throw new Error(`mutation manifest ${path}.status must be candidate or active`);
+  }
+  const fixtureSha256 = requiredString(value.fixtureSha256, `${path}.fixtureSha256`);
+  if (!/^[a-f0-9]{64}$/.test(fixtureSha256)) {
+    throw new Error(`mutation manifest ${path}.fixtureSha256 must be 64 lowercase hexadecimal characters`);
+  }
+  const loaded = { ...value, schemaVersion: 2 as const, status,
+    fixtureSha256,
+    backend: requiredString(value.backend, `${path}.backend`),
+    track: requiredString(value.track, `${path}.track`),
+    mutations: value.mutations.map((mutation, index) => loadedMutation(mutation, `${path}.mutations[${index}]`)),
+    ...(scenario === undefined ? {} : { scenario }) };
+  const definitions = validateMutationDefinitions(loaded.mutations,
+    { defaultScenario: loaded.scenario, requireScenario: true });
+  if (!definitions.ok) {
+    throw new Error(`mutation manifest ${path} is invalid: ${definitions.issues.map(issue =>
+      `${String(issue.mutation ?? '<unnamed>')}:${issue.kind}`).join(', ')}`);
+  }
+  return loaded;
+}
+
+interface CriterionReport {
+  id?: string;
+  stableKey?: unknown;
+  evidence?: unknown;
+}
+
+interface FeatureReport {
+  id?: unknown;
+  criteria?: CriterionReport[];
+}
+
+interface SelectionCheck {
+  stableKey?: unknown;
+}
+
+interface MutationReport {
+  total?: unknown;
+  max?: unknown;
+  features?: FeatureReport[];
+  selection?: { checks?: SelectionCheck[] };
+}
+
+interface IndexedCriterion {
+  feature: unknown;
+  criterion: string | number | undefined;
+  passed: boolean;
+  measured: boolean;
+  applicationFailure: boolean;
+  outcomeKind: CheckOutcomeKind;
+  status: CheckEvidenceStatus;
+  phase: 'setup' | 'assertion';
+  detail: string | null;
+}
+
+interface SetupFailure {
+  feature: unknown;
+  detail: string | null;
+  status: CheckEvidenceStatus;
+  outcomeKind: CheckOutcomeKind;
+  code: string;
+}
+
+interface IndexedMutationReport {
+  criteria: Map<string, IndexedCriterion>;
+  setupFailures: SetupFailure[];
+}
+
+interface ArtifactIdentityLike {
+  id?: unknown;
+  version?: unknown;
+  sha256?: unknown;
+  state?: unknown;
+}
+
+interface MutationSuite extends MutationReport {
+  [key: string]: unknown;
+}
+
+interface MutationBundle {
+  backend?: unknown;
+  track?: unknown;
+  level?: unknown;
+  source?: { sha256?: unknown };
+  recipeRelease?: { id?: unknown; version?: unknown; contentSha256?: unknown };
+  artifactEnvelope?: { identities?: Record<string, ArtifactIdentityLike | undefined> };
+  suites?: Record<string, MutationSuite>;
+}
+
+interface ExpectedBaseline {
+  backend: unknown;
+  track: unknown;
+  level: unknown;
+  fixtureSha256: unknown;
+  recipe: { id: unknown; version: unknown; sha256: unknown };
+  identities?: Record<string, ArtifactIdentityLike | undefined>;
+  selectedCheckKeys: Iterable<string>;
+}
+
+export interface MutationAnalysisIssue extends UnknownRecord {
+  kind: string;
+}
+
+export type MutationClassificationStatus =
+  | 'CAUGHT'
+  | 'INVALID_REPORT'
+  | 'INVALID_SETUP'
+  | 'INVALID_HARNESS_FAILURE'
+  | 'INVALID_INCONCLUSIVE'
+  | 'WRONG_CRITERION'
+  | 'SURVIVED'
+  | 'CAUGHT_COLLATERAL';
+
+export function isRetryableMutationResult(status: MutationClassificationStatus): boolean {
+  return status === 'INVALID_SETUP'
+    || status === 'INVALID_HARNESS_FAILURE'
+    || status === 'INVALID_INCONCLUSIVE';
+}
+
+function featureKey(id: unknown): string {
+  return String(id);
+}
+
+function criterionKey(feature: unknown, criterion: unknown): string {
+  return `${featureKey(feature)}:${String(criterion)}`;
+}
+
+export function mutationEdits(mutation: MutationDefinition): MutationEditDefinition[] {
+  const edits = mutation.edits ?? (mutation.find != null || mutation.replace != null
+    ? [{ find: mutation.find, replace: mutation.replace }] : []);
+  return edits as MutationEditDefinition[];
+}
+
+export function mutationFileEdits(mutation: MutationDefinition): MutationFileEdit[] {
+  return mutationEdits(mutation).map(edit => ({
+    file: edit.file ?? mutation.file,
+    find: edit.find,
+    replace: edit.replace,
+  })) as MutationFileEdit[];
+}
+
+export function mutationTargetKeys(mutation: MutationDefinition): string[] {
+  return Array.isArray(mutation.targets) ? mutation.targets as string[] : [];
+}
+
+export function mutationScenario(
+  manifest: Pick<MutationManifest, 'scenario'> | null | undefined,
+  mutation: MutationDefinition | null | undefined,
+): string | null {
+  const scenario = mutation?.scenario ?? manifest?.scenario;
+  return typeof scenario === 'string' && scenario.trim() ? scenario : null;
+}
+
+export function groupMutationsByScenario(manifest: MutationManifest): Map<string, MutationDefinition[]> {
+  const groups = new Map<string, MutationDefinition[]>();
+  for (const mutation of manifest?.mutations ?? []) {
+    const scenario = mutationScenario(manifest, mutation);
+    if (!scenario) throw new Error(`mutation ${mutation?.id ?? '<unnamed>'} has no scenario`);
+    const group = groups.get(scenario) ?? [];
+    group.push(mutation);
+    groups.set(scenario, group);
+  }
+  return groups;
+}
+
+export function resolveMutationScenarioPath(scenario: string): string {
+  const tracksRoot = resolve(STACK_BENCH_ROOT, 'tracks');
+  const target = resolve(STACK_BENCH_ROOT, scenario);
+  if (target === tracksRoot || !target.startsWith(`${tracksRoot}${sep}`)) {
+    throw new Error(`mutation scenario escapes the tracks directory: ${scenario}`);
+  }
+  return target;
+}
+
+export function releaseScenarioCheckKeys(
+  release: RecipeRelease | null | undefined,
+  trackDir: string,
+  scenarioPath: string,
+  selectedCheckKeys: Iterable<string> | null = null,
+): string[] {
+  if (!release || !Array.isArray(release.checkCatalog)) {
+    throw new Error('recipe-bound mutation grading requires a compiled release check catalog');
+  }
+  const selectedScenario = resolve(scenarioPath);
+  const selected = selectedCheckKeys === null ? null : new Set<string>(selectedCheckKeys);
+  const keys = release.checkCatalog
+    .filter(check => Number(check.points) > 0
+      && (selected === null || selected.has(check.stableKey))
+      && resolve(trackDir, check.source as string) === selectedScenario)
+    .map(check => check.stableKey);
+  if (keys.length === 0) {
+    throw new Error(`mutation scenario ${scenarioPath} has no checks in the exact recipe release`);
+  }
+  return keys;
+}
+
+export function resolveMutationFile(app: string, file: string): string {
+  const root = resolve(app);
+  const target = resolve(root, file);
+  if (target === root || !target.startsWith(`${root}${sep}`)) {
+    throw new Error(`mutation file escapes the app directory: ${file}`);
+  }
+  return target;
+}
+
+export function validateMutationDefinitions(
+  mutations: MutationDefinition[] | undefined,
+  { defaultScenario = null, requireScenario = false }:
+    { defaultScenario?: string | null; requireScenario?: boolean } = {},
+): { ok: boolean; issues: MutationValidationIssue[] } {
+  const issues: MutationValidationIssue[] = [];
+  const ids = new Set<string>();
+  for (const mutation of mutations ?? []) {
+    if (typeof mutation.id !== 'string' || !mutation.id) issues.push({ kind: 'bad_id', mutation: mutation.id });
+    else if (ids.has(mutation.id)) issues.push({ kind: 'duplicate_id', mutation: mutation.id });
+    else ids.add(mutation.id);
+    const edits = mutationEdits(mutation);
+    const hasDefaultFile = typeof mutation.file === 'string' && Boolean(mutation.file);
+    if (!hasDefaultFile && !edits.every(edit => typeof edit?.file === 'string' && edit.file)) {
+      issues.push({ kind: 'bad_file', mutation: mutation.id });
+    }
+    if (mutation.file !== undefined && !hasDefaultFile) {
+      issues.push({ kind: 'bad_file', mutation: mutation.id });
+    }
+    if (mutation.scenario !== undefined
+      && (typeof mutation.scenario !== 'string' || !mutation.scenario.trim())) {
+      issues.push({ kind: 'bad_scenario', mutation: mutation.id });
+    }
+    if (requireScenario && !mutationScenario({ scenario: defaultScenario }, mutation)) {
+      issues.push({ kind: 'missing_scenario', mutation: mutation.id });
+    }
+    if (!Array.isArray(mutation.targets) || mutation.targets.length === 0
+      || mutation.targets.some(target => typeof target !== 'string' || !target.trim())
+      || new Set(mutation.targets).size !== mutation.targets.length) {
+      issues.push({ kind: 'bad_targets', mutation: mutation.id });
+    }
+    if (mutation.breaks != null || mutation.kills != null) {
+      issues.push({ kind: 'legacy_targets', mutation: mutation.id });
+    }
+    if (edits.length === 0) issues.push({ kind: 'missing_edits', mutation: mutation.id });
+    for (const edit of edits) {
+      if (edit.file !== undefined && (typeof edit.file !== 'string' || !edit.file)) {
+        issues.push({ kind: 'bad_file', mutation: mutation.id });
+      }
+      if (typeof edit.find !== 'string' || !edit.find || typeof edit.replace !== 'string' ||
+        edit.find === edit.replace) issues.push({ kind: 'bad_edit', mutation: mutation.id });
+    }
+  }
+  return { ok: issues.length === 0, issues };
+}
+
+export function indexMutationReport(report: MutationReport | null | undefined): IndexedMutationReport {
+  const criteria = new Map<string, IndexedCriterion>();
+  const setupFailures = new Map<string, SetupFailure>();
+  for (const feature of report?.features ?? []) {
+    for (const criterion of feature.criteria ?? []) {
+      const evidence = criterionEvidence(criterion);
+      const disposition = evidenceDisposition(evidence);
+      if (evidence.phase === 'setup' && !disposition.passed) {
+        setupFailures.set(featureKey(feature.id), { feature: feature.id, detail: evidence.summary,
+          status: evidence.status, outcomeKind: disposition.outcomeKind, code: evidence.code });
+      }
+      const key = typeof criterion.stableKey === 'string' && criterion.stableKey
+        ? criterion.stableKey : criterionKey(feature.id, criterion.id);
+      if (criteria.has(key)) throw new Error(`duplicate mutation criterion identity: ${key}`);
+      criteria.set(key, {
+        feature: feature.id,
+        criterion: criterion.id,
+        passed: disposition.passed,
+        measured: disposition.measured,
+        applicationFailure: disposition.applicationFailure,
+        outcomeKind: disposition.outcomeKind,
+        status: evidence.status,
+        phase: evidence.phase,
+        detail: evidence.summary,
+      });
+    }
+  }
+  return { criteria, setupFailures: [...setupFailures.values()] };
+}
+
+function stableKeys(report: MutationReport | null | undefined): unknown[] {
+  return (report?.selection?.checks ?? []).map(check => check.stableKey).sort();
+}
+
+function identityFields(identity: ArtifactIdentityLike | null | undefined): UnknownRecord {
+  return {
+    id: identity?.id ?? null,
+    version: identity?.version ?? null,
+    sha256: identity?.sha256 ?? null,
+    state: identity?.state ?? null,
+  };
+}
+
+export function reusableMutationBaseline(
+  bundle: MutationBundle | null | undefined,
+  expected: ExpectedBaseline,
+): { ok: false; reason: string } | { ok: true; report: MutationSuite } {
+  const release = bundle?.recipeRelease;
+  const identities = bundle?.artifactEnvelope?.identities ?? {};
+  const mismatches: string[] = [];
+  if (bundle?.backend !== expected.backend) mismatches.push('backend');
+  if (bundle?.track !== expected.track) mismatches.push('track');
+  if (Number(bundle?.level) !== Number(expected.level)) mismatches.push('level');
+  if (bundle?.source?.sha256 !== expected.fixtureSha256) mismatches.push('fixture');
+  if (release?.id !== expected.recipe.id || release?.version !== expected.recipe.version
+      || release?.contentSha256 !== expected.recipe.sha256) mismatches.push('recipe');
+  for (const key of ['engine', 'calibration', 'stackAdapter']) {
+    if (JSON.stringify(identityFields(identities[key]))
+        !== JSON.stringify(identityFields(expected.identities?.[key]))) mismatches.push(key);
+  }
+  if (mismatches.length) {
+    return { ok: false, reason: `clean baseline identity differs: ${mismatches.join(', ')}` };
+  }
+
+  const requested = [...expected.selectedCheckKeys].sort();
+  const candidates = Object.values(bundle?.suites ?? {}).filter(suite =>
+    JSON.stringify(stableKeys(suite)) === JSON.stringify(requested));
+  if (candidates.length !== 1) {
+    return { ok: false, reason: `clean baseline has ${candidates.length} exact scenario matches` };
+  }
+  return { ok: true, report: candidates[0]! };
+}
+
+export function validateMutationBaseline(
+  report: MutationReport | null | undefined,
+  mutations: MutationDefinition[],
+): { ok: boolean; issues: MutationAnalysisIssue[] } {
+  const indexed = indexMutationReport(report);
+  const issues: MutationAnalysisIssue[] = [];
+  if (indexed.criteria.size === 0) issues.push({ kind: 'empty_report' });
+  if (Number(report?.total) !== Number(report?.max)) {
+    issues.push({ kind: 'score_not_full', total: report?.total, max: report?.max });
+  }
+  for (const failure of indexed.setupFailures) issues.push({ kind: 'setup_failure', ...failure });
+  for (const item of indexed.criteria.values()) {
+    if (!item.passed) issues.push({ kind: item.outcomeKind === 'harness_failure' ? 'harness_failure'
+      : item.outcomeKind === 'inconclusive' ? 'inconclusive' : 'criterion_failure', ...item });
+  }
+  for (const mutation of mutations) {
+    for (const key of mutationTargetKeys(mutation)) {
+      if (!indexed.criteria.has(key)) {
+        const [feature, ...criterion] = key.split(':');
+        issues.push({ kind: 'missing_target', mutation: mutation.id,
+          feature, criterion: criterion.join(':') });
+      }
+    }
+  }
+  return { ok: issues.length === 0, issues };
+}
+
+export function isRetryableMutationBaseline(
+  issues: ReadonlyArray<{ kind: string }> | null | undefined,
+): boolean {
+  const kinds = new Set((issues ?? []).map(issue => issue.kind));
+  if (!kinds.size) return false;
+  if (kinds.has('empty_report') || kinds.has('missing_target') || kinds.has('criterion_failure')) {
+    return false;
+  }
+  return kinds.has('setup_failure') || kinds.has('harness_failure') || kinds.has('inconclusive');
+}
+
+export function classifyMutationResult(
+  baselineReport: MutationReport,
+  mutantReport: MutationReport,
+  mutation: MutationDefinition,
+): {
+  status: MutationClassificationStatus;
+  targetKeys: string[];
+  targetMissing: string[];
+  targetHarnessFailures: string[];
+  targetInconclusive: string[];
+  targetSurvived: string[];
+  collateral: Array<IndexedCriterion & { key: string; expected: boolean }>;
+  collateralHarnessFailures: string[];
+  collateralInconclusive: string[];
+  setupFailures: SetupFailure[];
+  missing: string[];
+  regressions: Array<IndexedCriterion & { key: string; expected: boolean }>;
+} {
+  const baseline = indexMutationReport(baselineReport);
+  const mutant = indexMutationReport(mutantReport);
+  const targetKeys = new Set(mutationTargetKeys(mutation));
+  const missing = [...baseline.criteria.keys()].filter(key => !mutant.criteria.has(key));
+  const setupFailures = mutant.setupFailures.filter(item =>
+    !baseline.setupFailures.some(base => featureKey(base.feature) === featureKey(item.feature)));
+  const regressions: Array<IndexedCriterion & { key: string; expected: boolean }> = [];
+  for (const [key, before] of baseline.criteria) {
+    const after = mutant.criteria.get(key);
+    if (!before.passed || !after?.applicationFailure) continue;
+    regressions.push({ ...after, key, expected: targetKeys.has(key) });
+  }
+  const targets = [...targetKeys].map(key => ({ key, result: mutant.criteria.get(key) }));
+  const targetMissing = targets.filter(item => !item.result).map(item => item.key);
+  const targetHarnessFailures = targets.filter(item => item.result?.outcomeKind === 'harness_failure')
+    .map(item => item.key);
+  const targetInconclusive = targets.filter(item => item.result?.outcomeKind === 'inconclusive')
+    .map(item => item.key);
+  const targetSurvived = targets.filter(item => item.result?.passed).map(item => item.key);
+  const collateral = regressions.filter(item => !item.expected);
+  const collateralHarnessFailures = [...baseline.criteria].filter(([key, before]) =>
+    before.passed && !targetKeys.has(key)
+      && mutant.criteria.get(key)?.outcomeKind === 'harness_failure').map(([key]) => key);
+  const collateralInconclusive = [...baseline.criteria].filter(([key, before]) =>
+    before.passed && !targetKeys.has(key)
+      && mutant.criteria.get(key)?.outcomeKind === 'inconclusive').map(([key]) => key);
+
+  let status: MutationClassificationStatus = 'CAUGHT';
+  if (targetKeys.size === 0 || missing.length || targetMissing.length) status = 'INVALID_REPORT';
+  else if (setupFailures.length) status = 'INVALID_SETUP';
+  else if (targetHarnessFailures.length || collateralHarnessFailures.length) {
+    status = 'INVALID_HARNESS_FAILURE';
+  }
+  else if (targetInconclusive.length || collateralInconclusive.length) status = 'INVALID_INCONCLUSIVE';
+  else if (targetSurvived.length && collateral.length) status = 'WRONG_CRITERION';
+  else if (targetSurvived.length) status = 'SURVIVED';
+  else if (collateral.length) status = 'CAUGHT_COLLATERAL';
+
+  return { status, targetKeys: [...targetKeys], targetMissing, targetHarnessFailures, targetInconclusive,
+    targetSurvived, collateral, collateralHarnessFailures, collateralInconclusive,
+    setupFailures, missing, regressions };
+}
diff --git a/tools/stack-bench/src/evidence/mutation-checkpoint.ts b/tools/stack-bench/src/evidence/mutation-checkpoint.ts
new file mode 100644
index 00000000000..6c1f14c2291
--- /dev/null
+++ b/tools/stack-bench/src/evidence/mutation-checkpoint.ts
@@ -0,0 +1,93 @@
+import { isDeepStrictEqual } from 'node:util';
+
+type UnknownRecord = Record<string, unknown>;
+
+export interface MutationCheckpointGroup extends UnknownRecord {
+  scenario: string;
+  identitySha256: string;
+  mutationIds: string[];
+}
+
+export interface MutationCheckpointIdentity extends UnknownRecord {
+  schemaVersion: 1;
+  engineSha256: unknown;
+  recipeSha256: unknown;
+  fixtureSha256: unknown;
+  calibrationSha256: unknown;
+  imageId: unknown;
+  backend: unknown;
+  track: unknown;
+  level: unknown;
+  trackSha256: unknown;
+  shard: unknown;
+  groups: MutationCheckpointGroup[];
+}
+
+export interface MutationCheckpointResult extends UnknownRecord {
+  id: string;
+  scenario: string;
+}
+
+export interface MutationCheckpointBaseline extends UnknownRecord {
+  scenario: string;
+  identitySha256: string;
+}
+
+export interface MutationCheckpointEvidence {
+  checkpoint?: MutationCheckpointIdentity;
+  results?: MutationCheckpointResult[];
+  baseline?: { scenarios?: MutationCheckpointBaseline[] };
+}
+
+const IDENTITY_FIELDS = Object.freeze([
+  'engineSha256',
+  'recipeSha256',
+  'fixtureSha256',
+  'calibrationSha256',
+  'imageId',
+  'backend',
+  'track',
+  'level',
+  'trackSha256',
+  'shard',
+] as const);
+
+function groupsByScenario(
+  groups: readonly MutationCheckpointGroup[],
+  at: string,
+): Map<string, MutationCheckpointGroup> {
+  const result = new Map<string, MutationCheckpointGroup>();
+  for (const group of groups) {
+    if (result.has(group.scenario)) throw new Error(`${at} duplicates scenario ${group.scenario}`);
+    result.set(group.scenario, group);
+  }
+  return result;
+}
+
+export function reusableMutationEvidence(
+  prior: MutationCheckpointEvidence | null | undefined,
+  identity: MutationCheckpointIdentity,
+): { results: MutationCheckpointResult[]; baselines: MutationCheckpointBaseline[] } {
+  const checkpoint = prior?.checkpoint;
+  if (!checkpoint || checkpoint.schemaVersion !== 1) {
+    throw new Error('mutation checkpoint is not resumable');
+  }
+  for (const field of IDENTITY_FIELDS) {
+    if (!isDeepStrictEqual(checkpoint[field], identity[field])) {
+      throw new Error(`mutation checkpoint ${field} does not match the current run`);
+    }
+  }
+  const currentGroups = groupsByScenario(identity.groups, 'current mutation groups');
+  groupsByScenario(checkpoint.groups ?? [], 'checkpoint mutation groups');
+  const reusableScenarios = new Set((checkpoint.groups ?? [])
+    .filter(group => currentGroups.get(group.scenario)?.identitySha256 === group.identitySha256)
+    .map(group => group.scenario));
+  const validMutationIds = new Set(identity.groups
+    .filter(group => reusableScenarios.has(group.scenario)).flatMap(group => group.mutationIds));
+  const results = (prior.results ?? []).filter(result => validMutationIds.has(result.id)
+    && reusableScenarios.has(result.scenario));
+  const baselines = (prior.baseline?.scenarios ?? []).filter(baseline =>
+    reusableScenarios.has(baseline.scenario)
+    && currentGroups.get(baseline.scenario)?.identitySha256 === baseline.identitySha256);
+  return { results, baselines };
+}
diff --git a/tools/stack-bench/src/evidence/mutation-control.ts b/tools/stack-bench/src/evidence/mutation-control.ts
new file mode 100644
index 00000000000..a31094aeb7c
--- /dev/null
+++ b/tools/stack-bench/src/evidence/mutation-control.ts
@@ -0,0 +1,136 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+
+import { agentRecipeIdentity } from '../agents/agent-adapter-contract.js';
+import { portsFor } from '../composition/tracks.js';
+import type { Track } from '../composition/tracks.js';
+import { compiledEntrypoint } from '../package-root.js';
+import { ARTIFACT_FILE } from './artifacts.js';
+
+interface SelectedCheck {
+  stableKey?: unknown;
+}
+
+interface MutationRecipeTask {
+  agentRequest?: unknown;
+  request?: unknown;
+  selection?: {
+    scoredChecks?: Array<string | SelectedCheck>;
+    checks?: Array<string | SelectedCheck>;
+  };
+}
+
+export interface MutationControlArgs {
+  levelList?: number[];
+  level?: number;
+  out: string;
+  recipeTasks?: Map<number, MutationRecipeTask>;
+  recipe?: string | null;
+  mutations: string;
+  backend: string;
+  track: string;
+  runIndex: number;
+  parentAttemptId: string;
+  mutationShardIndex?: number;
+  mutationShardCount?: number;
+  mutationResumeFrom?: string;
+  mutationCheckpointOut?: string;
+  mutationBaselineBundle?: string;
+  expectedMutationCalibration?: unknown;
+  mutationMaxRuntimeMinutes?: number;
+  mutationImageId?: string;
+}
+
+interface MutationBaselineArgs {
+  out?: string;
+  levelList?: number[];
+  referenceMutationOnly?: boolean;
+  mutationBaselineBundle?: string;
+}
+
+export function pristineMutationBaselinePath(
+  args: MutationBaselineArgs,
+  exists: (path: string) => boolean = existsSync,
+): string | null {
+  if (args.referenceMutationOnly) return args.mutationBaselineBundle ?? null;
+  if (args.mutationBaselineBundle) return args.mutationBaselineBundle;
+  const level = args.levelList?.at(-1);
+  if (typeof level !== 'number' || !Number.isSafeInteger(level) || level < 1 || !args.out) return null;
+  const candidate = join(args.out, `first-build-l${level}-grading`, ARTIFACT_FILE.gradeBundle);
+  return exists(candidate) ? candidate : null;
+}
+
+const COMMAND_TIMEOUT_MS = 20 * 60_000;
+export const MUTATION_GRADE_MAX_TIMEOUT_MS = 15 * 60_000;
+
+export function mutationGradeTimeoutMs(deadlineMs: number, nowMs: number = Date.now()): number {
+  if (!Number.isFinite(deadlineMs) || !Number.isFinite(nowMs)) {
+    throw new Error('mutation grade deadline must be finite');
+  }
+  const remainingMs = Math.floor(deadlineMs - nowMs);
+  if (remainingMs <= 0) return 0;
+  return Math.min(MUTATION_GRADE_MAX_TIMEOUT_MS, remainingMs);
+}
+
+function restartSpecFor(args: MutationControlArgs, appDir: string, track: Track): {
+  backend: string;
+  app: string;
+  port: number | null;
+  probe: string;
+} {
+  const port = portsFor(track, args.backend, args.runIndex).vite ?? null;
+  return { backend: args.backend, app: appDir, port: port == null ? null : Number(port),
+    probe: '' };
+}
+
+export function mutationControlArgv(
+  args: MutationControlArgs,
+  appDir: string,
+  url: string,
+  track: Track,
+): string[] {
+  const level = args.levelList?.at(-1) ?? args.level;
+  if (typeof level !== 'number' || !Number.isSafeInteger(level) || level < 1) {
+    throw new Error('mutation control requires a positive integer run level');
+  }
+  const output = join(args.out, ARTIFACT_FILE.mutationControl);
+  const recipeTask = args.recipeTasks?.get(level)?.agentRequest
+    ?? args.recipeTasks?.get(level)?.request ?? null;
+  const recipe = agentRecipeIdentity(args.recipe, recipeTask);
+  const selection = args.recipeTasks?.get(level)?.selection;
+  const selectedCheckKeys = (selection?.scoredChecks ?? selection?.checks ?? [])
+    .map(check => typeof check === 'string' ? check : check?.stableKey)
+    .filter((stableKey): stableKey is string => typeof stableKey === 'string' && Boolean(stableKey));
+  return [compiledEntrypoint('grader', 'mutation-test.js'), '--app', appDir,
+    '--url', url, '--mutations', args.mutations, '--backend', args.backend,
+    '--track', args.track, '--run-index', String(args.runIndex), '--out', output,
+    '--level', String(level),
+    '--restart-spec', JSON.stringify(restartSpecFor(args, appDir, track)),
+    '--parent-attempt-id', args.parentAttemptId,
+    ...(args.mutationShardCount === undefined ? [] : [
+      '--mutation-shard-index', String(args.mutationShardIndex),
+      '--mutation-shard-count', String(args.mutationShardCount),
+    ]),
+    ...(args.mutationResumeFrom ? ['--resume-from', args.mutationResumeFrom] : []),
+    ...(args.mutationCheckpointOut ? ['--checkpoint-out', args.mutationCheckpointOut] : []),
+    ...(args.mutationBaselineBundle ? ['--baseline-bundle', args.mutationBaselineBundle] : []),
+    ...(args.expectedMutationCalibration ? [
+      '--expected-calibration-json', JSON.stringify(args.expectedMutationCalibration),
+    ] : []),
+    ...(args.mutationMaxRuntimeMinutes ? [
+      '--max-runtime-minutes', String(args.mutationMaxRuntimeMinutes),
+    ] : []),
+    ...(args.mutationImageId ? ['--image-id', args.mutationImageId] : []),
+    ...selectedCheckKeys.flatMap(stableKey => ['--selected-check', stableKey]),
+    ...(recipe ? ['--recipe', recipe] : [])];
+}
+
+export function mutationControlTimeoutMs(
+  maxRuntimeMinutes: number = 60,
+): number {
+  if (!Number.isFinite(maxRuntimeMinutes) || maxRuntimeMinutes <= 0) {
+    throw new Error('mutation control runtime limit must be a positive number');
+  }
+  const boundedBatch = (Number(maxRuntimeMinutes) + 20) * 60_000;
+  return Math.max(COMMAND_TIMEOUT_MS, boundedBatch);
+}
diff --git a/tools/stack-bench/src/evidence/mutation-shards.ts b/tools/stack-bench/src/evidence/mutation-shards.ts
new file mode 100644
index 00000000000..ee95bcd46fb
--- /dev/null
+++ b/tools/stack-bench/src/evidence/mutation-shards.ts
@@ -0,0 +1,144 @@
+export interface ShardMutation {
+  id?: unknown;
+  scenario?: unknown;
+  [key: string]: unknown;
+}
+
+export interface MutationShardResult {
+  id?: unknown;
+}
+
+export interface MutationShardPlan<TMutation extends ShardMutation> {
+  index: number;
+  count: number;
+  mutationIds: string[];
+  mutations: TMutation[];
+}
+
+export interface CompletedMutationShard<TResult extends MutationShardResult> {
+  index: number;
+  count: number;
+  mutationIds: string[];
+  results: TResult[];
+}
+
+interface MutationShardOptions {
+  index: number;
+  count: number;
+  defaultScenario?: string | null;
+}
+
+function fail(message: string): never {
+  throw new Error(`mutation shards: ${message}`);
+}
+
+function mutationIds(mutations: ShardMutation[]): string[] {
+  if (!Array.isArray(mutations)) fail('mutations must be an array');
+  const ids = mutations.map((mutation, index) => {
+    if (!mutation || typeof mutation.id !== 'string' || !mutation.id) {
+      fail(`mutation ${index} has no id`);
+    }
+    return mutation.id;
+  });
+  if (new Set(ids).size !== ids.length) fail('mutation ids must be unique');
+  return ids;
+}
+
+export function mutationWorkerSlots({ workerCount, runIndex, maxRunIndex }: {
+  workerCount: number;
+  runIndex: number;
+  maxRunIndex: number;
+}): number[] {
+  if (!Number.isInteger(workerCount) || workerCount < 1) {
+    fail('worker count must be a positive integer');
+  }
+  if (!Number.isInteger(runIndex) || runIndex < 0) {
+    fail('run index must be a non-negative integer');
+  }
+  if (!Number.isInteger(maxRunIndex) || maxRunIndex < 0) {
+    fail('maximum run index must be a non-negative integer');
+  }
+  const last = runIndex + workerCount - 1;
+  if (last > maxRunIndex) {
+    fail(`worker slots ${runIndex}-${last} exceed run-index cap ${maxRunIndex}`);
+  }
+  return Array.from({ length: workerCount }, (_, index) => runIndex + index);
+}
+
+function shardAssignments(
+  mutations: ShardMutation[],
+  count: number,
+  defaultScenario: string | null,
+): number[][] {
+  const workers: number[][] = Array.from({ length: count }, () => []);
+  mutations.forEach((mutation, position) => {
+    const scenario = mutation.scenario ?? defaultScenario;
+    if (typeof scenario !== 'string' || !scenario.trim()) {
+      fail(`mutation ${mutation.id} has no scenario`);
+    }
+    workers[position % count]!.push(position);
+  });
+  return workers;
+}
+
+export function mutationShard<TMutation extends ShardMutation>(
+  mutations: TMutation[],
+  { index, count, defaultScenario = null }: MutationShardOptions,
+): MutationShardPlan<TMutation> {
+  const ids = mutationIds(mutations);
+  if (!Number.isInteger(count) || count < 1) fail('shard count must be a positive integer');
+  if (!Number.isInteger(index) || index < 0 || index >= count) {
+    fail(`shard index must be from 0 through ${count - 1}`);
+  }
+  const positions = shardAssignments(mutations, count, defaultScenario)[index]!;
+  return {
+    index,
+    count,
+    mutationIds: positions.map(position => ids[position]!),
+    mutations: positions.map(position => mutations[position]!),
+  };
+}
+
+export function mergeMutationShards<
+  TMutation extends ShardMutation,
+  TResult extends MutationShardResult,
+>(
+  mutations: TMutation[],
+  shards: Array<CompletedMutationShard<TResult>>,
+  { defaultScenario = null }: { defaultScenario?: string | null } = {},
+): TResult[] {
+  const expected = mutationIds(mutations);
+  if (!Array.isArray(shards) || shards.length === 0) fail('shards must be a non-empty array');
+  const count = shards[0]?.count;
+  if (typeof count !== 'number' || !Number.isInteger(count) || count < 1
+    || shards.length !== count) {
+    fail('shards must contain the declared shard count');
+  }
+  const byId = new Map<string, TResult>();
+  const indexes = new Set<number>();
+  for (const shard of shards) {
+    if (shard?.count !== count || !Number.isInteger(shard.index)
+        || shard.index < 0 || shard.index >= count || indexes.has(shard.index)) {
+      fail('shard coordinates are invalid or duplicated');
+    }
+    indexes.add(shard.index);
+    const assigned = mutationShard(mutations,
+      { index: shard.index, count, defaultScenario }).mutationIds;
+    if (JSON.stringify(shard.mutationIds) !== JSON.stringify(assigned)) {
+      fail(`shard ${shard.index} does not contain its exact assigned mutation ids`);
+    }
+    if (!Array.isArray(shard.results) || shard.results.length !== assigned.length) {
+      fail(`shard ${shard.index} result count does not match its assignment`);
+    }
+    for (const result of shard.results) {
+      if (!result || typeof result.id !== 'string' || !assigned.includes(result.id)) {
+        fail(`shard ${shard.index} contains an unknown result`);
+      }
+      if (byId.has(result.id)) fail(`mutation ${result.id} appears more than once`);
+      byId.set(result.id, result);
+    }
+  }
+  const missing = expected.filter(id => !byId.has(id));
+  if (missing.length) fail(`missing mutation results: ${missing.join(', ')}`);
+  return expected.map(id => byId.get(id)!);
+}
diff --git a/tools/stack-bench/src/evidence/null-control-analysis.ts b/tools/stack-bench/src/evidence/null-control-analysis.ts
new file mode 100644
index 00000000000..0fa41ba6a39
--- /dev/null
+++ b/tools/stack-bench/src/evidence/null-control-analysis.ts
@@ -0,0 +1,150 @@
+import {
+  criterionEvidence,
+  evidenceDisposition,
+  type CheckEvidenceStatus,
+} from './check-evidence.js';
+
+type FailureStage = 'setup' | 'assertion';
+type NullCriterionStatus = 'expected_fail' | 'vacuous_pass' | 'oracle_gap';
+
+interface NullReportCriterion {
+  id?: string;
+  points?: unknown;
+  evidence?: unknown;
+}
+
+interface NullReportFeature {
+  id: string | number;
+  name?: string | null;
+  criteria?: readonly NullReportCriterion[] | null;
+}
+
+export interface NullReportSuite {
+  track: string;
+  level: number;
+  id: string;
+  scenario?: string;
+  report?: {
+    features?: readonly NullReportFeature[] | null;
+  } | null;
+}
+
+interface NullCriterionResult {
+  track: string;
+  level: number;
+  suite: string;
+  scenario: string | undefined;
+  feature: string | number;
+  featureName: string | null | undefined;
+  criterion: string | undefined;
+  points: number;
+  status: NullCriterionStatus;
+  evidenceStatus: CheckEvidenceStatus;
+  failureStage: FailureStage | null;
+  detail: string | null;
+}
+
+interface CriteriaSummary {
+  criteria: number;
+  points: number;
+}
+
+interface UnscoredResult {
+  status: CheckEvidenceStatus;
+  passed: boolean;
+  applicationFailure: boolean;
+  measured: boolean;
+}
+
+export function analyseNullReports(suites: readonly NullReportSuite[]) {
+  const criteria: NullCriterionResult[] = [];
+  const unscored: UnscoredResult[] = [];
+
+  for (const [suiteIndex, suite] of suites.entries()) {
+    const suiteAt = `suites[${suiteIndex}]`;
+    if (!suite.track || !suite.id || !Number.isSafeInteger(suite.level) || suite.level < 1) {
+      throw new Error(`${suiteAt} has an invalid track, level, or id`);
+    }
+    for (const [featureIndex, feature] of (suite.report?.features ?? []).entries()) {
+      const featureAt = `${suiteAt}.features[${featureIndex}]`;
+      if ((typeof feature.id !== 'string' || !feature.id)
+          && !Number.isSafeInteger(feature.id)) {
+        throw new Error(`${featureAt}.id is invalid`);
+      }
+      for (const [criterionIndex, criterion] of (feature.criteria ?? []).entries()) {
+        const points = criterion.points ?? 1;
+        if (typeof points !== 'number' || !Number.isSafeInteger(points) || points < 0) {
+          throw new Error(`${featureAt}.criteria[${criterionIndex}].points must be a non-negative integer`);
+        }
+        const evidence = criterionEvidence(criterion);
+        const disposition = evidenceDisposition(evidence);
+        if (points <= 0) {
+          unscored.push({
+            status: evidence.status,
+            passed: disposition.passed,
+            applicationFailure: disposition.applicationFailure,
+            measured: disposition.measured,
+          });
+          continue;
+        }
+        const status: NullCriterionStatus = disposition.passed
+          ? 'vacuous_pass'
+          : disposition.applicationFailure ? 'expected_fail' : 'oracle_gap';
+        const failureStage = status === 'expected_fail' ? evidence.phase : null;
+        criteria.push({
+          track: suite.track,
+          level: suite.level,
+          suite: suite.id,
+          scenario: suite.scenario,
+          feature: feature.id,
+          featureName: feature.name,
+          criterion: criterion.id,
+          points,
+          status,
+          evidenceStatus: evidence.status,
+          failureStage,
+          detail: evidence.summary,
+        });
+      }
+    }
+  }
+
+  const summarizeWhere = (
+    predicate: (criterion: NullCriterionResult) => boolean,
+  ): CriteriaSummary => {
+    const matches = criteria.filter(predicate);
+    return {
+      criteria: matches.length,
+      points: matches.reduce((total, item) => total + item.points, 0),
+    };
+  };
+  const summarize = (status: NullCriterionStatus): CriteriaSummary =>
+    summarizeWhere(item => item.status === status);
+
+  const summary = {
+    criteria: criteria.length,
+    points: criteria.reduce((total, item) => total + item.points, 0),
+    expectedFailures: summarize('expected_fail'),
+    expectedFailureStages: {
+      setup: summarizeWhere(
+        item => item.status === 'expected_fail' && item.failureStage === 'setup',
+      ),
+      assertion: summarizeWhere(
+        item => item.status === 'expected_fail' && item.failureStage === 'assertion',
+      ),
+    },
+    vacuousPasses: summarize('vacuous_pass'),
+    oracleGaps: summarize('oracle_gap'),
+    unscored: {
+      criteria: unscored.length,
+      passed: unscored.filter(item => item.passed).length,
+      failed: unscored.filter(item => item.applicationFailure).length,
+      inconclusive: unscored.filter(item => !item.measured).length,
+    },
+  };
+  return {
+    ok: summary.vacuousPasses.criteria === 0 && summary.oracleGaps.criteria === 0,
+    summary,
+    criteria,
+  };
+}
diff --git a/tools/stack-bench/src/evidence/outcomes.ts b/tools/stack-bench/src/evidence/outcomes.ts
new file mode 100644
index 00000000000..4fcd4dd7902
--- /dev/null
+++ b/tools/stack-bench/src/evidence/outcomes.ts
@@ -0,0 +1,255 @@
+import { criterionEvidence, evidenceDisposition } from './check-evidence.js';
+
+interface CleanupEvidence {
+  readonly status?: string;
+}
+
+export interface OutcomeCriterion {
+  readonly evidence?: unknown;
+  readonly id?: string;
+  readonly name?: string;
+  readonly points?: number;
+  readonly stableKey?: string;
+}
+
+export interface OutcomeFeature {
+  readonly cleanupEvidence?: CleanupEvidence;
+  readonly criteria?: readonly OutcomeCriterion[];
+  readonly id?: string;
+  readonly name?: string;
+}
+
+interface OutcomeSuite {
+  readonly cleanupEvidence?: CleanupEvidence;
+  readonly features?: readonly OutcomeFeature[];
+  readonly pass?: boolean;
+}
+
+interface SelectedCheck {
+  readonly points: number;
+  readonly stableKey: string;
+}
+
+interface OutcomeSelection {
+  readonly checks?: readonly SelectedCheck[];
+  readonly notRun?: readonly unknown[];
+  readonly reportedChecks?: readonly string[];
+}
+
+interface ScoreTotals {
+  readonly max?: number | null;
+  readonly regression?: { readonly max?: number | null; readonly score?: number | null } | null;
+  readonly score?: number | null;
+}
+
+export const RUN_OUTCOME_KINDS = Object.freeze([
+  'provider_failure',
+  'harness_failure',
+  'ungraded',
+  'app_failure',
+  'inconclusive',
+  'passed',
+  'incomplete',
+] as const);
+
+export type RunOutcomeKind = typeof RUN_OUTCOME_KINDS[number];
+
+export interface RunOutcome {
+  readonly kind: string;
+  readonly phase?: string;
+  readonly reason?: string | null;
+  readonly appFailures?: readonly string[];
+  readonly inconclusive?: readonly string[];
+  readonly harnessFailures?: readonly string[];
+  readonly provider?: unknown;
+}
+
+export interface OutcomeBundle {
+  readonly error?: string;
+  readonly outcome?: RunOutcome;
+  readonly selection?: OutcomeSelection | null;
+  readonly suites?: Readonly<Record<string, OutcomeSuite | null>>;
+  readonly totals?: ScoreTotals;
+}
+
+interface KeyedCriterion extends OutcomeCriterion { readonly key: string }
+
+interface ClassifiedOutcome extends RunOutcome {
+  readonly appFailures: readonly string[];
+  readonly harnessFailures: readonly string[];
+  readonly inconclusive: readonly string[];
+}
+
+interface LevelResult {
+  readonly level: number | string;
+  readonly outcome?: RunOutcome;
+}
+
+interface AggregateOutcome extends RunOutcome {
+  readonly levels: Readonly<Record<string, RunOutcome>>;
+}
+
+export function runOutcomeKind(value: unknown): RunOutcomeKind {
+  if (typeof value !== 'string' || !(RUN_OUTCOME_KINDS as readonly string[]).includes(value)) {
+    throw new Error(`invalid run outcome kind: ${String(value)}`);
+  }
+  return value as RunOutcomeKind;
+}
+
+function criteria(bundle: OutcomeBundle): KeyedCriterion[] {
+  return Object.entries(bundle?.suites ?? {}).flatMap(([suiteId, suite]) =>
+    (suite?.features ?? []).flatMap(feature =>
+      (feature.criteria ?? []).map(criterion => ({
+        ...criterion,
+        key: `${suiteId}/${feature.id ?? feature.name}/${criterion.id}`,
+      }))));
+}
+
+function cleanupFailureKeys(bundle: OutcomeBundle): string[] {
+  return Object.entries(bundle?.suites ?? {}).flatMap(([suiteId, suite]) => {
+    const keys = suite?.cleanupEvidence?.status === 'harness_failure'
+      ? [`${suiteId}/cleanup`] : [];
+    for (const feature of suite?.features ?? []) {
+      if (feature?.cleanupEvidence?.status === 'harness_failure') {
+        keys.push(`${suiteId}/${feature.id ?? feature.name}/cleanup`);
+      }
+    }
+    return keys;
+  });
+}
+
+function selectedScoreMismatch(bundle: OutcomeBundle, all: readonly KeyedCriterion[]): string | null {
+  const selection = bundle?.selection;
+  if (!Array.isArray(selection?.checks) || !Array.isArray(selection?.reportedChecks)
+      || selection.notRun?.length !== 0
+      || selection.reportedChecks.length !== selection.checks.length) return null;
+
+  const selected = new Map(selection.checks.map(check => [check.stableKey, check]));
+  if (selected.size !== selection.checks.length
+      || selection.reportedChecks.some(key => !selected.has(key))
+      || new Set(selection.reportedChecks).size !== selection.reportedChecks.length) {
+    return 'reported check scope disagrees with the selected check scope';
+  }
+
+  const reported = all.filter(criterion => criterion.stableKey !== undefined);
+  if (reported.length !== selected.size
+      || new Set(reported.map(criterion => criterion.stableKey)).size !== reported.length
+      || reported.some(criterion => !selected.has(criterion.stableKey))) {
+    return 'graded check evidence disagrees with the selected check scope';
+  }
+
+  let evidenceScore = 0;
+  let evidenceMax = 0;
+  for (const criterion of reported) {
+    const planned = selected.get(criterion.stableKey);
+    const points = criterion.points;
+    if (!Number.isSafeInteger(planned?.points) || planned.points < 0
+        || typeof points !== 'number' || points !== planned.points) {
+      return `graded points disagree with the selected definition for ${criterion.stableKey}`;
+    }
+    if (points <= 0) continue;
+    evidenceMax += points;
+    if (evidenceDisposition(criterionEvidence(criterion)).passed) evidenceScore += points;
+  }
+
+  const regression = bundle.totals?.regression;
+  const totalScore = bundle.totals?.score;
+  const totalMax = bundle.totals?.max;
+  const reportedScore = Number(totalScore) + Number(regression?.score ?? 0);
+  const reportedMax = Number(totalMax) + Number(regression?.max ?? 0);
+  if (![totalScore, totalMax, reportedScore, reportedMax].every(Number.isSafeInteger)
+      || reportedScore !== evidenceScore || reportedMax !== evidenceMax) {
+    return `reported score ${String(reportedScore)}/${String(reportedMax)} disagrees with `
+      + `check evidence ${evidenceScore}/${evidenceMax}`;
+  }
+  return null;
+}
+
+export function classifyBundle(bundle: OutcomeBundle | null | undefined): ClassifiedOutcome {
+  if (!bundle) return { kind: 'ungraded', phase: 'grading', reason: 'no grading bundle was produced',
+    appFailures: [], inconclusive: [], harnessFailures: [] };
+  const cleanupFailures = cleanupFailureKeys(bundle);
+  if (cleanupFailures.length) {
+    return { kind: 'harness_failure', phase: 'grading-cleanup',
+      reason: 'grader cleanup did not complete',
+      appFailures: bundle.outcome?.appFailures ?? [], inconclusive: [],
+      harnessFailures: cleanupFailures };
+  }
+  const declaredOutcome = bundle.outcome;
+  if (declaredOutcome && ['provider_failure', 'harness_failure'].includes(declaredOutcome.kind)) {
+    return { ...declaredOutcome, appFailures: [], inconclusive: [], harnessFailures: [] };
+  }
+  const selectedScopeComplete = Array.isArray(bundle.selection?.checks)
+    && bundle.selection.checks.length > 0
+    && bundle.selection.notRun?.length === 0
+    && bundle.selection.reportedChecks?.length === bundle.selection.checks.length;
+  if (bundle.outcome?.kind === 'app_failure' && !selectedScopeComplete) {
+    return { ...bundle.outcome, appFailures: bundle.outcome.appFailures ?? [], inconclusive: [],
+      harnessFailures: [] };
+  }
+  const hasSelectedScope = bundle.selection !== null && bundle.selection !== undefined;
+  if ((hasSelectedScope && !selectedScopeComplete)
+      || (!((bundle.totals?.max ?? 0) > 0) && !selectedScopeComplete)) {
+    return { kind: 'ungraded', phase: 'grading', reason: bundle.error ?? 'bundle has no scored denominator',
+      appFailures: [], inconclusive: [], harnessFailures: [] };
+  }
+  const all = criteria(bundle);
+  const scoreMismatch = selectedScoreMismatch(bundle, all);
+  if (scoreMismatch) {
+    return { kind: 'harness_failure', phase: 'grading', reason: scoreMismatch,
+      appFailures: [], inconclusive: [], harnessFailures: ['score-consistency'] };
+  }
+  // Zero-point criteria affect an outcome only in a zero-point-only scope.
+  const pointBearing = all.filter(criterion => Number(criterion.points) > 0);
+  const outcomeCriteria = pointBearing.length ? pointBearing : all;
+  const classified = outcomeCriteria.map(criterion => {
+    const evidence = criterionEvidence(criterion);
+    return { disposition: evidenceDisposition(evidence), key: criterion.key };
+  });
+  const keysFor = (kind: string): string[] =>
+    classified.filter(item => item.disposition.outcomeKind === kind)
+      .map(item => item.key);
+  const harnessFailures = keysFor('harness_failure');
+  const inconclusive = keysFor('inconclusive');
+  const appFailures = keysFor('app_failure');
+  if (bundle.suites?.lint?.pass === false) appFailures.unshift('contract-lint');
+  const kind = harnessFailures.length ? 'harness_failure'
+    : appFailures.length ? 'app_failure' : inconclusive.length ? 'inconclusive' : 'passed';
+  return { kind, phase: 'grading', reason: null, appFailures, inconclusive, harnessFailures };
+}
+
+export function aggregateRunOutcome(levels: readonly LevelResult[]): AggregateOutcome {
+  const priority: readonly RunOutcomeKind[] = ['harness_failure', 'provider_failure', 'ungraded',
+    'incomplete', 'app_failure', 'inconclusive', 'passed'];
+  const kinds = levels.map(level => level.outcome?.kind ?? 'ungraded');
+  const kind = priority.find(candidate => kinds.includes(candidate)) ?? 'ungraded';
+  const selected = levels.find(level => (level.outcome?.kind ?? 'ungraded') === kind)?.outcome
+    ?? { kind };
+  return {
+    ...selected,
+    kind,
+    levels: Object.fromEntries(levels.map(level => [String(level.level), level.outcome ?? {
+      kind: 'ungraded', reason: 'level has no structured outcome',
+    }])),
+  };
+}
+
+export function runExitCode(outcome: RunOutcome | null | undefined): 0 | 1 {
+  return ladderMayContinue(outcome) ? 0 : 1;
+}
+
+// Continue only from a measured baseline.
+export function ladderMayContinue(outcome: RunOutcome | null | undefined): boolean {
+  return (outcome?.kind === 'app_failure' || outcome?.kind === 'passed')
+    && (outcome.inconclusive?.length ?? 0) === 0
+    && (outcome.harnessFailures?.length ?? 0) === 0;
+}
+
+// Advance only after the current level passes.
+export function ladderMayAdvance(outcome: RunOutcome | null | undefined): boolean {
+  return outcome?.kind === 'passed';
+}
+
+export function mutationControlEligible(outcome: RunOutcome | null | undefined): boolean {
+  return outcome?.kind === 'passed';
+}
diff --git a/tools/stack-bench/src/evidence/pricing-authority.ts b/tools/stack-bench/src/evidence/pricing-authority.ts
new file mode 100644
index 00000000000..579f590ff9d
--- /dev/null
+++ b/tools/stack-bench/src/evidence/pricing-authority.ts
@@ -0,0 +1,57 @@
+export const PRICING_UNIT = 'USD-per-million-tokens';
+export const PRICING_RATE_FIELDS = Object.freeze([
+  'input', 'output', 'cacheWrite5m', 'cacheWrite1h', 'cacheRead',
+] as const);
+
+export type PricingRateField = typeof PRICING_RATE_FIELDS[number];
+export type PricingRates = Readonly<Record<PricingRateField, number>>;
+export interface PricingAuthority {
+  unit: typeof PRICING_UNIT;
+  rates: PricingRates;
+}
+
+const PRICING_RATE_FIELD_SET: ReadonlySet<string> = new Set(PRICING_RATE_FIELDS);
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+export function validatePricingRates(value: unknown, { at = 'pricing rates' }: {
+  at?: string;
+} = {}): PricingRates {
+  if (!object(value)) throw new Error(`${at} must be an object`);
+  const keys = Object.keys(value);
+  if (keys.length !== PRICING_RATE_FIELDS.length
+    || keys.some(key => !PRICING_RATE_FIELD_SET.has(key))) {
+    throw new Error(`${at} must contain only ${PRICING_RATE_FIELDS.join(', ')}`);
+  }
+  for (const field of PRICING_RATE_FIELDS) {
+    const rate = value[field];
+    if (typeof rate !== 'number' || !Number.isFinite(rate) || rate < 0) {
+      throw new Error(`${at}.${field} must be a non-negative number`);
+    }
+  }
+  return Object.freeze(Object.fromEntries(PRICING_RATE_FIELDS.map(field =>
+    [field, value[field]]))) as PricingRates;
+}
+
+export function validatePricingAuthority(value: unknown, { at = 'pricing' }: {
+  at?: string;
+} = {}): Readonly<PricingAuthority> {
+  if (!object(value) || Object.keys(value).some(key => !['unit', 'rates'].includes(key))) {
+    throw new Error(`${at} must contain only unit and rates`);
+  }
+  if (value.unit !== PRICING_UNIT) {
+    throw new Error(`${at}.unit must be ${PRICING_UNIT}`);
+  }
+  return Object.freeze({ unit: PRICING_UNIT,
+    rates: validatePricingRates(value.rates, { at: `${at}.rates` }) });
+}
+
+export function pricingRatesEqual(left: unknown, right: unknown): boolean {
+  try {
+    const a = validatePricingRates(left);
+    const b = validatePricingRates(right);
+    return PRICING_RATE_FIELDS.every(field => a[field] === b[field]);
+  } catch {
+    return false;
+  }
+}
diff --git a/tools/stack-bench/src/evidence/provenance.ts b/tools/stack-bench/src/evidence/provenance.ts
new file mode 100644
index 00000000000..cb5ca7d05a9
--- /dev/null
+++ b/tools/stack-bench/src/evidence/provenance.ts
@@ -0,0 +1,122 @@
+import { createHash } from 'node:crypto';
+import { readFileSync, readdirSync, type Dirent } from 'node:fs';
+import { join, relative, resolve } from 'node:path';
+
+import { compileScenarioDefinition } from '../composition/definition-compiler.js';
+
+export interface HashFilesResult {
+  sha256: string;
+  files: string[];
+}
+
+export interface RubricHash {
+  sha256: string;
+  criteria: number;
+  points: number;
+}
+
+export interface SessionProvenanceInput {
+  prompt: string;
+  skillsText?: string;
+  contractText?: string;
+  bugReportText?: string | null;
+  scenarioPaths: readonly string[];
+  trackDir: string;
+  trackManifestPath: string;
+}
+
+interface RubricRow {
+  file: string;
+  feature: string;
+  criterion: string;
+  points: number;
+}
+
+export const sha256 = (value: string | Buffer): string =>
+  createHash('sha256').update(value).digest('hex');
+
+// Hash paths and bytes with explicit framing. Hashing concatenated contents is
+// ambiguous (`ab`+`c` equals `a`+`bc`) and loses which file supplied a rubric.
+export function hashFiles(
+  paths: readonly string[],
+  { base = process.cwd() }: { base?: string } = {},
+): HashFilesResult {
+  const entries = [...new Set(paths.map(path => resolve(path)))]
+    .map(path => ({ path, name: relative(resolve(base), path).replaceAll('\\', '/') }))
+    .sort((a, b) => a.name.localeCompare(b.name));
+  const hash = createHash('sha256');
+  for (const entry of entries) {
+    const bytes = readFileSync(entry.path);
+    hash.update(`${entry.name.length}:${entry.name}:${bytes.length}:`);
+    hash.update(bytes);
+  }
+  return { sha256: hash.digest('hex'), files: entries.map(entry => entry.name) };
+}
+
+export function hashDirectory(
+  root: string,
+  { exclude = () => false }: {
+    exclude?: (name: string, entry: Dirent) => boolean;
+  } = {},
+): HashFilesResult {
+  const files: string[] = [];
+  const walk = (directory: string): void => {
+    for (const entry of readdirSync(directory, { withFileTypes: true })) {
+      const path = join(directory, entry.name);
+      const name = relative(root, path).replaceAll('\\', '/');
+      if (exclude(name, entry)) continue;
+      if (entry.isDirectory()) walk(path);
+      else if (entry.isFile()) files.push(path);
+    }
+  };
+  walk(resolve(root));
+  return hashFiles(files, { base: root });
+}
+
+// The rubric is the point-bearing definition, distinct from scenario mechanics.
+// A timing or selector edit changes scenariosSha256; a criterion/points edit
+// also changes rubricSha256 and therefore invalidates score comparison.
+export function hashRubric(
+  paths: readonly string[],
+  { base = process.cwd() }: { base?: string } = {},
+): RubricHash {
+  const rows: RubricRow[] = [];
+  for (const path of [...new Set(paths.map(item => resolve(item)))].sort()) {
+    const spec = compileScenarioDefinition(JSON.parse(readFileSync(path, 'utf8')), { source: path });
+    for (const feature of spec.features) {
+      for (const criterion of feature.criteria) {
+        rows.push({
+          file: relative(resolve(base), path).replaceAll('\\', '/'),
+          feature: String(feature.id),
+          criterion: String(criterion.id),
+          points: criterion.points,
+        });
+      }
+    }
+  }
+  rows.sort((a, b) => JSON.stringify(a).localeCompare(JSON.stringify(b)));
+  return { sha256: sha256(JSON.stringify(rows)), criteria: rows.length,
+    points: rows.reduce((total, row) => total + row.points, 0) };
+}
+
+export function sessionProvenance({
+  prompt,
+  skillsText = '',
+  contractText = '',
+  bugReportText = null,
+  scenarioPaths,
+  trackDir,
+  trackManifestPath,
+}: SessionProvenanceInput) {
+  const scenarios = hashFiles(scenarioPaths, { base: trackDir });
+  return {
+    promptSha256: sha256(prompt),
+    skillsSha256: sha256(skillsText),
+    contractSha256: sha256(contractText),
+    bugReportSha256: bugReportText == null ? null : sha256(bugReportText),
+    trackManifestSha256: sha256(readFileSync(trackManifestPath)),
+    scenariosSha256: scenarios.sha256,
+    scenarioFiles: scenarios.files,
+    rubric: hashRubric(scenarioPaths, { base: trackDir }),
+  };
+}
diff --git a/tools/stack-bench/src/evidence/repair-evidence.ts b/tools/stack-bench/src/evidence/repair-evidence.ts
new file mode 100644
index 00000000000..cdf88ca1548
--- /dev/null
+++ b/tools/stack-bench/src/evidence/repair-evidence.ts
@@ -0,0 +1,129 @@
+import { cpSync, existsSync, rmSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import type { ProgressionAttempt } from '../progression/progression-state.js';
+import type { GradeBundlePayload } from './benchmark-run.js';
+import { classifyBundle, ladderMayContinue } from './outcomes.js';
+import type { RunOutcome } from './outcomes.js';
+import {
+  compareCriterionEvidence,
+  type CriterionEvidenceComparison,
+  type EvidenceBundle,
+} from './scoring.js';
+
+export interface RepairProgress {
+  score: number | null;
+  fingerprint: string;
+  stalledRounds: number;
+}
+
+export function clearPrivateGradingEvidence(appDir: string): void {
+  rmSync(join(resolve(appDir), 'stack-bench'), { recursive: true, force: true });
+}
+
+export function restorePrivateGradingEvidence(appDir: string, snapshot: string): void {
+  if (!existsSync(snapshot)) throw new Error('repair grading snapshot does not exist');
+  clearPrivateGradingEvidence(appDir);
+  cpSync(snapshot, join(resolve(appDir), 'stack-bench'), { recursive: true });
+}
+
+export function repairProgressState(previous: RepairProgress | null,
+  bundle: GradeBundlePayload | null): RepairProgress {
+  const outcome = classifyBundle(bundle);
+  const score = bundle?.totals?.score ?? null;
+  const fingerprint = canonicalDefinitionJson({
+    kind: outcome.kind,
+    phase: outcome.phase ?? null,
+    appFailures: [...(outcome.appFailures ?? [])].sort(),
+    inconclusive: [...(outcome.inconclusive ?? [])].sort(),
+    harnessFailures: [...(outcome.harnessFailures ?? [])].sort(),
+    contractFailures: (bundle?.suites?.lint?.results ?? [])
+      .filter(result => result.status === 'FAIL')
+      .map(result => ({ id: result.id, detail: result.detail ?? null })),
+  });
+  const stalledRounds = previous && score !== null && previous.score !== null
+    && score <= previous.score && fingerprint === previous.fingerprint
+    ? previous.stalledRounds + 1 : 0;
+  return { score, fingerprint, stalledRounds };
+}
+
+export function repairHistoryEntry(round: number, before: GradeBundlePayload | null,
+  after: GradeBundlePayload | null, result: string) {
+  const failureKeys = (bundle: GradeBundlePayload | null): string[] => {
+    const outcome = classifyBundle(bundle);
+    const contract = (bundle?.suites?.lint?.results ?? [])
+      .filter(item => item.status === 'FAIL').map(item => `testing-interface/${item.id}`);
+    return [...new Set([...(outcome.appFailures ?? []).filter(key => key !== 'contract-lint'),
+      ...contract])].sort();
+  };
+  return {
+    round,
+    beforeScore: before?.totals?.score ?? null,
+    beforeMax: before?.totals?.max ?? null,
+    afterScore: after?.totals?.score ?? null,
+    afterMax: after?.totals?.max ?? null,
+    result,
+    remainingFailures: failureKeys(after),
+  };
+}
+
+export function levelGradeIsUsable(bundleOutcome: RunOutcome,
+  progressionAttempt: Pick<ProgressionAttempt, 'outcome'> | null = null): boolean {
+  if (progressionAttempt) return progressionAttempt.outcome === 'conclusive';
+  return ladderMayContinue(bundleOutcome);
+}
+
+const APPLICATION_SETUP_PHASES = new Set([
+  'database-provenance', 'application-layout', 'application-restart', 'application-readiness',
+]);
+
+interface RepairEvidenceBundle extends EvidenceBundle {
+  outcome?: { kind?: string; phase?: string } | null;
+  selection?: { checks?: Array<{ stableKey?: string }> } | null;
+}
+
+export interface RepairEvidenceDecision {
+  action: 'keep-setup-repair' | 'rollback-no-comparison' | 'rollback-regression' | 'keep';
+  shared: CriterionEvidenceComparison;
+}
+
+export function repairEvidenceDecision(
+  beforeBundle: RepairEvidenceBundle | null | undefined,
+  afterBundle: RepairEvidenceBundle | null | undefined,
+): RepairEvidenceDecision {
+  const shared = compareCriterionEvidence(beforeBundle, afterBundle);
+  const startedFromApplicationSetup = beforeBundle?.outcome?.kind === 'app_failure'
+    && typeof beforeBundle.outcome.phase === 'string'
+    && APPLICATION_SETUP_PHASES.has(beforeBundle.outcome.phase);
+  if (shared.count === 0 && shared.lostEvidence.length === 0
+    && shared.definitionChanges.length === 0) {
+    return {
+      action: startedFromApplicationSetup ? 'keep-setup-repair' : 'rollback-no-comparison',
+      shared,
+    };
+  }
+  const evidenceRegressed = shared.lostEvidence.length > 0
+    || shared.definitionChanges.length > 0
+    || shared.regressions.length > 0;
+  return {
+    action: evidenceRegressed || shared.after < shared.before ? 'rollback-regression' : 'keep',
+    shared,
+  };
+}
+
+export function repairRegressionDecision(
+  acceptedBundle: RepairEvidenceBundle | null | undefined,
+  repairedBundle: RepairEvidenceBundle | null | undefined,
+): RepairEvidenceDecision {
+  const selected = repairedBundle?.selection?.checks;
+  const selectedKeys = Array.isArray(selected)
+    ? new Set(selected.flatMap(check => typeof check.stableKey === 'string'
+      ? [check.stableKey] : [])) : null;
+  const shared = compareCriterionEvidence(acceptedBundle, repairedBundle,
+    { onlyPreviousPasses: true, previousStableKeys: selectedKeys });
+  const regressed = shared.lostEvidence.length > 0
+    || shared.definitionChanges.length > 0
+    || shared.regressions.length > 0;
+  return { action: regressed ? 'rollback-regression' : 'keep', shared };
+}
diff --git a/tools/stack-bench/src/evidence/scoring.ts b/tools/stack-bench/src/evidence/scoring.ts
new file mode 100644
index 00000000000..aaec331e19c
--- /dev/null
+++ b/tools/stack-bench/src/evidence/scoring.ts
@@ -0,0 +1,152 @@
+// A later pass cannot improve by losing conclusive evidence.
+
+import {
+  criterionEvidence,
+  evidenceDisposition,
+  type CheckEvidenceStatus,
+} from './check-evidence.js';
+
+interface ScoredCriterion {
+  id?: string;
+  stableKey?: string;
+  points?: number | null;
+  evidence?: unknown;
+}
+
+interface ScoredFeature {
+  id?: string | number | null;
+  name?: string | null;
+  criteria?: readonly ScoredCriterion[] | null;
+}
+
+interface ScoredSuite {
+  features?: readonly ScoredFeature[] | null;
+}
+
+export interface EvidenceBundle {
+  suites?: Readonly<Record<string, ScoredSuite | null | undefined>> | null;
+}
+
+interface IndexedCriterion {
+  key: string;
+  stableKey: string;
+  passed: boolean;
+  measured: boolean;
+  status: CheckEvidenceStatus;
+  points: number;
+}
+
+export interface CriterionEvidenceComparison {
+  before: number;
+  after: number;
+  count: number;
+  points: number;
+  lostEvidence: string[];
+  definitionChanges: Array<{ key: string; before: number; after: number }>;
+  newlyConclusive: string[];
+  regressions: string[];
+}
+
+export interface RepairScores {
+  before: number;
+  beforeMax: number;
+  after: number;
+  afterMax: number;
+}
+
+function criterionIndex(bundle: EvidenceBundle | null | undefined): Map<string, IndexedCriterion> {
+  const index = new Map<string, IndexedCriterion>();
+  for (const [suiteId, suite] of Object.entries(bundle?.suites ?? {})) {
+    for (const feature of suite?.features ?? []) {
+      const featureId = feature.id ?? feature.name;
+      for (const criterion of feature.criteria ?? []) {
+        const key = `${suiteId}/${featureId}/${criterion.id}`;
+        if (index.has(key)) throw new Error(`duplicate criterion identity: ${key}`);
+        const points = criterion.points ?? 1;
+        if (!Number.isSafeInteger(points) || points < 0) {
+          throw new Error(`criterion ${key} points must be a non-negative integer`);
+        }
+        const evidence = criterionEvidence(criterion);
+        const disposition = evidenceDisposition(evidence);
+        index.set(key, {
+          key,
+          stableKey: criterion.stableKey ?? key,
+          passed: disposition.passed,
+          measured: disposition.measured,
+          status: evidence.status,
+          points,
+        });
+      }
+    }
+  }
+  return index;
+}
+
+export function compareCriterionEvidence(
+  before: EvidenceBundle | null | undefined,
+  after: EvidenceBundle | null | undefined,
+  { onlyPreviousPasses = false, previousStableKeys = null }: {
+    onlyPreviousPasses?: boolean;
+    previousStableKeys?: ReadonlySet<string> | null;
+  } = {},
+): CriterionEvidenceComparison {
+  const previous = criterionIndex(before);
+  const current = criterionIndex(after);
+  let scoreBefore = 0;
+  let scoreAfter = 0;
+  let count = 0;
+  let points = 0;
+  const lostEvidence: string[] = [];
+  const definitionChanges: CriterionEvidenceComparison['definitionChanges'] = [];
+  const newlyConclusive: string[] = [];
+  const regressions: string[] = [];
+
+  for (const [key, was] of previous) {
+    if (onlyPreviousPasses && !was.passed) continue;
+    if (previousStableKeys && !previousStableKeys.has(was.stableKey)) continue;
+    const now = current.get(key);
+    if (!was.measured) {
+      if (now && now.measured) newlyConclusive.push(key);
+      continue;
+    }
+    if (!now || !now.measured) {
+      lostEvidence.push(key);
+      continue;
+    }
+    if (now.points !== was.points) {
+      definitionChanges.push({ key, before: was.points, after: now.points });
+      continue;
+    }
+    count += 1;
+    points += was.points;
+    scoreBefore += was.passed ? was.points : 0;
+    scoreAfter += now.passed ? now.points : 0;
+    if (was.points > 0 && was.passed && !now.passed) regressions.push(was.stableKey);
+  }
+
+  return {
+    before: scoreBefore,
+    after: scoreAfter,
+    count,
+    points,
+    lostEvidence,
+    definitionChanges,
+    newlyConclusive,
+    regressions,
+  };
+}
+
+export function formatRepairProgress(
+  comparison: CriterionEvidenceComparison,
+  { before, beforeMax, after, afterMax }: RepairScores,
+): string {
+  const shared = `${comparison.count} ${comparison.count === 1 ? 'criterion' : 'criteria'} measured in both rounds `
+    + `(${comparison.before}/${comparison.points} points)`;
+  const overall = `overall ${before}/${beforeMax} -> ${after}/${afterMax}`;
+  if (comparison.newlyConclusive.length) {
+    const count = comparison.newlyConclusive.length;
+    return `no change among ${shared}; ${count} previously unavailable `
+      + `${count === 1 ? 'criterion became' : 'criteria became'} measurable; ${overall}`;
+  }
+  return `no improvement among ${shared}; ${overall}`;
+}
diff --git a/tools/stack-bench/src/evidence/session-metrics.ts b/tools/stack-bench/src/evidence/session-metrics.ts
new file mode 100644
index 00000000000..608efd79ee3
--- /dev/null
+++ b/tools/stack-bench/src/evidence/session-metrics.ts
@@ -0,0 +1,116 @@
+const USAGE_KEYS = ['input', 'output', 'cacheWrite', 'cacheRead'] as const;
+
+type UsageKey = typeof USAGE_KEYS[number];
+
+export interface SessionMetricsInput {
+  costUsd?: number | null;
+  tokens?: number | null;
+  outputTokens?: number | null;
+  turns?: number | null;
+  durationMs?: number | null;
+  promptBytes?: number | null;
+  usage?: Partial<Record<UsageKey, number | null>> | null;
+  thinking?: {
+    blocks?: number | null;
+    signatureBytes?: number | null;
+  } | null;
+  providerThrottle?: {
+    waits?: number | null;
+    waitedMs?: number | null;
+  } | null;
+}
+
+export interface SessionMetricsSummary {
+  sessions: number;
+  costUsd: number;
+  tokens: number;
+  outputTokens: number;
+  turns: number;
+  durationMs: number;
+  activeDurationMs: number;
+  providerThrottle: { waits: number; waitedMs: number };
+  promptBytes: number;
+  usage: Record<UsageKey, number>;
+  thinking: { blocks: number; signatureBytes: number; sessions: number } | null;
+}
+
+function nonNegative(value: unknown, at: string, { integer = false } = {}): number {
+  if (value === null || value === undefined) return 0;
+  if (typeof value !== 'number' || !Number.isFinite(value) || value < 0
+      || (integer && !Number.isSafeInteger(value))) {
+    throw new Error(`${at} must be a non-negative ${integer ? 'integer' : 'number'}`);
+  }
+  return value;
+}
+
+export function summarizeSessions(
+  sessions: readonly (SessionMetricsInput | null | undefined | false)[],
+): SessionMetricsSummary {
+  const present = sessions.filter(
+    (session): session is SessionMetricsInput => Boolean(session),
+  );
+  const usage: Record<UsageKey, number> = {
+    input: 0,
+    output: 0,
+    cacheWrite: 0,
+    cacheRead: 0,
+  };
+  const thinking = { blocks: 0, signatureBytes: 0 };
+  let thinkingSessions = 0;
+  let providerWaits = 0;
+  let providerWaitMs = 0;
+
+  for (const [index, session] of present.entries()) {
+    const at = `sessions[${index}]`;
+    for (const key of USAGE_KEYS) {
+      usage[key] += nonNegative(session.usage?.[key], `${at}.usage.${key}`, { integer: true });
+    }
+    if (session.thinking) {
+      thinking.blocks += nonNegative(session.thinking.blocks, `${at}.thinking.blocks`, { integer: true });
+      thinking.signatureBytes += nonNegative(session.thinking.signatureBytes,
+        `${at}.thinking.signatureBytes`, { integer: true });
+      thinkingSessions += 1;
+    }
+    providerWaits += nonNegative(session.providerThrottle?.waits,
+      `${at}.providerThrottle.waits`, { integer: true });
+    providerWaitMs += nonNegative(session.providerThrottle?.waitedMs,
+      `${at}.providerThrottle.waitedMs`, { integer: true });
+  }
+
+  const durationMs = present.reduce(
+    (total, session, index) => total + nonNegative(session.durationMs,
+      `sessions[${index}].durationMs`, { integer: true }),
+    0,
+  );
+  if (providerWaitMs > durationMs) {
+    throw new Error('provider throttle wait time exceeds total session duration');
+  }
+
+  return {
+    sessions: present.length,
+    costUsd: Number(present.reduce(
+      (total, session, index) => total + nonNegative(session.costUsd,
+        `sessions[${index}].costUsd`),
+      0,
+    ).toFixed(6)),
+    tokens: present.reduce((total, session, index) => total + nonNegative(session.tokens,
+      `sessions[${index}].tokens`, { integer: true }), 0),
+    outputTokens: present.reduce(
+      (total, session, index) => total + nonNegative(session.outputTokens,
+        `sessions[${index}].outputTokens`, { integer: true }),
+      0,
+    ),
+    turns: present.reduce((total, session, index) => total + nonNegative(session.turns,
+      `sessions[${index}].turns`, { integer: true }), 0),
+    durationMs,
+    activeDurationMs: Math.max(0, durationMs - providerWaitMs),
+    providerThrottle: { waits: providerWaits, waitedMs: providerWaitMs },
+    promptBytes: present.reduce(
+      (total, session, index) => total + nonNegative(session.promptBytes,
+        `sessions[${index}].promptBytes`, { integer: true }),
+      0,
+    ),
+    usage,
+    thinking: thinkingSessions ? { ...thinking, sessions: thinkingSessions } : null,
+  };
+}
diff --git a/tools/stack-bench/src/package-root.ts b/tools/stack-bench/src/package-root.ts
new file mode 100644
index 00000000000..dfee5d8ae6b
--- /dev/null
+++ b/tools/stack-bench/src/package-root.ts
@@ -0,0 +1,37 @@
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
+import { dirname, parse, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const PACKAGE_NAME = '@spacetimedb/stack-bench';
+
+function isStackBenchPackage(directory: string): boolean {
+  const manifestPath = resolve(directory, 'package.json');
+  if (!existsSync(manifestPath)) return false;
+  try {
+    const manifest: unknown = JSON.parse(readFileSync(manifestPath, 'utf8'));
+    return typeof manifest === 'object' && manifest !== null
+      && 'name' in manifest && manifest.name === PACKAGE_NAME;
+  } catch {
+    return false;
+  }
+}
+
+export function findStackBenchRoot(moduleUrl: string | URL = import.meta.url): string {
+  let directory = dirname(fileURLToPath(moduleUrl));
+  const filesystemRoot = parse(directory).root;
+  while (true) {
+    if (isStackBenchPackage(directory)) return realpathSync(directory);
+    if (directory === filesystemRoot) {
+      throw new Error(`cannot find ${PACKAGE_NAME} package root from ${String(moduleUrl)}`);
+    }
+    directory = dirname(directory);
+  }
+}
+
+export const STACK_BENCH_ROOT = findStackBenchRoot();
+export const REPOSITORY_ROOT = resolve(STACK_BENCH_ROOT, '..', '..');
+
+// Runtime entry points always use compiled JavaScript in dist.
+export function compiledEntrypoint(...segments: readonly string[]): string {
+  return resolve(STACK_BENCH_ROOT, 'dist', ...segments);
+}
diff --git a/tools/stack-bench/src/progression/dependency-definition.ts b/tools/stack-bench/src/progression/dependency-definition.ts
new file mode 100644
index 00000000000..14befeacbdc
--- /dev/null
+++ b/tools/stack-bench/src/progression/dependency-definition.ts
@@ -0,0 +1,332 @@
+import { isDeepStrictEqual } from 'node:util';
+
+import type {
+  CompiledProgressionDefinition,
+  CompiledProgressionNode,
+  CompiledProgressionQuestline,
+} from './progression-definition.js';
+import { isProgressionVersion, parseVersionedProgressionId } from './progression-identifiers.js';
+import {
+  assertDependencyObject as strictObject,
+  dependencyFailure as fail,
+  dependencyIdentifier as identifier,
+  dependencyNonEmptyString as nonEmptyString,
+  dependencyPositiveInteger as positiveInteger,
+} from './dependency-validation.js';
+import { validateRepairPlan } from './repair-plan.js';
+import type { RepairPlan } from './repair-plan.js';
+
+export const DEPENDENCY_MODE_SCHEMA_VERSION = 7;
+export const DEPENDENCY_MODE_POLICY = 'dependency-graph';
+export const DEPENDENCY_MODE_VERSION = '4.3.0';
+export const FEATURE_CATALOG_SCHEMA_VERSION = 1;
+export const DEFAULT_UNCHANGED_FAILURE_LIMIT = 3;
+export const DEFAULT_DEPENDENCY_WORK_SELECTION = 'progressive';
+export const DEPENDENCY_WORK_SELECTIONS = ['feature', 'progressive', 'all-at-once'] as const;
+
+export type DependencyWorkSelection = typeof DEPENDENCY_WORK_SELECTIONS[number];
+
+export function isDependencyWorkSelection(value: unknown): value is DependencyWorkSelection {
+  return DEPENDENCY_WORK_SELECTIONS.includes(value as DependencyWorkSelection);
+}
+
+interface AuthoredDependency extends Record<string, unknown> {
+  id: string;
+  reason: string;
+}
+
+interface AuthoredNode extends Omit<CompiledProgressionNode, 'level' | 'dependencies' | 'dependencyReasons'> {
+  level?: number;
+  dependencies: Array<AuthoredDependency | string>;
+  dependencyReasons?: Record<string, string>;
+}
+
+interface MutableDefinition extends Record<string, unknown> {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  policy?: string;
+  repair?: RepairPlan;
+  unchangedFailureLimit?: number;
+  workSelection?: DependencyWorkSelection;
+  nodes: AuthoredNode[];
+  questlines: Array<Omit<CompiledProgressionQuestline, 'nodes'> & { nodes?: string[] }>;
+}
+
+export interface CompiledDependencyDefinition extends CompiledProgressionDefinition {
+  policy: typeof DEPENDENCY_MODE_POLICY;
+  repair: RepairPlan;
+  unchangedFailureLimit: number;
+  workSelection: DependencyWorkSelection;
+}
+
+function progressionVersion(value: unknown, at: string): string {
+  const result = nonEmptyString(value, at);
+  if (!isProgressionVersion(result)) return fail(at, 'must be an exact semantic version');
+  return result;
+}
+
+function uniqueStrings(value: unknown, at: string,
+  { exactRefs = false, nonEmpty = true }: { exactRefs?: boolean; nonEmpty?: boolean } = {}): string[] {
+  if (!Array.isArray(value) || (nonEmpty && value.length === 0)) {
+    fail(at, `must be ${nonEmpty ? 'a non-empty' : 'an'} array`);
+  }
+  const seen = new Set<string>();
+  return (value as unknown[]).map((item, index) => {
+    const result = nonEmptyString(item, `${at}[${index}]`);
+    if (seen.has(result)) fail(`${at}[${index}]`, `duplicates ${JSON.stringify(result)}`);
+    seen.add(result);
+    if (exactRefs) {
+      if (!parseVersionedProgressionId(result)) {
+        fail(`${at}[${index}]`, 'must be an exact id@semantic-version reference');
+      }
+    } else {
+      identifier(result, `${at}[${index}]`);
+    }
+    return result;
+  });
+}
+
+function assertAcyclic(nodesById: Map<string, CompiledProgressionNode>): void {
+  const visiting = new Set<string>();
+  const visited = new Set<string>();
+  const visit = (node: CompiledProgressionNode, chain: string[]): void => {
+    if (visited.has(node.id)) return;
+    if (visiting.has(node.id)) fail('nodes', `dependency cycle: ${[...chain, node.id].join(' -> ')}`);
+    visiting.add(node.id);
+    for (const dependency of node.dependencies) {
+      const parent = nodesById.get(dependency);
+      if (parent) visit(parent, [...chain, node.id]);
+    }
+    visiting.delete(node.id);
+    visited.add(node.id);
+  };
+  for (const node of nodesById.values()) visit(node, []);
+}
+
+function compileGraphDefinition(input: unknown,
+  { source, catalogOnly }: { source: string; catalogOnly: boolean }): CompiledProgressionDefinition {
+  const definition = structuredClone(input) as MutableDefinition;
+  const fields = ['schemaVersion', 'kind', 'id', 'version', 'state', 'title', 'nodes',
+    'questlines'];
+  if (!catalogOnly) fields.push('policy', 'repair', 'unchangedFailureLimit', 'workSelection');
+  strictObject(definition, source, new Set(fields));
+  const expectedSchema = catalogOnly ? FEATURE_CATALOG_SCHEMA_VERSION : DEPENDENCY_MODE_SCHEMA_VERSION;
+  const expectedKind = catalogOnly ? 'feature-catalog' : 'progression-mode';
+  if (definition.schemaVersion !== expectedSchema) {
+    fail(`${source}.schemaVersion`, `must be ${expectedSchema}`);
+  }
+  if (definition.kind !== expectedKind) fail(`${source}.kind`, `must be ${JSON.stringify(expectedKind)}`);
+  identifier(definition.id, `${source}.id`);
+  progressionVersion(definition.version, `${source}.version`);
+  if (definition.state !== 'draft' && definition.state !== 'qualified') {
+    fail(`${source}.state`, 'must be "draft" or "qualified"');
+  }
+  nonEmptyString(definition.title, `${source}.title`);
+  if (!catalogOnly && definition.policy !== DEPENDENCY_MODE_POLICY) {
+    fail(`${source}.policy`, `must be ${JSON.stringify(DEPENDENCY_MODE_POLICY)}`);
+  }
+  if (!catalogOnly) {
+    definition.repair = validateRepairPlan(definition.repair, `${source}.repair`);
+    definition.unchangedFailureLimit = positiveInteger(
+      definition.unchangedFailureLimit ?? DEFAULT_UNCHANGED_FAILURE_LIMIT,
+      `${source}.unchangedFailureLimit`,
+    );
+    definition.workSelection ??= DEFAULT_DEPENDENCY_WORK_SELECTION;
+    if (!isDependencyWorkSelection(definition.workSelection)) {
+      fail(`${source}.workSelection`, 'must be "feature", "progressive", or "all-at-once"');
+    }
+  }
+  if (!Array.isArray(definition.nodes) || definition.nodes.length === 0) {
+    fail(`${source}.nodes`, 'must be a non-empty array');
+  }
+
+  const authoredNodes = structuredClone(definition.nodes);
+  const nodeIds = new Set<string>();
+  const checkIds = new Set<string>();
+  definition.nodes.forEach((node, index) => {
+    const at = `${source}.nodes[${index}]`;
+    strictObject(node, at, new Set([
+      'id', 'title', 'questline', 'level', 'featureRefs', 'promptModules', 'gradingChecks',
+      'dependencies', 'dependencyReasons',
+    ]));
+    identifier(node.id, `${at}.id`);
+    if (nodeIds.has(node.id)) fail(`${at}.id`, `duplicates ${JSON.stringify(node.id)}`);
+    nodeIds.add(node.id);
+    nonEmptyString(node.title, `${at}.title`);
+    identifier(node.questline, `${at}.questline`);
+    node.featureRefs = uniqueStrings(node.featureRefs, `${at}.featureRefs`, { exactRefs: true }).sort();
+    node.promptModules = uniqueStrings(node.promptModules, `${at}.promptModules`,
+      { exactRefs: true, nonEmpty: false }).sort();
+    if (!Array.isArray(node.gradingChecks) || node.gradingChecks.length === 0) {
+      fail(`${at}.gradingChecks`, 'must be a non-empty array');
+    }
+    const localChecks = new Set<string>();
+    node.gradingChecks.forEach((check, checkIndex) => {
+      const checkAt = `${at}.gradingChecks[${checkIndex}]`;
+      strictObject(check, checkAt, new Set(['id', 'points', 'role', 'requiresFeatures']));
+      identifier(check.id, `${checkAt}.id`);
+      if (localChecks.has(check.id)) fail(`${checkAt}.id`, `duplicates ${JSON.stringify(check.id)}`);
+      if (checkIds.has(check.id)) fail(`${checkAt}.id`, 'is already owned by another node');
+      localChecks.add(check.id);
+      checkIds.add(check.id);
+      positiveInteger(check.points, `${checkAt}.points`);
+      if (!['feature', 'guarantee'].includes(check.role)) {
+        fail(`${checkAt}.role`, 'must be "feature" or "guarantee"');
+      }
+      if (check.requiresFeatures !== undefined) {
+        check.requiresFeatures = uniqueStrings(check.requiresFeatures,
+          `${checkAt}.requiresFeatures`).sort();
+      }
+    });
+    if (!node.gradingChecks.some(check => check.role === 'feature')) {
+      fail(`${at}.gradingChecks`, 'must contain at least one feature check');
+    }
+    node.gradingChecks.sort((left, right) => left.id.localeCompare(right.id));
+    if (!Array.isArray(node.dependencies)) fail(`${at}.dependencies`, 'must be an array');
+    const compiledNode = node.level !== undefined || node.dependencyReasons !== undefined;
+    if (compiledNode && (node.level === undefined || node.dependencyReasons === undefined)) {
+      fail(at, 'compiled level and dependency reasons must appear together');
+    }
+    if (compiledNode) positiveInteger(node.level, `${at}.level`);
+    const dependencies = new Set<string>();
+    node.dependencies.forEach((dependency, dependencyIndex) => {
+      const dependencyAt = `${at}.dependencies[${dependencyIndex}]`;
+      let dependencyId: string;
+      if (compiledNode) {
+        dependencyId = identifier(dependency, dependencyAt);
+      }
+      else {
+        strictObject(dependency, dependencyAt, new Set(['id', 'reason']));
+        dependencyId = identifier(dependency.id, `${dependencyAt}.id`);
+        nonEmptyString(dependency.reason, `${dependencyAt}.reason`);
+      }
+      if (dependencies.has(dependencyId)) {
+        fail(compiledNode ? dependencyAt : `${dependencyAt}.id`,
+          `duplicates ${JSON.stringify(dependencyId)}`);
+      }
+      dependencies.add(dependencyId);
+    });
+    const compiledDependencies = [...dependencies].sort();
+    node.dependencies = compiledDependencies;
+    if (compiledNode) {
+      strictObject(node.dependencyReasons, `${at}.dependencyReasons`, new Set(compiledDependencies));
+      for (const dependencyId of compiledDependencies) {
+        const reason = nonEmptyString(node.dependencyReasons[dependencyId],
+          `${at}.dependencyReasons.${dependencyId}`);
+        node.dependencyReasons[dependencyId] = reason.trim();
+      }
+    } else {
+      const authoredDependencies = authoredNodes[index]?.dependencies ?? [];
+      node.dependencyReasons = Object.fromEntries(compiledDependencies.map(dependencyId => [
+        dependencyId,
+        (() => {
+          const dependency = authoredDependencies.find((item): item is AuthoredDependency =>
+            typeof item !== 'string' && item.id === dependencyId);
+          if (!dependency) return fail(`${at}.dependencies`, `missing ${dependencyId}`);
+          return dependency.reason.trim();
+        })(),
+      ]));
+    }
+  });
+
+  const nodesById = new Map(definition.nodes.map(node => [node.id, node]));
+  const featureOwners = new Map<string, string>();
+  for (const node of definition.nodes) {
+    for (const reference of node.featureRefs) {
+      const parsed = parseVersionedProgressionId(reference);
+      if (!parsed) return fail(`${source}.nodes.${node.id}.featureRefs`, `invalid reference ${reference}`);
+      const priorOwner = featureOwners.get(parsed.id);
+      if (priorOwner !== undefined) {
+        fail(`${source}.nodes.${node.id}.featureRefs`,
+          `${parsed.id} is already owned by ${priorOwner}`);
+      }
+      featureOwners.set(parsed.id, node.id);
+    }
+  }
+  for (const node of definition.nodes) {
+    const at = `${source}.nodes.${node.id}.dependencies`;
+    for (const dependency of node.dependencies) {
+      if (!nodesById.has(dependency as string)) fail(at, `unknown parent ${JSON.stringify(dependency)}`);
+    }
+    for (const check of node.gradingChecks) {
+      for (const featureId of check.requiresFeatures ?? []) {
+        if (!featureOwners.has(featureId)) {
+          fail(`${source}.nodes.${node.id}.gradingChecks.${check.id}.requiresFeatures`,
+            `references unknown feature ${JSON.stringify(featureId)}`);
+        }
+      }
+    }
+  }
+  assertAcyclic(nodesById as Map<string, CompiledProgressionNode>);
+  const declaredLevels = new Map(definition.nodes
+    .filter(node => node.level !== undefined).map(node => [node.id, node.level]));
+  definition.nodes.forEach(node => { delete node.level; });
+  const levelFor = (node: AuthoredNode): number => {
+    if (node.level !== undefined) return node.level;
+    node.level = node.dependencies.length === 0
+      ? 1
+      : 1 + Math.max(...node.dependencies.map(parentId => {
+        const parent = nodesById.get(parentId as string);
+        if (!parent) return fail(`${source}.nodes.${node.id}.dependencies`, 'contains an unknown parent');
+        return levelFor(parent);
+      }));
+    return node.level;
+  };
+  definition.nodes.forEach(levelFor);
+  for (const [nodeId, declaredLevel] of declaredLevels) {
+    if (nodesById.get(nodeId)?.level !== declaredLevel) {
+      fail(`${source}.nodes.${nodeId}.level`, 'does not match calculated dependency depth');
+    }
+  }
+  // Compiled order is dependency depth, then the order the catalog declares.
+  // That declared order is the repair priority within a depth, so it is part
+  // of the definition's identity, and the same for every stack.
+  definition.nodes.sort((left, right) => (left.level ?? 0) - (right.level ?? 0));
+  if (!Array.isArray(definition.questlines) || definition.questlines.length === 0) {
+    fail(`${source}.questlines`, 'must be a non-empty array');
+  }
+  const questlineIds = new Set<string>();
+  definition.questlines.forEach((questline, index) => {
+    const at = `${source}.questlines[${index}]`;
+    strictObject(questline, at, new Set(['id', 'title', 'nodes']));
+    identifier(questline.id, `${at}.id`);
+    if (questlineIds.has(questline.id)) fail(`${at}.id`, `duplicates ${JSON.stringify(questline.id)}`);
+    questlineIds.add(questline.id);
+    nonEmptyString(questline.title, `${at}.title`);
+  });
+  for (const node of definition.nodes) {
+    if (!questlineIds.has(node.questline)) {
+      fail(`${source}.nodes.${node.id}.questline`, `unknown questline ${JSON.stringify(node.questline)}`);
+    }
+  }
+  definition.questlines.forEach(questline => {
+    const owned = definition.nodes.filter(node => node.questline === questline.id)
+      .map(node => node.id);
+    if (owned.length === 0) {
+      fail(`${source}.questlines.${questline.id}`, 'owns no nodes');
+    }
+    if (questline.nodes !== undefined) {
+      const declared = uniqueStrings(questline.nodes, `${source}.questlines.${questline.id}.nodes`);
+      if (!isDeepStrictEqual(declared, owned)) {
+        fail(`${source}.questlines.${questline.id}.nodes`, 'does not match node ownership');
+      }
+    }
+    questline.nodes = owned;
+  });
+  definition.questlines.sort((left, right) => left.id.localeCompare(right.id));
+  return definition as unknown as CompiledProgressionDefinition;
+}
+
+export function compileFeatureCatalog(input: unknown,
+  { source = '<feature-catalog>' }: { source?: string } = {}): CompiledProgressionDefinition {
+  return compileGraphDefinition(input, { source, catalogOnly: true });
+}
+
+export function compileDependencyMode(input: unknown,
+  { source = '<dependency-mode>' }: { source?: string } = {}): CompiledDependencyDefinition {
+  return compileGraphDefinition(input, { source, catalogOnly: false }) as CompiledDependencyDefinition;
+}
diff --git a/tools/stack-bench/src/progression/dependency-mode.ts b/tools/stack-bench/src/progression/dependency-mode.ts
new file mode 100644
index 00000000000..b7367ab3783
--- /dev/null
+++ b/tools/stack-bench/src/progression/dependency-mode.ts
@@ -0,0 +1,1099 @@
+import { createHash } from 'node:crypto';
+
+import type {
+  CompiledProgressionNode,
+} from './progression-definition.js';
+import {
+  compileDependencyMode,
+  DEPENDENCY_MODE_POLICY,
+  DEPENDENCY_MODE_SCHEMA_VERSION,
+} from './dependency-definition.js';
+import type { CompiledDependencyDefinition } from './dependency-definition.js';
+import {
+  INCONCLUSIVE_CATEGORIES,
+  scoreDependencyState,
+} from './dependency-score.js';
+import type {
+  DependencyScore,
+  InconclusiveCategory,
+} from './dependency-score.js';
+import type {
+  ProgressionAction,
+  ProgressionPolicy,
+} from './progression-engine.js';
+import type {
+  ProgressionEvent,
+  ProgressionRepairGrant,
+  ProgressionNodeState,
+  ProgressionRepairRegression,
+  ProgressionState,
+  ProgressionTerminalOutcome,
+} from './progression-state.js';
+import { dependencyNodeState } from './dependency-state.js';
+import {
+  assertDependencyObject as strictObject,
+  dependencyFailure as fail,
+  dependencyIdentifier as identifier,
+  dependencyNonEmptyString as nonEmptyString,
+  dependencyPositiveInteger as positiveInteger,
+  isDependencyObject as object,
+} from './dependency-validation.js';
+import { REPAIR_EXHAUSTION_REASONS } from './repair-plan.js';
+import type { RepairLimitExhaustion } from './repair-plan.js';
+
+const getNodeState = dependencyNodeState;
+
+const HASH = /^[a-f0-9]{64}$/;
+const NODE_STATUSES = new Set(['locked', 'active', 'working', 'passed', 'failed', 'blocked'] as const);
+const TERMINAL_OUTCOMES = new Set(['passed', 'partial', 'failed'] as const);
+type CheckOutcome = 'pass' | 'fail' | 'not-run';
+// A check that has not been measured yet stays null; an application abort
+// leaves non-current checks at their prior value.
+type StoredCheckOutcome = Exclude<CheckOutcome, 'not-run'> | null;
+
+interface SourceEvidence extends Record<string, unknown> {
+  kind: 'grade_bundle';
+  id: string;
+  sha256: string;
+}
+
+interface ApplicationFailure extends Record<string, unknown> {
+  phase: string;
+  reason: string;
+}
+
+export interface DependencyPromptSelection {
+  nodeIds: string[];
+  featureRefs: string[];
+  promptModules: string[];
+}
+
+export interface DependencyGradingSelection {
+  nodeIds: string[];
+  checks: Array<{ id: string; points: number; nodeId: string }>;
+}
+
+interface ResultCheck extends Record<string, unknown> {
+  id: string;
+  outcome: CheckOutcome;
+}
+
+interface ResultNode extends Record<string, unknown> {
+  id: string;
+  checks: ResultCheck[];
+}
+
+interface ResultBase extends Record<string, unknown> {
+  attemptId: string;
+  runId?: string;
+  sourceSha256?: string;
+  selectionSha256?: string;
+  evidence?: SourceEvidence;
+  repairRegression?: ProgressionRepairRegression;
+  completedRepair?: true;
+}
+
+export interface ConclusiveResult extends ResultBase {
+  outcome: 'conclusive';
+  nodes: ResultNode[];
+  applicationFailure?: ApplicationFailure;
+  category?: never;
+  reason?: never;
+}
+
+interface InconclusiveResult extends ResultBase {
+  outcome: 'inconclusive';
+  category: InconclusiveCategory;
+  reason: string;
+  nodes?: never;
+  applicationFailure?: never;
+}
+
+export type DependencyResult = ConclusiveResult | InconclusiveResult;
+
+export type DependencyRepairGrant = ProgressionRepairGrant;
+
+interface AttemptRecordedEvent extends ProgressionEvent {
+  sequence: number;
+  type: 'attempt-recorded';
+  result: DependencyResult;
+  grant?: never;
+}
+
+interface RepairsGrantedEvent extends ProgressionEvent {
+  sequence: number;
+  type: 'repairs-granted';
+  result?: never;
+  grant: DependencyRepairGrant;
+}
+
+export type DependencyEvent = AttemptRecordedEvent | RepairsGrantedEvent;
+
+export interface DependencyState extends ProgressionState {
+  definition: CompiledDependencyDefinition;
+  events: DependencyEvent[];
+  grants: DependencyRepairGrant[];
+}
+
+export function dependencyRepairBudget(
+  action: unknown,
+  completedRepairs: number,
+): number {
+  if (!object(action) || action.type === 'terminal' || !object(action.repair)
+    || !Number.isSafeInteger(action.repair.remaining)
+    || Number(action.repair.remaining) < 0
+    || !Number.isSafeInteger(completedRepairs) || completedRepairs < 0) {
+    throw new Error('dependency repair budget requires one valid repair action');
+  }
+  return completedRepairs + Number(action.repair.remaining);
+}
+
+interface DependencyRepairState {
+  definition: { nodes: Array<{ id: string; level: number }> };
+  nodes: Record<string, {
+    repairs: { used: number };
+    exhaustedAtLevel: number | null;
+    exhaustionReason: string | null;
+  }>;
+}
+
+export function dependencyRepairRecords(
+  state: DependencyRepairState,
+  level: number,
+  includedNodeIds: ReadonlySet<string> | readonly string[] = [],
+) {
+  const included = new Set(includedNodeIds);
+  return state.definition.nodes
+    .filter(node => node.level === level
+      || state.nodes[node.id]?.exhaustedAtLevel === level
+      || included.has(node.id))
+    .map(node => {
+      const nodeState = state.nodes[node.id];
+      if (!nodeState) throw new Error(`progression state is missing node ${node.id}`);
+      return { nodeId: node.id,
+        used: nodeState.repairs.used,
+        exhaustionReason: nodeState.exhaustionReason };
+    })
+    .sort((left, right) => left.nodeId.localeCompare(right.nodeId));
+}
+
+function validateSourceEvidence(value: unknown, at: string): asserts value is SourceEvidence {
+  strictObject(value, at, new Set(['kind', 'id', 'sha256']));
+  if (value.kind !== 'grade_bundle' || typeof value.id !== 'string' || !value.id
+    || typeof value.sha256 !== 'string' || !HASH.test(value.sha256)) {
+    throw new Error(`${at} must identify one grade bundle artifact`);
+  }
+}
+
+function validateApplicationFailure(value: unknown, at: string): asserts value is ApplicationFailure {
+  strictObject(value, at, new Set(['phase', 'reason']));
+  nonEmptyString(value.phase, `${at}.phase`);
+  nonEmptyString(value.reason, `${at}.reason`);
+}
+
+function uniqueStrings(value: unknown, at: string): string[] {
+  if (!Array.isArray(value) || value.length === 0) {
+    fail(at, 'must be a non-empty array');
+  }
+  const seen = new Set<string>();
+  return (value as unknown[]).map((item, index) => {
+    const result = nonEmptyString(item, `${at}[${index}]`);
+    if (seen.has(result)) fail(`${at}[${index}]`, `duplicates ${JSON.stringify(result)}`);
+    seen.add(result);
+    identifier(result, `${at}[${index}]`);
+    return result;
+  });
+}
+
+function getDefinitionNode(definition: CompiledDependencyDefinition,
+  nodeId: string): CompiledProgressionNode {
+  const node = definition.nodes.find(candidate => candidate.id === nodeId);
+  if (!node) throw new Error(`unknown dependency node ${nodeId}`);
+  return node;
+}
+
+function featureChecksPass(state: DependencyState, node: CompiledProgressionNode): boolean {
+  return node.gradingChecks.filter(check => check.role === 'feature')
+    .every(check => getNodeState(state, node.id).checks[check.id] === 'pass');
+}
+
+function allChecksPass(state: DependencyState, node: CompiledProgressionNode): boolean {
+  return node.gradingChecks.every(check =>
+    getNodeState(state, node.id).checks[check.id] === 'pass');
+}
+
+function hasFailedCheck(state: DependencyState, node: CompiledProgressionNode): boolean {
+  return Object.values(getNodeState(state, node.id).checks).includes('fail');
+}
+
+function hasFailedFeatureCheck(state: DependencyState, node: CompiledProgressionNode): boolean {
+  return node.gradingChecks.some(check => check.role === 'feature'
+    && getNodeState(state, node.id).checks[check.id] === 'fail');
+}
+
+function isUsable(status: ProgressionNodeState['status']): boolean {
+  return status === 'working' || status === 'passed';
+}
+
+interface RepairAllowance {
+  remaining: number;
+  grantId?: string;
+}
+
+// Each configured limit and what it still allows, most specific first, so the
+// first limit with nothing left names why a feature stopped.
+function repairLimits(state: DependencyState, nodeIds: readonly string[], depth: number):
+Array<{ limit: RepairLimitExhaustion; remaining: number }> {
+  const repairs = state.attempts.filter(attempt => attempt.repair && !attempt.repair.grantId);
+  const limits: Array<{ limit: RepairLimitExhaustion; remaining: number }> = [];
+  const budget = state.definition.repair.budget;
+  if (budget.perFeature !== undefined) {
+    for (const nodeId of nodeIds) {
+      limits.push({ limit: 'feature-repairs-exhausted',
+        remaining: budget.perFeature - repairs.filter(attempt =>
+          attempt.repair?.nodeIds.includes(nodeId)).length });
+    }
+  }
+  if (budget.perDepth !== undefined) {
+    const used = repairs.filter(attempt => budget.perDepth?.carry
+      ? (attempt.repair?.depth ?? 0) <= depth
+      : attempt.repair?.depth === depth).length;
+    const available = budget.perDepth.carry
+      ? budget.perDepth.count * new Set(state.definition.nodes
+        .filter(node => node.level <= depth).map(node => node.level)).size
+      : budget.perDepth.count;
+    limits.push({ limit: 'depth-repairs-exhausted', remaining: available - used });
+  }
+  if (budget.total !== undefined) {
+    limits.push({ limit: 'total-repairs-exhausted', remaining: budget.total - repairs.length });
+  }
+  return limits;
+}
+
+function baseRepairRemaining(state: DependencyState, nodeIds: readonly string[], depth: number): number {
+  return Math.max(0, Math.min(...repairLimits(state, nodeIds, depth).map(limit => limit.remaining)));
+}
+
+function exhaustedRepairLimit(state: DependencyState, nodeIds: readonly string[],
+  depth: number): RepairLimitExhaustion {
+  const exhausted = repairLimits(state, nodeIds, depth).find(limit => limit.remaining <= 0);
+  if (!exhausted) throw new Error(`no repair limit is exhausted for ${nodeIds.join(', ')}`);
+  return exhausted.limit;
+}
+
+function repairAllowance(state: DependencyState, nodeIds: readonly string[], depth: number):
+RepairAllowance {
+  const remaining = baseRepairRemaining(state, nodeIds, depth);
+  if (remaining > 0) return { remaining };
+  const grant = state.grants.find(candidate => candidate.level === depth
+    && nodeIds.every(nodeId => candidate.nodeIds.includes(nodeId))
+    && state.attempts.filter(attempt => attempt.repair?.grantId === candidate.grantId).length
+      < candidate.repairs);
+  if (!grant) return { remaining: 0 };
+  const used = state.attempts.filter(attempt => attempt.repair?.grantId === grant.grantId).length;
+  return { remaining: grant.repairs - used, grantId: grant.grantId };
+}
+
+function canRepair(state: DependencyState, node: CompiledProgressionNode): boolean {
+  return repairAllowance(state, [node.id], state.level).remaining > 0
+    && getNodeState(state, node.id).unchangedFailure.count
+      < state.definition.unchangedFailureLimit;
+}
+
+function recordRepair(state: DependencyState,
+  repair: NonNullable<ProgressionState['attempts'][number]['repair']>): void {
+  for (const nodeId of repair.nodeIds) getNodeState(state, nodeId).repairs.used += 1;
+}
+
+function hasRepairableFailure(state: DependencyState, node: CompiledProgressionNode): boolean {
+  return hasFailedCheck(state, node) && canRepair(state, node);
+}
+
+// Compiled node order: dependency depth, then declared catalog order.
+function compiledOrder(state: DependencyState, nodeId: string): number {
+  const index = state.definition.nodes.findIndex(node => node.id === nodeId);
+  if (index < 0) throw new Error(`unknown dependency node ${nodeId}`);
+  return index;
+}
+
+function currentPromptNodeIds(state: DependencyState): string[] {
+  if (state.phase !== 'active') return [];
+  return state.definition.nodes.filter(node =>
+    getNodeState(state, node.id).status === 'active'
+      || (getNodeState(state, node.id).status === 'working'
+        && hasRepairableFailure(state, node)))
+    .map(node => node.id);
+}
+
+function hasConclusiveAttempt(state: DependencyState): boolean {
+  return state.attempts.some(attempt => attempt.outcome === 'conclusive');
+}
+
+function selectedPromptNodeIds(state: DependencyState): string[] {
+  const nodeIds = currentPromptNodeIds(state);
+  const failed = nodeIds.filter(nodeId =>
+    Object.values(getNodeState(state, nodeId).checks).includes('fail'));
+  if (failed.length > 0 && hasConclusiveAttempt(state)) {
+    return state.definition.repair.selection === 'batch' ? failed : [failed[0]!];
+  }
+  const newWork = nodeIds.filter(nodeId => {
+    const node = getNodeState(state, nodeId);
+    return node.status === 'active'
+      && Object.values(node.checks).every(outcome => outcome === null);
+  });
+  if (newWork.length > 0) {
+    return state.definition.workSelection === 'feature' ? [newWork[0]!] : newWork;
+  }
+  return nodeIds;
+}
+
+function gradingNodeIds(state: DependencyState): string[] {
+  if (state.definition.workSelection === 'all-at-once') {
+    return state.definition.nodes.map(node => node.id);
+  }
+  const promptIds = selectedPromptNodeIds(state);
+  const selected = new Set([
+    ...promptIds,
+    ...state.definition.nodes
+      .filter(node => isUsable(getNodeState(state, node.id).status))
+      .map(node => node.id),
+  ]);
+  const nodesById = new Map(state.definition.nodes.map(node => [node.id, node]));
+  const includeDependencies = (nodeId: string): void => {
+    const node = nodesById.get(nodeId);
+    if (!node) return;
+    for (const parentId of node.dependencies) {
+      selected.add(parentId);
+      includeDependencies(parentId);
+    }
+  };
+  promptIds.forEach(includeDependencies);
+  return [...selected].sort((left, right) =>
+    compiledOrder(state, left) - compiledOrder(state, right));
+}
+
+function checkRequirementsAvailable(state: DependencyState,
+  check: CompiledProgressionNode['gradingChecks'][number],
+  promptNodeIds: ReadonlySet<string>): boolean {
+  const featureOwners = new Map(state.definition.nodes.flatMap(node => node.featureRefs.map(reference => [
+    reference.slice(0, reference.lastIndexOf('@')), node.id,
+  ] as const)));
+  return (check.requiresFeatures ?? []).every(featureId => {
+    const ownerId = featureOwners.get(featureId);
+    return ownerId !== undefined
+      && (promptNodeIds.has(ownerId) || isUsable(getNodeState(state, ownerId).status));
+  });
+}
+
+function selectionFor(state: DependencyState, nodeIds: string[],
+  field: 'featureRefs' | 'promptModules'): string[] {
+  const selected = new Set(nodeIds);
+  return state.definition.nodes.filter(node => selected.has(node.id)).flatMap(node => node[field]);
+}
+
+function selectedPromptWork(state: DependencyState): DependencyPromptSelection {
+  const nodeIds = selectedPromptNodeIds(state);
+  return {
+    nodeIds,
+    featureRefs: [...new Set(selectionFor(state, nodeIds, 'featureRefs'))].sort(),
+    promptModules: [...new Set(selectionFor(state, nodeIds, 'promptModules'))].sort(),
+  };
+}
+
+function selectedGradingWork(state: DependencyState): DependencyGradingSelection {
+  const nodeIds = gradingNodeIds(state);
+  const selected = new Set(nodeIds);
+  const promptNodeIds = new Set(selectedPromptNodeIds(state));
+  return {
+    nodeIds,
+    checks: state.definition.nodes.filter(node => selected.has(node.id)).flatMap(node =>
+      node.gradingChecks.filter(check => state.definition.workSelection === 'all-at-once'
+        || checkRequirementsAvailable(state, check, promptNodeIds))
+        .map(check => ({ ...check, nodeId: node.id }))),
+  };
+}
+
+export function promptSelection(state: ProgressionState): DependencyPromptSelection {
+  const dependencyState = asDependencyState(state);
+  return selectedPromptWork(dependencyState);
+}
+
+export function gradingSelection(state: ProgressionState): DependencyGradingSelection {
+  const dependencyState = asDependencyState(state);
+  return selectedGradingWork(dependencyState);
+}
+
+function terminalOutcome(state: DependencyState,
+  reason: ProgressionTerminalOutcome['reason'], blockedLevel: number | null = null): ProgressionTerminalOutcome {
+  const statuses = Object.values(state.nodes).map(node => node.status);
+  const passed = statuses.filter(status => status === 'passed').length;
+  const working = statuses.filter(status => status === 'working').length;
+  const kind = passed === statuses.length ? 'passed'
+    : passed + working > 0 ? 'partial' : 'failed';
+  return { kind, reason, level: state.level,
+    ...(blockedLevel === null ? {} : { blockedLevel }) };
+}
+
+function updateNodeStatus(state: DependencyState, node: CompiledProgressionNode): void {
+  const nodeState = getNodeState(state, node.id);
+  if (nodeState.status === 'locked' && Object.values(nodeState.checks).every(value => value === null)) {
+    return;
+  }
+  if (state.definition.workSelection !== 'all-at-once' && node.dependencies.some(parentId => {
+    const status = getNodeState(state, parentId).status;
+    return status === 'failed' || status === 'blocked';
+  })) {
+    nodeState.status = 'blocked';
+    return;
+  }
+  if (state.definition.workSelection !== 'all-at-once'
+    && node.dependencies.some(parentId => !isUsable(getNodeState(state, parentId).status))) {
+    nodeState.status = 'locked';
+    return;
+  }
+  nodeState.exhaustedAtLevel = null;
+  nodeState.exhaustionReason = null;
+  if (featureChecksPass(state, node)) {
+    nodeState.status = allChecksPass(state, node) ? 'passed' : 'working';
+  } else if (hasFailedFeatureCheck(state, node)
+    && !canRepair(state, node)) {
+    nodeState.status = 'failed';
+    nodeState.exhaustedAtLevel = state.level;
+    nodeState.exhaustionReason = nodeState.unchangedFailure.count
+      >= state.definition.unchangedFailureLimit
+      ? 'repeated-findings' : exhaustedRepairLimit(state, [node.id], state.level);
+  } else {
+    nodeState.status = 'active';
+  }
+}
+
+function blockBrokenDescendants(state: DependencyState): void {
+  if (state.definition.workSelection === 'all-at-once') return;
+  for (const node of state.definition.nodes) {
+    const nodeState = getNodeState(state, node.id);
+    if (nodeState.status === 'failed') continue;
+    if (node.dependencies.some(parentId => {
+      const status = getNodeState(state, parentId).status;
+      return status === 'failed' || status === 'blocked';
+    })) {
+      nodeState.status = 'blocked';
+      nodeState.exhaustedAtLevel = null;
+      nodeState.exhaustionReason = null;
+    } else if (node.dependencies.some(parentId =>
+      !isUsable(getNodeState(state, parentId).status))) {
+      nodeState.status = 'locked';
+      nodeState.exhaustedAtLevel = null;
+      nodeState.exhaustionReason = null;
+    }
+  }
+}
+
+function openLevel(state: DependencyState, level: number): void {
+  let changed = state.definition.workSelection !== 'all-at-once';
+  while (changed) {
+    changed = false;
+    for (const node of state.definition.nodes) {
+      const nodeState = getNodeState(state, node.id);
+      const dependenciesReady = node.dependencies.every(parentId =>
+        isUsable(getNodeState(state, parentId).status));
+      const dependenciesFailed = node.dependencies.some(parentId => {
+        const status = getNodeState(state, parentId).status;
+        return status === 'failed' || status === 'blocked';
+      });
+      const before = nodeState.status;
+      if (dependenciesFailed) {
+        nodeState.status = 'blocked';
+      } else if (dependenciesReady
+        && (nodeState.status === 'locked' || nodeState.status === 'blocked')) {
+        if (Object.values(nodeState.checks).every(value => value === null)) {
+          nodeState.status = 'active';
+        } else {
+          updateNodeStatus(state, node);
+        }
+      }
+      if (nodeState.status !== before) changed = true;
+    }
+  }
+  const promptNodes = currentPromptNodeIds(state);
+  if (promptNodes.length > 0) {
+    state.phase = 'active';
+    const selectedNodes = selectedPromptNodeIds(state);
+    state.level = Math.max(...(state.definition.workSelection === 'all-at-once'
+      ? state.definition.nodes.map(node => node.level)
+      : selectedNodes.map(nodeId => getDefinitionNode(state.definition, nodeId).level)));
+    state.terminalOutcome = null;
+    return;
+  }
+  state.phase = 'terminal';
+  const hasPassedNode = state.definition.nodes.some(node =>
+    getNodeState(state, node.id).status === 'passed');
+  state.terminalOutcome = terminalOutcome(state,
+    hasPassedNode ? 'graph-complete' : 'no-unlocked-nodes',
+    hasPassedNode ? null : level);
+}
+
+function initialDependencyState(definition: CompiledDependencyDefinition): DependencyState {
+  const state: DependencyState = {
+    schemaVersion: DEPENDENCY_MODE_SCHEMA_VERSION,
+    policy: DEPENDENCY_MODE_POLICY,
+    definition,
+    phase: 'active',
+    terminalOutcome: null,
+    level: 1,
+    nodes: Object.fromEntries(definition.nodes.map(node => {
+      return [node.id, {
+        status: definition.workSelection === 'all-at-once' ? 'active' : 'locked',
+        exhaustedAtLevel: null,
+        exhaustionReason: null,
+        unchangedFailure: { fingerprint: null, count: 0 },
+        repairs: { used: 0 },
+        checks: Object.fromEntries(node.gradingChecks.map(check => [check.id, null])),
+      }];
+    })),
+    attempts: [],
+    grants: [],
+    events: [],
+  };
+  openLevel(state, 1);
+  return state;
+}
+
+export function initializeDependencyMode(input: unknown): DependencyState {
+  return initialDependencyState(compileDependencyMode(input));
+}
+
+function assertState(input: unknown,
+  compiledDefinition?: CompiledDependencyDefinition): CompiledDependencyDefinition {
+  if (!object(input) || input.schemaVersion !== DEPENDENCY_MODE_SCHEMA_VERSION
+    || input.policy !== DEPENDENCY_MODE_POLICY) {
+    throw new Error('invalid dependency mode state');
+  }
+  const state = input as unknown as DependencyState;
+  const definition = compiledDefinition ?? compileDependencyMode(state.definition);
+  if (!['active', 'terminal'].includes(state.phase)) throw new Error('invalid dependency mode state phase');
+  if (state.phase === 'active' && state.terminalOutcome !== null) {
+    throw new Error('active dependency mode state cannot have a terminal outcome');
+  }
+  if (state.phase === 'terminal'
+    && (!object(state.terminalOutcome) || !TERMINAL_OUTCOMES.has(state.terminalOutcome.kind)
+      || !['graph-complete', 'no-unlocked-nodes'].includes(state.terminalOutcome.reason)
+      || !Number.isInteger(state.terminalOutcome.level)
+      || (state.terminalOutcome.blockedLevel !== undefined
+        && !Number.isInteger(state.terminalOutcome.blockedLevel)))) {
+    throw new Error('terminal dependency mode state requires a valid outcome');
+  }
+  const validLevels = new Set(definition.nodes.map(node => node.level));
+  if (!Number.isInteger(state.level) || !validLevels.has(state.level)) {
+    throw new Error('invalid dependency mode state level');
+  }
+  const expectedNodeIds = new Set(definition.nodes.map(node => node.id));
+  const actualNodeIds = Object.keys(state.nodes ?? {});
+  if (actualNodeIds.length !== expectedNodeIds.size
+    || actualNodeIds.some(nodeId => !expectedNodeIds.has(nodeId))) {
+    throw new Error('invalid dependency mode state node set');
+  }
+  for (const node of definition.nodes) {
+    const nodeState = getNodeState(state, node.id);
+    const unchangedFailure = nodeState?.unchangedFailure;
+    if (!object(nodeState) || !NODE_STATUSES.has(nodeState.status) || !object(nodeState.checks)
+      || !object(unchangedFailure)
+      || !object(nodeState.repairs)
+      || !Number.isSafeInteger(nodeState.repairs.used) || nodeState.repairs.used < 0
+      || !Number.isSafeInteger(unchangedFailure.count) || unchangedFailure.count < 0
+      || (unchangedFailure.fingerprint !== null && !HASH.test(unchangedFailure.fingerprint))
+      || (unchangedFailure.count === 0) !== (unchangedFailure.fingerprint === null)
+      || (nodeState.exhaustionReason !== null
+        && !(REPAIR_EXHAUSTION_REASONS as readonly string[]).includes(nodeState.exhaustionReason))
+      || (nodeState.exhaustedAtLevel !== null
+        && (!Number.isInteger(nodeState.exhaustedAtLevel)
+          || !validLevels.has(nodeState.exhaustedAtLevel)))
+      || (nodeState.status === 'failed') !== (nodeState.exhaustedAtLevel !== null)
+      || (nodeState.status === 'failed') !== (nodeState.exhaustionReason !== null)) {
+      throw new Error(`invalid dependency mode state for node ${node.id}`);
+    }
+    const expectedChecks = new Set(node.gradingChecks.map(check => check.id));
+    const actualChecks = Object.keys(nodeState.checks);
+    if (actualChecks.length !== expectedChecks.size
+      || actualChecks.some(checkId => !expectedChecks.has(checkId))
+      || actualChecks.some(checkId =>
+        ![null, 'pass', 'fail'].includes(nodeState.checks[checkId] ?? null))) {
+      throw new Error(`invalid dependency mode check state for node ${node.id}`);
+    }
+  }
+  if (!Array.isArray(state.attempts)) throw new Error('invalid dependency mode attempt history');
+  const attemptIds = new Set();
+  state.attempts.forEach((attempt, index) => {
+    if (!object(attempt) || typeof attempt.attemptId !== 'string' || !attempt.attemptId
+      || attemptIds.has(attempt.attemptId) || !Number.isInteger(attempt.level)
+      || !validLevels.has(attempt.level)
+      || !['conclusive', 'inconclusive'].includes(attempt.outcome)
+      || (attempt.sourceSha256 !== undefined && !HASH.test(attempt.sourceSha256))
+      || (attempt.selectionSha256 !== undefined && !HASH.test(attempt.selectionSha256))
+      || (attempt.runId !== undefined && (typeof attempt.runId !== 'string' || !attempt.runId))
+      || (attempt.outcome === 'inconclusive'
+        && (typeof attempt.reason !== 'string' || !attempt.reason
+          || typeof attempt.category !== 'string'
+          || !INCONCLUSIVE_CATEGORIES.includes(attempt.category as InconclusiveCategory)))
+      || (attempt.applicationFailure !== undefined
+        && attempt.outcome !== 'conclusive')) {
+      throw new Error(`invalid dependency mode attempt at index ${index}`);
+    }
+    if (attempt.repair !== undefined) {
+      if (!object(attempt.repair) || !Array.isArray(attempt.repair.nodeIds)
+        || attempt.repair.nodeIds.length === 0
+        || new Set(attempt.repair.nodeIds).size !== attempt.repair.nodeIds.length
+        || attempt.repair.nodeIds.some(nodeId => !expectedNodeIds.has(nodeId))
+        || !validLevels.has(attempt.repair.depth)
+        || (attempt.repair.grantId !== undefined
+          && (typeof attempt.repair.grantId !== 'string' || !attempt.repair.grantId))) {
+        throw new Error(`invalid dependency mode repair at attempt ${index}`);
+      }
+    }
+    if (attempt.applicationFailure !== undefined) {
+      validateApplicationFailure(attempt.applicationFailure,
+        `attempts[${index}].applicationFailure`);
+    }
+    if (attempt.evidence !== undefined) validateSourceEvidence(attempt.evidence,
+      `attempts[${index}].evidence`);
+    attemptIds.add(attempt.attemptId);
+  });
+  for (const node of definition.nodes) {
+    const expectedRepairs = state.attempts.filter(attempt =>
+      attempt.repair?.nodeIds.includes(node.id)).length;
+    if (getNodeState(state, node.id).repairs.used !== expectedRepairs) {
+      throw new Error(`dependency mode repair count disagrees for node ${node.id}`);
+    }
+  }
+  if (!Array.isArray(state.grants) || !Array.isArray(state.events)) {
+    throw new Error('invalid dependency mode continuation history');
+  }
+  return definition;
+}
+
+function asDependencyState(input: ProgressionState): DependencyState {
+  if (input.policy !== DEPENDENCY_MODE_POLICY) {
+    throw new Error(`invalid dependency mode state policy ${JSON.stringify(input.policy)}`);
+  }
+  return input as DependencyState;
+}
+
+function validateConclusiveResult(state: DependencyState,
+  result: ConclusiveResult): Map<string, Map<string, CheckOutcome>> {
+  if (!Array.isArray(result.nodes)) throw new Error('conclusive result nodes must be an array');
+  const selected = selectedGradingWork(state);
+  const expectedNodes = new Map(selected.nodeIds.map(nodeId => [nodeId,
+    new Set(selected.checks.filter(check => check.nodeId === nodeId).map(check => check.id))]));
+  const actualNodes = new Map<string, Map<string, CheckOutcome>>();
+  for (const [index, nodeResult] of result.nodes.entries()) {
+    strictObject(nodeResult, `result.nodes[${index}]`, new Set(['id', 'checks']));
+    nonEmptyString(nodeResult.id, `result.nodes[${index}].id`);
+    if (!expectedNodes.has(nodeResult.id)) throw new Error(`result includes unselected node ${nodeResult.id}`);
+    if (actualNodes.has(nodeResult.id)) throw new Error(`result repeats node ${nodeResult.id}`);
+    if (!Array.isArray(nodeResult.checks)) throw new Error(`result node ${nodeResult.id} checks must be an array`);
+    const expectedChecks = expectedNodes.get(nodeResult.id);
+    if (!expectedChecks) throw new Error(`result includes unselected node ${nodeResult.id}`);
+    const checks = new Map<string, CheckOutcome>();
+    for (const [checkIndex, check] of nodeResult.checks.entries()) {
+      strictObject(check, `result.nodes[${index}].checks[${checkIndex}]`, new Set(['id', 'outcome']));
+      nonEmptyString(check.id, `result.nodes[${index}].checks[${checkIndex}].id`);
+      if (!expectedChecks.has(check.id)) {
+        throw new Error(`result includes unselected check ${check.id} for ${nodeResult.id}`);
+      }
+      if (checks.has(check.id)) throw new Error(`result repeats check ${check.id}`);
+      if (!['pass', 'fail', 'not-run'].includes(check.outcome)) {
+        throw new Error(`result check ${check.id} outcome must be pass, fail, or not-run`);
+      }
+      checks.set(check.id, check.outcome);
+    }
+    const missing = [...expectedChecks].filter(checkId => !checks.has(checkId));
+    if (missing.length) throw new Error(`result node ${nodeResult.id} is missing checks: ${missing.join(', ')}`);
+    actualNodes.set(nodeResult.id, checks);
+  }
+  const missingNodes = [...expectedNodes.keys()].filter(nodeId => !actualNodes.has(nodeId));
+  if (missingNodes.length) throw new Error(`result is missing nodes: ${missingNodes.join(', ')}`);
+  const currentNodes = new Set(selectedPromptNodeIds(state));
+  if (result.applicationFailure !== undefined) {
+    validateApplicationFailure(result.applicationFailure, 'result.applicationFailure');
+    for (const [nodeId, checks] of actualNodes) {
+      const expectedOutcome = currentNodes.has(nodeId) ? 'fail' : 'not-run';
+      if ([...checks.values()].some(outcome => outcome !== expectedOutcome)) {
+        throw new Error(`application failure must mark ${nodeId} checks ${expectedOutcome}`);
+      }
+    }
+  }
+  return actualNodes;
+}
+
+function failureFingerprint(state: DependencyState, nodeIds: string[]): string {
+  const failedChecks = nodeIds.map(nodeId => ({
+    nodeId,
+    checks: Object.entries(getNodeState(state, nodeId).checks)
+      .filter(([, outcome]) => outcome === 'fail')
+      .map(([checkId]) => checkId)
+      .sort(),
+  })).filter(node => node.checks.length > 0);
+  return createHash('sha256').update(JSON.stringify(failedChecks)).digest('hex');
+}
+
+// The stall detector counts consecutive repairs that leave a feature's
+// findings unchanged. The first observation of the findings, usually the
+// initial grade, seeds the count; only a completed repair can raise it, so a
+// regrade of unchanged source neither charges the detector nor resets it.
+function observeUnchangedFailures(state: DependencyState, promptedNodeIds: ReadonlySet<string>,
+  repaired: boolean): void {
+  const failed = new Set<string>();
+  const failedNodes = state.definition.nodes.filter(node => {
+    const nodeState = getNodeState(state, node.id);
+    return promptedNodeIds.has(node.id)
+      && ['active', 'working'].includes(nodeState.status)
+      && hasFailedCheck(state, node);
+  });
+  for (const node of failedNodes) {
+    const fingerprint = failureFingerprint(state, [node.id]);
+    const prior = getNodeState(state, node.id).unchangedFailure;
+    const count = prior.fingerprint !== fingerprint ? 1
+      : repaired ? prior.count + 1 : prior.count;
+    getNodeState(state, node.id).unchangedFailure = {
+      fingerprint,
+      count,
+    };
+    if (count >= state.definition.unchangedFailureLimit) {
+      if (hasFailedFeatureCheck(state, node)) failed.add(node.id);
+    }
+  }
+
+  for (const nodeId of failed) {
+    getNodeState(state, nodeId).status = 'failed';
+    getNodeState(state, nodeId).exhaustedAtLevel = state.level;
+    getNodeState(state, nodeId).exhaustionReason = 'repeated-findings';
+  }
+
+  // A dependent feature is blocked by a failed prerequisite. It does not
+  // use repair budget or become eligible for a continuation grant of its own.
+  blockBrokenDescendants(state);
+}
+
+function applyDependencyResult(inputState: DependencyState, inputResult: DependencyResult): DependencyState {
+  if (inputState.phase !== 'active') throw new Error('cannot record a result after progression terminates');
+  const result = structuredClone(inputResult) as DependencyResult;
+  strictObject(result, 'result', new Set([
+    'attemptId', 'runId', 'outcome', 'category', 'reason', 'nodes',
+    'sourceSha256', 'selectionSha256', 'evidence', 'applicationFailure', 'repairRegression',
+    'completedRepair',
+  ]));
+  nonEmptyString(result.attemptId, 'result.attemptId');
+  if (result.sourceSha256 !== undefined && !HASH.test(result.sourceSha256)) {
+    throw new Error('result.sourceSha256 must be a SHA-256 identity');
+  }
+  if (result.selectionSha256 !== undefined && !HASH.test(result.selectionSha256)) {
+    throw new Error('result.selectionSha256 must be a SHA-256 identity');
+  }
+  if (result.runId !== undefined && (typeof result.runId !== 'string' || !result.runId)) {
+    throw new Error('result.runId must be a non-empty string');
+  }
+  if (result.evidence !== undefined) {
+    validateSourceEvidence(result.evidence, 'result.evidence');
+    if (!result.runId
+      || result.attemptId !== `${result.runId}-progression-${inputState.attempts.length + 1}`) {
+      throw new Error('result.attemptId does not match its owned progression sequence');
+    }
+  }
+  if (inputState.attempts.some(attempt => attempt.attemptId === result.attemptId)) {
+    throw new Error(`duplicate attempt id ${result.attemptId}`);
+  }
+  if (!['conclusive', 'inconclusive'].includes(result.outcome)) {
+    throw new Error('result.outcome must be conclusive or inconclusive');
+  }
+  const currentAction = nextDependencyAction(inputState);
+  if (result.completedRepair !== undefined && result.completedRepair !== true) {
+    throw new Error('result.completedRepair must be true when present');
+  }
+  if (result.completedRepair && currentAction.type !== 'repair') {
+    throw new Error('only a repair action can record a completed repair');
+  }
+  const repair = result.completedRepair && currentAction.type === 'repair' ? {
+    nodeIds: [...currentAction.repair.nodeIds],
+    depth: currentAction.level,
+    ...(currentAction.repair.grantId ? { grantId: currentAction.repair.grantId } : {}),
+  } : undefined;
+  if (result.repairRegression !== undefined) {
+    const regression = result.repairRegression;
+    strictObject(regression, 'result.repairRegression', new Set(['ownerNodeIds', 'report']));
+    if (currentAction.type !== 'repair' || result.outcome !== 'conclusive'
+      || !Array.isArray(regression.ownerNodeIds)
+      || regression.ownerNodeIds.length === 0
+      || regression.ownerNodeIds.some(nodeId => typeof nodeId !== 'string' || !nodeId)
+      || new Set(regression.ownerNodeIds).size !== regression.ownerNodeIds.length
+      || typeof regression.report !== 'string' || !regression.report.trim()
+      || regression.report.length > 20_000) {
+      throw new Error('result.repairRegression is invalid');
+    }
+    const expectedOwners = selectedPromptNodeIds(inputState).sort();
+    if (JSON.stringify([...regression.ownerNodeIds].sort()) !== JSON.stringify(expectedOwners)) {
+      throw new Error('result.repairRegression does not belong to the current repair');
+    }
+  }
+  const state = structuredClone(inputState) as DependencyState;
+  if (result.outcome === 'inconclusive') {
+    nonEmptyString(result.reason, 'result.reason');
+    if (!INCONCLUSIVE_CATEGORIES.includes(result.category)) {
+      throw new Error(`result.category must be one of ${[...INCONCLUSIVE_CATEGORIES].join(', ')}`);
+    }
+    if (result.nodes !== undefined || result.applicationFailure !== undefined) {
+      throw new Error('inconclusive results cannot contain node grades or application failures');
+    }
+    state.attempts.push({ attemptId: result.attemptId, level: state.level,
+      outcome: result.outcome, category: result.category, reason: result.reason,
+      ...(result.runId ? { runId: result.runId } : {}),
+      ...(result.evidence ? { evidence: result.evidence } : {}),
+      ...(result.sourceSha256 ? { sourceSha256: result.sourceSha256 } : {}),
+      ...(result.selectionSha256 ? { selectionSha256: result.selectionSha256 } : {}),
+      ...(repair ? { repair } : {}) });
+    // A completed repair is charged even when its grade did not finish. The
+    // feature keeps its current status: the repaired source is preserved and
+    // graded before any status can change, so a grader failure can never
+    // finalize a feature or open its children.
+    if (repair) recordRepair(state, repair);
+    return state;
+  }
+  if (result.reason !== undefined || result.category !== undefined) {
+    throw new Error('conclusive results cannot contain inconclusive details');
+  }
+
+  const promptedNodeIds = new Set(selectedPromptNodeIds(inputState));
+  const actual = validateConclusiveResult(state, result);
+  const selectedNodeIds = gradingNodeIds(state);
+  for (const nodeId of selectedNodeIds) {
+    const node = getDefinitionNode(state.definition, nodeId);
+    const outcomes = actual.get(nodeId);
+    if (!outcomes) throw new Error(`result is missing node ${nodeId}`);
+    getNodeState(state, nodeId).checks = Object.fromEntries(node.gradingChecks.map(check => {
+      const outcome = outcomes.get(check.id);
+      const prior = getNodeState(state, nodeId).checks[check.id] ?? null;
+      if (outcome === undefined) return [check.id, prior];
+      return [check.id, outcome === 'not-run' ? prior : outcome];
+    })) as Record<string, StoredCheckOutcome>;
+  }
+  const failedPromptNodeIds = new Set<string>();
+  for (const nodeId of selectedNodeIds) {
+    if (!promptedNodeIds.has(nodeId)) continue;
+    const outcomes = actual.get(nodeId);
+    if (!outcomes) throw new Error(`result is missing node ${nodeId}`);
+    const nodeState = getNodeState(state, nodeId);
+    const hasFailedCheck = [...outcomes.values()].includes('fail');
+    if (!hasFailedCheck || !['active', 'working', 'passed'].includes(nodeState.status)) continue;
+    failedPromptNodeIds.add(nodeId);
+  }
+  state.attempts.push({ attemptId: result.attemptId, level: state.level, outcome: result.outcome,
+    ...(result.runId ? { runId: result.runId } : {}),
+    ...(result.evidence ? { evidence: result.evidence } : {}),
+    ...(result.sourceSha256 ? { sourceSha256: result.sourceSha256 } : {}),
+    ...(result.selectionSha256 ? { selectionSha256: result.selectionSha256 } : {}),
+    ...(repair ? { repair } : {}),
+    ...(result.repairRegression
+      ? { repairRegression: structuredClone(result.repairRegression) } : {}),
+    ...(result.applicationFailure
+      ? { applicationFailure: structuredClone(result.applicationFailure) } : {}) });
+  if (repair) recordRepair(state, repair);
+  for (const nodeId of selectedNodeIds) {
+    const node = getDefinitionNode(state.definition, nodeId);
+    const outcomes = actual.get(nodeId);
+    if (!outcomes) throw new Error(`result is missing node ${nodeId}`);
+    if ([...outcomes.values()].every(outcome => outcome === 'not-run')) continue;
+    updateNodeStatus(state, node);
+    if (!hasFailedCheck(state, node)) {
+      getNodeState(state, nodeId).unchangedFailure = { fingerprint: null, count: 0 };
+    }
+  }
+  // Repair budget is shared, so a feature that was not graded this time may
+  // have lost its last repair. Finalize it now rather than offering a repair
+  // with nothing left; features already finalized keep their exhaustion level.
+  for (const node of state.definition.nodes) {
+    if (!selectedNodeIds.includes(node.id)
+      && ['active', 'working'].includes(getNodeState(state, node.id).status)
+      && hasFailedFeatureCheck(state, node)) {
+      updateNodeStatus(state, node);
+    }
+  }
+  blockBrokenDescendants(state);
+  observeUnchangedFailures(state, failedPromptNodeIds, repair !== undefined);
+  openLevel(state, state.level);
+  return state;
+}
+
+// True while the most recent completed repair has no conclusive grade.
+function awaitingRepairGrade(state: DependencyState): boolean {
+  for (let index = state.attempts.length - 1; index >= 0; index -= 1) {
+    const attempt = state.attempts[index]!;
+    if (attempt.outcome === 'conclusive') return false;
+    if (attempt.repair) return true;
+  }
+  return false;
+}
+
+function applyRepairGrant(inputState: DependencyState,
+  inputGrant: DependencyRepairGrant): DependencyState {
+  if (inputState.phase !== 'terminal') throw new Error('repairs can be granted only after progression terminates');
+  const grant = structuredClone(inputGrant) as DependencyRepairGrant;
+  strictObject(grant, 'grant', new Set(['grantId', 'level', 'nodeIds', 'repairs']));
+  nonEmptyString(grant.grantId, 'grant.grantId');
+  positiveInteger(grant.level, 'grant.level');
+  grant.nodeIds = uniqueStrings(grant.nodeIds, 'grant.nodeIds').sort();
+  positiveInteger(grant.repairs, 'grant.repairs');
+  if (inputState.grants.some(item => item.grantId === grant.grantId)) {
+    throw new Error(`duplicate grant id ${grant.grantId}`);
+  }
+  const nodesById = new Map(inputState.definition.nodes.map(node => [node.id, node]));
+  const eligible = grant.nodeIds.map(nodeId => nodesById.get(nodeId));
+  if (eligible.some(node => !node
+    || getNodeState(inputState, node.id).status !== 'failed'
+    || getNodeState(inputState, node.id).exhaustedAtLevel !== grant.level)) {
+    throw new Error(`grant level ${grant.level} includes a feature without an exhausted repair budget`);
+  }
+  const grantedNodes = eligible.filter((node): node is CompiledProgressionNode => node !== undefined);
+  const state = structuredClone(inputState) as DependencyState;
+  state.level = grant.level;
+  state.phase = 'active';
+  state.terminalOutcome = null;
+  state.grants.push(grant);
+  const reopenDescendants = new Set<string>();
+  for (const node of grantedNodes) {
+    const nodeState = getNodeState(state, node.id);
+    if (nodeState.status === 'failed') reopenDescendants.add(node.id);
+    nodeState.exhaustedAtLevel = null;
+    nodeState.exhaustionReason = null;
+    nodeState.unchangedFailure = { fingerprint: null, count: 0 };
+    updateNodeStatus(state, node);
+  }
+  const affected = new Set(reopenDescendants);
+  let changed = true;
+  while (changed) {
+    changed = false;
+    for (const node of state.definition.nodes) {
+      if (!affected.has(node.id) && node.dependencies.some(parentId => affected.has(parentId))) {
+        affected.add(node.id);
+        changed = true;
+      }
+    }
+  }
+  for (const node of state.definition.nodes.filter(node =>
+    !reopenDescendants.has(node.id) && affected.has(node.id))) {
+    const nodeState = getNodeState(state, node.id);
+    nodeState.checks = Object.fromEntries(node.gradingChecks.map(check => [check.id, null]));
+    nodeState.status = 'locked';
+    nodeState.exhaustedAtLevel = null;
+    nodeState.exhaustionReason = null;
+  }
+  blockBrokenDescendants(state);
+  openLevel(state, grant.level);
+  return state;
+}
+
+function validateEvent(event: unknown, index: number): asserts event is DependencyEvent {
+  strictObject(event, `events[${index}]`, new Set(['sequence', 'type', 'result', 'grant']));
+  if (event.sequence !== index + 1) throw new Error(`event sequence ${event.sequence} must be ${index + 1}`);
+  if (event.type === 'attempt-recorded') {
+    if (event.result === undefined || event.grant !== undefined) {
+      throw new Error(`attempt event ${event.sequence} must contain only a result`);
+    }
+  } else if (event.type === 'repairs-granted') {
+    if (event.grant === undefined || event.result !== undefined) {
+      throw new Error(`grant event ${event.sequence} must contain only a grant`);
+    }
+  } else {
+    throw new Error(`unknown dependency mode event ${JSON.stringify(event.type)}`);
+  }
+}
+
+export function replayDependencyMode(inputDefinition: unknown,
+  inputEvents: unknown[] = []): DependencyState {
+  const definition = compileDependencyMode(inputDefinition);
+  if (!Array.isArray(inputEvents)) throw new Error('dependency mode events must be an array');
+  let state = initialDependencyState(definition);
+  inputEvents.forEach((inputEvent, index) => {
+    const event = structuredClone(inputEvent);
+    validateEvent(event, index);
+    state = event.type === 'attempt-recorded'
+      ? applyDependencyResult(state, event.result)
+      : applyRepairGrant(state, event.grant);
+    state.events.push(event);
+  });
+  assertState(state, definition);
+  return state;
+}
+
+export function recordDependencyResult(inputState: ProgressionState,
+  inputResult: unknown): DependencyState {
+  const state = asDependencyState(inputState);
+  const event: DependencyEvent = { sequence: state.events.length + 1,
+    type: 'attempt-recorded', result: structuredClone(inputResult) as DependencyResult };
+  const next = applyDependencyResult(state, event.result);
+  next.events.push(event);
+  return next;
+}
+
+export function grantDependencyRepairs(inputState: ProgressionState,
+  inputGrant: unknown): DependencyState {
+  const state = asDependencyState(inputState);
+  const event: DependencyEvent = { sequence: state.events.length + 1,
+    type: 'repairs-granted', grant: structuredClone(inputGrant) as DependencyRepairGrant };
+  const next = applyRepairGrant(state, event.grant);
+  next.events.push(event);
+  return next;
+}
+
+export function nextDependencyAction(inputState: ProgressionState): ProgressionAction {
+  const state = asDependencyState(inputState);
+  if (state.phase === 'terminal') {
+    if (!state.terminalOutcome) throw new Error('terminal dependency state is missing its outcome');
+    return { type: 'terminal', outcome: { ...state.terminalOutcome } };
+  }
+  const prompt = selectedPromptWork(state);
+  const grading = selectedGradingWork(state);
+  const repairing = prompt.nodeIds.some(nodeId =>
+    Object.values(getNodeState(state, nodeId).checks).includes('fail'));
+  const featureIds = prompt.nodeIds;
+  const actionLevel = repairing || state.definition.workSelection === 'all-at-once' ? state.level
+    : Math.max(...featureIds.map(nodeId => getDefinitionNode(state.definition, nodeId).level));
+  const allowance = repairing
+    ? repairAllowance(state, featureIds, actionLevel)
+    : { remaining: 0 };
+  return {
+    type: repairing ? 'repair' : 'build',
+    level: actionLevel,
+    repair: { nodeIds: repairing ? [...featureIds] : [], ...allowance,
+      ...(repairing && awaitingRepairGrade(state) ? { awaitingGrade: true as const } : {}) },
+    prompt,
+    grading,
+  };
+}
+
+export function activeDependencyNodes(inputState: ProgressionState): string[] {
+  const state = asDependencyState(inputState);
+  return currentPromptNodeIds(state);
+}
+
+export function scoreDependencyMode(inputState: ProgressionState): DependencyScore {
+  const state = asDependencyState(inputState);
+  return scoreDependencyState(state);
+}
+
+export const dependencyModePolicy: Readonly<ProgressionPolicy<
+  CompiledDependencyDefinition,
+  ProgressionState,
+  ProgressionAction,
+  DependencyScore,
+  DependencyGradingSelection
+>> = Object.freeze({
+  id: DEPENDENCY_MODE_POLICY,
+  compile: compileDependencyMode,
+  initialize: initializeDependencyMode,
+  activeNodes: activeDependencyNodes,
+  promptSelection,
+  gradingSelection,
+  recordResult: recordDependencyResult,
+  grantRepairs: grantDependencyRepairs,
+  replay: replayDependencyMode,
+  nextAction: nextDependencyAction,
+  score: scoreDependencyMode,
+});
diff --git a/tools/stack-bench/src/progression/dependency-score.ts b/tools/stack-bench/src/progression/dependency-score.ts
new file mode 100644
index 00000000000..ef18447f902
--- /dev/null
+++ b/tools/stack-bench/src/progression/dependency-score.ts
@@ -0,0 +1,142 @@
+import type { CompiledProgressionDefinition } from './progression-definition.js';
+import type {
+  ProgressionNodeState,
+  ProgressionState,
+  ProgressionTerminalOutcome,
+} from './progression-state.js';
+import { dependencyNodeState } from './dependency-state.js';
+
+export const INCONCLUSIVE_CATEGORIES = [
+  'provider_failure',
+  'harness_failure',
+  'interrupted',
+  'inconclusive_evidence',
+] as const;
+
+export type InconclusiveCategory = typeof INCONCLUSIVE_CATEGORIES[number];
+
+interface PointTotals {
+  passedPoints: number;
+  failedPoints: number;
+  blockedPoints: number;
+  gradedPoints: number;
+  ungradedPoints: number;
+  availablePoints: number;
+}
+
+export interface DependencyScore {
+  status: 'final' | 'provisional';
+  terminalOutcome: ProgressionTerminalOutcome | null;
+  attempts: {
+    total: number;
+    inconclusive: number;
+    inconclusiveByCategory: Record<InconclusiveCategory, number>;
+    conclusive: number;
+  };
+  questlines: Array<PointTotals & {
+    id: string;
+    title: string;
+    percentage: number | null;
+    provisionalPercentage: null;
+  }>;
+  questlineAveragePercentage: number | null;
+  uniqueChecks: PointTotals & { percentage: number | null; provisionalPercentage: null };
+  nodes: Array<PointTotals & {
+    id: string;
+    status: ProgressionNodeState['status'];
+    blockedBy: string[];
+  }>;
+}
+
+interface ScoringState extends ProgressionState {
+  definition: CompiledProgressionDefinition;
+}
+
+function nodePoints(state: ScoringState, nodeId: string): PointTotals {
+  const node = state.definition.nodes.find(candidate => candidate.id === nodeId);
+  if (!node) throw new Error(`unknown dependency node ${nodeId}`);
+  const nodeState = dependencyNodeState(state, nodeId);
+  const checks = nodeState.checks;
+  const blocked = nodeState.status === 'blocked';
+  const passedPoints = node.gradingChecks.reduce((total, check) =>
+    total + (!blocked && checks[check.id] === 'pass' ? check.points : 0), 0);
+  const failedPoints = node.gradingChecks.reduce((total, check) =>
+    total + (!blocked && checks[check.id] === 'fail' ? check.points : 0), 0);
+  const blockedPoints = blocked
+    ? node.gradingChecks.reduce((total, check) => total + check.points, 0) : 0;
+  const gradedPoints = passedPoints + failedPoints;
+  const availablePoints = node.gradingChecks.reduce((total, check) => total + check.points, 0);
+  return { passedPoints, failedPoints, gradedPoints, blockedPoints,
+    ungradedPoints: availablePoints - gradedPoints - blockedPoints,
+    availablePoints };
+}
+
+function addPoints(total: PointTotals, points: PointTotals): PointTotals {
+  total.passedPoints += points.passedPoints;
+  total.failedPoints += points.failedPoints;
+  total.blockedPoints += points.blockedPoints;
+  total.gradedPoints += points.gradedPoints;
+  total.ungradedPoints += points.ungradedPoints;
+  total.availablePoints += points.availablePoints;
+  return total;
+}
+
+const emptyPoints = (): PointTotals => ({
+  passedPoints: 0,
+  failedPoints: 0,
+  blockedPoints: 0,
+  gradedPoints: 0,
+  ungradedPoints: 0,
+  availablePoints: 0,
+});
+
+const percentage = ({ passedPoints, availablePoints }: PointTotals): number =>
+  (passedPoints / availablePoints) * 100;
+
+export function scoreDependencyState(state: ScoringState): DependencyScore {
+  const final = state.phase === 'terminal';
+  const questlines = state.definition.questlines.map(questline => {
+    const points = questline.nodes.reduce((total, nodeId) =>
+      addPoints(total, nodePoints(state, nodeId)), emptyPoints());
+    return { id: questline.id, title: questline.title, ...points,
+      percentage: final ? percentage(points) : null,
+      provisionalPercentage: null };
+  });
+  const uniqueChecks = state.definition.nodes.reduce((total, node) =>
+    addPoints(total, nodePoints(state, node.id)), emptyPoints());
+  const nodes = state.definition.nodes.map(node => {
+    const nodeState = dependencyNodeState(state, node.id);
+    return {
+      id: node.id,
+      status: nodeState.status,
+      blockedBy: nodeState.status === 'blocked'
+        ? node.dependencies.filter(parentId => {
+          const status = dependencyNodeState(state, parentId).status;
+          return status === 'failed' || status === 'blocked';
+        })
+        : [],
+      ...nodePoints(state, node.id),
+    };
+  });
+  const inconclusiveAttempts = state.attempts.filter(attempt =>
+    attempt.outcome === 'inconclusive').length;
+  const inconclusiveByCategory = Object.fromEntries(INCONCLUSIVE_CATEGORIES
+    .map(category => [category, state.attempts.filter(attempt =>
+      attempt.category === category).length])) as Record<InconclusiveCategory, number>;
+  return {
+    status: final ? 'final' : 'provisional',
+    terminalOutcome: final && state.terminalOutcome ? { ...state.terminalOutcome } : null,
+    attempts: { total: state.attempts.length, inconclusive: inconclusiveAttempts,
+      inconclusiveByCategory,
+      conclusive: state.attempts.length - inconclusiveAttempts },
+    questlines,
+    questlineAveragePercentage: final
+      ? questlines.reduce((total, questline) => total + (questline.percentage ?? 0), 0)
+        / questlines.length
+      : null,
+    uniqueChecks: { ...uniqueChecks,
+      percentage: final ? percentage(uniqueChecks) : null,
+      provisionalPercentage: null },
+    nodes,
+  };
+}
diff --git a/tools/stack-bench/src/progression/dependency-state.ts b/tools/stack-bench/src/progression/dependency-state.ts
new file mode 100644
index 00000000000..7f982b0cace
--- /dev/null
+++ b/tools/stack-bench/src/progression/dependency-state.ts
@@ -0,0 +1,10 @@
+import type { ProgressionNodeState } from './progression-state.js';
+
+export function dependencyNodeState(
+  state: { nodes: Record<string, ProgressionNodeState> },
+  nodeId: string,
+): ProgressionNodeState {
+  const node = state.nodes[nodeId];
+  if (!node) throw new Error(`dependency mode state is missing node ${nodeId}`);
+  return node;
+}
diff --git a/tools/stack-bench/src/progression/dependency-validation.ts b/tools/stack-bench/src/progression/dependency-validation.ts
new file mode 100644
index 00000000000..01812cf0b2a
--- /dev/null
+++ b/tools/stack-bench/src/progression/dependency-validation.ts
@@ -0,0 +1,42 @@
+import { isProgressionIdentifier } from './progression-identifiers.js';
+
+export const isDependencyObject = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+export function dependencyFailure(at: string, message: string): never {
+  throw new Error(`invalid dependency mode at ${at}: ${message}`);
+}
+
+export function assertDependencyObject(
+  value: unknown,
+  at: string,
+  fields: ReadonlySet<string>,
+): asserts value is Record<string, unknown> {
+  if (!isDependencyObject(value)) return dependencyFailure(at, 'must be an object');
+  for (const key of Object.keys(value)) {
+    if (!fields.has(key)) dependencyFailure(`${at}.${key}`, 'unknown field');
+  }
+}
+
+export function dependencyNonEmptyString(value: unknown, at: string): string {
+  if (typeof value !== 'string' || value.trim().length === 0) {
+    return dependencyFailure(at, 'must be a non-empty string');
+  }
+  return value;
+}
+
+export function dependencyIdentifier(value: unknown, at: string): string {
+  const result = dependencyNonEmptyString(value, at);
+  if (!isProgressionIdentifier(result)) {
+    return dependencyFailure(at,
+      'must contain lowercase letters, numbers, dots, dashes, or underscores');
+  }
+  return result;
+}
+
+export function dependencyPositiveInteger(value: unknown, at: string): number {
+  if (!Number.isSafeInteger(value) || Number(value) < 1) {
+    return dependencyFailure(at, 'must be a positive integer within the safe range');
+  }
+  return Number(value);
+}
diff --git a/tools/stack-bench/src/progression/feature-catalog-selection.ts b/tools/stack-bench/src/progression/feature-catalog-selection.ts
new file mode 100644
index 00000000000..66bc41b0720
--- /dev/null
+++ b/tools/stack-bench/src/progression/feature-catalog-selection.ts
@@ -0,0 +1,41 @@
+import { readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+
+import { compileFeatureCatalogInput, compileProgressionDefinitionFile }
+  from './progression-definition.js';
+import type {
+  CompiledProgressionDefinition,
+  ProgressionInput,
+} from './progression-definition.js';
+import { parseVersionedProgressionId } from './progression-identifiers.js';
+
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const readJson = (path: string): unknown => JSON.parse(readFileSync(path, 'utf8')) as unknown;
+
+export interface FeatureCatalogTrack {
+  name: string;
+  dir: string;
+}
+
+export function resolveFeatureCatalog(input: unknown,
+  track: FeatureCatalogTrack): ProgressionInput<CompiledProgressionDefinition> {
+  if (typeof input !== 'string') return compileFeatureCatalogInput(input);
+  const reference = parseVersionedProgressionId(input);
+  if (!reference) {
+    throw new Error('feature catalog must be an exact id@version reference using semantic versioning');
+  }
+  const { id, version } = reference;
+  const directory = join(track.dir, 'progression');
+  const candidates = readdirSync(directory).filter(name => name.endsWith('.json'))
+    .map(name => join(directory, name)).filter(path => {
+      const value = readJson(path);
+      return object(value) && value.id === id && value.version === version;
+    });
+  if (candidates.length !== 1) {
+    throw new Error(`feature catalog must resolve exactly one ${input} definition in track ${track.name}`);
+  }
+  return compileFeatureCatalogInput(compileProgressionDefinitionFile(candidates[0]!, {
+    trackRoot: track.dir,
+  }));
+}
diff --git a/tools/stack-bench/src/progression/grade-bundle-result.ts b/tools/stack-bench/src/progression/grade-bundle-result.ts
new file mode 100644
index 00000000000..c055540e944
--- /dev/null
+++ b/tools/stack-bench/src/progression/grade-bundle-result.ts
@@ -0,0 +1,400 @@
+import { validateCheckEvidence } from '../evidence/check-evidence.js';
+import type { CheckEvidence } from '../evidence/check-evidence.js';
+import { validateArtifact } from '../evidence/artifacts.js';
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import { sha256 } from '../evidence/provenance.js';
+import { validateProgressionOwner } from './progression-state.js';
+
+interface GradeCheck {
+  id: string;
+  nodeId?: string;
+  points: number;
+}
+
+interface ProgressionGradingAction {
+  prompt?: { nodeIds?: unknown };
+  grading: { nodeIds?: unknown; checks?: unknown };
+}
+
+interface SelectedCheck {
+  stableKey: string;
+  points: number;
+}
+
+interface GradeCriterion {
+  stableKey?: string;
+  points?: number;
+  evidence?: unknown;
+}
+
+interface GradeBundlePayload {
+  observation?: string;
+  source?: { sha256?: string };
+  selection?: {
+    sha256?: string;
+    checks?: unknown;
+    attemptedChecks?: unknown;
+    reportedChecks?: unknown;
+    notRun?: unknown;
+  };
+  outcome?: { kind?: string; reason?: string; phase?: string };
+  error?: string;
+  totals?: {
+    score?: number;
+    max?: number;
+    regression?: { score?: number; max?: number } | null;
+  };
+  suites?: Record<string, {
+    features?: Array<{ criteria?: GradeCriterion[] }>;
+  }>;
+}
+
+interface BenchmarkRunPayload {
+  backend?: string;
+  model?: string;
+  condition?: { sha256?: string };
+  progressionOwner?: unknown;
+  featureCatalog?: unknown;
+  dependencyPolicy?: unknown;
+}
+
+interface GradeConversionOptions {
+  owner?: unknown;
+  runArtifact?: unknown;
+  featureCatalogIdentity?: unknown;
+  dependencyPolicyIdentity?: unknown;
+  selectionSha256?: string;
+  sourceSha256?: string;
+  recipeIdentity?: unknown;
+  sequence?: number;
+}
+
+interface ProgressionCheckResult {
+  id: string;
+  outcome: 'pass' | 'fail' | 'not-run';
+}
+
+interface ProgressionNodeResult {
+  id: string;
+  checks: ProgressionCheckResult[];
+}
+
+interface GradeEvidenceReference {
+  kind: 'grade_bundle';
+  id: string;
+  sha256: string;
+}
+
+interface ProgressionResultBase {
+  attemptId: string;
+  runId: string;
+  sourceSha256: string;
+  selectionSha256: string;
+  evidence?: GradeEvidenceReference;
+}
+
+export interface InconclusiveProgressionResult extends ProgressionResultBase {
+  outcome: 'inconclusive';
+  category: 'harness_failure' | 'inconclusive_evidence';
+  reason: string;
+}
+
+export interface ConclusiveProgressionResult extends ProgressionResultBase {
+  outcome: 'conclusive';
+  applicationFailure?: { phase: string; reason: string };
+  nodes: ProgressionNodeResult[];
+}
+
+export type ProgressionGradeResult =
+  | InconclusiveProgressionResult
+  | ConclusiveProgressionResult;
+
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const HASH = /^[a-f0-9]{64}$/;
+
+function exactKeys(values: unknown, at: string): string[] {
+  if (!Array.isArray(values)) throw new Error(`${at} must be an array`);
+  const keys = values.map((value, index) => {
+    const key = typeof value === 'string' ? value : object(value) ? value.stableKey : undefined;
+    if (typeof key !== 'string' || !key) throw new Error(`${at}[${index}] has no stable key`);
+    return key;
+  });
+  if (new Set(keys).size !== keys.length) throw new Error(`${at} contains duplicate checks`);
+  return keys.sort();
+}
+
+function sameKeys(left: string[], right: string[]): boolean {
+  return JSON.stringify([...left].sort()) === JSON.stringify([...right].sort());
+}
+
+function inconclusive(attemptId: string, runId: string, sourceSha256: string,
+  selectionSha256: string, evidence: GradeEvidenceReference | null,
+  category: InconclusiveProgressionResult['category'], reason: string): InconclusiveProgressionResult {
+  return { attemptId, runId, sourceSha256, selectionSha256,
+    ...(evidence ? { evidence } : {}),
+    outcome: 'inconclusive', category, reason };
+}
+
+export function gradeBundleToProgressionResult(input: unknown, action: unknown,
+  { owner, runArtifact, featureCatalogIdentity, dependencyPolicyIdentity, selectionSha256,
+    sourceSha256, recipeIdentity, sequence }: GradeConversionOptions = {}): ProgressionGradeResult {
+  const artifact = validateArtifact<GradeBundlePayload>(input,
+    { source: '<progression-grade-bundle>' });
+  const run = validateArtifact<BenchmarkRunPayload>(runArtifact,
+    { source: '<progression-benchmark-run>' });
+  const validatedOwner = validateProgressionOwner(owner, { requireWorkspace: true });
+  if (artifact.kind !== 'grade_bundle' || !object(action) || !object(action.grading)) {
+    throw new Error('grade bundle conversion requires an artifact and progression grading action');
+  }
+  const gradingAction: ProgressionGradingAction = {
+    grading: action.grading,
+    ...(object(action.prompt) ? { prompt: action.prompt } : {}),
+  };
+  const bundle = artifact.payload;
+  const runAgentAdapter = run.identities.agentAdapter;
+  const runStackAdapter = run.identities.stackAdapter;
+  const runEngine = run.identities.engine;
+  const gradeStackAdapter = artifact.identities.stackAdapter;
+  const gradeEngine = artifact.identities.engine;
+  const gradeRecipe = artifact.identities.recipe;
+  if (sequence !== undefined && (!Number.isSafeInteger(sequence) || sequence < 1)) {
+    throw new Error('progression grading sequence must be a positive integer');
+  }
+  if (typeof artifact.attempt.id !== 'string' || !artifact.attempt.id) {
+    throw new Error('grade bundle attempt identity is required');
+  }
+  const attemptId = sequence === undefined
+    ? artifact.attempt.id : `${run.id}-progression-${sequence}`;
+  const evidence: GradeEvidenceReference | null = sequence === undefined ? null : {
+    kind: 'grade_bundle',
+    id: artifact.id,
+    sha256: sha256(canonicalDefinitionJson(artifact)),
+  };
+  const campaignOwner = { schemaVersion: validatedOwner.schemaVersion,
+    campaign: validatedOwner.campaign, attempt: validatedOwner.attempt };
+  if (!['benchmark_run', 'repair_continuation'].includes(run.kind)
+    || run.attempt.parentId !== validatedOwner.attempt.id
+    || artifact.attempt.parentId !== run.id) {
+    throw new Error('grade bundle does not belong to the owned progression benchmark run');
+  }
+  const ownerMismatches: string[] = [];
+  const mismatch = (changed: boolean, field: string): void => {
+    if (changed) ownerMismatches.push(field);
+  };
+  mismatch(!object(featureCatalogIdentity)
+    || typeof featureCatalogIdentity.sha256 !== 'string'
+    || !HASH.test(featureCatalogIdentity.sha256),
+    'featureCatalogIdentity');
+  mismatch(!object(dependencyPolicyIdentity)
+    || typeof dependencyPolicyIdentity.sha256 !== 'string'
+    || !HASH.test(dependencyPolicyIdentity.sha256),
+    'dependencyPolicyIdentity');
+  mismatch(run.payload.backend !== validatedOwner.attempt.stack, 'run.backend');
+  mismatch(run.payload.model !== validatedOwner.attempt.model, 'run.model');
+  mismatch(run.payload.condition?.sha256 !== validatedOwner.attempt.conditionSha256, 'run.condition');
+  mismatch(canonicalDefinitionJson(run.payload.progressionOwner)
+    !== canonicalDefinitionJson(campaignOwner), 'run.progressionOwner');
+  mismatch(canonicalDefinitionJson(run.payload.featureCatalog)
+    !== canonicalDefinitionJson(featureCatalogIdentity), 'run.featureCatalog');
+  mismatch(canonicalDefinitionJson(run.payload.dependencyPolicy)
+    !== canonicalDefinitionJson(dependencyPolicyIdentity), 'run.dependencyPolicy');
+  mismatch(runAgentAdapter?.id !== validatedOwner.attempt.agentAdapter,
+    'run.agentAdapter');
+  mismatch(runStackAdapter?.id !== validatedOwner.attempt.stack, 'run.stackAdapter');
+  mismatch(gradeEngine?.sha256 !== runEngine?.sha256,
+    'grade.engine');
+  mismatch(gradeStackAdapter?.id !== validatedOwner.attempt.stack,
+    'grade.stackAdapter');
+  if (ownerMismatches.length) {
+    throw new Error(`grade bundle benchmark owner does not match the progression campaign attempt: ${ownerMismatches.join(', ')}`);
+  }
+  if (!object(recipeIdentity) || typeof recipeIdentity.id !== 'string'
+    || typeof recipeIdentity.version !== 'string'
+    || typeof recipeIdentity.sha256 !== 'string' || !HASH.test(recipeIdentity.sha256)
+    || gradeRecipe?.id !== recipeIdentity.id
+    || gradeRecipe.version !== recipeIdentity.version
+    || gradeRecipe.sha256 !== recipeIdentity.sha256) {
+    throw new Error('grade bundle recipe identity does not match the progression grading selection');
+  }
+  if (typeof sourceSha256 !== 'string' || !HASH.test(sourceSha256)
+    || bundle.source?.sha256 !== sourceSha256) {
+    throw new Error('grade bundle source identity does not match the graded application source');
+  }
+  if (bundle.observation !== 'scored') {
+    throw new Error('progression grading requires a scored grade bundle');
+  }
+  const expectedValue = gradingAction.grading.checks ?? [];
+  if (!Array.isArray(expectedValue)) throw new Error('progression checks must be an array');
+  const expected = expectedValue as GradeCheck[];
+  const nodeIds = gradingAction.grading.nodeIds ?? [];
+  if (!Array.isArray(nodeIds) || nodeIds.some(id => typeof id !== 'string' || !id)
+    || new Set(nodeIds).size !== nodeIds.length) {
+    throw new Error('progression grading node ownership is invalid');
+  }
+  const validatedNodeIds = nodeIds as string[];
+  const selectedNodes = new Set(validatedNodeIds);
+  const expectedIds = exactKeys(expected.map(check => check.id), 'progression checks');
+  const missingNodeOwner = validatedNodeIds.some(nodeId =>
+    !expected.some(check => check.nodeId === nodeId));
+  if (expected.some(check => typeof check.nodeId !== 'string' || !check.nodeId
+    || !selectedNodes.has(check.nodeId)
+    || !Number.isSafeInteger(check.points) || check.points < 1)
+    || missingNodeOwner) {
+    throw new Error('progression checks require node ownership and positive points');
+  }
+  if (!object(bundle.selection)) throw new Error('grade bundle selection is required');
+  const selection = bundle.selection;
+  if (typeof selectionSha256 !== 'string' || !selectionSha256) {
+    throw new Error('progression grading selection identity is required');
+  }
+  if (selection.sha256 !== selectionSha256) {
+    throw new Error('grade bundle selection identity does not match the progression action');
+  }
+  const selectedIds = exactKeys(selection.checks, 'grade bundle selected checks');
+  if (!sameKeys(selectedIds, expectedIds)) {
+    throw new Error('grade bundle selected checks do not match the progression action');
+  }
+  const selectedChecks = selection.checks as SelectedCheck[];
+  const selectedById = new Map(selectedChecks.map(check => [check.stableKey, check]));
+  for (const check of expected) {
+    if (selectedById.get(check.id)?.points !== check.points) {
+      throw new Error(`grade bundle points for ${check.id} do not match the progression action`);
+    }
+  }
+
+  const bundleOutcome = bundle.outcome;
+  const outcome = bundleOutcome?.kind ?? null;
+  if (![null, 'passed', 'app_failure', 'harness_failure', 'inconclusive', 'ungraded']
+    .includes(outcome)) {
+    throw new Error(`grade bundle outcome ${JSON.stringify(outcome)} is not supported`);
+  }
+  if (outcome === 'harness_failure') {
+    return inconclusive(attemptId, run.id, sourceSha256, selectionSha256, evidence,
+      'harness_failure', bundleOutcome?.reason
+      ?? bundle.error ?? 'grader reported a harness failure');
+  }
+  if (outcome === 'inconclusive' || outcome === 'ungraded') {
+    return inconclusive(attemptId, run.id, sourceSha256, selectionSha256, evidence,
+      'inconclusive_evidence', bundleOutcome?.reason
+      ?? bundle.error ?? 'grader evidence was inconclusive');
+  }
+  if (bundleOutcome?.kind === 'app_failure'
+    && Array.isArray(selection.notRun) && selection.notRun.length > 0) {
+    const promptNodeIds = gradingAction.prompt?.nodeIds ?? [];
+    if (!Array.isArray(promptNodeIds) || promptNodeIds.length === 0
+      || promptNodeIds.some(id => typeof id !== 'string' || !selectedNodes.has(id))
+      || new Set(promptNodeIds).size !== promptNodeIds.length) {
+      throw new Error('progression application abort requires exact current prompt nodes');
+    }
+    const currentNodes = new Set(promptNodeIds);
+    const attempted = exactKeys(selection.attemptedChecks,
+      'grade bundle attempted checks');
+    const reported = exactKeys(selection.reportedChecks,
+      'grade bundle reported checks');
+    const notRun = exactKeys(selection.notRun, 'grade bundle not-run checks');
+    const accounted = [...attempted, ...notRun];
+    const score = bundle.totals?.score;
+    const max = bundle.totals?.max;
+    const regression = bundle.totals?.regression ?? { score: 0, max: 0 };
+    const regressionScore = regression.score;
+    const regressionMax = regression.max;
+    if (typeof bundleOutcome.phase !== 'string' || !bundleOutcome.phase
+      || typeof bundleOutcome.reason !== 'string' || !bundleOutcome.reason
+      || new Set(accounted).size !== accounted.length || !sameKeys(accounted, expectedIds)
+      || reported.some(id => !attempted.includes(id))
+      || typeof score !== 'number' || !Number.isSafeInteger(score) || score !== 0
+      || typeof max !== 'number' || !Number.isSafeInteger(max)
+      || typeof regressionScore !== 'number' || !Number.isSafeInteger(regressionScore)
+      || regressionScore !== 0
+      || typeof regressionMax !== 'number' || !Number.isSafeInteger(regressionMax)
+      || max + regressionMax !== expected.reduce((sum, check) => sum + check.points, 0)) {
+      throw new Error('grade bundle application abort is incomplete or inconsistent');
+    }
+    return { attemptId, runId: run.id, sourceSha256, selectionSha256,
+      ...(evidence ? { evidence } : {}),
+      outcome: 'conclusive',
+      applicationFailure: { phase: bundleOutcome.phase, reason: bundleOutcome.reason },
+      nodes: validatedNodeIds.map(nodeId => ({
+      id: nodeId,
+      checks: expected.filter(check => check.nodeId === nodeId)
+        .map(check => ({ id: check.id,
+          outcome: currentNodes.has(nodeId) ? 'fail' : 'not-run' })),
+    })) };
+  }
+
+  const attemptedIds = exactKeys(selection.attemptedChecks,
+    'grade bundle attempted checks');
+  const reportedIds = exactKeys(selection.reportedChecks,
+    'grade bundle reported checks');
+  if (!sameKeys(attemptedIds, expectedIds) || !sameKeys(reportedIds, expectedIds)
+    || !Array.isArray(selection.notRun) || selection.notRun.length !== 0) {
+    throw new Error('grade bundle does not contain complete progression evidence');
+  }
+  const evidenceById = new Map<string, CheckEvidence>();
+  for (const [suiteId, suite] of Object.entries(bundle.suites ?? {})) {
+    for (const [featureIndex, feature] of (suite?.features ?? []).entries()) {
+      for (const [criterionIndex, criterion] of (feature?.criteria ?? []).entries()) {
+        if (criterion?.stableKey === undefined) continue;
+        const at = `grade bundle ${suiteId}.features[${featureIndex}].criteria[${criterionIndex}]`;
+        if (!expectedIds.includes(criterion.stableKey)) {
+          throw new Error(`${at} reports unselected check ${criterion.stableKey}`);
+        }
+        if (evidenceById.has(criterion.stableKey)) {
+          throw new Error(`grade bundle repeats check ${criterion.stableKey}`);
+        }
+        if (criterion.points !== selectedById.get(criterion.stableKey)?.points) {
+          throw new Error(`grade bundle criterion points for ${criterion.stableKey} are ${JSON.stringify(criterion.points)}, expected ${JSON.stringify(
+            selectedById.get(criterion.stableKey)?.points)}`);
+        }
+        const checkedEvidence = validateCheckEvidence(criterion.evidence,
+          { at: `${at}.evidence` });
+        evidenceById.set(criterion.stableKey, checkedEvidence);
+      }
+    }
+  }
+  const missing = expectedIds.filter(id => !evidenceById.has(id));
+  if (missing.length) throw new Error(`grade bundle is missing check evidence: ${missing.join(', ')}`);
+  const checkEvidence = (id: string): CheckEvidence => {
+    const found = evidenceById.get(id);
+    if (!found) throw new Error(`grade bundle is missing check evidence: ${id}`);
+    return found;
+  };
+  const nonMeasured = expectedIds.map(id => checkEvidence(id))
+    .filter(evidence => !['passed', 'failed'].includes(evidence.status));
+  if (nonMeasured.length > 0) {
+    const harness = nonMeasured.some(evidence => evidence.status === 'harness_failure');
+    return inconclusive(attemptId, run.id, sourceSha256, selectionSha256, evidence,
+      harness ? 'harness_failure' : 'inconclusive_evidence',
+      `${nonMeasured.length} selected ${nonMeasured.length === 1 ? 'check did' : 'checks did'} not produce measured evidence`);
+  }
+  const passedPoints = expected.reduce((total, check) => total
+    + (checkEvidence(check.id).status === 'passed' ? check.points : 0), 0);
+  const availablePoints = expected.reduce((total, check) => total + check.points, 0);
+  const score = bundle.totals?.score;
+  const max = bundle.totals?.max;
+  const regression = bundle.totals?.regression ?? { score: 0, max: 0 };
+  const regressionScore = regression.score;
+  const regressionMax = regression.max;
+  if (typeof score !== 'number' || !Number.isSafeInteger(score)
+    || typeof max !== 'number' || !Number.isSafeInteger(max)
+    || typeof regressionScore !== 'number' || !Number.isSafeInteger(regressionScore)
+    || typeof regressionMax !== 'number' || !Number.isSafeInteger(regressionMax)
+    || score + regressionScore !== passedPoints
+    || max + regressionMax !== availablePoints) {
+    throw new Error('grade bundle totals do not match its selected check evidence');
+  }
+  if (outcome === 'passed' && passedPoints !== availablePoints) {
+    throw new Error('grade bundle passed outcome contradicts failed check evidence');
+  }
+  return { attemptId, runId: run.id, sourceSha256, selectionSha256,
+    ...(evidence ? { evidence } : {}),
+    outcome: 'conclusive', nodes: validatedNodeIds.map(nodeId => ({
+    id: nodeId,
+    checks: expected.filter(check => check.nodeId === nodeId).map(check => ({
+      id: check.id,
+      outcome: checkEvidence(check.id).status === 'passed' ? 'pass'
+        : checkEvidence(check.id).status === 'failed' ? 'fail' : 'not-run',
+    })),
+  })) };
+}
diff --git a/tools/stack-bench/src/progression/live-progression.ts b/tools/stack-bench/src/progression/live-progression.ts
new file mode 100644
index 00000000000..da74d1270a1
--- /dev/null
+++ b/tools/stack-bench/src/progression/live-progression.ts
@@ -0,0 +1,471 @@
+import { cpSync, existsSync, lstatSync, mkdirSync, readdirSync, rmSync } from 'node:fs';
+import { dirname, join, relative, resolve, sep } from 'node:path';
+
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import type { RecipeBinding } from '../composition/recipe-release.js';
+import { ARTIFACT_FILE, currentEngineIdentity, readArtifact } from '../evidence/artifacts.js';
+import type { Artifact } from '../evidence/artifacts.js';
+import type { GradeBundlePayload, RunLevelRecord, RunTotals }
+  from '../evidence/benchmark-run.js';
+import { hashDirectory, sha256 } from '../evidence/provenance.js';
+import { hashAppSource, restoreAppSource, snapshotAppSource }
+  from '../runtime/source-snapshot.js';
+import { replayDependencyMode } from './dependency-mode.js';
+import type { DependencyScore } from './dependency-score.js';
+import { gradeBundleToProgressionResult } from './grade-bundle-result.js';
+import type { ProgressionGradeResult } from './grade-bundle-result.js';
+import { progressionEngine } from './progression-engine.js';
+import type { ProgressionAction } from './progression-engine.js';
+import { validateProgressionInput } from './progression-definition.js';
+import type { ProgressionInput } from './progression-definition.js';
+import { resolveProgressionRecipeAction } from './progression-recipe-selection.js';
+import type { ProgressionRecipeAction } from './progression-recipe-selection.js';
+import {
+  progressionStateExists,
+  readProgressionState,
+  validateProgressionOwner,
+  writeProgressionState,
+} from './progression-state.js';
+import type {
+  ProgressionOwner,
+  ProgressionRepairRegression,
+  ProgressionResumeBinding,
+  ProgressionState,
+} from './progression-state.js';
+
+interface WorkspaceProgressionOwner extends ProgressionOwner {
+  workspace: { appDirectory: string };
+}
+
+interface BenchmarkRunPayload extends Record<string, unknown> {
+  progressionOwner?: unknown;
+  featureCatalog?: unknown;
+  dependencyPolicy?: unknown;
+  backend?: string;
+  model?: string;
+  condition?: { sha256?: string };
+  progressionStatus?: { phase?: string; level?: number; attempts?: number };
+  levels?: RunLevelRecord[];
+  totals?: RunTotals;
+}
+
+interface CodingFailureResult {
+  attemptId: string;
+  outcome: 'inconclusive';
+  category: 'provider_failure' | 'harness_failure' | 'interrupted' | 'inconclusive_evidence';
+  reason: string;
+  repair?: { nodeIds: string[]; depth: number; grantId?: string };
+}
+
+interface CodingFailure {
+  kind?: string;
+  reason?: string;
+}
+
+interface RecordOptions {
+  selected: ProgressionRecipeAction | null;
+  bundle: unknown;
+  level: number;
+  failure?: CodingFailure | null;
+  repairRegression?: ProgressionRepairRegression | null;
+  completedRepair?: boolean;
+}
+
+export interface LiveProgressionStatus {
+  stateArtifact: string;
+  phase: ProgressionState['phase'];
+  level: number;
+  attempts: number;
+  score: DependencyScore;
+}
+
+export interface LiveProgressionExecutionOptions {
+  progression: ProgressionInput;
+  featureCatalogIdentity: unknown;
+  dependencyPolicyIdentity: unknown;
+  owner: unknown;
+  statePath: string;
+  runId: string;
+  outputDir: string;
+  appDir: string;
+  track: string;
+  backend: string;
+  identities: unknown;
+  recipeBindings: Map<number, RecipeBinding>;
+  getRunArtifact: () => unknown;
+  resumeFrom?: string | null;
+  onState?: (status: LiveProgressionStatus) => void;
+}
+
+export interface LiveProgressionExecution {
+  initialize(): {
+    resumed: boolean;
+    action: ProgressionAction;
+    status: LiveProgressionStatus;
+    stateSha256: string | null;
+    priorRun: Artifact<BenchmarkRunPayload> | null;
+  };
+  bind(): ProgressionRecipeAction;
+  record(options: RecordOptions): ProgressionAction | null;
+  readonly state: ProgressionState | null;
+  readonly resumed: boolean;
+  status(): LiveProgressionStatus;
+}
+
+type StoredProgression = ReturnType<typeof readProgressionState>;
+
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const FAILURE_CATEGORIES = [
+  'provider_failure', 'harness_failure', 'interrupted', 'inconclusive_evidence',
+] as const satisfies ReadonlyArray<CodingFailureResult['category']>;
+
+function failureCategory(value: unknown): value is CodingFailureResult['category'] {
+  return typeof value === 'string'
+    && FAILURE_CATEGORIES.some(category => category === value);
+}
+
+function rejectSymlinks(path: string, label: string): void {
+  if (lstatSync(path).isSymbolicLink()) throw new Error(`${label} cannot be a symbolic link`);
+  for (const entry of readdirSync(path, { withFileTypes: true })) {
+    const child = join(path, entry.name);
+    if (entry.isSymbolicLink()) throw new Error(`${label} contains a symbolic link`);
+    if (entry.isDirectory()) rejectSymlinks(child, label);
+  }
+}
+
+function workspaceOwner(input: unknown): WorkspaceProgressionOwner {
+  const owner = validateProgressionOwner(input, { requireWorkspace: true });
+  if (!owner.workspace) throw new Error('progression state owner is incomplete');
+  return { ...owner, workspace: owner.workspace };
+}
+
+function resumeBinding(input: unknown): ProgressionResumeBinding {
+  if (!object(input) || typeof input.actionSha256 !== 'string' || !object(input.source)
+    || typeof input.source.directory !== 'string' || typeof input.source.sha256 !== 'string'
+    || !Number.isSafeInteger(input.source.files) || Number(input.source.files) < 0) {
+    throw new Error('saved dependency progression action does not match its state');
+  }
+  return {
+    actionSha256: input.actionSha256,
+    source: {
+      directory: input.source.directory,
+      sha256: input.source.sha256,
+      files: Number(input.source.files),
+    },
+  };
+}
+
+function actionSha256(state: ProgressionState): string {
+  return sha256(canonicalDefinitionJson(progressionEngine.nextAction(state)));
+}
+
+export function liveProgressionStatus(state: ProgressionState,
+  stateArtifact = ARTIFACT_FILE.progressionState): LiveProgressionStatus {
+  return {
+    stateArtifact,
+    phase: state.phase,
+    level: state.level,
+    attempts: state.attempts.length,
+    score: progressionEngine.score(state),
+  };
+}
+
+export function createLiveProgressionExecution(
+  options: LiveProgressionExecutionOptions,
+): LiveProgressionExecution {
+  const progression = validateProgressionInput(options.progression);
+  const featureCatalogIdentity = options.featureCatalogIdentity;
+  const dependencyPolicyIdentity = options.dependencyPolicyIdentity;
+  const owner = workspaceOwner(options.owner);
+  const { statePath, runId, outputDir, appDir,
+    recipeBindings, getRunArtifact, onState } = options;
+  const resumeFrom = options.resumeFrom ?? null;
+  const stateRoot = dirname(resolve(statePath));
+  if (resolve(outputDir) !== stateRoot) {
+    throw new Error('live dependency progression state must be stored in its output directory');
+  }
+  const sourceDirectory = resolve(stateRoot, owner.workspace.appDirectory);
+  const sourceRelative = relative(stateRoot, sourceDirectory);
+  if (sourceRelative === '..' || sourceRelative.startsWith(`..${sep}`) || sourceRelative === '') {
+    throw new Error('live dependency progression source escapes its output directory');
+  }
+  let state: ProgressionState | null = null;
+  let initialized = false;
+  let resumed = false;
+  let priorRun: Artifact<BenchmarkRunPayload> | null = null;
+  let resumedStateSha256: string | null = null;
+
+  const currentState = (): ProgressionState => {
+    if (!state) throw new Error('live dependency progression is not initialized');
+    return state;
+  };
+  const status = (): LiveProgressionStatus => liveProgressionStatus(currentState());
+  const sourceBinding = ({ capture = false }: { capture?: boolean } = {}): ProgressionResumeBinding => {
+    if (capture) {
+      mkdirSync(appDir, { recursive: true });
+      snapshotAppSource(appDir, sourceDirectory);
+    }
+    if (!existsSync(sourceDirectory)) {
+      throw new Error('live dependency progression has no saved source');
+    }
+    rejectSymlinks(sourceDirectory, 'live dependency progression source');
+    const source = hashDirectory(sourceDirectory);
+    if (capture) {
+      const live = hashAppSource(appDir);
+      if (live.sha256 !== source.sha256 || live.files.length !== source.files.length) {
+        throw new Error('saved dependency progression source differs from the live application');
+      }
+    }
+    return { actionSha256: actionSha256(currentState()), source: {
+      directory: owner.workspace.appDirectory,
+      sha256: source.sha256,
+      files: source.files.length,
+    } };
+  };
+  const validateSavedSource = (stored: StoredProgression, root: string): {
+    path: string;
+    resume: ProgressionResumeBinding;
+  } => {
+    const resume = resumeBinding(stored.resume);
+    if (resume.actionSha256 !== actionSha256(stored.state)
+      || resume.source.directory !== owner.workspace.appDirectory) {
+      throw new Error('saved dependency progression action does not match its state');
+    }
+    const source = resolve(root, resume.source.directory);
+    const rel = relative(root, source);
+    if (rel === '..' || rel.startsWith(`..${sep}`) || rel === '' || !existsSync(source)) {
+      throw new Error('saved dependency progression source is outside its state directory');
+    }
+    rejectSymlinks(source, 'saved dependency progression source');
+    const actual = hashDirectory(source);
+    if (actual.sha256 !== resume.source.sha256 || actual.files.length !== resume.source.files) {
+      throw new Error('saved dependency progression source does not match its state');
+    }
+    return { path: source, resume };
+  };
+  const validatePriorRun = (root: string, stored: StoredProgression):
+  Artifact<BenchmarkRunPayload> => {
+    const artifact = readArtifact<BenchmarkRunPayload>(join(root, ARTIFACT_FILE.run),
+      { expectedKind: 'benchmark_run' });
+    const runOwner = artifact.payload.progressionOwner;
+    const lastEvent = stored.state.events.at(-1);
+    const runState = lastEvent?.type === 'repairs-granted'
+      ? replayDependencyMode(stored.state.definition, stored.state.events.slice(0, -1))
+      : stored.state;
+    const engine = artifact.identities.engine;
+    if (artifact.attempt.parentId !== owner.attempt.id
+      || engine?.sha256 !== currentEngineIdentity().sha256
+      || canonicalDefinitionJson(runOwner)
+        !== canonicalDefinitionJson({ schemaVersion: 1, campaign: owner.campaign,
+          attempt: owner.attempt })
+      || canonicalDefinitionJson(artifact.payload.featureCatalog)
+        !== canonicalDefinitionJson(featureCatalogIdentity)
+      || canonicalDefinitionJson(artifact.payload.dependencyPolicy)
+        !== canonicalDefinitionJson(dependencyPolicyIdentity)
+      || artifact.payload.backend !== owner.attempt.stack
+      || artifact.payload.model !== owner.attempt.model
+      || artifact.payload.condition?.sha256 !== owner.attempt.conditionSha256
+      || artifact.payload.progressionStatus?.phase !== runState.phase
+      || artifact.payload.progressionStatus?.level !== runState.level
+      || artifact.payload.progressionStatus?.attempts !== runState.attempts.length) {
+      throw new Error('prior dependency execution does not match its saved progression state');
+    }
+    return artifact;
+  };
+  const restoreRepairEvidence = (root: string, targetRoot = root): void => {
+    const activeState = currentState();
+    const action = progressionEngine.nextAction(activeState);
+    if (action.type !== 'repair') return;
+    const index = activeState.attempts.findLastIndex(attempt => attempt.outcome === 'conclusive');
+    const attempt = activeState.attempts[index];
+    const evidence = object(attempt?.evidence) ? attempt.evidence : null;
+    if (index < 0 || !attempt?.sourceSha256 || !attempt.selectionSha256
+      || evidence?.kind !== 'grade_bundle' || typeof evidence.id !== 'string'
+      || typeof evidence.sha256 !== 'string') {
+      throw new Error('saved repair action has no conclusive grading evidence');
+    }
+    const from = join(root, 'progression', `attempt-${String(index + 1).padStart(3, '0')}`);
+    const bundle = readArtifact<GradeBundlePayload>(join(from, ARTIFACT_FILE.gradeBundle),
+      { expectedKind: 'grade_bundle' });
+    const engine = bundle.identities.engine;
+    if (bundle.id !== evidence.id
+      || sha256(canonicalDefinitionJson(bundle)) !== evidence.sha256
+      || engine?.sha256 !== currentEngineIdentity().sha256
+      || bundle.payload.source?.sha256 !== attempt.sourceSha256
+      || bundle.payload.selection?.sha256 !== attempt.selectionSha256) {
+      throw new Error('saved repair evidence does not match its progression attempt');
+    }
+    const target = join(targetRoot, 'progression',
+      `attempt-${String(index + 1).padStart(3, '0')}`);
+    if (resolve(from) !== resolve(target)) {
+      rmSync(target, { recursive: true, force: true });
+      cpSync(from, target, { recursive: true,
+        filter: source => !/[\\/]media([\\/]|$)/.test(source) });
+    }
+    const gradingDirectory = join(appDir, 'stack-bench');
+    rmSync(gradingDirectory, { recursive: true, force: true });
+    cpSync(target, gradingDirectory, { recursive: true,
+      filter: source => !/[\\/]media([\\/]|$)/.test(source) });
+  };
+  const persist = ({ captureSource = false, notify = true }:
+  { captureSource?: boolean; notify?: boolean } = {}): StoredProgression => {
+    const resume = sourceBinding({ capture: captureSource });
+    const written = writeProgressionState(statePath, {
+      progression,
+      featureCatalogIdentity,
+      dependencyPolicyIdentity,
+      owner,
+      state: currentState(),
+      resume,
+      id: `${runId}-progression-state`,
+    });
+    if (notify && onState) onState(status());
+    return written;
+  };
+  const initialize = (): ReturnType<LiveProgressionExecution['initialize']> => {
+    if (initialized) throw new Error('live dependency progression is already initialized');
+    if (progressionStateExists(statePath)) {
+      if (resumeFrom !== null) {
+        throw new Error('live dependency progression cannot import over existing state');
+      }
+      const stored = readProgressionState(statePath, { progression, featureCatalogIdentity,
+        dependencyPolicyIdentity, owner, requireCurrentEngine: true });
+      state = stored.state;
+      resumedStateSha256 = stored.stateSha256;
+      const saved = validateSavedSource(stored, stateRoot);
+      priorRun = validatePriorRun(stateRoot, stored);
+      mkdirSync(appDir, { recursive: true });
+      restoreAppSource(sourceDirectory, appDir);
+      const restored = hashAppSource(appDir);
+      if (restored.sha256 !== saved.resume.source.sha256
+        || restored.files.length !== saved.resume.source.files) {
+        throw new Error('dependency progression source restoration changed its contents');
+      }
+      restoreRepairEvidence(stateRoot);
+      resumed = true;
+    } else if (resumeFrom !== null) {
+      const previousRoot = resolve(resumeFrom);
+      if (previousRoot === stateRoot) {
+        throw new Error('dependency progression resume source is the current output directory');
+      }
+      const stored = readProgressionState(join(previousRoot, ARTIFACT_FILE.progressionState), {
+        progression, featureCatalogIdentity, dependencyPolicyIdentity, owner,
+        requireCurrentEngine: true,
+      });
+      const saved = validateSavedSource(stored, previousRoot);
+      state = stored.state;
+      resumedStateSha256 = stored.stateSha256;
+      priorRun = validatePriorRun(previousRoot, stored);
+      snapshotAppSource(saved.path, sourceDirectory);
+      restoreAppSource(sourceDirectory, appDir);
+      const restored = hashAppSource(appDir);
+      if (restored.sha256 !== saved.resume.source.sha256
+        || restored.files.length !== saved.resume.source.files) {
+        throw new Error('imported dependency progression source changed during restoration');
+      }
+      restoreRepairEvidence(previousRoot, stateRoot);
+      persist({ notify: false });
+      resumed = true;
+    } else {
+      state = progressionEngine.initialize(progression.definition);
+      persist({ captureSource: true });
+    }
+    initialized = true;
+    return { resumed, action: structuredClone(progressionEngine.nextAction(currentState())),
+      status: status(), stateSha256: resumedStateSha256,
+      priorRun: priorRun === null ? null : structuredClone(priorRun) };
+  };
+  const bind = (): ProgressionRecipeAction => {
+    const activeState = currentState();
+    const binding = recipeBindings.get(activeState.level);
+    if (!binding) {
+      throw new Error(`dependency progression has no recipe binding for L${activeState.level}`);
+    }
+    const selected = resolveProgressionRecipeAction(binding, activeState);
+    return selected;
+  };
+  const record = ({ selected, bundle, failure = null, repairRegression = null,
+    completedRepair = false }:
+  RecordOptions): ProgressionAction | null => {
+    if (!selected || !('grader' in selected)) return null;
+    const activeState = currentState();
+    const action = progressionEngine.nextAction(activeState);
+    if (completedRepair && action.type !== 'repair') {
+      throw new Error('completed repair does not match the current progression action');
+    }
+    const sequence = activeState.attempts.length + 1;
+    const evidenceDirectory = join(outputDir, 'progression',
+      `attempt-${String(sequence).padStart(3, '0')}`);
+    const gradingDirectory = join(appDir, 'stack-bench');
+    if (!failure && existsSync(gradingDirectory)) {
+      cpSync(gradingDirectory, evidenceDirectory, {
+        recursive: true,
+        filter: source => !/[\\/]media([\\/]|$)/.test(source),
+      });
+    }
+
+    let result: (ProgressionGradeResult | CodingFailureResult) & {
+      repairRegression?: ProgressionRepairRegression;
+      completedRepair?: true;
+    };
+    if (failure) {
+      const category = failureCategory(failure.kind) ? failure.kind : 'harness_failure';
+      result = {
+        attemptId: `${runId}-progression-${sequence}`,
+        outcome: 'inconclusive',
+        category,
+        reason: failure.reason ?? `${category.replaceAll('_', ' ')} during coding`,
+      };
+    } else if (!object(bundle) || !object(bundle.selection)
+      || !existsSync(join(evidenceDirectory, ARTIFACT_FILE.gradeBundle))) {
+      result = {
+        attemptId: `${runId}-progression-${sequence}`,
+        outcome: 'inconclusive',
+        category: 'harness_failure',
+        reason: 'grader produced no grade bundle',
+      };
+    } else {
+      const source = hashAppSource(appDir);
+      const recipe = selected.grader.request.recipe;
+      const persistedBundle = readArtifact<GradeBundlePayload>(
+        join(evidenceDirectory, ARTIFACT_FILE.gradeBundle), { expectedKind: 'grade_bundle' });
+      const gradedResult = gradeBundleToProgressionResult(
+        persistedBundle,
+        selected.action,
+        {
+          owner,
+          runArtifact: getRunArtifact(),
+          featureCatalogIdentity,
+          dependencyPolicyIdentity,
+          selectionSha256: selected.grader.selectionSha256,
+          sourceSha256: source.sha256,
+          sequence,
+          recipeIdentity: {
+            id: recipe.id,
+            version: recipe.version,
+            sha256: recipe.contentSha256,
+          },
+        },
+      );
+      result = repairRegression && gradedResult.outcome === 'conclusive'
+        ? { ...gradedResult, repairRegression: structuredClone(repairRegression) }
+        : gradedResult;
+    }
+    if (completedRepair && action.type === 'repair') {
+      result = { ...result, completedRepair: true };
+    }
+    state = progressionEngine.recordResult(activeState, result);
+    persist({ captureSource: result.outcome === 'conclusive' });
+    return progressionEngine.nextAction(currentState());
+  };
+
+  return {
+    initialize,
+    bind,
+    record,
+    get state() { return state; },
+    get resumed() { return resumed; },
+    status,
+  };
+}
diff --git a/tools/stack-bench/src/progression/progression-definition.ts b/tools/stack-bench/src/progression/progression-definition.ts
new file mode 100644
index 00000000000..5e8f3049eec
--- /dev/null
+++ b/tools/stack-bench/src/progression/progression-definition.ts
@@ -0,0 +1,724 @@
+import { readFileSync, readdirSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+
+import {
+  compilePackDefinition,
+  resolveTaskFragment,
+  type CompiledPackDefinition,
+} from '../composition/composition-compiler.js';
+import {
+  compileScenarioDefinition,
+  type CompiledScenarioDefinition,
+  type CompiledStep,
+} from '../composition/definition-compiler.js';
+import { agentVisibleContractText } from '../composition/agent-visible-contract.js';
+import { canonicalDefinitionJson, canonicalizeDefinition }
+  from '../composition/definition-plan.js';
+import { sha256 } from '../evidence/provenance.js';
+import { compileDependencyMode, compileFeatureCatalog, DEPENDENCY_MODE_POLICY,
+  DEPENDENCY_MODE_VERSION, DEFAULT_UNCHANGED_FAILURE_LIMIT,
+  DEFAULT_DEPENDENCY_WORK_SELECTION,
+  DEPENDENCY_MODE_SCHEMA_VERSION, FEATURE_CATALOG_SCHEMA_VERSION,
+  isDependencyWorkSelection }
+  from './dependency-definition.js';
+import type { DependencyWorkSelection }
+  from './dependency-definition.js';
+import { validateRepairPlan } from './repair-plan.js';
+import type { RepairPlan } from './repair-plan.js';
+import { progressionEngine } from './progression-engine.js';
+import { isProgressionIdentifier, parseVersionedProgressionId }
+  from './progression-identifiers.js';
+
+export interface CompiledProgressionCheck {
+  id: string;
+  points: number;
+  role: 'feature' | 'guarantee';
+  requiresFeatures?: string[];
+}
+
+export interface CompiledProgressionNode {
+  id: string;
+  title: string;
+  level: number;
+  questline: string;
+  featureRefs: string[];
+  promptModules: string[];
+  gradingChecks: CompiledProgressionCheck[];
+  dependencies: string[];
+  dependencyReasons: Record<string, string>;
+}
+
+export interface CompiledProgressionQuestline {
+  id: string;
+  title: string;
+  nodes: string[];
+}
+
+export interface CompiledProgressionDefinition {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  nodes: CompiledProgressionNode[];
+  questlines: CompiledProgressionQuestline[];
+  policy?: string;
+  repair?: RepairPlan;
+  unchangedFailureLimit?: number;
+  workSelection?: DependencyWorkSelection;
+}
+
+export interface DefinitionIdentity {
+  id: string;
+  version: string;
+  sha256: string;
+  policy?: string;
+}
+
+export interface ProgressionInput<TDefinition = CompiledProgressionDefinition> {
+  definition: TDefinition;
+  identity: DefinitionIdentity;
+}
+
+export interface CompiledDependencyPolicyDefinition extends Record<string, unknown> {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  levels: number[];
+  repair: RepairPlan;
+  // The exact order failed features are repaired in, by depth. Declared
+  // order repeats the catalog; a shuffled order is the frozen permutation.
+  nodeOrder: string[];
+  unchangedFailureLimit: number;
+  workSelection: DependencyWorkSelection;
+}
+
+interface AuthoredDependency {
+  id: string;
+  reason: string;
+}
+
+interface AuthoredProgressionNode {
+  id: string;
+  title: string;
+  questline: string;
+  featureRefs: string[];
+  promptModules?: string[];
+  gradingGroups: string[];
+  dependencies: AuthoredDependency[];
+}
+
+interface AuthoredProgressionDefinition {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  nodes: AuthoredProgressionNode[];
+  questlines: unknown[];
+}
+
+export const PROGRESSION_DEFINITION_SCHEMA_VERSION = 2;
+
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const fail = (at: string, message: string): never => {
+  throw new Error(`invalid progression definition at ${at}: ${message}`);
+};
+const readJson = (path: string): unknown => JSON.parse(readFileSync(path, 'utf8')) as unknown;
+
+function strictObject(value: unknown, at: string, fields: ReadonlySet<string>): asserts value is Record<string, unknown> {
+  if (!object(value)) return fail(at, 'must be an object');
+  for (const key of Object.keys(value)) if (!fields.has(key)) fail(`${at}.${key}`, 'unknown field');
+}
+
+function nonEmpty(value: unknown, at: string): string {
+  if (typeof value !== 'string' || value.trim().length === 0) {
+    return fail(at, 'must be a non-empty string');
+  }
+  return value;
+}
+
+function identifier(value: unknown, at: string): string {
+  const result = nonEmpty(value, at);
+  if (!isProgressionIdentifier(result)) return fail(at, 'must be a lowercase identifier');
+  return result;
+}
+
+function uniqueStrings(value: unknown, at: string, valid: ((value: string) => boolean) | null = null,
+  { nonEmpty: required = true }: { nonEmpty?: boolean } = {}): string[] {
+  if (!Array.isArray(value)) {
+    return fail(at, `must be ${required ? 'a non-empty' : 'an'} array`);
+  }
+  if (required && value.length === 0) {
+    return fail(at, 'must be a non-empty array');
+  }
+  const seen = new Set<string>();
+  return value.map((item, index) => {
+    const result = nonEmpty(item, `${at}[${index}]`);
+    if (valid && !valid(result)) fail(`${at}[${index}]`, 'has an invalid reference');
+    if (seen.has(result)) fail(`${at}[${index}]`, `duplicates ${JSON.stringify(result)}`);
+    seen.add(result);
+    return result;
+  });
+}
+
+function packCatalog(trackRoot: string): Map<string, CompiledPackDefinition> {
+  const packRoot = join(trackRoot, 'composition', 'packs');
+  const packs = new Map<string, CompiledPackDefinition>();
+  for (const name of readdirSync(packRoot).filter(item => item.endsWith('.json'))) {
+    const pack = compilePackDefinition(readJson(join(packRoot, name)), { source: name });
+    const reference = `${pack.id}@${pack.version}`;
+    if (packs.has(reference)) fail('packs', `duplicate ${reference}`);
+    packs.set(reference, pack);
+  }
+  return packs;
+}
+
+interface ResolvedGradingGroup {
+  checks: CompiledProgressionCheck[];
+  requiresFeatures: string[];
+  namedActions: Array<{ id: string; method?: string; path?: string; reducer?: string }>;
+}
+
+const pathTemplate = (value: string): string =>
+  value.replace(/:[A-Za-z][A-Za-z0-9_]*|\{[^}]+\}/g, '{}');
+const inlineCode = (value: string): string[] =>
+  [...value.matchAll(/`([^`\r\n]+)`/g)].map(match => match[1]!.trim());
+
+function inlineNamedActions(steps: readonly CompiledStep[]): ResolvedGradingGroup['namedActions'] {
+  const actions: ResolvedGradingGroup['namedActions'] = [];
+  const visit = (step: CompiledStep): void => {
+    if (object(step.namedAction)) {
+      const action = step.namedAction;
+      if (typeof action.id === 'string') actions.push({ id: action.id,
+        ...(typeof action.method === 'string' ? { method: action.method } : {}),
+        ...(typeof action.path === 'string' ? { path: action.path } : {}),
+        ...(typeof action.reducer === 'string' ? { reducer: action.reducer } : {}) });
+    }
+    for (const branch of step.branches ?? []) branch.forEach(visit);
+  };
+  steps.forEach(visit);
+  return actions;
+}
+
+function groupChecks(pack: CompiledPackDefinition, groupId: string, trackRoot: string,
+  sourceCache: Map<string, CompiledScenarioDefinition>): ResolvedGradingGroup | null {
+  const group = pack.checks.find(check => check.id === groupId);
+  if (!group) return null;
+  if (group.role !== 'feature' && group.role !== 'guarantee') {
+    return fail(`${pack.id}.${groupId}`, 'must be a scored feature or guarantee group');
+  }
+  const role = group.role;
+  let scenario = sourceCache.get(group.source);
+  if (!scenario) {
+    scenario = compileScenarioDefinition(readJson(join(trackRoot, group.source)), {
+      source: group.source,
+    });
+    sourceCache.set(group.source, scenario);
+  }
+  const feature = scenario.features.find(item => item.id === group.feature);
+  if (!feature) return fail(`${pack.id}.${groupId}`, `missing scenario feature ${group.feature}`);
+  const criteria = group.criteria === undefined
+    ? feature.criteria
+    : group.criteria.map(id => {
+      const criterion = feature.criteria.find(item => item.id === id);
+      if (!criterion) return fail(`${pack.id}.${groupId}`, `missing criterion ${id}`);
+      return criterion;
+    });
+  return {
+    checks: criteria.filter(criterion => criterion.points > 0).map(criterion => ({
+      id: `${pack.stableId ?? pack.id}.${group.stableId ?? group.id}.${criterion.id}`,
+      points: criterion.points,
+      role,
+      ...(group.requiresFeatures?.length
+        ? { requiresFeatures: [...group.requiresFeatures].sort() } : {}),
+    })),
+    requiresFeatures: group.requiresFeatures ?? [],
+    namedActions: inlineNamedActions([
+      ...feature.setup,
+      ...criteria.flatMap(criterion => criterion.steps),
+    ]),
+  };
+}
+
+function featurePackDependencies(pack: CompiledPackDefinition,
+  packs: ReadonlyMap<string, CompiledPackDefinition>, at: string): Set<string> {
+  const dependencies = new Set<string>();
+  const visit = (reference: string): void => {
+    if (dependencies.has(reference)) return;
+    const dependency = packs.get(reference);
+    if (!dependency) return fail(at, `requires missing pack ${reference}`);
+    if (dependency.moduleType !== 'feature') {
+      return fail(at, `requires non-feature pack ${reference}`);
+    }
+    dependencies.add(reference);
+    dependency.requiresPacks.forEach(visit);
+  };
+  pack.requiresPacks.forEach(visit);
+  return dependencies;
+}
+
+export function compileProgressionDefinition(input: unknown,
+  { trackRoot, source = '<progression>' }: { trackRoot?: string; source?: string } = {}): CompiledProgressionDefinition {
+  if (!trackRoot) throw new Error('progression compilation requires trackRoot');
+  const definition = structuredClone(input);
+  strictObject(definition, source, new Set([
+    'schemaVersion', 'kind', 'id', 'version', 'state', 'title', 'nodes', 'questlines',
+  ]));
+  if (definition.schemaVersion !== PROGRESSION_DEFINITION_SCHEMA_VERSION) {
+    fail(`${source}.schemaVersion`, `must be ${PROGRESSION_DEFINITION_SCHEMA_VERSION}`);
+  }
+  if (definition.kind !== 'progression-definition') {
+    fail(`${source}.kind`, 'must be "progression-definition"');
+  }
+  if (!Array.isArray(definition.nodes) || definition.nodes.length === 0) {
+    fail(`${source}.nodes`, 'must be a non-empty array');
+  }
+  const authored = definition as unknown as AuthoredProgressionDefinition;
+  const packs = packCatalog(resolve(trackRoot));
+  const sourceCache = new Map<string, CompiledScenarioDefinition>();
+  const groupOwners = new Map<string, string>();
+  const featureOwners = new Map<string, string>();
+  const promptOwners = new Map<string, string>();
+  const checkOwners = new Map<string, string>();
+  const nodeNamedActions = new Map<string, Array<ResolvedGradingGroup['namedActions'][number]
+    & { requiresFeatures: string[] }>>();
+  const nodes = authored.nodes.map((node, index) => {
+    const at = `${source}.nodes[${index}]`;
+    strictObject(node, at, new Set([
+      'id', 'title', 'questline', 'featureRefs', 'promptModules', 'gradingGroups', 'dependencies',
+    ]));
+    identifier(node.id, `${at}.id`);
+    nonEmpty(node.title, `${at}.title`);
+    identifier(node.questline, `${at}.questline`);
+    const featureRefs = uniqueStrings(node.featureRefs, `${at}.featureRefs`,
+      reference => parseVersionedProgressionId(reference) !== null).sort();
+    for (const reference of featureRefs) {
+      const pack = packs.get(reference);
+      if (!pack) return fail(`${at}.featureRefs`, `missing pack ${reference}`);
+      if (pack.moduleType !== 'feature') fail(`${at}.featureRefs`, `${reference} is not a feature pack`);
+      if (featureOwners.has(reference)) {
+        fail(`${at}.featureRefs`, `${reference} is already owned by ${featureOwners.get(reference)}`);
+      }
+      featureOwners.set(reference, node.id);
+    }
+    const promptModules = uniqueStrings([
+      ...featureRefs,
+      ...(node.promptModules ?? []),
+    ], `${at}.promptModules`, reference => parseVersionedProgressionId(reference) !== null).sort();
+    for (const reference of promptModules) {
+      const pack = packs.get(reference);
+      if (!pack) return fail(`${at}.promptModules`, `missing pack ${reference}`);
+      if (!['feature', 'specification'].includes(pack.moduleType ?? '')) {
+        fail(`${at}.promptModules`, `${reference} cannot be used in a prompt`);
+      }
+      if (pack.moduleType === 'feature' && !featureRefs.includes(reference)) {
+        fail(`${at}.promptModules`, `${reference} must also appear in featureRefs`);
+      }
+      if (promptOwners.has(reference)) {
+        fail(`${at}.promptModules`, `${reference} is already owned by ${promptOwners.get(reference)}`);
+      }
+      promptOwners.set(reference, node.id);
+    }
+    const gradingGroups = uniqueStrings(node.gradingGroups, `${at}.gradingGroups`).sort();
+    const namedActions: Array<ResolvedGradingGroup['namedActions'][number]
+      & { requiresFeatures: string[] }> = [];
+    const gradingChecks = gradingGroups.flatMap((reference, groupIndex) => {
+      const split = reference.lastIndexOf('#');
+      if (split < 1) fail(`${at}.gradingGroups[${groupIndex}]`, 'must be pack@version#group');
+      const packRef = reference.slice(0, split);
+      const groupId = reference.slice(split + 1);
+      if (!parseVersionedProgressionId(packRef)) {
+        fail(`${at}.gradingGroups[${groupIndex}]`, 'has an invalid pack reference');
+      }
+      identifier(groupId, `${at}.gradingGroups[${groupIndex}] group`);
+      const pack = packs.get(packRef);
+      if (!pack) return fail(`${at}.gradingGroups[${groupIndex}]`, `missing pack ${packRef}`);
+      if (groupOwners.has(reference)) {
+        fail(`${at}.gradingGroups[${groupIndex}]`, `is already owned by ${groupOwners.get(reference)}`);
+      }
+      const group = groupChecks(pack, groupId, resolve(trackRoot), sourceCache);
+      if (!group) return fail(`${at}.gradingGroups[${groupIndex}]`, `missing group ${groupId}`);
+      if (group.checks.length === 0) fail(`${at}.gradingGroups[${groupIndex}]`, 'has no scored criteria');
+      groupOwners.set(reference, node.id);
+      namedActions.push(...group.namedActions.map(action => ({ ...action,
+        requiresFeatures: group.requiresFeatures })));
+      for (const check of group.checks) {
+        if (checkOwners.has(check.id)) {
+          fail(`${at}.gradingGroups[${groupIndex}]`,
+            `check ${check.id} is already owned by ${checkOwners.get(check.id)}`);
+        }
+        checkOwners.set(check.id, node.id);
+      }
+      return group.checks;
+    });
+    nodeNamedActions.set(node.id, namedActions);
+    const selectedGroups = new Set(gradingGroups);
+    for (const featureRef of featureRefs) {
+      const pack = packs.get(featureRef);
+      if (!pack) return fail(`${at}.featureRefs`, `missing pack ${featureRef}`);
+      for (const group of pack.checks.filter(check => check.role === 'feature')) {
+        const checks = groupChecks(pack, group.id, resolve(trackRoot), sourceCache);
+        if (checks !== null && checks.checks.length > 0 && !selectedGroups.has(`${featureRef}#${group.id}`)) {
+          fail(`${at}.gradingGroups`, `must own feature group ${featureRef}#${group.id}`);
+        }
+      }
+    }
+    if (!Array.isArray(node.dependencies)) fail(`${at}.dependencies`, 'must be an array');
+    return {
+      id: node.id,
+      title: node.title,
+      questline: node.questline,
+      featureRefs,
+      promptModules,
+      gradingChecks,
+      dependencies: structuredClone(node.dependencies),
+    };
+  });
+  const compiled = compileFeatureCatalog({
+    schemaVersion: FEATURE_CATALOG_SCHEMA_VERSION,
+    kind: 'feature-catalog',
+    id: authored.id,
+    version: authored.version,
+    state: authored.state,
+    title: authored.title,
+    nodes,
+    questlines: structuredClone(authored.questlines),
+  }, { source });
+  const byId = new Map(compiled.nodes.map(node => [node.id, node]));
+  const requiredOwners = (node: CompiledProgressionNode): Set<string> => {
+    const owners = new Set<string>();
+    for (const reference of node.featureRefs) {
+      const pack = packs.get(reference);
+      if (!pack) return fail(`${source}.nodes.${node.id}.featureRefs`, `missing pack ${reference}`);
+      for (const requiredRef of pack.requiresPacks) {
+        const owner = featureOwners.get(requiredRef);
+        if (owner === undefined) {
+          fail(`${source}.nodes.${node.id}.dependencies`,
+            `${reference} requires feature ${requiredRef} with no graph owner`);
+        }
+        if (owner !== undefined && owner !== node.id) owners.add(owner);
+      }
+    }
+    return owners;
+  };
+  const minimalProductDependencies = (node: CompiledProgressionNode): string[] => {
+    const directOwners = requiredOwners(node);
+    return [...directOwners].filter(owner => ![...directOwners].some(other => {
+      if (owner === other) return false;
+      const otherNode = byId.get(other);
+      if (!otherNode) return fail(`${source}.nodes.${node.id}.dependencies`, `missing owner ${other}`);
+      return otherNode.featureRefs.some(reference => {
+        const pack = packs.get(reference);
+        if (!pack) return fail(`${source}.nodes.${other}.featureRefs`, `missing pack ${reference}`);
+        return [...featurePackDependencies(pack, packs, `${source}.nodes.${other}.featureRefs`)]
+          .some(requiredRef => featureOwners.get(requiredRef) === owner);
+      });
+    })).sort();
+  };
+  for (const node of compiled.nodes) {
+    const expected = minimalProductDependencies(node);
+    if (canonicalDefinitionJson(node.dependencies) !== canonicalDefinitionJson(expected)) {
+      fail(`${source}.nodes.${node.id}.dependencies`,
+        `must equal minimal product dependencies: ${expected.join(', ') || '(none)'}`);
+    }
+  }
+  const featureRefsById = new Map([...featureOwners.keys()].map(reference =>
+    [reference.slice(0, reference.lastIndexOf('@')), reference]));
+  for (const node of compiled.nodes) {
+    for (const action of nodeNamedActions.get(node.id) ?? []) {
+      const references = [
+        ...node.featureRefs,
+        ...action.requiresFeatures.map(featureId => featureRefsById.get(featureId)
+          ?? fail(`${source}.nodes.${node.id}.gradingGroups`,
+            `action ${action.id} requires feature ${featureId} with no graph owner`)),
+      ];
+      const contracts = [...new Set(references)].flatMap(reference => {
+        const pack = packs.get(reference);
+        if (!pack) return fail(`${source}.nodes.${node.id}.gradingGroups`,
+          `action ${action.id} uses missing feature ${reference}`);
+        return pack.task.contracts.map(contract => resolveTaskFragment(contract, {
+          trackRoot: resolve(trackRoot),
+          source: `${reference}.task.contracts.${contract.id}`,
+        }).text);
+      });
+      const http = contracts.map(contract =>
+        agentVisibleContractText(contract, {}, 'http')).join('\n');
+      const reducer = contracts.map(contract =>
+        agentVisibleContractText(contract, {}, 'reducer')).join('\n');
+      const httpAction = `${action.method ?? 'POST'} ${action.path ?? ''}`.trim();
+      if (action.path && !inlineCode(http).map(pathTemplate).includes(pathTemplate(httpAction))) {
+        fail(`${source}.nodes.${node.id}.gradingGroups`,
+          `action ${action.id} HTTP interface ${httpAction} is absent from its feature contracts`);
+      }
+      if (action.reducer && !inlineCode(reducer)
+        .some(value => value === action.reducer || value.startsWith(`${action.reducer}(`))) {
+        fail(`${source}.nodes.${node.id}.gradingGroups`,
+          `action ${action.id} reducer ${action.reducer} is absent from its feature contracts`);
+      }
+    }
+  }
+  for (const node of compiled.nodes) {
+    const mode = node.level === 1 ? 'fresh' : 'upgrade';
+    const promptPacks = node.promptModules.map(reference => {
+      const pack = packs.get(reference);
+      if (!pack) return fail(`${source}.nodes.${node.id}.promptModules`, `missing pack ${reference}`);
+      return pack;
+    });
+    if (!promptPacks.some(pack => pack.task.requirements.some(fragment =>
+      (fragment.modes ?? []).includes(mode)))) {
+      fail(`${source}.nodes.${node.id}.promptModules`,
+        `compose no ${mode} requirements at calculated level ${node.level}`);
+    }
+    if (!promptPacks.some(pack => pack.task.contracts.some(fragment =>
+      (fragment.modes ?? []).includes(mode)))) {
+      fail(`${source}.nodes.${node.id}.promptModules`,
+        `compose no ${mode} application interface at calculated level ${node.level}`);
+    }
+  }
+  return compiled as CompiledProgressionDefinition;
+}
+
+export function compileProgressionDefinitionFile(path: string,
+  { trackRoot }: { trackRoot?: string } = {}): CompiledProgressionDefinition {
+  const absolute = resolve(path);
+  return compileProgressionDefinition(readJson(absolute), {
+    trackRoot: resolve(trackRoot ?? join(dirname(absolute), '..')),
+    source: absolute,
+  });
+}
+
+function identity(definition: CompiledProgressionDefinition): DefinitionIdentity {
+  const { state: _state, title: _title, ...executable } = definition;
+  return canonicalizeDefinition({
+    id: definition.id,
+    version: definition.version,
+    ...(definition.policy ? { policy: definition.policy } : {}),
+    sha256: sha256(canonicalDefinitionJson(executable)),
+  }) as unknown as DefinitionIdentity;
+}
+
+export function compileFeatureCatalogInput(input: unknown): ProgressionInput {
+  const definition = compileFeatureCatalog(input);
+  return canonicalizeDefinition({ definition, identity: identity(definition) }) as unknown as ProgressionInput;
+}
+
+export function validateFeatureCatalogInput(input: unknown): ProgressionInput {
+  if (!object(input)) throw new Error('feature catalog input must be an object');
+  const fields = new Set(['definition', 'identity']);
+  for (const key of Object.keys(input)) {
+    if (!fields.has(key)) throw new Error(`feature catalog input.${key} is unknown`);
+  }
+  const compiled = compileFeatureCatalogInput(input.definition);
+  if (canonicalDefinitionJson(input) !== canonicalDefinitionJson(compiled)) {
+    throw new Error('feature catalog identity does not match its compiled definition');
+  }
+  return compiled;
+}
+
+function selectedCatalogDefinition(catalog: ProgressionInput, selectedLevels: unknown): {
+  catalog: ProgressionInput;
+  levels: number[];
+  definition: CompiledProgressionDefinition;
+} {
+  const availableLevels = progressionLevels(catalog);
+  if (!Array.isArray(selectedLevels) || selectedLevels.length === 0
+    || selectedLevels.some(level => !Number.isSafeInteger(level) || level < 1)
+    || new Set(selectedLevels).size !== selectedLevels.length) {
+    throw new Error('dependency policy levels must be distinct positive integers');
+  }
+  const levels = [...selectedLevels].sort((left, right) => left - right);
+  if (canonicalDefinitionJson(levels)
+    !== canonicalDefinitionJson(availableLevels.slice(0, levels.length))) {
+    throw new Error('dependency policy levels must be a prefix of the feature catalog');
+  }
+  const selected = new Set(levels);
+  const nodes = catalog.definition.nodes.filter(node => selected.has(node.level));
+  const nodeIds = new Set(nodes.map(node => node.id));
+  const questlines = catalog.definition.questlines
+    .map(questline => ({ ...questline,
+      nodes: questline.nodes.filter(nodeId => nodeIds.has(nodeId)) }))
+    .filter(questline => questline.nodes.length > 0);
+  return { catalog, levels, definition: { ...catalog.definition, nodes, questlines } };
+}
+
+export function selectFeatureCatalogLevels(featureCatalog: unknown,
+  selectedLevels: unknown): ProgressionInput {
+  const catalog = validateFeatureCatalogInput(featureCatalog);
+  return compileFeatureCatalogInput(
+    selectedCatalogDefinition(catalog, selectedLevels).definition,
+  );
+}
+
+// The repair order is the selected catalog's order, or a permutation of it
+// that keeps dependency depth order. A declared plan must repeat the catalog;
+// a shuffled plan must supply the permutation the campaign drew for it.
+function repairNodeOrder(definition: CompiledProgressionDefinition,
+  order: RepairPlan['order'], nodeOrder: unknown): string[] {
+  const declared = definition.nodes.map(node => node.id);
+  if (nodeOrder === undefined) {
+    if (order === 'shuffled') throw new Error('a shuffled repair order requires its node order');
+    return declared;
+  }
+  if (!Array.isArray(nodeOrder) || nodeOrder.some(id => typeof id !== 'string')
+    || nodeOrder.length !== declared.length || new Set(nodeOrder).size !== nodeOrder.length
+    || nodeOrder.some(id => !declared.includes(id))) {
+    throw new Error('dependency policy node order must be a permutation of the selected features');
+  }
+  const ids = nodeOrder as string[];
+  const levelOf = new Map(definition.nodes.map(node => [node.id, node.level]));
+  if (ids.some((id, index) => index > 0
+    && (levelOf.get(id) ?? 0) < (levelOf.get(ids[index - 1]!) ?? 0))) {
+    throw new Error('dependency policy node order must keep dependency depth order');
+  }
+  if (order === 'declared' && canonicalDefinitionJson(ids) !== canonicalDefinitionJson(declared)) {
+    throw new Error('a declared repair order must match the feature catalog order');
+  }
+  return [...ids];
+}
+
+function orderNodes(definition: CompiledProgressionDefinition,
+  nodeOrder: readonly string[]): CompiledProgressionDefinition {
+  const byId = new Map(definition.nodes.map(node => [node.id, node]));
+  const nodes = nodeOrder.map(id => {
+    const node = byId.get(id);
+    if (!node) throw new Error(`dependency policy node order names unknown feature ${id}`);
+    return node;
+  });
+  // Questline membership follows node order, so it is re-derived here.
+  const questlines = definition.questlines.map(questline => ({ ...questline,
+    nodes: nodes.filter(node => node.questline === questline.id).map(node => node.id) }));
+  return { ...definition, nodes, questlines };
+}
+
+function compileDependencyPolicyForCatalog(repair: unknown, catalog: ProgressionInput,
+  selectedLevels: number[],
+  unchangedFailureLimit = DEFAULT_UNCHANGED_FAILURE_LIMIT,
+  workSelection: DependencyWorkSelection = DEFAULT_DEPENDENCY_WORK_SELECTION,
+  nodeOrder?: unknown,
+): ProgressionInput<CompiledDependencyPolicyDefinition> {
+  const selected = selectedCatalogDefinition(catalog, selectedLevels);
+  const plan = validateRepairPlan(repair, 'dependency policy repair');
+  const order = repairNodeOrder(selected.definition, plan.order, nodeOrder);
+  const runtimeDefinition = compileDependencyMode({
+    ...orderNodes(selected.definition, order),
+    schemaVersion: DEPENDENCY_MODE_SCHEMA_VERSION,
+    kind: 'progression-mode',
+    policy: DEPENDENCY_MODE_POLICY,
+    repair: plan,
+    unchangedFailureLimit,
+    workSelection,
+  });
+  const definition = canonicalizeDefinition({
+    schemaVersion: 1,
+    kind: 'dependency-policy',
+    id: DEPENDENCY_MODE_POLICY,
+    version: DEPENDENCY_MODE_VERSION,
+    levels: selected.levels,
+    repair: runtimeDefinition.repair,
+    nodeOrder: order,
+    unchangedFailureLimit: runtimeDefinition.unchangedFailureLimit,
+    workSelection: runtimeDefinition.workSelection,
+  }) as CompiledDependencyPolicyDefinition;
+  return canonicalizeDefinition({
+    definition,
+    identity: { id: definition.id, version: definition.version,
+      sha256: sha256(canonicalDefinitionJson(definition)) },
+  }) as unknown as ProgressionInput<CompiledDependencyPolicyDefinition>;
+}
+
+export function compileDependencyPolicyInput(repair: unknown, featureCatalog: unknown, {
+  selectedLevels, unchangedFailureLimit = DEFAULT_UNCHANGED_FAILURE_LIMIT,
+  workSelection = DEFAULT_DEPENDENCY_WORK_SELECTION, nodeOrder,
+}: {
+  selectedLevels?: number[];
+  unchangedFailureLimit?: number;
+  workSelection?: DependencyWorkSelection;
+  nodeOrder?: string[];
+} = {}): ProgressionInput<CompiledDependencyPolicyDefinition> {
+  const catalog = validateFeatureCatalogInput(featureCatalog);
+  const levels = selectedLevels
+    ?? [...new Set(catalog.definition.nodes.map(node => node.level))].sort((left, right) => left - right);
+  return compileDependencyPolicyForCatalog(repair, catalog, levels, unchangedFailureLimit,
+    workSelection, nodeOrder);
+}
+
+function validateDependencyPolicyForCatalog(input: unknown,
+  catalog: ProgressionInput): ProgressionInput<CompiledDependencyPolicyDefinition> {
+  if (!object(input)) throw new Error('dependency policy input must be an object');
+  const fields = new Set(['definition', 'identity']);
+  for (const key of Object.keys(input)) {
+    if (!fields.has(key)) throw new Error(`dependency policy input.${key} is unknown`);
+  }
+  if (!object(input.definition) || !object(input.definition.repair)) {
+    throw new Error('dependency policy input definition is incomplete');
+  }
+  if (!Array.isArray(input.definition.levels)
+    || input.definition.levels.some(level => !Number.isSafeInteger(level))) {
+    throw new Error('dependency policy input levels are invalid');
+  }
+  const levels = input.definition.levels as number[];
+  validateRepairPlan(input.definition.repair, 'dependency policy input definition.repair');
+  if (!isDependencyWorkSelection(input.definition.workSelection)) {
+    throw new Error('dependency policy input workSelection is invalid');
+  }
+  const compiled = compileDependencyPolicyForCatalog(input.definition.repair, catalog, levels,
+  input.definition.unchangedFailureLimit as number | undefined,
+  input.definition.workSelection, input.definition.nodeOrder);
+  if (canonicalDefinitionJson(input) !== canonicalDefinitionJson(compiled)) {
+    throw new Error('dependency policy identity does not match its compiled definition');
+  }
+  return compiled;
+}
+
+export function validateDependencyPolicyInput(input: unknown,
+  featureCatalog: unknown): ProgressionInput<CompiledDependencyPolicyDefinition> {
+  return validateDependencyPolicyForCatalog(input, validateFeatureCatalogInput(featureCatalog));
+}
+
+export function dependencyRuntimeDefinition(featureCatalog: unknown,
+  dependencyPolicy: unknown): CompiledProgressionDefinition {
+  const catalog = validateFeatureCatalogInput(featureCatalog);
+  const policy = validateDependencyPolicyForCatalog(dependencyPolicy, catalog);
+  const selected = selectedCatalogDefinition(catalog, policy.definition.levels);
+  return compileDependencyMode({
+    ...orderNodes(selected.definition, policy.definition.nodeOrder),
+    schemaVersion: DEPENDENCY_MODE_SCHEMA_VERSION,
+    kind: 'progression-mode',
+    policy: policy.definition.id,
+    repair: policy.definition.repair,
+    unchangedFailureLimit: policy.definition.unchangedFailureLimit,
+    workSelection: policy.definition.workSelection,
+  });
+}
+
+export function compileProgressionInput(input: unknown): ProgressionInput {
+  const definition = progressionEngine.compile(input);
+  return canonicalizeDefinition({ definition, identity: identity(definition) }) as unknown as ProgressionInput;
+}
+
+export function validateProgressionInput(input: unknown): ProgressionInput {
+  if (!object(input)) throw new Error('progression input must be an object');
+  const fields = new Set(['definition', 'identity']);
+  for (const key of Object.keys(input)) {
+    if (!fields.has(key)) throw new Error(`progression input.${key} is unknown`);
+  }
+  const compiled = compileProgressionInput(input.definition);
+  if (canonicalDefinitionJson(input) !== canonicalDefinitionJson(compiled)) {
+    throw new Error('progression input identity does not match its compiled definition');
+  }
+  return compiled;
+}
+
+export function progressionLevels(input: unknown): number[] {
+  const catalog = object(input) && object(input.definition)
+    && input.definition.kind === 'feature-catalog';
+  const validator = catalog
+    ? validateFeatureCatalogInput : validateProgressionInput;
+  const { definition } = validator(input);
+  return [...new Set(definition.nodes.map(node => node.level))].sort((left, right) => left - right);
+}
diff --git a/tools/stack-bench/src/progression/progression-engine.ts b/tools/stack-bench/src/progression/progression-engine.ts
new file mode 100644
index 00000000000..38fd67fd3ac
--- /dev/null
+++ b/tools/stack-bench/src/progression/progression-engine.ts
@@ -0,0 +1,128 @@
+import { dependencyModePolicy } from './dependency-mode.js';
+import type { DependencyGradingSelection } from './dependency-mode.js';
+import type { CompiledDependencyDefinition } from './dependency-definition.js';
+import type { DependencyScore } from './dependency-score.js';
+import type {
+  ProgressionState,
+  ProgressionTerminalOutcome,
+} from './progression-state.js';
+
+export interface ProgressionTerminalAction extends Record<string, unknown> {
+  type: 'terminal';
+  outcome: ProgressionTerminalOutcome;
+}
+
+export interface ProgressionWorkAction extends Record<string, unknown> {
+  type: 'build' | 'repair';
+  level: number;
+  repair: {
+    nodeIds: string[];
+    remaining: number;
+    grantId?: string;
+    // The last completed repair was charged but never graded. Grade its
+    // preserved source before starting another coding session.
+    awaitingGrade?: true;
+  };
+  prompt: unknown;
+  grading: unknown;
+}
+
+export type ProgressionAction = ProgressionTerminalAction | ProgressionWorkAction;
+
+export interface ProgressionPolicy<
+  TDefinition = unknown,
+  TState = unknown,
+  TAction = unknown,
+  TScore = unknown,
+  TGradingSelection = unknown,
+> {
+  id: string;
+  compile(definition: unknown): TDefinition;
+  initialize(definition: unknown): TState;
+  activeNodes(state: TState): unknown;
+  promptSelection(state: TState): unknown;
+  gradingSelection(state: TState): TGradingSelection;
+  recordResult(state: TState, result: unknown): TState;
+  grantRepairs(state: TState, grant: unknown): TState;
+  replay(definition: unknown, events: unknown[]): TState;
+  nextAction(state: TState): TAction;
+  score(state: TState): TScore;
+}
+
+export type ProgressionEngine<
+  TDefinition = unknown,
+  TState = unknown,
+  TAction = unknown,
+  TScore = unknown,
+  TGradingSelection = unknown,
+> = Omit<ProgressionPolicy<TDefinition, TState, TAction, TScore,
+  TGradingSelection>, 'id'>;
+
+const POLICY_METHODS = Object.freeze([
+  'compile', 'initialize', 'activeNodes', 'promptSelection', 'gradingSelection',
+  'recordResult', 'grantRepairs', 'replay', 'nextAction', 'score',
+] as const satisfies ReadonlyArray<keyof Omit<ProgressionPolicy, 'id'>>);
+
+function hasProperties(value: unknown): value is Record<string, unknown> {
+  return value !== null && (typeof value === 'object' || typeof value === 'function');
+}
+
+function policyId(value: unknown): unknown {
+  return hasProperties(value) ? value.policy : undefined;
+}
+
+export function createProgressionEngine<TDefinition, TState, TAction, TScore, TGradingSelection>(
+  policies: readonly ProgressionPolicy<TDefinition, TState, TAction, TScore,
+    TGradingSelection>[],
+): Readonly<ProgressionEngine<TDefinition, TState, TAction, TScore, TGradingSelection>>;
+export function createProgressionEngine(policies: unknown): Readonly<ProgressionEngine>;
+export function createProgressionEngine(policies: unknown): Readonly<ProgressionEngine> {
+  if (!Array.isArray(policies) || policies.length === 0) {
+    throw new Error('progression engine requires at least one policy');
+  }
+  const byId = new Map<string, ProgressionPolicy>();
+  for (const candidate of policies) {
+    if (!hasProperties(candidate) || typeof candidate.id !== 'string' || !candidate.id) {
+      throw new Error('progression policy requires an id');
+    }
+    const policyId = candidate.id;
+    if (byId.has(policyId)) throw new Error(`duplicate progression policy ${policyId}`);
+    for (const method of POLICY_METHODS) {
+      if (typeof candidate[method] !== 'function') {
+        throw new Error(`progression policy ${policyId} requires ${method}()`);
+      }
+    }
+    byId.set(policyId, candidate as unknown as ProgressionPolicy);
+  }
+  const definitionPolicy = (definition: unknown): ProgressionPolicy => {
+    const id = policyId(definition);
+    const policy = typeof id === 'string' ? byId.get(id) : undefined;
+    if (!policy) throw new Error(`unknown progression policy ${JSON.stringify(id)}`);
+    return policy;
+  };
+  const statePolicy = (state: unknown): ProgressionPolicy => {
+    const id = policyId(state);
+    const policy = typeof id === 'string' ? byId.get(id) : undefined;
+    if (!policy) throw new Error(`unknown progression state policy ${JSON.stringify(id)}`);
+    return policy;
+  };
+  return Object.freeze({
+    compile: (definition: unknown) => definitionPolicy(definition).compile(definition),
+    initialize: (definition: unknown) => definitionPolicy(definition).initialize(definition),
+    activeNodes: (state: unknown) => statePolicy(state).activeNodes(state),
+    promptSelection: (state: unknown) => statePolicy(state).promptSelection(state),
+    gradingSelection: (state: unknown) => statePolicy(state).gradingSelection(state),
+    recordResult: (state: unknown, result: unknown) =>
+      statePolicy(state).recordResult(state, result),
+    grantRepairs: (state: unknown, grant: unknown) =>
+      statePolicy(state).grantRepairs(state, grant),
+    replay: (definition: unknown, events: unknown[]) =>
+      definitionPolicy(definition).replay(definition, events),
+    nextAction: (state: unknown) => statePolicy(state).nextAction(state),
+    score: (state: unknown) => statePolicy(state).score(state),
+  });
+}
+
+export const progressionEngine: Readonly<ProgressionEngine<CompiledDependencyDefinition,
+  ProgressionState, ProgressionAction, DependencyScore, DependencyGradingSelection>> =
+  createProgressionEngine([dependencyModePolicy]);
diff --git a/tools/stack-bench/src/progression/progression-graph.ts b/tools/stack-bench/src/progression/progression-graph.ts
new file mode 100644
index 00000000000..17f6b640c2f
--- /dev/null
+++ b/tools/stack-bench/src/progression/progression-graph.ts
@@ -0,0 +1,160 @@
+import { readFileSync, readdirSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+
+import {
+  compilePackDefinition,
+  type CompiledPackDefinition,
+} from '../composition/composition-compiler.js';
+import {
+  compileProgressionDefinitionFile,
+  type CompiledProgressionDefinition,
+} from './progression-definition.js';
+
+export const GRAPH_START = '/* STACK_BENCH_GRAPH_START */';
+export const GRAPH_END = '/* STACK_BENCH_GRAPH_END */';
+
+export interface ProgressionGraphNode {
+  id: string;
+  name: string;
+  description: string;
+  level: number;
+  state: 'draft' | 'qualified';
+  parents: string[];
+  dependencyReasons: Record<string, string>;
+  questline: string;
+  featureRefs: string[];
+  checks: number;
+  points: number;
+}
+
+export interface ProgressionGraph {
+  schemaVersion: 1;
+  definition: { id: string; version: string; state: string };
+  levels: number;
+  questlines: Array<{ id: string; title: string }>;
+  nodes: ProgressionGraphNode[];
+}
+
+export interface CompileProgressionGraphOptions {
+  trackRoot?: string;
+}
+
+export interface WriteProgressionGraphOptions {
+  definitionPath: string;
+  htmlPath: string;
+  trackRoot?: string;
+}
+
+function readJson(path: string): unknown {
+  return JSON.parse(readFileSync(path, 'utf8')) as unknown;
+}
+
+function packCatalog(trackRoot: string): Map<string, CompiledPackDefinition> {
+  const root = join(trackRoot, 'composition', 'packs');
+  return new Map(
+    readdirSync(root)
+      .filter(name => name.endsWith('.json'))
+      .map(name => {
+        const pack = compilePackDefinition(readJson(join(root, name)), { source: name });
+        return [`${pack.id}@${pack.version}`, pack];
+      }),
+  );
+}
+
+function averageParentPosition(
+  node: ProgressionGraphNode,
+  positions: ReadonlyMap<string, number>,
+): number {
+  if (node.parents.length === 0) return Number.POSITIVE_INFINITY;
+  return node.parents.reduce((total, parent) => {
+    const position = positions.get(parent);
+    if (position === undefined) {
+      throw new Error(`progression graph parent ${parent} must precede ${node.id}`);
+    }
+    return total + position;
+  }, 0) / node.parents.length;
+}
+
+function orderForDisplay(nodes: ProgressionGraphNode[]): ProgressionGraphNode[] {
+  const ordered: ProgressionGraphNode[] = [];
+  const position = new Map<string, number>();
+  const levels = Math.max(...nodes.map(node => node.level));
+
+  for (let level = 1; level <= levels; level += 1) {
+    const atLevel = nodes.filter(node => node.level === level);
+    atLevel.sort((left, right) => {
+      if (level === 1) return left.name.localeCompare(right.name);
+      return averageParentPosition(left, position) - averageParentPosition(right, position)
+        || left.questline.localeCompare(right.questline)
+        || left.name.localeCompare(right.name);
+    });
+    for (const node of atLevel) {
+      position.set(node.id, ordered.length);
+      ordered.push(node);
+    }
+  }
+  return ordered;
+}
+
+export function compileProgressionGraph(
+  definitionPath: string,
+  { trackRoot }: CompileProgressionGraphOptions = {},
+): ProgressionGraph {
+  const absoluteDefinition = resolve(definitionPath);
+  const root = resolve(trackRoot ?? join(dirname(absoluteDefinition), '..'));
+  const definition: CompiledProgressionDefinition = compileProgressionDefinitionFile(
+    absoluteDefinition,
+    { trackRoot: root },
+  );
+  const packs = packCatalog(root);
+  const nodes = orderForDisplay(definition.nodes.map(node => {
+    const selected = node.featureRefs.map(reference => {
+      const pack = packs.get(reference);
+      if (!pack) throw new Error(`${node.id} references missing feature pack ${reference}`);
+      return pack;
+    });
+    return {
+      id: node.id,
+      name: node.title,
+      description: selected.map(pack => pack.description).filter(Boolean).join(' '),
+      level: node.level,
+      state: selected.every(pack => pack.state === 'qualified') ? 'qualified' : 'draft',
+      parents: node.dependencies,
+      dependencyReasons: node.dependencyReasons,
+      questline: node.questline,
+      featureRefs: node.featureRefs,
+      checks: node.gradingChecks.length,
+      points: node.gradingChecks.reduce((total, check) => total + check.points, 0),
+    } satisfies ProgressionGraphNode;
+  }));
+  return {
+    schemaVersion: 1,
+    definition: { id: definition.id, version: definition.version, state: definition.state },
+    levels: Math.max(...nodes.map(node => node.level)),
+    questlines: definition.questlines.map(({ id, title }) => ({ id, title })),
+    nodes,
+  };
+}
+
+export function renderProgressionGraphHtml(html: string, graph: ProgressionGraph): string {
+  const start = html.indexOf(GRAPH_START);
+  const end = html.indexOf(GRAPH_END);
+  if (start < 0 || end <= start) {
+    throw new Error('dependency graph HTML has no generated-data markers');
+  }
+  const graphJson = JSON.stringify(graph, null, 2).replace(/</g, '\\u003c');
+  const generated = `${GRAPH_START}\n  const graph = ${graphJson};\n  ${GRAPH_END}`;
+  return `${html.slice(0, start)}${generated}${html.slice(end + GRAPH_END.length)}`;
+}
+
+export function writeProgressionGraph({
+  definitionPath,
+  htmlPath,
+  trackRoot,
+}: WriteProgressionGraphOptions): ProgressionGraph {
+  const graph = compileProgressionGraph(definitionPath, { trackRoot });
+  const html = readFileSync(htmlPath, 'utf8');
+  const rendered = renderProgressionGraphHtml(html, graph);
+  writeFileSync(htmlPath, rendered);
+  return graph;
+}
diff --git a/tools/stack-bench/src/progression/progression-identifiers.ts b/tools/stack-bench/src/progression/progression-identifiers.ts
new file mode 100644
index 00000000000..bb73986de85
--- /dev/null
+++ b/tools/stack-bench/src/progression/progression-identifiers.ts
@@ -0,0 +1,10 @@
+import { isExactSemanticVersion, parseVersionedReference } from '../semantic-version.js';
+
+const IDENTIFIER = /^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;
+
+export const isProgressionIdentifier = (value: string): boolean => IDENTIFIER.test(value);
+export const isProgressionVersion = isExactSemanticVersion;
+
+export function parseVersionedProgressionId(value: string): { id: string; version: string } | null {
+  return parseVersionedReference(value, isProgressionIdentifier);
+}
diff --git a/tools/stack-bench/src/progression/progression-recipe-selection.ts b/tools/stack-bench/src/progression/progression-recipe-selection.ts
new file mode 100644
index 00000000000..93cc7c2545e
--- /dev/null
+++ b/tools/stack-bench/src/progression/progression-recipe-selection.ts
@@ -0,0 +1,441 @@
+import { createAgentVisibleTaskRequest, createBoundRecipeTaskRequest }
+  from '../composition/recipe-selection.js';
+import type {
+  ComposedRecipeTask,
+  ModularRecipeTaskRequestResult,
+} from '../composition/recipe-selection.js';
+import type {
+  RecipeBinding,
+  RecipeCheck,
+  RecipePackComponent,
+} from '../composition/recipe-release.js';
+import { progressionEngine } from './progression-engine.js';
+import type { ProgressionAction, ProgressionWorkAction } from './progression-engine.js';
+import { validateFeatureCatalogInput, validateProgressionInput }
+  from './progression-definition.js';
+import type {
+  CompiledProgressionDefinition,
+  CompiledProgressionNode,
+  ProgressionInput,
+} from './progression-definition.js';
+import type { ProgressionState } from './progression-state.js';
+
+interface ExactReference {
+  id: string;
+  version: string;
+  ref: string;
+}
+
+interface GradingCheckSelection {
+  id: string;
+  points: number;
+  nodeId?: string;
+}
+
+interface RequestedSpecifications {
+  expected: string[];
+  observed: string[];
+  requested: string[];
+}
+
+interface ModularRequestSelection extends Record<string, unknown> {
+  requested: {
+    features: string[];
+    specifications: RequestedSpecifications;
+    checks: string[];
+    dependencyExpansion?: string;
+  };
+  promptPacks: string[];
+}
+
+type ModularTaskRequest = ModularRecipeTaskRequestResult['request'] & {
+  recipe: { id: string; version: string; contentSha256: string };
+  selection: ModularRequestSelection;
+};
+
+type ModularBoundSelection = ModularRecipeTaskRequestResult['selection'] & {
+  sha256: string;
+  requested: ModularRequestSelection['requested'];
+  promptPacks: string[];
+  scoredChecks: RecipeCheck[];
+};
+
+interface ModularBoundTask {
+  request: ModularTaskRequest;
+  selection: ModularBoundSelection;
+  task: ComposedRecipeTask;
+}
+
+export interface ProgressionRecipeSelections {
+  agent: {
+    request: ModularTaskRequest;
+    selection: ModularBoundSelection;
+    task: ComposedRecipeTask;
+    selectionSha256: string;
+    taskSha256: string;
+  };
+  grader: {
+    request: ModularTaskRequest;
+    selection: ModularBoundSelection;
+    task: ComposedRecipeTask;
+    selectionSha256: string;
+    checkKeys: string[];
+  };
+}
+
+export type ProgressionRecipeAction =
+  | { action: Extract<ProgressionAction, { type: 'terminal' }> }
+  | ({ action: ProgressionWorkAction } & ProgressionRecipeSelections);
+
+interface RecipeWorkAction extends ProgressionWorkAction {
+  prompt: { nodeIds: string[] };
+  grading: { nodeIds: string[]; checks: GradingCheckSelection[] };
+}
+
+interface RecipeBindingAtLevel {
+  level: number;
+  binding: RecipeBinding;
+}
+
+interface LeveledRecipeBinding extends RecipeBinding {
+  level: number;
+}
+
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function asModularBoundTask(value: unknown): ModularBoundTask {
+  if (!object(value) || !object(value.request) || !object(value.selection)
+    || !object(value.task) || typeof value.selection.sha256 !== 'string'
+    || !Array.isArray(value.selection.scoredChecks)
+    || !Array.isArray(value.selection.promptPacks) || !object(value.selection.requested)) {
+    throw new Error('progression recipe selection requires a modular recipe task');
+  }
+  return value as unknown as ModularBoundTask;
+}
+
+function asModularTaskRequest(value: unknown): ModularTaskRequest {
+  if (!object(value) || !object(value.selection) || !object(value.selection.requested)
+    || !Array.isArray(value.selection.promptPacks)) {
+    throw new Error('progression agent request requires a modular recipe task');
+  }
+  return value as unknown as ModularTaskRequest;
+}
+
+function asRecipeWorkAction(action: ProgressionWorkAction): RecipeWorkAction {
+  if (!object(action.prompt) || !Array.isArray(action.prompt.nodeIds)
+    || !object(action.grading) || !Array.isArray(action.grading.nodeIds)
+    || !Array.isArray(action.grading.checks)) {
+    throw new Error('progression action has invalid prompt or grading selections');
+  }
+  return action as RecipeWorkAction;
+}
+
+const validateCatalog = (input: unknown): ProgressionInput =>
+  object(input) && object(input.definition) && input.definition.kind === 'feature-catalog'
+    ? validateFeatureCatalogInput(input) : validateProgressionInput(input);
+
+function exactRef(value: string): ExactReference {
+  const split = value.lastIndexOf('@');
+  return { id: value.slice(0, split), version: value.slice(split + 1), ref: value };
+}
+
+function unique(values: string[]): string[] {
+  return [...new Set(values)].sort();
+}
+
+function dependencyClosure(modules: Map<string, RecipePackComponent>, roots: string[],
+  expectedType: string,
+  { allowed = null, label = 'progression' }:
+  { allowed?: Set<string> | null; label?: string } = {}): Set<string> {
+  const found = new Set<string>();
+  const visit = (ref: string, chain: string[] = []): void => {
+    const module = modules.get(ref);
+    if (!module) throw new Error(`${label} references module ${ref} outside the selected recipe`);
+    if (module.moduleType !== expectedType) {
+      throw new Error(`${label} ${expectedType} dependency ${ref} has type ${module.moduleType}`);
+    }
+    if (chain.includes(ref)) {
+      throw new Error(`recipe module dependency cycle: ${[...chain, ref].join(' -> ')}`);
+    }
+    if (allowed && !allowed.has(ref)) {
+      throw new Error(`${label} requires ${ref} in its node or ancestors`);
+    }
+    found.add(ref);
+    for (const requiredRef of module.requiresPacks ?? []) visit(requiredRef, [...chain, ref]);
+  };
+  for (const ref of roots) visit(ref);
+  return found;
+}
+
+function getNode(nodes: Map<string, CompiledProgressionNode>, nodeId: string): CompiledProgressionNode {
+  const node = nodes.get(nodeId);
+  if (!node) throw new Error(`progression references unknown node ${nodeId}`);
+  return node;
+}
+
+function validateNodeModuleDependencies(binding: RecipeBinding,
+  definition: CompiledProgressionDefinition, node: CompiledProgressionNode): void {
+  const nodes = new Map(definition.nodes.map(item => [item.id, item]));
+  const modules = new Map(binding.release.components.packs
+    .map(module => [`${module.id}@${module.version}`, module]));
+  const ancestorIds = new Set<string>();
+  const visitNode = (nodeId: string): void => {
+    for (const parentId of getNode(nodes, nodeId).dependencies) {
+      if (ancestorIds.has(parentId)) continue;
+      ancestorIds.add(parentId);
+      visitNode(parentId);
+    }
+  };
+  visitNode(node.id);
+  const scope = [node, ...[...ancestorIds].map(nodeId => getNode(nodes, nodeId))];
+  const allowedFeatures = new Set(scope.flatMap(item => item.featureRefs));
+  const graphFeatureIds = new Set(definition.nodes.flatMap(item => item.featureRefs)
+    .map(ref => exactRef(ref).id));
+  const promptModules = scope.flatMap(item => item.promptModules).map(ref => {
+    const module = modules.get(ref);
+    if (!module) throw new Error(`progression references module ${ref} outside the selected recipe`);
+    return { ref, module };
+  });
+  const allowedSpecifications = new Set(promptModules
+    .filter(item => item.module.moduleType === 'specification').map(item => item.ref));
+  const nodeSpecifications = node.promptModules.filter(ref =>
+    modules.get(ref)?.moduleType === 'specification');
+  const unownedPromptFeature = node.promptModules.find(ref =>
+    modules.get(ref)?.moduleType === 'feature' && !node.featureRefs.includes(ref));
+  if (unownedPromptFeature) {
+    throw new Error(`progression node ${node.id} prompt feature ${unownedPromptFeature} is not selected`);
+  }
+  dependencyClosure(modules, node.featureRefs, 'feature', {
+    allowed: allowedFeatures, label: `progression node ${node.id}`,
+  });
+  dependencyClosure(modules, nodeSpecifications, 'specification', {
+    allowed: allowedSpecifications, label: `progression node ${node.id}`,
+  });
+  const checks = new Map(binding.release.checkCatalog.map(check => [check.stableKey, check]));
+  for (const selected of node.gradingChecks) {
+    const check = checks.get(selected.id);
+    if (!check) continue;
+    for (const requiredId of check.requiresFeatures ?? []) {
+      if (!graphFeatureIds.has(requiredId)) {
+        throw new Error(`progression node ${node.id} check ${selected.id} requires feature `
+          + `${requiredId} outside the feature graph`);
+      }
+    }
+    const owner = binding.release.components.packs.find(module => module.id === check.packId);
+    if (owner?.moduleType === 'specification') {
+      dependencyClosure(modules, [`${owner.id}@${owner.version}`], 'specification', {
+        label: 'progression expected specification',
+      });
+    }
+  }
+}
+
+function resolveSelections(binding: RecipeBinding, definition: CompiledProgressionDefinition,
+  promptNodeIds: string[], gradingNodeIds: string[], gradingChecks: GradingCheckSelection[],
+  taskMode: 'fresh' | 'upgrade'): ProgressionRecipeSelections {
+  if (!binding?.release || !binding?.plan) {
+    throw new Error('progression recipe selection requires a resolved recipe binding');
+  }
+  const nodes = new Map(definition.nodes.map(node => [node.id, node]));
+  const selectedTaskMode = binding.plan.recipe.task.mode === 'action' ? taskMode : undefined;
+  for (const nodeId of promptNodeIds) {
+    validateNodeModuleDependencies(binding, definition, getNode(nodes, nodeId));
+  }
+  const modules = new Map(binding.release.components.packs
+    .map(module => [`${module.id}@${module.version}`, module]));
+  const checkCatalog = new Map(binding.release.checkCatalog
+    .map(check => [check.stableKey, check]));
+  const refsFor = (nodeIds: string[], field: 'featureRefs' | 'promptModules'): string[] =>
+    unique(nodeIds.flatMap(nodeId => getNode(nodes, nodeId)[field]));
+  const checkedRefs = (refs: string[]): Array<ExactReference & { module: RecipePackComponent }> =>
+    refs.map(ref => {
+    const module = modules.get(ref);
+    if (!module) throw new Error(`progression references module ${ref} outside the selected recipe`);
+    return { ...exactRef(ref), module };
+    });
+  const promptFeatures = checkedRefs(refsFor(promptNodeIds, 'featureRefs'));
+  const selectedPromptModules = checkedRefs(refsFor(promptNodeIds, 'promptModules'));
+  const promptSpecifications = selectedPromptModules
+    .filter(item => item.module.moduleType === 'specification');
+  if (promptFeatures.some(item => item.module.moduleType !== 'feature')) {
+    throw new Error('progression featureRefs must reference feature modules');
+  }
+  const promptFeatureRefs = new Set(promptFeatures.map(item => item.ref));
+  if (selectedPromptModules.some(item => item.module.moduleType === 'feature'
+    && !promptFeatureRefs.has(item.ref))) {
+    throw new Error('progression prompt feature must also be selected by featureRefs');
+  }
+
+  const gradingFeatures = checkedRefs(refsFor(gradingNodeIds, 'featureRefs'));
+  const selectedGradingModules = checkedRefs(refsFor(gradingNodeIds, 'promptModules'));
+  const gradingRequested = selectedGradingModules
+    .filter(item => item.module.moduleType === 'specification');
+  if (gradingFeatures.some(item => item.module.moduleType !== 'feature')) {
+    throw new Error('progression featureRefs must reference feature modules');
+  }
+  const gradingFeatureRefs = new Set(gradingFeatures.map(item => item.ref));
+  if (selectedGradingModules.some(item => item.module.moduleType === 'feature'
+    && !gradingFeatureRefs.has(item.ref))) {
+    throw new Error('progression prompt feature must also be selected by featureRefs');
+  }
+  const requestedRefs = new Set(gradingRequested.map(item => item.ref));
+  const checkKeys = gradingChecks.map(check => check.id);
+  const expectedSpecifications = new Set<string>();
+  const requiredGradingFeatureIds = new Set(gradingFeatures.map(item => item.id));
+  for (const selected of gradingChecks) {
+    const check = checkCatalog.get(selected.id);
+    if (!check) throw new Error(`progression references check ${selected.id} outside the selected recipe`);
+    if (check.points !== selected.points) {
+      throw new Error(`progression points for ${selected.id} differ from the selected recipe`);
+    }
+    const owner = binding.release.components.packs.find(module => module.id === check.packId);
+    if (!owner) throw new Error(`progression check ${selected.id} has no recipe module owner`);
+    const ownerRef = `${owner.id}@${owner.version}`;
+    if (owner.moduleType === 'feature'
+      && !gradingFeatures.some(item => item.id === owner.id)) {
+      throw new Error(`progression check ${selected.id} belongs to an unselected feature`);
+    }
+    for (const featureId of check.requiresFeatures ?? []) {
+      requiredGradingFeatureIds.add(featureId);
+    }
+    if (owner.moduleType === 'specification' && !requestedRefs.has(ownerRef)) {
+      for (const ref of dependencyClosure(modules, [ownerRef], 'specification', {
+        label: 'progression expected specification',
+      })) {
+        if (!requestedRefs.has(ref)) expectedSpecifications.add(ref);
+      }
+    }
+  }
+
+  const agent = asModularBoundTask(createBoundRecipeTaskRequest(binding, {
+    featureIds: promptFeatures.map(item => item.id),
+    requestedSpecifications: promptSpecifications.map(item => item.ref),
+    checkKeys: [],
+    dependencyExpansion: 'exact',
+    taskMode: selectedTaskMode,
+  }));
+  const grader = asModularBoundTask(createBoundRecipeTaskRequest(binding, {
+    featureIds: [...requiredGradingFeatureIds].sort(),
+    requestedSpecifications: gradingRequested.map(item => item.ref),
+    expectedSpecifications: [...expectedSpecifications].sort(),
+    checkKeys,
+    dependencyExpansion: 'exact',
+    taskMode: selectedTaskMode,
+  }));
+  return {
+    agent: { request: asModularTaskRequest(createAgentVisibleTaskRequest(binding, agent)),
+      selection: agent.selection, task: agent.task,
+      selectionSha256: agent.selection.sha256, taskSha256: agent.task.sha256 },
+    grader: { request: grader.request, selection: grader.selection, task: grader.task,
+      selectionSha256: grader.selection.sha256,
+      checkKeys: grader.selection.scoredChecks.map(check => check.stableKey) },
+  };
+}
+
+export function resolveProgressionRecipeAction(binding: RecipeBinding,
+  state: ProgressionState): ProgressionRecipeAction {
+  const action = progressionEngine.nextAction(state);
+  if (action.type === 'terminal') return { action };
+  const workAction = asRecipeWorkAction(action);
+  const taskMode = action.type === 'build' && state.attempts.length === 0
+    ? 'fresh' : 'upgrade';
+  return { action, ...resolveSelections(binding, state.definition, workAction.prompt.nodeIds,
+    workAction.grading.nodeIds, workAction.grading.checks, taskMode) };
+}
+
+export function resolveProgressionRepairTarget(binding: RecipeBinding,
+  state: ProgressionState): ProgressionRecipeSelections['grader'] {
+  const action = progressionEngine.nextAction(state);
+  if (action.type !== 'repair') throw new Error('progression has no repair target');
+  const work = asRecipeWorkAction(action);
+  const targetIds = new Set(work.prompt.nodeIds);
+  const checks = work.grading.checks.filter(check => check.nodeId
+    && targetIds.has(check.nodeId));
+  if (checks.length === 0) throw new Error('progression repair target has no checks');
+  return resolveSelections(binding, state.definition, work.prompt.nodeIds,
+    work.prompt.nodeIds, checks, 'upgrade').grader;
+}
+
+export function resolveProgressionRecipeLevelSelection(binding: RecipeBinding, input: unknown,
+  level: number, { cumulative = true }: { cumulative?: boolean } = {}): ProgressionRecipeSelections {
+  const { definition } = validateCatalog(input);
+  const promptNodeIds = definition.nodes.filter(node => node.level === level)
+    .map(node => node.id);
+  if (promptNodeIds.length === 0) {
+    throw new Error(`progression has no nodes at level ${level}`);
+  }
+  const gradingNodes = definition.nodes.filter(node => cumulative
+    ? node.level <= level : node.level === level);
+  return resolveSelections(binding, definition, promptNodeIds,
+    gradingNodes.map(node => node.id), gradingNodes.flatMap(node =>
+      node.gradingChecks.map(check => ({ ...check, nodeId: node.id }))),
+    level === 1 ? 'fresh' : 'upgrade');
+}
+
+interface DeclaredProgressionLevelScope {
+  recipe: { contentSha256: string };
+  selection: { sha256: string };
+  task: { sha256: string };
+}
+
+export function validateProgressionCampaignLevelScope(binding: RecipeBinding,
+  progression: ProgressionInput, declared: DeclaredProgressionLevelScope | null | undefined,
+  level: number): ProgressionRecipeSelections {
+  if (!declared) throw new Error(`study condition does not bind requested L${level}`);
+  const derived = resolveProgressionRecipeLevelSelection(binding, progression, level);
+  if (declared.recipe.contentSha256 !== derived.grader.request.recipe.contentSha256
+    || declared.selection.sha256 !== derived.grader.selection.sha256
+    || declared.task.sha256 !== derived.grader.task.sha256) {
+    throw new Error(`dependency campaign graph-derived scope changed before L${level}`);
+  }
+  return derived;
+}
+
+export function validateProgressionRecipeBindings<T>(input: T,
+  bindings: Array<RecipeBindingAtLevel | LeveledRecipeBinding>,
+  { levels = null }: { levels?: number[] | null } = {}): T {
+  const { definition } = validateCatalog(input);
+  const byLevel = new Map(bindings.map(item =>
+    [item.level, 'binding' in item ? item.binding : item]));
+  const selectedLevels = levels ?? [...new Set(definition.nodes.map(node => node.level))];
+  for (const level of selectedLevels) {
+    const binding = byLevel.get(level);
+    if (!binding) throw new Error(`progression has no recipe binding for level ${level}`);
+    const levelNodes = definition.nodes.filter(node => node.level === level);
+    for (const node of levelNodes) {
+      try {
+        resolveSelections(binding, definition, [node.id], [node.id],
+          node.gradingChecks.map(check => ({ ...check, nodeId: node.id })),
+          node.level === 1 ? 'fresh' : 'upgrade');
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        throw new Error(`progression node ${node.id} does not bind to its recipe: ${message}`, {
+          cause: error,
+        });
+      }
+      if (node.level === 1 && binding.plan.recipe.task.mode === 'action') {
+        const repair = resolveSelections(binding, definition, [node.id], [node.id],
+          node.gradingChecks.map(check => ({ ...check, nodeId: node.id })), 'upgrade');
+        for (const reference of node.featureRefs) {
+          const featureId = exactRef(reference).id;
+          const fragments: Array<{
+            kind: 'requirements' | 'contracts';
+            ids: string[];
+          }> = [
+            { kind: 'requirements', ids: repair.agent.task.requirementIds },
+            { kind: 'contracts', ids: repair.agent.task.contractIds },
+          ];
+          for (const { kind, ids } of fragments) {
+            if (!binding.plan.recipe.task[kind].some(fragment => ids.includes(fragment.id)
+              && fragment.owners.includes(featureId))) {
+              throw new Error(`progression root ${node.id} feature ${featureId} has no upgrade ${kind}`);
+            }
+          }
+        }
+      }
+    }
+    resolveProgressionRecipeLevelSelection(binding, input, level);
+  }
+  return input;
+}
diff --git a/tools/stack-bench/src/progression/progression-reference-audit.ts b/tools/stack-bench/src/progression/progression-reference-audit.ts
new file mode 100644
index 00000000000..8f960fca73e
--- /dev/null
+++ b/tools/stack-bench/src/progression/progression-reference-audit.ts
@@ -0,0 +1,344 @@
+import { existsSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import { ARTIFACT_FILE, readArtifact } from '../evidence/artifacts.js';
+import type { RecipeBinding, RecipeCheck } from '../composition/recipe-release.js';
+import { progressionEngine } from './progression-engine.js';
+import type { ProgressionWorkAction } from './progression-engine.js';
+import { gradeBundleToProgressionResult } from './grade-bundle-result.js';
+import { validateProgressionInput } from './progression-definition.js';
+import type { CompiledProgressionDefinition, ProgressionInput }
+  from './progression-definition.js';
+import { resolveProgressionRecipeAction } from './progression-recipe-selection.js';
+import { readProgressionState, validateProgressionOwner } from './progression-state.js';
+import type { ProgressionEvent, ProgressionTerminalOutcome } from './progression-state.js';
+
+interface ExactRecipeIdentity {
+  id: string;
+  version: string;
+  sha256: string;
+}
+
+interface AuditRecipeRelease {
+  id: string;
+  version: string;
+  contentSha256: string;
+  checkCatalog: RecipeCheck[];
+}
+
+interface RecipeBindingRecord {
+  level: number;
+  binding: RecipeBinding;
+}
+
+type RecipeBindings = Map<number, RecipeBinding> | RecipeBindingRecord[];
+
+interface ReferenceAuditOptions {
+  outputDir?: string;
+  progression?: unknown;
+  featureCatalogIdentity?: unknown;
+  dependencyPolicyIdentity?: unknown;
+  owner?: unknown;
+  recipeBindings?: RecipeBindings;
+  release?: unknown;
+}
+
+interface AuditGradingCheck {
+  id: string;
+  points: number;
+}
+
+interface AuditWorkSelection {
+  promptNodeIds: string[];
+  gradingNodeIds: string[];
+  checks: AuditGradingCheck[];
+}
+
+interface AuditAction {
+  sequence: number;
+  type: ProgressionWorkAction['type'];
+  level: number;
+  promptNodeIds: string[];
+  gradingNodeIds: string[];
+  checks: number;
+  selectionSha256: string;
+  sourceSha256: string;
+  evidence?: unknown;
+  bundle: string;
+  outcome: 'conclusive' | 'inconclusive';
+  passed: boolean;
+  nodes?: unknown;
+}
+
+type RecordedResult = NonNullable<ProgressionEvent['result']> & { sourceSha256: string };
+
+export interface ProgressionReferenceAuditReport {
+  ok: boolean;
+  progression: ProgressionInput['identity'];
+  recipe: ExactRecipeIdentity;
+  actions: AuditAction[];
+  grants: unknown[];
+  terminal: ProgressionTerminalOutcome | null;
+  graphOwned: {
+    nodes: number;
+    checks: number;
+    points: number;
+    coveredNodes: number;
+    coveredChecks: number;
+    missingNodes: string[];
+    missingChecks: string[];
+    complete: boolean;
+  };
+  finalCatalogAudit: {
+    required: true;
+    status: 'passed' | 'not-run';
+    checks: number;
+    points: number;
+    zeroPointChecks: number;
+    checkKeys: string[];
+    additionalChecks: Array<{ stableKey: string; points: number }>;
+  };
+}
+
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const same = (left: unknown, right: unknown): boolean =>
+  canonicalDefinitionJson(left) === canonicalDefinitionJson(right);
+const HASH = /^[a-f0-9]{64}$/;
+
+function auditRecipeRelease(release: unknown): AuditRecipeRelease {
+  if (!object(release) || typeof release.id !== 'string'
+    || typeof release.version !== 'string' || typeof release.contentSha256 !== 'string'
+    || !HASH.test(release.contentSha256) || !Array.isArray(release.checkCatalog)) {
+    throw new Error('progression reference audit requires an exact recipe release');
+  }
+  return release as unknown as AuditRecipeRelease;
+}
+
+function exactRecipeIdentity(release: AuditRecipeRelease): ExactRecipeIdentity {
+  return { id: release.id, version: release.version, sha256: release.contentSha256 };
+}
+
+function bindingAt(recipeBindings: RecipeBindings, level: number): RecipeBinding {
+  const binding = recipeBindings instanceof Map
+    ? recipeBindings.get(level)
+    : recipeBindings.find(item => item.level === level)?.binding;
+  if (!binding?.release) throw new Error(`progression reference audit has no recipe binding for L${level}`);
+  return binding;
+}
+
+function checkMap(checks: unknown[], key: 'id' | 'stableKey', label: string): Map<string, number> {
+  const result = new Map<string, number>();
+  for (const check of checks) {
+    const id = object(check) ? check[key] : undefined;
+    if (typeof id !== 'string' || !id || result.has(id)
+      || !object(check) || typeof check.points !== 'number'
+      || !Number.isSafeInteger(check.points) || check.points < 0) {
+      throw new Error(`${label} contains an invalid or duplicate check`);
+    }
+    result.set(id, check.points);
+  }
+  return result;
+}
+
+function coverageReport(definition: CompiledProgressionDefinition, release: AuditRecipeRelease,
+  coveredNodeIds: Set<string>, coveredCheckIds: Set<string>): Pick<ProgressionReferenceAuditReport,
+  'graphOwned' | 'finalCatalogAudit'> {
+  const nodes = new Set(definition.nodes.map(node => node.id));
+  const graphChecks = checkMap(definition.nodes.flatMap(node => node.gradingChecks), 'id',
+    'progression graph');
+  const catalogChecks = checkMap(release.checkCatalog, 'stableKey', 'recipe catalog');
+  for (const [id, points] of graphChecks) {
+    if (!catalogChecks.has(id)) {
+      throw new Error(`progression graph check ${id} is outside the recipe catalog`);
+    }
+    if (catalogChecks.get(id) !== points) {
+      throw new Error(`progression graph points for ${id} differ from the recipe catalog`);
+    }
+  }
+  const missingNodes = [...nodes].filter(id => !coveredNodeIds.has(id)).sort();
+  const missingChecks = [...graphChecks.keys()].filter(id => !coveredCheckIds.has(id)).sort();
+  const additionalChecks = [...catalogChecks].filter(([id]) => !graphChecks.has(id))
+    .map(([stableKey, points]) => ({ stableKey, points }));
+  const sum = (values: Iterable<number>): number =>
+    [...values].reduce((total, value) => total + value, 0);
+  return {
+    graphOwned: {
+      nodes: nodes.size,
+      checks: graphChecks.size,
+      points: sum(graphChecks.values()),
+      coveredNodes: nodes.size - missingNodes.length,
+      coveredChecks: graphChecks.size - missingChecks.length,
+      missingNodes,
+      missingChecks,
+      complete: missingNodes.length === 0 && missingChecks.length === 0,
+    },
+    finalCatalogAudit: {
+      required: true,
+      status: 'not-run',
+      checks: catalogChecks.size,
+      points: sum(catalogChecks.values()),
+      zeroPointChecks: [...catalogChecks.values()].filter(points => points === 0).length,
+      checkKeys: [...catalogChecks.keys()],
+      additionalChecks,
+    },
+  };
+}
+
+function auditWorkSelection(action: ProgressionWorkAction): AuditWorkSelection {
+  if (!object(action.prompt) || !Array.isArray(action.prompt.nodeIds)
+    || action.prompt.nodeIds.some(id => typeof id !== 'string' || !id)
+    || !object(action.grading) || !Array.isArray(action.grading.nodeIds)
+    || action.grading.nodeIds.some(id => typeof id !== 'string' || !id)
+    || !Array.isArray(action.grading.checks)) {
+    throw new Error('progression reference audit action selection is invalid');
+  }
+  const checks = action.grading.checks.map(check => {
+    if (!object(check) || typeof check.id !== 'string' || !check.id
+      || typeof check.points !== 'number' || !Number.isSafeInteger(check.points)) {
+      throw new Error('progression reference audit action check is invalid');
+    }
+    return { id: check.id, points: check.points };
+  });
+  return {
+    promptNodeIds: action.prompt.nodeIds as string[],
+    gradingNodeIds: action.grading.nodeIds as string[],
+    checks,
+  };
+}
+
+function recordedResult(event: ProgressionEvent): RecordedResult {
+  if (!object(event.result) || typeof event.result.sourceSha256 !== 'string'
+    || !HASH.test(event.result.sourceSha256)) {
+    throw new Error('progression reference audit recorded result is invalid');
+  }
+  return { ...event.result, sourceSha256: event.result.sourceSha256 };
+}
+
+export function auditProgressionReferenceRun({ outputDir, progression, featureCatalogIdentity,
+  dependencyPolicyIdentity, owner,
+  recipeBindings, release }: ReferenceAuditOptions = {}): ProgressionReferenceAuditReport {
+  if (typeof outputDir !== 'string' || !outputDir) {
+    throw new Error('progression reference audit requires an output directory');
+  }
+  if (!(recipeBindings instanceof Map) && !Array.isArray(recipeBindings)) {
+    throw new Error('progression reference audit requires recipe bindings');
+  }
+  const root = resolve(outputDir);
+  const validatedProgression = validateProgressionInput(progression);
+  const validatedOwner = validateProgressionOwner(owner, { requireWorkspace: true });
+  const validatedRelease = auditRecipeRelease(release);
+  const recipeIdentity = exactRecipeIdentity(validatedRelease);
+  const runArtifact = readArtifact(join(root, ARTIFACT_FILE.run), { expectedKind: 'benchmark_run' });
+  const stored = readProgressionState(join(root, ARTIFACT_FILE.progressionState), {
+    progression: validatedProgression,
+    featureCatalogIdentity,
+    dependencyPolicyIdentity,
+    owner: validatedOwner,
+  });
+  let state = progressionEngine.initialize(validatedProgression.definition);
+  let attemptSequence = 0;
+  const actions: AuditAction[] = [];
+  const grants: unknown[] = [];
+  const coveredNodeIds = new Set<string>();
+  const coveredCheckIds = new Set<string>();
+
+  for (const event of stored.state.events) {
+    if (event.type === 'repairs-granted') {
+      state = progressionEngine.grantRepairs(state, event.grant);
+      grants.push(structuredClone(event.grant));
+      continue;
+    }
+    if (event.type !== 'attempt-recorded') {
+      throw new Error(`progression reference audit cannot process event ${event.type}`);
+    }
+    attemptSequence += 1;
+    const action = progressionEngine.nextAction(state);
+    if (action.type === 'terminal') {
+      throw new Error(`progression attempt ${attemptSequence} was recorded after the terminal action`);
+    }
+    const work = auditWorkSelection(action);
+    const binding = bindingAt(recipeBindings, action.level);
+    const boundIdentity = exactRecipeIdentity(auditRecipeRelease(binding.release));
+    if (!same(boundIdentity, recipeIdentity)) {
+      throw new Error(`progression L${action.level} does not use the exact audited recipe`);
+    }
+    const selected = resolveProgressionRecipeAction(binding, state);
+    if (!('grader' in selected) || !same(selected.action, action)) {
+      throw new Error(`progression attempt ${attemptSequence} action does not match its recipe selection`);
+    }
+    const savedResult = recordedResult(event);
+    const bundlePath = join(root, 'progression',
+      `attempt-${String(attemptSequence).padStart(3, '0')}`, ARTIFACT_FILE.gradeBundle);
+    if (!existsSync(bundlePath)) {
+      throw new Error(`progression attempt ${attemptSequence} grade bundle is missing`);
+    }
+    const converted = gradeBundleToProgressionResult(
+      readArtifact(bundlePath, { expectedKind: 'grade_bundle' }),
+      action,
+      {
+        owner: validatedOwner,
+        runArtifact,
+        featureCatalogIdentity,
+        dependencyPolicyIdentity,
+        selectionSha256: selected.grader.selectionSha256,
+        sourceSha256: savedResult.sourceSha256,
+        recipeIdentity: boundIdentity,
+        sequence: attemptSequence,
+      },
+    );
+    const recordedGrade = {
+      ...converted,
+      ...(savedResult.repairRegression === undefined
+        ? {} : { repairRegression: savedResult.repairRegression }),
+      ...(savedResult.completedRepair === undefined
+        ? {} : { completedRepair: savedResult.completedRepair }),
+    };
+    if (!same(recordedGrade, savedResult)) {
+      throw new Error(`progression attempt ${attemptSequence} recorded result differs from its grade bundle`);
+    }
+    const passed = converted.outcome === 'conclusive'
+      && converted.nodes.every(node => node.checks.every(check => check.outcome === 'pass'));
+    if (converted.outcome === 'conclusive') {
+      for (const nodeId of work.gradingNodeIds) coveredNodeIds.add(nodeId);
+      for (const check of work.checks) coveredCheckIds.add(check.id);
+    }
+    actions.push({
+      sequence: attemptSequence,
+      type: action.type,
+      level: action.level,
+      promptNodeIds: [...work.promptNodeIds],
+      gradingNodeIds: [...work.gradingNodeIds],
+      checks: work.checks.length,
+      selectionSha256: converted.selectionSha256,
+      sourceSha256: converted.sourceSha256,
+      evidence: converted.evidence,
+      bundle: `progression/attempt-${String(attemptSequence).padStart(3, '0')}/${ARTIFACT_FILE.gradeBundle}`,
+      outcome: converted.outcome,
+      passed,
+      ...(converted.outcome === 'conclusive'
+        ? { nodes: structuredClone(converted.nodes) } : {}),
+    });
+    state = progressionEngine.recordResult(state, recordedGrade);
+  }
+
+  if (!same(state, stored.state)) {
+    throw new Error('progression reference audit replay differs from the stored progression state');
+  }
+  const coverage = coverageReport(validatedProgression.definition, validatedRelease,
+    coveredNodeIds, coveredCheckIds);
+  const terminal = progressionEngine.nextAction(state);
+  return {
+    ok: terminal.type === 'terminal' && terminal.outcome.kind === 'passed'
+      && coverage.graphOwned.complete && grants.length === 0
+      && coverage.finalCatalogAudit.status === 'passed'
+      && actions.every(action => action.type === 'build' && action.passed),
+    progression: validatedProgression.identity,
+    recipe: recipeIdentity,
+    actions,
+    grants,
+    terminal: terminal.type === 'terminal' ? terminal.outcome : null,
+    ...coverage,
+  };
+}
diff --git a/tools/stack-bench/src/progression/progression-state.ts b/tools/stack-bench/src/progression/progression-state.ts
new file mode 100644
index 00000000000..3b906dc8d50
--- /dev/null
+++ b/tools/stack-bench/src/progression/progression-state.ts
@@ -0,0 +1,469 @@
+import { existsSync, lstatSync, readdirSync, realpathSync } from 'node:fs';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { isDeepStrictEqual } from 'node:util';
+import { z } from 'zod';
+
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import { currentEngineIdentity, emptyArtifactIdentities, readArtifact,
+  writeArtifact } from '../evidence/artifacts.js';
+import { sha256 } from '../evidence/provenance.js';
+import { acquireCampaignLock, releaseCampaignLock } from '../campaigns/campaign-lock.js';
+import type { CampaignLock } from '../campaigns/campaign-lock.js';
+import { hashAppSource } from '../runtime/source-snapshot.js';
+import type { RepairExhaustionReason } from './repair-plan.js';
+import { formatZodError } from '../zod-error.js';
+import {
+  progressionEngine,
+} from './progression-engine.js';
+import {
+  validateProgressionInput,
+  type CompiledProgressionDefinition,
+} from './progression-definition.js';
+
+interface BoundIdentity extends Record<string, unknown> {
+  id: string;
+  version?: string | null;
+  sha256: string;
+  state?: string;
+}
+
+export interface ProgressionOwner {
+  schemaVersion: 1;
+  campaign: { id: string; version: string; sha256: string };
+  attempt: {
+    id: string;
+    track: string;
+    stack: string;
+    agentAdapter: string;
+    model: string;
+    conditionSha256: string;
+  };
+  workspace?: { appDirectory: string };
+}
+
+export type ProgressionNodeStatus =
+  | 'locked'
+  | 'active'
+  | 'working'
+  | 'passed'
+  | 'failed'
+  | 'blocked';
+
+export interface ProgressionNodeState {
+  status: ProgressionNodeStatus;
+  exhaustedAtLevel: number | null;
+  exhaustionReason: RepairExhaustionReason | null;
+  unchangedFailure: { fingerprint: string | null; count: number };
+  repairs: { used: number };
+  checks: Record<string, 'pass' | 'fail' | null>;
+}
+
+export interface ProgressionAttempt {
+  attemptId: string;
+  level: number;
+  outcome: 'conclusive' | 'inconclusive';
+  category?: string;
+  reason?: string;
+  runId?: string;
+  sourceSha256?: string;
+  selectionSha256?: string;
+  evidence?: ProgressionEvidence;
+  applicationFailure?: { phase: string; reason: string };
+  repairRegression?: ProgressionRepairRegression;
+  repair?: { nodeIds: string[]; depth: number; grantId?: string };
+}
+
+export interface ProgressionRepairRegression extends Record<string, unknown> {
+  ownerNodeIds: string[];
+  report: string;
+}
+
+export interface ProgressionEvidence extends Record<string, unknown> {
+  kind: 'grade_bundle';
+  id: string;
+  sha256: string;
+}
+
+export interface ProgressionTerminalOutcome {
+  kind: 'passed' | 'partial' | 'failed';
+  reason: 'graph-complete' | 'no-unlocked-nodes';
+  level: number;
+  blockedLevel?: number;
+}
+
+export interface ProgressionEvent extends Record<string, unknown> {
+  type: string;
+  result?: { attemptId: string; repairRegression?: ProgressionRepairRegression;
+    [key: string]: unknown };
+  grant?: Record<string, unknown>;
+}
+
+export interface ProgressionRepairGrant extends Record<string, unknown> {
+  grantId: string;
+  level: number;
+  nodeIds: string[];
+  repairs: number;
+}
+
+export interface ProgressionResumeBinding extends Record<string, unknown> {
+  actionSha256: string;
+  source: { directory: string; sha256: string; files: number };
+}
+
+export interface ProgressionState extends Record<string, unknown> {
+  schemaVersion: number;
+  policy: string;
+  definition: CompiledProgressionDefinition;
+  phase: 'active' | 'terminal';
+  terminalOutcome: ProgressionTerminalOutcome | null;
+  level: number;
+  nodes: Record<string, ProgressionNodeState>;
+  attempts: ProgressionAttempt[];
+  grants: ProgressionRepairGrant[];
+  events: ProgressionEvent[];
+}
+
+interface WorkspaceProgressionOwner extends ProgressionOwner {
+  workspace: { appDirectory: string };
+}
+
+export interface ProgressionStatePayload extends Record<string, unknown> {
+  schemaVersion: 4;
+  owner: WorkspaceProgressionOwner;
+  featureCatalog: BoundIdentity;
+  dependencyPolicy: BoundIdentity;
+  events: ProgressionEvent[];
+  resume?: unknown;
+  stateSha256: string;
+}
+
+interface StateArtifact extends Record<string, unknown> {
+  id: string;
+  attempt: { id: string; parentId?: string | null };
+  identities: {
+    experiment?: { sha256?: string };
+    engine: { sha256: string };
+    agentAdapter?: { id?: string };
+    stackAdapter?: { id?: string };
+  };
+  payload: ProgressionStatePayload;
+}
+
+interface RestoredProgressionState {
+  state: ProgressionState;
+  stateSha256: string;
+  resume: unknown | null;
+}
+
+interface StateResult extends RestoredProgressionState {
+  artifact: StateArtifact;
+}
+
+interface WriteProgressionStateOptions {
+  progression: unknown;
+  featureCatalogIdentity: unknown;
+  dependencyPolicyIdentity: unknown;
+  state: unknown;
+  owner: unknown;
+  resume?: unknown | null;
+  id?: string;
+}
+
+interface ReadProgressionStateOptions {
+  progression: unknown;
+  featureCatalogIdentity: unknown;
+  dependencyPolicyIdentity: unknown;
+  owner: unknown;
+  requireCurrentEngine?: boolean;
+}
+
+interface GrantProgressionStateOptions {
+  progression: unknown;
+  featureCatalogIdentity: unknown;
+  dependencyPolicyIdentity: unknown;
+  owner: unknown;
+  grant: ProgressionRepairGrant;
+  expectedStateSha256: unknown;
+}
+
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const HASH = /^[a-f0-9]{64}$/;
+const hashSchema = z.string().regex(HASH);
+const boundIdentitySchema = z.strictObject({
+  id: z.string().min(1),
+  version: z.string().min(1).nullable().optional(),
+  sha256: hashSchema,
+  state: z.string().optional(),
+});
+const progressionOwnerSchema = z.strictObject({
+  schemaVersion: z.literal(1),
+  campaign: z.strictObject({ id: z.string().min(1), version: z.string().min(1), sha256: hashSchema }),
+  attempt: z.strictObject({
+    id: z.string().min(1),
+    track: z.string().min(1),
+    stack: z.string().min(1),
+    agentAdapter: z.string().min(1),
+    model: z.string().min(1),
+    conditionSha256: hashSchema,
+  }),
+  workspace: z.strictObject({ appDirectory: z.string().min(1) }).optional(),
+});
+const eventHistorySchema = z.looseObject({ events: z.array(z.unknown()) });
+const storedProgressionSchema = z.looseObject({
+  schemaVersion: z.literal(4),
+  featureCatalog: boundIdentitySchema,
+  dependencyPolicy: boundIdentitySchema,
+  owner: progressionOwnerSchema,
+  events: z.array(z.unknown()),
+  resume: z.unknown().optional(),
+  stateSha256: hashSchema,
+});
+
+function validateBoundIdentity(input: unknown, label: string): BoundIdentity {
+  const parsed = boundIdentitySchema.safeParse(input);
+  if (!parsed.success) throw new Error(formatZodError(parsed.error, `${label} identity`));
+  return parsed.data;
+}
+
+function boundIdentities(featureCatalogIdentity: unknown, dependencyPolicyIdentity: unknown): {
+  featureCatalog: BoundIdentity;
+  dependencyPolicy: BoundIdentity;
+} {
+  return {
+    featureCatalog: validateBoundIdentity(featureCatalogIdentity, 'feature catalog'),
+    dependencyPolicy: validateBoundIdentity(dependencyPolicyIdentity, 'dependency policy'),
+  };
+}
+
+export function validateProgressionOwner(input: unknown,
+  { requireWorkspace = false }: { requireWorkspace?: boolean } = {}): ProgressionOwner {
+  const parsed = progressionOwnerSchema.safeParse(input);
+  if (!parsed.success) throw new Error(formatZodError(parsed.error, 'progression state owner'));
+  const typedOwner = parsed.data;
+  if (requireWorkspace && !typedOwner.workspace) throw new Error('progression state owner is incomplete');
+  if (typedOwner.workspace) {
+    if (typeof typedOwner.workspace.appDirectory !== 'string' || !typedOwner.workspace.appDirectory
+      || isAbsolute(typedOwner.workspace.appDirectory)
+      || typedOwner.workspace.appDirectory.includes('\\')
+      || typedOwner.workspace.appDirectory.split('/').some(part =>
+        !part || part === '.' || part === '..')) {
+      throw new Error('progression state owner.workspace.appDirectory must be a normalized relative path');
+    }
+    const validationRoot = resolve('__stack_bench_workspace__');
+    const appPath = resolve(validationRoot, typedOwner.workspace.appDirectory);
+    const appRelative = relative(validationRoot, appPath);
+    if (appRelative === '..' || appRelative.startsWith(`..${sep}`) || appRelative === '') {
+      throw new Error('progression state owner workspace application escapes its root');
+    }
+  }
+  return typedOwner;
+}
+
+function validateWorkspaceOwner(input: unknown): WorkspaceProgressionOwner {
+  const owner = validateProgressionOwner(input, { requireWorkspace: true });
+  if (!owner.workspace) throw new Error('progression state owner is incomplete');
+  return owner as WorkspaceProgressionOwner;
+}
+
+function storedPayload(progressionInput: unknown, featureCatalogIdentity: unknown,
+  dependencyPolicyIdentity: unknown, ownerInput: unknown, stateInput: unknown,
+  resume: unknown | null = null): ProgressionStatePayload {
+  const progression = validateProgressionInput(progressionInput);
+  const identities = boundIdentities(featureCatalogIdentity, dependencyPolicyIdentity);
+  const owner = validateWorkspaceOwner(ownerInput);
+  const parsedState = eventHistorySchema.safeParse(stateInput);
+  if (!parsedState.success) {
+    throw new Error('progression state must contain an event history');
+  }
+  const state = progressionEngine.replay(progression.definition, parsedState.data.events);
+  if (!isDeepStrictEqual(stateInput, state)) {
+    throw new Error('progression state contradicts its event history');
+  }
+  const content = { owner, ...identities, events: state.events,
+    ...(resume === null ? {} : { resume: structuredClone(resume) }) };
+  return { schemaVersion: 4, ...content,
+    stateSha256: sha256(canonicalDefinitionJson(content)) } as ProgressionStatePayload;
+}
+
+function restorePayload(payload: unknown, progressionInput: unknown,
+  featureCatalogIdentity: unknown, dependencyPolicyIdentity: unknown,
+  ownerInput: unknown): RestoredProgressionState {
+  const progression = validateProgressionInput(progressionInput);
+  const identities = boundIdentities(featureCatalogIdentity, dependencyPolicyIdentity);
+  const owner = validateWorkspaceOwner(ownerInput);
+  const parsedPayload = storedProgressionSchema.safeParse(payload);
+  if (!parsedPayload.success) {
+    throw new Error('progression state artifact is incomplete');
+  }
+  const stored = parsedPayload.data;
+  if (canonicalDefinitionJson(stored.featureCatalog)
+      !== canonicalDefinitionJson(identities.featureCatalog)
+    || canonicalDefinitionJson(stored.dependencyPolicy)
+      !== canonicalDefinitionJson(identities.dependencyPolicy)) {
+    throw new Error('progression state artifact has the wrong feature catalog or dependency policy');
+  }
+  if (canonicalDefinitionJson(stored.owner) !== canonicalDefinitionJson(owner)) {
+    throw new Error('progression state artifact has the wrong campaign attempt owner');
+  }
+  const content = { owner: stored.owner, featureCatalog: stored.featureCatalog,
+    dependencyPolicy: stored.dependencyPolicy, events: stored.events,
+    ...(stored.resume === undefined ? {} : { resume: stored.resume }) };
+  if (sha256(canonicalDefinitionJson(content)) !== stored.stateSha256) {
+    throw new Error('progression state identity does not match its contents');
+  }
+  const state = progressionEngine.replay(progression.definition, stored.events);
+  return { state, stateSha256: stored.stateSha256,
+    resume: stored.resume === undefined ? null : structuredClone(stored.resume) };
+}
+
+export function writeProgressionState(path: string, { progression, featureCatalogIdentity,
+  dependencyPolicyIdentity, state,
+  owner: ownerInput, resume = null, id = 'progression-state' }:
+  Partial<WriteProgressionStateOptions> = {}): StateResult {
+  const owner = validateWorkspaceOwner(ownerInput);
+  const payload = storedPayload(progression, featureCatalogIdentity,
+    dependencyPolicyIdentity, owner, state, resume);
+  const artifact = writeArtifact(resolve(path), { kind: 'progression_state', id,
+    attempt: { id: owner.attempt.id, parentId: owner.campaign.id },
+    identities: emptyArtifactIdentities({ experiment: {
+      id: owner.campaign.id, version: owner.campaign.version,
+      sha256: owner.campaign.sha256,
+    }, stackAdapter: { id: owner.attempt.stack } }), payload }) as unknown as StateArtifact;
+  return { artifact, ...restorePayload(artifact.payload, progression,
+    featureCatalogIdentity, dependencyPolicyIdentity, owner) };
+}
+
+export function readProgressionState(path: string, { progression, featureCatalogIdentity,
+  dependencyPolicyIdentity, owner,
+  requireCurrentEngine = false }: Partial<ReadProgressionStateOptions> = {}): StateResult {
+  const validatedOwner = validateWorkspaceOwner(owner);
+  const artifact = readArtifact(resolve(path), { expectedKind: 'progression_state' }) as unknown as StateArtifact;
+  if (artifact.attempt.id !== validatedOwner.attempt.id
+    || artifact.attempt.parentId !== validatedOwner.campaign.id
+    || artifact.identities.experiment?.sha256 !== validatedOwner.campaign.sha256
+    || artifact.identities.stackAdapter?.id !== validatedOwner.attempt.stack) {
+    throw new Error('progression state artifact envelope has the wrong campaign attempt owner');
+  }
+  if (requireCurrentEngine
+    && artifact.identities.engine.sha256 !== currentEngineIdentity().sha256) {
+    throw new Error('progression state artifact uses a different harness executable');
+  }
+  return { artifact, ...restorePayload(artifact.payload, progression,
+    featureCatalogIdentity, dependencyPolicyIdentity, validatedOwner) };
+}
+
+export function progressionStateExists(path: string): boolean {
+  return existsSync(resolve(path));
+}
+
+function stateLock(path: string, progression: unknown, featureCatalogIdentity: unknown,
+  dependencyPolicyIdentity: unknown, ownerInput: unknown): CampaignLock {
+  validateProgressionInput(progression);
+  const identities = boundIdentities(featureCatalogIdentity, dependencyPolicyIdentity);
+  const owner = validateWorkspaceOwner(ownerInput);
+  const lockSha256 = sha256(canonicalDefinitionJson({ ...identities, owner }));
+  return acquireCampaignLock(`${resolve(path)}.control`, {
+    id: `progression-${lockSha256.slice(0, 16)}`,
+    contentSha256: lockSha256,
+  });
+}
+
+function ownedPath(root: string, input: unknown, label: string): string {
+  if (typeof input !== 'string' || !input || isAbsolute(input)) {
+    throw new Error(`${label} must be a relative path in the progression workspace`);
+  }
+  const absoluteRoot = resolve(root);
+  if (lstatSync(absoluteRoot).isSymbolicLink()) {
+    throw new Error('progression workspace root cannot be a symbolic link');
+  }
+  const absolute = resolve(absoluteRoot, input);
+  const rel = relative(absoluteRoot, absolute);
+  if (rel === '..' || rel.startsWith(`..${sep}`) || rel === '') {
+    throw new Error(`${label} escapes the progression workspace`);
+  }
+  let current = absoluteRoot;
+  for (const part of rel.split(/[\\/]/)) {
+    current = join(current, part);
+    if (lstatSync(current).isSymbolicLink()) {
+      throw new Error(`${label} cannot traverse a symbolic link`);
+    }
+  }
+  const realRoot = realpathSync(absoluteRoot);
+  const real = realpathSync(absolute);
+  const realRelative = relative(realRoot, real);
+  if (realRelative === '..' || realRelative.startsWith(`..${sep}`) || realRelative === '') {
+    throw new Error(`${label} resolves outside the progression workspace`);
+  }
+  return real;
+}
+
+function rejectTreeSymlinks(path: string, label: string): void {
+  for (const entry of readdirSync(path, { withFileTypes: true })) {
+    if (entry.isSymbolicLink()) throw new Error(`${label} contains a symbolic link`);
+    if (entry.isDirectory()) rejectTreeSymlinks(join(path, entry.name), label);
+  }
+}
+
+function validateGrantSource(state: ProgressionState, owner: WorkspaceProgressionOwner,
+  resume: unknown, workspaceRoot: string): void {
+  if (!object(resume) || typeof resume.actionSha256 !== 'string'
+    || !HASH.test(resume.actionSha256) || !object(resume.source)
+    || resume.source.directory !== owner.workspace.appDirectory
+    || typeof resume.source.sha256 !== 'string' || !HASH.test(resume.source.sha256)
+    || !Number.isSafeInteger(resume.source.files) || Number(resume.source.files) < 0) {
+    throw new Error('continuation grant requires the current accepted source binding');
+  }
+  if (resume.actionSha256 !== sha256(canonicalDefinitionJson(progressionEngine.nextAction(state)))) {
+    throw new Error('continuation source binding does not match the terminal progression action');
+  }
+  const sourcePath = ownedPath(workspaceRoot, resume.source.directory,
+    'progression application');
+  rejectTreeSymlinks(sourcePath, 'progression application');
+  const source = hashAppSource(sourcePath);
+  if (source.sha256 !== resume.source.sha256 || source.files.length !== resume.source.files) {
+    throw new Error('current accepted source does not match the progression state');
+  }
+}
+
+function grantResumeBinding(state: ProgressionState, owner: WorkspaceProgressionOwner,
+  workspaceRoot: string): ProgressionResumeBinding {
+  const sourcePath = ownedPath(workspaceRoot, owner.workspace.appDirectory,
+    'progression application');
+  const source = hashAppSource(sourcePath);
+  return {
+    actionSha256: sha256(canonicalDefinitionJson(progressionEngine.nextAction(state))),
+    source: {
+      directory: owner.workspace.appDirectory,
+      sha256: source.sha256,
+      files: source.files.length,
+    },
+  };
+}
+
+export function grantProgressionState(path: string, { progression, featureCatalogIdentity,
+  dependencyPolicyIdentity, owner, grant,
+  expectedStateSha256 }: Partial<GrantProgressionStateOptions> = {}): StateResult {
+  if (typeof expectedStateSha256 !== 'string' || !expectedStateSha256) {
+    throw new Error('continuation grant requires the expected progression state identity');
+  }
+  const lock = stateLock(path, progression, featureCatalogIdentity,
+    dependencyPolicyIdentity, owner);
+  try {
+    const current = readProgressionState(path, { progression, featureCatalogIdentity,
+      dependencyPolicyIdentity, owner, requireCurrentEngine: true });
+    if (current.stateSha256 !== expectedStateSha256) {
+      throw new Error('progression state changed before the continuation grant');
+    }
+    const validatedOwner = validateWorkspaceOwner(owner);
+    const workspaceRoot = dirname(resolve(path));
+    validateGrantSource(current.state, validatedOwner, current.resume, workspaceRoot);
+    const state = progressionEngine.grantRepairs(current.state, grant);
+    return writeProgressionState(path, { progression, featureCatalogIdentity,
+      dependencyPolicyIdentity, owner: validatedOwner, state,
+      resume: grantResumeBinding(state, validatedOwner, workspaceRoot),
+      id: current.artifact.id });
+  } finally {
+    releaseCampaignLock(lock);
+  }
+}
diff --git a/tools/stack-bench/src/progression/repair-plan.ts b/tools/stack-bench/src/progression/repair-plan.ts
new file mode 100644
index 00000000000..9ae3dd3f2d4
--- /dev/null
+++ b/tools/stack-bench/src/progression/repair-plan.ts
@@ -0,0 +1,109 @@
+export const REPAIR_SELECTIONS = ['feature', 'batch'] as const;
+
+export type RepairSelection = typeof REPAIR_SELECTIONS[number];
+
+// Why a feature can no longer be repaired. The first three name the configured
+// limit that ran out, most specific first; the last is the stall detector.
+export const REPAIR_EXHAUSTION_REASONS = [
+  'feature-repairs-exhausted',
+  'depth-repairs-exhausted',
+  'total-repairs-exhausted',
+  'repeated-findings',
+] as const;
+
+export type RepairExhaustionReason = typeof REPAIR_EXHAUSTION_REASONS[number];
+
+export type RepairLimitExhaustion = Exclude<RepairExhaustionReason, 'repeated-findings'>;
+
+export interface RepairBudget extends Record<string, unknown> {
+  total?: number;
+  perFeature?: number;
+  perDepth?: { count: number; carry: boolean };
+}
+
+// The order failed features are repaired in within a dependency depth:
+// the catalog's declared order, or a permutation drawn once per campaign
+// from its ordering seed and shared by every stack in that campaign.
+export const REPAIR_ORDERS = ['declared', 'shuffled'] as const;
+
+export type RepairOrder = typeof REPAIR_ORDERS[number];
+
+export interface RepairPlanInput {
+  selection: RepairSelection;
+  budget: RepairBudget;
+  order?: RepairOrder;
+}
+
+export interface RepairPlan extends Record<string, unknown> {
+  selection: RepairSelection;
+  budget: RepairBudget;
+  order: RepairOrder;
+}
+
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function integer(value: unknown, at: string): number {
+  if (!Number.isSafeInteger(value) || Number(value) < 0) {
+    throw new Error(`${at} must be a non-negative safe integer`);
+  }
+  return Number(value);
+}
+
+export function validateRepairPlan(input: unknown, at = 'repair'): RepairPlan {
+  if (!object(input)) throw new Error(`${at} must be an object`);
+  for (const key of Object.keys(input)) {
+    if (!['selection', 'budget', 'order'].includes(key)) throw new Error(`${at}.${key} is unknown`);
+  }
+  if (!REPAIR_SELECTIONS.includes(input.selection as RepairSelection)) {
+    throw new Error(`${at}.selection must be "feature" or "batch"`);
+  }
+  const order = input.order === undefined ? 'declared' : input.order;
+  if (!REPAIR_ORDERS.includes(order as RepairOrder)) {
+    throw new Error(`${at}.order must be "declared" or "shuffled"`);
+  }
+  if (!object(input.budget)) throw new Error(`${at}.budget must be an object`);
+  const budgetKeys = Object.keys(input.budget);
+  if (budgetKeys.length === 0) throw new Error(`${at}.budget must contain a limit`);
+  for (const key of budgetKeys) {
+    if (!['total', 'perFeature', 'perDepth'].includes(key)) {
+      throw new Error(`${at}.budget.${key} is unknown`);
+    }
+  }
+  const budget: RepairBudget = {};
+  if (input.budget.total !== undefined) {
+    budget.total = integer(input.budget.total, `${at}.budget.total`);
+  }
+  if (input.budget.perFeature !== undefined) {
+    budget.perFeature = integer(input.budget.perFeature, `${at}.budget.perFeature`);
+  }
+  if (input.budget.perDepth !== undefined) {
+    if (!object(input.budget.perDepth)) {
+      throw new Error(`${at}.budget.perDepth must be an object`);
+    }
+    for (const key of Object.keys(input.budget.perDepth)) {
+      if (!['count', 'carry'].includes(key)) {
+        throw new Error(`${at}.budget.perDepth.${key} is unknown`);
+      }
+    }
+    if (typeof input.budget.perDepth.carry !== 'boolean') {
+      throw new Error(`${at}.budget.perDepth.carry must be true or false`);
+    }
+    budget.perDepth = {
+      count: integer(input.budget.perDepth.count, `${at}.budget.perDepth.count`),
+      carry: input.budget.perDepth.carry,
+    };
+  }
+  if (Object.keys(budget).length === 0) throw new Error(`${at}.budget must contain a limit`);
+  return { selection: input.selection as RepairSelection, budget, order: order as RepairOrder };
+}
+
+export function repairBudgetLimit(plan: RepairPlan,
+  { features = 1, depths = 1 }: { features?: number; depths?: number } = {}): number {
+  const limits = [
+    plan.budget.total,
+    plan.budget.perFeature === undefined ? undefined : plan.budget.perFeature * features,
+    plan.budget.perDepth === undefined ? undefined : plan.budget.perDepth.count * depths,
+  ].filter((limit): limit is number => limit !== undefined);
+  return Math.min(...limits);
+}
diff --git a/tools/stack-bench/src/references/reference-agent.ts b/tools/stack-bench/src/references/reference-agent.ts
new file mode 100644
index 00000000000..66b045051e9
--- /dev/null
+++ b/tools/stack-bench/src/references/reference-agent.ts
@@ -0,0 +1,321 @@
+#!/usr/bin/env node
+// Replace only the coding session with a selected reference fixture.
+
+import { execFileSync } from 'node:child_process';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { parseArgs } from 'node:util';
+import { setTimeout as delay } from 'node:timers/promises';
+import { leaseFromEnv } from '../runtime/backend-lease.js';
+import { dbName, loadTrack, moduleName, portsFor } from '../composition/tracks.js';
+import { fetchStatus } from '../runtime/readiness.js';
+import { CODING_CONTAINER_AGENT, CODING_CONTAINER_CONTROL_DIR,
+  codingContainerAgentCommand, codingContainerAgentExecOptions,
+  codingContainerWorkspaceHandoffCommands }
+  from '../runtime/coding-container-policy.js';
+import { STACK_ADAPTER_REGISTRY } from '../stacks/stack-adapters.js';
+import { requireLeasedDatabase, requireLeasedSpacetime } from '../stacks/backend-reset-guard.js';
+import type { HostedReferenceMetadata, SpacetimeReferenceMetadata }
+  from '../stacks/stack-reference-operations.js';
+import { DEFAULT_BUILD_IMAGE } from '../composition/product-config.js';
+import { inspectImportedReference, loadReferenceRegistry, prepareReferenceFixtureSource,
+  REFERENCE_METADATA_FILE, referenceMetadataIssues, validateReferenceRegistry }
+  from './reference-fixtures.js';
+import { resolveReferenceSelection } from './reference-selection.js';
+import { assertPlainAppSourceTree, hashAppSource } from '../runtime/source-snapshot.js';
+
+import { compiledEntrypoint } from '../package-root.js';
+const RUN_BUILD = compiledEntrypoint('container', 'run-build.js');
+const IMAGE = process.env.STACK_BENCH_IMAGE ?? DEFAULT_BUILD_IMAGE;
+const CONTROL_DIR = CODING_CONTAINER_CONTROL_DIR;
+const COMMAND_TIMEOUT_MS = 15 * 60_000;
+
+import type { ReferenceFixture } from './reference-fixtures.js';
+
+// The flags this adapter is launched with, after validation.
+export interface ReferenceSourceRequest {
+  backend: string;
+  app: string;
+  track: string;
+  level: number;
+  mode?: string;
+  recipe?: string;
+}
+
+export interface ReferenceAgentArgs extends ReferenceSourceRequest {
+  runIndex: number;
+}
+
+interface PreparedReferenceSource {
+  fixture: ReferenceFixture;
+  seeded: boolean;
+  sourceSha256: string;
+  sourceFiles: number;
+}
+
+const record = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object';
+
+// A failed child process carries its output on the error.
+const stream = (error: unknown, key: string): string =>
+  record(error) ? String(error[key] ?? '') : '';
+
+const phase = (message: string): void => {
+  process.stderr.write(`[reference-agent] ${message}\n`);
+};
+function installProcessHandlers(): void {
+  process.on('beforeExit', code => phase(`beforeExit code=${code}`));
+  process.on('exit', code => phase(`exit code=${code}`));
+  for (const signal of ['SIGINT', 'SIGTERM', 'SIGHUP']) {
+    process.on(signal, () => {
+      phase(`received ${signal}`);
+      const offsets: Record<string, number> = { SIGINT: 2, SIGTERM: 15, SIGHUP: 1 };
+      process.exit(128 + (offsets[signal] ?? 0));
+    });
+  }
+}
+
+export function parseReferenceAgentArgs(argv: readonly string[]): ReferenceAgentArgs {
+  const { values } = parseArgs({ args: [...argv.slice(2)], options: {
+    mode: { type: 'string' }, backend: { type: 'string' }, level: { type: 'string' },
+    app: { type: 'string' }, track: { type: 'string' }, 'run-index': { type: 'string' },
+    model: { type: 'string' }, guidance: { type: 'string' }, recipe: { type: 'string' },
+    'guidance-document-json': { type: 'string' }, 'credential-aliases-json': { type: 'string' },
+    'skill-identity-json': { type: 'string' }, 'skills-json': { type: 'string' },
+    'recipe-task-json': { type: 'string' }, 'pricing-json': { type: 'string' },
+    'max-budget-usd': { type: 'string' },
+  } });
+  const { backend, app, track, mode } = values;
+  if (typeof backend !== 'string' || typeof app !== 'string' || typeof track !== 'string'
+    || values.level === undefined || values['run-index'] === undefined) {
+    throw new Error('reference-agent requires backend, app, track, level and run-index');
+  }
+  const level = Number(values.level);
+  const runIndex = Number(values['run-index']);
+  if (typeof mode !== 'string' || !['build', 'upgrade', 'fix'].includes(mode)) {
+    throw new Error(`reference-agent supports only build, upgrade and fix modes, got ${mode}`);
+  }
+  if (!Number.isSafeInteger(level) || level < 1) {
+    throw new Error(`reference-agent requires a positive integer level, got ${level}`);
+  }
+  if (!Number.isSafeInteger(runIndex) || runIndex < 0) {
+    throw new Error(`reference-agent requires a non-negative integer run-index, got ${runIndex}`);
+  }
+  return { backend, app, track, mode, level, runIndex,
+    ...(values.recipe === undefined ? {} : { recipe: values.recipe }) };
+}
+
+function runSync(label: string, command: string, args: readonly string[],
+  options: Record<string, unknown> = {}): string {
+  try {
+    return String(execFileSync(command, args, { timeout: COMMAND_TIMEOUT_MS, ...options }));
+  } catch (error) {
+    const stdout = stream(error, 'stdout').trim().slice(-2000) || '<empty>';
+    const stderr = stream(error, 'stderr').trim().slice(-4000) || '<empty>';
+    const summary = `${stream(error, 'message') || String(error)}`.split(/\r?\n/)[0];
+    throw new Error(`${label} failed: ${summary}\nstdout tail:\n${stdout}\nstderr tail:\n${stderr}`);
+  }
+}
+
+function docker(container: string, cwd: string, command: string,
+  commandArgs: readonly string[] = [], env: Record<string, string> = {}): string {
+  const args = ['exec', ...codingContainerAgentExecOptions(), '-w', cwd];
+  for (const [name, value] of Object.entries(env)) args.push('-e', `${name}=${value}`);
+  args.push(container, ...codingContainerAgentCommand(command, commandArgs));
+  return runSync(`docker exec ${command}`, 'docker', args,
+    { encoding: 'utf8', stdio: 'pipe', maxBuffer: 64 * 1024 * 1024 });
+}
+
+export function referenceDevCommand(logName: string,
+  { networkVisible = false, port = null, script = 'dev' }: {
+    networkVisible?: boolean; port?: number | null; script?: string;
+  } = {}): string {
+  if (!/^[a-z0-9-]+$/.test(logName)) throw new Error(`unsafe reference log name ${logName}`);
+  if (!/^[a-z0-9:-]+$/.test(script)) throw new Error(`unsafe reference script ${script}`);
+  if (port !== null && (!Number.isInteger(port) || port < 1 || port > 65535)) {
+    throw new Error(`invalid reference port ${port}`);
+  }
+  const cliArgs = [networkVisible ? '--host 0.0.0.0' : null,
+    port === null ? null : `--port ${port} --strictPort`].filter(Boolean);
+  const networkArgs = cliArgs.length > 0 ? ` -- ${cliArgs.join(' ')}` : '';
+  const agent = CODING_CONTAINER_AGENT;
+  return `umask 022; exec /usr/bin/setpriv --reuid=${agent.uid} --regid=${agent.gid} --init-groups `
+    + `/usr/local/bin/npm run ${script}${networkArgs} > ${CONTROL_DIR}/${logName}.log 2>&1`;
+}
+
+export function prepareReferenceSource(args: ReferenceSourceRequest): PreparedReferenceSource {
+  const registry = loadReferenceRegistry();
+  const validation = validateReferenceRegistry(registry);
+  if (!validation.ok) {
+    throw new Error(`reference registry is invalid: ${validation.issues.join('; ')}`);
+  }
+  const fixture = resolveReferenceSelection(registry, args).fixture;
+  const inspection = inspectImportedReference(fixture);
+  if (!inspection.ok) {
+    throw new Error(`${fixture.id} is invalid: ${inspection.failures.join('; ')}`);
+  }
+  const app = String(args.app);
+  mkdirSync(app, { recursive: true });
+  assertPlainAppSourceTree(app);
+  const before = hashAppSource(app);
+  if (before.files.length === 0) {
+    if ((args.mode ?? 'build') !== 'build') {
+      throw new Error(`reference ${args.mode} requires the existing ${fixture.id} source`);
+    }
+    prepareReferenceFixtureSource(fixture, app);
+  } else if (before.sha256 !== fixture.imported?.sourceSha256) {
+    throw new Error(`reference app contains source other than ${fixture.id}`);
+  }
+  const prepared = hashAppSource(app);
+  if (prepared.sha256 !== fixture.imported?.sourceSha256) {
+    throw new Error(`prepared reference source does not match ${fixture.id}`);
+  }
+  return { fixture, seeded: before.files.length === 0, sourceSha256: prepared.sha256,
+    sourceFiles: prepared.files.length };
+}
+
+export function restoreReferenceSourceIdentity(fixture: ReferenceFixture,
+  app: string): { sha256: string; files: string[] } {
+  prepareReferenceFixtureSource(fixture, app);
+  const restored = hashAppSource(app);
+  if (restored.sha256 !== fixture.imported?.sourceSha256) {
+    throw new Error(`deployed reference source does not match ${fixture.id}`);
+  }
+  return restored;
+}
+
+export async function deployReferenceAndRestoreSource(deploy: () => unknown,
+  restore: () => unknown): Promise<void> {
+  let deployError: unknown = null;
+  try { await deploy(); }
+  catch (error) { deployError = error; }
+  try { restore(); }
+  catch (restoreError) {
+    if (deployError) {
+      throw new AggregateError([deployError, restoreError],
+        'reference deployment and source restoration both failed');
+    }
+    throw restoreError;
+  }
+  if (deployError) throw deployError;
+}
+
+function startDetached(container: string, cwd: string, logName: string,
+  env: Record<string, string> = {},
+  options: { networkVisible?: boolean; port?: number | null; script?: string } = {}): void {
+  const args = ['exec', '-d', '-w', cwd,
+    '-e', `HOME=${CODING_CONTAINER_AGENT.home}`, '-e', `USER=${CODING_CONTAINER_AGENT.name}`];
+  for (const [name, value] of Object.entries(env)) args.push('-e', `${name}=${value}`);
+  args.push(container, 'sh', '-c', referenceDevCommand(logName, options));
+  runSync('starting detached reference service', 'docker', args, { stdio: 'pipe' });
+}
+
+async function waitFor(url: string, timeoutMs: number, description: string,
+  diagnostics: () => string): Promise<void> {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    const status = await fetchStatus(url, { timeoutMs: 5000 });
+    if (status !== null && status >= 200 && status < 300) return;
+    await delay(500);
+  }
+  throw new Error(`timed out waiting for ${description}\n${diagnostics()}`);
+}
+
+function containerLogs(container: string, ...names: readonly string[]): string {
+  return names.map(name => {
+    try {
+      return runSync('reading reference logs', 'docker', ['exec', container, 'sh', '-c',
+        `tail -80 ${CONTROL_DIR}/${name}.log 2>/dev/null || true`],
+      { encoding: 'utf8', stdio: 'pipe' });
+    }
+    catch { return ''; }
+  }).join('\n');
+}
+
+async function main(): Promise<void> {
+  const started = Date.now();
+  phase('starting');
+  const args = parseReferenceAgentArgs(process.argv);
+  const source = prepareReferenceSource(args);
+  phase(`${source.seeded ? 'seeded' : 'verified'} ${source.fixture.id} (${source.sourceSha256.slice(0, 12)})`);
+  const adapter = STACK_ADAPTER_REGISTRY.get(args.backend);
+  const track = loadTrack(args.track);
+  const ports = portsFor(track, args.backend, args.runIndex);
+  const { lease } = leaseFromEnv(process.env, { backend: args.backend, active: true });
+  phase(`validated ${args.backend} lease ${lease.runId}`);
+  if (lease.track !== args.track || lease.runIndex !== args.runIndex) throw new Error('lease does not match this reference run');
+  const metadataPath = join(args.app, REFERENCE_METADATA_FILE);
+  if (!existsSync(metadataPath)) throw new Error(`missing ${metadataPath}`);
+  const metadata: unknown = JSON.parse(readFileSync(metadataPath, 'utf8'));
+  const metadataIssues = referenceMetadataIssues(metadata);
+  if (metadataIssues.length) throw new Error(metadataIssues.join('; '));
+  writeFileSync(resolve(args.app, '..', '.stack-bench-isolation'), 'container');
+  writeFileSync(resolve(args.app, '..', '.stack-bench-backend'), args.backend);
+
+  const prepared = runSync('preparing isolated build container', process.execPath,
+    [RUN_BUILD, '--app', args.app, '--backend', args.backend, '--image', IMAGE,
+      '--ports', [ports.vite, ports.express].filter(Boolean).join(','), '--prepare-only'],
+    { encoding: 'utf8', stdio: 'pipe', maxBuffer: 64 * 1024 * 1024, env: process.env });
+  const identity: unknown = JSON.parse(prepared.trim().split(/\r?\n/).pop() ?? '');
+  if (!record(identity) || typeof identity.containerName !== 'string'
+    || typeof identity.identity !== 'string') {
+    throw new Error('prepared build container did not report its name and identity');
+  }
+  const containerIdentity = identity.identity;
+  const containerName = identity.containerName;
+  if (identity.networkMode !== undefined && identity.networkMode !== 'host'
+    && identity.networkMode !== 'bridge') {
+    throw new Error('prepared build container reported an invalid network mode');
+  }
+  const buildNetworkMode = identity.networkMode;
+  phase(`prepared build container ${identity.containerName}`);
+  if (!('reference' in adapter)) throw new Error(`${adapter.id} has no reference deployment`);
+  const helpers = { dbName, loadTrack, moduleName, runSync, docker, startDetached,
+    waitFor, containerLogs, phase };
+  await deployReferenceAndRestoreSource(() => {
+    if (adapter.id === 'postgres' || adapter.id === 'mongodb') {
+      return adapter.reference.deploy({
+        args, metadata: metadata as HostedReferenceMetadata,
+        lease: requireLeasedDatabase(lease), track,
+        container: containerName, ports, buildNetworkMode, helpers,
+      });
+    }
+    if (adapter.id === 'spacetime') {
+      const target = requireLeasedSpacetime(lease);
+      return adapter.reference.deploy({
+        args, metadata: metadata as SpacetimeReferenceMetadata,
+        lease: { resources: {
+          ...target.resources,
+          buildContainer: lease.resources.buildContainer,
+        } },
+        container: containerName, ports, buildNetworkMode, helpers,
+      });
+    }
+    throw new Error('unsupported reference adapter');
+  }, () => {
+    restoreReferenceSourceIdentity(source.fixture, args.app);
+    for (const command of codingContainerWorkspaceHandoffCommands(process.getgid?.() ?? 0)) {
+      runSync('sharing reference workspace', 'docker', ['exec', containerName, ...command],
+        { encoding: 'utf8', stdio: 'pipe' });
+    }
+  });
+
+  phase('deployment complete');
+  console.log(JSON.stringify({ appDir: args.app, mode: args.mode, level: args.level,
+    track: args.track, backend: args.backend, model: 'reference-fixture',
+    setup: { isolation: { mode: 'container', image: IMAGE,
+      imageId: containerIdentity.split(' ')[1] }, session: 'model-free-reference' },
+    costUsd: 0, tokens: 0, outputTokens: 0,
+    usage: { input: 0, output: 0, cacheWrite: 0, cacheRead: 0 }, turns: 0,
+    promptBytes: 0, durationMs: Date.now() - started,
+    sessionId: `reference-${args.backend}-${Date.now()}`, ok: true }));
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  installProcessHandlers();
+  main().catch((error: unknown) => {
+    console.error(error instanceof Error ? error.stack ?? error.message : String(error));
+    process.exitCode = 1;
+  });
+}
diff --git a/tools/stack-bench/src/references/reference-build.ts b/tools/stack-bench/src/references/reference-build.ts
new file mode 100644
index 00000000000..d04f7b15bb6
--- /dev/null
+++ b/tools/stack-bench/src/references/reference-build.ts
@@ -0,0 +1,283 @@
+#!/usr/bin/env node
+// Build a temporary fixture copy inside the benchmark image and lease boundary.
+
+import { execFileSync } from 'node:child_process';
+import { existsSync, mkdtempSync, rmSync } from 'node:fs';
+import { basename, join, resolve } from 'node:path';
+import { tmpdir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { parseArgs as parseNodeArgs } from 'node:util';
+import { ARTIFACT_FILE, writeRunJson } from '../evidence/artifacts.js';
+import type { BackendLease } from '../runtime/backend-lease.js';
+import { acquireResourceLocks, backendResourceLockKeys, createBackendLease,
+  publicBackendLease, readBackendLease, releaseResourceLocks, resourceLockScope,
+  updateBackendLease, writeBackendLease } from '../runtime/backend-lease.js';
+import { resolveContainerImage } from '../runtime/container-image.js';
+import type { ResolvedContainerImage } from '../runtime/container-image.js';
+import { runningContainerIdentity } from '../runtime/container-identity.js';
+import { CODING_CONTAINER_APP_ROOT, CODING_CONTAINER_SPACETIME_CLI,
+  codingContainerAgentCommand, codingContainerAgentExecOptions }
+  from '../runtime/coding-container-policy.js';
+import { STACK_ADAPTER_REGISTRY } from '../stacks/stack-adapters.js';
+import { DEFAULT_BUILD_IMAGE } from '../composition/product-config.js';
+import { loadTrack } from '../composition/tracks.js';
+import { inspectImportedReference, loadReferenceRegistry,
+  prepareReferenceFixtureSource, REFERENCE_METADATA_FILE, referenceMetadataIssues,
+  validateReferenceRegistry } from './reference-fixtures.js';
+import { referenceInstallSteps } from './reference-install.js';
+
+import { STACK_BENCH_ROOT as ROOT, compiledEntrypoint } from '../package-root.js';
+const RUN_BUILD = compiledEntrypoint('container', 'run-build.js');
+const IMAGE = process.env.STACK_BENCH_IMAGE ?? DEFAULT_BUILD_IMAGE;
+
+import type { ReferenceFixture } from './reference-fixtures.js';
+import type { ReferenceInstallMetadata } from './reference-install.js';
+
+interface BuildCommand {
+  cwd: string;
+  command: string;
+  ok: boolean;
+  durationMs: number;
+  outputTail: string;
+}
+
+interface FixtureBuild {
+  id: string;
+  backend: string;
+  ok: boolean;
+  durationMs: number;
+  error: string | null;
+  commands: BuildCommand[];
+  [key: string]: unknown;
+}
+
+type ImageIdentity = ResolvedContainerImage;
+
+type ReferenceMetadataForBuild = ReferenceInstallMetadata & {
+  kind: string;
+  server: { directory: string };
+  client: { directory: string };
+  moduleDirectory: string;
+  bindingsDirectory: string;
+};
+
+const record = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object';
+
+// A failed child process carries its output on the error.
+const streams = (error: unknown, ...keys: readonly string[]): string =>
+  record(error) ? keys.map(key => String(error[key] ?? '')).join('') : '';
+
+const errorDetail = (error: unknown): string =>
+  error instanceof Error ? error.stack ?? error.message : String(error);
+
+
+function parseArgs(argv: readonly string[]): {
+  backend: string | null; fixture: string | null; out: string | null;
+} {
+  const { values } = parseNodeArgs({ args: [...argv.slice(2)], options: {
+    backend: { type: 'string' }, fixture: { type: 'string' }, out: { type: 'string' },
+  } });
+  const args = { backend: values.backend ?? null, fixture: values.fixture ?? null,
+    out: values.out === undefined ? null : resolve(values.out) };
+  if (args.backend && !STACK_ADAPTER_REGISTRY.ids.includes(args.backend)) {
+    throw new Error(`unknown backend ${args.backend}`);
+  }
+  return args;
+}
+
+function run(container: string, cwd: string, command: string,
+  args: readonly string[], commands: BuildCommand[]): void {
+  const started = Date.now();
+  const printable = [command, ...args].join(' ');
+  try {
+    const output = execFileSync('docker', ['exec', ...codingContainerAgentExecOptions(),
+      '-w', cwd, container, ...codingContainerAgentCommand(command, args)],
+      { encoding: 'utf8', stdio: 'pipe', maxBuffer: 64 * 1024 * 1024 });
+    commands.push({ cwd, command: printable, ok: true, durationMs: Date.now() - started,
+      outputTail: output.slice(-8_192) });
+  } catch (error) {
+    const output = streams(error, 'stdout', 'stderr');
+    commands.push({ cwd, command: printable, ok: false, durationMs: Date.now() - started,
+      outputTail: output.slice(-16_384) });
+    throw new Error(`${printable} failed in ${cwd}:\n${output.slice(-16_384)}`);
+  }
+}
+
+function buildCommands(metadata: ReferenceMetadataForBuild, container: string,
+  commands: BuildCommand[]): void {
+  for (const directory of metadata.installDirectories) {
+    run(container, `${CODING_CONTAINER_APP_ROOT}/${directory}`, 'node', ['-e',
+      "const fs=require('node:fs'); for(const f of ['package.json','package-lock.json']) if(!fs.existsSync(f)) throw new Error(`${process.cwd()}/${f} is missing`);"], commands);
+  }
+  for (const step of referenceInstallSteps(metadata)) {
+    run(container, `${CODING_CONTAINER_APP_ROOT}/${step.directory}`, step.command, step.args, commands);
+  }
+  if (metadata.kind === 'node-api') {
+    run(container, `${CODING_CONTAINER_APP_ROOT}/${metadata.server.directory}`,
+      'npm', ['exec', 'tsc', '--', '--noEmit'], commands);
+  run(container, `${CODING_CONTAINER_APP_ROOT}/${metadata.client.directory}`,
+    'npm', ['run', 'build'], commands);
+    return;
+  }
+  run(container, `${CODING_CONTAINER_APP_ROOT}/${metadata.moduleDirectory}`, CODING_CONTAINER_SPACETIME_CLI,
+    ['build', '--module-path', `${CODING_CONTAINER_APP_ROOT}/${metadata.moduleDirectory}`], commands);
+  run(container, `${CODING_CONTAINER_APP_ROOT}/${metadata.moduleDirectory}`, CODING_CONTAINER_SPACETIME_CLI,
+    ['generate', '--lang', 'typescript', '--module-path', `${CODING_CONTAINER_APP_ROOT}/${metadata.moduleDirectory}`,
+      '--out-dir', `${CODING_CONTAINER_APP_ROOT}/${metadata.bindingsDirectory}`, '--yes', '--no-config'], commands);
+  run(container, `${CODING_CONTAINER_APP_ROOT}/${metadata.client.directory}`,
+    'npm', ['run', 'build'], commands);
+}
+
+function removeLeasedBuildContainer(leasePath: string, token: string): void {
+  const lease = readBackendLease(leasePath, { token });
+  const container = lease.resources.buildContainer;
+  if (!container) return;
+  let actual: string;
+  try {
+    actual = execFileSync('docker', ['inspect', '--format', '{{.Id}}', container.name],
+      { encoding: 'utf8', stdio: 'pipe' }).trim();
+  } catch (error) {
+    if (/No such (object|container)/i.test(streams(error, 'stderr', 'message'))) return;
+    throw error;
+  }
+  if (actual !== container.id) throw new Error(`refusing to remove ${container.name}: lease id does not match`);
+  execFileSync('docker', ['rm', '-f', container.id], { stdio: 'pipe' });
+}
+
+function qualify(fixture: ReferenceFixture, imageIdentity: ImageIdentity): FixtureBuild {
+  const started = Date.now();
+  const work = mkdtempSync(join(tmpdir(), `stack-bench-reference-${fixture.backend}-`));
+  const app = join(work, 'app');
+  const leasePath = join(work, ARTIFACT_FILE.backendLease);
+  const commands: BuildCommand[] = [];
+  let lease: BackendLease | undefined;
+  let leaseEvidence: unknown = null;
+  let error: string | null = null;
+  let cleanupComplete = true;
+  const recordError = (message: string): void => {
+    error = error ? `${error}\n${message}` : message;
+  };
+  try {
+    prepareReferenceFixtureSource(fixture, app);
+    const adapter = STACK_ADAPTER_REGISTRY.get(fixture.backend);
+    const preparedLease = adapter.lease.prepare({
+      track: loadTrack(fixture.track), runIndex: 0, runtimeDir: work,
+      serverUri: 'http://127.0.0.1:1', env: process.env,
+      helpers: {
+        moduleName: () => `reference-${fixture.track}`,
+        dbName: () => `reference_${fixture.track}`,
+        containerIdentity: runningContainerIdentity,
+      },
+    });
+    const preparedResources = preparedLease.lease;
+    const lockKeys = preparedLease.lockKeys;
+    lease = createBackendLease({ runId: basename(work), backend: fixture.backend,
+      track: fixture.track, runIndex: 0,
+      ...preparedResources });
+    lease.resources.locks.push(...acquireResourceLocks({ ...resourceLockScope(),
+      keys: backendResourceLockKeys(lease, lockKeys), lease }));
+    lease.state = 'active';
+    writeBackendLease(leasePath, lease);
+    const prepared = execFileSync(process.execPath,
+      [RUN_BUILD, '--app', app, '--backend', fixture.backend, '--image', IMAGE, '--prepare-only'],
+      { encoding: 'utf8', stdio: 'pipe', maxBuffer: 64 * 1024 * 1024,
+        env: { ...process.env, STACK_BENCH_LEASE: leasePath, STACK_BENCH_LEASE_TOKEN: lease.ownershipToken } });
+    const identity: unknown = JSON.parse(prepared.trim().split(/\r?\n/).pop() ?? '');
+    if (!record(identity) || typeof identity.identity !== 'string'
+      || typeof identity.containerName !== 'string') {
+      throw new Error('prepared container did not report its identity');
+    }
+    const active = readBackendLease(leasePath, { token: lease.ownershipToken, backend: fixture.backend, active: true });
+    if (active.resources.buildContainer?.id !== identity.identity.split(' ')[0]) {
+      throw new Error('prepared container identity was not recorded in the lease');
+    }
+    const metadata: ReferenceMetadataForBuild = JSON.parse(
+      execFileSync('docker', ['exec', identity.containerName,
+        'cat', `${CODING_CONTAINER_APP_ROOT}/${REFERENCE_METADATA_FILE}`],
+      { encoding: 'utf8', stdio: 'pipe' }));
+    const metadataIssues = referenceMetadataIssues(metadata);
+    if (metadataIssues.length) throw new Error(metadataIssues.join('; '));
+    buildCommands(metadata, identity.containerName, commands);
+  } catch (caught) {
+    error = errorDetail(caught);
+  } finally {
+    if (lease) {
+      try {
+        if (existsSync(leasePath)) {
+          removeLeasedBuildContainer(leasePath, lease.ownershipToken);
+          updateBackendLease(leasePath, { token: lease.ownershipToken, backend: lease.backend, runId: lease.runId }, next => {
+            if (next.resources.buildContainer) next.resources.buildContainer.running = false;
+            next.state = 'released';
+            next.releasedAt = new Date().toISOString();
+            return next;
+          });
+        }
+      }
+      catch (cleanupError) {
+        cleanupComplete = false;
+        recordError(`cleanup failed: ${errorDetail(cleanupError)}`);
+      }
+      try {
+        const finalLease = existsSync(leasePath)
+          ? readBackendLease(leasePath, { token: lease.ownershipToken })
+          : lease;
+        if (cleanupComplete) {
+          releaseResourceLocks(finalLease);
+          for (const lock of finalLease.resources.locks) lock.releasedAt = new Date().toISOString();
+        }
+        leaseEvidence = publicBackendLease(finalLease);
+      }
+      catch (cleanupError) {
+        cleanupComplete = false;
+        recordError(`lock cleanup failed: ${errorDetail(cleanupError)}`);
+      }
+    }
+    if (cleanupComplete) rmSync(work, { recursive: true, force: true });
+    else recordError(`recovery authority retained at ${leasePath}`);
+  }
+  return { id: fixture.id, backend: fixture.backend, ok: error === null,
+    fixtureSha256: fixture.imported?.sourceSha256, image: imageIdentity,
+    durationMs: Date.now() - started, commands, backendLease: leaseEvidence, error };
+}
+
+async function main(): Promise<void> {
+  const args = parseArgs(process.argv);
+  const registry = loadReferenceRegistry();
+  const validation = validateReferenceRegistry(registry);
+  if (!validation.ok) throw new Error(`reference registry is invalid:\n${validation.issues.join('\n')}`);
+  const fixtures = registry.fixtures.filter(fixture => fixture.status !== 'blocked')
+    .filter(fixture => !args.backend || fixture.backend === args.backend)
+    .filter(fixture => !args.fixture || fixture.id === args.fixture);
+  if (!fixtures.length) throw new Error('no imported fixtures matched');
+  for (const fixture of fixtures) {
+    const inspection = inspectImportedReference(fixture);
+    if (!inspection.ok) throw new Error(`${fixture.id} import is invalid:\n${inspection.failures.join('\n')}`);
+  }
+  const imageIdentity = resolveContainerImage(IMAGE);
+  const id = `reference-build-${new Date().toISOString().replace(/[-:.TZ]/g, '').slice(0, 14)}-${process.pid}`;
+  const artifact: {
+    id: string; kind: string; startedAt: string; isolation: string;
+    image: ImageIdentity; fixtures: FixtureBuild[]; completedAt?: string; ok?: boolean;
+  } = { id, kind: 'reference_build', startedAt: new Date().toISOString(),
+    isolation: 'docker', image: imageIdentity, fixtures: [] };
+  for (const fixture of fixtures) {
+    console.log(`building ${fixture.id} in ${imageIdentity.id}`);
+    artifact.fixtures.push(qualify(fixture, imageIdentity));
+  }
+  artifact.completedAt = new Date().toISOString();
+  artifact.ok = artifact.fixtures.every(fixture => fixture.ok);
+  const out = args.out ?? join(ROOT, 'results', 'reference-builds', `${id}.json`);
+  writeRunJson(out, artifact);
+  console.log(JSON.stringify({ ok: artifact.ok, artifact: out,
+    fixtures: artifact.fixtures.map(({ id: fixtureId, ok, durationMs, error }) => ({ id: fixtureId, ok, durationMs,
+      error: error ? error.split(/\r?\n/)[0] : null })) }, null, 2));
+  if (!artifact.ok) process.exitCode = 1;
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  main().catch((error: unknown) => {
+    console.error(error instanceof Error ? error.stack ?? error.message : String(error));
+    process.exitCode = 2;
+  });
+}
diff --git a/tools/stack-bench/src/references/reference-fixtures.ts b/tools/stack-bench/src/references/reference-fixtures.ts
new file mode 100644
index 00000000000..14c904a4395
--- /dev/null
+++ b/tools/stack-bench/src/references/reference-fixtures.ts
@@ -0,0 +1,415 @@
+#!/usr/bin/env node
+
+import { createHash } from 'node:crypto';
+import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync } from 'node:fs';
+import { basename, join, relative, resolve, sep } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { hashDirectory, type HashFilesResult } from '../evidence/provenance.js';
+import { hashAppSource, seedAppSource } from '../runtime/source-snapshot.js';
+
+import { STACK_BENCH_ROOT as ROOT } from '../package-root.js';
+
+export interface ReferenceFixture {
+  id: string;
+  backend: string;
+  track: string;
+  level: number;
+  status: string;
+  recipes?: string[];
+  actionLevels?: number[];
+  targetPath?: string;
+  imported?: { path?: string; sourceSha256?: string };
+  origin?: { kind?: string; note?: string };
+  mutationManifests?: string[];
+  [key: string]: unknown;
+}
+
+export interface ReferenceRegistry {
+  fixtures: ReferenceFixture[];
+  [key: string]: unknown;
+}
+
+export interface ReferenceFixtureSelector {
+  backend?: string;
+  track?: string;
+  level?: number;
+  recipe?: string;
+}
+
+type ReferenceFixtureSource = Pick<ReferenceFixture, 'imported' | 'targetPath'>;
+interface EffectiveSource {
+  basePath: string;
+  files: Map<string, Buffer>;
+}
+
+interface ImportedInspection {
+  id: string;
+  available: boolean;
+  ok: boolean;
+  sourceSha256?: string;
+  sourceFiles?: number;
+  failures: string[];
+}
+
+const record = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object';
+
+const errorMessage = (error: unknown): string =>
+  error instanceof Error ? error.message : String(error);
+
+const REGISTRY = join(ROOT, 'reference-apps', 'registry.json');
+export const REFERENCE_METADATA_FILE = 'reference.json';
+const BACKENDS = new Set(['spacetime', 'postgres', 'mongodb']);
+const STATUSES = new Set(['blocked', 'candidate', 'active']);
+const FIXTURE_KINDS = new Set(['node-api', 'spacetime']);
+const FORBIDDEN_DIRECTORIES = new Set(['node_modules', 'dist', 'module_bindings', 'stack-bench']);
+const FORBIDDEN_FILES = [/^\.env(?:\..*)?$/i, /\.mutation-backup(?:\..*)?$/i];
+const WORKSTATION_PATHS = [/[A-Z]:[\\/](?:Users|Development)[\\/]/i];
+const TRUNCATION_MARKER = /…\d+\s+(?:tokens|chars)\s+truncated…/i;
+
+export function loadReferenceRegistry(path: string = REGISTRY): ReferenceRegistry {
+  return JSON.parse(readFileSync(path, 'utf8')) as ReferenceRegistry;
+}
+
+export function selectReferenceFixture(registry: ReferenceRegistry,
+  { backend, track, level, recipe }: ReferenceFixtureSelector = {}): ReferenceFixture {
+  const inScope = registry.fixtures.filter(fixture => fixture.backend === backend
+    && fixture.track === track && level !== undefined
+    && referenceActionLevels(fixture).includes(level));
+  const recipeScoped = recipe
+    ? inScope.filter(fixture => fixture.recipes?.includes(recipe))
+    : [];
+  const matches = recipeScoped.length
+    ? recipeScoped.filter(fixture => fixture.status !== 'blocked')
+    : inScope.filter(fixture => fixture.status === 'active' && !fixture.recipes?.length);
+  const [match] = matches;
+  if (matches.length !== 1 || !match) {
+    throw new Error(`reference source requires exactly one ${track} L${level} ${backend} fixture for ${recipe ?? 'the default recipe'}`);
+  }
+  return match;
+}
+
+export function validateReferenceRegistry(registry: unknown,
+  { root = ROOT }: { root?: string } = {}): { ok: boolean; issues: string[] } {
+  const issues: string[] = [];
+  const candidate = record(registry) ? registry : {};
+  if (candidate.schemaVersion !== 4) issues.push('schemaVersion must be 4');
+  const fixtures: unknown[] = Array.isArray(candidate.fixtures) ? candidate.fixtures : [];
+  if (fixtures.length === 0) {
+    return { ok: false, issues: [...issues, 'fixtures must be a non-empty array'] };
+  }
+  const ids = new Set();
+  const tuples = new Set();
+  const referencedManifests = new Map();
+  for (const value of fixtures) {
+    if (!record(value)) {
+      issues.push('fixture must be an object');
+      continue;
+    }
+    const fixture = value as unknown as ReferenceFixture;
+    const label = fixture.id ?? '<unnamed>';
+    if (typeof fixture.id !== 'string' || !fixture.id || ids.has(fixture.id)) issues.push(`${label}: id is missing or duplicated`);
+    ids.add(fixture.id);
+    if (!BACKENDS.has(fixture.backend)) issues.push(`${label}: invalid backend`);
+    if (typeof fixture.track !== 'string' || !fixture.track) issues.push(`${label}: track is required`);
+    if (!Number.isInteger(fixture.level) || fixture.level < 1) issues.push(`${label}: level must be a positive integer`);
+    if (!STATUSES.has(fixture.status)) issues.push(`${label}: invalid status`);
+    const recipes = fixture.recipes ?? [];
+    if (!Array.isArray(recipes) || recipes.some(recipe => typeof recipe !== 'string'
+        || !/^[a-z0-9][a-z0-9._-]*@(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?$/.test(recipe))) {
+      issues.push(`${label}: recipes must contain exact recipe identities`);
+    }
+    const actionLevels = fixture.actionLevels ?? [fixture.level];
+    if (!Array.isArray(actionLevels) || actionLevels.length === 0
+        || actionLevels.some(level => !Number.isInteger(level) || level < 1)
+        || new Set(actionLevels).size !== actionLevels.length) {
+      issues.push(`${label}: actionLevels must contain unique positive integer levels`);
+    } else {
+      if (fixture.actionLevels && recipes.length === 0) {
+        issues.push(`${label}: actionLevels requires at least one exact recipe selector`);
+      }
+      if (!actionLevels.includes(fixture.level)
+          || actionLevels.some(level => level > fixture.level)) {
+        issues.push(`${label}: actionLevels must include and cannot exceed the fixture level`);
+      }
+      for (const actionLevel of actionLevels) {
+        for (const recipe of recipes.length ? recipes : ['<default>']) {
+          const tuple = `${fixture.track}:${fixture.backend}:${actionLevel}:${recipe}`;
+          if (tuples.has(tuple)) issues.push(`${label}: duplicate track/backend/action-level/recipe`);
+          tuples.add(tuple);
+        }
+      }
+    }
+    if (fixture.source !== undefined) {
+      issues.push(`${label}: source overlays are not supported`);
+    }
+    if (typeof fixture.targetPath !== 'string' || !fixture.targetPath.startsWith('reference-apps/')) {
+      issues.push(`${label}: targetPath must stay under reference-apps/`);
+    }
+    const manifests: string[] = Array.isArray(fixture.mutationManifests)
+      ? fixture.mutationManifests : [];
+    if (!Array.isArray(fixture.mutationManifests)) issues.push(`${label}: mutationManifests must be an array`);
+    for (const manifestPath of manifests) {
+      if (!isSafeRelativePath(manifestPath)) {
+        issues.push(`${label}: unsafe mutation manifest path ${String(manifestPath)}`);
+        continue;
+      }
+      if (referencedManifests.has(manifestPath)) issues.push(`${label}: ${manifestPath} is already owned by ${referencedManifests.get(manifestPath)}`);
+      referencedManifests.set(manifestPath, label);
+      const full = join(root, manifestPath);
+      if (!existsSync(full)) issues.push(`${label}: missing mutation manifest ${manifestPath}`);
+      else {
+        let manifest: Record<string, unknown> | null = null;
+        try {
+          const parsed: unknown = JSON.parse(readFileSync(full, 'utf8'));
+          if (record(parsed)) manifest = parsed;
+          else issues.push(`${label}: ${manifestPath} must contain an object`);
+        } catch (error) {
+          issues.push(`${label}: ${manifestPath} is not valid JSON: ${errorMessage(error)}`);
+        }
+        if (!manifest) continue;
+        if (fixture.status === 'active' || fixture.status === 'candidate') {
+          if (manifest.schemaVersion !== 2) {
+            issues.push(`${label}: ${manifestPath} must use mutation schema 2`);
+          }
+          if (manifest.level !== undefined) {
+            issues.push(`${label}: ${manifestPath} must not own a level`);
+          }
+        }
+        if (manifest.backend !== fixture.backend || manifest.track !== fixture.track) {
+          issues.push(`${label}: ${manifestPath} targets a different backend or track`);
+        }
+        const expectedStatus = fixture.status === 'active' ? 'active' : 'candidate';
+        if (manifest.status !== expectedStatus) {
+          issues.push(`${label}: ${manifestPath} must be ${expectedStatus} while fixture is ${fixture.status}`);
+        }
+        if (fixture.status !== 'blocked' && manifest.fixtureSha256 !== fixture.imported?.sourceSha256) {
+          issues.push(`${label}: ${manifestPath} fixtureSha256 must match the imported fixture`);
+        }
+      }
+    }
+    if (fixture.status === 'blocked') {
+      if (typeof fixture.blockedReason !== 'string' || !fixture.blockedReason) issues.push(`${label}: blockedReason is required`);
+      if (manifests.length) issues.push(`${label}: blocked fixtures cannot own mutation manifests`);
+      continue;
+    }
+    const origin = fixture.origin ?? {};
+    if (origin.kind !== 'authored') {
+      issues.push(`${label}: origin kind must be authored`);
+    } else {
+      if (typeof origin.note !== 'string' || !origin.note.trim()) {
+        issues.push(`${label}: authored origin requires a provenance note`);
+      }
+    }
+    if (!fixture.imported || fixture.imported.path !== fixture.targetPath
+        || !/^[a-f0-9]{64}$/.test(fixture.imported.sourceSha256 ?? '')) {
+      issues.push(`${label}: imported sourceSha256 and source location are required`);
+    } else {
+      const inspection = inspectImportedReference(fixture, { root });
+      for (const failure of inspection.failures) issues.push(`${label}: ${failure}`);
+    }
+  }
+  const manifestDir = join(root, 'grader', 'mutations');
+  if (existsSync(manifestDir)) {
+    for (const file of readdirSync(manifestDir).filter(name => name.endsWith('.json'))) {
+      const path = `grader/mutations/${file}`;
+      if (!referencedManifests.has(path)) issues.push(`unowned mutation manifest: ${path}`);
+    }
+  }
+  return { ok: issues.length === 0, issues };
+}
+
+function referenceActionLevels(fixture: ReferenceFixture): number[] {
+  return Array.isArray(fixture.actionLevels) ? fixture.actionLevels : [fixture.level];
+}
+
+export function inspectImportedReference(fixture: ReferenceFixture,
+  { root = ROOT }: { root?: string } = {}): ImportedInspection {
+  const failures: string[] = [];
+  let source: EffectiveSource;
+  try { source = effectiveReferenceSource(fixture, { root }); }
+  catch (error) {
+    return { id: fixture.id, available: false, ok: false,
+      failures: [errorMessage(error)] };
+  }
+  const sourceHash = hashEffectiveFiles(source.files);
+  if (sourceHash.sha256 !== fixture.imported?.sourceSha256) failures.push('imported fixture hash does not match registry');
+  if (!source.files.has('start.sh')) failures.push('start.sh is missing');
+  let metadata: unknown;
+  const metadataBytes = source.files.get(REFERENCE_METADATA_FILE);
+  if (!metadataBytes) failures.push('reference.json is missing');
+  else {
+    try { metadata = JSON.parse(metadataBytes.toString('utf8')); }
+    catch { failures.push('reference.json is not valid JSON'); }
+  }
+  failures.push(...referenceMetadataIssues(metadata));
+  if (record(metadata)) {
+    if (!Array.isArray(metadata.installDirectories) || metadata.installDirectories.length === 0) {
+      failures.push('reference.json installDirectories must be non-empty');
+    } else {
+      for (const directory of metadata.installDirectories) {
+        if (!isSafeRelativePath(directory)) failures.push(`unsafe install directory ${directory}`);
+        else {
+          const packageName = `${directory}/package.json`.replaceAll('\\', '/');
+          const lockName = `${directory}/package-lock.json`.replaceAll('\\', '/');
+          if (!source.files.has(packageName)) failures.push(`${packageName} is missing`);
+          else readJsonBytes(source.files.get(packageName), packageName, failures);
+          if (!source.files.has(lockName)) failures.push(`${lockName} is missing`);
+          else {
+            const lock = readJsonBytes(source.files.get(lockName), lockName, failures);
+            if (record(lock) && (!Number.isInteger(lock.lockfileVersion)
+              || Number(lock.lockfileVersion) < 1)) {
+              failures.push(`${directory}/package-lock.json has an invalid lockfileVersion`);
+            }
+          }
+        }
+      }
+    }
+  }
+
+  for (const name of sourceHash.files) {
+    const segments = name.split('/');
+    if (segments.some(segment => FORBIDDEN_DIRECTORIES.has(segment))) failures.push(`forbidden generated directory in ${name}`);
+    if (FORBIDDEN_FILES.some(pattern => pattern.test(basename(name)))) failures.push(`forbidden local file ${name}`);
+    const bytes = source.files.get(name);
+    if (bytes && !bytes.includes(0)) {
+      const contents = bytes.toString('utf8');
+      if (WORKSTATION_PATHS.some(pattern => pattern.test(contents))) failures.push(`workstation absolute path in ${name}`);
+      if (TRUNCATION_MARKER.test(contents)) failures.push(`tool-output truncation marker in ${name}`);
+    }
+  }
+  return { id: fixture.id, available: true, ok: failures.length === 0,
+    sourceSha256: sourceHash.sha256, sourceFiles: sourceHash.files.length, failures };
+}
+
+export function prepareReferenceFixtureSource(fixture: ReferenceFixtureSource, destination: string,
+  { root = ROOT }: { root?: string } = {}): HashFilesResult {
+  seedAppSource(referenceSourcePath(fixture, root), destination);
+  return hashAppSource(destination);
+}
+
+export function referenceMetadataIssues(metadata: unknown): string[] {
+  if (!record(metadata)) return ['reference.json must contain an object'];
+  const failures: string[] = [];
+  if (metadata.schemaVersion !== 1) failures.push('reference.json schemaVersion must be 1');
+  if (typeof metadata.kind !== 'string' || !FIXTURE_KINDS.has(metadata.kind)) {
+    failures.push('reference.json kind is invalid');
+  }
+  const installDirectories = Array.isArray(metadata.installDirectories)
+    ? metadata.installDirectories : [];
+  const paths: Array<[string, unknown, boolean]> = [];
+  if (installDirectories.length) {
+    paths.push(...installDirectories.map((path, index) =>
+      [`installDirectories[${index}]`, path, false] as [string, unknown, boolean]));
+    if (new Set(installDirectories).size !== installDirectories.length) {
+      failures.push('reference.json installDirectories must be unique');
+    }
+  }
+  const client = record(metadata.client) ? metadata.client : null;
+  paths.push(['client.directory', client?.directory, true]);
+  if (metadata.kind === 'node-api') {
+    const server = record(metadata.server) ? metadata.server : null;
+    paths.push(['server.directory', server?.directory, true]);
+  } else if (metadata.kind === 'spacetime') {
+    paths.push(['moduleDirectory', metadata.moduleDirectory, true],
+      ['bindingsDirectory', metadata.bindingsDirectory, false]);
+  }
+  for (const [label, path, mustInstall] of paths) {
+    if (!isSafeRelativePath(path)) failures.push(`reference.json ${label} is unsafe or missing`);
+    else if (mustInstall && !installDirectories.includes(path)) {
+      failures.push(`reference.json ${label} must be listed in installDirectories`);
+    }
+  }
+  return failures;
+}
+
+export function assertPlainReferenceSourceTree(source: string): void {
+  if (!existsSync(source)) return;
+  const root = lstatSync(source);
+  if (!root.isDirectory()) throw new Error('reference source root is not a plain directory');
+  const walk = (directory: string): void => {
+    for (const entry of readdirSync(directory, { withFileTypes: true })) {
+      const path = join(directory, entry.name);
+      const name = relative(source, path).replaceAll('\\', '/');
+      if (entry.isDirectory() && FORBIDDEN_DIRECTORIES.has(entry.name)) {
+        throw new Error(`reference source contains forbidden generated directory ${name}`);
+      }
+      if (entry.isDirectory()) walk(path);
+      else if (!entry.isFile()) throw new Error(`reference source contains unsupported filesystem entry ${name}`);
+    }
+  };
+  walk(source);
+}
+
+function effectiveReferenceSource(fixture: ReferenceFixtureSource,
+  { root }: { root: string }): EffectiveSource {
+  const basePath = referenceSourcePath(fixture, root);
+  const baseHash = hashDirectory(basePath);
+  const files = new Map(baseHash.files.map(name => [name,
+    readFileSync(join(basePath, ...name.split('/')))]));
+  return { basePath, files };
+}
+
+function referenceSourcePath(fixture: ReferenceFixtureSource, root: string): string {
+  const baseRelative = fixture.imported?.path ?? fixture.targetPath;
+  if (!safeReferencePath(baseRelative)) throw new Error('imported fixture path is unsafe');
+  const basePath = join(root, baseRelative);
+  if (!existsSync(basePath)) throw new Error('imported fixture directory is missing');
+  assertContainedPlainTree(root, basePath);
+  return basePath;
+}
+
+function hashEffectiveFiles(files: Map<string, Buffer>): { sha256: string; files: string[] } {
+  const names = [...files.keys()].sort((a, b) => a.localeCompare(b));
+  const hash = createHash('sha256');
+  for (const name of names) {
+    const bytes = files.get(name) ?? Buffer.alloc(0);
+    hash.update(`${name.length}:${name}:${bytes.length}:`);
+    hash.update(bytes);
+  }
+  return { sha256: hash.digest('hex'), files: names };
+}
+
+function safeReferencePath(path: unknown): path is string {
+  return isSafeRelativePath(path) && path.replaceAll('\\', '/').startsWith('reference-apps/');
+}
+
+function assertContainedPlainTree(root: string, source: string): void {
+  const realRoot = realpathSync(root);
+  const realSource = realpathSync(source);
+  if (!containedRealPath(realRoot, realSource)) {
+    throw new Error('reference source resolves outside its registry root');
+  }
+  assertPlainReferenceSourceTree(source);
+}
+
+function containedRealPath(root: string, target: string): boolean {
+  return target === root || target.startsWith(`${root}${sep}`);
+}
+
+function isSafeRelativePath(path: unknown): path is string {
+  if (typeof path !== 'string' || !path || resolve(path) === path) return false;
+  const normalized = resolve(ROOT, path);
+  return normalized.startsWith(`${ROOT}${sep}`) && !path.split(/[\\/]/).includes('..');
+}
+
+function readJsonBytes(bytes: Buffer | undefined, label: string, failures: string[]): unknown {
+  try { return JSON.parse((bytes ?? Buffer.alloc(0)).toString('utf8')); }
+  catch (error) { failures.push(`${label} is not valid JSON: ${errorMessage(error)}`); return null; }
+}
+
+async function main(): Promise<void> {
+  const registry = loadReferenceRegistry();
+  const validation = validateReferenceRegistry(registry);
+  const imports = registry.fixtures.filter(fixture => fixture.status !== 'blocked')
+    .map(fixture => inspectImportedReference(fixture));
+  console.log(JSON.stringify({ validation, imports }, null, 2));
+  if (!validation.ok || imports.some(item => !item.ok)) process.exitCode = 1;
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  main().catch((error: unknown) => {
+    console.error(error instanceof Error ? error.stack ?? error.message : String(error));
+    process.exitCode = 2;
+  });
+}
diff --git a/tools/stack-bench/src/references/reference-install.ts b/tools/stack-bench/src/references/reference-install.ts
new file mode 100644
index 00000000000..05387a924ce
--- /dev/null
+++ b/tools/stack-bench/src/references/reference-install.ts
@@ -0,0 +1,27 @@
+import { CODING_CONTAINER_SPACETIME_PACKAGE } from '../runtime/coding-container-policy.js';
+
+export interface ReferenceInstallMetadata {
+  readonly kind: string;
+  readonly frozenLock?: boolean;
+  readonly installDirectories: readonly string[];
+  readonly [key: string]: unknown;
+}
+
+export interface ReferenceInstallStep {
+  readonly directory: string;
+  readonly command: 'npm';
+  readonly args: readonly string[];
+}
+
+export function referenceInstallSteps(
+  metadata: ReferenceInstallMetadata,
+): ReferenceInstallStep[] {
+  return metadata.installDirectories.flatMap(directory => [
+    ...(metadata.kind === 'spacetime' && metadata.frozenLock !== true ? [{
+      directory, command: 'npm' as const,
+      args: ['install', `spacetimedb@file:${CODING_CONTAINER_SPACETIME_PACKAGE}`, '--package-lock-only',
+        '--ignore-scripts', '--no-audit', '--no-fund'],
+    }] : []),
+    { directory, command: 'npm' as const, args: ['ci', '--no-audit', '--no-fund'] },
+  ]);
+}
diff --git a/tools/stack-bench/src/references/reference-live.ts b/tools/stack-bench/src/references/reference-live.ts
new file mode 100644
index 00000000000..457b93c29e5
--- /dev/null
+++ b/tools/stack-bench/src/references/reference-live.ts
@@ -0,0 +1,1058 @@
+#!/usr/bin/env node
+// Qualify fresh reference copies from audited evidence, not process exit codes.
+
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { basename, dirname, extname, join, relative, resolve, sep } from 'node:path';
+import { tmpdir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { parseArgs as parseNodeArgs } from 'node:util';
+import { STACK_ADAPTER_REGISTRY } from '../stacks/stack-adapters.js';
+import { ARTIFACT_FILE, emptyArtifactIdentities, readArtifact, readArtifactPayload,
+  writeRunJson } from '../evidence/artifacts.js';
+import { hashDirectory } from '../evidence/provenance.js';
+import { inspectImportedReference, loadReferenceRegistry, prepareReferenceFixtureSource,
+  validateReferenceRegistry } from './reference-fixtures.js';
+import { resolveReferenceSelection } from './reference-selection.js';
+import { auditMutationWorkerRun, auditReferenceRun }
+  from './reference-qualification-audit.js';
+import { rescueSupervisedLease } from '../runtime/recovery.js';
+import { runBounded } from '../runtime/bounded-process.js';
+import { calibrationQualificationIdentity, mutationExecutionSha256,
+  resolveCalibrationForRelease } from '../composition/calibration-compiler.js';
+import { qualificationScopeIdentity } from '../composition/qualification-scope.js';
+import { resolveRecipeRelease } from '../composition/recipe-release.js';
+import { isModularRecipeRelease } from '../composition/recipe-selection.js';
+import { isDeclaredLevel, listTracks, loadTrack } from '../composition/tracks.js';
+import { RUN_INDEX_CAP } from '../composition/tracks.js';
+import { controllerRunner } from '../runtime/runner-environment.js';
+import { mergeMutationShards, mutationShard, mutationWorkerSlots }
+  from '../evidence/mutation-shards.js';
+import { existingResourceLockKeys, resourceLockScope } from '../runtime/backend-lease.js';
+import { resolveFeatureCatalog } from '../progression/feature-catalog-selection.js';
+import { progressionLevels, selectFeatureCatalogLevels }
+  from '../progression/progression-definition.js';
+import { resolveProgressionRecipeLevelSelection }
+  from '../progression/progression-recipe-selection.js';
+import { mutationTargetKeys } from '../evidence/mutation-analysis.js';
+
+export { controllerRunner as referenceQualificationRunner } from '../runtime/runner-environment.js';
+
+import { STACK_BENCH_ROOT as ROOT, compiledEntrypoint } from '../package-root.js';
+const BENCH = compiledEntrypoint('commands', 'bench.js');
+const DEFAULT_SPACETIME_PORT = 3310;
+
+import type { ReferenceFixture } from './reference-fixtures.js';
+import type { RecipeBinding } from '../composition/recipe-release.js';
+import type { CalibrationPlan, CalibrationReference }
+  from '../composition/calibration-compiler.js';
+import type { ProgressionRecipeSelections }
+  from '../progression/progression-recipe-selection.js';
+
+// The flags a qualification run is launched with.
+export interface ReferenceQualificationArgs {
+  backend?: string;
+  track: string;
+  level: number;
+  repetitions: number;
+  runIndex: number;
+  spacetimePort: number | null;
+  timeoutMinutes: number | null;
+  mutations: boolean;
+  mutationWorkers: number;
+  mutationShardIndex: number | null;
+  mutationShardCount: number | null;
+  mutationMaxRuntimeMinutes: number;
+  mutationIds: string[];
+  selectedCheckKeys: string[];
+  recipe?: string;
+  featureCatalog?: string;
+  out?: string;
+  releaseCandidate?: boolean;
+  artifactDirectory?: string;
+  runsRoot?: string;
+  timeoutMs?: number;
+  spacetimePortExplicit?: boolean;
+  mutationBaselineBundle?: string;
+  mutationCheckpoint?: string | null;
+  mutationCheckpointDir?: string;
+  referenceMutationOnly?: boolean;
+}
+
+type UnknownRecord = Record<string, unknown>;
+
+// What a qualification run resolves once and threads through every step.
+export interface QualificationContext {
+  binding: RecipeBinding;
+  calibration: CalibrationPlan;
+  reference?: CalibrationReference;
+  identity?: unknown;
+  featureCatalog?: unknown;
+  featureCatalogRef?: string | null;
+  progressionSelection?: ProgressionRecipeSelections | null;
+  selectedCheckKeys?: string[];
+  level?: number;
+}
+
+export interface MutationManifest {
+  mutations: UnknownRecord[];
+  scenario?: string;
+  [key: string]: unknown;
+}
+
+const record = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object';
+
+const errorMessage = (error: unknown): string =>
+  error instanceof Error ? error.message : String(error);
+
+
+interface QualificationRunRecord {
+  ok?: boolean;
+  fingerprint?: string;
+  imageId?: string;
+  output?: string;
+  [key: string]: unknown;
+}
+
+interface QualificationArtifact {
+  runs: QualificationRunRecord[];
+  ok?: boolean;
+  [key: string]: unknown;
+}
+
+interface MutationShardControl {
+  ok?: boolean;
+  results?: Array<{ id?: unknown; [key: string]: unknown }>;
+  shard?: { index?: number; count?: number; mutationIds?: string[] };
+  [key: string]: unknown;
+}
+
+export interface MutationWorkerResult {
+  artifact: unknown;
+  payload: WorkerPayload | null;
+  run: WorkerRun | null;
+  control: MutationShardControl | null;
+  assigned: string[];
+  shardVerified: boolean;
+  failures: string[];
+}
+
+interface WorkerRun {
+  ok?: boolean;
+  output?: string;
+  [key: string]: unknown;
+}
+
+interface WorkerPayload {
+  ok?: boolean;
+  mutationControl?: boolean;
+  requiredRepetitions?: number;
+  runs?: WorkerRun[];
+  [key: string]: unknown;
+}
+
+function qualificationInputs(): { sha256: string; files: string[] } {
+  const ignoredRoots = new Set([
+    'archive',
+    'dist',
+    'local-notes',
+    'media',
+    'node_modules',
+    'qualification-evidence',
+    'reference-apps',
+    'results',
+    'tests',
+    'transcripts',
+  ]);
+  return hashDirectory(ROOT, { exclude: (name, entry) => {
+    const parts = name.split('/');
+    if (ignoredRoots.has(parts[0] ?? '') || parts.some(part => part.startsWith('.'))) return true;
+    if (entry.isDirectory()) return false;
+    return !(/\.(?:mjs|ts|js|json|ya?ml|sh)$/.test(name) || /(?:^|\/)Dockerfile$/.test(name));
+  } });
+}
+
+export function parseReferenceQualificationArgs(argv: readonly string[]):
+  ReferenceQualificationArgs {
+  const { values } = parseNodeArgs({ args: [...argv.slice(2)], options: {
+    backend: { type: 'string' }, track: { type: 'string' }, level: { type: 'string' },
+    recipe: { type: 'string' }, 'feature-catalog': { type: 'string' },
+    repetitions: { type: 'string' }, 'run-index': { type: 'string' },
+    'spacetime-port': { type: 'string' }, 'timeout-minutes': { type: 'string' },
+    mutations: { type: 'boolean' }, 'release-candidate': { type: 'boolean' },
+    'selected-check': { type: 'string', multiple: true },
+    'mutation-id': { type: 'string', multiple: true }, 'mutation-workers': { type: 'string' },
+    'mutation-shard-index': { type: 'string' }, 'mutation-shard-count': { type: 'string' },
+    'mutation-checkpoint-dir': { type: 'string' }, 'mutation-checkpoint': { type: 'string' },
+    'mutation-baseline-bundle': { type: 'string' }, 'mutation-max-runtime-minutes': { type: 'string' },
+    'reference-mutation-only': { type: 'boolean' }, out: { type: 'string' },
+  } });
+  const number = (value: string | undefined, fallback: number | null): number | null =>
+    value === undefined ? fallback : Number(value);
+  const args: ReferenceQualificationArgs = {
+    backend: values.backend, track: values.track ?? 'ecommerce',
+    level: number(values.level, 1) as number, recipe: values.recipe,
+    featureCatalog: values['feature-catalog'], repetitions: number(values.repetitions, 2) as number,
+    runIndex: number(values['run-index'], 0) as number,
+    spacetimePort: number(values['spacetime-port'], null),
+    spacetimePortExplicit: values['spacetime-port'] !== undefined,
+    timeoutMinutes: number(values['timeout-minutes'], null),
+    mutations: values.mutations ?? false, releaseCandidate: values['release-candidate'],
+    selectedCheckKeys: values['selected-check'] ?? [],
+    mutationIds: values['mutation-id'] ?? [], mutationWorkers: number(values['mutation-workers'], 1) as number,
+    mutationShardIndex: number(values['mutation-shard-index'], null),
+    mutationShardCount: number(values['mutation-shard-count'], null),
+    mutationCheckpointDir: values['mutation-checkpoint-dir'] && resolve(values['mutation-checkpoint-dir']),
+    mutationCheckpoint: values['mutation-checkpoint'] && resolve(values['mutation-checkpoint']),
+    mutationBaselineBundle: values['mutation-baseline-bundle'] && resolve(values['mutation-baseline-bundle']),
+    mutationMaxRuntimeMinutes: number(values['mutation-max-runtime-minutes'], 60) as number,
+    referenceMutationOnly: values['reference-mutation-only'],
+    out: values.out && resolve(values.out),
+  };
+  if (args.backend === undefined || !STACK_ADAPTER_REGISTRY.ids.includes(args.backend)) {
+    throw new Error(`--backend must be one of ${STACK_ADAPTER_REGISTRY.ids.join(', ')}`);
+  }
+  if (!listTracks().includes(args.track)) throw new Error(`--track is unknown: ${args.track}`);
+  const track = loadTrack(args.track);
+  if (!isDeclaredLevel(track, args.level)) {
+    throw new Error(`--level must be declared for ${args.track}`);
+  }
+  if (!Number.isInteger(args.repetitions) || args.repetitions < 1) {
+    throw new Error('--repetitions must be a positive integer');
+  }
+  if (!Number.isInteger(args.runIndex) || args.runIndex < 0) {
+    throw new Error('--run-index must be a non-negative integer');
+  }
+  if (!Number.isInteger(args.mutationWorkers) || args.mutationWorkers < 1
+      || args.mutationWorkers > 8) {
+    throw new Error('--mutation-workers must be an integer from 1 through 8');
+  }
+  if (args.mutationWorkers > 1 && !args.mutations) {
+    throw new Error('--mutation-workers above 1 requires --mutations');
+  }
+  if ((args.mutationCheckpointDir || args.mutationCheckpoint || args.mutationBaselineBundle)
+      && !args.mutations) {
+    throw new Error('mutation control options require --mutations');
+  }
+  if (args.mutationCheckpoint && args.mutationWorkers !== 1) {
+    throw new Error('--mutation-checkpoint is an internal single-worker option');
+  }
+  if (args.referenceMutationOnly && (!args.mutations || args.mutationWorkers !== 1)) {
+    throw new Error('--reference-mutation-only is an internal single-worker option');
+  }
+  if (args.releaseCandidate && !args.mutations) {
+    throw new Error('--release-candidate requires --mutations');
+  }
+  if (args.mutationIds.some(id => typeof id !== 'string' || !id.trim())
+      || new Set(args.mutationIds).size !== args.mutationIds.length) {
+    throw new Error('--mutation-id values must be unique non-empty strings');
+  }
+  if (args.mutationIds.length && !args.mutations) {
+    throw new Error('--mutation-id requires --mutations');
+  }
+  if (args.releaseCandidate && args.mutationIds.length) {
+    throw new Error('--release-candidate cannot select individual mutations');
+  }
+  if (args.selectedCheckKeys.length && args.mutations) {
+    throw new Error('--selected-check cannot be combined with mutations');
+  }
+  if (args.mutations && !args.referenceMutationOnly && !args.releaseCandidate
+      && args.mutationIds.length === 0) {
+    throw new Error('full mutation qualification requires --release-candidate');
+  }
+  if (args.mutationBaselineBundle && !args.referenceMutationOnly) {
+    throw new Error('--mutation-baseline-bundle is an internal mutation-worker option');
+  }
+  if (!Number.isFinite(args.mutationMaxRuntimeMinutes)
+      || args.mutationMaxRuntimeMinutes < 1 || args.mutationMaxRuntimeMinutes > 120) {
+    throw new Error('--mutation-max-runtime-minutes must be from 1 through 120');
+  }
+  const shardSupplied = args.mutationShardIndex !== null || args.mutationShardCount !== null;
+  if (shardSupplied && (args.mutationShardIndex === null || args.mutationShardCount === null)) {
+    throw new Error('--mutation-shard-index and --mutation-shard-count must be supplied together');
+  }
+  if (shardSupplied) {
+    if (!args.mutations || args.mutationWorkers !== 1) {
+      throw new Error('internal mutation shard coordinates require --mutations and one worker');
+    }
+    // The pure partition helper owns coordinate range validation.
+    mutationWorkerSlots({ workerCount: args.mutationShardCount ?? 0, runIndex: 0,
+      maxRunIndex: RUN_INDEX_CAP });
+    if (!Number.isInteger(args.mutationShardIndex) || Number(args.mutationShardIndex) < 0
+        || Number(args.mutationShardIndex) >= Number(args.mutationShardCount)) {
+      throw new Error('--mutation-shard-index is outside the declared shard count');
+    }
+  } else {
+    mutationWorkerSlots({ workerCount: args.mutationWorkers, runIndex: args.runIndex,
+      maxRunIndex: RUN_INDEX_CAP });
+  }
+  args.spacetimePort ??= DEFAULT_SPACETIME_PORT + args.runIndex;
+  if (!Number.isInteger(args.spacetimePort) || args.spacetimePort < 1024 || args.spacetimePort > 65535) {
+    throw new Error('--spacetime-port must be an integer from 1024 through 65535');
+  }
+  if (args.mutations && args.spacetimePort + args.mutationWorkers - 1 > 65535) {
+    throw new Error('--spacetime-port plus mutation worker offsets must not exceed 65535');
+  }
+  args.timeoutMinutes ??= args.mutations ? 120 : 60;
+  const maximumTimeoutMinutes = args.mutations ? 180 : 240;
+  if (!Number.isFinite(args.timeoutMinutes) || args.timeoutMinutes < 10
+      || args.timeoutMinutes > maximumTimeoutMinutes) {
+    throw new Error(`--timeout-minutes must be from 10 through ${maximumTimeoutMinutes}`);
+  }
+  if (args.mutations && args.timeoutMinutes < args.mutationMaxRuntimeMinutes + 20) {
+    throw new Error('--timeout-minutes must allow the mutation batch plus 20 minutes for setup');
+  }
+  args.timeoutMs = Math.round(args.timeoutMinutes * 60_000);
+  return args;
+}
+
+function readJson(path: string): unknown {
+  return JSON.parse(readFileSync(path, 'utf8'));
+}
+
+export function referenceQualificationContext(fixture: ReferenceFixture,
+  recipe: string | null = null,
+  { level = fixture.level, featureCatalog = null }: {
+    level?: number; featureCatalog?: string | null;
+  } = {}): QualificationContext {
+  const track = loadTrack(fixture.track);
+  const binding = resolveRecipeRelease(track, level, recipe);
+  if (!binding) throw new Error(`${fixture.track} L${level} has no recipe release`);
+  const calibration = resolveCalibrationForRelease(binding.release,
+    { trackRoot: track.dir, stackBenchRoot: ROOT, alias: `L${level}` });
+  if (!calibration) {
+    throw new Error(`${binding.release.id}@${binding.release.version} has no L${level} calibration`);
+  }
+  const reference = calibration.references.entries.find(entry => entry.backend === fixture.backend
+    && entry.id === fixture.id && entry.sourceSha256 === fixture.imported?.sourceSha256);
+  if (!reference) throw new Error(`${fixture.id} is not selected by calibration ${calibration.id}`);
+  const declaredCatalog = calibration.qualification.featureCatalog;
+  const catalogRef = featureCatalog ?? (declaredCatalog
+    ? `${declaredCatalog.id}@${declaredCatalog.version}` : null);
+  const fullCatalog = catalogRef ? resolveFeatureCatalog(catalogRef, track) : null;
+  const catalog = fullCatalog ? selectFeatureCatalogLevels(fullCatalog,
+    progressionLevels(fullCatalog).filter(candidate => candidate <= level)) : null;
+  if (declaredCatalog && catalog?.identity.sha256 !== declaredCatalog.sha256) {
+    throw new Error(`${calibration.id} feature catalog identity does not match`);
+  }
+  const progressionSelection = catalog
+    ? resolveProgressionRecipeLevelSelection(binding, catalog, level, { cumulative: true }) : null;
+  const selectedCheckKeys = progressionSelection?.grader.checkKeys
+    ?? binding.release.checkCatalog.map(check => check.stableKey);
+  return { binding, calibration, identity: calibrationQualificationIdentity(calibration),
+    featureCatalog: catalog?.identity ?? null, featureCatalogRef: catalogRef,
+    progressionSelection, selectedCheckKeys, level };
+}
+
+export function referenceQualificationSelectionArgs(binding: RecipeBinding | null,
+  progressionSelection: ProgressionRecipeSelections | null = null,
+  selectedCheckKeys: string[] | null = null): string[] {
+  if (!binding?.release?.checkCatalog?.length) {
+    throw new Error('reference qualification requires an exact recipe check catalog');
+  }
+  const selected = progressionSelection?.grader.selection ?? null;
+  const checkKeys = selectedCheckKeys
+    ?? progressionSelection?.grader.checkKeys
+    ?? binding.release.checkCatalog.map(check => check.stableKey);
+  const args = ['--check', checkKeys.join(',')];
+  if (!isModularRecipeRelease(binding.release)) return args;
+  const features = selected?.requested.features ?? binding.release.components.packs
+    .filter(pack => pack.moduleType === 'feature').map(pack => pack.id);
+  const specifications = selected?.requested.specifications.expected
+    ?? binding.release.components.packs.filter(pack => pack.moduleType === 'specification')
+      .map(pack => `${pack.id}@${pack.version}`);
+  if (!features.length || !specifications.length) {
+    throw new Error('modular reference qualification requires feature and specification modules');
+  }
+  const requestTask = progressionSelection?.grader.request.task;
+  const taskMode = record(requestTask) ? requestTask.mode : undefined;
+  if (progressionSelection
+    && (typeof taskMode !== 'string' || !['fresh', 'upgrade'].includes(taskMode))) {
+    throw new Error('progression reference qualification requires a fresh or upgrade task mode');
+  }
+  return ['--feature-module', features.join(','), '--expect-spec', specifications.join(','),
+    ...(taskMode ? ['--task-mode', String(taskMode)] : []), ...args];
+}
+
+export function referenceQualificationRelease<T extends { checkCatalog: Array<{ stableKey: string }> }>(
+  release: T, selectedCheckKeys: readonly string[]): T {
+  const requested = new Set(selectedCheckKeys);
+  if (requested.size !== selectedCheckKeys.length) {
+    throw new Error('reference qualification check selection contains duplicates');
+  }
+  const checkCatalog = release.checkCatalog.filter(check => requested.delete(check.stableKey));
+  if (requested.size) {
+    throw new Error(`reference qualification selected unknown checks: ${
+      [...requested].sort().join(', ')}`);
+  }
+  if (checkCatalog.length === 0) throw new Error('reference qualification selected no checks');
+  return { ...release, checkCatalog };
+}
+
+export function referenceQualificationPaths(args: Pick<ReferenceQualificationArgs, 'out'>, id: string):
+  { artifactPath: string; artifactDirectory: string; runsRoot: string } {
+  const artifactPath = args.out ?? join(ROOT, 'results', 'reference-live', `${id}.json`);
+  const artifactName = basename(artifactPath, extname(artifactPath));
+  return {
+    artifactPath,
+    artifactDirectory: dirname(artifactPath),
+    runsRoot: join(dirname(artifactPath), `${artifactName}.runs`),
+  };
+}
+
+export function companionReferenceArtifactPath(mutationArtifactPath: string): string {
+  const extension = extname(mutationArtifactPath) || '.json';
+  const stem = basename(mutationArtifactPath, extension);
+  const referenceStem = stem.endsWith('-mutation')
+    ? `${stem.slice(0, -'-mutation'.length)}-reference`
+    : `${stem}-reference`;
+  return join(dirname(mutationArtifactPath), `${referenceStem}${extension}`);
+}
+
+export function assertReleaseCandidateRepetitions(args: Pick<ReferenceQualificationArgs,
+  'releaseCandidate' | 'repetitions'>,
+  calibration: { qualification?: { mutationRepetitions?: number } } | null): void {
+  if (!args.releaseCandidate) return;
+  const required = calibration?.qualification?.mutationRepetitions;
+  if (!Number.isInteger(required) || Number(required) < 1) {
+    throw new Error('release calibration has no valid mutation repetition count');
+  }
+  if (args.repetitions !== required) {
+    throw new Error(`--release-candidate requires exactly ${required} mutation repetition(s)`);
+  }
+}
+
+export function referenceQualificationWorkRoot(env: NodeJS.ProcessEnv = process.env): string {
+  return resolve(env.STACK_BENCH_WORK_DIR ?? tmpdir());
+}
+
+export function qualificationMutationManifest(fixture: ReferenceFixture,
+  context: { calibration: { mutations: Array<{ backend: string; path: string;
+    targets: Array<{ id: string }> }> } },
+  requestedIds: readonly string[] = []): MutationManifest {
+  const selection = context.calibration.mutations.find(entry => entry.backend === fixture.backend);
+  if (!selection) throw new Error(`${fixture.id} has no mutation selection in its calibration`);
+  if (!(fixture.mutationManifests ?? []).includes(selection.path)) {
+    throw new Error(`${fixture.id} does not own its calibrated mutation manifest: ${selection.path}`);
+  }
+  const manifest = readJson(join(ROOT, selection.path)) as MutationManifest;
+  const selectedIds = new Set(selection.targets.map(target => target.id));
+  const mutations = manifest.mutations.filter(mutation =>
+    selectedIds.delete(String(mutation.id)));
+  if (selectedIds.size) {
+    throw new Error(`${fixture.id} mutation selection is missing: ${[...selectedIds].sort().join(', ')}`);
+  }
+  if (mutations.length === 0) throw new Error(`${fixture.id} mutation selection is empty`);
+  if (requestedIds.length === 0) return { ...manifest, mutations };
+  const requested = new Set(requestedIds);
+  const targeted = mutations.filter(mutation => requested.delete(String(mutation.id)));
+  if (requested.size) {
+    throw new Error(`${fixture.id} targeted mutation selection is missing: ${[...requested].sort().join(', ')}`);
+  }
+  return { ...manifest, mutations: targeted };
+}
+
+export function targetedMutationCheckKeys(context: {
+  binding: { release: { checkCatalog: Array<{ stableKey: string; points: number }> } };
+  selectedCheckKeys?: string[];
+},
+  manifest: MutationManifest): string[] {
+  const available = new Map(context.binding.release.checkCatalog.map(check =>
+    [check.stableKey, check]));
+  const allowed = new Set(Array.isArray(context.selectedCheckKeys)
+    ? context.selectedCheckKeys : []);
+  const requested = new Set(manifest.mutations.flatMap(mutationTargetKeys));
+  const missing = [...requested].filter(key => !available.has(key));
+  if (missing.length) {
+    throw new Error(`targeted mutations name unknown checks: ${missing.sort().join(', ')}`);
+  }
+  const outsideScope = [...requested].filter(key => !allowed.has(key)
+    && Number(available.get(key)?.points) > 0);
+  if (outsideScope.length) {
+    throw new Error(`targeted mutations name checks outside the run scope: ${
+      outsideScope.sort().join(', ')}`);
+  }
+  const selected = context.binding.release.checkCatalog
+    .filter(check => Number(check.points) > 0 && allowed.has(check.stableKey)
+      && requested.has(check.stableKey))
+    .map(check => check.stableKey);
+  if (selected.length === 0) throw new Error('targeted mutations select no scored checks');
+  return selected;
+}
+
+async function runOnce(fixture: ReferenceFixture, args: ReferenceQualificationArgs,
+  context: QualificationContext, id: string, repetition: number): Promise<UnknownRecord> {
+  const workRoot = referenceQualificationWorkRoot();
+  mkdirSync(workRoot, { recursive: true });
+  const work = mkdtempSync(join(workRoot, `reference-live-${fixture.backend}-`));
+  const app = join(work, 'app');
+  const output = join(String(args.runsRoot), `r${repetition + 1}`);
+  const supervisorState = join(work, 'supervisor-state.json');
+  const started = Date.now();
+  const harnessBefore = qualificationInputs();
+  const cancellation = new AbortController();
+  const cancel = () => cancellation.abort();
+  process.once('SIGINT', cancel);
+  process.once('SIGTERM', cancel);
+  let processError = null;
+  try {
+    prepareReferenceFixtureSource(fixture, app);
+    const adapter = STACK_ADAPTER_REGISTRY.get(fixture.backend);
+    const supervisorEnv = adapter.runPolicy.supervisorEnvironment(
+      { spacetimePort: args.spacetimePort });
+    const env = { ...process.env, STACK_BENCH_SUPERVISOR_STATE: supervisorState,
+      ...supervisorEnv };
+    const benchArgs = [BENCH, '--backend', fixture.backend, '--track', fixture.track,
+      '--levels', String(args.level), '--run-index', String(args.runIndex), '--repairs', '0',
+      '--app', app, '--out', output, '--agent-adapter', 'reference-fixture', '--no-media'];
+    benchArgs.push('--recipe', `${context.binding.release.id}@${context.binding.release.version}`);
+    benchArgs.push(...referenceQualificationSelectionArgs(context.binding,
+      context.progressionSelection, context.selectedCheckKeys ?? null));
+    benchArgs.push('--parent-attempt-id', id);
+    if (args.mutations) {
+      const manifestPath = join(work, 'selected-mutations.json');
+      writeFileSync(manifestPath, `${JSON.stringify(qualificationMutationManifest(fixture, context,
+        args.mutationIds),
+        null, 2)}\n`);
+      benchArgs.push('--mutations', manifestPath);
+      if (args.mutationShardCount !== null) {
+        benchArgs.push('--mutation-shard-index', String(args.mutationShardIndex),
+          '--mutation-shard-count', String(args.mutationShardCount));
+      }
+      if (args.mutationCheckpoint) {
+        if (existsSync(String(args.mutationCheckpoint))) {
+          benchArgs.push('--mutation-resume-from', String(args.mutationCheckpoint));
+        }
+        benchArgs.push('--mutation-checkpoint-out', String(args.mutationCheckpoint));
+      }
+      benchArgs.push('--mutation-max-runtime-minutes', String(args.mutationMaxRuntimeMinutes));
+      benchArgs.push('--expected-mutation-calibration-json', JSON.stringify({
+        id: context.calibration.id,
+        version: context.calibration.version,
+        sha256: context.calibration.contentSha256,
+        state: context.calibration.state,
+      }));
+      if (args.mutationBaselineBundle) {
+        benchArgs.push('--mutation-baseline-bundle', String(args.mutationBaselineBundle));
+      }
+      if (args.referenceMutationOnly) benchArgs.push('--reference-mutation-only');
+    }
+    const child = await runBounded(process.execPath, benchArgs,
+      { cwd: ROOT, stdio: 'inherit', env, timeoutMs: Number(args.timeoutMs),
+        signal: cancellation.signal });
+    if (!child.ok) {
+      const reason = child.timedOut
+        ? `benchmark exceeded ${args.timeoutMinutes} minute repetition deadline`
+        : child.cancelled ? 'benchmark was interrupted'
+        : child.error?.message ?? `benchmark exited ${child.code ?? child.signal ?? 'without status'}`;
+      throw new Error(reason);
+    }
+  } catch (error) {
+    processError = errorMessage(error);
+  } finally {
+    process.removeListener('SIGINT', cancel);
+    process.removeListener('SIGTERM', cancel);
+  }
+  let audit: UnknownRecord & { ok: boolean; failures: string[] };
+  try {
+    audit = args.referenceMutationOnly
+      ? auditMutationWorkerRun(output, fixture)
+      : auditReferenceRun(output, fixture, {
+        requireMutationControl: args.mutations,
+        release: context.binding.release,
+        level: args.level,
+        selectedCheckKeys: context.selectedCheckKeys,
+      });
+  } catch (error) {
+    audit = { ok: false, failures: [`qualification evidence is invalid: ${errorMessage(error)}`] };
+  }
+  let cleanupPending = false;
+  try { rescueSupervisedLease(supervisorState, output); }
+  catch (error) {
+    cleanupPending = true;
+    audit.failures.push(`lease cleanup failed: ${errorMessage(error)}; recovery authority retained at ${supervisorState}`);
+  }
+  if (!cleanupPending) {
+    try { rmSync(work, { recursive: true, force: true, maxRetries: 10, retryDelay: 500 }); }
+    catch (error) {
+      const code = record(error) ? error.code : undefined;
+      audit.failures.push(`owned temp cleanup failed (${String(code ?? 'unknown')}): ${work}`);
+    }
+  }
+  const harnessAfter = qualificationInputs();
+  if (harnessAfter.sha256 !== harnessBefore.sha256) {
+    audit.failures.unshift('qualification harness changed while this repetition was running');
+  }
+  if (processError) audit.failures.unshift(`benchmark process failed: ${processError}`);
+  audit.ok = audit.failures.length === 0;
+  return { repetition: repetition + 1,
+    output: relative(String(args.artifactDirectory), output).replaceAll('\\', '/'),
+    durationMs: Date.now() - started, processError,
+    harnessSha256Before: harnessBefore.sha256, harnessSha256After: harnessAfter.sha256, ...audit };
+}
+
+export function parallelMutationChildArgv(args: ReferenceQualificationArgs,
+  context: { binding: { release: { id: string; version: string } }; featureCatalogRef?: string | null },
+  { artifactPath, baselineBundle, workerIndex, workerCount }: {
+    artifactPath: string; baselineBundle: string;
+    workerIndex: number; workerCount: number;
+  }): string[] {
+  const runIndex = args.runIndex + workerIndex;
+  const argv: string[] = [fileURLToPath(import.meta.url), '--backend', String(args.backend),
+    '--track', args.track, '--level', String(args.level), '--recipe',
+    `${context.binding.release.id}@${context.binding.release.version}`,
+    '--repetitions', '1', '--run-index', String(runIndex), '--timeout-minutes',
+    String(args.timeoutMinutes), '--mutations', '--mutation-shard-index',
+    String(workerIndex), '--mutation-shard-count', String(workerCount), '--out', artifactPath];
+  argv.push('--reference-mutation-only');
+  argv.push('--mutation-max-runtime-minutes', String(args.mutationMaxRuntimeMinutes));
+  argv.push('--mutation-baseline-bundle', baselineBundle);
+  if (args.mutationCheckpointDir) {
+    argv.push('--mutation-checkpoint', join(String(args.mutationCheckpointDir),
+      `${args.backend}-worker-${workerIndex + 1}.json`));
+  }
+  if (context.featureCatalogRef) {
+    argv.push('--feature-catalog', String(context.featureCatalogRef));
+  }
+  for (const mutationId of args.mutationIds ?? []) {
+    argv.push('--mutation-id', String(mutationId));
+  }
+  if (args.spacetimePortExplicit) {
+    argv.push('--spacetime-port', String(Number(args.spacetimePort) + workerIndex));
+  }
+  return argv;
+}
+
+export function parallelMutationResourceLockKeys(args: ReferenceQualificationArgs): string[] {
+  const slots = mutationWorkerSlots({ workerCount: args.mutationWorkers,
+    runIndex: args.runIndex, maxRunIndex: RUN_INDEX_CAP });
+  const keys = slots.map(runIndex => `slot:${args.track}:${args.backend}:run${runIndex}`);
+  if (args.backend === 'spacetime') {
+    keys.push(...slots.map((_, workerIndex) =>
+      `listener:http://127.0.0.1:${Number(args.spacetimePort) + workerIndex}`));
+  }
+  return keys.sort();
+}
+
+export function preflightParallelMutationResources(args: ReferenceQualificationArgs,
+  env: NodeJS.ProcessEnv = process.env): void {
+  const occupied = existingResourceLockKeys({
+    root: resourceLockScope(env).root,
+    keys: parallelMutationResourceLockKeys(args),
+  });
+  if (occupied.length) {
+    throw new Error(`parallel mutation resources are already leased: ${occupied.join(', ')}`);
+  }
+}
+
+function identityKey(identity: unknown): string {
+  const value = record(identity) ? identity : {};
+  return JSON.stringify({ id: value.id ?? null, version: value.version ?? null,
+    sha256: value.sha256 ?? null, state: value.state ?? null });
+}
+
+export function readParallelMutationWorker(path: string, processResult: {
+  ok: boolean; timedOut?: boolean; error?: Error | null; code?: number | null; signal?: NodeJS.Signals | null;
+},
+  expected: { workerIndex: number; workerCount: number; [key: string]: unknown },
+  manifest: MutationManifest): MutationWorkerResult {
+  const failures = [];
+  const assigned = mutationShard(manifest.mutations, { index: expected.workerIndex,
+    count: expected.workerCount, defaultScenario: manifest.scenario }).mutationIds;
+  if (!processResult.ok) {
+    failures.push(processResult.timedOut ? 'worker timed out'
+      : processResult.error?.message ?? `worker exited ${processResult.code ?? processResult.signal}`);
+  }
+  if (!existsSync(path)) return { artifact: null, payload: null, run: null, control: null,
+    assigned, shardVerified: false, failures: [...failures, 'worker artifact is missing'] };
+  let artifact: ReturnType<typeof readArtifact<WorkerPayload>>;
+  try { artifact = readArtifact<WorkerPayload>(path); }
+  catch (error) { return { artifact: null, payload: null, run: null, control: null,
+    assigned, shardVerified: false,
+    failures: [...failures, `worker artifact is invalid: ${errorMessage(error)}`] }; }
+  if (artifact.kind !== 'reference_qualification') failures.push('worker artifact has the wrong kind');
+  const payload = artifact.payload;
+  if (payload?.mutationControl !== true || payload?.requiredRepetitions !== 1
+      || payload?.runs?.length !== 1) {
+    failures.push('worker qualification shape is invalid');
+  }
+  const identities: UnknownRecord = record(artifact.identities) ? artifact.identities : {};
+  for (const key of ['engine', 'fixture', 'recipe', 'calibration', 'stackAdapter']) {
+    if (identityKey(identities[key]) !== identityKey(expected[key])) {
+      failures.push(`worker ${key} identity does not match the parent`);
+    }
+  }
+  const run = payload?.runs?.[0] ?? null;
+  if (payload?.ok !== true || run?.ok !== true) failures.push('worker qualification did not pass');
+  let control: MutationShardControl | null = null;
+  if (run?.output) {
+    const childRoot = resolve(dirname(path));
+    const outputRoot = resolve(childRoot, run.output);
+    if (outputRoot !== childRoot && !outputRoot.startsWith(`${childRoot}${sep}`)) {
+      failures.push('worker run output escapes its artifact directory');
+    } else {
+      const controlPath = join(outputRoot, ARTIFACT_FILE.mutationControl);
+      try { control = readArtifactPayload(controlPath, { expectedKind: 'mutation_control' }); }
+      catch (error) {
+        failures.push(`worker mutation artifact is invalid: ${errorMessage(error)}`);
+      }
+    }
+  } else failures.push('worker run output is missing');
+  const shardMatches = control?.shard?.index === expected.workerIndex
+    && control.shard.count === expected.workerCount
+    && JSON.stringify(control.shard.mutationIds) === JSON.stringify(assigned);
+  if (!control?.shard) failures.push('worker mutation shard is missing');
+  else if (!shardMatches) failures.push('worker mutation shard does not match its assignment');
+  const resultIds = Array.isArray(control?.results)
+    ? control.results.map((result: UnknownRecord) => String(result.id ?? '')).sort() : null;
+  const assignedIds = [...assigned].sort();
+  const resultsMatch = resultIds !== null && resultIds.length === assignedIds.length
+    && JSON.stringify(resultIds) === JSON.stringify(assignedIds);
+  if (!Array.isArray(control?.results)) failures.push('worker mutation results are missing');
+  else if (!resultsMatch) failures.push('worker mutation results do not match their shard assignment');
+  if (control?.ok !== true) failures.push('worker mutation control did not pass');
+  return { artifact, payload, run, control, assigned,
+    shardVerified: shardMatches && resultsMatch, failures };
+}
+
+export function parallelMutationResults(manifest: MutationManifest,
+  workers: ReadonlyArray<{ shardVerified: boolean; control: MutationShardControl | null }>): UnknownRecord[] {
+  const completed = workers.filter(worker =>
+    worker.shardVerified && Array.isArray(worker.control?.results));
+  if (completed.length !== workers.length) {
+    const byId = new Map(completed.flatMap(worker => worker.control?.results ?? [])
+      .map(result => [String(result.id ?? ''), result]));
+    return manifest.mutations.map(mutation => byId.get(String(mutation.id)))
+      .filter((result): result is UnknownRecord => result !== undefined);
+  }
+  return mergeMutationShards(manifest.mutations, completed.map(worker => ({
+    index: Number(worker.control?.shard?.index),
+    count: Number(worker.control?.shard?.count),
+    mutationIds: worker.control?.shard?.mutationIds ?? [],
+    results: worker.control?.results ?? [],
+  })), { defaultScenario: manifest.scenario });
+}
+
+export function mutationWorkerRequiresSiblingAbort(processResult: {
+  ok: boolean; timedOut?: boolean; error?: Error | null; code?: number | null; signal?: NodeJS.Signals | null;
+},
+  worker: { control: MutationShardControl | null; assigned: unknown } | null): boolean {
+  const outcome = record(worker?.control?.outcome) ? worker.control.outcome : {};
+  if (outcome.kind === 'harness_failure') return true;
+  if (processResult.ok) return false;
+  const checkpoint = record(worker?.control?.checkpoint) ? worker.control.checkpoint : {};
+  const assigned = Array.isArray(worker?.assigned) ? worker.assigned : [];
+  const completed = checkpoint.status === 'complete'
+    && Array.isArray(worker?.control?.results)
+    && worker.control.results.length === assigned.length;
+  return !completed;
+}
+
+async function runParallelMutationRepetition(fixture: ReferenceFixture,
+  args: ReferenceQualificationArgs, context: QualificationContext, id: string,
+  repetition: number, artifactIdentities: UnknownRecord,
+  onCleanBaseline: ((clean: UnknownRecord) => void) | null = null): Promise<UnknownRecord> {
+  const manifest = qualificationMutationManifest(fixture, context, args.mutationIds);
+  if (!Array.isArray(manifest.mutations)
+      || manifest.mutations.length < args.mutationWorkers) {
+    throw new Error(`--mutation-workers cannot exceed ${manifest.mutations?.length ?? 0} mutations`);
+  }
+  const started = Date.now();
+  const clean = await runOnce(fixture, { ...args, mutations: false, mutationWorkers: 1,
+    referenceMutationOnly: false, mutationCheckpoint: null }, context, id, repetition);
+  if (!clean.ok) {
+    return { ...clean, durationMs: Date.now() - started,
+      failures: (Array.isArray(clean.failures) ? clean.failures : [])
+        .map(failure => `clean baseline: ${String(failure)}`),
+      mutations: { caught: 0, total: 0 } };
+  }
+  const baselineBundle = resolve(String(args.artifactDirectory), String(clean.output),
+    `first-build-l${args.level}-grading`, ARTIFACT_FILE.gradeBundle);
+  if (!existsSync(baselineBundle)) {
+    return { ...clean, ok: false, durationMs: Date.now() - started,
+      processError: `clean baseline bundle is missing: ${baselineBundle}`,
+      failures: [`clean baseline bundle is missing: ${baselineBundle}`],
+      outcome: 'incomplete', mutations: { caught: 0, total: 0 } };
+  }
+  if (onCleanBaseline) onCleanBaseline(clean);
+  const remainingMs = started + Number(args.timeoutMs) - Date.now();
+  if (remainingMs <= 0) {
+    return { ...clean, ok: false, durationMs: Date.now() - started,
+      processError: 'mutation qualification exhausted its repetition deadline after the clean baseline',
+      failures: ['mutation qualification exhausted its repetition deadline after the clean baseline'],
+      outcome: 'incomplete', mutations: { caught: 0, total: 0 } };
+  }
+  preflightParallelMutationResources(args);
+  const workerRoot = join(String(args.runsRoot), `r${repetition + 1}-workers`);
+  mkdirSync(workerRoot, { recursive: true });
+  const cancellation = new AbortController();
+  let cancellationReason = null;
+  const cancel = () => {
+    cancellationReason ??= 'parallel mutation qualification was interrupted';
+    cancellation.abort();
+  };
+  process.once('SIGINT', cancel);
+  process.once('SIGTERM', cancel);
+  let workers;
+  try {
+    workers = await Promise.all(Array.from({ length: args.mutationWorkers }, async (_, workerIndex) => {
+      const artifactPath = join(workerRoot, `w${workerIndex + 1}.json`);
+      const logs = { stdout: join(workerRoot, `w${workerIndex + 1}.stdout.log`),
+        stderr: join(workerRoot, `w${workerIndex + 1}.stderr.log`) };
+      const argv = parallelMutationChildArgv(args, context,
+        { artifactPath, baselineBundle, workerIndex,
+          workerCount: args.mutationWorkers });
+      const processResult = await runBounded(process.execPath, argv,
+        { cwd: ROOT, env: process.env, timeoutMs: remainingMs, logs,
+          signal: cancellation.signal, gracefulCancellationMs: 10_000 });
+      const worker = { workerIndex, runIndex: args.runIndex + workerIndex,
+        artifactPath, logs, processResult };
+      const inspected = readParallelMutationWorker(worker.artifactPath, processResult,
+        { ...artifactIdentities, workerIndex, workerCount: args.mutationWorkers }, manifest);
+      if (mutationWorkerRequiresSiblingAbort(processResult, inspected)) {
+        cancellationReason ??= `worker ${workerIndex + 1} failed before usable mutation evidence`;
+        cancellation.abort();
+      }
+      return { ...worker, ...inspected };
+    }));
+  } finally {
+    process.removeListener('SIGINT', cancel);
+    process.removeListener('SIGTERM', cancel);
+  }
+  const inspected: Array<MutationWorkerResult & { workerIndex: number;
+    artifactPath?: string; [key: string]: unknown }> = workers;
+  const failures = inspected.flatMap(worker => worker.failures
+    .map(failure => `worker ${worker.workerIndex + 1}: ${failure}`));
+  if (cancellation.signal.aborted) failures.unshift(String(cancellationReason));
+  let results: Array<{ status?: unknown; [key: string]: unknown }> = [];
+  try {
+    const merged = parallelMutationResults(manifest, inspected);
+    if (Array.isArray(merged)) results = merged;
+  } catch (error) { failures.push(errorMessage(error)); }
+  const representative = clean;
+  const caught = results.filter(result => result.status === 'CAUGHT').length;
+  if (results.length !== manifest.mutations.length) {
+    failures.push(`mutation results are incomplete: ${results.length}/${manifest.mutations.length}`);
+  } else if (caught !== results.length) failures.push('one or more mutations were not cleanly caught');
+  const fingerprints = new Set([clean.fingerprint].filter(Boolean));
+  const images = new Set([clean.imageId, ...inspected.map(worker => worker.run?.imageId)]
+    .filter(Boolean));
+  const harnesses = new Set([clean.harnessSha256Before, clean.harnessSha256After,
+    ...inspected.flatMap(worker =>
+      [worker.run?.harnessSha256Before, worker.run?.harnessSha256After])].filter(Boolean));
+  if (fingerprints.size !== 1) failures.push('clean baseline fingerprint is missing');
+  if (images.size !== 1) failures.push('worker build images differ');
+  if (harnesses.size !== 1) failures.push('worker harness identities differ');
+  return { repetition: repetition + 1,
+    output: relative(String(args.artifactDirectory), workerRoot).replaceAll('\\', '/'),
+    durationMs: Date.now() - started,
+    processError: failures.length ? failures.join('; ') : null,
+    harnessSha256Before: harnesses.size === 1 ? [...harnesses][0] : null,
+    harnessSha256After: harnesses.size === 1 ? [...harnesses][0] : null,
+    ok: failures.length === 0,
+    failures,
+    runId: id,
+    score: representative.score ?? null,
+    imageId: images.size === 1 ? [...images][0] : null,
+    criteria: representative.criteria ?? null,
+    zeroPointCriteria: representative.zeroPointCriteria ?? null,
+    fingerprint: fingerprints.size === 1 ? [...fingerprints][0] : null,
+    outcome: failures.length === 0 ? 'passed' : 'harness_failure',
+    packRuntime: representative.packRuntime ?? null,
+    mutations: { caught, total: results.length },
+    baselineDurationMs: clean.durationMs,
+    baselineOutput: clean.output,
+    baselineHarnessSha256Before: clean.harnessSha256Before,
+    baselineHarnessSha256After: clean.harnessSha256After,
+    workers: inspected.map(worker => ({ index: worker.workerIndex, runIndex: worker.runIndex,
+      artifact: relative(String(args.artifactDirectory),
+        String(worker.artifactPath)).replaceAll('\\', '/'),
+      mutationIds: worker.assigned, ok: worker.failures.length === 0,
+      logs: Object.fromEntries(Object.entries(
+        (record(worker.processResult) ? worker.processResult.logs : null) ?? {})
+        .map(([name, log]) => [name, relative(String(args.artifactDirectory),
+          String(record(log) ? log.path : '')).replaceAll('\\', '/')])) })),
+  };
+}
+
+export function referenceRunFromMutationBaseline(artifactDirectory: string,
+  mutationRun: UnknownRecord, fixture: ReferenceFixture,
+  { release, level, selectedCheckKeys }: {
+    release?: UnknownRecord | null; level?: number; selectedCheckKeys?: string[] | null;
+  }): UnknownRecord {
+  const output = mutationRun.baselineOutput ?? mutationRun.output;
+  const audit = auditReferenceRun(resolve(artifactDirectory, String(output)), fixture,
+    { release, level, selectedCheckKeys });
+  return {
+    repetition: mutationRun.repetition,
+    output,
+    durationMs: mutationRun.baselineDurationMs ?? mutationRun.durationMs,
+    processError: null,
+    harnessSha256Before: mutationRun.baselineHarnessSha256Before
+      ?? mutationRun.harnessSha256Before,
+    harnessSha256After: mutationRun.baselineHarnessSha256After
+      ?? mutationRun.harnessSha256After,
+    ...audit,
+  };
+}
+
+function finalizeQualificationArtifact(artifact: QualificationArtifact,
+  { referenceMutationOnly = false }: { referenceMutationOnly?: boolean } = {}):
+  QualificationArtifact {
+  const complete = artifact.runs.length === artifact.requiredRepetitions;
+  const fingerprints = new Set(artifact.runs.map(run => run.fingerprint).filter(Boolean));
+  const images = new Set(artifact.runs.map(run => run.imageId).filter(Boolean));
+  const harnessHashes = new Set(artifact.runs.flatMap(run =>
+    [run.harnessSha256Before, run.harnessSha256After]).filter(Boolean));
+  artifact.stable = referenceMutationOnly
+    ? complete : complete && fingerprints.size === 1 && artifact.runs.every(run => run.fingerprint);
+  artifact.sameImage = complete && images.size === 1 && artifact.runs.every(run => run.imageId);
+  artifact.sameHarness = complete && harnessHashes.size === 1;
+  artifact.harnessSha256 = artifact.sameHarness ? [...harnessHashes][0] : null;
+  artifact.ok = Boolean(complete
+    && artifact.runs.every(run => run.ok) && artifact.stable && artifact.sameImage
+    && artifact.sameHarness);
+  artifact.completedAt = new Date().toISOString();
+  return artifact;
+}
+
+export function qualificationArtifactsOk(artifact: UnknownRecord,
+  companion: UnknownRecord | null = null): boolean {
+  return artifact?.ok === true && (companion === null || companion?.ok === true);
+}
+
+async function main(): Promise<void> {
+  const args = parseReferenceQualificationArgs(process.argv);
+  const registry = loadReferenceRegistry();
+  const validation = validateReferenceRegistry(registry);
+  if (!validation.ok) throw new Error(`reference registry is invalid:\n${validation.issues.join('\n')}`);
+  if (args.backend === undefined) throw new Error('reference qualification requires a backend');
+  const selection = resolveReferenceSelection(registry,
+    { ...args, backend: args.backend, track: args.track, level: args.level });
+  const fixture = selection.fixture;
+  const inspection = inspectImportedReference(fixture);
+  if (!inspection.ok) throw new Error(`${fixture.id} import is invalid:\n${inspection.failures.join('\n')}`);
+  const context = referenceQualificationContext(fixture, selection.recipe,
+    { level: args.level, featureCatalog: args.featureCatalog });
+  assertReleaseCandidateRepetitions(args, context.calibration);
+  const selectedManifest = args.mutations
+    ? qualificationMutationManifest(fixture, context, args.mutationIds) : null;
+  const runContext = args.mutationIds.length && selectedManifest
+    ? { ...context, selectedCheckKeys: targetedMutationCheckKeys(context, selectedManifest) }
+    : args.selectedCheckKeys.length ? { ...context, selectedCheckKeys: args.selectedCheckKeys }
+      : context;
+
+  const stamp = new Date().toISOString().replace(/[-:.TZ]/g, '').slice(0, 14);
+  const id = `reference-live-${fixture.backend}-${stamp}-${process.pid}`;
+  const paths = referenceQualificationPaths(args, id);
+  if (existsSync(paths.artifactPath)) {
+    throw new Error(`refusing to replace existing qualification artifact: ${paths.artifactPath}`);
+  }
+  if (existsSync(paths.runsRoot)) {
+    throw new Error(`refusing to reuse existing qualification run directory: ${paths.runsRoot}`);
+  }
+  const companionPath = args.releaseCandidate && args.mutations
+    && context.calibration.qualification.referenceRepetitions === args.repetitions
+    ? companionReferenceArtifactPath(paths.artifactPath) : null;
+  if (companionPath && existsSync(companionPath)) {
+    throw new Error(`refusing to replace existing companion reference artifact: ${companionPath}`);
+  }
+  args.artifactDirectory = paths.artifactDirectory;
+  args.runsRoot = paths.runsRoot;
+  if (args.mutations) {
+    args.mutationCheckpointDir ??= join(paths.artifactDirectory,
+      `${basename(paths.artifactPath, extname(paths.artifactPath))}.mutation-checkpoints`);
+    mkdirSync(String(args.mutationCheckpointDir), { recursive: true });
+    if (args.mutationWorkers === 1 && !args.mutationCheckpoint) {
+      args.mutationCheckpoint = join(String(args.mutationCheckpointDir),
+        `${args.backend}-worker-1.json`);
+    }
+  }
+  const selectedReference = context.calibration.references.entries.find(entry =>
+    entry.backend === fixture.backend && entry.id === fixture.id);
+  const selectedMutation = args.mutations && selectedManifest
+    ? { ...context.calibration.mutations.find(entry => entry.backend === fixture.backend),
+      backend: fixture.backend,
+      executionSha256: mutationExecutionSha256(selectedManifest) }
+    : null;
+  const qualificationRelease = referenceQualificationRelease(runContext.binding.release,
+    runContext.selectedCheckKeys ?? []);
+  const qualificationScope = qualificationScopeIdentity({
+    kind: args.mutations ? 'mutation' : 'reference',
+    release: qualificationRelease,
+    stack: fixture.backend,
+    reference: selectedReference,
+    mutation: selectedMutation,
+    stackBenchRoot: ROOT,
+  });
+  const artifact: QualificationArtifact = {
+    id, kind: 'reference_qualification', fixture: fixture.id,
+    identities: emptyArtifactIdentities({
+      fixture: { id: fixture.id, sha256: fixture.imported?.sourceSha256, state: fixture.status },
+      recipe: { id: context.binding.release.id, version: context.binding.release.version,
+        sha256: context.binding.release.contentSha256, state: context.binding.release.state },
+      calibration: { ...(record(context.identity) ? context.identity : {}),
+        state: context.calibration.state },
+      stackAdapter: { id: fixture.backend },
+    }),
+    fixtureSha256: fixture.imported?.sourceSha256, requiredRepetitions: args.repetitions,
+    startedAt: new Date().toISOString(), isolation: 'docker',
+    runner: controllerRunner(), qualificationScope, mutationControl: args.mutations,
+    diagnostic: args.mutationIds.length > 0 || args.selectedCheckKeys.length > 0,
+    qualifiedCheckKeys: [...(runContext.selectedCheckKeys ?? [])].sort(),
+    ...(runContext.featureCatalog ? { featureCatalog: runContext.featureCatalog } : {}), runs: [] };
+  const companion: QualificationArtifact | null = companionPath ? {
+    ...artifact,
+    id: `${id}-reference`,
+    qualificationScope: qualificationScopeIdentity({
+      kind: 'reference', release: qualificationRelease, stack: fixture.backend,
+      reference: selectedReference, stackBenchRoot: ROOT,
+    }),
+    mutationControl: false,
+    diagnostic: false,
+    runs: [],
+  } : null;
+  const artifactIdentities: UnknownRecord = record(artifact.identities)
+    ? artifact.identities : {};
+  for (let repetition = 0; repetition < args.repetitions; repetition++) {
+    console.log(`\nqualifying ${fixture.id}: clean run ${repetition + 1}/${args.repetitions}`);
+    let companionCaptured = false;
+    const captureCompanion = (cleanRun: UnknownRecord): void => {
+      if (!companion || companionCaptured) return;
+      companion.runs.push(referenceRunFromMutationBaseline(String(args.artifactDirectory), cleanRun,
+        fixture, { release: context.binding.release, level: args.level,
+          selectedCheckKeys: runContext.selectedCheckKeys ?? null }));
+      finalizeQualificationArtifact(companion);
+      writeRunJson(String(companionPath), companion);
+      companionCaptured = true;
+    };
+    const run = args.releaseCandidate || args.mutationWorkers > 1
+      ? await runParallelMutationRepetition(fixture, args, runContext, id, repetition,
+        artifactIdentities, captureCompanion)
+      : await runOnce(fixture, args, runContext, id, repetition);
+    artifact.runs.push(run);
+    captureCompanion(run);
+    // Repetition measures stability of a passing baseline. Repeating a setup or
+    // infrastructure failure only wastes time and produces duplicate noise.
+    if (!run.ok) break;
+  }
+  finalizeQualificationArtifact(artifact,
+    { referenceMutationOnly: Boolean(args.referenceMutationOnly) });
+  writeRunJson(paths.artifactPath, artifact);
+  if (companion) {
+    finalizeQualificationArtifact(companion);
+    writeRunJson(String(companionPath), companion);
+  }
+  const ok = qualificationArtifactsOk(artifact, companion);
+  console.log(JSON.stringify({ ok, artifact: paths.artifactPath, stable: artifact.stable,
+    sameImage: artifact.sameImage, sameHarness: artifact.sameHarness, diagnostic: artifact.diagnostic,
+    ...(companion ? { referenceArtifact: companionPath, referenceOk: companion.ok } : {}),
+    runs: artifact.runs.map(({ repetition, ok, score, criteria,
+      zeroPointCriteria, mutations, failures }) => ({ repetition, ok, score, criteria, zeroPointCriteria,
+      mutations, failures })) }, null, 2));
+  if (!ok) process.exitCode = 1;
+}
+
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+  main().catch(error => { console.error(error.stack ?? error.message); process.exitCode = 2; });
+}
diff --git a/tools/stack-bench/src/references/reference-qualification-audit.ts b/tools/stack-bench/src/references/reference-qualification-audit.ts
new file mode 100644
index 00000000000..24b5b043d4b
--- /dev/null
+++ b/tools/stack-bench/src/references/reference-qualification-audit.ts
@@ -0,0 +1,267 @@
+import { createHash } from 'node:crypto';
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+import { criterionEvidence, evidencePassed } from '../evidence/check-evidence.js';
+import { ARTIFACT_FILE, readArtifactPayload } from '../evidence/artifacts.js';
+
+import type { ReferenceFixture } from './reference-fixtures.js';
+
+type UnknownRecord = Record<string, unknown>;
+
+interface RunLevelResult {
+  level: number;
+  graded?: boolean;
+  contractPass?: boolean;
+  score?: number;
+  max?: number;
+  criteria?: UnknownRecord[];
+  [key: string]: unknown;
+}
+
+interface LeasePayload {
+  runId?: string;
+  state?: string;
+  resources?: {
+    buildContainer?: { running?: boolean; [key: string]: unknown } | null;
+    locks?: Array<{ releasedAt?: string | null; [key: string]: unknown }>;
+    [key: string]: unknown;
+  };
+  [key: string]: unknown;
+}
+
+interface RunPayload {
+  setup?: { isolation?: { mode?: string; image?: string; imageId?: string } };
+  outcome?: { kind?: string };
+  levels?: RunLevelResult[];
+  mutationControl?: { ok?: boolean; [key: string]: unknown };
+  backendLease?: LeasePayload | null;
+  [key: string]: unknown;
+}
+
+interface BundlePayload {
+  selection?: {
+    recipe?: UnknownRecord;
+    checks?: UnknownRecord[];
+    reportedChecks?: string[];
+    [key: string]: unknown;
+  };
+  recipeRelease?: { contentSha256?: string; [key: string]: unknown };
+  [key: string]: unknown;
+}
+
+interface BundleSuite {
+  features?: Array<{ id?: string; criteria?: UnknownRecord[]; [key: string]: unknown }>;
+  [key: string]: unknown;
+}
+
+interface MutationControlPayload {
+  ok?: boolean;
+  fixtureSha256?: string;
+  mutations?: UnknownRecord[];
+  [key: string]: unknown;
+}
+
+const record = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object';
+
+const errorMessage = (error: unknown): string =>
+  error instanceof Error ? error.message : String(error);
+
+export function auditReferenceRun(output: string, fixture: ReferenceFixture,
+  { requireMutationControl = false, release = null, level = fixture.level,
+    selectedCheckKeys = null }: {
+      requireMutationControl?: boolean; release?: UnknownRecord | null;
+      level?: number; selectedCheckKeys?: string[] | null;
+    } = {}): { ok: boolean; failures: string[]; [key: string]: unknown } {
+  const runPath = join(output, ARTIFACT_FILE.run);
+  const bundlePath = join(output, 'grading', ARTIFACT_FILE.gradeBundle);
+  if (!existsSync(runPath) || !existsSync(bundlePath)) {
+    return { ok: false, failures: [
+      `${ARTIFACT_FILE.run} or grading/${ARTIFACT_FILE.gradeBundle} is missing`,
+    ] };
+  }
+  let run: RunPayload;
+  let bundle: BundlePayload;
+  try {
+    run = readArtifactPayload<RunPayload>(runPath, { expectedKind: 'benchmark_run' });
+    bundle = readArtifactPayload<BundlePayload>(bundlePath, { expectedKind: 'grade_bundle' });
+  } catch (error) {
+    return { ok: false, failures: [`qualification evidence is invalid: ${errorMessage(error)}`] };
+  }
+  const failures = [];
+  if (!release?.contentSha256 || !Array.isArray(release.checkCatalog)
+      || release.checkCatalog.length === 0) {
+    failures.push('exact recipe release was not supplied to the qualification audit');
+  }
+  if (run.backend !== fixture.backend || run.track !== fixture.track) failures.push('run identity does not match fixture');
+  if (run.setup?.isolation?.mode !== 'container') failures.push('run was not isolated in Docker');
+  if (run.outcome?.kind !== 'passed') failures.push(`run outcome is ${run.outcome?.kind ?? 'missing'}`);
+  const levelResult = run.levels?.find(candidate => candidate.level === level);
+  if (!levelResult) failures.push(`L${level} result is missing`);
+  else {
+    if (!levelResult.graded) failures.push(`L${level} was not graded`);
+    if (!levelResult.contractPass) failures.push(`L${level} contract lint failed`);
+    if (levelResult.score !== levelResult.max) {
+      failures.push(`L${level} score is ${levelResult.score}/${levelResult.max}`);
+    }
+  }
+
+  const criteria = [];
+  const suites: Record<string, BundleSuite> = record(bundle.suites)
+    ? bundle.suites as Record<string, BundleSuite> : {};
+  for (const [suiteId, suite] of Object.entries(suites)) {
+    if (suiteId === 'lint') continue;
+    for (const feature of suite.features ?? []) {
+      const setupFailure = (feature.criteria ?? []).map(criterionEvidence)
+        .find(evidence => evidence.phase === 'setup' && !evidencePassed(evidence));
+      if (setupFailure) failures.push(`${suiteId}/${feature.id} setup failed: ${setupFailure.summary}`);
+      for (const criterion of feature.criteria ?? []) {
+        const key = `${suiteId}/${feature.id}/${criterion.id}`;
+        const evidence = criterionEvidence(criterion);
+        criteria.push({ key, stableKey: criterion.stableKey ?? null,
+          points: criterion.points ?? 0, passed: evidencePassed(evidence), status: evidence.status });
+        if (!evidencePassed(evidence)) failures.push(`${key} did not pass`);
+      }
+    }
+  }
+  if (!criteria.length) failures.push('no scenario criteria were recorded');
+  if (release) {
+    const expectedRecipe = { id: release.id, version: release.version,
+      contentSha256: release.contentSha256 };
+    const actualRecipe = bundle.selection?.recipe;
+    if (actualRecipe?.id !== expectedRecipe.id || actualRecipe?.version !== expectedRecipe.version
+        || actualRecipe?.contentSha256 !== expectedRecipe.contentSha256) {
+      failures.push('grading bundle recipe identity does not match the requested release');
+    }
+    if (bundle.recipeRelease?.contentSha256 !== release.contentSha256) {
+      failures.push('grading bundle release document does not match the requested release');
+    }
+    const fields = ['stableKey', 'points', 'source', 'executionId', 'featureId',
+      'criterionId', 'packId', 'checkGroupId'];
+    const shape = (check: unknown): { stableKey: string; [field: string]: unknown } => {
+      const value = record(check) ? check : {};
+      const shaped = Object.fromEntries(fields.map(field => [field, value[field] ?? null]));
+      return { ...shaped, stableKey: String(value.stableKey ?? '') };
+    };
+    const order = (checks: readonly unknown[]): Array<{ stableKey: string }> =>
+      checks.map(shape).sort((a, b) => a.stableKey.localeCompare(b.stableKey));
+    const catalog: Array<{ stableKey: string }> = Array.isArray(release.checkCatalog)
+      ? release.checkCatalog : [];
+    const selected = selectedCheckKeys === null ? catalog : (() => {
+      const requested = new Set(selectedCheckKeys);
+      const checks = catalog.filter(check => requested.delete(check.stableKey));
+      if (requested.size) failures.push(`selected checks are absent from the recipe: ${
+        [...requested].sort().join(', ')}`);
+      return checks;
+    })();
+    const expectedChecks = order(selected);
+    const selectedChecks = Array.isArray(bundle.selection?.checks)
+      ? order(bundle.selection.checks) : null;
+    if (!selectedChecks || JSON.stringify(selectedChecks) !== JSON.stringify(expectedChecks)) {
+      failures.push('graded check catalog does not match the requested release');
+    }
+    const expectedKeys = expectedChecks.map(check => check.stableKey);
+    const reportedKeys = [...(bundle.selection?.reportedChecks ?? [])].sort();
+    const evidenceKeys = criteria.map(check => check.stableKey).sort();
+    if (JSON.stringify(reportedKeys) !== JSON.stringify(expectedKeys)
+        || JSON.stringify(evidenceKeys) !== JSON.stringify(expectedKeys)) {
+      failures.push('graded check evidence does not cover the exact requested release');
+    }
+  }
+  const lease = run.backendLease;
+  if (lease?.state !== 'released') failures.push('backend lease was not released');
+  if (lease?.resources?.buildContainer?.running !== false) failures.push('leased build container was not recorded as removed');
+  if (!lease?.resources?.locks?.length) failures.push('run recorded no resource lock');
+  for (const lock of lease?.resources?.locks ?? []) {
+    if (!lock.releasedAt) failures.push(`resource lock ${lock.key ?? lock.path} was not released`);
+  }
+  let mutationControl = null;
+  if (requireMutationControl) {
+    const mutationPath = join(output, ARTIFACT_FILE.mutationControl);
+    if (!existsSync(mutationPath)) failures.push(`${ARTIFACT_FILE.mutationControl} is missing`);
+    else {
+      mutationControl = readArtifactPayload(mutationPath, { expectedKind: 'mutation_control' });
+      if (run.mutationControl?.ok !== true || mutationControl.ok !== true) {
+        failures.push('mutation control did not pass');
+      }
+      if (mutationControl.fixtureSha256 !== fixture.imported?.sourceSha256) {
+        failures.push('mutation control targets a different fixture hash');
+      }
+      if (!Array.isArray(mutationControl.results) || mutationControl.results.length === 0) {
+        failures.push('mutation control recorded no mutants');
+      } else {
+        for (const mutant of mutationControl.results) {
+          if (mutant.status !== 'CAUGHT') failures.push(`${mutant.id ?? '<unnamed mutant>'} is ${mutant.status ?? 'missing a status'}`);
+        }
+      }
+      if (Number(mutationControl.baseline?.total) !== Number(mutationControl.baseline?.max)) {
+        failures.push('mutation baseline was not fully passing');
+      }
+    }
+  }
+  const fingerprint = createHash('sha256').update(JSON.stringify(criteria)).digest('hex');
+  return { ok: failures.length === 0, failures, runId: run.id,
+    score: levelResult ? `${levelResult.score}/${levelResult.max}` : null,
+    imageId: run.setup?.isolation?.imageId ?? null, criteria: criteria.length,
+    zeroPointCriteria: criteria.filter(criterion => criterion.points === 0).length, fingerprint,
+    outcome: run.outcome?.kind ?? null, packRuntime: bundle.packRuntime ?? null,
+    mutations: mutationControl?.summary ?? null };
+}
+
+export function auditMutationWorkerRun(output: string, fixture: ReferenceFixture):
+  { ok: boolean; failures: string[]; [key: string]: unknown } {
+  const runPath = join(output, ARTIFACT_FILE.run);
+  const controlPath = join(output, ARTIFACT_FILE.mutationControl);
+  if (!existsSync(runPath) || !existsSync(controlPath)) {
+    return { ok: false, failures: [
+      `${ARTIFACT_FILE.run} or ${ARTIFACT_FILE.mutationControl} is missing`,
+    ] };
+  }
+  let run: RunPayload;
+  let control: MutationControlPayload;
+  try {
+    run = readArtifactPayload<RunPayload>(runPath, { expectedKind: 'benchmark_run' });
+    control = readArtifactPayload<MutationControlPayload>(controlPath,
+      { expectedKind: 'mutation_control' });
+  } catch (error) {
+    return { ok: false, failures: [`mutation evidence is invalid: ${errorMessage(error)}`] };
+  }
+  const failures = [];
+  if (run.backend !== fixture.backend || run.track !== fixture.track) {
+    failures.push('run identity does not match fixture');
+  }
+  if (run.setup?.isolation?.mode !== 'container') failures.push('run was not isolated in Docker');
+  if (run.outcome?.kind !== 'passed') failures.push(`run outcome is ${run.outcome?.kind ?? 'missing'}`);
+  if (run.mutationControl?.ok !== true || control.ok !== true) {
+    failures.push('mutation control did not pass');
+  }
+  if (control.fixtureSha256 !== fixture.imported?.sourceSha256) {
+    failures.push('mutation control targets a different fixture hash');
+  }
+  if (!Array.isArray(control.results) || control.results.length === 0) {
+    failures.push('mutation control recorded no mutants');
+  } else {
+    for (const mutant of control.results) {
+      if (mutant.status !== 'CAUGHT') {
+        failures.push(`${mutant.id ?? '<unnamed mutant>'} is ${mutant.status ?? 'missing a status'}`);
+      }
+    }
+  }
+  const baseline = record(control.baseline) ? control.baseline : {};
+  if (Number(baseline.total) !== Number(baseline.max)) {
+    failures.push('mutation baseline was not fully passing');
+  }
+  const lease = run.backendLease;
+  if (lease?.state !== 'released') failures.push('backend lease was not released');
+  if (lease?.resources?.buildContainer?.running !== false) {
+    failures.push('leased build container was not recorded as removed');
+  }
+  if (!lease?.resources?.locks?.length
+      || lease.resources.locks.some(lock => !lock.releasedAt)) {
+    failures.push('resource lock release evidence is incomplete');
+  }
+  return { ok: failures.length === 0, failures, runId: run.id,
+    imageId: run.setup?.isolation?.imageId ?? null, outcome: run.outcome?.kind ?? null,
+    mutations: control.summary ?? null, score: null, criteria: null,
+    zeroPointCriteria: null, fingerprint: null, packRuntime: null };
+}
diff --git a/tools/stack-bench/src/references/reference-selection.ts b/tools/stack-bench/src/references/reference-selection.ts
new file mode 100644
index 00000000000..5623780e10f
--- /dev/null
+++ b/tools/stack-bench/src/references/reference-selection.ts
@@ -0,0 +1,30 @@
+import { selectReferenceFixture } from './reference-fixtures.js';
+import type { ReferenceFixture, ReferenceRegistry } from './reference-fixtures.js';
+import { resolveRecipeRelease } from '../composition/recipe-release.js';
+import type { RecipeBinding } from '../composition/recipe-release.js';
+import { loadTrack } from '../composition/tracks.js';
+
+export interface ReferenceSelectionArgs {
+  backend: string;
+  track: string;
+  level: number;
+  recipe?: string | { id: string; version: string; contentSha256?: string } | null;
+}
+
+export interface ReferenceSelection {
+  binding: RecipeBinding;
+  fixture: ReferenceFixture;
+  recipe: string;
+}
+
+export function resolveReferenceSelection(
+  registry: ReferenceRegistry,
+  args: ReferenceSelectionArgs,
+): ReferenceSelection {
+  const track = loadTrack(args.track);
+  const binding = resolveRecipeRelease(track, args.level, args.recipe ?? null);
+  if (!binding) throw new Error(`${args.track} L${args.level} has no recipe release`);
+  const recipe = `${binding.release.id}@${binding.release.version}`;
+  const fixture = selectReferenceFixture(registry, { ...args, recipe });
+  return { binding, fixture, recipe };
+}
diff --git a/tools/stack-bench/src/releases/release-bundle.ts b/tools/stack-bench/src/releases/release-bundle.ts
new file mode 100644
index 00000000000..f78cc0e5b78
--- /dev/null
+++ b/tools/stack-bench/src/releases/release-bundle.ts
@@ -0,0 +1,160 @@
+#!/usr/bin/env node
+
+import { spawnSync } from 'node:child_process';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, renameSync, rmSync,
+  statSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve, sep } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+import { sha256 } from '../evidence/provenance.js';
+import { parseExactImageReference } from '../runtime/container-image.js';
+import { STACK_BENCH_RUNNER_PLATFORM } from '../runtime/runner-environment.js';
+import { validateReleaseManifest, validateSpdxImageSbom } from './release-manifest.js';
+import type { ReleaseFileRole } from './release-manifest.js';
+
+interface ImageReference { reference: string; digest: string }
+interface RunOptions { timeout?: number }
+export type BundleRunCommand = (executable: string, args: string[], options?: RunOptions) => void;
+interface GenerateSbomOptions {
+  reference: string;
+  outputPath: string;
+  platform?: string;
+  docker?: string;
+  runCommand?: BundleRunCommand;
+}
+interface ReleaseSpecificationFile { path: string; role: ReleaseFileRole }
+type UnknownRecord = Record<string, unknown>;
+
+function exactImage(reference: string): ImageReference {
+  const image = parseExactImageReference(reference);
+  if (!image) throw new Error('image must be a normalized registry reference at an exact @sha256: digest');
+  return { reference: image.reference, digest: image.id.slice('sha256:'.length) };
+}
+
+function contained(root: string, relative: unknown): string {
+  if (typeof relative !== 'string' || !relative || relative.startsWith('/')
+    || /^[A-Za-z]:[\\/]/.test(relative) || relative.includes('\\')
+    || relative.split('/').includes('..')) throw new Error(`invalid bundle path: ${relative}`);
+  const target = resolve(root, relative);
+  if (!target.startsWith(`${root}${sep}`)) throw new Error(`bundle path escapes root: ${relative}`);
+  return target;
+}
+
+function run(executable: string, args: string[], { timeout = 600_000 }: RunOptions = {}): void {
+  const outcome = spawnSync(executable, args, { encoding: 'utf8', windowsHide: true, timeout,
+    maxBuffer: 8 * 1024 * 1024 });
+  if (outcome.error) throw outcome.error;
+  if (outcome.status !== 0) throw new Error((outcome.stderr || outcome.stdout
+    || `${executable} exited ${outcome.status}`).trim().slice(0, 4096));
+}
+
+export function generateSpdxImageSbom({ reference, outputPath,
+  platform = STACK_BENCH_RUNNER_PLATFORM,
+  docker = 'docker', runCommand = run }: GenerateSbomOptions) {
+  const image = exactImage(reference);
+  if (platform !== STACK_BENCH_RUNNER_PLATFORM) {
+    throw new Error(`v1 release SBOM platform must be ${STACK_BENCH_RUNNER_PLATFORM}`);
+  }
+  const output = resolve(outputPath);
+  if (existsSync(output)) throw new Error(`refusing to overwrite existing SBOM: ${output}`);
+  mkdirSync(dirname(output), { recursive: true });
+  const temporary = mkdtempSync(join(dirname(output), '.stack-bench-sbom-'));
+  const staged = join(temporary, 'image.spdx.json');
+  try {
+    runCommand(docker, ['scout', 'sbom', '--format', 'spdx', '--platform', platform,
+      '--output', staged, `registry://${reference}`]);
+    const document = JSON.parse(readFileSync(staged, 'utf8'));
+    validateSpdxImageSbom(document, { ...image, sbomPath: output });
+    renameSync(staged, output);
+    return { path: output, sha256: sha256(readFileSync(output)), bytes: statSync(output).size,
+      image: reference, platform };
+  } finally {
+    rmSync(temporary, { recursive: true, force: true });
+  }
+}
+
+export function materializeReleaseManifest(specification: unknown, root: string) {
+  if (!specification || typeof specification !== 'object' || Array.isArray(specification)
+    || !Array.isArray((specification as UnknownRecord).files)) {
+    throw new Error('release specification must contain a files array');
+  }
+  const record = specification as UnknownRecord & { files: unknown[] };
+  const bundleRoot = realpathSync(root);
+  const files = record.files.map((file, index) => {
+    if (!file || typeof file !== 'object' || Array.isArray(file)
+      || Object.keys(file).some(key => !['path', 'role'].includes(key))) {
+      throw new Error(`release specification files[${index}] accepts only path and role`);
+    }
+    const specificationFile = file as Partial<ReleaseSpecificationFile>;
+    if (typeof specificationFile.path !== 'string' || typeof specificationFile.role !== 'string') {
+      throw new Error(`release specification files[${index}] accepts only path and role`);
+    }
+    const target = contained(bundleRoot, specificationFile.path);
+    let actual: string;
+    try { actual = realpathSync(target); }
+    catch { throw new Error(`release file is missing: ${specificationFile.path}`); }
+    if (!actual.startsWith(`${bundleRoot}${sep}`)) {
+      throw new Error(`release file escapes through a symlink: ${specificationFile.path}`);
+    }
+    const stat = statSync(actual);
+    if (!stat.isFile()) throw new Error(`release file is not regular: ${specificationFile.path}`);
+    const content = readFileSync(actual);
+    return { path: specificationFile.path, role: specificationFile.role,
+      sha256: sha256(content), bytes: stat.size };
+  });
+  return validateReleaseManifest({ ...record, files });
+}
+
+function options<T extends string>(args: string[], allowed: readonly T[]): Record<T, string> {
+  const parsed: Partial<Record<T, string>> = {};
+  for (let index = 0; index < args.length; index += 2) {
+    const flag = args[index];
+    const value = args[index + 1];
+    if (!flag || !allowed.includes(flag as T)) throw new Error(`unknown option ${flag}`);
+    if (Object.hasOwn(parsed, flag)) throw new Error(`duplicate option ${flag}`);
+    if (!value || value.startsWith('--')) throw new Error(`missing value for ${flag}`);
+    parsed[flag as T] = value;
+  }
+  for (const flag of allowed) if (!parsed[flag]) throw new Error(`missing ${flag}`);
+  return parsed as Record<T, string>;
+}
+
+function usage(): string {
+  return 'Usage:\n'
+    + '  node dist/src/releases/release-bundle.js sbom <image@sha256:digest> --output <file>\n'
+    + '  node dist/src/releases/release-bundle.js assemble <release-spec.json> --root <bundle-dir> --output <release.json>';
+}
+
+function main(): void {
+  const [command, subject, ...args] = process.argv.slice(2);
+  if (command === 'sbom' && subject) {
+    const parsed = options(args, ['--output'] as const);
+    console.log(JSON.stringify(generateSpdxImageSbom({ reference: subject,
+      outputPath: parsed['--output'] }), null, 2));
+    return;
+  }
+  if (command === 'assemble' && subject) {
+    const parsed = options(args, ['--root', '--output'] as const);
+    const root = parsed['--root'];
+    const output = resolve(parsed['--output']);
+    const manifest = materializeReleaseManifest(JSON.parse(readFileSync(subject, 'utf8')), root);
+    const bundleRoot = realpathSync(root);
+    if (!output.startsWith(`${bundleRoot}${sep}`)) throw new Error('release manifest output must be inside bundle root');
+    if (existsSync(output)) throw new Error(`refusing to overwrite release manifest: ${output}`);
+    mkdirSync(dirname(output), { recursive: true });
+    writeFileSync(output, `${JSON.stringify(manifest, null, 2)}\n`, { flag: 'wx' });
+    console.log(JSON.stringify({ path: output, id: manifest.id, version: manifest.version,
+      state: manifest.state, files: manifest.files.length }, null, 2));
+    return;
+  }
+  throw new Error(usage());
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  try { main(); }
+  catch (error: unknown) {
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(message === usage() ? message : `release-bundle: ${message}`);
+    process.exitCode = 2;
+  }
+}
diff --git a/tools/stack-bench/src/releases/release-manifest.ts b/tools/stack-bench/src/releases/release-manifest.ts
new file mode 100644
index 00000000000..54a496b1144
--- /dev/null
+++ b/tools/stack-bench/src/releases/release-manifest.ts
@@ -0,0 +1,371 @@
+#!/usr/bin/env node
+
+import { spawnSync } from 'node:child_process';
+import { isDeepStrictEqual } from 'node:util';
+import { readFileSync, realpathSync, statSync } from 'node:fs';
+import { resolve, sep } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { z } from 'zod';
+
+import { sha256 } from '../evidence/provenance.js';
+import { parseExactImageReference } from '../runtime/container-image.js';
+import { STACK_BENCH_RUNNER_PLATFORM } from '../runtime/runner-environment.js';
+import { isExactSemanticVersion } from '../semantic-version.js';
+import { formatZodError } from '../zod-error.js';
+
+export const RELEASE_MANIFEST_SCHEMA_VERSION = 2;
+export type ReleaseState = 'candidate' | 'qualified';
+export type ReleaseImageRole = 'controller' | 'build-sandbox' | 'postgres' | 'mongodb';
+export type ReleaseFileRole = 'compose' | 'dependency' | 'operator-guide' | 'public-key'
+  | 'sbom' | 'secrets-template' | 'support-policy';
+
+export interface ReleaseImage {
+  id: string;
+  role: ReleaseImageRole;
+  reference: string;
+  digest: string;
+  platform: typeof STACK_BENCH_RUNNER_PLATFORM;
+  sbomPath: string;
+}
+
+export interface ReleaseFile {
+  path: string;
+  role: ReleaseFileRole;
+  sha256: string;
+  bytes: number;
+}
+
+export interface ReleaseSigning {
+  scheme: 'cosign-public-key-v1';
+  publicKeyPath: string;
+  manifestBundlePath: string;
+}
+
+export interface ReleaseManifest {
+  schemaVersion: typeof RELEASE_MANIFEST_SCHEMA_VERSION;
+  id: string;
+  version: string;
+  state: ReleaseState;
+  sourceRevision: string;
+  sourceSha256: string;
+  supportedRunner: { os: 'linux'; architecture: 'amd64'; stateRoot: string;
+    networkMode: 'host'; dockerSocket: true };
+  images: ReleaseImage[];
+  files: ReleaseFile[];
+  outboundDestinations: Array<{ owner: string; url: string }>;
+  secrets: Array<{ id: string; adapter: string; composeTarget: string; required: boolean }>;
+  signing: ReleaseSigning | null;
+}
+
+type UnknownRecord = Record<string, unknown>;
+export interface CommandResult { ok: boolean; detail?: string }
+export type RunCommand = (executable: string, args: string[]) => unknown;
+export interface VerifyReleaseOptions {
+  manifestPath?: string;
+  trustedKeyPath?: string;
+  cosignPath?: string;
+  runCommand?: RunCommand;
+}
+
+interface FileVerificationResult {
+  path: string;
+  ok: boolean;
+  reason?: string;
+  check?: 'spdx-image-binding';
+}
+
+interface ContainedFile {
+  path: string;
+  ok: boolean;
+  reason?: string;
+}
+
+const IMAGE_ROLES = new Set<ReleaseImageRole>(['controller', 'build-sandbox', 'postgres', 'mongodb']);
+const REQUIRED_IMAGE_ROLES = Object.freeze([...IMAGE_ROLES]);
+const REQUIRED_FILE_ROLES = Object.freeze(['compose', 'dependency', 'operator-guide',
+  'secrets-template', 'support-policy']);
+const HASH = /^[a-f0-9]{64}$/;
+const ID = /^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$/;
+const object = (value: unknown): value is UnknownRecord => value !== null
+  && typeof value === 'object' && !Array.isArray(value);
+
+const relativePathSchema = z.string().min(1).refine(value => !value.startsWith('/')
+  && !/^[A-Za-z]:[\\/]/.test(value) && !value.split(/[\\/]/).includes('..')
+  && !value.includes('\\'), 'must be a normalized relative POSIX path');
+const hashSchema = z.string().regex(HASH, 'must be a SHA-256');
+const idSchema = z.string().regex(ID, 'is invalid');
+const imageSchema = z.strictObject({
+  id: idSchema,
+  role: z.enum(['controller', 'build-sandbox', 'postgres', 'mongodb']),
+  reference: z.string(),
+  digest: hashSchema,
+  platform: z.literal(STACK_BENCH_RUNNER_PLATFORM),
+  sbomPath: relativePathSchema,
+});
+const fileSchema = z.strictObject({
+  path: relativePathSchema,
+  role: z.enum(['compose', 'dependency', 'operator-guide', 'public-key', 'sbom',
+    'secrets-template', 'support-policy']),
+  sha256: hashSchema,
+  bytes: z.number().int().nonnegative().safe(),
+});
+const signingSchema = z.strictObject({
+  scheme: z.literal('cosign-public-key-v1'),
+  publicKeyPath: relativePathSchema,
+  manifestBundlePath: relativePathSchema,
+});
+const releaseManifestSchema = z.strictObject({
+  schemaVersion: z.literal(RELEASE_MANIFEST_SCHEMA_VERSION),
+  id: idSchema,
+  version: z.string().refine(isExactSemanticVersion, 'is invalid'),
+  state: z.enum(['candidate', 'qualified']),
+  sourceRevision: z.string().regex(/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/,
+    'must be a 40- or 64-character commit id'),
+  sourceSha256: hashSchema,
+  supportedRunner: z.strictObject({
+    os: z.literal('linux'),
+    architecture: z.literal('amd64'),
+    stateRoot: z.string().startsWith('/'),
+    networkMode: z.literal('host'),
+    dockerSocket: z.literal(true),
+  }),
+  images: z.array(imageSchema),
+  files: z.array(fileSchema),
+  outboundDestinations: z.array(z.strictObject({
+    owner: idSchema,
+    url: z.url().refine(value => new URL(value).protocol === 'https:', 'must be HTTPS'),
+  })),
+  secrets: z.array(z.strictObject({
+    id: idSchema,
+    adapter: idSchema,
+    composeTarget: z.string().refine(value => value.startsWith('/run/secrets/')
+      && !value.split('/').includes('..'), 'must be under /run/secrets'),
+    required: z.boolean(),
+  })),
+  signing: signingSchema.nullable(),
+});
+
+function unique<T>(items: T[], key: (item: T) => unknown, at: string): void {
+  const seen = new Set<unknown>();
+  for (const [index, item] of items.entries()) {
+    const value = key(item);
+    if (seen.has(value)) throw new Error(`${at}[${index}] duplicates ${value}`);
+    seen.add(value);
+  }
+}
+
+export function validateReleaseManifest(value: unknown,
+  { source = 'release manifest' }: { source?: string } = {}): ReleaseManifest {
+  const parsed = releaseManifestSchema.safeParse(value);
+  if (!parsed.success) throw new Error(formatZodError(parsed.error, source));
+  const manifest = parsed.data;
+  manifest.images.forEach((image, index) => {
+    const at = `${source}.images[${index}]`;
+    const reference = parseExactImageReference(image.reference);
+    if (!reference || reference.id !== `sha256:${image.digest}`) {
+      throw new Error(`${at}.reference must be a normalized registry reference at its exact digest`);
+    }
+  });
+  const images = manifest.images;
+  unique(images, item => item.id, `${source}.images`);
+  unique(images, item => item.role, `${source}.images`);
+  unique(images, item => item.sbomPath, `${source}.images SBOM paths`);
+  for (const role of REQUIRED_IMAGE_ROLES) {
+    if (!images.some(image => image.role === role)) throw new Error(`${source}.images is missing ${role}`);
+  }
+
+  const files = manifest.files;
+  unique(files, item => item.path, `${source}.files`);
+  for (const role of REQUIRED_FILE_ROLES) {
+    if (!files.some(file => file.role === role)) throw new Error(`${source}.files is missing ${role}`);
+  }
+  for (const image of images) {
+    if (!files.some(file => file.path === image.sbomPath && file.role === 'sbom')) {
+      throw new Error(`${source}: ${image.id} SBOM is absent from files`);
+    }
+  }
+
+  if (manifest.state === 'candidate') {
+    if (manifest.signing !== null) throw new Error(`${source}.signing must be null for a candidate`);
+    if (files.some(file => file.role === 'public-key')) {
+      throw new Error(`${source}.files cannot claim a signing key for a candidate`);
+    }
+  } else {
+    const signing = manifest.signing;
+    if (!signing) throw new Error(`${source}.signing must be an object`);
+    if (!files.some(file => file.path === signing.publicKeyPath
+      && file.role === 'public-key')) {
+      throw new Error(`${source}.signing public key is absent from files`);
+    }
+    if (files.some(file => file.path === signing.manifestBundlePath)) {
+      throw new Error(`${source}.signing manifest bundle cannot checksum itself`);
+    }
+  }
+
+  unique(manifest.outboundDestinations, item => `${item.owner}:${item.url}`,
+    `${source}.outboundDestinations`);
+  unique(manifest.secrets, item => item.id, `${source}.secrets`);
+  return manifest as ReleaseManifest;
+}
+
+function contained(root: string, relative: string): string {
+  const target = resolve(root, relative);
+  if (target === root || !target.startsWith(`${root}${sep}`)) throw new Error(`release file escapes bundle root: ${relative}`);
+  return target;
+}
+
+function regularContainedFile(root: string, relative: string): ContainedFile {
+  const path = contained(root, relative);
+  let actualPath;
+  try { actualPath = realpathSync(path); }
+  catch { return { path, ok: false, reason: 'missing' }; }
+  if (!actualPath.startsWith(`${root}${sep}`)) return { path, ok: false, reason: 'symlink escape' };
+  if (!statSync(actualPath).isFile()) return { path, ok: false, reason: 'not a regular file' };
+  return { path: actualPath, ok: true };
+}
+
+export function validateSpdxImageSbom(value: unknown, image: Pick<ReleaseImage, 'digest' | 'sbomPath'>,
+  { source = image.sbomPath }: { source?: string } = {}): UnknownRecord {
+  if (!object(value)) throw new Error(`${source} must be an object`);
+  if (value.spdxVersion !== 'SPDX-2.3' || value.dataLicense !== 'CC0-1.0'
+    || value.SPDXID !== 'SPDXRef-DOCUMENT') throw new Error(`${source} is not an SPDX 2.3 JSON document`);
+  if (!object(value.creationInfo) || !Array.isArray(value.creationInfo.creators)
+    || value.creationInfo.creators.length === 0) throw new Error(`${source}.creationInfo is incomplete`);
+  if (!Array.isArray(value.packages) || value.packages.length === 0) {
+    throw new Error(`${source}.packages must be non-empty`);
+  }
+  const locators = value.packages.flatMap(entry => object(entry) && Array.isArray(entry.externalRefs)
+    ? entry.externalRefs.map(reference => object(reference) ? reference.referenceLocator : undefined) : []);
+  const digestLocator = new RegExp(`^pkg:oci/[^?]+@sha256:${image.digest}(?:\\?|$)`);
+  if (!locators.some(locator => typeof locator === 'string' && digestLocator.test(locator))) {
+    throw new Error(`${source} does not bind image digest sha256:${image.digest}`);
+  }
+  return value;
+}
+
+function defaultRun(executable: string, args: string[]): CommandResult {
+  const outcome = spawnSync(executable, args, { encoding: 'utf8', windowsHide: true,
+    timeout: 120_000, maxBuffer: 8 * 1024 * 1024 });
+  if (outcome.error) return { ok: false, detail: outcome.error.message };
+  if (outcome.status !== 0) return { ok: false,
+    detail: (outcome.stderr || outcome.stdout || `exit ${outcome.status}`).trim().slice(0, 4096) };
+  return { ok: true };
+}
+
+function normalizeRunResult(value: unknown): CommandResult {
+  if (object(value) && typeof value.ok === 'boolean') {
+    return { ok: value.ok, ...(typeof value.detail === 'string' && value.detail
+      ? { detail: value.detail.slice(0, 4096) } : {}) };
+  }
+  return { ok: false, detail: 'verification command returned an invalid result' };
+}
+
+export function verifyReleaseBundle(manifest: unknown, root: string,
+  options: VerifyReleaseOptions = {}) {
+  const validated = validateReleaseManifest(manifest);
+  const bundleRoot = realpathSync(root);
+  const results: FileVerificationResult[] = validated.files.map(file => {
+    const resolved = regularContainedFile(bundleRoot, file.path);
+    if (!resolved.ok) return { path: file.path, ok: false, reason: resolved.reason };
+    const stat = statSync(resolved.path);
+    const actualHash = sha256(readFileSync(resolved.path));
+    if (stat.size !== file.bytes) return { path: file.path, ok: false, reason: 'size mismatch' };
+    if (actualHash !== file.sha256) return { path: file.path, ok: false, reason: 'hash mismatch' };
+    return { path: file.path, ok: true };
+  });
+  for (const image of validated.images) {
+    if (!results.find(result => result.path === image.sbomPath)?.ok) continue;
+    try {
+      const path = regularContainedFile(bundleRoot, image.sbomPath).path;
+      validateSpdxImageSbom(JSON.parse(readFileSync(path, 'utf8')), image);
+      results.push({ path: image.sbomPath, check: 'spdx-image-binding', ok: true });
+    } catch (error: unknown) {
+      results.push({ path: image.sbomPath, check: 'spdx-image-binding', ok: false,
+        reason: error instanceof Error ? error.message : String(error) });
+    }
+  }
+  const release = { id: validated.id, version: validated.version, state: validated.state };
+  if (validated.state === 'candidate') return { ok: results.every(result => result.ok),
+    verificationLevel: 'candidate-file-integrity', release, results };
+
+  if (!results.every(result => result.ok)) return { ok: false,
+    verificationLevel: 'qualified-cryptographic', release, results,
+    cryptographicVerification: { ok: false, reason: 'skipped because bundle integrity failed' } };
+
+  if (!options.manifestPath) throw new Error('qualified verification requires the exact signed manifest path');
+  if (!options.trustedKeyPath) throw new Error('qualified verification requires an external trusted public key');
+  if (!validated.signing) throw new Error('qualified release is missing signing metadata');
+  const signing = validated.signing;
+  const manifestPath = realpathSync(options.manifestPath);
+  if (!manifestPath.startsWith(`${bundleRoot}${sep}`) || !statSync(manifestPath).isFile()) {
+    throw new Error('signed manifest must be a regular file inside the bundle root');
+  }
+  const diskManifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
+  if (!isDeepStrictEqual(diskManifest, validated)) {
+    throw new Error('the supplied manifest object differs from the signed manifest file');
+  }
+  const trustedKey = realpathSync(options.trustedKeyPath);
+  if (!statSync(trustedKey).isFile()) throw new Error('trusted public key must be a regular file');
+  if (trustedKey.startsWith(`${bundleRoot}${sep}`)) {
+    throw new Error('trusted public key must be supplied outside the release bundle');
+  }
+  const bundledKey = regularContainedFile(bundleRoot, signing.publicKeyPath);
+  if (!bundledKey.ok) throw new Error(`bundled public key is ${bundledKey.reason}`);
+  if (!readFileSync(trustedKey).equals(readFileSync(bundledKey.path))) {
+    throw new Error('bundled public key differs from the external trusted public key');
+  }
+  const bundle = regularContainedFile(bundleRoot, signing.manifestBundlePath);
+  if (!bundle.ok) throw new Error(`manifest signature bundle is ${bundle.reason}`);
+
+  const run = options.runCommand ?? defaultRun;
+  const executable = options.cosignPath ?? 'cosign';
+  const checks = [{ subject: 'release-manifest', ...normalizeRunResult(run(executable,
+    ['verify-blob', '--key', trustedKey, '--bundle', bundle.path, manifestPath])) }];
+  for (const image of validated.images) {
+    checks.push({ subject: image.reference, ...normalizeRunResult(run(executable,
+      ['verify', '--key', trustedKey, '--output', 'json', image.reference])) });
+  }
+  const cryptographicVerification = { ok: checks.every(check => check.ok), checks };
+  return { ok: cryptographicVerification.ok, verificationLevel: 'qualified-cryptographic',
+    release, results, cryptographicVerification };
+}
+
+interface CliOptions { manifestPath: string; root: string; trustedKeyPath?: string }
+
+function parseCli(argv: string[]): CliOptions {
+  const [command, manifestPath, ...rest] = argv;
+  if (command !== 'verify' || !manifestPath) throw new Error('usage');
+  const options: { root?: string; trustedKeyPath?: string } = {};
+  for (let index = 0; index < rest.length; index += 2) {
+    const flag = rest[index];
+    const value = rest[index + 1];
+    if (!flag || !value || !['--root', '--trusted-key'].includes(flag)) throw new Error('usage');
+    if (flag === '--root') options.root = value;
+    else options.trustedKeyPath = value;
+  }
+  if (!options.root) throw new Error('usage');
+  return { manifestPath, root: options.root,
+    ...(options.trustedKeyPath ? { trustedKeyPath: options.trustedKeyPath } : {}) };
+}
+
+function main() {
+  let args;
+  try { args = parseCli(process.argv.slice(2)); }
+  catch {
+    console.error('Usage: node dist/src/releases/release-manifest.js verify <release.json> --root <bundle-dir> [--trusted-key <cosign.pub>]');
+    process.exit(2);
+    return;
+  }
+  const result = verifyReleaseBundle(JSON.parse(readFileSync(args.manifestPath, 'utf8')),
+    args.root, { manifestPath: args.manifestPath, trustedKeyPath: args.trustedKeyPath });
+  console.log(JSON.stringify(result, null, 2));
+  process.exitCode = result.ok ? 0 : 1;
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) {
+  try { main(); }
+  catch (error: unknown) {
+    console.error(`release verification: ${error instanceof Error ? error.message : String(error)}`);
+    process.exitCode = 2;
+  }
+}
diff --git a/tools/stack-bench/src/releases/release-source.ts b/tools/stack-bench/src/releases/release-source.ts
new file mode 100644
index 00000000000..60d012550c1
--- /dev/null
+++ b/tools/stack-bench/src/releases/release-source.ts
@@ -0,0 +1,201 @@
+#!/usr/bin/env node
+
+import { createHash } from 'node:crypto';
+import { execFileSync } from 'node:child_process';
+import { realpathSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { pathToFileURL } from 'node:url';
+
+import { REPOSITORY_ROOT } from '../package-root.js';
+
+const RELEASE_SOURCE_PATHS = Object.freeze([
+  'tools/stack-bench',
+  'skills',
+  'crates/bindings-typescript',
+  'licenses/BSL.txt',
+  'package.json',
+  'pnpm-lock.yaml',
+  'pnpm-workspace.yaml',
+]);
+
+export const BINARY_SOURCE_PATHS = Object.freeze([
+  '.cargo',
+  'Cargo.lock',
+  'Cargo.toml',
+  'crates',
+  'rust-toolchain.toml',
+  'skills',
+  'templates',
+]);
+
+export const BINARY_PROVENANCE_PATH =
+  'tools/stack-bench/container/spacetimedb-binaries.json';
+export const SOURCE_IDENTITY_SCHEME = 'git-object-content-v1';
+
+interface GitOptions {
+  input?: string;
+  binary?: boolean;
+}
+
+export type GitRunner = (root: string, args: string[], options?: GitOptions) => string | Buffer;
+
+interface SourceIdentity {
+  identityScheme: typeof SOURCE_IDENTITY_SCHEME;
+  revision: string;
+  sha256: string;
+  files: number;
+  paths: string[];
+}
+
+export interface ReleaseSourceIdentity extends SourceIdentity {
+  binarySourceSha256: string;
+  binarySourceFiles: number;
+}
+
+interface TrackedEntry {
+  name: string;
+  objectId: string;
+}
+
+export function releaseSourceRoot(): string {
+  return realpathSync(REPOSITORY_ROOT);
+}
+
+function defaultGit(root: string, args: string[], options: GitOptions = {}): string | Buffer {
+  const common = { cwd: root, input: options.input, windowsHide: true,
+    maxBuffer: 512 * 1024 * 1024 };
+  return options.binary
+    ? execFileSync('git', ['-C', root, ...args], { ...common, encoding: null })
+    : execFileSync('git', ['-C', root, ...args], { ...common, encoding: 'utf8' });
+}
+
+function gitText(runGit: GitRunner, root: string, args: string[], input?: string): string {
+  const result = runGit(root, args, { input });
+  return Buffer.isBuffer(result) ? result.toString('utf8') : result;
+}
+
+function gitBuffer(runGit: GitRunner, root: string, args: string[], input: string): Buffer {
+  const result = runGit(root, args, { input, binary: true });
+  return Buffer.isBuffer(result) ? result : Buffer.from(result, 'utf8');
+}
+
+function trackedEntries(repository: string, paths: readonly string[],
+  runGit: GitRunner): TrackedEntry[] {
+  const output = gitText(runGit, repository, ['ls-files', '--stage', '-z', '--', ...paths]);
+  const entries = output.split('\0').filter(Boolean).map(row => {
+    const separator = row.indexOf('\t');
+    if (separator < 0) throw new Error('git returned an invalid tracked source entry');
+    const [mode, objectId, stage] = row.slice(0, separator).split(' ');
+    const name = row.slice(separator + 1);
+    if (!mode || !/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/.test(objectId ?? '') || stage !== '0') {
+      throw new Error(`git returned an invalid tracked source entry for ${name}`);
+    }
+    if (name.includes('\n') || name.includes('\r')) {
+      throw new Error(`tracked source path contains a line break: ${JSON.stringify(name)}`);
+    }
+    return { name, objectId: objectId as string };
+  });
+  return entries.sort((left, right) => left.name.localeCompare(right.name));
+}
+
+function readBatchObjects(output: Buffer, entries: TrackedEntry[]): Buffer[] {
+  const objects: Buffer[] = [];
+  let offset = 0;
+  for (const entry of entries) {
+    const headerEnd = output.indexOf(0x0a, offset);
+    if (headerEnd < 0) throw new Error(`git returned no object header for ${entry.name}`);
+    const header = output.subarray(offset, headerEnd).toString('utf8');
+    const match = header.match(/^([a-f0-9]{40}(?:[a-f0-9]{24})?) blob (\d+)$/);
+    if (!match || match[1] !== entry.objectId) {
+      throw new Error(`git returned an invalid object header for ${entry.name}`);
+    }
+    const size = Number(match[2]);
+    if (!Number.isSafeInteger(size) || size < 0) {
+      throw new Error(`git returned an invalid object size for ${entry.name}`);
+    }
+    const start = headerEnd + 1;
+    const end = start + size;
+    if (end >= output.length || output[end] !== 0x0a) {
+      throw new Error(`git returned a truncated object for ${entry.name}`);
+    }
+    objects.push(output.subarray(start, end));
+    offset = end + 1;
+  }
+  if (offset !== output.length) throw new Error('git returned unexpected extra object data');
+  return objects;
+}
+
+function canonicalTrackedIdentity(repository: string, entries: TrackedEntry[],
+  runGit: GitRunner): { sha256: string; files: number } {
+  const input = `${entries.map(entry => entry.objectId).join('\n')}\n`;
+  const objects = readBatchObjects(
+    gitBuffer(runGit, repository, ['cat-file', '--batch'], input), entries);
+  const hash = createHash('sha256');
+  entries.forEach((entry, index) => {
+    const bytes = objects[index];
+    if (!bytes) throw new Error(`git returned no object for ${entry.name}`);
+    hash.update(`${entry.name.length}:${entry.name}:${bytes.length}:`);
+    hash.update(bytes);
+  });
+  return { sha256: hash.digest('hex'), files: entries.length };
+}
+
+function exactRevision(repository: string, runGit: GitRunner): string {
+  const revision = gitText(runGit, repository, ['rev-parse', 'HEAD']).trim();
+  if (!/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/.test(revision)) {
+    throw new Error('HEAD is not an exact commit id');
+  }
+  return revision;
+}
+
+function assertClean(repository: string, paths: readonly string[], runGit: GitRunner,
+  label: string): void {
+  const changed = gitText(runGit, repository,
+    ['status', '--porcelain=v1', '--untracked-files=all', '--', ...paths]).trim();
+  if (changed) throw new Error(`${label} paths are not clean:\n${changed}`);
+}
+
+export function binarySourceIdentity(root = process.cwd(),
+  { runGit = defaultGit }: { runGit?: GitRunner } = {}): SourceIdentity {
+  const repository = realpathSync(root);
+  const revision = exactRevision(repository, runGit);
+  assertClean(repository, [...BINARY_SOURCE_PATHS, BINARY_PROVENANCE_PATH], runGit,
+    'binary source');
+  const entries = trackedEntries(repository, BINARY_SOURCE_PATHS, runGit)
+    .filter(entry => entry.name !== BINARY_PROVENANCE_PATH);
+  if (entries.length === 0) throw new Error('binary source set is empty');
+  const identity = canonicalTrackedIdentity(repository, entries, runGit);
+  return { identityScheme: SOURCE_IDENTITY_SCHEME,
+    revision, ...identity, paths: [...BINARY_SOURCE_PATHS] };
+}
+
+export function releaseSourceIdentity(root = process.cwd(),
+  { runGit = defaultGit }: { runGit?: GitRunner } = {}): ReleaseSourceIdentity {
+  const repository = realpathSync(root);
+  const revision = exactRevision(repository, runGit);
+  assertClean(repository, RELEASE_SOURCE_PATHS, runGit, 'release source');
+  const entries = trackedEntries(repository, RELEASE_SOURCE_PATHS, runGit);
+  if (entries.length === 0) throw new Error('release source set is empty');
+  const identity = canonicalTrackedIdentity(repository, entries, runGit);
+  const binarySource = binarySourceIdentity(repository, { runGit });
+  return { identityScheme: SOURCE_IDENTITY_SCHEME,
+    revision, ...identity, paths: [...RELEASE_SOURCE_PATHS],
+    binarySourceSha256: binarySource.sha256, binarySourceFiles: binarySource.files };
+}
+
+function main(): void {
+  if (process.argv.length > 3 || (process.argv[2] && process.argv[2] !== '--json')) {
+    console.error('Usage: release-source [--json]');
+    process.exitCode = 2;
+    return;
+  }
+  const identity = releaseSourceIdentity(releaseSourceRoot());
+  if (process.argv[2] === '--json') console.log(JSON.stringify(identity, null, 2));
+  else {
+    process.stdout.write(`SOURCE_REVISION=${identity.revision}\n`);
+    process.stdout.write(`SOURCE_SHA256=${identity.sha256}\n`);
+    process.stdout.write(`BINARY_SOURCE_SHA256=${identity.binarySourceSha256}\n`);
+  }
+}
+
+if (process.argv[1] && pathToFileURL(resolve(process.argv[1])).href === import.meta.url) main();
diff --git a/tools/stack-bench/src/runtime/backend-control.ts b/tools/stack-bench/src/runtime/backend-control.ts
new file mode 100644
index 00000000000..d9cd99794e4
--- /dev/null
+++ b/tools/stack-bench/src/runtime/backend-control.ts
@@ -0,0 +1,86 @@
+import { leaseFromEnv } from './backend-lease.js';
+import { leasedDatabaseEnvironment } from '../stacks/stack-adapter-common.js';
+import { STACK_ADAPTER_REGISTRY } from '../stacks/stack-adapters.js';
+import { controlHostedAppServer }
+  from '../stacks/hosted-lifecycle.js';
+import type { RuntimeControlMode } from '../stacks/stack-adapter-contract.js';
+import type { TextCommandExecutor } from './command-executor.js';
+
+export { hostedStopScript } from '../stacks/hosted-lifecycle.js';
+export type { RuntimeControlMode } from '../stacks/stack-adapter-contract.js';
+
+export interface RuntimeControlSpec {
+  backend: string;
+  app: string;
+  port: number;
+  probe: string;
+}
+
+interface DiagnosticsOptions { exec?: TextCommandExecutor }
+interface RuntimeControlOptions { signal?: AbortSignal | null; exec?: TextCommandExecutor }
+
+export function parseRuntimeControlSpec(value: unknown): RuntimeControlSpec {
+  if (!value || typeof value !== 'object' || Array.isArray(value)
+    || !('backend' in value) || typeof value.backend !== 'string' || !value.backend
+    || !('app' in value) || typeof value.app !== 'string' || !value.app
+    || !('port' in value) || typeof value.port !== 'number' || !Number.isInteger(value.port)
+    || value.port <= 0 || value.port > 65535
+    || !('probe' in value) || typeof value.probe !== 'string') {
+    throw new Error('runtime control spec is incomplete');
+  }
+  return { backend: value.backend, app: value.app, port: value.port, probe: value.probe };
+}
+
+export function captureApplicationDiagnostics(
+  output: string,
+  { exec }: DiagnosticsOptions = {},
+): unknown {
+  const { lease } = leaseFromEnv(process.env, { active: true });
+  const adapter = STACK_ADAPTER_REGISTRY.get(lease.backend);
+  if (!('diagnostics' in adapter)) {
+    return { captured: false, reason: 'backend has no hosted app restart log' };
+  }
+  return adapter.diagnostics.capture(
+    { lease, output, ...(exec ? { exec } : {}) });
+}
+
+export async function controlBackendRuntime(
+  spec: RuntimeControlSpec,
+  mode: RuntimeControlMode = 'restart',
+  { signal = null, exec }: RuntimeControlOptions = {},
+): Promise<void> {
+  const { lease } = leaseFromEnv(process.env, { backend: spec.backend, active: true });
+  const adapter = STACK_ADAPTER_REGISTRY.get(spec.backend);
+  if (!adapter.lifecycle.control) {
+    throw new Error(`stack adapter ${adapter.id} does not support runtime control`);
+  }
+  await adapter.lifecycle.control({ ...spec, adapterId: adapter.id, lease, mode, signal,
+    ...(exec ? { exec } : {}) });
+}
+
+// Always control the generated app server, not the stack's backend runtime.
+export async function controlAppServer(
+  spec: RuntimeControlSpec,
+  mode: RuntimeControlMode = 'restart',
+  { signal = null }: RuntimeControlOptions = {},
+): Promise<void> {
+  const { lease } = leaseFromEnv(process.env, { backend: spec.backend, active: true });
+  const adapter = STACK_ADAPTER_REGISTRY.get(spec.backend);
+  const environment = {
+    ...leasedDatabaseEnvironment(adapter, {
+      database: lease.resources.database,
+      networkMode: lease.resources.buildContainer?.networkMode,
+    }),
+    ...adapter.lifecycle.applicationEnvironment?.(lease),
+    VITE_PORT: String(spec.port),
+  };
+  await controlHostedAppServer({
+    ...spec,
+    adapterId: adapter.id,
+    lease,
+    mode,
+    signal,
+    handoffWorkspace: true,
+    environment,
+  });
+}
diff --git a/tools/stack-bench/src/runtime/backend-lease.ts b/tools/stack-bench/src/runtime/backend-lease.ts
new file mode 100644
index 00000000000..516f99fd380
--- /dev/null
+++ b/tools/stack-bench/src/runtime/backend-lease.ts
@@ -0,0 +1,506 @@
+import { randomUUID, createHash } from 'node:crypto';
+import { chmodSync, constants, copyFileSync, existsSync, readFileSync, writeFileSync, renameSync,
+  mkdirSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, isAbsolute, join, resolve } from 'node:path';
+import { validateStackLeaseResources } from '../stacks/stack-lease-capabilities.js';
+import { processIdentity } from './platform.js';
+
+export const LEASE_VERSION = 1;
+const LEASE_STATES = new Set<string>(['created', 'starting', 'active', 'restarting',
+  'retained', 'stopped', 'released']);
+const CURRENT_PROCESS_START_MARKER = processIdentity(process.pid)?.startMarker ?? null;
+
+export type BackendLeaseState = 'created' | 'starting' | 'active' | 'restarting'
+  | 'retained' | 'stopped' | 'released';
+
+export interface BackendLeaseContainer {
+  name: string;
+  id: string;
+  image?: string;
+  owned?: boolean;
+  running?: boolean;
+  removedAt?: string;
+  networkMode?: 'bridge' | 'host';
+  resourceLimits?: {
+    cpuCount: number;
+    memoryBytes: number;
+    memorySwapBytes: number;
+    pids: number;
+  };
+}
+
+export interface BackendResourceLock {
+  path: string;
+  key: string;
+  digest: string;
+  acquiredAt?: string;
+  releasedAt?: string;
+}
+
+export interface BackendProcessIdentity { pid: number; startMarker: string }
+
+export interface BackendLeaseResource {
+  serverUri: string | null;
+  dataDir: string | null;
+  module: string | null;
+  database: string | null;
+  container: BackendLeaseContainer | null;
+  buildContainer: BackendLeaseContainer | null;
+  locks: BackendResourceLock[];
+  launchedProcess: BackendProcessIdentity | null;
+  listenerProcesses: BackendProcessIdentity[];
+}
+
+export interface BackendLease {
+  version: typeof LEASE_VERSION;
+  backend: string;
+  runId: string;
+  track: string;
+  runIndex: number;
+  ownerPid: number;
+  ownershipToken: string;
+  createdAt: string;
+  state: BackendLeaseState;
+  releasedAt?: string;
+  // Teardown stamps this when it stops a host it started.
+  stoppedAt?: string;
+  resources: BackendLeaseResource;
+}
+
+export type PublicBackendLease = Omit<BackendLease, 'ownershipToken'> & {
+  ownership: { markerSha256: string };
+};
+
+export interface SpacetimeBackendLease extends BackendLease {
+  backend: 'spacetime';
+  resources: BackendLeaseResource & { serverUri: string; module: string };
+}
+
+export interface BackendLeaseExpectation {
+  token?: string;
+  backend?: string;
+  runId?: string;
+  active?: boolean;
+}
+
+interface CreateBackendLeaseInput {
+  runId: string;
+  backend: string;
+  track: string;
+  runIndex: number;
+  ownerPid?: number;
+  serverUri?: string | null;
+  database?: string | null;
+  module?: string | null;
+  dataDir?: string | null;
+  container?: Pick<BackendLeaseContainer, 'name' | 'id'> | null;
+}
+
+function fail(message: string): never {
+  throw new Error(`invalid backend lease: ${message}`);
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+function errorCode(error: unknown): unknown {
+  return isRecord(error) ? error.code : undefined;
+}
+
+function requireString(value: unknown, name: string): string {
+  if (typeof value !== 'string' || !value.trim()) fail(`${name} is required`);
+  return value;
+}
+
+export function loopbackHttpUri(value: unknown): URL {
+  let url: URL;
+  try { url = new URL(String(value)); } catch { fail(`serverUri is not a URL: ${value}`); }
+  if (url.protocol !== 'http:') fail(`serverUri must use http: ${value}`);
+  if (!['127.0.0.1', 'localhost', '[::1]'].includes(url.hostname) || !url.port) {
+    fail(`serverUri must name an explicit loopback port: ${value}`);
+  }
+  return url;
+}
+
+export const DEFAULT_SPACETIME_SERVER_URI = 'http://127.0.0.1:3210';
+
+export function newRunId({ track, backend, runIndex, now = new Date(), nonce = randomUUID() }: {
+  track: string;
+  backend: string;
+  runIndex: number;
+  now?: Date;
+  nonce?: string;
+}): string {
+  const stamp = now.toISOString().replace(/[-:.TZ]/g, '').slice(0, 14);
+  const safe = (value: unknown): string => String(value).toLowerCase().replace(/[^a-z0-9_-]+/g, '-');
+  return `${safe(track)}-${safe(backend)}-run${Number(runIndex)}-${stamp}-${safe(nonce).slice(0, 8)}`;
+}
+
+export function createBackendLease({ runId, backend, track, runIndex, ownerPid = process.pid,
+  serverUri = null, database = null, module = null, dataDir = null,
+  container = null }: CreateBackendLeaseInput): BackendLease {
+  requireString(runId, 'runId');
+  requireString(backend, 'backend');
+  requireString(track, 'track');
+  if (!Number.isInteger(runIndex) || runIndex < 0) fail('runIndex must be a non-negative integer');
+  if (!Number.isInteger(ownerPid) || ownerPid <= 0) fail('ownerPid must be a positive integer');
+  const resources = {
+    serverUri,
+    database,
+    module,
+    dataDir: dataDir ? resolve(dataDir) : null,
+    container: container ? { name: container.name, id: container.id, owned: false } : null,
+    buildContainer: null,
+    locks: [],
+    launchedProcess: null,
+    listenerProcesses: [],
+  };
+  try {
+    validateStackLeaseResources(backend, {
+      resources,
+      helpers: { requireString, loopbackHttpUri },
+    });
+  } catch (error) {
+    const message = errorMessage(error);
+    if (message.startsWith('invalid backend lease:')) throw error;
+    fail(message);
+  }
+  return {
+    version: LEASE_VERSION,
+    runId,
+    backend,
+    track,
+    runIndex,
+    ownerPid,
+    ownershipToken: randomUUID(),
+    createdAt: new Date().toISOString(),
+    state: 'created',
+    resources,
+  };
+}
+
+function hasBackendLeaseShape(
+  lease: Record<string, unknown>,
+): lease is Record<string, unknown> & BackendLease {
+  return typeof lease.runId === 'string'
+    && typeof lease.backend === 'string'
+    && typeof lease.track === 'string'
+    && typeof lease.runIndex === 'number'
+    && typeof lease.ownerPid === 'number'
+    && typeof lease.ownershipToken === 'string'
+    && typeof lease.createdAt === 'string'
+    && typeof lease.state === 'string' && LEASE_STATES.has(lease.state)
+    && isRecord(lease.resources);
+}
+
+export function validateBackendLease(
+  lease: unknown,
+  { token, backend, runId, active = false }: BackendLeaseExpectation = {},
+): BackendLease {
+  if (!isRecord(lease)) fail('document is not an object');
+  if (lease.version !== LEASE_VERSION) fail(`unsupported version ${lease.version}`);
+  const leaseRunId = requireString(lease.runId, 'runId');
+  const leaseBackend = requireString(lease.backend, 'backend');
+  const leaseToken = requireString(lease.ownershipToken, 'ownershipToken');
+  if (typeof lease.state !== 'string' || !LEASE_STATES.has(lease.state)) {
+    fail(`unknown state ${lease.state}`);
+  }
+  if (token !== undefined && token !== leaseToken) fail('ownership token does not match');
+  if (backend !== undefined && backend !== leaseBackend) fail(`backend is ${leaseBackend}, not ${backend}`);
+  if (runId !== undefined && runId !== leaseRunId) fail(`runId is ${leaseRunId}, not ${runId}`);
+  if (active && !['active', 'restarting'].includes(lease.state)) fail(`lease is ${lease.state}, not active`);
+  try {
+    validateStackLeaseResources(leaseBackend, {
+      resources: lease.resources,
+      helpers: { requireString, loopbackHttpUri },
+    });
+  } catch (error) {
+    const message = errorMessage(error);
+    if (message.startsWith('invalid backend lease:')) throw error;
+    fail(message);
+  }
+  if (!isRecord(lease.resources)) fail('resources must be an object');
+  const resources = lease.resources;
+  if (resources.buildContainer != null) {
+    if (!isRecord(resources.buildContainer)) fail('buildContainer must be an object');
+    const buildContainer = resources.buildContainer;
+    requireString(buildContainer.name, 'buildContainer.name');
+    requireString(buildContainer.id, 'buildContainer.id');
+    requireString(buildContainer.image, 'buildContainer.image');
+    if (buildContainer.owned !== true) fail('buildContainer must be benchmark-owned');
+    if (buildContainer.networkMode != null
+      && (typeof buildContainer.networkMode !== 'string'
+        || !['bridge', 'host'].includes(buildContainer.networkMode))) {
+      fail('buildContainer.networkMode is invalid');
+    }
+    const limits = buildContainer.resourceLimits;
+    const fields = ['cpuCount', 'memoryBytes', 'memorySwapBytes', 'pids'];
+    if (!isRecord(limits)
+      || Object.keys(limits).some(key => !fields.includes(key))
+      || fields.some(field => !Number.isSafeInteger(limits[field])
+        || typeof limits[field] !== 'number' || limits[field] < 1)
+      || typeof limits.memorySwapBytes !== 'number'
+      || typeof limits.memoryBytes !== 'number'
+      || limits.memorySwapBytes < limits.memoryBytes) {
+      fail('buildContainer.resourceLimits is invalid');
+    }
+  }
+  if (!Array.isArray(resources.locks)) fail('locks must be an array');
+  const validProcess = (value: unknown): boolean => isRecord(value)
+    && Object.keys(value).every(key => ['pid', 'startMarker'].includes(key))
+    && Number.isSafeInteger(value.pid) && typeof value.pid === 'number' && value.pid > 0
+    && typeof value.startMarker === 'string' && /^\d+$/.test(value.startMarker);
+  if (resources.launchedProcess !== null && !validProcess(resources.launchedProcess)) {
+    fail('launchedProcess must be a process identity or null');
+  }
+  if (!Array.isArray(resources.listenerProcesses)
+    || resources.listenerProcesses.some((identity: unknown) => !validProcess(identity))) {
+    fail('listenerProcesses must contain only process identities');
+  }
+  for (const lock of resources.locks) {
+    if (!isRecord(lock)) fail('lock must be an object');
+    requireString(lock.path, 'lock.path');
+    requireString(lock.key, 'lock.key');
+    requireString(lock.digest, 'lock.digest');
+  }
+  if (!hasBackendLeaseShape(lease)) fail('document shape is incomplete');
+  return lease;
+}
+
+export function readBackendLease(path: string, expected: BackendLeaseExpectation = {}): BackendLease {
+  requireString(path, 'path');
+  let parsed: unknown;
+  try { parsed = JSON.parse(readFileSync(path, 'utf8')); }
+  catch (error) { fail(`cannot read ${path}: ${errorMessage(error)}`); }
+  return validateBackendLease(parsed, expected);
+}
+
+export function writeBackendLease(path: string, lease: unknown): void {
+  const validated = validateBackendLease(lease);
+  const directory = dirname(path);
+  mkdirSync(directory, { recursive: true, mode: 0o700 });
+  chmodSync(directory, 0o700);
+  const temporary = `${path}.${process.pid}.${randomUUID()}.tmp`;
+  writeFileSync(temporary, `${JSON.stringify(validated, null, 2)}\n`, { flag: 'wx', mode: 0o600 });
+  renameSync(temporary, path);
+  chmodSync(path, 0o600);
+}
+
+export function updateBackendLease(
+  path: string,
+  expected: BackendLeaseExpectation,
+  update: (lease: BackendLease) => BackendLease | void,
+): BackendLease {
+  const lease = readBackendLease(path, expected);
+  const next = update(structuredClone(lease)) ?? lease;
+  validateBackendLease(next, { token: lease.ownershipToken, backend: lease.backend, runId: lease.runId });
+  writeBackendLease(path, next);
+  return next;
+}
+
+export function publicBackendLease(lease: BackendLease): PublicBackendLease {
+  const copy = structuredClone(validateBackendLease(lease));
+  const { ownershipToken, ...publicLease } = copy;
+  return { ...publicLease, ownership: {
+    markerSha256: createHash('sha256').update(ownershipToken).digest('hex'),
+  } };
+}
+
+const tokenHash = (token: string): string => createHash('sha256').update(token).digest('hex');
+
+export function resourceLockScope(
+  env: NodeJS.ProcessEnv = process.env,
+  { temporaryDirectory = tmpdir() }: { temporaryDirectory?: string } = {},
+): { root: string; reclaimStale: boolean } {
+  const configured = env.STACK_BENCH_RESOURCE_LOCK_DIR;
+  if (configured !== undefined) {
+    if (typeof configured !== 'string' || configured !== configured.trim()
+      || !configured || !isAbsolute(configured)) {
+      fail('STACK_BENCH_RESOURCE_LOCK_DIR must be an absolute path without surrounding whitespace');
+    }
+  }
+  const appliance = env.STACK_BENCH_APPLIANCE === '1';
+  return {
+    root: configured ?? (appliance
+      ? '/var/lib/stack-bench/controller-home/resource-locks'
+      : join(temporaryDirectory, 'stack-bench-resource-locks')),
+    // Controller containers do not share a PID namespace. A PID that appears
+    // absent in one container can still own a lock in another container. The
+    // appliance therefore leaves stale-lock release to authenticated recovery.
+    reclaimStale: !appliance,
+  };
+}
+
+export function backendResourceLockKeys(
+  lease: BackendLease,
+  additionalKeys: string[] = [],
+): string[] {
+  validateBackendLease(lease);
+  if (!Array.isArray(additionalKeys)) fail('additional resource lock keys must be an array');
+  for (const key of additionalKeys) requireString(key, 'resource lock key');
+  return [...new Set([
+    `slot:${lease.track}:${lease.backend}:run${lease.runIndex}`,
+    ...additionalKeys,
+  ])].sort();
+}
+
+export function existingResourceLockKeys(
+  { root, keys }: { root: string; keys: string[] },
+): string[] {
+  requireString(root, 'lock root');
+  if (!Array.isArray(keys) || keys.length === 0) fail('resource lock keys must be a non-empty array');
+  for (const key of keys) requireString(key, 'resource lock key');
+  return [...new Set(keys)].sort().filter(key => {
+    const digest = createHash('sha256').update(key).digest('hex');
+    return existsSync(resolve(root, `${digest}.lock.json`));
+  });
+}
+
+function processAlive(pid: number, startMarker: unknown): boolean {
+  if (typeof startMarker === 'string' && startMarker) {
+    return processIdentity(pid)?.startMarker === startMarker;
+  }
+  try { process.kill(pid, 0); return true; }
+  catch (error) { return errorCode(error) === 'EPERM'; }
+}
+
+export function acquireResourceLock({ root, key, lease, reclaimStale = true }: {
+  root: string;
+  key: string;
+  lease: BackendLease;
+  reclaimStale?: boolean;
+}): BackendResourceLock {
+  validateBackendLease(lease);
+  requireString(root, 'lock root');
+  requireString(key, 'lock key');
+  mkdirSync(root, { recursive: true });
+  const digest = createHash('sha256').update(key).digest('hex');
+  const path = resolve(root, `${digest}.lock.json`);
+  const record = {
+    version: 1,
+    key,
+    runId: lease.runId,
+    ownerPid: lease.ownerPid,
+    ownerStartMarker: lease.ownerPid === process.pid
+      ? CURRENT_PROCESS_START_MARKER : processIdentity(lease.ownerPid)?.startMarker ?? null,
+    ownershipMarkerSha256: tokenHash(lease.ownershipToken),
+    acquiredAt: new Date().toISOString(),
+  };
+  for (let attempt = 0; attempt < 4; attempt++) {
+    try {
+      writeFileSync(path, `${JSON.stringify(record, null, 2)}\n`, { flag: 'wx' });
+      return { path, key, digest, acquiredAt: record.acquiredAt };
+    } catch (error) {
+      if (errorCode(error) !== 'EEXIST') throw error;
+      let existing: unknown;
+      try { existing = JSON.parse(readFileSync(path, 'utf8')); }
+      catch { fail(`resource lock ${path} exists but is unreadable; refusing to steal it`); }
+      if (!isRecord(existing) || !Number.isInteger(existing.ownerPid)
+        || typeof existing.ownerPid !== 'number'
+        || typeof existing.runId !== 'string' || !existing.runId
+        || (existing.ownerStartMarker !== null && typeof existing.ownerStartMarker !== 'string')
+        || typeof existing.ownershipMarkerSha256 !== 'string'
+        || !existing.ownershipMarkerSha256) {
+        fail(`resource lock ${path} is malformed; refusing to steal it`);
+      }
+      if (processAlive(existing.ownerPid, existing.ownerStartMarker)) {
+        fail(`resource ${key} is already leased by ${existing.runId} (pid ${existing.ownerPid})`);
+      }
+      if (!reclaimStale) {
+        fail(`resource ${key} remains leased by ${existing.runId}; run authenticated recovery before reuse`);
+      }
+      // Move the exact stale inode out of the acquisition path. If another
+      // contender won that race, rename fails and the next iteration rereads
+      // the new owner's record rather than deleting it.
+      const stale = `${path}.stale-${randomUUID()}`;
+      try {
+        renameSync(path, stale);
+        rmSync(stale, { force: true });
+      } catch (renameError) {
+        if (errorCode(renameError) !== 'ENOENT') throw renameError;
+      }
+    }
+  }
+  fail(`could not acquire resource ${key} after stale-lock contention`);
+}
+
+export function acquireResourceLocks({ root, keys, lease, reclaimStale = true }: {
+  root: string;
+  keys: string[];
+  lease: BackendLease;
+  reclaimStale?: boolean;
+}): BackendResourceLock[] {
+  validateBackendLease(lease);
+  if (!Array.isArray(keys) || keys.length === 0) fail('resource lock keys must be a non-empty array');
+  const acquired: BackendResourceLock[] = [];
+  try {
+    for (const key of [...new Set(keys)].sort()) {
+      acquired.push(acquireResourceLock({ root, key, lease, reclaimStale }));
+    }
+    return acquired;
+  } catch (error) {
+    const rollbackLease = structuredClone(lease);
+    rollbackLease.resources.locks = acquired;
+    try { releaseResourceLocks(rollbackLease); }
+    catch (rollbackError) {
+      throw new AggregateError([error, rollbackError],
+        `resource lock acquisition failed and rollback was incomplete: ${errorMessage(error)}`);
+    }
+    throw error;
+  }
+}
+
+export function releaseResourceLocks(lease: BackendLease): void {
+  validateBackendLease(lease);
+  for (const lock of lease.resources.locks ?? []) {
+    const releasing = `${lock.path}.release-${randomUUID()}`;
+    try { renameSync(lock.path, releasing); }
+    catch (error) {
+      if (errorCode(error) === 'ENOENT') continue;
+      fail(`cannot claim resource lock ${lock.path} for release: ${errorMessage(error)}`);
+    }
+    let existing: unknown;
+    try { existing = JSON.parse(readFileSync(releasing, 'utf8')); }
+    catch (error) {
+      try {
+        copyFileSync(releasing, lock.path, constants.COPYFILE_EXCL);
+        rmSync(releasing, { force: true });
+      } catch { /* preserve both records for authenticated recovery */ }
+      fail(`cannot read claimed resource lock ${releasing}: ${errorMessage(error)}`);
+    }
+    if (!isRecord(existing)
+      || existing.runId !== lease.runId
+      || existing.ownerPid !== lease.ownerPid
+      || existing.ownershipMarkerSha256 !== tokenHash(lease.ownershipToken)) {
+      try {
+        copyFileSync(releasing, lock.path, constants.COPYFILE_EXCL);
+        rmSync(releasing, { force: true });
+      } catch { /* preserve both records for authenticated recovery */ }
+      fail(`resource lock ${lock.path} no longer belongs to lease ${lease.runId}`);
+    }
+    rmSync(releasing, { force: true });
+  }
+}
+
+export function leaseFromEnv(
+  env: NodeJS.ProcessEnv | undefined,
+  expected: BackendLeaseExpectation & { backend: 'spacetime' },
+): { path: string; lease: SpacetimeBackendLease };
+export function leaseFromEnv(
+  env?: NodeJS.ProcessEnv,
+  expected?: BackendLeaseExpectation,
+): { path: string; lease: BackendLease };
+export function leaseFromEnv(
+  env: NodeJS.ProcessEnv = process.env,
+  expected: BackendLeaseExpectation = {},
+): { path: string; lease: BackendLease } {
+  const path = requireString(env.STACK_BENCH_LEASE, 'STACK_BENCH_LEASE');
+  const token = requireString(env.STACK_BENCH_LEASE_TOKEN, 'STACK_BENCH_LEASE_TOKEN');
+  return { path, lease: readBackendLease(path, { ...expected, token }) };
+}
diff --git a/tools/stack-bench/src/runtime/backend-teardown.ts b/tools/stack-bench/src/runtime/backend-teardown.ts
new file mode 100644
index 00000000000..6bf11288734
--- /dev/null
+++ b/tools/stack-bench/src/runtime/backend-teardown.ts
@@ -0,0 +1,118 @@
+// Idempotent, lease-authenticated backend teardown shared by the benchmark and
+// its outer qualification supervisor.
+
+import { execFileSync } from 'node:child_process';
+import { readBackendLease, releaseResourceLocks, updateBackendLease } from './backend-lease.js';
+import { STACK_ADAPTER_REGISTRY } from '../stacks/stack-adapters.js';
+
+const DOCKER_TIMEOUT_MS = 120_000;
+const REMOVE_RETRY_DELAYS_MS = [0, 250, 750] as const;
+
+function errorField(error: unknown, field: 'stderr' | 'message'): unknown {
+  return typeof error === 'object' && error !== null ? Reflect.get(error, field) : undefined;
+}
+
+function dockerMissing(error: unknown): boolean {
+  return /No such (object|container)/i.test(
+    `${errorField(error, 'stderr') ?? ''}${errorField(error, 'message') ?? ''}`,
+  );
+}
+
+function wait(milliseconds: number): void {
+  if (milliseconds <= 0) return;
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, milliseconds);
+}
+
+export interface DockerTeardownOperations {
+  inspect(name: string): string;
+  remove(id: string): void;
+  wait(milliseconds: number): void;
+}
+
+const DOCKER: DockerTeardownOperations = {
+  inspect(name) {
+    return execFileSync('docker', ['inspect', '--format', '{{.Id}}', name], {
+      encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS,
+    }).trim();
+  },
+  remove(id) {
+    execFileSync('docker', ['rm', '-f', id], {
+      stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS,
+      env: { ...process.env, MSYS_NO_PATHCONV: '1' },
+    });
+  },
+  wait,
+};
+
+export function stopLeasedContainer(leasePath: string, leaseToken: string,
+  docker: DockerTeardownOperations = DOCKER): boolean {
+  const lease = readBackendLease(leasePath, { token: leaseToken });
+  const container = lease.resources.buildContainer;
+  if (!container) return true;
+  let actual = null;
+  try {
+    actual = docker.inspect(container.name);
+  } catch (error) {
+    if (!dockerMissing(error)) {
+      console.error(`  REFUSED to assume container ${container.name} is gone: Docker inspection failed`);
+      return false;
+    }
+  }
+  if (actual && actual !== container.id) {
+    console.error(`  REFUSED to remove container ${container.name}: id ${actual} does not match lease ${container.id}`);
+    return false;
+  }
+  if (actual) {
+    let removed = false;
+    for (const delay of REMOVE_RETRY_DELAYS_MS) {
+      docker.wait(delay);
+      try {
+        docker.remove(container.id);
+        removed = true;
+        break;
+      } catch (error) {
+        if (dockerMissing(error)) {
+          removed = true;
+          break;
+        }
+      }
+    }
+    if (!removed) {
+      console.error(`  REFUSED to release lease: Docker could not remove ${container.name} after ${REMOVE_RETRY_DELAYS_MS.length} attempts`);
+      return false;
+    }
+    console.log(`  removed the leased run container ${container.name}`);
+  }
+  updateBackendLease(leasePath,
+    { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+      next.resources.buildContainer!.running = false;
+      next.resources.buildContainer!.removedAt ??= new Date().toISOString();
+      return next;
+    });
+  return true;
+}
+
+export function releaseBackendLease(
+  leasePath: string,
+  leaseToken: string,
+  { retainBackend = false }: { retainBackend?: boolean } = {},
+): boolean {
+  let lease = readBackendLease(leasePath, { token: leaseToken });
+  if (lease.state === 'released') return true;
+  let released = stopLeasedContainer(leasePath, leaseToken);
+  released = STACK_ADAPTER_REGISTRY.get(lease.backend).teardown.host({
+      leasePath, leaseToken, lease, retainHost: retainBackend,
+    }) && released;
+  if (!released || retainBackend) return released;
+  lease = readBackendLease(leasePath,
+    { token: leaseToken, backend: lease.backend, runId: lease.runId });
+  releaseResourceLocks(lease);
+  updateBackendLease(leasePath,
+    { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+      for (const lock of next.resources.locks) lock.releasedAt ??= new Date().toISOString();
+      next.state = 'released';
+      next.releasedAt ??= new Date().toISOString();
+      return next;
+    });
+  return true;
+}
diff --git a/tools/stack-bench/src/runtime/bounded-process.ts b/tools/stack-bench/src/runtime/bounded-process.ts
new file mode 100644
index 00000000000..10d2dc79500
--- /dev/null
+++ b/tools/stack-bench/src/runtime/bounded-process.ts
@@ -0,0 +1,172 @@
+import { spawn } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { closeSync, constants, mkdirSync, openSync, rmSync, writeSync } from 'node:fs';
+import { dirname, resolve } from 'node:path';
+
+import { killTree } from './platform.js';
+
+export interface CapturedProcessLog {
+  path: string;
+  sha256: string;
+  bytes: number;
+  retainedBytes: number;
+  truncated: boolean;
+}
+
+export interface BoundedProcessResult {
+  ok: boolean;
+  code: number | null;
+  signal: NodeJS.Signals | null;
+  timedOut: boolean;
+  cancelled: boolean;
+  error: Error | null;
+  logs: Record<string, CapturedProcessLog> | null;
+  stdoutTail: string;
+  stderrTail: string;
+}
+
+export interface RunBoundedOptions {
+  cwd?: string;
+  env?: NodeJS.ProcessEnv;
+  stdio?: 'inherit' | 'ignore';
+  timeoutMs: number;
+  logs?: { stdout: string; stderr: string; maxBytes?: number } | null;
+  signal?: AbortSignal | null;
+}
+
+type StreamName = 'stdout' | 'stderr';
+
+interface CaptureState {
+  path: string;
+  fd: number;
+  bytes: number;
+  retainedBytes: number;
+  hash: ReturnType<typeof createHash>;
+  tail: string;
+}
+
+function openCapture(path: string): CaptureState {
+  mkdirSync(dirname(path), { recursive: true });
+  const flags = constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY
+    | (constants.O_NOFOLLOW ?? 0);
+  return { path, fd: openSync(path, flags, 0o600), bytes: 0, retainedBytes: 0,
+    hash: createHash('sha256'), tail: '' };
+}
+
+export function runBounded(command: string, argv: readonly string[],
+  { cwd = process.cwd(), env = process.env, stdio = 'inherit', timeoutMs,
+    terminate = killTree, logs = null, signal = null, gracefulCancellationMs = 0 }:
+    RunBoundedOptions & {
+      terminate?: (pid: number) => void; gracefulCancellationMs?: number;
+    }): Promise<BoundedProcessResult> {
+  return new Promise(resolveRun => {
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs <= 0) {
+      throw new Error('runBounded timeoutMs must be a positive safe integer');
+    }
+    if (!Number.isSafeInteger(gracefulCancellationMs) || gracefulCancellationMs < 0) {
+      throw new Error('runBounded gracefulCancellationMs must be a non-negative safe integer');
+    }
+    const maximum = logs?.maxBytes ?? 4 * 1024 * 1024;
+    if (logs && (!Number.isInteger(maximum) || maximum <= 0)) {
+      throw new Error('runBounded logs.maxBytes must be a positive integer');
+    }
+    if (logs) {
+      for (const name of ['stdout', 'stderr'] as const) {
+        if (typeof logs[name] !== 'string' || !logs[name]) {
+          throw new Error(`runBounded logs.${name} must be a path`);
+        }
+      }
+      if (resolve(logs.stdout) === resolve(logs.stderr)) {
+        throw new Error('runBounded stdout and stderr logs must use different paths');
+      }
+    }
+    let streams: Record<StreamName, CaptureState> | null = null;
+    if (logs) {
+      const stdout = openCapture(resolve(logs.stdout));
+      try {
+        streams = { stdout, stderr: openCapture(resolve(logs.stderr)) };
+      } catch (error) {
+        closeSync(stdout.fd);
+        throw error;
+      }
+    }
+    let child: ReturnType<typeof spawn>;
+    try {
+      child = spawn(command, argv, { cwd, env,
+        stdio: streams ? ['inherit', 'pipe', 'pipe'] : stdio });
+    } catch (error) {
+      if (streams) for (const stream of Object.values(streams)) {
+        closeSync(stream.fd);
+        rmSync(stream.path, { force: true });
+      }
+      throw error;
+    }
+    let timedOut = false;
+    let cancelled = false;
+    let spawnError: Error | null = null;
+    let captureError: Error | null = null;
+    let forceTimer: NodeJS.Timeout | null = null;
+    const stop = (): void => {
+      if (child.pid !== undefined) terminate(child.pid);
+      try { child.kill('SIGKILL'); } catch { /* already exited */ }
+    };
+    const capture = (name: StreamName, destination: NodeJS.WriteStream) =>
+      (chunk: Buffer | string): void => {
+      if (!streams || captureError) return;
+      try {
+        const state = streams[name];
+        const data = Buffer.from(chunk);
+        state.bytes += data.length;
+        const remaining = maximum - state.retainedBytes;
+        if (remaining > 0) {
+          const retained = data.subarray(0, remaining);
+          writeSync(state.fd, retained);
+          state.hash.update(retained);
+          state.retainedBytes += retained.length;
+        }
+        state.tail = `${state.tail}${data.toString('utf8')}`.slice(-2000);
+        destination.write(data);
+      } catch (error) {
+        captureError = error instanceof Error ? error : new Error(String(error));
+        stop();
+      }
+    };
+    if (streams) {
+      child.stdout?.on('data', capture('stdout', process.stdout));
+      child.stderr?.on('data', capture('stderr', process.stderr));
+    }
+    const cancel = (): void => {
+      cancelled = true;
+      if (gracefulCancellationMs > 0) {
+        try { child.kill('SIGTERM'); } catch { /* already exited */ }
+        forceTimer = setTimeout(stop, gracefulCancellationMs);
+        forceTimer.unref();
+      } else stop();
+    };
+    if (signal) {
+      if (signal.aborted) cancel();
+      else signal.addEventListener('abort', cancel, { once: true });
+    }
+    const timer = setTimeout(() => {
+      timedOut = true;
+      stop();
+    }, timeoutMs);
+    child.once('error', error => { spawnError = error; });
+    child.once('close', (code, childSignal) => {
+      clearTimeout(timer);
+      if (forceTimer) clearTimeout(forceTimer);
+      signal?.removeEventListener('abort', cancel);
+      const captured = streams ? Object.fromEntries(Object.entries(streams).map(([name, state]) => {
+        closeSync(state.fd);
+        return [name, { path: state.path, sha256: state.hash.digest('hex'), bytes: state.bytes,
+          retainedBytes: state.retainedBytes, truncated: state.bytes > state.retainedBytes }];
+      })) : null;
+      const error = captureError ?? spawnError;
+      resolveRun({ ok: !timedOut && !cancelled && !error && code === 0,
+        code, signal: childSignal, timedOut, cancelled,
+        error, logs: captured,
+        stdoutTail: streams?.stdout.tail.trim() ?? '',
+        stderrTail: streams?.stderr.tail.trim() ?? '' });
+    });
+  });
+}
diff --git a/tools/stack-bench/src/runtime/coding-container-policy.ts b/tools/stack-bench/src/runtime/coding-container-policy.ts
new file mode 100644
index 00000000000..462e6c9c62f
--- /dev/null
+++ b/tools/stack-bench/src/runtime/coding-container-policy.ts
@@ -0,0 +1,54 @@
+export const CODING_CONTAINER_AGENT = Object.freeze({
+  name: 'developer',
+  uid: 10001,
+  gid: 10001,
+  home: '/home/developer',
+});
+
+export const CODING_CONTAINER_CONTROL_DIR = '/run/application';
+export const CODING_CONTAINER_APP_ROOT = '/app';
+export const CODING_CONTAINER_SPACETIME_CLI = '/deps/spacetimedb-cli';
+export const CODING_CONTAINER_SPACETIME_STANDALONE = '/deps/spacetimedb-standalone';
+export const CODING_CONTAINER_SPACETIME_PACKAGE = '/deps/spacetimedb.tgz';
+export const CODING_CONTAINER_DEPENDENCY_READY_FILE = '/deps/.ready';
+export const CODING_CONTAINER_RELEASE_DEPS_ROOT = '/release-deps';
+export const CODING_CONTAINER_AGENT_CREDENTIAL_FILE = '/run/secrets/agent-credential';
+export const CODING_CONTAINER_START_SCRIPT = `${CODING_CONTAINER_APP_ROOT}/start.sh`;
+export const CODING_CONTAINER_BUG_REPORT_FILE = 'BUG_REPORT.md';
+
+export const CODING_CONTAINER_PROCESS_IDENTITY = Object.freeze({
+  recordPrefix: '/tmp/developer-session-',
+  sessionLabel: 'developer-session',
+  stopLabel: 'developer-stop',
+});
+
+export function codingContainerAgentEnvironment(): { HOME: string; USER: string } {
+  return { HOME: CODING_CONTAINER_AGENT.home, USER: CODING_CONTAINER_AGENT.name };
+}
+
+export function codingContainerAgentExecOptions(): string[] {
+  const agent = CODING_CONTAINER_AGENT;
+  const environment = codingContainerAgentEnvironment();
+  return ['--user', `${agent.uid}:${agent.gid}`, '-e', `HOME=${environment.HOME}`,
+    '-e', `USER=${environment.USER}`];
+}
+
+export function codingContainerAgentCommand(command: string, args: readonly string[] = []): string[] {
+  return ['sh', '-c', 'umask 022; exec "$@"', 'application-command', command, ...args];
+}
+
+// Give only the agent and controller access to session transcripts after handoff.
+export function codingContainerTranscriptHandoffCommands(controllerGid: number): string[][] {
+  const transcripts = `${CODING_CONTAINER_AGENT.home}/.claude/projects/-app`;
+  return [
+    ['chown', '-R', `${CODING_CONTAINER_AGENT.uid}:${controllerGid}`, transcripts],
+    ['chmod', '-R', 'u+rwX,g+rX,o-rwx', transcripts],
+  ];
+}
+
+export function codingContainerWorkspaceHandoffCommands(controllerGid: number): string[][] {
+  return [
+    ['chown', '-R', `${CODING_CONTAINER_AGENT.uid}:${controllerGid}`, CODING_CONTAINER_APP_ROOT],
+    ['chmod', '-R', 'u+rwX,g+rwX,o-rwx', CODING_CONTAINER_APP_ROOT],
+  ];
+}
diff --git a/tools/stack-bench/src/runtime/command-executor.ts b/tools/stack-bench/src/runtime/command-executor.ts
new file mode 100644
index 00000000000..fc9f82426be
--- /dev/null
+++ b/tools/stack-bench/src/runtime/command-executor.ts
@@ -0,0 +1,12 @@
+export interface TextCommandOptions {
+  encoding: 'utf8';
+  stdio: 'pipe';
+  timeout: number;
+  input?: string;
+}
+
+export type TextCommandExecutor = (
+  file: string,
+  args: readonly string[],
+  options: TextCommandOptions,
+) => string;
diff --git a/tools/stack-bench/src/runtime/container-identity.ts b/tools/stack-bench/src/runtime/container-identity.ts
new file mode 100644
index 00000000000..3c0a2ce0742
--- /dev/null
+++ b/tools/stack-bench/src/runtime/container-identity.ts
@@ -0,0 +1,21 @@
+import { execFileSync } from 'node:child_process';
+
+export interface ContainerIdentity {
+  name: string;
+  id: string;
+}
+
+export function parseRunningContainerIdentity(name: string, output: string): ContainerIdentity {
+  const [id, running] = output.trim().split(/\s+/);
+  if (!id || !/^[a-f0-9]{64}$/.test(id) || running !== 'true') {
+    throw new Error(`${name} is not a running Docker container`);
+  }
+  return { name, id };
+}
+
+export function runningContainerIdentity(name: string, timeoutMs = 120_000): ContainerIdentity {
+  const output = execFileSync('docker',
+    ['inspect', '--format', '{{.Id}} {{.State.Running}}', name],
+    { encoding: 'utf8', stdio: 'pipe', timeout: timeoutMs });
+  return parseRunningContainerIdentity(name, output);
+}
diff --git a/tools/stack-bench/src/runtime/container-image.ts b/tools/stack-bench/src/runtime/container-image.ts
new file mode 100644
index 00000000000..faa3838bb05
--- /dev/null
+++ b/tools/stack-bench/src/runtime/container-image.ts
@@ -0,0 +1,44 @@
+import { execFileSync } from 'node:child_process';
+
+const EXACT_IMAGE_REFERENCE = /^[a-z0-9](?:[a-z0-9._:/-]*[a-z0-9])?@sha256:[0-9a-f]{64}$/;
+
+export interface ResolvedContainerImage {
+  reference: string;
+  id: string;
+}
+
+export type ImageInspectRunner = (
+  command: string,
+  args: readonly string[],
+  options: { encoding: BufferEncoding; stdio: 'pipe' },
+) => string;
+
+const defaultImageInspectRunner: ImageInspectRunner = (command, args, options) =>
+  execFileSync(command, [...args], options);
+
+export function isExactImageReference(value: unknown): value is string {
+  return typeof value === 'string' && !value.includes('://') && EXACT_IMAGE_REFERENCE.test(value);
+}
+
+export function parseExactImageReference(value: unknown): ResolvedContainerImage | null {
+  if (!isExactImageReference(value)) return null;
+  return { reference: value, id: value.slice(value.indexOf('@') + 1) };
+}
+
+export function parseImageId(value: unknown): string {
+  const id = String(value).trim();
+  if (!/^sha256:[0-9a-f]{64}$/.test(id)) {
+    throw new Error(`Docker returned an invalid image content id: ${JSON.stringify(id)}`);
+  }
+  return id;
+}
+
+export function resolveContainerImage(
+  reference: unknown,
+  run: ImageInspectRunner = defaultImageInspectRunner,
+): ResolvedContainerImage {
+  if (!reference || typeof reference !== 'string') throw new Error('container image reference is required');
+  const id = parseImageId(run('docker', ['image', 'inspect', '--format', '{{.Id}}', reference],
+    { encoding: 'utf8', stdio: 'pipe' }));
+  return { reference, id };
+}
diff --git a/tools/stack-bench/src/runtime/container-mount.ts b/tools/stack-bench/src/runtime/container-mount.ts
new file mode 100644
index 00000000000..1c791cec6fb
--- /dev/null
+++ b/tools/stack-bench/src/runtime/container-mount.ts
@@ -0,0 +1,43 @@
+import { posix } from 'node:path';
+
+const VOLUME_NAME = /^[A-Za-z0-9][A-Za-z0-9_.-]*$/;
+
+export interface ContainerMount {
+  kind?: 'bind' | 'volume';
+  source: string;
+  target: string;
+  readOnly: boolean;
+}
+
+export function dockerMountArguments(mount: unknown): string[] {
+  if (!mount || typeof mount !== 'object' || Array.isArray(mount)) {
+    throw new Error('container mount must be an object');
+  }
+  const candidate = mount as Record<string, unknown>;
+  const keys = Object.keys(candidate).sort();
+  const allowed = ['kind', 'readOnly', 'source', 'target'];
+  if (keys.some(key => !allowed.includes(key))) {
+    throw new Error(`container mount has unknown fields: ${keys.filter(key => !allowed.includes(key)).join(', ')}`);
+  }
+  const kind = candidate.kind ?? 'bind';
+  if (typeof kind !== 'string' || !['bind', 'volume'].includes(kind)) {
+    throw new Error(`container mount kind ${String(kind)} is unsupported`);
+  }
+  if (typeof candidate.source !== 'string' || !candidate.source.trim()) {
+    throw new Error('container mount source must be a non-empty string');
+  }
+  if (typeof candidate.target !== 'string' || !posix.isAbsolute(candidate.target)
+    || posix.normalize(candidate.target) !== candidate.target || candidate.target === '/') {
+    throw new Error('container mount target must be a normalized absolute container path below /');
+  }
+  if (typeof candidate.readOnly !== 'boolean') throw new Error('container mount readOnly must be boolean');
+  if (kind === 'volume' && !VOLUME_NAME.test(candidate.source)) {
+    throw new Error(`container volume name ${candidate.source} is invalid`);
+  }
+  if (candidate.source.includes(',') || candidate.target.includes(',')) {
+    throw new Error('container mount paths cannot contain commas');
+  }
+  const specification = [`type=${kind}`, `src=${candidate.source}`, `dst=${candidate.target}`];
+  if (candidate.readOnly) specification.push('readonly');
+  return ['--mount', specification.join(',')];
+}
diff --git a/tools/stack-bench/src/runtime/container-smoke.ts b/tools/stack-bench/src/runtime/container-smoke.ts
new file mode 100644
index 00000000000..ed793cd3276
--- /dev/null
+++ b/tools/stack-bench/src/runtime/container-smoke.ts
@@ -0,0 +1,63 @@
+import { dockerMountArguments } from './container-mount.js';
+import { dockerHostGatewayArguments, dockerHostServiceAddress } from './docker-network.js';
+
+export interface ContainerSmokeResult {
+  platform: string;
+  arch: string;
+  node: string;
+  reached: Array<{ url: string; status: number }>;
+  tcpReached: number[];
+  executables: Record<string, string>;
+  credentialStatus: string;
+  diskFreeBytes: number;
+}
+
+export function runContainerSmoke({ command, imageId, resultsDir, destinations, tcpPorts,
+  requiredExecutables, credentialStatusCommand, credentialMount, credentialEnvironment,
+  marker, networkMode }: {
+  command: (file: string, args: string[]) => string;
+  imageId: string;
+  resultsDir: string;
+  destinations: string[];
+  tcpPorts: number[];
+  requiredExecutables: readonly string[];
+  credentialStatusCommand: readonly string[] | null;
+  credentialMount: { kind: string; source: string; target: string; readOnly: boolean } | null;
+  credentialEnvironment: { name: string; file?: string } | null;
+  marker: string;
+  networkMode: 'host' | 'bridge';
+}): ContainerSmokeResult {
+  const hostAddress = dockerHostServiceAddress(networkMode);
+  const script = `const fs=require('node:fs'),net=require('node:net'),path=require('node:path');`
+    + `const {spawnSync}=require('node:child_process');`
+    + `(async()=>{const urls=JSON.parse(process.argv[1]);const ports=JSON.parse(process.argv[2]);`
+    + `const required=JSON.parse(process.argv[3]);const statusCommand=JSON.parse(process.argv[4]);`
+    + `const credentialEnvironment=JSON.parse(process.argv[5]);`
+    + `const tcpReached=[];let credentialStatus='not-checked';`
+    + `const executablePaths=required.map(name=>{for(const dir of (process.env.PATH||'').split(':')){`
+    + `const candidate=path.join(dir,name);try{fs.accessSync(candidate,fs.constants.X_OK);return candidate}catch{}}`
+    + `throw new Error('required executable not found: '+name)});`
+    + `if(credentialEnvironment){const value=credentialEnvironment.file`
+    + `?fs.readFileSync(credentialEnvironment.file,'utf8').trim():process.env[credentialEnvironment.name];`
+    + `if(!value)throw new Error('selected credential is empty');process.env[credentialEnvironment.name]=value}`
+    + `if(statusCommand){const r=spawnSync(statusCommand[0],statusCommand.slice(1),{encoding:'utf8'});`
+    + `credentialStatus=r.status===0?'ready':'not-ready'}`
+    + `const reach=port=>new Promise((ok,fail)=>{const s=net.createConnection({host:'${hostAddress}',port});`
+    + `const t=setTimeout(()=>s.destroy(new Error('timeout')),5000);s.once('connect',()=>{clearTimeout(t);s.end();ok()});`
+    + `s.once('error',e=>{clearTimeout(t);fail(new Error('${hostAddress}:'+port+': '+e.message))})});`
+    + `const reached=[];for(const url of urls){try{const r=await fetch(url,{method:'HEAD',signal:AbortSignal.timeout(15000)});`
+    + `reached.push({url,status:r.status})}catch(e){throw new Error(url+': '+e.message)}}`
+    + `for(const port of ports){await reach(port);tcpReached.push(port)}`
+    + `fs.writeFileSync('/results/'+process.argv[6],'container-write-ok');const s=fs.statfsSync('/',{bigint:true});`
+    + `process.stdout.write(JSON.stringify({platform:process.platform,arch:process.arch,node:process.version,reached,`
+    + `tcpReached,executables:Object.fromEntries(required.map((name,index)=>[name,executablePaths[index]])),`
+    + `credentialStatus,diskFreeBytes:Number(s.bavail*s.bsize)}))})()`;
+  const output = command('docker', ['run', '--rm', '--network', networkMode,
+    ...dockerHostGatewayArguments(networkMode),
+    ...(credentialEnvironment && !credentialEnvironment.file ? ['-e', credentialEnvironment.name] : []),
+    ...(credentialMount ? dockerMountArguments(credentialMount) : []),
+    '-v', `${resultsDir}:/results`, imageId, 'node', '-e', script,
+    JSON.stringify(destinations), JSON.stringify(tcpPorts), JSON.stringify(requiredExecutables),
+    JSON.stringify(credentialStatusCommand), JSON.stringify(credentialEnvironment), marker]);
+  return JSON.parse(output) as ContainerSmokeResult;
+}
diff --git a/tools/stack-bench/src/runtime/docker-network.ts b/tools/stack-bench/src/runtime/docker-network.ts
new file mode 100644
index 00000000000..803f4474de4
--- /dev/null
+++ b/tools/stack-bench/src/runtime/docker-network.ts
@@ -0,0 +1,13 @@
+export const DOCKER_HOST_ALIAS = 'host.docker.internal';
+
+export function dockerHostServiceAddress(networkMode: string = 'bridge'): string {
+  if (networkMode === 'host') return '127.0.0.1';
+  if (networkMode === 'bridge') return DOCKER_HOST_ALIAS;
+  throw new Error(`unsupported Docker network mode ${networkMode}`);
+}
+
+export function dockerHostGatewayArguments(networkMode: string = 'bridge'): string[] {
+  if (networkMode === 'host') return [];
+  if (networkMode !== 'bridge') throw new Error(`unsupported Docker network mode ${networkMode}`);
+  return ['--add-host', `${DOCKER_HOST_ALIAS}:host-gateway`];
+}
diff --git a/tools/stack-bench/src/runtime/grading-timeout.ts b/tools/stack-bench/src/runtime/grading-timeout.ts
new file mode 100644
index 00000000000..08ccb746f3a
--- /dev/null
+++ b/tools/stack-bench/src/runtime/grading-timeout.ts
@@ -0,0 +1,32 @@
+export const GRADER_SOURCE_TIMEOUT_MS = 15 * 60_000;
+
+// The fixed allowance covers setup and bundle creation. Each selected scenario
+// then receives the same allowance as its child grader, up to a worker-safe cap.
+const MIN_GRADING_RUN_TIMEOUT_MS = 20 * 60_000;
+const MAX_GRADING_RUN_TIMEOUT_MS = 120 * 60_000;
+
+interface GradingCheck {
+  executionId?: string;
+  source?: string;
+}
+
+export function selectedGradingSourceCount(
+  ...checkLists: ReadonlyArray<ReadonlyArray<GradingCheck> | null | undefined>
+): number {
+  const sources = new Set();
+  for (const checks of checkLists) {
+    for (const check of checks ?? []) {
+      const source = check.source ?? check.executionId;
+      if (source) sources.add(source);
+    }
+  }
+  return sources.size;
+}
+
+export function gradingRunTimeoutMs(sourceCount: number): number {
+  if (!Number.isSafeInteger(sourceCount) || sourceCount < 0) {
+    throw new Error('grading source count must be a non-negative safe integer');
+  }
+  const scaled = MIN_GRADING_RUN_TIMEOUT_MS + sourceCount * GRADER_SOURCE_TIMEOUT_MS;
+  return Math.min(scaled, MAX_GRADING_RUN_TIMEOUT_MS);
+}
diff --git a/tools/stack-bench/src/runtime/operational-paths.ts b/tools/stack-bench/src/runtime/operational-paths.ts
new file mode 100644
index 00000000000..844aff42860
--- /dev/null
+++ b/tools/stack-bench/src/runtime/operational-paths.ts
@@ -0,0 +1,11 @@
+import { isAbsolute, resolve } from 'node:path';
+
+export function stackBenchResultsRoot(packageRoot: string,
+  env: NodeJS.ProcessEnv = process.env): string {
+  const configured = env.STACK_BENCH_RESULTS_DIR;
+  if (configured === undefined || configured === '') return resolve(packageRoot, 'results');
+  if (configured !== configured.trim() || !isAbsolute(configured)) {
+    throw new Error('STACK_BENCH_RESULTS_DIR must be an absolute path without surrounding whitespace');
+  }
+  return resolve(configured);
+}
diff --git a/tools/stack-bench/src/runtime/path-safety.ts b/tools/stack-bench/src/runtime/path-safety.ts
new file mode 100644
index 00000000000..b19352ecf68
--- /dev/null
+++ b/tools/stack-bench/src/runtime/path-safety.ts
@@ -0,0 +1,16 @@
+import { existsSync, lstatSync, readdirSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+export function assertNewOrEmptyDirectory(path: string, label: string): string {
+  const target = resolve(path);
+  if (!existsSync(target)) return target;
+
+  const stat = lstatSync(target);
+  if (!stat.isDirectory() || stat.isSymbolicLink()) {
+    throw new Error(`${label} must be a real directory: ${target}`);
+  }
+  if (readdirSync(target).length > 0) {
+    throw new Error(`${label} must be new or empty; refusing to overwrite: ${target}`);
+  }
+  return target;
+}
diff --git a/tools/stack-bench/src/runtime/platform.ts b/tools/stack-bench/src/runtime/platform.ts
new file mode 100644
index 00000000000..b701df403bf
--- /dev/null
+++ b/tools/stack-bench/src/runtime/platform.ts
@@ -0,0 +1,183 @@
+// Cleanup helpers must not hide the original failure when platform tools are absent.
+
+import { execFileSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+
+const isWindows = process.platform === 'win32';
+const nullDevice = isWindows ? 'NUL' : '/dev/null';
+
+/** Discard a command's output the way this platform expects. */
+
+export interface ProcessIdentity { pid: number; startMarker: string }
+
+export function processIdentity(pidValue: string | number): ProcessIdentity | null {
+  const pid = Number(pidValue);
+  if (!Number.isSafeInteger(pid) || pid <= 0) return null;
+  let startMarker = '';
+  if (isWindows) {
+    startMarker = run('powershell', ['-NoProfile', '-Command',
+      `(Get-Process -Id ${pid} -ErrorAction Stop).StartTime.ToUniversalTime().Ticks`]).trim();
+  } else {
+    try {
+      const stat = readFileSync(`/proc/${pid}/stat`, 'utf8');
+      const fields = stat.slice(stat.lastIndexOf(')') + 2).trim().split(/\s+/);
+      startMarker = fields[19] ?? '';
+    } catch { return null; }
+  }
+  return /^\d+$/.test(startMarker) ? { pid, startMarker } : null;
+}
+
+export function processIdentityMatches(expected: ProcessIdentity): boolean {
+  const actual = processIdentity(expected.pid);
+  return actual?.startMarker === expected.startMarker;
+}
+
+interface CommandResult {
+  ok: boolean;
+  code: number | null;
+  output: string;
+  error?: unknown;
+}
+
+function errorField(error: unknown, field: 'status' | 'stdout'): unknown {
+  return typeof error === 'object' && error !== null ? Reflect.get(error, field) : undefined;
+}
+
+const run = (cmd: string, args: readonly string[]): string => {
+  try {
+    return execFileSync(cmd, [...args], {
+      encoding: 'utf8',
+      stdio: ['ignore', 'pipe', 'ignore'],
+      timeout: 30_000,
+    });
+  } catch { return ''; }
+};
+
+const runResult = (cmd: string, args: readonly string[]): CommandResult => {
+  try {
+    return { ok: true, code: 0, output: execFileSync(cmd, [...args], {
+      encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 30_000,
+    }) };
+  } catch (error) {
+    const status = errorField(error, 'status');
+    return {
+      ok: false,
+      code: typeof status === 'number' ? status : null,
+      output: `${errorField(error, 'stdout') ?? ''}`,
+      error,
+    };
+  }
+};
+
+/** PIDs listening on a TCP port. */
+export function pidsOnPort(
+  port: string | number,
+  { strict = false }: { strict?: boolean } = {},
+): string[] {
+  const out = new Set<string>();
+  if (isWindows) {
+    const result = runResult('netstat', ['-ano']);
+    if (!result.ok && strict) throw new Error(`could not inspect listeners on :${port}`);
+    for (const line of result.output.split('\n')) {
+      if (!new RegExp(`:${port}\\s`).test(line) || !/LISTENING/i.test(line)) continue;
+      const pid = line.trim().split(/\s+/).pop();
+      if (pid && pid !== '0') out.add(pid);
+    }
+    return [...out];
+  }
+  // lsof is the common case; ss covers minimal containers that lack it.
+  const lsof = runResult('lsof', ['-ti', `tcp:${port}`, '-sTCP:LISTEN']);
+  // lsof uses exit 1 for a successful query with no matches.
+  if (!lsof.ok && lsof.code !== 1 && strict) {
+    const ss = runResult('ss', ['-lptn']);
+    if (!ss.ok) throw new Error(`could not inspect listeners on :${port}`);
+    for (const line of ss.output.split('\n')) {
+      if (!new RegExp(`(?:^|\\s)(?:\\[[^\\]]+\\]|\\S+):${port}\\s`).test(line)) continue;
+      for (const match of line.matchAll(/pid=(\d+)/g)) {
+        const pid = match[1];
+        if (pid !== undefined) out.add(pid);
+      }
+    }
+    return [...out];
+  }
+  for (const pid of lsof.output.split('\n')) {
+    if (pid.trim()) out.add(pid.trim());
+  }
+  if (!out.size) {
+    const ss = runResult('ss', ['-lptn']);
+    if (!ss.ok) {
+      if (strict && lsof.code !== 1) throw new Error(`could not inspect listeners on :${port}`);
+      return [];
+    }
+    for (const line of ss.output.split('\n')) {
+      if (!new RegExp(`(?:^|\\s)(?:\\[[^\\]]+\\]|\\S+):${port}\\s`).test(line)) continue;
+      for (const match of line.matchAll(/pid=(\d+)/g)) {
+        const pid = match[1];
+        if (pid !== undefined) out.add(pid);
+      }
+    }
+  }
+  return [...out];
+}
+
+export function processTreePids(rootPid: string | number, processRows: unknown): number[] {
+  const root = Number(rootPid);
+  if (!Number.isSafeInteger(root) || root <= 0) return [];
+  const children = new Map<number, number[]>();
+  for (const line of String(processRows ?? '').split(/\r?\n/)) {
+    const match = line.trim().match(/^(\d+)\s+(\d+)$/);
+    if (!match) continue;
+    const pidText = match[1];
+    const parentText = match[2];
+    if (pidText === undefined || parentText === undefined) continue;
+    const pid = Number(pidText);
+    const parent = Number(parentText);
+    const siblings = children.get(parent) ?? [];
+    if (!children.has(parent)) children.set(parent, siblings);
+    siblings.push(pid);
+  }
+  const ordered: number[] = [];
+  const seen = new Set<number>([root]);
+  const visit = (pid: number): void => {
+    for (const child of children.get(pid) ?? []) {
+      if (seen.has(child)) continue;
+      seen.add(child);
+      visit(child);
+      ordered.push(child);
+    }
+  };
+  visit(root);
+  ordered.push(root);
+  return ordered;
+}
+
+/** Kill a process and its descendants. Never throws — it may already be gone. */
+export function killTree(pid: string | number | null | undefined): void {
+  if (!pid || String(pid) === '0' || Number(pid) === process.pid) return;
+  if (isWindows) run('taskkill', ['/F', '/PID', String(pid), '/T']);
+  else {
+    const tree = processTreePids(pid, run('ps', ['-eo', 'pid=,ppid=']));
+    run('kill', ['-9', ...tree.map(String)]);
+  }
+}
+
+/** Kill a child spawned with detached:true, including its process group. */
+export function killDetachedTree(pid: string | number | null | undefined): void {
+  if (!pid || String(pid) === '0' || Number(pid) === process.pid) return;
+  if (isWindows) { killTree(pid); return; }
+  try { process.kill(-Number(pid), 'SIGKILL'); }
+  catch { killTree(pid); }
+}
+
+/** Block for `ms` without a child process — `timeout` needs a console on Windows. */
+export function sleepSync(ms: number): void {
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
+}
+
+/** Is something answering at this URL? Any response counts. */
+export function answers(url: string, timeoutSec = 3): boolean {
+  try {
+    execFileSync('curl', ['-s', '-m', String(timeoutSec), '-o', nullDevice, url], { stdio: 'ignore' });
+    return true;
+  } catch { return false; }
+}
diff --git a/tools/stack-bench/src/runtime/preflight.ts b/tools/stack-bench/src/runtime/preflight.ts
new file mode 100644
index 00000000000..f447027258b
--- /dev/null
+++ b/tools/stack-bench/src/runtime/preflight.ts
@@ -0,0 +1,680 @@
+import { execFileSync, spawnSync } from 'node:child_process';
+import {
+  existsSync, mkdirSync, openSync, closeSync, readFileSync, readSync, renameSync, rmSync,
+  statfsSync, writeFileSync,
+} from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+
+import { AGENT_ADAPTER_REGISTRY } from '../agents/agent-adapters.js';
+import type { AgentAdapter } from '../agents/agent-adapter-contract.js';
+import { resolveDefaultGuidanceForStack } from '../campaigns/condition-compiler.js';
+import type { RequestedScope } from '../campaigns/condition-compiler.js';
+import { isExactImageReference, parseImageId } from './container-image.js';
+import { runContainerSmoke } from './container-smoke.js';
+import { BUILD_OUTBOUND_DESTINATIONS, preflightResourceFloors } from '../composition/product-config.js';
+import { resolveRecipeRelease } from '../composition/recipe-release.js';
+import { createBoundRecipeTaskRequest, resolveRecipeSelection } from '../composition/recipe-selection.js';
+import { validateFeatureCatalogInput } from '../progression/progression-definition.js';
+import { resolveProgressionRecipeLevelSelection }
+  from '../progression/progression-recipe-selection.js';
+import { STACK_ADAPTER_REGISTRY } from '../stacks/stack-adapters.js';
+import { databaseContainer, isDatabaseContainerBackend } from '../stacks/database-containers.js';
+import { POSTGRES_APPLICATION_IDENTITY } from '../stacks/hosted-database-identity.js';
+import { assertNoPortCollisions, listTracks, loadTrack, portsFor } from '../composition/tracks.js';
+import { pidsOnPort } from './platform.js';
+import { agentSkillPaths, selectAgentSkills } from '../agents/agent-materials.js';
+import { STACK_BENCH_RUNNER_PLATFORM } from './runner-environment.js';
+import { CODING_CONTAINER_AGENT_CREDENTIAL_FILE } from './coding-container-policy.js';
+
+import { STACK_BENCH_ROOT as ROOT } from '../package-root.js';
+const REPO = resolve(ROOT, '..', '..');
+const COMPOSE = process.env.STACK_BENCH_COMPOSE_FILE ?? join(ROOT, 'docker-compose.yaml');
+const LINUX_CLI = process.env.STACK_BENCH_LINUX_CLI
+  ?? join(ROOT, 'container', 'bin', 'spacetimedb-cli');
+const GIB = 1024 ** 3;
+
+type CheckStatus = 'pass' | 'fail' | 'warn';
+
+export interface PreflightRequest {
+  backends: string[];
+  track: string;
+  levels?: string;
+  levelList: number[];
+  runIndex: number;
+  parallelism?: number;
+  agentAdapter: string;
+  guidance: string;
+  packIds: string[];
+  checkKeys: string[];
+  smoke: boolean;
+  image: string;
+  resultsDir: string;
+  recipe?: string;
+  report?: string;
+  json?: boolean;
+  supervisorState?: string;
+  requestedScopes?: RequestedScope[];
+  featureCatalog?: unknown;
+  mode?: { id?: string };
+  admittedSmoke?: { id: string; [key: string]: unknown };
+  agentSkills?: string[] | null;
+}
+
+export interface PreflightCheck {
+  id: string;
+  status: CheckStatus;
+  summary: string;
+  remediation?: string;
+  evidence?: unknown;
+}
+
+export interface PreflightReport {
+  schemaVersion: 1;
+  generatedAt: string;
+  request: Record<string, unknown>;
+  ok: boolean;
+  summary: { passed: number; failed: number; warnings: number };
+  checks: PreflightCheck[];
+}
+
+type Command = (file: string, args: string[], options?: Record<string, unknown>) => unknown;
+type PortProbe = (port: number | string) => { free: boolean };
+
+interface PreflightDependencies {
+  run?: Command;
+  env?: NodeJS.ProcessEnv;
+  now?: number | (() => number);
+  home?: string;
+  exists?: (path: string) => boolean;
+  statfs?: (path: string) => { bavail: bigint; bsize: bigint };
+  pidsOnPort?: (port: number) => Array<number | string>;
+  probePort?: PortProbe;
+  readCompose?: () => string;
+}
+
+interface CredentialStatus {
+  ok: boolean;
+  kind?: string;
+  source?: string | null;
+  reason?: string;
+  environment?: string | null;
+  files?: readonly string[];
+  credentialEnvironments?: readonly string[];
+  variable?: string;
+  path?: string;
+}
+
+interface DockerInfo {
+  OSType: string;
+  Architecture: string;
+  ServerVersion?: string;
+  NCPU: number;
+  MemTotal: number;
+  SystemTime: string;
+}
+
+interface DockerContainerInspection {
+  Image?: string;
+  State?: { Running?: boolean; Health?: { Status?: string } };
+  NetworkSettings?: { Ports?: Record<string, Array<{ HostPort?: string }>> };
+}
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function spacetimeServerUri(value: unknown): string {
+  if (!isRecord(value) || !isRecord(value.lease) || typeof value.lease.serverUri !== 'string') {
+    throw new Error('SpacetimeDB orchestrator config did not provide a server URI');
+  }
+  return value.lease.serverUri;
+}
+
+function requestIdentity(value: unknown): { selectionSha256: string; taskSha256: string } {
+  if (!isRecord(value) || !isRecord(value.selection) || !isRecord(value.task)
+    || typeof value.selection.sha256 !== 'string' || typeof value.task.sha256 !== 'string') {
+    throw new Error('resolved request is missing selection or task identity');
+  }
+  return { selectionSha256: value.selection.sha256, taskSha256: value.task.sha256 };
+}
+
+export function verifyPostgresServiceIdentity(
+  containerName: string,
+  { execute = execFileSync }: { execute?: Command } = {},
+): string {
+  const { user, password, defaultDatabase: database } = POSTGRES_APPLICATION_IDENTITY;
+  const output = String(execute('docker', ['exec', '-e', `PGPASSWORD=${password}`, containerName,
+    'psql', '-h', '127.0.0.1', '-U', user, '-d', database,
+    '-v', 'ON_ERROR_STOP=1', '-Atc', "SELECT current_user || '|' || current_database();"],
+  { encoding: 'utf8', stdio: 'pipe' })).trim();
+  const expected = `${user}|${database}`;
+  if (output !== expected) throw new Error(`expected ${expected}, received ${output || 'no output'}`);
+  return expected;
+}
+
+function commandRunner(run: Command): (file: string, args: string[]) => string {
+  return (file: string, args: string[]): string => String(run(file, args, {
+    encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 120_000,
+  })).trim();
+}
+
+function bytes(value: number | bigint): string {
+  return `${(Number(value) / GIB).toFixed(1)} GiB`;
+}
+
+function composeImageReference(service: string, text: string): string | null {
+  const section = text.match(new RegExp(`^  ${service}:\\r?\\n([\\s\\S]*?)(?=^  [a-z][a-z0-9-]*:|^volumes:)`, 'm'))?.[1] ?? '';
+  return section.match(/^ {4}image:\s*(\S+)\s*$/m)?.[1] ?? null;
+}
+
+function checkResult(
+  id: string,
+  status: CheckStatus,
+  summary: string,
+  remediation: string | null = null,
+  evidence: unknown = null,
+): PreflightCheck {
+  return { id, status, summary, ...(remediation ? { remediation } : {}),
+    ...(evidence ? { evidence } : {}) };
+}
+
+function credentialReady(
+  adapter: AgentAdapter,
+  env: NodeJS.ProcessEnv,
+  home: string,
+  exists: (path: string) => boolean,
+): CredentialStatus {
+  const environment = adapter.apiKeyEnvironmentVariable;
+  let apiKey = null;
+  if (environment && env[environment]) {
+    apiKey = { ok: true, kind: 'api-key', source: `environment:${environment}` };
+  }
+  const keyFileVariable = environment ? `${environment}_FILE` : null;
+  if (!apiKey && keyFileVariable && env[keyFileVariable] && exists(resolve(env[keyFileVariable]))) {
+    apiKey = { ok: true, kind: 'api-key', source: `secret-file:${keyFileVariable}` };
+  }
+  let environmentCredential = null;
+  for (const variable of adapter.credentialEnvironmentVariables) {
+    const fileVariable = `${variable}_FILE`;
+    const candidate = env[variable]
+      ? { ok: true, kind: 'credential-environment', source: `environment:${variable}`, variable }
+      : env[fileVariable] && exists(resolve(env[fileVariable]))
+        ? { ok: true, kind: 'credential-secret-file', source: `secret-file:${fileVariable}`,
+          variable, path: resolve(env[fileVariable]) }
+        : null;
+    if (candidate && environmentCredential) {
+      return { ok: false, source: null, reason: 'Multiple non-API credential sources are selected' };
+    }
+    environmentCredential = candidate ?? environmentCredential;
+  }
+  if (apiKey && environmentCredential) {
+    return { ok: false, source: null, reason: 'API-key and subscription credentials are both selected' };
+  }
+  if (apiKey) return apiKey;
+  if (environmentCredential) return environmentCredential;
+  const file = adapter.credentialFiles.find(relative => exists(join(home, relative)));
+  if (file) return { ok: true, kind: 'credential-file',
+    source: `file:${file.replaceAll('\\', '/')}`, path: join(home, file) };
+  if (!environment && adapter.credentialEnvironmentVariables.length === 0
+    && adapter.credentialFiles.length === 0) {
+    return { ok: true, kind: 'not-required', source: 'not-required' };
+  }
+  return { ok: false, source: null, environment, files: adapter.credentialFiles,
+    credentialEnvironments: adapter.credentialEnvironmentVariables };
+}
+
+function inspectLinuxCli(path: string = LINUX_CLI): { ok: boolean; arch: string | null } {
+  if (!existsSync(path)) return { ok: false, arch: null };
+  const header = Buffer.alloc(20);
+  try {
+    const descriptor = openSync(path, 'r');
+    try { readSync(descriptor, header, 0, header.length, 0); } finally { closeSync(descriptor); }
+    if (!header.subarray(0, 4).equals(Buffer.from([0x7f, 0x45, 0x4c, 0x46]))) {
+      return { ok: false, arch: null };
+    }
+    const machine = header.readUInt16LE(18);
+    return { ok: [0x3e, 0xb7].includes(machine), arch: machine === 0x3e ? 'x86_64'
+      : machine === 0xb7 ? 'aarch64' : `machine-${machine}` };
+  } catch { return { ok: false, arch: null }; }
+}
+
+export function probeLoopbackPort(
+  port: number | string,
+  { spawn = spawnSync }: { spawn?: typeof spawnSync } = {},
+): { free: boolean } {
+  if (!Number.isInteger(Number(port)) || Number(port) < 1 || Number(port) > 65535) {
+    throw new Error(`invalid TCP port ${port}`);
+  }
+  const script = "const net=require('node:net');const s=net.createServer();"
+    + "s.once('error',e=>{console.error(e.code||e.message);process.exit(e.code==='EADDRINUSE'?3:2)});"
+    + "s.listen(Number(process.argv[1]),'127.0.0.1',()=>s.close(()=>process.exit(0)));";
+  const result = spawn(process.execPath, ['-e', script, String(port)], {
+    encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 10_000,
+  });
+  if (result.status === 0) return { free: true };
+  if (result.status === 3 && String(result.stderr).includes('EADDRINUSE')) return { free: false };
+  throw new Error(String(result.stderr || result.error?.message || `probe exited ${result.status}`).trim());
+}
+
+export function runPreflight(
+  request: PreflightRequest,
+  dependencies: PreflightDependencies = {},
+): PreflightReport {
+  const run = commandRunner(dependencies.run ?? execFileSync);
+  const env = dependencies.env ?? process.env;
+  const suppliedNow = dependencies.now;
+  const readNow: () => number = typeof suppliedNow === 'function'
+    ? suppliedNow : suppliedNow === undefined ? Date.now : () => suppliedNow;
+  const startedAt = readNow();
+  const home = dependencies.home ?? homedir();
+  const exists = dependencies.exists ?? existsSync;
+  const statfs = dependencies.statfs ?? ((path: string) => statfsSync(path, { bigint: true }));
+  const inspectPorts = dependencies.pidsOnPort ?? pidsOnPort;
+  const probePort = dependencies.probePort ?? probeLoopbackPort;
+  const checks: PreflightCheck[] = [];
+  const resourceFloors = preflightResourceFloors(request.parallelism ?? 1);
+  const add = (...args: Parameters<typeof checkResult>): void => {
+    checks.push(checkResult(...args));
+  };
+  let track;
+  let agent;
+
+  try {
+    agent = AGENT_ADAPTER_REGISTRY.get(request.agentAdapter);
+    for (const backend of request.backends) STACK_ADAPTER_REGISTRY.get(backend);
+    if (!listTracks({ includeInternal: true }).includes(request.track)) {
+      throw new Error(`unknown track ${JSON.stringify(request.track)}`);
+    }
+    track = loadTrack(request.track);
+    assertNoPortCollisions();
+    if (request.requestedScopes?.length) {
+      const featureCatalog = request.featureCatalog
+        ? validateFeatureCatalogInput(request.featureCatalog) : null;
+      for (const scope of request.requestedScopes) {
+        if (scope?.track !== request.track || !Array.isArray(scope.levels)
+          || scope.levels.length === 0
+          || JSON.stringify(scope.levels.map(entry => entry.level).sort((a, b) => a - b))
+            !== JSON.stringify([...request.levelList].sort((a, b) => a - b))) {
+          throw new Error('requested scope does not match the preflight track and levels');
+        }
+        for (const requested of scope.levels) {
+          const recipe = `${requested.recipe.id}@${requested.recipe.version}`;
+          const binding = resolveRecipeRelease(track, requested.level, recipe);
+          if (!binding || binding.release.contentSha256 !== requested.recipe.contentSha256) {
+            throw new Error(`L${requested.level} requested recipe ${recipe} changed`);
+          }
+          const selection = requested.selection.requested;
+          const resolvedRequest = featureCatalog
+            ? resolveProgressionRecipeLevelSelection(binding, featureCatalog, requested.level,
+              { cumulative: request.mode?.id === 'dependency' }).grader.request
+            : createBoundRecipeTaskRequest(binding, selection.features
+              ? { featureIds: selection.features,
+                  requestedSpecifications: selection.specifications?.requested,
+                  expectedSpecifications: selection.specifications?.expected,
+                  observedSpecifications: selection.specifications?.observed,
+                  checkKeys: selection.checks }
+              : { packIds: selection.packs, checkKeys: selection.checks }).request;
+          const identity = requestIdentity(resolvedRequest);
+          if (identity.selectionSha256 !== requested.selection.sha256
+            || identity.taskSha256 !== requested.task.sha256) {
+            throw new Error(`L${requested.level} requested scope changed`);
+          }
+        }
+      }
+    } else {
+      for (const level of request.levelList) {
+        const binding = resolveRecipeRelease(track, level, request.recipe);
+        if (!binding && ((request.packIds ?? []).length || (request.checkKeys ?? []).length)) {
+          throw new Error(`L${level} has no recipe release for --pack/--check selection`);
+        }
+        if (binding) resolveRecipeSelection(binding.release, request);
+      }
+    }
+    add('request.scope', 'pass', `${request.track} L${request.levelList.join(',L')} on ${request.backends.join(', ')}`);
+  } catch (error) {
+    add('request.scope', 'fail', errorMessage(error),
+      'Correct the requested track, level, pack, check, or adapter.');
+  }
+
+  const nodeMajor = Number(process.versions.node.split('.')[0]);
+  add('host.node', nodeMajor >= 22 ? 'pass' : 'fail', `Node ${process.versions.node}`,
+    nodeMajor >= 22 ? null : 'Install Node 22 or newer.');
+  const appliance = env.STACK_BENCH_APPLIANCE === '1';
+  if (appliance) {
+    const controllerReference = env.STACK_BENCH_CONTROLLER_IMAGE;
+    const controllerPinned = isExactImageReference(controllerReference);
+    const buildPinned = isExactImageReference(request.image);
+    add('image.controller-reference', controllerPinned ? 'pass' : 'fail',
+      controllerPinned
+        ? `Controller image is digest-pinned: ${controllerReference}`
+        : 'Controller image is not digest-pinned',
+      controllerPinned ? null
+        : 'Set STACK_BENCH_CONTROLLER_IMAGE to an exact image@sha256 digest reference.');
+    add('image.build-reference', buildPinned ? 'pass' : 'fail',
+      buildPinned
+        ? `Build image is digest-pinned: ${request.image}`
+        : 'Build image is not digest-pinned',
+      buildPinned ? null
+        : 'Set STACK_BENCH_IMAGE to an exact image@sha256 digest reference.');
+  }
+  const supportedHost = appliance
+    ? process.platform === 'linux' && process.arch === 'x64'
+    : ['win32', 'linux'].includes(process.platform) && ['x64', 'arm64'].includes(process.arch);
+  add('host.architecture', supportedHost ? 'pass' : 'fail', `${process.platform}/${process.arch}`,
+    supportedHost ? null : appliance
+      ? `Run the appliance on its supported ${STACK_BENCH_RUNNER_PLATFORM} dedicated runner.`
+      : 'Use a supported x64 or arm64 Windows/Linux host.');
+
+  for (const name of ['STACK_BENCH_LEASE', 'STACK_BENCH_LEASE_TOKEN']) {
+    if (env[name]) add(`ambient.${name.toLowerCase()}`, 'fail', `${name} is already set`,
+      `Unset ${name}; preflight must not inherit another run's ownership state.`);
+  }
+  if (env.STACK_BENCH_SUPERVISOR_STATE) {
+    const expected = request.supervisorState
+      && resolve(request.supervisorState) === resolve(env.STACK_BENCH_SUPERVISOR_STATE)
+      && !exists(resolve(env.STACK_BENCH_SUPERVISOR_STATE));
+    add('ambient.stack_bench_supervisor_state', expected ? 'pass' : 'fail', expected
+      ? 'Fresh supervisor handoff path is reserved for this run'
+      : 'STACK_BENCH_SUPERVISOR_STATE is inherited or already exists', expected ? null
+        : 'Unset inherited supervisor state; supervised callers must reserve a fresh path for this exact run.');
+  }
+  if (env.DOCKER_HOST && /^(?:tcp|ssh):/i.test(env.DOCKER_HOST)) {
+    add('ambient.docker-host', 'fail', 'Remote Docker endpoint is configured',
+      'Use a local Docker engine; bind mounts and host routing are part of the measured environment.');
+  } else add('ambient.docker-host', 'pass', 'Docker endpoint is local/default');
+
+  const auth = agent ? credentialReady(agent, env, home, exists) : { ok: false };
+  add('agent.credentials', auth.ok ? 'pass' : 'fail', auth.ok
+    ? `Credential source available (${auth.source})`
+    : auth.reason ?? 'No declared credential source is available',
+  auth.ok ? null : auth.reason
+    ? 'Select exactly one credential mode.'
+    : `Set ${[auth.environment, ...(auth.credentialEnvironments ?? [])].filter(Boolean).join(' or ')}`
+      + ` or install one of: ${(auth.files ?? []).join(', ')}`);
+
+  mkdirSync(request.resultsDir, { recursive: true });
+  const hostMarker = `.preflight-host-${process.pid}-${Math.random().toString(16).slice(2)}`;
+  try {
+    writeFileSync(join(request.resultsDir, hostMarker), 'host-write-ok', { flag: 'wx', mode: 0o600 });
+    rmSync(join(request.resultsDir, hostMarker));
+    const stats = statfs(request.resultsDir);
+    const free = stats.bavail * stats.bsize;
+    add('storage.results', free >= BigInt(resourceFloors.resultDiskBytes) ? 'pass' : 'fail',
+      `${bytes(free)} free at ${request.resultsDir}`,
+      free >= BigInt(resourceFloors.resultDiskBytes) ? null
+        : `Provide at least ${bytes(resourceFloors.resultDiskBytes)} free for persistent results.`);
+  } catch (error) {
+    add('storage.results', 'fail', `Result directory is not safely writable: ${errorMessage(error)}`,
+      'Choose a persistent writable result directory with --results-dir.');
+  }
+
+  let dockerInfo: DockerInfo | null = null;
+  let imageId: string | null = null;
+  try {
+    const dockerInfoStartedAt = readNow();
+    const info: DockerInfo = JSON.parse(run('docker', ['info', '--format', '{{json .}}']));
+    dockerInfo = info;
+    const dockerInfoFinishedAt = readNow();
+    const ok = info.OSType === 'linux' && (appliance
+      ? info.Architecture === 'x86_64'
+      : ['x86_64', 'aarch64'].includes(info.Architecture));
+    add('docker.engine', ok ? 'pass' : 'fail',
+      `Docker ${info.ServerVersion ?? 'unknown'} (${info.OSType}/${info.Architecture})`,
+      ok ? null : 'Use a supported x86_64 or aarch64 Linux-container Docker engine.');
+    try {
+      add('docker.compose', 'pass', `Docker Compose ${run('docker', ['compose', 'version', '--short'])}`);
+    } catch {
+      add('docker.compose', 'fail', 'Docker Compose plugin is unavailable',
+        'Install the Docker Compose v2 plugin.');
+    }
+    // Coding containers share the runner's network with everything else on
+    // it. Another workload is a fact the evidence must carry.
+    try {
+      const coResident = run('docker', ['ps', '--format', '{{.Names}}']).split(/\r?\n/)
+        .map(name => name.trim()).filter(name => name && !name.startsWith('stack-bench'));
+      add('host.co-resident', coResident.length ? 'warn' : 'pass', coResident.length
+        ? `${coResident.length} co-resident container(s): ${coResident.slice(0, 6).join(', ')}`
+        : 'no co-resident containers',
+      coResident.length ? 'Run paid campaigns on a dedicated runner.' : null);
+    } catch (error) {
+      add('host.co-resident', 'warn', `could not list containers: ${errorMessage(error)}`,
+        'Run paid campaigns on a dedicated runner.');
+    }
+    const enoughCpu = info.NCPU >= resourceFloors.cpuCount;
+    add('docker.cpu', enoughCpu ? 'pass' : 'fail', `${info.NCPU} CPUs available`,
+      enoughCpu ? null : `Allocate at least ${resourceFloors.cpuCount} CPUs to Docker.`);
+    const enoughMemory = info.MemTotal >= resourceFloors.memoryBytes;
+    add('docker.memory', enoughMemory ? 'pass' : 'fail',
+      `${bytes(info.MemTotal)} available`,
+      enoughMemory ? null : `Allocate at least ${bytes(resourceFloors.memoryBytes)} to Docker.`);
+    const engineTime = Date.parse(info.SystemTime);
+    const skew = !Number.isFinite(engineTime) ? Number.NaN
+      : engineTime < dockerInfoStartedAt ? dockerInfoStartedAt - engineTime
+        : engineTime > dockerInfoFinishedAt ? engineTime - dockerInfoFinishedAt : 0;
+    const clockReady = Number.isFinite(skew) && skew <= resourceFloors.clockSkewMs;
+    add('docker.clock', clockReady ? 'pass' : 'fail',
+      `host/engine skew ${Number.isFinite(skew) ? skew : 'unknown'} ms`,
+      clockReady ? null : 'Synchronize the host and Docker clocks.');
+  } catch (error) {
+    add('docker.engine', 'fail', `Docker is unavailable: ${errorMessage(error).split('\n')[0]}`,
+      'Start a local Docker engine and ensure the docker CLI can reach it.');
+  }
+
+  if (dockerInfo) {
+    try {
+      imageId = parseImageId(run('docker', ['image', 'inspect', '--format', '{{.Id}}', request.image]));
+      add('image.build', 'pass', `${request.image} -> ${imageId}`);
+      const imagePlatform = run('docker', ['image', 'inspect', '--format', '{{.Os}}/{{.Architecture}}', request.image]);
+      const expectedArch = dockerInfo.Architecture === 'x86_64' ? 'amd64' : 'arm64';
+      add('image.platform', imagePlatform === `linux/${expectedArch}` ? 'pass' : 'fail', imagePlatform,
+        imagePlatform === `linux/${expectedArch}` ? null : 'Build or pull the isolation image for the Docker engine architecture.');
+    } catch {
+      add('image.build', 'fail', `Build image ${request.image} is unavailable or unidentifiable`,
+        `Build it with: docker build -t ${request.image} ${join(ROOT, 'container')}`);
+    }
+  }
+
+  if (!request.smoke && request.admittedSmoke) {
+    add('smoke.admission', 'pass',
+      `Container smoke was admitted by ${request.admittedSmoke.id}`,
+      null, { admission: request.admittedSmoke });
+  } else if (!request.smoke) add('outbound.container', 'warn',
+    'Container outbound access and result-volume persistence were not exercised',
+    'Run the same command with --smoke before a paid campaign.');
+
+  const composeText = exists(COMPOSE) ? String(dependencies.readCompose?.() ?? readFileSync(COMPOSE, 'utf8')) : '';
+  for (const backend of (track ? request.backends : []).filter(isDatabaseContainerBackend)) {
+    if (!track) continue;
+    const service = backend;
+    const container = databaseContainer(backend, env);
+    const reference = composeImageReference(service, composeText);
+    if (!reference || !/@sha256:[a-f0-9]{64}$/.test(reference)) {
+      add(`image.${backend}`, 'fail', `${service} Compose image is not digest-pinned`,
+        'Pin the service image to an exact sha256 digest.');
+      continue;
+    }
+    try {
+      const expectedId = parseImageId(run('docker', ['image', 'inspect', '--format', '{{.Id}}', reference]));
+      const inspections: DockerContainerInspection[] = JSON.parse(
+        run('docker', ['container', 'inspect', container.name]),
+      );
+      const inspected = inspections[0];
+      if (!inspected) throw new Error(`${container.name} inspection returned no container`);
+      const allocated = portsFor(track, backend, request.runIndex);
+      const hostPort = String(allocated.dbPort);
+      const mapping = inspected.NetworkSettings?.Ports?.[`${container.internalPort}/tcp`] ?? [];
+      const healthy = !inspected.State?.Health || inspected.State.Health.Status === 'healthy';
+      const ready = inspected.State?.Running === true && healthy && inspected.Image === expectedId
+        && mapping.some((item: { HostPort?: string }) => item.HostPort === hostPort);
+      add(`service.${backend}`, ready ? 'pass' : 'fail', ready
+        ? `${container.name} is running exact image ${expectedId}`
+        : `${container.name} is absent, stopped/unhealthy, on the wrong image, or mapped to the wrong port`,
+      ready ? null : `Run docker compose -f ${COMPOSE} up -d ${service}.`);
+      if (backend === 'postgres' && ready) {
+        try {
+          const identity = verifyPostgresServiceIdentity(container.name, { execute: run });
+          add('service.postgres.identity', 'pass', `Authenticated as ${identity}`);
+        } catch (error) {
+          add('service.postgres.identity', 'fail',
+            `PostgreSQL application identity is unavailable: ${errorMessage(error)}`,
+            `Recreate or migrate the Stack Bench PostgreSQL volume, then restart ${container.name}.`);
+        }
+      }
+    } catch {
+      add(`service.${backend}`, 'fail', `${container.name} is not ready`,
+        `Run docker compose -f ${COMPOSE} up -d ${service}.`);
+    }
+  }
+
+  if (track) {
+    for (const backend of request.backends) {
+      const adapter = STACK_ADAPTER_REGISTRY.get(backend);
+      const profileSkills = resolveDefaultGuidanceForStack(request.guidance, backend)
+        ?.skills[backend]?.ids;
+      const defaultSkills = profileSkills ?? [...adapter.agent.defaultSkills];
+      const skills = agent?.usesStackSkills
+        ? selectAgentSkills(defaultSkills, request.agentSkills ?? null) : [];
+      const missingSkills = agentSkillPaths(REPO, skills).filter(path => !exists(path));
+      add(`materials.${backend}.skills`, missingSkills.length ? 'fail' : 'pass', skills.length
+        ? `${skills.length} selected skill document(s) are present`
+        : 'No skill documents are required', missingSkills.length
+          ? `Install the selected skill documents in ${join(REPO, 'skills')} before running.` : null,
+      { skills, missing: missingSkills });
+      const ports = portsFor(track, backend, request.runIndex);
+      for (const [role, port] of Object.entries(ports)) {
+        if (port == null || role === 'db' || role === 'dbPort') continue;
+        try {
+          const availability = probePort(port);
+          const listeners = availability.free ? [] : inspectPorts(port);
+          add(`port.${backend}.${role}`, availability.free ? 'pass' : 'fail', availability.free
+            ? `Port ${port} is free`
+            : `Port ${port} is already in use${listeners.length ? ` by PID(s) ${listeners.join(', ')}` : ''}`,
+          availability.free ? null : 'Stop the listener or choose a different --run-index.');
+        } catch {
+          add(`port.${backend}.${role}`, 'fail', `Cannot prove port ${port} is free`,
+            'Install netstat on Windows or lsof/ss on Linux so port ownership can be checked.');
+        }
+      }
+    }
+  }
+
+  if (request.backends.includes('spacetime')) {
+    try {
+      const runtime = STACK_ADAPTER_REGISTRY.get('spacetime').orchestrator.config(
+        { root: ROOT, env, helpers: { exists } });
+      const port = Number(new URL(spacetimeServerUri(runtime)).port);
+      const availability = probePort(port);
+      const listeners = availability.free ? [] : inspectPorts(port);
+      add('port.spacetime.host', availability.free ? 'pass' : 'fail', availability.free
+        ? `Dedicated host port ${port} is free`
+        : `Dedicated host port ${port} is already in use${listeners.length ? ` by PID(s) ${listeners.join(', ')}` : ''}`,
+      availability.free ? null : 'Stop the listener or choose another loopback STACK_BENCH_STDB_URI port.');
+    } catch (error) {
+      add('port.spacetime.host', 'fail',
+        `Cannot validate the dedicated SpacetimeDB host port: ${errorMessage(error)}`,
+        'Use an explicit, free loopback STACK_BENCH_STDB_URI port.');
+    }
+    const cli = inspectLinuxCli();
+    const expectedCliArch = dockerInfo?.Architecture ?? null;
+    const cliReady = cli.ok && (!expectedCliArch || cli.arch === expectedCliArch);
+    add('spacetime.linux-cli', cliReady ? 'pass' : 'fail', cliReady
+      ? `Repository Linux CLI is ELF ${cli.arch}`
+      : `Repository Linux CLI is missing, invalid, or ${cli.arch ?? 'unknown'} instead of ${expectedCliArch ?? 'the target architecture'}`,
+    cliReady ? null : 'Run bash tools/stack-bench/container/build-linux-cli.sh on the target architecture.');
+  }
+
+  if (request.smoke && imageId) {
+    const marker = `.preflight-container-${process.pid}-${Math.random().toString(16).slice(2)}`;
+    const destinations = [...new Set([...BUILD_OUTBOUND_DESTINATIONS,
+      ...(agent?.outboundDestinations ?? [])])].sort();
+    const tcpPorts = track ? request.backends.filter(backend => ['postgres', 'mongodb'].includes(backend))
+      .map(backend => portsFor(track, backend, request.runIndex).dbPort)
+      .filter((port): port is number => typeof port === 'number').sort((a, b) => a - b) : [];
+    const credentialStatusCommand = auth.kind !== undefined && ['credential-file',
+      'credential-environment', 'credential-secret-file'].includes(auth.kind)
+      ? agent?.credentialStatusCommand ?? null : null;
+    const credentialMount = auth.kind === 'credential-file' && credentialStatusCommand
+      && auth.path && auth.source
+      ? { kind: 'bind', source: auth.path,
+        target: `/root/${auth.source.slice('file:'.length)}`, readOnly: true }
+      : auth.kind === 'credential-secret-file' && credentialStatusCommand && auth.path
+        ? { kind: 'bind', source: auth.path,
+          target: CODING_CONTAINER_AGENT_CREDENTIAL_FILE, readOnly: true }
+        : null;
+    const credentialEnvironment = auth.kind !== undefined
+      && ['credential-environment', 'credential-secret-file'].includes(auth.kind)
+      && credentialStatusCommand && auth.variable ? { name: auth.variable,
+        ...(auth.kind === 'credential-secret-file'
+          ? { file: CODING_CONTAINER_AGENT_CREDENTIAL_FILE }
+          : {}) }
+        : null;
+    try {
+      const smoke = runContainerSmoke({ command: run, imageId, resultsDir: request.resultsDir,
+        destinations, tcpPorts, requiredExecutables: agent?.requiredExecutables ?? [],
+        credentialStatusCommand, credentialMount, credentialEnvironment, marker,
+        networkMode: env.STACK_BENCH_APPLIANCE === '1' ? 'host' : 'bridge' });
+      const persisted = exists(join(request.resultsDir, marker));
+      rmSync(join(request.resultsDir, marker), { force: true });
+      const smokeReady = smoke.platform === 'linux' && Number(smoke.node?.match(/^v(\d+)/)?.[1]) >= 22
+        && persisted && JSON.stringify(smoke.tcpReached) === JSON.stringify(tcpPorts)
+        && JSON.stringify(Object.keys(smoke.executables ?? {}).sort())
+          === JSON.stringify([...(agent?.requiredExecutables ?? [])].sort());
+      add('smoke.container', smokeReady ? 'pass' : 'fail',
+        `Container ${smoke.platform}/${smoke.arch} ${smoke.node}; ${smoke.reached.length} outbound destination(s); `
+          + `${smoke.tcpReached?.length ?? 0} database route(s); `
+          + `${Object.keys(smoke.executables ?? {}).length} agent executable(s); `
+          + `result mount ${persisted ? 'persistent' : 'failed'}`,
+      smokeReady ? null : 'Fix the agent executable, container Node/runtime, networking, or persistent results mount.', smoke);
+      add('storage.container', smoke.diskFreeBytes >= resourceFloors.resultDiskBytes ? 'pass' : 'fail',
+        `${bytes(smoke.diskFreeBytes)} free in Docker storage`,
+        smoke.diskFreeBytes >= resourceFloors.resultDiskBytes ? null
+          : `Provide at least ${bytes(resourceFloors.resultDiskBytes)} free in Docker storage.`);
+      if (credentialStatusCommand) add('agent.authentication',
+        smoke.credentialStatus === 'ready' ? 'pass' : 'fail',
+        smoke.credentialStatus === 'ready' ? 'Local agent credential status is ready in the build image'
+          : 'Agent credential is not logged in for the selected billing mode',
+      smoke.credentialStatus === 'ready' ? null
+        : 'Refresh the selected agent login before starting a campaign.');
+      if (smoke.credentialStatus === 'ready') add('agent.authentication-provider', 'warn',
+        'No-model preflight did not ask the provider to accept the credential',
+        'Refresh/login before a campaign if the credential has not completed a recent provider request.');
+    } catch (error) {
+      rmSync(join(request.resultsDir, marker), { force: true });
+      add('smoke.container', 'fail',
+        `No-model container smoke failed: ${errorMessage(error).split('\n')[0]}`,
+        'Fix build-image startup, outbound TLS/DNS, host routing, or the result-volume mount.');
+    }
+  }
+
+  const report: PreflightReport = {
+    schemaVersion: 1,
+    generatedAt: new Date(startedAt).toISOString(),
+    request: { backends: request.backends, track: request.track, levels: request.levelList,
+      runIndex: request.runIndex, parallelism: request.parallelism ?? 1,
+      agentAdapter: request.agentAdapter, guidance: request.guidance, packs: request.packIds,
+      checks: request.checkKeys, recipe: request.recipe ?? null,
+      requestedScopeCount: request.requestedScopes?.length ?? 0,
+      image: request.image, resultsDir: request.resultsDir,
+      agentSkills: request.agentSkills ?? null,
+      smoke: request.smoke,
+      admittedSmoke: request.admittedSmoke ?? null },
+    ok: !checks.some(check => check.status === 'fail'),
+    summary: { passed: checks.filter(check => check.status === 'pass').length,
+      failed: checks.filter(check => check.status === 'fail').length,
+      warnings: checks.filter(check => check.status === 'warn').length },
+    checks,
+  };
+  return report;
+}
+
+export function writePreflightReport(path: string, report: PreflightReport): void {
+  mkdirSync(dirname(path), { recursive: true });
+  const temporary = `${path}.tmp-${process.pid}`;
+  writeFileSync(temporary, `${JSON.stringify(report, null, 2)}\n`, { flag: 'wx', mode: 0o600 });
+  renameSync(temporary, path);
+}
diff --git a/tools/stack-bench/src/runtime/readiness.ts b/tools/stack-bench/src/runtime/readiness.ts
new file mode 100644
index 00000000000..a31f0b19ba3
--- /dev/null
+++ b/tools/stack-bench/src/runtime/readiness.ts
@@ -0,0 +1,34 @@
+// Keep a referenced timer so every readiness probe reaches a terminal result.
+type FetchStatusImplementation = (
+  url: string,
+  init: RequestInit,
+) => PromiseLike<{ status: number }> | { status: number };
+
+interface FetchStatusOptions {
+  fetchImpl?: FetchStatusImplementation;
+  init?: RequestInit;
+  timeoutMs?: number;
+}
+
+export async function fetchStatus(
+  url: string,
+  { timeoutMs = 5000, init = {}, fetchImpl = globalThis.fetch }: FetchStatusOptions = {},
+): Promise<number | null> {
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) throw new Error('fetch timeout must be positive');
+  const controller = new AbortController();
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  const timedOut = new Promise<null>(resolve => {
+    timer = setTimeout(() => {
+      controller.abort();
+      resolve(null);
+    }, timeoutMs);
+  });
+  const requested = Promise.resolve()
+    .then(() => fetchImpl(url, { ...init, signal: controller.signal }))
+    .then(response => response.status, (): null => null);
+  try {
+    return await Promise.race([requested, timedOut]);
+  } finally {
+    clearTimeout(timer);
+  }
+}
diff --git a/tools/stack-bench/src/runtime/recovery.ts b/tools/stack-bench/src/runtime/recovery.ts
new file mode 100644
index 00000000000..c690e9b7020
--- /dev/null
+++ b/tools/stack-bench/src/runtime/recovery.ts
@@ -0,0 +1,268 @@
+import { existsSync, readFileSync, realpathSync, rmSync, statSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { basename, dirname, isAbsolute, join, relative, resolve } from 'node:path';
+
+import { ARTIFACT_FILE, emptyArtifactIdentities, readArtifact, readArtifactPayload,
+  writeArtifact } from '../evidence/artifacts.js';
+import { publicBackendLease, readBackendLease } from './backend-lease.js';
+import { releaseBackendLease } from './backend-teardown.js';
+import type { BackendLease, PublicBackendLease } from './backend-lease.js';
+
+export const SUPERVISOR_STATE_VERSION = 2;
+
+export interface SupervisorState {
+  version: typeof SUPERVISOR_STATE_VERSION;
+  runId: string;
+  backend: string;
+  runtimeDir: string;
+  leasePath: string;
+  ownershipToken: string;
+  output: string;
+}
+
+export interface RecoveryPlan {
+  schemaVersion: 1;
+  status: 'clean' | 'retained' | 'quarantined';
+  runId: string;
+  backend: string;
+  reason: string | null;
+  cleanup: { succeeded: boolean; retained: boolean };
+  resources: {
+    backendState: string;
+    buildContainer: { id: string; name: string; running: boolean } | null;
+    listenerProcesses: Array<{ pid: number; startMarker: string }>;
+    locks: Array<{ key: string; released: boolean }>;
+  };
+  instructions: string[];
+}
+
+export interface RecoveryResult {
+  ok: boolean;
+  state: 'clean' | 'quarantined';
+  runId: string;
+  recoveryPath: string;
+}
+
+export function rescueSupervisedLease(path: string, output: string): void {
+  if (!existsSync(path)) return;
+  const state = validateSupervisorState(JSON.parse(readFileSync(path, 'utf8')), { source: path });
+  if (resolve(output) !== resolve(state.output)) {
+    throw new Error(`supervisor output does not match requested output: ${state.runId}`);
+  }
+  if (!existsSync(state.leasePath)) {
+    const runPath = join(output, ARTIFACT_FILE.run);
+    if (!existsSync(runPath)) {
+      throw new Error(`backend lease disappeared without released run evidence: ${state.runId}`);
+    }
+    const runArtifact = readArtifact(runPath);
+    if (!['benchmark_run', 'repair_continuation'].includes(runArtifact.kind)) {
+      throw new Error(`backend lease disappeared with unexpected run artifact ${runArtifact.kind}`);
+    }
+    const payload = runArtifact.payload as { backendLease?: PublicBackendLease | null };
+    const lease = payload.backendLease;
+    const released = lease?.runId === state.runId && lease.state === 'released'
+      && lease.resources.buildContainer?.running === false
+      && lease.resources.locks.length > 0
+      && lease.resources.locks.every(lock => Boolean(lock.releasedAt));
+    if (!released) {
+      throw new Error(`backend lease disappeared without released run evidence: ${state.runId}`);
+    }
+    return;
+  }
+  const result = recoverSupervisedRun(path, { removeState: false });
+  if (!result.ok) throw new Error(`supervisor could not release backend lease ${state.runId}`);
+}
+
+interface RecoveryOptions {
+  cleanupSucceeded?: boolean;
+  retained?: boolean;
+  reason?: string | null;
+}
+
+interface RecoveryRuntimeOptions {
+  runtimeRoot?: string;
+}
+
+function trustedRuntimeRoot(runtimeRoot = process.env.STACK_BENCH_RUNTIME_DIR
+  ?? join(tmpdir(), 'stack-bench-runtime')): string {
+  const root = resolve(runtimeRoot);
+  return existsSync(root) ? realpathSync(root) : root;
+}
+
+function authorizedRuntimeDirectory(runtimeDir: string, runtimeRoot?: string): string {
+  const directory = realpathSync(runtimeDir);
+  if (dirname(directory) !== trustedRuntimeRoot(runtimeRoot)) {
+    throw new Error('runtime directory is not a direct child of the configured Stack Bench runtime root');
+  }
+  return directory;
+}
+
+function object(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function requiredString(value: Record<string, unknown>, key: string, source: string): string {
+  const field = value[key];
+  if (typeof field !== 'string' || !field) throw new Error(`${source}.${key} is required`);
+  return field;
+}
+
+export function validateSupervisorState(
+  value: unknown,
+  { source = 'supervisor state' }: { source?: string } = {},
+): SupervisorState {
+  if (!object(value)) throw new Error(`${source} must be an object`);
+  const fields = new Set(['version', 'runId', 'backend', 'runtimeDir', 'leasePath',
+    'ownershipToken', 'output']);
+  for (const key of Object.keys(value)) if (!fields.has(key)) throw new Error(`${source}.${key} is unknown`);
+  if (value.version !== SUPERVISOR_STATE_VERSION) throw new Error(`${source}.version is unsupported`);
+  const runId = requiredString(value, 'runId', source);
+  const backend = requiredString(value, 'backend', source);
+  const runtimeDirValue = requiredString(value, 'runtimeDir', source);
+  const leasePath = requiredString(value, 'leasePath', source);
+  const ownershipToken = requiredString(value, 'ownershipToken', source);
+  const output = requiredString(value, 'output', source);
+  if (!isAbsolute(leasePath)) throw new Error(`${source}.leasePath must be absolute`);
+  if (!isAbsolute(runtimeDirValue)) throw new Error(`${source}.runtimeDir must be absolute`);
+  if (!isAbsolute(output)) throw new Error(`${source}.output must be absolute`);
+  const runtimeDir = resolve(runtimeDirValue);
+  if (resolve(leasePath) !== join(runtimeDir, ARTIFACT_FILE.backendLease)) {
+    throw new Error(`${source}.leasePath must be the exact lease below runtimeDir`);
+  }
+  return {
+    version: SUPERVISOR_STATE_VERSION,
+    runId,
+    backend,
+    runtimeDir: runtimeDirValue,
+    leasePath,
+    ownershipToken,
+    output,
+  };
+}
+
+export function recoveryPlan(
+  lease: BackendLease | PublicBackendLease,
+  { cleanupSucceeded = false, retained = false, reason = null }: RecoveryOptions = {},
+): RecoveryPlan {
+  const publicLease = 'ownershipToken' in lease
+    ? publicBackendLease(lease)
+    : structuredClone(lease);
+  const status = cleanupSucceeded ? (retained ? 'retained' : 'clean') : 'quarantined';
+  const resources = {
+    backendState: publicLease.state,
+    buildContainer: publicLease.resources.buildContainer ? {
+      id: publicLease.resources.buildContainer.id,
+      name: publicLease.resources.buildContainer.name,
+      running: publicLease.resources.buildContainer.running !== false,
+    } : null,
+    listenerProcesses: [...publicLease.resources.listenerProcesses]
+      .sort((a, b) => a.pid - b.pid),
+    locks: (publicLease.resources.locks ?? []).map(lock => ({ key: lock.key,
+      released: Boolean(lock.releasedAt) })).sort((a, b) => a.key.localeCompare(b.key)),
+  };
+  const instructions = status === 'quarantined' ? [
+    'Do not start another run that uses any listed lock key.',
+    'Preserve the result directory and private supervisor state; do not publish this attempt.',
+    'Run the controller recovery command with the private supervisor-state path.',
+    'If recovery still refuses, compare the live container ID and listener PIDs with this record before manual action.',
+  ] : status === 'retained' ? [
+    'The backend was intentionally retained; do not reuse its lock keys for another run.',
+    'Use the private supervisor state to perform authenticated cleanup when inspection is complete.',
+  ] : ['No recovery action is required.'];
+  return { schemaVersion: 1, status, runId: publicLease.runId, backend: publicLease.backend,
+    reason: reason ? String(reason).split(/\r?\n/, 1).join('').slice(0, 1024) : null,
+    cleanup: { succeeded: Boolean(cleanupSucceeded), retained: Boolean(retained) },
+    resources, instructions };
+}
+
+export function writeRecoveryArtifact(
+  path: string,
+  lease: BackendLease | PublicBackendLease,
+  options: RecoveryOptions = {},
+) {
+  const plan = recoveryPlan(lease, options);
+  return writeArtifact(path, { kind: 'recovery', id: `${lease.runId}-recovery`,
+    attempt: { id: `${lease.runId}-recovery`, parentId: lease.runId },
+    identities: emptyArtifactIdentities({ stackAdapter: { id: lease.backend } }),
+    payload: plan });
+}
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
+
+function recoverAuthorizedLease(
+  state: SupervisorState,
+  { statePath = null, removeState = true, runtimeRoot }: {
+    statePath?: string | null;
+    removeState?: boolean;
+    runtimeRoot?: string;
+  } = {},
+): RecoveryResult {
+  const runtimeDir = authorizedRuntimeDirectory(state.runtimeDir, runtimeRoot);
+  let lease: BackendLease;
+  let cleanupSucceeded = false;
+  let reason = null;
+  if (existsSync(state.leasePath)) {
+    lease = readBackendLease(state.leasePath, { token: state.ownershipToken,
+      backend: state.backend, runId: state.runId });
+    try { cleanupSucceeded = releaseBackendLease(state.leasePath, state.ownershipToken); }
+    catch (error) { reason = errorMessage(error); }
+    lease = readBackendLease(state.leasePath, { token: state.ownershipToken,
+      backend: state.backend, runId: state.runId });
+  } else {
+    const evidencePath = join(state.output, ARTIFACT_FILE.backendLease);
+    if (!existsSync(evidencePath)) throw new Error('private lease is missing without public lease evidence');
+    const evidence = readArtifactPayload<PublicBackendLease>(evidencePath,
+      { expectedKind: 'backend_lease_evidence' });
+    if (evidence.runId !== state.runId || evidence.backend !== state.backend
+      || evidence.state !== 'released') throw new Error('public lease evidence does not prove release');
+    cleanupSucceeded = true;
+    lease = { ...evidence, ownershipToken: state.ownershipToken };
+  }
+  writeRecoveryArtifact(join(state.output, ARTIFACT_FILE.recovery), lease,
+    { cleanupSucceeded, reason: reason ?? (cleanupSucceeded ? null : 'authenticated cleanup refused') });
+  if (cleanupSucceeded) {
+    if (existsSync(runtimeDir)) {
+      if (existsSync(state.leasePath) && dirname(realpathSync(state.leasePath)) !== runtimeDir) {
+        throw new Error('refusing to remove an unexpected runtime directory');
+      }
+      rmSync(runtimeDir, { recursive: true, force: true });
+    }
+    if (removeState && statePath) rmSync(statePath, { force: true });
+  }
+  return { ok: cleanupSucceeded, state: cleanupSucceeded ? 'clean' : 'quarantined',
+    runId: state.runId, recoveryPath: join(state.output, ARTIFACT_FILE.recovery) };
+}
+
+export function recoverSupervisedRun(
+  statePath: string,
+  { removeState = true, runtimeRoot }: { removeState?: boolean } & RecoveryRuntimeOptions = {},
+): RecoveryResult {
+  const absoluteState = realpathSync(statePath);
+  if (!statSync(absoluteState).isFile()) throw new Error('supervisor state must be a regular file');
+  const state = validateSupervisorState(JSON.parse(readFileSync(absoluteState, 'utf8')),
+    { source: absoluteState });
+  return recoverAuthorizedLease(state, { statePath: absoluteState, removeState, runtimeRoot });
+}
+
+export function recoverBackendLease(leasePath: string, output: string,
+  { runtimeRoot }: RecoveryRuntimeOptions = {}): RecoveryResult {
+  const absoluteLease = realpathSync(leasePath);
+  if (!statSync(absoluteLease).isFile()) throw new Error('backend lease must be a regular file');
+  if (basename(absoluteLease) !== ARTIFACT_FILE.backendLease) {
+    throw new Error(`backend lease path must end in ${ARTIFACT_FILE.backendLease}`);
+  }
+  if (!isAbsolute(output)) throw new Error('recovery output must be absolute');
+  const runtimeDir = dirname(absoluteLease);
+  const absoluteOutput = resolve(output);
+  const outputFromRuntime = relative(runtimeDir, absoluteOutput);
+  if (!outputFromRuntime || (!outputFromRuntime.startsWith('..') && !isAbsolute(outputFromRuntime))) {
+    throw new Error('recovery output must be outside the private runtime directory');
+  }
+  const lease = readBackendLease(absoluteLease);
+  const state = validateSupervisorState({ version: SUPERVISOR_STATE_VERSION,
+    runId: lease.runId, backend: lease.backend, runtimeDir, leasePath: absoluteLease,
+    ownershipToken: lease.ownershipToken, output: absoluteOutput }, { source: absoluteLease });
+  return recoverAuthorizedLease(state, { runtimeRoot });
+}
diff --git a/tools/stack-bench/src/runtime/repair-grant.ts b/tools/stack-bench/src/runtime/repair-grant.ts
new file mode 100644
index 00000000000..7e2e8323edb
--- /dev/null
+++ b/tools/stack-bench/src/runtime/repair-grant.ts
@@ -0,0 +1,388 @@
+import { existsSync } from 'node:fs';
+import { join, relative, resolve, sep } from 'node:path';
+
+import { ARTIFACT_FILE, currentEngineIdentity, readArtifact } from '../evidence/artifacts.js';
+import type { Artifact } from '../evidence/artifacts.js';
+import { canonicalDefinitionJson } from '../composition/definition-plan.js';
+import { hashDirectory } from '../evidence/provenance.js';
+import type { LevelCheckpoint } from './source-checkpoint.js';
+import type { RunRepairRecord } from '../evidence/benchmark-run.js';
+
+export interface RepairOutcome extends Record<string, unknown> {
+  kind: string;
+  appFailures?: string[];
+  inconclusive?: unknown[];
+  harnessFailures?: unknown[];
+}
+
+export interface RepairSelection extends Record<string, unknown> {
+  sha256?: string;
+  scoredPoints?: number;
+  recipe?: { id?: string; version?: string };
+}
+
+export interface RepairLevel extends Record<string, unknown> {
+  level: number;
+  outcome: RepairOutcome;
+  repair: RunRepairRecord;
+  repairs: number;
+  score: number;
+  max: number;
+  selection?: RepairSelection;
+  checkpoint?: LevelCheckpoint;
+  buildCostUsd?: number;
+  resumeCostUsd?: number;
+  repairCostUsd?: number;
+  durationSec?: number;
+}
+
+interface RepairContinuation extends Record<string, unknown> {
+  rootRunId: string;
+  grantIndex: number;
+  cumulativeRepairsAfter: number;
+  downstreamLevelsToRerun: number[];
+  cumulativeCostAfterUsd: number;
+  cumulativeDurationAfterSec: number;
+}
+
+interface RepairCondition extends Record<string, unknown> {
+  guidance?: { documents?: Record<string, unknown> };
+}
+
+interface RepairParentPayload extends Record<string, unknown> {
+  mode?: { id?: string };
+  progressionStatus?: unknown;
+  levels: RepairLevel[];
+  contaminated?: boolean;
+  continuation?: RepairContinuation;
+  track: string;
+  backend: string;
+  model: string;
+  guidance: unknown;
+  condition?: RepairCondition | null;
+  selectionRequest?: unknown;
+  skills?: unknown[];
+  runtime?: { buildImage?: string | null; url?: string | null };
+  backendLease?: { runIndex?: number };
+  totals?: { costUsd?: number; durationSec?: number };
+}
+
+export interface RepairParent extends RepairParentPayload {
+  id: string;
+  kind: string;
+  artifactEnvelope: {
+    attempt: Artifact['attempt'];
+    timestamps: unknown;
+    identities: Artifact['identities'];
+  };
+}
+
+interface SourceCheckpointPayload extends Record<string, unknown> {
+  source: { directory: string; sha256: string; files: number };
+  track: string;
+  backend: string;
+  level: number;
+  repair: unknown;
+  outcome: unknown;
+  selectionSha256: string | null;
+}
+
+export interface RepairConfiguration {
+  backend: string;
+  track: string;
+  level: number;
+  recipe: string | null;
+  runIndex: number;
+  agentAdapter: string;
+  model: string;
+  guidance: unknown;
+  guidanceDocument: unknown;
+  condition: RepairCondition | null;
+  selectionRequest: unknown;
+  skills: unknown[];
+  buildImage: string | null;
+  url: string | null;
+}
+
+export interface InspectedRepairParent {
+  root: string;
+  parent: RepairParent;
+  parentArtifact: Artifact<RepairParentPayload>;
+  level: RepairLevel;
+  checkpoint: Artifact<SourceCheckpointPayload>;
+  sourcePath: string;
+  rootRunId: string;
+  grantIndex: number;
+  cumulativeRepairsBefore: number;
+  downstreamLevelsToRerun: number[];
+  cumulativeCostBeforeUsd: number;
+  cumulativeDurationBeforeSec: number;
+  configuration: RepairConfiguration;
+}
+
+export interface RepairGrant extends Record<string, unknown> {
+  schemaVersion: 2;
+  rootRunId: string;
+  parentRunId: string;
+  level: number;
+  grantIndex: number;
+  repairsGranted: number;
+  cumulativeRepairsBefore: number;
+  cumulativeRepairsAfter: number;
+  parentCheckpointSha256: string;
+  downstreamLevelsToRerun: number[];
+  cumulativeCostBeforeUsd: number;
+  cumulativeCostAfterUsd: number;
+  cumulativeDurationBeforeSec: number;
+  cumulativeDurationAfterSec: number;
+  baseline: null;
+  resumeSetup: null;
+}
+
+export interface RepairGrantResolution extends InspectedRepairParent {
+  grant: RepairGrant;
+}
+
+export interface RepairBaselineInput {
+  score: number;
+  max: number;
+  selectionSha256: string | null;
+  sourceSha256: string;
+  expectedSourceSha256: string;
+  outcome: RepairOutcome;
+}
+
+export interface RepairBaselineParent {
+  score?: number;
+  max?: number;
+  selection?: { sha256?: string | null };
+  outcome?: RepairOutcome;
+}
+
+export interface RepairBaselineComparison {
+  reproduced: boolean;
+  mismatches: string[];
+}
+
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function same(left: unknown, right: unknown): boolean {
+  return canonicalDefinitionJson(left) === canonicalDefinitionJson(right);
+}
+
+function child(root: string, relativePath: unknown, label: string): string {
+  if (typeof relativePath !== 'string' || !relativePath) throw new Error(`${label} is missing`);
+  const absoluteRoot = resolve(root);
+  const absolute = resolve(absoluteRoot, relativePath);
+  const rel = relative(absoluteRoot, absolute);
+  if (rel === '..' || rel.startsWith(`..${sep}`) || rel === '') {
+    throw new Error(`${label} is not a child of the parent result`);
+  }
+  return absolute;
+}
+
+function requireCompletedFailure(level: RepairLevel | undefined,
+  parent: RepairParent): asserts level is RepairLevel {
+  if (!object(level)) throw new Error('parent run does not contain the requested level');
+  if (level.outcome?.kind !== 'app_failure') {
+    throw new Error(`L${level.level} is ${level.outcome?.kind ?? 'ungraded'}, not a conclusive application failure`);
+  }
+  if ((level.outcome.inconclusive?.length ?? 0) > 0
+    || (level.outcome.harnessFailures?.length ?? 0) > 0) {
+    throw new Error(`L${level.level} does not have complete conclusive measurement`);
+  }
+  const exhausted = level.repair?.status === 'budget-exhausted'
+    && level.repair?.used === level.repair?.limit;
+  const paused = level.repair?.status === 'incomplete'
+    && level.repair?.used > 0
+    && (level.repair?.stopReason === 'no-source-change'
+      ? level.repair.used <= level.repair.limit
+      : level.repair?.stopReason === 'repeated-findings'
+        && level.repair.used < level.repair.limit);
+  const cumulativeRepairs = parent.levels
+    .filter(candidate => candidate.level <= level.level)
+    .reduce((total, candidate) => total + candidate.repairs, 0);
+  if ((!exhausted && !paused)
+    || !Number.isSafeInteger(level.repair?.limit)
+    || level.repair.limit < 0
+    || level.repair.used !== cumulativeRepairs) {
+    throw new Error(`L${level.level} did not exhaust or pause one coherent repair budget`);
+  }
+  if (!Number.isSafeInteger(level.score) || !Number.isSafeInteger(level.max)
+    || level.max < 1 || level.score < 0 || level.score >= level.max) {
+    throw new Error(`L${level.level} does not contain a measurable failing score`);
+  }
+  if (level.selection?.scoredPoints !== undefined && level.selection.scoredPoints !== level.max) {
+    throw new Error(`L${level.level} score denominator does not match its selection`);
+  }
+  if (parent.contaminated === true) throw new Error('contaminated runs cannot receive repair grants');
+}
+
+function continuationFor(parent: RepairParent): RepairContinuation {
+  if (!parent.continuation) throw new Error('repair continuation metadata is missing');
+  return parent.continuation;
+}
+
+export function inspectRepairParent(parentDirectory: string,
+  levelNumber: number): InspectedRepairParent {
+  const root = resolve(parentDirectory);
+  if (!Number.isSafeInteger(levelNumber) || levelNumber < 1) {
+    throw new Error('repair grant level must be a positive integer');
+  }
+  const runPath = join(root, ARTIFACT_FILE.run);
+  if (!existsSync(runPath)) throw new Error(`parent run does not exist: ${runPath}`);
+  const parentArtifact = readArtifact<RepairParentPayload>(runPath);
+  if (!['benchmark_run', 'repair_continuation'].includes(parentArtifact.kind)) {
+    throw new Error(`parent result is ${parentArtifact.kind}, not a benchmark run or repair continuation`);
+  }
+  if (parentArtifact.timestamps.completedAt === null) throw new Error('parent result is not complete');
+  const parentEngine = parentArtifact.identities.engine;
+  if (parentEngine?.sha256 !== currentEngineIdentity().sha256) {
+    throw new Error('parent result uses a different harness executable');
+  }
+  const parent: RepairParent = { ...parentArtifact.payload,
+    id: parentArtifact.id, kind: parentArtifact.kind,
+    artifactEnvelope: { attempt: parentArtifact.attempt, timestamps: parentArtifact.timestamps,
+      identities: parentArtifact.identities } };
+  if (parent.mode?.id === 'dependency' || parent.progressionStatus !== undefined) {
+    throw new Error('generic repair grants do not support dependency campaigns');
+  }
+  const level = parent.levels?.find(item => item.level === levelNumber);
+  requireCompletedFailure(level, parent);
+
+  const checkpointRef = level.checkpoint;
+  if (!object(checkpointRef)) throw new Error(`L${levelNumber} has no source checkpoint`);
+  const checkpointPath = child(root, checkpointRef.artifact, 'checkpoint artifact');
+  const sourcePath = child(root, checkpointRef.directory, 'checkpoint source');
+  if (!existsSync(sourcePath)) throw new Error(`checkpoint source does not exist: ${sourcePath}`);
+  const checkpoint = readArtifact<SourceCheckpointPayload>(checkpointPath, {
+    expectedKind: 'source_checkpoint', expectedId: `${parent.id}-l${levelNumber}-checkpoint`,
+  });
+  if (checkpoint.attempt.parentId !== parent.id) throw new Error('checkpoint parent does not match the run');
+  const checkpointEngine = checkpoint.identities.engine;
+  if (checkpointEngine?.sha256 !== parentEngine.sha256) {
+    throw new Error('checkpoint and parent harness identities differ');
+  }
+  const expectedSource = { directory: checkpointRef.directory, sha256: checkpointRef.sha256,
+    files: checkpointRef.files };
+  if (!same(checkpoint.payload.source, expectedSource)) throw new Error('checkpoint source reference changed');
+  if (checkpoint.payload.track !== parent.track || checkpoint.payload.backend !== parent.backend
+    || checkpoint.payload.level !== levelNumber) throw new Error('checkpoint scope does not match the parent run');
+  if (!same(checkpoint.payload.repair, level.repair)
+    || !same(checkpoint.payload.outcome, level.outcome)
+    || checkpoint.payload.selectionSha256 !== (level.selection?.sha256 ?? null)) {
+    throw new Error('checkpoint does not bind the parent level result');
+  }
+  const source = hashDirectory(sourcePath);
+  if (source.sha256 !== checkpointRef.sha256 || source.files.length !== checkpointRef.files) {
+    throw new Error('checkpoint source bytes do not match their recorded identity');
+  }
+
+  const continuation = parent.kind === 'repair_continuation' ? continuationFor(parent) : null;
+  const rootRunId = continuation ? continuation.rootRunId : parent.id;
+  const grantIndex = continuation ? continuation.grantIndex + 1 : 1;
+  const cumulativeRepairsBefore = continuation
+    ? continuation.cumulativeRepairsAfter : level.repair.used;
+  const downstreamLevelsToRerun = continuation
+    ? continuation.downstreamLevelsToRerun
+    : parent.levels.map(item => item.level).filter(item => item > levelNumber).sort((a, b) => a - b);
+  const cumulativeCostBeforeUsd = continuation
+    ? continuation.cumulativeCostAfterUsd
+    : parent.totals?.costUsd ?? Number.NaN;
+  const cumulativeDurationBeforeSec = continuation
+    ? continuation.cumulativeDurationAfterSec
+    : parent.totals?.durationSec ?? Number.NaN;
+  if (!Number.isFinite(cumulativeCostBeforeUsd) || cumulativeCostBeforeUsd < 0
+    || !Number.isFinite(cumulativeDurationBeforeSec) || cumulativeDurationBeforeSec < 0) {
+    throw new Error('parent run does not contain cumulative cost and duration');
+  }
+  const guidanceDocument = parent.condition?.guidance?.documents?.[parent.backend] ?? null;
+  const runIndex = parent.backendLease?.runIndex;
+  if (typeof runIndex !== 'number' || !Number.isSafeInteger(runIndex) || runIndex < 0) {
+    throw new Error('parent run does not identify its resource slot');
+  }
+  const agentAdapter = parentArtifact.identities.agentAdapter?.id;
+  if (typeof agentAdapter !== 'string' || !agentAdapter) {
+    throw new Error('parent run does not identify its agent adapter');
+  }
+  const recipe = object(level.selection?.recipe)
+    ? `${level.selection.recipe.id}@${level.selection.recipe.version}` : null;
+  return {
+    root,
+    parent,
+    parentArtifact,
+    level,
+    checkpoint,
+    sourcePath,
+    rootRunId,
+    grantIndex,
+    cumulativeRepairsBefore,
+    downstreamLevelsToRerun,
+    cumulativeCostBeforeUsd,
+    cumulativeDurationBeforeSec,
+    configuration: {
+      backend: parent.backend,
+      track: parent.track,
+      level: levelNumber,
+      recipe,
+      runIndex,
+      agentAdapter,
+      model: parent.model,
+      guidance: parent.guidance,
+      guidanceDocument,
+      condition: parent.condition ?? null,
+      selectionRequest: parent.selectionRequest ?? { packs: [], checks: [] },
+      skills: parent.skills ?? [],
+      buildImage: parent.runtime?.buildImage ?? null,
+      url: parent.runtime?.url ?? null,
+    },
+  };
+}
+
+export function createRepairGrant(parentDirectory: string,
+  { level, repairs }: { level: number; repairs: number }): RepairGrantResolution {
+  if (!Number.isSafeInteger(repairs) || repairs < 1) {
+    throw new Error('repair grant must contain a positive safe integer of repairs');
+  }
+  const inspected = inspectRepairParent(parentDirectory, level);
+  return {
+    ...inspected,
+    grant: {
+      schemaVersion: 2,
+      rootRunId: inspected.rootRunId,
+      parentRunId: inspected.parent.id,
+      level,
+      grantIndex: inspected.grantIndex,
+      repairsGranted: repairs,
+      cumulativeRepairsBefore: inspected.cumulativeRepairsBefore,
+      cumulativeRepairsAfter: inspected.cumulativeRepairsBefore,
+      parentCheckpointSha256: inspected.checkpoint.payload.source.sha256,
+      downstreamLevelsToRerun: inspected.downstreamLevelsToRerun,
+      cumulativeCostBeforeUsd: inspected.cumulativeCostBeforeUsd,
+      cumulativeCostAfterUsd: inspected.cumulativeCostBeforeUsd,
+      cumulativeDurationBeforeSec: inspected.cumulativeDurationBeforeSec,
+      cumulativeDurationAfterSec: inspected.cumulativeDurationBeforeSec,
+      baseline: null,
+      resumeSetup: null,
+    },
+  };
+}
+
+export function compareRepairBaseline(parentLevel: RepairBaselineParent | null | undefined,
+  { score, max, selectionSha256, sourceSha256, expectedSourceSha256, outcome }:
+  RepairBaselineInput): RepairBaselineComparison {
+  const expectedFailures = [...(parentLevel?.outcome?.appFailures ?? [])].sort();
+  const actualFailures = [...(outcome?.appFailures ?? [])].sort();
+  const mismatches = [];
+  if (score !== parentLevel?.score) mismatches.push('score');
+  if (max !== parentLevel?.max) mismatches.push('denominator');
+  if (selectionSha256 !== (parentLevel?.selection?.sha256 ?? null)) mismatches.push('selection');
+  if (sourceSha256 !== expectedSourceSha256) mismatches.push('source');
+  if (outcome?.kind !== 'app_failure') mismatches.push('outcome');
+  if ((outcome?.inconclusive?.length ?? 0) > 0 || (outcome?.harnessFailures?.length ?? 0) > 0) {
+    mismatches.push('measurement');
+  }
+  if (!same(actualFailures, expectedFailures)) mismatches.push('failed criteria');
+  return { reproduced: mismatches.length === 0, mismatches };
+}
diff --git a/tools/stack-bench/src/runtime/runner-environment.ts b/tools/stack-bench/src/runtime/runner-environment.ts
new file mode 100644
index 00000000000..ba6981168ea
--- /dev/null
+++ b/tools/stack-bench/src/runtime/runner-environment.ts
@@ -0,0 +1,105 @@
+import { execFileSync } from 'node:child_process';
+import { hostname as osHostname } from 'node:os';
+
+export const STACK_BENCH_RUNNER_PLATFORM = 'linux/amd64' as const;
+
+export const RUNNER_OBSERVATION_FIELDS = Object.freeze([
+  'dockerEngineVersion',
+  'dockerOs',
+  'dockerArchitecture',
+  'kernelVersion',
+  'cpuCount',
+  'memoryBytes',
+] as const);
+
+export type RunnerObservationField = typeof RUNNER_OBSERVATION_FIELDS[number];
+
+export interface ControllerRunner {
+  schemaVersion: 1;
+  mode: 'appliance' | 'local-controller';
+  platform: string;
+  architecture: string;
+  hostname: string;
+  dockerEngineVersion?: string;
+  dockerOs?: string;
+  dockerArchitecture?: string;
+  kernelVersion?: string;
+  cpuCount?: number;
+  memoryBytes?: number;
+  // Every running container on the daemon, this controller included.
+  containersRunning?: number;
+}
+
+interface ControllerRunnerOptions {
+  env?: NodeJS.ProcessEnv;
+  platform?: string;
+  architecture?: string;
+  hostname?: string;
+  dockerInfo?: Record<string, unknown>;
+}
+
+export function missingRunnerObservation(
+  runner: Partial<Record<RunnerObservationField, unknown>> | null | undefined,
+): RunnerObservationField[] {
+  return RUNNER_OBSERVATION_FIELDS.filter(field => runner?.[field] === undefined);
+}
+
+function errorField(error: unknown, field: 'stderr' | 'message'): unknown {
+  return typeof error === 'object' && error !== null ? Reflect.get(error, field) : undefined;
+}
+
+function inspectDocker(): Record<string, unknown> {
+  try {
+    const info: Record<string, unknown> = JSON.parse(
+      execFileSync('docker', ['info', '--format', '{{json .}}'], {
+        encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 120_000,
+      }),
+    );
+    return info;
+  } catch (error) {
+    const stderr = errorField(error, 'stderr');
+    const stderrDetail = stderr === undefined || stderr === null ? '' : String(stderr).trim();
+    const detail = stderrDetail || String(errorField(error, 'message') ?? error);
+    throw new Error(`could not inspect the appliance Docker daemon: ${detail}`);
+  }
+}
+
+function stringField(value: unknown, source: string): string {
+  if (typeof value !== 'string' || !value) {
+    throw new Error(`Docker daemon inspection did not return ${source}`);
+  }
+  return value;
+}
+
+function nonNegativeInteger(value: unknown, source: string): number {
+  if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 0) {
+    throw new Error(`Docker daemon inspection did not return a non-negative integer ${source}`);
+  }
+  return value;
+}
+
+function positiveInteger(value: unknown, source: string): number {
+  if (typeof value !== 'number' || !Number.isSafeInteger(value) || value < 1) {
+    throw new Error(`Docker daemon inspection did not return a positive integer ${source}`);
+  }
+  return value;
+}
+
+export function controllerRunner({ env = process.env, platform = process.platform,
+  architecture = process.arch, hostname = osHostname(), dockerInfo }: ControllerRunnerOptions = {}): ControllerRunner {
+  const mode = env.STACK_BENCH_APPLIANCE === '1' ? 'appliance' : 'local-controller';
+  const runner: ControllerRunner = { schemaVersion: 1, mode, platform, architecture, hostname };
+  if (mode !== 'appliance') return runner;
+
+  const info = dockerInfo ?? inspectDocker();
+  return {
+    ...runner,
+    dockerEngineVersion: stringField(info.ServerVersion, 'ServerVersion'),
+    dockerOs: stringField(info.OSType, 'OSType'),
+    dockerArchitecture: stringField(info.Architecture, 'Architecture'),
+    kernelVersion: stringField(info.KernelVersion, 'KernelVersion'),
+    cpuCount: positiveInteger(info.NCPU, 'NCPU'),
+    memoryBytes: positiveInteger(info.MemTotal, 'MemTotal'),
+    containersRunning: nonNegativeInteger(info.ContainersRunning, 'ContainersRunning'),
+  };
+}
diff --git a/tools/stack-bench/src/runtime/source-checkpoint.ts b/tools/stack-bench/src/runtime/source-checkpoint.ts
new file mode 100644
index 00000000000..0bf318920a6
--- /dev/null
+++ b/tools/stack-bench/src/runtime/source-checkpoint.ts
@@ -0,0 +1,140 @@
+import { cpSync, existsSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+
+import { ARTIFACT_FILE, readArtifactPayload, writeArtifact } from '../evidence/artifacts.js';
+import type { GradeBundlePayload } from '../evidence/benchmark-run.js';
+import { classifyBundle } from '../evidence/outcomes.js';
+import type { RunOutcome } from '../evidence/outcomes.js';
+import { hashDirectory } from '../evidence/provenance.js';
+import { hashAppSource, snapshotAppSource } from './source-snapshot.js';
+
+const HASH = /^[a-f0-9]{64}$/;
+
+export interface LevelCheckpoint {
+  artifact: string;
+  directory: string;
+  sha256: string;
+  files: number;
+}
+
+export interface PreserveLevelCheckpointOptions {
+  appDir: string;
+  outputDir: string;
+  runId: string;
+  identities?: unknown;
+  track: string;
+  backend: string;
+  level: number;
+  repair: unknown;
+  outcome: unknown;
+  selectionSha256?: string | null;
+}
+
+export function finalPackageEvidenceRequired(outcome: RunOutcome | null | undefined,
+  levels: ReadonlyArray<{ graded?: boolean }>): boolean {
+  return ['passed', 'app_failure'].includes(outcome?.kind ?? '')
+    && levels.some(level => level.graded === true);
+}
+
+export function preserveFinalPackageEvidence(
+  { appDir, outputDir }: { appDir: string; outputDir: string },
+): {
+  source: { directory: string; sha256: string; files: number };
+  grading: { directory: string; artifact: string; sourceSha256: string };
+} {
+  const failures: string[] = [];
+  let source: { directory: string; sha256: string; files: number } | null = null;
+  let grading: { directory: string; artifact: string; sourceSha256: string } | null = null;
+  const message = (error: unknown): string => error instanceof Error ? error.message : String(error);
+
+  try {
+    const live = hashAppSource(appDir);
+    const sourceDirectory = join(outputDir, 'source');
+    snapshotAppSource(appDir, sourceDirectory);
+    const saved = hashDirectory(sourceDirectory);
+    if (saved.sha256 !== live.sha256 || saved.files.length !== live.files.length) {
+      throw new Error('preserved final source differs from the live application source');
+    }
+    source = { directory: 'source', sha256: saved.sha256, files: saved.files.length };
+  } catch (error) {
+    failures.push(`source: ${message(error).split(/\r?\n/)[0]}`);
+  }
+
+  try {
+    const from = join(appDir, 'stack-bench');
+    const gradingDirectory = join(outputDir, 'grading');
+    if (!existsSync(join(from, ARTIFACT_FILE.gradeBundle))) {
+      throw new Error(`final grader produced no ${ARTIFACT_FILE.gradeBundle}`);
+    }
+    rmSync(gradingDirectory, { recursive: true, force: true });
+    cpSync(from, gradingDirectory, {
+      recursive: true,
+      filter: path => !/[\\/]media([\\/]|$)/.test(path),
+    });
+    const bundle = readArtifactPayload<GradeBundlePayload>(
+      join(gradingDirectory, ARTIFACT_FILE.gradeBundle), {
+      expectedKind: 'grade_bundle',
+    });
+    if (!source || bundle.source?.sha256 !== source.sha256) {
+      throw new Error('final grading bundle does not match the preserved application source');
+    }
+    grading = { directory: 'grading', artifact: `grading/${ARTIFACT_FILE.gradeBundle}`,
+      sourceSha256: bundle.source.sha256 };
+  } catch (error) {
+    failures.push(`grading: ${message(error).split(/\r?\n/)[0]}`);
+  }
+  if (failures.length) {
+    throw new Error(`could not preserve mandatory result package evidence: ${failures.join('; ')}`);
+  }
+  if (!source || !grading) throw new Error('could not preserve mandatory result package evidence');
+  return { source, grading };
+}
+
+export function sourceBoundFirstBuildOutcome(bundle: GradeBundlePayload | null,
+  source: object | null): RunOutcome {
+  if (source) return classifyBundle(bundle);
+  const reason = 'the first-build source could not be preserved and verified';
+  return { kind: 'harness_failure', phase: 'first-build-source', reason,
+    appFailures: [], inconclusive: [], harnessFailures: [reason] };
+}
+
+export function preserveLevelCheckpoint({ appDir, outputDir, runId, identities,
+  track, backend, level, repair, outcome, selectionSha256 = null }:
+  PreserveLevelCheckpointOptions): LevelCheckpoint {
+  if (typeof runId !== 'string' || !runId) throw new Error('source checkpoint requires a run id');
+  if (!Number.isSafeInteger(level) || level < 1) throw new Error('source checkpoint level is invalid');
+  if (selectionSha256 !== null && !HASH.test(selectionSha256)) {
+    throw new Error('source checkpoint selection identity is invalid');
+  }
+
+  const directory = `level-l${level}-source`;
+  const artifact = `level-l${level}-checkpoint.json`;
+  const sourcePath = join(outputDir, directory);
+  const live = hashAppSource(appDir);
+  snapshotAppSource(appDir, sourcePath);
+  const saved = hashDirectory(sourcePath);
+  if (live.sha256 !== saved.sha256 || live.files.length !== saved.files.length) {
+    throw new Error('preserved level source differs from the live application source');
+  }
+
+  const source = { directory, sha256: saved.sha256, files: saved.files.length };
+  const now = new Date().toISOString();
+  writeArtifact(join(outputDir, artifact), {
+    kind: 'source_checkpoint',
+    id: `${runId}-l${level}-checkpoint`,
+    attempt: { id: `${runId}-l${level}-checkpoint`, parentId: runId },
+    timestamps: { startedAt: now, completedAt: now },
+    identities,
+    payload: {
+      schemaVersion: 3,
+      track,
+      backend,
+      level,
+      source,
+      repair,
+      outcome,
+      selectionSha256,
+    },
+  });
+  return { artifact, ...source };
+}
diff --git a/tools/stack-bench/src/runtime/source-materialization.ts b/tools/stack-bench/src/runtime/source-materialization.ts
new file mode 100644
index 00000000000..26bc010c59d
--- /dev/null
+++ b/tools/stack-bench/src/runtime/source-materialization.ts
@@ -0,0 +1,73 @@
+import { existsSync } from 'node:fs';
+import { join } from 'node:path';
+
+import { redactCredentials } from '../evidence/diagnostic-sanitizer.js';
+import type { RunOutcome } from '../evidence/outcomes.js';
+import { controlAppServer } from './backend-control.js';
+import type { RuntimeControlSpec } from './backend-control.js';
+import { hashAppSource, restoreAppSource } from './source-snapshot.js';
+import { CODING_CONTAINER_START_SCRIPT } from './coding-container-policy.js';
+
+const message = (error: unknown): string => error instanceof Error ? error.message : String(error);
+
+export async function materializeAcceptedSource(sourcePath: string, appDir: string,
+  application: RuntimeControlSpec,
+  lifecycle: typeof controlAppServer = controlAppServer): Promise<void> {
+  const accepted = hashAppSource(sourcePath);
+  await lifecycle(application, 'stop');
+  restoreAppSource(sourcePath, appDir);
+  if (!existsSync(join(appDir, 'start.sh'))) {
+    throw Object.assign(new Error(`accepted application source has no ${CODING_CONTAINER_START_SCRIPT}`),
+      { code: 'generated_app_start_contract_missing' });
+  }
+  let startFailure: unknown = null;
+  try {
+    await lifecycle(application, 'start');
+  } catch (error) {
+    startFailure = error;
+  }
+  const restoreAcceptedSource = async (): Promise<void> => {
+    let cleanupFailure: unknown = null;
+    try {
+      await lifecycle(application, 'stop');
+    } catch (error) {
+      cleanupFailure = error;
+    }
+    try {
+      restoreAppSource(sourcePath, appDir);
+    } catch (error) {
+      cleanupFailure ??= error;
+    }
+    if (cleanupFailure) {
+      throw new Error('could not stop and restore an application after startup',
+        { cause: cleanupFailure });
+    }
+  };
+  const materialized = hashAppSource(appDir);
+  if (materialized.sha256 !== accepted.sha256
+    || materialized.files.length !== accepted.files.length) {
+    await restoreAcceptedSource();
+    throw Object.assign(
+      new Error('materialized application source differs from its accepted snapshot'),
+      { code: 'generated_app_source_changed' });
+  }
+  if (startFailure) {
+    await restoreAcceptedSource();
+    throw startFailure;
+  }
+}
+
+export function materializationAppFailure(error: unknown): RunOutcome {
+  const code = error && typeof error === 'object' && 'code' in error ? error.code : null;
+  if (code !== 'generated_app_source_changed'
+    && code !== 'generated_app_start_contract_missing'
+    && code !== 'generated_app_not_restartable') throw error;
+  const reason = code === 'generated_app_source_changed'
+    ? 'application startup changed the accepted source'
+    : code === 'generated_app_not_restartable'
+    ? `application did not start from clean source: ${redactCredentials(message(error))
+        .replace(/\s+/g, ' ').slice(0, 600)}`
+    : `accepted application source has no ${CODING_CONTAINER_START_SCRIPT}`;
+  return { kind: 'app_failure', phase: 'application-restart', reason,
+    appFailures: ['application-restart'], inconclusive: [], harnessFailures: [] };
+}
diff --git a/tools/stack-bench/src/runtime/source-snapshot.ts b/tools/stack-bench/src/runtime/source-snapshot.ts
new file mode 100644
index 00000000000..14ff7bcdc80
--- /dev/null
+++ b/tools/stack-bench/src/runtime/source-snapshot.ts
@@ -0,0 +1,198 @@
+import { accessSync, chmodSync, constants, cpSync, existsSync, lstatSync, mkdirSync, readdirSync,
+  rmSync } from 'node:fs';
+import { basename, isAbsolute, join, relative, resolve, sep } from 'node:path';
+
+import { hashDirectory } from '../evidence/provenance.js';
+import { CODING_CONTAINER_BUG_REPORT_FILE } from './coding-container-policy.js';
+import type { HashFilesResult } from '../evidence/provenance.js';
+
+// Snapshots contain model-authored source, not runtime state or repair evidence.
+const PRESERVED_DIRS = new Set(['node_modules']);
+const ROOT_PRESERVED_DIRS = new Set(['.git', 'stack-bench']);
+const TRANSIENT_DIRS = new Set([
+  'dist', '.vite', 'coverage',
+  '.apt', '.cache', '.debroot', '.libs', '.npm-cache', '.pw-browsers', '.pwcache',
+]);
+const TRANSIENT_PATHS = new Set(['client/src/module_bindings']);
+const ROOT_RUNTIME_FILES = new Set([
+  CODING_CONTAINER_BUG_REPORT_FILE, 'client.log', 'server.log', 'vite.log',
+]);
+
+type DirectoryDisposition = 'preserve' | 'transient' | 'source';
+
+function assertSeparateTrees(from: string, to: string): void {
+  const source = resolve(from);
+  const target = resolve(to);
+  const overlaps = (root: string, candidate: string): boolean => {
+    const rel = relative(root, candidate);
+    return rel === '' || (!rel.startsWith(`..${sep}`) && rel !== '..' && !isAbsolute(rel));
+  };
+  if (overlaps(source, target) || overlaps(target, source)) {
+    throw new Error(`source and destination trees must not overlap: ${source} and ${target}`);
+  }
+}
+
+function preservedRuntimeFile(rel: string): boolean {
+  const normalized = rel.replaceAll('\\', '/');
+  return ROOT_RUNTIME_FILES.has(normalized) || normalized.endsWith('.pid');
+}
+
+const transientRuntimeFile = (rel: string): boolean => basename(rel).endsWith('.tsbuildinfo');
+
+function directoryDisposition(rel: string): DirectoryDisposition {
+  const normalized = rel.replaceAll('\\', '/');
+  if (TRANSIENT_PATHS.has(normalized)) return 'transient';
+  const name = basename(rel);
+  if (ROOT_PRESERVED_DIRS.has(normalized)) return 'preserve';
+  if (PRESERVED_DIRS.has(name)) return 'preserve';
+  if (TRANSIENT_DIRS.has(name)) return 'transient';
+  return 'source';
+}
+
+function ensureWritable(path: string): void {
+  try { accessSync(path, constants.W_OK); }
+  catch { chmodSync(path, lstatSync(path).mode | 0o222); }
+}
+
+function copySourceTree(from: string, to: string, rel = '', writable = false): void {
+  if (!existsSync(from)) return;
+  mkdirSync(to, { recursive: true });
+  if (writable) ensureWritable(to);
+  for (const entry of readdirSync(from, { withFileTypes: true })) {
+    const childRel = rel ? join(rel, entry.name) : entry.name;
+    if (directoryDisposition(childRel) !== 'source') continue;
+    if (!entry.isDirectory() && (preservedRuntimeFile(childRel) || transientRuntimeFile(childRel))) continue;
+    const source = join(from, entry.name);
+    const target = join(to, entry.name);
+    if (entry.isDirectory()) copySourceTree(source, target, childRel, writable);
+    else if (entry.isFile()) {
+      cpSync(source, target, { force: true, dereference: false });
+      // Materialized source runs as an unprivileged UID in its own workspace.
+      if (writable) ensureWritable(target);
+    } else throw new Error(`application source contains unsupported filesystem entry ${childRel}`);
+  }
+}
+
+// Restore source in place without replacing active dependency directories.
+function removeAbsent(path: string, rel: string): void {
+  const disposition = directoryDisposition(rel);
+  if (disposition === 'preserve') return;
+  if (disposition === 'transient') {
+    rmSync(path, { recursive: true, force: true });
+    return;
+  }
+  const stat = lstatSync(path);
+  if (!stat.isDirectory()) {
+    if (!preservedRuntimeFile(rel)) rmSync(path, { force: true });
+    return;
+  }
+  for (const entry of readdirSync(path, { withFileTypes: true })) {
+    removeAbsent(join(path, entry.name), join(rel, entry.name));
+  }
+  if (readdirSync(path).length === 0) rmSync(path, { recursive: true, force: true });
+}
+
+function syncSourceTree(snapshot: string, appDir: string, rel = ''): void {
+  mkdirSync(appDir, { recursive: true });
+  ensureWritable(appDir);
+  const snapshotNames = new Set(readdirSync(snapshot));
+
+  for (const entry of readdirSync(appDir, { withFileTypes: true })) {
+    const childRel = rel ? join(rel, entry.name) : entry.name;
+    const disposition = directoryDisposition(childRel);
+    if (disposition === 'preserve') continue;
+    if (!entry.isDirectory() && preservedRuntimeFile(childRel)) continue;
+    if (disposition === 'transient') {
+      rmSync(join(appDir, entry.name), { recursive: true, force: true });
+      continue;
+    }
+    if (!snapshotNames.has(entry.name)) removeAbsent(join(appDir, entry.name), childRel);
+  }
+
+  for (const entry of readdirSync(snapshot, { withFileTypes: true })) {
+    const childRel = rel ? join(rel, entry.name) : entry.name;
+    const source = join(snapshot, entry.name);
+    const target = join(appDir, entry.name);
+    if (entry.isDirectory()) {
+      if (existsSync(target) && !lstatSync(target).isDirectory()) rmSync(target, { force: true });
+      syncSourceTree(source, target, childRel);
+      continue;
+    }
+    if (!entry.isFile()) {
+      throw new Error(`source snapshot contains unsupported filesystem entry ${childRel}`);
+    }
+    if (existsSync(target) && !lstatSync(target).isFile()) {
+      if (lstatSync(target).isDirectory()) {
+        removeAbsent(target, childRel);
+        if (existsSync(target)) {
+          throw new Error(`cannot restore source file over preserved directory: ${childRel}`);
+        }
+      } else rmSync(target, { force: true });
+    }
+    cpSync(source, target, { force: true, dereference: false });
+    ensureWritable(target);
+  }
+}
+
+export function snapshotAppSource(appDir: string, to: string): void {
+  assertSeparateTrees(appDir, to);
+  rmSync(to, { recursive: true, force: true });
+  copySourceTree(appDir, to);
+}
+
+export function hashAppSource(appDir: string): HashFilesResult {
+  return hashDirectory(appDir, { exclude: (rel) => directoryDisposition(rel) !== 'source'
+    || preservedRuntimeFile(rel) || transientRuntimeFile(rel) });
+}
+
+export function assertAppSourceIdentity(appDir: string, expectedSha256: string,
+  context = 'application source'): HashFilesResult {
+  const actual = hashAppSource(appDir);
+  if (actual.sha256 !== expectedSha256) {
+    throw new Error(`${context} hash ${actual.sha256} does not match ${expectedSha256}`);
+  }
+  return actual;
+}
+
+// Validate only the files that belong to the source identity. Dependency,
+// build-output, and harness directories can contain links created by their
+// own tools and are excluded from the source snapshot and hash.
+export function assertPlainAppSourceTree(appDir: string): void {
+  if (!existsSync(appDir)) return;
+  if (!lstatSync(appDir).isDirectory()) throw new Error('application source root is not a plain directory');
+  const walk = (directory: string, rel = ''): void => {
+    for (const entry of readdirSync(directory, { withFileTypes: true })) {
+      const childRel = rel ? join(rel, entry.name) : entry.name;
+      if (directoryDisposition(childRel) !== 'source') continue;
+      if (!entry.isDirectory() && (preservedRuntimeFile(childRel) || transientRuntimeFile(childRel))) continue;
+      if (entry.isDirectory()) walk(join(directory, entry.name), childRel);
+      else if (!entry.isFile()) {
+        throw new Error(`application source contains unsupported filesystem entry ${childRel}`);
+      }
+    }
+  };
+  walk(appDir);
+}
+
+export function restoreAppSource(from: string, appDir: string): void {
+  if (!existsSync(from)) throw new Error(`source snapshot does not exist: ${from}`);
+  assertSeparateTrees(from, appDir);
+  syncSourceTree(from, appDir);
+}
+
+export function resetAppToSource(from: string, appDir: string): void {
+  if (!existsSync(from)) throw new Error(`source snapshot does not exist: ${from}`);
+  assertSeparateTrees(from, appDir);
+  mkdirSync(appDir, { recursive: true });
+  for (const entry of readdirSync(appDir, { withFileTypes: true })) {
+    if (entry.name === '.git') continue;
+    rmSync(join(appDir, entry.name), { recursive: entry.isDirectory(), force: true });
+  }
+  copySourceTree(from, appDir, '', true);
+}
+
+export function seedAppSource(from: string, appDir: string): void {
+  if (!existsSync(from)) throw new Error(`source seed does not exist: ${from}`);
+  assertSeparateTrees(from, appDir);
+  copySourceTree(from, appDir, '', true);
+}
diff --git a/tools/stack-bench/src/runtime/spacetime-layout.ts b/tools/stack-bench/src/runtime/spacetime-layout.ts
new file mode 100644
index 00000000000..39a44ad2843
--- /dev/null
+++ b/tools/stack-bench/src/runtime/spacetime-layout.ts
@@ -0,0 +1,168 @@
+import { existsSync, lstatSync, readFileSync, readdirSync, realpathSync } from 'node:fs';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { CODING_CONTAINER_APP_ROOT } from './coding-container-policy.js';
+
+const SKIP_DIRECTORIES = new Set([
+  '.git', '.vite', 'dist', 'module_bindings', 'node_modules', 'stack-bench',
+]);
+
+export class GeneratedAppLayoutError extends Error {
+  readonly code = 'generated_app_layout';
+
+  constructor(message: string) {
+    super(message);
+    this.name = 'GeneratedAppLayoutError';
+  }
+}
+
+interface ModuleTarget {
+  path: string;
+  configPath: string | null;
+}
+
+export interface SpacetimeModuleLayout {
+  moduleDirectory: string;
+  hostPath: string;
+  containerPath: string;
+  configPath: string | null;
+  source: 'spacetime.json' | 'required-directory' | 'server-sdk-import';
+}
+
+function fail(message: string): never {
+  throw new GeneratedAppLayoutError(message);
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+
+function readConfig(appRoot: string, path: string): Record<string, unknown> {
+  let config: unknown;
+  try { config = JSON.parse(readFileSync(path, 'utf8')); }
+  catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    fail(`${relative(appRoot, path)} is not valid JSON: ${detail}`);
+  }
+  if (!isRecord(config)) {
+    fail(`${relative(appRoot, path)} is not valid JSON: expected an object`);
+  }
+  return config;
+}
+
+function inside(root: string, candidate: string): boolean {
+  const rel = relative(root, candidate);
+  return rel !== '..' && !rel.startsWith(`..${sep}`) && !isAbsolute(rel);
+}
+
+function walk(root: string, visit: (path: string, name: string) => void): void {
+  for (const entry of readdirSync(root, { withFileTypes: true })) {
+    if (entry.isSymbolicLink()) continue;
+    const path = join(root, entry.name);
+    if (entry.isDirectory()) {
+      if (!SKIP_DIRECTORIES.has(entry.name)) walk(path, visit);
+      continue;
+    }
+    if (entry.isFile()) visit(path, entry.name);
+  }
+}
+
+function configuredPath(appRoot: string, configPath: string, modulePath: string): string {
+  const normalized = modulePath.replaceAll('\\', '/');
+  if (normalized === CODING_CONTAINER_APP_ROOT) return appRoot;
+  const prefix = `${CODING_CONTAINER_APP_ROOT}/`;
+  if (normalized.startsWith(prefix)) return resolve(appRoot, normalized.slice(prefix.length));
+  return resolve(dirname(configPath), modulePath);
+}
+
+function configTargets(appRoot: string): ModuleTarget[] {
+  const targets: ModuleTarget[] = [];
+  walk(appRoot, (path, name) => {
+    if (name !== 'spacetime.json') return;
+    const config = readConfig(appRoot, path);
+    const modulePath = config['module-path'];
+    if (modulePath === undefined) return;
+    if (typeof modulePath !== 'string' || !modulePath.trim()) {
+      fail(`${relative(appRoot, path)} has an invalid module-path`);
+    }
+    targets.push({ path: configuredPath(appRoot, path, modulePath), configPath: path });
+  });
+  return targets;
+}
+
+function importsServerSdk(directory: string): boolean {
+  const src = join(directory, 'src');
+  if (!existsSync(src) || !lstatSync(src).isDirectory()) return false;
+  let found = false;
+  walk(src, (path, name) => {
+    if (found || !/\.(?:[cm]?ts|tsx|[cm]?js|jsx)$/.test(name)) return;
+    try { found = /(?:from\s*|require\s*\()['"]spacetimedb\/server['"]/.test(readFileSync(path, 'utf8')); }
+    catch { /* an unreadable generated file is not layout evidence */ }
+  });
+  return found;
+}
+
+function discoveredTargets(appRoot: string): ModuleTarget[] {
+  const targets: ModuleTarget[] = [];
+  walk(appRoot, (path, name) => {
+    if (name !== 'package.json') return;
+    const directory = dirname(path);
+    if (importsServerSdk(directory)) targets.push({ path: directory, configPath: null });
+  });
+  return targets;
+}
+
+function validateTarget(appRoot: string, target: ModuleTarget): Omit<SpacetimeModuleLayout, 'source'> {
+  const unresolved = resolve(target.path);
+  if (!inside(appRoot, unresolved)) {
+    fail(`SpacetimeDB module path escapes the application: ${unresolved}`);
+  }
+  if (!existsSync(unresolved) || !lstatSync(unresolved).isDirectory()) {
+    fail(`SpacetimeDB module directory is missing: ${relative(appRoot, unresolved) || '.'}`);
+  }
+  const actual = realpathSync(unresolved);
+  if (!inside(appRoot, actual)) {
+    fail(`SpacetimeDB module path resolves outside the application: ${unresolved}`);
+  }
+  if (!existsSync(join(actual, 'package.json')) || !importsServerSdk(actual)) {
+    fail(`SpacetimeDB module directory is not a TypeScript module: ${relative(appRoot, actual) || '.'}`);
+  }
+  const moduleDirectory = relative(appRoot, actual).split(sep).join('/');
+  return {
+    moduleDirectory,
+    hostPath: actual,
+    containerPath: `${CODING_CONTAINER_APP_ROOT}/${moduleDirectory}`,
+    configPath: target.configPath
+      ? relative(appRoot, target.configPath).split(sep).join('/') : null,
+  };
+}
+
+export function resolveSpacetimeModuleLayout(app: string): SpacetimeModuleLayout {
+  if (!existsSync(app) || !lstatSync(app).isDirectory()) {
+    fail(`application directory is missing: ${resolve(app)}`);
+  }
+  const appRoot = realpathSync(app);
+  const declared = configTargets(appRoot);
+  let candidates = declared;
+  let source: SpacetimeModuleLayout['source'] = 'spacetime.json';
+  if (!candidates.length) {
+    const conventional = join(appRoot, 'backend', 'spacetimedb');
+    if (existsSync(conventional)) {
+      candidates = [{ path: conventional, configPath: null }];
+      source = 'required-directory';
+    } else {
+      candidates = discoveredTargets(appRoot);
+      source = 'server-sdk-import';
+    }
+  }
+  const unique = new Map(candidates.map(candidate => [resolve(candidate.path), candidate]));
+  if (unique.size === 0) {
+    fail('no SpacetimeDB TypeScript module was found; expected backend/spacetimedb or one declared by spacetime.json');
+  }
+  if (unique.size > 1) {
+    fail(`multiple SpacetimeDB module directories were found: ${[...unique.keys()]
+      .map(path => relative(appRoot, path)).sort().join(', ')}`);
+  }
+  const target = unique.values().next().value;
+  if (target === undefined) throw new GeneratedAppLayoutError('no SpacetimeDB TypeScript module was found');
+  return { ...validateTarget(appRoot, target), source };
+}
diff --git a/tools/stack-bench/src/runtime/spacetime-target.ts b/tools/stack-bench/src/runtime/spacetime-target.ts
new file mode 100644
index 00000000000..a1146a6bc1b
--- /dev/null
+++ b/tools/stack-bench/src/runtime/spacetime-target.ts
@@ -0,0 +1,62 @@
+// Resolve SpacetimeDB control targets only from the authenticated run lease.
+// Generated client config is application input and must never select a module,
+// host, or container for grader operations.
+
+import { execFileSync } from 'node:child_process';
+import { leaseFromEnv } from './backend-lease.js';
+import type { BackendLeaseContainer } from './backend-lease.js';
+import type { TextCommandExecutor } from './command-executor.js';
+
+interface SpacetimeTargetLease {
+  resources: {
+    serverUri: string;
+    buildContainer?: Pick<BackendLeaseContainer, 'networkMode'> | null;
+  };
+}
+
+export interface LeasedSpacetimeTarget {
+  mod: string;
+  uri: string;
+  containerUri: string;
+  buildContainer: BackendLeaseContainer | null;
+}
+
+export function containerReachableSpacetimeUri(
+  lease: SpacetimeTargetLease,
+  networkMode: string | null = null,
+): string {
+  const mode = networkMode ?? lease.resources.buildContainer?.networkMode ?? 'bridge';
+  if (mode === 'host') return lease.resources.serverUri;
+  if (mode !== 'bridge') throw new Error(`unsupported build container network mode ${mode}`);
+  return lease.resources.serverUri
+    .replace('127.0.0.1', 'host.docker.internal')
+    .replace('localhost', 'host.docker.internal');
+}
+
+export function leasedSpacetimeTarget({
+  requireBuildContainer = false,
+  exec = execFileSync,
+}: {
+  requireBuildContainer?: boolean;
+  exec?: TextCommandExecutor;
+} = {}): LeasedSpacetimeTarget {
+  const { lease } = leaseFromEnv(process.env, { backend: 'spacetime', active: true });
+  const target: LeasedSpacetimeTarget = {
+    mod: lease.resources.module,
+    uri: lease.resources.serverUri,
+    containerUri: containerReachableSpacetimeUri(lease),
+    buildContainer: null,
+  };
+  if (!requireBuildContainer) return target;
+  const container = lease.resources.buildContainer;
+  if (!container || container.running !== true) {
+    throw new Error('leased build container is not active');
+  }
+  const actual = exec('docker', ['inspect', '--format', '{{.Id}}', container.name],
+    { encoding: 'utf8', stdio: 'pipe', timeout: 120_000 }).trim();
+  if (actual !== container.id) {
+    throw new Error(`${container.name} changed after lease creation; refusing SpacetimeDB control`);
+  }
+  target.buildContainer = container;
+  return target;
+}
diff --git a/tools/stack-bench/src/semantic-version.ts b/tools/stack-bench/src/semantic-version.ts
new file mode 100644
index 00000000000..b6f9baeb346
--- /dev/null
+++ b/tools/stack-bench/src/semantic-version.ts
@@ -0,0 +1,19 @@
+import { parse as parseSemver } from 'semver';
+
+export function isExactSemanticVersion(value: unknown): value is string {
+  if (typeof value !== 'string') return false;
+  const parsed = parseSemver(value);
+  if (!parsed) return false;
+  const canonical = `${parsed.version}${parsed.build.length ? `+${parsed.build.join('.')}` : ''}`;
+  return value === canonical;
+}
+
+export function parseVersionedReference(value: unknown,
+  isValidIdentifier: (identifier: string) => boolean): { id: string; version: string } | null {
+  if (typeof value !== 'string') return null;
+  const split = value.lastIndexOf('@');
+  if (split < 1) return null;
+  const id = value.slice(0, split);
+  const version = value.slice(split + 1);
+  return isValidIdentifier(id) && isExactSemanticVersion(version) ? { id, version } : null;
+}
diff --git a/tools/stack-bench/src/stacks/backend-reset-guard.ts b/tools/stack-bench/src/stacks/backend-reset-guard.ts
new file mode 100644
index 00000000000..e8b3a654059
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backend-reset-guard.ts
@@ -0,0 +1,41 @@
+import type { TextCommandExecutor } from '../runtime/command-executor.js';
+import type { BackendLease } from '../runtime/backend-lease.js';
+
+interface LeasedContainer {
+  id: string;
+  name: string;
+}
+
+export interface LeasedDatabase {
+  resources: { container: LeasedContainer; database: string };
+}
+
+export interface LeasedSpacetime {
+  resources: { module: string; serverUri: string };
+}
+
+export function requireLeasedDatabase(lease: BackendLease): LeasedDatabase {
+  const { container, database } = lease.resources;
+  if (!container || !database) throw new Error(`${lease.backend} lease has no database target`);
+  return { resources: { container, database } };
+}
+
+export function requireLeasedSpacetime(lease: BackendLease): LeasedSpacetime {
+  const { module, serverUri } = lease.resources;
+  if (!module || !serverUri) throw new Error('SpacetimeDB lease has no module target');
+  return { resources: { module, serverUri } };
+}
+
+export function assertLeasedContainer(
+  container: LeasedContainer,
+  exec: TextCommandExecutor,
+  timeoutMs: number,
+  purpose: string,
+): string {
+  const actual = exec('docker', ['inspect', '--format', '{{.Id}}', container.name],
+    { encoding: 'utf8', stdio: 'pipe', timeout: timeoutMs }).trim();
+  if (actual !== container.id) {
+    throw new Error(`${container.name} changed after lease creation; refusing ${purpose}`);
+  }
+  return actual;
+}
diff --git a/tools/stack-bench/src/stacks/backend-reset.ts b/tools/stack-bench/src/stacks/backend-reset.ts
new file mode 100644
index 00000000000..e05adb2ef0e
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backend-reset.ts
@@ -0,0 +1,27 @@
+// Lease-authenticated database reset used by the grading orchestrator.
+
+import { leaseFromEnv } from '../runtime/backend-lease.js';
+import { STACK_ADAPTER_REGISTRY } from './stack-adapters.js';
+import { requireLeasedDatabase, requireLeasedSpacetime } from './backend-reset-guard.js';
+import type { TextCommandExecutor } from '../runtime/command-executor.js';
+
+export const GENERATED_APP_LAYOUT_EXIT_CODE = 10;
+
+interface BackendResetRequest {
+  backend: string;
+  app: string;
+  exec?: TextCommandExecutor;
+}
+
+export function resetBackend({ backend, app, exec }: BackendResetRequest): unknown {
+  const { lease } = leaseFromEnv(process.env, { backend, active: true });
+  const adapter = STACK_ADAPTER_REGISTRY.get(backend);
+  const input = { app, ...(exec ? { exec } : {}) };
+  if (adapter.id === 'postgres' || adapter.id === 'mongodb') {
+    return adapter.reset.run({ ...input, lease: requireLeasedDatabase(lease) });
+  }
+  if (adapter.id === 'spacetime') {
+    return adapter.reset.run({ ...input, lease: requireLeasedSpacetime(lease) });
+  }
+  throw new Error(`stack adapter ${backend} does not support reset`);
+}
diff --git a/tools/stack-bench/src/stacks/backends/mongodb-adapter.ts b/tools/stack-bench/src/stacks/backends/mongodb-adapter.ts
new file mode 100644
index 00000000000..611d0cb35af
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backends/mongodb-adapter.ts
@@ -0,0 +1,45 @@
+import { GRADING_CAPABILITY_IDS } from '../../actions/action-contract.js';
+import { createHttpGradingContext, httpNamedActionRequest } from '../stack-grading-operations.js';
+import { captureHostedDiagnostics, activateHosted } from '../hosted-lifecycle.js';
+import { mongoDbConnectionUrl, mongoDbSetupMetadata,
+  standardBuildContainerPlan } from '../stack-agent-operations.js';
+import { deployMongoDbReference } from '../stack-reference-operations.js';
+import { standardOrchestratorConfig } from '../stack-orchestrator-operations.js';
+import { stopHostedHost } from '../stack-teardown-operations.js';
+import { stackLeaseOperations } from '../stack-lease-capabilities.js';
+import { prepareMongoDbDatabase, proveMongoDbUse, resetMongoDb,
+  setMongoDbStock } from './mongodb-operations.js';
+import { MONGODB_ADAPTER_VERSION } from './mongodb-identity.js';
+import { controlHostedFor, defineStackAdapter } from '../stack-adapter-common.js';
+
+const mongodbAdapter = defineStackAdapter('mongodb', {
+  activate: activateHosted,
+  control: input => controlHostedFor('mongodb', mongoDbConnectionUrl, input),
+}, {
+  lease: stackLeaseOperations('mongodb'),
+  reset: { run: resetMongoDb, requiresReseed: true },
+  databaseWrite: { setStock: setMongoDbStock },
+  diagnostics: { capture: captureHostedDiagnostics },
+  database: { prepare: prepareMongoDbDatabase, proveUse: proveMongoDbUse },
+  grading: { context: createHttpGradingContext,
+    transport: 'http', capabilities: GRADING_CAPABILITY_IDS },
+  namedAction: { request: httpNamedActionRequest },
+  teardown: { host: stopHostedHost },
+  runPolicy: { resetEnabled: true, retainHostSupported: false,
+    supervisorEnvironment: (_input: { spacetimePort: number | null }) => ({}) },
+  agent: {
+    connectionUrl: mongoDbConnectionUrl,
+    minimalGuidanceSupported: true,
+    defaultSkills: [],
+    linuxCliRequired: false,
+    setupMetadata: mongoDbSetupMetadata,
+    serverDirectory: 'server',
+    findDatabaseUrls: ({ text }: { text: string }) =>
+      text.match(/mongodb(?:\+srv)?:\/\/[^\s'"`]+/g) ?? [],
+  },
+  buildContainer: { plan: standardBuildContainerPlan },
+  reference: { deploy: deployMongoDbReference },
+  orchestrator: { config: standardOrchestratorConfig },
+}, { version: MONGODB_ADAPTER_VERSION });
+
+export { mongodbAdapter };
diff --git a/tools/stack-bench/src/stacks/backends/mongodb-identity.ts b/tools/stack-bench/src/stacks/backends/mongodb-identity.ts
new file mode 100644
index 00000000000..74828143b12
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backends/mongodb-identity.ts
@@ -0,0 +1 @@
+export const MONGODB_ADAPTER_VERSION = '1.4.0';
diff --git a/tools/stack-bench/src/stacks/backends/mongodb-operations.ts b/tools/stack-bench/src/stacks/backends/mongodb-operations.ts
new file mode 100644
index 00000000000..8362460dd8d
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backends/mongodb-operations.ts
@@ -0,0 +1,121 @@
+import { execFileSync } from 'node:child_process';
+import { stockInterfaceError } from '../stock-interface.js';
+
+import { assertLeasedContainer } from '../backend-reset-guard.js';
+import type { LeasedDatabase } from '../backend-reset-guard.js';
+import type { TextCommandExecutor } from '../../runtime/command-executor.js';
+
+const RESET_TIMEOUT_MS = 120_000;
+const WRITE_TIMEOUT_MS = 60_000;
+
+const record = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object';
+
+// A failed child process carries its output on the error.
+const streams = (error: unknown, ...keys: readonly string[]): string =>
+  record(error) ? keys.map(key => String(error[key] ?? '')).join('') : '';
+
+export function resetMongoDb({ lease, exec = execFileSync }:
+  { lease: LeasedDatabase; exec?: TextCommandExecutor }): string {
+  const containerId = assertLeasedContainer(lease.resources.container, exec, RESET_TIMEOUT_MS, 'reset');
+  exec('docker', ['exec', containerId, 'mongosh', lease.resources.database,
+    '--quiet', '--eval', 'db.dropDatabase()'],
+  { encoding: 'utf8', stdio: 'pipe', timeout: RESET_TIMEOUT_MS });
+  return `reset mongodb database ${lease.resources.database}`;
+}
+
+export function proveMongoDbUse({ lease, marker, exec = execFileSync }:
+  { lease: LeasedDatabase; marker: unknown; exec?: TextCommandExecutor }):
+  { ok: boolean; verified: boolean; matches: number; reason: string } {
+  if (typeof marker !== 'string' || !marker) {
+    throw new Error('MongoDB provenance requires a non-empty application marker');
+  }
+  const containerId = assertLeasedContainer(lease.resources.container, exec, RESET_TIMEOUT_MS,
+    'database provenance');
+  const script = `const marker = ${JSON.stringify(marker)};
+function containsMarker(value) {
+  if (value === marker) return true;
+  if (!value || typeof value !== 'object') return false;
+  if (Array.isArray(value)) return value.some(containsMarker);
+  return Object.values(value).some(containsMarker);
+}
+let matches = 0;
+for (const name of db.getCollectionNames()) {
+  const cursor = db.getCollection(name).find();
+  while (cursor.hasNext()) {
+    if (containsMarker(cursor.next())) { matches += 1; break; }
+  }
+}
+print(matches);`;
+  const output = exec('docker', ['exec', containerId,
+    'mongosh', lease.resources.database, '--quiet', '--eval', script],
+  { encoding: 'utf8', stdio: 'pipe', timeout: RESET_TIMEOUT_MS }).trim();
+  const matches = Number(output.split(/\r?\n/).at(-1));
+  if (!Number.isSafeInteger(matches) || matches < 0) {
+    throw new Error(`MongoDB provenance returned an invalid count: ${output.slice(-120)}`);
+  }
+  return { ok: matches > 0, verified: true, matches,
+    reason: matches
+      ? 'the application marker exists in the leased MongoDB database'
+      : 'the application marker is absent from the leased MongoDB database' };
+}
+
+export function setMongoDbStock({ item, warehouse, quantity, lease, exec = execFileSync }: {
+  item: string; warehouse: string; quantity: number; lease: LeasedDatabase;
+  exec?: TextCommandExecutor;
+}): { backend: string; item: string; warehouse: string; quantity: number } {
+  const container = assertLeasedContainer(lease.resources.container, exec, WRITE_TIMEOUT_MS,
+    'direct database write');
+  const dbName = lease.resources.database;
+  const script = `
+    const it = db.item.findOne({ name: ${JSON.stringify(item)} });
+    const wh = db.warehouse.findOne({ name: ${JSON.stringify(warehouse)} });
+    if (!it || !wh) { print('MISSING'); quit(1); }
+    const iid = it._id ?? it.id, wid = wh._id ?? wh.id;
+    const r = db.stock.updateOne(
+      { $or: [ { item_id: iid, warehouse_id: wid }, { itemId: iid, warehouseId: wid } ] },
+      { $set: { quantity: ${quantity} } });
+    print(r.matchedCount === 1 ? 'OK' : 'NOMATCH');
+  `;
+  let output: string;
+  try {
+    output = exec('docker', ['exec', container,
+      'mongosh', dbName, '--quiet', '--eval', script],
+    { encoding: 'utf8', stdio: 'pipe', timeout: WRITE_TIMEOUT_MS });
+  } catch (error) {
+    const detail = streams(error, 'stdout', 'stderr').trim().slice(-160);
+    throw stockInterfaceError('direct stock correction requires singular collections '
+      + '`item`, `warehouse`, and `stock`; stock rows must use '
+      + `item_id/warehouse_id or itemId/warehouseId: ${detail || streams(error, 'message')}`,
+    { cause: error });
+  }
+  if (!/OK/.test(output)) {
+    throw stockInterfaceError(`could not find ${item} / ${warehouse} in the required collections `
+      + `(${output.trim().slice(0, 80)})`);
+  }
+  return { backend: 'mongodb', item, warehouse, quantity };
+}
+
+export function prepareMongoDbDatabase({ lease, name, expectedName, wipe,
+  exec = execFileSync }: {
+  lease: LeasedDatabase; name: string; expectedName: string; wipe: boolean;
+  exec?: TextCommandExecutor;
+}): string {
+  if (name !== expectedName) {
+    throw new Error(`backend lease database ${name} does not match harness target ${expectedName}`);
+  }
+  const containerId = assertLeasedContainer(lease.resources.container, exec, RESET_TIMEOUT_MS,
+    'database mutation');
+  if (wipe) {
+    try {
+      exec('docker', ['exec', containerId, 'mongosh', name, '--quiet',
+        '--eval', 'db.dropDatabase()'],
+      { encoding: 'utf8', stdio: 'pipe', timeout: RESET_TIMEOUT_MS });
+      console.error(`  wiped ${name} — a build starts on an empty database`);
+    } catch (error) {
+      throw new Error(`could not wipe ${name}: ${streams(error, 'message').split('\n')[0]}`,
+      { cause: error });
+    }
+  }
+  return name;
+}
diff --git a/tools/stack-bench/src/stacks/backends/postgres-adapter.ts b/tools/stack-bench/src/stacks/backends/postgres-adapter.ts
new file mode 100644
index 00000000000..1fce88629fe
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backends/postgres-adapter.ts
@@ -0,0 +1,45 @@
+import { GRADING_CAPABILITY_IDS } from '../../actions/action-contract.js';
+import { createHttpGradingContext, httpNamedActionRequest } from '../stack-grading-operations.js';
+import { captureHostedDiagnostics, activateHosted } from '../hosted-lifecycle.js';
+import { postgresConnectionUrl, postgresSetupMetadata,
+  standardBuildContainerPlan } from '../stack-agent-operations.js';
+import { deployPostgresReference } from '../stack-reference-operations.js';
+import { standardOrchestratorConfig } from '../stack-orchestrator-operations.js';
+import { stopHostedHost } from '../stack-teardown-operations.js';
+import { stackLeaseOperations } from '../stack-lease-capabilities.js';
+import { preparePostgresDatabase, provePostgresUse, resetPostgres,
+  setPostgresStock } from './postgres-operations.js';
+import { POSTGRES_ADAPTER_VERSION } from './postgres-identity.js';
+import { controlHostedFor, defineStackAdapter } from '../stack-adapter-common.js';
+
+const postgresAdapter = defineStackAdapter('postgres', {
+  activate: activateHosted,
+  control: input => controlHostedFor('postgres', postgresConnectionUrl, input),
+}, {
+  lease: stackLeaseOperations('postgres'),
+  reset: { run: resetPostgres, requiresReseed: true },
+  databaseWrite: { setStock: setPostgresStock },
+  diagnostics: { capture: captureHostedDiagnostics },
+  database: { prepare: preparePostgresDatabase, proveUse: provePostgresUse },
+  grading: { context: createHttpGradingContext,
+    transport: 'http', capabilities: GRADING_CAPABILITY_IDS },
+  namedAction: { request: httpNamedActionRequest },
+  teardown: { host: stopHostedHost },
+  runPolicy: { resetEnabled: true, retainHostSupported: false,
+    supervisorEnvironment: (_input: { spacetimePort: number | null }) => ({}) },
+  agent: {
+    connectionUrl: postgresConnectionUrl,
+    minimalGuidanceSupported: true,
+    defaultSkills: [],
+    linuxCliRequired: false,
+    setupMetadata: postgresSetupMetadata,
+    serverDirectory: 'server',
+    findDatabaseUrls: ({ text }: { text: string }) =>
+      text.match(/(?:postgresql|postgres):\/\/[^\s'"`]+/g) ?? [],
+  },
+  buildContainer: { plan: standardBuildContainerPlan },
+  reference: { deploy: deployPostgresReference },
+  orchestrator: { config: standardOrchestratorConfig },
+}, { version: POSTGRES_ADAPTER_VERSION });
+
+export { postgresAdapter };
diff --git a/tools/stack-bench/src/stacks/backends/postgres-identity.ts b/tools/stack-bench/src/stacks/backends/postgres-identity.ts
new file mode 100644
index 00000000000..e8abc988f06
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backends/postgres-identity.ts
@@ -0,0 +1 @@
+export const POSTGRES_ADAPTER_VERSION = '1.5.0';
diff --git a/tools/stack-bench/src/stacks/backends/postgres-operations.ts b/tools/stack-bench/src/stacks/backends/postgres-operations.ts
new file mode 100644
index 00000000000..db04b4eb3d8
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backends/postgres-operations.ts
@@ -0,0 +1,161 @@
+import { execFileSync } from 'node:child_process';
+import { stockInterfaceError } from '../stock-interface.js';
+
+
+import { assertLeasedContainer } from '../backend-reset-guard.js';
+import type { LeasedDatabase } from '../backend-reset-guard.js';
+import { POSTGRES_APPLICATION_IDENTITY } from '../hosted-database-identity.js';
+import type { TextCommandExecutor } from '../../runtime/command-executor.js';
+
+const RESET_TIMEOUT_MS = 120_000;
+const WRITE_TIMEOUT_MS = 60_000;
+const sqlString = (value: unknown): string => `'${String(value).replaceAll("'", "''")}'`;
+
+const record = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object';
+
+// A failed child process carries its output on the error.
+const streams = (error: unknown, ...keys: readonly string[]): string =>
+  record(error) ? keys.map(key => String(error[key] ?? '')).join('') : '';
+
+const POSTGRES_USER = POSTGRES_APPLICATION_IDENTITY.user;
+
+const stockUpdateSql = (itemName: string, warehouseName: string, quantity: number): string => `
+WITH foreign_keys AS (
+  SELECT source_ns.nspname AS source_schema, source.relname AS source_table,
+         source_column.attname AS source_column,
+         target_ns.nspname AS target_schema, target.relname AS target_table,
+         target_column.attname AS target_column
+  FROM pg_constraint constraint_record
+  JOIN pg_class source ON source.oid = constraint_record.conrelid
+  JOIN pg_namespace source_ns ON source_ns.oid = source.relnamespace
+  JOIN pg_attribute source_column ON source_column.attrelid = source.oid
+    AND source_column.attnum = constraint_record.conkey[1]
+  JOIN pg_class target ON target.oid = constraint_record.confrelid
+  JOIN pg_namespace target_ns ON target_ns.oid = target.relnamespace
+  JOIN pg_attribute target_column ON target_column.attrelid = target.oid
+    AND target_column.attnum = constraint_record.confkey[1]
+  WHERE constraint_record.contype = 'f'
+    AND cardinality(constraint_record.conkey) = 1
+    AND cardinality(constraint_record.confkey) = 1
+), named_tables AS (
+  SELECT table_schema, table_name
+  FROM information_schema.columns
+  WHERE table_schema = 'public' AND column_name = 'name'
+), quantity_columns AS (
+  SELECT table_schema, table_name, column_name
+  FROM information_schema.columns
+  WHERE table_schema = 'public'
+    AND column_name IN ('quantity', 'qty', 'stock', 'on_hand', 'available')
+)
+SELECT format(
+  'WITH target AS (SELECT item.%1$I AS item_id, warehouse.%2$I AS warehouse_id '
+  'FROM public.%3$I item, public.%4$I warehouse '
+  'WHERE item.name = %5$L AND warehouse.name = %6$L) '
+  'UPDATE public.%7$I stock SET %8$I = %9$s FROM target '
+  'WHERE stock.%10$I = target.item_id AND stock.%11$I = target.warehouse_id;',
+  item.target_column, warehouse.target_column, item.target_table, warehouse.target_table,
+  ${sqlString(itemName)}, ${sqlString(warehouseName)}, quantity.table_name, quantity.column_name,
+  ${quantity}, item.source_column, warehouse.source_column)
+FROM quantity_columns quantity
+JOIN foreign_keys item ON item.source_schema = quantity.table_schema
+  AND item.source_table = quantity.table_name
+JOIN named_tables item_name ON item_name.table_schema = item.target_schema
+  AND item_name.table_name = item.target_table
+JOIN foreign_keys warehouse ON warehouse.source_schema = quantity.table_schema
+  AND warehouse.source_table = quantity.table_name
+  AND warehouse.source_column <> item.source_column
+JOIN named_tables warehouse_name ON warehouse_name.table_schema = warehouse.target_schema
+  AND warehouse_name.table_name = warehouse.target_table
+ORDER BY quantity.table_name, item.source_column, warehouse.source_column
+\\gexec
+`;
+
+export function resetPostgres({ lease, exec = execFileSync }:
+  { lease: LeasedDatabase; exec?: TextCommandExecutor }): string {
+  const containerId = assertLeasedContainer(lease.resources.container, exec, RESET_TIMEOUT_MS, 'reset');
+  exec('docker', ['exec', containerId, 'psql', '-U', POSTGRES_USER,
+    '-d', lease.resources.database, '-v', 'ON_ERROR_STOP=1', '-c',
+    "DO $block$ DECLARE tables text; BEGIN "
+      + "SELECT string_agg(format('%I.%I', schemaname, tablename), ', ') INTO tables "
+      + "FROM pg_tables WHERE schemaname = 'public'; "
+      + "IF tables IS NOT NULL THEN EXECUTE 'TRUNCATE TABLE ' || tables "
+      + "|| ' RESTART IDENTITY CASCADE'; END IF; END $block$;"],
+  { encoding: 'utf8', stdio: 'pipe', timeout: RESET_TIMEOUT_MS });
+  return `reset postgres database ${lease.resources.database}`;
+}
+
+export function provePostgresUse({ lease, marker, exec = execFileSync }:
+  { lease: LeasedDatabase; marker: unknown; exec?: TextCommandExecutor }):
+  { ok: boolean; verified: boolean; matches: number; reason: string } {
+  if (typeof marker !== 'string' || !marker) {
+    throw new Error('PostgreSQL provenance requires a non-empty application marker');
+  }
+  const containerId = assertLeasedContainer(lease.resources.container, exec, RESET_TIMEOUT_MS,
+    'database provenance');
+  const sql = "SELECT format('SELECT %L WHERE EXISTS (SELECT 1 FROM %I.%I WHERE %I::text = %L LIMIT 1);', "
+    + "table_schema || '.' || table_name || '.' || column_name, table_schema, table_name, "
+    + `column_name, ${sqlString(marker)}) FROM information_schema.columns `
+    + "WHERE table_schema = 'public' ORDER BY table_name, ordinal_position\n\\gexec\n";
+  const output = exec('docker', ['exec', '-i', containerId,
+    'psql', '-U', POSTGRES_USER, '-d', lease.resources.database,
+    '-v', 'ON_ERROR_STOP=1', '-At'],
+  { encoding: 'utf8', input: sql, stdio: 'pipe', timeout: RESET_TIMEOUT_MS }).trim();
+  const matches = output ? output.split(/\r?\n/).filter(Boolean) : [];
+  return { ok: matches.length > 0, verified: true, matches: matches.length,
+    reason: matches.length
+      ? 'the application marker exists in the leased PostgreSQL database'
+      : 'the application marker is absent from the leased PostgreSQL database' };
+}
+
+export function setPostgresStock({ item, warehouse, quantity, lease, exec = execFileSync }: {
+  item: string; warehouse: string; quantity: number; lease: LeasedDatabase;
+  exec?: TextCommandExecutor;
+}): { backend: string; item: string; warehouse: string; quantity: number } {
+  const container = assertLeasedContainer(lease.resources.container, exec, WRITE_TIMEOUT_MS,
+    'direct database write');
+  const dbName = lease.resources.database;
+  const output = exec('docker', ['exec', '-i', container,
+    'psql', '-U', POSTGRES_USER, '-d', dbName, '-v', 'ON_ERROR_STOP=1', '-At'],
+  { encoding: 'utf8', input: stockUpdateSql(item, warehouse, quantity),
+    stdio: 'pipe', timeout: WRITE_TIMEOUT_MS });
+  if ((output.match(/UPDATE 1\b/g) ?? []).length === 1) {
+    return { backend: 'postgres', item, warehouse, quantity };
+  }
+  throw stockInterfaceError(`could not locate one relational stock row for ${item} / ${warehouse}`);
+}
+
+export function preparePostgresDatabase({ lease, name, expectedName, wipe,
+  exec = execFileSync }: {
+  lease: LeasedDatabase; name: string; expectedName: string; wipe: boolean;
+  exec?: TextCommandExecutor;
+}): string {
+  if (name !== expectedName) {
+    throw new Error(`backend lease database ${name} does not match harness target ${expectedName}`);
+  }
+  const container = assertLeasedContainer(lease.resources.container, exec, RESET_TIMEOUT_MS,
+    'database mutation');
+  try {
+    exec('docker', ['exec', container, 'psql', '-U', POSTGRES_USER, '-d', 'postgres',
+      '-c', `CREATE DATABASE ${name} OWNER ${POSTGRES_USER};`],
+    { encoding: 'utf8', stdio: 'pipe', timeout: RESET_TIMEOUT_MS });
+  } catch (error) {
+    const exists = exec('docker', ['exec', container, 'psql', '-U', POSTGRES_USER,
+      '-d', 'postgres', '-tAc', `SELECT 1 FROM pg_database WHERE datname = '${name}';`],
+    { encoding: 'utf8', stdio: 'pipe', timeout: RESET_TIMEOUT_MS }).trim();
+    if (exists !== '1') throw error;
+  }
+  if (wipe) {
+    try {
+      exec('docker', ['exec', container, 'psql', '-U', POSTGRES_USER, '-d', name,
+        '-c', 'DROP SCHEMA public CASCADE; CREATE SCHEMA public; '
+            + `GRANT ALL ON SCHEMA public TO ${POSTGRES_USER};`],
+      { encoding: 'utf8', stdio: 'pipe', timeout: RESET_TIMEOUT_MS });
+      console.error(`  wiped ${name} (schema dropped) — a build starts on an empty database`);
+    } catch (error) {
+      throw new Error(`could not wipe ${name}: ${streams(error, 'message').split('\n')[0]}`,
+      { cause: error });
+    }
+  }
+  return name;
+}
diff --git a/tools/stack-bench/src/stacks/backends/spacetime-adapter.ts b/tools/stack-bench/src/stacks/backends/spacetime-adapter.ts
new file mode 100644
index 00000000000..bd8bd2ce028
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backends/spacetime-adapter.ts
@@ -0,0 +1,58 @@
+import { GRADING_CAPABILITY_IDS } from '../../actions/action-contract.js';
+import { createSpacetimeGradingContext,
+  spacetimeNamedActionRequest } from '../stack-grading-operations.js';
+import { activateSpacetime, controlSpacetime } from '../spacetime-lifecycle.js';
+import { noConnectionUrl, spacetimeBuildContainerPlan,
+  spacetimeSetupMetadata } from '../stack-agent-operations.js';
+import { deploySpacetimeReference } from '../stack-reference-operations.js';
+import { spacetimeOrchestratorConfig } from '../stack-orchestrator-operations.js';
+import { stopSpacetimeHost } from '../stack-teardown-operations.js';
+import { stackLeaseOperations } from '../stack-lease-capabilities.js';
+import { prepareSpacetimeDatabase, proveSpacetimeUse,
+  resetSpacetime, setSpacetimeStock } from './spacetime-operations.js';
+import { SPACETIME_ADAPTER_VERSION } from './spacetime-identity.js';
+import { defineStackAdapter } from '../stack-adapter-common.js';
+import { requireLeasedSpacetime } from '../backend-reset-guard.js';
+
+export const spacetimeAdapter = defineStackAdapter('spacetime', {
+  activate: activateSpacetime,
+  control: input => {
+    if (input.mode !== 'restart') {
+      throw new Error(`unsupported SpacetimeDB control mode ${input.mode}`);
+    }
+    return controlSpacetime({ lease: input.lease, signal: input.signal });
+  },
+  applicationEnvironment: lease => {
+    const { resources } = requireLeasedSpacetime(lease);
+    return {
+      VITE_MODULE_NAME: resources.module,
+      VITE_SPACETIMEDB_URI: resources.serverUri,
+    };
+  },
+}, {
+  lease: stackLeaseOperations('spacetime'),
+  reset: { run: resetSpacetime, requiresReseed: false },
+  databaseWrite: { setStock: setSpacetimeStock },
+  database: { prepare: prepareSpacetimeDatabase, proveUse: proveSpacetimeUse },
+  grading: { context: createSpacetimeGradingContext,
+    transport: 'reducer', capabilities: GRADING_CAPABILITY_IDS },
+  namedAction: { request: spacetimeNamedActionRequest },
+  teardown: { host: stopSpacetimeHost },
+  runPolicy: { resetEnabled: true, retainHostSupported: true,
+    supervisorEnvironment: ({ spacetimePort }: { spacetimePort: number | null }) => {
+      if (!spacetimePort) throw new Error('SpacetimeDB supervisor requires a port');
+      return { STACK_BENCH_STDB_URI: `http://127.0.0.1:${spacetimePort}` };
+    } },
+  agent: {
+    connectionUrl: (_input: { dbPort: number; database: string; hostUrl(url: string): string }) => noConnectionUrl(),
+    minimalGuidanceSupported: false,
+    defaultSkills: ['typescript-server', 'typescript-client'],
+    linuxCliRequired: true,
+    setupMetadata: spacetimeSetupMetadata,
+    serverDirectory: 'backend',
+    findDatabaseUrls: (_input: { text: string }) => [],
+  },
+  buildContainer: { plan: spacetimeBuildContainerPlan },
+  reference: { deploy: deploySpacetimeReference },
+  orchestrator: { config: spacetimeOrchestratorConfig },
+}, { version: SPACETIME_ADAPTER_VERSION });
diff --git a/tools/stack-bench/src/stacks/backends/spacetime-identity.ts b/tools/stack-bench/src/stacks/backends/spacetime-identity.ts
new file mode 100644
index 00000000000..7e4f4f5375a
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backends/spacetime-identity.ts
@@ -0,0 +1 @@
+export const SPACETIME_ADAPTER_VERSION = '1.3.0';
diff --git a/tools/stack-bench/src/stacks/backends/spacetime-operations.ts b/tools/stack-bench/src/stacks/backends/spacetime-operations.ts
new file mode 100644
index 00000000000..f2f0ac45d67
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backends/spacetime-operations.ts
@@ -0,0 +1,168 @@
+import { execFileSync } from 'node:child_process';
+import { stockInterfaceError } from '../stock-interface.js';
+
+import { leasedSpacetimeTarget } from '../../runtime/spacetime-target.js';
+import { resolveSpacetimeModuleLayout } from '../../runtime/spacetime-layout.js';
+import { CODING_CONTAINER_SPACETIME_CLI, codingContainerAgentCommand, codingContainerAgentExecOptions }
+  from '../../runtime/coding-container-policy.js';
+import type { TextCommandExecutor } from '../../runtime/command-executor.js';
+
+const RESET_TIMEOUT_MS = 120_000;
+const WRITE_TIMEOUT_MS = 60_000;
+const sqlString = (value: unknown): string => `'${String(value).replaceAll("'", "''")}'`;
+const sqlIdentifier = (value: unknown): string => {
+  const name = String(value);
+  if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(name)) {
+    throw new Error(`SpacetimeDB schema contains an unsupported identifier: ${name}`);
+  }
+  return name;
+};
+
+const record = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object';
+
+// A failed child process carries its output on the error.
+const streams = (error: unknown, ...keys: readonly string[]): string =>
+  record(error) ? keys.map(key => String(error[key] ?? '')).join('') : '';
+
+type SpacetimeLease = { resources: { module: string; serverUri: string } };
+const agentExec = () => ['exec', ...codingContainerAgentExecOptions()];
+
+function stringColumns(schema: unknown): Array<{ table: string; column: string }> {
+  if (!record(schema) || !Array.isArray(schema.sections)) {
+    throw new Error('SpacetimeDB describe returned an invalid schema');
+  }
+  const typespace = schema.sections.find(section => record(section) && record(section.Typespace));
+  const tablesSection = schema.sections.find(section => record(section) && Array.isArray(section.Tables));
+  const types = record(typespace) && record(typespace.Typespace) && Array.isArray(typespace.Typespace.types)
+    ? typespace.Typespace.types : null;
+  const tables = record(tablesSection) && Array.isArray(tablesSection.Tables) ? tablesSection.Tables : null;
+  if (!types || !tables) throw new Error('SpacetimeDB describe omitted tables or types');
+  const columns: Array<{ table: string; column: string }> = [];
+  for (const table of tables) {
+    if (!record(table) || typeof table.source_name !== 'string'
+      || !Number.isInteger(table.product_type_ref)) continue;
+    const type = types[Number(table.product_type_ref)];
+    const elements = record(type) && record(type.Product) && Array.isArray(type.Product.elements)
+      ? type.Product.elements : [];
+    for (const element of elements) {
+      if (!record(element) || !record(element.name) || typeof element.name.some !== 'string'
+        || !record(element.algebraic_type) || !('String' in element.algebraic_type)) continue;
+      columns.push({ table: sqlIdentifier(table.source_name), column: sqlIdentifier(element.name.some) });
+    }
+  }
+  return columns;
+}
+
+export function proveSpacetimeUse({ lease, marker, exec = execFileSync }:
+  { lease: SpacetimeLease; marker: unknown; exec?: TextCommandExecutor }):
+  { ok: boolean; verified: boolean; matches: number; reason: string } {
+  if (typeof marker !== 'string' || !marker) {
+    throw new Error('SpacetimeDB provenance requires a non-empty application marker');
+  }
+  const target = leasedSpacetimeTarget({ requireBuildContainer: true, exec });
+  const container = target.buildContainer;
+  if (!container) throw new Error('leased build container is not active');
+  if (target.mod !== lease.resources.module || target.uri !== lease.resources.serverUri) {
+    throw new Error('SpacetimeDB provenance target does not match the authenticated lease');
+  }
+  const run = (args: string[]): string => exec('docker', [...agentExec(), container.id,
+    ...codingContainerAgentCommand(CODING_CONTAINER_SPACETIME_CLI, args)],
+  { encoding: 'utf8', stdio: 'pipe', timeout: RESET_TIMEOUT_MS });
+  const schema = JSON.parse(run(['describe', '--json', target.mod, '-s', target.containerUri]));
+  let matches = 0;
+  for (const { table, column } of stringColumns(schema)) {
+    const output = run(['sql', target.mod, '-s', target.containerUri,
+      `select ${column} from ${table} where ${column} = ${sqlString(marker)}`]);
+    if (output.includes(`"${marker}"`)) matches += 1;
+  }
+  return { ok: matches > 0, verified: true, matches,
+    reason: matches
+      ? 'the application marker exists in the leased SpacetimeDB module'
+      : 'the application marker is absent from the leased SpacetimeDB module' };
+}
+
+export function resetSpacetime({ lease, app, exec = execFileSync }:
+  { lease: SpacetimeLease; app: string; exec?: TextCommandExecutor }): string {
+  const layout = resolveSpacetimeModuleLayout(app);
+  const target = leasedSpacetimeTarget({ requireBuildContainer: true, exec });
+  const container = target.buildContainer;
+  if (!container) throw new Error('leased build container is not active');
+  const containerModule = layout.containerPath;
+  try {
+    exec('docker', [...agentExec(), container.id,
+      ...codingContainerAgentCommand('test', ['-d', containerModule])],
+      { encoding: 'utf8', stdio: 'pipe', timeout: RESET_TIMEOUT_MS });
+    exec('docker', [...agentExec(), '-w', containerModule, container.id,
+      ...codingContainerAgentCommand(CODING_CONTAINER_SPACETIME_CLI,
+        ['publish', lease.resources.module, '--module-path', containerModule,
+          '-s', target.containerUri, '--delete-data', '-y'])],
+    { encoding: 'utf8', stdio: 'pipe', timeout: RESET_TIMEOUT_MS });
+  } catch (error) {
+    const detail = streams(error, 'stdout', 'stderr').trim() || streams(error, 'message');
+    throw new Error(`SpacetimeDB reset publish failed in leased container: ${detail}`, { cause: error });
+  }
+  return `reset spacetime module ${lease.resources.module} on ${lease.resources.serverUri}`;
+}
+
+export function setSpacetimeStock({ item, warehouse, quantity, spacetime,
+  exec = execFileSync }: {
+  item: string; warehouse: string; quantity: number; exec?: TextCommandExecutor;
+  spacetime?: { buildContainer?: { id: string; name: string } | null; mod: string; containerUri: string };
+}): { backend: string; item: string; warehouse: string; quantity: number } {
+  const container = spacetime?.buildContainer;
+  if (!container) {
+    throw new Error('SpacetimeDB build container is unavailable for direct SQL');
+  }
+  const query = (sql: string): string => exec('docker', [...agentExec(), container.id,
+    ...codingContainerAgentCommand(CODING_CONTAINER_SPACETIME_CLI,
+      ['sql', spacetime.mod, '-s', spacetime.containerUri, sql])],
+  { encoding: 'utf8', stdio: 'pipe', timeout: WRITE_TIMEOUT_MS });
+  const idOf = (table: string, name: string): string => {
+    const output = guarded(`select id from ${table} where name = ${sqlString(name)}`);
+    const match = output.match(/^\s*(\d+)\s*$/m);
+    if (!match?.[1]) throw stockInterfaceError(`no ${table} named "${name}"`);
+    return match[1];
+  };
+  // A missing or private table is the application not providing the stock
+  // data interface its contract names, not a harness fault.
+  const guarded = (sql: string): string => {
+    try { return query(sql); } catch (error) {
+      const detail = streams(error, 'stdout', 'stderr', 'message');
+      if (/no such table|marked private|not found/i.test(detail)) throw stockInterfaceError(detail.trim().slice(-300));
+      throw error;
+    }
+  };
+  const itemId = idOf('item', item);
+  const warehouseId = idOf('warehouse', warehouse);
+  guarded(`update stock set quantity = ${quantity} where item_id = ${itemId} and warehouse_id = ${warehouseId}`);
+  const verified = guarded(`select quantity from stock where item_id = ${itemId} and warehouse_id = ${warehouseId}`);
+  if (!new RegExp(`^\\s*${quantity}\\s*$`, 'm').test(verified)) {
+    throw new Error(`stock row for ${item} / ${warehouse} did not update to ${quantity}`);
+  }
+  return { backend: 'spacetime', item, warehouse, quantity };
+}
+
+export function prepareSpacetimeDatabase({ lease, name, wipe, exec = execFileSync,
+  cli, expectedServerUri, expectedModule }: {
+  lease: SpacetimeLease; name: string; wipe: boolean; exec?: TextCommandExecutor;
+  cli: string; expectedServerUri: string; expectedModule: string;
+}): string {
+  if (lease.resources.serverUri !== expectedServerUri
+    || lease.resources.module !== expectedModule) {
+    throw new Error('SpacetimeDB lease target does not match the harness run');
+  }
+  if (!wipe) return name;
+  try {
+    exec(cli, ['delete', lease.resources.module, '-s', lease.resources.serverUri, '-y'],
+      { encoding: 'utf8', stdio: 'pipe', timeout: RESET_TIMEOUT_MS });
+    console.error(`  deleted module ${lease.resources.module} — a build starts with none published`);
+  } catch (error) {
+    const detail = streams(error, 'stdout', 'stderr', 'message');
+    if (!/(?:404\s+Not Found|no such database|failed to find database)/i.test(detail)) {
+      throw new Error(`could not delete prior module ${lease.resources.module}: ${detail.trim().split('\n')[0]}`,
+        { cause: error });
+    }
+  }
+  return name;
+}
diff --git a/tools/stack-bench/src/stacks/backends/stub-adapter.ts b/tools/stack-bench/src/stacks/backends/stub-adapter.ts
new file mode 100644
index 00000000000..c733dce2919
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backends/stub-adapter.ts
@@ -0,0 +1,41 @@
+import { GRADING_CAPABILITY_IDS } from '../../actions/action-contract.js';
+import { createHttpGradingContext, httpNamedActionRequest } from '../stack-grading-operations.js';
+import { activateHosted } from '../hosted-lifecycle.js';
+import { emptySetupMetadata, noConnectionUrl,
+  standardBuildContainerPlan } from '../stack-agent-operations.js';
+import { standardOrchestratorConfig } from '../stack-orchestrator-operations.js';
+import { stopHostedHost } from '../stack-teardown-operations.js';
+import { stackLeaseOperations } from '../stack-lease-capabilities.js';
+import { STUB_ADAPTER_VERSION } from './stub-identity.js';
+import { defineStackAdapter } from '../stack-adapter-common.js';
+
+export const stubAdapter = defineStackAdapter('stub', {
+  activate: activateHosted,
+}, {
+  lease: stackLeaseOperations('stub'),
+  reset: { requiresReseed: false },
+  database: { prepare: ({ name }: { name: string }) => name },
+  // The stub has no backend to restart and no database to write to.
+  grading: { context: createHttpGradingContext, transport: 'http',
+    capabilities: GRADING_CAPABILITY_IDS.filter(capability =>
+      capability !== 'backend-lifecycle' && capability !== 'database-write') },
+  namedAction: { request: httpNamedActionRequest },
+  teardown: { host: stopHostedHost },
+  runPolicy: { resetEnabled: false, retainHostSupported: false,
+    supervisorEnvironment: (_input: { spacetimePort: number | null }) => ({}) },
+  admission: {
+    requirements: { docker: false, services: false, ports: false,
+      credentials: false, providerAccess: false },
+  },
+  agent: {
+    connectionUrl: (_input: { dbPort: number; database: string; hostUrl(url: string): string }) => noConnectionUrl(),
+    minimalGuidanceSupported: true,
+    defaultSkills: [],
+    linuxCliRequired: false,
+    setupMetadata: emptySetupMetadata,
+    serverDirectory: 'server',
+    findDatabaseUrls: (_input: { text: string }) => [],
+  },
+  buildContainer: { plan: () => standardBuildContainerPlan() },
+  orchestrator: { config: standardOrchestratorConfig },
+}, { version: STUB_ADAPTER_VERSION });
diff --git a/tools/stack-bench/src/stacks/backends/stub-identity.ts b/tools/stack-bench/src/stacks/backends/stub-identity.ts
new file mode 100644
index 00000000000..ef3fd9f9069
--- /dev/null
+++ b/tools/stack-bench/src/stacks/backends/stub-identity.ts
@@ -0,0 +1 @@
+export const STUB_ADAPTER_VERSION = '1.1.0';
diff --git a/tools/stack-bench/src/stacks/database-containers.ts b/tools/stack-bench/src/stacks/database-containers.ts
new file mode 100644
index 00000000000..a1f1ba27435
--- /dev/null
+++ b/tools/stack-bench/src/stacks/database-containers.ts
@@ -0,0 +1,35 @@
+type ContainerEnvironment = Readonly<Record<string, string | undefined>>;
+
+const DATABASE_CONTAINERS = Object.freeze({
+  mongodb: Object.freeze({ appliance: 'stack-bench-mongodb', development: 'stack-bench-dev-mongodb',
+    environmentKey: 'MONGO_CONTAINER', internalPort: 27017 }),
+  postgres: Object.freeze({ appliance: 'stack-bench-postgres', development: 'stack-bench-dev-postgres',
+    environmentKey: 'POSTGRES_CONTAINER', internalPort: 5432 }),
+});
+
+export type DatabaseContainerBackend = keyof typeof DATABASE_CONTAINERS;
+
+export function isDatabaseContainerBackend(backend: string): backend is DatabaseContainerBackend {
+  return Object.hasOwn(DATABASE_CONTAINERS, backend);
+}
+
+export function databaseContainer(
+  backend: string,
+  env: ContainerEnvironment = process.env,
+): { name: string; internalPort: number } {
+  if (!isDatabaseContainerBackend(backend)) {
+    throw new Error(`unknown database container backend ${backend}`);
+  }
+  const definition = DATABASE_CONTAINERS[backend];
+  const explicit = String(env[definition.environmentKey] ?? '').trim();
+  const name = explicit || (env.STACK_BENCH_APPLIANCE === '1'
+    ? definition.appliance : definition.development);
+  return { name, internalPort: definition.internalPort };
+}
+
+export function databaseContainerName(
+  backend: string,
+  env: ContainerEnvironment = process.env,
+): string {
+  return databaseContainer(backend, env).name;
+}
diff --git a/tools/stack-bench/src/stacks/hosted-database-identity.ts b/tools/stack-bench/src/stacks/hosted-database-identity.ts
new file mode 100644
index 00000000000..6c9ea1d4259
--- /dev/null
+++ b/tools/stack-bench/src/stacks/hosted-database-identity.ts
@@ -0,0 +1,5 @@
+export const POSTGRES_APPLICATION_IDENTITY = Object.freeze({
+  user: 'appuser',
+  password: 'local-app-password',
+  defaultDatabase: 'app',
+});
diff --git a/tools/stack-bench/src/stacks/hosted-lifecycle.ts b/tools/stack-bench/src/stacks/hosted-lifecycle.ts
new file mode 100644
index 00000000000..8b6eeedf5a7
--- /dev/null
+++ b/tools/stack-bench/src/stacks/hosted-lifecycle.ts
@@ -0,0 +1,262 @@
+import { execFileSync } from 'node:child_process';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+import { updateBackendLease } from '../runtime/backend-lease.js';
+import { redactCredentials } from '../evidence/diagnostic-sanitizer.js';
+import { CODING_CONTAINER_AGENT, CODING_CONTAINER_APP_ROOT, CODING_CONTAINER_CONTROL_DIR,
+  codingContainerAgentExecOptions, codingContainerWorkspaceHandoffCommands }
+  from '../runtime/coding-container-policy.js';
+import type { BackendLease, BackendLeaseContainer } from '../runtime/backend-lease.js';
+import type { TextCommandExecutor } from '../runtime/command-executor.js';
+import { answers, waitFor } from './lifecycle-readiness.js';
+import type { RuntimeControlMode } from './stack-adapter-contract.js';
+
+interface HostedApplicationControlInput {
+  adapterId: string;
+  lease: { resources: { buildContainer?: BackendLeaseContainer | null } };
+  app: string;
+  port: number;
+  probe: string;
+  mode: RuntimeControlMode;
+  environment?: Record<string, string>;
+  signal?: AbortSignal | null;
+  handoffWorkspace?: boolean;
+  exec?: TextCommandExecutor;
+}
+
+const isOwnedContainer = (value: unknown): value is BackendLeaseContainer =>
+  value !== null && typeof value === 'object' && 'owned' in value && Boolean(value.owned);
+
+const DOCKER_TIMEOUT_MS = 120_000;
+// A start from clean source may install packages over the network before it
+// listens, so the budget is generous. A launch that has exited without leaving
+// a listener fails as soon as that is seen, not at the deadline.
+export const HOSTED_START_TIMEOUT_MS = 900_000;
+const START_LOG_LINES = 200;
+const CONTROL_DIR = CODING_CONTAINER_CONTROL_DIR;
+const { uid: APP_UID, gid: APP_GID } = CODING_CONTAINER_AGENT;
+
+function inspectBuildContainer(lease: { resources: { buildContainer?: unknown } },
+  exec: TextCommandExecutor = execFileSync): BackendLeaseContainer {
+  const container = lease.resources.buildContainer;
+  if (!isOwnedContainer(container)) throw new Error('lease has no owned build container');
+  const actual = exec('docker', ['inspect', '--format', '{{.Id}}', container.name],
+    { encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS }).trim();
+  if (actual !== container.id) throw new Error(`${container.name} changed after lease creation; refusing control`);
+  return container;
+}
+
+export function hostedStopScript(port: number | string): string {
+  const numericPort = Number(port);
+  if (!Number.isInteger(numericPort) || numericPort <= 0 || numericPort > 65535) {
+    throw new Error(`invalid hosted application port ${port}`);
+  }
+  const listeners = `lsof -ti tcp:${numericPort} -sTCP:LISTEN`;
+  const protectedGroups = 'self_pgid=$(ps -o pgid= -p $$ | tr -d " "); '
+    + 'init_child=$(ps -o pid= --ppid 1 | awk "NR==1 {print \\$1}"); '
+    + 'init_pgid=""; [ -z "$init_child" ] || init_pgid=$(ps -o pgid= -p "$init_child" | tr -d " ")';
+  const collectTargets = `groups=""; direct=""; for pid in $(${listeners}); do `
+    + 'case "$pid" in ""|*[!0-9]*|1) echo "unsafe listener pid $pid" >&2; exit 4;; esac; '
+    + 'pgid=$(ps -o pgid= -p "$pid" | tr -d " "); '
+    + 'case "$pgid" in "") continue;; '
+    + '*[!0-9]*|0) echo "unsafe process group for listener $pid" >&2; exit 4;; '
+    + '*) if [ "$pgid" = 1 ] || [ "$pgid" = "$self_pgid" ] || [ "$pgid" = "$init_pgid" ]; '
+    + 'then direct="$direct $pid"; '
+    + 'else case " $groups " in *" $pgid "*) ;; *) groups="$groups $pgid";; esac; fi;; esac; done';
+  const signalTargets = (signal: string): string => `for pgid in $groups; do /bin/kill -${signal} -- "-$pgid" 2>/dev/null || true; done; `
+    + `for pid in $direct; do /bin/kill -${signal} "$pid" 2>/dev/null || true; done`;
+  return `${protectedGroups}; quiet=0; attempt=0; while [ "$attempt" -lt 100 ]; do ${collectTargets}; `
+    + 'if [ -z "$groups$direct" ]; then quiet=$((quiet + 1)); [ "$quiet" -ge 10 ] && exit 0; '
+    + `else quiet=0; ${signalTargets('TERM')}; fi; `
+    + 'attempt=$((attempt + 1)); sleep 0.1; done; '
+    + `${collectTargets}; ${signalTargets('KILL')}; `
+    + `quiet=0; attempt=0; while [ "$attempt" -lt 50 ]; do if [ -z "$(${listeners})" ]; `
+    + 'then quiet=$((quiet + 1)); [ "$quiet" -ge 10 ] && exit 0; else quiet=0; fi; '
+    + 'attempt=$((attempt + 1)); sleep 0.1; done; '
+    + `echo "hosted application port ${numericPort} still has a listener" >&2; exit 4`;
+}
+
+export function hostedRecordedProcessStopScript(record: string): string {
+  if (!record.startsWith(`${CONTROL_DIR}/restart-`) || !record.endsWith('.pid')
+    || /[\s'"`;\\]/.test(record)) {
+    throw new Error('invalid hosted application process record');
+  }
+  return `record=${record}; [ -f "$record" ] || exit 0; `
+    + 'set -- $(cat "$record"); [ "$#" -eq 2 ] || { echo "invalid application process record" >&2; exit 4; }; '
+    + 'pid="$1"; started="$2"; case "$pid:$started" in *[!0-9:]*) '
+    + 'echo "unsafe application process identity" >&2; exit 4;; esac; '
+    + '[ "$pid" -gt 1 ] && [ "$started" -gt 0 ] '
+    + '|| { echo "unsafe application process identity" >&2; exit 4; }; '
+    + 'self_pgid=$(ps -o pgid= -p $$ | tr -d " "); '
+    + '[ "$pid" != "$self_pgid" ] || { echo "application process group matches controller" >&2; exit 4; }; '
+    + 'if [ -r "/proc/$pid/stat" ]; then stat=$(cat "/proc/$pid/stat"); rest=${stat##*) }; '
+    + 'set -- $rest; current_pgid="$3"; current_started="${20}"; '
+    + 'if [ "$current_pgid" != "$pid" ] || [ "$current_started" != "$started" ]; then '
+    + 'rm -f "$record"; exit 0; fi; fi; '
+    + 'if /bin/kill -0 -- "-$pid" 2>/dev/null; then '
+    + '/bin/kill -TERM -- "-$pid" 2>/dev/null || true; attempt=0; '
+    + 'while /bin/kill -0 -- "-$pid" 2>/dev/null && [ "$attempt" -lt 100 ]; do '
+    + 'attempt=$((attempt + 1)); sleep 0.1; done; '
+    + 'if /bin/kill -0 -- "-$pid" 2>/dev/null; then /bin/kill -KILL -- "-$pid" 2>/dev/null || true; fi; '
+    + 'attempt=0; while /bin/kill -0 -- "-$pid" 2>/dev/null && [ "$attempt" -lt 50 ]; do '
+    + 'attempt=$((attempt + 1)); sleep 0.1; done; '
+    + '/bin/kill -0 -- "-$pid" 2>/dev/null '
+    + '&& { echo "application process group is still running" >&2; exit 4; }; fi; '
+    + 'rm -f "$record"';
+}
+
+export function hostedLaunchCommand(app: string): { directory: string; command: string } {
+  if (existsSync(join(app, 'start.sh'))) {
+    return { directory: '.', command: '/bin/bash ./start.sh' };
+  }
+  const packagePath = join(app, 'package.json');
+  let packageJson: unknown = {};
+  if (existsSync(packagePath)) {
+    try {
+      packageJson = JSON.parse(readFileSync(packagePath, 'utf8'));
+    } catch (cause) {
+      throw Object.assign(new Error('package.json is not valid JSON', { cause }),
+        { code: 'generated_app_not_restartable' });
+    }
+  }
+  if (packageJson !== null && typeof packageJson === 'object'
+    && 'scripts' in packageJson && packageJson.scripts !== null
+    && typeof packageJson.scripts === 'object' && 'start' in packageJson.scripts
+    && typeof packageJson.scripts.start === 'string' && packageJson.scripts.start.trim()) {
+    return { directory: '.', command: '/usr/local/bin/npm run start' };
+  }
+  throw Object.assign(new Error('app has no start.sh or npm start script'),
+    { code: 'generated_app_not_restartable' });
+}
+
+export function captureHostedDiagnostics({ lease, output, exec = execFileSync }: {
+  lease: BackendLease; output: string; exec?: TextCommandExecutor;
+}): { captured: boolean; reason?: string; path?: string } {
+  const container = inspectBuildContainer(lease, exec);
+  const contents = exec('docker', ['exec', container.id, 'sh', '-c',
+    `for f in ${CONTROL_DIR}/reference-application.log `
+      + `${CONTROL_DIR}/restart-*.log; do `
+      + '[ -f "$f" ] || continue; printf "===== %s =====\\n" "$f"; tail -n 400 "$f"; done'],
+  { encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS });
+  if (!contents.trim()) return { captured: false, reason: 'no restart log was present' };
+  writeFileSync(output, contents);
+  return { captured: true, path: output };
+}
+
+export async function controlHostedAppServer({ adapterId: stack, lease, app, port, probe, mode,
+  environment = {}, signal, handoffWorkspace = false,
+  exec = execFileSync }: HostedApplicationControlInput): Promise<void> {
+  if (mode !== 'start' && mode !== 'stop' && mode !== 'restart') {
+    throw new Error(`unsupported application control mode ${String(mode)}`);
+  }
+  const abort = signal ?? null;
+  if (!/^[a-z][a-z0-9-]*$/.test(stack)) {
+    throw new Error('application control requires a valid stack id');
+  }
+  if (!Number.isInteger(port) || port <= 0 || port > 65535) {
+    throw new Error('application control requires a port and probe');
+  }
+  const container = inspectBuildContainer(lease, exec);
+  const url = `http://127.0.0.1:${port}${probe}`;
+  const processRecord = `${CONTROL_DIR}/restart-${stack}-${Number(port)}.pid`;
+  if (mode !== 'start') {
+    exec('docker', ['exec', container.id, 'sh', '-c',
+      hostedRecordedProcessStopScript(processRecord)],
+    { encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS });
+    // The reduced root capability set cannot inspect the agent user's sockets.
+    // Stop the service as its owner so listener discovery and signals are reliable.
+    exec('docker', ['exec', ...codingContainerAgentExecOptions(), container.id,
+      'sh', '-c', hostedStopScript(Number(port))],
+      { encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS });
+    await waitFor(async () => !(await answers(url, { freshConnection: true })),
+      30_000, `${stack} application to stop`, abort);
+  }
+  if (handoffWorkspace) {
+    for (const command of codingContainerWorkspaceHandoffCommands(process.getgid?.() ?? 0)) {
+      exec('docker', ['exec', container.id, ...command],
+        { encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS });
+    }
+  }
+  if (mode === 'stop') return;
+  if (typeof app !== 'string') throw new Error('application control requires an app directory');
+  exec('docker', ['exec', ...codingContainerAgentExecOptions(), container.id, 'sh', '-c',
+    `pids=$(lsof -ti tcp:${Number(port)} -sTCP:LISTEN | sort -u); `
+      + '[ -z "$pids" ] || { echo "hosted application port is still owned by $pids" >&2; exit 4; }'],
+  { encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS });
+  const launch = hostedLaunchCommand(app);
+  const environmentArgs = Object.entries(environment).flatMap(([key, value]) => {
+    if (!/^[A-Z][A-Z0-9_]*$/.test(key) || typeof value !== 'string' || /[\r\n\0]/.test(value)) {
+      throw new Error(`invalid hosted runtime environment entry ${key}`);
+    }
+    return ['-e', `${key}=${value}`];
+  });
+  const log = `${CONTROL_DIR}/restart-${stack}-${Number(port)}.log`;
+  exec('docker', ['exec', '-d', '-w', launch.directory === '.' ? CODING_CONTAINER_APP_ROOT
+    : `${CODING_CONTAINER_APP_ROOT}/${launch.directory}`,
+    '-e', `HOME=${CODING_CONTAINER_AGENT.home}`, '-e', `USER=${CODING_CONTAINER_AGENT.name}`,
+    '-e', `PORT=${Number(port)}`, ...environmentArgs, container.id, 'sh', '-c',
+    `set -eu; umask 022; : > ${log}; rm -f ${processRecord}; `
+      + `exec /usr/bin/setsid sh -c 'stat=$(cat /proc/$$/stat); rest=${'${stat##*) }'}; `
+      + `set -- $rest; (umask 077; printf "%s %s\\n" "$$" "${'${20}'}" > ${processRecord}); `
+      + `exec /usr/bin/setpriv --reuid=${APP_UID} --regid=${APP_GID} --init-groups `
+      + `${launch.command}' > ${log} 2>&1`],
+  { encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS });
+  exec('docker', ['exec', container.id, 'sh', '-c',
+    `attempt=0; while [ ! -s ${processRecord} ] && [ "$attempt" -lt 100 ]; do `
+      + 'attempt=$((attempt + 1)); sleep 0.05; done; '
+      + `[ -s ${processRecord} ] || { echo "application process record was not created" >&2; exit 4; }`],
+  { encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS });
+  const commandSucceeds = (args: string[]): boolean => {
+    try {
+      exec('docker', args, { encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS });
+      return true;
+    } catch { return false; }
+  };
+  const launchedProcessAlive = () => commandSucceeds(['exec', container.id, 'sh', '-c',
+    `read pid rest < ${processRecord} && [ -d "/proc/$pid" ]`]);
+  const portHasListener = () => commandSucceeds(['exec', ...codingContainerAgentExecOptions(),
+    container.id, 'sh', '-c', `[ -n "$(lsof -ti tcp:${Number(port)} -sTCP:LISTEN)" ]`]);
+  // The launch log is the only account of why an application did not start.
+  // The error carries it whole; the message keeps the last lines.
+  const startFailure = (what: string, cause: unknown): Error => {
+    let startLog = '';
+    try {
+      startLog = redactCredentials(exec('docker',
+        ['exec', container.id, 'tail', '-n', String(START_LOG_LINES), log],
+        { encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS })).trim();
+    } catch { /* the startup error remains useful without a log */ }
+    const detail = startLog.split(/\r?\n/).slice(-3).join(' | ').slice(0, 500);
+    return Object.assign(new Error(`${stack} application ${what}${detail ? `: ${detail}` : ''}`, { cause }),
+      { code: 'generated_app_not_restartable', startLog });
+  };
+  let exited = false;
+  try {
+    await waitFor(async () => {
+      if (await answers(url, { requireSuccess: true })) return true;
+      if (!launchedProcessAlive() && !portHasListener()) {
+        exited = true;
+        throw new Error(`${stack} application process exited`);
+      }
+      return false;
+    }, HOSTED_START_TIMEOUT_MS, `${stack} application to start`, abort);
+  } catch (cause) {
+    throw startFailure(exited ? `exited before it listened on port ${Number(port)}` : 'did not start', cause);
+  }
+  exec('docker', ['exec', ...codingContainerAgentExecOptions(), container.id, 'sh', '-c',
+    `pids=$(lsof -ti tcp:${Number(port)} -sTCP:LISTEN | sort -u); `
+      + 'set -- $pids; [ "$#" -eq 1 ] || { echo "expected one application listener, found: $pids" >&2; exit 4; }; '
+      + 'pgid=$(ps -o pgid= -p "$1" | tr -d " "); '
+      + 'case "$pgid" in ""|*[!0-9]*|1) echo "unsafe application process group" >&2; exit 4;; esac'],
+  { encoding: 'utf8', stdio: 'pipe', timeout: DOCKER_TIMEOUT_MS });
+}
+
+export function activateHosted({ leasePath, leaseToken, lease }: {
+  leasePath: string; leaseToken: string; lease: BackendLease;
+}): void {
+  updateBackendLease(leasePath,
+    { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+      next.state = 'active';
+      return next;
+    });
+}
diff --git a/tools/stack-bench/src/stacks/lifecycle-readiness.ts b/tools/stack-bench/src/stacks/lifecycle-readiness.ts
new file mode 100644
index 00000000000..7c562c4e8ee
--- /dev/null
+++ b/tools/stack-bench/src/stacks/lifecycle-readiness.ts
@@ -0,0 +1,37 @@
+import { fetchStatus } from '../runtime/readiness.js';
+
+const delay = (ms: number, signal?: AbortSignal | null): Promise<void> =>
+  new Promise<void>((resolve, reject) => {
+    if (signal?.aborted) { reject(signal.reason ?? new Error('backend control cancelled')); return; }
+    const timer = setTimeout(done, ms);
+    function done(): void {
+      signal?.removeEventListener('abort', cancelled);
+      resolve();
+    }
+    function cancelled(): void {
+      clearTimeout(timer);
+      signal?.removeEventListener('abort', cancelled);
+      reject(signal?.reason ?? new Error('backend control cancelled'));
+    }
+    signal?.addEventListener('abort', cancelled, { once: true });
+  });
+
+export async function answers(url: string,
+  { freshConnection = false, requireSuccess = false }: {
+    freshConnection?: boolean; requireSuccess?: boolean;
+  } = {}): Promise<boolean> {
+  const status = await fetchStatus(url, { timeoutMs: 5000,
+    ...(freshConnection ? { init: { headers: { connection: 'close' } } } : {}) });
+  return status !== null && (!requireSuccess || (status >= 200 && status < 300));
+}
+
+export async function waitFor(check: () => Promise<boolean>, timeoutMs: number,
+  description: string, signal?: AbortSignal | null): Promise<void> {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    if (signal?.aborted) throw signal.reason ?? new Error('backend control cancelled');
+    if (await check()) return;
+    await delay(500, signal);
+  }
+  throw new Error(`timed out waiting for ${description}`);
+}
diff --git a/tools/stack-bench/src/stacks/spacetime-lifecycle.ts b/tools/stack-bench/src/stacks/spacetime-lifecycle.ts
new file mode 100644
index 00000000000..be88e67ee03
--- /dev/null
+++ b/tools/stack-bench/src/stacks/spacetime-lifecycle.ts
@@ -0,0 +1,150 @@
+import { spawn } from 'node:child_process';
+import type { ChildProcess } from 'node:child_process';
+import { existsSync, mkdirSync } from 'node:fs';
+
+import { updateBackendLease } from '../runtime/backend-lease.js';
+import { answers as answersSync, killDetachedTree, killTree, pidsOnPort, processIdentity,
+  processIdentityMatches, sleepSync } from '../runtime/platform.js';
+import type { BackendLease } from '../runtime/backend-lease.js';
+import { answers, waitFor } from './lifecycle-readiness.js';
+
+const leaseDataDir = (dataDir: string | null | undefined): string => {
+  if (!dataDir) throw new Error('SpacetimeDB lease records no data directory');
+  return dataDir;
+};
+
+const leaseUrl = (serverUri: string | null): URL => {
+  if (!serverUri) throw new Error('SpacetimeDB lease records no server URI');
+  return new URL(serverUri);
+};
+
+export async function controlSpacetime({ lease, signal = null }: {
+  lease: BackendLease; signal?: AbortSignal | null;
+}): Promise<void> {
+  const leasePath = process.env.STACK_BENCH_LEASE ?? '';
+  const url = leaseUrl(lease.resources.serverUri);
+  const port = Number(url.port);
+  const cli = process.env.SPACETIME_BIN;
+  if (!cli || !existsSync(cli)) throw new Error(`SPACETIME_BIN is unavailable: ${cli ?? '<unset>'}`);
+  const actual = pidsOnPort(port);
+  const unexpected = actual.filter(pid => !lease.resources.listenerProcesses.some(identity =>
+    identity.pid === Number(pid) && processIdentityMatches(identity)));
+  if (unexpected.length) throw new Error(`listener ${unexpected.join(',')} is not owned by lease ${lease.runId}`);
+  updateBackendLease(leasePath,
+    { token: lease.ownershipToken, backend: 'spacetime', runId: lease.runId }, next => {
+      next.state = 'restarting'; return next;
+    });
+  for (const pid of actual) killTree(pid);
+  await waitFor(async () => !(await answers(`${lease.resources.serverUri}/v1/ping`)),
+    30_000, 'SpacetimeDB to stop', signal);
+  if (process.env.STACK_BENCH_TEST_FAIL_AFTER_RESTART_STOP === '1') {
+    throw Object.assign(new Error('injected failure after restart stop'),
+      { code: 'injected_restart_stop_failure' });
+  }
+  updateBackendLease(leasePath,
+    { token: lease.ownershipToken, backend: 'spacetime', runId: lease.runId }, next => {
+      next.state = 'starting';
+      next.resources.launchedProcess = null;
+      next.resources.listenerProcesses = [];
+      return next;
+    });
+  let child: ChildProcess | null = null;
+  try {
+    const started = spawn(cli, ['start', '--listen-addr', `127.0.0.1:${port}`,
+      '--data-dir', leaseDataDir(lease.resources.dataDir)], { detached: true, stdio: 'ignore', windowsHide: true });
+    child = started;
+    const spawnFailed = new Promise<never>((_, reject) => started.once('error', reject));
+    started.unref();
+    if (!started.pid) throw new Error('SpacetimeDB restart did not return a process id');
+    updateBackendLease(leasePath,
+      { token: lease.ownershipToken, backend: 'spacetime', runId: lease.runId }, next => {
+        const identity = processIdentity(started.pid!);
+        if (!identity) throw new Error('could not record SpacetimeDB restart process identity');
+        next.resources.launchedProcess = identity;
+        return next;
+      });
+    await Promise.race([
+      waitFor(() => answers(`${lease.resources.serverUri}/v1/ping`),
+        240_000, 'SpacetimeDB to start', signal),
+      spawnFailed,
+    ]);
+    const listenerPids = pidsOnPort(port);
+    if (listenerPids.length !== 1) throw new Error(`expected one SpacetimeDB listener, found ${listenerPids.length}`);
+    const listenerIdentity = processIdentity(listenerPids[0]!);
+    if (!listenerIdentity) throw new Error('could not record SpacetimeDB listener identity');
+    updateBackendLease(leasePath,
+      { token: lease.ownershipToken, backend: 'spacetime', runId: lease.runId }, next => {
+        next.state = 'active';
+        next.resources.listenerProcesses = [listenerIdentity];
+        return next;
+      });
+  } catch (error) {
+    if (child?.pid) killDetachedTree(child.pid);
+    throw error;
+  }
+}
+
+export function activateSpacetime({ leasePath, leaseToken, lease, cli }: {
+  leasePath: string; leaseToken: string; lease: BackendLease; cli?: string;
+}): void {
+  const url = leaseUrl(lease.resources.serverUri);
+  const port = Number(url.port);
+  const ping = `${lease.resources.serverUri}/v1/ping`;
+  if (answersSync(ping, 5)) {
+    throw new Error(`SpacetimeDB is already running on benchmark port :${port}; `
+      + 'refusing to reuse or restart a host this run did not start');
+  }
+  if (!cli || !existsSync(cli)) throw new Error(`SpacetimeDB CLI is unavailable: ${cli ?? '<unset>'}`);
+  console.log(`  spacetime   ... not running, starting a benchmark-owned host on :${port}`);
+  mkdirSync(leaseDataDir(lease.resources.dataDir), { recursive: true });
+  updateBackendLease(leasePath,
+    { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+      next.state = 'starting';
+      return next;
+    });
+  let child: ChildProcess | null = null;
+  try {
+    const started = spawn(cli,
+      ['start', '--listen-addr', `127.0.0.1:${port}`, '--data-dir', leaseDataDir(lease.resources.dataDir)],
+      { detached: true, stdio: 'ignore', windowsHide: true });
+    child = started;
+    started.once('error', () => { /* surfaced by the missing-pid guard below */ });
+    started.unref();
+    if (!started.pid) throw new Error('SpacetimeDB start did not return a process id');
+    updateBackendLease(leasePath,
+      { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+        const identity = processIdentity(started.pid!);
+        if (!identity) throw new Error('could not record SpacetimeDB start process identity');
+        next.resources.launchedProcess = identity;
+        return next;
+      });
+    for (let i = 0; i < 60; i++) {
+      sleepSync(2000);
+      if (answersSync(ping, 5)) {
+        const listenerPids = pidsOnPort(port);
+        if (listenerPids.length !== 1) {
+          throw new Error(`Expected one SpacetimeDB listener on :${port}, found ${listenerPids.length}`);
+        }
+        const launchedIdentity = processIdentity(started.pid!);
+        const listenerIdentity = processIdentity(listenerPids[0]!);
+        if (!launchedIdentity || !listenerIdentity) {
+          throw new Error('could not record SpacetimeDB process identity');
+        }
+        updateBackendLease(leasePath,
+          { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+            next.resources.launchedProcess = launchedIdentity;
+            next.resources.listenerProcesses = [listenerIdentity];
+            next.state = 'active';
+            return next;
+          });
+        console.log(`  spacetime   ... up (lease ${lease.runId}, listener PID ${listenerPids[0]})`);
+        return;
+      }
+    }
+    throw new Error(`SpacetimeDB did not come up on :${port}`);
+  } catch (error) {
+    if (child?.pid) killDetachedTree(child.pid);
+    throw error;
+  }
+}
+
diff --git a/tools/stack-bench/src/stacks/stack-adapter-common.ts b/tools/stack-bench/src/stacks/stack-adapter-common.ts
new file mode 100644
index 00000000000..739c2afec1e
--- /dev/null
+++ b/tools/stack-bench/src/stacks/stack-adapter-common.ts
@@ -0,0 +1,94 @@
+import type { StackLifecycle, StackLifecycleInput,
+  StackPortBases } from './stack-adapter-contract.js';
+import { controlHostedAppServer } from './hosted-lifecycle.js';
+
+type AdapterId = keyof typeof PORT_BASES;
+
+const PORT_BASES = Object.freeze({
+  spacetime: Object.freeze({ vite: 6173 }),
+  postgres: Object.freeze({ vite: 6273, express: 6001, db: 6532 }),
+  mongodb: Object.freeze({ vite: 6373, express: 6101, db: 6537 }),
+  stub: Object.freeze({ vite: 7000 }),
+});
+
+function portsFor(adapterId: AdapterId) {
+  const allocations = PORT_BASES[adapterId];
+  return {
+    allocations: (): StackPortBases => ({ ...allocations }),
+    forRun: ({ trackOffset, runIndex }: { trackOffset: number; runIndex: number }) => {
+      if (!Number.isInteger(trackOffset) || trackOffset < 0
+        || !Number.isInteger(runIndex) || runIndex < 0) {
+        throw new Error(`${adapterId} ports require non-negative integer trackOffset and runIndex`);
+      }
+      const offset = trackOffset + runIndex;
+      return {
+        vite: allocations.vite + offset,
+        express: 'express' in allocations ? allocations.express + offset : null,
+        dbPort: 'db' in allocations ? allocations.db : null,
+      };
+    },
+  };
+}
+
+export function defineStackAdapter<const I extends AdapterId, const T extends object>(id: I, lifecycle: StackLifecycle,
+  operations: T, { version }: { version: string }) {
+  return {
+    id,
+    version,
+    lifecycle,
+    ports: portsFor(id),
+    ...operations,
+  };
+}
+
+interface DatabaseEnvironmentAdapter {
+  readonly id: string;
+  readonly ports: { allocations(): StackPortBases };
+  readonly agent: {
+    connectionUrl(input: { dbPort: number; database: string; hostUrl(url: string): string }): string | null;
+  };
+}
+
+export function leasedDatabaseEnvironment(adapter: DatabaseEnvironmentAdapter, { database, networkMode }: {
+  database: string | null; networkMode: string | null | undefined;
+}): Record<string, string> {
+  const dbPort = adapter.ports.allocations().db;
+  if (!dbPort || !database) return {};
+  const databaseUrl = adapter.agent.connectionUrl({
+    dbPort,
+    database,
+    hostUrl: url => url.replace(/127\.0\.0\.1|localhost/g,
+      networkMode === 'host' ? '127.0.0.1' : 'host.docker.internal'),
+  });
+  if (!databaseUrl) {
+    throw new Error(`stack adapter ${adapter.id} did not provide its leased database URL`);
+  }
+  return { DATABASE_URL: databaseUrl };
+}
+
+export function controlHostedFor(adapterId: 'postgres' | 'mongodb',
+  connectionUrl: DatabaseEnvironmentAdapter['agent']['connectionUrl'],
+  request: StackLifecycleInput): Promise<void> {
+  const { resources } = request.lease;
+  const adapter = {
+    id: adapterId,
+    ports: portsFor(adapterId),
+    agent: { connectionUrl },
+  };
+  return controlHostedAppServer({
+    adapterId: request.adapterId,
+    app: request.app,
+    port: request.port,
+    probe: request.probe,
+    mode: request.mode,
+    signal: request.signal,
+    exec: request.exec,
+    lease: request.lease,
+    environment: {
+      ...leasedDatabaseEnvironment(adapter, { database: resources.database,
+        networkMode: resources.buildContainer?.networkMode }),
+      APP_WARM_START: '1',
+      VITE_PORT: String(request.port),
+    },
+  });
+}
diff --git a/tools/stack-bench/src/stacks/stack-adapter-contract.ts b/tools/stack-bench/src/stacks/stack-adapter-contract.ts
new file mode 100644
index 00000000000..74424829068
--- /dev/null
+++ b/tools/stack-bench/src/stacks/stack-adapter-contract.ts
@@ -0,0 +1,78 @@
+import type { BackendLease } from '../runtime/backend-lease.js';
+import type { TextCommandExecutor } from '../runtime/command-executor.js';
+import { isExactSemanticVersion } from '../semantic-version.js';
+import type { GradingCapabilityId } from '../actions/action-contract.js';
+
+// What the grader can measure on a stack: the runtime capabilities the stack
+// provides and the transport that carries named application actions.
+export interface StackGradingSupport {
+  readonly transport: 'http' | 'reducer';
+  readonly capabilities: readonly GradingCapabilityId[];
+}
+
+export interface StackPortBases {
+  readonly vite: number;
+  readonly express?: number;
+  readonly db?: number;
+}
+
+export interface StackRunPorts {
+  readonly vite: number;
+  readonly express: number | null;
+  readonly dbPort: number | null;
+}
+
+export type RuntimeControlMode = 'start' | 'stop' | 'restart';
+
+export interface StackLifecycleInput {
+  adapterId: string;
+  lease: BackendLease;
+  app: string;
+  port: number;
+  probe: string;
+  mode: RuntimeControlMode;
+  signal?: AbortSignal | null;
+  exec?: TextCommandExecutor;
+}
+
+interface StackActivationInput {
+  leasePath: string;
+  leaseToken: string;
+  lease: BackendLease;
+  cli?: string;
+}
+
+export interface StackLifecycle {
+  activate(input: StackActivationInput): void;
+  control?(input: StackLifecycleInput): Promise<void>;
+  applicationEnvironment?(lease: BackendLease): Record<string, string>;
+}
+
+export interface StackAdapterIdentity {
+  readonly id: string;
+  readonly version: string;
+  readonly lifecycle: StackLifecycle;
+}
+
+export function createStackAdapterRegistry<const T extends readonly StackAdapterIdentity[]>(adapters: T) {
+  const entries = new Map<string, T[number]>();
+  for (const adapter of adapters) {
+    if (!/^[a-z][a-z0-9]*(?:[.:-][a-z0-9]+)*$/.test(adapter.id)) {
+      throw new Error(`stack adapter id ${JSON.stringify(adapter.id)} is invalid`);
+    }
+    if (!isExactSemanticVersion(adapter.version)) {
+      throw new Error(`stack adapter ${adapter.id}.version is invalid`);
+    }
+    if (entries.has(adapter.id)) throw new Error(`duplicate stack adapter ${adapter.id}`);
+    entries.set(adapter.id, adapter);
+  }
+  const ids = Object.freeze([...entries.keys()].sort());
+  function get<I extends T[number]['id']>(id: I): Extract<T[number], { id: I }>;
+  function get(id: string): T[number];
+  function get(id: string): T[number] {
+    const adapter = entries.get(id);
+    if (!adapter) throw new Error(`unknown stack adapter ${JSON.stringify(id)}`);
+    return adapter;
+  }
+  return Object.freeze({ ids, get });
+}
diff --git a/tools/stack-bench/src/stacks/stack-adapters.ts b/tools/stack-bench/src/stacks/stack-adapters.ts
new file mode 100644
index 00000000000..8d94417c529
--- /dev/null
+++ b/tools/stack-bench/src/stacks/stack-adapters.ts
@@ -0,0 +1,20 @@
+import { createStackAdapterRegistry } from './stack-adapter-contract.js';
+import type { StackPortBases } from './stack-adapter-contract.js';
+import { mongodbAdapter } from './backends/mongodb-adapter.js';
+import { postgresAdapter } from './backends/postgres-adapter.js';
+import { spacetimeAdapter } from './backends/spacetime-adapter.js';
+import { stubAdapter } from './backends/stub-adapter.js';
+
+export { leasedDatabaseEnvironment } from './stack-adapter-common.js';
+
+export const STACK_ADAPTER_REGISTRY = createStackAdapterRegistry([
+  spacetimeAdapter,
+  postgresAdapter,
+  mongodbAdapter,
+  stubAdapter,
+]);
+
+export function stackPortAllocations(): Record<string, StackPortBases> {
+  return Object.fromEntries(STACK_ADAPTER_REGISTRY.ids.map(id => [id,
+    STACK_ADAPTER_REGISTRY.get(id).ports.allocations()]));
+}
diff --git a/tools/stack-bench/src/stacks/stack-agent-operations.ts b/tools/stack-bench/src/stacks/stack-agent-operations.ts
new file mode 100644
index 00000000000..6145aa08a05
--- /dev/null
+++ b/tools/stack-bench/src/stacks/stack-agent-operations.ts
@@ -0,0 +1,177 @@
+import { Buffer } from 'node:buffer';
+import { join } from 'node:path';
+import { CODING_CONTAINER_DEPENDENCY_READY_FILE,
+  CODING_CONTAINER_RELEASE_DEPS_ROOT, CODING_CONTAINER_SPACETIME_CLI,
+  CODING_CONTAINER_SPACETIME_PACKAGE, CODING_CONTAINER_SPACETIME_STANDALONE }
+  from '../runtime/coding-container-policy.js';
+import { DEFAULT_SPACETIME_SERVER_URI, loopbackHttpUri } from '../runtime/backend-lease.js';
+import { databaseContainerName } from './database-containers.js';
+import { POSTGRES_APPLICATION_IDENTITY } from './hosted-database-identity.js';
+
+type HostUrl = (url: string) => string;
+
+interface StackSetupMetadata {
+  spacetime: { commit: string | null; binarySha256: string | null; raw: string } | null;
+  spacetimeBindings: { package: string; sourceSha256: string | null; sourceFiles: number } | null;
+  database: { reference: string; imageId: string | null | undefined } | null;
+}
+
+interface StackSetupMetadataInput {
+  imageId: string;
+  localPackage: string;
+  env?: NodeJS.ProcessEnv;
+  helpers: {
+    linuxSpacetimeVersion: (imageId: string) => NonNullable<StackSetupMetadata['spacetime']>;
+    bindingsIdentity: (localPackage: string) => NonNullable<StackSetupMetadata['spacetimeBindings']>;
+    containerImage: (container: string) => NonNullable<StackSetupMetadata['database']>;
+  };
+}
+
+export interface BuildContainerPlan {
+  networkNamespace: string | null;
+  requiredPaths: string[];
+  ensureDirectories: string[];
+  mounts: Array<{ kind: 'bind' | 'volume'; source: string; target: string; readOnly: boolean }>;
+  init: string;
+  readyFile: string | null;
+  readyDescription: string | null;
+}
+
+const SPACETIME_CLI_BINARY = '/deps/.spacetimedb-cli';
+const SPACETIME_CLI_HOME = '/deps/.spacetime-owner';
+
+function spacetimeCliSetup(serverUri: URL): string {
+  const uri = serverUri.toString().replace(/\/$/, '');
+  const wrapper = `#!/bin/sh
+case " $* " in
+  *" publish "*" --anonymous "*|*" publish "*" --no-config "*|*" dev "*" --anonymous "*|*" dev "*" --no-config "*)
+    echo "SpacetimeDB publish and dev must use the run identity" >&2
+    exit 64
+    ;;
+esac
+exec env HOME=${SPACETIME_CLI_HOME} ${SPACETIME_CLI_BINARY} "$@"
+`;
+  const encodedWrapper = Buffer.from(wrapper).toString('base64');
+  return `mkdir -p ${SPACETIME_CLI_HOME}; `
+    + `identity=$(curl -fsS -X POST ${uri}/v1/identity); `
+    + `token=$(node -e 'process.stdout.write(JSON.parse(process.argv[1]).token)' "$identity"); `
+    + `HOME=${SPACETIME_CLI_HOME} ${SPACETIME_CLI_BINARY} login --token "$token" >/dev/null; `
+    + `chmod -R a-w ${SPACETIME_CLI_HOME}; `
+    + `printf %s ${encodedWrapper} | base64 -d > ${CODING_CONTAINER_SPACETIME_CLI}; `
+    + `chmod 755 ${CODING_CONTAINER_SPACETIME_CLI}; `;
+}
+
+export function postgresConnectionUrl({ dbPort, database, hostUrl }:
+  { dbPort: number; database: string; hostUrl: HostUrl }): string {
+  const { user, password } = POSTGRES_APPLICATION_IDENTITY;
+  return hostUrl(`postgresql://${user}:${password}@localhost:${dbPort}/${database}`);
+}
+
+export function mongoDbConnectionUrl({ dbPort, database, hostUrl }:
+  { dbPort: number; database: string; hostUrl: HostUrl }): string {
+  return hostUrl(`mongodb://localhost:${dbPort}/${database}`);
+}
+
+export function noConnectionUrl(): null {
+  return null;
+}
+
+export function spacetimeSetupMetadata({ imageId, localPackage, helpers }:
+  StackSetupMetadataInput): StackSetupMetadata {
+  return {
+    spacetime: helpers.linuxSpacetimeVersion(imageId),
+    spacetimeBindings: helpers.bindingsIdentity(localPackage),
+    database: null,
+  };
+}
+
+export function postgresSetupMetadata({ helpers, env }:
+  StackSetupMetadataInput): StackSetupMetadata {
+  return {
+    spacetime: null,
+    spacetimeBindings: null,
+    database: helpers.containerImage(databaseContainerName('postgres', env)),
+  };
+}
+
+export function mongoDbSetupMetadata({ helpers, env }:
+  StackSetupMetadataInput): StackSetupMetadata {
+  return {
+    spacetime: null,
+    spacetimeBindings: null,
+    database: helpers.containerImage(databaseContainerName('mongodb', env)),
+  };
+}
+
+export function emptySetupMetadata(_input?: StackSetupMetadataInput): StackSetupMetadata {
+  return { spacetime: null, spacetimeBindings: null, database: null };
+}
+
+export function spacetimeBuildContainerPlan({ repo, env = {} }: {
+  repo: string; appDir: string; env?: NodeJS.ProcessEnv;
+}): BuildContainerPlan {
+  const bindings = join(repo, 'crates', 'bindings-typescript');
+  const cli = join(repo, 'tools', 'stack-bench', 'container', 'bin', 'spacetimedb-cli');
+  const standalone = join(repo, 'tools', 'stack-bench', 'container', 'bin', 'spacetimedb-standalone');
+  const serverUri = loopbackHttpUri(env.STACK_BENCH_STDB_URI ?? DEFAULT_SPACETIME_SERVER_URI);
+  if (env.STACK_BENCH_APPLIANCE !== '1') serverUri.hostname = 'host.docker.internal';
+  const cliSetup = spacetimeCliSetup(serverUri);
+  const releaseVolume = env.STACK_BENCH_RELEASE_DEPS_VOLUME?.trim() || null;
+  if (releaseVolume) {
+    return {
+      networkNamespace: env.STACK_BENCH_APPLIANCE === '1' ? 'host' : null,
+      requiredPaths: [],
+      ensureDirectories: [],
+      mounts: [
+        { kind: 'volume', source: releaseVolume,
+          target: CODING_CONTAINER_RELEASE_DEPS_ROOT, readOnly: true },
+      ],
+      init: 'set -eu; '
+        + 'mkdir -p /deps; '
+        + `test -d ${CODING_CONTAINER_RELEASE_DEPS_ROOT}/bindings-typescript; `
+        + `test -x ${CODING_CONTAINER_RELEASE_DEPS_ROOT}/spacetimedb-cli; `
+        + `test -x ${CODING_CONTAINER_RELEASE_DEPS_ROOT}/spacetimedb-standalone; `
+        + `test -f ${CODING_CONTAINER_RELEASE_DEPS_ROOT}/spacetimedb.tgz; `
+        + `ln -s ${CODING_CONTAINER_RELEASE_DEPS_ROOT}/spacetimedb-cli ${SPACETIME_CLI_BINARY}; `
+        + `ln -s ${CODING_CONTAINER_RELEASE_DEPS_ROOT}/spacetimedb-standalone ${CODING_CONTAINER_SPACETIME_STANDALONE}; `
+        + `ln -s ${CODING_CONTAINER_RELEASE_DEPS_ROOT}/spacetimedb.tgz ${CODING_CONTAINER_SPACETIME_PACKAGE}; `
+        + cliSetup
+        + `touch ${CODING_CONTAINER_DEPENDENCY_READY_FILE}; exec sleep infinity`,
+      readyFile: CODING_CONTAINER_DEPENDENCY_READY_FILE,
+      readyDescription: 'SpacetimeDB SDK staging',
+    };
+  }
+  return {
+    networkNamespace: null,
+    requiredPaths: [bindings, cli, standalone],
+    ensureDirectories: [],
+    mounts: [
+      { kind: 'bind', source: bindings, target: '/deps-src/bindings-typescript', readOnly: true },
+      { kind: 'bind', source: cli, target: SPACETIME_CLI_BINARY, readOnly: true },
+      { kind: 'bind', source: standalone,
+        target: CODING_CONTAINER_SPACETIME_STANDALONE, readOnly: true },
+    ],
+    init: 'set -eu; '
+      + 'test -f /deps-src/bindings-typescript/dist/server/index.d.ts; '
+      + 'test -f /deps-src/bindings-typescript/dist/server/index.mjs; '
+      + 'mkdir -p /deps/bindings-typescript; '
+      + 'cp -a /deps-src/bindings-typescript/. /deps/bindings-typescript/; '
+      + 'cd /deps/bindings-typescript; '
+      + 'npm install --omit=dev --ignore-scripts --no-audit --no-fund; '
+      + 'pack_name=$(npm pack --pack-destination /deps --silent); '
+      + `mv "/deps/$pack_name" ${CODING_CONTAINER_SPACETIME_PACKAGE}; `
+      + cliSetup
+      + `touch ${CODING_CONTAINER_DEPENDENCY_READY_FILE}; exec sleep infinity`,
+    readyFile: CODING_CONTAINER_DEPENDENCY_READY_FILE,
+    readyDescription: 'SpacetimeDB SDK staging',
+  };
+}
+
+export function standardBuildContainerPlan({ env = {} }:
+  { env?: NodeJS.ProcessEnv } = {}): BuildContainerPlan {
+  return {
+    networkNamespace: env.STACK_BENCH_APPLIANCE === '1' ? 'host' : null,
+    requiredPaths: [], ensureDirectories: [], mounts: [],
+    init: 'exec sleep infinity', readyFile: null, readyDescription: null,
+  };
+}
diff --git a/tools/stack-bench/src/stacks/stack-grading-operations.ts b/tools/stack-bench/src/stacks/stack-grading-operations.ts
new file mode 100644
index 00000000000..3f8a19b98d5
--- /dev/null
+++ b/tools/stack-bench/src/stacks/stack-grading-operations.ts
@@ -0,0 +1,123 @@
+import { leasedSpacetimeTarget } from '../runtime/spacetime-target.js';
+import type { NamedAction } from '../composition/tracks.js';
+
+interface NamedActionInput {
+  readonly args?: readonly unknown[];
+  readonly body?: unknown;
+  readonly values?: Readonly<Record<string, unknown>>;
+}
+
+function namedActionInput(value: unknown): NamedActionInput {
+  return value !== null && typeof value === 'object' && !Array.isArray(value)
+    ? value as NamedActionInput
+    : {};
+}
+
+export interface SpacetimeTarget {
+  readonly uri: string;
+  readonly mod: string;
+}
+
+export function createSpacetimeGradingContext(
+  { requireBuildContainer = true }: { requireBuildContainer?: boolean } = {},
+) {
+  return leasedSpacetimeTarget({ requireBuildContainer });
+}
+
+export function createHttpGradingContext(
+  _input: { requireBuildContainer?: boolean } = {},
+) {
+  return null;
+}
+
+const U64_MAX = 18_446_744_073_709_551_615n;
+
+function spacetimeReducerBody(action: NamedAction, args: readonly unknown[]): string {
+  const params = action.params ?? [];
+  const encoded = args.map((value, index) => {
+    if (params[index]?.wireType === 'u64') {
+      const decimal = typeof value === 'string' ? value
+        : (typeof value === 'number' && Number.isSafeInteger(value) ? String(value) : null);
+      if (decimal === null || !/^(?:0|[1-9]\d*)$/.test(decimal)
+          || BigInt(decimal) > U64_MAX) {
+        const parameterName = params[index]?.name;
+        const error = new Error(
+          `invalid u64 value for reducer parameter ${JSON.stringify(parameterName)}`,
+        ) as Error & { code: string };
+        error.code = 'invalid_named_action_input';
+        throw error;
+      }
+      return decimal;
+    }
+    return JSON.stringify(value) ?? 'null';
+  });
+  return `[${encoded.join(',')}]`;
+}
+
+export function spacetimeNamedActionRequest({
+  action,
+  input: rawInput,
+  spacetime,
+}: {
+  action: NamedAction;
+  input?: unknown;
+  spacetime?: SpacetimeTarget | null;
+  url?: string | null;
+}) {
+  const input = namedActionInput(rawInput);
+  if (!action.reducer) throw new TypeError('SpacetimeDB named action requires a reducer');
+  const args = input.values === undefined
+    ? (input.args ?? action.args ?? [])
+    : (action.params ?? []).map(param => input.values?.[param.name]);
+  return {
+    url: spacetime && `${spacetime.uri}/v1/database/${spacetime.mod}/call/${action.reducer}`,
+    method: 'POST',
+    body: spacetimeReducerBody(action, args),
+    missingNote: `no reducer named "${action.reducer}"`,
+    // The reducer-call HTTP endpoint maps a reducer's deliberate application
+    // failure to 530. Only this adapter classifies that status as a refusal.
+    applicationRejectionStatuses: [530],
+  };
+}
+
+export function httpNamedActionRequest({
+  action,
+  input: rawInput,
+  url,
+  spacetime: _spacetime,
+}: {
+  action: NamedAction;
+  input?: unknown;
+  url?: string | null;
+  spacetime?: SpacetimeTarget | null;
+}) {
+  const input = namedActionInput(rawInput);
+  const base = String(url ?? '').replace(/\/$/, '');
+  if (!action.path) throw new TypeError('HTTP named action requires a path');
+  let path = action.path;
+  let body = input.body ?? {};
+  const values = input.values ?? (input.args === undefined ? undefined
+    : Object.fromEntries((action.params ?? []).map((param, index) => [param.name, input.args?.[index]])));
+  if (values !== undefined) {
+    body = {};
+    for (const param of action.params ?? []) {
+      if (param.in === 'path') {
+        if (!param.placeholder) {
+          throw new TypeError(`path parameter ${JSON.stringify(param.name)} has no placeholder`);
+        }
+        path = path.replaceAll(
+          param.placeholder,
+          encodeURIComponent(String(values[param.name])),
+        );
+      } else {
+        (body as Record<string, unknown>)[param.name] = values[param.name];
+      }
+    }
+  }
+  return {
+    url: base ? `${base}${path}` : null,
+    method: action.method ?? 'POST',
+    body: JSON.stringify(body),
+    missingNote: `no route at ${action.path}`,
+  };
+}
diff --git a/tools/stack-bench/src/stacks/stack-identities.ts b/tools/stack-bench/src/stacks/stack-identities.ts
new file mode 100644
index 00000000000..ed3ce8355e7
--- /dev/null
+++ b/tools/stack-bench/src/stacks/stack-identities.ts
@@ -0,0 +1,17 @@
+import { MONGODB_ADAPTER_VERSION } from './backends/mongodb-identity.js';
+import { POSTGRES_ADAPTER_VERSION } from './backends/postgres-identity.js';
+import { SPACETIME_ADAPTER_VERSION } from './backends/spacetime-identity.js';
+import { STUB_ADAPTER_VERSION } from './backends/stub-identity.js';
+
+const VERSIONS = new Map<string, string>([
+  ['mongodb', MONGODB_ADAPTER_VERSION],
+  ['postgres', POSTGRES_ADAPTER_VERSION],
+  ['spacetime', SPACETIME_ADAPTER_VERSION],
+  ['stub', STUB_ADAPTER_VERSION],
+]);
+
+export function stackAdapterVersion(id: string): string {
+  const version = VERSIONS.get(id);
+  if (!version) throw new Error(`unknown stack adapter ${JSON.stringify(id)}`);
+  return version;
+}
diff --git a/tools/stack-bench/src/stacks/stack-lease-capabilities.ts b/tools/stack-bench/src/stacks/stack-lease-capabilities.ts
new file mode 100644
index 00000000000..e6583b815cc
--- /dev/null
+++ b/tools/stack-bench/src/stacks/stack-lease-capabilities.ts
@@ -0,0 +1,123 @@
+import { join } from 'node:path';
+
+import { databaseContainerName } from './database-containers.js';
+import type { Track } from '../composition/tracks.js';
+
+interface StackLeasePrepareInput {
+  serverUri: string | null;
+  track: Track;
+  runIndex: number;
+  runtimeDir: string;
+  env?: NodeJS.ProcessEnv;
+  helpers: {
+    moduleName(track: Track, runIndex: number): string;
+    dbName(track: Track, runIndex: number): string;
+    containerIdentity(name: string): { id: string; name: string };
+  };
+}
+
+interface StackLeaseValidationInput {
+  resources: unknown;
+  helpers: {
+    loopbackHttpUri(uri: unknown): unknown;
+    requireString(value: unknown, label: string): unknown;
+  };
+}
+
+interface StackLeasePreparation {
+  lease: {
+    serverUri: string | null;
+    database: string | null;
+    module: string | null;
+    dataDir: string | null;
+    container: { id: string; name: string } | null;
+  };
+  lockKeys: string[];
+}
+
+function resources(input: StackLeaseValidationInput): Record<string, unknown> {
+  if (!input.resources || typeof input.resources !== 'object' || Array.isArray(input.resources)) {
+    throw new Error('stack lease resources must be an object');
+  }
+  return input.resources as Record<string, unknown>;
+}
+
+function container(input: StackLeaseValidationInput): Record<string, unknown> {
+  const value = resources(input).container;
+  if (!value || typeof value !== 'object' || Array.isArray(value)) {
+    throw new Error('stack lease container must be an object');
+  }
+  return value as Record<string, unknown>;
+}
+
+function validateHostedResources(input: StackLeaseValidationInput): void {
+  input.helpers.requireString(resources(input).database, 'database');
+  input.helpers.requireString(container(input).name, 'container.name');
+  input.helpers.requireString(container(input).id, 'container.id');
+}
+
+function hostedLease(adapterId: 'postgres' | 'mongodb') {
+  return {
+    prepare(input: StackLeasePrepareInput): StackLeasePreparation {
+      return {
+        lease: {
+          serverUri: null,
+          database: input.helpers.dbName(input.track, input.runIndex),
+          module: null,
+          dataDir: null,
+          container: input.helpers.containerIdentity(databaseContainerName(adapterId, input.env)),
+        },
+        lockKeys: [],
+      };
+    },
+    validateResources: validateHostedResources,
+  };
+}
+
+function spacetimeLease() {
+  return {
+    prepare(input: StackLeasePrepareInput): StackLeasePreparation {
+      return {
+        lease: {
+          serverUri: input.serverUri,
+          database: null,
+          module: input.helpers.moduleName(input.track, input.runIndex),
+          dataDir: join(input.runtimeDir, 'spacetime-data'),
+          container: null,
+        },
+        lockKeys: [`listener:${input.serverUri}`],
+      };
+    },
+    validateResources(input: StackLeaseValidationInput): void {
+      const value = resources(input);
+      input.helpers.loopbackHttpUri(value.serverUri);
+      input.helpers.requireString(value.module, 'module');
+      input.helpers.requireString(value.dataDir, 'dataDir');
+      if (!Array.isArray(value.listenerProcesses)) {
+        throw new Error('listenerProcesses must be an array');
+      }
+    },
+  };
+}
+
+const STACK_LEASES = {
+  spacetime: spacetimeLease(),
+  postgres: hostedLease('postgres'),
+  mongodb: hostedLease('mongodb'),
+  stub: {
+    prepare: (_input: StackLeasePrepareInput): StackLeasePreparation => ({
+      lease: { serverUri: null, database: null, module: null, dataDir: null, container: null },
+      lockKeys: [],
+    }),
+    validateResources: (_input: StackLeaseValidationInput): void => undefined,
+  },
+} as const;
+
+export function stackLeaseOperations(backend: keyof typeof STACK_LEASES) {
+  return STACK_LEASES[backend];
+}
+
+export function validateStackLeaseResources(backend: string, input: StackLeaseValidationInput): void {
+  if (!(backend in STACK_LEASES)) throw new Error(`unknown stack adapter ${JSON.stringify(backend)}`);
+  STACK_LEASES[backend as keyof typeof STACK_LEASES].validateResources(input);
+}
diff --git a/tools/stack-bench/src/stacks/stack-orchestrator-operations.ts b/tools/stack-bench/src/stacks/stack-orchestrator-operations.ts
new file mode 100644
index 00000000000..f01d3653373
--- /dev/null
+++ b/tools/stack-bench/src/stacks/stack-orchestrator-operations.ts
@@ -0,0 +1,30 @@
+import { join } from 'node:path';
+
+import { DEFAULT_SPACETIME_SERVER_URI, loopbackHttpUri } from '../runtime/backend-lease.js';
+
+interface OrchestratorConfig {
+  environment: Record<string, string>;
+  lease: { serverUri: string | null };
+  lifecycle: { cli?: string };
+  windowsEnvironmentBridge: string[];
+}
+
+export function spacetimeOrchestratorConfig({ root, env, helpers }: {
+  root: string;
+  env: NodeJS.ProcessEnv;
+  helpers: { exists: (path: string) => boolean };
+}): OrchestratorConfig {
+  const serverUri = env.STACK_BENCH_STDB_URI ?? DEFAULT_SPACETIME_SERVER_URI;
+  loopbackHttpUri(serverUri);
+  const localCli = join(root, '..', '..', 'target', 'release', 'spacetimedb-cli.exe');
+  const cli = env.SPACETIME_BIN ?? (helpers.exists(localCli) ? localCli : 'spacetime');
+  return {
+    environment: { STACK_BENCH_STDB_URI: serverUri, SPACETIME_BIN: cli },
+    lease: { serverUri }, lifecycle: { cli },
+    windowsEnvironmentBridge: ['STACK_BENCH_STDB_URI', 'SPACETIME_BIN/p'],
+  };
+}
+
+export function standardOrchestratorConfig(): OrchestratorConfig {
+  return { environment: {}, lease: { serverUri: null }, lifecycle: {}, windowsEnvironmentBridge: [] };
+}
diff --git a/tools/stack-bench/src/stacks/stack-reference-operations.ts b/tools/stack-bench/src/stacks/stack-reference-operations.ts
new file mode 100644
index 00000000000..56f442111c7
--- /dev/null
+++ b/tools/stack-bench/src/stacks/stack-reference-operations.ts
@@ -0,0 +1,203 @@
+import { dockerHostServiceAddress } from '../runtime/docker-network.js';
+import { containerReachableSpacetimeUri } from '../runtime/spacetime-target.js';
+import { referenceInstallSteps } from '../references/reference-install.js';
+import { POSTGRES_APPLICATION_IDENTITY } from './hosted-database-identity.js';
+import { CODING_CONTAINER_APP_ROOT, CODING_CONTAINER_SPACETIME_CLI }
+  from '../runtime/coding-container-policy.js';
+
+import type { StackRunPorts } from './stack-adapter-contract.js';
+import type { Track, TrackDefinition } from '../composition/tracks.js';
+import type { ReferenceInstallMetadata } from '../references/reference-install.js';
+
+// What deploying a reference application needs from its caller. The reference
+// runner owns the container and the waiting; these operations own the shape of
+// each backend's deployment.
+export interface HostedReferenceHelpers {
+  phase: (message: string) => void;
+  docker: (container: string, cwd: string, command: string,
+    args: readonly string[], env?: Record<string, string>) => unknown;
+  startDetached: (container: string, cwd: string, name: string,
+    env: Record<string, string>,
+    options?: { script?: string; networkVisible?: boolean; port?: number }) => unknown;
+  waitFor: (url: string, timeoutMs: number, description: string,
+    logs: () => string) => Promise<void>;
+  containerLogs: (container: string, name: string) => string;
+  runSync: (purpose: string, file: string, args: readonly string[],
+    options?: Record<string, unknown>) => string;
+  dbName: (track: Pick<TrackDefinition, 'slug'>, runIndex: number) => string;
+}
+
+export interface SpacetimeReferenceHelpers {
+  docker: (container: string, cwd: string, command: string,
+    args: readonly string[], env?: Record<string, string>) => unknown;
+  startDetached: (container: string, cwd: string, name: string,
+    env: Record<string, string>,
+    options?: { script?: string; networkVisible?: boolean; port?: number }) => unknown;
+  waitFor: (url: string, timeoutMs: number, description: string,
+    logs: () => string) => Promise<void>;
+  containerLogs: (container: string, name: string) => string;
+  moduleName: (track: TrackDefinition, runIndex: number) => string;
+  loadTrack: (name: string) => Track;
+}
+
+export interface HostedReferenceMetadata {
+  installDirectories: string[];
+  server: { directory: string };
+  client: { directory: string };
+}
+
+export interface SpacetimeReferenceMetadata extends ReferenceInstallMetadata {
+  moduleDirectory: string;
+  bindingsDirectory: string;
+  client: { directory: string };
+}
+
+interface HostedLease {
+  resources: { database: string; container: { name: string; id: string } };
+}
+
+interface SpacetimeLease {
+  resources: { module: string; serverUri: string;
+    buildContainer?: { networkMode?: 'host' | 'bridge' } | null };
+}
+
+export interface HostedReferenceDeployment {
+  args: { backend: string; runIndex: number };
+  metadata: HostedReferenceMetadata;
+  lease: HostedLease;
+  track: Pick<Track, 'restartProbe' | 'slug'>;
+  container: string;
+  ports: Pick<StackRunPorts, 'dbPort' | 'vite'>;
+  buildNetworkMode: string | undefined;
+  helpers: HostedReferenceHelpers;
+}
+
+export interface SpacetimeReferenceDeployment {
+  args: { track: string; runIndex: number };
+  metadata: SpacetimeReferenceMetadata;
+  lease: SpacetimeLease;
+  container: string;
+  ports: Pick<StackRunPorts, 'vite'>;
+  buildNetworkMode: string | undefined;
+  helpers: SpacetimeReferenceHelpers;
+}
+
+type HostedDatabase = { expected: string; containerId: string };
+
+
+function validateHostedDatabase({ args, lease, track, helpers }:
+  HostedReferenceDeployment): HostedDatabase {
+  const expected = helpers.dbName(track, args.runIndex);
+  if (lease.resources.database !== expected) throw new Error(`lease database is not ${expected}`);
+  const service = lease.resources.container;
+  if (!service) throw new Error('lease has no database container');
+  const actual = helpers.runSync('inspecting leased database container', 'docker',
+    ['inspect', '--format', '{{.Id}}', service.name],
+    { encoding: 'utf8', stdio: 'pipe' }).trim();
+  if (actual !== service.id) throw new Error(`${service.name} no longer matches its lease`);
+  return { expected, containerId: actual };
+}
+
+async function deployHostedReference(input: HostedReferenceDeployment, { databaseUrl, extraEnv = {},
+  prepare, pushSchema }: {
+  databaseUrl: (target: Pick<HostedReferenceDeployment, 'ports' | 'lease' | 'buildNetworkMode'>) => string;
+  extraEnv?: Record<string, string>;
+  prepare: (database: HostedDatabase, helpers: HostedReferenceHelpers) => void;
+  pushSchema?: (stage: { container: string; metadata: HostedReferenceMetadata;
+    applicationEnv: Record<string, string>; helpers: HostedReferenceHelpers }) => void;
+}): Promise<void> {
+  const { args, metadata, lease, track, container, ports, buildNetworkMode, helpers } = input;
+  helpers.phase('preparing database');
+  const database = validateHostedDatabase(input);
+  prepare(database, helpers);
+  const applicationEnv = {
+    DATABASE_URL: databaseUrl({ ports, lease, buildNetworkMode }),
+    PORT: String(ports.vite),
+    ...extraEnv,
+  };
+  for (const directory of metadata.installDirectories) {
+    helpers.phase(`installing ${directory}`);
+    helpers.docker(container, `${CODING_CONTAINER_APP_ROOT}/${directory}`,
+      'npm', ['ci', '--no-audit', '--no-fund']);
+  }
+  if (pushSchema) pushSchema({ container, metadata, applicationEnv, helpers });
+  helpers.phase('building reference client');
+  helpers.docker(container, `${CODING_CONTAINER_APP_ROOT}/${metadata.client.directory}`,
+    'npm', ['run', 'build']);
+  helpers.phase('starting reference application');
+  helpers.startDetached(container, CODING_CONTAINER_APP_ROOT,
+    'reference-application', applicationEnv, { script: 'start' });
+  await helpers.waitFor(`http://127.0.0.1:${ports.vite}${track.restartProbe}`, 180_000,
+    `${args.backend} API`, () => helpers.containerLogs(container, 'reference-application'));
+  helpers.phase('reference API ready');
+  await helpers.waitFor(`http://127.0.0.1:${ports.vite}`, 180_000,
+    `${args.backend} application`, () => helpers.containerLogs(container, 'reference-application'));
+  helpers.phase('reference application ready');
+}
+
+export function deployPostgresReference(input: HostedReferenceDeployment): Promise<void> {
+  const { user, password } = POSTGRES_APPLICATION_IDENTITY;
+  return deployHostedReference(input, {
+    databaseUrl: ({ ports, lease, buildNetworkMode }) =>
+      `postgresql://${user}:${password}@${dockerHostServiceAddress(buildNetworkMode)}:${ports.dbPort}/${lease.resources.database}`,
+    prepare: ({ expected, containerId }, helpers) => {
+      try {
+        helpers.runSync('creating PostgreSQL reference database', 'docker',
+          ['exec', containerId, 'psql', '-U', user, '-d', 'postgres',
+            '-c', `CREATE DATABASE ${expected} OWNER ${user};`], { stdio: 'pipe' });
+      } catch { /* an existing run-index database is expected */ }
+      helpers.runSync('resetting PostgreSQL reference schema', 'docker',
+        ['exec', containerId, 'psql', '-U', user, '-d', expected,
+          '-c', `DROP SCHEMA public CASCADE; CREATE SCHEMA public; GRANT ALL ON SCHEMA public TO ${user};`],
+        { stdio: 'pipe' });
+    },
+    pushSchema: ({ container, metadata, applicationEnv, helpers }) => {
+      helpers.phase('pushing PostgreSQL schema');
+      helpers.docker(container, `${CODING_CONTAINER_APP_ROOT}/${metadata.server.directory}`,
+        './node_modules/.bin/drizzle-kit', ['push', '--force'], applicationEnv);
+    },
+  });
+}
+
+export function deployMongoDbReference(input: HostedReferenceDeployment): Promise<void> {
+  return deployHostedReference(input, {
+    databaseUrl: ({ ports, lease, buildNetworkMode }) =>
+      `mongodb://${dockerHostServiceAddress(buildNetworkMode)}:${ports.dbPort}/${lease.resources.database}`,
+    extraEnv: { JWT_SECRET: 'stack-bench-reference-only-secret-2026' },
+    prepare: ({ expected, containerId }, helpers) => {
+      helpers.runSync('resetting MongoDB reference database', 'docker',
+        ['exec', containerId, 'mongosh', expected, '--quiet', '--eval', 'db.dropDatabase()'],
+        { stdio: 'pipe' });
+    },
+  });
+}
+
+export async function deploySpacetimeReference({ args, metadata, lease, container, ports,
+  buildNetworkMode, helpers }: SpacetimeReferenceDeployment): Promise<void> {
+  for (const step of referenceInstallSteps(metadata)) {
+    helpers.docker(container, `${CODING_CONTAINER_APP_ROOT}/${step.directory}`,
+      step.command, step.args);
+  }
+  const module = helpers.moduleName(helpers.loadTrack(args.track), args.runIndex);
+  if (lease.resources.module !== module) throw new Error(`lease module is not ${module}`);
+  const serverUri = lease.resources.serverUri;
+  if (!serverUri) throw new Error('SpacetimeDB lease records no server URI');
+  const hostUri = containerReachableSpacetimeUri(lease, buildNetworkMode ?? null);
+  helpers.docker(container, `${CODING_CONTAINER_APP_ROOT}/${metadata.moduleDirectory}`,
+    CODING_CONTAINER_SPACETIME_CLI,
+    ['publish', module, '--module-path', `${CODING_CONTAINER_APP_ROOT}/${metadata.moduleDirectory}`,
+      '-s', hostUri, '-y']);
+  helpers.docker(container, `${CODING_CONTAINER_APP_ROOT}/${metadata.moduleDirectory}`,
+    CODING_CONTAINER_SPACETIME_CLI,
+    ['generate', '--lang', 'typescript',
+      '--module-path', `${CODING_CONTAINER_APP_ROOT}/${metadata.moduleDirectory}`,
+      '--out-dir', `${CODING_CONTAINER_APP_ROOT}/${metadata.bindingsDirectory}`,
+      '--yes', '--no-config']);
+  helpers.startDetached(container, `${CODING_CONTAINER_APP_ROOT}/${metadata.client.directory}`,
+    'reference-client', {
+    VITE_MODULE_NAME: module, VITE_SPACETIMEDB_URI: serverUri,
+    VITE_PORT: String(ports.vite),
+  }, { networkVisible: true, port: ports.vite });
+  await helpers.waitFor(`http://127.0.0.1:${ports.vite}`, 180_000, 'Spacetime client',
+    () => helpers.containerLogs(container, 'reference-client'));
+}
diff --git a/tools/stack-bench/src/stacks/stack-teardown-operations.ts b/tools/stack-bench/src/stacks/stack-teardown-operations.ts
new file mode 100644
index 00000000000..b24a5fb1ff1
--- /dev/null
+++ b/tools/stack-bench/src/stacks/stack-teardown-operations.ts
@@ -0,0 +1,147 @@
+import { loopbackHttpUri, readBackendLease, updateBackendLease }
+  from '../runtime/backend-lease.js';
+import { killDetachedTree, killTree, pidsOnPort, processIdentityMatches, sleepSync }
+  from '../runtime/platform.js';
+import type { BackendLease } from '../runtime/backend-lease.js';
+
+// A SpacetimeDB lease always records the host it claimed.
+const leaseUrl = (serverUri: string | null): URL => {
+  if (!serverUri) throw new Error('SpacetimeDB lease records no server URI');
+  return new URL(serverUri);
+};
+
+export function stopHostedHost({ leasePath, leaseToken, lease, retainHost = false }: {
+  leasePath: string; leaseToken: string; lease: BackendLease; retainHost?: boolean;
+}): boolean {
+  updateBackendLease(leasePath,
+    { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+      next.state = retainHost ? 'retained' : 'stopped';
+      if (!retainHost) next.stoppedAt ??= new Date().toISOString();
+      return next;
+    });
+  return true;
+}
+
+export function stopSpacetimeHost({ leasePath, leaseToken, retainHost = false }: {
+  leasePath: string; leaseToken: string; retainHost?: boolean;
+}): boolean {
+  const lease = readBackendLease(leasePath, { token: leaseToken, backend: 'spacetime' });
+  if (retainHost) {
+    updateBackendLease(leasePath,
+      { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+        next.state = 'retained';
+        return next;
+      });
+    return true;
+  }
+  if (['stopped', 'released'].includes(lease.state)) return true;
+  if (lease.state === 'created') {
+    const url = leaseUrl(lease.resources.serverUri);
+    const port = Number(url.port);
+    const actual = pidsOnPort(port, { strict: true });
+    if (lease.resources.launchedProcess || lease.resources.listenerProcesses.length || actual.length) {
+      console.error(`  REFUSED to release unactivated lease ${lease.runId}: :${port} is not empty`);
+      return false;
+    }
+    updateBackendLease(leasePath,
+      { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+        next.state = 'stopped';
+        next.stoppedAt ??= new Date().toISOString();
+        return next;
+      });
+    return true;
+  }
+  if (lease.state === 'starting') {
+    const url = leaseUrl(lease.resources.serverUri);
+    const port = Number(url.port);
+    if (!lease.resources.launchedProcess) {
+      console.error(`  REFUSED to release starting lease ${lease.runId}: launched process was not recorded`);
+      return false;
+    }
+    if (!processIdentityMatches(lease.resources.launchedProcess)) {
+      console.error(`  REFUSED to release starting lease ${lease.runId}: launched process identity changed`);
+      return false;
+    }
+    killDetachedTree(lease.resources.launchedProcess.pid);
+    for (let i = 0; i < 40 && pidsOnPort(port, { strict: true }).length; i++) sleepSync(250);
+    const remaining = pidsOnPort(port, { strict: true });
+    if (remaining.length) {
+      console.error(`  REFUSED to release starting lease ${lease.runId}: :${port} still has listener PID ${remaining.join(', ')}`);
+      return false;
+    }
+    updateBackendLease(leasePath,
+      { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+        next.resources.listenerProcesses = [];
+        next.state = 'stopped';
+        next.stoppedAt ??= new Date().toISOString();
+        return next;
+      });
+    return true;
+  }
+  if (!['active', 'restarting', 'retained'].includes(lease.state)) {
+    console.error(`  REFUSED to stop SpacetimeDB from lease state ${lease.state}`);
+    return false;
+  }
+  let url: URL;
+  try { url = loopbackHttpUri(lease.resources.serverUri); }
+  catch {
+    console.error(`  REFUSED to stop non-loopback SpacetimeDB target ${lease.resources.serverUri}`);
+    return false;
+  }
+  const port = Number(url.port);
+  if (lease.state === 'restarting' && lease.resources.launchedProcess) {
+    // During restart, launchedPid is the exact process tree currently being
+    // replaced. Kill that tree first; anything still listening afterward is
+    // unproven and must be left alone.
+    if (!processIdentityMatches(lease.resources.launchedProcess)) {
+      console.error(`  REFUSED to release restarting lease ${lease.runId}: launched process identity changed`);
+      return false;
+    }
+    killDetachedTree(lease.resources.launchedProcess.pid);
+    for (let i = 0; i < 40 && pidsOnPort(port, { strict: true }).length; i++) sleepSync(250);
+    const remaining = pidsOnPort(port, { strict: true });
+    if (remaining.length) {
+      console.error(`  REFUSED to release restarting lease ${lease.runId}: :${port} still has listener PID ${remaining.join(', ')}`);
+      return false;
+    }
+    updateBackendLease(leasePath,
+      { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+        next.resources.listenerProcesses = [];
+        next.state = 'stopped';
+        next.stoppedAt ??= new Date().toISOString();
+        return next;
+      });
+    return true;
+  }
+  const actual = pidsOnPort(port, { strict: true });
+  const unexpected = actual.filter(pid => !lease.resources.listenerProcesses.some(identity =>
+    identity.pid === Number(pid) && processIdentityMatches(identity)));
+  if (unexpected.length) {
+    console.error(`  REFUSED to stop :${port}: listener PID ${unexpected.join(', ')} is not in lease ${lease.runId}`);
+    return false;
+  }
+  for (const pid of actual) {
+    killTree(pid);
+    if (pidsOnPort(port, { strict: true }).includes(String(pid))) {
+      try { process.kill(Number(pid), 'SIGKILL'); } catch { /* already gone */ }
+    }
+  }
+  for (let i = 0; i < 40 && pidsOnPort(port, { strict: true }).length; i++) sleepSync(250);
+  const remaining = pidsOnPort(port, { strict: true });
+  if (remaining.length) {
+    console.error(`  REFUSED to release lease ${lease.runId}: :${port} still has listener PID ${remaining.join(', ')}`);
+    return false;
+  }
+  if (actual.length) console.log(`  stopped the SpacetimeDB host this run started on :${port}`);
+  if (lease.resources.launchedProcess && processIdentityMatches(lease.resources.launchedProcess)) {
+    killDetachedTree(lease.resources.launchedProcess.pid);
+  }
+  updateBackendLease(leasePath,
+    { token: leaseToken, backend: lease.backend, runId: lease.runId }, next => {
+      next.resources.listenerProcesses = [];
+      next.state = 'stopped';
+      next.stoppedAt ??= new Date().toISOString();
+      return next;
+    });
+  return true;
+}
diff --git a/tools/stack-bench/src/stacks/stock-interface.ts b/tools/stack-bench/src/stacks/stock-interface.ts
new file mode 100644
index 00000000000..4c0dd4fea9f
--- /dev/null
+++ b/tools/stack-bench/src/stacks/stock-interface.ts
@@ -0,0 +1,6 @@
+// The warehouse contract names the stock tables other systems write directly.
+// A direct write that cannot find them is the application not providing that
+// interface, not a harness fault; the marker lets the grader grade it so.
+export function stockInterfaceError(message: string, options: { cause?: unknown } = {}): Error {
+  return Object.assign(new Error(message, options), { stockInterface: true });
+}
diff --git a/tools/stack-bench/src/zod-error.ts b/tools/stack-bench/src/zod-error.ts
new file mode 100644
index 00000000000..eb8c4a3b7db
--- /dev/null
+++ b/tools/stack-bench/src/zod-error.ts
@@ -0,0 +1,9 @@
+import type { ZodError } from 'zod';
+
+export function formatZodError(error: ZodError, root: string): string {
+  const at = (path: PropertyKey[]) => path.length
+    ? `${root}.${path.map(String).join('.')}` : root;
+  return error.issues.flatMap(issue => issue.code === 'unrecognized_keys'
+    ? issue.keys.map(key => `${at([...issue.path, key])} is unknown`)
+    : [`${at(issue.path)} ${issue.message}`]).join('; ');
+}
diff --git a/tools/stack-bench/tests/action-contract.contract.ts b/tools/stack-bench/tests/action-contract.contract.ts
new file mode 100644
index 00000000000..eb2b85cad7f
--- /dev/null
+++ b/tools/stack-bench/tests/action-contract.contract.ts
@@ -0,0 +1,210 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { ACTION_REGISTRY, actionPlugin } from '../src/actions/action-catalog.js';
+import {
+  ActionApplicationFailure,
+  ActionInconclusive,
+  createActionRegistry,
+  executeAction,
+} from '../src/actions/action-contract.js';
+import type {
+  ActionImplementation,
+  ActionPlugin,
+} from '../src/actions/action-contract.js';
+import { ACTION_IDS } from '../src/composition/definition-compiler.js';
+
+interface FixtureStep {
+  do: string;
+  branches?: FixtureStep[][];
+}
+
+interface FixtureCriterion {
+  steps: FixtureStep[];
+}
+
+interface FixtureFeature {
+  setup: FixtureStep[];
+  criteria: FixtureCriterion[];
+}
+
+interface FixtureDefinition {
+  features: FixtureFeature[];
+}
+
+const fixture = JSON.parse(readFileSync(
+  join(STACK_BENCH_ROOT, 'tests', 'fixtures', 'definitions', 'all-actions.json'),
+  'utf8')) as FixtureDefinition;
+
+function steps(value: FixtureDefinition): FixtureStep[] {
+  const out: FixtureStep[] = [];
+  const visit = (step: FixtureStep): void => {
+    out.push(step);
+    if (step.do === 'race') (step.branches ?? []).flat().forEach(visit);
+  };
+  for (const feature of value.features) {
+    [...feature.setup, ...feature.criteria.flatMap(criterion => criterion.steps)].forEach(visit);
+  }
+  return out;
+}
+
+function plugin(overrides: Partial<ActionPlugin> = {}): ActionPlugin {
+  return {
+    id: 'fakeAction', version: '1.0.0',
+    category: 'transport',
+    compile: (input: unknown) => {
+      if (typeof input !== 'object' || input === null || !('do' in input)
+        || input.do !== 'fakeAction') throw new Error('wrong fake input');
+      return structuredClone(input);
+    },
+    capabilities: ['clock'],
+    timeoutMs: 250,
+    sensitivity: ['public'],
+    execute: () => ({ ok: true }),
+    ...overrides,
+  };
+}
+
+function context(overrides: Record<string, unknown> = {}) {
+  return { capabilities: { clock: {}, hidden: 'must not leak' }, ...overrides };
+}
+
+function registry(implementation: ActionImplementation, overrides: Partial<ActionPlugin> = {}) {
+  return createActionRegistry([plugin({ ...overrides, execute: implementation })]);
+}
+
+test('every scenario action has a complete versioned runtime contract', () => {
+  assert.deepEqual(ACTION_REGISTRY.ids, ACTION_IDS);
+  const representative = new Map(steps(fixture).map(step => [step.do, step]));
+  for (const id of ACTION_IDS) {
+    const action = ACTION_REGISTRY.get(id);
+    assert.match(action.version, /^\d+\.\d+\.\d+$/);
+    assert(action.capabilities.length > 0, id);
+    assert(action.timeoutMs > 0, id);
+    assert(action.sensitivity.every(value => typeof value === 'string'), id);
+    assert.doesNotThrow(() => action.compile(representative.get(id)), id);
+  }
+});
+
+test('action policy is explicit for each behavior category', () => {
+  const expected = {
+    callAction: ['transport', 60_000, ['actors', 'named-actions', 'transport-observation']],
+    callConcurrently: ['concurrency', 120_000, ['actors', 'named-actions']],
+    click: ['browser-interaction', 60_000, ['actors', 'browser-interaction']],
+    dbSetStock: ['database', 90_000, ['clock', 'database-write']],
+    expect: ['browser-observation', 300_000, ['actors', 'browser-observation']],
+    restartBackend: ['lifecycle', 900_000, ['backend-lifecycle']],
+    runScript: ['application-process', 90_000, ['application-files', 'subprocess']],
+    startAppServer: ['lifecycle', 900_000, ['application-lifecycle']],
+    wait: ['timing', 360_000, ['actors', 'clock']],
+  } as const;
+  for (const [id, [category, timeoutMs, capabilities]] of Object.entries(expected)) {
+    const action = ACTION_REGISTRY.get(id);
+    assert.equal(action.category, category, id);
+    assert.equal(action.timeoutMs, timeoutMs, id);
+    assert.deepEqual(action.capabilities, capabilities, id);
+  }
+  assert.deepEqual(ACTION_REGISTRY.get('runScript').sensitivity,
+    ['user-content', 'filesystem-path', 'process-output']);
+  assert.deepEqual(ACTION_REGISTRY.get('signIn').sensitivity,
+    ['credential', 'user-content']);
+});
+
+test('duplicate, unknown, malformed, and incomplete registrations fail at startup', () => {
+  assert.throws(() => createActionRegistry([plugin(), plugin()]), /duplicate action registration/);
+  assert.throws(() => createActionRegistry([plugin()], { expectedIds: ['fakeAction', 'missing'] }),
+    /missing missing/);
+  assert.throws(() => createActionRegistry([plugin(), { ...plugin(), id: 'surprise' }],
+    { expectedIds: ['fakeAction'] }), /unknown surprise/);
+  assert.throws(() => ACTION_REGISTRY.get('notReal'), /unknown registered action/);
+  assert.throws(() => actionPlugin('notReal'), /unknown action/);
+});
+
+test('a successful action sees only declared capabilities and returns structured evidence', async () => {
+  const result = await executeAction(registry(({ capabilities }) => {
+      assert.deepEqual(Object.keys(capabilities), ['clock']);
+      return { ok: true, value: 7 };
+    }), 'fakeAction', { do: 'fakeAction' }, context());
+  assert.equal(result.status, 'passed');
+  assert.equal(result.code, 'completed');
+  assert.deepEqual(result.observation, { ok: true, value: 7 });
+  assert.equal(result.action.id, 'fakeAction');
+  assert.equal(result.timing.deadlineMs, 250);
+});
+
+test('action evidence remains coherent if an injected wall clock moves backward', async () => {
+  const ticks = [100, 95];
+  const result = await executeAction(registry(() => ({ ok: true })), 'fakeAction',
+    { do: 'fakeAction' }, context(), { now: () => ticks.shift() ?? 0 });
+  assert.deepEqual(result.timing, {
+    startedAtMs: 100,
+    completedAtMs: 100,
+    durationMs: 0,
+    deadlineMs: 250,
+  });
+});
+
+test('application failure and inconclusive results stay distinct', async () => {
+  const failed = await executeAction(registry(() => {
+    throw new ActionApplicationFailure('subject rejected assertion',
+      { observation: { actual: 2 }, expected: { value: 1 } });
+  }), 'fakeAction', { do: 'fakeAction' }, context());
+  assert.equal(failed.status, 'failed');
+  assert.deepEqual(failed.observation, { actual: 2 });
+  assert.deepEqual(failed.expected, { value: 1 });
+  const inconclusive = await executeAction(registry(() => {
+    throw new ActionInconclusive('transport cannot be observed');
+  }), 'fakeAction', { do: 'fakeAction' }, context());
+  assert.equal(inconclusive.status, 'inconclusive');
+  assert.equal(inconclusive.code, 'inconclusive');
+});
+
+test('deadline, cancellation, and unclassified exceptions are fail-closed evidence', async () => {
+  let cleanedUp = false;
+  const never: ActionImplementation = ({ signal }) => new Promise((_resolve, reject) =>
+    signal.addEventListener('abort', () => setTimeout(() => {
+      cleanedUp = true;
+      reject(signal.reason);
+    }, 5), { once: true }));
+  const timedOut = await executeAction(registry(never, { timeoutMs: 20 }), 'fakeAction',
+    { do: 'fakeAction' }, context());
+  assert.equal(timedOut.status, 'harness_failure');
+  assert.equal(timedOut.code, 'deadline_exceeded');
+  assert.equal(timedOut.retryable, true);
+  assert.equal(cleanedUp, true, 'timeout evidence must wait for implementation cleanup');
+
+  const controller = new AbortController();
+  const cancelledPromise = executeAction(registry(never), 'fakeAction',
+    { do: 'fakeAction' }, context({ signal: controller.signal }));
+  controller.abort('operator cancelled');
+  const cancelled = await cancelledPromise;
+  assert.equal(cancelled.status, 'inconclusive');
+  assert.equal(cancelled.code, 'cancelled');
+
+  const crashed = await executeAction(registry(() => { throw new TypeError('unexpected bug'); }),
+    'fakeAction', { do: 'fakeAction' }, context());
+  assert.equal(crashed.status, 'harness_failure');
+  assert.equal(crashed.code, 'unclassified_exception');
+});
+
+test('invalid input, missing services, and malformed observations never become passes', async () => {
+  const validRegistry = registry(() => ({ ok: true }));
+  const invalid = await executeAction(validRegistry, 'fakeAction', { do: 'wrong' }, context());
+  assert.equal(invalid.code, 'invalid_input');
+  const missingCapability = await executeAction(validRegistry, 'fakeAction', { do: 'fakeAction' },
+    { capabilities: {} });
+  assert.equal(missingCapability.code, 'missing_capability');
+  assert.equal(missingCapability.status, 'harness_failure');
+  const malformed = await executeAction(registry(() => new Date()), 'fakeAction',
+    { do: 'fakeAction' }, context());
+  assert.equal(malformed.code, 'invalid_evidence');
+  assert.equal(malformed.status, 'harness_failure');
+  const cyclic: { ok: boolean; self?: unknown } = { ok: true };
+  cyclic.self = cyclic;
+  const nonSerializable = await executeAction(registry(() => cyclic), 'fakeAction',
+    { do: 'fakeAction' }, context());
+  assert.equal(nonSerializable.code, 'invalid_evidence');
+});
diff --git a/tools/stack-bench/tests/action-findings.test.ts b/tools/stack-bench/tests/action-findings.test.ts
new file mode 100644
index 00000000000..03d4bd941c7
--- /dev/null
+++ b/tools/stack-bench/tests/action-findings.test.ts
@@ -0,0 +1,143 @@
+import assert from 'node:assert/strict';
+import { readdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+import { ActionApplicationFailure, ActionInconclusive } from '../src/actions/action-contract.js';
+import { FAILED_FINDING_KINDS, FINDING_KINDS, INCONCLUSIVE_FINDING_KINDS, finding, findingStatus,
+  isFinding, renderFinding } from '../src/actions/action-findings.js';
+import type { Finding, FindingKind } from '../src/actions/action-findings.js';
+import { fail, inconclusive } from '../src/actions/actor-action-runtime.js';
+import { assertAgentVisibleText } from '../src/composition/agent-visible-contract.js';
+
+// One sample per kind. The sample values are the shapes an executor has:
+// contract names, actor labels, action ids, numbers, statuses. `detail` is
+// the raw text a human may read and must never be rendered.
+const DETAIL = 'RAW-DETAIL locator.click: Timeout 5000ms exceeded [data-testid="secret"]';
+const SAMPLES: { [K in FindingKind]: Finding } = {
+  'control-missing': finding('control-missing', { control: 'buy-now' }),
+  'control-present': finding('control-present', { control: 'admin-link' }),
+  'control-available': finding('control-available', { control: 'buy-now', actor: 'visitor' }),
+  'control-not-ready': finding('control-not-ready', { control: 'buy-now', actors: ['a', 'b'] }),
+  'control-blocked': finding('control-blocked', { control: 'buy-now', detail: DETAIL }),
+  'control-empty': finding('control-empty', { control: 'order-total' }),
+  'control-unreadable': finding('control-unreadable', { control: 'stock', actors: ['a'] }),
+  'value-mismatch': finding('value-mismatch', { control: 'support-status' }),
+  'text-unexpected': finding('text-unexpected', { control: 'support-ticket' }),
+  'value-unstable': finding('value-unstable', { control: 'stock' }),
+  'clients-disagree': finding('clients-disagree', { control: 'stock', actors: ['a', 'b'] }),
+  'number-missing': finding('number-missing', { control: 'order-total' }),
+  'number-mismatch': finding('number-mismatch', { control: 'order-total', observed: 9,
+    expected: { equals: 12 } }),
+  'count-mismatch': finding('count-mismatch', { control: 'order-item', observed: 2, expected: 1 }),
+  'order-mismatch': finding('order-mismatch', { control: 'message-item', actors: ['a', 'b'] }),
+  'entries-missing': finding('entries-missing', { expected: 10, missing: 2, duplicated: 1 }),
+  'actors-with-control': finding('actors-with-control', { control: 'ticket', observed: 2, expected: 1 }),
+  'too-many-per-actor': finding('too-many-per-actor', { control: 'ticket', maxEach: 1 }),
+  'clicks-failed': finding('clicks-failed', { control: 'buy-now', failed: 1, total: 3, detail: DETAIL }),
+  'choice-missing': finding('choice-missing', { control: 'frequency', detail: DETAIL }),
+  'page-timeout': finding('page-timeout', { control: 'buy-now', detail: DETAIL }),
+  'page-crashed': finding('page-crashed', { detail: DETAIL }),
+  'page-error': finding('page-error', { detail: DETAIL }),
+  'app-control-failed': finding('app-control-failed', { mode: 'start', target: 'app-server', detail: DETAIL }),
+  'script-failed': finding('script-failed', { script: 'scripts/seed.js', detail: DETAIL }),
+  'script-invalid': finding('script-invalid', { script: '../outside.js' }),
+  'action-failed': finding('action-failed', { action: 'click' }),
+  'call-refused': finding('call-refused', { action: 'buy', actor: 'buyer', status: 404,
+    operation: { reducer: 'buy_now', path: '/api/buy', method: 'POST' } }),
+  'call-accepted': finding('call-accepted', { action: 'buy', actor: 'guest', status: 200, required: 'refused' }),
+  'call-error': finding('call-error', { action: 'buy', actor: 'guest', status: 500, required: 'refused',
+    operation: null }),
+  'concurrent-calls-mismatch': finding('concurrent-calls-mismatch', { action: 'checkout', expected: 1,
+    accepted: 2, fired: 2, detail: DETAIL }),
+  'interface-missing': finding('interface-missing', { control: 'admin-row', action: 'restock',
+    attribute: 'data-action-input' }),
+  'interface-invalid': finding('interface-invalid', { action: 'restock', attribute: 'data-action-input',
+    missing: ['itemId'], detail: DETAIL }),
+  'replay-accepted': finding('replay-accepted', { actor: 'customer', status: 200, action: 'restock' }),
+  'replay-error': finding('replay-error', { status: 500 }),
+  'forgery-accepted': finding('forgery-accepted', { field: 'userId', status: 201 }),
+  'forgery-error': finding('forgery-error', { status: null }),
+  'message-delivered': finding('message-delivered', { actor: 'other' }),
+  'stock-interface-missing': finding('stock-interface-missing', { detail: DETAIL }),
+  'assertion-without-action': finding('assertion-without-action', { action: 'replayAs' }),
+  'unknown-action': finding('unknown-action', { action: 'refund' }),
+  'action-without-parameters': finding('action-without-parameters', { action: 'refund' }),
+  'no-session': finding('no-session', { actor: 'buyer', action: 'buy' }),
+  'unresolved-action': finding('unresolved-action', { action: 'buy' }),
+  'replay-unavailable': finding('replay-unavailable', { actor: 'customer', detail: DETAIL }),
+  'forgery-unverifiable': finding('forgery-unverifiable', { actor: 'customer', detail: DETAIL }),
+  'not-observed': finding('not-observed', { actor: 'owner' }),
+  'nothing-contended': finding('nothing-contended', { detail: DETAIL }),
+  'no-backend-control': finding('no-backend-control', { target: 'backend-runtime' }),
+  'control-refused': finding('control-refused', { target: 'app-server' }),
+  'database-write-failed': finding('database-write-failed', { detail: DETAIL }),
+  'unsupported-backend': finding('unsupported-backend', { backend: 'stub' }),
+  'app-directory-unknown': finding('app-directory-unknown', {}),
+  'invalid-input': finding('invalid-input', { detail: DETAIL }),
+};
+
+test('every kind renders one agent-visible sentence and never its detail', () => {
+  assert.deepEqual(Object.keys(SAMPLES).sort(), [...FINDING_KINDS]);
+  for (const kind of FINDING_KINDS) {
+    const sentence = renderFinding(SAMPLES[kind]);
+    assert.ok(sentence.length > 8, kind);
+    assert.doesNotMatch(sentence, /RAW-DETAIL|data-testid|Timeout|\d+ms|undefined/, kind);
+    assert.doesNotThrow(() => assertAgentVisibleText(sentence), kind);
+    assert.ok(isFinding(SAMPLES[kind]), kind);
+  }
+});
+
+test('the catalog partitions into application failures and unmeasured outcomes', () => {
+  assert.deepEqual([...FAILED_FINDING_KINDS, ...INCONCLUSIVE_FINDING_KINDS].sort(), [...FINDING_KINDS]);
+  assert.equal(new Set(FINDING_KINDS).size, FINDING_KINDS.length);
+  for (const kind of FAILED_FINDING_KINDS) assert.equal(findingStatus(SAMPLES[kind]), 'failed');
+  for (const kind of INCONCLUSIVE_FINDING_KINDS) assert.equal(findingStatus(SAMPLES[kind]), 'inconclusive');
+  assert.equal(isFinding({ kind: 'made-up', fields: {} }), false);
+  assert.equal(isFinding({ kind: 'control-missing' }), false);
+});
+
+test('executors fail with a finding, and the message is its rendering', () => {
+  assert.throws(() => fail('count-mismatch', { control: 'order-item', observed: 2, expected: 1 }),
+    (error: unknown) => error instanceof ActionApplicationFailure
+      && error.message === '2 order-item entries shown, expected 1'
+      && isFinding(error.details.finding) && error.details.finding.kind === 'count-mismatch');
+  assert.throws(() => inconclusive('not-observed', { actor: 'owner' }),
+    (error: unknown) => error instanceof ActionInconclusive
+      && error.message === 'the message could not be observed reaching owner'
+      && isFinding(error.details.finding) && error.details.finding.kind === 'not-observed');
+});
+
+// The runtime helpers are the only way an executor fails. Two named
+// exceptions wrap an existing finding rather than invent prose: the browser
+// boundary classifies a Playwright error, and a nested step forwards its
+// inner finding.
+test('executors fail only through the runtime helpers', () => {
+  const directory = join(STACK_BENCH_ROOT, 'src', 'actions');
+  const allowed = new Set(['action-contract.ts', 'actor-action-runtime.ts',
+    'browser-action-executors.ts', 'runtime-action-executors.ts']);
+  for (const file of readdirSync(directory).filter(name => name.endsWith('.ts'))) {
+    const source = readFileSync(join(directory, file), 'utf8');
+    const direct = source.match(/new Action(?:ApplicationFailure|Inconclusive)\(/g) ?? [];
+    if (allowed.has(file)) continue;
+    assert.deepEqual(direct, [], `${file} constructs a failure outside the runtime helpers`);
+  }
+  const boundary = readFileSync(join(directory, 'browser-action-executors.ts'), 'utf8');
+  assert.equal((boundary.match(/new ActionApplicationFailure\(/g) ?? []).length, 1);
+  const nested = readFileSync(join(directory, 'runtime-action-executors.ts'), 'utf8');
+  assert.equal((nested.match(/new Action(?:ApplicationFailure|Inconclusive)\(/g) ?? []).length, 2);
+});
+
+test('sample renderings read as behavior, not mechanics', () => {
+  assert.equal(renderFinding(SAMPLES['number-mismatch']),
+    'the order-total control reads 9, expected exactly 12');
+  assert.equal(renderFinding(SAMPLES['call-refused']),
+    'the buy action was refused for buyer (HTTP 404); the application interface names the buy_now reducer or POST /api/buy');
+  assert.equal(renderFinding(SAMPLES['replay-accepted']),
+    'a request replayed as customer, who must be refused, was accepted (HTTP 200)');
+  assert.equal(renderFinding(SAMPLES['page-error']), 'the page did not behave as required');
+  assert.equal(renderFinding(SAMPLES['forgery-error']),
+    'the tampered request failed with no server response instead of a refusal');
+});
diff --git a/tools/stack-bench/tests/actor-transport-action-executors.test.ts b/tools/stack-bench/tests/actor-transport-action-executors.test.ts
new file mode 100644
index 00000000000..f9508b53a0d
--- /dev/null
+++ b/tools/stack-bench/tests/actor-transport-action-executors.test.ts
@@ -0,0 +1,790 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { ACTION_REGISTRY } from '../src/actions/action-catalog.js';
+import { executeAction } from '../src/actions/action-contract.js';
+import {
+  ACTOR_TRANSPORT_ACTION_IMPLEMENTATIONS,
+  createNamedActionsCapability,
+} from '../src/actions/actor-transport-action-executors.js';
+
+type UnknownRecord = Record<string, unknown>;
+type NamedOptions = Parameters<typeof createNamedActionsCapability>[0];
+type Calls = ReturnType<NamedOptions['lastCalls']['get']>;
+type Verification = readonly ['structural' | 'unverified' | 'verified', string];
+
+interface ServiceOverrides {
+  readonly actions?: NamedOptions['actions'];
+  readonly appRoot?: string | null;
+  readonly backend?: string;
+  readonly fetchImpl?: NamedOptions['fetchImpl'];
+  readonly sleep?: (milliseconds: number, signal: AbortSignal) => Promise<void>;
+  readonly spacetime?: { uri: string; mod: string };
+}
+
+interface ProvidedServices {
+  readonly capabilities: Readonly<Record<string, unknown>>;
+  readonly calls: Calls;
+  readonly verification: Verification[];
+}
+
+interface CapturedRequest {
+  readonly options: UnknownRecord;
+  readonly url: string;
+}
+
+const record = (value: unknown): UnknownRecord => {
+  assert(value !== null && typeof value === 'object');
+  return value as UnknownRecord;
+};
+
+const namedResponse = (status: number, ok: boolean) => ({
+  status,
+  ok,
+  text: async (): Promise<string> => '',
+});
+
+function services(
+  actors: ReadonlyMap<string, unknown>,
+  overrides: ServiceOverrides = {},
+): ProvidedServices {
+  const verification: Verification[] = [];
+  let calls: Calls = null;
+  const sleep = overrides.sleep
+    ?? (async (_milliseconds: number, _signal: AbortSignal): Promise<void> => {});
+  const browser = {
+    defaultWithin: 5000,
+    expand: (value: string) => value === '{room:test}' ? 'test-scoped' : value,
+    hyphenatedScopedUser: (name: string) => `${name}-scope`,
+    roomName: (room: string) => `${room}-scope`,
+    scopedUser: (name: string) => `${name}scope`,
+    sleep,
+    testId: (id: string) => `[data-testid="${id}"]`,
+  };
+  const named = createNamedActionsCapability({
+    actions: overrides.actions ?? [{ id: 'checkout', path: '/api/checkout', reducer: 'checkout', args: [] }],
+    backend: overrides.backend ?? 'postgres',
+    url: 'http://app.test',
+    spacetime: overrides.spacetime,
+    lastCalls: { get: () => calls, set: value => { calls = value; } },
+    sleep,
+    fetchImpl: overrides.fetchImpl ?? (async () => ({ status: 200, ok: true, text: async () => '' })),
+    now: (() => { let value = 10; return () => value++; })(),
+  });
+  return {
+    capabilities: {
+      actors: { get: (name: string) => actors.get(name) },
+      'application-files': { root: overrides.appRoot ?? null, expand: browser.expand },
+      'browser-interaction': browser,
+      'named-actions': named,
+      subprocess: { sleep },
+      'transport-observation': {
+        defaultWithin: 5000,
+        expand: browser.expand,
+        sleep,
+        verification: {
+          structural: (message: string) => { verification.push(['structural', message]); },
+          unverified: (message: string) => { verification.push(['unverified', message]); },
+          verified: (message: string) => { verification.push(['verified', message]); },
+        },
+      },
+    },
+    get calls() { return calls; },
+    verification,
+  };
+}
+
+async function run(input: UnknownRecord, provided: ProvidedServices) {
+  const action = String(input.do);
+  return executeAction(ACTION_REGISTRY, action, input, {
+    capabilities: provided.capabilities,
+  });
+}
+
+test('the actor/transport executor registry is exact and capability-scoped', () => {
+  for (const id of Object.keys(ACTOR_TRANSPORT_ACTION_IMPLEMENTATIONS)) {
+    const plugin = ACTION_REGISTRY.get(id);
+    assert(plugin.timeoutMs > 0, id);
+    assert(plugin.capabilities.length > 0, id);
+    assert(plugin.capabilities.every(capability => [
+      'actors', 'application-files', 'browser-interaction', 'named-actions', 'subprocess',
+      'transport-observation',
+    ].includes(capability)), `${id}: ${plugin.capabilities.join(', ')}`);
+  }
+});
+
+test('one named server action maps DOM input symmetrically and verifies its outcome', async () => {
+  const requests: CapturedRequest[] = [];
+  const source = {
+    name: 'source',
+    loc: (testid: string, options: UnknownRecord) => {
+      assert.equal(testid, 'item-card');
+      assert.deepEqual(options, { contains: 'Desk Lamp' });
+      return {
+        waitFor: async (value: unknown) =>
+          assert.deepEqual(value, { state: 'attached', timeout: 5000 }),
+        getAttribute: async (attribute: string) => {
+          assert.equal(attribute, 'data-action-input');
+          return JSON.stringify({ itemId: 'item-42' });
+        },
+      };
+    },
+  };
+  const guest = { name: 'guest' };
+  const provided = services(new Map<string, unknown>([['source', source], ['guest', guest]]), {
+    actions: [{ id: 'buy', path: '/api/items/:item/buy', reducer: 'buy_now', args: [0],
+      params: [{ name: 'itemId', in: 'path', placeholder: ':item' }] }],
+    fetchImpl: async (url, options) => {
+      requests.push({ url, options: options as unknown as UnknownRecord });
+      return namedResponse(401, false);
+    },
+  });
+
+  const called = await run({ do: 'callAction', actor: 'guest', from: 'source', action: 'buy',
+    input: { testid: 'item-card', contains: 'Desk Lamp', attribute: 'data-action-input' },
+    authentication: 'none', settleMs: 0 }, provided);
+  assert.equal(called.status, 'passed');
+  assert.deepEqual(called.observation, { action: 'buy', accepted: false, status: 401 });
+  const request = requests[0];
+  assert(request);
+  assert.equal(request.url, 'http://app.test/api/items/item-42/buy');
+  assert.deepEqual(JSON.parse(String(request.options.body)), {});
+  assert.equal(Object.hasOwn(record(request.options.headers), 'Authorization'), false);
+
+  const checked = await run({ do: 'expectActionOutcome', actor: 'guest', outcome: 'refused' }, provided);
+  assert.equal(checked.status, 'passed');
+  assert.equal(record(checked.observation).classification, 'verified');
+  assert.deepEqual(provided.verification.map(([kind]) => kind), ['verified']);
+});
+
+test('named action input uses declared defaults and a missing route is not mistaken for a refusal', async () => {
+  const actor = (input: UnknownRecord) => ({
+    name: 'customer',
+    loc: () => ({ waitFor: async () => {}, getAttribute: async () => JSON.stringify(input) }),
+  });
+  const action: NonNullable<NamedOptions['actions']>[number] = {
+    id: 'restock', path: '/api/admin/restock', reducer: 'admin_restock', args: [0, 0, 1],
+    params: [{ name: 'itemId', in: 'body' }, { name: 'warehouseId', in: 'body' },
+      { name: 'quantity', in: 'body' }],
+  };
+  const withDefault = services(new Map<string, unknown>([
+    ['customer', actor({ itemId: 1, warehouseId: 2 })],
+  ]), { actions: [action], fetchImpl: async (_url, options) => {
+    assert.deepEqual(JSON.parse(String(options.body)), { itemId: 1, warehouseId: 2, quantity: 1 });
+    return namedResponse(200, true);
+  } });
+  const calledWithDefault = await run({ do: 'callAction', actor: 'customer', action: 'restock',
+    input: { testid: 'row', attribute: 'data-action-input' }, authentication: 'none' }, withDefault);
+  assert.equal(calledWithDefault.status, 'passed');
+
+  const unexpected = services(new Map<string, unknown>([
+    ['customer', actor({ itemId: 1, warehouseId: 2, quantity: 3, extra: true })],
+  ]), { actions: [action] });
+  const rejectedInput = await run({ do: 'callAction', actor: 'customer', action: 'restock',
+    input: { testid: 'row', attribute: 'data-action-input' }, authentication: 'none' }, unexpected);
+  assert.equal(rejectedInput.status, 'failed');
+  assert.match(rejectedInput.summary ?? '', /unexpected extra/);
+
+  const route = { name: 'route', actionCall: { action: 'restock', accepted: true, status: 200 } };
+  const missing = services(new Map<string, unknown>([
+    ['customer', actor({ itemId: 1, warehouseId: 2, quantity: 3 })], ['route', route],
+  ]), {
+    actions: [action], fetchImpl: async () => namedResponse(404, false),
+  });
+  await run({ do: 'callAction', actor: 'customer', action: 'restock',
+    input: { testid: 'row', attribute: 'data-action-input' }, authentication: 'none' }, missing);
+  const checked = await run({ do: 'expectActionOutcome', actor: 'customer', outcome: 'refused' }, missing);
+  assert.equal(checked.status, 'failed');
+  assert.match(checked.summary ?? '', /instead of refusing the caller/);
+  // A 404 names the operation the application interface requires, so a repair
+  // round can create the missing endpoint instead of chasing authorization.
+  assert.match(checked.summary ?? '', /the admin_restock reducer/);
+  assert.match(checked.summary ?? '', /POST \/api\/admin\/restock/);
+
+  const privateResource = await run({ do: 'expectActionOutcome', actor: 'customer', outcome: 'refused',
+    routeProvenBy: 'route' }, missing);
+  assert.equal(privateResource.status, 'passed');
+  assert.equal(record(privateResource.observation).status, 404);
+
+  route.actionCall.action = 'different-action';
+  const unrelatedProof = await run({ do: 'expectActionOutcome', actor: 'customer', outcome: 'refused',
+    routeProvenBy: 'route' }, missing);
+  assert.equal(unrelatedProof.status, 'failed');
+});
+
+test('generic client errors do not prove a named action was refused for authorization', async () => {
+  for (const status of [400, 409, 422]) {
+    const actor = {
+      name: 'customer',
+      actionCall: { action: 'checkout', accepted: false, status },
+    };
+    const provided = services(new Map<string, unknown>([['customer', actor]]));
+    const checked = await run({ do: 'expectActionOutcome', actor: 'customer',
+      outcome: 'refused' }, provided);
+    assert.equal(checked.status, 'failed');
+    assert.match(checked.summary ?? '', /instead of refusing the caller/);
+  }
+});
+
+test('validation refusal accepts only deliberate application rejection statuses', async () => {
+  for (const [status, expected] of [[400, 'passed'], [409, 'passed'], [422, 'passed'],
+    [403, 'failed'], [500, 'failed']] as const) {
+    const actor = { name: 'customer',
+      actionCall: { action: 'cart-set-quantity', accepted: false, status } };
+    const provided = services(new Map<string, unknown>([['customer', actor]]));
+    const checked = await run({ do: 'expectActionOutcome', actor: 'customer',
+      outcome: 'validation-refused' }, provided);
+    assert.equal(checked.status, expected, checked.summary ?? undefined);
+  }
+});
+
+test('an invalid Spacetime u64 input fails before transport and cannot prove refusal', async () => {
+  let requests = 0;
+  const customer = {
+    name: 'customer',
+    loc: () => ({ waitFor: async () => {},
+      getAttribute: async () => JSON.stringify({ itemId: '-1' }) }),
+  };
+  const provided = services(new Map<string, unknown>([['customer', customer]]), {
+    backend: 'spacetime',
+    spacetime: { uri: 'http://127.0.0.1:3000', mod: 'shop' },
+    actions: [{ id: 'buy', path: '/api/items/:id/buy', reducer: 'buy_now', args: [0],
+      params: [{ name: 'itemId', in: 'path', placeholder: ':id', wireType: 'u64' }] }],
+    fetchImpl: async () => { requests += 1; return namedResponse(400, false); },
+  });
+  const called = await run({ do: 'callAction', actor: 'customer', action: 'buy',
+    input: { testid: 'item-card', attribute: 'data-buy-input' },
+    authentication: 'none', settleMs: 0 }, provided);
+  assert.equal(called.status, 'failed');
+  assert.match(called.summary ?? '', /input for the buy action is not valid/);
+  assert.equal(requests, 0);
+
+  const checked = await run({ do: 'expectActionOutcome', actor: 'customer', outcome: 'refused' }, provided);
+  // An assertion whose action never ran measures the scenario, not the app.
+  assert.equal(checked.status, 'inconclusive');
+  assert.match(checked.summary ?? '', /no callAction ran/);
+});
+
+test('account setup preserves scoped credentials and classifies browser failures', async () => {
+  const calls: unknown[][] = [];
+  let signUpVisible = false;
+  const locator = (purpose: string) => ({
+    first() { return this; },
+    or() { return locator(`${purpose}-or-toggle`); },
+    isVisible: async () => purpose !== '[data-testid="signup-username"]' || signUpVisible,
+    fill: async (value: string) => { calls.push([purpose, 'fill', value]); },
+    click: async () => { calls.push([purpose, 'click']); },
+    waitFor: async (options: unknown) => { calls.push([purpose, 'waitFor', options]); },
+  });
+  const actor = {
+    loc: (id: string) => ({
+      waitFor: async (options: unknown) => { calls.push([id, 'waitFor', options]); },
+      click: async (options: unknown) => {
+        calls.push([id, 'click', options]);
+        signUpVisible = true;
+      },
+    }),
+    page: { locator: (selector: string) => locator(selector) },
+  };
+  const passed = await run({ do: 'signUp', actor: 'a', name: 'Alice' },
+    services(new Map<string, unknown>([['a', actor]])));
+  assert.equal(passed.status, 'passed');
+  assert.equal(record(passed.observation).user, 'Alicescope');
+  assert.deepEqual(calls.slice(0, 2), [
+    ['[data-testid="signup-username"]-or-toggle', 'waitFor', { state: 'visible', timeout: 5000 }],
+    ['signin-toggle', 'click', { timeout: 5000 }],
+  ]);
+  assert(calls.some(call => call[2] === 'pw-Alicescope'));
+
+  const timeout = Object.assign(new Error('locator.fill: timed out'), { name: 'TimeoutError' });
+  const timedOutActor = { page: { locator: () => ({ first() { return this; },
+    isVisible: async () => true,
+    fill: async () => { throw timeout; } }) } };
+  const timedOut = await run({ do: 'signUp', actor: 'a', name: 'Alice' },
+    services(new Map<string, unknown>([['a', timedOutActor]])));
+  assert.equal(timedOut.status, 'failed');
+  assert.equal(timedOut.code, 'application_failure');
+
+  const buggyActor = { page: { locator: () => ({ first() { return this; },
+    isVisible: async () => true,
+    fill: async () => { throw new TypeError('executor bug'); } }) } };
+  const bug = await run({ do: 'signUp', actor: 'a', name: 'Alice' },
+    services(new Map<string, unknown>([['a', buggyActor]])));
+  assert.equal(bug.status, 'harness_failure');
+  assert.equal(bug.code, 'unclassified_exception');
+});
+
+test('sign in waits for a rendered toggle instead of silently missing the form', async () => {
+  const calls: unknown[][] = [];
+  let formVisible = false;
+  const username = {
+    first() { return this; },
+    or() { return { first() { return this; },
+      waitFor: async (options: unknown) => { calls.push(['form-or-toggle', 'waitFor', options]); } }; },
+    isVisible: async () => formVisible,
+    waitFor: async (options: unknown) => {
+      calls.push(['username', 'waitFor', options]);
+      assert.equal(formVisible, true);
+    },
+    fill: async (value: string) => { calls.push(['username', 'fill', value]); },
+  };
+  const fields: Record<string, unknown> = {
+    '[data-testid="signin-username"]': username,
+    '[data-testid="signin-password"]': { first() { return this; },
+      fill: async (value: string) => { calls.push(['password', 'fill', value]); } },
+    '[data-testid="signin-submit"]': { first() { return this; },
+      click: async () => { calls.push(['submit', 'click']); } },
+    '[data-testid="current-user"]': { first() { return this; },
+      waitFor: async (options: unknown) => { calls.push(['current-user', 'waitFor', options]); } },
+  };
+  const toggle = {
+    waitFor: async (options: unknown) => { calls.push(['toggle', 'waitFor', options]); },
+    click: async (options: unknown) => {
+      calls.push(['toggle', 'click', options]);
+      formVisible = true;
+    },
+  };
+  const actor = {
+    loc: (id: string) => {
+      assert.equal(id, 'signin-toggle');
+      return toggle;
+    },
+    page: { locator: (selector: string) => fields[selector] },
+  };
+
+  const result = await run({ do: 'signIn', actor: 'a', name: 'admin', password: 'secret', exact: true },
+    services(new Map<string, unknown>([['a', actor]])));
+
+  assert.equal(result.status, 'passed');
+  assert.deepEqual(calls.slice(0, 3), [
+    ['form-or-toggle', 'waitFor', { state: 'visible', timeout: 5000 }],
+    ['toggle', 'click', { timeout: 5000 }],
+    ['username', 'waitFor', { state: 'visible', timeout: 5000 }],
+  ]);
+  assert(calls.some(call => call[0] === 'username' && call[2] === 'admin'));
+  assert(calls.some(call => call[0] === 'password' && call[2] === 'secret'));
+});
+
+test('account restoration does not accept the wrong signed-in user', async () => {
+  const currentUser = {
+    first() { return this; },
+    isVisible: async () => true,
+    innerText: async () => 'signed in as another-user',
+  };
+  const actor = {
+    name: 'browser-a',
+    page: { locator: () => currentUser },
+  };
+  const result = await run({ do: 'ensureSignedIn', actor: 'a', name: 'alice' },
+    services(new Map<string, unknown>([['a', actor]])));
+  assert.equal(result.status, 'harness_failure');
+  assert.match(result.summary ?? '', /different account/);
+});
+
+test('an unreplayable WebSocket write cannot earn server-side forgery credit', async () => {
+  const actor = {
+    name: 'a',
+    lastWrite: null,
+    lastWsWrite: { event: 'send_message', body: { content: 'hello' } },
+  };
+  const provided = services(new Map<string, unknown>([['a', actor], ['victim', {}]]));
+  const forged = await run({ do: 'forgeWrite', actor: 'a', fromActor: 'victim', settleMs: 0 }, provided);
+  assert.equal(forged.status, 'passed');
+  assert.deepEqual(forged.observation, { attempted: false, classification: 'unverified' });
+
+  const checked = await run({ do: 'expectForgeryRejected', actor: 'a' }, provided);
+  assert.equal(checked.status, 'inconclusive');
+  assert.match(checked.summary ?? '', /could not verify the forgery refusal/);
+  assert.deepEqual(provided.verification.map(([kind]) => kind), ['unverified']);
+});
+
+test('missing transport evidence cannot earn server-side forgery credit', async () => {
+  const actor = { name: 'a', lastWrite: null, lastWsWrite: null };
+  const provided = services(new Map<string, unknown>([['a', actor], ['victim', {}]]));
+  const forged = await run({ do: 'forgeWrite', actor: 'a', fromActor: 'victim', settleMs: 0 },
+    provided);
+  assert.equal(forged.status, 'passed');
+  assert.equal(record(forged.observation).classification, 'unverified');
+
+  const checked = await run({ do: 'expectForgeryRejected', actor: 'a' }, provided);
+  assert.equal(checked.status, 'inconclusive');
+  assert.match(checked.summary ?? '', /could not verify the forgery refusal/);
+});
+
+test('a negative delivery check observes its full window before passing', async () => {
+  const delays: number[] = [];
+  const actor = { name: 'outsider', wasSent: () => false };
+  const provided = services(new Map<string, unknown>([['outsider', actor]]), {
+    sleep: async milliseconds => { delays.push(milliseconds); },
+  });
+  const checked = await run({ do: 'expectNotReceived', actor: 'outsider', contains: 'secret',
+    within: 1234 }, provided);
+  assert.equal(checked.status, 'passed');
+  assert.deepEqual(delays, [1234]);
+});
+
+test('a delivery check is inconclusive when application traffic is not observable', async () => {
+  const actor = { name: 'owner', wasSent: () => false };
+  const provided = services(new Map<string, unknown>([['owner', actor]]), {
+    sleep: async () => undefined,
+  });
+  const checked = await run({ do: 'expectReceived', actor: 'owner', contains: 'private message',
+    within: 1 }, provided);
+  assert.equal(checked.status, 'inconclusive');
+});
+
+test('replay retargeting maps nested entity ids by field and relationship depth', async () => {
+  const requests: CapturedRequest[] = [];
+  const actor = (name: string, received: string[], writes: UnknownRecord[]) => ({
+    name,
+    received,
+    writes,
+    page: {
+      request: { fetch: async (url: string, options: UnknownRecord) => {
+        requests.push({ url, options });
+        return { status: () => 200, ok: () => true };
+      } },
+    },
+  });
+  const staff = actor('staff', [[
+    'data: {"orders":[{"_id":"order-desk","userId":"staff-user",',
+    'data: "items":[{"itemId":"item-desk","name":"Desk Lamp"}]}]}',
+    '',
+  ].join('\n')], [{
+    url: 'http://app.test/api/fulfilment/order-desk/ship', method: 'POST',
+    headers: { authorization: 'Bearer staff-token' }, body: null,
+  }]);
+  const customer = actor('customer', [JSON.stringify({ order: {
+    _id: 'order-webcam', userId: 'customer-user',
+    items: [{ itemId: 'item-webcam', name: 'Webcam' }],
+  } })], [{
+    url: 'http://app.test/api/items/item-webcam/buy', method: 'POST',
+    headers: { authorization: 'Bearer customer-token' }, body: null,
+  }]);
+  const provided = services(new Map<string, unknown>([
+    ['staff', staff],
+    ['customer', customer],
+  ]));
+  const replayed = await run({ do: 'replayAs', actor: 'customer', from: 'staff', match: 'ship',
+    swap: { find: 'Desk Lamp', with: 'Webcam' }, settleMs: 0 }, provided);
+  assert.equal(replayed.status, 'passed');
+  assert.deepEqual(replayed.observation,
+    { attempted: true, accepted: true, status: 200 });
+  const request = requests[0];
+  assert(request);
+  assert.equal(request.url, 'http://app.test/api/fulfilment/order-webcam/ship');
+  assert.equal(record(request.options.headers).authorization, 'Bearer customer-token');
+
+  const rejected = await run({ do: 'expectReplayRejected', actor: 'customer' }, provided);
+  assert.equal(rejected.status, 'failed');
+  assert.match(rejected.summary ?? '', /who must be refused, was accepted/);
+});
+
+test('replay decodes Socket.IO entities and uses the target actor browser cookie', async () => {
+  const requests: CapturedRequest[] = [];
+  const actor = (name: string, received: string[], writes: UnknownRecord[], sid: string) => ({
+    name,
+    received,
+    writes,
+    context: { cookies: async () => [{ name: 'sid', value: sid }] },
+    page: {
+      evaluate: async () => null,
+      request: { fetch: async (url: string, options: UnknownRecord) => {
+        requests.push({ url, options });
+        return { status: () => 403, ok: () => false };
+      } },
+    },
+  });
+  const staff = actor('staff', [JSON.stringify({ queue: [{
+    id: 41, items: [{ itemId: 7, name: 'Desk Lamp' }],
+  }] })], [{
+    url: 'http://app.test/api/fulfilment/ship', method: 'POST',
+    headers: { 'content-type': 'application/json' }, body: { orderId: 41 },
+  }], 'staff-session');
+  const customer = actor('customer', [
+    JSON.stringify({ items: [{ id: 8, name: 'Webcam' }] }),
+    `42["orders:update",${JSON.stringify({ orders: [{
+      id: 52, items: [{ orderItemId: 61, itemId: 8, name: 'Webcam' }],
+    }] })}]`,
+  ], [{
+    url: 'http://app.test/api/items/8/buy', method: 'POST',
+    headers: { 'content-type': 'application/json' }, body: null,
+  }], 'customer-session');
+  const provided = services(new Map<string, unknown>([
+    ['staff', staff],
+    ['customer', customer],
+  ]));
+
+  const replayed = await run({ do: 'replayAs', actor: 'customer', from: 'staff', match: 'ship',
+    swap: { find: 'Desk Lamp', with: 'Webcam' }, settleMs: 0 }, provided);
+  assert.equal(replayed.status, 'passed');
+  assert.deepEqual(replayed.observation,
+    { attempted: true, accepted: false, status: 403 });
+  const request = requests[0];
+  assert(request);
+  assert.deepEqual(JSON.parse(String(request.options.data)), { orderId: 52 });
+  assert.match(String(record(request.options.headers).cookie), /sid=customer-session/);
+
+  const rejected = await run({ do: 'expectReplayRejected', actor: 'customer' }, provided);
+  assert.equal(rejected.status, 'passed');
+  assert.equal(record(rejected.observation).classification, 'verified');
+});
+
+test('replay uses an authenticated named action when the source write is an opaque WebSocket call', async () => {
+  const requests: CapturedRequest[] = [];
+  const source = { name: 'staff', writes: [], received: [],
+    lastWsWrite: { event: 'binary reducer call', body: {} },
+    loc: (testid: string, options: UnknownRecord) => {
+      assert.equal(testid, 'order-item');
+      assert.deepEqual(options, { contains: 'Webcam' });
+      return {
+        waitFor: async (value: unknown) =>
+          assert.deepEqual(value, { state: 'visible', timeout: 5000 }),
+        getAttribute: async (attribute: string) => {
+          assert.equal(attribute, 'data-entity-id');
+          return '52';
+        },
+      };
+    } };
+  const customer = {
+    name: 'customer', writes: [], received: [],
+    context: { cookies: async () => [] },
+    page: { evaluate: async () => ['eyJcustomer.token.value'] },
+  };
+  const provided = services(new Map<string, unknown>([
+    ['staff', source],
+    ['customer', customer],
+  ]), {
+    backend: 'spacetime',
+    actions: [{ id: 'ship', path: '/api/fulfilment/ship', reducer: 'ship_order', args: [0] }],
+    spacetime: { uri: 'http://127.0.0.1:3000', mod: 'shop' },
+    fetchImpl: async (url, options) => {
+      requests.push({ url, options: options as unknown as UnknownRecord });
+      return namedResponse(530, false);
+    },
+  });
+
+  const replayed = await run({ do: 'replayAs', actor: 'customer', from: 'staff', match: 'ship',
+    swap: { find: '52', with: '53' },
+    namedAction: { id: 'ship', path: '/api/fulfilment/ship', reducer: 'ship_order', args: [0] },
+    namedTarget: { testid: 'order-item', contains: 'Webcam',
+      attribute: 'data-entity-id', valueType: 'number' }, settleMs: 0 }, provided);
+  assert.equal(replayed.status, 'passed');
+  assert.deepEqual(replayed.observation,
+    { attempted: true, accepted: false, status: 530, namedAction: 'ship' });
+  const request = requests[0];
+  assert(request);
+  assert.equal(request.url, 'http://127.0.0.1:3000/v1/database/shop/call/ship_order');
+  assert.equal(request.options.body, '[53]');
+  assert.equal(record(request.options.headers).Authorization, 'Bearer eyJcustomer.token.value');
+
+  const rejected = await run({ do: 'expectReplayRejected', actor: 'customer' }, provided);
+  assert.equal(rejected.status, 'passed');
+  assert.equal(record(rejected.observation).classification, 'verified');
+});
+
+test('named replay can replace a declared literal without an undeclared UI attribute', async () => {
+  const requests: CapturedRequest[] = [];
+  const source = { name: 'staff', writes: [], received: [],
+    lastWsWrite: { event: 'binary reducer call', body: {} } };
+  const customer = {
+    name: 'customer', writes: [], received: [],
+    context: { cookies: async () => [] },
+    page: { evaluate: async () => ['customer-token'] },
+  };
+  const provided = services(new Map<string, unknown>([
+    ['staff', source],
+    ['customer', customer],
+  ]), {
+    backend: 'spacetime',
+    spacetime: { uri: 'http://127.0.0.1:3000', mod: 'shop' },
+    fetchImpl: async (url, options) => {
+      requests.push({ url, options: options as unknown as UnknownRecord });
+      return namedResponse(530, false);
+    },
+  });
+
+  const replayed = await run({ do: 'replayAs', actor: 'customer', from: 'staff', match: 'SAVE10',
+    swap: { find: 'SAVE10', with: 'HACK10' },
+    namedAction: { id: 'createPromotion', path: '/api/promotions', reducer: 'create_promotion',
+      args: ['SAVE10', 10] }, settleMs: 0 }, provided);
+  assert.equal(replayed.status, 'passed');
+  assert.equal(requests[0]?.options.body, '["HACK10",10]');
+});
+
+test('a missing or malformed declared replay target is an application failure', async () => {
+  for (const [value, message] of [[null, /exposes no data-entity-id/],
+    ['not-an-id', /data-entity-id for the ship action is not valid/]] as const) {
+    const source = { name: 'staff', writes: [], received: [],
+      loc: () => ({ waitFor: async () => undefined, getAttribute: async () => value }) };
+    const customer = { name: 'customer', writes: [], received: [] };
+    const provided = services(new Map<string, unknown>([
+      ['staff', source],
+      ['customer', customer],
+    ]));
+    const replayed = await run({ do: 'replayAs', actor: 'customer', from: 'staff', match: 'ship',
+      namedAction: { id: 'ship', path: '/api/ship', reducer: 'ship', args: [0] },
+      namedTarget: { testid: 'order', attribute: 'data-entity-id', valueType: 'number' },
+      settleMs: 0 }, provided);
+    assert.equal(replayed.status, 'failed');
+    assert.match(replayed.summary ?? '', message);
+  }
+});
+
+test('only an explicit authorization response proves a replay refusal', async () => {
+  for (const status of [0, 302, 400, 404, 422, 503]) {
+    const actor = {
+      name: 'customer',
+      replay: { accepted: false, status, method: 'POST', url: '/ship' },
+    };
+    const provided = services(new Map<string, unknown>([['customer', actor]]));
+    const checked = await run({ do: 'expectReplayRejected', actor: 'customer' }, provided);
+    assert.equal(checked.status, 'failed');
+    assert.match(checked.summary ?? '', /instead of a refusal/);
+    assert.equal(provided.verification.length, 0);
+  }
+});
+
+test('a private-resource replay may explicitly treat not found as refusal', async () => {
+  const actor = { name: 'customer',
+    replay: { accepted: false, status: 404, method: 'POST', url: '/support/1/replies' } };
+  const provided = services(new Map<string, unknown>([['customer', actor]]));
+  const checked = await run({ do: 'expectReplayRejected', actor: 'customer',
+    allowNotFound: true }, provided);
+  assert.equal(checked.status, 'passed');
+});
+
+test('only an explicit authorization response proves a forged-write refusal', async () => {
+  for (const status of [400, 404, 422, 500]) {
+    const actor = {
+      name: 'attacker',
+      forge: { accepted: false, status, tamperedField: 'userId', reason: 'tampered request sent' },
+    };
+    const provided = services(new Map<string, unknown>([['attacker', actor]]));
+    const checked = await run({ do: 'expectForgeryRejected', actor: 'attacker' }, provided);
+    assert.equal(checked.status, 'failed');
+    assert.match(checked.summary ?? '', /instead of a refusal/);
+    assert.equal(provided.verification.length, 0);
+  }
+});
+
+test('a missing numeric literal makes the server-side replay check inconclusive', async () => {
+  const requests: unknown[][] = [];
+  const buyer = {
+    name: 'buyer',
+    received: [JSON.stringify({ items: [{ _id: 'item-espresso', name: 'Espresso Machine', price: 449 }] })],
+    writes: [{
+      url: 'http://app.test/api/items/item-espresso/buy', method: 'POST',
+      headers: { authorization: 'Bearer buyer-token' }, body: null,
+    }],
+    page: { request: { fetch: async (...args: unknown[]) => { requests.push(args); } } },
+  };
+  const provided = services(new Map<string, unknown>([['buyer', buyer]]));
+  const replayed = await run({ do: 'replayAs', actor: 'buyer', from: 'buyer', match: 'buy',
+    swap: { find: '449', with: '1' }, settleMs: 0 }, provided);
+  assert.equal(replayed.status, 'inconclusive');
+  assert.match(replayed.summary ?? '', /could not issue the replay as/);
+  assert.equal(requests.length, 0);
+});
+
+test('named calls preserve actor credentials, result state, and application assertions', async () => {
+  const requests: CapturedRequest[] = [];
+  const actor = (name: string) => ({
+    name,
+    context: { cookies: async () => [{ name: 'sid', value: name }] },
+    page: { evaluate: async () => null },
+  });
+  const provided = services(new Map<string, unknown>([
+    ['a', actor('a')],
+    ['b', actor('b')],
+  ]), {
+    fetchImpl: async (url, options) => {
+      requests.push({ url, options: options as unknown as UnknownRecord });
+      return { status: 200, ok: true, text: async () => '' };
+    },
+  });
+  const called = await run({ do: 'callConcurrently', actors: ['a', 'b'],
+    action: 'checkout', settleMs: 0 }, provided);
+  assert.equal(called.status, 'passed');
+  assert.equal(record(called.observation).fired, 2);
+  assert.equal(requests.length, 2);
+  const firstRequest = requests[0];
+  assert(firstRequest);
+  assert.match(String(record(firstRequest.options.headers).Cookie), /sid=a/);
+  assert.equal(provided.calls?.action, 'checkout');
+
+  const accepted = await run({ do: 'expectCallOutcomes', accepted: 2 }, provided);
+  assert.equal(accepted.status, 'passed');
+  const mismatch = await run({ do: 'expectCallOutcomes', accepted: 1 }, provided);
+  assert.equal(mismatch.status, 'failed');
+  assert.match(mismatch.summary ?? '', /calls were accepted, expected 1/);
+});
+
+test('named calls accept opaque bearer tokens stored under an explicit token key', async () => {
+  const requests: CapturedRequest[] = [];
+  const storage = (entries: ReadonlyArray<readonly [string, string]>) => ({
+    length: entries.length,
+    key: (index: number) => entries[index]?.[0] ?? null,
+    getItem: (key: string) =>
+      entries.find(([candidate]) => candidate === key)?.[1] ?? null,
+  });
+  const actor = (name: string) => ({
+    name,
+    context: { cookies: async () => [] },
+    page: { evaluate: async (browserFunction: () => unknown) => Function('localStorage', 'sessionStorage',
+      `return (${browserFunction.toString()})()`)(
+      storage([['theme', 'dark'], ['pgshop_token', `${name}-opaque-session-token-value`]]),
+      storage([])) },
+  });
+  const provided = services(new Map<string, unknown>([
+    ['a', actor('a')],
+    ['b', actor('b')],
+  ]), {
+    fetchImpl: async (url, options) => {
+      requests.push({ url, options: options as unknown as UnknownRecord });
+      return { status: 200, ok: true, text: async () => '' };
+    },
+  });
+  const called = await run({ do: 'callConcurrently', actors: ['a', 'b'],
+    action: 'checkout', settleMs: 0 }, provided);
+  assert.equal(called.status, 'passed');
+  assert.equal(requests.length, 2);
+  const firstRequest = requests[0];
+  const secondRequest = requests[1];
+  assert(firstRequest && secondRequest);
+  assert.equal(record(firstRequest.options.headers).Authorization,
+    'Bearer a-opaque-session-token-value');
+  assert.equal(record(secondRequest.options.headers).Authorization,
+    'Bearer b-opaque-session-token-value');
+});
+
+test('missing named actions and application roots stay inconclusive', async () => {
+  const actor = { context: { cookies: async () => [{ name: 'sid', value: 'a' }] },
+    page: { evaluate: async () => null } };
+  const missingAction = await run({ do: 'callConcurrently', actors: ['a', 'b'],
+    action: 'missing', settleMs: 0 },
+  services(new Map<string, unknown>([['a', actor], ['b', actor]]), { actions: [] }));
+  assert.equal(missingAction.status, 'inconclusive');
+  assert.match(missingAction.summary ?? '', /track names no missing action/);
+
+  const missingRoot = await run({ do: 'runScript', script: 'backoffice.mjs', args: [] },
+    services(new Map<string, unknown>()));
+  assert.equal(missingRoot.status, 'inconclusive');
+  assert.match(missingRoot.summary ?? '', /application directory is unknown/);
+});
+
+test('an application-owned script timeout is a scored application failure', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-script-timeout-'));
+  try {
+    writeFileSync(join(root, 'slow.mjs'), 'await new Promise(resolve => setTimeout(resolve, 10000));\n');
+    const result = await run({ do: 'runScript', script: 'slow.mjs', args: [], timeoutMs: 20 },
+      services(new Map<string, unknown>(), { appRoot: root }));
+    assert.equal(result.status, 'failed');
+    assert.match(result.summary ?? '', /failed|timed out/i);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/agent-adapters.test.ts b/tools/stack-bench/tests/agent-adapters.test.ts
new file mode 100644
index 00000000000..1f9863c212c
--- /dev/null
+++ b/tools/stack-bench/tests/agent-adapters.test.ts
@@ -0,0 +1,195 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { AGENT_ADAPTER_SCHEMA_VERSION, agentRecipeIdentity, agentRequestArgv,
+  createAgentAdapterRegistry, defineAgentAdapter }
+  from '../src/agents/agent-adapter-contract.js';
+import { agentSessionFailure, validateAgentResult }
+  from '../src/agents/agent-result-contract.js';
+import { AGENT_ADAPTER_REGISTRY, agentAdapterIdentity }
+  from '../src/agents/agent-adapters.js';
+import type { AgentRequest } from '../src/agents/agent-adapter-contract.js';
+import type { PricingAuthority } from '../src/evidence/pricing-authority.js';
+
+const request: AgentRequest = { mode: 'build', level: 1, app: 'C:\\bench\\app', backend: 'stub',
+  track: 'loop', runIndex: 0, model: 'deterministic', guidance: 'prescribed', skills: null };
+const pricing: PricingAuthority = { unit: 'USD-per-million-tokens', rates: {
+  input: 3, output: 15, cacheWrite5m: 3.75, cacheWrite1h: 6, cacheRead: 0.3,
+} };
+
+test('built-in agent adapters are statically registered and content identified', () => {
+  assert.deepEqual(AGENT_ADAPTER_REGISTRY.ids,
+    ['claude-code', 'deterministic', 'fault-injection', 'reference-fixture']);
+  for (const id of AGENT_ADAPTER_REGISTRY.ids) {
+    const identity = agentAdapterIdentity(AGENT_ADAPTER_REGISTRY.get(id));
+    assert.equal(identity.id, id);
+    const expectedVersion = id === 'claude-code' ? '1.17.2'
+      : id === 'reference-fixture' ? '1.4.0'
+      : id === 'deterministic' ? '1.3.0' : '1.2.0';
+    assert.equal(identity.version, expectedVersion);
+    assert.match(identity.sha256, /^[a-f0-9]{64}$/);
+  }
+  assert.deepEqual(AGENT_ADAPTER_REGISTRY.get('claude-code').requiredExecutables, ['claude']);
+  assert.equal(AGENT_ADAPTER_REGISTRY.get('claude-code').usesStackSkills, true);
+  assert.deepEqual(AGENT_ADAPTER_REGISTRY.get('claude-code').credentialEnvironmentVariables,
+    ['CLAUDE_CODE_OAUTH_TOKEN']);
+  assert(AGENT_ADAPTER_REGISTRY.get('claude-code').modes.includes('resume'));
+  assert(AGENT_ADAPTER_REGISTRY.get('claude-code').deadlineMs
+  > AGENT_ADAPTER_REGISTRY.get('deterministic').deadlineMs);
+  const statusCommand = AGENT_ADAPTER_REGISTRY.get('claude-code').credentialStatusCommand;
+  assert(statusCommand);
+  assert.equal(statusCommand[0], 'node');
+  const statusScript = statusCommand.at(-1);
+  assert(statusScript);
+  assert.match(statusScript, /loggedIn===true/);
+  assert.match(statusScript, /oauth_token/);
+});
+
+test('requests are normalized and unsupported modes fail before launch', () => {
+  const deterministic = AGENT_ADAPTER_REGISTRY.get('deterministic');
+  assert.deepEqual(agentRequestArgv(deterministic, request).slice(1, 7),
+    ['--mode', 'build', '--backend', 'stub', '--level', '1']);
+  assert.deepEqual(agentRequestArgv(AGENT_ADAPTER_REGISTRY.get('claude-code'),
+    { ...request, maxBudgetUsd: 12.5 }).slice(-2),
+    ['--max-budget-usd', '12.5']);
+  const priced = agentRequestArgv(AGENT_ADAPTER_REGISTRY.get('claude-code'),
+    { ...request, pricing, maxBudgetUsd: 12.5 });
+  assert.equal(priced[priced.indexOf('--pricing-json') + 1], JSON.stringify(pricing));
+  const guidanceDocument = { path: 'backends/stub.md', sha256: 'a'.repeat(64), bytes: 12 };
+  const withDocument = agentRequestArgv(deterministic, { ...request, guidanceDocument });
+  assert.equal(withDocument[withDocument.indexOf('--guidance-document-json') + 1],
+    JSON.stringify(guidanceDocument));
+  const withoutSkills = agentRequestArgv(deterministic, { ...request, skills: [] });
+  assert.equal(withoutSkills[withoutSkills.indexOf('--skills-json') + 1], '[]');
+  const skillIdentity = { ids: [], sha256: 'a'.repeat(64), bytes: 0 };
+  const withSkillIdentity = agentRequestArgv(deterministic,
+    { ...request, skills: ['ignored-duplicate'], skillIdentity });
+  assert.equal(withSkillIdentity[withSkillIdentity.indexOf('--skill-identity-json') + 1],
+    JSON.stringify(skillIdentity));
+  assert.equal(withSkillIdentity.includes('--skills-json'), false);
+  const recipeTask = { schemaVersion: 1, recipe: {}, selection: {}, task: {} };
+  const withRecipeTask = agentRequestArgv(deterministic,
+    { ...request, recipe: 'ecommerce.sequential-l1@2.5.0', recipeTask });
+  assert.equal(withRecipeTask[withRecipeTask.indexOf('--recipe') + 1],
+    'ecommerce.sequential-l1@2.5.0');
+  assert.equal(withRecipeTask[withRecipeTask.indexOf('--recipe-task-json') + 1],
+    JSON.stringify(recipeTask));
+  assert.equal(agentRequestArgv(deterministic, { ...request, maxBudgetUsd: 12.5 })
+    .includes('--max-budget-usd'), false);
+  const reference = AGENT_ADAPTER_REGISTRY.get('reference-fixture');
+  assert.doesNotThrow(() => agentRequestArgv(reference, { ...request, mode: 'upgrade' }));
+  assert.doesNotThrow(() => agentRequestArgv(reference, { ...request, mode: 'fix' }));
+});
+
+test('a campaign-bound task supplies the exact recipe when no explicit recipe exists', () => {
+  const recipeTask = { schemaVersion: 3,
+    recipe: { id: 'ecommerce.sequential-l1', version: '2.5.0' },
+    selection: {}, task: {} };
+  const recipe = agentRecipeIdentity(null, recipeTask);
+  assert.equal(recipe, 'ecommerce.sequential-l1@2.5.0');
+  const argv = agentRequestArgv(AGENT_ADAPTER_REGISTRY.get('reference-fixture'),
+    { ...request, recipe, recipeTask });
+  assert.equal(argv[argv.indexOf('--recipe') + 1], 'ecommerce.sequential-l1@2.5.0');
+  assert.throws(() => agentRecipeIdentity('ecommerce.sequential-l2@1.6.0', recipeTask),
+    /does not match bound task/);
+});
+
+test('completion validation rejects wrong identity and malformed usage', () => {
+  const nativeRequest: AgentRequest = { ...request,
+    adapterCostLimit: 'native', maxBudgetUsd: 1, pricing };
+  const receipt = { schemaVersion: 3, source: 'credential-broker', exact: true, estimatedRequests: 0,
+    estimatedByReason: { 'no-usage': 0, 'response-aborted': 0, 'upstream-error': 0 }, model: request.model,
+    maxBudgetUsd: 1, costUsd: 0.0018, cliCostUsd: 0.0018, calculatedCostUsd: 0.0018,
+    usage: { input: 100, output: 100, cacheWrite5m: 0, cacheWrite1h: 0, cacheRead: 0 },
+    pricingRates: { input: 3, output: 15, cacheWrite5m: 3.75, cacheWrite1h: 6,
+      cacheRead: 0.3 },
+    complete: true, reconciled: true, error: null };
+  const valid = { appDir: request.app, mode: 'build', level: 1, ok: true,
+    sessionId: 'session-1', costUsd: 0.0018, tokens: 3, outputTokens: 1, turns: 1,
+    promptBytes: 20, durationMs: 10, setup: { isolation: { mode: 'test' },
+      resources: { buildContainerMemory: {
+        currentBytes: 100, peakBytes: 200, limitBytes: 400,
+      }, memoryProbeError: null } },
+    usage: { input: 1, output: 1, cacheWrite: 1, cacheRead: 0 },
+    costReceipts: [{ invocation: 1, receipt }] };
+  const normalized = validateAgentResult(valid, nativeRequest);
+  assert.equal(normalized.backend, request.backend);
+  assert.equal(normalized.model, request.model);
+  assert.deepEqual(normalized.transcript, { kind: 'provider-session', id: 'session-1' });
+  assert.deepEqual(normalized.costReceipts, valid.costReceipts);
+  assert.deepEqual(normalized.setup.resources, valid.setup.resources);
+  assert.equal(normalized.costComplete, true);
+  assert.throws(() => validateAgentResult({ ...valid, appDir: 'C:\\other' }, nativeRequest), /appDir/);
+  assert.throws(() => validateAgentResult({ ...valid, usage: { ...valid.usage, input: -1 } }, nativeRequest),
+    /usage.input/);
+  assert.throws(() => validateAgentResult({ ...valid, sessionId: undefined }, nativeRequest), /sessionId/);
+  assert.throws(() => validateAgentResult({ ...valid,
+    costReceipts: [{ invocation: 1, receipt: { ...receipt, model: 'wrong' } }] }, nativeRequest),
+  /costReceipts/);
+  assert.throws(() => validateAgentResult({ ...valid, costReceipts: [] }, nativeRequest),
+    /requires complete reconciled broker cost proof/);
+  assert.doesNotThrow(() => validateAgentResult({ ...valid, costUsd: 0.00185 }, nativeRequest));
+  assert.throws(() => validateAgentResult({ ...valid, costUsd: 0.01 }, nativeRequest),
+    /requires complete reconciled broker cost proof/);
+  assert.throws(() => validateAgentResult(valid, { ...nativeRequest,
+    pricing: { ...pricing, rates: { ...pricing.rates, output: 12 } } }),
+  /requires complete reconciled broker cost proof/);
+  assert.throws(() => validateAgentResult({ ...valid,
+    costReceipts: [{ invocation: 1, receipt: { ...receipt, complete: false,
+      reconciled: false, error: 'incomplete' } }] }, nativeRequest),
+  /complete reconciled broker cost proof/);
+  const failed = validateAgentResult({ ...valid, ok: false,
+    costReceipts: [{ invocation: 1, receipt: { ...receipt, complete: false,
+      reconciled: false, error: 'incomplete' } }] }, nativeRequest);
+  assert.equal(failed.costComplete, false);
+  const failedReceipt = failed.costReceipts[0];
+  assert(failedReceipt);
+  assert.equal(failedReceipt.receipt.error, 'incomplete');
+  assert.doesNotThrow(() => validateAgentResult({ ...valid, costUsd: 0, costReceipts: [] },
+    { ...request, adapterCostLimit: 'non-billable' }));
+  assert.equal(validateAgentResult({ ...valid, costUsd: 0, costReceipts: [] },
+    { ...request, adapterCostLimit: 'unsupported' }).costComplete, false);
+});
+
+test('provider failures stay separate from harness failures', () => {
+  assert.equal(agentSessionFailure({ ok: true, sessionId: 'session-1' }), null);
+  assert.deepEqual(agentSessionFailure({ ok: false, sessionId: 'session-2',
+    providerMetadata: { failureCode: 'provider-session-error' } }), {
+    kind: 'provider_failure', phase: 'coding-session', reason: 'provider-session-error',
+    provider: null,
+    appFailures: [], inconclusive: [], harnessFailures: [],
+  });
+  const missingSession = agentSessionFailure({ ok: true, sessionId: null });
+  assert(missingSession);
+  assert.equal(missingSession.reason, 'coding session did not run');
+  const failedSession = agentSessionFailure({ ok: false, sessionId: null,
+    providerMetadata: { failureCode: 'coding-session-no-output',
+      diagnostic: 'coding session failed: permission denied' } });
+  assert(failedSession);
+  assert.equal(failedSession.kind, 'harness_failure');
+  assert.equal(failedSession.reason, 'coding session failed: permission denied');
+});
+
+test('malformed and duplicate agent adapters fail at registry construction', () => {
+  const source = { schemaVersion: AGENT_ADAPTER_SCHEMA_VERSION, id: 'fake', version: '1.0.0',
+    entrypoint: 'fake.mjs', modes: ['build'], deadlineMs: 1000,
+    defaultModel: 'fake-model', apiKeyEnvironmentVariable: null,
+    credentialEnvironmentVariables: [], credentialFiles: [], outboundDestinations: [],
+    requiredExecutables: [],
+    credentialStatusCommand: null, usesStackSkills: false,
+    costLimit: 'unsupported' };
+  assert.equal(defineAgentAdapter(source).id, 'fake');
+  assert.throws(() => createAgentAdapterRegistry([source, source]), /duplicate/);
+  assert.throws(() => defineAgentAdapter({ ...source, version: 'latest' }), /version/);
+  assert.throws(() => defineAgentAdapter({ ...source, modes: ['unknown'] }), /modes/);
+  assert.throws(() => defineAgentAdapter({ ...source, credentialFiles: ['..\\secret'] }), /credentialFiles/);
+  assert.throws(() => defineAgentAdapter({ ...source,
+    credentialEnvironmentVariables: ['not-valid'] }), /credentialEnvironmentVariables/);
+  assert.throws(() => defineAgentAdapter({ ...source, outboundDestinations: ['http://insecure.example'] }),
+    /outboundDestinations/);
+  assert.throws(() => defineAgentAdapter({ ...source, requiredExecutables: ['../claude'] }),
+    /requiredExecutables/);
+  assert.throws(() => defineAgentAdapter({ ...source, credentialStatusCommand: ['claude', 'bad\narg'] }),
+    /credentialStatusCommand/);
+  assert.throws(() => defineAgentAdapter({ ...source, command: 'node' }), /command is unknown/);
+});
diff --git a/tools/stack-bench/tests/agent-credentials.test.ts b/tools/stack-bench/tests/agent-credentials.test.ts
new file mode 100644
index 00000000000..503cd4eaf38
--- /dev/null
+++ b/tools/stack-bench/tests/agent-credentials.test.ts
@@ -0,0 +1,46 @@
+import assert from 'node:assert/strict';
+import { resolve } from 'node:path';
+import test from 'node:test';
+
+import { applyAgentCredential } from '../src/agents/agent-credentials.js';
+import type { AgentCredentialArgs } from '../src/agents/agent-credentials.js';
+
+const paid = { id: 'paid', apiKeyEnvironmentVariable: 'PROVIDER_API_KEY' };
+const modelFree = { id: 'model-free', apiKeyEnvironmentVariable: null };
+
+test('credential resolution reads only the selected adapter secret file', () => {
+  let readPath: string | null = null;
+  const args: AgentCredentialArgs = {};
+  applyAgentCredential(args, paid, { env: {
+    PROVIDER_API_KEY_FILE: '/selected/key',
+    ANTHROPIC_API_KEY_FILE: '/unrelated/key',
+  }, read: path => { readPath = path; return 'selected-secret\n'; } });
+  assert.equal(readPath, resolve('/selected/key'));
+  assert.equal(args.apiKey, 'selected-secret');
+});
+
+test('credential resolution normalizes explicit paths', () => {
+  const input: AgentCredentialArgs = { apiKeyFile: 'relative-key' };
+  applyAgentCredential(input, paid, { env: {}, read: () => 'secret' });
+  assert.equal(input.apiKeyFile, resolve('relative-key'));
+  assert.equal(input.apiKey, 'secret');
+});
+
+test('model-free adapters ignore unrelated provider secrets but reject explicit credentials', () => {
+  const args: AgentCredentialArgs = {};
+  applyAgentCredential(args, modelFree,
+    { env: { ANTHROPIC_API_KEY_FILE: '/mounted/by-appliance' } });
+  assert.deepEqual(args, {});
+  assert.throws(() => applyAgentCredential({ apiKeyFile: '/explicit/key' }, modelFree,
+    { env: {}, read: () => 'secret' }), /does not accept an API key/);
+  assert.throws(() => applyAgentCredential({}, modelFree,
+    { env: { STACK_BENCH_API_KEY_FILE: '/generic/key' }, read: () => 'secret' }),
+  /does not accept an API key/);
+});
+
+test('credential resolution rejects ambiguous and empty selected credentials', () => {
+  assert.throws(() => applyAgentCredential({ apiKey: 'direct', apiKeyFile: '/key' }, paid,
+    { env: {}, read: () => 'file' }), /only one/);
+  assert.throws(() => applyAgentCredential({ apiKeyFile: '/key' }, paid,
+    { env: {}, read: () => '\n' }), /is empty/);
+});
diff --git a/tools/stack-bench/tests/agent-database.test.ts b/tools/stack-bench/tests/agent-database.test.ts
new file mode 100644
index 00000000000..111f7edf072
--- /dev/null
+++ b/tools/stack-bench/tests/agent-database.test.ts
@@ -0,0 +1,126 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { ensureDatabase, hostServiceAddress } from '../commands/agent.js';
+import { codingSessionFailure } from '../src/agents/coding-session-retry.js';
+import { createBackendLease, writeBackendLease } from '../src/runtime/backend-lease.js';
+import type { BackendLease } from '../src/runtime/backend-lease.js';
+import { loadTrack } from '../src/composition/tracks.js';
+
+const track = loadTrack('ecommerce');
+
+function withLease<Result>(backend: string, run: (lease: BackendLease) => Result): Result {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-agent-db-'));
+  const path = join(root, 'lease.json');
+  const common = { runId: `agent-${backend}-run0-test`, backend, track: track.name, runIndex: 0 };
+  const lease = backend === 'spacetime'
+    ? createBackendLease({ ...common, serverUri: 'http://127.0.0.1:3210',
+      module: 'app-ecom-run0', dataDir: join(root, 'data') })
+    : createBackendLease({ ...common, database: 'app_ecom_run0',
+      container: { name: `stack-bench-${backend}`, id: backend.repeat(8) } });
+  lease.state = 'active';
+  writeBackendLease(path, lease);
+  const previousPath = process.env.STACK_BENCH_LEASE;
+  const previousToken = process.env.STACK_BENCH_LEASE_TOKEN;
+  process.env.STACK_BENCH_LEASE = path;
+  process.env.STACK_BENCH_LEASE_TOKEN = lease.ownershipToken;
+  try { return run(lease); }
+  finally {
+    if (previousPath === undefined) delete process.env.STACK_BENCH_LEASE;
+    else process.env.STACK_BENCH_LEASE = previousPath;
+    if (previousToken === undefined) delete process.env.STACK_BENCH_LEASE_TOKEN;
+    else process.env.STACK_BENCH_LEASE_TOKEN = previousToken;
+    rmSync(root, { recursive: true, force: true });
+  }
+}
+
+test('a failed PostgreSQL create is accepted only when the exact database exists', () => {
+  withLease('postgres', lease => {
+    const calls: Array<{ args: readonly string[]; options: { timeout?: number } }> = [];
+    const createError = new Error('docker daemon unavailable');
+    const exec = (_command: string, args: readonly string[], options: { timeout?: number }) => {
+      calls.push({ args, options });
+      const container = lease.resources.container;
+      assert(container);
+      if (args[0] === 'inspect') return `${container.id}\n`;
+      if (args.some(arg => String(arg).startsWith('CREATE DATABASE'))) throw createError;
+      if (args.includes('-tAc')) return '';
+      return '';
+    };
+    assert.throws(() => ensureDatabase('postgres', 0, null, track, true, { exec, lease }),
+      error => error === createError);
+    assert.equal(calls.every(call => call.options.timeout === 120_000), true);
+  });
+});
+
+test('a PostgreSQL wipe failure aborts a supposedly clean build', () => {
+  withLease('postgres', lease => {
+    const exec = (_command: string, args: readonly string[]) => {
+      const container = lease.resources.container;
+      assert(container);
+      if (args[0] === 'inspect') return `${container.id}\n`;
+      if (args.some(arg => String(arg).includes('DROP SCHEMA'))) throw new Error('wipe failed');
+      return '';
+    };
+    assert.throws(() => ensureDatabase('postgres', 0, null, track, true, { exec, lease }),
+      /could not wipe app_ecom_run0/);
+  });
+});
+
+test('a MongoDB wipe failure aborts a supposedly clean build', () => {
+  withLease('mongodb', lease => {
+    const exec = (_command: string, args: readonly string[]) => {
+      const container = lease.resources.container;
+      assert(container);
+      if (args[0] === 'inspect') return `${container.id}\n`;
+      throw new Error('wipe failed');
+    };
+    assert.throws(() => ensureDatabase('mongodb', 0, null, track, true, { exec, lease }),
+      /could not wipe app_ecom_run0/);
+  });
+});
+
+test('Spacetime cleanup ignores absence but rejects authorization and transport failures', () => {
+  withLease('spacetime', lease => {
+    const absent = Object.assign(new Error('404 Not Found'), { stderr: '404 Not Found' });
+    assert.doesNotThrow(() => ensureDatabase('spacetime', 0, null, track, true,
+      { exec: () => { throw absent; }, stdbBin: 'spacetime-test', lease }));
+    const currentCliAbsent = Object.assign(new Error('command failed'),
+      { stderr: Buffer.from('Error: failed to find database `app-ecom-run0`.\n') });
+    assert.doesNotThrow(() => ensureDatabase('spacetime', 0, null, track, true,
+      { exec: () => { throw currentCliAbsent; }, stdbBin: 'spacetime-test', lease }));
+    const unauthorized = Object.assign(new Error('401 Unauthorized'), { stderr: '401 Unauthorized' });
+    assert.throws(() => ensureDatabase('spacetime', 0, null, track, true,
+      { exec: () => { throw unauthorized; }, stdbBin: 'spacetime-test', lease }),
+    /could not delete prior module/);
+  });
+});
+
+test('coding session failures retain bounded stderr for nonzero exits', () => {
+  const detail = codingSessionFailure({ status: 1,
+    stdout: Buffer.from('provider stdout detail'),
+    stderr: Buffer.from(`provider rejected the session\n${'x'.repeat(5000)}`) });
+  assert.match(detail, /coding session failed \(exit 1\)/);
+  assert.match(detail, /inner stdout tail:\nprovider stdout detail/);
+  assert.match(detail, /inner stderr tail/);
+  assert.equal(detail.endsWith('x'.repeat(4000)), true);
+  assert.equal(detail.includes('provider rejected the session'), false);
+});
+
+test('exit 137 is reported as a kill without guessing that it was OOM', () => {
+  const detail = codingSessionFailure({ status: 137,
+    stderr: Buffer.from('STACK_BENCH_CODING_PROCESS_DIAGNOSTIC {"status":137,"cgroupMemory":"oom_kill 0"}') });
+  assert.match(detail, /forcibly killed/);
+  assert.match(detail, /coding-process diagnostic/);
+  assert.doesNotMatch(detail, /out of memory|OOM failure/i);
+  assert.match(detail, /oom_kill 0/);
+});
+
+test('appliance uses the configured host-service address', () => {
+  assert.equal(hostServiceAddress({ STACK_BENCH_APPLIANCE: '1' }), '127.0.0.1');
+  assert.equal(hostServiceAddress({}), 'host.docker.internal');
+  assert.equal(hostServiceAddress({ STACK_BENCH_APPLIANCE: '1',
+    STACK_BENCH_HOST_ALIAS: 'explicit-host' }), 'explicit-host');
+});
diff --git a/tools/stack-bench/tests/agent-guidance.contract.ts b/tools/stack-bench/tests/agent-guidance.contract.ts
new file mode 100644
index 00000000000..9dcc8e29719
--- /dev/null
+++ b/tools/stack-bench/tests/agent-guidance.contract.ts
@@ -0,0 +1,34 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { readBackendGuidanceDocument } from '../commands/agent.js';
+import { normalizePromptText } from '../src/agents/agent-materials.js';
+import { sha256 } from '../src/evidence/provenance.js';
+
+const documentPath = 'backends/postgres.md';
+const absolute = join(STACK_BENCH_ROOT, documentPath);
+const bytes = Buffer.from(normalizePromptText(readFileSync(absolute, 'utf8')), 'utf8');
+const identity = {
+  path: documentPath,
+  sha256: sha256(bytes),
+  bytes: bytes.length,
+  applicationInterface: 'http' as const,
+};
+
+test('campaign guidance loads only the exact content-identified document', () => {
+  assert.equal(readBackendGuidanceDocument(identity, 'unused.md'), bytes.toString('utf8'));
+  assert.throws(() => readBackendGuidanceDocument({ ...identity, sha256: '0'.repeat(64) },
+    'unused.md'), /changed after compilation/);
+  assert.throws(() => readBackendGuidanceDocument({ ...identity, bytes: bytes.length + 1 },
+    'unused.md'), /changed after compilation/);
+});
+
+test('campaign guidance rejects malformed and out-of-root paths', () => {
+  assert.throws(() => readBackendGuidanceDocument({ ...identity, path: '..\\secret.md' },
+    'unused.md'), /identity is invalid/);
+  assert.throws(() => readBackendGuidanceDocument({ ...identity, path: '../../Cargo.toml' },
+    'unused.md'), /escapes the Stack Bench root/);
+});
diff --git a/tools/stack-bench/tests/agent-materials.test.ts b/tools/stack-bench/tests/agent-materials.test.ts
new file mode 100644
index 00000000000..4549eb9308f
--- /dev/null
+++ b/tools/stack-bench/tests/agent-materials.test.ts
@@ -0,0 +1,30 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { agentSkillPaths, normalizePromptText, readAgentSkillDocuments,
+  selectAgentSkills } from '../src/agents/agent-materials.js';
+
+test('stack defaults and explicit agent skill selections resolve predictably', () => {
+  assert.deepEqual(selectAgentSkills(['typescript-server'], null), ['typescript-server']);
+  assert.deepEqual(selectAgentSkills(['typescript-server'], []), []);
+  assert.deepEqual(selectAgentSkills([], ['typescript-server']), ['typescript-server']);
+  assert.throws(() => selectAgentSkills(['../private'], null), /invalid/);
+  assert.throws(() => agentSkillPaths('/repo', ['same', 'same']), /invalid/);
+});
+
+test('skill documents are read in selected order with front matter removed', () => {
+  const paths = agentSkillPaths('/repo', ['typescript-server', 'typescript-client']);
+  assert.equal(paths.length, 2);
+  const text = readAgentSkillDocuments('/repo', ['typescript-server', 'typescript-client'], {
+    read: path => `---\nname: ignored\n---\n${path.split(/[\\/]/).at(-2)}`,
+  });
+  assert.equal(text, 'typescript-server\n\n---\n\ntypescript-client');
+});
+
+test('prompt material is identical across platform line endings', () => {
+  assert.equal(normalizePromptText('one\r\ntwo\rthree\n'), 'one\ntwo\nthree\n');
+  const text = readAgentSkillDocuments('/repo', ['typescript-server'], {
+    read: () => '---\r\nname: ignored\r\n---\r\nreference\r\nline\r\n',
+  });
+  assert.equal(text, 'reference\nline\n');
+});
diff --git a/tools/stack-bench/tests/agent-runtime-identity.contract.ts b/tools/stack-bench/tests/agent-runtime-identity.contract.ts
new file mode 100644
index 00000000000..0003243f6e9
--- /dev/null
+++ b/tools/stack-bench/tests/agent-runtime-identity.contract.ts
@@ -0,0 +1,85 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { dbName, moduleName } from '../src/composition/tracks.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { CODING_CONTAINER_CONTROL_DIR, CODING_CONTAINER_PROCESS_IDENTITY,
+  codingContainerAgentCommand, codingContainerAgentEnvironment,
+  codingContainerAgentExecOptions, codingContainerTranscriptHandoffCommands,
+  codingContainerWorkspaceHandoffCommands }
+  from '../src/runtime/coding-container-policy.js';
+import { leasedDatabaseEnvironment, STACK_ADAPTER_REGISTRY }
+  from '../src/stacks/stack-adapters.js';
+import { POSTGRES_APPLICATION_IDENTITY }
+  from '../src/stacks/hosted-database-identity.js';
+import { spacetimeBuildContainerPlan } from '../src/stacks/stack-agent-operations.js';
+
+const FORBIDDEN_IDENTITY = /stackbench|stack[-_ ]bench|benchmark|harness|test|grader/i;
+
+test('workspace handoff keeps the agent owner and gives the controller group access', () => {
+  assert.deepEqual(codingContainerWorkspaceHandoffCommands(42), [
+    ['chown', '-R', '10001:42', '/app'],
+    ['chmod', '-R', 'u+rwX,g+rwX,o-rwx', '/app'],
+  ]);
+});
+
+test('transcript handoff gives only the controller group read access', () => {
+  assert.deepEqual(codingContainerTranscriptHandoffCommands(42), [
+    ['chown', '-R', '10001:42', '/home/developer/.claude/projects/-app'],
+    ['chmod', '-R', 'u+rwX,g+rX,o-rwx', '/home/developer/.claude/projects/-app'],
+  ]);
+});
+
+test('the materialized agent runtime uses neutral application identities', () => {
+  const track = { ...loadTrack('ecommerce'), slug: 'ecom' };
+  const database = dbName(track, 4);
+  const spacetimePlan = spacetimeBuildContainerPlan({
+    repo: 'C:/product-source', appDir: 'C:/workspace/app',
+    env: { STACK_BENCH_RELEASE_DEPS_VOLUME: 'release-dependencies' },
+  });
+  const visibleRuntime = {
+    environment: codingContainerAgentEnvironment(),
+    execOptions: codingContainerAgentExecOptions(),
+    execCommand: codingContainerAgentCommand('claude', ['--print']),
+    controlDirectory: CODING_CONTAINER_CONTROL_DIR,
+    processIdentity: CODING_CONTAINER_PROCESS_IDENTITY,
+    database,
+    module: moduleName(track, 4),
+    postgres: leasedDatabaseEnvironment(STACK_ADAPTER_REGISTRY.get('postgres'), {
+      database, networkMode: 'bridge',
+    }),
+    mongodb: leasedDatabaseEnvironment(STACK_ADAPTER_REGISTRY.get('mongodb'), {
+      database, networkMode: 'bridge',
+    }),
+    spacetimeConfigTarget: (() => {
+      const mount = spacetimePlan.mounts[0];
+      assert(mount);
+      return mount.target;
+    })(),
+  };
+
+  assert.doesNotMatch(JSON.stringify(visibleRuntime), FORBIDDEN_IDENTITY);
+  assert.deepEqual(visibleRuntime.environment,
+    { HOME: '/home/developer', USER: 'developer' });
+  assert.equal(visibleRuntime.postgres.DATABASE_URL,
+    'postgresql://appuser:local-app-password@host.docker.internal:6532/app_ecom_run4');
+  assert.equal(visibleRuntime.mongodb.DATABASE_URL,
+    'mongodb://host.docker.internal:6537/app_ecom_run4');
+  assert.equal(visibleRuntime.module, 'app-ecom-run4');
+});
+
+test('PostgreSQL services and generated connection URLs use one neutral identity', () => {
+  const expected = POSTGRES_APPLICATION_IDENTITY;
+  for (const relativePath of ['docker-compose.yaml', 'appliance/docker-compose.yaml']) {
+    const compose = readFileSync(join(STACK_BENCH_ROOT, relativePath), 'utf8');
+    assert.match(compose, new RegExp(`POSTGRES_USER: ${expected.user}\\b`));
+    assert.match(compose, new RegExp(`POSTGRES_PASSWORD: ${expected.password}\\b`));
+    assert.match(compose, new RegExp(`POSTGRES_DB: ${expected.defaultDatabase}\\b`));
+    assert.match(compose,
+      new RegExp(`pg_isready -U ${expected.user} -d ${expected.defaultDatabase}`));
+  }
+  assert.doesNotMatch(JSON.stringify(expected), FORBIDDEN_IDENTITY);
+});
diff --git a/tools/stack-bench/tests/agent-task-selection.contract.ts b/tools/stack-bench/tests/agent-task-selection.contract.ts
new file mode 100644
index 00000000000..171edc2d6ae
--- /dev/null
+++ b/tools/stack-bench/tests/agent-task-selection.contract.ts
@@ -0,0 +1,294 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { agentRecipeRequest, agentScenarioPaths } from '../commands/agent.js';
+import { agentVisibleContractText, contractInterfaceNames }
+  from '../src/composition/agent-visible-contract.js';
+import { resolveGuidanceProfile } from '../src/campaigns/condition-compiler.js';
+import { createAgentVisibleTaskRequest, createBoundRecipeTaskRequest,
+  createRecipeTaskRequest, isModularRecipeTaskRequest } from '../src/composition/recipe-selection.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { loadTrack } from '../src/composition/tracks.js';
+
+const ROOT = STACK_BENCH_ROOT;
+const AGENT = join(ROOT, 'dist', 'commands', 'agent.js');
+const binding = resolveRecipeRelease(loadTrack('ecommerce'), 1);
+
+type UnknownRecord = Record<string, unknown>;
+type VisibleTaskRequest = { task: { sha256: string }; selection: { requested: { checks: string[] } } };
+
+const record = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function assertVisibleTaskRequest(value: unknown): asserts value is VisibleTaskRequest {
+  if (!record(value) || !record(value.task) || typeof value.task.sha256 !== 'string'
+    || !record(value.selection) || !record(value.selection.requested)
+    || !Array.isArray(value.selection.requested.checks)
+    || value.selection.requested.checks.some(check => typeof check !== 'string')) {
+    throw new Error('agent-visible task request is invalid');
+  }
+}
+
+function commandStderr(error: unknown): string {
+  if (!record(error) || !('stderr' in error)) return '';
+  return String(error.stderr);
+}
+
+test('selected contract linting uses only declared interface names', () => {
+  assert.deepEqual(contractInterfaceNames([
+    '| Element ID | Element |',
+    '|---|---|',
+    '| `staff-link` | staff link |',
+    '| `staff-signin-submit` | sign-in button |',
+    'The password is `stackbench-staff-2026`.',
+    'The attribute is `data-action-input`.',
+  ].join('\n')), ['staff-link', 'staff-signin-submit']);
+});
+
+test('agent-facing documents reject internal evaluation language', () => {
+  assert.equal(agentVisibleContractText('Expose the account controls.'),
+    'Expose the account controls.');
+  for (const source of [
+    'Stack Bench checks this.',
+    'The grader checks this.',
+    'The automated harness checks this.',
+    'Expose this test action.',
+    'Use data-testid="account-name".',
+  ]) {
+    assert.throws(() => agentVisibleContractText(source), /contains internal language/);
+  }
+});
+
+test('agent-visible contracts include only the selected stack section', () => {
+  const source = [
+    '<!-- interface:http -->HTTP contract<!-- /interface -->',
+    '<!-- interface:reducer -->reducer contract<!-- /interface -->',
+  ].join('\n');
+  assert.equal(agentVisibleContractText(source, {}, 'http').trim(), 'HTTP contract');
+  assert.equal(agentVisibleContractText(source, {}, 'reducer').trim(), 'reducer contract');
+  assert.throws(() => agentVisibleContractText(source), /requires a selected application interface/);
+  assert.throws(() => agentVisibleContractText('<!-- interface:other -->wrong<!-- /interface -->', {}, 'http'),
+    /invalid markers/);
+  assert.throws(() => agentVisibleContractText('<!-- interface:http -->broken', {}, 'http'),
+    /invalid markers/);
+  assert.throws(() => agentVisibleContractText([
+    '<!-- interface:http -->outer',
+    '<!-- interface:reducer -->nested<!-- /interface -->',
+    '<!-- /interface -->',
+  ].join('\n'), {}, 'http'), /invalid markers/);
+});
+
+function printPrompt(app: string, request: unknown, extraArgs: readonly string[] = []): string {
+  return execFileSync(process.execPath, [AGENT, '--mode', 'build', '--backend', 'postgres',
+    '--track', 'ecommerce', '--level', '1', '--app', app,
+    '--recipe-task-json', JSON.stringify(request), ...extraArgs, '--print-prompt'], {
+    encoding: 'utf8', stdio: 'pipe',
+    env: { ...process.env, STACK_BENCH_IMAGE: 'prompt-review-does-not-use-docker' },
+  });
+}
+
+function printFixPrompt(app: string, request: unknown): string {
+  return execFileSync(process.execPath, [AGENT, '--mode', 'fix', '--backend', 'postgres',
+    '--track', 'ecommerce', '--level', '1', '--app', app,
+    '--recipe-task-json', JSON.stringify(request), '--print-prompt'], {
+    encoding: 'utf8', stdio: 'pipe',
+    env: { ...process.env, STACK_BENCH_IMAGE: 'prompt-review-does-not-use-docker' },
+  });
+}
+
+function printStandalonePrompt(app: string, extraArgs: readonly string[] = []): string {
+  return execFileSync(process.execPath, [AGENT, '--mode', 'build', '--backend', 'postgres',
+    '--track', 'ecommerce', '--level', '1', '--app', app, ...extraArgs, '--print-prompt'], {
+    encoding: 'utf8', stdio: 'pipe',
+    env: { ...process.env, STACK_BENCH_IMAGE: 'prompt-review-does-not-use-docker' },
+  });
+}
+
+test('pack selection changes the real model prompt and exact task identity', () => {
+  const app = mkdtempSync(join(tmpdir(), 'stack-bench-selected-task-'));
+  try {
+    const selected = createBoundRecipeTaskRequest(binding,
+      { featureIds: ['ecommerce.feature.accounts'] });
+    const visible = createAgentVisibleTaskRequest(binding, selected);
+    const prompt = printPrompt(app, visible);
+    assert.match(prompt, /## Accounts/);
+    assert.match(prompt, /`data-role`/);
+    assert.doesNotMatch(prompt, /## Reviews/);
+    assert.doesNotMatch(prompt, /## Cart/);
+    assert.doesNotMatch(prompt,
+      /harness|runner|testing hooks|automated verification|test interface contract|\bhooks\b/i);
+    assert.doesNotMatch(prompt, /check-app|contract check|automated verification|data-testid/i);
+    assert.deepEqual(selected.selection.promptPacks, ['ecommerce.feature.accounts']);
+
+    const tampered = structuredClone(visible);
+    assertVisibleTaskRequest(tampered);
+    tampered.task.sha256 = '0'.repeat(64);
+    assert.throws(() => printPrompt(app, tampered), error =>
+      /recipe task changed after request resolution/.test(commandStderr(error)));
+  } finally { rmSync(app, { recursive: true, force: true }); }
+});
+
+test('repair prompts retain the selected feature request and public interface', () => {
+  const app = mkdtempSync(join(tmpdir(), 'stack-bench-repair-task-'));
+  try {
+    const selected = createBoundRecipeTaskRequest(binding,
+      { featureIds: ['ecommerce.feature.accounts'] });
+    const prompt = printFixPrompt(app, createAgentVisibleTaskRequest(binding, selected));
+    assert.match(prompt, /## Accounts/);
+    assert.match(prompt, /## Application interface/);
+    assert.doesNotMatch(prompt, /## Reviews|## Cart/);
+    assert.doesNotMatch(prompt, /grader|harness|automated verification|score/i);
+  } finally { rmSync(app, { recursive: true, force: true }); }
+});
+
+test('pack dependencies become requested task scope while checks only narrow measurement', () => {
+  const cart = createBoundRecipeTaskRequest(binding,
+    { featureIds: ['ecommerce.feature.cart-checkout'] });
+  assert.deepEqual(cart.selection.promptPacks, [
+    'ecommerce.feature.accounts',
+    'ecommerce.feature.cart-checkout',
+    'ecommerce.feature.catalog',
+  ]);
+  assert.match(cart.task.requirementText, /signed-in customer/);
+  assert.match(cart.task.requirementText, /## Cart and checkout/);
+
+  const oneKey = binding.release.checkCatalog.find(check =>
+    check.packId === 'ecommerce.feature.accounts');
+  assert(oneKey);
+  const full = createBoundRecipeTaskRequest(binding);
+  const checkOnly = createBoundRecipeTaskRequest(binding, { checkKeys: [oneKey.stableKey] });
+  assert.deepEqual(checkOnly.selection.promptPacks, full.selection.promptPacks);
+  assert.equal(checkOnly.selection.checks.length, 1);
+  assert.equal(checkOnly.task.requirementText, full.task.requirementText);
+});
+
+test('ordinary runs select scored checks while test-development checks require exact selection', () => {
+  const ordinary = createRecipeTaskRequest(binding);
+  assert.equal(ordinary.selection.checks.length, 46);
+  assert.equal(ordinary.selection.checks.every(check => check.points > 0), true);
+  assert.equal(ordinary.selection.completeness, 'full');
+
+  const candidate = binding.release.checkCatalog.find(check => check.points === 0);
+  assert(candidate);
+  const development = createRecipeTaskRequest(binding, { checkKeys: [candidate.stableKey] });
+  assert.deepEqual(development.selection.checks.map(check => check.stableKey), [candidate.stableKey]);
+  assert.equal(development.selection.scoredPoints, 0);
+  assert.equal(development.selection.completeness, 'subset');
+});
+
+test('selected pack prompts contain only their own framework-neutral named actions', () => {
+  const candidate = resolveRecipeRelease(loadTrack('ecommerce'), 1,
+    'ecommerce.sequential-l1@2.5.0');
+  const neutral = resolveGuidanceProfile('neutral@1.8.0', ['postgres']);
+  const app = mkdtempSync(join(tmpdir(), 'stack-bench-candidate-task-'));
+  try {
+    const identity = createBoundRecipeTaskRequest(candidate,
+      { featureIds: ['ecommerce.feature.accounts'] });
+    const document = neutral.documents.postgres;
+    const skills = neutral.skills.postgres;
+    assert(document);
+    assert(skills);
+    const prompt = printPrompt(app, createAgentVisibleTaskRequest(candidate, identity), [
+      '--guidance', neutral.mode,
+      '--guidance-document-json', JSON.stringify(document),
+      '--skills-json', JSON.stringify(skills.ids),
+    ]);
+    assert.match(prompt, /POST \/api\/auth\/signup/);
+    assert.doesNotMatch(prompt, /\bExpress\b|socket\.io|Drizzle|Prisma/i);
+    assert.doesNotMatch(identity.task.requirementText,
+      /POST \/api\/checkout|POST \/api\/admin\/restock/);
+
+    const cart = createBoundRecipeTaskRequest(candidate,
+      { featureIds: ['ecommerce.feature.cart-checkout'] });
+    assert.match(cart.task.requirementText, /POST \/api\/checkout/);
+    assert.match(cart.task.requirementText, /POST \/api\/auth\/signin/);
+    assert.doesNotMatch(cart.task.requirementText, /POST \/api\/admin\/restock/);
+  } finally { rmSync(app, { recursive: true, force: true }); }
+});
+
+test('the real unprescribed prompt withholds every expected quality specification', () => {
+  const modular = resolveRecipeRelease(loadTrack('ecommerce'), 1,
+    'ecommerce.sequential-l1@2.5.0');
+  const features = modular.release.components.packs
+    .filter(pack => pack.moduleType === 'feature').map(pack => pack.id);
+  const expectedSpecifications = modular.release.components.packs
+    .filter(pack => pack.moduleType === 'specification')
+    .map(pack => `${pack.id}@${pack.version}`);
+  const task = createBoundRecipeTaskRequest(modular, {
+    featureIds: features,
+    expectedSpecifications,
+  });
+  const app = mkdtempSync(join(tmpdir(), 'stack-bench-modular-task-'));
+  try {
+    const visible = createAgentVisibleTaskRequest(modular, task);
+    assert(isModularRecipeTaskRequest(task));
+    const prompt = printPrompt(app, visible);
+    assert.match(prompt, /## Accounts/);
+    assert.match(prompt, /## Cart and checkout/);
+    assert.match(prompt, /## Warehouse administration/);
+    assert.doesNotMatch(prompt, /## Access control:|## State durability:|## Live state:|## Concurrency safety:|## Transactional integrity:/);
+    assert.doesNotMatch(prompt, /server-enforced authority|survives a page reload|only one customer can receive the last unit|historical order prices do not change/);
+    assert.doesNotMatch(JSON.stringify(visible), /ecommerce\.spec/);
+    assert.equal(task.selection.scoredPoints, 58);
+    assert(task.selection.scoredChecks.some(check => check.treatment === 'expected'));
+    assertVisibleTaskRequest(visible);
+    assert.deepEqual(visible.selection.requested.checks, []);
+  } finally { rmSync(app, { recursive: true, force: true }); }
+});
+
+test('exact modular qualification can include supporting checks without changing the prompt scope', () => {
+  const modular = resolveRecipeRelease(loadTrack('ecommerce'), 1,
+    'ecommerce.sequential-l1@2.5.0');
+  const features = modular.release.components.packs
+    .filter(pack => pack.moduleType === 'feature').map(pack => pack.id);
+  const expectedSpecifications = modular.release.components.packs
+    .filter(pack => pack.moduleType === 'specification')
+    .map(pack => `${pack.id}@${pack.version}`);
+  const ordinary = createBoundRecipeTaskRequest(modular, { featureIds: features,
+    expectedSpecifications });
+  const exact = createBoundRecipeTaskRequest(modular, { featureIds: features,
+    expectedSpecifications, checkKeys: modular.release.checkCatalog.map(check => check.stableKey) });
+
+  assert.equal(ordinary.selection.checks.length, 46);
+  assert.equal(ordinary.selection.checks.every(check => check.points > 0), true);
+  assert.equal(exact.selection.checks.length, 48);
+  assert.equal(exact.selection.scoredPoints, 58);
+  assert.equal(exact.selection.checks.filter(check => check.points === 0).length, 2);
+  assert.deepEqual(exact.selection.promptPacks, ordinary.selection.promptPacks);
+});
+
+test('agent provenance uses the exact recipe execution instead of level suites', () => {
+  const track = loadTrack('ecommerce');
+  const modular = resolveRecipeRelease(track, 1, 'ecommerce.sequential-l1@2.5.0');
+  const paths = agentScenarioPaths(track, 1, modular);
+
+  assert.deepEqual(paths.map(path => path.replaceAll('\\', '/').split('/scenarios/')[1]),
+    modular.execution.map(execution => execution.source?.split('scenarios/')[1]));
+  assert(paths.some(path => path.endsWith('01-last-unit-2.3.0.json')));
+  assert.equal(paths.some(path => path.endsWith('01-contention.json')), false);
+});
+
+test('a standalone recipe selects its exact prompt and cannot disagree with a bound task', () => {
+  const app = mkdtempSync(join(tmpdir(), 'stack-bench-standalone-recipe-'));
+  try {
+    const promoted = printStandalonePrompt(app);
+    const candidate = printStandalonePrompt(app,
+      ['--recipe', 'ecommerce.sequential-l1@2.5.0']);
+    assert.equal(candidate, promoted);
+    assert.match(candidate, /data-buy-input/);
+    assert.match(promoted, /data-buy-input/);
+    assert.match(promoted, /POST \/api\/items\/:id\/buy/);
+
+    const request = createRecipeTaskRequest(binding).request;
+    assert.throws(() => printPrompt(app, request,
+      ['--recipe', 'ecommerce.sequential-l2@1.6.0']), error =>
+      /does not match bound task/.test(commandStderr(error)));
+    assert.equal(agentRecipeRequest('ecommerce.sequential-l1@2.5.0'),
+      'ecommerce.sequential-l1@2.5.0');
+  } finally { rmSync(app, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/artifacts.test.ts b/tools/stack-bench/tests/artifacts.test.ts
new file mode 100644
index 00000000000..56cf9adf875
--- /dev/null
+++ b/tools/stack-bench/tests/artifacts.test.ts
@@ -0,0 +1,257 @@
+import assert from 'node:assert/strict';
+import { existsSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { ARTIFACT_SCHEMA_VERSION, createArtifact, readArtifact, readArtifactPayload,
+  readRunJson, writeArtifact, writeRunJson } from '../src/evidence/artifacts.js';
+import { createCheckEvidence } from '../src/evidence/check-evidence.js';
+
+test('run artifacts are atomic and identify the producing run', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-artifact-'));
+  try {
+    const path = join(root, 'run.json');
+    const mode = { id: 'sequential', version: '1.0.0' };
+    const featureCatalog = { id: 'catalog', version: '1.0.0', sha256: 'a'.repeat(64),
+      state: 'draft' };
+    writeRunJson(path, { id: 'run-a', mode, featureCatalog, levels: [] });
+    const artifact = readRunJson(path, 'run-a');
+    assert.equal(artifact.id, 'run-a');
+    assert.deepEqual(artifact.mode, mode);
+    assert.deepEqual(artifact.featureCatalog, featureCatalog);
+    assert.equal(artifact.artifactSchemaVersion, ARTIFACT_SCHEMA_VERSION);
+    assert.throws(() => readRunJson(path, 'run-b'), /belongs to run-a/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('an invalid replacement cannot overwrite an existing run artifact', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-artifact-'));
+  try {
+    const path = join(root, 'run.json');
+    writeRunJson(path, { id: 'run-a', status: 'complete' });
+    assert.throws(() => writeRunJson(path, { id: '', complete: false }), /non-empty id/);
+    assert.equal(readRunJson(path, 'run-a').status, 'complete');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('an unversioned stale file is rejected before its run id can be trusted', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-artifact-'));
+  try {
+    const path = join(root, 'run.json');
+    writeFileSync(path, JSON.stringify({ id: 'old-run' }));
+    assert.throws(() => readRunJson(path, 'current-run'), /unsupported schema missing/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('unknown artifact schemas fail rather than being guessed', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-artifact-'));
+  try {
+    const path = join(root, 'run.json');
+    writeFileSync(path, JSON.stringify({ artifactSchemaVersion: 999, id: 'future-run' }));
+    assert.throws(() => readRunJson(path, 'future-run'), /unsupported schema 999/);
+    assert.throws(() => writeArtifact(path, { artifactSchemaVersion: 1,
+      kind: 'benchmark_run', id: 'old-envelope' }), /unsupported schema 1/);
+    assert.throws(() => writeRunJson(path, { artifactSchemaVersion: 999, id: 'future-run' }),
+      /schema 999 is not supported/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('v2 envelopes preserve exact identities, timestamps, and attempt ancestry', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-artifact-'));
+  try {
+    const path = join(root, 'grade.json');
+    const digest = 'a'.repeat(64);
+    writeArtifact(path, {
+      kind: 'grade', id: 'grade-child',
+      attempt: { id: 'grade-child', parentId: 'bundle-parent' },
+      timestamps: { startedAt: '2026-08-12T12:00:00.000Z', completedAt: '2026-08-12T12:00:01.000Z' },
+      identities: {
+        recipe: { id: 'ecommerce-l1', version: '1.0.0', sha256: digest, state: 'draft' },
+        fixture: { id: 'standard', version: '1.0.0', sha256: digest, state: 'draft' },
+        calibration: { id: 'l1-standard', version: '1.0.0', sha256: digest, state: 'draft' },
+        packs: [{ id: 'auth', version: '1.0.0', sha256: digest, state: 'draft' }],
+        stackAdapter: { id: 'postgres', sha256: digest },
+      },
+      payload: { total: 1, max: 1, features: [] },
+    });
+    const artifact = readArtifact(path, { expectedKind: 'grade', expectedId: 'grade-child' });
+    assert.equal(artifact.attempt.parentId, 'bundle-parent');
+    assert.equal(artifact.identities.recipe?.sha256, digest);
+    assert.equal(artifact.identities.packs[0]?.sha256, digest);
+    assert.equal(artifact.timestamps.completedAt, '2026-08-12T12:00:01.000Z');
+    assert.deepEqual(readArtifactPayload(path).features, []);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('partial and invalid attempts are representable without invented scores', () => {
+  const artifact = createArtifact({
+    kind: 'benchmark_run', id: 'partial-run',
+    attempt: { id: 'partial-run', parentId: null },
+    timestamps: { startedAt: '2026-08-12T12:00:00.000Z', completedAt: null },
+    payload: { status: 'invalid', outcome: { kind: 'harness_failure', reason: 'agent exited' } },
+  });
+  assert.equal(artifact.timestamps.completedAt, null);
+  assert.equal(artifact.payload.status, 'invalid');
+  assert.equal('score' in artifact.payload, false);
+  assert.equal('totals' in artifact.payload, false);
+});
+
+test('campaign extension provenance is strict and records completed rechecks', () => {
+  const seed = { fromDepth: 2, sourceSha256: 'a'.repeat(64), sourceFiles: 4,
+    parent: { campaignId: 'parent', campaignSha256: 'b'.repeat(64),
+      attemptId: 'attempt-1', executionId: 'execution-1', runId: 'run-1',
+      runSha256: 'c'.repeat(64) }, validatedDepths: [1, 2] };
+  assert.doesNotThrow(() => createArtifact({ kind: 'benchmark_run', id: 'extension',
+    payload: { progressionSeed: seed } }));
+  assert.throws(() => createArtifact({ kind: 'benchmark_run', id: 'bad-extension',
+    payload: { progressionSeed: { ...seed, validatedDepths: [2, 1] } } }),
+  /validatedDepths is invalid/);
+});
+
+test('unknown kinds, fields, malformed payloads, and backward timestamps fail closed', () => {
+  assert.throws(() => createArtifact({ kind: 'mystery', id: 'x' }), /unknown kind/);
+  assert.throws(() => createArtifact({ kind: 'benchmark_run', id: 'x',
+    payload: { outcome: { kind: 'typo' } } }), /outcome\.kind is invalid/);
+  assert.throws(() => createArtifact({ kind: 'grade', id: 'x', payload: { features: {} } }),
+    /payload\.features must be an array/);
+  assert.throws(() => createArtifact({ kind: 'grade', id: 'x',
+    timestamps: { startedAt: '2026-08-12T12:00:01.000Z', completedAt: '2026-08-12T12:00:00.000Z' } }),
+  /precedes/);
+  const valid = createArtifact({ kind: 'grade', id: 'x',
+    payload: { total: 0, max: 0, features: [] } });
+  assert.throws(() => writeArtifact('unused.json', { ...valid, surprise: true }), /surprise is unknown/);
+  const missingIdentities: Partial<typeof valid> = structuredClone(valid);
+  delete missingIdentities.identities;
+  assert.throws(() => writeArtifact('unused.json', missingIdentities), /identities is required/);
+  const incompleteTimestamps: Omit<typeof valid, 'timestamps'> & {
+    timestamps: Partial<typeof valid.timestamps>;
+  } = structuredClone(valid);
+  delete incompleteTimestamps.timestamps.completedAt;
+  assert.throws(() => writeArtifact('unused.json', incompleteTimestamps), /timestamps is incomplete/);
+  const missingIdentitySlot: Omit<typeof valid, 'identities'> & {
+    identities: Partial<typeof valid.identities>;
+  } = structuredClone(valid);
+  delete missingIdentitySlot.identities.experiment;
+  assert.throws(() => writeArtifact('unused.json', missingIdentitySlot), /identities\.experiment is required/);
+  const incompleteEngineIdentity = structuredClone(valid);
+  const engine = incompleteEngineIdentity.identities.engine;
+  assert(engine);
+  delete (engine as Partial<typeof engine>).version;
+  assert.throws(() => writeArtifact('unused.json', incompleteEngineIdentity),
+    /identities\.engine\.version is required/);
+  assert.throws(() => createArtifact({ kind: 'grade', id: 'x', identities: { engine: null } }),
+    /identities\.engine is required/);
+  const observedPayload = { observation: 'observed', source: { sha256: 'a'.repeat(64) },
+    suites: {}, totals: {}, selection: { observation: 'observed', scoredPoints: 0,
+      observedPoints: 1 } };
+  assert.doesNotThrow(() => createArtifact({ kind: 'grade_bundle', id: 'observed',
+    payload: observedPayload }));
+  assert.throws(() => createArtifact({ kind: 'grade_bundle', id: 'unbound-observed', payload: {
+    ...observedPayload, source: undefined,
+  } }), /first-build SHA-256/);
+  assert.throws(() => createArtifact({ kind: 'grade_bundle', id: 'scored-observed', payload: {
+    ...observedPayload, selection: { ...observedPayload.selection, scoredPoints: 1 },
+  } }), /contribute zero score/);
+  assert.doesNotThrow(() => createArtifact({ kind: 'grade_bundle', id: 'source-bound-scored',
+    payload: { observation: 'scored', source: { sha256: 'b'.repeat(64) }, suites: {}, totals: {} } }));
+  assert.throws(() => createArtifact({ kind: 'reference_qualification', id: 'incomplete-reference' }),
+    /payload\.fixture is required/);
+  const referencePayload = { fixture: 'standard', requiredRepetitions: 1, runs: [] };
+  assert.throws(() => createArtifact({ kind: 'reference_qualification', id: 'bad-runner', payload: {
+    ...referencePayload,
+    runner: { schemaVersion: 1, mode: 'desktop', platform: 'win32', architecture: 'x64' },
+  } }), /runner\.mode is invalid/);
+  assert.throws(() => createArtifact({ kind: 'reference_qualification', id: 'future-runner', payload: {
+    ...referencePayload,
+    runner: { schemaVersion: 2, mode: 'appliance', platform: 'linux', architecture: 'x64' },
+  } }), /runner\.schemaVersion must be 1/);
+  assert.doesNotThrow(() => createArtifact({ kind: 'null_control', id: 'typed-runner', payload: {
+    runner: { schemaVersion: 1, mode: 'appliance', platform: 'linux', architecture: 'x64',
+      dockerEngineVersion: '29.1.2', dockerOs: 'linux', dockerArchitecture: 'x86_64',
+      kernelVersion: '6.8.0-test', cpuCount: 8, memoryBytes: 16_000_000_000 },
+  } }));
+  assert.doesNotThrow(() => createArtifact({ kind: 'reference_qualification', id: 'base-runner', payload: {
+    ...referencePayload,
+    runner: { schemaVersion: 1, mode: 'appliance', platform: 'linux', architecture: 'x64' },
+  } }));
+  assert.throws(() => createArtifact({ kind: 'reference_qualification', id: 'partial-runner', payload: {
+    ...referencePayload,
+    runner: { schemaVersion: 1, mode: 'appliance', platform: 'linux', architecture: 'x64',
+      dockerEngineVersion: '29.1.2' },
+  } }), /runner\.dockerOs must be a non-empty string/);
+});
+
+test('mutation shard artifacts bind exact coordinates to the exact result set', () => {
+  const results = [{ id: 'broken-auth', status: 'CAUGHT' },
+    { id: 'broken-owner', status: 'CAUGHT' }];
+  assert.doesNotThrow(() => createArtifact({ kind: 'mutation_control', id: 'shard', payload: {
+    shard: { index: 1, count: 3, mutationIds: ['broken-owner', 'broken-auth'] }, results,
+  } }));
+  assert.throws(() => createArtifact({ kind: 'mutation_control', id: 'bad-index', payload: {
+    shard: { index: 3, count: 3, mutationIds: ['broken-auth'] }, results: [results[0]],
+  } }), /coordinates are invalid/);
+  assert.throws(() => createArtifact({ kind: 'mutation_control', id: 'wrong-result', payload: {
+    shard: { index: 1, count: 3, mutationIds: ['other'] }, results: [results[0]],
+  } }), /unique subset of the assigned mutation IDs/);
+  assert.doesNotThrow(() => createArtifact({ kind: 'mutation_control', id: 'partial-shard', payload: {
+    shard: { index: 1, count: 3, mutationIds: ['broken-auth', 'broken-owner'] },
+    results: [results[0]], checkpoint: { status: 'incomplete' },
+  } }));
+  assert.throws(() => createArtifact({ kind: 'mutation_control', id: 'partial-marked-complete', payload: {
+    shard: { index: 1, count: 3, mutationIds: ['broken-auth', 'broken-owner'] },
+    results: [results[0]], checkpoint: { status: 'complete' },
+  } }), /complete mutation_control.*match the exact result set/);
+  assert.throws(() => createArtifact({ kind: 'mutation_control', id: 'duplicate-partial-result', payload: {
+    shard: { index: 1, count: 3, mutationIds: ['broken-auth', 'broken-owner'] },
+    results: [results[0], results[0]], checkpoint: { status: 'incomplete' },
+  } }), /unique subset of the assigned mutation IDs/);
+  assert.throws(() => createArtifact({ kind: 'mutation_control', id: 'unknown-shard-field', payload: {
+    shard: { index: 1, count: 3, mutationIds: ['broken-auth'], worker: true }, results: [results[0]],
+  } }), /worker is unknown/);
+});
+
+test('public artifacts reject secret-bearing fields before touching disk', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-artifact-'));
+  try {
+    const path = join(root, 'run.json');
+    assert.throws(() => writeArtifact(path, { kind: 'benchmark_run', id: 'secret-run',
+      payload: { backendLease: { leaseToken: 'do-not-persist' } } }), /secret-bearing/);
+    assert.throws(() => writeArtifact(path, { kind: 'benchmark_run', id: 'secret-run',
+      payload: { backendLease: { api_key: 'do-not-persist' } } }), /secret-bearing/);
+    assert.equal(existsSync(path), false);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('typed grade evidence is required and obsolete projection fields are rejected', () => {
+  const evidence = createCheckEvidence({ status: 'failed', code: 'application_failure', phase: 'assertion',
+    summary: 'not observed', startedAtMs: 1, completedAtMs: 2 });
+  const setupEvidence = createCheckEvidence({ status: 'passed', code: 'completed', phase: 'setup',
+    startedAtMs: 1, completedAtMs: 2 });
+  const criterion = { id: 'works', desc: 'works', points: 1, evidence };
+  assert.doesNotThrow(() => createArtifact({ kind: 'grade', id: 'typed-grade',
+    payload: { total: 0, max: 1,
+      features: [{ id: 1, name: 'feature', score: 0, max: 1,
+        setupEvidence, criteria: [criterion] }] } }));
+  assert.throws(() => createArtifact({ kind: 'grade', id: 'obsolete-grade',
+    payload: { total: 0, max: 1, features: [{ id: 1, name: 'feature', score: 0,
+      max: 1, setupEvidence,
+      criteria: [{ ...criterion, passed: false }] }] } }), /passed is obsolete/);
+  assert.throws(() => createArtifact({ kind: 'grade', id: 'missing-evidence',
+    payload: { total: 0, max: 1,
+      features: [{ id: 1, name: 'feature', score: 0, max: 1,
+        setupEvidence, criteria: [{ id: 'works' }] }] } }),
+  /evidence is required/);
+});
+
+test('active readers reject unversioned files without inferring their kind', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-artifact-'));
+  try {
+    const bundle = join(root, 'bundle.json');
+    writeFileSync(bundle, JSON.stringify({ suites: {}, totals: {} }));
+    assert.throws(() => readArtifact(bundle, { expectedKind: 'grade_bundle' }),
+      /unsupported schema missing/);
+    const unknown = join(root, 'unknown.json');
+    writeFileSync(unknown, JSON.stringify({ kind: 'future_thing', id: 'x' }));
+    assert.throws(() => readArtifact(unknown), /unsupported schema missing/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/backend-control.test.ts b/tools/stack-bench/tests/backend-control.test.ts
new file mode 100644
index 00000000000..2a04fecf6d3
--- /dev/null
+++ b/tools/stack-bench/tests/backend-control.test.ts
@@ -0,0 +1,285 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { captureApplicationDiagnostics, controlBackendRuntime, hostedStopScript,
+  parseRuntimeControlSpec }
+  from '../src/runtime/backend-control.js';
+import { createBackendLease, writeBackendLease } from '../src/runtime/backend-lease.js';
+import { STACK_ADAPTER_REGISTRY } from '../src/stacks/stack-adapters.js';
+import { controlHostedAppServer, HOSTED_START_TIMEOUT_MS, hostedLaunchCommand, hostedRecordedProcessStopScript }
+  from '../src/stacks/hosted-lifecycle.js';
+import type { TextCommandOptions } from '../src/runtime/command-executor.js';
+
+interface RecordedCommand {
+  argv: string[];
+  options: TextCommandOptions;
+}
+
+test('runtime control input is typed at the serialized boundary', () => {
+  const input = { backend: 'mongodb', app: '/app', port: 6301, probe: '/api/items' };
+  assert.deepEqual(parseRuntimeControlSpec(input), input);
+  assert.throws(() => parseRuntimeControlSpec({ ...input, port: null }),
+    /runtime control spec is incomplete/);
+  assert.throws(() => parseRuntimeControlSpec({ ...input, port: '6301' }),
+    /runtime control spec is incomplete/);
+});
+
+test('backend control refuses without an authenticated lease', async () => {
+  const priorPath = process.env.STACK_BENCH_LEASE;
+  const priorToken = process.env.STACK_BENCH_LEASE_TOKEN;
+  delete process.env.STACK_BENCH_LEASE;
+  delete process.env.STACK_BENCH_LEASE_TOKEN;
+  try {
+    await assert.rejects(controlBackendRuntime({ backend: 'mongodb', app: '.', port: 6101, probe: '/api/items' }),
+      /STACK_BENCH_LEASE is required/);
+  } finally {
+    if (priorPath === undefined) delete process.env.STACK_BENCH_LEASE;
+    else process.env.STACK_BENCH_LEASE = priorPath;
+    if (priorToken === undefined) delete process.env.STACK_BENCH_LEASE_TOKEN;
+    else process.env.STACK_BENCH_LEASE_TOKEN = priorToken;
+  }
+});
+
+test('restart diagnostics are copied only from the exact leased build container', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-backend-log-'));
+  const leasePath = join(root, 'lease.json');
+  const output = join(root, 'restart.log');
+  const lease = createBackendLease({ runId: 'diagnostics-test', backend: 'mongodb',
+    track: 'ecommerce', runIndex: 0, database: 'app_ecom_run0',
+    container: { name: 'database', id: 'd'.repeat(64) } });
+  lease.state = 'active';
+  lease.resources.buildContainer = { name: 'leased-build', id: 'a'.repeat(64),
+    running: true, owned: true, image: `sha256:${'b'.repeat(64)}`,
+    resourceLimits: { cpuCount: 2, memoryBytes: 1024, memorySwapBytes: 1024, pids: 32 } };
+  writeBackendLease(leasePath, lease);
+  const priorPath = process.env.STACK_BENCH_LEASE;
+  const priorToken = process.env.STACK_BENCH_LEASE_TOKEN;
+  process.env.STACK_BENCH_LEASE = leasePath;
+  process.env.STACK_BENCH_LEASE_TOKEN = lease.ownershipToken;
+  const buildContainer = lease.resources.buildContainer;
+  assert(buildContainer);
+  const calls: RecordedCommand[] = [];
+  const exec = (command: string, args: readonly string[], options: TextCommandOptions): string => {
+    calls.push({ argv: [command, ...args], options });
+    if (args[0] === 'inspect') return `${buildContainer.id}\n`;
+    return '===== /run/application/restart-mongodb-6673.log =====\nserver failed clearly\n';
+  };
+  try {
+    assert.deepEqual(captureApplicationDiagnostics(output, { exec }), { captured: true, path: output });
+    assert.match(readFileSync(output, 'utf8'), /server failed clearly/);
+    const inspect = calls[0];
+    const capture = calls[1];
+    assert(inspect);
+    assert(capture);
+    assert.deepEqual(capture.argv.slice(0, 4), ['docker', 'exec', buildContainer.id, 'sh']);
+    assert.match(capture.argv.at(-1) ?? '', /reference-application\.log/);
+    assert.match(capture.argv.at(-1) ?? '', /restart-\*\.log/);
+    assert.equal(inspect.options.timeout, 120_000);
+    assert.equal(capture.options.timeout, 120_000);
+  } finally {
+    if (priorPath === undefined) delete process.env.STACK_BENCH_LEASE;
+    else process.env.STACK_BENCH_LEASE = priorPath;
+    if (priorToken === undefined) delete process.env.STACK_BENCH_LEASE_TOKEN;
+    else process.env.STACK_BENCH_LEASE_TOKEN = priorToken;
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('hosted application stop targets safe process groups and exact group-1 listeners', () => {
+  const command = hostedStopScript(6301);
+  assert.ok((command.match(/lsof -ti tcp:6301 -sTCP:LISTEN/g)?.length ?? 0) >= 3,
+    'listener ownership must be reacquired before TERM, before KILL, and during final verification');
+  assert.match(command, /ps -o pgid=/);
+  assert.match(command, /\/bin\/kill -TERM -- "-\$pgid"/);
+  assert.match(command, /\/bin\/kill -TERM "\$pid"/);
+  assert.match(command, /\/bin\/kill -KILL -- "-\$pgid"/);
+  assert.match(command, /\/bin\/kill -KILL "\$pid"/);
+  assert.match(command, /quiet.*-ge 10/);
+  assert.match(command, /hosted application port 6301 still has a listener/);
+  assert.match(command, /self_pgid=/);
+  assert.match(command, /init_pgid=/);
+  assert.match(command, /"\$pgid" = 1/);
+  assert.match(command, /direct="\$direct \$pid"/);
+  assert.match(command, /unsafe listener pid/);
+  assert.throws(() => hostedStopScript('6301; rm -rf /'), /invalid hosted application port/);
+});
+
+test('hosted application stop targets its recorded launch before a port listener exists', () => {
+  const command = hostedRecordedProcessStopScript('/run/application/restart-mongodb-6301.pid');
+  assert.match(command, /cat "\$record"/);
+  assert.match(command, /current_started="\$\{20\}"/);
+  assert.match(command, /current_pgid="\$3"/);
+  assert.match(command, /current_started" != "\$started".*rm -f "\$record"; exit 0/s);
+  assert(command.indexOf('current_started') < command.indexOf('/bin/kill -TERM'));
+  assert.match(command, /\/bin\/kill -TERM -- "-\$pid"/);
+  assert.match(command, /\/bin\/kill -KILL -- "-\$pid"/);
+  assert.match(command, /application process group is still running/);
+  assert.match(command, /rm -f "\$record"/);
+  assert.throws(() => hostedRecordedProcessStopScript('/app/server.pid'),
+    /invalid hosted application process record/);
+});
+
+test('hosted application launch supports generated and fixed reference apps', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-hosted-launch-'));
+  try {
+    writeFileSync(join(root, 'start.sh'), '#!/usr/bin/env bash\nset -euo pipefail\nexec app\n');
+    assert.deepEqual(hostedLaunchCommand(root), {
+      directory: '.', command: '/bin/bash ./start.sh',
+    });
+    rmSync(join(root, 'start.sh'));
+    writeFileSync(join(root, 'package.json'), JSON.stringify({
+      scripts: { start: 'node index.js', dev: 'node --watch index.js' },
+    }));
+    assert.deepEqual(hostedLaunchCommand(root), {
+      directory: '.', command: '/usr/local/bin/npm run start',
+    });
+    writeFileSync(join(root, 'package.json'), JSON.stringify({ scripts: { dev: 'vite' } }));
+    assert.throws(() => hostedLaunchCommand(root), error =>
+      error instanceof Error
+      && error.message === 'app has no start.sh or npm start script'
+      && 'code' in error && error.code === 'generated_app_not_restartable');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('hosted application control inspects and stops listeners as the application user', async () => {
+  const id = 'a'.repeat(64);
+  const calls: Array<{ command: string; args: readonly string[]; options: TextCommandOptions }> = [];
+  const exec = (command: string, args: readonly string[], options: TextCommandOptions): string => {
+    calls.push({ command, args, options });
+    if (args[0] === 'inspect') return `${id}\n`;
+    return '';
+  };
+
+  await controlHostedAppServer({
+    adapterId: 'mongodb',
+    lease: { resources: { buildContainer: { name: 'leased-build', id, owned: true } } },
+    app: '.',
+    port: 65534,
+    probe: '/',
+    mode: 'stop',
+    handoffWorkspace: true,
+    exec,
+  });
+
+  const recordedStop = calls[1];
+  const stop = calls[2];
+  assert(recordedStop && stop);
+  assert.deepEqual(recordedStop.args.slice(0, 3), ['exec', id, 'sh']);
+  assert.match(recordedStop.args.at(-1) ?? '', /restart-mongodb-65534\.pid/);
+  assert.deepEqual(stop.args.slice(0, 7), [
+    'exec', '--user', '10001:10001', '-e', 'HOME=/home/developer', '-e', 'USER=developer',
+  ]);
+  assert.equal(stop.args[7], id);
+  assert.match(stop.args.at(-1) ?? '', /lsof -ti tcp:65534 -sTCP:LISTEN/);
+  assert(calls.some(call => call.args.slice(0, 3).join(' ') === `exec ${id} chown`));
+});
+
+test('application control rejects unsupported modes before touching a container', async () => {
+  let calls = 0;
+  await assert.rejects(controlHostedAppServer({
+    adapterId: 'mongodb',
+    lease: { resources: { buildContainer: null } },
+    app: '.',
+    port: 6301,
+    probe: '/',
+    mode: 'invalid' as 'restart',
+    exec: () => { calls += 1; return ''; },
+  }), /unsupported application control mode invalid/);
+  assert.equal(calls, 0);
+
+  assert.throws(() => STACK_ADAPTER_REGISTRY.get('spacetime').lifecycle.control!({
+    adapterId: 'spacetime', lease: {} as never, app: '.', port: 6301, probe: '/', mode: 'stop',
+  }), /unsupported SpacetimeDB control mode stop/);
+});
+
+test('SpacetimeDB application restart uses its leased module and server', () => {
+  const environment = STACK_ADAPTER_REGISTRY.get('spacetime').lifecycle.applicationEnvironment!({
+    resources: {
+      module: 'shop-run-1',
+      serverUri: 'http://127.0.0.1:3310',
+      buildContainer: { networkMode: 'bridge' },
+    },
+  } as never);
+  assert.deepEqual(environment, {
+    VITE_MODULE_NAME: 'shop-run-1',
+    VITE_SPACETIMEDB_URI: 'http://127.0.0.1:3310',
+  });
+});
+
+test('SpacetimeDB application start uses the root contract independently of its database host', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-hosted-failure-'));
+  const id = 'a'.repeat(64);
+  const abort = new AbortController();
+  abort.abort(new Error('stop waiting'));
+  writeFileSync(join(root, 'start.sh'), '#!/bin/sh\nexec app\n');
+  const calls: string[][] = [];
+  const exec = (_command: string, args: readonly string[]): string => {
+    calls.push([...args]);
+    if (args[0] === 'inspect') return `${id}\n`;
+    if (args[0] === 'exec' && args[2] === 'tail') {
+      return './start.sh: 2: set: Illegal option -o pipefail\n';
+    }
+    return '';
+  };
+  try {
+    await assert.rejects(controlHostedAppServer({
+      adapterId: 'spacetime',
+      lease: { resources: { buildContainer: { name: 'leased-build', id, owned: true } } },
+      app: root,
+      port: 65534,
+      probe: '/',
+      mode: 'start',
+      handoffWorkspace: true,
+      signal: abort.signal,
+      exec,
+    }), error => error instanceof Error
+      && error.message.includes('set: Illegal option -o pipefail')
+      && 'code' in error && error.code === 'generated_app_not_restartable');
+    const launch = calls.find(args => args[0] === 'exec' && args.includes('-d'));
+    assert(calls.some(args => args.slice(0, 3).join(' ') === `exec ${id} chown`));
+    assert(launch);
+    assert.match(launch.at(-1) ?? '', /\/bin\/bash \.\/start\.sh/);
+    assert.match(launch.at(-1) ?? '', /restart-spacetime-65534\.log/);
+    assert.match(launch.at(-1) ?? '', /\/usr\/bin\/setsid/);
+    assert.match(launch.at(-1) ?? '', /restart-spacetime-65534\.pid/);
+    assert.match(launch.at(-1) ?? '', /\/proc\/\$\$\/stat/);
+    assert.match(launch.at(-1) ?? '', /\(umask 077; printf/);
+    assert.match(launch.at(-1) ?? '', /printf "%s %s\\n" "\$\$" "\$\{20\}"/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('hosted application start fails as soon as the launch exits without a listener and keeps its log', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-hosted-exit-'));
+  const id = 'b'.repeat(64);
+  writeFileSync(join(root, 'start.sh'), '#!/bin/sh\nexec app\n');
+  const log = ['[start.sh] Installing dependencies', 'npm ERR! network request failed',
+    'npm ERR! A complete log of this run can be found in: /home/developer/.npm/_logs/x.log'];
+  const exec = (_command: string, args: readonly string[]): string => {
+    if (args[0] === 'inspect') return `${id}\n`;
+    if (args[0] === 'exec' && args[2] === 'tail') return `${log.join('\n')}\n`;
+    const script = String(args.at(-1) ?? '');
+    if (/\/proc\/\$pid/.test(script) || /-sTCP:LISTEN\)"\s*\]/.test(script)) {
+      throw Object.assign(new Error('exit 1'), { status: 1 });
+    }
+    return '';
+  };
+  const startedAt = Date.now();
+  try {
+    await assert.rejects(controlHostedAppServer({
+      adapterId: 'postgres',
+      lease: { resources: { buildContainer: { name: 'leased-build', id, owned: true } } },
+      app: root,
+      port: 65533,
+      probe: '/',
+      mode: 'start',
+      exec,
+    }), error => error instanceof Error
+      && error.message.startsWith('postgres application exited before it listened on port 65533: ')
+      && error.message.includes('npm ERR! network request failed')
+      && 'code' in error && error.code === 'generated_app_not_restartable'
+      && 'startLog' in error && error.startLog === log.join('\n'));
+    assert.ok(Date.now() - startedAt < HOSTED_START_TIMEOUT_MS / 10);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/backend-lease-processes.integration.ts b/tools/stack-bench/tests/backend-lease-processes.integration.ts
new file mode 100644
index 00000000000..4e3bf7040ec
--- /dev/null
+++ b/tools/stack-bench/tests/backend-lease-processes.integration.ts
@@ -0,0 +1,104 @@
+import assert from 'node:assert/strict';
+import { execFileSync, spawn } from 'node:child_process';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { createServer } from 'node:http';
+import type { Server } from 'node:http';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { compiledEntrypoint } from '../src/package-root.js';
+import { createBackendLease, readBackendLease, writeBackendLease }
+  from '../src/runtime/backend-lease.js';
+import { releaseBackendLease } from '../src/runtime/backend-teardown.js';
+import { processIdentity } from '../src/runtime/platform.js';
+
+// Lease rules that need a real second process: an owned runtime process to
+// stop, and a lock held by another controller.
+
+async function listen(server: Server): Promise<number> {
+  await new Promise<void>((resolve, reject) =>
+    server.listen(0, '127.0.0.1', resolve).once('error', reject));
+  const address = server.address();
+  assert(address && typeof address !== 'string');
+  return address.port;
+}
+
+async function close(server: Server): Promise<void> {
+  await new Promise<void>((resolve, reject) =>
+    server.close(error => error ? reject(error) : resolve()));
+}
+
+function processStderr(error: unknown): string {
+  if (error === null || typeof error !== 'object' || !('stderr' in error)) return '';
+  return String(error.stderr ?? '');
+}
+
+test('starting Spacetime cleanup requires and stops the exact launched process', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-starting-release-'));
+  const path = join(root, 'lease.json');
+  const ambiguousPath = join(root, 'ambiguous.json');
+  const first = createServer();
+  const ownedPort = await listen(first);
+  await close(first);
+  const second = createServer();
+  const ambiguousPort = await listen(second);
+  await close(second);
+  const child = spawn(process.execPath, ['-e', 'setInterval(() => {}, 1000)'],
+    { detached: true, stdio: 'ignore' });
+  child.unref();
+  try {
+    const lease = createBackendLease({ runId: 'starting-owned', backend: 'spacetime', track: 'chat',
+      runIndex: 0, serverUri: `http://127.0.0.1:${ownedPort}`, module: 'starting-owned',
+      dataDir: join(root, 'owned-data') });
+    lease.state = 'starting';
+    lease.resources.launchedProcess = child.pid ? processIdentity(child.pid) : null;
+    writeBackendLease(path, lease);
+    assert.equal(releaseBackendLease(path, lease.ownershipToken), true);
+    assert.equal(readBackendLease(path, { token: lease.ownershipToken }).state, 'released');
+
+    const ambiguous = createBackendLease({ runId: 'starting-ambiguous', backend: 'spacetime',
+      track: 'chat', runIndex: 1, serverUri: `http://127.0.0.1:${ambiguousPort}`,
+      module: 'starting-ambiguous', dataDir: join(root, 'ambiguous-data') });
+    ambiguous.state = 'starting';
+    writeBackendLease(ambiguousPath, ambiguous);
+    assert.equal(releaseBackendLease(ambiguousPath, ambiguous.ownershipToken), false);
+    assert.equal(readBackendLease(ambiguousPath, { token: ambiguous.ownershipToken }).state, 'starting');
+  } finally {
+    try { child.kill('SIGKILL'); } catch { /* already stopped by lease teardown */ }
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('appliance controllers share locks and require recovery after an owner exits', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-shared-lock-'));
+  const helper = compiledEntrypoint('tests', 'fixtures', 'resource-lock-process.js');
+  const owner = spawn(process.execPath, [helper, root, 'first-controller', 'hold'], {
+    stdio: ['ignore', 'pipe', 'pipe'],
+  });
+  try {
+    await new Promise<void>((resolve, reject) => {
+      let stderr = '';
+      owner.stderr.on('data', chunk => { stderr += chunk; });
+      owner.stdout.once('data', chunk => {
+        if (String(chunk).includes('acquired')) resolve();
+        else reject(new Error(`lock helper returned unexpected output: ${chunk}`));
+      });
+      owner.once('error', reject);
+      owner.once('exit', code => reject(new Error(`lock helper exited ${code}: ${stderr}`)));
+    });
+    assert.throws(() => execFileSync(process.execPath,
+      [helper, root, 'second-controller'], { encoding: 'utf8', stdio: 'pipe' }),
+    error => /already leased by first-controller/.test(processStderr(error)));
+
+    owner.kill('SIGTERM');
+    await new Promise<void>(resolve => owner.once('exit', () => resolve()));
+    assert.throws(() => execFileSync(process.execPath,
+      [helper, root, 'second-controller'], { encoding: 'utf8', stdio: 'pipe' }),
+    error => /remains leased by first-controller; run authenticated recovery/
+      .test(processStderr(error)));
+  } finally {
+    if (owner.exitCode === null) owner.kill('SIGKILL');
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/backend-lease.test.ts b/tools/stack-bench/tests/backend-lease.test.ts
new file mode 100644
index 00000000000..a419e9bad3b
--- /dev/null
+++ b/tools/stack-bench/tests/backend-lease.test.ts
@@ -0,0 +1,345 @@
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { existsSync, mkdtempSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { createServer } from 'node:http';
+import type { Server } from 'node:http';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import {
+  createBackendLease,
+  acquireResourceLock,
+  acquireResourceLocks,
+  backendResourceLockKeys,
+  newRunId,
+  publicBackendLease,
+  readBackendLease,
+  releaseResourceLocks,
+  resourceLockScope,
+  updateBackendLease,
+  writeBackendLease,
+} from '../src/runtime/backend-lease.js';
+import { releaseBackendLease, stopLeasedContainer } from '../src/runtime/backend-teardown.js';
+import { processIdentity } from '../src/runtime/platform.js';
+
+async function listen(server: Server): Promise<number> {
+  await new Promise<void>((resolve, reject) =>
+    server.listen(0, '127.0.0.1', resolve).once('error', reject));
+  const address = server.address();
+  assert(address && typeof address !== 'string');
+  return address.port;
+}
+
+async function close(server: Server): Promise<void> {
+  await new Promise<void>((resolve, reject) =>
+    server.close(error => error ? reject(error) : resolve()));
+}
+
+function fixture() {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-lease-'));
+  const path = join(root, 'lease.json');
+  const lease = createBackendLease({
+    runId: 'chat-spacetime-run0-test', backend: 'spacetime', track: 'chat', runIndex: 0,
+    serverUri: 'http://127.0.0.1:3210', module: 'app-run0', dataDir: join(root, 'data'),
+  });
+  return { root, path, lease };
+}
+
+test('run ids include track, backend, index, timestamp, and a nonce', () => {
+  const id = newRunId({ track: 'Chat', backend: 'Spacetime', runIndex: 2,
+    now: new Date('2026-08-10T12:34:56.000Z'), nonce: 'ABCDEF12-rest' });
+  assert.equal(id, 'chat-spacetime-run2-20260810123456-abcdef12');
+});
+
+test('lease reads require the matching token, backend, and active state', () => {
+  const f = fixture();
+  try {
+    f.lease.state = 'active';
+    writeBackendLease(f.path, f.lease);
+    assert.equal(readBackendLease(f.path, {
+      token: f.lease.ownershipToken, backend: 'spacetime', active: true,
+    }).runId, f.lease.runId);
+    assert.throws(() => readBackendLease(f.path, { token: 'wrong' }), /token does not match/);
+    assert.throws(() => readBackendLease(f.path, { backend: 'postgres' }), /not postgres/);
+  } finally { rmSync(f.root, { recursive: true, force: true }); }
+});
+
+test('lease updates are atomic and retain identity', () => {
+  const f = fixture();
+  try {
+    writeBackendLease(f.path, f.lease);
+    updateBackendLease(f.path, { token: f.lease.ownershipToken, runId: f.lease.runId }, next => {
+      next.state = 'active';
+      next.resources.listenerProcesses = [{ pid: 8080, startMarker: '1' }];
+      return next;
+    });
+    const onDisk = JSON.parse(readFileSync(f.path, 'utf8'));
+    assert.equal(onDisk.runId, f.lease.runId);
+    assert.deepEqual(onDisk.resources.listenerProcesses, [{ pid: 8080, startMarker: '1' }]);
+  } finally { rmSync(f.root, { recursive: true, force: true }); }
+});
+
+test('lease ownership tokens are stored with private filesystem modes', t => {
+  if (process.platform === 'win32') return t.skip('POSIX modes are not enforced on Windows');
+  const f = fixture();
+  try {
+    writeBackendLease(f.path, f.lease);
+    assert.equal(statSync(f.root).mode & 0o777, 0o700);
+    assert.equal(statSync(f.path).mode & 0o777, 0o600);
+  } finally { rmSync(f.root, { recursive: true, force: true }); }
+});
+
+test('leases reject unknown lifecycle states and malformed process identities', () => {
+  const f = fixture();
+  assert.throws(() => writeBackendLease(f.path, { ...f.lease, state: 'guessing' }),
+    /unknown state guessing/);
+  assert.throws(() => writeBackendLease(f.path, { ...f.lease, state: 'starting',
+    resources: { ...f.lease.resources, launchedProcess: { pid: -1, startMarker: '1' } } }),
+  /launchedProcess must be a process identity/);
+  assert.throws(() => writeBackendLease(f.path, { ...f.lease,
+    resources: { ...f.lease.resources, listenerProcesses: [{ pid: 1, startMarker: 'bad' }] } }),
+  /listenerProcesses must contain only process identities/);
+  const invalidContainer = { name: 'build', id: 'container-id', image: 'image-id',
+    owned: true, networkMode: 'ambient' };
+  assert.throws(() => writeBackendLease(f.path, { ...f.lease,
+    resources: { ...f.lease.resources, buildContainer: invalidContainer } }),
+  /buildContainer.networkMode is invalid/);
+  const missingLimits = { ...invalidContainer, networkMode: 'bridge' };
+  assert.throws(() => writeBackendLease(f.path, { ...f.lease,
+    resources: { ...f.lease.resources, buildContainer: missingLimits } }),
+    /buildContainer.resourceLimits is invalid/);
+  const invalidLimits = { ...missingLimits, resourceLimits: {
+    cpuCount: 2, memoryBytes: 4096, memorySwapBytes: 2048, pids: 512 } };
+  assert.throws(() => writeBackendLease(f.path, { ...f.lease,
+    resources: { ...f.lease.resources, buildContainer: invalidLimits } }),
+    /buildContainer.resourceLimits is invalid/);
+});
+
+test('public lease evidence hashes rather than exposes the ownership token', () => {
+  const f = fixture();
+  try {
+    f.lease.resources.buildContainer = { name: 'build', id: 'container-id', image: 'image-id',
+      owned: true, networkMode: 'bridge', resourceLimits: {
+        cpuCount: 2, memoryBytes: 4096, memorySwapBytes: 4096, pids: 512,
+    } };
+    const publicLease = publicBackendLease(f.lease);
+    assert.equal('ownershipToken' in publicLease, false);
+    assert.match(publicLease.ownership.markerSha256, /^[0-9a-f]{64}$/);
+    assert(publicLease.resources.buildContainer);
+    assert.deepEqual(publicLease.resources.buildContainer.resourceLimits,
+      { cpuCount: 2, memoryBytes: 4096, memorySwapBytes: 4096, pids: 512 });
+  } finally { rmSync(f.root, { recursive: true, force: true }); }
+});
+
+test('Spacetime leases reject non-loopback and portless targets', () => {
+  const base = { runId: 'unsafe', backend: 'spacetime', track: 'chat', runIndex: 0,
+    module: 'app-run0', dataDir: tmpdir() };
+  assert.throws(() => createBackendLease({ ...base, serverUri: 'https://production.example:443' }),
+    /must use http/);
+  assert.throws(() => createBackendLease({ ...base, serverUri: 'http://localhost' }),
+    /explicit loopback port/);
+});
+
+test('supervisor teardown releases an owned lease without runtime processes', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-supervisor-release-'));
+  const path = join(root, 'lease.json');
+  try {
+    const lease = createBackendLease({
+      runId: 'chat-postgres-run0-supervisor', backend: 'postgres', track: 'chat', runIndex: 0,
+      database: 'app_supervisor', container: { name: 'unused-postgres', id: 'unused-id' },
+    });
+    lease.state = 'active';
+    writeBackendLease(path, lease);
+    assert.equal(releaseBackendLease(path, lease.ownershipToken), true);
+    const released = readBackendLease(path, { token: lease.ownershipToken });
+    assert.equal(released.state, 'released');
+    assert(released.releasedAt);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('container teardown retries transient Docker removal failures', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-container-retry-'));
+  const path = join(root, 'lease.json');
+  try {
+    const lease = createBackendLease({
+      runId: 'container-retry', backend: 'postgres', track: 'chat', runIndex: 0,
+      database: 'container_retry', container: { name: 'owned-container', id: 'owned-id' },
+    });
+    lease.state = 'active';
+    lease.resources.buildContainer = {
+      name: 'owned-build', id: 'owned-build-id', image: 'build-image', owned: true,
+      running: true, networkMode: 'bridge',
+      resourceLimits: { cpuCount: 2, memoryBytes: 4096, memorySwapBytes: 4096, pids: 512 },
+    };
+    writeBackendLease(path, lease);
+    let attempts = 0;
+    const delays: number[] = [];
+    assert.equal(stopLeasedContainer(path, lease.ownershipToken, {
+      inspect: () => 'owned-build-id',
+      remove: () => {
+        attempts += 1;
+        if (attempts < 3) throw new Error('Docker daemon is temporarily unavailable');
+      },
+      wait: delay => delays.push(delay),
+    }), true);
+    assert.equal(attempts, 3);
+    assert.deepEqual(delays, [0, 250, 750]);
+    assert.equal(readBackendLease(path, { token: lease.ownershipToken })
+      .resources.buildContainer?.running, false);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('container teardown accepts an exact container removed after inspection', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-container-missing-'));
+  const path = join(root, 'lease.json');
+  try {
+    const lease = createBackendLease({
+      runId: 'container-missing', backend: 'postgres', track: 'chat', runIndex: 0,
+      database: 'container_missing', container: { name: 'owned-container', id: 'owned-id' },
+    });
+    lease.state = 'active';
+    lease.resources.buildContainer = {
+      name: 'owned-build', id: 'owned-build-id', image: 'build-image', owned: true,
+      running: true, networkMode: 'bridge',
+      resourceLimits: { cpuCount: 2, memoryBytes: 4096, memorySwapBytes: 4096, pids: 512 },
+    };
+    writeBackendLease(path, lease);
+    assert.equal(stopLeasedContainer(path, lease.ownershipToken, {
+      inspect: () => 'owned-build-id',
+      remove: () => { throw new Error('No such container: owned-build-id'); },
+      wait: () => undefined,
+    }), true);
+    assert.equal(readBackendLease(path, { token: lease.ownershipToken })
+      .resources.buildContainer?.running, false);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('pre-activation Spacetime cleanup releases only when its leased port stayed empty', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-created-release-'));
+  const emptyPath = join(root, 'empty.json');
+  const occupiedPath = join(root, 'occupied.json');
+  const emptyServer = createServer();
+  const emptyPort = await listen(emptyServer);
+  await close(emptyServer);
+  const occupied = createServer((_request, response) => response.end('foreign'));
+  const occupiedPort = await listen(occupied);
+  try {
+    const empty = createBackendLease({ runId: 'created-empty', backend: 'spacetime', track: 'chat',
+      runIndex: 0, serverUri: `http://127.0.0.1:${emptyPort}`, module: 'created-empty',
+      dataDir: join(root, 'empty-data') });
+    writeBackendLease(emptyPath, empty);
+    assert.equal(releaseBackendLease(emptyPath, empty.ownershipToken), true);
+    assert.equal(readBackendLease(emptyPath, { token: empty.ownershipToken }).state, 'released');
+
+    const blocked = createBackendLease({ runId: 'created-occupied', backend: 'spacetime', track: 'chat',
+      runIndex: 1, serverUri: `http://127.0.0.1:${occupiedPort}`,
+      module: 'created-occupied', dataDir: join(root, 'occupied-data') });
+    writeBackendLease(occupiedPath, blocked);
+    assert.equal(releaseBackendLease(occupiedPath, blocked.ownershipToken), false);
+    assert.equal(readBackendLease(occupiedPath, { token: blocked.ownershipToken }).state, 'created');
+    assert.equal((await fetch(`http://127.0.0.1:${occupiedPort}`)).status, 200);
+  } finally {
+    occupied.closeAllConnections();
+    await close(occupied);
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('resource locks exclude a concurrent run and release only for their owner', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-lock-'));
+  try {
+    const first = createBackendLease({ runId: 'first', backend: 'stub', track: 'loop', runIndex: 0 });
+    const second = createBackendLease({ runId: 'second', backend: 'stub', track: 'loop', runIndex: 0 });
+    first.resources.locks.push(acquireResourceLock({ root, key: 'slot:loop:stub:run0', lease: first }));
+    assert.throws(() => acquireResourceLock({ root, key: 'slot:loop:stub:run0', lease: second }),
+      /already leased by first/);
+    releaseResourceLocks(first);
+    second.resources.locks.push(acquireResourceLock({ root, key: 'slot:loop:stub:run0', lease: second }));
+    releaseResourceLocks(second);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('resource lock release preserves a replacement owner record', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-lock-release-'));
+  try {
+    const first = createBackendLease({ runId: 'first', backend: 'stub', track: 'loop', runIndex: 0 });
+    const lock = acquireResourceLock({ root, key: 'shared', lease: first });
+    first.resources.locks.push(lock);
+    writeFileSync(lock.path, JSON.stringify({ runId: 'replacement', ownerPid: process.pid,
+      ownerStartMarker: processIdentity(process.pid)?.startMarker ?? null,
+      ownershipMarkerSha256: 'replacement' }));
+    assert.throws(() => releaseResourceLocks(first), /no longer belongs/);
+    assert.equal(existsSync(lock.path), true);
+    assert.equal(JSON.parse(readFileSync(lock.path, 'utf8')).runId, 'replacement');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('bench and reference leases use the same canonical slot and backend keys', () => {
+  const input = { backend: 'spacetime', track: 'ecommerce', runIndex: 0,
+    serverUri: 'http://127.0.0.1:3310', module: 'app-ecom-run0',
+    dataDir: tmpdir() };
+  const bench = createBackendLease({ ...input, runId: 'bench' });
+  const reference = createBackendLease({ ...input, runId: 'reference' });
+  const preparedKeys = ['listener:http://127.0.0.1:3310'];
+  const expected = [
+    'listener:http://127.0.0.1:3310',
+    'slot:ecommerce:spacetime:run0',
+  ];
+  assert.deepEqual(backendResourceLockKeys(bench, preparedKeys), expected);
+  assert.deepEqual(backendResourceLockKeys(reference, preparedKeys), expected);
+});
+
+test('multi-lock acquisition rolls back earlier keys when a later key is busy', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-lock-rollback-'));
+  const held = createBackendLease({ runId: 'held', backend: 'stub', track: 'loop', runIndex: 0 });
+  const target = createBackendLease({ runId: 'target', backend: 'stub', track: 'loop', runIndex: 1 });
+  const probe = createBackendLease({ runId: 'probe', backend: 'stub', track: 'loop', runIndex: 2 });
+  try {
+    held.resources.locks.push(acquireResourceLock({ root, key: 'b-held', lease: held }));
+    assert.throws(() => acquireResourceLocks({
+      root, keys: ['a-rollback', 'b-held'], lease: target,
+    }), /already leased by held/);
+    probe.resources.locks.push(acquireResourceLock({ root, key: 'a-rollback', lease: probe }));
+    releaseResourceLocks(probe);
+    releaseResourceLocks(held);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('resource lock scope is shared only for the appliance', () => {
+  const temporaryDirectory = join(tmpdir(), 'scope-test');
+  assert.deepEqual(resourceLockScope({}, { temporaryDirectory }), {
+    root: join(temporaryDirectory, 'stack-bench-resource-locks'), reclaimStale: true,
+  });
+  assert.deepEqual(resourceLockScope({ STACK_BENCH_APPLIANCE: '1' }), {
+    root: '/var/lib/stack-bench/controller-home/resource-locks', reclaimStale: false,
+  });
+  assert.throws(() => resourceLockScope({ STACK_BENCH_RESOURCE_LOCK_DIR: 'relative' }),
+    /must be an absolute path/);
+});
+
+test('resource acquisition reclaims a lock whose owner process is gone', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-lock-'));
+  try {
+    const stale = createBackendLease({ runId: 'stale', backend: 'stub', track: 'loop', runIndex: 0,
+      ownerPid: 2_147_483_646 });
+    stale.resources.locks.push(acquireResourceLock({ root, key: 'shared-listener', lease: stale }));
+    const current = createBackendLease({ runId: 'current', backend: 'stub', track: 'loop', runIndex: 1 });
+    current.resources.locks.push(acquireResourceLock({ root, key: 'shared-listener', lease: current }));
+    releaseResourceLocks(current);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('resource acquisition rejects PID reuse as lock ownership', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-lock-pid-reuse-'));
+  const key = 'shared-listener';
+  const digest = createHash('sha256').update(key).digest('hex');
+  const path = join(root, `${digest}.lock.json`);
+  try {
+    writeFileSync(path, JSON.stringify({ version: 1, key, runId: 'dead-owner',
+      ownerPid: process.pid, ownerStartMarker: 'not-this-process',
+      ownershipMarkerSha256: 'dead-owner', acquiredAt: new Date().toISOString() }));
+    const current = createBackendLease({ runId: 'current', backend: 'stub', track: 'loop', runIndex: 1 });
+    current.resources.locks.push(acquireResourceLock({ root, key, lease: current }));
+    releaseResourceLocks(current);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/bench-policy.test.ts b/tools/stack-bench/tests/bench-policy.test.ts
new file mode 100644
index 00000000000..1976290d8b3
--- /dev/null
+++ b/tools/stack-bench/tests/bench-policy.test.ts
@@ -0,0 +1,513 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { auditFailureSummary, gradeArgv, parseAgentProcessResult }
+  from '../commands/bench.js';
+import { finalizeRunTotals }
+  from '../src/evidence/benchmark-run.js';
+import { formatLevelSummary } from '../src/evidence/evidence-presentation.js';
+import type { RunTotalsInput } from '../src/evidence/benchmark-run.js';
+import { parseBenchArguments } from '../commands/bench-arguments.js';
+import { pristineMutationBaselinePath } from '../src/evidence/mutation-control.js';
+import { clearPrivateGradingEvidence, levelGradeIsUsable, repairEvidenceDecision,
+  repairHistoryEntry, repairProgressState, repairRegressionDecision,
+  restorePrivateGradingEvidence }
+  from '../src/evidence/repair-evidence.js';
+import { finalPackageEvidenceRequired, preserveFinalPackageEvidence, sourceBoundFirstBuildOutcome }
+  from '../src/runtime/source-checkpoint.js';
+import { materializationAppFailure, materializeAcceptedSource }
+  from '../src/runtime/source-materialization.js';
+import { dependencyRepairBudget, dependencyRepairRecords }
+  from '../src/progression/dependency-mode.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { writeArtifact } from '../src/evidence/artifacts.js';
+import { createCheckEvidence } from '../src/evidence/check-evidence.js';
+import { hashAppSource } from '../src/runtime/source-snapshot.js';
+import type { GradeBundlePayload } from '../src/evidence/benchmark-run.js';
+import { compiledEntrypoint } from '../src/package-root.js';
+import { agentSessionFailure } from '../src/agents/agent-result-contract.js';
+
+test('billable agent runs require the Docker appliance', () => {
+  const env = { ...process.env };
+  delete env.STACK_BENCH_APPLIANCE;
+  const result = spawnSync(process.execPath,
+    [compiledEntrypoint('commands', 'bench.js'), '--backend', 'stub'],
+    { encoding: 'utf8', env });
+  assert.notEqual(result.status, 0);
+  assert.match(result.stderr, /agent adapter claude-code requires the Docker appliance/);
+});
+
+test('a nonzero agent process preserves its valid provider-failure result', () => {
+  const request = { app: '/app', mode: 'build' as const, level: 1, backend: 'spacetime',
+    track: 'ecommerce', runIndex: 0, model: 'provider-model', guidance: 'neutral',
+    adapterCostLimit: 'non-billable' as const };
+  const raw = {
+    appDir: '/app', mode: 'build', level: 1, ok: false, sessionId: 'session-1',
+    costUsd: 0, tokens: 10, outputTokens: 2, turns: 1, promptBytes: 20, durationMs: 100,
+    setup: {}, usage: { input: 8, output: 2, cacheWrite: 0, cacheRead: 0 }, costReceipts: [],
+    providerMetadata: { failureCode: 'provider-usage-receipt-missing' },
+  };
+  const result = parseAgentProcessResult(`${JSON.stringify(raw)}\n`, '', new Error('exit code 3'),
+    request);
+  assert.equal(result.ok, false);
+  assert.equal(agentSessionFailure(result)?.kind, 'provider_failure');
+  assert.throws(() => parseAgentProcessResult(
+    `${JSON.stringify({ ...raw, ok: true })}\n`, '', new Error('exit code 3'), request),
+  /failed after reporting success/);
+});
+
+test('accepted source is materialized through the application lifecycle before grading', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-materialized-source-'));
+  try {
+    const source = join(root, 'source');
+    const app = join(root, 'app');
+    mkdirSync(join(app, 'node_modules'), { recursive: true });
+    mkdirSync(source, { recursive: true });
+    writeFileSync(join(source, 'index.js'), 'export const value = "accepted";\n');
+    writeFileSync(join(source, 'start.sh'), '#!/bin/sh\n');
+    writeFileSync(join(app, 'index.js'), 'export const value = "coding runtime";\n');
+    writeFileSync(join(app, '.server.pid'), '100\n');
+    writeFileSync(join(app, 'node_modules', 'state'), 'stale\n');
+    const modes: string[] = [];
+    const application = { backend: 'postgres', app, port: 6573, probe: '' };
+    await materializeAcceptedSource(source, app, application,
+      async (_spec, mode = 'restart') => {
+        modes.push(mode);
+        if (mode === 'stop' && modes.length === 1) {
+          assert.match(readFileSync(join(app, 'index.js'), 'utf8'), /coding runtime/);
+        }
+        if (mode === 'start') {
+          assert.match(readFileSync(join(app, 'index.js'), 'utf8'), /accepted/);
+          assert.equal(readFileSync(join(app, 'node_modules', 'state'), 'utf8'), 'stale\n');
+          writeFileSync(join(app, '.server.pid'), '200\n');
+        }
+      });
+    assert.deepEqual(modes, ['stop', 'start']);
+    assert.equal(readFileSync(join(app, '.server.pid'), 'utf8'), '200\n');
+    assert.equal(hashAppSource(app).sha256, hashAppSource(source).sha256);
+    await assert.rejects(materializeAcceptedSource(source, app, application, async (_spec, mode) => {
+      if (mode === 'start') writeFileSync(join(app, 'index.js'), 'changed during start\n');
+    }), /differs from its accepted snapshot/);
+    assert.match(readFileSync(join(app, 'index.js'), 'utf8'), /accepted/);
+    rmSync(join(source, 'start.sh'));
+    const missingContractModes: string[] = [];
+    let missingContract: unknown = null;
+    try {
+      await materializeAcceptedSource(source, app, application, async (_spec, mode) => {
+        missingContractModes.push(mode ?? 'restart');
+      });
+    } catch (error) {
+      missingContract = error;
+    }
+    assert.deepEqual(missingContractModes, ['stop']);
+    assert.equal(materializationAppFailure(missingContract)?.kind, 'app_failure');
+
+    writeFileSync(join(source, 'start.sh'), '#!/bin/sh\n');
+    let cleanupStops = 0;
+    await assert.rejects(materializeAcceptedSource(source, app, application, async (_spec, mode) => {
+      if (mode === 'start') writeFileSync(join(app, 'index.js'), 'changed during start\n');
+      if (mode === 'stop' && ++cleanupStops === 2) throw new Error('stop failed');
+    }), /could not stop and restore/);
+    assert.match(readFileSync(join(app, 'index.js'), 'utf8'), /accepted/);
+
+    const failedStartModes: string[] = [];
+    let failedStart: unknown = null;
+    try {
+      await materializeAcceptedSource(source, app, application, async (_spec, mode) => {
+        failedStartModes.push(mode ?? 'restart');
+        if (mode === 'start') {
+          mkdirSync(join(app, 'dist'));
+          throw Object.assign(new Error(
+            'npm install failed for DATABASE_URL=mongodb://user:secret@database:27017/app'),
+          { code: 'generated_app_not_restartable' });
+        }
+      });
+    } catch (error) {
+      failedStart = error;
+    }
+    assert.deepEqual(failedStartModes, ['stop', 'start', 'stop']);
+    assert.equal(existsSync(join(app, 'node_modules')), true);
+    assert.equal(existsSync(join(app, 'dist')), false);
+    const failedStartOutcome = materializationAppFailure(failedStart);
+    assert.equal(failedStartOutcome?.kind, 'app_failure');
+    assert.match(failedStartOutcome?.reason ?? '', /npm install failed/);
+    assert.doesNotMatch(failedStartOutcome?.reason ?? '', /secret/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('final package preservation verifies both source and grading before success', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-final-package-'));
+  try {
+    const app = join(root, 'app');
+    const output = join(root, 'output');
+    mkdirSync(join(app, 'stack-bench'), { recursive: true });
+    mkdirSync(output, { recursive: true });
+    writeFileSync(join(app, 'index.js'), 'export const ready = true;\n');
+    const source = hashAppSource(app);
+    writeArtifact(join(app, 'stack-bench', 'bundle.json'), {
+      kind: 'grade_bundle', id: 'final-grade', payload: {
+        observation: 'scored', source: { sha256: source.sha256 },
+        suites: {}, totals: { score: 1, max: 1 },
+        selection: { sha256: 'a'.repeat(64) },
+      },
+    });
+
+    const evidence = preserveFinalPackageEvidence({ appDir: app, outputDir: output });
+    assert.equal(evidence.source.sha256, source.sha256);
+    assert.equal(existsSync(join(output, 'grading', 'bundle.json')), true);
+
+    rmSync(join(app, 'stack-bench', 'bundle.json'));
+    assert.throws(() => preserveFinalPackageEvidence({ appDir: app, outputDir: output }),
+      /mandatory result package evidence.*final grader produced no bundle/);
+    assert.equal(existsSync(join(output, 'source', 'index.js')), true,
+      'source evidence remains available when grading preservation fails');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('an interrupted run keeps its root failure even after an earlier grade', () => {
+  const levels = [{ graded: true }, { graded: false }];
+  assert.equal(finalPackageEvidenceRequired({ kind: 'provider_failure' }, levels), false);
+  assert.equal(finalPackageEvidenceRequired({ kind: 'harness_failure' }, levels), false);
+  assert.equal(finalPackageEvidenceRequired({ kind: 'app_failure' }, levels), true);
+});
+
+test('a missing first-build source is a harness failure', () => {
+  const passed = { outcome: { kind: 'passed' }, totals: { score: 1, max: 1 }, suites: {} };
+  assert.equal(sourceBoundFirstBuildOutcome(passed, { sha256: 'a'.repeat(64) }).kind, 'passed');
+  assert.deepEqual(sourceBoundFirstBuildOutcome(passed, null), {
+    kind: 'harness_failure',
+    phase: 'first-build-source',
+    reason: 'the first-build source could not be preserved and verified',
+    appFailures: [],
+    inconclusive: [],
+    harnessFailures: ['the first-build source could not be preserved and verified'],
+  });
+});
+
+test('direct runs default to ten repairs while an explicit budget still wins', () => {
+  assert.equal(parseBenchArguments(['node', 'bench', '--backend', 'postgres']).repairs, 10);
+  assert.equal(parseBenchArguments(['node', 'bench', '--backend', 'postgres',
+    '--repairs', '4']).repairs, 4);
+});
+
+test('bench arguments reject partial and out-of-range run indexes', () => {
+  assert.throws(() => parseBenchArguments(['node', 'bench', '--backend', 'postgres',
+    '--run-index', '1junk']), /--run-index must be an integer/);
+  assert.throws(() => parseBenchArguments(['node', 'bench', '--backend', 'postgres',
+    '--run-index', '21']), /--run-index must be an integer from 0 through 20/);
+});
+
+test('bench arguments validate pricing at the CLI boundary', () => {
+  assert.throws(() => parseBenchArguments(['node', 'bench', '--backend', 'postgres',
+    '--pricing-json', '{}']), /--pricing-json/);
+});
+
+test('progression level usability follows its stricter evidence result', () => {
+  assert.equal(levelGradeIsUsable({ kind: 'app_failure' }), true);
+  assert.equal(levelGradeIsUsable({ kind: 'app_failure', inconclusive: ['feature/check'] }), false);
+  assert.equal(levelGradeIsUsable(
+    { kind: 'app_failure', inconclusive: ['unrelated/check'] }, { outcome: 'conclusive' }), true);
+  assert.equal(levelGradeIsUsable({ kind: 'inconclusive' }), false);
+  assert.equal(levelGradeIsUsable({ kind: 'provider_failure' }), false);
+  assert.equal(levelGradeIsUsable({ kind: 'app_failure' }, { outcome: 'inconclusive' }), false);
+  assert.equal(levelGradeIsUsable({ kind: 'app_failure' }, { outcome: 'conclusive' }), true);
+});
+
+test('dependency repair accounting uses repairs, not grading observations', () => {
+  const action = { type: 'repair', repair: { remaining: 3 } };
+  assert.equal(dependencyRepairBudget(action, 0), 3);
+  assert.equal(dependencyRepairBudget(action, 1), 4);
+  assert.throws(() => dependencyRepairBudget({ type: 'build', repair: { remaining: null } }, 0),
+    /valid repair action/);
+
+  const state = {
+    definition: { nodes: [
+      { id: 'accounts', level: 1 },
+      { id: 'catalog', level: 1 },
+      { id: 'recovery', level: 2 },
+    ] },
+    nodes: {
+      accounts: { repairs: { used: 1 },
+        exhaustedAtLevel: null, exhaustionReason: null },
+      catalog: { repairs: { used: 5 },
+        exhaustedAtLevel: 1, exhaustionReason: 'feature-repairs-exhausted' },
+      recovery: { repairs: { used: 1 },
+        exhaustedAtLevel: null, exhaustionReason: null },
+    },
+  };
+  assert.deepEqual(dependencyRepairRecords(state, 1, ['recovery']), [
+    { nodeId: 'accounts', used: 1, exhaustionReason: null },
+    { nodeId: 'catalog', used: 5, exhaustionReason: 'feature-repairs-exhausted' },
+    { nodeId: 'recovery', used: 1, exhaustionReason: null },
+  ]);
+});
+
+test('resumed dependency costs separate prior, current, and cumulative execution usage', () => {
+  const run: RunTotalsInput = { levels: [
+    { level: 1, graded: true, score: 1, max: 1, buildCostUsd: 4,
+      sessionTotals: { sessions: 1, tokens: 10, outputTokens: 2, turns: 1, durationMs: 100 } },
+    { level: 2, graded: true, score: 1, max: 1, repairCostUsd: 2,
+      sessionTotals: { sessions: 1, tokens: 5, outputTokens: 1, turns: 1, durationMs: 50 } },
+  ], progressionResume: { inheritedLevels: [1],
+    priorTotals: { costUsd: 4, costComplete: true } } };
+  const totals = finalizeRunTotals(run, 1_000, { now: 3_000 });
+  assert.equal(totals.priorExecutionCostUsd, 4);
+  assert.equal(totals.currentExecutionCostUsd, 2);
+  assert.equal(totals.cumulativeCostUsd, 6);
+  assert.equal(totals.costUsd, 6);
+  assert.equal(totals.costComplete, true);
+});
+
+test('ungraded level summaries contain useful failure values', () => {
+  assert.equal(formatLevelSummary({ level: 1, graded: false,
+    error: 'coding-session-failed', buildCostUsd: 1.25, durationMs: 4_400 }),
+  'L1: NOT GRADED | 0 repairs | $1.25 total ($0.00 repairs) | '
+    + 'stopped: coding session failed | 4s');
+});
+
+test('audit failures retain the exit code and stderr needed for diagnosis', () => {
+  const error = Object.assign(new Error('Command failed: leak audit'), {
+    status: 7,
+    stderr: "node:fs:441\nError: EACCES: permission denied, open '/run/transcript.jsonl'",
+  });
+  assert.equal(auditFailureSummary(error),
+    "Command failed: leak audit (exit 7; stderr: Error: EACCES: permission denied, open '/run/transcript.jsonl')");
+});
+
+test('repair preparation removes raw grading evidence but keeps the app and bug report', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-isolation-'));
+  try {
+    mkdirSync(join(root, 'stack-bench'), { recursive: true });
+    writeFileSync(join(root, 'stack-bench', 'bundle.json'), '{"private":true}\n');
+    writeFileSync(join(root, 'BUG_REPORT.md'), '# Behaviour only\n');
+    writeFileSync(join(root, 'app.js'), 'export {};\n');
+    clearPrivateGradingEvidence(root);
+    assert.equal(existsSync(join(root, 'stack-bench')), false);
+    assert.equal(existsSync(join(root, 'BUG_REPORT.md')), true);
+    assert.equal(existsSync(join(root, 'app.js')), true);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('dependency campaign progression rejects an incomplete or unbound plan reference', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-progression-plan-'));
+  try {
+    const path = join(root, 'plan.json');
+    writeArtifact(path, { kind: 'campaign_plan', id: 'plan', payload: {} });
+    assert.throws(() => parseBenchArguments(['node', 'bench',
+      '--campaign-file', path, '--campaign-attempt-id', 'attempt']),
+    /compiled campaign/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('repair progress pauses only on repeated findings without a score gain', () => {
+  const bundle = (score: number, failures: string[]): GradeBundlePayload => ({
+    totals: { score, max: 10, contractPass: true },
+    suites: {}, outcome: { kind: 'app_failure', phase: 'grading',
+      appFailures: failures, inconclusive: [], harnessFailures: [] } });
+  let state = repairProgressState(null, bundle(5, ['a']));
+  state = repairProgressState(state, bundle(5, ['a']));
+  assert.equal(state.stalledRounds, 1);
+  state = repairProgressState(state, bundle(5, ['b']));
+  assert.equal(state.stalledRounds, 0);
+  state = repairProgressState(state, bundle(6, ['b']));
+  assert.equal(state.stalledRounds, 0);
+  state = repairProgressState(state, bundle(6, ['b']));
+  assert.equal(state.stalledRounds, 1);
+});
+
+test('repair history reports score movement and exact remaining findings', () => {
+  const before = { totals: { score: 4, max: 6 }, suites: {}, outcome: {
+    kind: 'app_failure', phase: 'grading', appFailures: ['suite/a'] } };
+  const after = { totals: { score: 5, max: 6 }, suites: { lint: { results: [
+    { id: 'review-average', status: 'FAIL' },
+  ] } }, outcome: { kind: 'app_failure', phase: 'grading',
+    appFailures: ['contract-lint', 'suite/b'] } };
+  assert.deepEqual(repairHistoryEntry(2, before, after, 'kept'), {
+    round: 2, beforeScore: 4, beforeMax: 6, afterScore: 5, afterMax: 6,
+    result: 'kept', remainingFailures: ['suite/b', 'testing-interface/review-average'],
+  });
+});
+
+test('mutation shard coordinates are paired', () => {
+  const args = parseBenchArguments(['node', 'bench', '--backend', 'postgres',
+    '--mutation-shard-index', '1', '--mutation-shard-count', '3']);
+  assert.equal(args.mutationShardIndex, 1);
+  assert.equal(args.mutationShardCount, 3);
+  assert.throws(() => parseBenchArguments(['node', 'bench', '--backend', 'postgres',
+    '--mutation-shard-index', '1']), /must be supplied together/);
+});
+
+test('mutation-only execution is restricted to model-free reference runs', () => {
+  assert.throws(() => parseBenchArguments(['node', 'bench', '--backend', 'postgres',
+    '--reference-mutation-only']), /requires a mutation-bound reference fixture/);
+  const args = parseBenchArguments(['node', 'bench', '--backend', 'postgres', '--repairs', '0',
+    '--agent-adapter', 'reference-fixture', '--app', 'fixture', '--mutations', 'mutations.json',
+    '--reference-mutation-only', '--mutation-baseline-bundle', 'baseline.json']);
+  assert.equal(args.referenceMutationOnly, true);
+  assert(args.mutationBaselineBundle);
+  assert.match(args.mutationBaselineBundle, /baseline\.json$/);
+  assert.throws(() => parseBenchArguments(['node', 'bench', '--backend', 'postgres',
+    '--mutation-baseline-bundle', 'baseline.json']), /require --mutations/);
+  assert.throws(() => parseBenchArguments(['node', 'bench', '--backend', 'postgres',
+    '--mutations', 'mutations.json', '--mutation-baseline-bundle', 'baseline.json']),
+  /internal reference mutation option/);
+});
+
+test('mutation control reuses the existing clean grade when it is present', () => {
+  const args = { out: 'results/run', levelList: [1, 3] };
+  assert.equal(pristineMutationBaselinePath(args, () => true),
+    join('results/run', 'first-build-l3-grading', 'bundle.json'));
+  assert.equal(pristineMutationBaselinePath(args, () => false), null);
+  assert.equal(pristineMutationBaselinePath({ ...args, referenceMutationOnly: true }), null);
+});
+
+test('the first repair that makes an unstartable app gradeable is never rolled back', () => {
+  const after = { suites: {}, totals: { score: 35, max: 58 } };
+  for (const phase of ['application-restart', 'application-readiness']) {
+    const before = { outcome: { kind: 'app_failure', phase },
+      suites: {}, totals: { score: 0, max: 58 } };
+    assert.equal(repairEvidenceDecision(before, after).action, 'keep-setup-repair');
+  }
+  assert.equal(repairEvidenceDecision({ suites: {} }, after).action, 'rollback-no-comparison');
+});
+
+test('a repair cannot trade an earlier pass for a larger new gain', () => {
+  const evidence = (status: 'passed' | 'failed') => createCheckEvidence({
+    status, code: 'test_result', phase: 'assertion', startedAtMs: 1, completedAtMs: 2,
+  });
+  const bundle = (a: 'passed' | 'failed', b: 'passed' | 'failed') => ({ suites: {
+    features: { features: [{ id: 'work', criteria: [
+      { id: 'a', stableKey: 'check.a', points: 2, evidence: evidence(a) },
+      { id: 'b', stableKey: 'check.b', points: 3, evidence: evidence(b) },
+    ] }] },
+  } });
+
+  const decision = repairEvidenceDecision(bundle('passed', 'failed'), bundle('failed', 'passed'));
+  assert.equal(decision.action, 'rollback-regression');
+  assert.deepEqual(decision.shared.regressions, ['check.a']);
+});
+
+test('repair regression checks require earlier passes but ignore earlier failures', () => {
+  const evidence = (status: 'passed' | 'failed') => createCheckEvidence({
+    status, code: 'test_result', phase: 'assertion', startedAtMs: 1, completedAtMs: 2,
+  });
+  const before = { suites: { features: { features: [{ id: 'work', criteria: [
+    { id: 'pass', stableKey: 'check.pass', points: 1, evidence: evidence('passed') },
+    { id: 'fail', stableKey: 'check.fail', points: 1, evidence: evidence('failed') },
+  ] }] } } };
+  const kept = { suites: { features: { features: [{ id: 'work', criteria: [
+    { id: 'pass', stableKey: 'check.pass', points: 1, evidence: evidence('passed') },
+  ] }] } } };
+  const regressed = { suites: { features: { features: [{ id: 'work', criteria: [
+    { id: 'pass', stableKey: 'check.pass', points: 1, evidence: evidence('failed') },
+  ] }] } } };
+  assert.equal(repairRegressionDecision(before, kept).action, 'keep');
+  assert.equal(repairRegressionDecision(before, regressed).action, 'rollback-regression');
+});
+
+test('repair rollback restores the accepted grading evidence without another grade', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-grade-rollback-'));
+  try {
+    const app = join(root, 'app');
+    const snapshot = join(root, 'snapshot');
+    mkdirSync(join(app, 'stack-bench'), { recursive: true });
+    mkdirSync(snapshot, { recursive: true });
+    writeFileSync(join(app, 'stack-bench', 'bundle.json'), 'new grade\n');
+    writeFileSync(join(snapshot, 'bundle.json'), 'accepted grade\n');
+
+    restorePrivateGradingEvidence(app, snapshot);
+
+    assert.equal(readFileSync(join(app, 'stack-bench', 'bundle.json'), 'utf8'),
+      'accepted grade\n');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('grading restarts the complete application on its public port', () => {
+  const track = loadTrack('ecommerce');
+  const argv = gradeArgv({ backend: 'postgres', track: 'ecommerce', runIndex: 0,
+    media: false }, '/app', 'http://localhost:6573', 'postgres-l1', 1, track, 'attempt');
+  const index = argv.indexOf('--restart-spec');
+  assert(index > 0);
+  assert.deepEqual(JSON.parse(argv[index + 1] ?? ''), {
+    backend: 'postgres', app: '/app', port: 6573, probe: '',
+  });
+  assert.equal(argv.includes('--reseed-probe'), false);
+  assert.equal(argv.includes('--reseed-probe-expectation-json'), false);
+});
+
+test('Spacetime grading probes the application instead of a missing API port', () => {
+  const track = loadTrack('ecommerce');
+  const argv = gradeArgv({ backend: 'spacetime', track: 'ecommerce', runIndex: 0,
+    media: false }, '/app', 'http://localhost:6473', 'spacetime-l1', 1, track, 'attempt');
+  assert.equal(argv.includes('--reseed-probe'), false);
+  assert.equal(argv.includes('--reseed-probe-expectation-json'), false);
+});
+
+test('grading binds scored evidence to the selected application source', () => {
+  const track = loadTrack('ecommerce');
+  const sourceSha256 = 'a'.repeat(64);
+  const argv = gradeArgv({ backend: 'spacetime', track: 'ecommerce', runIndex: 0,
+    media: false }, '/app', 'http://localhost:6481', 'spacetime-l1', 1, track, 'attempt',
+  { sourceSha256 });
+  const index = argv.indexOf('--source-sha256');
+  assert(index > 0);
+  assert.equal(argv[index + 1], sourceSha256);
+});
+
+test('grading records a materialization defect through the complete grading path', () => {
+  const track = loadTrack('ecommerce');
+  const applicationFailure = { kind: 'app_failure', phase: 'application-restart',
+    reason: 'application startup changed the accepted source',
+    appFailures: ['application-restart'], inconclusive: [], harnessFailures: [] } as const;
+  const argv = gradeArgv({ backend: 'postgres', track: 'ecommerce', runIndex: 0,
+    media: false }, '/app', 'http://localhost:6573', 'postgres-l1', 1, track, 'attempt',
+  { applicationFailure });
+  const index = argv.indexOf('--application-failure-json');
+  assert(index > 0);
+  assert.deepEqual(JSON.parse(argv[index + 1] ?? ''), applicationFailure);
+});
+
+test('later-level grading receives prior selected checks as regression scope', () => {
+  const track = loadTrack('ecommerce');
+  const args = { backend: 'postgres', track: 'ecommerce', runIndex: 0, media: false,
+    recipeTasks: new Map([
+      [1, { request: { schemaVersion: 3 }, selection: { scoredChecks: [
+        { stableKey: 'prior/a' }, { stableKey: 'prior/b' },
+      ] } }],
+      [2, { request: { schemaVersion: 3 }, selection: { scoredChecks: [
+        { stableKey: 'current/c' },
+      ] } }],
+    ]) };
+  const argv = gradeArgv(args, '/app', 'http://localhost:6573', 'postgres-l2', 2,
+    track, 'attempt');
+  const index = argv.indexOf('--regression-checks-json');
+  assert(index > 0);
+  const regressionChecks = argv[index + 1];
+  assert(regressionChecks);
+  assert.deepEqual(JSON.parse(regressionChecks), ['prior/a', 'prior/b']);
+});
+
+test('dependency grading uses its exact action scope without a second regression selection', () => {
+  const track = loadTrack('ecommerce');
+  const args = { backend: 'postgres', track: 'ecommerce', runIndex: 0, media: false,
+    progression: { identity: { policy: 'dependency-graph' } },
+    recipeTasks: new Map([
+      [1, { request: { schemaVersion: 3 }, selection: { scoredChecks: [
+        { stableKey: 'prior/a' },
+      ] } }],
+      [2, { request: { schemaVersion: 3 }, selection: { scoredChecks: [
+        { stableKey: 'prior/a' }, { stableKey: 'current/b' },
+      ] } }],
+    ]) };
+  const argv = gradeArgv(args, '/app', 'http://localhost:6573', 'postgres-l2', 2,
+    track, 'attempt');
+  assert.equal(argv.includes('--regression-checks-json'), false);
+});
diff --git a/tools/stack-bench/tests/binary-provenance.contract.ts b/tools/stack-bench/tests/binary-provenance.contract.ts
new file mode 100644
index 00000000000..eb2405d311c
--- /dev/null
+++ b/tools/stack-bench/tests/binary-provenance.contract.ts
@@ -0,0 +1,137 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import test from 'node:test';
+
+import { assertBinarySourceUnchanged, createBinaryProvenance, RUST_BUILDER_IMAGE,
+  verifyBinaryProvenance } from '../container/binary-provenance.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { binarySourceIdentity, SOURCE_IDENTITY_SCHEME }
+  from '../src/releases/release-source.js';
+
+const SOURCE = { identityScheme: SOURCE_IDENTITY_SCHEME,
+  revision: 'a'.repeat(40), sha256: 'b'.repeat(64), files: 12 } as const;
+
+function fixture(): string {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-binaries-'));
+  const bin = join(root, 'container', 'bin');
+  mkdirSync(bin, { recursive: true });
+  writeFileSync(join(bin, 'spacetimedb-cli'), Buffer.from([0x7f, 0x45, 0x4c, 0x46, 1]));
+  writeFileSync(join(bin, 'spacetimedb-standalone'), Buffer.from([0x7f, 0x45, 0x4c, 0x46, 2]));
+  return root;
+}
+
+function record(root: string) {
+  const manifest = createBinaryProvenance(root, SOURCE);
+  writeFileSync(join(root, 'container', 'spacetimedb-binaries.json'),
+    `${JSON.stringify(manifest, null, 2)}\n`);
+  return manifest;
+}
+
+test('binary provenance verifies both exact Linux binaries and their source identity', () => {
+  const root = fixture();
+  try {
+    const manifest = record(root);
+    assert.equal(manifest.builderImage, RUST_BUILDER_IMAGE);
+    assert.deepEqual(verifyBinaryProvenance(root, { sourceSha256: SOURCE.sha256 }), manifest);
+
+    writeFileSync(join(root, 'container', 'bin', 'spacetimedb-cli'),
+      Buffer.from([0x7f, 0x45, 0x4c, 0x46, 3]));
+    assert.throws(() => verifyBinaryProvenance(root, { sourceSha256: SOURCE.sha256 }),
+      /spacetimedb-cli checksum does not match provenance/);
+
+    writeFileSync(join(root, 'container', 'bin', 'spacetimedb-cli'),
+      Buffer.from([0x7f, 0x45, 0x4c, 0x46, 1]));
+    writeFileSync(join(root, 'container', 'bin', 'spacetimedb-standalone'),
+      Buffer.from([0x7f, 0x45, 0x4c, 0x46, 4]));
+    assert.throws(() => verifyBinaryProvenance(root, { sourceSha256: SOURCE.sha256 }),
+      /spacetimedb-standalone checksum does not match provenance/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('binary provenance rejects stale source and an unbuilt clean checkout', () => {
+  const root = fixture();
+  try {
+    record(root);
+    assert.throws(() => verifyBinaryProvenance(root, { sourceSha256: 'c'.repeat(64) }),
+      /do not match the selected release source/);
+    const invalid = record(root);
+    invalid.source.files = 0;
+    writeFileSync(join(root, 'container', 'spacetimedb-binaries.json'), JSON.stringify(invalid));
+    assert.throws(() => verifyBinaryProvenance(root, { sourceSha256: SOURCE.sha256 }),
+      /source file count is invalid/);
+    writeFileSync(join(root, 'container', 'spacetimedb-binaries.json'), JSON.stringify({
+      schemaVersion: 1, status: 'unbuilt',
+    }));
+    assert.throws(() => verifyBinaryProvenance(root, { sourceSha256: SOURCE.sha256 }),
+      /build-linux-cli\.sh/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('binary source identity uses canonical Git content across checkout line endings', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-binary-source-'));
+  const cargo = join(root, 'Cargo.toml');
+  const main = join(root, 'crates', 'cli', 'src', 'main.rs');
+  mkdirSync(dirname(main), { recursive: true });
+  writeFileSync(join(root, '.gitattributes'), '* text=auto\n');
+  writeFileSync(cargo, '[workspace]\n');
+  writeFileSync(main, 'fn main() {}\n');
+  const git = (args: string[]): string => execFileSync('git', ['-C', root, ...args], {
+    encoding: 'utf8', windowsHide: true,
+  });
+  try {
+    git(['init', '--quiet']);
+    git(['config', 'user.email', 'stack-bench@example.invalid']);
+    git(['config', 'user.name', 'Stack Bench']);
+    git(['config', 'core.autocrlf', 'false']);
+    git(['add', '.gitattributes', 'Cargo.toml', 'crates/cli/src/main.rs']);
+    git(['commit', '--quiet', '-m', 'fixture']);
+    const before = binarySourceIdentity(root);
+
+    git(['config', 'core.autocrlf', 'true']);
+    rmSync(cargo);
+    rmSync(main);
+    git(['checkout', '--', 'Cargo.toml', 'crates/cli/src/main.rs']);
+    assert.match(readFileSync(main, 'utf8'), /\r\n/);
+    assert.equal(git(['status', '--porcelain=v1', '--', 'Cargo.toml', 'crates']).trim(), '');
+    assert.equal(binarySourceIdentity(root).sha256, before.sha256);
+
+    writeFileSync(main, 'fn main() { println!("changed"); }\n');
+    assert.throws(() => binarySourceIdentity(root),
+      /binary source paths are not clean/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('binary provenance refuses a source change during the build', () => {
+  assert.doesNotThrow(() => assertBinarySourceUnchanged(SOURCE, { ...SOURCE }));
+  assert.throws(() => assertBinarySourceUnchanged(SOURCE,
+    { ...SOURCE, sha256: 'c'.repeat(64) }), /source changed during the build/);
+  assert.throws(() => assertBinarySourceUnchanged(SOURCE,
+    { ...SOURCE, revision: 'd'.repeat(40) }), /source changed during the build/);
+  assert.throws(() => assertBinarySourceUnchanged(SOURCE,
+    { ...SOURCE, files: SOURCE.files + 1 }), /source changed during the build/);
+  assert.throws(() => createBinaryProvenance('unused',
+    { ...SOURCE, files: 0 }), /file count must be a positive integer/);
+});
+
+test('controller verifies recorded binaries before it installs them', () => {
+  const dockerfile = readFileSync(join(STACK_BENCH_ROOT, 'appliance',
+    'Controller.Dockerfile'), 'utf8');
+  assert.match(dockerfile, /ARG BINARY_SOURCE_SHA256/);
+  const verify = dockerfile.indexOf('binary-provenance.js verify');
+  const install = dockerfile.indexOf('install -m 0555 container/bin/spacetimedb-cli');
+  assert.equal(verify >= 0 && install > verify, true);
+  assert.doesNotMatch(dockerfile, /^COPY .*container\/bin\/spacetimedb-/m);
+});
+
+test('the Linux binary build uses the recorded builder digest', () => {
+  const script = readFileSync(join(STACK_BENCH_ROOT, 'container',
+    'build-linux-cli.sh'), 'utf8');
+  assert.match(script, new RegExp(RUST_BUILDER_IMAGE.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')));
+  assert.doesNotMatch(script, /STACK_BENCH_RUST_IMAGE/);
+  assert.match(script, /PROVENANCE=.*binary-provenance\.js/);
+  assert.match(script, /node "\$PROVENANCE" source/);
+  assert.match(script, /node "\$PROVENANCE" record/);
+});
diff --git a/tools/stack-bench/tests/browser-action-executors.test.ts b/tools/stack-bench/tests/browser-action-executors.test.ts
new file mode 100644
index 00000000000..c9b230d3aaf
--- /dev/null
+++ b/tools/stack-bench/tests/browser-action-executors.test.ts
@@ -0,0 +1,348 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { ACTION_REGISTRY } from '../src/actions/action-catalog.js';
+import { executeAction } from '../src/actions/action-contract.js';
+import {
+  BROWSER_ACTION_IMPLEMENTATIONS,
+  parseRenderedNumber,
+} from '../src/actions/browser-action-executors.js';
+
+type UnknownRecord = Record<string, unknown>;
+interface ServiceOverrides {
+  readonly browser?: UnknownRecord;
+  readonly clockSleep?: (milliseconds: number) => Promise<void>;
+}
+interface ProvidedServices {
+  readonly capabilities: Record<string, unknown>;
+  readonly recorded: Map<string, number>;
+}
+
+function services(actor: unknown, overrides: ServiceOverrides = {}): ProvidedServices {
+  const recorded = new Map<string, number>();
+  const browser = {
+    defaultWithin: 5000,
+    expand: (value: string | undefined) => value === '{room:test}' ? 'test-scoped' : value,
+    recorded: {
+      get: (key: string) => recorded.get(key),
+      set: (key: string, value: number) => recorded.set(key, value),
+    },
+    sleep: async () => {},
+    testId: (id: string) => `[data-testid="${id}"]`,
+    ...overrides.browser,
+  };
+  return {
+    capabilities: {
+      actors: { get: (name: string) => name === 'a' ? actor : undefined },
+      'browser-interaction': browser,
+      'browser-observation': browser,
+      clock: { sleep: overrides.clockSleep ?? (async () => {}) },
+    },
+    recorded,
+  };
+}
+
+async function run(
+  input: UnknownRecord & { readonly do: string },
+  provided: ProvidedServices,
+) {
+  return executeAction(ACTION_REGISTRY, input.do, input, {
+    capabilities: provided.capabilities,
+  });
+}
+
+test('the extracted executor registry is exact and every migrated action has bounded metadata', () => {
+  for (const id of Object.keys(BROWSER_ACTION_IMPLEMENTATIONS)) {
+    const plugin = ACTION_REGISTRY.get(id);
+    assert(plugin.timeoutMs > 0, id);
+    assert(plugin.capabilities.includes('actors'), id);
+  }
+});
+
+test('timing executes through the contract and still rejects an unknown actor', async () => {
+  const slept: number[] = [];
+  const provided = services({}, { clockSleep: async (ms) => { slept.push(ms); } });
+  const passed = await run({ do: 'wait', actor: 'a', ms: 17 }, provided);
+  assert.equal(passed.status, 'passed');
+  assert.deepEqual(passed.observation, { waitedMs: 17 });
+  assert.deepEqual(slept, [17]);
+
+  const missing = await run({ do: 'wait', actor: 'missing', ms: 1 }, provided);
+  assert.equal(missing.status, 'harness_failure');
+  assert.equal(missing.code, 'unclassified_exception');
+  assert.equal(missing.summary, 'harness did not create actor "missing"');
+});
+
+test('interaction actions receive scoped values and preserve click options', async () => {
+  const calls: unknown[][] = [];
+  const locator = {
+    click: async (options: unknown) => { calls.push(['click', options]); },
+  };
+  const actor = {
+    loc: (testid: string, options: unknown) => {
+      calls.push(['loc', testid, options]);
+      return locator;
+    },
+  };
+  const passed = await run({ do: 'click', actor: 'a', testid: 'open',
+    contains: '{room:test}', in: { testid: 'row', contains: '{room:test}' }, settleMs: 5 },
+  services(actor));
+  assert.equal(passed.status, 'passed');
+  assert.deepEqual(calls, [
+    ['loc', 'open', { contains: 'test-scoped',
+      scope: { testid: 'row', contains: 'test-scoped' } }],
+    ['click', { timeout: 5000 }],
+  ]);
+});
+
+test('interaction scopes can match separate text fragments without assuming punctuation', async () => {
+  let scope: { testid: string; contains: RegExp } | undefined;
+  const actor = { loc: (_testid: string, options: {
+    scope: { testid: string; contains: RegExp };
+  }) => {
+    scope = options.scope;
+    return { click: async () => {} };
+  } };
+  const result = await run({ do: 'click', actor: 'a', testid: 'save',
+    in: { testid: 'row', containsAll: ['Mirrorless Camera', 'East'] } }, services(actor));
+  assert.equal(result.status, 'passed');
+  assert(scope);
+  assert.equal(scope.testid, 'row');
+  assert(scope.contains.test('Mirrorless Camera @ East'));
+  assert(scope.contains.test('East: Mirrorless Camera'));
+  assert.equal(scope.contains.test('Mirrorless Camera @ West'), false);
+});
+
+test('fill adapts values to date input types', async () => {
+  const values: Array<[string, string]> = [];
+  const locator = (type: string) => ({
+    waitFor: async () => {},
+    evaluate: async () => 'INPUT',
+    getAttribute: async (name: string) => name === 'type' ? type : null,
+    fill: async (value: string) => { values.push([type, value]); },
+  });
+  const actor = { loc: (testid: string) => locator(testid) };
+
+  for (const testid of ['datetime-local', 'date', 'text']) {
+    const result = await run({ do: 'fill', actor: 'a', testid, text: '2020-01-01' }, services(actor));
+    assert.equal(result.status, 'passed');
+  }
+
+  assert.deepEqual(values, [
+    ['datetime-local', '2020-01-01T00:00'],
+    ['date', '2020-01-01'],
+    ['text', '2020-01-01'],
+  ]);
+
+  values.length = 0;
+  await run({ do: 'fill', actor: 'a', testid: 'date', text: '2099-12-31T23:59' }, services(actor));
+  assert.deepEqual(values, [['date', '2099-12-31']]);
+});
+
+test('recorded-number state is narrow, reusable, and numeric parsing is stable', async () => {
+  assert.equal(parseRenderedNumber('Stock: 1,024 left'), 1024);
+  assert.equal(parseRenderedNumber('$12.50'), 12.5);
+  assert.equal(parseRenderedNumber('none'), null);
+
+  let rendered = 'Total: 1,024';
+  const locator = {
+    waitFor: async () => {},
+    evaluate: async () => 'DIV',
+    innerText: async () => rendered,
+  };
+  const actor = { loc: () => locator };
+  const provided = services(actor);
+  const recorded = await run({ do: 'recordNumber', actor: 'a', testid: 'total', as: 'before' }, provided);
+  assert.equal(recorded.status, 'passed');
+  assert.equal(provided.recorded.get('before'), 1024);
+
+  rendered = 'Total: 1,027';
+  const compared = await run({ do: 'expectNumber', actor: 'a', testid: 'total',
+    relativeTo: 'before', plus: 3 }, provided);
+  assert.equal(compared.status, 'passed');
+  assert.deepEqual(compared.observation, { value: 1027 });
+});
+
+test('an observation mismatch is application evidence, not a harness crash', async () => {
+  const locator = {
+    waitFor: async () => {},
+    innerText: async () => 'contains private value',
+  };
+  const actor = { loc: () => locator };
+  const result = await run({ do: 'expect', actor: 'a', testid: 'status',
+    notContains: 'private value' }, services(actor));
+  assert.equal(result.status, 'failed');
+  assert.equal(result.code, 'application_failure');
+  assert.match(result.summary ?? '', /shows text that must not appear/);
+});
+
+test('a visible but blank field does not satisfy a non-empty assertion', async () => {
+  let rendered = '   ';
+  const locator = {
+    waitFor: async () => {},
+    evaluate: async () => 'DIV',
+    innerText: async () => rendered,
+  };
+  const actor = { loc: () => locator };
+  const blank = await run({ do: 'expect', actor: 'a', testid: 'warehouse', nonEmpty: true },
+    services(actor));
+  assert.equal(blank.status, 'failed');
+  assert.equal(blank.code, 'application_failure');
+  assert.match(blank.summary ?? '', /control is empty/);
+
+  rendered = 'East';
+  const populated = await run({ do: 'expect', actor: 'a', testid: 'warehouse', nonEmpty: true },
+    services(actor));
+  assert.equal(populated.status, 'passed');
+});
+
+test('absence checks do not pass before a late element appears', async () => {
+  let checks = 0;
+  const actor = { loc: () => ({ isVisible: async () => ++checks > 1 }) };
+  const result = await run({ do: 'expect', actor: 'a', testid: 'private-row',
+    absent: true, within: 100 }, services(actor));
+  assert.equal(result.status, 'failed');
+  assert.match(result.summary ?? '', /was shown when it must not be/);
+});
+
+test('waitUntilAbsent waits for a visible element to leave', async () => {
+  const calls: unknown[] = [];
+  const actor = { loc: () => ({ waitFor: async (options: unknown) => { calls.push(options); } }) };
+  const result = await run({ do: 'waitUntilAbsent', actor: 'a', testid: 'queue-item',
+    contains: 'Keyboard', within: 1000 }, services(actor));
+  assert.equal(result.status, 'passed');
+  assert.deepEqual(calls, [{ state: 'hidden', timeout: 1000 }]);
+});
+
+test('unavailable checks do not pass before a control becomes enabled', async () => {
+  let checks = 0;
+  const locator = {
+    filter() { return this; },
+    first() { return this; },
+    isVisible: async () => true,
+    isDisabled: async () => ++checks === 1,
+    getAttribute: async () => null,
+  };
+  const actor = { page: { locator: () => locator } };
+  const result = await run({ do: 'expectUnavailable', actor: 'a', testid: 'admin',
+    within: 100 }, services(actor));
+  assert.equal(result.status, 'failed');
+  assert.match(result.summary ?? '', /stayed available to/);
+});
+
+test('missing values do not satisfy agreement across actors', async () => {
+  const actor = { loc: () => ({ isVisible: async () => false, innerText: async () => '' }) };
+  const provided = services(actor, { browser: {
+    sleep: async () => new Promise(resolve => setTimeout(resolve, 2)),
+  } });
+  provided.capabilities.actors = { get: (name: string) =>
+    name === 'a' || name === 'b' ? actor : undefined };
+  const result = await run({ do: 'expectAgreement', actors: ['a', 'b'],
+    testid: 'total', within: 1 }, provided);
+  assert.equal(result.status, 'failed');
+  assert.match(result.summary ?? '', /missing or unreadable/);
+});
+
+test('expect can verify a persisted form value', async () => {
+  const locator = {
+    waitFor: async () => {},
+    evaluate: async () => 'INPUT',
+    inputValue: async () => 'staff',
+  };
+  const actor = { loc: () => locator };
+  const result = await run({ do: 'expect', actor: 'a', testid: 'support-assignee',
+    value: 'staff' }, services(actor));
+  assert.equal(result.status, 'passed');
+  assert.deepEqual(result.observation, { visible: true, value: 'staff' });
+});
+
+test('expect can verify an element attribute', async () => {
+  const locator = {
+    waitFor: async () => {},
+    getAttribute: async (name: string) => name === 'data-state' ? 'on' : null,
+  };
+  const actor = { loc: () => locator };
+  const result = await run({ do: 'expect', actor: 'a', testid: 'notification-preference',
+    attribute: 'data-state', value: 'on' }, services(actor));
+  assert.equal(result.status, 'passed');
+  assert.deepEqual(result.observation, { visible: true, attribute: 'data-state', value: 'on' });
+});
+
+test('ordered text and unavailable controls are explicit implementation-neutral observations', async () => {
+  const items = {
+    filter: () => items,
+    allInnerTexts: async () => ['Coffee Grinder', 'Air Purifier'],
+  };
+  const scope = {
+    filter: () => scope,
+    first: () => scope,
+    locator: () => items,
+  };
+  const disabled = {
+    filter: () => disabled,
+    first: () => disabled,
+    isVisible: async () => true,
+    isDisabled: async () => true,
+    getAttribute: async () => null,
+  };
+  const actor = {
+    page: {
+      locator: (selector: string) => selector.includes('item-list') ? scope : disabled,
+    },
+  };
+  const provided = services(actor);
+  const ordered = await run({ do: 'expectSequence', actor: 'a', testid: 'item-name',
+    in: { testid: 'item-list' }, equals: ['Coffee Grinder', 'Air Purifier'] }, provided);
+  assert.equal(ordered.status, 'passed');
+  assert.deepEqual(
+    (ordered.observation as { values: string[] }).values,
+    ['Coffee Grinder', 'Air Purifier'],
+  );
+
+  const unavailable = await run({ do: 'expectUnavailable', actor: 'a', testid: 'buy-now',
+    within: 1 }, provided);
+  assert.equal(unavailable.status, 'passed');
+  assert.deepEqual(unavailable.observation, { unavailable: true, reason: 'disabled' });
+});
+
+test('element counts use visible observations instead of hidden duplicate markup', async () => {
+  const matches = {
+    filter: () => ({ count: async () => 2 }),
+  };
+  const actor = { page: { locator: () => matches } };
+  const result = await run({ do: 'expectElementCount', actor: 'a', testid: 'row',
+    contains: 'item', equals: 2, within: 1 }, services(actor));
+  assert.equal(result.status, 'passed');
+  assert.deepEqual(result.observation, { count: 2 });
+});
+
+test('element counts can be scoped to a matching parent', async () => {
+  const child = { filter: () => ({ count: async () => 1 }) };
+  const parent = { filter: () => parent, first: () => parent, locator: () => child };
+  const actor = { page: { locator: () => parent } };
+  const result = await run({ do: 'expectElementCount', actor: 'a', testid: 'payment-record',
+    in: { testid: 'order-item', contains: 'Desk Lamp' }, equals: 1, within: 1 }, services(actor));
+  assert.equal(result.status, 'passed');
+  assert.deepEqual(result.observation, { count: 1 });
+});
+
+test('browser timeouts are application evidence while crashes and code bugs remain harness failures', async () => {
+  const timeout = Object.assign(new Error('locator.click: element was never actionable'),
+    { name: 'TimeoutError' });
+  const timedOut = await run({ do: 'click', actor: 'a', testid: 'submit' },
+    services({ loc: () => ({ click: async () => { throw timeout; } }) }));
+  assert.equal(timedOut.status, 'failed');
+  assert.equal(timedOut.code, 'application_failure');
+
+  const crashed = await run({ do: 'click', actor: 'a', testid: 'submit' },
+    services({ loc: () => ({ click: async () => {
+      throw new Error('locator.click: Target page, context or browser has been closed');
+    } }) }));
+  assert.equal(crashed.status, 'harness_failure');
+  assert.equal(crashed.code, 'unclassified_exception');
+
+  const bug = await run({ do: 'click', actor: 'a', testid: 'submit' },
+    services({ loc: () => ({ click: async () => { throw new TypeError('executor bug'); } }) }));
+  assert.equal(bug.status, 'harness_failure');
+  assert.equal(bug.code, 'unclassified_exception');
+});
diff --git a/tools/stack-bench/tests/browser-evidence.test.ts b/tools/stack-bench/tests/browser-evidence.test.ts
new file mode 100644
index 00000000000..b156c4b1b80
--- /dev/null
+++ b/tools/stack-bench/tests/browser-evidence.test.ts
@@ -0,0 +1,20 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { settledLocatorCount } from '../src/evidence/browser-evidence.js';
+
+test('an optional locator timeout is counted as a healthy absence', async () => {
+  const timeout = Object.assign(new Error('not visible'), { name: 'TimeoutError' });
+  const locator = { waitFor: async () => { throw timeout; }, count: async () => 0 };
+  assert.equal(await settledLocatorCount(locator, 10), 0);
+});
+
+test('a crashed page is never converted into an element count of zero', async () => {
+  const crash = new Error('locator.waitFor: Page crashed');
+  const locator = { waitFor: async () => { throw crash; }, count: async () => 0 };
+  await assert.rejects(() => settledLocatorCount(locator, 10), /Page crashed/);
+});
+
+test('count failures propagate after a locator becomes visible', async () => {
+  const locator = { waitFor: async () => {}, count: async () => { throw new Error('Target closed'); } };
+  await assert.rejects(() => settledLocatorCount(locator, 10), /Target closed/);
+});
diff --git a/tools/stack-bench/tests/build-container-inspection.test.ts b/tools/stack-bench/tests/build-container-inspection.test.ts
new file mode 100644
index 00000000000..ab4d97390f5
--- /dev/null
+++ b/tools/stack-bench/tests/build-container-inspection.test.ts
@@ -0,0 +1,82 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { hasRequiredBuildContainerIsolation, inspectBuildContainer, parseCgroupMemory,
+  parsePublishedPorts, sameHostPath }
+  from '../container/build-container-inspection.js';
+import type { InspectedBuildContainer } from '../container/build-container-inspection.js';
+
+const dockerResult = (status: number, stdout = '', stderr = '') => ({
+  status, stdout, stderr, pid: 1, output: [], signal: null,
+});
+
+test('build-container inspection distinguishes absence from Docker failure', () => {
+  assert.equal(inspectBuildContainer('missing', {
+    execute: () => dockerResult(1, '', 'Error: No such object: missing'),
+  }), null);
+  assert.throws(() => inspectBuildContainer('leased', {
+    execute: () => dockerResult(1, '', 'Cannot connect to the Docker daemon'),
+  }), /cannot inspect build container leased/);
+});
+
+test('host path comparison preserves Linux case sensitivity', () => {
+  assert.equal(sameHostPath('/work/App', '/work/app', 'linux'), false);
+  assert.equal(sameHostPath('C:\\work\\App', 'c:\\work\\app', 'win32'), true);
+});
+
+test('published ports must be valid and unique', () => {
+  assert.deepEqual(parsePublishedPorts('3000, 5173'), ['3000', '5173']);
+  assert.throws(() => parsePublishedPorts('3000,3000'), /must not contain duplicates/);
+  assert.throws(() => parsePublishedPorts('0'), /integers from 1 through 65535/);
+  assert.throws(() => parsePublishedPorts('3000x'), /integers from 1 through 65535/);
+});
+
+test('cgroup memory reports current use, peak use, and the enforced limit', () => {
+  assert.deepEqual(parseCgroupMemory('[memory.events]\noom 0\n[memory.current]\n123\n'
+    + '[memory.peak]\n456\n[memory.max]\n4294967296\n'), {
+    currentBytes: 123,
+    peakBytes: 456,
+    limitBytes: 4 * 1024 ** 3,
+  });
+  assert.deepEqual(parseCgroupMemory('[memory.max]\nmax\n'), {
+    currentBytes: null,
+    peakBytes: null,
+    limitBytes: null,
+  });
+});
+
+test('build-container isolation validates the effective Docker configuration', () => {
+  const container: InspectedBuildContainer = {
+    id: 'container',
+    image: 'image',
+    running: true,
+    networkMode: 'bridge',
+    readonlyRootfs: true,
+    tmpfs: { '/tmp': 'rw,nosuid,nodev' },
+    capAdd: ['CHOWN'],
+    capDrop: ['ALL'],
+    securityOpt: ['no-new-privileges'],
+    pidsLimit: 32,
+    nanoCpus: 2_000_000_000,
+    memoryBytes: 1024,
+    memorySwapBytes: 1024,
+    mounts: [{ type: 'bind', source: '/workspace', name: null,
+      destination: '/app', readOnly: false }],
+    unsafeCredentialExposure: false,
+  };
+  const requirements = {
+    expectedMounts: [{ kind: 'bind' as const, source: '/workspace', target: '/app', readOnly: false }],
+    requiredTmpfs: { '/tmp': 'rw,nosuid,nodev' },
+    requiredCapabilities: ['CHOWN'],
+    pidsLimit: 32,
+    cpuCount: 2,
+    memoryBytes: 1024,
+    memorySwapBytes: 1024,
+    image: 'image',
+  };
+
+  assert.equal(hasRequiredBuildContainerIsolation(container, requirements), true);
+  assert.equal(hasRequiredBuildContainerIsolation({ ...container, readonlyRootfs: false }, requirements), false);
+  assert.equal(hasRequiredBuildContainerIsolation({ ...container, capDrop: [] }, requirements), false);
+  assert.equal(hasRequiredBuildContainerIsolation({ ...container, memoryBytes: 2048 }, requirements), false);
+});
diff --git a/tools/stack-bench/tests/build-container-reconciliation.test.ts b/tools/stack-bench/tests/build-container-reconciliation.test.ts
new file mode 100644
index 00000000000..4070da5cb1b
--- /dev/null
+++ b/tools/stack-bench/tests/build-container-reconciliation.test.ts
@@ -0,0 +1,72 @@
+import assert from 'node:assert/strict';
+import type { SpawnSyncReturns } from 'node:child_process';
+import test from 'node:test';
+
+import { BUILD_CONTAINER_CREATION_LABEL, listRunningCodingContainers, removeFailedBuildContainer }
+  from '../container/reconcile-build-container.js';
+
+const ID = 'a'.repeat(64);
+type DockerCall = [command: string, args: readonly string[]];
+
+function dockerResult(stdout: string): SpawnSyncReturns<string> {
+  return { pid: 0, output: [null, stdout, ''], stdout, stderr: '', status: 0, signal: null };
+}
+
+test('failed build-container cleanup removes the exact id returned by Docker', () => {
+  const calls: DockerCall[] = [];
+  const result = removeFailedBuildContainer({
+    containerName: 'stack-bench-run', creationToken: 'token', createdId: `${ID}\n`,
+    execute(command, args) {
+      calls.push([command, args]);
+      return dockerResult(ID);
+    },
+  });
+  assert.deepEqual(calls, [['docker', ['rm', '-f', ID]]]);
+  assert.deepEqual(result, { removed: true, absent: false, id: ID });
+});
+
+test('failed build-container cleanup reconciles a matching creation label', () => {
+  const calls: DockerCall[] = [];
+  removeFailedBuildContainer({
+    containerName: 'stack-bench-run', creationToken: 'token',
+    execute(command, args) {
+      calls.push([command, args]);
+      if (args[0] === 'inspect') {
+        assert.equal(args[2], `{{.Id}} {{index .Config.Labels "${BUILD_CONTAINER_CREATION_LABEL}"}}`);
+        return dockerResult(`${ID} token\n`);
+      }
+      return dockerResult(ID);
+    },
+  });
+  assert.deepEqual(calls.map(([, args]) => args[0]), ['inspect', 'rm']);
+  assert.deepEqual(calls[1], ['docker', ['rm', '-f', ID]]);
+});
+
+test('failed build-container cleanup never removes a same-name container with another label', () => {
+  const calls: DockerCall[] = [];
+  assert.throws(() => removeFailedBuildContainer({
+    containerName: 'stack-bench-run', creationToken: 'token',
+    execute(command, args) {
+      calls.push([command, args]);
+      return dockerResult(`${ID} another-token\n`);
+    },
+  }), /creation identity does not match/);
+  assert.deepEqual(calls.map(([, args]) => args[0]), ['inspect']);
+});
+
+test('running coding containers are listed by their creation label only', () => {
+  const calls: DockerCall[] = [];
+  const names = listRunningCodingContainers({
+    execute(command, args) {
+      calls.push([command, args]);
+      return dockerResult('stack-bench-build-b\nstack-bench-build-a\n\n');
+    },
+  });
+  assert.deepEqual(calls, [['docker', ['ps', '--filter', `label=${BUILD_CONTAINER_CREATION_LABEL}`,
+    '--format', '{{.Names}}']]]);
+  assert.deepEqual(names, ['stack-bench-build-a', 'stack-bench-build-b']);
+  assert.deepEqual(listRunningCodingContainers({ execute: () => dockerResult('') }), []);
+  assert.throws(() => listRunningCodingContainers({ execute: () => ({
+    ...dockerResult(''), status: 1, stderr: 'Cannot connect to the Docker daemon',
+  }) }), /cannot list coding containers: Cannot connect to the Docker daemon/);
+});
diff --git a/tools/stack-bench/tests/build-container-recovery.integration.ts b/tools/stack-bench/tests/build-container-recovery.integration.ts
new file mode 100644
index 00000000000..a015ca5870d
--- /dev/null
+++ b/tools/stack-bench/tests/build-container-recovery.integration.ts
@@ -0,0 +1,103 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import type { SpawnSyncOptionsWithStringEncoding } from 'node:child_process';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { inspectBuildContainer } from '../container/build-container-inspection.js';
+import { createBackendLease, writeBackendLease } from '../src/runtime/backend-lease.js';
+import { compiledEntrypoint } from '../src/package-root.js';
+
+const required = <T>(value: T | null | undefined, description: string): T => {
+  if (value === null || value === undefined) throw new Error(`${description} is required`);
+  return value;
+};
+const record = (text: string, description: string): Record<string, unknown> => {
+  const value: unknown = JSON.parse(text);
+  if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+    throw new Error(`${description} must be an object`);
+  }
+  return value as Record<string, unknown>;
+};
+const stringField = (value: Record<string, unknown>, field: string, description: string): string => {
+  const result = value[field];
+  if (typeof result !== 'string') throw new Error(`${description}.${field} must be a string`);
+  return result;
+};
+
+test('Docker replaces a stopped leased build container and preserves its app mount', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-recovery-docker-'));
+  const app = join(root, 'app');
+  const leasePath = join(root, 'lease.json');
+  const containerName = `stack-bench-${required(root.split(/[\\/]/).at(-1), 'temporary directory name')}`;
+  const docker = (args: readonly string[],
+    options: Omit<SpawnSyncOptionsWithStringEncoding, 'encoding'> = {}) => spawnSync('docker', args,
+    { encoding: 'utf8', timeout: 120_000, ...options });
+  try {
+    mkdirSync(app);
+    const databaseContainer = docker(['inspect', '--format', '{{.Id}}', 'stack-bench-mongodb']);
+    assert.equal(databaseContainer.status, 0, databaseContainer.stderr);
+    const lease = createBackendLease({ runId: 'recover-build-docker-smoke', backend: 'mongodb',
+      track: 'ecommerce', runIndex: 91, database: 'app_ecom_run91',
+      container: { name: 'stack-bench-mongodb', id: required(databaseContainer.stdout,
+        'database container identifier').trim() } });
+    lease.state = 'active';
+    writeBackendLease(leasePath, lease);
+    const env = { ...process.env, STACK_BENCH_LEASE: leasePath,
+      STACK_BENCH_LEASE_TOKEN: lease.ownershipToken };
+    const build = compiledEntrypoint('container', 'run-build.js');
+    const baseArgs = [build, '--prepare-only', '--app', app, '--backend', 'mongodb', '--image',
+      process.env.STACK_BENCH_BUILD_IMAGE
+        ?? 'stack-bench-build@sha256:b404d26138ea16be07a672389981e7e8b89d7740570f9baa3ddd4d0e96336c10'];
+    const runBuild = (args: readonly string[]) => spawnSync(process.execPath, args,
+      { encoding: 'utf8', env, timeout: 180_000 });
+
+    const first = runBuild(baseArgs);
+    assert.equal(first.status, 0, first.stderr);
+    const firstResult = record(required(first.stdout, 'first build result'), 'first build result');
+    const firstContainerName = stringField(firstResult, 'containerName', 'first build result');
+    const firstIdentity = stringField(firstResult, 'identity', 'first build result');
+    const inspected = inspectBuildContainer(firstContainerName);
+    assert(inspected);
+    assert.equal(inspected.readonlyRootfs, true);
+    assert.deepEqual([...inspected.capAdd].sort(),
+      ['CHOWN', 'DAC_OVERRIDE', 'FOWNER', 'KILL', 'SETGID', 'SETUID']);
+    assert(inspected.capDrop.includes('ALL'));
+    assert(inspected.securityOpt.includes('no-new-privileges'));
+    assert.equal(inspected.pidsLimit, 512);
+    assert.equal(inspected.tmpfs['/tmp'], 'rw,nosuid,nodev,mode=1777');
+    assert.equal(inspected.tmpfs['/home/developer'],
+      'rw,nosuid,nodev,uid=10001,gid=10001,mode=0700');
+    assert.equal(inspected.tmpfs['/home/developer/.claude'],
+      'rw,nosuid,nodev,uid=10001,gid=10001,mode=0700');
+    assert.equal(inspected.tmpfs['/deps'], 'rw,nosuid,nodev,mode=0755');
+    assert.equal(inspected.tmpfs['/run/application'], 'rw,nosuid,nodev,mode=0700');
+    assert.equal(inspected.tmpfs['/root'], undefined);
+    const agentCaps = docker(['exec', '--user', '10001:10001', firstContainerName,
+      'sh', '-c', 'grep "^CapEff:" /proc/self/status']);
+    assert.equal(agentCaps.status, 0, agentCaps.stderr);
+    assert.match(agentCaps.stdout, /CapEff:\s+0+\s*$/);
+    writeFileSync(join(app, 'preserved.txt'), 'preserved\n');
+    assert.equal(docker(['stop', firstContainerName]).status, 0);
+
+    const second = runBuild([build, '--recover-stopped-container', ...baseArgs.slice(1)]);
+    assert.equal(second.status, 0, second.stderr);
+    const secondResult = record(required(second.stdout, 'second build result'), 'second build result');
+    const secondContainerName = stringField(secondResult, 'containerName', 'second build result');
+    const secondIdentity = stringField(secondResult, 'identity', 'second build result');
+    assert.notEqual(firstIdentity, secondIdentity);
+    const mounted = docker(['exec', secondContainerName, 'cat', '/app/preserved.txt']);
+    assert.equal(mounted.status, 0, mounted.stderr);
+    assert.equal(mounted.stdout.trim(), 'preserved');
+    const reused = runBuild(baseArgs);
+    assert.equal(reused.status, 0, reused.stderr);
+    assert.equal(stringField(record(required(reused.stdout, 'reused build result'),
+      'reused build result'), 'identity', 'reused build result'), secondIdentity);
+  } finally {
+    const exact = docker(['inspect', '--format', '{{.Id}}', containerName]);
+    if (exact.status === 0 && exact.stdout.trim()) docker(['rm', '-f', exact.stdout.trim()]);
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/calibration-compiler.contract.ts b/tools/stack-bench/tests/calibration-compiler.contract.ts
new file mode 100644
index 00000000000..37b0a8266ef
--- /dev/null
+++ b/tools/stack-bench/tests/calibration-compiler.contract.ts
@@ -0,0 +1,508 @@
+import assert from 'node:assert/strict';
+import { cpSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, relative } from 'node:path';
+import test from 'node:test';
+
+import { calibrationQualificationIdentity, calibrationQualificationRelease,
+  canReuseQualificationScope,
+  compileCalibrationDefinition, compileCalibrationFile,
+  currentLevelPoints, hasExactSelectedPackRuntime, resolveCalibrationForRelease,
+  validateQualificationEvidenceArtifact } from '../src/composition/calibration-compiler.js';
+import type { CalibrationContext, CalibrationDefinition, CalibrationEvidence,
+  CalibrationPlan } from '../src/composition/calibration-compiler.js';
+import { checkCalibrations } from '../commands/check-calibration.js';
+import { buildRecipeRelease, requireRecipeRelease as resolveRecipeRelease }
+  from '../src/composition/recipe-release.js';
+import type { RecipeExecution } from '../src/composition/recipe-release.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { qualificationScopeIdentity } from '../src/composition/qualification-scope.js';
+
+const ROOT = STACK_BENCH_ROOT;
+const TRACK = loadTrack('ecommerce');
+const CALIBRATION = join(TRACK.dir, 'composition', 'calibrations', 'sequential-l1-2.5.0.json');
+
+interface QualificationArtifactPayload {
+  qualificationScope?: unknown;
+  runs: Array<{ ok: boolean; [key: string]: unknown }>;
+  runner: { mode: string; platform: string; [key: string]: unknown };
+  summary: { vacuousPasses: { criteria: number; [key: string]: unknown }; [key: string]: unknown };
+  [key: string]: unknown;
+}
+
+interface QualificationArtifact {
+  id: string;
+  kind: string;
+  attempt: { parentId?: string | null; [key: string]: unknown };
+  identities: {
+    agentAdapter: unknown;
+    stackAdapter: { id: string };
+    calibration: { id: string; version: string; sha256: string };
+    recipe: { id: string; version: string; sha256: string };
+    [key: string]: unknown;
+  };
+  payload: QualificationArtifactPayload;
+  [key: string]: unknown;
+}
+
+function required<T>(value: T | undefined, message: string): T {
+  assert.ok(value !== undefined, message);
+  return value;
+}
+
+function parseCalibration(path: string): CalibrationDefinition {
+  return JSON.parse(readFileSync(path, 'utf8')) as CalibrationDefinition;
+}
+
+test('qualification runtime must cover the exact selected pack set', () => {
+  const release = { checkCatalog: [{ packId: 'accounts' }, { packId: 'accounts' },
+    { packId: 'orders' }] };
+  assert.equal(hasExactSelectedPackRuntime({ packs: [
+    { id: 'accounts', exceeded: false }, { id: 'orders', exceeded: false },
+  ] }, release), true);
+  assert.equal(hasExactSelectedPackRuntime({ packs: [
+    { id: 'accounts', exceeded: false }, { id: 'orders', exceeded: false },
+    { id: 'future', exceeded: false },
+  ] }, release), false);
+  assert.equal(hasExactSelectedPackRuntime({ packs: [
+    { id: 'accounts', exceeded: false }, { id: 'accounts', exceeded: false },
+  ] }, release), false);
+  assert.equal(hasExactSelectedPackRuntime({ packs: [
+    { id: 'accounts', exceeded: false }, { id: 'orders', exceeded: true },
+  ] }, release), false);
+});
+
+function current() {
+  const binding = resolveRecipeRelease(TRACK, 1);
+  return { binding, plan: compileCalibrationFile(CALIBRATION,
+    { trackRoot: TRACK.dir, stackBenchRoot: ROOT, release: binding.release }) };
+}
+
+function withCurrentScope(
+  artifact: QualificationArtifact,
+  entry: CalibrationEvidence,
+  context: CalibrationContext,
+): QualificationArtifact {
+  const scoped = structuredClone(artifact);
+  const reference = entry.kind === 'null' ? null
+    : context.references.find(candidate => candidate.backend === entry.stack);
+  const mutation = entry.kind === 'mutation'
+    ? context.calibration.mutations.find(candidate => candidate.backend === entry.stack) : null;
+  scoped.payload.qualificationScope = qualificationScopeIdentity({
+    kind: entry.kind, release: context.release, stack: entry.stack ?? null,
+    reference, mutation, stackBenchRoot: ROOT,
+  });
+  return scoped;
+}
+
+test('runtime calibration resolution exposes the pending L1 candidate', () => {
+  const l1 = resolveRecipeRelease(TRACK, 1).release;
+  const resolved = resolveCalibrationForRelease(l1,
+    { trackRoot: TRACK.dir, stackBenchRoot: ROOT, alias: 'L1' });
+  assert.ok(resolved);
+  assert.equal(resolved.id, 'ecommerce.sequential-l1-calibration');
+  assert.match(resolved.contentSha256, /^[a-f0-9]{64}$/);
+  assert.equal(resolved.state, 'draft');
+  assert.deepEqual(resolved.qualification.stacks.map(stack => stack.status),
+    ['candidate', 'candidate', 'candidate']);
+  assert.deepEqual(resolved.qualification.evidence, []);
+  assert.deepEqual(resolved.qualification.runner, {
+    schemaVersion: 1, mode: 'appliance', platform: 'linux', architecture: 'x64',
+  });
+  assert.equal(resolveRecipeRelease(TRACK, 2,
+    'ecommerce.sequential-l2@1.6.0').release.version, '1.6.0');
+});
+
+function compileChanged(change: (value: CalibrationDefinition) => void,
+  source = CALIBRATION, level = 1, recipe?: string): CalibrationPlan {
+  const directory = mkdtempSync(join(tmpdir(), 'stack-bench-calibration-'));
+  const trackRoot = join(directory, 'ecommerce');
+  cpSync(TRACK.dir, trackRoot, { recursive: true });
+  const path = join(trackRoot, relative(TRACK.dir, source));
+  const value = parseCalibration(source);
+  change(value);
+  writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`);
+  try {
+    const release = resolveRecipeRelease({ ...TRACK, dir: trackRoot }, level, recipe).release;
+    return compileCalibrationFile(path, { trackRoot, stackBenchRoot: ROOT, release });
+  } finally { rmSync(directory, { recursive: true, force: true }); }
+}
+
+test('calibration definitions bind an optional stable-check subset', () => {
+  const value = parseCalibration(CALIBRATION);
+  value.qualification.checks = ['check.b', 'check.a'];
+  const compiled = compileCalibrationDefinition(value);
+  assert.deepEqual(compiled.qualification.checks, ['check.b', 'check.a']);
+  const identityInput = { ...compiled, mutations: compiled.mutations.map(mutation => ({
+    ...mutation, executionSha256: 'a'.repeat(64),
+  })) };
+  const first = calibrationQualificationIdentity(identityInput);
+  identityInput.qualification.checks = ['check.a'];
+  assert.notEqual(calibrationQualificationIdentity(identityInput).sha256, first.sha256);
+  value.qualification.checks = ['check.a', 'check.a'];
+  assert.throws(() => compileCalibrationDefinition(value), /must not contain duplicates/);
+});
+
+test('calibration check subsets produce an exact qualification release', () => {
+  const sourceRelease = { scoring: { mode: 'source-points', checks: 2, points: 3 },
+    checkCatalog: [
+      { stableKey: 'check.a', executionId: 'suite', points: 1 },
+      { stableKey: 'check.b', executionId: 'unused', points: 2 },
+    ] };
+  const execution: RecipeExecution[] = [{ id: 'suite', ownership: { kind: 'current' } },
+    { id: 'unused', ownership: { kind: 'current' } }];
+  const scoped = calibrationQualificationRelease({ qualification: { checks: ['check.a'] } },
+    sourceRelease, execution);
+  assert.deepEqual(scoped.release.checkCatalog.map(check => check.stableKey), ['check.a']);
+  assert.deepEqual(scoped.release.scoring, { mode: 'source-points', checks: 1, points: 1 });
+  assert.deepEqual(scoped.execution.map(entry => entry.id), ['suite']);
+  assert.throws(() => calibrationQualificationRelease(
+    { qualification: { checks: ['missing'] } }, sourceRelease, execution), /unknown checks/);
+});
+
+test('the current L1 calibration deterministically binds recipe, fixture, references, mutations, and controls', () => {
+  const first = current().plan;
+  const second = current().plan;
+  assert.deepEqual(first, second);
+  assert.equal(first.state, 'draft');
+  assert.equal(first.recipe.contentSha256, current().binding.release.contentSha256);
+  assert.equal(first.fixture.sourceSha256, current().binding.release.components.fixture.sha256);
+  assert.equal(first.references.entries.length, 3);
+  assert.equal(first.mutations.length, 3);
+  const scored = new Set(current().binding.release.checkCatalog.filter(check => check.points > 0)
+    .map(check => check.stableKey));
+  for (const mutation of first.mutations) {
+    const covered = new Set(mutation.targets.flatMap(target => target.stableKeys));
+    assert.deepEqual([...scored].filter(key => !covered.has(key)), [],
+      `${mutation.backend} must cover every scored check`);
+  }
+  assert.equal(first.controls.length, 2);
+  assert.equal(first.controls.every(control => control.role === 'precondition'), true);
+  assert.equal(new Set(first.controls.map(control => control.stableKey)).size, 2);
+  assert.match(first.contentSha256, /^[a-f0-9]{64}$/);
+  assert.match(first.qualificationSha256, /^[a-f0-9]{64}$/);
+  assert.equal(calibrationQualificationIdentity(first).sha256, first.qualificationSha256);
+  assert.deepEqual(checkCalibrations({ trackName: 'ecommerce' })
+    .filter(result => result.id === 'ecommerce.sequential-l1-calibration'
+      || result.id === 'ecommerce.sequential-l2-calibration')
+    .map(result => `${result.id}@${result.version}:${result.state}`), [
+    'ecommerce.sequential-l1-calibration@2.5.0:draft',
+    'ecommerce.sequential-l2-calibration@1.6.0:draft',
+  ]);
+});
+
+test('calibration checks reject an unknown explicit track', () => {
+  assert.throws(() => checkCalibrations({ trackName: 'not-a-track' }),
+    /unknown calibration track not-a-track/);
+});
+
+function qualificationReferenceArtifact(context: CalibrationContext,
+  entry: CalibrationEvidence): QualificationArtifact {
+  const reference = context.references.find(candidate => candidate.backend === entry.stack);
+  assert(reference, 'qualification reference is required');
+  const scored = context.release.checkCatalog.filter(check => check.points > 0);
+  const packs = [...new Set(context.release.checkCatalog.map(check => check.packId))]
+    .map(id => ({ id, exceeded: false }));
+  const score = currentLevelPoints(context.release, context.execution);
+  return {
+    id: 'qualification-reference', kind: 'reference_qualification',
+    attempt: { parentId: null },
+    identities: {
+      engine: { id: 'stack-bench', version: 'test', sha256: 'e'.repeat(64) },
+      fixture: { id: reference.id, version: null, sha256: reference.sourceSha256 },
+      recipe: { id: context.release.id, version: context.release.version,
+        sha256: context.release.contentSha256 },
+      calibration: context.qualificationIdentity,
+      stackAdapter: { id: entry.stack ?? '' },
+      agentAdapter: { id: 'reference-fixture' },
+    },
+    payload: {
+      fixture: reference.id, fixtureSha256: reference.sourceSha256,
+      requiredRepetitions: 1, isolation: 'docker', mutationControl: false,
+      ok: true, stable: true, sameImage: true, sameHarness: true,
+      harnessSha256: 'h'.repeat(64),
+      qualifiedCheckKeys: context.release.checkCatalog.map(check => check.stableKey),
+      runner: { schemaVersion: 1, mode: 'appliance', platform: 'linux', architecture: 'x64',
+        dockerEngineVersion: '29.1.2', dockerOs: 'linux', dockerArchitecture: 'x86_64',
+        kernelVersion: '6.8.0-test', cpuCount: 8, memoryBytes: 16_000_000_000 },
+      runs: [{ repetition: 1, ok: true, processError: null, outcome: 'passed',
+        score: `${score}/${score}`, criteria: context.release.scoring.checks,
+        zeroPointCriteria: context.release.checkCatalog.length - scored.length,
+        imageId: 'image-test', harnessSha256Before: 'h'.repeat(64),
+        harnessSha256After: 'h'.repeat(64), failures: [], mutations: null,
+        packRuntime: { packs } }],
+      summary: { vacuousPasses: { criteria: 0 } },
+    },
+  };
+}
+
+function qualificationNullArtifact(context: CalibrationContext): QualificationArtifact {
+  const scored = context.release.checkCatalog.filter(check => check.points > 0);
+  const points = scored.reduce((total, check) => total + check.points, 0);
+  const zeroPointChecks = context.release.checkCatalog.length - scored.length;
+  return {
+    id: 'qualification-null', kind: 'null_control', attempt: { parentId: null },
+    identities: {
+      engine: { id: 'stack-bench', version: 'test', sha256: 'e'.repeat(64) },
+      recipe: { id: context.release.id, version: context.release.version,
+        sha256: context.release.contentSha256 },
+      calibration: context.qualificationIdentity,
+      stackAdapter: { id: 'null' }, agentAdapter: { id: 'reference-fixture' },
+    },
+    payload: {
+      ok: true, tracks: [context.release.track],
+      runner: { schemaVersion: 1, mode: 'appliance', platform: 'linux', architecture: 'x64',
+        dockerEngineVersion: '29.1.2', dockerOs: 'linux', dockerArchitecture: 'x86_64',
+        kernelVersion: '6.8.0-test', cpuCount: 8, memoryBytes: 16_000_000_000 },
+      summary: { criteria: scored.length, points,
+        expectedFailures: { criteria: scored.length, points },
+        vacuousPasses: { criteria: 0, points: 0 }, oracleGaps: { criteria: 0, points: 0 },
+        unscored: { criteria: zeroPointChecks, passed: 0, failed: zeroPointChecks,
+          inconclusive: 0 } },
+      criteria: scored.map(check => ({ scenario: check.source, feature: check.featureId,
+        criterion: check.criterionId, track: context.release.track, level: 1,
+        points: check.points, status: 'expected_fail', evidenceStatus: 'failed' })),
+      runs: [],
+    },
+  };
+}
+
+test('qualification evidence is semantically bound and tampering fails closed', () => {
+  const { binding, plan } = current();
+  const referenceEntry: CalibrationEvidence = {
+    kind: 'reference', stack: 'mongodb', repetition: 1,
+    path: 'results/reference.json', sha256: 'test-fixture',
+  };
+  const qualified = calibrationQualificationRelease(plan, binding.release, binding.execution);
+  const context = {
+    calibration: plan,
+    qualificationIdentity: calibrationQualificationIdentity(plan),
+    release: qualified.release,
+    references: plan.references.entries,
+    execution: qualified.execution,
+    stackBenchRoot: ROOT,
+  };
+  const reference = qualificationReferenceArtifact(context, referenceEntry);
+  const scopedReference = withCurrentScope(reference, referenceEntry, context);
+  assert.doesNotThrow(() => validateQualificationEvidenceArtifact(scopedReference, referenceEntry, context));
+  const legacyReference = structuredClone(scopedReference);
+  delete legacyReference.payload.qualificationScope;
+  assert.throws(() => validateQualificationEvidenceArtifact(legacyReference, referenceEntry, context),
+    /legacy broad-hash evidence has no scoped qualification identity/);
+  const wrongStack = structuredClone(scopedReference);
+  wrongStack.identities.stackAdapter.id = 'postgres';
+  assert.throws(() => validateQualificationEvidenceArtifact(wrongStack, referenceEntry, context),
+    /wrong stack adapter/);
+
+  const hiddenFailure = structuredClone(scopedReference);
+  required(hiddenFailure.payload.runs[0], 'qualification run').ok = false;
+  assert.throws(() => validateQualificationEvidenceArtifact(hiddenFailure, referenceEntry, context),
+    /failed or incomplete repetition/);
+
+  const runnerBound = structuredClone(plan);
+  runnerBound.qualification.runner = {
+    schemaVersion: 1, mode: 'appliance', platform: 'linux', architecture: 'x64',
+  };
+  const runnerIdentity = calibrationQualificationIdentity(runnerBound);
+  const runnerReference = structuredClone(scopedReference);
+  runnerReference.identities.calibration = runnerIdentity;
+  runnerReference.payload.runner = { ...runnerBound.qualification.runner,
+    dockerEngineVersion: '29.1.2', dockerOs: 'linux', dockerArchitecture: 'x86_64',
+    kernelVersion: '6.8.0-test', cpuCount: 8, memoryBytes: 16_000_000_000 };
+  const runnerContext = { ...context, calibration: runnerBound, qualificationIdentity: runnerIdentity };
+  assert.doesNotThrow(() => validateQualificationEvidenceArtifact(runnerReference, referenceEntry,
+    runnerContext));
+  const unobservedRunner = structuredClone(runnerReference);
+  unobservedRunner.payload.runner = structuredClone(runnerBound.qualification.runner);
+  assert.throws(() => validateQualificationEvidenceArtifact(unobservedRunner, referenceEntry,
+    runnerContext), /no complete appliance runner observation/);
+  runnerReference.payload.runner.mode = 'local-controller';
+  runnerReference.payload.runner.platform = 'win32';
+  assert.throws(() => validateQualificationEvidenceArtifact(runnerReference, referenceEntry,
+    runnerContext), /wrong controller runner environment/);
+
+  const nullEntry: CalibrationEvidence = {
+    kind: 'null', repetition: 1,
+    path: 'results/null.json', sha256: 'test-fixture',
+  };
+  const nullArtifact = qualificationNullArtifact(context);
+  const vacuous = withCurrentScope(nullArtifact, nullEntry, context);
+  vacuous.payload.summary.vacuousPasses.criteria = 1;
+  assert.throws(() => validateQualificationEvidenceArtifact(vacuous, nullEntry, context),
+    /complete null policy/);
+});
+
+test('the L2 candidate keeps its score contract while qualification is pending', () => {
+  const release = buildRecipeRelease(
+    join(TRACK.dir, 'composition', 'recipes', 'sequential-l2-1.6.0.json'),
+    { trackRoot: TRACK.dir });
+  const plan = compileCalibrationFile(join(TRACK.dir, 'composition', 'calibrations',
+    'sequential-l2-1.6.0.json'), {
+    trackRoot: TRACK.dir, stackBenchRoot: ROOT, release,
+  });
+  assert.equal(release.scoring.points, 117);
+  assert.equal(plan.state, 'draft');
+  assert.equal(plan.promotion.status, 'candidate');
+  assert.deepEqual(plan.qualification.evidence, []);
+});
+
+test('qualification uses typed ownership when inherited execution ids are renamed', () => {
+  const release = { checkCatalog: [
+    { stableKey: 'base', executionId: 'renamed-base', points: 5 },
+    { stableKey: 'current', executionId: 'current', points: 3 },
+  ] };
+  const execution: RecipeExecution[] = [
+    { id: 'renamed-base', ownership: { kind: 'inherited' } },
+    { id: 'current', ownership: { kind: 'current' } },
+  ];
+  assert.equal(currentLevelPoints(release, execution), 3);
+});
+
+test('qualification identity excludes governance transitions but binds executable controls', () => {
+  const plan = current().plan;
+  const governance = structuredClone(plan);
+  governance.state = 'qualified';
+  governance.promotion.status = 'promoted';
+  governance.promotion.catalogSha256 = '0'.repeat(64);
+  governance.qualification.evidence = [{ kind: 'reference', stack: 'mongodb', repetition: 1,
+    path: 'results/evidence.json', sha256: '1'.repeat(64) }];
+  governance.qualification.stacks.forEach(stack => { stack.status = 'qualified'; });
+  governance.references.entries.forEach(entry => { entry.status = 'active'; });
+  governance.mutations.forEach(entry => { entry.status = 'active'; entry.sha256 = '3'.repeat(64); });
+  assert.equal(calibrationQualificationIdentity(governance).sha256, plan.qualificationSha256);
+
+  const changed = structuredClone(plan);
+  changed.nullControl.repetitions += 1;
+  assert.notEqual(calibrationQualificationIdentity(changed).sha256, plan.qualificationSha256);
+
+  const changedRunner = structuredClone(plan);
+  changedRunner.qualification.runner = {
+    schemaVersion: 1, mode: 'appliance', platform: 'linux', architecture: 'arm64',
+  };
+  assert.notEqual(calibrationQualificationIdentity(changedRunner).sha256, plan.qualificationSha256);
+});
+
+test('set-like calibration source ordering does not change its identity', () => {
+  const before = current().plan;
+  const after = compileChanged(value => {
+    value.references.entries.reverse();
+    value.mutations.reverse();
+    value.controls.reverse();
+    value.qualification.stacks.reverse();
+  });
+  assert.equal(after.contentSha256, before.contentSha256);
+});
+
+test('stale recipe, fixture, reference, mutation, and promotion hashes fail compilation', () => {
+  const changes: Array<(value: CalibrationDefinition) => void> = [
+    value => { value.recipe.contentSha256 = '0'.repeat(64); },
+    value => { value.fixture.sourceSha256 = '0'.repeat(64); },
+    value => { required(value.references.entries[0], 'reference').sourceSha256 = '0'.repeat(64); },
+    value => { required(value.mutations[0], 'mutation').sha256 = '0'.repeat(64); },
+    value => { value.promotion.catalogSha256 = '0'.repeat(64); },
+  ];
+  for (const change of changes) assert.throws(() => compileChanged(change), /does not match|stale/);
+});
+
+test('every zero-point check requires one typed policy with valid mutation targets', () => {
+  assert.throws(() => compileChanged(value => { value.controls.pop(); }), /missing zero-point checks/);
+  assert.throws(() => compileChanged(value => {
+    required(value.controls[0], 'control').mutationTargets = ['postgres:not-a-mutant'];
+  }), /allowed only for promotion-gate|must not declare mutationTargets|unknown mutation/);
+  assert.throws(() => compileChanged(value => {
+    required(value.controls[0], 'control').promotionPolicy = 'record-only-until-calibrated';
+  }), /must be must-pass-reference/);
+  assert.throws(() => compileChanged(value => {
+    required(value.controls[0], 'first control').stableKey =
+      required(value.controls[1], 'second control').stableKey;
+  }), /duplicates|not an unassigned/);
+});
+
+test('pending calibration cannot claim qualification or promotion', () => {
+  assert.throws(() => compileChanged(value => { value.state = 'qualified'; }),
+    /cannot qualify a draft or retired recipe/);
+  assert.throws(() => compileChanged(value => { value.promotion.status = 'promoted'; }),
+    /does not resolve to this recipe at the declared status/);
+});
+
+test('equivalence decisions require two distinct executions and hash-bound evidence', () => {
+  const definition = parseCalibration(CALIBRATION);
+  definition.equivalenceDecisions = [{
+    fromExecutionSha256: definition.recipe.executionSha256,
+    toExecutionSha256: definition.recipe.executionSha256,
+    rationale: 'No change',
+    evidence: [{ path: 'evidence.json', sha256: '0'.repeat(64) }],
+  }];
+  assert.throws(() => compileCalibrationDefinition(definition), /must compare different execution hashes/);
+  assert.throws(() => compileChanged(value => {
+    value.qualification.evidence = [];
+    value.equivalenceDecisions = [{
+      fromExecutionSha256: '1'.repeat(64),
+      toExecutionSha256: '2'.repeat(64),
+      rationale: 'Calibrated execution-only correction',
+      evidence: [{ path: 'missing-evidence.json', sha256: '3'.repeat(64) }],
+    }];
+  }), /does not exist/);
+});
+
+test('qualification reuse accepts only the declared source and unchanged grading inputs', () => {
+  const sourceRecipe = { id: 'recipe', version: '1.0.0',
+    contentSha256: '1'.repeat(64), executionSha256: '2'.repeat(64) };
+  const sourceCalibration = { id: 'calibration', version: '1.0.0', sha256: '3'.repeat(64) };
+  const calibration = { qualificationReuse: { sourceRecipe, sourceCalibration,
+    rationale: 'Selector compatibility only',
+    evidence: [{ path: 'proof.json', sha256: '6'.repeat(64) }], scopes: [{
+    kind: 'mutation', stack: 'mongodb', fromExecutableSha256: '4'.repeat(64),
+    toExecutableSha256: '5'.repeat(64),
+  }] } };
+  const artifact = { identities: {
+    recipe: { id: sourceRecipe.id, version: sourceRecipe.version,
+      sha256: sourceRecipe.contentSha256 },
+    calibration: { ...sourceCalibration },
+  } };
+  const actual = { schemaVersion: 2, kind: 'mutation', executableSha256: '4'.repeat(64),
+    recipe: { id: sourceRecipe.id, version: sourceRecipe.version,
+      contentSha256: sourceRecipe.contentSha256 },
+    checksSha256: '7'.repeat(64), stack: { id: 'mongodb', version: '1.0.0',
+      reference: { id: 'fixture', sourceSha256: '8'.repeat(64) } },
+    mutationSha256: '9'.repeat(64) };
+  const expected = structuredClone(actual);
+  expected.executableSha256 = '5'.repeat(64);
+  expected.recipe = { id: 'recipe', version: '1.1.0', contentSha256: 'a'.repeat(64) };
+  expected.stack.version = '2.0.0';
+  const input = { actual, expected, artifact, calibration,
+    entry: { kind: 'mutation', stack: 'mongodb' } };
+  assert.equal(canReuseQualificationScope(input), true);
+  const changes: Array<(value: typeof input) => void> = [
+    value => { value.actual.checksSha256 = 'b'.repeat(64); },
+    value => { value.actual.mutationSha256 = 'b'.repeat(64); },
+    value => { value.actual.stack.reference.sourceSha256 = 'b'.repeat(64); },
+    value => { value.actual.schemaVersion += 1; },
+    value => { value.actual.kind = 'reference'; },
+    value => { value.expected.executableSha256 = 'b'.repeat(64); },
+    value => { value.artifact.identities.calibration.sha256 = 'b'.repeat(64); },
+  ];
+  for (const change of changes) {
+    const changed = structuredClone(input);
+    change(changed);
+    assert.equal(canReuseQualificationScope(changed), false);
+  }
+});
+
+test('qualification reuse definitions are exact and hash-bound', () => {
+  const definition = parseCalibration(CALIBRATION);
+  definition.qualificationReuse = {
+    sourceRecipe: { id: definition.recipe.id, version: '1.0.0',
+      contentSha256: '1'.repeat(64), executionSha256: definition.recipe.executionSha256 },
+    sourceCalibration: { id: definition.id, version: '1.0.0', sha256: '2'.repeat(64) },
+    rationale: 'No scoring change',
+    evidence: [{ path: 'proof.json', sha256: '5'.repeat(64) }],
+    scopes: [{ kind: 'null', fromExecutableSha256: '3'.repeat(64),
+      toExecutableSha256: '4'.repeat(64) }],
+  };
+  assert.doesNotThrow(() => compileCalibrationDefinition(definition));
+  assert.ok(definition.qualificationReuse);
+  required(definition.qualificationReuse.scopes[0], 'reuse scope').stack = 'mongodb';
+  assert.throws(() => compileCalibrationDefinition(definition), /not allowed for null reuse/);
+});
diff --git a/tools/stack-bench/tests/campaign-admission.contract.ts b/tools/stack-bench/tests/campaign-admission.contract.ts
new file mode 100644
index 00000000000..8bb87d3f5bc
--- /dev/null
+++ b/tools/stack-bench/tests/campaign-admission.contract.ts
@@ -0,0 +1,163 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { campaignAdmissionSmokeReuse, runCampaignAdmission }
+  from '../src/campaigns/campaign-admission.js';
+import type { CampaignAdmissionSmokeInput, CampaignAdmissionSmokeRequest }
+  from '../src/campaigns/campaign-admission.js';
+import { compileCampaignFile } from '../src/campaigns/campaign-compiler.js';
+import type { CampaignAdmissionPreflightRequest }
+  from '../src/campaigns/campaign-admission.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+const createdAt = '2026-08-27T12:00:00.000Z';
+const admission: CampaignAdmissionSmokeInput = {
+  ok: true,
+  createdAt,
+  reports: [{
+    ok: true,
+    request: { agentAdapter: 'claude-code', runIndex: 2,
+      backends: ['mongodb', 'postgres', 'spacetime'], image: 'stack-bench:fixed' },
+    checks: [{ id: 'smoke.container', status: 'pass', summary: 'passed' }],
+  }],
+};
+const request: CampaignAdmissionSmokeRequest = { agentAdapter: 'claude-code', runIndex: 2,
+  backend: 'postgres', image: 'stack-bench:fixed' };
+const passingPreflight = (request: CampaignAdmissionPreflightRequest) => ({
+  schemaVersion: 1 as const,
+  generatedAt: createdAt,
+  request: { backends: request.backends, track: request.track, levels: request.levelList,
+    runIndex: request.runIndex, parallelism: request.parallelism,
+    agentAdapter: request.agentAdapter,
+    packs: request.packIds, checks: request.checkKeys, image: request.image,
+    resultsDir: request.resultsDir, smoke: request.smoke },
+  ok: true,
+  summary: { passed: 1, failed: 0, warnings: 0 },
+  checks: [{ id: 'smoke.container', status: 'pass' as const, summary: 'passed' }],
+});
+
+test('campaign smoke reuse requires an exact recent passing admission', () => {
+  const recent = campaignAdmissionSmokeReuse(admission, request,
+    { now: Date.parse(createdAt) + 60_000 });
+  assert.deepEqual(recent, { reusable: true, reason: null, createdAt });
+
+  const stale = campaignAdmissionSmokeReuse(admission, request,
+    { now: Date.parse(createdAt) + 16 * 60_000 });
+  assert.equal(stale.reusable, false);
+  assert.match(stale.reason, /not recent/);
+
+  const changedImage = campaignAdmissionSmokeReuse(admission,
+    { ...request, image: 'stack-bench:changed' }, { now: Date.parse(createdAt) });
+  assert.equal(changedImage.reusable, false);
+  assert.match(changedImage.reason, /image changed/);
+
+  assert.throws(() => campaignAdmissionSmokeReuse(admission,
+    { ...request, backend: 'unknown' }, { now: Date.parse(createdAt) }), /does not cover stack/);
+  assert.throws(() => campaignAdmissionSmokeReuse({ ...admission, ok: false }, request,
+    { now: Date.parse(createdAt) }), /did not pass/);
+});
+
+test('campaign smoke reuse requires the real container smoke result', () => {
+  const missing = structuredClone(admission);
+  missing.reports[0]!.checks = [{ id: 'docker.engine', status: 'pass', summary: 'passed' }];
+  const result = campaignAdmissionSmokeReuse(missing, request,
+    { now: Date.parse(createdAt) });
+  assert.equal(result.reusable, false);
+  assert.match(result.reason, /no passing container smoke/);
+});
+
+test('admission allows one coding run at a time until the isolation test passes', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-single-run-admission-'));
+  try {
+    const example = JSON.parse(readFileSync(join(STACK_BENCH_ROOT, 'appliance',
+      'campaign.example.json'), 'utf8')) as { parallelism: number };
+    const campaignPath = join(root, 'campaign.json');
+    writeFileSync(campaignPath, `${JSON.stringify({ ...example, parallelism: 2 }, null, 2)}\n`);
+    const parallel = compileCampaignFile(campaignPath);
+    assert.throws(() => runCampaignAdmission(parallel, root, { codingContainers: () => [],
+      now: createdAt, uuid: () => 'parallel', env: {}, preflight: passingPreflight }),
+    /parallelism 2 is refused until the cross-run isolation test passes/);
+
+    const plan = compileCampaignFile(join(STACK_BENCH_ROOT, 'appliance', 'campaign.example.json'));
+    assert.throws(() => runCampaignAdmission(plan, root, {
+      codingContainers: () => ['stack-bench-build-other-campaign'],
+      now: createdAt, uuid: () => 'busy', env: {}, preflight: passingPreflight }),
+    /another coding run is active on this runner \(stack-bench-build-other-campaign\)/);
+
+    // A campaign that starts no coding container is not a coding run.
+    const modelFree = compileCampaignFile(join(STACK_BENCH_ROOT, 'tests', 'fixtures',
+      'dependency-model-free-campaign.json'));
+    const admitted = runCampaignAdmission(modelFree, root, {
+      codingContainers: () => ['stack-bench-build-other-campaign'],
+      now: createdAt, uuid: () => 'model-free', env: {} });
+    assert.equal(admitted.payload.ok, true);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('campaign admission receives only the feature catalog levels in the compiled plan', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-scoped-admission-'));
+  try {
+    const value = JSON.parse(readFileSync(join(STACK_BENCH_ROOT, 'appliance',
+      'campaign.ecommerce-progression-reference.json'), 'utf8'));
+    value.levels = [1, 2, 3];
+    value.selection.levels = value.selection.levels.filter((entry: { level: number }) =>
+      entry.level <= 3);
+    const campaignPath = join(root, 'campaign.json');
+    writeFileSync(campaignPath, `${JSON.stringify(value, null, 2)}\n`);
+    const plan = compileCampaignFile(campaignPath);
+    const requests: CampaignAdmissionPreflightRequest[] = [];
+    const result = runCampaignAdmission(plan, root, { codingContainers: () => [],
+      now: createdAt,
+      uuid: () => 'scoped',
+      env: {},
+      preflight: request => {
+        requests.push(request);
+        return passingPreflight(request);
+      },
+    });
+
+    assert.equal(result.payload.ok, true);
+    assert.equal(requests.length, plan.summary.parallelism);
+    assert(requests.every(request => request.featureCatalog!.definition.nodes
+      .every(node => node.level <= 3)));
+    assert(plan.featureCatalog);
+    const identity = plan.featureCatalog.identity;
+    assert(requests.every(request => request.featureCatalog!.identity.sha256 === identity.sha256));
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('campaign admission selects a free run slot', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-free-slot-admission-'));
+  try {
+    const value = JSON.parse(readFileSync(join(STACK_BENCH_ROOT, 'appliance',
+      'campaign.example.json'), 'utf8'));
+    value.repetitions = 1;
+    const campaignPath = join(root, 'campaign.json');
+    writeFileSync(campaignPath, `${JSON.stringify(value, null, 2)}\n`);
+    const plan = compileCampaignFile(campaignPath);
+    const requests: CampaignAdmissionPreflightRequest[] = [];
+    let portProbes = 0;
+    const result = runCampaignAdmission(plan, root, { codingContainers: () => [],
+      now: createdAt,
+      uuid: () => 'free-slot',
+      env: {},
+      probePort: () => ({ free: ++portProbes > 1 }),
+      preflight: request => {
+        requests.push(request);
+        return passingPreflight(request);
+      },
+    });
+    assert.deepEqual(result.runIndices, [1]);
+    assert.equal(requests.length, 1);
+    assert.equal(requests[0]!.runIndex, 1);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/campaign-cli.test.ts b/tools/stack-bench/tests/campaign-cli.test.ts
new file mode 100644
index 00000000000..f42f1ecc1ee
--- /dev/null
+++ b/tools/stack-bench/tests/campaign-cli.test.ts
@@ -0,0 +1,116 @@
+import assert from 'node:assert/strict';
+import { resolve } from 'node:path';
+import test from 'node:test';
+
+import { auditCompletedReferenceCampaign, campaignStateSummary, parseCampaignArgs,
+  validateResumeCampaignState } from '../commands/campaign-cli.js';
+
+const argv = (...args: string[]): string[] => ['node', 'campaign-cli.js', ...args];
+
+test('campaign CLI separates read-only, execution, and status commands', () => {
+  assert.equal(parseCampaignArgs(argv('modes')).command, 'modes');
+  assert.equal(parseCampaignArgs(argv('show', './campaign.json')).command, 'show');
+  assert.equal(parseCampaignArgs(argv('trial', './campaign.json', '--out', './results')).command,
+    'trial');
+  assert.equal(parseCampaignArgs(argv('run', './campaign.json', '--out', './results')).command, 'run');
+  assert.equal(parseCampaignArgs(argv('resume', './campaign.json', '--out', './results')).command,
+    'resume');
+  assert.equal(parseCampaignArgs(argv('reconcile', './campaign.json', '--out', './results')).command,
+    'reconcile');
+  assert.deepEqual(parseCampaignArgs(argv('status', './results')), {
+    command: 'status', directory: resolve('./results'), full: false,
+  });
+  assert.deepEqual(parseCampaignArgs(argv('status', './results', '--full')), {
+    command: 'status', directory: resolve('./results'), full: true,
+  });
+  assert.equal(parseCampaignArgs(argv('inspect', './results')).command, 'inspect');
+  assert.equal(parseCampaignArgs(argv('report', './results')).command, 'report');
+  assert.equal(parseCampaignArgs(argv('audit', './results')).command, 'audit');
+  assert.deepEqual(parseCampaignArgs(argv('grant-repairs', './results',
+    '--attempt', 'campaign-r1', '--grant-id', 'grant-1', '--level', '3',
+    '--feature', 'orders', '--feature', 'inventory', '--repairs', '2')), {
+    command: 'grant-repairs', directory: resolve('./results'),
+    attemptId: 'campaign-r1', grantId: 'grant-1', level: 3,
+    nodeIds: ['orders', 'inventory'], repairs: 2,
+  });
+  assert.deepEqual(parseCampaignArgs(argv('extend', './depth-3.json', '--from', './depth-2',
+    '--depth', '2', '--out', './depth-3')), {
+    command: 'extend', path: resolve('./depth-3.json'), parentDirectory: resolve('./depth-2'),
+    fromDepth: 2, directory: resolve('./depth-3'),
+  });
+  assert.throws(() => parseCampaignArgs(argv('run', './campaign.json')), /usage/);
+  assert.throws(() => parseCampaignArgs(argv('prepare', './campaign.json', '--out', './results')),
+    /usage/);
+  assert.throws(() => parseCampaignArgs(argv('run', './campaign.json', '--out', './a', '--out', './b')),
+    /usage/);
+  assert.throws(() => parseCampaignArgs(argv('status', './results', '--json')), /usage/);
+  assert.throws(() => parseCampaignArgs(argv('grant-repairs', './results',
+    '--attempt', 'campaign-r1', '--level', '3', '--feature', 'orders', '--repairs', '2')),
+  /requires --attempt, --grant-id/);
+});
+
+test('campaign commands print a compact result and retain failed attempt details', () => {
+  const plan = { id: 'campaign', version: '1.0.0', contentSha256: 'a'.repeat(64) };
+  const state = {
+    status: 'attention-required',
+    summary: { total: 3, completed: 2, invalid: 1, executions: 3 },
+    attempts: [
+      { plan: { id: 'passed' }, status: 'completed', executions: [
+        { id: 'passed-execution1', outcome: 'passed', reason: null },
+      ] },
+      { plan: { id: 'application-failure' }, status: 'completed', executions: [
+        { id: 'application-failure-execution1', outcome: 'app_failure', reason: null },
+      ] },
+      { plan: { id: 'invalid' }, status: 'invalid', executions: [
+        { id: 'invalid-execution1', outcome: 'harness_failure', reason: 'grader stopped' },
+      ] },
+    ],
+  };
+
+  const summary = campaignStateSummary(plan, state);
+  assert.equal(summary.status, 'attention-required');
+  assert.deepEqual(summary.summary, state.summary);
+  assert.deepEqual(summary.failures.map(failure => [failure.attempt, failure.outcome]), [
+    ['application-failure', 'app_failure'],
+    ['invalid', 'harness_failure'],
+  ]);
+  assert.equal(JSON.stringify(summary).includes('passed-execution1'), false);
+});
+
+test('automatic reference audit runs only after campaign completion', () => {
+  let calls = 0;
+  const plan = { attempts: [{ mode: { id: 'dependency' }, agentAdapter: 'reference-fixture' }] };
+  const audit = (directory: string) => {
+    calls += 1;
+    assert.equal(directory, 'results');
+    return { ok: true };
+  };
+  assert.equal(auditCompletedReferenceCampaign('results', plan, { status: 'running' }, { audit }),
+    null);
+  assert.deepEqual(auditCompletedReferenceCampaign('results', plan, { status: 'completed' },
+    { audit }), { ok: true });
+  assert.equal(auditCompletedReferenceCampaign('results', { attempts: [] },
+    { status: 'completed' }, { audit }), null);
+  assert.equal(calls, 1);
+});
+
+test('campaign CLI resumes only an existing matching dependency campaign', () => {
+  const sha256 = 'a'.repeat(64);
+  const requested = { contentSha256: sha256 };
+  const existing = {
+    plan: { contentSha256: sha256, definition: { mode: { id: 'dependency' } } },
+    state: { status: 'prepared', attempts: [{ executions: [{}] }] },
+  };
+  assert.equal(validateResumeCampaignState(requested, existing), existing);
+  assert.throws(() => validateResumeCampaignState({ contentSha256: 'b'.repeat(64) }, existing),
+    /exact campaign plan/);
+  assert.throws(() => validateResumeCampaignState(requested, {
+    ...existing, plan: { ...existing.plan, definition: { mode: { id: 'sequential' } } },
+  }), /only for dependency/);
+  assert.throws(() => validateResumeCampaignState(requested, {
+    ...existing, state: { status: 'prepared', attempts: [{ executions: [] }] },
+  }), /scheduled work/);
+  assert.throws(() => validateResumeCampaignState(requested, {
+    ...existing, state: { ...existing.state, status: 'running' },
+  }), /scheduled work/);
+});
diff --git a/tools/stack-bench/tests/campaign-compiler.contract.ts b/tools/stack-bench/tests/campaign-compiler.contract.ts
new file mode 100644
index 00000000000..8f5185b1e95
--- /dev/null
+++ b/tools/stack-bench/tests/campaign-compiler.contract.ts
@@ -0,0 +1,964 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { CAMPAIGN_SCHEMA_VERSION, campaignGradingQualification, campaignIdentity,
+  compileCampaignFile, validateCampaignDefinition, validateCompiledCampaignPlan }
+  from '../src/campaigns/campaign-compiler.js';
+import type { CalibrationResolver, CompilerOptions, RecipeResolver }
+  from '../src/campaigns/campaign-compiler.js';
+import { runCampaignAdmission } from '../src/campaigns/campaign-admission.js';
+import { attemptArgv } from '../src/campaigns/campaign-runner.js';
+import { parseBenchArguments } from '../commands/bench-arguments.js';
+import { canonicalDefinitionJson } from '../src/composition/definition-plan.js';
+import { resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { writeArtifact } from '../src/evidence/artifacts.js';
+import { sha256 } from '../src/evidence/provenance.js';
+import { validateDependencyPolicyInput } from '../src/progression/progression-definition.js';
+
+const APPLIANCE_ROOT = resolve(STACK_BENCH_ROOT, 'appliance');
+
+interface TestCondition {
+  id: string;
+  version: string;
+  guidanceProfile: string;
+  repairPolicy: string;
+  specifications?: { levels: Array<{
+    level: number; requested: string[]; expected: string[]; observed: string[];
+  }> };
+}
+
+interface TestCampaignDefinition {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  track: string;
+  mode: { id: string; version: string; workSelection?: 'feature' | 'progressive' | 'all-at-once' };
+  repair: { selection: 'feature' | 'batch'; budget: {
+    total?: number; perFeature?: number; perDepth?: { count: number; carry: boolean };
+  } };
+  levels?: number[];
+  selection: {
+    packs?: string[];
+    checks?: string[];
+    levels?: Array<{ level: number; recipe: string; features?: string[]; checks?: string[] }>;
+  };
+  stacks: Array<{ id: string; adapterVersion: string; repetitions?: number }>;
+  agents: Array<{ adapter: string; adapterVersion: string; model: string }>;
+  conditions: TestCondition[];
+  repetitions: number;
+  ordering: { method: string; seed: string };
+  parallelism?: number;
+  budgets: { attemptTimeoutMinutes: number; maxCostUsdPerAttempt: number | null };
+  attemptPolicy: { retries: number; retryOn: string[]; excludeFromAnalysis: string[] };
+  runtime: { releaseManifestSha256: string | null; controllerImage: string | null;
+    buildImage: string | null; platform: string };
+  pricing: { currency: string; unit: string; capturedAt: string; source: string;
+    models: Record<string, Record<string, number>> };
+  analysis: { primaryMetric: string; secondaryMetrics: string[]; dispersion: string;
+    invalidAttempts: string; missingData: string; comparisonUnit: string };
+  featureCatalog?: unknown;
+}
+
+function definition(overrides: Partial<TestCampaignDefinition> = {}): TestCampaignDefinition {
+  return {
+    schemaVersion: CAMPAIGN_SCHEMA_VERSION,
+    kind: 'campaign-manifest',
+    id: 'ecommerce-l1-comparison',
+    version: '1.0.0',
+    state: 'draft',
+    title: 'Ecommerce L1 comparison',
+    track: 'ecommerce',
+    mode: { id: 'sequential', version: '1.0.0' },
+    repair: { selection: 'batch', budget: { total: 3 } },
+    levels: [1],
+    selection: { packs: [], checks: [] },
+    stacks: [
+      { id: 'spacetime', adapterVersion: '1.3.0' },
+      { id: 'postgres', adapterVersion: '1.5.0' },
+      { id: 'mongodb', adapterVersion: '1.4.0' },
+    ],
+    agents: [{ adapter: 'deterministic', adapterVersion: '1.3.0', model: 'deterministic' }],
+    conditions: [{ id: 'prescribed', version: '1.0.0',
+      guidanceProfile: 'prescribed@1.2.0', repairPolicy: 'scored-only@1.1.0' }],
+    repetitions: 3,
+    ordering: { method: 'balanced-rotation', seed: 'published-seed-1' },
+    budgets: { attemptTimeoutMinutes: 240, maxCostUsdPerAttempt: null },
+    attemptPolicy: { retries: 1, retryOn: ['harness_failure', 'inconclusive'],
+      excludeFromAnalysis: ['contaminated', 'harness_failure', 'inconclusive', 'ungraded'] },
+    runtime: { releaseManifestSha256: null, controllerImage: null, buildImage: null,
+      platform: 'linux/amd64' },
+    pricing: { currency: 'USD', unit: 'USD-per-million-tokens',
+      capturedAt: '2026-08-12T00:00:00.000Z',
+      source: 'offline deterministic adapter', models: { deterministic: {
+        input: 0, output: 0, cacheWrite5m: 0, cacheWrite1h: 0, cacheRead: 0,
+      } } },
+    analysis: { primaryMetric: 'firstBuildScoreRate',
+      secondaryMetrics: ['finalScoreRate', 'totalCostUsd', 'totalDurationMs', 'correctionSuccessRate',
+        'correctionCostUsd', 'correctionSpendUsd', 'invalidAttemptRate'],
+      dispersion: 'median-iqr', invalidAttempts: 'report-separately', missingData: 'no-imputation',
+      comparisonUnit: 'stack-agent-condition-recipe' },
+    ...overrides,
+  };
+}
+
+function compile(value: unknown, options: CompilerOptions = {}) {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-'));
+  const path = join(root, 'campaign.json');
+  writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`);
+  try { return compileCampaignFile(path, options); }
+  finally { rmSync(root, { recursive: true, force: true }); }
+}
+
+// The reference progression campaign takes seconds to compile. Tests that
+// only read it share one compile and work on a clone.
+type CompiledPlan = ReturnType<typeof compileCampaignFile>;
+interface ReferenceManifest {
+  levels: number[];
+  selection: { levels: Array<{ level: number }> };
+  repair: { order?: string };
+  ordering: { seed: string };
+}
+const referenceManifest = (): ReferenceManifest =>
+  JSON.parse(readFileSync(join(APPLIANCE_ROOT,
+    'campaign.ecommerce-progression-reference.json'), 'utf8')) as ReferenceManifest;
+let referencePlanCache: CompiledPlan | null = null;
+const referencePlan = (): CompiledPlan =>
+  structuredClone(referencePlanCache ??= compile(referenceManifest()));
+let depthThreePlanCache: CompiledPlan | null = null;
+const referencePlanThroughDepthThree = (): CompiledPlan => structuredClone(depthThreePlanCache ??= (() => {
+  const value = referenceManifest();
+  value.levels = [1, 2, 3];
+  value.selection.levels = value.selection.levels.filter(entry => entry.level <= 3);
+  return compile(value);
+})());
+
+const QUALIFIED_BUILD_IMAGE = `sha256:${'d'.repeat(64)}`;
+
+const resolvedQualification: CalibrationResolver = release => {
+  return {
+    id: `${release.id}-test-calibration`,
+    version: release.version,
+    state: 'qualified',
+    contentSha256: sha256(canonicalDefinitionJson({
+      kind: 'resolved-test-calibration',
+      recipe: { id: release.id, version: release.version, sha256: release.contentSha256 },
+    })),
+    qualificationSha256: sha256(canonicalDefinitionJson({
+      kind: 'resolved-test-qualification',
+      recipe: { id: release.id, version: release.version, sha256: release.contentSha256 },
+    })),
+    qualification: {
+      buildImage: QUALIFIED_BUILD_IMAGE,
+      stacks: ['mongodb', 'postgres', 'spacetime'].map(id => ({ id, status: 'qualified' })),
+    },
+    qualificationStaleness: [],
+  };
+};
+
+const resolvedQualificationOptions: CompilerOptions = { calibrationResolver: resolvedQualification };
+
+// Frozen-state tests isolate compiler policy from the mutable public promotion catalog.
+const promotedRecipe: RecipeResolver = (track, level) => {
+  const binding = resolveRecipeRelease(track, 1, 'ecommerce.sequential-l1@2.5.0');
+  return binding ? {
+    ...binding,
+    alias: `L${level}`,
+    status: 'promoted',
+    release: {
+      ...binding.release,
+      state: 'qualified',
+      components: {
+        ...binding.release.components,
+        fixture: { ...binding.release.components.fixture, state: 'qualified' },
+      },
+    },
+  } : null;
+};
+
+const qualifiedCompilerOptions: CompilerOptions = {
+  calibrationResolver: resolvedQualification,
+  recipeResolver: promotedRecipe,
+};
+
+const modularFeatures = [
+  'ecommerce.feature.accounts',
+  'ecommerce.feature.cart-checkout',
+  'ecommerce.feature.catalog',
+  'ecommerce.feature.purchasing',
+  'ecommerce.feature.reviews',
+  'ecommerce.feature.warehouse-admin',
+];
+
+function modularDefinition({ requested = [], expected = [], observed = [] }:
+  { requested?: string[]; expected?: string[]; observed?: string[] } = {}): TestCampaignDefinition {
+  return definition({
+    repetitions: 1,
+    selection: { levels: [{ level: 1, recipe: 'ecommerce.sequential-l1@2.5.0',
+      features: modularFeatures, checks: [] }] },
+    conditions: [{ ...definition().conditions[0]!, specifications: { levels: [{ level: 1,
+      requested, expected, observed }] } }],
+  });
+}
+
+function multiLevelDefinition(levels: number[]): TestCampaignDefinition {
+  return definition({
+    levels,
+    selection: { levels: levels.map(level => ({
+      level,
+      recipe: 'ecommerce.sequential-l1@2.5.0',
+      features: modularFeatures,
+      checks: [],
+    })) },
+    conditions: [{ ...definition().conditions[0]!, specifications: {
+      levels: levels.map(level => ({ level, requested: [], expected: [], observed: [] })),
+    } }],
+  });
+}
+
+function dependencyDefinition() {
+  const value = modularDefinition();
+  value.mode = { id: 'dependency', version: '4.3.0' };
+  value.repair = { selection: 'feature', budget: { perFeature: 2 } };
+  delete value.levels;
+  delete value.selection.levels![0]!.features;
+  delete value.selection.levels![0]!.checks;
+  delete value.conditions[0]!.specifications;
+  value.featureCatalog = {
+    schemaVersion: 1,
+    kind: 'feature-catalog',
+    id: 'ecommerce-dependency',
+    version: '1.0.0',
+    state: 'draft',
+    title: 'Ecommerce dependency fixture',
+    nodes: [{ id: 'accounts', title: 'Accounts', questline: 'identity', dependencies: [],
+      featureRefs: ['ecommerce.feature.accounts@1.1.0'], promptModules: [],
+      gradingChecks: [{ id: 'ecommerce.feature.accounts.accounts.1a', points: 1,
+        role: 'feature' }] }],
+    questlines: [{ id: 'identity', title: 'Identity', nodes: ['accounts'] }],
+  };
+  return value;
+}
+
+test('campaign compilation binds exact inputs and expands a balanced immutable attempt plan', () => {
+  const plan = compile(definition(), resolvedQualificationOptions);
+  assert.equal(plan.summary.attempts, 9);
+  assert.equal(plan.bindings[0]!.recipe.id, 'ecommerce.sequential-l1');
+  assert.match(plan.bindings[0]!.recipe.contentSha256, /^[a-f0-9]{64}$/);
+  assert.equal(plan.bindings[0]!.calibration!.id, 'ecommerce.sequential-l1-test-calibration');
+  assert.equal(plan.bindings[0]!.selection!.completeness, 'full');
+  assert.deepEqual(campaignIdentity(plan, resolvedQualificationOptions), {
+    id: plan.id, version: '1.0.0', sha256: plan.contentSha256, state: 'draft',
+  });
+  for (let repetition = 1; repetition <= 3; repetition += 1) {
+    const attempts = plan.attempts.filter(attempt => attempt.repetition === repetition);
+    assert.deepEqual([...attempts.map(attempt => attempt.order)].sort(), [1, 2, 3]);
+    assert.deepEqual([...attempts.map(attempt => attempt.stack)].sort(), ['mongodb', 'postgres', 'spacetime']);
+  }
+  assert.equal(new Set(plan.attempts.filter(attempt => attempt.order === 1)
+    .map(attempt => attempt.stack)).size, 3, 'each stack must lead one repetition');
+  assert(plan.attempts.every(attempt => canonicalDefinitionJson(attempt.pricing)
+    === canonicalDefinitionJson({ unit: plan.definition.pricing.unit,
+      rates: plan.definition.pricing.models[attempt.model] })));
+});
+
+test('dependency campaigns bind separate catalog and policy identities in every attempt', () => {
+  const plan = compile(dependencyDefinition());
+  assert(plan.featureCatalog && plan.dependencyPolicy);
+  assert.deepEqual(plan.definition.levels, [1]);
+  assert.equal(plan.definition.featureCatalog, undefined);
+  assert.equal(plan.featureCatalog.identity.id, 'ecommerce-dependency');
+  assert.equal(plan.featureCatalog.identity.version, '1.0.0');
+  assert.equal(plan.dependencyPolicy.definition.repair.selection, 'feature');
+  assert.equal(plan.dependencyPolicy.definition.version, '4.3.0');
+  assert.match(plan.featureCatalog.identity.sha256, /^[a-f0-9]{64}$/);
+  assert(plan.attempts.every(attempt =>
+    canonicalDefinitionJson(attempt.dependencyPolicy)
+      === canonicalDefinitionJson(plan.dependencyPolicy!.identity)));
+  assert(plan.attempts.every(attempt =>
+    canonicalDefinitionJson(attempt.featureCatalog)
+      === canonicalDefinitionJson(plan.featureCatalog!.identity)));
+  assert.deepEqual(validateCompiledCampaignPlan(plan), plan);
+  assert.throws(() => validateCampaignDefinition({ ...dependencyDefinition(), levels: [1, 2] }),
+    /levels.*feature catalog/);
+});
+
+test('campaign repair plans are required and match the run mode', () => {
+  assert.throws(() => validateCampaignDefinition({
+    ...dependencyDefinition(), repair: undefined,
+  }), /repair must be an object/);
+  assert.throws(() => validateCampaignDefinition({
+    ...definition(), repair: { selection: 'feature', budget: { total: 1 } },
+  }), /sequential mode requires batch selection/);
+  assert.throws(() => validateCampaignDefinition({
+    ...definition(), repair: { selection: 'batch', budget: { perFeature: 1 } },
+  }), /sequential mode requires batch selection and one total budget/);
+  assert.throws(() => validateCampaignDefinition({
+    ...definition(), repair: { selection: 'batch', budget: { perDepth: { count: 1, carry: true } } },
+  }), /sequential mode requires batch selection and one total budget/);
+});
+
+test('dependency catalog references use the shared semantic-version parser', () => {
+  const value = dependencyDefinition();
+  value.levels = [1];
+  value.featureCatalog = 'ecommerce.questlines@1.0.0-rc.1+build.7';
+  assert.equal(validateCampaignDefinition(value).featureCatalog, value.featureCatalog);
+  value.featureCatalog = 'ecommerce:questlines@1.0.0';
+  assert.throws(() => validateCampaignDefinition(value), /exact id@version reference/);
+});
+
+test('a shuffled repair order is drawn once per campaign, frozen in the policy, and shared by every stack', () => {
+  const declared = referencePlan();
+  const shuffledManifest = referenceManifest();
+  shuffledManifest.repair.order = 'shuffled';
+  const shuffled = compile(shuffledManifest);
+  assert(declared.featureCatalog && declared.dependencyPolicy
+    && shuffled.featureCatalog && shuffled.dependencyPolicy);
+  const declaredOrder = declared.dependencyPolicy.definition.nodeOrder;
+  const shuffledOrder = shuffled.dependencyPolicy.definition.nodeOrder;
+  const levelOf = new Map(declared.featureCatalog.definition.nodes
+    .map(node => [node.id, node.level]));
+  // Same features, same depth grouping, different order within a depth.
+  assert.deepEqual([...shuffledOrder].sort(), [...declaredOrder].sort());
+  assert.deepEqual(shuffledOrder.map(id => levelOf.get(id)), declaredOrder.map(id => levelOf.get(id)));
+  assert.notDeepEqual(shuffledOrder, declaredOrder);
+  assert.equal(shuffled.dependencyPolicy.definition.repair.order, 'shuffled');
+  // The catalog and its qualification are untouched; the policy carries the order.
+  assert.equal(shuffled.featureCatalog.identity.sha256, declared.featureCatalog.identity.sha256);
+  assert.notEqual(shuffled.dependencyPolicy.identity.sha256, declared.dependencyPolicy.identity.sha256);
+  assert(shuffled.attempts.every(attempt =>
+    canonicalDefinitionJson(attempt.dependencyPolicy)
+      === canonicalDefinitionJson(shuffled.dependencyPolicy!.identity)));
+  // The seed decides the order, so the same plan compiles to the same order.
+  assert.deepEqual(compile(structuredClone(shuffledManifest)).dependencyPolicy?.definition.nodeOrder,
+    shuffledOrder);
+  const reseeded = structuredClone(shuffledManifest);
+  reseeded.ordering.seed = `${reseeded.ordering.seed}-2`;
+  assert.notDeepEqual(compile(reseeded).dependencyPolicy?.definition.nodeOrder, shuffledOrder);
+  // The frozen policy validates against the catalog it was drawn from.
+  assert.deepEqual(validateDependencyPolicyInput(shuffled.dependencyPolicy, shuffled.featureCatalog),
+    shuffled.dependencyPolicy);
+  assert.throws(() => validateCampaignDefinition({
+    ...definition(), repair: { selection: 'batch', budget: { total: 1 }, order: 'shuffled' },
+  }), /sequential mode has no feature order to shuffle/);
+});
+
+test('dependency campaign plans bind only the selected feature catalog levels', () => {
+  const plan = referencePlanThroughDepthThree();
+  assert(plan.featureCatalog && plan.dependencyPolicy);
+
+  assert.deepEqual([...new Set(plan.featureCatalog.definition.nodes.map(node => node.level))],
+    [1, 2, 3]);
+  assert(plan.featureCatalog.definition.nodes.every(node => node.level <= 3));
+  assert(plan.featureCatalog.definition.questlines.every(questline => questline.nodes.every(nodeId =>
+    plan.featureCatalog!.definition.nodes.some(node => node.id === nodeId))));
+  assert.equal(plan.featureCatalog.definition.state, 'draft');
+  assert.deepEqual(plan.dependencyPolicy.definition.levels, [1, 2, 3]);
+  assert(plan.attempts.every(attempt => canonicalDefinitionJson(attempt.featureCatalog)
+    === canonicalDefinitionJson(plan.featureCatalog!.identity)));
+  assert.deepEqual(validateCompiledCampaignPlan(plan), plan);
+});
+
+test('campaign identity ignores feature catalog root governance text', () => {
+  const plan = referencePlanThroughDepthThree();
+  assert(plan.featureCatalog);
+  const renamed = structuredClone(plan);
+  assert(renamed.featureCatalog);
+  renamed.featureCatalog.definition.state = 'qualified';
+  renamed.featureCatalog.definition.title += ' renamed';
+
+  assert.deepEqual(campaignIdentity(renamed), campaignIdentity(plan));
+  assert.deepEqual(validateCompiledCampaignPlan(renamed), renamed);
+});
+
+test('campaign graph version must match its recipe calibration', () => {
+  const value = JSON.parse(readFileSync(join(APPLIANCE_ROOT,
+    'campaign.ecommerce-progression-reference.json'), 'utf8'));
+  const calibrationResolver: CalibrationResolver = (release, options) => {
+    const calibration = resolvedQualification(release, options);
+    assert(calibration);
+    calibration.qualification.featureCatalog = {
+      id: 'ecommerce.questlines',
+      version: '1.1.0',
+      sha256: 'a'.repeat(64),
+    };
+    return calibration;
+  };
+  assert.throws(() => compile(value, { calibrationResolver }),
+    /L1 calibration qualifies ecommerce\.questlines@1\.1\.0, not ecommerce\.questlines@2\.0\.2/);
+});
+
+test('sequential campaigns can use the same feature catalog without dependency gating', () => {
+  const dependencyPlan = compile(dependencyDefinition());
+  assert(dependencyPlan.featureCatalog);
+  const definition = dependencyDefinition();
+  definition.mode = { id: 'sequential', version: '1.0.0' };
+  definition.repair = { selection: 'batch', budget: { total: 2 } };
+  const plan = compile(definition);
+  assert(plan.featureCatalog);
+  assert.equal(plan.attempts[0]!.dependencyPolicy, undefined);
+  assert.deepEqual(plan.attempts[0]!.featureCatalog, plan.featureCatalog.identity);
+  assert.equal(plan.featureCatalog.identity.sha256,
+    dependencyPlan.featureCatalog.identity.sha256);
+  assert.deepEqual(validateCompiledCampaignPlan(plan), plan);
+});
+
+test('repair changes affect dependency policy but not the shared feature catalog', () => {
+  const first = compile(dependencyDefinition());
+  const changed = dependencyDefinition();
+  changed.repair.budget.perFeature = 5;
+  const second = compile(changed);
+  assert(first.featureCatalog && first.dependencyPolicy);
+  assert(second.featureCatalog && second.dependencyPolicy);
+  assert.equal(first.featureCatalog.identity.sha256, second.featureCatalog.identity.sha256);
+  assert.notEqual(first.dependencyPolicy.identity.sha256,
+    second.dependencyPolicy.identity.sha256);
+  const changedIdentity = structuredClone(first);
+  changedIdentity.dependencyPolicy!.identity.sha256 = 'a'.repeat(64);
+  assert.throws(() => validateCompiledCampaignPlan(changedIdentity),
+    /dependency policy identity/);
+  assert.throws(() => validateCompiledCampaignPlan({ ...first, dependencyPolicy: null }),
+    /dependency policy does not match its mode/);
+});
+
+test('dependency bench input is bound to one fully validated campaign attempt', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-dependency-plan-'));
+  try {
+    const plan = compile(dependencyDefinition());
+    assert(plan.featureCatalog && plan.dependencyPolicy);
+    const planPath = join(root, 'plan.json');
+    writeArtifact(planPath, { kind: 'campaign_plan', id: `${plan.id}-plan`, payload: plan });
+    const attempt = plan.attempts[0];
+    assert(attempt);
+    const argv = attemptArgv(plan, attempt, join(root, 'result'), 0, planPath);
+    const args = parseBenchArguments(['node', ...argv]);
+    assert.deepEqual(args.pricing, attempt.pricing);
+    assert.deepEqual(args.runMode, attempt.mode);
+    assert.deepEqual(args.experimentIdentity, campaignIdentity(plan));
+    assert.deepEqual(args.featureCatalog, plan.featureCatalog);
+    assert.deepEqual(args.dependencyPolicy, plan.dependencyPolicy);
+    assert(args.progression);
+    assert.equal(args.progression.definition.policy, 'dependency-graph');
+    assert.deepEqual(args.progressionOwner, { schemaVersion: 1,
+      campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+      attempt: { id: attempt.id, track: plan.definition.track, stack: attempt.stack,
+        agentAdapter: attempt.agentAdapter,
+        model: attempt.model, conditionSha256: attempt.condition.sha256 } });
+    assert.throws(() => parseBenchArguments(['node', ...argv, '--backend', 'postgres']),
+      /campaign attempts cannot override --backend/);
+
+    const now = new Date().toISOString();
+    const admission = runCampaignAdmission(plan, root, { codingContainers: () => [],
+      now, uuid: () => 'bench-input', env: {},
+      preflight: request => ({
+        schemaVersion: 1,
+        generatedAt: now,
+        request: { backends: request.backends, track: request.track, levels: request.levelList,
+          runIndex: request.runIndex, parallelism: request.parallelism,
+          agentAdapter: request.agentAdapter,
+          packs: request.packIds, checks: request.checkKeys, image: request.image,
+          resultsDir: request.resultsDir, smoke: request.smoke },
+        ok: true,
+        summary: { passed: 1, failed: 0, warnings: 0 },
+        checks: [{ id: 'smoke.container', status: 'pass', summary: 'passed' }],
+      }),
+    });
+    const admittedArgv = attemptArgv(plan, attempt, join(root, 'admitted-result'), 0,
+      planPath, null, admission.id);
+    const admittedArgs = parseBenchArguments(['node', ...admittedArgv]);
+    assert(admittedArgs.campaignAdmission);
+    assert.equal(admittedArgs.campaignAdmission.id, admission.id);
+    assert.equal(admittedArgs.campaignAdmission.reusable, true);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('campaign-bound feature budgets are not limited by the direct CLI repair cap', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-large-repair-budget-'));
+  try {
+    const definition = dependencyDefinition();
+    definition.repair.budget.perFeature = 100;
+    const plan = compile(definition);
+    const planPath = join(root, 'plan.json');
+    writeArtifact(planPath, { kind: 'campaign_plan', id: `${plan.id}-plan`, payload: plan });
+    const argv = attemptArgv(plan, plan.attempts[0]!, join(root, 'result'), 0, planPath);
+    const args = parseBenchArguments(['node', ...argv]);
+    assert.equal(args.repairs, 0);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('sequential bench input uses the catalog for selection without live gating', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-sequential-catalog-'));
+  try {
+    const definition = dependencyDefinition();
+    definition.mode = { id: 'sequential', version: '1.0.0' };
+    definition.repair = { selection: 'batch', budget: { total: 2 } };
+    const plan = compile(definition);
+    assert(plan.featureCatalog);
+    const planPath = join(root, 'plan.json');
+    writeArtifact(planPath, { kind: 'campaign_plan', id: `${plan.id}-plan`, payload: plan });
+    const argv = attemptArgv(plan, plan.attempts[0]!, join(root, 'result'), 0, planPath);
+    assert.equal(argv.includes('--levels'), false);
+    const args = parseBenchArguments(['node', ...argv]);
+    assert.deepEqual(args.runMode, plan.attempts[0]!.mode);
+    assert.deepEqual(args.experimentIdentity, campaignIdentity(plan));
+    assert.equal(args.progression, undefined);
+    assert.deepEqual(args.featureCatalog, plan.featureCatalog);
+    assert.deepEqual(args.levelList, [1]);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('sequential campaign input retains its campaign and mode without a feature catalog', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-sequential-plan-'));
+  try {
+    const plan = compileCampaignFile(join(APPLIANCE_ROOT,
+      'campaign.example.json'));
+    const planPath = join(root, 'plan.json');
+    writeArtifact(planPath, { kind: 'campaign_plan', id: `${plan.id}-plan`, payload: plan });
+    const attempt = plan.attempts[0];
+    assert(attempt);
+    const argv = attemptArgv(plan, attempt, join(root, 'result'), 0, planPath);
+    assert.equal(argv.includes('--feature-catalog-sha256'), false);
+    const args = parseBenchArguments(['node', ...argv]);
+    assert.deepEqual(args.runMode, attempt.mode);
+    assert.deepEqual(args.experimentIdentity, campaignIdentity(plan));
+    assert.equal(args.featureCatalog, undefined);
+    assert.equal(args.progression, undefined);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('dependency campaigns derive product scope and reject duplicate author scope', () => {
+  const value = dependencyDefinition();
+  const plan = compile(value);
+  assert.deepEqual(plan.conditions[0].requested.levels[0].selection.requested.features,
+    ['ecommerce.feature.accounts']);
+  assert.deepEqual(plan.conditions[0].requested.levels[0].selection.requested.checks,
+    ['ecommerce.feature.accounts.accounts.1a']);
+  value.selection.levels![0]!.features = ['ecommerce.feature.accounts'];
+  assert.throws(() => compile(value), /features: is unknown/);
+  const specifications = dependencyDefinition();
+  specifications.conditions[0]!.specifications = { levels: [{ level: 1,
+    requested: [], expected: [], observed: [] }] };
+  assert.throws(() => compile(specifications), /progression graph owns specification scope/);
+  const legacy = dependencyDefinition();
+  legacy.selection = { packs: ['accounts'], checks: [] };
+  assert.throws(() => compile(legacy), /require recipe bindings by level/);
+});
+
+test('campaign identity ignores JSON formatting but changes with study semantics', () => {
+  const first = compile(definition());
+  const reordered = definition();
+  reordered.stacks.reverse();
+  reordered.selection = { checks: [], packs: [] };
+  const same = compile(reordered);
+  assert.equal(same.contentSha256, first.contentSha256);
+  const explicitDefaults = definition({ parallelism: 1,
+    stacks: definition().stacks.map(stack => ({ ...stack, repetitions: 3 })) });
+  assert.equal(compile(explicitDefaults).contentSha256, first.contentSha256);
+  const changed = compile(definition({ repetitions: 4 }));
+  assert.notEqual(changed.contentSha256, first.contentSha256);
+  const partial = compile(definition({ selection: { packs: [],
+    checks: ['ecommerce.feature.accounts.accounts.1a'] } }));
+  assert.notEqual(partial.conditions[0].sha256, first.conditions[0].sha256);
+  assert.equal(partial.conditions[0].requested.levels[0].task.sha256,
+    partial.bindings[0]!.task!.sha256);
+  assert.deepEqual(partial.conditions[0].requested.levels[0].selection.taskPacks,
+    partial.bindings[0]!.selection!.taskPacks);
+  const identityOnly = compile(definition({ selection: {
+    packs: ['ecommerce.feature.accounts'], checks: [],
+  } }));
+  assert.deepEqual(identityOnly.bindings[0]!.selection!.taskPacks,
+    ['ecommerce.feature.accounts']);
+  assert.notEqual(identityOnly.bindings[0]!.task!.sha256, first.bindings[0]!.task!.sha256);
+  assert.notEqual(identityOnly.conditions[0].sha256, first.conditions[0].sha256);
+  const multiAgent = definition({ agents: [definition().agents[0]!,
+    { adapter: 'fault-injection', adapterVersion: '1.2.0', model: 'deterministic' }] });
+  const multiAgentReordered = structuredClone(multiAgent);
+  multiAgentReordered.agents.reverse();
+  assert.equal(compile(multiAgent).contentSha256, compile(multiAgentReordered).contentSha256);
+});
+
+test('balanced rotation covers every stack-agent condition and rotates the global lead', () => {
+  const agents = [
+    { adapter: 'deterministic', adapterVersion: '1.3.0', model: 'deterministic' },
+    { adapter: 'fault-injection', adapterVersion: '1.2.0', model: 'deterministic' },
+  ];
+  const plan = compile(definition({ agents, repetitions: 6 }));
+  for (let repetition = 1; repetition <= 6; repetition += 1) {
+    const attempts = plan.attempts.filter(attempt => attempt.repetition === repetition);
+    assert.equal(attempts.length, 6);
+    assert.equal(new Set(attempts.map(attempt => `${attempt.agentAdapter}:${attempt.stack}`)).size, 6);
+  }
+  assert.equal(new Set(plan.attempts.filter(attempt => attempt.order === 1)
+    .map(attempt => `${attempt.agentAdapter}:${attempt.stack}`)).size, 6);
+});
+
+test('guidance conditions are an independent campaign axis with stack-specific API material', () => {
+  const conditions = [...definition().conditions, { id: 'neutral', version: '1.0.0',
+    guidanceProfile: 'neutral@1.8.0', repairPolicy: 'scored-only@1.1.0' }];
+  const plan = compile(definition({ conditions, repetitions: 1 }));
+  assert.equal(plan.summary.attempts, 6);
+  assert.equal(new Set(plan.attempts.map(attempt =>
+    `${attempt.stack}:${attempt.condition.id}`)).size, 6);
+  const neutralSpacetime = plan.attempts.filter(attempt =>
+    attempt.stack === 'spacetime' && attempt.condition.id === 'neutral');
+  for (const attempt of neutralSpacetime) {
+    assert.deepEqual(attempt.skills, ['typescript-server', 'typescript-client']);
+  }
+  assert(plan.attempts.filter(attempt => attempt.stack !== 'spacetime')
+    .every(attempt => attempt.skills.length === 0));
+});
+
+test('modular campaigns bind requested, expected, and observed specifications independently', () => {
+  const requestedSpecifications = ['ecommerce.spec.access-control@1.2.0'];
+  const expected = compile(modularDefinition({ requested: requestedSpecifications,
+    expected: ['ecommerce.spec.state-durability@1.1.0'] }));
+  const observed = compile(modularDefinition({ requested: requestedSpecifications,
+    observed: ['ecommerce.spec.state-durability@1.1.0'] }));
+  const selected = expected.conditions[0].requested.levels[0];
+  assert.equal(expected.bindings[0]!.recipe.id, 'ecommerce.sequential-l1');
+  assert.equal(expected.bindings[0]!.selection, null,
+    'condition-specific specification choices must not be flattened into a shared binding');
+  assert.equal(selected.selection.schemaVersion, 3);
+  assert.deepEqual(selected.selection.features, modularFeatures);
+  assert.deepEqual(selected.selection.specifications, { requested: requestedSpecifications,
+    expected: ['ecommerce.spec.state-durability@1.1.0'], observed: [] });
+  assert(selected.selection.scoredChecks!.length > 0);
+  assert.equal(selected.selection.observedChecks!.length, 0);
+  assert.equal(observed.conditions[0].requested.levels[0].selection.observedChecks!.length, 4);
+  assert.equal(expected.conditions[0].requested.levels[0].task.sha256,
+    observed.conditions[0].requested.levels[0].task.sha256,
+    'changing an undisclosed treatment must not change the task shown to the agent');
+  assert(expected.conditions[0].requested.levels[0].selection.scoredPoints
+    > observed.conditions[0].requested.levels[0].selection.scoredPoints,
+  'expected specifications must contribute to the score');
+  assert.notEqual(expected.conditions[0].requested.levels[0].selection.sha256,
+    observed.conditions[0].requested.levels[0].selection.sha256);
+  assert.notEqual(expected.conditions[0].sha256, observed.conditions[0].sha256);
+});
+
+test('campaigns reject unavailable specification versions and pack-selection mixing', () => {
+  assert.throws(() => compile(modularDefinition({
+    expected: ['ecommerce.spec.external-data-sync@1.0.0'],
+  })), /has no expected specification/);
+  assert.throws(() => compile(definition({ conditions: [{ ...definition().conditions[0]!,
+    specifications: { levels: [{ level: 1, requested: [], expected: [], observed: [] }] },
+  }] })), /pack selection cannot declare modular specifications/);
+});
+
+test('a one-repetition pilot is allowed and reports its exact sample size', () => {
+  const plan = compile(definition({ repetitions: 1 }));
+  assert.equal(plan.summary.repetitions, 1);
+  assert.equal(plan.summary.attempts, 3);
+});
+
+test('campaigns freeze independent stack counts and bounded parallel capacity', () => {
+  const stacks = definition().stacks.map(stack => ({ ...stack,
+    repetitions: stack.id === 'postgres' ? 4 : stack.id === 'mongodb' ? 2 : 3 }));
+  const plan = compile(definition({ stacks, repetitions: 1, parallelism: 6 }));
+  assert.deepEqual(plan.summary.repetitionsByStack,
+    { mongodb: 2, postgres: 4, spacetime: 3 });
+  assert.equal(plan.summary.parallelism, 6);
+  assert.equal(plan.summary.attempts, 9);
+  assert.deepEqual(Object.fromEntries(['mongodb', 'postgres', 'spacetime'].map(stack =>
+    [stack, plan.attempts.filter(attempt => attempt.stack === stack).length])),
+  { mongodb: 2, postgres: 4, spacetime: 3 });
+  assert.notEqual(plan.contentSha256, compile(definition({ stacks, repetitions: 1,
+    parallelism: 5 })).contentSha256);
+  assert.throws(() => validateCampaignDefinition(definition({ parallelism: 22 })), /parallelism/);
+});
+
+test('campaign validation rejects ambiguity, silent fallback, and incomplete analysis policy', () => {
+  assert.throws(() => validateCampaignDefinition({ ...definition(), surprise: true }), /surprise.*unknown/);
+  assert.throws(() => validateCampaignDefinition({ ...definition(), pricing: {
+    ...definition().pricing, unit: 'USD-per-token',
+  } }), /pricing\.unit/);
+  assert.throws(() => validateCampaignDefinition({ ...definition(), pricing: {
+    ...definition().pricing, models: { deterministic: {
+      inputPerMillion: 0, output: 0, cacheWrite5m: 0, cacheWrite1h: 0, cacheRead: 0,
+    } },
+  } }), /inputPerMillion.*unknown/);
+  assert.throws(() => validateCampaignDefinition({ ...definition(), mode: undefined }), /mode must be an object/);
+  assert.throws(() => validateCampaignDefinition({ ...definition(), mode: {
+    id: 'unknown', version: '1.0.0',
+  } }), /unknown unknown@1\.0\.0/);
+  assert.throws(() => validateCampaignDefinition({ ...definition(), mode: {
+    id: 'dependency', version: '4.3.0',
+  } }), /featureCatalog.*required/);
+  assert.throws(() => validateCampaignDefinition({ ...definition(), mode: {
+    id: 'sequential', version: '1.0.0', graph: 'not-allowed',
+  } }), /graph is unknown for sequential mode/);
+  assert.throws(() => validateCampaignDefinition(definition({ levels: [1, 3] })), /ascending and contiguous/);
+  assert.throws(() => validateCampaignDefinition(definition({ stacks: [
+    { id: 'postgres', adapterVersion: '1.5.0' }, { id: 'postgres', adapterVersion: '1.5.0' },
+  ] })), /duplicates|name each stack once/);
+  assert.throws(() => validateCampaignDefinition(definition({ attemptPolicy: {
+    retries: 1, retryOn: [], excludeFromAnalysis: [],
+  } })), /retryOn/);
+  const providerRetry = validateCampaignDefinition(definition({ attemptPolicy: {
+    retries: 1, retryOn: ['provider_failure'], excludeFromAnalysis: ['provider_failure'],
+  } }));
+  assert.deepEqual(providerRetry.attemptPolicy.retryOn, ['provider_failure']);
+  assert.throws(() => compile(definition({ selection: { packs: [], checks: ['missing.check'] } })),
+    /recipe has no check/);
+  assert.throws(() => compile(definition({ conditions: [{
+    id: 'bad', version: '1.0.0', guidanceProfile: 'missing@1.0.0',
+    repairPolicy: 'scored-only@1.1.0',
+  }] })), /missing@1.0.0|catalog/);
+  assert.throws(() => validateCampaignDefinition(definition({ runtime: {
+    releaseManifestSha256: null, controllerImage: 'stack-bench:latest', buildImage: null,
+    platform: 'linux/amd64',
+  } })), /exact image digest/);
+});
+
+test('frozen campaigns require exact runtime images', () => {
+  assert.throws(() => compile(definition({ state: 'frozen' })), /maxCostUsdPerAttempt.*required/);
+  const runtime = { releaseManifestSha256: 'a'.repeat(64),
+    controllerImage: `registry.example/stack-bench-controller@sha256:${'b'.repeat(64)}`,
+    buildImage: `registry.example/stack-bench-build@sha256:${'c'.repeat(64)}`,
+    platform: 'linux/amd64' };
+  const claudeAgent = [{ adapter: 'claude-code', adapterVersion: '1.17.2',
+    model: 'claude-sonnet-5' }];
+  const claudePricing = { currency: 'USD', unit: 'USD-per-million-tokens',
+    capturedAt: '2026-08-12T00:00:00.000Z',
+    source: 'test snapshot', models: { 'claude-sonnet-5': {
+      input: 1, output: 1, cacheWrite5m: 1, cacheWrite1h: 1, cacheRead: 1,
+    } } };
+  const frozen = validateCampaignDefinition(definition({ state: 'frozen', levels: [1], runtime,
+    agents: claudeAgent, pricing: claudePricing,
+    budgets: { attemptTimeoutMinutes: 240, maxCostUsdPerAttempt: 25 } }));
+  assert.equal(frozen.state, 'frozen');
+  const internal = validateCampaignDefinition(definition({ state: 'frozen', levels: [1], runtime: {
+    ...runtime, releaseManifestSha256: null,
+  }, agents: claudeAgent, pricing: claudePricing,
+  budgets: { attemptTimeoutMinutes: 240, maxCostUsdPerAttempt: 25 } }));
+  assert.equal(internal.runtime.releaseManifestSha256, null);
+});
+
+test('frozen campaigns accept a resolved qualification result for every selected level', () => {
+  const runtime = { releaseManifestSha256: 'a'.repeat(64),
+    controllerImage: `registry.example/stack-bench-controller@sha256:${'b'.repeat(64)}`,
+    buildImage: `registry.example/stack-bench-build@${QUALIFIED_BUILD_IMAGE}`,
+    platform: 'linux/amd64' };
+  const claudeAgent = [{ adapter: 'claude-code', adapterVersion: '1.17.2',
+    model: 'claude-sonnet-5' }];
+  const claudePricing = { currency: 'USD', unit: 'USD-per-million-tokens',
+    capturedAt: '2026-08-12T00:00:00.000Z',
+    source: 'test snapshot', models: { 'claude-sonnet-5': {
+      input: 1, output: 1, cacheWrite5m: 1, cacheWrite1h: 1, cacheRead: 1,
+    } } };
+  const l1l2 = multiLevelDefinition([1, 2]);
+  Object.assign(l1l2, { state: 'frozen', runtime,
+    agents: claudeAgent, pricing: claudePricing,
+    budgets: { attemptTimeoutMinutes: 240, maxCostUsdPerAttempt: 25 } });
+  const compiled = compile(l1l2, qualifiedCompilerOptions);
+  assert.equal(compiled.state, 'frozen');
+  assert.deepEqual(compiled.bindings.map(binding => binding.level), [1, 2]);
+});
+
+test('frozen campaigns record a build image that has not been qualified', () => {
+  const runtime = { releaseManifestSha256: 'a'.repeat(64),
+    controllerImage: `registry.example/stack-bench-controller@sha256:${'b'.repeat(64)}`,
+    buildImage: `registry.example/stack-bench-build@sha256:${'c'.repeat(64)}`,
+    platform: 'linux/amd64' };
+  const frozen = definition({ state: 'frozen', levels: [1], runtime,
+    budgets: { attemptTimeoutMinutes: 240, maxCostUsdPerAttempt: 25 } });
+  const compiled = compile(frozen, qualifiedCompilerOptions);
+  const grading = campaignGradingQualification(compiled, qualifiedCompilerOptions);
+  assert.equal(grading.levels[0]!.status, 'pending');
+  assert(grading.levels[0]!.reasons
+    .includes('build image does not match qualification evidence'));
+});
+
+test('campaign identity ignores grading qualification state', () => {
+  const value = modularDefinition();
+  value.runtime.buildImage = `registry.example/stack-bench-build@${QUALIFIED_BUILD_IMAGE}`;
+  const pendingCalibration: CalibrationResolver = (release, options) => {
+    const calibration = resolvedQualification(release, options);
+    assert(calibration);
+    return { ...calibration, state: 'draft', contentSha256: 'e'.repeat(64),
+      qualification: { ...calibration.qualification,
+        stacks: calibration.qualification.stacks.map(stack => ({ ...stack, status: 'candidate' })) } };
+  };
+  const candidateRecipe: RecipeResolver = (track, level, reference) => {
+    const binding = resolveRecipeRelease(track, level, reference);
+    return binding ? { ...binding, status: 'candidate',
+      release: { ...binding.release, state: 'draft' } } : null;
+  };
+  const pendingOptions = { calibrationResolver: pendingCalibration, recipeResolver: candidateRecipe };
+  const pending = compile(value, pendingOptions);
+  const qualified = compile(value, qualifiedCompilerOptions);
+
+  assert.equal(pending.contentSha256, qualified.contentSha256);
+  assert.deepEqual(pending.bindings, qualified.bindings);
+  assert.deepEqual(pending.conditions, qualified.conditions);
+  assert.equal(campaignGradingQualification(pending, pendingOptions).status, 'pending');
+  assert.equal(campaignGradingQualification(qualified, qualifiedCompilerOptions).status, 'qualified');
+  assert.deepEqual(validateCompiledCampaignPlan(pending, qualifiedCompilerOptions), pending);
+
+  const changedScope: CalibrationResolver = (release, options) => {
+    const calibration = resolvedQualification(release, options);
+    assert(calibration);
+    return { ...calibration, qualificationSha256: 'f'.repeat(64) };
+  };
+  assert.throws(() => validateCompiledCampaignPlan(pending, {
+    calibrationResolver: changedScope, recipeResolver: qualifiedCompilerOptions.recipeResolver,
+  }), /bindings.*current resolved inputs/);
+  const unavailable = campaignGradingQualification(pending, {
+    calibrationResolver: () => null, recipeResolver: candidateRecipe,
+  });
+  assert.equal(unavailable.status, 'pending');
+  assert.match(unavailable.levels[0]!.reasons[0]!, /qualification unavailable/);
+});
+
+test('frozen dependency campaigns record incomplete calibration coverage', () => {
+  const value = dependencyDefinition();
+  value.state = 'frozen';
+  value.budgets.maxCostUsdPerAttempt = 25;
+  value.runtime = {
+    releaseManifestSha256: 'a'.repeat(64),
+    controllerImage: `registry.example/stack-bench-controller@sha256:${'b'.repeat(64)}`,
+    buildImage: `registry.example/stack-bench-build@${QUALIFIED_BUILD_IMAGE}`,
+    platform: 'linux/amd64',
+  };
+  const calibrationResolver: CalibrationResolver = (release, options) => {
+    const calibration = resolvedQualification(release, options);
+    assert(calibration);
+    calibration.qualification.checks = [];
+    return calibration;
+  };
+  const incomplete = compile(value, { calibrationResolver,
+    recipeResolver: promotedRecipe });
+  const incompleteGrading = campaignGradingQualification(incomplete, { calibrationResolver,
+    recipeResolver: promotedRecipe });
+  assert.equal(incompleteGrading.levels[0]!.status, 'pending');
+  assert(incompleteGrading.levels[0]!.reasons
+    .includes('calibration does not cover 1 selected checks'));
+
+  const coveredResolver: CalibrationResolver = (release, options) => {
+    const calibration = resolvedQualification(release, options);
+    assert(calibration);
+    calibration.qualification.checks = ['ecommerce.feature.accounts.accounts.1a'];
+    return calibration;
+  };
+  const covered = compile(value, { calibrationResolver: coveredResolver,
+    recipeResolver: promotedRecipe });
+  assert.equal(covered.state, 'frozen');
+  assert.equal(campaignGradingQualification(covered, { calibrationResolver: coveredResolver,
+    recipeResolver: promotedRecipe }).levels[0]!.status, 'qualified');
+});
+
+test('frozen manifest validation does not hard-code an agent provider', () => {
+  const runtime = { releaseManifestSha256: 'a'.repeat(64),
+    controllerImage: `registry.example/stack-bench-controller@sha256:${'b'.repeat(64)}`,
+    buildImage: `registry.example/stack-bench-build@${QUALIFIED_BUILD_IMAGE}`,
+    platform: 'linux/amd64' };
+  const validated = validateCampaignDefinition(definition({ state: 'frozen', levels: [1], runtime,
+    budgets: { attemptTimeoutMinutes: 240, maxCostUsdPerAttempt: 25 } }));
+  assert.equal(validated.agents[0]!.adapter, 'deterministic');
+  assert.equal(compile(validated, qualifiedCompilerOptions).agents[0]!.adapter, 'deterministic');
+});
+
+test('the packaged model-free campaign example compiles without starting work', () => {
+  const plan = compileCampaignFile(join(APPLIANCE_ROOT, 'campaign.example.json'));
+  assert.equal(plan.state, 'draft');
+  assert.deepEqual(plan.summary, { agents: 1, attempts: 9, conditions: 1,
+    parallelism: 1, repetitions: 3,
+    repetitionsByStack: { mongodb: 3, postgres: 3, spacetime: 3 }, stacks: 3 });
+});
+
+test('a campaign does not compile while a selected stack cannot measure a selected check', () => {
+  const example = JSON.parse(readFileSync(join(APPLIANCE_ROOT, 'campaign.example.json'), 'utf8')) as {
+    conditions: Array<{ specifications: unknown }>;
+  };
+  // The stub provides no database writes, and the example's concurrency
+  // specification seeds stock directly.
+  assert.throws(() => compile({ ...example,
+    stacks: [{ id: 'stub', adapterVersion: '1.1.0' }],
+    conditions: [{ id: 'model-free', version: '1.0.0', guidanceProfile: 'model-free-stub@1.1.0',
+      repairPolicy: 'scored-only@1.1.0', specifications: example.conditions[0]!.specifications }],
+  }), /invalid campaign at stacks: L1 selects checks a stack cannot measure: stub cannot measure ecommerce\.spec\.concurrency-safety\.last-unit\.201a: dbSetStock needs the database-write capability, which stub does not provide/);
+});
+
+test('the packaged modular reference gate scores quality specifications without prompting them', () => {
+  const plan = compileCampaignFile(join(APPLIANCE_ROOT,
+    'campaign.product-brief-reference.json'));
+  assert.equal(plan.state, 'draft');
+  assert.deepEqual(plan.summary, { agents: 1, attempts: 6, conditions: 1,
+    parallelism: 1, repetitions: 2,
+    repetitionsByStack: { mongodb: 2, postgres: 2, spacetime: 2 }, stacks: 3 });
+  assert.equal(plan.agents[0]!.adapter, 'reference-fixture');
+  const expected = plan.conditions.find(condition => condition.id === 'product-brief-quality');
+  assert(expected);
+  assert.deepEqual(expected.requested.levels[0].selection.specifications,
+    { requested: [], expected: [
+      'ecommerce.spec.access-control@1.2.0',
+      'ecommerce.spec.concurrency-safety@1.3.0',
+      'ecommerce.spec.external-data-sync@1.1.0',
+      'ecommerce.spec.live-state@1.2.0',
+      'ecommerce.spec.state-durability@1.1.0',
+      'ecommerce.spec.transactional-integrity@1.3.0',
+    ], observed: [] });
+  assert.equal(expected.requested.levels[0].selection.observedChecks!.length, 0);
+  assert.equal(expected.requested.levels[0].selection.scoredPoints, 58);
+  assert(expected.requested.levels[0].selection.scoredChecks!
+    .some(check => check.treatment === 'expected'));
+});
+
+test('compiled campaign validation rejects a rewritten identity, schedule, or summary', () => {
+  const plan = compile(definition());
+  assert.deepEqual(validateCompiledCampaignPlan(plan), plan);
+  assert.throws(() => validateCompiledCampaignPlan({ ...plan, contentSha256: 'a'.repeat(64) }),
+    /content identity/);
+  const schedule = structuredClone(plan);
+  schedule.attempts[0].stack = schedule.attempts[0].stack === 'postgres' ? 'mongodb' : 'postgres';
+  assert.throws(() => validateCompiledCampaignPlan(schedule), /attempt schedule/);
+  const resolved = structuredClone(plan);
+  resolved.bindings[0]!.recipe.contentSha256 = 'b'.repeat(64);
+  assert.throws(() => validateCompiledCampaignPlan(resolved), /bindings.*current resolved inputs/);
+  assert.throws(() => validateCompiledCampaignPlan({ ...plan,
+    summary: { ...plan.summary, attempts: 99 } }), /summary/);
+  const malformed = structuredClone(plan) as unknown as { bindings: unknown[] };
+  malformed.bindings[0] = { level: 1 };
+  assert.throws(() => validateCompiledCampaignPlan(malformed,
+    { requireCurrentInputs: false }), /bindings\[0\]/);
+});
+
+test('frozen plans remain inspectable after an engine upgrade but cannot execute there', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-history-'));
+  try {
+    const path = join(root, 'campaign.json');
+    writeFileSync(path, `${JSON.stringify(definition(), null, 2)}\n`);
+    const frozen = structuredClone(compileCampaignFile(path));
+    frozen.identities.engine.sha256 = 'f'.repeat(64);
+    frozen.contentSha256 = sha256(canonicalDefinitionJson({
+      campaignSchemaVersion: frozen.campaignSchemaVersion,
+      definition: frozen.definition,
+      engine: frozen.identities.engine,
+      bindings: frozen.bindings,
+      stacks: frozen.stacks,
+      agents: frozen.agents,
+      conditions: frozen.conditions,
+    }));
+    assert.throws(() => validateCompiledCampaignPlan(frozen), /engine identity/);
+    assert.equal(validateCompiledCampaignPlan(frozen,
+      { requireCurrentInputs: false }).contentSha256, frozen.contentSha256);
+    const tampered = structuredClone(frozen);
+    tampered.attempts[0].model = 'rewritten-model';
+    assert.throws(() => validateCompiledCampaignPlan(tampered,
+      { requireCurrentInputs: false }), /attempt schedule/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/campaign-lock.test.ts b/tools/stack-bench/tests/campaign-lock.test.ts
new file mode 100644
index 00000000000..f16285cb568
--- /dev/null
+++ b/tools/stack-bench/tests/campaign-lock.test.ts
@@ -0,0 +1,158 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { acquireCampaignLock, campaignLockIsActive, controllerInstance,
+  ownerAlive, releaseCampaignLock } from '../src/campaigns/campaign-lock.js';
+
+const campaign = { id: 'ecommerce-l1-example', contentSha256: 'a'.repeat(64) };
+
+test('controller identity prefers explicit configuration over container and host identity', () => {
+  let mountRead = false;
+  assert.equal(controllerInstance({ STACK_BENCH_CONTROLLER_INSTANCE: '  controller-explicit  ' }, {
+    readMountInfo: () => { mountRead = true; return 'unused'; },
+    fallbackHostname: () => 'unused-host',
+  }), 'controller-explicit');
+  assert.equal(mountRead, false);
+});
+
+test('controller identity uses the exact Docker container id from its hostname mount', () => {
+  const id = 'ab'.repeat(32);
+  const mountInfo = [
+    '1044 997 0:81 / / rw,relatime - overlay overlay rw',
+    `1051 1044 0:70 /docker/containers/${id}/hostname /etc/hostname rw,relatime - tmpfs tmpfs rw`,
+    '1052 1044 0:70 /docker/containers/not-an-id/hostname /etc/hostname rw - tmpfs tmpfs rw',
+  ].join('\n');
+  assert.equal(controllerInstance({}, {
+    readMountInfo: () => mountInfo,
+    fallbackHostname: () => 'docker-desktop',
+  }), id);
+});
+
+test('controller identity falls back to hostname when container mount identity is unavailable', () => {
+  assert.equal(controllerInstance({}, {
+    readMountInfo: () => { throw Object.assign(new Error('no procfs'), { code: 'ENOENT' }); },
+    fallbackHostname: () => 'host-controller',
+  }), 'host-controller');
+  assert.equal(controllerInstance({}, {
+    readMountInfo: () => '/docker/containers/short-id/hostname /etc/hostname',
+    fallbackHostname: () => 'host-controller',
+  }), 'host-controller');
+});
+
+test('cross-controller liveness fails closed when Docker cannot answer', () => {
+  const container = 'ab'.repeat(32);
+  const record = { ownerInstance: container, ownerPid: 14 };
+  assert.throws(() => ownerAlive(record, 'cd'.repeat(32), {
+    inspect: () => ({ error: new Error('docker unavailable'), status: null }),
+  }), /cannot inspect controller/);
+  assert.throws(() => ownerAlive(record, 'cd'.repeat(32), {
+    inspect: () => ({ status: 1, stdout: '', stderr: 'permission denied' }),
+  }), /cannot determine whether controller/);
+});
+
+test('cross-controller liveness reclaims only a stopped or missing exact container', () => {
+  const container = 'ab'.repeat(32);
+  const record = { ownerInstance: container, ownerPid: 14 };
+  assert.equal(ownerAlive(record, 'cd'.repeat(32), {
+    inspect: () => ({ status: 0, stdout: 'true\n', stderr: '' }),
+  }), true);
+  assert.equal(ownerAlive(record, 'cd'.repeat(32), {
+    inspect: () => ({ status: 0, stdout: 'false\n', stderr: '' }),
+  }), false);
+  assert.equal(ownerAlive(record, 'cd'.repeat(32), {
+    inspect: () => ({ status: 1, stdout: '', stderr: `Error: No such object: ${container}` }),
+  }), false);
+});
+
+test('a campaign lock admits one exact controller and only its token can release it', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-lock-'));
+  try {
+    const lock = acquireCampaignLock(root, campaign, { ownerInstance: 'controller-a',
+      uuid: () => 'owner-token', alive: () => true });
+    assert.throws(() => acquireCampaignLock(root, campaign,
+      { ownerInstance: 'controller-a', alive: () => true }), /already controlled/);
+    assert.throws(() => releaseCampaignLock({ ...lock, token: 'wrong-token' }), /no longer belongs/);
+    assert.equal(releaseCampaignLock(lock), true);
+    assert.equal(releaseCampaignLock(lock), false);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('dead-owner reclamation moves only the exact stale lock and preserves campaign binding', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-lock-stale-'));
+  try {
+    const first = acquireCampaignLock(root, campaign, { ownerPid: 1001,
+      ownerInstance: 'dead-controller', uuid: () => 'first-token', alive: () => false });
+    const second = acquireCampaignLock(root, campaign, { ownerPid: 1002,
+      ownerInstance: 'new-controller',
+      uuid: (() => { let index = 0; return () => `second-token-${++index}`; })(),
+      alive: () => false });
+    const record = JSON.parse(readFileSync(second.path, 'utf8'));
+    assert.equal(record.ownerPid, 1002);
+    assert.equal(record.campaignSha256, campaign.contentSha256);
+    assert.throws(() => releaseCampaignLock(first), /no longer belongs/);
+    assert.equal(releaseCampaignLock(second), true);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('a reused pid in a different dead controller does not keep a stale lock alive', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-lock-container-pid-'));
+  try {
+    const first = acquireCampaignLock(root, campaign, { ownerPid: 14,
+      ownerInstance: 'old-container', uuid: () => 'old-token', alive: () => false });
+    const inspected: Array<{
+      record: { ownerInstance: string; ownerPid: number };
+      current: string;
+    }> = [];
+    const second = acquireCampaignLock(root, campaign, { ownerPid: 14,
+      ownerInstance: 'new-container', uuid: () => 'new-token',
+      alive: (record, current) => { inspected.push({ record, current }); return false; } });
+    assert.equal(inspected[0]?.record.ownerInstance, 'old-container');
+    assert.equal(inspected[0]?.current, 'new-container');
+    assert.equal(second.record.ownerInstance, 'new-container');
+    assert.throws(() => releaseCampaignLock(first), /no longer belongs/);
+    assert.equal(releaseCampaignLock(second), true);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('a live controller in a different container retains its lock', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-lock-live-container-'));
+  try {
+    const first = acquireCampaignLock(root, campaign, { ownerPid: 14,
+      ownerInstance: 'running-container', uuid: () => 'running-token', alive: () => false });
+    assert.throws(() => acquireCampaignLock(root, campaign, { ownerPid: 14,
+      ownerInstance: 'replacement-container', alive: record => record.ownerInstance === 'running-container' }),
+    /already controlled by running-container pid 14/);
+    assert.equal(releaseCampaignLock(first), true);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('campaign lock liveness is read without changing stale ownership evidence', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-lock-status-'));
+  try {
+    assert.equal(campaignLockIsActive(root, campaign, { currentInstance: 'dashboard',
+      alive: () => true }), false);
+    const lock = acquireCampaignLock(root, campaign, { ownerPid: 14,
+      ownerInstance: 'campaign-controller', uuid: () => 'campaign-token', alive: () => false });
+    assert.equal(campaignLockIsActive(root, campaign, { currentInstance: 'dashboard',
+      alive: record => record.ownerInstance === 'campaign-controller' }), true);
+    assert.equal(campaignLockIsActive(root, campaign, { currentInstance: 'dashboard',
+      alive: () => false }), false);
+    assert.throws(() => campaignLockIsActive(root,
+      { ...campaign, contentSha256: 'b'.repeat(64) }, { alive: () => true }), /does not belong/);
+    assert.equal(releaseCampaignLock(lock), true);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('malformed ownership evidence is quarantined rather than guessed or stolen', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-lock-bad-'));
+  try {
+    const path = join(root, '.campaign.lock.json');
+    writeFileSync(path, '{"ownerPid":123}\n');
+    assert.throws(() => acquireCampaignLock(root, campaign, { alive: () => false }),
+      /required|unsupported/);
+    assert.equal(readFileSync(path, 'utf8'), '{"ownerPid":123}\n');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/campaign-mode.test.ts b/tools/stack-bench/tests/campaign-mode.test.ts
new file mode 100644
index 00000000000..dc9a93411f2
--- /dev/null
+++ b/tools/stack-bench/tests/campaign-mode.test.ts
@@ -0,0 +1,48 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { CAMPAIGN_MODE_REGISTRY, createCampaignModeRegistry }
+  from '../src/campaigns/campaign-mode.js';
+
+test('the campaign mode registry requires an exact supported mode', () => {
+  assert.deepEqual(CAMPAIGN_MODE_REGISTRY.validate({
+    id: 'sequential', version: '1.0.0',
+  }), { id: 'sequential', version: '1.0.0' });
+  assert.throws(() => CAMPAIGN_MODE_REGISTRY.validate({
+    id: 'sequential', version: '2.0.0',
+  }), /unknown sequential@2\.0\.0/);
+  assert.throws(() => CAMPAIGN_MODE_REGISTRY.validate({
+    id: 'sequential', version: '1.0.0', extra: true,
+  }), /extra is unknown/);
+  assert.deepEqual(CAMPAIGN_MODE_REGISTRY.validate({
+    id: 'dependency', version: '4.3.0',
+  }), { id: 'dependency', version: '4.3.0', workSelection: 'progressive' });
+  assert.equal(CAMPAIGN_MODE_REGISTRY.validate({
+    id: 'dependency', version: '4.3.0', workSelection: 'feature',
+  }).workSelection, 'feature');
+  assert.equal(CAMPAIGN_MODE_REGISTRY.validate({
+    id: 'dependency', version: '4.3.0', workSelection: 'all-at-once',
+  }).workSelection, 'all-at-once');
+  assert.throws(() => CAMPAIGN_MODE_REGISTRY.validate({
+    id: 'dependency', version: '3.2.0',
+  }), /unknown dependency@3\.2\.0/);
+  assert.throws(() => CAMPAIGN_MODE_REGISTRY.validate({
+    id: 'dependency', version: '4.3.0', repairSelection: 'feature',
+  }), /repairSelection is unknown/);
+});
+
+test('new modes can be registered without changing campaign validation', () => {
+  const registry = createCampaignModeRegistry([{
+    id: 'example',
+    version: '1.0.0',
+    validate(value) {
+      if (typeof value.definition !== 'string' || !value.definition) {
+        throw new Error('example mode requires definition');
+      }
+      return value;
+    },
+  }]);
+  assert.deepEqual(registry.validate({
+    id: 'example', version: '1.0.0', definition: 'example@1.0.0',
+  }), { id: 'example', version: '1.0.0', definition: 'example@1.0.0' });
+});
diff --git a/tools/stack-bench/tests/campaign-progression-grant.test.ts b/tools/stack-bench/tests/campaign-progression-grant.test.ts
new file mode 100644
index 00000000000..a3805f3f329
--- /dev/null
+++ b/tools/stack-bench/tests/campaign-progression-grant.test.ts
@@ -0,0 +1,164 @@
+import assert from 'node:assert/strict';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { grantCampaignDependencyRepairs, prepareGrantWorkspace }
+  from '../src/campaigns/campaign-progression-grant.js';
+import { compileDependencyPolicyInput, compileFeatureCatalogInput }
+  from '../src/progression/progression-definition.js';
+
+interface TestContinuation {
+  grantId: string;
+  level: number;
+  nodeIds: string[];
+  repairs: number;
+  stateSha256: string;
+  resumeFrom: string;
+  scheduledAt: string;
+}
+
+function campaignFixture({ marker = null, campaignStatus = 'completed' }:
+  { marker?: TestContinuation | null; campaignStatus?: string } = {}) {
+  const featureCatalog = compileFeatureCatalogInput({
+    schemaVersion: 1,
+    kind: 'feature-catalog',
+    id: 'test.catalog',
+    version: '1.0.0',
+    state: 'draft',
+    title: 'Test catalog',
+    nodes: [{ id: 'accounts', title: 'Accounts', questline: 'identity',
+      featureRefs: ['feature.accounts@1.0.0'], promptModules: [],
+      gradingChecks: [{ id: 'accounts.create', points: 1, role: 'feature' }], dependencies: [] }],
+    questlines: [{ id: 'identity', title: 'Identity', nodes: ['accounts'] }],
+  });
+  const dependencyPolicy = compileDependencyPolicyInput({
+    selection: 'feature', budget: { perFeature: 1 },
+  }, featureCatalog);
+  const attemptPlan = {
+    id: 'campaign-r1-c1-a1-postgres', mode: { id: 'dependency', version: '4.3.0' },
+    stack: 'postgres', agentAdapter: 'claude-code', model: 'test-model',
+    condition: { sha256: 'c'.repeat(64) },
+  };
+  const execution = {
+    id: `${attemptPlan.id}-execution1`, status: 'completed',
+    output: `attempts/${attemptPlan.id}/execution-1`,
+    ...(marker === null ? {} : { continuation: marker }),
+  };
+  const plan = {
+    id: 'campaign', version: '1.0.0', contentSha256: 'a'.repeat(64),
+    definition: { mode: { id: 'dependency', version: '4.3.0' }, track: 'ecommerce' },
+    featureCatalog, dependencyPolicy,
+  };
+  const state = { status: campaignStatus, attempts: [{ plan: attemptPlan,
+    status: marker === null ? 'completed' : 'pending', executions: [execution] }] };
+  return { plan, state, paths: { state: 'campaign-state.json' } };
+}
+
+const input = {
+  attemptId: 'campaign-r1-c1-a1-postgres',
+  grantId: 'operator-grant-1',
+  level: 1,
+  nodeIds: ['accounts'],
+  repairs: 2,
+};
+
+test('a grant workspace copies only resumable evidence without changing its source', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-grant-'));
+  try {
+    const execution = join(root, 'attempts', input.attemptId, 'execution-1');
+    mkdirSync(join(execution, 'source'), { recursive: true });
+    mkdirSync(join(execution, 'progression', 'attempt-001'), { recursive: true });
+    writeFileSync(join(execution, 'run.json'), '{"status":"complete"}\n');
+    writeFileSync(join(execution, 'progression-state.json'), '{}\n');
+    writeFileSync(join(execution, 'source', 'app.js'), 'export const value = 1;\n');
+    writeFileSync(join(execution, 'progression', 'attempt-001', 'bundle.json'), '{}\n');
+    writeFileSync(join(execution, 'process.stdout.log'), 'not resumable\n');
+    const prepared = prepareGrantWorkspace(root, execution, input.attemptId, input.grantId);
+    assert.equal(prepared.relativePath,
+      `continuations/${input.attemptId}/${input.grantId}`);
+    writeFileSync(join(prepared.directory, 'source', 'app.js'), 'export const value = 2;\n');
+    assert.equal(readFileSync(join(execution, 'source', 'app.js'), 'utf8'),
+      'export const value = 1;\n');
+    assert.equal(existsSync(join(prepared.directory, 'process.stdout.log')), false);
+    assert.equal(prepareGrantWorkspace(root, execution, input.attemptId, input.grantId).created,
+      false);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('campaign repair grant derives exact state, owner, and continuation marker', () => {
+  const campaign = campaignFixture();
+  const calls: {
+    inspect: number;
+    released: boolean;
+    written: { path: string; plan: unknown; state: unknown } | null;
+  } = { inspect: 0, released: false, written: null };
+  const result = grantCampaignDependencyRepairs('campaign-output', input, {
+    inspect: () => { calls.inspect += 1; return structuredClone(campaign); },
+    acquire: (_root, plan) => { assert.equal(plan.contentSha256, 'a'.repeat(64)); return 'lock'; },
+    release: lock => { assert.equal(lock, 'lock'); calls.released = true; },
+    prepareWorkspace: () => ({
+      directory: 'campaign-output/continuations/campaign-r1-c1-a1-postgres/operator-grant-1',
+      relativePath: 'continuations/campaign-r1-c1-a1-postgres/operator-grant-1',
+      created: true,
+    }),
+    readState: (path, options) => {
+      assert.match(path, /operator-grant-1[\\/]progression-state\.json$/);
+      assert.equal(options.owner.attempt.id, input.attemptId);
+      assert.equal(options.owner.attempt.conditionSha256, 'c'.repeat(64));
+      assert.equal(options.requireCurrentEngine, true);
+      return { stateSha256: 'b'.repeat(64), state: { phase: 'terminal', grants: [] } };
+    },
+    grantState: (_path, options) => {
+      assert.deepEqual(options.grant, {
+        grantId: input.grantId, level: 1, nodeIds: ['accounts'], repairs: 2,
+      });
+      assert.equal(options.expectedStateSha256, 'b'.repeat(64));
+      return { stateSha256: 'd'.repeat(64) };
+    },
+    schedule: (state, attemptId, marker, options) => {
+      assert.equal(state.status, 'completed');
+      assert.equal(attemptId, input.attemptId);
+      assert.deepEqual(marker, { grantId: input.grantId, level: 1,
+        nodeIds: ['accounts'], repairs: 2, stateSha256: 'd'.repeat(64),
+        resumeFrom: 'continuations/campaign-r1-c1-a1-postgres/operator-grant-1' });
+      assert.equal(options.now, '2026-08-28T12:00:00.000Z');
+      return { status: 'prepared' };
+    },
+    writeState: (path, plan, state) => { calls.written = { path, plan, state }; },
+    now: '2026-08-28T12:00:00.000Z',
+  });
+  assert.equal(calls.inspect, 2);
+  assert.equal(calls.released, true);
+  assert.ok(calls.written);
+  assert.equal(calls.written.path, 'campaign-state.json');
+  assert.equal(result.stateSha256, 'd'.repeat(64));
+  assert.equal(result.scheduled, true);
+});
+
+test('campaign repair grant is idempotent only for the exact recorded marker', () => {
+  const marker = { grantId: input.grantId, level: 1, nodeIds: ['accounts'], repairs: 2,
+    stateSha256: 'd'.repeat(64),
+    resumeFrom: 'continuations/campaign-r1-c1-a1-postgres/operator-grant-1',
+    scheduledAt: '2026-08-28T12:00:00.000Z' };
+  const campaign = campaignFixture({ marker, campaignStatus: 'prepared' });
+  let touched = false;
+  const result = grantCampaignDependencyRepairs('campaign-output', input, {
+    inspect: () => structuredClone(campaign),
+    acquire: () => 'lock', release: () => {},
+    readState: () => ({ stateSha256: marker.stateSha256,
+      state: { grants: [{ grantId: input.grantId, level: 1,
+        nodeIds: ['accounts'], repairs: 2 }] } }),
+    grantState: () => { touched = true; return { stateSha256: 'e'.repeat(64) }; },
+    schedule: () => { touched = true; }, writeState: () => { touched = true; },
+  });
+  assert.equal(result.stateSha256, marker.stateSha256);
+  assert.equal(touched, false);
+  assert.throws(() => grantCampaignDependencyRepairs('campaign-output', {
+    ...input, repairs: 3,
+  }, { inspect: () => structuredClone(campaign), acquire: () => 'lock', release: () => {} }),
+  /different continuation/);
+});
diff --git a/tools/stack-bench/tests/campaign-report.contract.ts b/tools/stack-bench/tests/campaign-report.contract.ts
new file mode 100644
index 00000000000..d94f65728f1
--- /dev/null
+++ b/tools/stack-bench/tests/campaign-report.contract.ts
@@ -0,0 +1,471 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { emptyArtifactIdentities, readArtifact, writeArtifact,
+  writeRunJson } from '../src/evidence/artifacts.js';
+import { compileCampaignFile } from '../src/campaigns/campaign-compiler.js';
+import type { CampaignAttemptPlan, CompiledCampaignPlan }
+  from '../src/campaigns/campaign-compiler.js';
+import { buildCampaignReport, generateCampaignReport,
+  campaignRunMetrics, campaignRunFirstBuildObservations, formatDurationMs, renderCampaignHtml,
+  validateCampaignReport } from '../src/campaigns/campaign-report.js';
+import type { BenchmarkRun, RunSelection } from '../src/campaigns/campaign-report.js';
+import { canonicalDefinitionJson } from '../src/composition/definition-plan.js';
+import { createCheckEvidence } from '../src/evidence/check-evidence.js';
+import { hashDirectory, sha256 } from '../src/evidence/provenance.js';
+import { runCampaignAdmission } from '../src/campaigns/campaign-admission.js';
+import { claimNextAttempt, createCampaignState, finishCampaignExecution,
+  initializeCampaignDirectory, writeCampaignState } from '../src/campaigns/campaign-scheduler.js';
+
+const projectRoot = STACK_BENCH_ROOT;
+const example = join(projectRoot, 'appliance', 'campaign.example.json');
+const created = '2026-08-12T00:00:00.000Z';
+const compiledExample = compileCampaignFile(example);
+const examplePlan = (): CompiledCampaignPlan => structuredClone(compiledExample);
+
+function run(id: string, attempt: { id: string; condition?: CampaignAttemptPlan['condition'] },
+  { score = 8, max = 10, first = 5, cost = 2, durationSec = 30 }:
+  { score?: number; max?: number; first?: number; cost?: number; durationSec?: number } = {},
+): BenchmarkRun {
+  const passed = score === max;
+  const repairs = passed ? (score === first ? 0 : 1) : 3;
+  const status = passed ? (repairs ? 'corrected' : 'not-needed') : 'budget-exhausted';
+  const outcome = { kind: passed ? 'passed' : 'app_failure' };
+  // A valid run artifact carries the exact planned selection for each level.
+  const selection = structuredClone(attempt.condition?.requested?.levels
+    ?.find(item => item.level === 1)?.selection ?? null) as RunSelection | null;
+  return { id, parentAttemptId: attempt.id, outcome,
+    levels: [{ level: 1, ...(selection ? { selection } : {}),
+      firstBuild: { score: first, max, outcome }, score, max,
+      repairCostUsd: repairs ? cost / 2 : 0, repairs,
+      repair: { status, limit: 3, used: repairs, stopReason: null }, outcome }],
+    totals: { score, max, costUsd: cost, costComplete: true, durationSec, repairs } };
+}
+
+function writeFakePackageEvidence(output: string, level: NonNullable<BenchmarkRun['levels']>[number]): void {
+  const source = join(output, 'source');
+  mkdirSync(source, { recursive: true });
+  writeFileSync(join(source, 'app.js'), 'export const ready = true;\n');
+  const sourceHash = hashDirectory(source).sha256;
+  const checks = level.selection?.scoredChecks ?? [];
+  const checkKeys = checks.map(check => check.stableKey);
+  writeArtifact(join(output, 'grading', 'bundle.json'), {
+    kind: 'grade_bundle', id: `fake-grade-${level.level}`, payload: {
+      observation: 'scored', source: { sha256: sourceHash }, suites: { fake: { features: [{
+        id: 'fake', setupEvidence: createCheckEvidence({ status: 'passed', code: 'completed',
+          phase: 'setup', startedAtMs: 1, completedAtMs: 2 }),
+        criteria: checks.map(check => ({ id: check.stableKey, stableKey: check.stableKey,
+          points: check.points, evidence: createCheckEvidence({ status: 'passed', code: 'completed',
+            phase: 'assertion', startedAtMs: 1, completedAtMs: 2 }) })),
+      }] } },
+      totals: { score: level.score, max: level.max },
+      selection: { sha256: level.selection?.sha256, checks,
+        attemptedChecks: checkKeys, reportedChecks: checkKeys, notRun: [] },
+    },
+  });
+}
+
+test('report read model keeps invalid evidence separate and computes declared dispersion', () => {
+  const plan = examplePlan();
+  let state = createCampaignState(plan, { now: created });
+  const runs = new Map();
+  const admissionId = 'admission-1';
+  let claimed = claimNextAttempt(state, { now: '2026-08-12T00:01:00.000Z', admissionId });
+  assert.ok(claimed.claim);
+  state = finishCampaignExecution(claimed.state, claimed.claim.executionId,
+    { exitCode: 1, run: null, retryAuthority: { transient: true, recoveryClean: true,
+      budgetKnown: true,
+      cause: 'test transient provider failure' } }, { retries: 1, retryOn: ['harness_failure'],
+      now: '2026-08-12T00:02:00.000Z' });
+  claimed = claimNextAttempt(state, { now: '2026-08-12T00:03:00.000Z', admissionId });
+  assert.ok(claimed.claim);
+  runs.set(claimed.claim.executionId, run('run-1', claimed.claim.attempt));
+  state = finishCampaignExecution(claimed.state, claimed.claim.executionId,
+    { exitCode: 0, run: runs.get(claimed.claim.executionId) },
+    { now: '2026-08-12T00:04:00.000Z' });
+  const report = buildCampaignReport(plan, state, (_attempt, execution) => runs.get(execution.id));
+  assert.equal(report.summary.completedAttempts, 1);
+  assert.equal(report.summary.invalidAttempts, 0);
+  assert.equal(report.summary.invalidExecutions, 1);
+  const firstAttempt = report.attempts[0];
+  const plannedAttempt = plan.attempts[0];
+  assert.ok(firstAttempt);
+  assert.ok(plannedAttempt);
+  assert.equal(firstAttempt.executions.length, 2);
+  const condition = report.conditions.find(item => item.stack === plannedAttempt.stack);
+  assert.ok(condition);
+  assert.equal(condition.metrics.firstBuildScoreRate?.center, 0.5);
+  assert.equal(condition.metrics.finalScoreRate?.center, 0.8);
+  assert.equal(condition.metrics.totalCostUsd?.center, 2);
+  assert.equal(condition.sample.invalidExecutionRate, 0.5);
+  assert.deepEqual(report.scope.bindings, plan.bindings);
+  assert.equal(report.scope.grading.status, 'pending');
+  assert.match(report.scope.grading.levels[0]!.evidenceSha256 ?? '', /^[a-f0-9]{64}$/);
+  assert.equal(Object.hasOwn(report.scope.bindings[0]!, 'qualification'), false);
+  assert(report.limitations.some(item => /qualification is pending/.test(item)));
+  assert.deepEqual(report.scope.runtime, plan.definition.runtime);
+  assert.deepEqual(report.scope.pricing, plan.definition.pricing);
+  assert.deepEqual(report.scope.repetitionsByStack, plan.summary.repetitionsByStack);
+  assert.equal(report.scope.parallelism, plan.summary.parallelism);
+  assert.equal(firstAttempt.executions[0]?.admissionEvidence,
+    'admissions/admission-1.json');
+  assert.match(report.contentSha256, /^[a-f0-9]{64}$/);
+  assert.throws(() => validateCampaignReport({ ...report,
+    summary: { ...report.summary, completedAttempts: 99 } }),
+  /summary does not match its attempts/);
+  const inconsistent = structuredClone(report);
+  inconsistent.summary.completedAttempts = 99;
+  const { contentSha256: _oldIdentity, ...inconsistentBody } = inconsistent;
+  assert.throws(() => validateCampaignReport({ ...inconsistentBody,
+    contentSha256: sha256(canonicalDefinitionJson(inconsistentBody)) }),
+  /summary does not match its attempts/);
+  const unknownSummaryField = structuredClone(report) as typeof report & {
+    summary: typeof report.summary & { nonsense: boolean };
+  };
+  unknownSummaryField.summary.nonsense = true;
+  const { contentSha256: _oldUnknownIdentity, ...unknownSummaryBody } = unknownSummaryField;
+  assert.throws(() => validateCampaignReport({ ...unknownSummaryBody,
+    contentSha256: sha256(canonicalDefinitionJson(unknownSummaryBody)) }),
+  /summary\.nonsense is unknown/);
+});
+
+test('correction metrics separate successful cost from unresolved spend', () => {
+  const corrected = campaignRunMetrics({ outcome: { kind: 'passed' },
+    levels: [{ firstBuild: { score: 5, max: 10 }, repairCostUsd: 1.25 }], totals: {} });
+  assert.equal(corrected.correctionSuccessRate, 1);
+  assert.equal(corrected.correctionCostUsd, 1.25);
+  assert.equal(corrected.correctionSpendUsd, 1.25);
+
+  const unresolved = campaignRunMetrics({ outcome: { kind: 'app_failure' },
+    levels: [{ firstBuild: { score: 5, max: 10 }, repairCostUsd: 2 }], totals: {} });
+  assert.equal(unresolved.correctionSuccessRate, 0);
+  assert.equal(unresolved.correctionCostUsd, null);
+  assert.equal(unresolved.correctionSpendUsd, 2);
+
+  const unaided = campaignRunMetrics({ outcome: { kind: 'passed' },
+    levels: [{ firstBuild: { score: 10, max: 10 }, repairCostUsd: 0 }], totals: {} });
+  assert.equal(unaided.correctionSuccessRate, null);
+  assert.equal(unaided.correctionCostUsd, null);
+  assert.equal(unaided.correctionSpendUsd, null);
+});
+
+test('campaign metrics do not treat incomplete cost as comparable evidence', () => {
+  const incomplete = campaignRunMetrics({ outcome: { kind: 'passed' }, levels: [],
+    totals: { costUsd: 4.25, costComplete: false, durationSec: 30 } });
+  assert.equal(incomplete.totalCostUsd, null);
+  assert.equal(incomplete.totalDurationMs, 30_000);
+
+  const zero = campaignRunMetrics({ outcome: { kind: 'passed' }, levels: [],
+    totals: { costUsd: 0, costComplete: true } });
+  assert.equal(zero.totalCostUsd, 0);
+});
+
+test('dependency campaign final score is passed points over all points, with the questline average beside it', () => {
+  const metrics = campaignRunMetrics({
+    progressionStatus: { phase: 'terminal', score: { questlineAveragePercentage: 62.5,
+      uniqueChecks: { gradedPoints: 16, availablePoints: 20, percentage: 70 } } },
+    levels: [{ firstBuild: { score: 4, max: 10 }, score: 10, max: 10 }],
+    totals: { score: 30, max: 30 },
+  });
+  assert.equal(metrics.finalScoreRate, 0.7);
+  assert.equal(metrics.questlineAverageRate, 0.625);
+  assert.equal(metrics.finalCoverageRate, 0.8);
+
+  const active = campaignRunMetrics({
+    progressionStatus: { phase: 'active', score: { questlineAveragePercentage: null,
+      uniqueChecks: { gradedPoints: 16, availablePoints: 20, percentage: null } } },
+    levels: [{ firstBuild: { score: 4, max: 10 }, score: 10, max: 10 }],
+    totals: { score: 30, max: 30 },
+  });
+  assert.equal(active.finalScoreRate, null);
+  assert.equal(active.questlineAverageRate, null);
+  assert.equal(active.finalCoverageRate, null);
+});
+
+test('reported duration excludes provider throttle waits and tokens travel with usage', () => {
+  const metrics = campaignRunMetrics({
+    outcome: { kind: 'passed' },
+    levels: [{ score: 9, max: 9, sessionTotals: { sessions: 2, costUsd: 1, tokens: 2_400_000,
+      outputTokens: 1, turns: 1, durationMs: 60_000, activeDurationMs: 45_000,
+      providerThrottle: { waits: 1, waitedMs: 15_000 }, promptBytes: 0,
+      usage: { input: 0, output: 0, cacheWrite: 0, cacheRead: 0 }, thinking: null } }],
+    totals: { score: 9, max: 9, costUsd: 1, costComplete: true, tokens: 2_400_000,
+      durationSec: 100 },
+  });
+  assert.equal(metrics.totalDurationMs, 85_000);
+  assert.equal(metrics.totalTokens, 2_400_000);
+});
+
+test('score rates keep inconclusive points separate from measurement coverage', () => {
+  const inconclusive = { kind: 'inconclusive', inconclusive: ['contention/203/203b'],
+    harnessFailures: [] };
+  const selection = { checks: [{ executionId: 'contention', featureId: 203,
+    criterionId: '203b', points: 1 }] };
+  const metrics = campaignRunMetrics({ outcome: inconclusive, levels: [{
+    firstBuild: { score: 8, max: 9, outcome: inconclusive },
+    score: 9, max: 9, selection, outcome: inconclusive, repairCostUsd: 1,
+  }], totals: { score: 9, max: 9 } });
+  assert.equal(metrics.firstBuildScoreRate, 0.888889);
+  assert.equal(metrics.finalScoreRate, 1);
+  assert.equal(metrics.firstBuildCoverageRate, 0.9);
+  assert.equal(metrics.finalCoverageRate, 0.9);
+
+  const unmapped = campaignRunMetrics({ outcome: inconclusive, levels: [{
+    firstBuild: { score: 8, max: 9, outcome: inconclusive },
+    score: 9, max: 9, selection: { checks: [] }, outcome: inconclusive,
+  }], totals: { score: 9, max: 9 } });
+  assert.equal(unmapped.firstBuildCoverageRate, null);
+  assert.equal(unmapped.finalCoverageRate, null);
+});
+
+test('observed-only first-build behavior remains separate from scored results and repairs', () => {
+  const evidence = run('probe-run', { id: 'probe-attempt' },
+    { score: 14, max: 14, first: 14, cost: 0 });
+  const evidenceLevel = evidence.levels?.[0];
+  assert.ok(evidenceLevel);
+  evidenceLevel.selection = {
+    specifications: { requested: [], expected: [],
+      observed: ['ecommerce.spec.state-durability@1.0.0'] },
+    observedChecks: [
+      { stableKey: 'durability/session', points: 1 },
+      { stableKey: 'durability/cart', points: 2 },
+    ],
+  };
+  assert.ok(evidenceLevel.firstBuild);
+  evidenceLevel.firstBuild.source = { sha256: 'a'.repeat(64), files: 3 };
+  evidenceLevel.firstBuild.observations = {
+    sourceSha256: 'a'.repeat(64),
+    selectionSha256: 'b'.repeat(64),
+    selectedChecks: ['durability/session', 'durability/cart'],
+    reportedChecks: ['durability/session', 'durability/cart'],
+    passedPoints: 1,
+    observedPoints: 3,
+    scoreContribution: false,
+    repairVisible: false,
+    artifact: 'first-build-l1-observed/bundle.json',
+    outcome: { kind: 'app_failure' },
+  };
+
+  const scored = campaignRunMetrics(evidence);
+  const observed = campaignRunFirstBuildObservations(evidence);
+  assert.ok(observed);
+  assert.equal(scored.firstBuildScoreRate, 1);
+  assert.equal(scored.finalScoreRate, 1);
+  assert.equal(scored.correctionSuccessRate, null);
+  assert.equal(observed.selectedPoints, 3);
+  assert.equal(observed.observedPoints, 3);
+  assert.equal(observed.passedPoints, 1);
+  assert.equal(observed.passRate, 0.333333);
+  assert.equal(observed.coverageRate, 1);
+  assert.equal(observed.scoreContribution, false);
+  assert.equal(observed.repairVisible, false);
+  assert.deepEqual(observed.levels[0]?.specifications,
+    ['ecommerce.spec.state-durability@1.0.0']);
+});
+
+test('campaign HTML labels observed-only behavior as zero-score first-build observations', () => {
+  const plan = examplePlan();
+  let state = createCampaignState(plan, { now: created });
+  const claimed = claimNextAttempt(state, { now: created, admissionId: 'probe-admission' });
+  assert.ok(claimed.claim);
+  const claim = claimed.claim;
+  const evidence = run('probe-run', claim.attempt,
+    { score: 10, max: 10, first: 10, cost: 0 });
+  const evidenceLevel = evidence.levels?.[0];
+  assert.ok(evidenceLevel);
+  evidenceLevel.selection = { specifications: { requested: [], expected: [],
+    observed: ['durability@1'] },
+  observedChecks: [{ stableKey: 'durability/session', points: 1 }] };
+  assert.ok(evidenceLevel.firstBuild);
+  evidenceLevel.firstBuild.observations = { sourceSha256: 'a'.repeat(64),
+    selectionSha256: 'b'.repeat(64), selectedChecks: ['durability/session'],
+    reportedChecks: ['durability/session'], passedPoints: 1, observedPoints: 1,
+    scoreContribution: false, repairVisible: false,
+    artifact: 'first-build-l1-observed/bundle.json', outcome: { kind: 'passed' } };
+  state = finishCampaignExecution(claimed.state, claim.executionId,
+    { exitCode: 0, run: evidence }, { now: '2026-08-12T00:02:00.000Z' });
+  const report = buildCampaignReport(plan, state, () => evidence);
+  const html = renderCampaignHtml(report);
+  const condition = report.conditions.find(item => item.stack === claim.attempt.stack);
+  assert.ok(condition?.firstBuildObservations);
+  assert.equal(condition.firstBuildObservations.sample.selectedAttempts, 1);
+  assert.equal(condition.firstBuildObservations.sample.measuredAttempts, 1);
+  assert.equal(condition.firstBuildObservations.metrics.passRate.center, 1);
+  assert.match(html, /Additional first-build measurements/);
+  assert.match(html, /Provisional scores/);
+  assert.match(html, /add no points to the score/);
+  assert.match(html, /do not enter repair feedback/);
+  assert.match(html, /first-build-l1-observed\/bundle\.json/);
+});
+
+test('campaign HTML states the build and evaluation setup in plain language', () => {
+  const plan = compileCampaignFile(join(projectRoot, 'appliance',
+    'campaign.product-brief-reference.json'));
+  const state = createCampaignState(plan, { now: created });
+  const report = buildCampaignReport(plan, state, () => {
+    throw new Error('a pending campaign must not read run evidence');
+  });
+  const html = renderCampaignHtml(report);
+  assert.match(html, /What this run asks for and tests/);
+  assert.match(html, /The build brief lists what the coding agent is asked to build/);
+  assert.match(html, /Additional measurements are reported separately/);
+  assert.match(html, /product-brief-quality/);
+  assert.match(html, /ecommerce\.spec\.access-control@1\.2\.0/);
+  assert.match(html, /ecommerce\.spec\.transactional-integrity@1\.3\.0/);
+});
+
+test('report generation is byte-for-byte reproducible and links immutable raw evidence', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-report-'));
+  try {
+    const plan = examplePlan();
+    const initialized = initializeCampaignDirectory(plan, root, { now: created });
+    const admission = runCampaignAdmission(plan, root, { codingContainers: () => [],
+      env: {}, now: created, uuid: () => 'report',
+      preflight: request => ({ schemaVersion: 1, generatedAt: created,
+        request: { backends: request.backends, track: request.track, levels: request.levelList,
+          runIndex: request.runIndex, parallelism: request.parallelism,
+          agentAdapter: request.agentAdapter,
+          packs: request.packIds, checks: request.checkKeys, image: request.image,
+          resultsDir: request.resultsDir, smoke: request.smoke },
+        ok: true, summary: { passed: 0, failed: 0, warnings: 0 }, checks: [] }),
+    });
+    const claimed = claimNextAttempt(initialized.state,
+      { now: '2026-08-12T00:01:00.000Z', admissionId: admission.id });
+    assert.ok(claimed.claim);
+    const claim = claimed.claim;
+    const output = join(root, claim.output);
+    mkdirSync(output, { recursive: true });
+    const evidence = run('run-1', claim.attempt,
+      { score: 58, max: 58, first: 58, cost: 2, durationSec: 30 });
+    const timestamp = '2026-08-12T00:01:30.000Z';
+    const agent = plan.agents.find(item => item.adapter === claim.attempt.agentAdapter);
+    const stack = plan.stacks.find(item => item.id === claim.attempt.stack);
+    assert.ok(agent);
+    assert.ok(stack);
+    const level = evidence.levels?.[0];
+    assert.ok(level);
+    writeFakePackageEvidence(output, level);
+    writeRunJson(join(output, 'run.json'), { ...evidence, startedAt: timestamp, completedAt: timestamp,
+      track: plan.definition.track, backend: claim.attempt.stack,
+      model: claim.attempt.model, guidance: claim.attempt.guidance,
+      condition: claim.attempt.condition, mode: claim.attempt.mode, pricing: claim.attempt.pricing,
+      skills: claim.attempt.skills, selectionRequest: plan.definition.selection,
+      runtime: { buildImage: null }, identities: emptyArtifactIdentities({
+        engine: plan.identities.engine, experiment: { id: plan.id, version: plan.version,
+          sha256: plan.contentSha256, state: plan.state },
+        agentAdapter: agent.identity, stackAdapter: stack,
+      }) });
+    const state = finishCampaignExecution(claimed.state, claim.executionId,
+      { exitCode: 0, run: evidence }, { now: '2026-08-12T00:02:00.000Z' });
+    writeCampaignState(initialized.paths.state, plan, state);
+    const first = generateCampaignReport(root);
+    const json = readFileSync(first.reportPath);
+    const html = readFileSync(first.htmlPath);
+    rmSync(join(root, 'report'), { recursive: true });
+    const second = generateCampaignReport(root);
+    assert.deepEqual(readFileSync(second.reportPath), json);
+    assert.deepEqual(readFileSync(second.htmlPath), html);
+    const artifact = readArtifact(second.reportPath, { expectedKind: 'campaign_report' });
+    assert.equal(artifact.payload.contentSha256, first.report.contentSha256);
+    assert.match(readFileSync(second.htmlPath, 'utf8'), /\.\.\/attempts\//);
+    assert.match(readFileSync(second.htmlPath, 'utf8'), /\.\.\/admissions\//);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('HTML escapes caller-controlled labels and reports exact scope', () => {
+  const plan = examplePlan();
+  const state = createCampaignState(plan, { now: created });
+  const report = buildCampaignReport({ ...plan, title: '<script>' }, state, () => {
+    throw new Error('a pending campaign must not read run evidence');
+  });
+  const html = renderCampaignHtml(report);
+  assert.doesNotMatch(html, /<script>/);
+  assert.match(html, /&lt;script&gt;/);
+  assert.match(html, /Study condition/);
+  assert.match(html, /prescribed@1\.1\.0/);
+  const malformedScope = structuredClone(report);
+  (malformedScope.scope as typeof malformedScope.scope & { surprise: boolean }).surprise = true;
+  const { contentSha256: _old, ...body } = malformedScope;
+  assert.throws(() => validateCampaignReport({ ...body, contentSha256: 'a'.repeat(64) }),
+    /scope\.surprise is unknown/);
+  const malformedCondition = structuredClone(report);
+  assert.ok(malformedCondition.conditions[0]);
+  (malformedCondition.conditions[0] as unknown as { condition: null }).condition = null;
+  assert.throws(() => validateCampaignReport(malformedCondition), /conditions\[0\]\.condition is invalid/);
+});
+
+test('human reports format normalized usage and elapsed time for people', () => {
+  assert.equal(formatDurationMs(4_893_000), '1h 21m 33s');
+  assert.equal(formatDurationMs(125_000), '2m 5s');
+  assert.equal(formatDurationMs(9_000), '9s');
+  const plan = examplePlan();
+  let state = createCampaignState(plan, { now: created });
+  const claimed = claimNextAttempt(state, { now: created, admissionId: 'admission-format' });
+  assert.ok(claimed.claim);
+  const evidence = run('run-format', claimed.claim.attempt,
+    { cost: 19.899, durationSec: 4_893 });
+  state = finishCampaignExecution(claimed.state, claimed.claim.executionId,
+    { exitCode: 0, run: evidence }, { now: '2026-08-12T01:21:33.000Z' });
+  const html = renderCampaignHtml(buildCampaignReport(plan, state, () => evidence));
+  assert.match(html, /\$19\.899 API-equivalent usage/);
+  assert.doesNotMatch(html, /normalized usage/);
+  assert.match(html, /1h 21m 33s/);
+  assert.match(html, /First-build score/);
+  assert.match(html, /\(n=1\)/);
+  assert.match(html, /100% coverage/);
+  assert.doesNotMatch(html, />4893s</);
+  assert.match(html, /spread is reported only from three or more/i);
+  assert.match(html, /not an invoice/);
+
+  const costPlan = structuredClone(plan);
+  costPlan.definition.analysis.primaryMetric = 'totalCostUsd';
+  const costHtml = renderCampaignHtml(buildCampaignReport(costPlan, state, () => evidence));
+  assert.match(costHtml, /<th>totalCostUsd<\/th>/);
+  assert.match(costHtml, />\$19\.899 \(n=1\)<br><small>\$19\.899 API-equivalent usage/);
+  assert.doesNotMatch(costHtml, /% coverage/);
+});
+
+test('a spread needs three completed attempts', () => {
+  // Balanced rotation hands every stack and condition its k-th attempt before
+  // any receives its (k+1)-th, so completing two rounds leaves each group at
+  // n=2 and the third round takes each to n=3.
+  const plan = examplePlan();
+  let state = createCampaignState(plan, { now: created });
+  const evidence = new Map<string, ReturnType<typeof run>>();
+  const completions = new Map<string, number>();
+  const groups = plan.stacks.length * plan.conditions.length;
+  const complete = (ordinal: number) => {
+    const claimed = claimNextAttempt(state, { now: created, admissionId: `admission-${ordinal}` });
+    assert.ok(claimed.claim);
+    const { attempt } = claimed.claim;
+    const group = `${attempt.stack} ${attempt.condition.id}`;
+    const cost = (completions.get(group) ?? 0) + 1;
+    completions.set(group, cost);
+    const record = run(`run-spread-${ordinal}`, attempt, { cost });
+    evidence.set(claimed.claim.executionId, record);
+    state = finishCampaignExecution(claimed.state, claimed.claim.executionId,
+      { exitCode: 0, run: record }, { now: created });
+  };
+  const report = () => buildCampaignReport(plan, state, (_attempt, execution) => {
+    const record = evidence.get(execution.id);
+    assert.ok(record, `evidence for ${execution.id}`);
+    return record;
+  });
+
+  for (let ordinal = 0; ordinal < groups * 2; ordinal += 1) complete(ordinal);
+  for (const condition of report().conditions) {
+    assert.equal(condition.metrics.totalCostUsd?.n, 2);
+    assert.equal(condition.metrics.totalCostUsd?.spread, null);
+    assert.deepEqual([condition.metrics.totalCostUsd?.min, condition.metrics.totalCostUsd?.max], [1, 2]);
+  }
+
+  for (let ordinal = groups * 2; ordinal < groups * 3; ordinal += 1) complete(ordinal);
+  for (const condition of report().conditions) {
+    assert.equal(condition.metrics.totalCostUsd?.n, 3);
+    assert.notEqual(condition.metrics.totalCostUsd?.spread, null);
+  }
+});
diff --git a/tools/stack-bench/tests/campaign-runner.contract.ts b/tools/stack-bench/tests/campaign-runner.contract.ts
new file mode 100644
index 00000000000..9ba8c672455
--- /dev/null
+++ b/tools/stack-bench/tests/campaign-runner.contract.ts
@@ -0,0 +1,1185 @@
+import assert from 'node:assert/strict';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, symlinkSync,
+  writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compileCampaignFile } from '../src/campaigns/campaign-compiler.js';
+import type { CampaignAttemptPlan, CompiledCampaignPlan }
+  from '../src/campaigns/campaign-compiler.js';
+import { emptyArtifactIdentities, readArtifact,
+  writeArtifact, writeRunJson } from '../src/evidence/artifacts.js';
+import { runCampaignAdmission } from '../src/campaigns/campaign-admission.js';
+import { campaignChildPath } from '../src/campaigns/campaign-path.js';
+import { attemptArgv, campaignRetryAuthority,
+  executeCampaign, reconcileCampaign,
+  processFailureDetail, remainingAttemptCostBudget } from '../src/campaigns/campaign-runner.js';
+import { expectedDependencyRunOutcomeKind, validateCampaignRun }
+  from '../src/campaigns/campaign-run-validation.js';
+import { createCheckEvidence } from '../src/evidence/check-evidence.js';
+import { hashDirectory } from '../src/evidence/provenance.js';
+import { compileProgressionInput, dependencyRuntimeDefinition }
+  from '../src/progression/progression-definition.js';
+import { progressionEngine } from '../src/progression/progression-engine.js';
+import { liveProgressionStatus } from '../src/progression/live-progression.js';
+import { writeProgressionState } from '../src/progression/progression-state.js';
+import { claimNextAttempt, initializeCampaignDirectory,
+  writeCampaignState } from '../src/campaigns/campaign-scheduler.js';
+
+type UnknownRecord = Record<string, unknown>;
+interface MutableSelection extends UnknownRecord {
+  sha256: string;
+  scoredPoints: number;
+  specifications?: { requested: string[]; expected: string[]; observed: string[] };
+  scoredChecks?: Array<UnknownRecord & { stableKey: string; points: number }>;
+  observedChecks?: Array<UnknownRecord & { stableKey: string; points: number }>;
+}
+
+test('campaign paths reject escapes and existing symbolic-link segments', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-path-'));
+  const outside = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-path-outside-'));
+  try {
+    assert.equal(campaignChildPath(root, join('attempts', 'one'), 'attempt output'),
+      join(root, 'attempts', 'one'));
+    assert.throws(() => campaignChildPath(root, '..', 'attempt output'),
+      /not a child of the campaign directory/);
+    symlinkSync(outside, join(root, 'linked'), 'junction');
+    assert.throws(() => campaignChildPath(root, join('linked', 'one'), 'attempt output'),
+      /contains a symbolic link/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+    rmSync(outside, { recursive: true, force: true });
+  }
+});
+type CampaignExecute = NonNullable<NonNullable<Parameters<typeof executeCampaign>[2]>['execute']>;
+type ExecuteCall = {
+  command: Parameters<CampaignExecute>[0];
+  argv: Parameters<CampaignExecute>[1];
+  options: Parameters<CampaignExecute>[2];
+};
+type AdmissionOptions = NonNullable<Parameters<typeof runCampaignAdmission>[2]>;
+type PreflightRequest = Parameters<NonNullable<AdmissionOptions['preflight']>>[0];
+interface MutableOutcome extends UnknownRecord {
+  kind: string;
+  phase?: string;
+  reason?: string | null;
+  appFailures?: string[];
+  inconclusive?: unknown[];
+  harnessFailures?: unknown[];
+}
+interface MutableLevel extends UnknownRecord {
+  level: number;
+  selection?: MutableSelection;
+  score?: number | null;
+  max?: number | null;
+  repairs?: number;
+  graded?: boolean;
+  error?: string;
+  contractPass?: boolean | null;
+  regression?: { score: number; max: number } | null;
+  firstBuild?: UnknownRecord & { score?: number; max?: number; outcome?: MutableOutcome;
+    observations?: UnknownRecord & { sourceSha256: string; selectionSha256: string;
+      selectedChecks: string[]; reportedChecks: string[]; passedPoints: number;
+      observedPoints: number; scoreContribution: boolean; repairVisible: boolean } };
+  buildSessions?: Array<UnknownRecord & { costReceipts?: unknown[] }>;
+  repair?: { status: string; limit: number; used: number;
+    stopReason: string | null };
+  outcome?: MutableOutcome;
+}
+interface MutableRun extends UnknownRecord {
+  artifactEnvelope: { attempt: { parentId: string }; identities: UnknownRecord };
+  levels: MutableLevel[];
+  outcome: MutableOutcome;
+  totals?: { costUsd?: number; costComplete?: boolean };
+  validation?: { ladder: UnknownRecord & { blockedLevels: number[] } };
+}
+
+const APPLIANCE_ROOT = resolve(STACK_BENCH_ROOT, 'appliance');
+const example = join(APPLIANCE_ROOT, 'campaign.example.json');
+const productBrief = join(APPLIANCE_ROOT,
+  'campaign.product-brief-reference.json');
+const dependencyModelFree = resolve(STACK_BENCH_ROOT, 'tests', 'fixtures',
+  'dependency-model-free-campaign.json');
+const compiledExample = compileCampaignFile(example);
+const compiledDependencyModelFree = compileCampaignFile(dependencyModelFree);
+const examplePlan = (): CompiledCampaignPlan => structuredClone(compiledExample);
+const dependencyExamplePlan = (): CompiledCampaignPlan =>
+  structuredClone(compiledDependencyModelFree);
+
+// A valid run artifact carries the exact planned selection for each level; the
+// modular example selection made this mandatory for level-1 fixtures.
+const plannedSelection = (attempt: CampaignAttemptPlan, level: number): MutableSelection =>
+  structuredClone(attempt.condition.requested.levels.find(item => item.level === level)!
+    .selection) as MutableSelection;
+const experimentIdentity = (plan: CompiledCampaignPlan) => ({ id: plan.id, version: plan.version,
+  sha256: plan.contentSha256, state: plan.state });
+
+function writeFakePackageEvidence(output: string, level: MutableLevel,
+  status: 'passed' | 'failed' = 'passed'): void {
+  if (!level.selection) throw new Error('fake package evidence requires a selection');
+  const source = join(output, 'source');
+  mkdirSync(source, { recursive: true });
+  writeFileSync(join(source, 'app.js'), 'export const ready = true;\n');
+  const sourceHash = hashDirectory(source).sha256;
+  const checks = level.selection.scoredChecks ?? [];
+  const checkKeys = checks.map(check => check.stableKey);
+  writeArtifact(join(output, 'grading', 'bundle.json'), {
+    kind: 'grade_bundle', id: `fake-grade-${level.level}`, payload: {
+      observation: 'scored', source: { sha256: sourceHash }, suites: { fake: { features: [{
+        id: 'fake', setupEvidence: createCheckEvidence({ status: 'passed', code: 'completed',
+          phase: 'setup', startedAtMs: 1, completedAtMs: 2 }),
+        criteria: checks.map(check => ({ id: check.stableKey, stableKey: check.stableKey,
+          points: check.points, evidence: createCheckEvidence({ status,
+            code: status === 'passed' ? 'completed' : 'test_result', phase: 'assertion',
+            startedAtMs: 1, completedAtMs: 2 }) })),
+      }] } },
+      totals: { score: level.score, max: level.max },
+      selection: { sha256: level.selection.sha256, checks,
+        attemptedChecks: checkKeys, reportedChecks: checkKeys, notRun: [] },
+    },
+  });
+}
+
+test('campaign failures prefer the last explicit error over stack and exit noise', () => {
+  const stderrTail = [
+    'Error: Command failed: node agent.mjs --large-private-request',
+    '[reference-agent] starting',
+    'Error: reference source contains an unsupported generated link',
+    '    at prepareReferenceSource (reference-agent.js:102:3)',
+    '[reference-agent] beforeExit code=1',
+    '[reference-agent] exit code=1',
+  ].join('\n');
+  assert.equal(processFailureDetail({ stderrTail }),
+    'Error: reference source contains an unsupported generated link');
+});
+
+test('dependency completion does not hide a whole-app failure', () => {
+  assert.equal(expectedDependencyRunOutcomeKind([
+    { outcome: { kind: 'passed' } },
+    { outcome: { kind: 'app_failure' } },
+    { outcome: { kind: 'passed' } },
+  ], { kind: 'passed' }), 'app_failure');
+  assert.equal(expectedDependencyRunOutcomeKind([
+    { outcome: { kind: 'passed' } },
+  ], { kind: 'passed' }), 'passed');
+  assert.equal(expectedDependencyRunOutcomeKind([
+    { outcome: { kind: 'passed' } },
+  ], { kind: 'partial' }), null);
+});
+
+test('attempt argv is derived completely from the compiled campaign plan', () => {
+  const plan = examplePlan();
+  const argv = attemptArgv(plan, plan.attempts[0], '/campaign/attempt', 0,
+    '/campaign/plan.json');
+  assert.deepEqual(argv.slice(1), [
+    '--campaign-file', resolve('/campaign/plan.json'),
+    '--campaign-attempt-id', plan.attempts[0].id,
+    '--run-index', '0', '--out', '/campaign/attempt',
+  ]);
+  assert.throws(() => attemptArgv(plan, { ...plan.attempts[0], condition: {
+    ...plan.attempts[0].condition, guidance: { ...plan.attempts[0].condition.guidance,
+      documents: {} },
+  } }, '/campaign/attempt', 0, '/campaign/plan.json'), /has no guidance document/);
+  assert.throws(() => attemptArgv(plan, { ...plan.attempts[0], pricing: {
+    ...plan.attempts[0].pricing,
+    rates: { ...plan.attempts[0].pricing.rates, input: 1 },
+  } }, '/campaign/attempt', 0, '/campaign/plan.json'), /pricing does not match/);
+  assert.throws(() => attemptArgv(plan, plan.attempts[0], '/campaign/attempt'), /requires a run slot/);
+  const admitted = attemptArgv(plan, plan.attempts[0], '/campaign/attempt', 0,
+    '/campaign/plan.json', null, 'admission-1');
+  assert.equal(admitted[admitted.indexOf('--campaign-admission-id') + 1], 'admission-1');
+  const capped = structuredClone(plan);
+  capped.definition.budgets.maxCostUsdPerAttempt = 10;
+  const resumed = attemptArgv(capped, capped.attempts[0], '/campaign/attempt', 0,
+    '/campaign/plan.json', null, 'admission-1', 6.5);
+  assert.equal(resumed[resumed.indexOf('--max-budget-usd') + 1], '6.5');
+  assert.throws(() => attemptArgv(capped, capped.attempts[0], '/campaign/attempt', 0,
+    '/campaign/plan.json', null, 'admission-1', 10.5), /invalid remaining cost budget/);
+});
+
+test('campaign retry budget subtracts every prior execution cost', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-cost-'));
+  try {
+    const output = join(root, 'attempts', 'one', 'execution-1');
+    mkdirSync(output, { recursive: true });
+    const receipt = { complete: true, reconciled: true, error: null, costUsd: 3.25 };
+    writeArtifact(join(output, 'run.json'), { kind: 'benchmark_run', id: 'prior-run',
+      payload: { totals: { costUsd: 3.25, costComplete: true },
+        levels: [{ level: 1, buildSessions: [{ costUsd: 3.25, costComplete: true,
+          costReceipts: [{ invocation: 1, receipt }] }] }] } });
+    const campaign = { definition: { budgets: { maxCostUsdPerAttempt: 10 } } };
+    const claim = { attempt: { id: 'one' }, priorOutputs: ['attempts/one/execution-1'] };
+    assert.equal(remainingAttemptCostBudget(campaign, claim, root), 6.75);
+
+    const artifact = readArtifact<{ totals: { costUsd: number; costComplete: boolean } }>(
+      join(output, 'run.json'));
+    artifact.payload.totals.costComplete = false;
+    writeFileSync(join(output, 'run.json'), `${JSON.stringify(artifact)}\n`);
+    assert.throws(() => remainingAttemptCostBudget(campaign, claim, root),
+      /prior provider spend is unknown/);
+
+    artifact.payload.totals = { costUsd: 1, costComplete: true };
+    writeFileSync(join(output, 'run.json'), `${JSON.stringify(artifact)}\n`);
+    assert.throws(() => remainingAttemptCostBudget(campaign, claim, root),
+      /prior provider spend is unknown/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('dependency attempts pass separate catalog and policy identities with no level range', () => {
+  const dependencyPlan = dependencyExamplePlan();
+  const attempt = dependencyPlan.attempts[0];
+  const argv = attemptArgv(dependencyPlan, attempt, '/campaign/dependency', 0,
+    '/campaign/plan.json');
+  assert.equal(argv.includes('--levels'), false);
+  const index = argv.indexOf('--campaign-file');
+  assert(index > 0);
+  assert.equal(argv[index + 1], resolve('/campaign/plan.json'));
+  assert.equal(argv[argv.indexOf('--campaign-attempt-id') + 1], attempt.id);
+  for (const option of ['--guidance-document-json', '--condition-json', '--selection-json',
+    '--skills-json']) assert.equal(argv.includes(option), false);
+  const resumedArgv = attemptArgv(dependencyPlan, attempt, '/campaign/dependency-2', 0,
+    '/campaign/plan.json', '/campaign/dependency-1');
+  assert.equal(resumedArgv[resumedArgv.indexOf('--progression-resume-from') + 1],
+    resolve('/campaign/dependency-1'));
+  const extension = { fromDepth: 1, source: `.private/extensions/${attempt.id}/source`,
+    sourceSha256: 'a'.repeat(64), sourceFiles: 4,
+    parent: { campaignId: 'parent', campaignSha256: 'b'.repeat(64),
+      attemptId: 'parent-attempt', executionId: 'execution-1', runId: 'run-1',
+      runSha256: 'c'.repeat(64) } };
+  const extendedArgv = attemptArgv(dependencyPlan, attempt, '/campaign/dependency-3', 0,
+    '/campaign/plan.json', null, null, undefined, extension);
+  assert.equal(extendedArgv[extendedArgv.indexOf('--seed-through') + 1], '1');
+  assert.equal(extendedArgv[extendedArgv.indexOf('--seed-from') + 1],
+    resolve('/campaign/.private/extensions', attempt.id, 'source'));
+  assert.throws(() => attemptArgv(dependencyPlan, attempt, '/campaign/dependency', 0),
+    /requires its compiled campaign plan path/);
+  assert.throws(() => attemptArgv(dependencyPlan, { ...attempt,
+    mode: { id: 'sequential', version: '1.0.0' },
+  }, '/campaign/dependency', 0, '/campaign/plan.json'),
+  /mode and dependency policy do not match/);
+});
+
+test('campaign validation accepts only an explicit pass-before-next-level application gate', () => {
+  const plan = examplePlan();
+  const attempt = plan.attempts.find(item => item.levels.length > 1) ?? { ...plan.attempts[0], levels: [1, 2] };
+  const agent = plan.agents.find(item => item.adapter === attempt.agentAdapter)!;
+  const stack = plan.stacks.find(item => item.id === attempt.stack)!;
+  const run: MutableRun = { artifactEnvelope: { attempt: { parentId: attempt.id },
+    identities: emptyArtifactIdentities({ engine: plan.identities.engine,
+      experiment: experimentIdentity(plan), agentAdapter: agent.identity, stackAdapter: stack }) },
+  mode: attempt.mode, track: plan.definition.track, backend: attempt.stack, model: attempt.model,
+  pricing: attempt.pricing,
+  guidance: attempt.guidance, condition: attempt.condition,
+  selectionRequest: plan.definition.selection, skills: attempt.skills,
+  runtime: { buildImage: 'test-build-image' }, totals: { costUsd: 0 },
+  levels: [{ level: 1, selection: plannedSelection(attempt, 1) }],
+  outcome: { kind: 'harness_failure', reason: 'provider-session-error' } };
+  assert.equal(validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }), run);
+  assert.throws(() => validateCampaignRun(plan, attempt,
+    { ...run, mode: { id: 'dependency', version: '3.2.0' } },
+    { buildImage: 'test-build-image' }), /does not match.*mode/);
+  assert.throws(() => validateCampaignRun(plan, attempt, { ...run,
+    artifactEnvelope: { ...run.artifactEnvelope, identities: {
+      ...run.artifactEnvelope.identities,
+      experiment: { ...(run.artifactEnvelope.identities.experiment as UnknownRecord),
+        sha256: 'a'.repeat(64) },
+    } } }, { buildImage: 'test-build-image' }), /does not match.*identities\.experiment/);
+  assert.throws(() => validateCampaignRun(plan, attempt,
+    { ...run, levels: [{ level: 1 }] }, { buildImage: 'test-build-image' }), error => {
+    assert(error instanceof Error);
+    assert.match(error.message, /levels\.L1\.selection/);
+    assert.doesNotMatch(error.message, /canonical JSON data/);
+    return true;
+  });
+  assert.throws(() => validateCampaignRun(plan, attempt,
+    { ...run, outcome: { kind: 'app_failure' } }, { buildImage: 'test-build-image' }),
+  /does not match.*levels/);
+  const appFailure = { kind: 'app_failure', phase: 'grading', reason: null,
+    appFailures: ['restock-race/202/202a'], inconclusive: [], harnessFailures: [] };
+  const gated: MutableRun = { ...run,
+    validation: { ladder: { policy: 'pass-before-next-level', requestedLevels: [1, 2],
+      completedLevels: [1], stoppedAfterLevel: 1, blockedLevels: [2] } },
+    levels: [{ level: 1, selection: plannedSelection(attempt, 1),
+      graded: true, score: 57, max: 58, repairs: 3,
+      firstBuild: { score: 31, max: 58, outcome: appFailure },
+      repair: { status: 'budget-exhausted', limit: 3, used: 3,
+        stopReason: 'budget-exhausted' }, outcome: appFailure }],
+    outcome: { kind: 'app_failure', levels: { 1: appFailure } } };
+  assert.equal(validateCampaignRun(plan, attempt, gated,
+    { buildImage: 'test-build-image' }), gated);
+  assert.throws(() => validateCampaignRun(plan, attempt, { ...gated,
+    validation: { ladder: { ...gated.validation!.ladder, blockedLevels: [] } } },
+  { buildImage: 'test-build-image' }), /does not match.*levels/);
+});
+
+test('campaign validation accepts a zero-level interrupted run without invented cost totals', () => {
+  const compiled = examplePlan();
+  const plan = { ...compiled, definition: { ...compiled.definition,
+    budgets: { ...compiled.definition.budgets, maxCostUsdPerAttempt: 100 } } };
+  const attempt = { ...plan.attempts[0], levels: [1, 2] };
+  const agent = plan.agents.find(item => item.adapter === attempt.agentAdapter)!;
+  const stack = plan.stacks.find(item => item.id === attempt.stack)!;
+  const run: MutableRun = { artifactEnvelope: { attempt: { parentId: attempt.id },
+    identities: emptyArtifactIdentities({ engine: plan.identities.engine,
+      experiment: experimentIdentity(plan), agentAdapter: agent.identity, stackAdapter: stack }) },
+  mode: attempt.mode, track: plan.definition.track, backend: attempt.stack, model: attempt.model,
+  pricing: attempt.pricing,
+  guidance: attempt.guidance, condition: attempt.condition,
+  selectionRequest: plan.definition.selection, skills: attempt.skills,
+  runtime: { buildImage: 'test-build-image' }, levels: [],
+  outcome: { kind: 'ungraded', reason: 'coding session did not run' } };
+  assert.equal(validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }), run);
+  assert.throws(() => validateCampaignRun(plan, attempt,
+    { ...run, outcome: { kind: 'app_failure' } }, { buildImage: 'test-build-image' }),
+  /does not match.*levels.*totals\.costUsd/);
+  assert.throws(() => validateCampaignRun(plan, attempt,
+    { ...run, backend: 'wrong' }, { buildImage: 'test-build-image' }),
+  /does not match.*backend/);
+});
+
+test('paid campaign validation requires cost evidence unless the agent failed', () => {
+  const plan = examplePlan();
+  const attempt = plan.attempts.find(item => item.levels.length > 1)
+    ?? { ...plan.attempts[0], levels: [1, 2] };
+  const agent = plan.agents.find(item => item.adapter === attempt.agentAdapter)!;
+  agent.costLimit = 'native';
+  const stack = plan.stacks.find(item => item.id === attempt.stack)!;
+  const receipt = { complete: true, reconciled: true, error: null, costUsd: 1.25 };
+  const run: MutableRun = {
+    artifactEnvelope: { attempt: { parentId: attempt.id },
+      identities: emptyArtifactIdentities({ engine: plan.identities.engine,
+        experiment: experimentIdentity(plan), agentAdapter: agent.identity, stackAdapter: stack }) },
+    mode: attempt.mode, track: plan.definition.track, backend: attempt.stack, model: attempt.model,
+    pricing: attempt.pricing,
+    guidance: attempt.guidance, condition: attempt.condition,
+    selectionRequest: plan.definition.selection, skills: attempt.skills,
+    runtime: { buildImage: 'test-build-image' },
+    totals: { costUsd: 1.25, costComplete: true },
+    levels: [{ level: 1, selection: plannedSelection(attempt, 1),
+      buildSessions: [{ costUsd: 1.25, costComplete: true,
+        costReceipts: [{ invocation: 1, receipt }] }] }],
+    outcome: { kind: 'harness_failure', reason: 'provider-session-error' },
+  };
+
+  assert.equal(validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }), run);
+  assert.doesNotThrow(() => validateCampaignRun(plan, attempt, {
+    ...run, totals: { ...run.totals, costComplete: false },
+  }, { buildImage: 'test-build-image' }));
+  assert.throws(() => validateCampaignRun(plan, attempt, {
+    ...run, outcome: { kind: 'app_failure', reason: 'app is incomplete' },
+    totals: { ...run.totals, costComplete: false },
+  }, { buildImage: 'test-build-image' }), /totals\.costComplete.*costEvidence/);
+  assert.throws(() => validateCampaignRun(plan, attempt, {
+    ...run, outcome: { kind: 'app_failure', reason: 'app is incomplete' },
+    levels: [{ ...run.levels[0]!, buildSessions: [{
+      ...run.levels[0]!.buildSessions?.[0], costReceipts: [],
+    }] }],
+  }, { buildImage: 'test-build-image' }), /costEvidence/);
+  assert.throws(() => validateCampaignRun(plan, attempt, {
+    ...run, outcome: { kind: 'app_failure', reason: 'app is incomplete' },
+    levels: [{ ...run.levels[0]!, buildSessions: [{
+      ...run.levels[0]!.buildSessions?.[0], costReceipts: [{ invocation: 1,
+        receipt: { ...receipt, reconciled: false, error: 'not reconciled' } }],
+    }] }],
+  }, { buildImage: 'test-build-image' }), /costEvidence/);
+});
+
+test('dependency validation keeps a conclusive grade when its repair session is interrupted', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-dependency-interrupted-'));
+  try {
+    const plan = dependencyExamplePlan();
+    const attempt = plan.attempts[0];
+    const agent = plan.agents.find(item => item.adapter === attempt.agentAdapter)!;
+    const stack = plan.stacks.find(item => item.id === attempt.stack)!;
+    const owner = { schemaVersion: 1,
+      campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+      attempt: { id: attempt.id, track: plan.definition.track, stack: attempt.stack,
+        agentAdapter: attempt.agentAdapter, model: attempt.model,
+        conditionSha256: attempt.condition.sha256 },
+      workspace: { appDirectory: 'source' } };
+    const progression = compileProgressionInput(dependencyRuntimeDefinition(
+      plan.featureCatalog!, plan.dependencyPolicy!));
+    let state = progressionEngine.initialize(progression.definition);
+    const selection = progressionEngine.gradingSelection(state);
+    state = progressionEngine.recordResult(state, {
+      attemptId: 'grade-before-agent-failure', outcome: 'conclusive',
+      nodes: selection.nodeIds.map(id => ({ id,
+        checks: selection.checks.filter(check => check.nodeId === id)
+          .map(check => ({ id: check.id, outcome: 'fail' })) })),
+    });
+    writeProgressionState(join(root, 'progression-state.json'), {
+      progression, featureCatalogIdentity: plan.featureCatalog!.identity,
+      dependencyPolicyIdentity: plan.dependencyPolicy!.identity, owner, state,
+    });
+    const run: MutableRun = {
+      artifactEnvelope: { attempt: { parentId: attempt.id },
+        identities: emptyArtifactIdentities({ engine: plan.identities.engine,
+          experiment: experimentIdentity(plan), agentAdapter: agent.identity, stackAdapter: stack }) },
+      mode: attempt.mode, track: plan.definition.track, backend: attempt.stack, model: attempt.model,
+      pricing: attempt.pricing,
+      guidance: attempt.guidance, condition: attempt.condition,
+      selectionRequest: plan.definition.selection, featureCatalog: attempt.featureCatalog,
+      dependencyPolicy: attempt.dependencyPolicy,
+      progressionOwner: { schemaVersion: 1, campaign: owner.campaign, attempt: owner.attempt },
+      progressionStatus: liveProgressionStatus(state), skills: attempt.skills,
+      runtime: { buildImage: 'test-build-image' },
+      validation: { ladder: { policy: 'dependency-graph', requestedLevels: attempt.levels,
+        completedLevels: [1], stoppedAfterLevel: null, blockedLevels: [1] } },
+      levels: [], outcome: { kind: 'harness_failure', phase: 'agent-fix',
+        reason: 'repair process exited before completion' },
+    };
+    assert.equal(validateCampaignRun(plan, attempt, run, {
+      buildImage: 'test-build-image', resultDir: root,
+    }), run);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('dependency validation requires a matching pre-grade failure attempt', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-dependency-pre-grade-failure-'));
+  try {
+    const plan = dependencyExamplePlan();
+    const attempt = plan.attempts[0];
+    const agent = plan.agents.find(item => item.adapter === attempt.agentAdapter)!;
+    const stack = plan.stacks.find(item => item.id === attempt.stack)!;
+    const owner = { schemaVersion: 1,
+      campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+      attempt: { id: attempt.id, track: plan.definition.track, stack: attempt.stack,
+        agentAdapter: attempt.agentAdapter, model: attempt.model,
+        conditionSha256: attempt.condition.sha256 },
+      workspace: { appDirectory: 'source' } };
+    const progression = compileProgressionInput(dependencyRuntimeDefinition(
+      plan.featureCatalog!, plan.dependencyPolicy!));
+    const emptyState = progressionEngine.initialize(progression.definition);
+    const state = progressionEngine.recordResult(emptyState, {
+      attemptId: 'pre-grade-harness-failure', outcome: 'inconclusive',
+      category: 'harness_failure', reason: 'coding-session-failed',
+    });
+    writeProgressionState(join(root, 'progression-state.json'), {
+      progression, featureCatalogIdentity: plan.featureCatalog!.identity,
+      dependencyPolicyIdentity: plan.dependencyPolicy!.identity, owner, state,
+    });
+    const run: MutableRun = {
+      artifactEnvelope: { attempt: { parentId: attempt.id },
+        identities: emptyArtifactIdentities({ engine: plan.identities.engine,
+          experiment: experimentIdentity(plan), agentAdapter: agent.identity,
+          stackAdapter: stack }) },
+      mode: attempt.mode, track: plan.definition.track, backend: attempt.stack,
+      model: attempt.model, pricing: attempt.pricing, guidance: attempt.guidance,
+      condition: attempt.condition, selectionRequest: plan.definition.selection,
+      featureCatalog: attempt.featureCatalog, dependencyPolicy: attempt.dependencyPolicy,
+      progressionOwner: { schemaVersion: 1, campaign: owner.campaign, attempt: owner.attempt },
+      progressionStatus: liveProgressionStatus(state), skills: attempt.skills,
+      runtime: { buildImage: 'test-build-image' },
+      validation: { ladder: { policy: 'dependency-graph', requestedLevels: attempt.levels,
+        completedLevels: [], stoppedAfterLevel: null, blockedLevels: [] } },
+      levels: [{ level: state.level, graded: false, score: null, max: null,
+        error: 'coding-session-failed',
+        outcome: { kind: 'harness_failure', phase: 'coding-session',
+          reason: 'coding-session-failed' } }],
+      outcome: { kind: 'harness_failure', phase: 'coding-session',
+        reason: 'coding-session-failed' },
+    };
+    assert.equal(validateCampaignRun(plan, attempt, run, {
+      buildImage: 'test-build-image', resultDir: root,
+    }), run);
+    writeProgressionState(join(root, 'progression-state.json'), {
+      progression, featureCatalogIdentity: plan.featureCatalog!.identity,
+      dependencyPolicyIdentity: plan.dependencyPolicy!.identity, owner, state: emptyState,
+    });
+    const withoutAttempt = { ...run, progressionStatus: liveProgressionStatus(emptyState) };
+    assert.throws(() => validateCampaignRun(plan, attempt, withoutAttempt, {
+      buildImage: 'test-build-image', resultDir: root,
+    }), /levels\.L1\.progressionAttempt/);
+
+    const gradingState = progressionEngine.recordResult(emptyState, {
+      attemptId: 'inconclusive-grading', outcome: 'inconclusive',
+      category: 'inconclusive_evidence', reason: 'one selected check could not be measured',
+    });
+    writeProgressionState(join(root, 'progression-state.json'), {
+      progression, featureCatalogIdentity: plan.featureCatalog!.identity,
+      dependencyPolicyIdentity: plan.dependencyPolicy!.identity, owner, state: gradingState,
+    });
+    const gradingRun = structuredClone(run);
+    gradingRun.progressionStatus = liveProgressionStatus(gradingState);
+    gradingRun.levels[0] = { level: gradingState.level, graded: false,
+      score: null, max: null, outcome: { kind: 'inconclusive', phase: 'grading',
+        reason: 'bundle contains inconclusive evidence' } };
+    gradingRun.outcome = { kind: 'inconclusive', phase: 'grading',
+      reason: 'bundle contains inconclusive evidence' };
+    assert.equal(validateCampaignRun(plan, attempt, gradingRun, {
+      buildImage: 'test-build-image', resultDir: root,
+    }), gradingRun);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('campaign validation accepts an explicit repeated-findings pause but rejects an unexplained stop', () => {
+  const plan = examplePlan();
+  const attempt = plan.attempts[0];
+  const agent = plan.agents.find(item => item.adapter === attempt.agentAdapter)!;
+  const stack = plan.stacks.find(item => item.id === attempt.stack)!;
+  const run: MutableRun = { artifactEnvelope: { attempt: { parentId: attempt.id },
+    identities: emptyArtifactIdentities({ engine: plan.identities.engine,
+      experiment: experimentIdentity(plan), agentAdapter: agent.identity, stackAdapter: stack }) },
+  mode: attempt.mode, track: plan.definition.track, backend: attempt.stack, model: attempt.model,
+  pricing: attempt.pricing,
+  guidance: attempt.guidance, condition: attempt.condition,
+  selectionRequest: plan.definition.selection, skills: attempt.skills,
+  runtime: { buildImage: 'test-build-image' }, totals: { costUsd: 0 },
+  levels: [{ level: 1, selection: plannedSelection(attempt, 1), score: 0, max: 58, repairs: 1,
+    firstBuild: { score: 0, max: 58, outcome: { kind: 'app_failure' } },
+    repair: { status: 'incomplete', limit: 3, used: 1, stopReason: null },
+    outcome: { kind: 'app_failure' } }], outcome: { kind: 'app_failure' } };
+  assert.throws(() => validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }),
+    /levels\.L1\.repair/);
+  run.levels[0] = { ...run.levels[0]!,
+    repair: { status: 'incomplete', limit: 3, used: 1,
+      stopReason: 'repeated-findings' } };
+  assert.equal(validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }), run);
+  run.levels[0] = { ...run.levels[0]!,
+    repair: { status: 'incomplete', limit: 3, used: 1,
+      stopReason: 'no-source-change' } };
+  assert.equal(validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }), run);
+  run.levels[0] = { ...run.levels[0]!, repairs: 3,
+    repair: { status: 'incomplete', limit: 3, used: 3,
+      stopReason: 'no-source-change' } };
+  assert.equal(validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }), run);
+  run.levels[0] = { ...run.levels[0]!, repairs: 3,
+    repair: { status: 'budget-exhausted', limit: 3, used: 3, stopReason: null } };
+  assert.equal(validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }), run);
+  run.levels[0] = { ...run.levels[0]!, score: 58 };
+  assert.throws(() => validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }),
+    /levels\.L1\.score/);
+  run.levels[0] = { ...run.levels[0]!, contractPass: false,
+    outcome: { kind: 'app_failure', appFailures: ['contract-lint'] } };
+  assert.equal(validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }), run,
+    'a behaviorally perfect app may still fail the separately reported contract lint');
+  run.levels[0] = { ...run.levels[0]!, regression: { score: 0, max: 1 } };
+  assert.throws(() => validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }),
+    /levels\.L1\.regression/,
+    'L1 has no earlier level and cannot report an inherited regression');
+  run.levels[0] = { ...run.levels[0]!, regression: null, contractPass: null,
+    outcome: { kind: 'app_failure', appFailures: ['systems/diagnostic'] } };
+  assert.throws(() => validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }),
+    /levels\.L1\.score/,
+    'test-development evidence cannot turn a perfect scored result into an application failure');
+  run.levels[0] = { ...run.levels[0]!, score: 0, outcome: { kind: 'passed' },
+    repair: { status: 'corrected', limit: 3, used: 3, stopReason: null } };
+  assert.throws(() => validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }),
+    /outcome\.kind/);
+});
+
+test('campaign validation requires complete first-build and final measurement coverage', () => {
+  const plan = examplePlan();
+  const attempt = plan.attempts[0];
+  const agent = plan.agents.find(item => item.adapter === attempt.agentAdapter)!;
+  const stack = plan.stacks.find(item => item.id === attempt.stack)!;
+  const outcome = { kind: 'passed', inconclusive: [], harnessFailures: [] };
+  const run: MutableRun = { artifactEnvelope: { attempt: { parentId: attempt.id },
+    identities: emptyArtifactIdentities({ engine: plan.identities.engine,
+      experiment: experimentIdentity(plan), agentAdapter: agent.identity, stackAdapter: stack }) },
+  mode: attempt.mode, track: plan.definition.track, backend: attempt.stack, model: attempt.model,
+  pricing: attempt.pricing,
+  guidance: attempt.guidance, condition: attempt.condition,
+  selectionRequest: plan.definition.selection, skills: attempt.skills,
+  runtime: { buildImage: 'test-build-image' }, totals: { costUsd: 0 },
+  levels: [{ level: 1, graded: true, selection: plannedSelection(attempt, 1),
+    score: 58, max: 58, repairs: 0,
+    firstBuild: { score: 58, max: 58, outcome },
+    repair: { status: 'not-needed', limit: 3, used: 0, stopReason: null },
+    outcome }], outcome: { kind: 'passed' } };
+  assert.equal(validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }), run);
+  const missingPackage = mkdtempSync(join(tmpdir(), 'stack-bench-missing-package-'));
+  try {
+    assert.throws(() => validateCampaignRun(plan, attempt, run, {
+      buildImage: 'test-build-image', resultDir: missingPackage,
+    }), /packageEvidence\.source.*packageEvidence\.grading/);
+  } finally { rmSync(missingPackage, { recursive: true, force: true }); }
+
+  const contradictoryPackage = mkdtempSync(join(tmpdir(), 'stack-bench-contradictory-package-'));
+  try {
+    writeFakePackageEvidence(contradictoryPackage, run.levels[0]!, 'failed');
+    assert.throws(() => validateCampaignRun(plan, attempt, run, {
+      buildImage: 'test-build-image', resultDir: contradictoryPackage,
+    }), /packageEvidence\.grading\.outcome/);
+  } finally { rmSync(contradictoryPackage, { recursive: true, force: true }); }
+
+  const missingFirstBuildPoint = structuredClone(run);
+  missingFirstBuildPoint.levels[0]!.firstBuild!.score = 57;
+  missingFirstBuildPoint.levels[0]!.firstBuild!.max = 57;
+  assert.throws(() => validateCampaignRun(plan, attempt, missingFirstBuildPoint,
+    { buildImage: 'test-build-image' }), /firstBuild\.max/);
+
+  const missingFinalPoint = structuredClone(run);
+  missingFinalPoint.levels[0]!.max = 57;
+  missingFinalPoint.levels[0]!.score = 57;
+  assert.throws(() => validateCampaignRun(plan, attempt, missingFinalPoint,
+    { buildImage: 'test-build-image' }), /levels\.L1\.max/);
+
+  const inconclusiveFirstBuild = structuredClone(run);
+  inconclusiveFirstBuild.levels[0]!.firstBuild!.outcome = { kind: 'app_failure',
+    appFailures: ['feature/accounts'],
+    inconclusive: ['ecommerce.spec.concurrency-safety.duplicate-checkout.203b'] };
+  assert.throws(() => validateCampaignRun(plan, attempt, inconclusiveFirstBuild,
+    { buildImage: 'test-build-image' }), /firstBuild\.outcome\.inconclusive/);
+
+  const inconclusiveFinal = structuredClone(run);
+  inconclusiveFinal.levels[0]!.outcome = { kind: 'app_failure',
+    appFailures: ['feature/accounts'],
+    inconclusive: ['ecommerce.spec.concurrency-safety.duplicate-checkout.203b'] };
+  inconclusiveFinal.outcome = { kind: 'app_failure' };
+  inconclusiveFinal.levels[0]!.score = 57;
+  inconclusiveFinal.levels[0]!.repairs = 3;
+  inconclusiveFinal.levels[0]!.repair = { status: 'budget-exhausted', limit: 3,
+    used: 3, stopReason: null };
+  assert.throws(() => validateCampaignRun(plan, attempt, inconclusiveFinal,
+    { buildImage: 'test-build-image' }), /final\.outcome\.inconclusive/);
+});
+
+test('campaign validation binds observed-only evidence to its exact first-build selection', () => {
+  const compiled = examplePlan();
+  const sourceSha256 = 'a'.repeat(64);
+  const selectionSha256 = 'b'.repeat(64);
+  const scoredChecks = [
+    { stableKey: 'feature/accounts', points: 1, treatment: 'requested' as const },
+    { stableKey: 'authorization/session', points: 1, treatment: 'expected' as const },
+  ];
+  const observedChecks = [
+    { stableKey: 'durability/session', points: 1, treatment: 'observed' as const },
+  ];
+  const selectedObservedKeys = observedChecks.map(check => check.stableKey);
+  const specifications = { requested: [], expected: ['authorization@1.0.0'],
+    observed: ['durability@1.0.0'] };
+  const baseAttempt = compiled.attempts[0];
+  const baseLevel = baseAttempt.condition.requested.levels[0];
+  const requestedLevels: CampaignAttemptPlan['condition']['requested']['levels'] = [{
+    ...baseLevel, level: 1, selection: { ...baseLevel.selection, schemaVersion: 3,
+      sha256: selectionSha256, scoredPoints: 2, specifications, scoredChecks, observedChecks } }];
+  const condition = { ...baseAttempt.condition, requested: {
+    ...baseAttempt.condition.requested, levels: requestedLevels } };
+  const plan = { ...compiled, conditions: compiled.conditions.map(item =>
+    item.sha256 === condition.sha256 ? condition : item) } as CompiledCampaignPlan;
+  const attempt: CampaignAttemptPlan = { ...baseAttempt, condition };
+  const agent = plan.agents.find(item => item.adapter === attempt.agentAdapter)!;
+  const stack = plan.stacks.find(item => item.id === attempt.stack)!;
+  const run: MutableRun = { artifactEnvelope: { attempt: { parentId: attempt.id },
+    identities: emptyArtifactIdentities({ engine: plan.identities.engine,
+      experiment: experimentIdentity(plan), agentAdapter: agent.identity, stackAdapter: stack }) },
+  mode: attempt.mode, track: plan.definition.track, backend: attempt.stack, model: attempt.model,
+  pricing: attempt.pricing,
+  guidance: attempt.guidance, condition: attempt.condition,
+  selectionRequest: plan.definition.selection, skills: attempt.skills,
+  runtime: { buildImage: 'test-build-image' }, totals: { costUsd: 0 },
+  levels: [{ level: 1, score: 0, max: 2, repairs: 3,
+    selection: { schemaVersion: 3, sha256: selectionSha256, scoredPoints: 2,
+      specifications,
+      scoredChecks, observedChecks },
+    firstBuild: { score: 0, max: 2, outcome: { kind: 'app_failure' },
+      source: { sha256: sourceSha256, files: 1 }, observations: {
+      sourceSha256, selectionSha256, selectedChecks: selectedObservedKeys,
+      reportedChecks: selectedObservedKeys, passedPoints: 1, observedPoints: 1,
+      scoreContribution: false, repairVisible: false,
+      artifact: 'first-build-l1-observed/bundle.json', outcome: { kind: 'passed' },
+    } },
+    repair: { status: 'budget-exhausted', limit: 3, used: 3,
+      stopReason: null }, outcome: { kind: 'app_failure' } }],
+  outcome: { kind: 'app_failure' } };
+  assert.equal(validateCampaignRun(plan, attempt, run, { buildImage: 'test-build-image' }), run);
+  const wrongExpected = structuredClone(run);
+  wrongExpected.levels[0]!.selection!.specifications!.expected = [];
+  assert.throws(() => validateCampaignRun(plan, attempt, wrongExpected,
+    { buildImage: 'test-build-image' }), /selection\.specifications/);
+  const visibleToRepair = structuredClone(run);
+  visibleToRepair.levels[0]!.firstBuild!.observations!.repairVisible = true;
+  assert.throws(() => validateCampaignRun(plan, attempt, visibleToRepair,
+    { buildImage: 'test-build-image' }), /firstBuild\.observations\.repairVisible/);
+  const wrongSource = structuredClone(run);
+  wrongSource.levels[0]!.firstBuild!.observations!.sourceSha256 = 'c'.repeat(64);
+  assert.throws(() => validateCampaignRun(plan, attempt, wrongSource,
+    { buildImage: 'test-build-image' }), /firstBuild\.observations\.sourceSha256/);
+  const wrongDenominator = structuredClone(run);
+  wrongDenominator.levels[0]!.firstBuild!.observations!.observedPoints = 2;
+  assert.throws(() => validateCampaignRun(plan, attempt, wrongDenominator,
+    { buildImage: 'test-build-image' }), /firstBuild\.observations\.observedPoints/);
+  const wrongWeight = structuredClone(run);
+  wrongWeight.levels[0]!.selection!.observedChecks![0]!.points = 2;
+  assert.throws(() => validateCampaignRun(plan, attempt, wrongWeight,
+    { buildImage: 'test-build-image' }), /selection\.observedChecks/);
+  const wrongScoreDenominator = structuredClone(run);
+  wrongScoreDenominator.levels[0]!.max = 1;
+  assert.throws(() => validateCampaignRun(plan, attempt, wrongScoreDenominator,
+    { buildImage: 'test-build-image' }), /levels\.L1\.max/);
+  const wrongPlannedSelection = structuredClone(run);
+  wrongPlannedSelection.levels[0]!.selection!.observedChecks![0]!.stableKey = 'durability/cart';
+  wrongPlannedSelection.levels[0]!.firstBuild!.observations!.selectedChecks = ['durability/cart'];
+  wrongPlannedSelection.levels[0]!.firstBuild!.observations!.reportedChecks = ['durability/cart'];
+  assert.throws(() => validateCampaignRun(plan, attempt, wrongPlannedSelection,
+    { buildImage: 'test-build-image' }), /selection\.observedChecks/);
+});
+
+test('ordinary campaign execution refuses draft plans', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-runner-draft-'));
+  try {
+    await assert.rejects(() => executeCampaign(example, root, { execute: async () => {
+      throw new Error('must not launch');
+    } }), /requires a complete test plan/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('campaign trials accept only non-billable draft plans with zero pricing', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-runner-trial-policy-'));
+  try {
+    await assert.rejects(() => executeCampaign(example, root, {
+      mode: 'model-free-trial',
+      admit: () => ({ id: 'failed-admission', payload: { ok: false }, runIndices: [] }),
+      execute: async () => { throw new Error('must not launch'); },
+    }), /admission failed/);
+
+    const paid = JSON.parse(readFileSync(example, 'utf8'));
+    paid.agents = [{ adapter: 'claude-code', adapterVersion: '1.17.2', model: 'claude-sonnet-5' }];
+    paid.pricing.models = { 'claude-sonnet-5': {
+      input: 0, output: 0, cacheWrite5m: 0, cacheWrite1h: 0, cacheRead: 0,
+    } };
+    const paidPath = join(root, 'paid.json');
+    writeFileSync(paidPath, `${JSON.stringify(paid, null, 2)}\n`);
+    await assert.rejects(() => executeCampaign(paidPath, join(root, 'paid'), {
+      mode: 'model-free-trial',
+      execute: async () => { throw new Error('must not launch'); },
+    }), /requires non-billable agent adapters/);
+
+    const priced = JSON.parse(readFileSync(example, 'utf8'));
+    priced.pricing.models.deterministic.input = 1;
+    const pricedPath = join(root, 'priced.json');
+    writeFileSync(pricedPath, `${JSON.stringify(priced, null, 2)}\n`);
+    await assert.rejects(() => executeCampaign(pricedPath, join(root, 'priced'), {
+      mode: 'model-free-trial',
+      execute: async () => { throw new Error('must not launch'); },
+    }), /requires zero pricing/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('failed campaign admission leaves every attempt pending and unclaimed', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-runner-admission-fail-'));
+  try {
+    await assert.rejects(() => executeCampaign(example, root, { mode: 'model-free-trial',
+      admit: () => ({ id: 'failed-admission', payload: { ok: false }, runIndices: [] }),
+      execute: async () => { throw new Error('must not launch'); },
+    }), /admission failed/);
+    const { readCampaignState } = await import('../src/campaigns/campaign-scheduler.js');
+    const state = readCampaignState(root).state;
+    assert.equal(state.status, 'prepared');
+    assert.equal(state.summary.executions, 0);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('only explicit transient provider failures receive campaign retry authority', () => {
+  const clean = { recoveryClean: true };
+  assert.deepEqual(campaignRetryAuthority({ outcome: { kind: 'harness_failure',
+    phase: 'coding-session', reason: 'coding-session-failed',
+    provider: { providerStatus: 503 } } }, clean), {
+    transient: false, recoveryClean: true, budgetKnown: true, cause: null,
+  });
+  assert.equal(campaignRetryAuthority({ outcome: { kind: 'harness_failure',
+    phase: 'coding-session', reason: 'coding-session-failed',
+    provider: { providerStatus: 503 } } }, { ...clean, requireCostReceipt: true }).budgetKnown, false);
+  assert.equal(campaignRetryAuthority({ outcome: { kind: 'harness_failure',
+    phase: 'coding-session', reason: 'coding-session-failed', provider: { providerStatus: 503 } },
+    totals: { costUsd: 1.25, costComplete: true } },
+  { ...clean, requireCostReceipt: true }).budgetKnown, true);
+  assert.deepEqual(campaignRetryAuthority({ outcome: { kind: 'provider_failure',
+    phase: 'coding-session', reason: 'provider-connection-error',
+    provider: { providerStatus: null } } }, clean), {
+    transient: true, recoveryClean: true, budgetKnown: true,
+    cause: 'provider-connection-error',
+  });
+  for (const outcome of [
+    { kind: 'harness_failure', phase: 'coding-session', reason: 'coding-process-killed',
+      provider: { providerStatus: null } },
+    { kind: 'harness_failure', phase: 'preflight', reason: 'configuration invalid' },
+    { kind: 'harness_failure', phase: 'coding-session', reason: 'provider-throttle-exhausted',
+      provider: { providerStatus: 529 } },
+  ]) {
+    assert.equal(campaignRetryAuthority({ outcome }, clean).transient, false);
+  }
+});
+
+test('model-free campaign execution checkpoints an authorized retry and every completed attempt', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-runner-'));
+  const calls: ExecuteCall[] = [];
+  const planned = examplePlan();
+  try {
+    const state = await executeCampaign(example, root, { mode: 'model-free-trial',
+      admit: () => ({ id: 'admission-1', payload: { ok: true }, runIndices: [0] }),
+      execute: async (command, argv, options) => {
+        assert(options.env);
+        calls.push({ command, argv, options });
+        const output = argv[argv.indexOf('--out') + 1]!;
+        assert.equal(existsSync(output), true,
+          'every execution, including a retry, must have a preflight-mountable output directory');
+        assert.deepEqual(options.logs, {
+          stdout: join(output, 'process.stdout.log'), stderr: join(output, 'process.stderr.log'),
+        });
+        const parent = argv[argv.indexOf('--campaign-attempt-id') + 1]!;
+        const { emptyArtifactIdentities, writeRunJson } = await import('../src/evidence/artifacts.js');
+        const completedAt = new Date().toISOString();
+        const attempt = planned.attempts.find(item => item.id === parent)!;
+        const agent = planned.agents.find(item => item.adapter === attempt.agentAdapter)!;
+        const stack = planned.stacks.find(item => item.id === attempt.stack)!;
+        if (calls.length === 1) {
+          writeRunJson(join(output, 'run.json'), { id: 'fake-provider-failure',
+            parentAttemptId: parent, startedAt: completedAt, completedAt,
+            identities: emptyArtifactIdentities({ experiment: experimentIdentity(planned),
+              agentAdapter: agent.identity,
+              stackAdapter: stack }),
+            mode: attempt.mode, track: planned.definition.track,
+            backend: attempt.stack, model: attempt.model, pricing: attempt.pricing,
+            guidance: attempt.guidance, condition: attempt.condition,
+            selectionRequest: planned.definition.selection,
+            skills: attempt.skills, runtime: { buildImage: options.env.STACK_BENCH_IMAGE },
+            backendLease: { runId: 'fake-provider-failure', backend: attempt.stack,
+              state: 'released' },
+            levels: [], outcome: { kind: 'provider_failure', phase: 'coding-session',
+              reason: 'coding-session-failed', provider: { providerStatus: 503 } } });
+          writeArtifact(join(output, 'recovery.json'), { kind: 'recovery',
+            id: 'fake-provider-failure-recovery',
+            attempt: { id: 'fake-provider-failure-recovery', parentId: 'fake-provider-failure' },
+            identities: emptyArtifactIdentities({ stackAdapter: { id: attempt.stack } }),
+            payload: { schemaVersion: 1, status: 'clean', runId: 'fake-provider-failure',
+              backend: attempt.stack, reason: null,
+              cleanup: { succeeded: true, retained: false },
+              resources: { backendState: 'released', buildContainer: { running: false },
+                listenerProcesses: [], locks: [{ key: 'slot:test', released: true }] },
+              instructions: ['No recovery action is required.'] } });
+          return { code: 3, timedOut: false };
+        }
+        const levels = attempt.levels.map(level => {
+          const selection = plannedSelection(attempt, level);
+          const max = selection.scoredPoints;
+          const outcome = { kind: 'passed', inconclusive: [], harnessFailures: [] };
+          return { level, graded: true, selection, score: max, max, repairs: 0,
+            firstBuild: { score: max, max, outcome },
+            repair: { status: 'not-needed', limit: 3, used: 0, stopReason: null },
+            outcome };
+        });
+        writeFakePackageEvidence(output, levels.at(-1)!);
+        writeRunJson(join(output, 'run.json'), { id: `fake-${calls.length}`,
+          parentAttemptId: parent, startedAt: completedAt, completedAt,
+          identities: emptyArtifactIdentities({ experiment: experimentIdentity(planned),
+            agentAdapter: agent.identity,
+            stackAdapter: stack }),
+          mode: attempt.mode, track: planned.definition.track,
+          backend: attempt.stack, model: attempt.model, pricing: attempt.pricing,
+          guidance: attempt.guidance, condition: attempt.condition,
+          selectionRequest: planned.definition.selection,
+          skills: attempt.skills, runtime: { buildImage: options.env.STACK_BENCH_IMAGE },
+          totals: { costUsd: 0 }, levels,
+          outcome: { kind: 'passed' } });
+        return { code: 0, timedOut: false };
+      } });
+    assert.equal(state.status, 'completed');
+    assert.equal(state.summary.completed, 9);
+    assert.equal(state.summary.executions, 10);
+    assert.deepEqual(state.attempts[0]!.executions.map(item => item.status), ['invalid', 'completed']);
+    assert.equal(calls.every(call => call.options.timeoutMs === 240 * 60_000), true);
+    const processArtifact = readArtifact(join(root,
+      state.attempts[0]!.executions[0]!.output, 'process.json'),
+      { expectedKind: 'campaign_process' });
+    assert.equal(processArtifact.payload.executionId, state.attempts[0]!.executions[0]!.id);
+    assert.equal(processArtifact.payload.exitCode, 3);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('campaign cancellation stops new claims and reaches the active process tree', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-cancel-'));
+  const cancellation = new AbortController();
+  let calls = 0;
+  try {
+    const state = await executeCampaign(example, root, { mode: 'model-free-trial',
+      signal: cancellation.signal,
+      admit: () => ({ id: 'cancel-admission', payload: { ok: true }, runIndices: [0] }),
+      execute: async (_command, _argv, options) => {
+        calls += 1;
+        assert.equal(options.signal, cancellation.signal);
+        cancellation.abort();
+        return { code: null, signal: 'SIGTERM', timedOut: false, cancelled: true };
+      },
+    });
+    assert.equal(calls, 1);
+    assert.equal(state.summary.executions, 1);
+    assert.equal(state.summary.running, 0);
+    assert.equal(state.summary.invalid, 1);
+    assert.equal(state.attempts[0]!.executions[0]!.outcome, 'scheduler_interrupted');
+    assert.match(state.attempts[0]!.executions[0]!.reason!, /cancellation requested/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('one campaign runs multiple attempts of the same stack concurrently in isolated slots', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-parallel-'));
+  try {
+    const definition = JSON.parse(readFileSync(example, 'utf8'));
+    definition.id = 'postgres-parallel-proof';
+    definition.repetitions = 1;
+    definition.parallelism = 3;
+    definition.stacks = [definition.stacks.find((stack: UnknownRecord) => stack.id === 'postgres')];
+    definition.stacks[0].repetitions = 3;
+    const campaignPath = join(root, 'campaign.json');
+    const results = join(root, 'results');
+    writeFileSync(campaignPath, `${JSON.stringify(definition, null, 2)}\n`);
+    const planned = compileCampaignFile(campaignPath);
+    let active = 0;
+    let maxActive = 0;
+    const started: Array<{ parent: string; runIndex: number }> = [];
+    let releaseFirstWave: (() => void) | null = null;
+    const firstWave = new Promise<void>(resolve => { releaseFirstWave = resolve; });
+    const state = await executeCampaign(campaignPath, results, { mode: 'model-free-trial',
+      admit: () => ({ id: 'parallel-admission', payload: { ok: true }, runIndices: [3, 4, 5] }),
+      execute: async (_command, argv, options) => {
+        assert(options.env);
+        const runIndex = Number(argv[argv.indexOf('--run-index') + 1]);
+        const parent = argv[argv.indexOf('--campaign-attempt-id') + 1]!;
+        const output = argv[argv.indexOf('--out') + 1]!;
+        active += 1;
+        maxActive = Math.max(maxActive, active);
+        started.push({ parent, runIndex });
+        if (started.length === 3) releaseFirstWave?.();
+        await firstWave;
+        const attempt = planned.attempts.find(item => item.id === parent)!;
+        const agent = planned.agents.find(item => item.adapter === attempt.agentAdapter)!;
+        const stack = planned.stacks.find(item => item.id === attempt.stack)!;
+        const completedAt = new Date().toISOString();
+        const { writeRunJson } = await import('../src/evidence/artifacts.js');
+        const levels = attempt.levels.map(level => {
+          const selection = plannedSelection(attempt, level);
+          const max = selection.scoredPoints;
+          const outcome = { kind: 'passed', inconclusive: [], harnessFailures: [] };
+          return { level, graded: true, selection, score: max, max, repairs: 0,
+            firstBuild: { score: max, max, outcome },
+            repair: { status: 'not-needed', limit: 3, used: 0, stopReason: null },
+            outcome };
+        });
+        writeFakePackageEvidence(output, levels.at(-1)!);
+        writeRunJson(join(output, 'run.json'), { id: `parallel-${runIndex}`,
+          parentAttemptId: parent, startedAt: completedAt, completedAt,
+          identities: emptyArtifactIdentities({ experiment: experimentIdentity(planned),
+            agentAdapter: agent.identity,
+            stackAdapter: stack }),
+          mode: attempt.mode, track: planned.definition.track,
+          backend: attempt.stack, model: attempt.model, pricing: attempt.pricing,
+          guidance: attempt.guidance, condition: attempt.condition,
+          selectionRequest: planned.definition.selection, skills: attempt.skills,
+          runtime: { buildImage: options.env.STACK_BENCH_IMAGE }, totals: { costUsd: 0 },
+          levels, outcome: { kind: 'passed' } });
+        active -= 1;
+        return { code: 0, timedOut: false };
+      } });
+    assert.equal(maxActive, 3);
+    assert.deepEqual(started.map(item => item.runIndex).sort((a, b) => a - b), [3, 4, 5]);
+    assert.equal(new Set(started.map(item => item.parent)).size, 3);
+    assert(state.attempts.every(attempt => attempt.status === 'completed'));
+    assert(state.attempts.every(attempt => attempt.executions[0]!.runIndex >= 3
+      && attempt.executions[0]!.runIndex <= 5));
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('failed cleanup leaves supervisor authority reconcilable instead of finalizing the attempt', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-cleanup-'));
+  try {
+    const definition = JSON.parse(readFileSync(example, 'utf8'));
+    definition.repetitions = 1;
+    definition.parallelism = 1;
+    definition.stacks = [definition.stacks[0]];
+    definition.agents = [definition.agents[0]];
+    definition.conditions = [definition.conditions[0]];
+    const campaignPath = join(root, 'campaign.json');
+    const results = join(root, 'results');
+    writeFileSync(campaignPath, `${JSON.stringify(definition, null, 2)}\n`);
+    const state = await executeCampaign(campaignPath, results, { mode: 'model-free-trial',
+      admit: (plan, directory) => runCampaignAdmission(plan, directory, { codingContainers: () => [],
+        env: {}, now: '2026-08-12T00:00:30.000Z', uuid: () => 'cleanup',
+        preflight: request => ({ schemaVersion: 1, generatedAt: '2026-08-12T00:00:30.000Z',
+          request: { backends: request.backends, track: request.track, levels: request.levelList,
+            runIndex: request.runIndex, parallelism: request.parallelism,
+            agentAdapter: request.agentAdapter,
+            packs: request.packIds, checks: request.checkKeys, image: request.image,
+            resultsDir: request.resultsDir, smoke: request.smoke },
+          ok: true, summary: { passed: 0, failed: 0, warnings: 0 }, checks: [] }),
+      }),
+      execute: async (_command, _argv, options) => {
+        assert(options.env);
+        mkdirSync(join(results, '.private'), { recursive: true });
+        writeFileSync(options.env.STACK_BENCH_SUPERVISOR_STATE!, '{}');
+        return { code: 1, timedOut: false };
+      },
+      rescue: () => { throw new Error('runtime still owns a process'); },
+    });
+    assert.equal(state.status, 'running');
+    assert.equal(state.summary.running, 1);
+    assert.equal(state.summary.invalid, 0);
+
+    const rescued: unknown[] = [];
+    const reconciled = reconcileCampaign(campaignPath, results, {
+      rescue: supervisor => { rescued.push(supervisor); },
+    });
+    assert.equal(rescued.length, 1);
+    assert.equal(reconciled.summary.running, 0);
+    assert.equal(reconciled.summary.invalid, 1);
+    assert.equal(reconciled.attempts[0]!.executions[0]!.outcome, 'scheduler_interrupted');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('interrupted parallel work advances only after every exact cleanup is proven', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-reconcile-'));
+  try {
+    // Coding stacks admit one run at a time; the stub starts no coding
+    // container, so it can exercise parallel scheduling.
+    const definition = JSON.parse(readFileSync(dependencyModelFree, 'utf8'));
+    definition.parallelism = 2;
+    definition.repetitions = 2;
+    const campaignPath = join(root, 'parallel.json');
+    writeFileSync(campaignPath, `${JSON.stringify(definition, null, 2)}\n`);
+    const plan = compileCampaignFile(campaignPath);
+    const initialized = initializeCampaignDirectory(plan, root,
+      { now: '2026-08-12T00:00:00.000Z' });
+    const admission = runCampaignAdmission(plan, root, { codingContainers: () => [],
+      env: {}, now: '2026-08-12T00:00:30.000Z', uuid: () => 'reconcile',
+      preflight: request => ({ schemaVersion: 1, generatedAt: '2026-08-12T00:00:30.000Z',
+        request: { backends: request.backends, track: request.track, levels: request.levelList,
+          runIndex: request.runIndex, parallelism: request.parallelism,
+          agentAdapter: request.agentAdapter,
+          packs: request.packIds, checks: request.checkKeys, image: request.image,
+          resultsDir: request.resultsDir, smoke: request.smoke },
+        ok: true, summary: { passed: 0, failed: 0, warnings: 0 }, checks: [] }),
+    });
+    let running = claimNextAttempt(initialized.state, { now: '2026-08-12T00:01:00.000Z',
+      admissionId: admission.id }).state;
+    running = claimNextAttempt(running, { now: '2026-08-12T00:01:01.000Z',
+      admissionId: admission.id }).state;
+    writeCampaignState(initialized.paths.state, plan, running);
+    assert.throws(() => reconcileCampaign(campaignPath, root, { rescue: () => {} }),
+      /neither private supervisor authority nor public clean recovery proof/);
+    const privateDir = join(root, '.private');
+    mkdirSync(privateDir);
+    const executions = running.attempts.filter(attempt => attempt.status === 'running')
+      .map(attempt => attempt.executions.at(-1));
+    for (const execution of executions) {
+      assert(execution);
+      writeFileSync(join(privateDir, `${execution.id}.supervisor.json`), '{}');
+    }
+    const rescued: unknown[] = [];
+    const state = reconcileCampaign(campaignPath, root,
+      { rescue: supervisor => { rescued.push(supervisor); } });
+    assert.equal(rescued.length, 2);
+    assert.equal(state.summary.invalid, 2);
+    assert(state.attempts.filter(attempt => attempt.status === 'invalid')
+      .every(attempt => attempt.executions[0]!.outcome === 'scheduler_interrupted'));
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('reconciliation accepts the clean public proof left by authenticated recovery', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-recovered-'));
+  try {
+    const plan = examplePlan();
+    const initialized = initializeCampaignDirectory(plan, root,
+      { now: '2026-08-12T00:00:00.000Z' });
+    const admission = runCampaignAdmission(plan, root, { codingContainers: () => [],
+      env: {}, now: '2026-08-12T00:00:30.000Z', uuid: () => 'recovered',
+      preflight: request => ({ schemaVersion: 1, generatedAt: '2026-08-12T00:00:30.000Z',
+        request: { backends: request.backends, track: request.track, levels: request.levelList,
+          runIndex: request.runIndex, parallelism: request.parallelism,
+          agentAdapter: request.agentAdapter,
+          packs: request.packIds, checks: request.checkKeys, image: request.image,
+          resultsDir: request.resultsDir, smoke: request.smoke },
+        ok: true, summary: { passed: 0, failed: 0, warnings: 0 }, checks: [] }),
+    });
+    const running = claimNextAttempt(initialized.state, { now: '2026-08-12T00:01:00.000Z',
+      admissionId: admission.id }).state;
+    writeCampaignState(initialized.paths.state, plan, running);
+    const execution = running.attempts[0]!.executions[0]!;
+    const output = join(root, execution.output);
+    mkdirSync(output, { recursive: true });
+    const attempt = running.attempts[0]!;
+    writeRunJson(join(output, 'run.json'), { id: 'recovered-run',
+      parentAttemptId: attempt.plan.id, backend: attempt.plan.stack,
+      backendLease: { runId: 'recovered-run', backend: attempt.plan.stack,
+        state: 'released' } });
+    writeArtifact(join(output, 'process.json'), { kind: 'campaign_process',
+      id: `${execution.id}-process`,
+      attempt: { id: execution.id, parentId: attempt.plan.id },
+      identities: emptyArtifactIdentities(),
+      payload: { schemaVersion: 1, executionId: execution.id, runIndex: execution.runIndex,
+        exitCode: 3, signal: null, timedOut: false, streams: null } });
+    writeArtifact(join(output, 'recovery.json'), { kind: 'recovery', id: 'recovered-run-recovery',
+      attempt: { id: 'recovered-run-recovery', parentId: 'recovered-run' },
+      identities: emptyArtifactIdentities({ stackAdapter: { id: attempt.plan.stack } }),
+      payload: { schemaVersion: 1, status: 'clean', runId: 'recovered-run',
+        backend: attempt.plan.stack, reason: null,
+        cleanup: { succeeded: true, retained: false },
+        resources: { backendState: 'released', buildContainer: { id: 'container-id',
+          name: 'container-name', running: false }, listenerProcesses: [],
+        locks: [{ key: 'slot:test', released: true }] },
+        instructions: ['No recovery action is required.'] } });
+    const state = reconcileCampaign(example, root, {
+      rescue: () => { throw new Error('private recovery must not run without private authority'); },
+    });
+    assert.equal(state.attempts[0]!.status, 'invalid');
+    assert.equal(state.attempts[0]!.executions[0]!.outcome, 'scheduler_interrupted');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('campaign admission covers every stack once per distinct agent adapter and writes typed evidence', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-admission-'));
+  try {
+    const plan = examplePlan();
+    const calls: PreflightRequest[] = [];
+    const admission = runCampaignAdmission(plan, root, { codingContainers: () => [],
+      env: {}, now: '2026-08-12T00:00:00.000Z', uuid: () => 'test',
+      preflight: request => {
+        calls.push(request);
+        return { schemaVersion: 1, generatedAt: '2026-08-12T00:00:00.000Z',
+          request: { backends: request.backends, track: request.track, levels: request.levelList,
+            runIndex: request.runIndex, parallelism: request.parallelism,
+            agentAdapter: request.agentAdapter,
+            packs: request.packIds, checks: request.checkKeys, image: request.image,
+            resultsDir: request.resultsDir, smoke: request.smoke },
+          ok: true, summary: { passed: 0, failed: 0, warnings: 0 }, checks: [] };
+      },
+    });
+    assert.equal(admission.payload.ok, true);
+    assert.deepEqual(admission.payload.runtime, plan.definition.runtime);
+    assert.equal(calls.length, 1);
+    assert.deepEqual([...calls[0]!.backends].sort(), ['mongodb', 'postgres', 'spacetime']);
+    assert.equal(new Set(calls[0]!.backends).size, 3);
+    assert.equal(calls[0]!.smoke, true);
+    assert.equal(readArtifact(admission.path,
+      { expectedKind: 'campaign_admission' }).payload.campaignSha256, plan.contentSha256);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('campaign admission accepts a modular level selection without legacy pack filters', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-modular-campaign-admission-'));
+  try {
+    const plan = compileCampaignFile(productBrief);
+    const calls: PreflightRequest[] = [];
+    const admission = runCampaignAdmission(plan, root, { codingContainers: () => [],
+      env: {}, now: '2026-08-12T00:00:00.000Z', uuid: () => 'modular',
+      preflight: request => {
+        calls.push(request);
+        return { schemaVersion: 1, generatedAt: '2026-08-12T00:00:00.000Z',
+          request: { backends: request.backends, track: request.track, levels: request.levelList,
+            runIndex: request.runIndex, parallelism: request.parallelism,
+            agentAdapter: request.agentAdapter,
+            packs: request.packIds, checks: request.checkKeys, image: request.image,
+            resultsDir: request.resultsDir, smoke: request.smoke },
+          ok: true, summary: { passed: 0, failed: 0, warnings: 0 }, checks: [] };
+      },
+    });
+    assert.equal(admission.payload.ok, true);
+    assert.equal(calls.length, 1);
+    assert.deepEqual(calls[0]!.packIds, []);
+    assert.deepEqual(calls[0]!.checkKeys, []);
+    const scope = calls[0]!.requestedScopes[0] as { levels: Array<{
+      selection: { schemaVersion: number } }> };
+    assert.equal(scope.levels[0]!.selection.schemaVersion, 3);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/campaign-runtime.test.ts b/tools/stack-bench/tests/campaign-runtime.test.ts
new file mode 100644
index 00000000000..559931ae0ab
--- /dev/null
+++ b/tools/stack-bench/tests/campaign-runtime.test.ts
@@ -0,0 +1,105 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { campaignExecutionEnvironment, campaignSlotEnvironment }
+  from '../src/campaigns/campaign-runtime.js';
+import { currentEngineIdentity } from '../src/evidence/artifacts.js';
+import { sha256 } from '../src/evidence/provenance.js';
+
+function frozenRuntime(root: string) {
+  const digests = {
+    controller: 'b'.repeat(64),
+    'build-sandbox': 'c'.repeat(64),
+    postgres: 'd'.repeat(64),
+    mongodb: 'e'.repeat(64),
+  };
+  const images = Object.entries(digests).map(([role, digest]) => ({
+    id: `stack-bench-${role}`,
+    role,
+    reference: `registry.example/stack-bench/${role}@sha256:${digest}`,
+    digest,
+    platform: 'linux/amd64',
+    sbomPath: `sbom/${role}.spdx.json`,
+  }));
+  const file = (path: string, role: string) => ({ path, role, sha256: 'f'.repeat(64), bytes: 1 });
+  const manifest = {
+    schemaVersion: 2,
+    id: 'stack-bench-v1',
+    version: '1.0.0',
+    state: 'candidate',
+    sourceRevision: 'a'.repeat(40),
+    sourceSha256: 'a'.repeat(64),
+    supportedRunner: { os: 'linux', architecture: 'amd64', stateRoot: '/var/lib/stack-bench',
+      networkMode: 'host', dockerSocket: true },
+    images,
+    files: [file('compose.yaml', 'compose'), file('deps.tar.zst', 'dependency'),
+      file('OPERATOR.md', 'operator-guide'), file('secrets.example', 'secrets-template'),
+      file('SUPPORT.md', 'support-policy'),
+      ...images.map(image => file(image.sbomPath, 'sbom'))],
+    outboundDestinations: [],
+    secrets: [],
+    signing: null,
+  };
+  const content = `${JSON.stringify(manifest, null, 2)}\n`;
+  const path = join(root, 'release.json');
+  writeFileSync(path, content);
+  return { path, manifest, runtime: {
+    releaseManifestSha256: sha256(content),
+    controllerImage: images.find(image => image.role === 'controller')!.reference,
+    buildImage: images.find(image => image.role === 'build-sandbox')!.reference,
+    platform: 'linux/amd64',
+  } };
+}
+
+test('parallel SpacetimeDB slots receive distinct dedicated host ports', () => {
+  assert.equal(campaignSlotEnvironment({}, 'spacetime', 0).STACK_BENCH_STDB_URI,
+    'http://127.0.0.1:3210');
+  assert.equal(campaignSlotEnvironment({}, 'spacetime', 7).STACK_BENCH_STDB_URI,
+    'http://127.0.0.1:3217');
+  assert.equal(campaignSlotEnvironment({ STACK_BENCH_STDB_URI: 'http://localhost:4100' },
+    'spacetime', 2).STACK_BENCH_STDB_URI, 'http://localhost:4102');
+  assert.equal(campaignSlotEnvironment({ KEEP: 'yes' }, 'postgres', 2).KEEP, 'yes');
+  assert.throws(() => campaignSlotEnvironment({ STACK_BENCH_STDB_URI: 'https://example.com' },
+    'spacetime', 1), /serverUri must use http|loopback/);
+});
+
+test('a frozen campaign proves its release and both runtime images before admission', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-runtime-'));
+  try {
+    const { path, manifest, runtime } = frozenRuntime(root);
+    const plan = { state: 'frozen', identities: { engine: currentEngineIdentity() },
+      definition: { runtime } };
+    const env = { STACK_BENCH_CONTROLLER_IMAGE: runtime.controllerImage,
+      STACK_BENCH_RELEASE_MANIFEST: path };
+    assert.equal(campaignExecutionEnvironment(plan, env).STACK_BENCH_IMAGE, runtime.buildImage);
+    const internalPlan = { state: 'frozen', identities: plan.identities, definition: { runtime: {
+      ...runtime, releaseManifestSha256: null,
+    } } };
+    assert.equal(campaignExecutionEnvironment(internalPlan, {
+      STACK_BENCH_CONTROLLER_IMAGE: runtime.controllerImage,
+    }).STACK_BENCH_IMAGE, runtime.buildImage);
+    assert.throws(() => campaignExecutionEnvironment(plan, { ...env,
+      STACK_BENCH_CONTROLLER_IMAGE: `registry.example/controller@sha256:${'1'.repeat(64)}` }),
+    /controller image does not match/);
+    assert.throws(() => campaignExecutionEnvironment({ ...plan,
+      identities: { engine: { ...plan.identities.engine, sha256: '0'.repeat(64) } } }, env),
+    /engine does not match/);
+    assert.throws(() => campaignExecutionEnvironment(plan, { ...env,
+      STACK_BENCH_IMAGE: `registry.example/build@sha256:${'2'.repeat(64)}` }), /conflicts/);
+    const wrongImages = structuredClone(manifest);
+    const wrongController = wrongImages.images.find(image => image.role === 'controller')!;
+    wrongController.digest = '1'.repeat(64);
+    wrongController.reference = `registry.example/stack-bench/controller@sha256:${wrongController.digest}`;
+    const wrongContent = `${JSON.stringify(wrongImages, null, 2)}\n`;
+    writeFileSync(path, wrongContent);
+    assert.throws(() => campaignExecutionEnvironment({ state: 'frozen', identities: plan.identities,
+      definition: {
+      runtime: { ...runtime, releaseManifestSha256: sha256(wrongContent) },
+    } }, env), /release manifest images do not match/);
+    writeFileSync(path, '{}\n');
+    assert.throws(() => campaignExecutionEnvironment(plan, env), /release manifest does not match/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/campaign-scheduler.contract.ts b/tools/stack-bench/tests/campaign-scheduler.contract.ts
new file mode 100644
index 00000000000..45de0998e45
--- /dev/null
+++ b/tools/stack-bench/tests/campaign-scheduler.contract.ts
@@ -0,0 +1,49 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, rmSync, unlinkSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { compileCampaignFile } from '../src/campaigns/campaign-compiler.js';
+import { claimNextAttempt, initializeCampaignDirectory, readCampaignState, writeCampaignState }
+  from '../src/campaigns/campaign-scheduler.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+const example = compileCampaignFile(join(STACK_BENCH_ROOT, 'appliance',
+  'campaign.example.json'));
+
+test('campaign directory initialization is identity-bound and resumes exact state', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-state-'));
+  try {
+    const campaign = structuredClone(example);
+    const initialized = initializeCampaignDirectory(campaign, root,
+      { now: '2026-08-12T00:00:00.000Z' });
+    const claimed = claimNextAttempt(initialized.state, { now: '2026-08-12T00:01:00.000Z',
+      admissionId: 'admission-1' });
+    writeCampaignState(initialized.paths.state, campaign, claimed.state);
+    const resumed = readCampaignState(root);
+    assert.equal(resumed.plan.contentSha256, campaign.contentSha256);
+    assert.equal(resumed.state.attempts[0]?.executions[0]?.status, 'running');
+    assert.equal(initializeCampaignDirectory(campaign, root).state.summary.running, 1);
+    assert.throws(() => initializeCampaignDirectory({ ...campaign,
+      contentSha256: 'a'.repeat(64) }, root), /content identity/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('interrupted initialization recreates only missing state from the stored plan', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-campaign-init-recovery-'));
+  try {
+    const campaign = structuredClone(example);
+    const initialized = initializeCampaignDirectory(campaign, root,
+      { now: '2026-08-12T00:00:00.000Z' });
+    unlinkSync(initialized.paths.state);
+    const recovered = initializeCampaignDirectory(campaign, root,
+      { now: '2026-08-12T00:01:00.000Z' });
+    assert.equal(recovered.state.status, 'prepared');
+    assert.equal(recovered.state.summary.executions, 0);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/campaign-scheduler.test.ts b/tools/stack-bench/tests/campaign-scheduler.test.ts
new file mode 100644
index 00000000000..4d2691e4194
--- /dev/null
+++ b/tools/stack-bench/tests/campaign-scheduler.test.ts
@@ -0,0 +1,330 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+import { compileCampaignFile, validateCampaignDefinition }
+  from '../src/campaigns/campaign-compiler.js';
+import { addCampaignExtensions, claimNextAttempt, classifyCampaignExecution, createCampaignState,
+  finishCampaignExecution, markInterruptedExecution, scheduleDependencyContinuation,
+  validateCampaignState }
+  from '../src/campaigns/campaign-scheduler.js';
+import type { CampaignClaim, CampaignState } from '../src/campaigns/campaign-scheduler.js';
+
+const example = join(STACK_BENCH_ROOT, 'appliance', 'campaign.example.json');
+const compiledExample = compileCampaignFile(example);
+const initialState = createCampaignState(compiledExample,
+  { now: '2026-08-12T00:00:00.000Z' });
+const plan = () => structuredClone(compiledExample);
+const prepared = () => structuredClone(initialState);
+
+function attemptAt(state: CampaignState, index = 0) {
+  const attempt = state.attempts[index];
+  assert(attempt);
+  return attempt;
+}
+
+function executionAt(state: CampaignState, attemptIndex = 0, executionIndex = 0) {
+  const execution = attemptAt(state, attemptIndex).executions[executionIndex];
+  assert(execution);
+  return execution;
+}
+
+function retryAt(state: CampaignState, attemptIndex = 0, executionIndex = 0) {
+  const retry = executionAt(state, attemptIndex, executionIndex).retry;
+  assert(retry);
+  return retry;
+}
+
+function requireClaim(result: { state: CampaignState; claim: CampaignClaim | null;
+  capacityFull: boolean }) {
+  assert.ok(result.claim);
+  return { ...result, claim: result.claim };
+}
+
+const claimed = () => requireClaim(claimNextAttempt(prepared(), {
+  now: '2026-08-12T00:01:00.000Z', admissionId: 'admission-1',
+}));
+
+test('provider failures remain distinct from harness failures in campaign state', () => {
+  assert.deepEqual(classifyCampaignExecution({ exitCode: 1, run: { outcome: {
+    kind: 'provider_failure', reason: 'provider-connection-error',
+  } } }), { status: 'invalid', outcome: 'provider_failure',
+    reason: 'attempt process exited 1: provider-connection-error' });
+});
+
+test('a contaminated run remains contaminated when its process exits nonzero', () => {
+  assert.deepEqual(classifyCampaignExecution({ exitCode: 4, run: {
+    contaminated: true,
+    contamination: { verdict: 'scores unusable' },
+    outcome: { kind: 'ungraded' },
+  } }), { status: 'invalid', outcome: 'contaminated', reason: 'scores unusable' });
+});
+
+test('a targeted dependency grant schedules one exact completed attempt for resume', () => {
+  let state = prepared();
+  attemptAt(state).plan.mode = { id: 'dependency', version: '3.2.0' };
+  for (let index = 0; index < state.attempts.length; index += 1) {
+    const minute = String(index * 2 + 1).padStart(2, '0');
+    const completedMinute = String(index * 2 + 2).padStart(2, '0');
+    const claimedAttempt = requireClaim(claimNextAttempt(state, {
+      now: `2026-08-12T00:${minute}:00.000Z`, admissionId: 'admission-1',
+    }));
+    state = finishCampaignExecution(claimedAttempt.state, claimedAttempt.claim.executionId,
+      { exitCode: 0, run: { outcome: { kind: 'passed' } } },
+      { now: `2026-08-12T00:${completedMinute}:00.000Z` });
+  }
+  assert.equal(state.status, 'completed');
+  const attempt = attemptAt(state);
+  const priorOutput = executionAt(state).output;
+  state = scheduleDependencyContinuation(state, attempt.plan.id, {
+    grantId: 'operator-grant-1', level: 1, nodeIds: ['catalog', 'accounts'],
+    repairs: 2, stateSha256: 'a'.repeat(64),
+    resumeFrom: `continuations/${attempt.plan.id}/operator-grant-1`,
+  }, { now: '2026-08-12T00:20:00.000Z' });
+  assert.equal(state.status, 'prepared');
+  assert.deepEqual(executionAt(state).continuation?.nodeIds,
+    ['accounts', 'catalog']);
+
+  const resumed = requireClaim(claimNextAttempt(state, {
+    now: '2026-08-12T00:21:00.000Z', admissionId: 'admission-2',
+  }));
+  assert.equal(resumed.claim.resumeFrom,
+    `continuations/${attempt.plan.id}/operator-grant-1`);
+  assert.deepEqual(resumed.claim.priorOutputs, [priorOutput]);
+  assert.equal(executionAt(resumed.state).status, 'completed');
+  assert.equal(executionAt(resumed.state, 0, 1).status, 'running');
+  const wrongMode = structuredClone(resumed.state);
+  attemptAt(wrongMode).plan.mode = { id: 'sequential', version: '1.0.0' };
+  assert.throws(() => validateCampaignState(wrongMode),
+    /continuation requires a completed dependency execution/);
+});
+
+test('dependency continuation scheduling rejects non-terminal and duplicate requests', () => {
+  const state = prepared();
+  const attempt = attemptAt(state);
+  attempt.plan.mode = { id: 'dependency', version: '3.2.0' };
+  assert.throws(() => scheduleDependencyContinuation(state, attempt.plan.id, {
+    grantId: 'grant', level: 1, nodeIds: ['accounts'], repairs: 1,
+    stateSha256: 'a'.repeat(64),
+    resumeFrom: `continuations/${attempt.plan.id}/grant`,
+  }), /completed campaign/);
+});
+
+test('campaign extension sources are attached before work is claimed', () => {
+  const state = prepared();
+  const extensions = Object.fromEntries(state.attempts.map(attempt => {
+    attempt.plan.mode = { id: 'dependency', version: '3.2.0' };
+    attempt.plan.levels = [1, 2];
+    return [attempt.plan.id, {
+      fromDepth: 1,
+      source: `.private/extensions/${attempt.plan.id}/source`,
+      sourceSha256: 'a'.repeat(64),
+      sourceFiles: 3,
+      parent: { campaignId: 'parent', campaignSha256: 'b'.repeat(64),
+        attemptId: `parent-${attempt.plan.id}`, executionId: 'execution-1',
+        runId: 'run-1', runSha256: 'c'.repeat(64) },
+    }];
+  }));
+  const extended = addCampaignExtensions(state, extensions,
+    { now: '2026-08-12T00:01:00.000Z' });
+  const claimed = requireClaim(claimNextAttempt(extended,
+    { now: '2026-08-12T00:02:00.000Z', admissionId: 'admission-1' }));
+  assert.equal(claimed.claim.extension?.fromDepth, 1);
+  assert.equal(claimed.claim.extension?.sourceSha256, 'a'.repeat(64));
+});
+
+function parallelPlan(parallelism = 3, repetitions = 1) {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-parallel-plan-'));
+  const path = join(root, 'campaign.json');
+  const definition = validateCampaignDefinition(JSON.parse(readFileSync(example, 'utf8')),
+    { source: example });
+  definition.parallelism = parallelism;
+  definition.repetitions = repetitions;
+  writeFileSync(path, `${JSON.stringify(definition, null, 2)}\n`);
+  try { return compileCampaignFile(path); }
+  finally { rmSync(root, { recursive: true, force: true }); }
+}
+
+test('serial campaign state materializes every attempt and enforces its one-slot capacity', () => {
+  const campaign = plan();
+  const initial = prepared();
+  assert.deepEqual(initial.summary, { completed: 0, executions: 0, invalid: 0, pending: 9,
+    running: 0, total: 9 });
+  const claimed = requireClaim(claimNextAttempt(initial, {
+    now: '2026-08-12T00:01:00.000Z', admissionId: 'admission-1',
+  }));
+  const firstPlan = campaign.attempts[0];
+  assert(firstPlan);
+  assert.equal(claimed.claim.attempt.id, firstPlan.id);
+  assert.equal(claimed.claim.executionId, `${firstPlan.id}-execution1`);
+  assert.equal(claimed.state.summary.running, 1);
+  const full = claimNextAttempt(claimed.state, { admissionId: 'admission-1' });
+  assert.equal(full.claim, null);
+  assert.equal(full.capacityFull, true);
+});
+
+test('parallel campaign claims unique slots and reuses a slot only after completion', () => {
+  const campaign = parallelPlan(3, 2);
+  let state = createCampaignState(campaign, { now: '2026-08-12T00:00:00.000Z' });
+  const claims: CampaignClaim[] = [];
+  for (let index = 0; index < 3; index += 1) {
+    const next = requireClaim(claimNextAttempt(state, {
+      now: `2026-08-12T00:0${index + 1}:00.000Z`, admissionId: 'admission-1',
+    }));
+    state = next.state;
+    claims.push(next.claim);
+  }
+  assert.deepEqual(claims.map(claim => claim.runIndex), [0, 1, 2]);
+  assert.equal(state.summary.running, 3);
+  assert.equal(claimNextAttempt(state, { admissionId: 'admission-1' }).capacityFull, true);
+  const releasedClaim = claims[1];
+  assert(releasedClaim);
+  state = finishCampaignExecution(state, releasedClaim.executionId,
+    { exitCode: 0, run: { outcome: { kind: 'passed' } } },
+    { now: '2026-08-12T00:05:00.000Z' });
+  const reused = requireClaim(claimNextAttempt(state, {
+    now: '2026-08-12T00:06:00.000Z', admissionId: 'admission-1',
+  }));
+  assert.equal(reused.claim.runIndex, 1);
+  assert.equal(reused.capacityFull, false);
+});
+
+test('invalid executions remain visible and retries append rather than overwrite', () => {
+  const campaign = plan();
+  const first = claimNextAttempt(createCampaignState(campaign, { now: '2026-08-12T00:00:00.000Z' }),
+    { now: '2026-08-12T00:01:00.000Z', admissionId: 'admission-1' }).state;
+  const executionId = executionAt(first).id;
+  const retryable = finishCampaignExecution(first, executionId, {
+    exitCode: 1, run: { outcome: { kind: 'harness_failure', reason: 'provider overloaded' } },
+    retryAuthority: { transient: true, recoveryClean: true, budgetKnown: true,
+      cause: 'provider-http-503' },
+  }, { retries: 1, retryOn: ['harness_failure'], now: '2026-08-12T00:02:00.000Z' });
+  assert.equal(attemptAt(retryable).status, 'pending');
+  assert.equal(executionAt(retryable).status, 'invalid');
+  assert.deepEqual(retryAt(retryable), {
+    requested: true, transient: true, recoveryClean: true, budgetKnown: true, scheduled: true,
+    cause: 'provider-http-503', reason: 'transient failure has clean recovery proof',
+  });
+  const second = requireClaim(claimNextAttempt(retryable, {
+    now: '2026-08-12T00:03:00.000Z', admissionId: 'admission-1',
+  }));
+  const firstPlan = campaign.attempts[0];
+  assert(firstPlan);
+  const priorExecution = executionAt(retryable);
+  assert.equal(second.claim.executionId, `${firstPlan.id}-execution2`);
+  assert.equal(second.claim.resumeFrom, priorExecution.output);
+  assert.deepEqual(second.claim.priorOutputs, [priorExecution.output]);
+  const complete = finishCampaignExecution(second.state, second.claim.executionId, {
+    exitCode: 0, run: { outcome: { kind: 'passed' } },
+  }, { retries: 1, retryOn: ['harness_failure'], now: '2026-08-12T00:04:00.000Z' });
+  assert.equal(attemptAt(complete).status, 'completed');
+  assert.deepEqual(attemptAt(complete).executions.map(item => item.status), ['invalid', 'completed']);
+  assert.equal(complete.summary.executions, 2);
+});
+
+test('a retry is blocked when prior provider spend is unknown', () => {
+  const active = claimed();
+  const state = finishCampaignExecution(active.state, active.claim.executionId, {
+    exitCode: 1,
+    run: { outcome: { kind: 'harness_failure', reason: 'provider overloaded' } },
+    retryAuthority: { transient: true, recoveryClean: true, budgetKnown: false,
+      cause: 'usage-receipt-missing' },
+  }, { retries: 1, retryOn: ['harness_failure'], now: '2026-08-12T00:04:00.000Z' });
+  assert.equal(attemptAt(state).status, 'invalid');
+  assert.equal(retryAt(state).scheduled, false);
+  assert.equal(retryAt(state).reason, 'prior provider spend is unknown');
+});
+
+test('an inconclusive measurement requires operator review instead of spending another attempt', () => {
+  const active = claimed();
+  const state = finishCampaignExecution(active.state, active.claim.executionId, {
+    exitCode: 0, run: { outcome: { kind: 'inconclusive',
+      inconclusive: ['ecommerce.spec.concurrency-safety.duplicate-checkout.203b'] } },
+  }, { retries: 1, retryOn: ['inconclusive'], now: '2026-08-12T00:04:00.000Z' });
+  assert.equal(attemptAt(state).status, 'invalid');
+  assert.equal(executionAt(state).status, 'invalid');
+  assert.equal(executionAt(state).outcome, 'inconclusive');
+  assert.match(executionAt(state).reason ?? '', /pass-or-fail/);
+  assert.equal(retryAt(state).scheduled, false);
+  assert.match(retryAt(state).reason, /not explicitly transient/);
+});
+
+test('deterministic harness failures and unproven cleanup never retry', () => {
+  const deterministic = claimed();
+  const stopped = finishCampaignExecution(deterministic.state, deterministic.claim.executionId, {
+    exitCode: 2, run: { outcome: { kind: 'harness_failure',
+      reason: 'invalid campaign configuration' } },
+  }, { retries: 3, retryOn: ['harness_failure'], now: '2026-08-12T00:04:00.000Z' });
+  assert.equal(attemptAt(stopped).status, 'invalid');
+  assert.deepEqual(retryAt(stopped), {
+    requested: true, transient: false, recoveryClean: false, budgetKnown: false, scheduled: false,
+    cause: null, reason: 'failure is not explicitly transient',
+  });
+
+  const dirty = claimed();
+  const unproven = finishCampaignExecution(dirty.state, dirty.claim.executionId, {
+    exitCode: 1, run: { outcome: { kind: 'harness_failure', reason: 'provider overloaded' } },
+    retryAuthority: { transient: true, recoveryClean: false, cause: 'provider-http-503' },
+  }, { retries: 3, retryOn: ['harness_failure'], now: '2026-08-12T00:04:00.000Z' });
+  assert.equal(attemptAt(unproven).status, 'invalid');
+  assert.equal(retryAt(unproven).scheduled, false);
+  assert.equal(retryAt(unproven).reason, 'clean recovery was not proven');
+});
+
+test('a plausible run artifact cannot hide a failed attempt process', () => {
+  const active = claimed();
+  const state = finishCampaignExecution(active.state, active.claim.executionId, {
+    exitCode: 7, run: { outcome: { kind: 'passed' } },
+  }, { now: '2026-08-12T00:04:00.000Z' });
+  assert.equal(attemptAt(state).status, 'invalid');
+  assert.equal(executionAt(state).outcome, 'harness_failure');
+  assert.match(executionAt(state).reason ?? '', /exited 7/);
+  const explained = claimed();
+  const explainedState = finishCampaignExecution(explained.state, explained.claim.executionId, {
+    exitCode: 9, run: { outcome: { kind: 'harness_failure', reason: 'cleanup was quarantined' } },
+  }, { now: '2026-08-12T00:04:00.000Z' });
+  assert.match(executionAt(explainedState).reason ?? '',
+    /exited 9: cleanup was quarantined/);
+});
+
+test('interrupted and missing-artifact executions fail closed without invented results', () => {
+  const initial = claimed().state;
+  const executionId = executionAt(initial).id;
+  const interrupted = markInterruptedExecution(initial, executionId,
+    { now: '2026-08-12T00:05:00.000Z' });
+  assert.equal(attemptAt(interrupted).status, 'invalid');
+  assert.equal(executionAt(interrupted).outcome, 'scheduler_interrupted');
+
+  const other = claimed().state;
+  const missing = finishCampaignExecution(other, executionAt(other).id,
+    { exitCode: 0, run: null }, { now: '2026-08-12T00:06:00.000Z' });
+  assert.equal(executionAt(missing).outcome, 'missing_artifact');
+  assert.equal(attemptAt(missing).status, 'invalid');
+});
+
+test('malformed state and inconsistent summaries never become resumable', () => {
+  const state = prepared();
+  state.status = 'completed';
+  assert.throws(() => validateCampaignState(state), /summary or status/);
+  const running = claimNextAttempt(prepared(), { admissionId: 'admission-1' }).state;
+  const runningAttempt = attemptAt(running, 1);
+  runningAttempt.status = 'running';
+  runningAttempt.executions.push({ ...executionAt(running),
+    id: `${runningAttempt.plan.id}-execution1`,
+    output: `attempts/${runningAttempt.plan.id}/execution-1` });
+  assert.throws(() => validateCampaignState(running), /runIndex is already in use/);
+  const wrongPath = claimNextAttempt(prepared(), { admissionId: 'admission-1' }).state;
+  executionAt(wrongPath).output = '../../outside';
+  assert.throws(() => validateCampaignState(wrongPath), /exact execution directory/);
+  const historicalRunning = claimed().state;
+  const historicalAttempt = attemptAt(historicalRunning);
+  historicalAttempt.executions.push({
+    ...executionAt(historicalRunning),
+    id: `${historicalAttempt.plan.id}-execution2`, ordinal: 2,
+    output: `attempts/${historicalAttempt.plan.id}/execution-2`,
+  });
+  assert.throws(() => validateCampaignState(historicalRunning), /historical but not invalid/);
+});
diff --git a/tools/stack-bench/tests/cart-quantity-mutations.mutation.ts b/tools/stack-bench/tests/cart-quantity-mutations.mutation.ts
new file mode 100644
index 00000000000..199789e3d40
--- /dev/null
+++ b/tools/stack-bench/tests/cart-quantity-mutations.mutation.ts
@@ -0,0 +1,122 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import ts from 'typescript';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compileScenarioDefinition } from '../src/composition/definition-compiler.js';
+import { mutationScenario, mutationTargetKeys,
+  readMutationManifest, validateMutationDefinitions } from '../src/evidence/mutation-analysis.js';
+import { loadReferenceRegistry, prepareReferenceFixtureSource,
+  selectReferenceFixture } from '../src/references/reference-fixtures.js';
+
+const ROOT = STACK_BENCH_ROOT;
+const scenarioPath = 'tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.1.json';
+const cases = [
+  {
+    backend: 'mongodb',
+    fixtureSha256: 'feeaf484f5c5d2eae6f61b192e3e50b0a7e6da85e2f761685e33261708acf8c6',
+    manifest: 'mongodb-ecommerce-2.0.1.json',
+    mutationId: 'concurrent-cart-add-does-not-increment',
+  },
+  {
+    backend: 'postgres',
+    fixtureSha256: 'e461967ff8b99394c278e6d382e455a7fc3086c88016543fa668baf808baec0d',
+    manifest: 'postgres-ecommerce-2.0.1.json',
+    mutationId: 'progression-concurrent-cart-line-does-not-increment',
+  },
+  {
+    backend: 'spacetime',
+    fixtureSha256: '58a193d61e02eac8e2c4801dc4cefb78db42468515a452a17e2544f2132148ce',
+    manifest: 'spacetime-ecommerce-2.0.1.json',
+    mutationId: 'existing-cart-line-does-not-increment',
+  },
+];
+
+function prepareReferenceSource(args: { backend: string; track: string; level: number;
+  recipe: string; app: string }) {
+  const fixture = selectReferenceFixture(loadReferenceRegistry(), args);
+  const prepared = prepareReferenceFixtureSource(fixture, args.app);
+  return { fixture, sourceSha256: prepared.sha256 };
+}
+
+function load(entry: typeof cases[number]) {
+  return readMutationManifest(join(ROOT, 'grader', 'mutations', entry.manifest));
+}
+
+test('the 203a mutation scenario compiles and owns the concurrent quantity assertion', () => {
+  const scenario = compileScenarioDefinition(
+    JSON.parse(readFileSync(join(ROOT, scenarioPath), 'utf8')),
+    { source: scenarioPath, expectedLevel: 1 },
+  );
+  const feature = scenario.features.find(candidate => candidate.id === 203);
+  assert.ok(feature);
+  const criterion = feature.criteria.find(candidate => candidate.id === '203a');
+  assert.ok(criterion);
+  assert.deepEqual(criterion.steps.map(step => step.do), ['expect', 'expectNumber']);
+  const secondStep = criterion.steps[1];
+  assert.ok(secondStep);
+  assert.equal(secondStep.equals, 2);
+});
+
+for (const entry of cases) {
+  test(`${entry.backend} has one exact, source-bound 203a increment defect`, () => {
+    const work = mkdtempSync(join(tmpdir(), `stack-bench-203a-${entry.backend}-`));
+    try {
+      const manifest = load(entry);
+      const app = join(work, 'app');
+      const prepared = prepareReferenceSource({
+        backend: entry.backend,
+        track: 'ecommerce',
+        level: 1,
+        recipe: 'ecommerce.sequential-l1@2.5.0',
+        app,
+      });
+      assert.equal(prepared.fixture.id, `ecommerce-reference-${entry.backend}`);
+      assert.equal(prepared.sourceSha256, entry.fixtureSha256);
+      assert.equal(manifest.schemaVersion, 2);
+      assert.equal(manifest.status, 'candidate');
+      assert.equal(manifest.backend, entry.backend);
+      assert.equal(manifest.track, 'ecommerce');
+      assert.equal(manifest.level, undefined);
+      assert.equal(manifest.fixtureSha256, prepared.sourceSha256);
+      assert.deepEqual(validateMutationDefinitions(manifest.mutations, {
+        defaultScenario: manifest.scenario,
+        requireScenario: true,
+      }).issues, []);
+      const mutation = manifest.mutations.find(candidate =>
+        candidate.id === entry.mutationId);
+      assert.ok(mutation);
+      assert.equal(mutationScenario(manifest, mutation), scenarioPath);
+      assert.equal(mutation.id, entry.mutationId);
+      assert.deepEqual(mutationTargetKeys(mutation), [
+        'ecommerce.spec.concurrency-safety.duplicate-checkout.203a',
+      ]);
+      assert.equal(mutation.edits.length, 1);
+
+      assert.ok(mutation.file);
+      const source = readFileSync(join(app, mutation.file), 'utf8');
+      for (const edit of mutation.edits) {
+          assert.equal(source.split(edit.find).length - 1, 1,
+            `${mutation.id} anchor must match exactly once`);
+          const mutated = source.replace(edit.find, edit.replace);
+          assert.equal(mutated.includes(edit.find), false,
+            `${mutation.id} must remove its exact correct behavior`);
+          assert.equal(mutated.includes(edit.replace), true,
+            `${mutation.id} must install its declared defect`);
+          const transpiled = ts.transpileModule(mutated, {
+            compilerOptions: { module: ts.ModuleKind.ESNext, target: ts.ScriptTarget.ES2022 },
+            fileName: mutation.file,
+            reportDiagnostics: true,
+          });
+          assert.deepEqual((transpiled.diagnostics ?? [])
+            .filter(diagnostic => diagnostic.category === ts.DiagnosticCategory.Error)
+            .map(diagnostic => ts.flattenDiagnosticMessageText(diagnostic.messageText, '\n')), []);
+      }
+    } finally {
+      rmSync(work, { recursive: true, force: true });
+    }
+  });
+}
diff --git a/tools/stack-bench/tests/check-evidence.test.ts b/tools/stack-bench/tests/check-evidence.test.ts
new file mode 100644
index 00000000000..4b0ae8ece05
--- /dev/null
+++ b/tools/stack-bench/tests/check-evidence.test.ts
@@ -0,0 +1,104 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import {
+  CHECK_EVIDENCE_DISPOSITIONS,
+  createCheckEvidence,
+  criterionEvidence,
+  evidenceDisposition,
+  evidenceIsApplicationFailure,
+  evidenceIsMeasured,
+  evidenceIsRepairable,
+  evidencePassed,
+  validateCheckEvidence,
+  type CheckEvidence,
+  type CheckEvidenceStatus,
+} from '../src/evidence/check-evidence.js';
+import {
+  evidenceStatusLabel,
+  renderEvidenceConsoleLine,
+} from '../src/evidence/evidence-presentation.js';
+
+type EvidenceInput = Parameters<typeof createCheckEvidence>[0];
+
+function evidence(overrides: Partial<EvidenceInput> = {}): CheckEvidence {
+  return createCheckEvidence({
+    status: 'failed',
+    code: 'application_failure',
+    phase: 'assertion',
+    summary: 'the message is presentation, not protocol',
+    startedAtMs: 10,
+    completedAtMs: 15,
+    ...overrides,
+  });
+}
+
+test('check evidence validates typed status', () => {
+  const value = evidence({ status: 'harness_failure', code: 'browser_failure' });
+  assert.equal(validateCheckEvidence(value), value);
+  assert.equal(evidenceIsMeasured(value), false);
+});
+
+test('criterion verdict ignores wording when typed evidence exists', () => {
+  const criterion = {
+    id: 'works',
+    evidence: evidence({ status: 'passed', code: 'completed', summary: 'anything at all' }),
+  };
+  assert.equal(criterionEvidence(criterion).status, 'passed');
+});
+
+test('criteria without typed evidence are rejected', () => {
+  const legacyCriterion = { id: 'old', passed: false, detail: 'INCONCLUSIVE: unavailable' };
+  assert.throws(() => criterionEvidence(legacyCriterion), /evidence is required/);
+});
+
+test('unknown fields and inconsistent timing are rejected', () => {
+  const unknown = { ...evidence(), surprise: true };
+  assert.throws(() => validateCheckEvidence(unknown), /surprise is unknown/);
+  const badTiming = evidence();
+  badTiming.timing.durationMs = 99;
+  assert.throws(() => validateCheckEvidence(badTiming), /does not match/);
+});
+
+test('one immutable status table owns verdict, outcome and repair semantics', () => {
+  assert.deepEqual(Object.fromEntries(Object.entries(CHECK_EVIDENCE_DISPOSITIONS)
+    .map(([status, disposition]) => [status, {
+      label: disposition.label,
+      outcomeKind: disposition.outcomeKind,
+      passed: disposition.passed,
+      measured: disposition.measured,
+      repairable: disposition.repairable,
+    }])), {
+    passed: { label: 'PASS', outcomeKind: 'passed', passed: true, measured: true, repairable: false },
+    failed: { label: 'FAIL', outcomeKind: 'app_failure', passed: false, measured: true, repairable: true },
+    inconclusive: { label: 'INCONCLUSIVE', outcomeKind: 'inconclusive', passed: false,
+      measured: false, repairable: false },
+    harness_failure: { label: 'HARNESS FAILURE', outcomeKind: 'harness_failure', passed: false,
+      measured: false, repairable: false },
+  });
+  assert.ok(Object.isFrozen(CHECK_EVIDENCE_DISPOSITIONS));
+  assert.ok(Object.values(CHECK_EVIDENCE_DISPOSITIONS).every(Object.isFrozen));
+});
+
+test('all semantic helpers and renderers obey typed status, never diagnostic wording', () => {
+  const misleading = evidence({ status: 'failed', summary: 'PASS: everything is wonderful' });
+  assert.equal(evidenceDisposition(misleading).outcomeKind, 'app_failure');
+  assert.equal(evidencePassed(misleading), false);
+  assert.equal(evidenceIsMeasured(misleading), true);
+  assert.equal(evidenceIsApplicationFailure(misleading), true);
+  assert.equal(evidenceIsRepairable(misleading), true);
+  assert.equal(evidenceStatusLabel(misleading), 'FAIL');
+  assert.match(renderEvidenceConsoleLine(misleading, 'feature/check'), /^FAIL feature\/check/);
+
+  const unavailable = evidence({ status: 'harness_failure', code: 'browser_failure',
+    summary: 'FAILED: blame the generated app' });
+  assert.equal(evidenceDisposition(unavailable).outcomeKind, 'harness_failure');
+  assert.equal(evidenceIsMeasured(unavailable), false);
+  assert.equal(evidenceIsRepairable(unavailable), false);
+  assert.equal(evidenceStatusLabel(unavailable), 'HARNESS FAILURE');
+});
+
+test('unknown status cannot fall through to a default classification', () => {
+  assert.throws(() => evidenceDisposition('mystery' as CheckEvidenceStatus), /status is invalid/);
+  assert.throws(() => evidenceStatusLabel({} as CheckEvidence), /status is invalid/);
+});
diff --git a/tools/stack-bench/tests/claude-terminal-recovery.test.ts b/tools/stack-bench/tests/claude-terminal-recovery.test.ts
new file mode 100644
index 00000000000..e9a4263dcd7
--- /dev/null
+++ b/tools/stack-bench/tests/claude-terminal-recovery.test.ts
@@ -0,0 +1,234 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { recoverClaudeTerminalResult, runTranscriptAwareProcess,
+  snapshotClaudeTranscripts } from '../src/agents/claude-terminal-recovery.js';
+
+const sessionId = '950df556-38bb-429c-aee9-1af4a00a6c7a';
+interface AssistantOptions {
+  text?: string;
+  stop?: string;
+  request?: string;
+  model?: string;
+}
+
+const assistant = ({ text = 'FIX_COMPLETE', stop = 'end_turn', request = 'request-1',
+  model = 'claude-sonnet-5' }: AssistantOptions = {}) => ({
+  type: 'assistant', isSidechain: false, sessionId, requestId: request,
+  message: { id: `message-${request}`, model, stop_reason: stop,
+    content: [{ type: 'text', text }], usage: {
+      input_tokens: 10, output_tokens: 20, cache_creation_input_tokens: 30,
+      cache_read_input_tokens: 40,
+      cache_creation: { ephemeral_5m_input_tokens: 30, ephemeral_1h_input_tokens: 0 },
+    } },
+});
+
+test('terminal recovery reads only records appended by the active invocation', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-terminal-'));
+  try {
+    const transcript = join(root, `${sessionId}.jsonl`);
+    writeFileSync(transcript, `${JSON.stringify(assistant({ request: 'old' }))}\n`);
+    const snapshot = snapshotClaudeTranscripts(root);
+    writeFileSync(transcript, `${JSON.stringify(assistant())}\n`, { flag: 'a' });
+    const result = recoverClaudeTerminalResult({ directory: root, snapshot,
+      marker: 'FIX_COMPLETE', model: 'claude-sonnet-5', resumeSession: sessionId });
+    assert(result, 'the active transcript must recover a result');
+    assert.equal(result.session_id, sessionId);
+    assert.equal(result.result, 'FIX_COMPLETE');
+    assert.equal(result.num_turns, 1);
+    assert.deepEqual(result.usage, { input_tokens: 10, output_tokens: 20,
+      cache_creation_input_tokens: 30, cache_read_input_tokens: 40 });
+    assert.equal(result.total_cost_usd, 0.000303);
+    assert.equal(result.terminal_recovery.costSource, 'transcript-usage');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('terminal recovery rejects old markers, tool turns, sidechains, and unknown pricing', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-terminal-'));
+  try {
+    const transcript = join(root, `${sessionId}.jsonl`);
+    writeFileSync(transcript, `${JSON.stringify(assistant())}\n`);
+    const snapshot = snapshotClaudeTranscripts(root);
+    writeFileSync(transcript, [
+      JSON.stringify(assistant({ stop: 'tool_use', request: 'tool' })),
+      JSON.stringify({ ...assistant({ request: 'sidechain' }), isSidechain: true }),
+    ].join('\n') + '\n', { flag: 'a' });
+    assert.equal(recoverClaudeTerminalResult({ directory: root, snapshot,
+      marker: 'FIX_COMPLETE', model: 'claude-sonnet-5', resumeSession: sessionId }), null);
+    writeFileSync(transcript,
+      `${JSON.stringify(assistant({ request: 'done', model: 'claude-unknown' }))}\n`, { flag: 'a' });
+    assert.throws(() => recoverClaudeTerminalResult({ directory: root, snapshot,
+      marker: 'FIX_COMPLETE', model: 'claude-unknown', resumeSession: sessionId }),
+    /no recorded pricing/);
+    const exactRates = { input: 1, output: 1, cacheWrite5m: 1,
+      cacheWrite1h: 1, cacheRead: 1 };
+    const recovered = recoverClaudeTerminalResult({ directory: root, snapshot,
+      marker: 'FIX_COMPLETE', model: 'claude-unknown', pricingRates: exactRates,
+      resumeSession: sessionId });
+    assert(recovered, 'the priced transcript must recover a result');
+    assert.equal(recovered.total_cost_usd, 0.0002);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('terminal recovery includes subagent usage created by the active session', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-terminal-'));
+  try {
+    const snapshot = snapshotClaudeTranscripts(root);
+    writeFileSync(join(root, `${sessionId}.jsonl`), `${JSON.stringify(assistant())}\n`);
+    const subagents = join(root, sessionId, 'subagents');
+    mkdirSync(subagents, { recursive: true });
+    writeFileSync(join(subagents, 'agent-worker.jsonl'),
+      `${JSON.stringify({ ...assistant({ request: 'subagent' }), isSidechain: true })}\n`);
+    const result = recoverClaudeTerminalResult({ directory: root, snapshot,
+      marker: 'FIX_COMPLETE', model: 'claude-sonnet-5' });
+    assert(result, 'the session transcript must recover a result');
+    assert.equal(result.num_turns, 2);
+    assert.deepEqual(result.usage, { input_tokens: 20, output_tokens: 40,
+      cache_creation_input_tokens: 60, cache_read_input_tokens: 80 });
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('terminal recovery rejects billable usage without a stable request ID', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-terminal-'));
+  try {
+    const snapshot = snapshotClaudeTranscripts(root);
+    const record = assistant() as Record<string, unknown>;
+    delete record.requestId;
+    delete (record.message as Record<string, unknown>).id;
+    writeFileSync(join(root, `${sessionId}.jsonl`), `${JSON.stringify(record)}\n`);
+    assert.throws(() => recoverClaudeTerminalResult({ directory: root, snapshot,
+      marker: 'FIX_COMPLETE', model: 'claude-sonnet-5' }), /stable request ID/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('terminal recovery rejects conflicting usage for one request ID', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-terminal-'));
+  try {
+    const snapshot = snapshotClaudeTranscripts(root);
+    const changed = assistant();
+    (changed.message.usage as Record<string, unknown>).output_tokens = 21;
+    writeFileSync(join(root, `${sessionId}.jsonl`), [
+      JSON.stringify(assistant({ stop: 'tool_use' })), JSON.stringify(changed),
+    ].join('\n') + '\n');
+    assert.throws(() => recoverClaudeTerminalResult({ directory: root, snapshot,
+      marker: 'FIX_COMPLETE', model: 'claude-sonnet-5' }), /usage changed/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('a hung process becomes a successful transcript recovery after the exit grace', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-terminal-'));
+  try {
+    const transcript = join(root, `${sessionId}.jsonl`);
+    const snapshot = snapshotClaudeTranscripts(root);
+    const script = `const fs=require('node:fs');`
+      + `fs.writeFileSync(${JSON.stringify(transcript)}, JSON.stringify(${JSON.stringify(assistant())})+'\\n');`
+      + `setInterval(()=>{},1000);`;
+    const result = await runTranscriptAwareProcess({ command: process.execPath,
+      args: ['-e', script], input: '', env: process.env, timeoutMs: 5_000,
+      transcriptDirectory: root, transcriptSnapshot: snapshot,
+      marker: 'FIX_COMPLETE', model: 'claude-sonnet-5',
+      exitGraceMs: 20, pollMs: 10,
+      terminate: child => child.kill('SIGTERM') });
+    assert.equal(result.status, 0);
+    assert.equal(jsonRecord(result.stdout).session_id, sessionId);
+    assert(result.terminalRecovery, 'transcript recovery evidence is required');
+    assert.equal(result.terminalRecovery.kind, 'terminal-transcript');
+    assert.equal(result.error, null);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('a normal CLI exit keeps its authoritative result instead of using recovery', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-terminal-'));
+  try {
+    const transcript = join(root, `${sessionId}.jsonl`);
+    const snapshot = snapshotClaudeTranscripts(root);
+    const cliResult = { is_error: false, session_id: sessionId,
+      result: 'FIX_COMPLETE', total_cost_usd: 9.25, num_turns: 7, usage: {
+        input_tokens: 1, output_tokens: 2, cache_creation_input_tokens: 3,
+        cache_read_input_tokens: 4,
+      } };
+    const script = `const fs=require('node:fs');`
+      + `fs.writeFileSync(${JSON.stringify(transcript)}, JSON.stringify(${JSON.stringify(assistant())})+'\\n');`
+      + `process.stdout.write(${JSON.stringify(`${JSON.stringify(cliResult)}\n`)});`;
+    const result = await runTranscriptAwareProcess({ command: process.execPath,
+      args: ['-e', script], input: '', env: process.env, timeoutMs: 5_000,
+      transcriptDirectory: root, transcriptSnapshot: snapshot,
+      marker: 'FIX_COMPLETE', model: 'claude-sonnet-5', exitGraceMs: 100, pollMs: 10,
+      terminate: child => child.kill('SIGTERM') });
+    assert.equal(result.status, 0);
+    assert.equal(result.stdout, `${JSON.stringify(cliResult)}\n`);
+    assert.equal(result.terminalRecovery, undefined);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('complete CLI JSON stays authoritative when process close exceeds transcript grace', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-terminal-'));
+  try {
+    const transcript = join(root, `${sessionId}.jsonl`);
+    const snapshot = snapshotClaudeTranscripts(root);
+    const cliResult = { is_error: false, session_id: sessionId,
+      result: 'the authoritative response\nFIX_COMPLETE', total_cost_usd: 9.25,
+      num_turns: 7, usage: { input_tokens: 101, output_tokens: 202,
+        cache_creation_input_tokens: 303, cache_read_input_tokens: 404 } };
+    const script = `const fs=require('node:fs');`
+      + `fs.writeFileSync(${JSON.stringify(transcript)}, JSON.stringify(${JSON.stringify(assistant())})+'\\n');`
+      + `process.stdout.write(${JSON.stringify(`${JSON.stringify(cliResult)}\n`)});`
+      + `setInterval(()=>{},1000);`;
+    const result = await runTranscriptAwareProcess({ command: process.execPath,
+      args: ['-e', script], input: '', env: process.env, timeoutMs: 5_000,
+      transcriptDirectory: root, transcriptSnapshot: snapshot,
+      marker: 'FIX_COMPLETE', model: 'claude-sonnet-5', exitGraceMs: 20, pollMs: 10,
+      terminate: child => child.kill('SIGTERM') });
+    const returned = jsonRecord(result.stdout);
+    assert.equal(result.status, 0);
+    assert.equal(returned.total_cost_usd, cliResult.total_cost_usd);
+    assert.deepEqual(returned.usage, cliResult.usage);
+    assert.equal(returned.num_turns, cliResult.num_turns);
+    assert.equal(returned.result, cliResult.result);
+    const terminalRecovery = jsonRecordValue(returned.terminal_recovery, 'terminal recovery');
+    assert.equal(terminalRecovery.kind, 'terminal-process');
+    assert.equal(terminalRecovery.resultSource, 'cli-json');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('a terminal result with unknown pricing fails closed after the grace period', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-terminal-'));
+  try {
+    const transcript = join(root, `${sessionId}.jsonl`);
+    const snapshot = snapshotClaudeTranscripts(root);
+    const script = `const fs=require('node:fs');`
+      + `fs.writeFileSync(${JSON.stringify(transcript)}, JSON.stringify(${JSON.stringify(
+        assistant({ model: 'claude-unknown' }))})+'\\n');`
+      + `setInterval(()=>{},1000);`;
+    const result = await runTranscriptAwareProcess({ command: process.execPath,
+      args: ['-e', script], input: '', env: process.env, timeoutMs: 5_000,
+      transcriptDirectory: root, transcriptSnapshot: snapshot,
+      marker: 'FIX_COMPLETE', model: 'claude-unknown',
+      exitGraceMs: 20, pollMs: 10,
+      terminate: child => child.kill('SIGTERM') });
+    assert.notEqual(result.status, 0);
+    assert.equal(errorCode(result.error), 'CLAUDE_TERMINAL_RECOVERY_UNAVAILABLE');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+function jsonRecord(raw: string): Record<string, unknown> {
+  const value: unknown = JSON.parse(raw);
+  return jsonRecordValue(value, 'process result');
+}
+
+function errorCode(error: unknown): string | undefined {
+  if (!isRecord(error)) return undefined;
+  return typeof error.code === 'string' ? error.code : undefined;
+}
+
+function jsonRecordValue(value: unknown, label: string): Record<string, unknown> {
+  if (!isRecord(value)) throw new Error(`${label} must be a JSON object`);
+  return value;
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
diff --git a/tools/stack-bench/tests/cli-entrypoints.test.ts b/tools/stack-bench/tests/cli-entrypoints.test.ts
new file mode 100644
index 00000000000..c19d8bb0bb8
--- /dev/null
+++ b/tools/stack-bench/tests/cli-entrypoints.test.ts
@@ -0,0 +1,27 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+// Compiled entry points report bad requests as usage, never as a stack trace.
+
+test('the preflight command reports invalid arguments without a stack trace', () => {
+  const command = join(STACK_BENCH_ROOT, 'dist', 'commands', 'preflight.js');
+  const result = spawnSync(process.execPath, [command], { encoding: 'utf8' });
+  assert.equal(result.status, 2);
+  assert.match(result.stderr, /preflight: --backend is required/);
+  assert.match(result.stderr, /Usage:/);
+  assert.doesNotMatch(result.stderr, /\n\s+at /);
+});
+
+test('the recovery command rejects incomplete requests without a stack trace', () => {
+  const command = join(STACK_BENCH_ROOT, 'dist', 'commands', 'recovery.js');
+  const result = spawnSync(process.execPath, [command, 'recover-lease', '/private/lease.json'], {
+    encoding: 'utf8',
+  });
+  assert.equal(result.status, 2);
+  assert.match(result.stderr, /Usage:/);
+  assert.doesNotMatch(result.stderr, /\n\s+at /);
+});
diff --git a/tools/stack-bench/tests/coding-interruption-recovery.test.ts b/tools/stack-bench/tests/coding-interruption-recovery.test.ts
new file mode 100644
index 00000000000..7fadfbf77fe
--- /dev/null
+++ b/tools/stack-bench/tests/coding-interruption-recovery.test.ts
@@ -0,0 +1,494 @@
+import assert from 'node:assert/strict';
+import { once } from 'node:events';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { aggregateCodingSessionResults, codingSessionInterruption,
+  parseCodingSessionResult, providerSessionFailure,
+  runCodingSessionWithRetries, type CodingSessionInvocation }
+  from '../src/agents/coding-session-retry.js';
+import { agentSessionFailure } from '../src/agents/agent-result-contract.js';
+import { createBackendLease, readBackendLease, writeBackendLease } from '../src/runtime/backend-lease.js';
+import { reconcileCredentialBrokerReceipt } from '../container/credential-broker-accounting.js';
+import { credentialBrokerDiagnostics, startCredentialBroker, stopCredentialBroker }
+  from '../container/credential-broker-process.js';
+import { clearMissingBuildContainerLease,
+  recoverStoppedBuildContainer } from '../container/recover-build-container.js';
+
+function brokerReceipt(costUsd: number, maxBudgetUsd: number = 10) {
+  return { schemaVersion: 3, source: 'credential-broker', exact: true, estimatedRequests: 0,
+    estimatedByReason: { 'no-usage': 0, 'response-aborted': 0, 'upstream-error': 0 }, model: 'test-model',
+    maxBudgetUsd, costUsd, cliCostUsd: costUsd, calculatedCostUsd: costUsd,
+    usage: { input: 1, output: 1, cacheWrite5m: 0, cacheWrite1h: 0, cacheRead: 0 },
+    pricingRates: { input: 3, output: 15, cacheWrite5m: 3.75, cacheWrite1h: 6,
+      cacheRead: 0.3 },
+    complete: true, reconciled: true, error: null };
+}
+
+function required<T>(value: T | null | undefined, description: string): T {
+  if (value === null || value === undefined) throw new Error(`${description} is required`);
+  return value;
+}
+
+function record(value: unknown, description: string): Record<string, unknown> {
+  if (!isRecord(value)) {
+    throw new Error(`${description} must be an object`);
+  }
+  return value;
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function brokerDetails(value: unknown, description: string): {
+  child: { exitCode: number | null; signal: string | null };
+  termination: { exited: boolean };
+} {
+  const details = record(value, description);
+  const child = record(details.child, `${description}.child`);
+  const termination = record(details.termination, `${description}.termination`);
+  if ((typeof child.exitCode !== 'number' && child.exitCode !== null)
+    || (typeof child.signal !== 'string' && child.signal !== null)
+    || typeof termination.exited !== 'boolean') {
+    throw new Error(`${description} has invalid child termination details`);
+  }
+  return { child: { exitCode: child.exitCode, signal: child.signal },
+    termination: { exited: termination.exited } };
+}
+
+test('provider mid-response errors resume the exact paid session', () => {
+  const sessionId = '950df556-38bb-429c-aee9-1af4a00a6c7a';
+  const result = parseCodingSessionResult(`${JSON.stringify({ type: 'result', is_error: true,
+    terminal_reason: 'api_error', api_error_status: 503,
+    session_id: sessionId, total_cost_usd: 3.25 })}\n`);
+  assert.deepEqual(codingSessionInterruption(Object.assign(new Error('exit'), { status: 1 }), result), {
+    kind: 'provider-api-error', resumeSession: sessionId, recoverStoppedContainer: false,
+    terminalReason: 'api_error', providerStatus: 503,
+  });
+  assert.equal(codingSessionInterruption(null, { terminal_reason: 'api_error',
+    api_error_status: 401, session_id: sessionId }), null);
+});
+
+test('coding result parsing rejects non-object and malformed output', () => {
+  assert.equal(parseCodingSessionResult('true'), null);
+  assert.equal(parseCodingSessionResult('{"is_error":"no"}'), null);
+  assert.deepEqual(parseCodingSessionResult('noise\n{"is_error":false,"session_id":"done"}'),
+    { is_error: false, session_id: 'done' });
+});
+
+test('provider connection failures resume the exact paid session', () => {
+  const sessionId = '950df556-38bb-429c-aee9-1af4a00a6c7a';
+  const result = { type: 'result', is_error: true, terminal_reason: 'cost_receipt_error',
+    session_id: sessionId,
+    result: 'API Error: Unable to connect to API (ConnectionRefused)',
+    total_cost_usd: 1.25, num_turns: 2, usage: {},
+    stack_bench_cost_receipt: brokerReceipt(1.25) };
+  assert.deepEqual(codingSessionInterruption(null, result), {
+    kind: 'provider-connection-error', resumeSession: sessionId,
+    recoverStoppedContainer: false, terminalReason: 'cost_receipt_error', providerStatus: null,
+  });
+  const calls: CodingSessionInvocation[] = [];
+  const coding = runCodingSessionWithRetries({ prompt: 'build', model: 'test-model', retryLimit: 1,
+    maxBudgetUsd: 10,
+    invoke(request) {
+      calls.push(request);
+      return JSON.stringify(calls.length === 1 ? result : {
+        is_error: false, session_id: sessionId, total_cost_usd: 0.5,
+        num_turns: 1, usage: {}, stack_bench_cost_receipt: brokerReceipt(0.5, 8.75),
+      });
+    } });
+  assert.equal(coding.spawnError, null);
+  assert.equal(calls.length, 2);
+  assert.equal(required(calls[1], 'recovery invocation').resumeSession, sessionId);
+});
+
+test('a refused local credential broker is a harness failure and cannot auto-retry unknown cost', () => {
+  const sessionId = '950df556-38bb-429c-aee9-1af4a00a6c7a';
+  const result = { type: 'result', is_error: true, terminal_reason: 'cost_receipt_error',
+    session_id: sessionId,
+    result: 'API Error: Unable to connect to API (ConnectionRefused)',
+    total_cost_usd: 1.25, num_turns: 2, usage: {},
+    stack_bench_credential_broker: { endpointKind: 'local-credential-broker',
+      child: { exitCode: 1, signal: null, stderrTail: 'broker failed' },
+      ledger: { complete: false, reservedUsd: 1.2 } },
+    stack_bench_cost_receipt: { ...brokerReceipt(1.25), complete: false,
+      reconciled: false, error: 'broker ledger is incomplete' } };
+  assert.deepEqual(providerSessionFailure(result), {
+    code: 'credential-broker-unavailable', status: null,
+  });
+  assert.deepEqual(codingSessionInterruption(null, result), {
+    kind: 'credential-broker-unavailable', resumeSession: sessionId,
+    recoverStoppedContainer: false, terminalReason: 'cost_receipt_error', providerStatus: null,
+  });
+  let calls = 0;
+  const coding = runCodingSessionWithRetries({ prompt: 'build', model: 'test-model', retryLimit: 3,
+    maxBudgetUsd: 10, invoke() { calls += 1; return JSON.stringify(result); } });
+  assert.equal(calls, 1);
+  assert.match(required(coding.spawnError, 'broker failure'), /broker failed without a complete reconciled cost receipt/);
+  assert.equal(required(coding.interruptions[0], 'broker interruption').kind, 'credential-broker-unavailable');
+  assert.equal(required(agentSessionFailure({ ok: false,
+    providerMetadata: { failureCode: 'credential-broker-unavailable' } }),
+  'agent session failure').kind, 'harness_failure');
+});
+
+test('a real broker child exit reaches the run result and stops recovery as a harness failure', async () => {
+  const model = 'test-model';
+  const maxBudgetUsd = 10;
+  const pricingRates = { input: 3, output: 15, cacheWrite5m: 3.75,
+    cacheWrite1h: 6, cacheRead: 0.3 };
+  const broker = await startCredentialBroker({ mode: 'api-key',
+    credential: 'provider-secret-value-1234567890' }, { networkMode: 'host', deadlineMs: 10_000, model,
+    maxBudgetUsd, pricingRates });
+  broker.child.kill('SIGTERM');
+  await once(broker.child, 'exit');
+  const ledger = await stopCredentialBroker(broker);
+  const diagnostics = credentialBrokerDiagnostics(broker);
+  const reconciled = reconcileCredentialBrokerReceipt({ ledger,
+    cliResult: { type: 'result', is_error: true, terminal_reason: 'api_error',
+      session_id: '950df556-38bb-429c-aee9-1af4a00a6c7a', total_cost_usd: 0,
+      usage: { input_tokens: 0, output_tokens: 0, cache_read_input_tokens: 0,
+        cache_creation_input_tokens: 0 },
+      result: 'API Error: Unable to connect to API (ConnectionRefused)' },
+    model, maxBudgetUsd, pricingRates, brokerDiagnostics: diagnostics });
+  assert.equal(reconciled.ok, true);
+  assert.equal(record(reconciled.result.stack_bench_cost_receipt,
+    'reconciled cost receipt').reconciled, true);
+  const reconciledBroker = brokerDetails(reconciled.result.stack_bench_credential_broker,
+    'reconciled credential broker');
+  assert.ok(reconciledBroker.child.exitCode !== null || reconciledBroker.child.signal !== null);
+  let calls = 0;
+  const coding = runCodingSessionWithRetries({ prompt: 'build', model: 'test-model', retryLimit: 3,
+    maxBudgetUsd, invoke() { calls += 1; return JSON.stringify(reconciled.result); } });
+  assert.equal(calls, 1);
+  assert.match(required(coding.spawnError, 'broker failure'), /local credential broker failed/);
+  assert.equal(required(coding.interruptions[0], 'broker interruption').kind, 'credential-broker-unavailable');
+  assert.equal(required(coding.interruptions[0], 'broker interruption').costUsd, 0);
+  const failureCode = required(providerSessionFailure(coding.result), 'provider failure').code;
+  const codingBroker = brokerDetails(coding.result.stack_bench_credential_broker,
+    'recovered credential broker');
+  const agentResult = { ok: false, providerMetadata: { failureCode,
+    credentialBroker: codingBroker } };
+  assert.equal(required(agentSessionFailure(agentResult), 'agent session failure').kind, 'harness_failure');
+  assert.equal(codingBroker.termination.exited, true);
+});
+
+test('a provider throttle is classified as waitable, with or without a session', () => {
+  const throttled = parseCodingSessionResult(JSON.stringify({ type: 'result', is_error: true,
+    terminal_reason: 'api_error', api_error_status: 429, session_id: 'paid-session' }));
+  assert.deepEqual(codingSessionInterruption(Object.assign(new Error('exit'), { status: 1 }), throttled), {
+    kind: 'provider-throttled', resumeSession: 'paid-session', recoverStoppedContainer: false,
+    terminalReason: 'api_error', providerStatus: 429,
+  });
+  const beforeSession = parseCodingSessionResult(JSON.stringify({ type: 'result', is_error: true,
+    terminal_reason: 'api_error', api_error_status: 529 }));
+  assert.deepEqual(codingSessionInterruption(null, beforeSession), {
+    kind: 'provider-throttled', resumeSession: null, recoverStoppedContainer: false,
+    terminalReason: 'api_error', providerStatus: 529,
+  });
+});
+
+test('throttle waits back off, resume the paid session, and do not spend interruption retries', () => {
+  const calls: CodingSessionInvocation[] = [];
+  const waits: number[] = [];
+  const logs: string[] = [];
+  const coding = runCodingSessionWithRetries({ prompt: 'build the app', model: 'test-model', retryLimit: 0,
+    sleep: ms => waits.push(ms), log: message => logs.push(message),
+    invoke(request) {
+      calls.push(request);
+      if (calls.length <= 2) {
+        return JSON.stringify({ is_error: true, terminal_reason: 'api_error',
+          api_error_status: 429, session_id: 'paid-session', total_cost_usd: 0.001 });
+      }
+      return JSON.stringify({ is_error: false, session_id: 'paid-session',
+        total_cost_usd: 2, num_turns: 3, usage: {} });
+    } });
+  assert.equal(coding.spawnError, null);
+  assert.equal(calls.length, 3);
+  assert.deepEqual(waits, [60_000, 120_000]);
+  assert.equal(required(calls[1], 'second invocation').resumeSession, 'paid-session');
+  assert.equal(required(calls[2], 'third invocation').resumeSession, 'paid-session');
+  assert.deepEqual(coding.throttle,
+    { waits: 2, waitedMs: 180_000, maxWaitMs: 15 * 60_000, jitterMs: 0 });
+  assert.equal(coding.interruptions.length, 2);
+  assert.ok(coding.interruptions.every(item => item.kind === 'provider-throttled'));
+  assert.match(required(logs[0], 'throttle log'), /provider throttled \(status 429\)/);
+});
+
+test('a throttle before any session restarts from the existing files after waiting', () => {
+  const calls: CodingSessionInvocation[] = [];
+  const waits: number[] = [];
+  const coding = runCodingSessionWithRetries({ prompt: 'full original prompt', model: 'test-model', retryLimit: 0,
+    sleep: ms => waits.push(ms), log: () => {},
+    invoke(request) {
+      calls.push(request);
+      if (calls.length === 1) {
+        return JSON.stringify({ is_error: true, terminal_reason: 'api_error',
+          api_error_status: 429 });
+      }
+      return JSON.stringify({ is_error: false, session_id: 'fresh', total_cost_usd: 1,
+        num_turns: 1, usage: {} });
+    } });
+  assert.equal(coding.spawnError, null);
+  assert.deepEqual(waits, [60_000]);
+  assert.equal(required(calls[1], 'restarted invocation').resumeSession, null);
+  assert.match(required(calls[1], 'restarted invocation').input, /Continue this task from the existing files/);
+});
+
+test('an unbroken throttle stops at the wait budget with a throttle-specific failure', () => {
+  const waits: number[] = [];
+  let calls = 0;
+  const coding = runCodingSessionWithRetries({ prompt: 'build the app', model: 'test-model', retryLimit: 3,
+    throttleMaxWaitMs: 5 * 60_000, sleep: ms => waits.push(ms), log: () => {},
+    invoke() {
+      calls += 1;
+      return JSON.stringify({ is_error: true, terminal_reason: 'api_error',
+        api_error_status: 429, session_id: 'paid-session',
+        result: 'API Error: Request rejected (429)' });
+    } });
+  // 60s + 120s fit inside five minutes; the 300s third wait would exceed it.
+  assert.deepEqual(waits, [60_000, 120_000]);
+  assert.equal(calls, 3);
+  assert.match(required(coding.spawnError, 'throttle failure'), /provider stayed throttled \(status 429\) after 3 minutes/);
+  assert.deepEqual(coding.throttle,
+    { waits: 2, waitedMs: 180_000, maxWaitMs: 5 * 60_000, jitterMs: 0 });
+});
+
+test('a stable throttle offset spreads concurrent retries without changing retry accounting', () => {
+  const waits: number[] = [];
+  let calls = 0;
+  const coding = runCodingSessionWithRetries({ prompt: 'build', model: 'test-model', retryLimit: 0,
+    throttleJitterMs: 17_000, sleep: ms => waits.push(ms), log: () => {},
+    invoke() {
+      calls += 1;
+      return calls === 1
+        ? JSON.stringify({ is_error: true, terminal_reason: 'api_error', api_error_status: 429 })
+        : JSON.stringify({ is_error: false, session_id: 'done', usage: {} });
+    } });
+  assert.deepEqual(waits, [77_000]);
+  assert.deepEqual(coding.throttle,
+    { waits: 1, waitedMs: 77_000, maxWaitMs: 15 * 60_000, jitterMs: 17_000 });
+});
+
+test('only a non-OOM forced exit is eligible for container recovery', () => {
+  const failure = (diagnostic: Record<string, unknown>) => Object.assign(new Error('killed'), { status: 137,
+    stderr: `STACK_BENCH_CODING_PROCESS_DIAGNOSTIC ${JSON.stringify(diagnostic)}\n` });
+  const killed = codingSessionInterruption(failure({ status: 137,
+    container: { ExitCode: 143, OOMKilled: false }, cgroupMemory: 'oom 0\noom_kill 0\n' }), null);
+  assert.equal(required(killed, 'killed-process interruption').kind, 'coding-process-killed');
+  assert.equal(required(killed, 'killed-process interruption').recoverStoppedContainer, true);
+  assert.equal(codingSessionInterruption(failure({ status: 137,
+    container: { ExitCode: 137, OOMKilled: true }, cgroupMemory: 'oom 1\noom_kill 1\n' }), null), null);
+});
+
+test('a bounded coding-session timeout continues from the existing app', () => {
+  const timeout = Object.assign(new Error('spawnSync docker ETIMEDOUT'), { code: 'ETIMEDOUT' });
+  assert.deepEqual(codingSessionInterruption(timeout, null), {
+    kind: 'coding-session-timeout', resumeSession: null, recoverStoppedContainer: false,
+    terminalReason: null, providerStatus: null,
+  });
+  const calls: CodingSessionInvocation[] = [];
+  const coding = runCodingSessionWithRetries({ prompt: 'build the app', model: 'test-model', retryLimit: 1,
+    invoke(request) {
+      calls.push(request);
+      if (calls.length === 1) throw timeout;
+      return JSON.stringify({ is_error: false, session_id: 'replacement', total_cost_usd: 1,
+        num_turns: 1, usage: {} });
+    } });
+  assert.equal(coding.spawnError, null);
+  assert.equal(calls.length, 2);
+  assert.match(required(calls[1], 'replacement invocation').input,
+    /Continue this task from the existing files/);
+});
+
+test('retry accounting includes every paid invocation', () => {
+  const combined = aggregateCodingSessionResults([
+    { is_error: true, session_id: 'first', total_cost_usd: 3.8464, num_turns: 94,
+      stack_bench_cost_receipt: { id: 'first-receipt' },
+      usage: { input_tokens: 1, output_tokens: 2, cache_creation_input_tokens: 3,
+        cache_read_input_tokens: 4 } },
+    { is_error: false, session_id: 'first', total_cost_usd: 1.25, num_turns: 5,
+      stack_bench_cost_receipt: { id: 'second-receipt' },
+      usage: { input_tokens: 10, output_tokens: 20, cache_creation_input_tokens: 30,
+        cache_read_input_tokens: 40 } },
+  ]);
+  assert.equal(combined.total_cost_usd, 5.0964);
+  assert.equal(combined.num_turns, 99);
+  assert.deepEqual(combined.usage, { input_tokens: 11, output_tokens: 22,
+    cache_creation_input_tokens: 33, cache_read_input_tokens: 44 });
+  assert.deepEqual(combined.stack_bench_cost_receipts, [
+    { invocation: 1, receipt: { id: 'first-receipt' } },
+    { invocation: 2, receipt: { id: 'second-receipt' } },
+  ]);
+  assert.equal(combined.is_error, false);
+});
+
+test('the retry loop resumes in place and deducts the failed call from the cost cap', () => {
+  const sessionId = '950df556-38bb-429c-aee9-1af4a00a6c7a';
+  const calls: CodingSessionInvocation[] = [];
+  const coding = runCodingSessionWithRetries({ prompt: 'full original prompt', model: 'test-model', retryLimit: 2,
+    maxBudgetUsd: 10,
+    invoke(request) {
+      calls.push(request);
+      if (calls.length === 1) {
+        const output = JSON.stringify({ is_error: true, terminal_reason: 'api_error',
+          api_error_status: 503, session_id: sessionId, total_cost_usd: 3.5, num_turns: 4,
+          stack_bench_cost_receipt: brokerReceipt(3.5),
+          usage: { input_tokens: 1, output_tokens: 2, cache_creation_input_tokens: 3,
+            cache_read_input_tokens: 4 } });
+        throw Object.assign(new Error('provider interrupted'), { status: 1, stdout: output });
+      }
+      return JSON.stringify({ is_error: false, session_id: sessionId, total_cost_usd: 1.25,
+        stack_bench_cost_receipt: brokerReceipt(1.25, 6.5),
+        num_turns: 2, usage: { input_tokens: 5, output_tokens: 6,
+          cache_creation_input_tokens: 7, cache_read_input_tokens: 8 } });
+    } });
+  assert.equal(coding.spawnError, null);
+  assert.equal(coding.result.total_cost_usd, 4.75);
+  assert.equal(calls.length, 2);
+  assert.equal(required(calls[0], 'first invocation').input, 'full original prompt');
+  assert.equal(required(calls[0], 'first invocation').maxBudgetUsd, 10);
+  assert.equal(required(calls[1], 'second invocation').resumeSession, sessionId);
+  assert.equal(required(calls[1], 'second invocation').maxBudgetUsd, 6.5);
+  assert.match(required(calls[1], 'second invocation').input, /Continue the same task/);
+  assert.equal(required(coding.interruptions[0], 'provider interruption').kind, 'provider-api-error');
+});
+
+test('a capped session does not treat a numeric cost as a broker receipt', () => {
+  let calls = 0;
+  const coding = runCodingSessionWithRetries({ prompt: 'build', model: 'test-model', retryLimit: 2,
+    maxBudgetUsd: 10,
+    invoke() {
+      calls += 1;
+      return JSON.stringify({ is_error: true, terminal_reason: 'api_error',
+        api_error_status: 503, session_id: 'paid-session', total_cost_usd: 2 });
+    } });
+  assert.equal(calls, 1);
+  assert.match(required(coding.spawnError, 'cost receipt failure'), /without a complete reconciled broker cost receipt/);
+  assert.equal(required(coding.interruptions[0], 'cost receipt interruption').costUsd, null);
+});
+
+test('a capped session does not retry with an unreconciled broker receipt', () => {
+  let calls = 0;
+  const receipt = { ...brokerReceipt(2), reconciled: false, error: 'cost mismatch' };
+  const coding = runCodingSessionWithRetries({ prompt: 'build', model: 'test-model', retryLimit: 2,
+    maxBudgetUsd: 10,
+    invoke() {
+      calls += 1;
+      return JSON.stringify({ is_error: true, terminal_reason: 'api_error',
+        api_error_status: 503, session_id: 'paid-session', total_cost_usd: 2,
+        stack_bench_cost_receipt: receipt });
+    } });
+  assert.equal(calls, 1);
+  assert.match(required(coding.spawnError, 'cost receipt failure'), /without a complete reconciled broker cost receipt/);
+  assert.equal(required(coding.interruptions[0], 'cost receipt interruption').costUsd, null);
+});
+
+test('a capped session does not retry with a receipt for another model', () => {
+  let calls = 0;
+  const coding = runCodingSessionWithRetries({ prompt: 'build', model: 'test-model', retryLimit: 2,
+    maxBudgetUsd: 10,
+    invoke() {
+      calls += 1;
+      return JSON.stringify({ is_error: true, terminal_reason: 'api_error',
+        api_error_status: 503, session_id: 'paid-session', total_cost_usd: 2,
+        stack_bench_cost_receipt: { ...brokerReceipt(2), model: 'other-model' } });
+    } });
+  assert.equal(calls, 1);
+  assert.match(required(coding.spawnError, 'cost receipt failure'),
+    /without a complete reconciled broker cost receipt/);
+});
+
+test('a non-OOM kill recovers the container without pretending to resume a missing session', () => {
+  const calls: CodingSessionInvocation[] = [];
+  const coding = runCodingSessionWithRetries({ prompt: 'full prompt', model: 'test-model', retryLimit: 1,
+    invoke(request) {
+      calls.push(request);
+      if (calls.length === 1) {
+        const diagnostic = { status: 137, container: { ExitCode: 143, OOMKilled: false },
+          cgroupMemory: 'oom 0\noom_kill 0\n' };
+        throw Object.assign(new Error('killed'), { status: 137,
+          stderr: `STACK_BENCH_CODING_PROCESS_DIAGNOSTIC ${JSON.stringify(diagnostic)}\n` });
+      }
+      return JSON.stringify({ is_error: false, session_id: 'replacement', total_cost_usd: 1,
+        num_turns: 1, usage: {} });
+    } });
+  assert.equal(coding.spawnError, null);
+  assert.equal(required(calls[1], 'recovery invocation').recoverStoppedContainer, true);
+  assert.equal(required(calls[1], 'recovery invocation').resumeSession, null);
+  assert.match(required(calls[1], 'recovery invocation').input,
+    /Continue this task from the existing files/);
+});
+
+test('stopped-container recovery removes only the exact authenticated lease target', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-build-recovery-'));
+  try {
+    const path = join(root, 'lease.json');
+    const lease = createBackendLease({ runId: 'recover-build-test', backend: 'mongodb',
+      track: 'ecommerce', runIndex: 0, database: 'app_ecom_run0',
+      container: { name: 'stack-bench-mongodb', id: 'database-id' } });
+    lease.state = 'active';
+    lease.resources.buildContainer = { name: 'leased-build', id: 'a'.repeat(64),
+      image: 'image-id', owned: true, running: false, networkMode: 'bridge',
+      resourceLimits: { cpuCount: 2, memoryBytes: 2147483648,
+        memorySwapBytes: 2147483648, pids: 512 } };
+    writeBackendLease(path, lease);
+    const calls: Array<[string, readonly string[]]> = [];
+    const recovered = recoverStoppedBuildContainer({
+      existing: { id: 'a'.repeat(64), running: false }, containerName: 'leased-build',
+      leaseContext: { path, lease }, backend: 'mongodb',
+      execute(command, args) { calls.push([command, args]); return { status: 0, stdout: '' }; },
+    });
+    assert.deepEqual(calls, [['docker', ['rm', 'a'.repeat(64)]]]);
+    assert.equal(recovered.lease.resources.buildContainer, null);
+    assert.equal(readBackendLease(path).resources.buildContainer, null);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('stopped-container recovery fails closed on a lease mismatch', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-build-recovery-'));
+  try {
+    const path = join(root, 'lease.json');
+    const lease = createBackendLease({ runId: 'recover-build-test', backend: 'mongodb',
+      track: 'ecommerce', runIndex: 0, database: 'app_ecom_run0',
+      container: { name: 'stack-bench-mongodb', id: 'database-id' } });
+    lease.state = 'active';
+    lease.resources.buildContainer = { name: 'leased-build', id: 'a'.repeat(64),
+      image: 'image-id', owned: true, running: false, networkMode: 'bridge',
+      resourceLimits: { cpuCount: 2, memoryBytes: 2147483648,
+        memorySwapBytes: 2147483648, pids: 512 } };
+    writeBackendLease(path, lease);
+    let executed = false;
+    assert.throws(() => recoverStoppedBuildContainer({
+      existing: { id: 'b'.repeat(64), running: false }, containerName: 'leased-build',
+      leaseContext: { path, lease }, backend: 'mongodb',
+      execute() { executed = true; return { status: 0 }; },
+    }), /does not match/);
+    assert.equal(executed, false);
+    assert.equal(required(readBackendLease(path).resources.buildContainer,
+      'recovered build container').id, 'a'.repeat(64));
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('missing-container recovery clears only the authenticated lease target', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-build-recovery-'));
+  try {
+    const path = join(root, 'lease.json');
+    const lease = createBackendLease({ runId: 'recover-build-test', backend: 'mongodb',
+      track: 'ecommerce', runIndex: 0, database: 'app_ecom_run0',
+      container: { name: 'stack-bench-mongodb', id: 'database-id' } });
+    lease.state = 'active';
+    lease.resources.buildContainer = { name: 'leased-build', id: 'a'.repeat(64),
+      image: 'image-id', owned: true, running: false, networkMode: 'bridge',
+      resourceLimits: { cpuCount: 2, memoryBytes: 2147483648,
+        memorySwapBytes: 2147483648, pids: 512 } };
+    writeBackendLease(path, lease);
+    const recovered = clearMissingBuildContainerLease({
+      containerName: 'leased-build', leaseContext: { path, lease }, backend: 'mongodb',
+    });
+    assert.equal(recovered.lease.resources.buildContainer, null);
+    assert.equal(readBackendLease(path).resources.buildContainer, null);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/composition-cli.contract.ts b/tools/stack-bench/tests/composition-cli.contract.ts
new file mode 100644
index 00000000000..6c87311aa81
--- /dev/null
+++ b/tools/stack-bench/tests/composition-cli.contract.ts
@@ -0,0 +1,135 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import { cpSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { diffRecipeFiles, selectRecipeRelease, validatePackFile,
+  validateRecipeFile, showRecipeFile } from '../commands/composition-cli.js';
+import { hashDirectory } from '../src/evidence/provenance.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { compiledEntrypoint } from '../src/package-root.js';
+
+const SOURCE = loadTrack('ecommerce').dir;
+const CLI = compiledEntrypoint('commands', 'composition-cli.js');
+
+interface MutableRecipeFile {
+  state: string;
+  fixture: { path: string; id: string; version: string };
+  packs: Array<{ id: string; [key: string]: unknown }>;
+  [key: string]: unknown;
+}
+
+test('pack and recipe validation resolve their full source context without writing', () => {
+  const before = hashDirectory(SOURCE);
+  const pack = validatePackFile(join(SOURCE, 'composition', 'packs', 'feature-accounts-1.1.0.json'),
+    { trackRoot: SOURCE });
+  assert.equal(pack.id, 'ecommerce.feature.accounts');
+  assert(pack.criteria > 0);
+  const recipe = validateRecipeFile(join(SOURCE, 'composition', 'recipes', 'sequential-l1-2.5.0.json'),
+    { trackRoot: SOURCE });
+  assert.equal(recipe.release.checkCatalog.length, 48);
+  assert.equal(recipe.release.checkCatalog.reduce((total, check) => total + check.points, 0), 58);
+  assert.deepEqual(hashDirectory(SOURCE), before);
+});
+
+test('the command surface runs without Docker or PATH access', () => {
+  const recipe = join(SOURCE, 'composition', 'recipes', 'sequential-l1-2.5.0.json');
+  const result = spawnSync(process.execPath,
+    [CLI, 'recipe', 'validate', recipe, '--track-root', SOURCE, '--json'], {
+      encoding: 'utf8', env: { ...process.env, PATH: '' },
+    });
+  assert.equal(result.status, 0, result.stderr);
+  const output = JSON.parse(result.stdout);
+  assert.equal(output.id, 'ecommerce.sequential-l1');
+  assert.equal(output.checks, 48);
+});
+
+test('recipe show gives pack/check selections their own stable scope identity', () => {
+  const release = validateRecipeFile(
+    join(SOURCE, 'composition', 'recipes', 'sequential-l1-2.5.0.json'), { trackRoot: SOURCE }).release;
+  const selected = selectRecipeRelease(release, { packIds: ['ecommerce.feature.accounts'] });
+  assert.equal(selected.contentSha256, release.contentSha256);
+  assert.equal(selected.selection.recipe.contentSha256, release.contentSha256);
+  assert.equal(selected.selection.completeness, 'subset');
+  assert.deepEqual(selected.selection.taskPacks, ['ecommerce.feature.accounts']);
+  assert.match(selected.selection.sha256, /^[a-f0-9]{64}$/);
+  assert(selected.checkCatalog.every(check => check.packId === 'ecommerce.feature.accounts'));
+  assert.equal(selectRecipeRelease(release, { packIds: ['ecommerce.feature.accounts'] })
+    .selection.sha256, selected.selection.sha256);
+  const firstCheck = selected.checkCatalog[0];
+  assert.ok(firstCheck);
+  const key = firstCheck.stableKey;
+  const one = selectRecipeRelease(release, { checkKeys: [key] });
+  assert.deepEqual(one.checkCatalog.map(check => check.stableKey), [key]);
+  const outside = release.checkCatalog.find(check => check.packId !== 'ecommerce.feature.accounts');
+  assert.ok(outside);
+  assert.throws(() => selectRecipeRelease(release, {
+    packIds: ['ecommerce.feature.accounts'], checkKeys: [outside.stableKey],
+  }), /unrequested pack/);
+  const full = selectRecipeRelease(release);
+  assert.equal(full.selection.completeness, 'full');
+  assert(full.checkCatalog.every(check => check.points > 0));
+  assert.throws(() => selectRecipeRelease(release, { packIds: ['missing'] }), /no pack/);
+
+  const shown = showRecipeFile(join(SOURCE, 'composition', 'recipes', 'sequential-l1-2.5.0.json'), {
+    trackRoot: SOURCE, packIds: ['ecommerce.feature.accounts'],
+  });
+  assert.notEqual(shown.builderTask.sha256, shown.task.composedSha256);
+  assert.match(shown.builderTask.requirementText, /Accounts/);
+  assert.doesNotMatch(shown.builderTask.requirementText, /Catalog/);
+  assert.match(shown.builderTask.note, /Pack selection defines the requested task/);
+});
+
+test('recipe diff separates categories and names exact calibration work invalidated', () => {
+  const temporary = mkdtempSync(join(tmpdir(), 'stack-bench-authoring-'));
+  const root = join(temporary, 'ecommerce');
+  try {
+    cpSync(SOURCE, root, { recursive: true });
+    const original = join(root, 'composition', 'recipes', 'sequential-l1-2.5.0.json');
+    const changed = join(root, 'composition', 'recipes', 'l1-fixture-variant.json');
+    const value = JSON.parse(readFileSync(original, 'utf8')) as MutableRecipeFile;
+    value.state = 'draft';
+    value.fixture = { path: '../fixtures/operations-1.0.0.json',
+      id: 'ecommerce.operations', version: '1.0.0' };
+    writeFileSync(changed, `${JSON.stringify(value, null, 2)}\n`);
+
+    const diff = diffRecipeFiles(original, changed, { trackRoot: root });
+    assert.deepEqual(diff.categories, {
+      meaning: false,
+      scoring: false,
+      fixtures: true,
+      execution: true,
+      metadata: true,
+    });
+    assert.equal(diff.calibrations.length, 1);
+    const calibration = diff.calibrations[0];
+    assert.ok(calibration);
+    assert.equal(calibration.id, 'ecommerce.sequential-l1-calibration');
+    assert.deepEqual(calibration.invalidated, [
+      'recipe binding', 'fixture binding',
+      'reference repetitions', 'mutation repetitions', 'null repetitions', 'promotion decision',
+    ]);
+  } finally { rmSync(temporary, { recursive: true, force: true }); }
+});
+
+test('recipe diff names changed task fragments', () => {
+  const temporary = mkdtempSync(join(tmpdir(), 'stack-bench-task-diff-'));
+  const root = join(temporary, 'ecommerce');
+  try {
+    cpSync(SOURCE, root, { recursive: true });
+    const original = join(root, 'composition', 'recipes', 'sequential-l1-2.5.0.json');
+    const changed = join(root, 'composition', 'recipes', 'l1-renamed-framing.json');
+    const value = JSON.parse(readFileSync(original, 'utf8')) as MutableRecipeFile;
+    const task = value.task as { framing: { requirements: Array<{ id: string; path: string }> } };
+    task.framing.requirements[0]!.id = 'ecommerce.sequential-l1.renamed-framing';
+    task.framing.requirements[0]!.path = 'prompts/modular/l1-features.md';
+    writeFileSync(changed, `${JSON.stringify(value, null, 2)}\n`);
+    const diff = diffRecipeFiles(original, changed, { trackRoot: root });
+    assert.deepEqual(diff.taskFragments.requirements.removed, ['ecommerce.sequential-l1.framing']);
+    assert.deepEqual(diff.taskFragments.requirements.added, ['ecommerce.sequential-l1.renamed-framing']);
+    assert.equal(diff.taskFragments.composedTaskChanged, true);
+    assert.equal(diff.categories.meaning, true);
+  } finally { rmSync(temporary, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/composition-compiler.test.ts b/tools/stack-bench/tests/composition-compiler.test.ts
new file mode 100644
index 00000000000..917f3f759ba
--- /dev/null
+++ b/tools/stack-bench/tests/composition-compiler.test.ts
@@ -0,0 +1,557 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import {
+  compileFixtureDefinition,
+  compilePackDefinition,
+  compilePromotionDefinition,
+  compilePromotionFile,
+  compileRecipeDefinition,
+  compileRecipeFile,
+  resolveTaskFragment,
+} from '../src/composition/composition-compiler.js';
+test('source contracts reject unknown fields, malformed versions, duplicate fixture data, and invalid aliases', () => {
+  const pack = {
+    schemaVersion: 1, kind: 'test-pack', id: 'example.pack', version: '1.0.0', state: 'draft',
+    title: 'Pack', requiresPacks: [], conflictsWith: [], capabilities: ['browser'],
+    evidence: ['browser-observation'], budget: { status: 'unmeasured' },
+    task: { requirements: [{ id: 'example.requirement', path: 'prompt.md', order: 1 }], contracts: [] },
+    checks: [{ id: 'group', source: 'scenarios/01.json', feature: 1, role: 'feature' }],
+  };
+  assert.throws(() => compilePackDefinition({ ...pack, surprise: true }), /surprise: unknown field/);
+  assert.throws(() => compilePackDefinition({ ...pack, version: 'latest' }), /exact semantic version/);
+  assert.throws(() => compilePackDefinition({ ...pack, requiresPacks: ['example.other'] }), /id@version/);
+  assert.throws(() => compilePackDefinition({ ...pack, state: 'qualified' }),
+    /qualified packs require a bounded runtime budget/);
+  assert.throws(() => compilePackDefinition({ ...pack, moduleType: 'mode' }),
+    /moduleType.*feature or specification/);
+  assert.throws(() => compilePackDefinition({ ...pack, stableId: 'Published Score' }),
+    /stableId.*lowercase letters/);
+  assert.throws(() => compilePackDefinition({ ...pack, moduleType: 'feature', checks: [
+    { ...pack.checks[0], role: 'guarantee' },
+  ] }), /feature modules cannot own guarantee/);
+  assert.throws(() => compilePackDefinition({ ...pack, moduleType: 'specification', task: {
+    ...pack.task, requirements: [
+      { ...pack.task.requirements[0], requiresFeatures: ['example.feature'] },
+    ],
+  } }),
+    /specification modules cannot own feature/);
+
+  const featureWithGradingSetup = compilePackDefinition({ ...pack, moduleType: 'feature',
+    checks: [{ ...pack.checks[0], requiresFeatures: ['example.setup'] }] });
+  assert.deepEqual(featureWithGradingSetup.checks[0]?.requiresFeatures, ['example.setup']);
+
+  const specification = compilePackDefinition({ ...pack, id: 'example.durability',
+    moduleType: 'specification', task: { ...pack.task, requirements: [
+      { ...pack.task.requirements[0], requiresFeatures: ['example.feature'] },
+    ] }, checks: [{ ...pack.checks[0], role: 'guarantee',
+      observations: ['requested', 'unmentioned'], requiresFeatures: ['example.feature'] }] });
+  const specificationCheck = specification.checks[0];
+  const specificationRequirement = specification.task.requirements[0];
+  assert(specificationCheck);
+  assert(specificationRequirement);
+  assert.equal(specification.moduleType, 'specification');
+  assert.deepEqual(specificationCheck.observations, ['requested', 'unmentioned']);
+  assert.deepEqual(specificationCheck.requiresFeatures, ['example.feature']);
+  assert.deepEqual(specificationRequirement.requiresFeatures, ['example.feature']);
+
+  const renamed = compilePackDefinition({ ...pack, id: 'example.feature-v2',
+    stableId: 'example.feature' });
+  assert.equal(renamed.id, 'example.feature-v2');
+  assert.equal(renamed.stableId, 'example.feature');
+
+  const fixture = {
+    schemaVersion: 1, kind: 'fixture-set', id: 'example.fixture', version: '1.0.0', state: 'draft',
+    title: 'Fixture', warehouses: ['East'], items: [
+      { name: 'Item', price: '1.00', category: 'Test', stock: { East: 1 } },
+    ], accounts: [], empty: [],
+  };
+  assert.throws(() => compileFixtureDefinition({ ...fixture, warehouses: ['East', 'East'] }), /duplicates/);
+
+  const recipe = {
+    schemaVersion: 1, kind: 'benchmark-recipe', id: 'example.recipe', version: '1.0.0', state: 'draft',
+    title: 'Recipe', track: 'example',
+    fixture: { path: '../fixtures/f.json', id: 'example.fixture', version: '1.0.0' },
+    task: { mode: 'fresh', framing: { requirements: [
+      { id: 'example.framing', path: 'prompt.md', order: 0 },
+    ], contracts: [] } },
+    packs: [{ path: '../packs/a.json', id: 'example.a', version: '1.0.0', includeRoles: ['feature'] }],
+    execution: [{ id: 'features', source: 'scenarios/01.json' }],
+    sequence: { level: 1 },
+    scoring: { mode: 'source-points' },
+  };
+  assert.doesNotThrow(() => compileRecipeDefinition(recipe));
+  assert.throws(() => compileRecipeDefinition({ ...recipe,
+    scoring: { mode: 'legacy-source-points' } }), /must be source-points or explicit/);
+  assert.throws(() => compileRecipeDefinition({ ...recipe, compatibility: {
+    legacyLevel: 1,
+  } }), /compatibility: unknown field/);
+  assert.throws(() => compileRecipeDefinition({ ...recipe,
+    sequence: { level: 2 } }), /sequence levels after 1 must use upgrade mode/);
+  const catalog = {
+    schemaVersion: 1, kind: 'promotion-catalog', id: 'example.recipes', version: '1.0.0',
+    state: 'draft', title: 'Promotions', entries: [{ alias: 'latest', status: 'candidate',
+      recipe: { path: 'recipes/r.json', id: 'example.recipe', version: '1.0.0' } }],
+  };
+  assert.throws(() => compilePromotionDefinition(catalog), /must look like L1/);
+  assert.deepEqual(compilePromotionDefinition({ ...catalog, entries: [] }).entries, []);
+  assert.throws(() => compilePromotionDefinition({ ...catalog, state: 'qualified', entries: [] }),
+    /must be non-empty once the catalog is qualified/);
+});
+
+test('task fragment markers are contained, unique, ordered, and non-empty', () => {
+  const box = sandbox();
+  try {
+    assert.throws(() => resolveTaskFragment({ id: 'example.missing', path: 'prompts/task.md',
+      order: 1, from: 'not present' }, { trackRoot: box.root }), /marker not found/);
+    assert.throws(() => resolveTaskFragment({ id: 'example.escape', path: '../outside.md',
+      order: 1 }, { trackRoot: box.root }), /escapes/);
+    writeFileSync(join(box.root, 'prompts', 'task.md'), 'same\nsame\n');
+    assert.throws(() => resolveTaskFragment({ id: 'example.ambiguous', path: 'prompts/task.md',
+      order: 1, from: 'same' }, { trackRoot: box.root }), /marker is not unique/);
+    assert.throws(() => compilePackDefinition({ ...box.makePack('bad'), task: {
+      requirements: [{ id: 'example.bad', path: 'prompts/task.md', order: -1 }], contracts: [],
+    } }), /non-negative integer/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+interface TestFragment {
+  id: string;
+  path: string;
+  order: number;
+  requiresFeatures?: string[];
+}
+
+interface TestPack {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  stableId?: string;
+  moduleType?: string;
+  requiresPacks: string[];
+  conflictsWith: string[];
+  capabilities: string[];
+  evidence: string[];
+  budget: { status: string; maxRuntimeMs?: number };
+  task: { requirements: TestFragment[]; contracts: TestFragment[] };
+  checks: Array<{
+    id: string;
+    stableId?: string;
+    source: string;
+    feature: number;
+    criteria?: string[];
+    role: string;
+    observations?: string[];
+    requiresFeatures?: string[];
+  }>;
+}
+
+interface TestScoring {
+  mode: string;
+  weights?: Record<string, number>;
+}
+
+interface TestRecipe {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  track: string;
+  sequence: { level: number };
+  fixture: { path: string; id: string; version: string };
+  task: {
+    mode: string;
+    framing: { requirements: TestFragment[]; contracts: TestFragment[] };
+    baseRecipe?: { path: string; id: string; version: string };
+  };
+  packs: Array<{ path: string; id: string; version: string; includeRoles: string[];
+    includeCheckGroups?: string[] }>;
+  execution: Array<{ id: string; source: string }>;
+  scoring: TestScoring;
+}
+
+interface CompositionSandbox {
+  temp: string;
+  root: string;
+  makePack(name: string, extra?: Partial<TestPack>): TestPack;
+  writePack(name: string, extra?: Partial<TestPack>): void;
+  makeRecipe(packs: string[], scoring?: TestScoring): TestRecipe;
+  writeRecipe(value: TestRecipe): string;
+}
+
+function sandbox(): CompositionSandbox {
+  const temp = mkdtempSync(join(tmpdir(), 'stack-bench-composition-'));
+  const root = join(temp, 'example');
+  for (const directory of [
+    'composition/recipes', 'composition/packs', 'composition/fixtures', 'scenarios', 'prompts', 'contracts',
+  ]) mkdirSync(join(root, directory), { recursive: true });
+  writeFileSync(join(root, 'prompts', 'task.md'), 'Build it.');
+  writeFileSync(join(root, 'contracts', 'contract.json'), '{}');
+  writeFileSync(join(root, 'scenarios', '01.json'), JSON.stringify({
+    schemaVersion: 1,
+    level: 1,
+    features: [{ id: 1, name: 'Feature', actors: ['a'], setup: [], criteria: [
+      { id: '1a', desc: 'Works', points: 2, steps: [{ do: 'wait', actor: 'a', ms: 1 }] },
+    ] }],
+  }));
+  const fixture = {
+    schemaVersion: 1, kind: 'fixture-set', id: 'example.fixture', version: '1.0.0', state: 'draft',
+    title: 'Fixture', warehouses: ['East'], items: [
+      { name: 'Item', price: '1.00', category: 'Test', stock: { East: 1 } },
+    ], accounts: [], empty: [],
+  };
+  writeFileSync(join(root, 'composition', 'fixtures', 'fixture.json'), JSON.stringify(fixture));
+  const makePack = (name: string, extra: Partial<TestPack> = {}): TestPack => ({
+    schemaVersion: 1, kind: 'test-pack', id: `example.${name}`, version: '1.0.0', state: 'draft',
+    title: name, requiresPacks: [], conflictsWith: [], capabilities: ['browser'],
+    evidence: ['browser-observation'], budget: { status: 'unmeasured' },
+    task: { requirements: [{ id: `example.${name}.requirement`, path: 'prompts/task.md', order: 10 }], contracts: [] },
+    checks: [{ id: 'group', source: 'scenarios/01.json', feature: 1, role: 'feature' }],
+    ...extra,
+  });
+  const writePack = (name: string, extra: Partial<TestPack> = {}): void => {
+    writeFileSync(join(root, 'composition', 'packs', `${name}.json`),
+      JSON.stringify(makePack(name, extra)));
+  };
+  const makeRecipe = (packs: string[],
+    scoring: TestScoring = { mode: 'source-points' }): TestRecipe => ({
+    schemaVersion: 1, kind: 'benchmark-recipe', id: 'example.recipe', version: '1.0.0', state: 'draft',
+    title: 'Recipe', track: 'example',
+    sequence: { level: 1 },
+    fixture: { path: '../fixtures/fixture.json', id: 'example.fixture', version: '1.0.0' },
+    task: { mode: 'fresh', framing: { requirements: [
+      { id: 'example.framing', path: 'prompts/task.md', order: 0 },
+    ], contracts: [{ id: 'example.contract', path: 'contracts/contract.json', order: 0 }] } },
+    packs: packs.map(name => ({ path: `../packs/${name}.json`, id: `example.${name}`,
+      version: '1.0.0', includeRoles: ['feature'] })),
+    execution: [{ id: 'features', source: 'scenarios/01.json' }],
+    scoring,
+  });
+  const writeRecipe = (value: TestRecipe): string => {
+    const path = join(root, 'composition', 'recipes', 'recipe.json');
+    writeFileSync(path, JSON.stringify(value));
+    return path;
+  };
+  return { temp, root, makePack, writePack, makeRecipe, writeRecipe };
+}
+
+test('composition rejects missing dependencies, dependency cycles, conflicts, duplicate ownership, and unsupported capabilities', () => {
+  const box = sandbox();
+  try {
+    box.writePack('a', { requiresPacks: ['example.b@1.0.0'] });
+    let path = box.writeRecipe(box.makeRecipe(['a']));
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root }), /missing example.b@1.0.0/);
+
+    box.writePack('b', { requiresPacks: ['example.a@1.0.0'] });
+    path = box.writeRecipe(box.makeRecipe(['a', 'b']));
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root }), /dependency cycle/);
+
+    box.writePack('a', { conflictsWith: ['example.b@1.0.0'] });
+    box.writePack('b');
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root }), /conflicts with selected/);
+
+    box.writePack('a');
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root }), /criterion already selected/);
+
+    box.writePack('b', { task: { requirements: [
+      { id: 'example.a.requirement', path: 'prompts/task.md', order: 11 },
+    ], contracts: [] } });
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root }), /shared fragment.*does not match/);
+
+    path = box.writeRecipe(box.makeRecipe(['a']));
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root, availableCapabilities: [] }),
+      /unsupported capabilities: browser/);
+
+    box.writePack('a', { moduleType: 'feature' });
+    box.writePack('b', { moduleType: 'specification', task: { requirements: [{
+      id: 'example.b.requirement', path: 'prompts/task.md', order: 12,
+      requiresFeatures: ['example.missing'],
+    }], contracts: [] }, checks: [{
+      id: 'group', source: 'scenarios/01.json', feature: 1, role: 'guarantee',
+      observations: ['requested', 'unmentioned'], requiresFeatures: ['example.missing'],
+    }] });
+    const modular = box.makeRecipe(['a', 'b']);
+    const specificationSelection = modular.packs[1];
+    assert(specificationSelection);
+    specificationSelection.includeRoles = ['guarantee'];
+    path = box.writeRecipe(modular);
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root }),
+      /references missing feature module example.missing/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('a recipe scopes grading by check group and prompts by feature module', () => {
+  const box = sandbox();
+  try {
+    writeFileSync(join(box.root, 'scenarios', '01.json'), JSON.stringify({
+      schemaVersion: 1,
+      level: 1,
+      features: [{ id: 1, name: 'Feature', actors: ['a'], setup: [], criteria: [
+        { id: '1a', desc: 'Current behavior', points: 2,
+          steps: [{ do: 'wait', actor: 'a', ms: 1 }] },
+        { id: '1b', desc: 'Future behavior', points: 3,
+          steps: [{ do: 'wait', actor: 'a', ms: 1 }] },
+      ] }],
+    }));
+    box.writePack('feature', { moduleType: 'feature', checks: [{
+      id: 'group', source: 'scenarios/01.json', feature: 1, criteria: ['1b'], role: 'feature',
+    }] });
+    box.writePack('specification', {
+      moduleType: 'specification',
+      task: { requirements: [
+        { id: 'example.specification.current', path: 'prompts/task.md', order: 11,
+          requiresFeatures: ['example.feature'] },
+        { id: 'example.specification.shared-feature', path: 'prompts/task.md', order: 12,
+          requiresFeatures: ['example.feature'] },
+        { id: 'example.specification.future', path: 'prompts/task.md', order: 13,
+          requiresFeatures: ['example.future'] },
+      ], contracts: [] },
+      checks: [
+        { id: 'current', source: 'scenarios/01.json', feature: 1, criteria: ['1a'],
+          role: 'guarantee', observations: ['requested', 'unmentioned'],
+          requiresFeatures: ['example.feature'] },
+        { id: 'future', source: 'scenarios/01.json', feature: 1, criteria: ['1b'],
+          role: 'guarantee', observations: ['requested', 'unmentioned'],
+          requiresFeatures: ['example.future'] },
+      ],
+    });
+    const recipe = box.makeRecipe(['feature', 'specification']);
+    const selection = recipe.packs[1];
+    assert(selection);
+    selection.includeRoles = ['guarantee'];
+    selection.includeCheckGroups = ['current'];
+
+    const plan = compileRecipeFile(box.writeRecipe(recipe), { trackRoot: box.root });
+    assert.deepEqual(plan.checks.map(check => check.stableKey), [
+      'example.specification.current.1a',
+      'example.feature.group.1b',
+    ]);
+    assert.deepEqual(plan.packs[1]?.task.requirementIds,
+      ['example.specification.current', 'example.specification.shared-feature']);
+    assert.equal(plan.recipe.task.requirements.some(fragment =>
+      fragment.id === 'example.specification.future'), false);
+
+    selection.includeCheckGroups = ['missing'];
+    assert.throws(() => compileRecipeFile(box.writeRecipe(recipe), { trackRoot: box.root }),
+      /unknown check group missing/);
+    selection.includeCheckGroups = ['current'];
+    selection.includeRoles = ['feature'];
+    assert.throws(() => compileRecipeFile(box.writeRecipe(recipe), { trackRoot: box.root }),
+      /check group current has excluded role guarantee/);
+    selection.includeRoles = ['guarantee'];
+    selection.includeCheckGroups = ['future'];
+    assert.throws(() => compileRecipeFile(box.writeRecipe(recipe), { trackRoot: box.root }),
+      /references missing feature module example.future/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('explicit scoring must name every selected stable check exactly once', () => {
+  const box = sandbox();
+  try {
+    box.writePack('a');
+    let path = box.writeRecipe(box.makeRecipe(['a'], { mode: 'explicit', weights: {} }));
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root }), /missing example.a.group.1a/);
+    path = box.writeRecipe(box.makeRecipe(['a'], {
+      mode: 'explicit', weights: { 'example.a.group.1a': 7 },
+    }));
+    const plan = compileRecipeFile(path, { trackRoot: box.root });
+    const selectedCheck = plan.checks[0];
+    assert(selectedCheck);
+    assert.equal(plan.scoring.points, 7);
+    assert.equal(selectedCheck.sourcePoints, 2);
+    assert.equal(selectedCheck.points, 7);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('a versioned criterion can move to a focused scenario without changing its stable key', () => {
+  const box = sandbox();
+  try {
+    writeFileSync(join(box.root, 'scenarios', '02.json'), JSON.stringify({
+      schemaVersion: 1,
+      level: 1,
+      features: [{ id: 2, name: 'Focused check', actors: ['a'], setup: [], criteria: [
+        { id: '1b', desc: 'Focused behavior', points: 3,
+          steps: [{ do: 'wait', actor: 'a', ms: 1 }] },
+      ] }],
+    }));
+    box.writePack('a', { checks: [
+      { id: 'group-baseline', stableId: 'group', source: 'scenarios/01.json',
+        feature: 1, role: 'feature' },
+      { id: 'group-focused', stableId: 'group', source: 'scenarios/02.json',
+        feature: 2, role: 'feature' },
+    ] });
+    const recipe = box.makeRecipe(['a']);
+    recipe.execution.push({ id: 'focused', source: 'scenarios/02.json' });
+    const plan = compileRecipeFile(box.writeRecipe(recipe), { trackRoot: box.root });
+    assert.deepEqual(plan.checks.map(check => check.stableKey), [
+      'example.a.group.1a',
+      'example.a.group.1b',
+    ]);
+    assert(plan.execution.every(execution =>
+      execution.checkGroups.every(group => group.checkGroupId === 'group')));
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('separate modules can share a published scoring namespace without hiding their ownership', () => {
+  const box = sandbox();
+  try {
+    writeFileSync(join(box.root, 'scenarios', '01.json'), JSON.stringify({
+      schemaVersion: 1,
+      level: 1,
+      features: [{ id: 1, name: 'Feature', actors: ['a'], setup: [], criteria: [
+        { id: '1a', desc: 'Requested behavior', points: 2,
+          steps: [{ do: 'wait', actor: 'a', ms: 1 }] },
+        { id: '1b', desc: 'Quality property', points: 3,
+          steps: [{ do: 'wait', actor: 'a', ms: 1 }] },
+      ] }],
+    }));
+    box.writePack('feature', {
+      moduleType: 'feature', stableId: 'example.published',
+      checks: [{ id: 'group', source: 'scenarios/01.json', feature: 1,
+        criteria: ['1a'], role: 'feature' }],
+    });
+    box.writePack('specification', {
+      moduleType: 'specification', stableId: 'example.published',
+      task: { requirements: [{ id: 'example.specification.requirement', path: 'prompts/task.md',
+        order: 11, requiresFeatures: ['example.feature'] }], contracts: [] },
+      checks: [{ id: 'group', source: 'scenarios/01.json', feature: 1,
+        criteria: ['1b'], role: 'guarantee', observations: ['requested', 'unmentioned'],
+        requiresFeatures: ['example.feature'] }],
+    });
+    const recipe = box.makeRecipe(['feature', 'specification'], { mode: 'explicit', weights: {
+      'example.published.group.1a': 2,
+      'example.published.group.1b': 3,
+    } });
+    const specificationSelection = recipe.packs[1];
+    assert(specificationSelection);
+    specificationSelection.includeRoles = ['guarantee'];
+    const plan = compileRecipeFile(box.writeRecipe(recipe), { trackRoot: box.root });
+    assert.deepEqual(plan.checks.map(check => ({
+      stableKey: check.stableKey,
+      packId: check.packId,
+      stablePackId: check.stablePackId,
+    })), [
+      { stableKey: 'example.published.group.1a', packId: 'example.feature',
+        stablePackId: 'example.published' },
+      { stableKey: 'example.published.group.1b', packId: 'example.specification',
+        stablePackId: 'example.published' },
+    ]);
+    assert.deepEqual(plan.packs.map(selected => [selected.id, selected.stableId]), [
+      ['example.feature', 'example.published'],
+      ['example.specification', 'example.published'],
+    ]);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('published scoring namespaces still reject duplicate stable check keys', () => {
+  const box = sandbox();
+  try {
+    writeFileSync(join(box.root, 'scenarios', '02.json'), JSON.stringify({
+      schemaVersion: 1,
+      level: 1,
+      features: [{ id: 2, name: 'Other feature', actors: ['a'], setup: [], criteria: [
+        { id: '1a', desc: 'Conflicting identity', points: 1,
+          steps: [{ do: 'wait', actor: 'a', ms: 1 }] },
+      ] }],
+    }));
+    box.writePack('a', { stableId: 'example.published' });
+    box.writePack('b', { stableId: 'example.published', checks: [
+      { id: 'group', source: 'scenarios/02.json', feature: 2, role: 'feature' },
+    ] });
+    const recipe = box.makeRecipe(['a', 'b']);
+    recipe.execution.push({ id: 'other', source: 'scenarios/02.json' });
+    assert.throws(() => compileRecipeFile(box.writeRecipe(recipe), { trackRoot: box.root }),
+      /duplicate stable check key example\.published\.group\.1a/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('composition references cannot escape the track or composition roots', () => {
+  const box = sandbox();
+  try {
+    box.writePack('a');
+    const recipe = box.makeRecipe(['a']);
+    const pack = recipe.packs[0];
+    assert(pack);
+    pack.path = '../../../outside.json';
+    const path = box.writeRecipe(recipe);
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root }), /escapes/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('a promotion catalog cannot point a live alias at a draft recipe', () => {
+  const box = sandbox();
+  try {
+    box.writePack('a');
+    box.writeRecipe(box.makeRecipe(['a']));
+    const catalog = {
+      schemaVersion: 1, kind: 'promotion-catalog', id: 'example.recipes', version: '1.0.0',
+      state: 'draft', title: 'Promotions', entries: [{ alias: 'L1', status: 'promoted',
+        recipe: { path: 'recipes/recipe.json', id: 'example.recipe', version: '1.0.0' } }],
+    };
+    const path = join(box.root, 'composition', 'promotions.json');
+    writeFileSync(path, JSON.stringify(catalog));
+    assert.throws(() => compilePromotionFile(path, { trackRoot: box.root }), /while it is draft/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('qualified recipes cannot select draft packs, fixtures, or base recipes', () => {
+  const box = sandbox();
+  try {
+    box.writePack('a');
+    const recipe = box.makeRecipe(['a']);
+    recipe.state = 'qualified';
+    const path = box.writeRecipe(recipe);
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root }),
+      /qualified recipe selects draft fixture/);
+    const fixturePath = join(box.root, 'composition', 'fixtures', 'fixture.json');
+    const fixture = JSON.parse(readFileSync(fixturePath, 'utf8'));
+    fixture.state = 'qualified';
+    writeFileSync(fixturePath, JSON.stringify(fixture));
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root }),
+      /qualified recipe selects draft pack/);
+
+    box.writePack('a', { state: 'qualified', budget: { status: 'bounded', maxRuntimeMs: 1000 } });
+    const base = box.makeRecipe(['a']);
+    base.id = 'example.base';
+    writeFileSync(join(box.root, 'composition', 'recipes', 'base.json'), JSON.stringify(base));
+    recipe.sequence = { level: 2 };
+    recipe.task = { ...recipe.task, mode: 'upgrade', baseRecipe: {
+      path: 'base.json', id: 'example.base', version: '1.0.0',
+    } };
+    box.writeRecipe(recipe);
+    assert.throws(() => compileRecipeFile(path, { trackRoot: box.root }),
+      /qualified upgrade recipe selects draft base/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('upgrade recipe references are exact, resolvable, and acyclic', () => {
+  const box = sandbox();
+  try {
+    box.writePack('a');
+    const a = box.makeRecipe(['a']);
+    a.id = 'example.recipe-a';
+    a.sequence = { level: 2 };
+    a.task = { ...a.task, mode: 'upgrade', baseRecipe: {
+      path: 'recipe-b.json', id: 'example.recipe-b', version: '1.0.0',
+    } };
+    const b = box.makeRecipe(['a']);
+    b.id = 'example.recipe-b';
+    b.sequence = { level: 2 };
+    b.task = { ...b.task, mode: 'upgrade', baseRecipe: {
+      path: 'recipe-a.json', id: 'example.recipe-a', version: '1.0.0',
+    } };
+    const aPath = join(box.root, 'composition', 'recipes', 'recipe-a.json');
+    const bPath = join(box.root, 'composition', 'recipes', 'recipe-b.json');
+    writeFileSync(aPath, JSON.stringify(a));
+    writeFileSync(bPath, JSON.stringify(b));
+    assert.throws(() => compileRecipeFile(aPath, { trackRoot: box.root }), /recipe dependency cycle/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/composition-current.contract.ts b/tools/stack-bench/tests/composition-current.contract.ts
new file mode 100644
index 00000000000..f6324958009
--- /dev/null
+++ b/tools/stack-bench/tests/composition-current.contract.ts
@@ -0,0 +1,38 @@
+import assert from 'node:assert/strict';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { checkCompositions } from '../commands/check-composition.js';
+import { compilePromotionFile, compileRecipeFile }
+  from '../src/composition/composition-compiler.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+const ecommerce = join(STACK_BENCH_ROOT, 'tracks', 'ecommerce');
+const recipe = (name: string): string => join(ecommerce, 'composition', 'recipes', name);
+
+test('the current ecommerce composition and sequential chain are valid', () => {
+  const [report] = checkCompositions({ trackName: 'ecommerce' });
+  assert.equal(report?.track, 'ecommerce');
+  assert(report && report.packs > 0 && report.recipes === 5 && report.checks > 0);
+
+  const l1 = compileRecipeFile(recipe('sequential-l1-2.5.0.json'), { trackRoot: ecommerce });
+  const l2 = compileRecipeFile(recipe('sequential-l2-1.6.0.json'), { trackRoot: ecommerce });
+  const l3 = compileRecipeFile(recipe('sequential-l3-1.0.0.json'), { trackRoot: ecommerce });
+  assert.deepEqual([l1.recipe.sequence?.level, l2.recipe.sequence?.level,
+    l3.recipe.sequence?.level], [1, 2, 3]);
+  assert.deepEqual([l2.recipe.task.baseRecipe?.id, l3.recipe.task.baseRecipe?.id],
+    [l1.recipe.id, l2.recipe.id]);
+  assert.deepEqual([l2.recipe.task.baseRecipe?.version, l3.recipe.task.baseRecipe?.version],
+    [l1.recipe.version, l2.recipe.version]);
+  assert(l2.checks.length > l1.checks.length);
+  assert(l3.checks.length > l2.checks.length);
+
+  const promotions = compilePromotionFile(join(ecommerce, 'composition', 'promotions.json'), {
+    trackRoot: ecommerce,
+  });
+  assert.deepEqual(promotions.entries.map(entry => [entry.alias, entry.status, entry.recipe.id]), [
+    ['L1', 'candidate', 'ecommerce.sequential-l1'],
+    ['L2', 'candidate', 'ecommerce.sequential-l2'],
+    ['L3', 'candidate', 'ecommerce.sequential-l3'],
+  ]);
+});
diff --git a/tools/stack-bench/tests/condition-compiler.test.ts b/tools/stack-bench/tests/condition-compiler.test.ts
new file mode 100644
index 00000000000..62da0eab222
--- /dev/null
+++ b/tools/stack-bench/tests/condition-compiler.test.ts
@@ -0,0 +1,179 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import test from 'node:test';
+
+import { resolveGuidanceProfile, resolveStudyConditions,
+  validateConditionReference } from '../src/campaigns/condition-compiler.js';
+
+const prescribed = { id: 'prescribed', version: '1.0.0',
+  guidanceProfile: 'prescribed@1.2.0', repairPolicy: 'scored-only@1.1.0' };
+const requested = { track: 'example', levels: [{ level: 1,
+  recipe: { id: 'example.l1', version: '1.0.0', contentSha256: 'a'.repeat(64),
+    meaningSha256: 'b'.repeat(64), executionSha256: 'c'.repeat(64) },
+  selection: { sha256: 'd'.repeat(64), completeness: 'full', scoredPoints: 10,
+    taskPacks: ['example.core'], requested: { packs: [], checks: [] } },
+  task: { sha256: 'e'.repeat(64), requirementSha256: 'f'.repeat(64),
+    contractSha256: '1'.repeat(64), requirementIds: ['example.requirement'],
+    contractIds: ['example.contract'] } }] };
+
+const modularRequested = { track: 'example', levels: [{ ...requested.levels[0],
+  selection: { schemaVersion: 3, sha256: 'd'.repeat(64), scoredPoints: 2,
+    requested: { features: ['example.feature'], specifications: {
+      requested: [], expected: ['example.spec@1.0.0'], observed: [],
+    }, checks: [] },
+    promptPacks: ['example.feature'], features: ['example.feature'],
+    specifications: { requested: [], expected: ['example.spec@1.0.0'], observed: [] },
+    scoredChecks: [
+      { stableKey: 'example.feature.check', points: 1, treatment: 'requested' },
+      { stableKey: 'example.spec.check', points: 1, treatment: 'expected' },
+    ], observedChecks: [] },
+}] };
+
+const writeJson = (path: string, value: unknown): void => {
+  mkdirSync(dirname(path), { recursive: true });
+  writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`);
+};
+
+test('the prescribed condition binds independent guidance, repair, and document identities', () => {
+  const [condition] = resolveStudyConditions([prescribed], ['mongodb', 'postgres', 'spacetime'],
+    { requested });
+  assert.match(condition.sha256, /^[a-f0-9]{64}$/);
+  assert.equal(condition.guidance.mode, 'prescribed');
+  assert.equal(condition.guidance.material.designAdvice, true);
+  assert.deepEqual(Object.keys(condition.guidance.documents), ['mongodb', 'postgres', 'spacetime']);
+  const spacetimeSkills = condition.guidance.skills.spacetime;
+  const mongodbSkills = condition.guidance.skills.mongodb;
+  assert.ok(spacetimeSkills);
+  assert.ok(mongodbSkills);
+  assert.deepEqual(spacetimeSkills.ids,
+    ['typescript-server', 'typescript-client']);
+  assert.deepEqual(mongodbSkills.ids, []);
+  assert.deepEqual(condition.guidance.credentialAliases, {
+    'stackbench-admin-2026': 'store-admin-2026',
+    'stackbench-customer-2026': 'store-customer-2026',
+    'stackbench-staff-2026': 'store-staff-2026',
+  });
+  assert.match(spacetimeSkills.sha256, /^[a-f0-9]{64}$/);
+  assert.equal(condition.repair.scoredEvidence, true);
+  assert.equal(condition.repair.observedEvidence, false);
+  assert.equal(condition.repair.scenarioValues, 'withheld');
+  assert.deepEqual(condition.requested, requested);
+  const requestedLevel = requested.levels[0];
+  assert.ok(requestedLevel);
+  const [changed] = resolveStudyConditions([prescribed], ['mongodb', 'postgres', 'spacetime'],
+    { requested: { ...requested, levels: [{ ...requestedLevel, selection: {
+      ...requestedLevel.selection, sha256: 'e'.repeat(64),
+    } }] } });
+  assert.notEqual(changed.sha256, condition.sha256);
+});
+
+test('packaged neutral guidance exists symmetrically without architecture advice', () => {
+  const neutral = { id: 'neutral', version: '1.0.0', guidanceProfile: 'neutral@1.8.0',
+    repairPolicy: 'scored-only@1.1.0' };
+  const [condition] = resolveStudyConditions([neutral], ['mongodb', 'postgres', 'spacetime'],
+    { requested });
+  assert.equal(condition.guidance.state, 'qualified');
+  assert.equal(condition.guidance.mode, 'neutral');
+  assert.equal(condition.guidance.material.designAdvice, false);
+  assert.deepEqual(Object.keys(condition.guidance.documents), ['mongodb', 'postgres', 'spacetime']);
+});
+
+test('neutral guidance uses current stack documents, skills, and credential aliases', () => {
+  const profile = resolveGuidanceProfile('neutral@1.8.0', ['mongodb', 'postgres', 'spacetime']);
+  assert.equal(profile.state, 'qualified');
+  assert.equal(profile.material.designAdvice, false);
+  assert.deepEqual(Object.keys(profile.documents), ['mongodb', 'postgres', 'spacetime']);
+  assert.deepEqual(profile.skills.spacetime?.ids, ['typescript-server', 'typescript-client']);
+  assert.deepEqual(profile.credentialAliases, {
+    'stackbench-admin-2026': 'store-admin-2026',
+    'stackbench-customer-2026': 'store-customer-2026',
+    'stackbench-staff-2026': 'store-staff-2026',
+  });
+});
+
+test('expected modular specifications are scored under the ordinary repair policy', () => {
+  const selected = { id: 'defaults', version: '1.0.0', guidanceProfile: 'neutral@1.8.0',
+    repairPolicy: 'scored-only@1.1.0' };
+  const [condition] = resolveStudyConditions([selected], ['mongodb', 'postgres', 'spacetime'],
+    { requested: modularRequested });
+  const selectedLevel = condition.requested.levels[0];
+  assert.ok(selectedLevel?.selection.specifications);
+  assert.deepEqual(selectedLevel.selection.specifications.expected,
+    ['example.spec@1.0.0']);
+  assert.equal(condition.repair.scoredEvidence, true);
+});
+
+test('condition references are strict and versioned', () => {
+  assert.deepEqual(validateConditionReference(prescribed), prescribed);
+  assert.throws(() => validateConditionReference({ ...prescribed, surprise: true }), /surprise.*unknown/);
+  assert.throws(() => validateConditionReference({ ...prescribed, repairPolicy: 'scored-only' }), /id@version/);
+  assert.throws(() => resolveStudyConditions([prescribed], ['postgres']), /requested/);
+});
+
+test('modular condition references are canonical without mutating caller-owned input', () => {
+  const input = { ...prescribed, specifications: { levels: [
+    { level: 2, requested: ['example.spec.second@1.0.0'], expected: [], observed: [] },
+    { level: 1, requested: [], expected: ['example.spec.first@1.0.0'], observed: [] },
+  ] } };
+  const original = structuredClone(input);
+  const validated = validateConditionReference(input);
+  assert.deepEqual(input, original);
+  assert.ok(validated.specifications);
+  assert.deepEqual(validated.specifications.levels.map(entry => entry.level), [1, 2]);
+  assert.throws(() => validateConditionReference({ ...prescribed, specifications: { levels: [
+    { level: 1, requested: ['example.spec.same@1.0.0'],
+      expected: ['example.spec.same@1.0.0'], observed: [] },
+  ] } }), /both requested and expected/);
+});
+
+function customCondition({ guidance = {}, repair = {} } = {}) {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-condition-'));
+  const catalogRoot = join(root, 'conditions');
+  writeFileSync(join(root, 'backend.md'), 'connection facts\n');
+  writeJson(join(catalogRoot, 'catalog.json'), { schemaVersion: 1, kind: 'study-condition-catalog',
+    guidanceProfiles: { 'neutral@1.4.0': 'guidance.json' },
+    repairPolicies: { 'scored@1.0.0': 'repair.json' } });
+  writeJson(join(catalogRoot, 'guidance.json'), { schemaVersion: 1, kind: 'backend-guidance-profile',
+    id: 'neutral', version: '1.4.0', state: 'qualified', mode: 'neutral',
+    material: { accessFacts: true, apiReference: true, designAdvice: false },
+    documents: { fake: 'backend.md' }, applicationInterfaces: { fake: 'http' },
+    skills: { fake: [] }, ...guidance });
+  writeJson(join(catalogRoot, 'repair.json'), { schemaVersion: 1, kind: 'repair-policy',
+    id: 'scored', version: '1.0.0', state: 'qualified', scoredEvidence: true,
+    observedEvidence: false, scenarioValues: 'withheld', ...repair });
+  const ref = { id: 'defaults', version: '1.0.0', guidanceProfile: 'neutral@1.4.0',
+    repairPolicy: 'scored@1.0.0' };
+  return { root, catalogPath: join(catalogRoot, 'catalog.json'), ref };
+}
+
+test('neutral guidance cannot smuggle design advice or omit a selected stack document', () => {
+  const advice = customCondition({ guidance: {
+    material: { accessFacts: true, apiReference: true, designAdvice: true },
+  } });
+  try {
+    assert.throws(() => resolveStudyConditions([advice.ref], ['fake'], {
+      stackBenchRoot: advice.root, catalogPath: advice.catalogPath, requested,
+    }), /designAdvice.*false/);
+  } finally { rmSync(advice.root, { recursive: true, force: true }); }
+
+  const missing = customCondition();
+  try {
+    assert.throws(() => resolveStudyConditions([missing.ref], ['other'], {
+      stackBenchRoot: missing.root, catalogPath: missing.catalogPath, requested,
+    }), /documents.other.*required/);
+  } finally { rmSync(missing.root, { recursive: true, force: true }); }
+});
+
+test('observed-only evidence can never enter repairs and scored evidence remains available', () => {
+  for (const overrides of [{ repair: { observedEvidence: true } },
+    { repair: { scoredEvidence: false } }, { repair: { scenarioValues: 'disclosed' } }]) {
+    const fixture = customCondition(overrides);
+    try {
+      assert.throws(() => resolveStudyConditions([fixture.ref], ['fake'], {
+        stackBenchRoot: fixture.root, catalogPath: fixture.catalogPath, requested,
+      }), /observedEvidence|scoredEvidence|scenarioValues/);
+    } finally { rmSync(fixture.root, { recursive: true, force: true }); }
+  }
+});
diff --git a/tools/stack-bench/tests/container-auth.test.ts b/tools/stack-bench/tests/container-auth.test.ts
new file mode 100644
index 00000000000..dee021ef601
--- /dev/null
+++ b/tools/stack-bench/tests/container-auth.test.ts
@@ -0,0 +1,41 @@
+import assert from 'node:assert/strict';
+import { resolve } from 'node:path';
+import test from 'node:test';
+
+import { resolveContainerAuth } from '../container/container-auth.js';
+
+test('container auth resolves a direct subscription token in controller memory', () => {
+  const secret = 'subscription-secret-value';
+  const auth = resolveContainerAuth({ env: { CLAUDE_CODE_OAUTH_TOKEN: secret },
+    credentialsPath: '/unused/credentials' });
+  assert.deepEqual(auth, { mode: 'subscription-token', credential: secret });
+});
+
+test('container auth resolves a selected subscription token only in the controller', () => {
+  const tokenPath = resolve('/private/token');
+  const auth = resolveContainerAuth({ env: { CLAUDE_CODE_OAUTH_TOKEN_FILE: tokenPath },
+    credentialsPath: '/unused/credentials', exists: path => path === tokenPath,
+    read: () => 'present\n' });
+  assert.deepEqual(auth, { mode: 'subscription-token', credential: 'present' });
+});
+
+test('container auth rejects ambiguous or unusable selected credentials', () => {
+  assert.throws(() => resolveContainerAuth({ apiKey: 'key',
+    env: { CLAUDE_CODE_OAUTH_TOKEN: 'token' } }), /only one/);
+  assert.throws(() => resolveContainerAuth({ env: {
+    CLAUDE_CODE_OAUTH_TOKEN: 'token', CLAUDE_CODE_OAUTH_TOKEN_FILE: '/private/token',
+  } }), /only one/);
+  assert.throws(() => resolveContainerAuth({ env: {
+    CLAUDE_CODE_OAUTH_TOKEN_FILE: 'relative-token',
+  } }), /absolute path/);
+  assert.throws(() => resolveContainerAuth({ env: {
+    CLAUDE_CODE_OAUTH_TOKEN_FILE: '/private/token',
+  }, exists: () => true, read: () => '\n' }), /is empty/);
+});
+
+test('container auth rejects rotating credentials that generated commands could read', () => {
+  assert.throws(() => resolveContainerAuth({ env: {},
+    credentialsPath: '/home/.claude/.credentials.json',
+    exists: path => path === '/home/.claude/.credentials.json' }),
+  /cannot be isolated/);
+});
diff --git a/tools/stack-bench/tests/container-identity.test.ts b/tools/stack-bench/tests/container-identity.test.ts
new file mode 100644
index 00000000000..c62cb0b3e56
--- /dev/null
+++ b/tools/stack-bench/tests/container-identity.test.ts
@@ -0,0 +1,14 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { parseRunningContainerIdentity } from '../src/runtime/container-identity.js';
+
+test('container identity requires one exact running Docker container', () => {
+  const id = 'a'.repeat(64);
+  assert.deepEqual(parseRunningContainerIdentity('database', `${id} true\n`),
+    { name: 'database', id });
+  assert.throws(() => parseRunningContainerIdentity('database', `${id} false`),
+    /not a running Docker container/);
+  assert.throws(() => parseRunningContainerIdentity('database', 'short true'),
+    /not a running Docker container/);
+});
diff --git a/tools/stack-bench/tests/container-image.test.ts b/tools/stack-bench/tests/container-image.test.ts
new file mode 100644
index 00000000000..4a45af6df6b
--- /dev/null
+++ b/tools/stack-bench/tests/container-image.test.ts
@@ -0,0 +1,32 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { parseExactImageReference, parseImageId, resolveContainerImage }
+  from '../src/runtime/container-image.js';
+
+const ID = `sha256:${'a'.repeat(64)}`;
+
+test('container image references resolve to immutable content ids', () => {
+  let invocation: { command: string; args: readonly string[] } | null = null;
+  const result = resolveContainerImage('stack-bench-build:test', (command, args) => {
+    invocation = { command, args };
+    return `${ID}\n`;
+  });
+  assert.deepEqual(result, { reference: 'stack-bench-build:test', id: ID });
+  assert.deepEqual(invocation, { command: 'docker',
+    args: ['image', 'inspect', '--format', '{{.Id}}', 'stack-bench-build:test'] });
+});
+
+test('malformed Docker image ids are rejected', () => {
+  assert.throws(() => parseImageId('stack-bench-build:latest'), /invalid image content id/);
+  assert.throws(() => resolveContainerImage('', () => ID), /reference is required/);
+});
+
+test('exact image references expose their content digest', () => {
+  const reference = `registry.example/stack-bench@${ID}`;
+  assert.deepEqual(parseExactImageReference(reference), { reference, id: ID });
+  assert.equal(parseExactImageReference('stack-bench-build:latest'), null);
+});
+
+test('exact image references reject URL schemes', () => {
+  assert.equal(parseExactImageReference(`https://registry.example/app@sha256:${'a'.repeat(64)}`), null);
+});
diff --git a/tools/stack-bench/tests/container-mount.test.ts b/tools/stack-bench/tests/container-mount.test.ts
new file mode 100644
index 00000000000..32aadd148b5
--- /dev/null
+++ b/tools/stack-bench/tests/container-mount.test.ts
@@ -0,0 +1,29 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { dockerMountArguments } from '../src/runtime/container-mount.js';
+
+test('container mounts distinguish host binds from release-owned volumes', () => {
+  assert.deepEqual(dockerMountArguments({
+    kind: 'bind', source: 'C:\\bench\\app', target: '/app', readOnly: false,
+  }), ['--mount', 'type=bind,src=C:\\bench\\app,dst=/app']);
+  assert.deepEqual(dockerMountArguments({
+    kind: 'volume', source: 'stack-bench-release-deps', target: '/release-deps', readOnly: true,
+  }), ['--mount', 'type=volume,src=stack-bench-release-deps,dst=/release-deps,readonly']);
+});
+
+test('container mount validation rejects ambiguous or unsafe declarations', () => {
+  assert.throws(() => dockerMountArguments(null), /must be an object/);
+  assert.throws(() => dockerMountArguments({
+    kind: 'secret', source: 'x', target: '/x', readOnly: true,
+  }), /unsupported/);
+  assert.throws(() => dockerMountArguments({
+    kind: 'volume', source: '../x', target: '/x', readOnly: true,
+  }), /volume name/);
+  assert.throws(() => dockerMountArguments({
+    kind: 'bind', source: '/host', target: '/../escape', readOnly: true,
+  }), /normalized absolute/);
+  assert.throws(() => dockerMountArguments({
+    kind: 'bind', source: '/host', target: '/x', readOnly: 'yes', extra: true,
+  }), /unknown fields/);
+});
diff --git a/tools/stack-bench/tests/controller.test.ts b/tools/stack-bench/tests/controller.test.ts
new file mode 100644
index 00000000000..98a284e9ca5
--- /dev/null
+++ b/tools/stack-bench/tests/controller.test.ts
@@ -0,0 +1,120 @@
+import assert from 'node:assert/strict';
+import { EventEmitter } from 'node:events';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { controllerChildEnvironment, controllerCommandRequiresAgentAuth,
+  forwardControllerSignals, resolveControllerCommand } from '../appliance/controller.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+function command(argv: string[]) {
+  const resolved = resolveControllerCommand(argv);
+  assert.ok(resolved);
+  return resolved;
+}
+
+test('controller forwards repeated stop signals until its child exits', () => {
+  const source = new EventEmitter();
+  const received: NodeJS.Signals[] = [];
+  const stop = forwardControllerSignals({ kill: signal => received.push(signal) }, source);
+  source.emit('SIGINT');
+  source.emit('SIGINT');
+  source.emit('SIGTERM');
+  stop();
+  source.emit('SIGTERM');
+  assert.deepEqual(received, ['SIGINT', 'SIGINT', 'SIGTERM']);
+});
+
+test('controller exposes a small explicit operator command surface', () => {
+  assert.equal(resolveControllerCommand([]), null);
+  assert.equal(resolveControllerCommand(['--help']), null);
+  assert.match(command(['preflight']).args[0] ?? '', /preflight\.js$/);
+  const run = command(['run', '--backend', 'postgres', '--levels', '1-2']);
+  assert.equal(run.executable, process.execPath);
+  assert.match(run.args[0] ?? '', /[\\/]dist[\\/]commands[\\/]/);
+  assert.match(run.args[0] ?? '', /bench\.js$/);
+  assert.deepEqual(run.args.slice(1), ['--backend', 'postgres', '--levels', '1-2']);
+  const recovery = command(['recover', '/private/supervisor.json']);
+  assert.match(recovery.args[0] ?? '', /recovery\.js$/);
+  assert.deepEqual(recovery.args.slice(1), ['recover', '/private/supervisor.json']);
+  const leaseRecovery = command([
+    'recover-lease', '/private/backend-lease.json', '--out', '/results/recovered-run']);
+  assert.match(leaseRecovery.args[0] ?? '', /recovery\.js$/);
+  assert.deepEqual(leaseRecovery.args.slice(1), [
+    'recover-lease', '/private/backend-lease.json', '--out', '/results/recovered-run']);
+  const campaign = command(['campaign', 'show', '/plans/campaign.json']);
+  assert.match(campaign.args[0] ?? '', /campaign-cli\.js$/);
+  assert.deepEqual(campaign.args.slice(1), ['show', '/plans/campaign.json']);
+  const campaignRun = command(['campaign', 'run', '/plans/campaign.json',
+    '--out', '/results/campaign-001']);
+  assert.deepEqual(campaignRun.args.slice(1), ['run', '/plans/campaign.json',
+    '--out', '/results/campaign-001']);
+  const dashboard = command(['dashboard', '--port', '7331']);
+  assert.match(dashboard.args[0] ?? '', /dashboard[\\/]dashboard-server\.js$/);
+  assert.deepEqual(dashboard.args.slice(1), ['--port', '7331']);
+  assert.match(command(['qualify-reference']).args[0] ?? '', /reference-live\.js$/);
+  assert.match(command(['qualify-null']).args[0] ?? '', /null-control\.js$/);
+  assert.match(command(['qualification']).args[0] ?? '', /qualification-cli\.js$/);
+  assert.match(command(['pack-budget']).args[0] ?? '', /pack-budget\.js$/);
+  assert.match(command(['repair']).args[0] ?? '', /repair-cli\.js$/);
+  assert.throws(() => resolveControllerCommand(['shell']), /unknown controller command/);
+});
+
+test('controller image starts the compiled entry point', () => {
+  const dockerfile = readFileSync(join(STACK_BENCH_ROOT, 'appliance', 'Controller.Dockerfile'),
+    'utf8');
+  assert.match(dockerfile,
+    /ENTRYPOINT \["node", "\/opt\/stack-bench\/dist\/appliance\/controller\.js"\]/);
+  assert.doesNotMatch(dockerfile, /ENTRYPOINT .*controller\.ts/);
+});
+
+test('controller selects exactly one explicit agent credential mode', () => {
+  assert.throws(() => controllerChildEnvironment({}),
+    /requires STACK_BENCH_CLAUDE_OAUTH_TOKEN_FILE/);
+  const subscription = controllerChildEnvironment({ STACK_BENCH_AGENT_AUTH: 'subscription-token',
+    STACK_BENCH_CLAUDE_OAUTH_TOKEN_FILE: '/private/subscription-token' });
+  assert.equal(subscription.CLAUDE_CODE_OAUTH_TOKEN_FILE, '/private/subscription-token');
+  assert.throws(() => controllerChildEnvironment({ STACK_BENCH_AGENT_AUTH: 'subscription-token' }),
+    /requires STACK_BENCH_CLAUDE_OAUTH_TOKEN_FILE/);
+  const apiKey = controllerChildEnvironment({ STACK_BENCH_AGENT_AUTH: 'api-key',
+    STACK_BENCH_ANTHROPIC_API_KEY_FILE: '/private/key' });
+  assert.equal(apiKey.ANTHROPIC_API_KEY_FILE, '/private/key');
+  assert.throws(() => controllerChildEnvironment({ STACK_BENCH_AGENT_AUTH: 'api-key' }),
+    /requires STACK_BENCH_ANTHROPIC_API_KEY_FILE/);
+  assert.throws(() => controllerChildEnvironment({ STACK_BENCH_AGENT_AUTH: 'ambient' }),
+    /must be subscription-token or api-key/);
+  assert.throws(() => controllerChildEnvironment({ STACK_BENCH_AGENT_AUTH: 'credentials' }),
+    /must be subscription-token or api-key/);
+});
+
+test('dependency setup does not require or forward agent credentials', () => {
+  const env = controllerChildEnvironment({ PATH: '/usr/bin',
+    ANTHROPIC_API_KEY: 'ambient-key', CLAUDE_CODE_OAUTH_TOKEN: 'ambient-token' },
+  { requireAgentAuth: false });
+  assert.equal(env.PATH, '/usr/bin');
+  assert.equal(env.ANTHROPIC_API_KEY, undefined);
+  assert.equal(env.CLAUDE_CODE_OAUTH_TOKEN, undefined);
+});
+
+test('read-only and model-free controller commands do not require agent credentials', () => {
+  const modelFree: Array<[string, string[]]> = [
+    ['init-deps', []], ['verify-deps', []], ['test', []],
+    ['qualify-reference', []], ['qualify-null', []], ['qualification', ['status']],
+    ['pack-budget', ['recommend']], ['campaign', ['validate']], ['campaign', ['show']],
+    ['campaign', ['trial']], ['campaign', ['status']],
+    ['campaign', ['report']], ['campaign', ['reconcile']], ['repair', ['status']],
+    ['repair', ['grant']], ['verify-release', []], ['recover', []],
+  ];
+  for (const [name, args] of modelFree) {
+    assert.equal(controllerCommandRequiresAgentAuth(name, args), false,
+      `${name} ${args[0] ?? ''}`);
+  }
+  const paid: Array<[string, string[]]> = [
+    ['run', []], ['preflight', []], ['dashboard', []], ['campaign', ['run']],
+  ];
+  for (const [name, args] of paid) {
+    assert.equal(controllerCommandRequiresAgentAuth(name, args), true,
+      `${name} ${args[0] ?? ''}`);
+  }
+});
diff --git a/tools/stack-bench/tests/cost-ledger.test.ts b/tools/stack-bench/tests/cost-ledger.test.ts
new file mode 100644
index 00000000000..28e91fe8c10
--- /dev/null
+++ b/tools/stack-bench/tests/cost-ledger.test.ts
@@ -0,0 +1,78 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { durableCostLedger } from '../src/evidence/cost-proof.js';
+import type { CostRun } from '../src/evidence/cost-proof.js';
+
+const receipt = (costUsd: number) => ({ invocation: 1, receipt: {
+  complete: true, reconciled: true, error: null, costUsd,
+} });
+
+test('cost ledger uses stored receipts and does not reprice usage', () => {
+  const run: CostRun = { id: 'run-1', totals: { costUsd: 3.5, costComplete: true },
+    pricing: { id: 'recorded-pricing' }, levels: [{ level: 1, buildSessions: [{
+      costUsd: 2, costComplete: true, costReceipts: [receipt(2)],
+      usage: { input: 999_999_999, output: 999_999_999 },
+    }], repairSessions: [{ costUsd: 1.5, costComplete: true,
+      costReceipts: [receipt(1.5)] }] }] };
+  const ledger = durableCostLedger(run);
+  assert.equal(ledger.receiptCostUsd, 3.5);
+  assert.equal(ledger.differenceUsd, 0);
+  assert.equal(ledger.complete, true);
+  assert.equal(ledger.exact, true);
+});
+
+test('cost ledger stays complete and marks itself inexact when a receipt charged a ceiling', () => {
+  const estimated = { invocation: 1, receipt: {
+    complete: true, reconciled: true, error: null, costUsd: 2, exact: false } };
+  const ledger = durableCostLedger({ id: 'run-estimated', totals: { costUsd: 2, costComplete: true },
+    levels: [{ level: 1, buildSessions: [{ costUsd: 2, costComplete: true,
+      costReceipts: [estimated] }] }] });
+  assert.equal(ledger.complete, true);
+  assert.equal(ledger.exact, false);
+  assert.deepEqual(ledger.rows.map(row => row.exact), [false]);
+});
+
+test('cost ledger rejects incomplete receipt proof', () => {
+  const run: CostRun = { id: 'run-2', totals: { costUsd: 2, costComplete: false },
+    levels: [{ level: 1, buildSessions: [{
+      costUsd: 2, costComplete: false, costReceipts: [{ invocation: 1, receipt: {
+        complete: false, reconciled: false, error: 'provider result was incomplete', costUsd: 2,
+      } }],
+    }] }] };
+  const ledger = durableCostLedger(run);
+  assert.equal(ledger.receiptCostUsd, 2);
+  assert.equal(ledger.complete, false);
+});
+
+test('cost ledger accepts a complete non-billable session without receipts', () => {
+  const run: CostRun = { id: 'run-3', totals: { costUsd: 0, costComplete: true },
+    levels: [{ level: 1, buildSessions: [{
+      costUsd: 0, costComplete: true, costReceipts: [],
+    }] }] };
+  const ledger = durableCostLedger(run);
+  assert.equal(ledger.receiptCostUsd, 0);
+  assert.equal(ledger.complete, true);
+});
+
+test('cost ledger preserves every same-depth feature build session', () => {
+  const run: CostRun = { id: 'run-feature', totals: { costUsd: 3, costComplete: true },
+    levels: [{ level: 1, buildSessions: [
+      { costUsd: 1, costComplete: true, costReceipts: [receipt(1)] },
+      { costUsd: 2, costComplete: true, costReceipts: [receipt(2)] },
+    ] }] };
+  const ledger = durableCostLedger(run);
+  assert.equal(ledger.rows.length, 2);
+  assert.equal(ledger.receiptCostUsd, 3);
+  assert.equal(ledger.complete, true);
+});
+
+test('cost evidence rejects negative and malformed money values', () => {
+  assert.throws(() => durableCostLedger({ levels: [{ level: 1, buildSessions: [{
+    costUsd: -1,
+  }] }] }), /costUsd/);
+  assert.throws(() => durableCostLedger({ totals: { costUsd: -1 } }), /totals\.costUsd/);
+  assert.throws(() => durableCostLedger({ levels: [{ level: 1, buildSessions: [{
+    costUsd: 1, costReceipts: [{ receipt: { complete: true, reconciled: true, error: null } }],
+  }] }] }), /receipt\[0\]\.costUsd/);
+});
diff --git a/tools/stack-bench/tests/credential-aliases.test.ts b/tools/stack-bench/tests/credential-aliases.test.ts
new file mode 100644
index 00000000000..3a6d5095dfd
--- /dev/null
+++ b/tools/stack-bench/tests/credential-aliases.test.ts
@@ -0,0 +1,100 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { gradeArgv } from '../commands/bench.js';
+import { agentRequestArgv } from '../src/agents/agent-adapter-contract.js';
+import { AGENT_ADAPTER_REGISTRY } from '../src/agents/agent-adapters.js';
+import type { AgentRequest } from '../src/agents/agent-adapter-contract.js';
+import { resolveGuidanceProfile } from '../src/campaigns/condition-compiler.js';
+import { agentVisibleContractText } from '../src/composition/agent-visible-contract.js';
+import { applyCredentialAliases, materializeScenarioCredentials, validateCredentialAliases }
+  from '../src/composition/credential-aliases.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { seededAdminPassword } from '../tracks/ecommerce/walk.js';
+
+const aliases = {
+  'stackbench-admin-2026': 'store-admin-2026',
+  'stackbench-customer-2026': 'store-customer-2026',
+  'stackbench-staff-2026': 'store-staff-2026',
+};
+
+test('neutral guidance gives the agent and grader the same credential aliases', () => {
+  const guidance = resolveGuidanceProfile('neutral@1.8.0', ['mongodb']);
+  assert.deepEqual(guidance.credentialAliases, aliases);
+
+  const source = 'Admin: `stackbench-admin-2026`; staff: `stackbench-staff-2026`; '
+    + 'customer: `stackbench-customer-2026`.';
+  const visible = agentVisibleContractText(source, guidance.credentialAliases);
+  assert.equal(visible,
+    'Admin: `store-admin-2026`; staff: `store-staff-2026`; customer: `store-customer-2026`.');
+
+  const scenario = { features: [{ setup: [
+    { do: 'signIn', password: 'stackbench-admin-2026' },
+    { do: 'fill', text: 'stackbench-staff-2026' },
+    { do: 'fill', text: 'ordinary text' },
+  ] }] };
+  const materialized = materializeScenarioCredentials(scenario, guidance.credentialAliases);
+  const feature = materialized.features[0];
+  const originalFeature = scenario.features[0];
+  assert(feature);
+  assert(originalFeature);
+  const [signIn, staff, ordinary] = feature.setup;
+  const [originalSignIn] = originalFeature.setup;
+  assert(signIn);
+  assert(staff);
+  assert(ordinary);
+  assert(originalSignIn);
+  assert.equal(signIn.password, 'store-admin-2026');
+  assert.equal(staff.text, 'store-staff-2026');
+  assert.equal(ordinary.text, 'ordinary text');
+  assert.equal(originalSignIn.password, 'stackbench-admin-2026');
+});
+
+test('campaign agent and grader argv carry aliases only when the condition declares them', () => {
+  const adapter = AGENT_ADAPTER_REGISTRY.get('deterministic');
+  const request: AgentRequest = { mode: 'build', backend: 'mongodb', level: 1, app: '/app', track: 'ecommerce',
+    runIndex: 0, model: 'fake', guidance: 'neutral', credentialAliases: aliases };
+  const agentArgs = agentRequestArgv(adapter, request);
+  assert.equal(agentArgs[agentArgs.indexOf('--credential-aliases-json') + 1], JSON.stringify(aliases));
+
+  const args = { backend: 'mongodb', track: 'ecommerce', runIndex: 0, media: false,
+    condition: { guidance: { credentialAliases: aliases } } };
+  const track = loadTrack('ecommerce');
+  const graderArgs = gradeArgv(args, '/app', 'http://app', 'attempt', 1,
+    track, 'attempt');
+  assert.equal(graderArgs[graderArgs.indexOf('--credential-aliases-json') + 1],
+    JSON.stringify(aliases));
+
+  const unaliasedRequest: AgentRequest = { ...request, credentialAliases: null };
+  const unaliasedArgs = { ...args, condition: undefined };
+  assert.equal(agentRequestArgv(adapter, unaliasedRequest).includes('--credential-aliases-json'), false);
+  assert.equal(gradeArgv(unaliasedArgs, '/app', 'http://app', 'attempt', 1,
+    track, 'attempt').includes('--credential-aliases-json'), false);
+});
+
+test('model-free scenarios keep their original credentials without aliases', () => {
+  const scenario = { features: [{ criteria: [{ actions: [
+    { do: 'signIn', password: 'stackbench-admin-2026' },
+    { do: 'fill', text: 'stackbench-customer-2026' },
+  ] }] }] };
+  assert.strictEqual(materializeScenarioCredentials(scenario), scenario);
+  assert.throws(() => agentVisibleContractText('stackbench-staff-2026'),
+    /contains internal language/);
+  assert.equal(seededAdminPassword({}), 'stackbench-admin-2026');
+});
+
+test('the contract walk uses the same neutral admin credential', () => {
+  assert.equal(seededAdminPassword(aliases), 'store-admin-2026');
+});
+
+test('credential aliases reject ambiguous or ineffective maps', () => {
+  assert.throws(() => validateCredentialAliases({ same: 'same' }), /must change/);
+  assert.throws(() => validateCredentialAliases({ first: 'shared', second: 'shared' }),
+    /duplicated/);
+  assert.throws(() => validateCredentialAliases([]), /must be an object/);
+});
+
+test('credential aliases apply once without cascading', () => {
+  assert.equal(applyCredentialAliases('first second', { first: 'second', second: 'third' }),
+    'second third');
+});
diff --git a/tools/stack-bench/tests/credential-broker.test.ts b/tools/stack-bench/tests/credential-broker.test.ts
new file mode 100644
index 00000000000..59f23c0bc87
--- /dev/null
+++ b/tools/stack-bench/tests/credential-broker.test.ts
@@ -0,0 +1,899 @@
+import assert from 'node:assert/strict';
+import { spawn } from 'node:child_process';
+import { once } from 'node:events';
+import { existsSync, mkdtempSync, readFileSync, readdirSync, rmSync } from 'node:fs';
+import { request as httpRequest, createServer } from 'node:http';
+import type { IncomingHttpHeaders, OutgoingHttpHeaders, Server } from 'node:http';
+import { connect } from 'node:net';
+import type { Socket } from 'node:net';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import test from 'node:test';
+import { gzipSync } from 'node:zlib';
+
+import { createCredentialBroker } from '../container/credential-broker.js';
+import { readCredentialBrokerLedger, reconcileCredentialBrokerReceipt }
+  from '../container/credential-broker-accounting.js';
+import type { BrokerConfig, BrokerLedger, BrokerMode }
+  from '../container/credential-broker-accounting.js';
+import { credentialBrokerDiagnostics, startCredentialBroker, stopCredentialBroker }
+  from '../container/credential-broker-process.js';
+import type { CredentialBrokerHandle } from '../container/credential-broker-process.js';
+import type { BrokerStats } from '../container/credential-broker.js';
+import { compiledEntrypoint } from '../src/package-root.js';
+
+const NO_ESTIMATES = { 'no-usage': 0, 'response-aborted': 0, 'upstream-error': 0 };
+const PRICING_RATES = {
+  input: 3, output: 15, cacheWrite5m: 3.75, cacheWrite1h: 6, cacheRead: 0.3,
+};
+const ONE_REQUEST_USAGE = { input_tokens: 100, output_tokens: 100,
+  cache_read_input_tokens: 0, cache_creation_input_tokens: 0 };
+const DETAILED_USAGE = { input_tokens: 100, output_tokens: 100,
+  cache_read_input_tokens: 50, cache_creation_input_tokens: 30,
+  cache_creation: { ephemeral_5m_input_tokens: 20, ephemeral_1h_input_tokens: 10 } };
+const ZERO_USAGE = { input: 0, output: 0, cacheRead: 0, cacheWrite5m: 0, cacheWrite1h: 0 };
+const ZERO_RAW_USAGE = { input_tokens: 0, output_tokens: 0, cache_read_input_tokens: 0,
+  cache_creation_input_tokens: 0 };
+
+interface SendOptions {
+  method?: string;
+  path?: string;
+  headers?: OutgoingHttpHeaders;
+  body?: string;
+}
+
+interface SendResult {
+  status: number | undefined;
+  body: string;
+}
+
+interface SeenRequest {
+  method: string | undefined;
+  url: string | undefined;
+  headers: IncomingHttpHeaders;
+  body: string;
+}
+
+interface BrokerTestContext {
+  brokerPort: number;
+  sessionToken: string;
+  credential: string;
+  seen: SeenRequest[];
+  stats: () => BrokerStats;
+}
+
+interface BrokerReady {
+  pid: number;
+  baseUrl: string;
+  sessionToken: string;
+  root: string;
+  ledgerPath: string;
+}
+
+type BrokerTestConfig = Partial<Pick<BrokerConfig,
+  'ledgerPath' | 'maxBudgetUsd' | 'pricingRates' | 'maxOutputTokens'>> & {
+    upstreamBody?: string | Buffer;
+    upstreamHeaders?: OutgoingHttpHeaders;
+  };
+
+function record(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function brokerReady(value: unknown): BrokerReady {
+  if (!record(value) || typeof value.pid !== 'number' || typeof value.baseUrl !== 'string'
+    || typeof value.sessionToken !== 'string' || typeof value.root !== 'string'
+    || typeof value.ledgerPath !== 'string') {
+    throw new Error('credential broker subprocess returned invalid readiness data');
+  }
+  return { pid: value.pid, baseUrl: value.baseUrl, sessionToken: value.sessionToken,
+    root: value.root, ledgerPath: value.ledgerPath };
+}
+
+const listen = (server: Server): Promise<number> => new Promise((resolveListen, reject) => {
+  server.once('error', reject);
+  server.listen(0, '127.0.0.1', () => {
+    const address = server.address();
+    assert.ok(address && typeof address !== 'string');
+    resolveListen(address.port);
+  });
+});
+
+const close = (server: Server): Promise<void> => new Promise((resolveClose, reject) => {
+  server.close(error => error ? reject(error) : resolveClose());
+});
+
+async function waitFor(predicate: () => boolean, timeoutMs = 2_000): Promise<void> {
+  const deadline = Date.now() + timeoutMs;
+  while (!predicate()) {
+    if (Date.now() >= deadline) throw new Error('timed out waiting for broker state');
+    await new Promise<void>(resolveWait => setTimeout(resolveWait, 10));
+  }
+}
+
+function send(port: number, { method = 'POST', path = '/v1/messages', headers = {}, body = '{}' }:
+  SendOptions = {}): Promise<SendResult> {
+  return new Promise((resolveSend, reject) => {
+    const request = httpRequest({ hostname: '127.0.0.1', port, method, path, headers }, response => {
+      const chunks: Buffer[] = [];
+      response.on('data', (chunk: Buffer) => chunks.push(chunk));
+      response.on('end', () => resolveSend({ status: response.statusCode,
+        body: Buffer.concat(chunks).toString('utf8') }));
+    });
+    request.once('error', reject);
+    request.end(body);
+  });
+}
+
+async function withBroker(mode: BrokerMode, body: (context: BrokerTestContext) => Promise<void>,
+  config: BrokerTestConfig = {}): Promise<void> {
+  const { upstreamBody = '{"ok":true}', upstreamHeaders = {}, ...brokerConfig } = config;
+  const seen: SeenRequest[] = [];
+  const upstreamServer = createServer((request, response) => {
+    const chunks: Buffer[] = [];
+    request.on('data', (chunk: Buffer) => chunks.push(chunk));
+    request.on('end', () => {
+      seen.push({ method: request.method, url: request.url, headers: request.headers,
+        body: Buffer.concat(chunks).toString('utf8') });
+      response.writeHead(200, { 'content-type': 'application/json', ...upstreamHeaders });
+      response.end(upstreamBody);
+    });
+  });
+  const upstreamPort = await listen(upstreamServer);
+  const sessionToken = 'session-token-value-1234567890';
+  const credential = 'provider-secret-value-1234567890';
+  const { server, stats } = createCredentialBroker({ mode, credential, sessionToken,
+    model: 'test-model', maxOutputTokens: 4096, ...brokerConfig }, {
+    requestUpstream: httpRequest,
+    upstream: { protocol: 'http:', hostname: '127.0.0.1', port: upstreamPort },
+  });
+  const brokerPort = await listen(server);
+  try { await body({ brokerPort, sessionToken, credential, seen, stats }); }
+  finally { await close(server); await close(upstreamServer); }
+}
+
+test('credential broker rejects unauthorized and unsupported requests before upstream', async () => {
+  await withBroker('api-key', async ({ brokerPort, sessionToken, seen, stats }) => {
+    assert.equal((await send(brokerPort)).status, 401);
+    assert.equal((await send(brokerPort, { method: 'GET',
+      headers: { authorization: `Bearer ${sessionToken}` }, body: '' })).status, 404);
+    assert.equal((await send(brokerPort, { path: '/v1/complete',
+      headers: { authorization: `Bearer ${sessionToken}` } })).status, 404);
+    assert.equal(seen.length, 0);
+    assert.equal(stats().acceptedRequests, 0);
+  });
+});
+
+test('credential broker rejects an unauthorized request before its body completes', async () => {
+  await withBroker('api-key', async ({ brokerPort }) => {
+    const result = await new Promise<SendResult>((resolveResult, reject) => {
+      const request = httpRequest({ hostname: '127.0.0.1', port: brokerPort,
+        method: 'POST', path: '/v1/messages', headers: { 'content-length': '1000000' } }, response => {
+        const chunks: Buffer[] = [];
+        response.on('data', (chunk: Buffer) => chunks.push(chunk));
+        response.on('end', () => resolveResult({ status: response.statusCode,
+          body: Buffer.concat(chunks).toString('utf8') }));
+      });
+      request.once('error', reject);
+      request.write('{');
+    });
+    assert.deepEqual(result, { status: 401, body: 'unauthorized' });
+  });
+});
+
+test('credential broker survives a downstream disconnect and settles exact upstream usage', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-broker-disconnect-'));
+  const ledgerPath = join(root, 'ledger.json');
+  const upstreamServer = createServer((request, response) => {
+    request.resume();
+    request.on('end', () => {
+      response.writeHead(200, { 'content-type': 'application/json' });
+      response.write('{"usage":');
+      setTimeout(() => response.end(`${JSON.stringify(ONE_REQUEST_USAGE)}}`), 25);
+    });
+  });
+  const upstreamPort = await listen(upstreamServer);
+  const sessionToken = 'session-token-value-1234567890';
+  const { server, stats } = createCredentialBroker({ mode: 'api-key',
+    credential: 'provider-secret-value-1234567890', sessionToken,
+    ledgerPath, model: 'test-model', maxOutputTokens: 4096,
+    maxBudgetUsd: 1, pricingRates: PRICING_RATES }, {
+    requestUpstream: httpRequest,
+    upstream: { protocol: 'http:', hostname: '127.0.0.1', port: upstreamPort },
+  });
+  const brokerPort = await listen(server);
+  const requestOptions = { hostname: '127.0.0.1', port: brokerPort, method: 'POST',
+    path: '/v1/messages', headers: { authorization: `Bearer ${sessionToken}`,
+      'content-type': 'application/json' } };
+  try {
+    await new Promise<void>((resolveRequest, reject) => {
+      const request = httpRequest(requestOptions, response => {
+        response.once('data', () => { response.destroy(); resolveRequest(); });
+      });
+      request.once('error', reject);
+      request.end('{"model":"test-model","max_tokens":1000}');
+    });
+    await waitFor(() => stats().completedBillableRequests === 1);
+    const second = await send(brokerPort, {
+      headers: requestOptions.headers,
+      body: '{"model":"test-model","max_tokens":1000}',
+    });
+    assert.equal(second.status, 200);
+    assert.deepEqual(stats(), { acceptedRequests: 2, billableRequests: 2,
+      completedBillableRequests: 2, estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+      spentUsd: 0.0036, reservedUsd: 0 });
+    assert.equal(readCredentialBrokerLedger(ledgerPath,
+      { model: 'test-model', maxBudgetUsd: 1 }).complete, true);
+  } finally {
+    await close(server);
+    await close(upstreamServer);
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('credential broker survives malformed client socket input', async () => {
+  await withBroker('api-key', async ({ brokerPort, sessionToken }) => {
+    await new Promise<void>((resolveSocket, reject) => {
+      const socket = connect({ host: '127.0.0.1', port: brokerPort });
+      socket.once('connect', () => socket.write('not-http\r\n\r\n'));
+      socket.once('data', () => socket.destroy());
+      socket.once('close', () => resolveSocket());
+      socket.once('error', reject);
+    });
+    const result = await send(brokerPort, {
+      headers: { authorization: `Bearer ${sessionToken}` },
+      body: '{"model":"test-model","max_tokens":1}',
+    });
+    assert.equal(result.status, 200);
+  });
+});
+
+for (const mode of ['api-key', 'subscription-token'] satisfies BrokerMode[]) {
+  test(`credential broker replaces the session credential for ${mode}`, async () => {
+    await withBroker(mode, async ({ brokerPort, sessionToken, credential, seen, stats }) => {
+      const result = await send(brokerPort, {
+        path: '/v1/messages?beta=true',
+        headers: { authorization: `Bearer ${sessionToken}`, 'content-type': 'application/json' },
+        body: '{"model":"test-model","max_tokens":1024}',
+      });
+      assert.deepEqual(result, { status: 200, body: '{"ok":true}' });
+      assert.equal(seen.length, 1);
+      const forwarded = seen[0];
+      assert.ok(forwarded);
+      assert.equal(forwarded.url, '/v1/messages?beta=true');
+      assert.equal(forwarded.body, '{"model":"test-model","max_tokens":1024}');
+      if (mode === 'api-key') {
+        assert.equal(forwarded.headers['x-api-key'], credential);
+        assert.equal(forwarded.headers.authorization, undefined);
+      } else {
+        assert.equal(forwarded.headers.authorization, `Bearer ${credential}`);
+        assert.equal(forwarded.headers['x-api-key'], undefined);
+      }
+      assert.doesNotMatch(JSON.stringify(forwarded.headers), new RegExp(sessionToken));
+      assert.equal(stats().acceptedRequests, 1);
+    });
+  });
+}
+
+test('credential broker enforces request size and count limits', async () => {
+  const seen: string[] = [];
+  const upstreamServer = createServer((request, response) => {
+    request.resume();
+    request.on('end', () => {
+      assert.ok(request.url);
+      seen.push(request.url);
+      response.end('ok');
+    });
+  });
+  const upstreamPort = await listen(upstreamServer);
+  const sessionToken = 'session-token-value-1234567890';
+  const { server } = createCredentialBroker({ mode: 'api-key',
+    credential: 'provider-secret-value-1234567890', sessionToken,
+    model: 'test-model', maxOutputTokens: 4096 }, {
+    requestUpstream: httpRequest,
+    upstream: { protocol: 'http:', hostname: '127.0.0.1', port: upstreamPort },
+    maxRequests: 2,
+    maxRequestBytes: 64,
+  });
+  const brokerPort = await listen(server);
+  const headers = { authorization: `Bearer ${sessionToken}` };
+  try {
+    assert.equal((await send(brokerPort, { headers, body: 'x'.repeat(65) })).status, 413);
+    assert.equal((await send(brokerPort, { headers,
+      body: '{"model":"test-model","max_tokens":1}' })).status, 200);
+    assert.equal((await send(brokerPort, { headers,
+      body: '{"model":"test-model","max_tokens":1}' })).status, 429);
+    assert.deepEqual(seen, ['/v1/messages']);
+  } finally {
+    await close(server);
+    await close(upstreamServer);
+  }
+});
+
+test('credential broker enforces model, output token, and session cost limits', async () => {
+  const rates = { input: 3, output: 15, cacheWrite5m: 3.75, cacheWrite1h: 6, cacheRead: 0.3 };
+  await withBroker('api-key', async ({ brokerPort, sessionToken, seen, stats }) => {
+    const headers = { authorization: `Bearer ${sessionToken}`,
+      'content-type': 'application/json' };
+    assert.deepEqual(await send(brokerPort, { headers,
+      body: '{"model":"other-model","max_tokens":1}' }),
+    { status: 400, body: 'invalid provider request' });
+    assert.equal((await send(brokerPort, { headers,
+      body: '{"model":"test-model","max_tokens":4097}' })).status, 400);
+    assert.equal((await send(brokerPort, { headers,
+      body: '{"model":"test-model","max_tokens":1000}' })).status, 402);
+    assert.equal(seen.length, 0);
+    assert.deepEqual(stats(), { acceptedRequests: 3, billableRequests: 0,
+      completedBillableRequests: 0, estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+      spentUsd: 0, reservedUsd: 0 });
+  }, { maxBudgetUsd: 0.01, pricingRates: rates });
+});
+
+test('credential broker charges reported usage and reserves enough for the next request', async () => {
+  const rates = { input: 3, output: 15, cacheWrite5m: 3.75, cacheWrite1h: 6, cacheRead: 0.3 };
+  const upstreamBody = JSON.stringify({ usage: { input_tokens: 100, output_tokens: 100,
+    cache_read_input_tokens: 0, cache_creation_input_tokens: 0 } });
+  await withBroker('api-key', async ({ brokerPort, sessionToken, seen, stats }) => {
+    const request = { headers: { authorization: `Bearer ${sessionToken}`,
+      'content-type': 'application/json' },
+    body: '{"model":"test-model","max_tokens":1000}' };
+    assert.equal((await send(brokerPort, request)).status, 200);
+    assert.equal((await send(brokerPort, request)).status, 200);
+    assert.equal((await send(brokerPort, request)).status, 200);
+    assert.equal((await send(brokerPort, request)).status, 402);
+    assert.equal(seen.length, 3);
+    assert.deepEqual(stats(), { acceptedRequests: 4, billableRequests: 3,
+      completedBillableRequests: 3, estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+      spentUsd: 0.0054, reservedUsd: 0 });
+  }, { maxBudgetUsd: 0.02, pricingRates: rates, upstreamBody });
+});
+
+test('credential broker clears different concurrent reservations before the next request', async () => {
+  const rates = { input: 2, output: 10, cacheWrite5m: 2.5, cacheWrite1h: 4, cacheRead: 0.2 };
+  const upstreamBody = JSON.stringify({ usage: ONE_REQUEST_USAGE });
+  const bodyWithBytes = (bytes: number): string => {
+    const prefix = '{"model":"test-model","max_tokens":65536,"padding":"';
+    const suffix = '"}';
+    return `${prefix}${'x'.repeat(bytes - prefix.length - suffix.length)}${suffix}`;
+  };
+  await withBroker('api-key', async ({ brokerPort, sessionToken, stats }) => {
+    const headers = { authorization: `Bearer ${sessionToken}`,
+      'content-type': 'application/json' };
+    const first = send(brokerPort, { headers, body: bodyWithBytes(4_049) });
+    const second = send(brokerPort, { headers, body: bodyWithBytes(6_840) });
+    assert.deepEqual((await Promise.all([first, second])).map(result => result.status), [200, 200]);
+    assert.equal(stats().reservedUsd, 0);
+    assert.equal((await send(brokerPort, { headers, body: bodyWithBytes(4_049) })).status, 200);
+    assert.deepEqual(stats(), { acceptedRequests: 3, billableRequests: 3,
+      completedBillableRequests: 3, estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+      spentUsd: 0.0036, reservedUsd: 0 });
+  }, { maxBudgetUsd: 100, maxOutputTokens: 65_536, pricingRates: rates, upstreamBody });
+});
+
+test('credential broker prices repeated compressed streams instead of exhausting the request cap', async () => {
+  const rates = { input: 3, output: 15, cacheWrite5m: 3.75, cacheWrite1h: 6, cacheRead: 0.3 };
+  const stream = [
+    'data: {"type":"message_start","message":{"usage":{"input_tokens":100,"output_tokens":0,"cache_read_input_tokens":0,"cache_creation_input_tokens":0}}}',
+    '',
+    'data: {"type":"message_delta","usage":{"output_tokens":100}}',
+    '',
+    'data: {"type":"message_stop"}',
+    '',
+  ].join('\n');
+  await withBroker('api-key', async ({ brokerPort, sessionToken, seen, stats }) => {
+    const request = { headers: { authorization: `Bearer ${sessionToken}`,
+      'content-type': 'application/json', 'accept-encoding': 'gzip' },
+    body: '{"model":"test-model","max_tokens":128000}' };
+    for (let turn = 0; turn < 60; turn += 1) {
+      assert.equal((await send(brokerPort, request)).status, 200);
+    }
+    const forwarded = seen[0];
+    assert.ok(forwarded);
+    assert.equal(forwarded.headers['accept-encoding'], undefined);
+    assert.deepEqual(stats(), { acceptedRequests: 60, billableRequests: 60,
+      completedBillableRequests: 60, estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+      spentUsd: 0.108, reservedUsd: 0 });
+  }, { maxBudgetUsd: 100, maxOutputTokens: 128_000, pricingRates: rates,
+    upstreamHeaders: { 'content-type': 'text/event-stream', 'content-encoding': 'gzip' },
+    upstreamBody: gzipSync(stream) });
+});
+
+test('credential broker atomically records all direct requests without credentials', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-broker-ledger-test-'));
+  const ledgerPath = join(root, 'ledger.json');
+  const rates = { input: 3, output: 15, cacheWrite5m: 3.75, cacheWrite1h: 6, cacheRead: 0.3 };
+  const upstreamBody = JSON.stringify({ usage: { input_tokens: 100, output_tokens: 100,
+    cache_read_input_tokens: 0, cache_creation_input_tokens: 0 } });
+  try {
+    await withBroker('api-key', async ({ brokerPort, sessionToken, credential }) => {
+      const request = { headers: { authorization: `Bearer ${sessionToken}`,
+        'content-type': 'application/json' },
+      body: '{"model":"test-model","max_tokens":1000}' };
+      assert.equal((await send(brokerPort, request)).status, 200);
+      assert.equal((await send(brokerPort, request)).status, 200);
+      const ledger = readCredentialBrokerLedger(ledgerPath,
+        { model: 'test-model', maxBudgetUsd: 0.02 });
+      assert.equal(ledger.complete, true);
+      assert.equal(ledger.billableRequests, 2);
+      assert.equal(ledger.completedBillableRequests, 2);
+      assert.equal(ledger.estimatedBillableRequests, 0);
+      assert.equal(ledger.spentUsd, 0.0036);
+      assert.deepEqual(ledger.usage,
+        { input: 200, output: 200, cacheRead: 0, cacheWrite5m: 0, cacheWrite1h: 0 });
+      const text = readFileSync(ledgerPath, 'utf8');
+      assert.doesNotMatch(text, new RegExp(sessionToken));
+      assert.doesNotMatch(text, new RegExp(credential));
+      assert.deepEqual(readdirSync(root), ['ledger.json']);
+    }, { ledgerPath, maxBudgetUsd: 0.02, pricingRates: rates, upstreamBody });
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('credential broker estimates a settled request without exact provider usage', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-broker-estimated-ledger-test-'));
+  const ledgerPath = join(root, 'ledger.json');
+  try {
+    await withBroker('api-key', async ({ brokerPort, sessionToken }) => {
+      const response = await send(brokerPort, {
+        headers: { authorization: `Bearer ${sessionToken}`, 'content-type': 'application/json' },
+        body: '{"model":"test-model","max_tokens":1000}',
+      });
+      assert.equal(response.status, 200);
+      const ledger = readCredentialBrokerLedger(ledgerPath,
+        { model: 'test-model', maxBudgetUsd: 1 });
+      assert.equal(ledger.complete, true);
+      assert.equal(ledger.estimatedBillableRequests, 1);
+      assert.deepEqual(ledger.estimatedByReason, { ...NO_ESTIMATES, 'no-usage': 1 });
+      // The request was charged its ceiling, so the receipt is an upper bound
+      // and says so; the session it belongs to stays valid.
+      const reconciled = reconcileCredentialBrokerReceipt({ ledger,
+        cliResult: { type: 'result', is_error: false, total_cost_usd: 0, usage: ZERO_RAW_USAGE },
+        model: 'test-model', maxBudgetUsd: 1, pricingRates: PRICING_RATES });
+      assert.equal(reconciled.receipt.error, null);
+      assert.equal(reconciled.ok, true);
+      assert.equal(reconciled.receipt.reconciled, true);
+      assert.equal(reconciled.receipt.exact, false);
+      assert.equal(reconciled.receipt.estimatedRequests, 1);
+      assert.deepEqual(reconciled.receipt.estimatedByReason, { ...NO_ESTIMATES, 'no-usage': 1 });
+      assert.equal(reconciled.receipt.costUsd, ledger.spentUsd);
+      assert.ok(reconciled.receipt.costUsd > 0);
+      assert.equal(reconciled.receipt.calculatedCostUsd, 0);
+    }, { ledgerPath, maxBudgetUsd: 1, pricingRates: PRICING_RATES,
+      upstreamBody: '{"ok":true}' });
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('credential broker estimates a cleanly ended provider error stream', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-broker-error-stream-test-'));
+  const ledgerPath = join(root, 'ledger.json');
+  const stream = [
+    'data: {"type":"message_start","message":{"usage":{"input_tokens":100,"output_tokens":0}}}',
+    '',
+    'event: error',
+    'data: {"type":"error","error":{"type":"api_error","message":"connection lost"}}',
+    '',
+  ].join('\n');
+  try {
+    await withBroker('api-key', async ({ brokerPort, sessionToken }) => {
+      assert.equal((await send(brokerPort, {
+        headers: { authorization: `Bearer ${sessionToken}`, 'content-type': 'application/json' },
+        body: '{"model":"test-model","max_tokens":1000}',
+      })).status, 200);
+      const ledger = readCredentialBrokerLedger(ledgerPath,
+        { model: 'test-model', maxBudgetUsd: 1 });
+      assert.equal(ledger.complete, true);
+      assert.equal(ledger.estimatedBillableRequests, 1);
+      assert.deepEqual(ledger.estimatedByReason, { ...NO_ESTIMATES, 'no-usage': 1 });
+      const reconciled = reconcileCredentialBrokerReceipt({ ledger,
+        cliResult: { type: 'result', is_error: true, total_cost_usd: 0, usage: ZERO_RAW_USAGE },
+        model: 'test-model', maxBudgetUsd: 1, pricingRates: PRICING_RATES });
+      assert.equal(reconciled.ok, true);
+      assert.equal(reconciled.receipt.exact, false);
+      assert.equal(reconciled.receipt.error, null);
+    }, { ledgerPath, maxBudgetUsd: 1, pricingRates: PRICING_RATES,
+      upstreamHeaders: { 'content-type': 'text/event-stream' }, upstreamBody: stream });
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('streamed provider usage produces a reconciled campaign-priced receipt', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-broker-cache-ledger-test-'));
+  const ledgerPath = join(root, 'ledger.json');
+  const stream = [
+    'data: {"type":"message_start","message":{"usage":{"input_tokens":100,"output_tokens":0,"cache_read_input_tokens":50,"cache_creation_input_tokens":30,"cache_creation":{"ephemeral_5m_input_tokens":20,"ephemeral_1h_input_tokens":10}}}}',
+    '',
+    'data: {"type":"message_delta",',
+    'data: "usage":{"output_tokens":100}}',
+    '',
+    'data: {"type":"message_stop"}',
+    '',
+  ].join('\n');
+  try {
+    await withBroker('api-key', async ({ brokerPort, sessionToken }) => {
+      const response = await send(brokerPort, {
+        headers: { authorization: `Bearer ${sessionToken}`, 'content-type': 'application/json' },
+        body: '{"model":"test-model","max_tokens":1000}',
+      });
+      assert.equal(response.status, 200);
+      const ledger = readCredentialBrokerLedger(ledgerPath,
+        { model: 'test-model', maxBudgetUsd: 1 });
+      assert.deepEqual(ledger.usage,
+        { input: 100, output: 100, cacheRead: 50, cacheWrite5m: 20, cacheWrite1h: 10 });
+      assert.equal(ledger.spentUsd, 0.00195);
+      const reconciled = reconcileCredentialBrokerReceipt({ ledger,
+        cliResult: { type: 'result', is_error: false, total_cost_usd: 0.002925,
+          usage: { input_tokens: 100, output_tokens: 100, cache_read_input_tokens: 50,
+            cache_creation_input_tokens: 30 } },
+        model: 'test-model', maxBudgetUsd: 1, pricingRates: PRICING_RATES });
+      assert.equal(reconciled.ok, true);
+      assert.equal(reconciled.receipt.costUsd, 0.00195);
+      assert.equal(reconciled.receipt.calculatedCostUsd, 0.00195);
+      assert.equal(reconciled.receipt.cliCostUsd, 0.002925);
+    }, { ledgerPath, maxBudgetUsd: 1, pricingRates: PRICING_RATES,
+      upstreamHeaders: { 'content-type': 'text/event-stream' }, upstreamBody: stream });
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('campaign pricing is authoritative when CLI pricing differs', () => {
+  const ledger = { schemaVersion: 4, model: 'test-model', maxBudgetUsd: 1,
+    acceptedRequests: 2, billableRequests: 2, completedBillableRequests: 2,
+    estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+    spentUsd: 0.0036, reservedUsd: 0,
+    usage: { input: 200, output: 200, cacheRead: 0, cacheWrite5m: 0, cacheWrite1h: 0 },
+    complete: true,
+    updatedAt: new Date().toISOString() };
+  const reconciled = reconcileCredentialBrokerReceipt({ ledger,
+    cliResult: { type: 'result', is_error: false, total_cost_usd: 0.0054,
+      usage: { ...ONE_REQUEST_USAGE, input_tokens: 200, output_tokens: 200 } },
+    model: 'test-model', maxBudgetUsd: 1, pricingRates: PRICING_RATES });
+  assert.equal(reconciled.ok, true);
+  assert.equal(reconciled.result.is_error, false);
+  assert.equal(reconciled.result.total_cost_usd, 0.0036);
+  assert.equal(reconciled.receipt.source, 'credential-broker');
+  assert.equal(reconciled.receipt.cliCostUsd, 0.0054);
+  assert.equal(reconciled.receipt.error, null);
+});
+
+test('broker retains cache write classes that the CLI summary combines', () => {
+  const ledger = { schemaVersion: 4, model: 'claude-sonnet-5', maxBudgetUsd: 50,
+    acceptedRequests: 66, billableRequests: 66, completedBillableRequests: 66,
+    estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+    spentUsd: 1.686071, reservedUsd: 0,
+    usage: { input: 124, output: 48559, cacheRead: 5100226,
+      cacheWrite5m: 66627, cacheWrite1h: 3405 },
+    complete: true, updatedAt: new Date().toISOString() };
+  const reconciled = reconcileCredentialBrokerReceipt({ ledger,
+    cliResult: { type: 'result', is_error: false, total_cost_usd: 2.529107,
+      usage: { input_tokens: 124, output_tokens: 48559,
+        cache_read_input_tokens: 5100226, cache_creation_input_tokens: 70032 } },
+    model: 'claude-sonnet-5', maxBudgetUsd: 50,
+    pricingRates: { input: 2, output: 10, cacheWrite5m: 2.5,
+      cacheWrite1h: 4, cacheRead: 0.2 } });
+  assert.equal(reconciled.ok, true);
+  assert.equal(reconciled.receipt.costUsd, 1.686071);
+  assert.equal(reconciled.receipt.calculatedCostUsd, 1.686071);
+  assert.equal(reconciled.receipt.cliCostUsd, 2.529107);
+  assert.ok(reconciled.receipt.usage);
+  assert.equal(reconciled.receipt.usage.cacheWrite1h, 3405);
+});
+
+test('missing or incomplete broker ledgers fail closed with a conservative receipt', () => {
+  const missing = reconcileCredentialBrokerReceipt({ ledger: null,
+    cliResult: { type: 'result', is_error: false, total_cost_usd: 0.25 },
+    model: 'test-model', maxBudgetUsd: 1, pricingRates: PRICING_RATES });
+  assert.equal(missing.ok, false);
+  assert.equal(missing.result.total_cost_usd, 1);
+  assert.equal(missing.result.stack_bench_cost_receipt.complete, false);
+
+  const incomplete = reconcileCredentialBrokerReceipt({ ledger: {
+    schemaVersion: 4, model: 'test-model', maxBudgetUsd: 1,
+    acceptedRequests: 1, billableRequests: 1, completedBillableRequests: 0,
+    estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+    spentUsd: 0.1, reservedUsd: 0.4, usage: ZERO_USAGE, complete: false,
+    updatedAt: new Date().toISOString(),
+  }, cliResult: { type: 'result', is_error: false, total_cost_usd: 0.1 },
+  model: 'test-model', maxBudgetUsd: 1, pricingRates: PRICING_RATES });
+  assert.equal(incomplete.ok, false);
+  assert.equal(incomplete.result.total_cost_usd, 0.5);
+  assert.match(incomplete.receipt.error ?? '', /incomplete/);
+});
+
+test('matching broker and CLI receipts preserve a successful result', () => {
+  const ledger = { schemaVersion: 4, model: 'test-model', maxBudgetUsd: 1,
+    acceptedRequests: 1, billableRequests: 1, completedBillableRequests: 1,
+    estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+    spentUsd: 0.00195, reservedUsd: 0,
+    usage: { input: 100, output: 100, cacheRead: 50, cacheWrite5m: 20, cacheWrite1h: 10 },
+    complete: true,
+    updatedAt: new Date().toISOString() };
+  const reconciled = reconcileCredentialBrokerReceipt({ ledger,
+    cliResult: { type: 'result', is_error: false, total_cost_usd: 0.00195,
+      usage: DETAILED_USAGE },
+    model: 'test-model', maxBudgetUsd: 1, pricingRates: PRICING_RATES });
+  assert.equal(reconciled.ok, true);
+  assert.equal(reconciled.result.is_error, false);
+  assert.equal(reconciled.result.total_cost_usd, 0.00195);
+  assert.equal(reconciled.result.stack_bench_cost_receipt.reconciled, true);
+  assert.deepEqual(reconciled.receipt.usage, {
+    input: 100, output: 100, cacheRead: 50, cacheWrite5m: 20, cacheWrite1h: 10,
+  });
+  assert.deepEqual(reconciled.receipt.pricingRates, PRICING_RATES);
+  assert.equal(reconciled.receipt.calculatedCostUsd, 0.00195);
+});
+
+test('receipt reconciliation accepts provider usage that includes CLI-omitted calls', () => {
+  const ledger = { schemaVersion: 4, model: 'test-model', maxBudgetUsd: 1,
+    acceptedRequests: 2, billableRequests: 2, completedBillableRequests: 2,
+    estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+    spentUsd: 0.00201, reservedUsd: 0,
+    usage: { input: 120, output: 110, cacheRead: 0, cacheWrite5m: 0, cacheWrite1h: 0 },
+    complete: true,
+    updatedAt: new Date().toISOString() };
+  const reconciled = reconcileCredentialBrokerReceipt({ ledger,
+    cliResult: { type: 'result', is_error: false, total_cost_usd: 0.00351,
+      usage: ONE_REQUEST_USAGE },
+  model: 'test-model', maxBudgetUsd: 1, pricingRates: PRICING_RATES });
+  assert.equal(reconciled.ok, true);
+  assert.equal(reconciled.receipt.costUsd, 0.00201);
+  assert.deepEqual(reconciled.result.usage, {
+    input_tokens: 120, output_tokens: 110, cache_read_input_tokens: 0,
+    cache_creation_input_tokens: 0,
+    cache_creation: { ephemeral_5m_input_tokens: 0, ephemeral_1h_input_tokens: 0 },
+  });
+});
+
+test('receipt reconciliation rejects provider usage below the CLI lower bound', () => {
+  const ledger = { schemaVersion: 4, model: 'test-model', maxBudgetUsd: 1,
+    acceptedRequests: 1, billableRequests: 1, completedBillableRequests: 1,
+    estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+    spentUsd: 0.0018, reservedUsd: 0,
+    usage: { input: 100, output: 100, cacheRead: 0, cacheWrite5m: 0, cacheWrite1h: 0 },
+    complete: true, updatedAt: new Date().toISOString() };
+  const reconciled = reconcileCredentialBrokerReceipt({ ledger,
+    cliResult: { type: 'result', is_error: false, total_cost_usd: 0.0018,
+      usage: { ...ONE_REQUEST_USAGE, output_tokens: 101 } },
+  model: 'test-model', maxBudgetUsd: 1, pricingRates: PRICING_RATES });
+  assert.equal(reconciled.ok, false);
+  assert.match(reconciled.receipt.error ?? '', /usage is lower than CLI usage/);
+});
+
+test('real paid-session usage reconciles to broker totals', () => {
+  const ledger = { schemaVersion: 4, model: 'claude-sonnet-5', maxBudgetUsd: 50,
+    acceptedRequests: 97, billableRequests: 97, completedBillableRequests: 97,
+    estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+    spentUsd: 2.665346, reservedUsd: 0,
+    usage: { input: 2647, output: 77041, cacheRead: 8026721,
+      cacheWrite5m: 113719, cacheWrite1h: 0 },
+    complete: true, updatedAt: new Date().toISOString() };
+  const reconciled = reconcileCredentialBrokerReceipt({ ledger,
+    cliResult: { type: 'result', is_error: false, total_cost_usd: 3.998019,
+      usage: { input_tokens: 156, output_tokens: 77016,
+        cache_read_input_tokens: 8026721, cache_creation_input_tokens: 113719 } },
+    model: 'claude-sonnet-5', maxBudgetUsd: 50,
+    pricingRates: { input: 2, output: 10, cacheWrite5m: 2.5,
+      cacheWrite1h: 4, cacheRead: 0.2 } });
+  assert.equal(reconciled.ok, true);
+  assert.equal(reconciled.receipt.costUsd, 2.665346);
+  assert.ok(reconciled.result.usage);
+  assert.equal(reconciled.result.usage.input_tokens, 2647);
+  assert.equal(reconciled.result.usage.output_tokens, 77041);
+});
+
+test('receipt reconciliation rejects spend that cannot be reproduced from broker usage', () => {
+  const ledger = { schemaVersion: 4, model: 'test-model', maxBudgetUsd: 1,
+    acceptedRequests: 1, billableRequests: 1, completedBillableRequests: 1,
+    estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+    spentUsd: 0.002, reservedUsd: 0,
+    usage: { input: 100, output: 100, cacheRead: 0, cacheWrite5m: 0, cacheWrite1h: 0 },
+    complete: true, updatedAt: new Date().toISOString() };
+  const reconciled = reconcileCredentialBrokerReceipt({ ledger,
+    cliResult: { type: 'result', is_error: false, total_cost_usd: 0.002,
+      usage: ONE_REQUEST_USAGE },
+    model: 'test-model', maxBudgetUsd: 1, pricingRates: PRICING_RATES });
+  assert.equal(reconciled.ok, false);
+  assert.match(reconciled.receipt.error ?? '', /usage-priced spend/);
+});
+
+test('credential broker lifecycle creates only an attempt-scoped session credential', async () => {
+  const providerCredential = 'provider-secret-value-1234567890';
+  const rates = { input: 3, output: 15, cacheWrite5m: 3.75, cacheWrite1h: 6, cacheRead: 0.3 };
+  const broker = await startCredentialBroker({ mode: 'api-key', credential: providerCredential },
+  { networkMode: 'host', deadlineMs: 10_000, model: 'test-model',
+    maxBudgetUsd: 1, pricingRates: rates });
+  let ledger: BrokerLedger | null = null;
+  try {
+    assert.equal(existsSync(broker.root), true);
+    assert.equal(broker.listenHost, '127.0.0.1');
+    assert.doesNotMatch(broker.baseUrl, new RegExp(providerCredential));
+    assert.match(broker.sessionToken, /^[a-f0-9]{64}$/);
+    assert.equal((await send(Number(new URL(broker.baseUrl).port))).status, 401);
+  } finally {
+    ledger = await stopCredentialBroker(broker);
+  }
+  assert.equal(existsSync(broker.root), false);
+  assert.ok(ledger);
+  assert.equal(ledger.complete, true);
+  assert.equal(ledger.spentUsd, 0);
+  const diagnostics = credentialBrokerDiagnostics(broker);
+  assert.ok(diagnostics?.drain && diagnostics.ledger);
+  assert.equal(diagnostics.endpointKind, 'local-credential-broker');
+  assert.equal(diagnostics.drain.timedOut, false);
+  assert.equal(diagnostics.ledger.complete, true);
+  assert.equal(diagnostics.ledger.spentUsd, 0);
+});
+
+test('credential broker diagnostics retain child exit, stderr, and the final ledger', async () => {
+  const providerCredential = 'provider-secret-value-1234567890';
+  const broker = await startCredentialBroker({ mode: 'api-key', credential: providerCredential },
+    { networkMode: 'host', deadlineMs: 10_000, model: 'test-model' });
+  const providerCut = 11;
+  const sessionCut = 19;
+  const stderr = broker.child.stderr;
+  assert.ok(stderr);
+  stderr.emit('data', Buffer.from(
+    `${'x'.repeat(20_000)} broker failure ${providerCredential.slice(0, providerCut)}`));
+  stderr.emit('data', Buffer.from(
+    `${providerCredential.slice(providerCut)} ${broker.sessionToken.slice(0, sessionCut)}`));
+  stderr.emit('data', Buffer.from(
+    `${broker.sessionToken.slice(sessionCut)}\n`));
+  broker.child.kill();
+  await once(broker.child, 'exit');
+  const ledger = await stopCredentialBroker(broker, { drainTimeoutMs: 0 });
+  const diagnostics = credentialBrokerDiagnostics(broker);
+  assert.ok(ledger);
+  assert.ok(diagnostics?.drain && diagnostics.termination && diagnostics.ledger);
+  assert.equal(ledger.complete, true);
+  assert.ok(diagnostics.child.exitCode !== null || diagnostics.child.signal !== null);
+  assert.match(diagnostics.child.stderrTail ?? '', /broker failure \[REDACTED\] \[REDACTED\]/);
+  assert.equal(diagnostics.child.stderrTruncated, true);
+  assert.doesNotMatch(JSON.stringify(diagnostics), new RegExp(providerCredential));
+  assert.doesNotMatch(JSON.stringify(diagnostics), new RegExp(broker.sessionToken));
+  assert.doesNotMatch(diagnostics.child.stderrTail ?? '',
+    new RegExp(providerCredential.slice(0, providerCut)));
+  assert.doesNotMatch(diagnostics.child.stderrTail ?? '',
+    new RegExp(broker.sessionToken.slice(0, sessionCut)));
+  assert.equal(diagnostics.drain.terminationRequested, false);
+  assert.equal(diagnostics.termination.exited, true);
+  assert.equal(diagnostics.ledger.complete, true);
+});
+
+test('credential broker closes an active request after its parent exits',
+  { timeout: 10_000 }, async () => {
+    const moduleUrl = pathToFileURL(compiledEntrypoint('container', 'credential-broker-process.js')).href;
+    const script = `
+      import { startCredentialBroker } from ${JSON.stringify(moduleUrl)};
+      const broker = await startCredentialBroker({ mode: 'api-key',
+        credential: 'provider-secret-value-1234567890' },
+        { networkMode: 'host', deadlineMs: 10000, model: 'test-model' });
+      process.stdout.write(JSON.stringify({ pid: broker.child.pid, baseUrl: broker.baseUrl,
+        sessionToken: broker.sessionToken, root: broker.root, ledgerPath: broker.ledgerPath }) + '\\n');
+      process.stdin.once('data', () => process.exit(0));
+      process.stdin.resume();
+    `;
+    const parent = spawn(process.execPath, ['--input-type=module', '--eval', script], {
+      stdio: ['pipe', 'pipe', 'pipe'], windowsHide: true,
+    });
+    let active: Socket | null = null;
+    let ready: BrokerReady | null = null;
+    const alive = (pid: number): boolean => {
+      try { process.kill(pid, 0); return true; }
+      catch (error) { return !record(error) || error.code !== 'ESRCH'; }
+    };
+    try {
+      ready = await new Promise<BrokerReady>((resolveReady, reject) => {
+        let output = '';
+        parent.stdout.on('data', (chunk: Buffer) => {
+          output += chunk.toString('utf8');
+          const newline = output.indexOf('\n');
+          if (newline === -1) return;
+          try { resolveReady(brokerReady(JSON.parse(output.slice(0, newline)))); }
+          catch (error) { reject(error); }
+        });
+        parent.once('error', reject);
+        parent.once('exit', code => reject(new Error(`broker parent exited before ready (${code})`)));
+      });
+      const brokerInfo = ready;
+      const port = Number(new URL(brokerInfo.baseUrl).port);
+      active = connect({ host: '127.0.0.1', port });
+      active.on('error', () => {});
+      await once(active, 'connect');
+      const activeClosed = new Promise<void>(resolveClosed =>
+        active?.once('close', () => resolveClosed()));
+      active.write('POST /v1/messages HTTP/1.1\r\n'
+        + `Host: 127.0.0.1:${port}\r\n`
+        + `Authorization: Bearer ${brokerInfo.sessionToken}\r\n`
+        + 'Content-Type: application/json\r\nContent-Length: 1000\r\n\r\n'
+        + '{"model":"test-model"');
+      await waitFor(() => readCredentialBrokerLedger(brokerInfo.ledgerPath,
+        { model: 'test-model', maxBudgetUsd: null }).acceptedRequests === 1);
+      parent.stdin.end('exit');
+      await once(parent, 'exit');
+      const started = Date.now();
+      await waitFor(() => !alive(brokerInfo.pid), 4_000);
+      assert.ok(Date.now() - started < 4_000);
+      await Promise.race([activeClosed, new Promise((_, reject) => setTimeout(
+        () => reject(new Error('active broker socket stayed open')), 1_000))]);
+      await new Promise<void>((resolveProbe, reject) => {
+        const probe = connect({ host: '127.0.0.1', port });
+        const timeout = setTimeout(() => {
+          probe.destroy();
+          reject(new Error('broker port did not close'));
+        }, 1_000);
+        probe.once('error', () => { clearTimeout(timeout); resolveProbe(); });
+        probe.once('connect', () => {
+          clearTimeout(timeout);
+          probe.destroy();
+          reject(new Error('broker remained reachable after parent exit'));
+        });
+      });
+    } finally {
+      active?.destroy();
+      if (parent.exitCode === null) parent.kill();
+      if (ready && alive(ready.pid)) {
+        try { process.kill(ready.pid, 'SIGKILL'); } catch { /* already stopped */ }
+      }
+      if (ready?.root) rmSync(ready.root, { recursive: true, force: true });
+    }
+  });
+
+test('credential broker shutdown waits for an in-flight request to settle', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-broker-drain-'));
+  const incomplete = { schemaVersion: 4, model: 'test-model', maxBudgetUsd: 1,
+    acceptedRequests: 1, billableRequests: 1, completedBillableRequests: 0,
+    estimatedBillableRequests: 0, estimatedByReason: NO_ESTIMATES,
+    spentUsd: 0, reservedUsd: 0.4, usage: ZERO_USAGE, complete: false,
+    updatedAt: new Date().toISOString() };
+  const complete = { ...incomplete, completedBillableRequests: 1,
+    spentUsd: 0.0018, reservedUsd: 0, complete: true };
+  let reads = 0;
+  let slept = 0;
+  let graceful = null;
+  let alive = true;
+  let clock = 0;
+  const broker: CredentialBrokerHandle = { root, ledgerPath: join(root, 'ledger.json'),
+    model: 'test-model', maxBudgetUsd: 1, child: { pid: 42 } };
+  const ledger = await stopCredentialBroker(broker, {
+    drainTimeoutMs: 1_000,
+    pollMs: 100,
+    readLedger: () => ++reads < 3 ? incomplete : complete,
+    requestStop: child => { graceful = child.pid; alive = false; },
+    alive: () => alive,
+    sleep: async ms => { slept += ms; clock += ms; },
+    now: () => clock,
+  });
+  assert.ok(ledger);
+  assert.equal(ledger.complete, true);
+  assert.equal(reads, 4, 'the final read must happen after termination');
+  assert.equal(slept, 200);
+  assert.equal(graceful, 42);
+  assert.equal(broker.finalDiagnostics?.termination?.forceRequested, false);
+  assert.equal(existsSync(root), false);
+});
+
+test('credential broker forces termination and records typed shutdown errors', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-broker-force-'));
+  let alive = true;
+  let forced = null;
+  let clock = 0;
+  const broker: CredentialBrokerHandle = { root, ledgerPath: join(root, 'missing-ledger.json'),
+    model: 'test-model', maxBudgetUsd: 1, child: { pid: 43 }, processState: {} };
+  const ledger = await stopCredentialBroker(broker, {
+    drainTimeoutMs: 0, gracefulTimeoutMs: 100, forceTimeoutMs: 100, pollMs: 25,
+    readLedger: () => { throw new Error('ledger unavailable'); },
+    requestStop: () => {},
+    terminate: pid => { forced = pid; alive = false; },
+    alive: () => alive,
+    sleep: async ms => { clock += ms; },
+    now: () => clock,
+  });
+  assert.equal(ledger, null);
+  assert.equal(forced, 43);
+  assert.deepEqual(broker.finalDiagnostics?.termination, {
+    gracefulRequested: true, forceRequested: true, exited: true,
+    gracefulTimeoutMs: 100, forceTimeoutMs: 100,
+  });
+  assert.deepEqual(broker.finalDiagnostics?.errors, [
+    { type: 'ledger-read-error', phase: 'drain', message: 'ledger unavailable' },
+    { type: 'ledger-read-error', phase: 'final', message: 'ledger unavailable' },
+  ]);
+  assert.equal(existsSync(root), false);
+});
diff --git a/tools/stack-bench/tests/dashboard/dashboard.test.ts b/tools/stack-bench/tests/dashboard/dashboard.test.ts
new file mode 100644
index 00000000000..5a0ca193ee7
--- /dev/null
+++ b/tools/stack-bench/tests/dashboard/dashboard.test.ts
@@ -0,0 +1,1209 @@
+import assert from 'node:assert/strict';
+import { appendFileSync, mkdtempSync, mkdirSync, readFileSync, readdirSync, rmSync, utimesSync,
+  watch, writeFileSync } from 'node:fs';
+import { request as httpRequest } from 'node:http';
+import type { Server } from 'node:http';
+import type { AddressInfo } from 'node:net';
+import { EventEmitter } from 'node:events';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test, { after, before } from 'node:test';
+
+import { emptyArtifactIdentities, writeArtifact } from '../../src/evidence/artifacts.js';
+import { compileCampaignFile } from '../../src/campaigns/campaign-compiler.js';
+import type { CompiledCampaignPlan } from '../../src/campaigns/campaign-compiler.js';
+import { claimNextAttempt, createCampaignState, finishCampaignExecution }
+  from '../../src/campaigns/campaign-scheduler.js';
+import { canonicalDefinitionJson } from '../../src/composition/definition-plan.js';
+import { attemptChecks, attemptLogSlice, attemptPackage, campaignProgression, campaignSheet,
+  overviewSummary } from '../../dashboard/dashboard-views.js';
+import { parseRunProgress,
+  discoverCampaigns, discoverPlans, readCampaignArtifactBody, readJsonLines,
+  resolveCampaignArtifact, summarizeCampaign,
+} from '../../dashboard/dashboard-model.js';
+import { campaignFacts, firstGradeAbort, inspectCampaignSummary }
+  from '../../src/campaigns/campaign-inspection.js';
+import { attemptExcluded } from '../../dashboard/public/metrics.js';
+import { createDashboardServer, parseDashboardArgs } from '../../dashboard/dashboard-server.js';
+import type { DashboardOperation, LaunchInput } from '../../dashboard/dashboard-server.js';
+import { sha256 } from '../../src/evidence/provenance.js';
+import { progressionEngine } from '../../src/progression/progression-engine.js';
+import { compileProgressionInput, dependencyRuntimeDefinition }
+  from '../../src/progression/progression-definition.js';
+import { writeProgressionState } from '../../src/progression/progression-state.js';
+import { attemptPage } from '../../dashboard/public/views/attempt.js';
+import { campaignPage } from '../../dashboard/public/views/campaign.js';
+import { campaignsPage } from '../../dashboard/public/views/campaigns.js';
+import { afterRun, plansPage, runName, topbar } from '../../dashboard/public/views/plans.js';
+
+import { DEPENDENCY_CAMPAIGN, EXAMPLE_CAMPAIGN,
+  dependencyProgressionEvidence, writeCampaign, writeDependencyResults, writeFixtureResults,
+  writePlanFixtures, writeRunEvidence } from '../fixtures/dashboard-fixture.js';
+
+// The two campaign plans compile in seconds; every test works on a clone of
+// one compile. Fixture results are written once: a completed root, which
+// also holds a dependency campaign and the plan files, and a running root.
+// Tests read them; the one test that touches a timestamp leaves the evidence
+// readable for the tests that follow.
+let examplePlanCache: CompiledCampaignPlan | null = null;
+const examplePlan = (): CompiledCampaignPlan =>
+  structuredClone(examplePlanCache ??= compileCampaignFile(EXAMPLE_CAMPAIGN));
+let dependencyPlanCache: CompiledCampaignPlan | null = null;
+const dependencyPlan = (): CompiledCampaignPlan =>
+  structuredClone(dependencyPlanCache ??= compileCampaignFile(DEPENDENCY_CAMPAIGN));
+const shared = { completed: '', running: '' };
+
+before(() => {
+  shared.completed = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-completed-'));
+  writeFixtureResults(shared.completed);
+  writeDependencyResults(shared.completed, 'progression-run');
+  writePlanFixtures(join(shared.completed, 'plans'));
+  shared.running = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-running-'));
+  writeFixtureResults(shared.running, { running: true });
+});
+
+after(() => {
+  for (const root of Object.values(shared)) rmSync(root, { recursive: true, force: true });
+});
+
+async function listenOrigin(server: Server): Promise<string> {
+  await new Promise<void>((resolveListen, reject) => {
+    server.once('error', reject);
+    server.listen(0, '127.0.0.1', resolveListen);
+  });
+  const address = server.address();
+  assert.ok(address && typeof address !== 'string');
+  return `http://127.0.0.1:${(address as AddressInfo).port}`;
+}
+
+test('dashboard run progress reports only completed grades while the next repair is underway', () => {
+  const progress = parseRunProgress(`
+=== postgres-l1-first (postgres) ===
+  TOTAL      ... 31/58
+--- repair 1/3 ---
+=== postgres-l1-fix1 (postgres) ===
+  TOTAL      ... 41/58
+--- repair 2/3 ---
+=== postgres-l1-fix2 (postgres) ===
+`, { repairs: 3 });
+  assert.deepEqual(progress.firstScore, { score: 31, max: 58 });
+  assert.deepEqual(progress.latestScore, { score: 41, max: 58 });
+  assert.equal(progress.completedGrades, 2);
+  assert.equal(progress.level, 1);
+  assert.deepEqual(progress.repair, { round: 2, budget: 3 });
+  assert.equal(progress.phase, 'Grading L1 after repair 2 of 3');
+});
+
+test('dashboard operation feed ignores only a truncated final write', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-feed-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const path = join(root, 'operations.jsonl');
+  writeFileSync(path, '{"id":"complete"}\n{"id":"partial"');
+  assert.deepEqual(readJsonLines(path), [{ id: 'complete' }]);
+  writeFileSync(path, '{broken}\n{"id":"complete"}\n');
+  assert.throws(() => readJsonLines(path), /line 1/);
+});
+
+test('dashboard follows the actual level when a completed L1 advances to the first L2 grade', () => {
+  const progress = parseRunProgress(`
+=== spacetime-l1 (spacetime) ===
+  TOTAL      ... 52/58
+--- repair 1/10 ---
+=== spacetime-l1-fix1 (spacetime) ===
+  TOTAL      ... 58/58
+=== spacetime-l2 (spacetime) ===
+  TOTAL      ... 52/59
+--- repair 1/10 ---
+`, { repairs: 10 });
+  assert.equal(progress.level, 2);
+  assert.equal(progress.phase, 'Repairing L2 · round 1 of 10');
+  assert.deepEqual(progress.firstScore, { score: 52, max: 58 });
+  assert.deepEqual(progress.latestScore, { score: 52, max: 59 });
+});
+
+test('dashboard reports a dependency repair by feature instead of the level session count', () => {
+  const progress = parseRunProgress(`
+=== mongodb-l3-first (mongodb) ===
+  TOTAL      ... 26/43
+--- feature repair 1: Customer recommendations ---
+=== mongodb-l3-fix3 (mongodb) ===
+`, { repairs: 3 });
+  assert.equal(progress.phase,
+    'Grading L3 after repair 1 for Customer recommendations');
+  assert.deepEqual(progress.repair, { round: 1, budget: null });
+});
+
+test('dashboard shows a feature repair in progress without a run-wide budget', () => {
+  const progress = parseRunProgress(`
+=== mongodb-l3-first (mongodb) ===
+  TOTAL      ... 26/43
+--- feature repair 2: Customer recommendations ---
+`, { repairs: 3, running: true });
+  assert.equal(progress.phase, 'Repairing Customer recommendations · 2');
+  assert.deepEqual(progress.repair, { round: 2, budget: null });
+});
+
+test('dashboard calls dependency graph position depth', () => {
+  const progress = parseRunProgress(`
+=== mongodb-l2-first (mongodb) ===
+`, { dependency: true });
+  assert.equal(progress.phase, 'Grading the first depth 2 build');
+});
+
+test('an aborted first grade is classified, not treated as a scored zero', () => {
+  // A readiness failure stops the grade before any suite runs, so 0/58 must
+  // read as an abort with its reason.
+  assert.deepEqual(firstGradeAbort({ score: 0, max: 58, outcome: { kind: 'app_failure',
+    phase: 'application-readiness', reason: 'application did not respond' } }),
+  { phase: 'application-readiness', reason: 'application did not respond' });
+  // A graded first build — even a zero — is a score, not an abort.
+  assert.equal(firstGradeAbort({ score: 0, max: 58,
+    outcome: { kind: 'app_failure', phase: 'grading', reason: null } }), null);
+  assert.equal(firstGradeAbort({ score: 31, max: 58,
+    outcome: { kind: 'passed', phase: 'grading' } }), null);
+  assert.equal(firstGradeAbort(null), null);
+  assert.equal(firstGradeAbort({ score: 31, max: 58 }), null);
+});
+
+test('campaign facts surface the identity an operator otherwise reads plan.json for', () => {
+  const plan = examplePlan();
+  const facts = campaignFacts(plan);
+  assert.deepEqual(facts.agents, plan.agents.map(agent => ({ adapter: agent.adapter,
+    version: agent.adapterVersion, model: agent.model })));
+  assert.deepEqual(facts.recipes, plan.attempts[0]?.condition.requested.levels.map(level => ({
+    level: level.level, id: level.recipe?.id ?? null, version: level.recipe?.version ?? null,
+  })));
+  assert.deepEqual(facts.runtime, {
+    controllerImage: plan.definition.runtime.controllerImage,
+    buildImage: plan.definition.runtime.buildImage,
+  });
+  assert.equal(facts.grading.status, 'pending');
+  assert.equal(Object.hasOwn(plan.bindings[0]!, 'qualification'), false);
+});
+
+test('dashboard reports dependency work from the validated persisted state', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-dependency-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const plan = dependencyPlan();
+  const now = '2026-08-25T12:00:00.000Z';
+  const claimed = claimNextAttempt(createCampaignState(plan, { now }),
+    { now, admissionId: 'admission-1' });
+  assert.ok(claimed.claim);
+  const claim = claimed.claim;
+  const state = claimed.state;
+  const attemptState = state.attempts.find(attempt =>
+    attempt.executions.at(-1)?.id === claim.executionId);
+  assert.ok(attemptState);
+  const attemptPlan = attemptState.plan;
+  const outputRelative = claim.output;
+  const output = join(root, outputRelative);
+  mkdirSync(join(output, 'source'), { recursive: true });
+  writeCampaign(root, plan, state);
+  const progression = compileProgressionInput(dependencyRuntimeDefinition(
+    plan.featureCatalog, plan.dependencyPolicy));
+  const owner = { schemaVersion: 1,
+    campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+    attempt: { id: attemptPlan.id, track: plan.definition.track, stack: attemptPlan.stack,
+      agentAdapter: attemptPlan.agentAdapter, model: attemptPlan.model,
+      conditionSha256: attemptPlan.condition.sha256 },
+    workspace: { appDirectory: 'source' } };
+  assert(plan.featureCatalog && plan.dependencyPolicy);
+  writeProgressionState(join(output, 'progression-state.json'), { progression,
+    featureCatalogIdentity: plan.featureCatalog.identity,
+    dependencyPolicyIdentity: plan.dependencyPolicy.identity,
+    owner, state: progressionEngine.initialize(progression.definition) });
+
+  const summary = summarizeCampaign(root, { includePackage: true });
+  assert.equal(summary.mode, 'dependency');
+  const firstAttempt = summary.attempts[0];
+  assert.ok(firstAttempt?.dependency);
+  assert.deepEqual(firstAttempt.dependency.activeDepths, [1]);
+  assert.deepEqual(firstAttempt.dependency.history,
+    { firstTryPercentage: 0, repairAttempts: 0 });
+  assert(firstAttempt.dependency.work.current.some(node => node.id === 'accounts'));
+  assert.deepEqual(firstAttempt.dependency.attempts,
+    { total: 0, maxRemaining: 0, features: [] });
+  assert.ok(summary.package);
+  assert(summary.package.executions[0]?.artifacts
+    .some(item => item.path.endsWith('/progression-state.json')));
+});
+
+test('a prepared attempt is waiting rather than finished', () => {
+  const progress = parseRunProgress('', { repairs: 10, running: false, status: 'pending' });
+  assert.equal(progress.phase, 'Waiting to start');
+  assert.equal(progress.completedGrades, 0);
+  assert.equal(progress.latestScore, null);
+});
+
+test('dashboard CLI is deliberately loopback-only', () => {
+  const parsed = parseDashboardArgs(['node', 'dashboard', '--port', '7444', '--host', 'localhost'], {});
+  assert.equal(parsed.port, 7444);
+  assert.equal(parsed.host, 'localhost');
+  const container = parseDashboardArgs(['node', 'dashboard', '--host', '0.0.0.0',
+    '--allow-container-bind'], { STACK_BENCH_APPLIANCE: '1' });
+  assert.equal(container.host, '0.0.0.0');
+  assert.equal(container.allowContainerBind, true);
+  assert.throws(() => parseDashboardArgs(['node', 'dashboard', '--host', '0.0.0.0'], {}),
+    /loopback/);
+  assert.throws(() => parseDashboardArgs(['node', 'dashboard', '--host', '0.0.0.0',
+    '--allow-container-bind'], {}), /loopback/);
+  assert.throws(() => parseDashboardArgs(['node', 'dashboard', '--port', '70000'], {}),
+    /port/);
+});
+
+test('dashboard marks a current-schema campaign as interrupted when its controller stops', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-interrupted-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const plan = examplePlan();
+  const now = '2026-08-18T12:00:00.000Z';
+  const claimed = claimNextAttempt(createCampaignState(plan, { now }),
+    { now, admissionId: 'admission-1' });
+  assert.ok(claimed.claim);
+  writeCampaign(root, plan, claimed.state);
+  const output = join(root, claimed.claim.output);
+  mkdirSync(output, { recursive: true });
+  writeFileSync(join(output, 'process.stdout.log'),
+    '=== postgres-l1-first (postgres) ===\n  TOTAL ... 31/58\n--- repair 1/3 ---\n');
+
+  const summary = summarizeCampaign(root);
+  assert.equal(summary.status, 'running');
+  const activeAttempt = summary.attempts[0];
+  assert.ok(activeAttempt);
+  assert.equal(activeAttempt.progress.phase, 'Repairing L1 · round 1 of 3');
+  assert.deepEqual(activeAttempt.progress.latestScore, { score: 31, max: 58 });
+
+  const interrupted = summarizeCampaign(root, { controllerActive: () => false });
+  assert.equal(interrupted.status, 'attention-required');
+  assert.equal(interrupted.interrupted, true);
+  assert.equal(interrupted.summary.running, 0);
+  assert.equal(interrupted.summary.interrupted, 1);
+  const interruptedAttempt = interrupted.attempts[0];
+  assert.ok(interruptedAttempt?.execution);
+  assert.equal(interruptedAttempt.status, 'interrupted');
+  assert.equal(interruptedAttempt.execution.status, 'interrupted');
+  assert.equal(interruptedAttempt.progress.phase, 'Controller stopped before completion');
+});
+
+test('dashboard keeps frozen campaign evidence readable after the controller is upgraded', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-frozen-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const currentPlan = examplePlan();
+  const state = createCampaignState(currentPlan, { now: '2026-08-18T12:00:00.000Z' });
+  const frozenPlan = structuredClone(currentPlan);
+  frozenPlan.identities.engine.sha256 = 'f'.repeat(64);
+  frozenPlan.contentSha256 = sha256(canonicalDefinitionJson({
+    campaignSchemaVersion: frozenPlan.campaignSchemaVersion,
+    definition: frozenPlan.definition,
+    engine: frozenPlan.identities.engine,
+    bindings: frozenPlan.bindings,
+    stacks: frozenPlan.stacks,
+    agents: frozenPlan.agents,
+    conditions: frozenPlan.conditions,
+  }));
+  state.campaignSha256 = frozenPlan.contentSha256;
+  writeArtifact(join(root, 'plan.json'), { kind: 'campaign_plan', id: `${frozenPlan.id}-plan`,
+    identities: emptyArtifactIdentities(), payload: frozenPlan });
+  writeArtifact(join(root, 'state.json'), { kind: 'campaign_state', id: `${frozenPlan.id}-state`,
+    identities: emptyArtifactIdentities(), payload: state });
+
+  const summary = summarizeCampaign(root);
+  assert.equal(summary.id, frozenPlan.id);
+  assert.equal(summary.status, 'prepared');
+  assert.equal(summary.attempts.length, frozenPlan.attempts.length);
+});
+
+test('dashboard rejects a run artifact that does not belong to its frozen attempt', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-run-identity-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const plan = examplePlan();
+  const now = '2026-08-18T12:00:00.000Z';
+  const claimed = claimNextAttempt(createCampaignState(plan, { now }),
+    { now, admissionId: 'admission-1' });
+  assert.ok(claimed.claim);
+  writeCampaign(root, plan, claimed.state);
+  const output = join(root, claimed.claim.output);
+  mkdirSync(output, { recursive: true });
+  const attemptPlan = claimed.claim.attempt;
+  writeArtifact(join(output, 'run.json'), { kind: 'benchmark_run', id: 'other-run',
+    attempt: { id: 'other-run', parentId: 'other-attempt' },
+    identities: emptyArtifactIdentities(), payload: {
+      mode: attemptPlan.mode, track: plan.definition.track, backend: attemptPlan.stack,
+      model: attemptPlan.model, pricing: attemptPlan.pricing, guidance: attemptPlan.guidance,
+      condition: attemptPlan.condition, selectionRequest: plan.definition.selection,
+      featureCatalog: attemptPlan.featureCatalog ?? null,
+      dependencyPolicy: attemptPlan.dependencyPolicy ?? null,
+      progressionOwner: null, skills: attemptPlan.skills, levels: [],
+      runtime: { buildImage: plan.definition.runtime.buildImage },
+      totals: { costUsd: 0, costComplete: true }, outcome: { kind: 'passed' },
+    } });
+
+  const attempt = summarizeCampaign(root).attempts[0];
+  assert.match(attempt?.result?.unreadable ?? '', /attempt\.parentId/);
+  const inspection = inspectCampaignSummary(root);
+  const inspected = inspection.attempts[0];
+  assert.equal(inspection.schemaVersion, 1);
+  assert.match(inspected?.result?.unreadable ?? '', /attempt\.parentId/);
+  assert.equal(inspected?.artifacts?.run, `${claimed.claim.output}/run.json`);
+});
+
+test('dashboard overview defers historical evidence validation until the sheet is opened', t => {
+  const resultsRoot = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-history-'));
+  t.after(() => rmSync(resultsRoot, { recursive: true, force: true }));
+  const key = 'historical-run';
+  const campaign = join(resultsRoot, 'campaigns', key);
+  const plan = examplePlan();
+  let state = createCampaignState(plan, { now: '2026-08-18T12:00:00.000Z' });
+  let firstClaim = null;
+  for (;;) {
+    const claimed = claimNextAttempt(state,
+      { now: '2026-08-18T12:00:00.000Z', admissionId: 'admission-1' });
+    if (!claimed.claim) break;
+    firstClaim ??= claimed.claim;
+    state = finishCampaignExecution(claimed.state, claimed.claim.executionId,
+      { exitCode: 0, run: { outcome: { kind: 'passed' } } },
+      { now: '2026-08-18T12:00:01.000Z' });
+  }
+  assert.ok(firstClaim);
+  writeCampaign(campaign, plan, state);
+  const output = join(campaign, firstClaim.output);
+  mkdirSync(output, { recursive: true });
+  writeFileSync(join(output, 'run.json'), '{"not":"a benchmark run"}\n');
+
+  const overview = discoverCampaigns(join(resultsRoot, 'campaigns'))[0];
+  assert.ok(overview && overview.status !== 'unreadable');
+  assert.equal(overview.status, 'completed');
+  assert.equal(overview.attempts.length, 0);
+
+  const sheet = campaignSheet(resultsRoot, key);
+  const excluded = sheet.stacks.flatMap(stack => stack.attempts)
+    .map(attempt => attempt.excluded);
+  assert.ok(excluded.includes('result could not be read'));
+});
+
+test('dashboard keeps the recorded invalidation reason when the result is unreadable', () => {
+  assert.equal(attemptExcluded({
+    id: 'failed-attempt', stack: 'mongodb', status: 'invalid',
+    execution: { outcome: 'harness_failure', reason: 'disk filled while saving the run' },
+    result: { unreadable: 'partial run is invalid' }, dependency: null,
+  }), 'disk filled while saving the run');
+});
+
+test('the attempt package exposes the evidence but not arbitrary campaign files', async t => {
+  const resultsRoot = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-package-'));
+  t.after(() => rmSync(resultsRoot, { recursive: true, force: true }));
+  const campaign = join(resultsRoot, 'campaigns', 'evidence-run');
+  const plan = examplePlan();
+  const now = '2026-08-18T12:00:00.000Z';
+  const claimed = claimNextAttempt(createCampaignState(plan, { now }),
+    { now, admissionId: 'admission-1' });
+  assert.ok(claimed.claim);
+  const state = finishCampaignExecution(claimed.state, claimed.claim.executionId,
+    { exitCode: 0, run: { outcome: { kind: 'passed' } } },
+    { now: '2026-08-18T12:00:01.000Z' });
+  const outputRelative = claimed.claim.output;
+  writeCampaign(campaign, plan, state);
+  const output = join(campaign, outputRelative);
+  const media = join(output, 'grading', 'failure-media');
+  mkdirSync(media, { recursive: true });
+  writeFileSync(join(output, 'process.stdout.log'), 'authorization: Bearer secret-token-value\n'
+    + 'ANTHROPIC_API_KEY=provider-secret\nCLAUDE_CODE_OAUTH_TOKEN=oauth-secret\n'
+    + '{"apiKey":"json-secret"}\nresult ok\n');
+  writeFileSync(join(output, 'run.json'), '{"result":"ok"}\n');
+  writeArtifact(join(output, 'process.json'), { kind: 'campaign_process', id: 'execution-process',
+    payload: { schemaVersion: 1, executionId: claimed.claim.executionId, runIndex: 0,
+      exitCode: 1, signal: null, timedOut: false, streams: null } });
+  writeFileSync(join(media, 'failed-check.png'), Buffer.from('89504e470d0a1a0a', 'hex'));
+  mkdirSync(join(campaign, 'admissions'), { recursive: true });
+  writeFileSync(join(campaign, 'admissions', 'private.json'), '{"token":"do-not-serve"}\n');
+
+  const attemptId = claimed.claim.attempt.id;
+  const evidence = attemptPackage(resultsRoot, 'evidence-run', attemptId);
+  const packageExecution = evidence.executions[0];
+  assert.ok(packageExecution);
+  assert.equal(evidence.executions.length, 1);
+  assert.equal(packageExecution.truncated, false);
+  const initialVisual = packageExecution.visuals[0];
+  assert.ok(initialVisual);
+  assert.equal(initialVisual.path,
+    `${outputRelative}/grading/failure-media/failed-check.png`);
+  const log = packageExecution.artifacts.find(item => item.path.endsWith('process.stdout.log'));
+  assert.ok(log);
+  const process = packageExecution.artifacts.find(item => item.path.endsWith('process.json'));
+  assert.ok(process);
+  const servedLog = readCampaignArtifactBody(
+    resolveCampaignArtifact(resultsRoot, 'evidence-run', log.id)).toString();
+  assert.match(servedLog, /\[redacted credential\]/);
+  assert.doesNotMatch(servedLog, /secret-token-value|provider-secret|oauth-secret|json-secret/);
+  assert.throws(() => resolveCampaignArtifact(resultsRoot, 'evidence-run',
+    Buffer.from('admissions/private.json').toString('base64url')), /not available/);
+  assert.throws(() => resolveCampaignArtifact(resultsRoot, 'evidence-run',
+    Buffer.from('../outside.json').toString('base64url')), /not available|outside/);
+
+  const feed = { append() {}, list() { return []; } };
+  const { server } = createDashboardServer({ resultsRoot, plansRoot: join(resultsRoot, 'plans'),
+    allowLaunch: false, token: 'package-token', feed, plans: () => [] });
+  const origin = await listenOrigin(server);
+  t.after(() => server.close());
+  const visual = packageExecution.visuals[0];
+  assert.ok(visual);
+  const visualResponse = await fetch(`${origin}/api/campaigns/evidence-run/artifacts/${visual.id}`);
+  assert.equal(visualResponse.status, 200);
+  assert.equal(visualResponse.headers.get('content-type'), 'image/png');
+  assert.deepEqual(Buffer.from(await visualResponse.arrayBuffer()), Buffer.from('89504e470d0a1a0a', 'hex'));
+  const logResponse = await fetch(`${origin}/api/campaigns/evidence-run/artifacts/${log.id}`);
+  assert.equal(logResponse.status, 200);
+  assert.match(await logResponse.text(), /\[redacted credential\]/);
+  const processResponse = await fetch(`${origin}/api/campaigns/evidence-run/artifacts/${process.id}`);
+  assert.equal(processResponse.status, 200);
+  assert.match(await processResponse.text(), /"timedOut": false/);
+  const forbidden = Buffer.from('admissions/private.json').toString('base64url');
+  assert.equal((await fetch(`${origin}/api/campaigns/evidence-run/artifacts/${forbidden}`)).status, 404);
+});
+
+test('dashboard serves real state and protects campaign launch with a separate operator secret', async t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-'));
+  const plansRoot = join(root, 'plans');
+  mkdirSync(plansRoot, { recursive: true });
+  const events: DashboardOperation[] = [];
+  const launches: LaunchInput[] = [];
+  const feed = {
+    append(event: DashboardOperation) { events.push(structuredClone(event)); },
+    list() {
+      const latest = new Map<string, DashboardOperation>();
+      for (const event of events) latest.set(event.id, { ...(latest.get(event.id) ?? {}), ...event });
+      return [...latest.values()];
+    },
+  };
+  const storedPlan = dependencyPlan();
+  const frozenPlan = { id: storedPlan.id, version: storedPlan.version, title: storedPlan.title,
+    state: 'frozen', mode: 'dependency', track: storedPlan.definition.track,
+    levels: storedPlan.definition.levels, stacks: storedPlan.stacks.map(stack => stack.id),
+    attempts: storedPlan.summary.attempts, parallelism: storedPlan.summary.parallelism,
+    budgets: storedPlan.definition.budgets, sha256: storedPlan.contentSha256,
+    file: 'ecommerce-progression-reference.json' };
+  const campaignDirectory = join(root, 'campaigns', 'prepared-run');
+  const now = '2026-08-25T12:00:00.000Z';
+  const claimed = claimNextAttempt(createCampaignState(storedPlan, { now }),
+    { now, admissionId: 'old' });
+  assert.ok(claimed.claim);
+  const storedState = finishCampaignExecution(claimed.state, claimed.claim.executionId, {
+    exitCode: 1,
+    run: { outcome: { kind: 'harness_failure', reason: 'controller stopped' } },
+    retryAuthority: { transient: true, recoveryClean: true, budgetKnown: true,
+      cause: 'controller stopped' },
+  }, { now: '2026-08-25T12:00:01.000Z', retries: 1, retryOn: ['harness_failure'] });
+  writeCampaign(campaignDirectory, storedPlan, storedState);
+  const { server } = createDashboardServer({ resultsRoot: root, plansRoot, allowLaunch: true,
+    token: 'test-session-token', controlSecret: 'test-control-secret-value-1234567890',
+    feed, plans: () => [frozenPlan],
+    launch(input) { launches.push(input); const child = Object.assign(new EventEmitter(), { pid: 1234 });
+      return child; } });
+  const origin = await listenOrigin(server);
+  t.after(() => { server.close(); rmSync(root, { recursive: true, force: true }); });
+
+  const page = await fetch(origin);
+  assert.equal(page.status, 200);
+  const pageHtml = await page.text();
+  assert.match(pageHtml, /<title>Stack Bench<\/title>/);
+  assert.match(pageHtml, /src="\/app\.js"/);
+  assert.doesNotMatch(pageHtml, /Control Room/);
+  assert.doesNotMatch(pageHtml, /Controller activity/);
+  assert.doesNotMatch(pageHtml, /See every run/);
+  const brand = await fetch(`${origin}/spacetimedb-mark.svg`);
+  assert.equal(brand.status, 200);
+  assert.equal(brand.headers.get('content-type'), 'image/svg+xml');
+  assert.match(await brand.text(), /viewBox="0 0 35 32"/);
+  const overview = await (await fetch(`${origin}/api/overview`)).json() as {
+    canStart: boolean;
+    csrfToken: string;
+    campaigns: Array<{ key: string }>;
+  };
+  assert.equal(overview.canStart, true);
+  assert.equal(overview.csrfToken, 'test-session-token');
+  assert.doesNotMatch(JSON.stringify(overview), /test-control-secret-value/);
+  assert.deepEqual(overview.campaigns.map(campaign => campaign.key), ['prepared-run']);
+  const served = await (await fetch(`${origin}/api/plans`)).json() as Array<{ id: string }>;
+  assert.deepEqual(served.map(plan => plan.id), [frozenPlan.id]);
+
+  const reboundStatus = await new Promise((resolveStatus, reject) => {
+    const rebound = httpRequest(`${origin}/api/overview`, { headers: { host: 'attacker.invalid' } },
+      response => { response.resume(); response.once('end', () => resolveStatus(response.statusCode)); });
+    rebound.once('error', reject);
+    rebound.end();
+  });
+  assert.equal(reboundStatus, 421);
+
+  const rejected = await fetch(`${origin}/api/campaigns`, { method: 'POST',
+    headers: { origin, 'content-type': 'application/json',
+      'x-stack-bench-token': 'test-session-token' },
+    body: JSON.stringify({ planId: frozenPlan.id, outputName: 'meeting-run-1' }) });
+  assert.equal(rejected.status, 403);
+  assert.equal(launches.length, 0);
+
+  const wrongOperator = await fetch(`${origin}/api/campaigns`, { method: 'POST',
+    headers: { origin, 'content-type': 'application/json',
+      'x-stack-bench-token': 'test-session-token',
+      'x-stack-bench-control-secret': 'wrong-control-secret-value-1234567890' },
+    body: JSON.stringify({ planId: frozenPlan.id, outputName: 'meeting-run-1' }) });
+  assert.equal(wrongOperator.status, 403);
+  assert.equal(launches.length, 0);
+
+  const accepted = await fetch(`${origin}/api/campaigns`, { method: 'POST',
+    headers: { origin, 'content-type': 'application/json',
+      'x-stack-bench-token': 'test-session-token',
+      'x-stack-bench-control-secret': 'test-control-secret-value-1234567890' },
+    body: JSON.stringify({ planId: frozenPlan.id, outputName: 'meeting-run-1' }) });
+  assert.equal(accepted.status, 202);
+  assert.equal(launches.length, 1);
+  const firstLaunch = launches[0];
+  const firstEvent = feed.list()[0];
+  assert.ok(firstLaunch && firstEvent);
+  assert.equal(firstLaunch.plan.id, frozenPlan.id);
+  assert.equal(firstLaunch.output, join(root, 'campaigns', 'meeting-run-1'));
+  assert.equal(firstEvent.status, 'running');
+  assert.equal(firstEvent.pid, 1234);
+  assert.equal(firstEvent.campaignSha256, frozenPlan.sha256);
+  const duplicateStart = await fetch(`${origin}/api/campaigns`, { method: 'POST',
+    headers: { origin, 'content-type': 'application/json',
+      'x-stack-bench-token': 'test-session-token',
+      'x-stack-bench-control-secret': 'test-control-secret-value-1234567890' },
+    body: JSON.stringify({ planId: frozenPlan.id, outputName: 'meeting-run-1' }) });
+  assert.equal(duplicateStart.status, 409);
+  assert.equal(launches.length, 1);
+
+  const resumed = await fetch(`${origin}/api/campaigns/prepared-run/resume`, { method: 'POST',
+    headers: { origin, 'content-type': 'application/json',
+      'x-stack-bench-token': 'test-session-token',
+      'x-stack-bench-control-secret': 'test-control-secret-value-1234567890' }, body: '{}' });
+  assert.equal(resumed.status, 202);
+  assert.equal(launches.length, 2);
+  assert.equal(launches[1]?.output, campaignDirectory);
+  assert.equal(((await resumed.json()) as { type?: string }).type, 'campaign.resume');
+  const duplicate = await fetch(`${origin}/api/campaigns/prepared-run/resume`, { method: 'POST',
+    headers: { origin, 'content-type': 'application/json',
+      'x-stack-bench-token': 'test-session-token',
+      'x-stack-bench-control-secret': 'test-control-secret-value-1234567890' }, body: '{}' });
+  assert.equal(duplicate.status, 409);
+  assert.equal(launches.length, 2);
+});
+
+test('the run form sends the plan, the run name and the operator secret the route requires',
+  async t => {
+    const root = mkdtempSync(join(tmpdir(), 'stack-bench-run-form-'));
+    const plansRoot = join(root, 'plans');
+    writePlanFixtures(plansRoot);
+    const launches: LaunchInput[] = [];
+    const feed = { append() {}, list() { return []; } };
+    const { server } = createDashboardServer({ resultsRoot: root, plansRoot, allowLaunch: true,
+      token: 'form-token', controlSecret: 'form-control-secret-value-1234567890', feed,
+      plans: () => discoverPlans(plansRoot),
+      launch(input) {
+        launches.push(input);
+        return Object.assign(new EventEmitter(), { pid: 77 });
+      } });
+    const origin = await listenOrigin(server);
+    t.after(() => { server.close(); rmSync(root, { recursive: true, force: true }); });
+    const plan = discoverPlans(plansRoot).find(item => item.state === 'frozen');
+    assert.ok(plan);
+    // The form's own prefill, held to the name the route accepts.
+    const outputName = runName(plan.id, new Date('2026-09-02T15:04:00'));
+    assert.match(outputName, /^[a-z0-9][a-z0-9.-]{2,119}$/);
+    const send = (secret: string): Promise<Response> => fetch(`${origin}/api/campaigns`,
+      { method: 'POST',
+        headers: { origin, 'content-type': 'application/json', 'x-stack-bench-token': 'form-token',
+          'x-stack-bench-control-secret': secret },
+        body: JSON.stringify({ planId: plan.id, outputName }) });
+
+    const refused = await send('wrong-control-secret-value-1234567890');
+    assert.equal(refused.status, 403);
+    assert.equal(launches.length, 0);
+    const typed = { planId: plan.id, outputName, secret: 'typed-secret', error: '' };
+    const refusedError = ((await refused.json()) as { error: string }).error;
+    assert.deepEqual(afterRun(typed, refused.status, refusedError),
+      { planId: plan.id, outputName, secret: '', error: 'The run request is not authorized.' });
+    assert.equal(afterRun(typed, 409, 'That run output already exists.').secret, 'typed-secret');
+
+    const accepted = await send('form-control-secret-value-1234567890');
+    assert.equal(accepted.status, 202);
+    assert.equal(launches.length, 1);
+    assert.equal(launches[0]?.plan.id, plan.id);
+    assert.equal(launches[0]?.output, join(root, 'campaigns', outputName));
+  });
+
+test('host development mode is read-only even with a valid browser request', async t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-readonly-'));
+  mkdirSync(join(root, 'plans'), { recursive: true });
+  const feed = { append() {}, list() { return []; } };
+  const { server } = createDashboardServer({ resultsRoot: root, plansRoot: join(root, 'plans'),
+    allowLaunch: false, token: 'readonly-token', feed, plans: () => [] });
+  const origin = await listenOrigin(server);
+  t.after(() => { server.close(); rmSync(root, { recursive: true, force: true }); });
+  const response = await fetch(`${origin}/api/campaigns`, { method: 'POST',
+    headers: { origin, 'content-type': 'application/json', 'x-stack-bench-token': 'readonly-token' },
+    body: JSON.stringify({ planId: 'anything', outputName: 'meeting-run-2' }) });
+  assert.equal(response.status, 503);
+});
+
+test('the overview stays a summary and the sheet stays one campaign at appliance scale', () => {
+  const resultsRoot = shared.completed;
+  const campaignsRoot = join(resultsRoot, 'campaigns');
+  const controllerActive = (): boolean => true;
+
+  const overview = overviewSummary(campaignsRoot, { controllerActive });
+  const first = overview.find(campaign => campaign.key === 'fixture-run-0');
+  assert.ok(first && 'scores' in first);
+  assert.equal(Object.keys(first.scores).length, 3);
+  assert.equal(first.attempts.total, 9);
+  assert.ok(Object.values(first.scores).every(score => score !== null));
+  assert.equal(JSON.stringify(overview).includes('process.stdout.log'), false);
+  const overviewBytes = Buffer.byteLength(JSON.stringify(overview));
+  assert.ok(overviewBytes < 12 * 1024, `overview payload is ${overviewBytes} bytes`);
+  const startedAt = performance.now();
+  overviewSummary(campaignsRoot, { controllerActive });
+  const warmMs = performance.now() - startedAt;
+  assert.ok(warmMs < 150, `warm overview took ${warmMs.toFixed(1)}ms`);
+
+  const sheet = campaignSheet(resultsRoot, 'fixture-run-0', { controllerActive });
+  assert.equal(sheet.mode, 'sequential');
+  assert.equal(sheet.facts.repairBudget, 3);
+  assert.equal(sheet.facts.timeLimitMinutes, 240);
+  assert.equal(sheet.stacks.length, 3);
+  const stack = sheet.stacks[0];
+  assert.ok(stack);
+  assert.equal(stack.n, 3);
+  assert.ok(stack.score !== null && stack.unaided !== null);
+  assert.ok(stack.unaided < stack.score);
+  assert.deepEqual(stack.levels?.map(level => level.level), [1]);
+  assert.equal(stack.questlines, null);
+  assert.equal(stack.attempts.length, 3);
+  assert.ok(stack.climb.length >= 2);
+  const sheetBytes = Buffer.byteLength(JSON.stringify(sheet));
+  assert.ok(sheetBytes < 60 * 1024, `campaign sheet is ${sheetBytes} bytes`);
+});
+
+test('a liveness probe that cannot answer still reads the campaign', () => {
+  const resultsRoot = shared.running;
+  const controllerActive = (): boolean => {
+    throw new Error('failed to connect to the docker API at unix:///var/run/docker.sock');
+  };
+
+  const campaign = overviewSummary(join(resultsRoot, 'campaigns'), { controllerActive })
+    .find(entry => entry.key === 'fixture-run-0');
+  assert.ok(campaign && 'scores' in campaign);
+  assert.equal(campaign.status, 'running');
+  assert.equal(campaignSheet(resultsRoot, 'fixture-run-0', { controllerActive }).status, 'running');
+});
+
+test('the overview caches a running campaign until its evidence changes', () => {
+  const resultsRoot = shared.running;
+  const campaignsRoot = join(resultsRoot, 'campaigns');
+  const controllerActive = (): boolean => true;
+
+  const first = overviewSummary(campaignsRoot, { controllerActive })
+    .find(campaign => campaign.key === 'fixture-run-0');
+  assert.ok(first && 'scores' in first && first.status === 'running');
+  const cached = overviewSummary(campaignsRoot, { controllerActive })
+    .find(campaign => campaign.key === 'fixture-run-0');
+  assert.equal(cached, first);
+
+  const attempts = join(campaignsRoot, 'fixture-run-0', 'attempts');
+  const attempt = readdirSync(attempts)[0];
+  assert.ok(attempt);
+  const run = join(attempts, attempt, 'execution-1', 'run.json');
+  const later = new Date(Date.now() + 5000);
+  utimesSync(run, later, later);
+  const refreshed = overviewSummary(campaignsRoot, { controllerActive })
+    .find(campaign => campaign.key === 'fixture-run-0');
+  assert.ok(refreshed);
+  assert.notEqual(refreshed, first);
+  assert.deepEqual(refreshed, first);
+});
+
+test('attempt evidence is fetched per attempt, not per campaign', t => {
+  const resultsRoot = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-attempt-'));
+  t.after(() => rmSync(resultsRoot, { recursive: true, force: true }));
+  const plan = examplePlan();
+  const now = '2026-08-18T12:00:00.000Z';
+  const claimed = claimNextAttempt(createCampaignState(plan, { now }),
+    { now, admissionId: 'admission-1' });
+  assert.ok(claimed.claim);
+  const state = finishCampaignExecution(claimed.state, claimed.claim.executionId,
+    { exitCode: 0, run: { outcome: { kind: 'passed' } } }, { now });
+  const directory = join(resultsRoot, 'campaigns', 'attempt-run');
+  writeCampaign(directory, plan, state);
+  const output = join(directory, claimed.claim.output);
+  mkdirSync(output, { recursive: true });
+  writeRunEvidence(output, plan, claimed.claim.attempt, 1);
+  writeFileSync(join(output, 'process.stdout.log'),
+    `authorization: Bearer secret-token-value\n${'log line\n'.repeat(64)}`);
+  const attemptId = claimed.claim.attempt.id;
+
+  const checks = attemptChecks(resultsRoot, 'attempt-run', attemptId);
+  assert.equal(checks.stack, claimed.claim.attempt.stack);
+  assert.deepEqual(checks.grades.map(grade => grade.id), ['grading']);
+  assert.ok(checks.checks.length > 0);
+  assert.ok(checks.checks.every(check => check.outcome === 'pass'));
+  assert.ok(checks.checks.every(check => check.history.length === 1));
+  assert.equal(checks.checks.some(check => check.regressed), false);
+
+  const evidence = attemptPackage(resultsRoot, 'attempt-run', attemptId);
+  assert.equal(evidence.executions.length, 1);
+  const paths = evidence.executions[0]?.artifacts.map(item => item.path) ?? [];
+  assert.ok(paths.some(path => path.endsWith('/run.json')));
+  assert.ok(paths.some(path => path.endsWith('/grading/bundle.json')));
+  assert.equal(paths.some(path => path.includes('/source/')), false);
+
+  const head = attemptLogSlice(resultsRoot, 'attempt-run', attemptId, 0);
+  assert.match(head.text, /\[redacted credential\]/);
+  assert.doesNotMatch(head.text, /secret-token-value/);
+  assert.equal(head.offset, head.size);
+  const tail = attemptLogSlice(resultsRoot, 'attempt-run', attemptId, head.offset);
+  assert.equal(tail.text, '');
+  assert.equal(tail.offset, head.size);
+});
+
+test('the sheet reports dependency submodes and questlines in definition order', t => {
+  const resultsRoot = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-sheet-dependency-'));
+  t.after(() => rmSync(resultsRoot, { recursive: true, force: true }));
+  const plan = dependencyPlan();
+  const now = '2026-08-25T12:00:00.000Z';
+  const claimed = claimNextAttempt(createCampaignState(plan, { now }),
+    { now, admissionId: 'admission-1' });
+  assert.ok(claimed.claim);
+  const directory = join(resultsRoot, 'campaigns', 'dependency-run');
+  const output = join(directory, claimed.claim.output);
+  mkdirSync(join(output, 'source'), { recursive: true });
+  writeCampaign(directory, plan, claimed.state);
+  assert(plan.featureCatalog && plan.dependencyPolicy);
+  const attemptPlan = claimed.claim.attempt;
+  writeProgressionState(join(output, 'progression-state.json'), {
+    progression: compileProgressionInput(dependencyRuntimeDefinition(
+      plan.featureCatalog, plan.dependencyPolicy)),
+    featureCatalogIdentity: plan.featureCatalog.identity,
+    dependencyPolicyIdentity: plan.dependencyPolicy.identity,
+    owner: { schemaVersion: 1,
+      campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+      attempt: { id: attemptPlan.id, track: plan.definition.track, stack: attemptPlan.stack,
+        agentAdapter: attemptPlan.agentAdapter, model: attemptPlan.model,
+        conditionSha256: attemptPlan.condition.sha256 },
+      workspace: { appDirectory: 'source' } },
+    state: progressionEngine.initialize(compileProgressionInput(dependencyRuntimeDefinition(
+      plan.featureCatalog, plan.dependencyPolicy)).definition) });
+
+  const sheet = campaignSheet(resultsRoot, 'dependency-run', { controllerActive: () => true });
+  assert.equal(sheet.mode, 'dependency');
+  assert.equal(sheet.facts.workSelection, 'progressive');
+  assert.equal(sheet.facts.repairSelection, 'feature');
+  assert.equal(sheet.facts.repairBudget, 0);
+  assert.equal(sheet.facts.guidance, attemptPlan.guidance);
+  const stack = sheet.stacks.find(item => item.questlines !== null);
+  assert.ok(stack?.questlines);
+  assert.equal(stack.levels, null);
+  assert.ok(stack.questlines.length > 0);
+  const questline = stack.questlines[0];
+  assert.ok(questline);
+  assert.ok(questline.nodes.length > 0);
+  assert.ok(questline.nodes.every(node => typeof node.status === 'string'));
+  assert.equal(stack.repairs.budget, 0);
+  assert.equal(stack.regressions, 0);
+  const bytes = Buffer.byteLength(JSON.stringify(sheet));
+  assert.ok(bytes < 60 * 1024, `dependency sheet is ${bytes} bytes`);
+});
+
+function writeSingleAttemptCampaign(resultsRoot: string, key: string): string {
+  const plan = examplePlan();
+  const now = '2026-08-18T12:00:00.000Z';
+  const claimed = claimNextAttempt(createCampaignState(plan, { now }),
+    { now, admissionId: 'admission-1' });
+  assert.ok(claimed.claim);
+  const state = finishCampaignExecution(claimed.state, claimed.claim.executionId,
+    { exitCode: 0, run: { outcome: { kind: 'passed' } } }, { now });
+  const directory = join(resultsRoot, 'campaigns', key);
+  writeCampaign(directory, plan, state);
+  const output = join(directory, claimed.claim.output);
+  mkdirSync(output, { recursive: true });
+  writeRunEvidence(output, plan, claimed.claim.attempt, 1);
+  writeFileSync(join(output, 'process.stdout.log'),
+    `authorization: Bearer secret-token-value\n${'log line\n'.repeat(8)}`);
+  return claimed.claim.attempt.id;
+}
+
+test('the sheet says a dependency campaign that stopped between executions can resume', t => {
+  const resultsRoot = mkdtempSync(join(tmpdir(), 'stack-bench-resume-'));
+  t.after(() => rmSync(resultsRoot, { recursive: true, force: true }));
+  const plan = dependencyPlan();
+  const now = '2026-08-25T12:00:00.000Z';
+  const claimed = claimNextAttempt(createCampaignState(plan, { now }),
+    { now, admissionId: 'admission-1' });
+  assert.ok(claimed.claim);
+  const stopped = finishCampaignExecution(claimed.state, claimed.claim.executionId, {
+    exitCode: 1,
+    run: { outcome: { kind: 'harness_failure', reason: 'controller stopped' } },
+    retryAuthority: { transient: true, recoveryClean: true, budgetKnown: true,
+      cause: 'controller stopped' },
+  }, { now, retries: 1, retryOn: ['harness_failure'] });
+  writeCampaign(join(resultsRoot, 'campaigns', 'prepared-run'), plan, stopped);
+  const sheet = campaignSheet(resultsRoot, 'prepared-run', { controllerActive: () => false });
+  assert.equal(sheet.status, 'prepared');
+  assert.equal(sheet.executions, 1);
+  assert.equal(sheet.resumable, true);
+  // A campaign that has run nothing, and a sequential one, have nothing to resume.
+  writeCampaign(join(resultsRoot, 'campaigns', 'fresh-run'), plan, createCampaignState(plan, { now }));
+  assert.equal(campaignSheet(resultsRoot, 'fresh-run', { controllerActive: () => false })
+    .resumable, false);
+  assert.equal(campaignSheet(shared.completed, 'fixture-run-0', { controllerActive: () => false })
+    .resumable, false);
+});
+
+test('every view has a route, and a name that is not a campaign never reaches the evidence',
+  async t => {
+    const root = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-routes-'));
+    const attemptId = writeSingleAttemptCampaign(root, 'route-run');
+    const feed = { append() {}, list() { return []; } };
+    const { server } = createDashboardServer({ resultsRoot: root, plansRoot: join(root, 'plans'),
+      allowLaunch: false, token: 'route-token', feed, plans: () => [] });
+    const origin = await listenOrigin(server);
+    t.after(() => { server.close(); rmSync(root, { recursive: true, force: true }); });
+
+    const overview = await fetch(`${origin}/api/overview`);
+    assert.equal(overview.headers.get('cache-control'), 'no-store');
+    const summary = await overview.json() as { campaigns: Array<{ key: string }>;
+      canStart: boolean; csrfToken: string };
+    assert.deepEqual(summary.campaigns.map(campaign => campaign.key), ['route-run']);
+    assert.equal(summary.canStart, false);
+    assert.equal(summary.csrfToken, 'route-token');
+    assert.equal('plans' in summary, false);
+    assert.deepEqual(await (await fetch(`${origin}/api/plans`)).json(), []);
+
+    const sheet = await (await fetch(`${origin}/api/campaigns/route-run`)).json() as {
+      key: string; stacks: Array<{ stack: string }> };
+    assert.equal(sheet.key, 'route-run');
+    assert.equal(sheet.stacks.length, 3);
+
+    const checks = await (await fetch(
+      `${origin}/api/campaigns/route-run/attempts/${attemptId}/checks`)).json() as {
+        checks: Array<{ outcome: string }> };
+    assert.ok(checks.checks.length > 0);
+    const evidence = await (await fetch(
+      `${origin}/api/campaigns/route-run/attempts/${attemptId}/package`)).json() as {
+        executions: Array<{ artifacts: unknown[] }> };
+    assert.equal(evidence.executions.length, 1);
+
+    const log = await fetch(`${origin}/api/campaigns/route-run/attempts/${attemptId}/log?from=0`);
+    assert.equal(log.headers.get('content-type'), 'text/plain; charset=utf-8');
+    const offset = Number(log.headers.get('x-stack-bench-log-offset'));
+    const text = await log.text();
+    assert.match(text, /\[redacted credential\]/);
+    assert.doesNotMatch(text, /secret-token-value/);
+    assert.ok(offset > 0);
+    const rest = await fetch(
+      `${origin}/api/campaigns/route-run/attempts/${attemptId}/log?from=${offset}`);
+    assert.equal(await rest.text(), '');
+    assert.equal(Number(rest.headers.get('x-stack-bench-log-offset')), offset);
+
+    assert.equal((await fetch(`${origin}/api/campaigns/route-run/progression`)).status, 404);
+    assert.equal((await fetch(`${origin}/api/campaigns/missing-run`)).status, 404);
+    assert.equal((await fetch(`${origin}/api/campaigns/Route-Run`)).status, 400);
+    assert.equal((await fetch(
+      `${origin}/api/campaigns/route-run/attempts/missing-attempt/checks`)).status, 404);
+    assert.equal((await fetch(
+      `${origin}/api/campaigns/route-run/attempts/${attemptId}/log?from=-1`)).status, 400);
+    assert.equal((await fetch(
+      `${origin}/api/campaigns/route-run/attempts/${attemptId}/log?from=eight`)).status, 400);
+    const missing = await (await fetch(`${origin}/api/campaigns/missing-run`)).json() as {
+      error: string };
+    assert.equal(missing.error, 'Not found');
+
+    for (const path of ['/', '/plans', '/c/route-run', `/c/route-run/a/${attemptId}`]) {
+      const page = await fetch(`${origin}${path}`);
+      assert.equal(page.status, 200, path);
+      assert.equal(page.headers.get('cache-control'), 'no-store');
+      assert.match(await page.text(), /<title>Stack Bench/);
+    }
+  });
+
+async function nextServerEvents(origin: string, signal: AbortSignal, count: number,
+  deadlineMs: number): Promise<string[]> {
+  const response = await fetch(`${origin}/api/events`, { signal });
+  assert.equal(response.headers.get('content-type'), 'text/event-stream; charset=utf-8');
+  assert.ok(response.body);
+  const reader = response.body.getReader();
+  const decoder = new TextDecoder();
+  const events: string[] = [];
+  const deadline = setTimeout(() => { void reader.cancel(); }, deadlineMs);
+  let buffered = '';
+  try {
+    while (events.length < count) {
+      const chunk = await reader.read();
+      if (chunk.done) break;
+      buffered += decoder.decode(chunk.value, { stream: true });
+      const frames = buffered.split('\n\n');
+      buffered = frames.pop() ?? '';
+      for (const frame of frames) {
+        const match = frame.match(/^event: (\w+)\ndata: (.+)$/);
+        if (match) events.push(`${match[1]} ${match[2]}`);
+      }
+    }
+  } finally {
+    clearTimeout(deadline);
+  }
+  return events;
+}
+
+test('the event stream reports a campaign write and the log bytes that follow it', async t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-events-'));
+  const attemptId = writeSingleAttemptCampaign(root, 'event-run');
+  const feed = { append() {}, list() { return []; } };
+  const { server } = createDashboardServer({ resultsRoot: root, plansRoot: join(root, 'plans'),
+    allowLaunch: false, token: 'event-token', feed, plans: () => [] });
+  const origin = await listenOrigin(server);
+  const abort = new AbortController();
+  t.after(() => { abort.abort(); server.close(); rmSync(root, { recursive: true, force: true }); });
+
+  let recursive = true;
+  try { watch(root, { recursive: true, persistent: false }).close(); }
+  catch { recursive = false; }
+  // Where the platform has no recursive watch the watcher polls every five
+  // seconds instead; the same events arrive.
+  const deadlineMs = recursive ? 1000 : 8000;
+
+  const execution = join(root, 'campaigns', 'event-run', 'attempts', attemptId, 'execution-1');
+  const events = nextServerEvents(origin, abort.signal, 2, deadlineMs);
+  await new Promise(done => setTimeout(done, 50));
+  const run = join(execution, 'run.json');
+  writeFileSync(run, readFileSync(run, 'utf8'));
+  appendFileSync(join(execution, 'process.stdout.log'), 'another line\n');
+  assert.deepEqual(await events, ['campaign {"key":"event-run"}',
+    `log {"key":"event-run","attemptId":"${attemptId}"}`]);
+});
+
+test('the progression view replays the graph once per stack within its budget', t => {
+  const resultsRoot = mkdtempSync(join(tmpdir(), 'stack-bench-dashboard-progression-'));
+  t.after(() => rmSync(resultsRoot, { recursive: true, force: true }));
+  const plan = dependencyPlan();
+  assert.ok(plan.featureCatalog && plan.dependencyPolicy);
+  const now = '2026-08-25T12:00:00.000Z';
+  const directory = join(resultsRoot, 'campaigns', 'progression-run');
+  let state = createCampaignState(plan, { now });
+  const claims = [];
+  for (;;) {
+    const claimed = claimNextAttempt(state, { now, admissionId: 'admission-1' });
+    if (!claimed.claim) break;
+    claims.push(claimed.claim);
+    state = claimed.state;
+  }
+  writeCampaign(directory, plan, state);
+  const progression = compileProgressionInput(dependencyRuntimeDefinition(
+    plan.featureCatalog, plan.dependencyPolicy));
+  for (const claim of claims) {
+    const output = join(directory, claim.output);
+    mkdirSync(join(output, 'source'), { recursive: true });
+    writeProgressionState(join(output, 'progression-state.json'), {
+      progression,
+      featureCatalogIdentity: plan.featureCatalog.identity,
+      dependencyPolicyIdentity: plan.dependencyPolicy.identity,
+      owner: { schemaVersion: 1,
+        campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+        attempt: { id: claim.attempt.id, track: plan.definition.track,
+          stack: claim.attempt.stack, agentAdapter: claim.attempt.agentAdapter,
+          model: claim.attempt.model, conditionSha256: claim.attempt.condition.sha256 },
+        workspace: { appDirectory: 'source' } },
+      state: dependencyProgressionEvidence(plan, claim.attempt) });
+  }
+
+  const view = campaignProgression(resultsRoot, 'progression-run');
+  assert.ok(view);
+  assert.deepEqual(view.depths, plan.definition.levels);
+  assert.ok(view.nodes.length > 0);
+  assert.ok(view.nodes.every(node => view.depths.includes(node.depth)));
+  assert.equal(view.stacks.length, claims.length);
+  const track = view.stacks[0];
+  assert.ok(track);
+  assert.ok(track.steps.length > 0);
+  assert.ok(track.steps.every(step => step.statuses.length === view.nodes.length));
+  assert.ok(track.steps.some(step => step.action === 'build'));
+  assert.equal(track.steps.some(step => step.action === 'repair'), false);
+  assert.ok(track.steps.at(-1)?.statuses.includes('passed'));
+  assert.equal(campaignProgression(resultsRoot, 'progression-run'), view);
+  const bytes = Buffer.byteLength(JSON.stringify(view));
+  assert.ok(bytes < 80 * 1024, `progression payload is ${bytes} bytes`);
+});
+
+// The client is a set of pure functions, so the rules the pages are held to —
+// no prose, no badge, one value per cell, stacks in fixed order — are asserted
+// here on rendered HTML rather than in a browser.
+
+interface MarkupNode {
+  tag: string;
+  classes: string[];
+}
+
+interface MarkupText {
+  text: string;
+  path: MarkupNode[];
+}
+
+const VOID_TAGS = new Set(['img', 'br', 'line', 'circle', 'path', 'rect', 'meta', 'link', 'input']);
+const CONTROL_TAGS = new Set(['a', 'button', 'select', 'summary']);
+const LABEL_HOLDERS = new Set(['label', 'k', 'th']);
+const DATA_HOLDERS = new Set(['v', 'big', 'phase', 'who', 'q', 'pct', 'd', 'h', 'shape', 'when',
+  'stack', 'name', 'state', 'ev', 'band', 'log', 'links', 'files-list', 'title', 'crumbs', 'text',
+  'group', 'b', 'live-head', 'facts', 'chart', 'sum', 'views', 'err', 'grade-key']);
+const LABELS = new Set(['Campaign', 'Shape', 'Status', 'SpacetimeDB', 'PostgreSQL', 'MongoDB',
+  'Stacks', 'Attempts', 'Parallel', 'State', 'Run name', 'Secret',
+  'Updated', 'Mode', 'Depth', 'Levels', 'Work', 'Repair', 'Repairs', 'Repair budget', 'Repetitions',
+  'Agent', 'Model', 'Guidance', 'Recipe', 'Recipes', 'Time limit', 'Spend limit', 'Controller',
+  'Plan', 'Grading', 'Scope', 'Continued', 'Score', 'Unaided', 'Regressions', 'Time', 'Spend',
+  'Climb', 'Attempt', 'Questline average', 'Evidence', 'Completed', 'Excluded', 'Check', 'Proves',
+  'Grades', 'Now', 'Step', 'Stack', 'Action', 'Feature']);
+const STATUS_WORDS = ['running', 'completed', 'ready', 'needs attention', 'unreadable', 'queued'];
+const BANNED = [/\bfirst try\b/i, /\bfirst build\b/i, /\binitial\b/i, /\bbefore repairs\b/i,
+  /\bverdict\b/i, /\bcontrol room\b/i];
+
+function markupText(html: string): MarkupText[] {
+  const found: MarkupText[] = [];
+  const path: MarkupNode[] = [];
+  const pattern = /<\/?([a-zA-Z][\w-]*)([^>]*)>/g;
+  let index = 0;
+  for (;;) {
+    const tag = pattern.exec(html);
+    const text = html.slice(index, tag?.index ?? html.length);
+    if (text.trim()) found.push({ text: text.trim(), path: [...path] });
+    if (!tag) break;
+    index = pattern.lastIndex;
+    const name = (tag[1] ?? '').toLowerCase();
+    const attributes = tag[2] ?? '';
+    if (tag[0].startsWith('</')) {
+      const open = path.findLastIndex(entry => entry.tag === name);
+      if (open >= 0) path.length = open;
+      continue;
+    }
+    if (VOID_TAGS.has(name) || attributes.trimEnd().endsWith('/')) continue;
+    path.push({ tag: name,
+      classes: (/class="([^"]*)"/.exec(attributes)?.[1] ?? '').split(/\s+/).filter(Boolean) });
+  }
+  return found;
+}
+
+function dataShaped(text: string): boolean {
+  return /^[-—·✓✕$/\d]/.test(text) || /^[a-z][a-z0-9.\-/ ]*$/.test(text);
+}
+
+function lintPage(name: string, html: string): void {
+  assert.equal(/class="[^"]*\b(?:pill|badge)\b/.test(html), false, `${name} has a badge`);
+  for (const banned of BANNED) assert.doesNotMatch(html, banned, `${name} uses a banned word`);
+  for (const node of markupText(html)) {
+    const control = node.path.some(entry => CONTROL_TAGS.has(entry.tag)
+      || entry.classes.includes('chip') || entry.classes.includes('btn'));
+    const label = node.path.some(entry => entry.classes.some(value => LABEL_HOLDERS.has(value))
+      || LABEL_HOLDERS.has(entry.tag));
+    const data = node.path.some(entry =>
+      entry.classes.some(value => DATA_HOLDERS.has(value)) || DATA_HOLDERS.has(entry.tag));
+    if (control) continue;
+    if (label) {
+      assert.ok(LABELS.has(node.text) || /^L\d+ (?:unaided|score)$/.test(node.text)
+        || dataShaped(node.text) || node.path.some(entry => entry.classes.includes('q')),
+      `${name} labels with "${node.text}"`);
+      continue;
+    }
+    assert.ok(data || dataShaped(node.text),
+      `${name} prints "${node.text}" that is neither data, a label nor a control`);
+  }
+}
+
+function statusCells(html: string): string[] {
+  return markupText(html)
+    .filter(node => STATUS_WORDS.includes(node.text.toLowerCase())
+      && !node.path.some(entry => entry.classes.some(value => LABEL_HOLDERS.has(value))
+        || LABEL_HOLDERS.has(entry.tag)))
+    .map(node => node.path.map(entry => entry.classes.join('.')).join('>'));
+}
+
+// Where the stacks are columns or rows they run in one order; the crumbs, the
+// attempt title and the replay's selected event name a single stack.
+function stackOrder(html: string): string[] {
+  // A live lane names only the stacks with a running attempt, so lanes are a
+  // subset of the order rather than a place where the order could be broken.
+  const single = new Set(['crumbs', 'title', 'ev', 'figs', 'who']);
+  return markupText(html)
+    .filter(node => ['SpacetimeDB', 'PostgreSQL', 'MongoDB'].includes(node.text)
+      && !node.path.some(entry => entry.classes.some(value => single.has(value))))
+    .map(node => node.text);
+}
+
+test('the client renders each page as data, labels and controls only', () => {
+  const resultsRoot = shared.completed;
+  const controllerActive = (): boolean => true;
+  const overview = overviewSummary(join(resultsRoot, 'campaigns'), { controllerActive });
+  const sequential = campaignSheet(resultsRoot, 'fixture-run-0', { controllerActive });
+  const dependency = campaignSheet(resultsRoot, 'progression-run', { controllerActive });
+  const progression = campaignProgression(resultsRoot, 'progression-run');
+  assert.ok(progression);
+  const attempt = sequential.stacks[0]?.attempts[0];
+  assert.ok(attempt);
+  const screenshotEvidence = attemptPackage(resultsRoot, 'fixture-run-0', attempt.id);
+  screenshotEvidence.executions[0]?.visuals.push({ id: 'screenshot-id',
+    path: 'grading/failure-media/example.png', name: 'Example failure', kind: 'visual',
+    contentType: 'image/png', size: 8 });
+  const plans = discoverPlans(join(resultsRoot, 'plans'));
+  const runForm = { planId: plans.find(plan => plan.state === 'frozen')?.id ?? '',
+    outputName: 'ecommerce-20260902-1504', secret: '',
+    error: 'That run output already exists.' };
+  const pages: Array<[string, string]> = [
+    ['campaigns', campaignsPage({ campaigns: overview, sheets: [dependency], filter: 'all' })],
+    ['campaigns filtered',
+      campaignsPage({ campaigns: overview, sheets: [], filter: 'completed' })],
+    ['campaign sequential',
+      campaignPage({ sheet: sequential, progression: null, view: 'grid', step: 0 })],
+    ['campaign grid', campaignPage({ sheet: dependency, progression, view: 'grid', step: 0 })],
+    ['campaign graph', campaignPage({ sheet: dependency, progression, view: 'graph', step: 0 })],
+    ['campaign replay', campaignPage({ sheet: dependency, progression, view: 'replay', step: 3 })],
+    ['plans', plansPage({ plans, canStart: false, form: runForm })],
+    ['plans form', plansPage({ plans, canStart: true, form: runForm })],
+    ['topbar plans', topbar({ page: 'plans', key: '', canStart: true, resumable: false, error: '' })],
+    ['topbar resume', topbar({ page: 'campaign', key: 'progression-run', canStart: true,
+      resumable: true, error: 'Only an interrupted campaign that is ready can resume.' })],
+    ['attempt', attemptPage({ sheet: sequential, attemptId: attempt.id, tab: 'checks',
+      checks: attemptChecks(resultsRoot, 'fixture-run-0', attempt.id),
+      evidence: attemptPackage(resultsRoot, 'fixture-run-0', attempt.id), log: '' })],
+    ['attempt screenshots', attemptPage({ sheet: sequential, attemptId: attempt.id,
+      tab: 'screenshots', checks: null, evidence: screenshotEvidence, log: '' })],
+  ];
+
+  for (const [name, html] of pages) {
+    lintPage(name, html);
+    // Fixed stack order everywhere, and never a colour to tell them apart.
+    const stacks = stackOrder(html);
+    for (let index = 0; index + 2 < stacks.length; index += 3) {
+      assert.deepEqual(stacks.slice(index, index + 3),
+        ['SpacetimeDB', 'PostgreSQL', 'MongoDB'], `${name} reorders the stacks`);
+    }
+    // One value per sheet cell: a number, or a number over the total it is out of.
+    for (const cell of html.match(/<div class="v">.*?<\/div>/g) ?? []) {
+      const text = cell.replace(/<[^>]*>/g, ' ').trim();
+      assert.match(text, /^\S+(?: \/ \S+)?$/, `${name} packs "${text}" into one cell`);
+    }
+    if (name.startsWith('campaigns')) continue;
+    assert.deepEqual(statusCells(html), [], `${name} shows a status word outside the table`);
+  }
+  const campaigns = pages[0]![1];
+  assert.ok(statusCells(campaigns).length > 0);
+  const screenshots = pages.find(([name]) => name === 'attempt screenshots')?.[1] ?? '';
+  assert.match(screenshots, /<button type="button" data-shot="[^"]+"/);
+  assert.match(screenshots, /<dialog class="lightbox">/);
+  for (const path of statusCells(campaigns)) {
+    assert.match(path, /state/, 'a status word sits outside the Status column');
+  }
+  // Read-only host mode has the table and no form; only a frozen plan is offered.
+  const readOnly = plansPage({ plans, canStart: false, form: runForm });
+  const startable = plansPage({ plans, canStart: true, form: runForm });
+  assert.equal(/<form/.test(readOnly), false);
+  assert.deepEqual([...startable.matchAll(/<option value="([^"]*)"/g)].map(match => match[1]),
+    plans.filter(plan => plan.state === 'frozen').map(plan => plan.id));
+  assert.match(startable, /name="secret" type="password"/);
+  // An unreadable plan is a row whose state is invalid and whose error is a hover.
+  const invalid = /<span class="state \w+" title="([^"]+)">invalid</.exec(readOnly);
+  assert.ok(invalid?.[1] && invalid[1] !== 'invalid');
+  assert.equal(topbar({ page: 'campaigns', key: '', canStart: false, resumable: false, error: '' })
+    .includes('Start a run'), false);
+});
diff --git a/tools/stack-bench/tests/database-containers.test.ts b/tools/stack-bench/tests/database-containers.test.ts
new file mode 100644
index 00000000000..b4c9dd83494
--- /dev/null
+++ b/tools/stack-bench/tests/database-containers.test.ts
@@ -0,0 +1,25 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { databaseContainer, databaseContainerName } from '../src/stacks/database-containers.js';
+
+test('database container defaults isolate development from appliance services', () => {
+  assert.equal(databaseContainerName('postgres', {}), 'stack-bench-dev-postgres');
+  assert.equal(databaseContainerName('mongodb', {}), 'stack-bench-dev-mongodb');
+  assert.equal(databaseContainerName('postgres', { STACK_BENCH_APPLIANCE: '1' }),
+    'stack-bench-postgres');
+  assert.equal(databaseContainerName('mongodb', { STACK_BENCH_APPLIANCE: '1' }),
+    'stack-bench-mongodb');
+});
+
+test('explicit database container names override topology defaults', () => {
+  assert.equal(databaseContainerName('postgres', { POSTGRES_CONTAINER: 'custom-pg' }), 'custom-pg');
+  assert.equal(databaseContainerName('mongodb', { MONGO_CONTAINER: 'custom-mongo' }), 'custom-mongo');
+});
+
+test('database container metadata owns the service port', () => {
+  assert.deepEqual(databaseContainer('postgres', {}),
+    { name: 'stack-bench-dev-postgres', internalPort: 5432 });
+  assert.deepEqual(databaseContainer('mongodb', {}),
+    { name: 'stack-bench-dev-mongodb', internalPort: 27017 });
+});
diff --git a/tools/stack-bench/tests/definition-compiler.test.ts b/tools/stack-bench/tests/definition-compiler.test.ts
new file mode 100644
index 00000000000..108899adb96
--- /dev/null
+++ b/tools/stack-bench/tests/definition-compiler.test.ts
@@ -0,0 +1,261 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import {
+  ACTION_IDS,
+  DEFINITION_SCHEMA_VERSION,
+  compileScenarioDefinition,
+  compileTrackManifest,
+  type CompiledStep,
+} from '../src/composition/definition-compiler.js';
+import { ACTION_IMPLEMENTATIONS, ACTION_REGISTRY } from '../src/actions/action-catalog.js';
+import { TRACKS_DIR } from '../src/composition/tracks.js';
+
+interface CurrentDefinition {
+  kind: 'scenario' | 'track';
+  source: string;
+  value: unknown;
+}
+
+function currentDefinitions(): CurrentDefinition[] {
+  const definitions: CurrentDefinition[] = [];
+  for (const track of readdirSync(TRACKS_DIR)) {
+    const root = join(TRACKS_DIR, track);
+    let manifest: unknown;
+    try { manifest = JSON.parse(readFileSync(join(root, 'track.json'), 'utf8')); }
+    catch { continue; }
+    definitions.push({ kind: 'track', source: join(root, 'track.json'), value: manifest });
+    const scenarios = join(root, 'scenarios');
+    for (const file of readdirSync(scenarios).filter(name => name.endsWith('.json'))) {
+      definitions.push({ kind: 'scenario', source: join(scenarios, file),
+        value: JSON.parse(readFileSync(join(scenarios, file), 'utf8')) });
+    }
+  }
+  return definitions;
+}
+
+test('all current definitions compile deterministically without source mutation', () => {
+  const definitions = currentDefinitions();
+  assert(definitions.length > 10);
+  for (const definition of definitions) {
+    const original = structuredClone(definition.value);
+    const first = definition.kind === 'track'
+      ? compileTrackManifest(definition.value, { source: definition.source })
+      : compileScenarioDefinition(definition.value, { source: definition.source });
+    const second = definition.kind === 'track'
+      ? compileTrackManifest(definition.value, { source: definition.source })
+      : compileScenarioDefinition(definition.value, { source: definition.source });
+    assert.equal(first.schemaVersion, DEFINITION_SCHEMA_VERSION);
+    assert.deepEqual(first, second);
+    assert.deepEqual(definition.value, original, 'compiler must not mutate source');
+  }
+});
+
+test('authored waits and observation windows fit inside their action deadlines', () => {
+  const visit = (step: CompiledStep, source: string): void => {
+    const action = ACTION_REGISTRY.get(step.do);
+    assert(action, `${source}: ${step.do} must be registered`);
+    const deadline = action.timeoutMs;
+    if (step.do === 'wait') {
+      assert(typeof step.ms === 'number', `${source}: wait must have a duration`);
+      assert(deadline > step.ms, `${source}: ${step.do} ${step.ms}ms exceeds its deadline`);
+    }
+    if (step.within !== undefined) {
+      assert(typeof step.within === 'number', `${source}: within must be a number`);
+      assert(deadline > step.within, `${source}: ${step.do} ${step.within}ms exceeds its deadline`);
+    }
+    if (step.do === 'race') {
+      assert(Array.isArray(step.branches), `${source}: race must have branches`);
+      for (const branch of step.branches) {
+        assert(Array.isArray(branch), `${source}: each race branch must be an array`);
+        for (const child of branch) {
+          assert(isRecord(child) && typeof child.do === 'string', `${source}: race step must be valid`);
+          visit(child, source);
+        }
+      }
+    }
+  };
+  for (const definition of currentDefinitions().filter(item => item.kind === 'scenario')) {
+    const compiled = compileScenarioDefinition(definition.value, { source: definition.source });
+    for (const feature of compiled.features) {
+      [...feature.setup, ...feature.criteria.flatMap(criterion => criterion.steps)]
+        .forEach(step => visit(step, definition.source));
+    }
+  }
+});
+
+test('definitions require schema v1 and explicit suite inheritance', () => {
+  const manifest = { title: 'Example', validatedThrough: 1, plannedThrough: 1,
+    portOffset: 500, restartProbe: '/ready', suites: { 1: [
+      { id: 'features', spec: 'scenarios/01-features.json' },
+  ] } };
+  assert.throws(() => compileTrackManifest(manifest), /schemaVersion: unsupported version undefined/);
+  assert.throws(() => compileTrackManifest({ ...manifest, schemaVersion: 1 }),
+    /inherit: must be none or all-higher-levels/);
+  const { schemaVersion: _, ...missingScenarioVersion } = scenario() as Record<string, unknown>;
+  assert.throws(() => compileScenarioDefinition(missingScenarioVersion, { source: 'scenario.json' }),
+    /schemaVersion: unsupported version undefined/);
+});
+
+test('the action implementation registry covers every action exactly once', () => {
+  assert.deepEqual(Object.keys(ACTION_IMPLEMENTATIONS).sort(), ACTION_IDS);
+});
+
+function scenario(step: unknown = { do: 'wait', actor: 'a', ms: 1 }): unknown {
+  return { schemaVersion: 1, level: 1, features: [{ id: 1, name: 'feature', actors: ['a'], setup: [],
+    criteria: [{ id: '1a', desc: 'criterion', steps: [step] }] }] };
+}
+
+test('unknown actions and action fields fail before runtime', () => {
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'notReal', actor: 'a' })),
+    /unknown action "notReal"/);
+  assert.throws(() => compileScenarioDefinition(scenario(
+    { do: 'wait', actor: 'a', ms: 1, miliseconds: 1 })), /miliseconds: unknown field/);
+});
+
+test('required action fields and nested race steps are validated', () => {
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'wait', actor: 'a' })),
+    /\.ms: is required/);
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'race', settleMs: 1,
+    branches: [[{ do: 'wait', actor: 'a', ms: 1 }], [{ do: 'wat', actor: 'a', ms: 1 }]] })),
+  /branches\[1\]\[0\]\.do: unknown action "wat"/);
+});
+
+test('extracted action inputs expose their runtime options without allowing script escapes', () => {
+  const compiled = compileScenarioDefinition(scenario({ do: 'forgeWrite', actor: 'a',
+    fromActor: 'victim', settleMs: 1, field: 'room', value: 7, text: 'probe' }));
+  const feature = compiled.features[0];
+  assert(feature, 'the fixture must compile one feature');
+  const criterion = feature.criteria[0];
+  assert(criterion, 'the fixture must compile one criterion');
+  const step = criterion.steps[0];
+  assert(step, 'the fixture must compile one step');
+  assert.equal(step.value, 7);
+  assert.equal(criterion.points, 1,
+    'the compiler must materialize the default before scoring');
+  assert.doesNotThrow(() => compileScenarioDefinition(scenario({ do: 'callConcurrently',
+    actors: ['a', 'b'], action: 'checkout', settleMs: 1, args: [], body: {} })));
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'callConcurrently',
+    actors: ['a', 'a'], action: 'checkout', settleMs: 1 })), /at least two distinct actors/);
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'clickConcurrently',
+    actors: ['a', 'a'], testid: 'checkout', settleMs: 1 })), /at least two distinct actors/);
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'replayConcurrently',
+    actors: ['a', 'a'], settleMs: 1 })), /at least two distinct actors/);
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'sendConcurrently',
+    senders: [{ actor: 'a', prefix: 'one', count: 1 },
+      { actor: 'a', prefix: 'two', count: 1 }], delayMs: 1 })),
+  /at least two distinct actors/);
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'expectAgreement',
+    actors: ['a'], testid: 'total' })), /at least two distinct actors/);
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'wait', actor: 'a', ms: -1 })),
+    /wrong type or value/);
+  assert.doesNotThrow(() => compileScenarioDefinition(scenario({ do: 'expectNotReceived',
+    actor: 'a', contains: 'secret', within: 1000 })));
+  assert.doesNotThrow(() => compileScenarioDefinition(scenario({ do: 'signUp', actor: 'a',
+    name: 'seeded', exact: true })));
+  assert.doesNotThrow(() => compileScenarioDefinition(scenario({ do: 'callAction', actor: 'a',
+    action: 'buy', input: { testid: 'item-card', contains: 'Desk Lamp',
+      attribute: 'data-buy-input' }, authentication: 'none' })));
+  assert.doesNotThrow(() => compileScenarioDefinition(scenario({ do: 'expectActionOutcome',
+    actor: 'a', outcome: 'refused', routeProvenBy: 'owner' })));
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'callAction', actor: 'a',
+    action: 'buy', input: { testid: 'item-card', attribute: 'data-buy-input' },
+    authentication: 'guest' })), /authentication: must be "actor" or "none"/);
+  const namedReplay = { do: 'replayAs', actor: 'a', from: 'staff', match: 'ship',
+    namedAction: { id: 'ship', path: '/api/fulfilment/ship', reducer: 'ship_order', args: [0],
+      params: [{ name: 'orderId', in: 'body', wireType: 'u64' }] },
+    namedTarget: { testid: 'order-item', contains: 'Webcam',
+      attribute: 'data-entity-id', valueType: 'number' } };
+  assert.doesNotThrow(() => compileScenarioDefinition(scenario(namedReplay)));
+  const { namedTarget: _target, ...literalNamedReplay } = namedReplay;
+  assert.doesNotThrow(() => compileScenarioDefinition(scenario(literalNamedReplay)));
+  assert.doesNotThrow(() => compileScenarioDefinition(scenario({ ...namedReplay,
+    namedAction: { ...namedReplay.namedAction, method: 'PATCH' } })));
+  assert.throws(() => compileScenarioDefinition(scenario({ ...namedReplay,
+    namedAction: { ...namedReplay.namedAction, method: 'GET' } })),
+  /method: must be "DELETE", "PATCH", "POST", or "PUT"/);
+  const { namedAction: _omitted, ...missingNamedAction } = namedReplay;
+  assert.throws(() => compileScenarioDefinition(scenario(missingNamedAction)),
+    /namedTarget requires namedAction/);
+  assert.throws(() => compileScenarioDefinition(scenario({ ...namedReplay,
+    namedTarget: { ...namedReplay.namedTarget, valueType: 'bigint' } })),
+  /valueType: must be "number" or "string"/);
+  assert.throws(() => compileScenarioDefinition(scenario({ ...namedReplay,
+    namedAction: { ...namedReplay.namedAction,
+      params: [{ name: 'orderId', in: 'body', wireType: 'f64' }] } })),
+  /wireType: must be "u64"/);
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'runScript',
+    script: '../outside.mjs', args: [] })), /\.script: has the wrong type or value/);
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'runScript',
+    script: 'C:\\outside.mjs', args: [] })), /\.script: has the wrong type or value/);
+  assert.throws(() => compileScenarioDefinition(scenario({ do: 'runScript',
+    script: 'inside.mjs', args: [], timeoutMs: 90_000 })),
+  /\.timeoutMs: has the wrong type or value/);
+});
+
+test('declared scenario level is authoritative and can be checked explicitly', () => {
+  assert.throws(() => compileScenarioDefinition(scenario(), { expectedLevel: 2 }),
+    /declares L1, expected L2/);
+});
+
+test('only explicitly withheld zero-point criteria may omit executable steps', () => {
+  const withheld = { schemaVersion: 1, level: 1,
+    features: [{ id: 1, name: 'feature', actors: ['a'], setup: [],
+    criteria: [{ id: '1a', desc: 'future oracle', points: 0,
+      withheld: 'awaiting calibration', steps: [] }] }] };
+  assert.doesNotThrow(() => compileScenarioDefinition(withheld));
+  const missingReason = { schemaVersion: 1, level: 1,
+    features: [{ id: 1, name: 'feature', actors: ['a'], setup: [],
+    criteria: [{ id: '1a', desc: 'future oracle', points: 0, steps: [] }] }] };
+  assert.throws(() => compileScenarioDefinition(missingReason), /may be empty only/);
+});
+
+test('track manifests reject unknown fields and malformed named actions', () => {
+  const base = { schemaVersion: 1, title: 'Example', slug: 'example', validatedThrough: 1, plannedThrough: 1,
+    portOffset: 500, restartProbe: '/ready', suites: { 1: [{ id: 'features',
+      inherit: 'none', spec: 'scenarios/01.json' }] } };
+  assert.throws(() => compileTrackManifest({ ...base, unknowable: true }),
+    /unknowable: unknown field/);
+  assert.throws(() => compileTrackManifest({ ...base, actions: [{ id: 'buy', path: 'api/buy',
+    reducer: 'buy', args: [] }] }), /path: must be an absolute HTTP path/);
+  assert.throws(() => compileTrackManifest({ ...base, actions: [{ id: 'buy', path: '/api/buy',
+    reducer: 'buy', args: [0], params: [{ name: 'itemId', in: 'path', placeholder: ':id' }] }] }),
+  /placeholder: does not appear in path/);
+  const signUp = { id: 'signUp', path: '/api/auth/signup', reducer: 'sign_up', args: ['', ''] };
+  const provenance = { action: 'signUp', markerParameter: 'username',
+    body: { username: '', password: 'password' } };
+  assert.throws(() => compileTrackManifest({ ...base,
+    databaseProvenance: { ...provenance, action: 'missing' }, actions: [signUp] }),
+  /action: must name one declared action/);
+  assert.throws(() => compileTrackManifest({ ...base,
+    databaseProvenance: { ...provenance, markerParameter: 'missing' }, actions: [signUp] }),
+  /markerParameter: must name one field/);
+  assert.doesNotThrow(() => compileTrackManifest({ ...base,
+    databaseProvenance: provenance, actions: [signUp] }));
+  assert.doesNotThrow(() => compileTrackManifest({ ...base, reseedOnReset: true }));
+});
+
+test('the live grader rejects malformed definitions before launching a browser', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-definition-preflight-'));
+  const spec = join(root, 'invalid.json');
+  try {
+    writeFileSync(spec, JSON.stringify(scenario(
+      { do: 'wait', actor: 'a', ms: 1, miliseconds: 1 })));
+    assert.throws(() => execFileSync(process.execPath,
+      [join(TRACKS_DIR, '..', 'dist', 'grader', 'grade.js'), '--url', 'http://127.0.0.1:1',
+        '--level', '1', '--spec', spec], { encoding: 'utf8', stdio: 'pipe', timeout: 10_000 }),
+    error => {
+      assert(isRecord(error), 'the grader must return a process error');
+      assert.match(`${String(error.stdout ?? '')}${String(error.stderr ?? '')}`,
+        /miliseconds: unknown field/);
+      return true;
+    });
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
diff --git a/tools/stack-bench/tests/definition-snapshots.contract.ts b/tools/stack-bench/tests/definition-snapshots.contract.ts
new file mode 100644
index 00000000000..e108a71c6ec
--- /dev/null
+++ b/tools/stack-bench/tests/definition-snapshots.contract.ts
@@ -0,0 +1,31 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { checkDefinitionSnapshots } from '../commands/definition-snapshots.js';
+import { ACTION_IDS, compileScenarioDefinition } from '../src/composition/definition-compiler.js';
+import { canonicalDefinitionJson } from '../src/composition/definition-plan.js';
+import { TRACKS_DIR } from '../src/composition/tracks.js';
+
+test('committed normalized definition plans have no semantic drift', () => {
+  assert.deepEqual(checkDefinitionSnapshots(), { checked: 4, changed: [] });
+});
+
+test('the action fixture represents every registered action', () => {
+  const path = join(TRACKS_DIR, '..', 'tests', 'fixtures', 'definitions', 'all-actions.json');
+  const compiled = compileScenarioDefinition(JSON.parse(readFileSync(path, 'utf8')), { source: path });
+  const represented = compiled.features[0]?.criteria[0]?.steps.map(step => step.do).sort();
+  assert.deepEqual(represented, ACTION_IDS);
+});
+
+test('canonical definition JSON ignores object-key order but preserves execution order', () => {
+  assert.equal(
+    canonicalDefinitionJson({ b: 2, a: { d: 4, c: 3 } }),
+    canonicalDefinitionJson({ a: { c: 3, d: 4 }, b: 2 }),
+  );
+  assert.notEqual(
+    canonicalDefinitionJson({ steps: ['first', 'second'] }),
+    canonicalDefinitionJson({ steps: ['second', 'first'] }),
+  );
+});
diff --git a/tools/stack-bench/tests/dependency-campaign-live.integration.ts b/tools/stack-bench/tests/dependency-campaign-live.integration.ts
new file mode 100644
index 00000000000..4304bac1c9b
--- /dev/null
+++ b/tools/stack-bench/tests/dependency-campaign-live.integration.ts
@@ -0,0 +1,292 @@
+import assert from 'node:assert/strict';
+import { existsSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { spawnSync } from 'node:child_process';
+import test from 'node:test';
+
+import { compileCampaignFile } from '../src/campaigns/campaign-compiler.js';
+import { campaignUsesNoExternalResources, runCampaignAdmission }
+  from '../src/campaigns/campaign-admission.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { readCampaignState } from '../src/campaigns/campaign-scheduler.js';
+import { readArtifact } from '../src/evidence/artifacts.js';
+import type { BenchmarkRunRecord, GradeBundlePayload }
+  from '../src/evidence/benchmark-run.js';
+import { validateProgressionCampaignLevelScope }
+  from '../src/progression/progression-recipe-selection.js';
+import { replayDependencyMode } from '../src/progression/dependency-mode.js';
+import { dependencyRuntimeDefinition } from '../src/progression/progression-definition.js';
+import type { ProgressionStatePayload } from '../src/progression/progression-state.js';
+import { STACK_BENCH_ROOT, compiledEntrypoint } from '../src/package-root.js';
+
+const CAMPAIGN = join(STACK_BENCH_ROOT, 'tests', 'fixtures',
+  'dependency-model-free-campaign.json');
+const CLI = compiledEntrypoint('commands', 'campaign-cli.js');
+
+test('dependency campaign scope must match the graph-derived scope', () => {
+  const plan = compileCampaignFile(CAMPAIGN);
+  const declared = plan.conditions[0].requested.levels[0];
+  assert(declared);
+  assert(plan.featureCatalog);
+  const featureCatalog = plan.featureCatalog;
+  const binding = resolveRecipeRelease(loadTrack(plan.definition.track), 1,
+    `${declared.recipe.id}@${declared.recipe.version}`);
+  assert.doesNotThrow(() => validateProgressionCampaignLevelScope(binding,
+    featureCatalog, declared, 1));
+  const tampered = structuredClone(declared);
+  tampered.selection.sha256 = '0'.repeat(64);
+  assert.throws(() => validateProgressionCampaignLevelScope(binding,
+    featureCatalog, tampered, 1), /graph-derived scope changed/);
+});
+
+test('real stack campaigns retain full preflight admission', () => {
+  const output = mkdtempSync(join(tmpdir(), 'stack-bench-standard-admission-'));
+  try {
+    const plan = compileCampaignFile(join(STACK_BENCH_ROOT, 'appliance',
+      'campaign.example.json'));
+    assert.equal(campaignUsesNoExternalResources(plan), false);
+    let calls = 0;
+    const admission = runCampaignAdmission(plan, output, {
+      preflight: request => {
+        calls += 1;
+        return {
+          schemaVersion: 1,
+          generatedAt: new Date(0).toISOString(),
+          request: {
+            backends: request.backends,
+            track: request.track,
+            levels: request.levelList,
+            runIndex: request.runIndex,
+            parallelism: request.parallelism,
+            agentAdapter: request.agentAdapter,
+            guidance: request.guidance,
+            packs: request.packIds,
+            checks: request.checkKeys,
+            recipe: request.recipe ?? null,
+            requestedScopeCount: request.requestedScopes?.length ?? 0,
+            image: request.image,
+            resultsDir: request.resultsDir,
+            agentSkills: request.agentSkills ?? null,
+            smoke: request.smoke,
+          },
+          ok: true,
+          summary: { passed: 1, failed: 0, warnings: 0 },
+          checks: [{ id: 'full-preflight', status: 'pass', summary: 'Full preflight ran' }],
+        };
+      },
+    });
+    assert.equal(calls, plan.summary.parallelism);
+    assert.equal(admission.payload.ok, true);
+    assert(admission.payload.reports.every(report => report.request.guidance === 'prescribed'));
+    assert(admission.payload.reports.every(report =>
+      JSON.stringify(report.request.agentSkills) === JSON.stringify([
+        'typescript-client', 'typescript-server',
+      ])));
+    assert(admission.payload.reports.every(report => report.request.smoke === true));
+    assert(admission.payload.reports.every(report =>
+      report.request.backends.some(backend => backend !== 'stub')));
+  } finally {
+    rmSync(output, { recursive: true, force: true });
+  }
+});
+
+test('a real model-free campaign persists dependency repairs and evidence', { timeout: 300_000 }, () => {
+  const output = mkdtempSync(join(tmpdir(), 'stack-bench-dependency-live-'));
+  try {
+    const result = spawnSync(process.execPath, [CLI, 'trial', CAMPAIGN, '--out', output], {
+      cwd: STACK_BENCH_ROOT,
+      encoding: 'utf8',
+      timeout: 240_000,
+      maxBuffer: 32 * 1024 * 1024,
+    });
+    assert.equal(result.error, undefined, result.error?.message);
+    assert.equal(result.status, 0, `${result.stdout}\n${result.stderr}`);
+    assert.equal(result.stdout.match(/^=== stub-l1/mg)?.length, 3);
+
+    const { plan, state } = readCampaignState(output);
+    assert.equal(state.status, 'completed');
+    assert.equal(state.summary.completed, 1);
+    assert.equal(state.summary.invalid, 0);
+    assert.equal(state.attempts.length, 1);
+    const campaignAttempt = state.attempts[0];
+    assert(campaignAttempt);
+    assert.equal(campaignAttempt.plan.mode.id, 'dependency');
+    assert.equal(campaignAttempt.plan.stack, 'stub');
+    assert.equal(campaignAttempt.plan.agentAdapter, 'deterministic');
+    assert.equal(campaignAttempt.plan.model, 'deterministic-stall');
+    assert.equal(campaignAttempt.executions.length, 1);
+    const execution = campaignAttempt.executions[0];
+    assert(execution);
+    assert.equal(execution.outcome, 'app_failure');
+
+    const executionDirectory = join(output, execution.output);
+    const run = readArtifact<BenchmarkRunRecord>(join(executionDirectory, 'run.json'), {
+      expectedKind: 'benchmark_run',
+    });
+    assert.equal(run.attempt.parentId, campaignAttempt.plan.id);
+    assert(plan.featureCatalog);
+    assert(plan.dependencyPolicy);
+    assert.deepEqual(run.payload.featureCatalog, plan.featureCatalog.identity);
+    assert.deepEqual(run.payload.dependencyPolicy, plan.dependencyPolicy.identity);
+    assert(run.payload.progressionStatus);
+    assert.equal(run.payload.progressionStatus.phase, 'terminal');
+    assert.equal(run.payload.progressionStatus.attempts, 3);
+    assert.equal(run.payload.levels.length, 1);
+    const level = run.payload.levels[0];
+    assert(level);
+    assert.equal(level.repairs, 2);
+    assert(run.payload.outcome);
+    assert.equal(run.payload.outcome.kind, 'app_failure');
+
+    const progression = readArtifact<ProgressionStatePayload>(
+      join(executionDirectory, 'progression-state.json'), {
+      expectedKind: 'progression_state',
+      });
+    assert.equal(progression.attempt.id, campaignAttempt.plan.id);
+    assert(progression.identities.experiment);
+    assert.equal(progression.identities.experiment.sha256, plan.contentSha256);
+    assert.equal(progression.payload.events.length, 3);
+    assert.deepEqual(progression.payload.events.map(event => event.type), [
+      'attempt-recorded',
+      'attempt-recorded',
+      'attempt-recorded',
+    ]);
+    const runtimeDefinition = dependencyRuntimeDefinition(
+      plan.featureCatalog, plan.dependencyPolicy);
+    const replayed = replayDependencyMode(runtimeDefinition,
+      progression.payload.events);
+    assert.equal(replayed.phase, 'terminal');
+    assert.equal(replayed.attempts.length, 3);
+    const accounts = replayed.nodes.accounts;
+    assert(accounts);
+    assert.equal(accounts.repairs.used, 1);
+    assert.equal(accounts.exhaustionReason, 'feature-repairs-exhausted');
+    const catalog = replayed.nodes.catalog;
+    assert(catalog);
+    assert.equal(catalog.repairs.used, 1);
+    assert.equal(catalog.exhaustionReason, 'feature-repairs-exhausted');
+    assert.deepEqual(replayed.attempts.map(attempt => attempt.attemptId),
+      Array.from({ length: 3 }, (_, index) => `${run.id}-progression-${index + 1}`));
+    assert(replayed.attempts.every(attempt => attempt.evidence?.kind === 'grade_bundle'));
+    assert(replayed.attempts.every(attempt => attempt.evidence !== undefined
+      && /^[a-f0-9]{64}$/.test(attempt.evidence.sha256)));
+    const duplicate = structuredClone(progression.payload.events);
+    const firstEvent = duplicate[0];
+    const secondEvent = duplicate[1];
+    assert(firstEvent?.result);
+    assert(secondEvent?.result);
+    secondEvent.result.attemptId = firstEvent.result.attemptId;
+    assert.throws(() => replayDependencyMode(runtimeDefinition, duplicate),
+      /owned progression sequence|duplicate attempt id/);
+
+    const expectedChecks = [
+      [
+        'ecommerce.feature.accounts.accounts.1a',
+        'ecommerce.feature.catalog.catalog.2a',
+      ],
+      ['ecommerce.feature.accounts.accounts.1a'],
+      ['ecommerce.feature.catalog.catalog.2a'],
+    ];
+    for (let sequence = 1; sequence <= 3; sequence += 1) {
+      const attempt = String(sequence).padStart(3, '0');
+      const bundlePath = join(executionDirectory, 'progression', `attempt-${attempt}`, 'bundle.json');
+      assert(existsSync(bundlePath), `missing progression evidence ${bundlePath}`);
+      const bundle = readArtifact<GradeBundlePayload>(bundlePath, {
+        expectedKind: 'grade_bundle',
+      });
+      assert.equal(bundle.attempt.parentId, run.id);
+      assert(bundle.payload.selection);
+      assert(bundle.payload.selection.checks);
+      assert.deepEqual(bundle.payload.selection.checks.map(check => check.stableKey),
+        expectedChecks[sequence - 1]);
+    }
+    assert(existsSync(join(executionDirectory, 'level-l1-checkpoint.json')));
+  } finally {
+    rmSync(output, { recursive: true, force: true });
+  }
+});
+
+test('a shuffled repair order runs in the frozen order the plan drew', { timeout: 300_000 }, () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-shuffled-live-'));
+  try {
+    const campaign = JSON.parse(readFileSync(CAMPAIGN, 'utf8')) as {
+      repair: { order?: string };
+      ordering: { seed: string };
+    };
+    campaign.repair.order = 'shuffled';
+    // This seed draws the catalog roots in reverse, so the run proves the
+    // permutation reaches the runtime rather than repeating declared order.
+    campaign.ordering.seed = 'internal-shuffled-proof-3';
+    const campaignPath = join(root, 'campaign.json');
+    const output = join(root, 'results');
+    writeFileSync(campaignPath, `${JSON.stringify(campaign, null, 2)}\n`);
+    const result = spawnSync(process.execPath, [CLI, 'trial', campaignPath, '--out', output], {
+      cwd: STACK_BENCH_ROOT,
+      encoding: 'utf8',
+      timeout: 240_000,
+      maxBuffer: 32 * 1024 * 1024,
+    });
+    assert.equal(result.error, undefined, result.error?.message);
+    assert.equal(result.status, 0, `${result.stdout}\n${result.stderr}`);
+    const { plan, state } = readCampaignState(output);
+    assert(plan.featureCatalog && plan.dependencyPolicy);
+    assert.equal(plan.dependencyPolicy.definition.repair.order, 'shuffled');
+    assert.deepEqual(plan.dependencyPolicy.definition.nodeOrder, ['catalog', 'accounts']);
+    const runtimeDefinition = dependencyRuntimeDefinition(plan.featureCatalog, plan.dependencyPolicy);
+    assert.deepEqual(runtimeDefinition.nodes.map(node => node.id), ['catalog', 'accounts']);
+    const execution = state.attempts[0]?.executions[0];
+    assert(execution);
+    assert.equal(execution.outcome, 'app_failure');
+    const progression = readArtifact<ProgressionStatePayload>(
+      join(output, execution.output, 'progression-state.json'), { expectedKind: 'progression_state' });
+    const replayed = replayDependencyMode(runtimeDefinition, progression.payload.events);
+    assert.equal(replayed.phase, 'terminal');
+    // Catalog fails first, so it is the first feature repaired.
+    assert.deepEqual(replayed.attempts.filter(attempt => attempt.repair)
+      .map(attempt => attempt.repair?.nodeIds), [['catalog'], ['accounts']]);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('feature work runs same-depth features and writes one depth record', { timeout: 300_000 }, () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-feature-live-'));
+  try {
+    const campaign = JSON.parse(readFileSync(CAMPAIGN, 'utf8')) as {
+      mode: { workSelection: string };
+    };
+    campaign.mode.workSelection = 'feature';
+    const campaignPath = join(root, 'campaign.json');
+    const output = join(root, 'results');
+    writeFileSync(campaignPath, `${JSON.stringify(campaign, null, 2)}\n`);
+    const result = spawnSync(process.execPath, [CLI, 'trial', campaignPath, '--out', output], {
+      cwd: STACK_BENCH_ROOT,
+      encoding: 'utf8',
+      timeout: 240_000,
+      maxBuffer: 32 * 1024 * 1024,
+    });
+    assert.equal(result.error, undefined, result.error?.message);
+    assert.equal(result.status, 0, `${result.stdout}\n${result.stderr}`);
+    const { state } = readCampaignState(output);
+    const execution = state.attempts[0]?.executions[0];
+    assert(execution);
+    const run = readArtifact<BenchmarkRunRecord>(join(output, execution.output, 'run.json'), {
+      expectedKind: 'benchmark_run',
+    });
+    assert.equal(run.payload.levels.length, 1);
+    assert.equal(run.payload.levels[0]?.firstBuild, undefined);
+    assert.equal(run.payload.levels[0]?.buildSessions?.length, 2);
+    assert.equal(run.payload.levels[0]?.repairSessions?.length, 2);
+    assert.equal(run.payload.levels[0]?.repairs, 2);
+    assert.equal(run.payload.progressionStatus?.attempts, 4);
+    assert(existsSync(join(output, execution.output,
+      'candidate-grades', 'l1-action001')));
+    assert(existsSync(join(output, execution.output,
+      'candidate-grades', 'l1-action003')));
+    assert(existsSync(join(output, execution.output, 'level-l1-checkpoint.json')));
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/dependency-mode.test.ts b/tools/stack-bench/tests/dependency-mode.test.ts
new file mode 100644
index 00000000000..fd175ccddb7
--- /dev/null
+++ b/tools/stack-bench/tests/dependency-mode.test.ts
@@ -0,0 +1,647 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { type ConclusiveResult, type DependencyGradingSelection,
+  type DependencyPromptSelection } from '../src/progression/dependency-mode.js';
+import { compileDependencyMode } from '../src/progression/dependency-definition.js';
+import type { DependencyScore } from '../src/progression/dependency-score.js';
+import { compileDependencyPolicyInput, compileFeatureCatalogInput }
+  from '../src/progression/progression-definition.js';
+import { createProgressionEngine, progressionEngine, type ProgressionWorkAction }
+  from '../src/progression/progression-engine.js';
+import type { ProgressionState } from '../src/progression/progression-state.js';
+import type { RepairPlanInput } from '../src/progression/repair-plan.js';
+
+type Outcome = 'pass' | 'fail' | 'not-run';
+type Outcomes = Record<string, Outcome | Record<string, Outcome>>;
+
+interface FixtureNode {
+  id: string;
+  title: string;
+  questline: string;
+  dependencies: Array<{ id: string; reason: string }>;
+  featureRefs: string[];
+  promptModules: string[];
+  gradingChecks: Array<{ id: string; points: number; role: 'feature' | 'guarantee' }>;
+}
+
+interface FixtureDefinition {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  policy: string;
+  repair: RepairPlanInput;
+  unchangedFailureLimit: number;
+  workSelection: 'feature' | 'progressive' | 'all-at-once';
+  nodes: FixtureNode[];
+  questlines: Array<{ id: string; title: string }>;
+}
+
+const node = (id: string, dependencies: string[], questline: string,
+  points: number[] = [1]): FixtureNode => ({
+  id, title: id, questline,
+  dependencies: dependencies.map(parent => ({ id: parent, reason: `${id} requires ${parent}` })),
+  featureRefs: [`features.${id}@1.0.0`],
+  promptModules: [`prompt.${id}@1.0.0`],
+  gradingChecks: points.map((value, index) => ({
+    id: `check.${id}.${index + 1}`, points: value, role: 'feature',
+  })),
+});
+
+const fixture = (): FixtureDefinition => ({
+  schemaVersion: 7,
+  kind: 'progression-mode',
+  id: 'storefront-paths',
+  version: '1.0.0',
+  state: 'draft',
+  title: 'Storefront paths',
+  policy: 'dependency-graph',
+  repair: { selection: 'feature', budget: { total: 4, perFeature: 1 } },
+  unchangedFailureLimit: 3,
+  workSelection: 'progressive',
+  nodes: [
+    node('accounts', [], 'identity', [2, 1]),
+    node('catalog', [], 'discovery'),
+    node('ownership', ['accounts'], 'identity'),
+    node('search', ['catalog'], 'discovery'),
+    node('recovery', ['ownership'], 'identity'),
+    node('recommendations', ['search'], 'discovery'),
+  ],
+  questlines: [
+    { id: 'identity', title: 'Identity' },
+    { id: 'discovery', title: 'Discovery' },
+  ],
+});
+
+const prompt = (state: ProgressionState): DependencyPromptSelection =>
+  progressionEngine.promptSelection(state) as DependencyPromptSelection;
+const grading = (state: ProgressionState): DependencyGradingSelection =>
+  progressionEngine.gradingSelection(state) as DependencyGradingSelection;
+const action = (state: ProgressionState): ProgressionWorkAction => {
+  const next = progressionEngine.nextAction(state);
+  if (next.type === 'terminal') throw new Error('expected active work');
+  return next;
+};
+
+function grade(state: ProgressionState, attemptId: string,
+  outcomes: Outcomes): ConclusiveResult {
+  const selection = grading(state);
+  return {
+    attemptId,
+    outcome: 'conclusive',
+    nodes: selection.nodeIds.map(nodeId => ({
+      id: nodeId,
+      checks: selection.checks.filter(check => check.nodeId === nodeId).map(check => ({
+        id: check.id,
+        outcome: typeof outcomes[nodeId] === 'string'
+          ? outcomes[nodeId] : outcomes[nodeId]?.[check.id] ?? 'pass',
+      })),
+    })),
+  };
+}
+
+function repairedGrade(state: ProgressionState, attemptId: string,
+  outcomes: Outcomes): ConclusiveResult {
+  const current = action(state);
+  if (current.type !== 'repair') throw new Error('expected repair work');
+  return { ...grade(state, attemptId, outcomes), completedRepair: true };
+}
+
+test('the graph compiles by depth, then declared order, and the order is identity', () => {
+  const declared = compileDependencyMode(fixture());
+  assert.deepEqual(declared.nodes.map(item => item.id), [
+    'accounts', 'catalog', 'ownership', 'search', 'recovery', 'recommendations',
+  ]);
+  const input = fixture();
+  input.nodes.reverse();
+  input.questlines.reverse();
+  const compiled = compileDependencyMode(input);
+  assert.deepEqual(compiled.nodes.map(item => item.id), [
+    'catalog', 'accounts', 'search', 'ownership', 'recommendations', 'recovery',
+  ]);
+  assert.deepEqual(compiled.questlines.map(item => item.id), ['discovery', 'identity']);
+  assert.deepEqual(compiled.repair,
+    { selection: 'feature', budget: { total: 4, perFeature: 1 }, order: 'declared' });
+  const { policy: _policy, repair, unchangedFailureLimit: _limit,
+    workSelection: _workSelection, ...catalogDefinition } = compiled;
+  const catalog = compileFeatureCatalogInput({
+    ...catalogDefinition, schemaVersion: 1, kind: 'feature-catalog',
+  });
+  const first = compileDependencyPolicyInput(repair, catalog, { unchangedFailureLimit: 2 });
+  const second = compileDependencyPolicyInput(repair, catalog, { unchangedFailureLimit: 3 });
+  assert.equal(first.definition.version, '4.3.0');
+  assert.notEqual(first.identity.sha256, second.identity.sha256);
+  // Declared order is repair priority, so it is part of the catalog identity
+  // that every campaign binds; reordering the catalog is a new identity.
+  const { policy: _p, repair: _r, unchangedFailureLimit: _l,
+    workSelection: _w, ...declaredCatalog } = declared;
+  const declaredIdentity = compileFeatureCatalogInput({
+    ...declaredCatalog, schemaVersion: 1, kind: 'feature-catalog',
+  }).identity.sha256;
+  assert.notEqual(declaredIdentity, catalog.identity.sha256);
+});
+
+test('invalid graphs and repair plans fail before execution', async t => {
+  const cases: Array<[string, (value: FixtureDefinition) => void, RegExp]> = [
+    ['duplicate node', value => value.nodes.push(structuredClone(value.nodes[0]!)), /duplicates/],
+    ['missing parent', value => { value.nodes[2]!.dependencies[0]!.id = 'missing'; }, /unknown parent/],
+    ['dependency cycle', value => {
+      value.nodes[0]!.dependencies = [{ id: 'ownership', reason: 'cycle' }];
+    }, /dependency cycle/],
+    ['empty budget', value => { value.repair.budget = {}; }, /contain a limit/],
+    ['undefined budget', value => {
+      value.repair.budget = { total: undefined } as unknown as FixtureDefinition['repair']['budget'];
+    }, /contain a limit/],
+    ['negative budget', value => { value.repair.budget.total = -1; }, /non-negative safe integer/],
+    ['bad selection', value => { value.repair.selection = 'other' as 'feature'; }, /feature.*batch/],
+    ['bad order', value => { value.repair.order = 'random' as 'declared'; }, /declared.*shuffled/],
+    ['bad work selection', value => {
+      value.workSelection = 'other' as 'feature';
+    }, /feature.*progressive.*all-at-once/],
+    ['unknown questline', value => { value.nodes[0]!.questline = 'missing'; }, /unknown questline/],
+    ['empty questline', value => { value.questlines.push({ id: 'empty', title: 'Empty' }); },
+      /owns no nodes/],
+    ['bad version', value => { value.version = 'latest'; }, /exact semantic version/],
+    ['no feature check', value => {
+      value.nodes[1]!.gradingChecks[0]!.role = 'guarantee';
+    }, /at least one feature check/],
+    ['check owned twice', value => {
+      value.nodes[1]!.gradingChecks[0]!.id = value.nodes[0]!.gradingChecks[0]!.id;
+    }, /already owned by another node/],
+    ['missing dependency reason', value => {
+      value.nodes[2]!.dependencies[0] = { id: 'accounts' } as { id: string; reason: string };
+    }, /reason/],
+  ];
+  for (const [name, mutate, expected] of cases) {
+    await t.test(name, () => {
+      const value = fixture();
+      mutate(value);
+      assert.throws(() => compileDependencyMode(value), expected);
+    });
+  }
+});
+
+test('the engine dispatches registered policies', () => {
+  const fake = {
+    id: 'fake', compile: (value: Record<string, unknown>) => value,
+    initialize: (value: Record<string, unknown>) => ({ policy: value.policy }),
+    activeNodes: () => ['fake'], promptSelection: () => ({ fake: 'prompt' }),
+    gradingSelection: () => ({ fake: 'grade' }),
+    recordResult: (state: Record<string, unknown>) => state,
+    grantRepairs: (state: Record<string, unknown>) => state,
+    replay: (definition: Record<string, unknown>) => ({ policy: definition.policy }),
+    nextAction: () => ({ type: 'complete' }), score: () => ({ score: 1 }),
+  };
+  const engine = createProgressionEngine([fake]);
+  const state = engine.initialize({ policy: 'fake' });
+  assert.deepEqual(engine.activeNodes(state), ['fake']);
+  assert.throws(() => engine.initialize({ policy: 'missing' }), /unknown progression policy/);
+});
+
+test('an initial failure costs no repair and passed branches continue', () => {
+  let state = progressionEngine.initialize(fixture());
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'fail', catalog: 'pass',
+  }));
+  assert.equal(state.nodes.accounts!.repairs.used, 0);
+  assert.deepEqual(action(state).repair, { nodeIds: ['accounts'], remaining: 1 });
+  state = progressionEngine.recordResult(state, repairedGrade(state, 'repair', {
+    accounts: 'fail', catalog: 'pass', search: 'pass',
+  }));
+  assert.equal(state.nodes.accounts!.repairs.used, 1);
+  assert.equal(state.nodes.accounts!.status, 'failed');
+  assert.equal(state.nodes.accounts!.exhaustionReason, 'feature-repairs-exhausted');
+  assert.equal(state.nodes.ownership!.status, 'blocked');
+  assert.equal(state.nodes.search!.status, 'active');
+  assert.deepEqual(prompt(state).nodeIds, ['search']);
+});
+
+test('zero repair budget stops only the failed branch', () => {
+  const definition = fixture();
+  definition.repair.budget = { total: 0 };
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'fail', catalog: 'pass',
+  }));
+  assert.equal(state.nodes.accounts!.status, 'failed');
+  assert.equal(state.nodes.accounts!.exhaustionReason, 'total-repairs-exhausted');
+  assert.equal(state.nodes.accounts!.repairs.used, 0);
+  assert.deepEqual(prompt(state).nodeIds, ['search']);
+});
+
+test('a run-wide total never allows a fourth repair anywhere in the run', () => {
+  const definition = fixture();
+  definition.repair.budget = { total: 3, perFeature: 5 };
+  definition.unchangedFailureLimit = 10;
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'fail', catalog: 'pass',
+  }));
+  for (const attemptId of ['repair-1', 'repair-2', 'repair-3']) {
+    assert.equal(action(state).type, 'repair');
+    state = progressionEngine.recordResult(state, repairedGrade(state, attemptId, {
+      accounts: 'fail', catalog: 'pass',
+    }));
+  }
+  assert.equal(state.attempts.filter(attempt => attempt.repair).length, 3);
+  assert.equal(state.nodes.accounts!.repairs.used, 3);
+  assert.equal(state.nodes.accounts!.status, 'failed');
+  assert.equal(state.nodes.accounts!.exhaustionReason, 'total-repairs-exhausted');
+  // Exhausting the run-wide total ends repairs, not the passed branch's new work.
+  assert.equal(action(state).type, 'build');
+  assert.deepEqual(prompt(state).nodeIds, ['search']);
+  state = progressionEngine.recordResult(state, grade(state, 'search', {
+    accounts: 'fail', catalog: 'pass', search: 'fail',
+  }));
+  assert.equal(state.nodes.search!.status, 'failed');
+  assert.equal(state.nodes.search!.repairs.used, 0);
+  assert.equal(state.nodes.search!.exhaustionReason, 'total-repairs-exhausted');
+  assert.equal(state.phase, 'terminal');
+});
+
+test('the total budget is shared across features in deterministic order', () => {
+  const definition = fixture();
+  definition.repair.budget = { total: 1 };
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'fail', catalog: 'fail',
+  }));
+  assert.deepEqual(prompt(state).nodeIds, ['accounts']);
+  state = progressionEngine.recordResult(state, repairedGrade(state, 'accounts-repair', {
+    accounts: 'fail', catalog: 'fail',
+  }));
+  assert.equal(state.nodes.accounts!.repairs.used, 1);
+  assert.equal(state.nodes.catalog!.repairs.used, 0);
+  assert.equal(state.nodes.catalog!.status, 'failed');
+  assert.equal(state.phase, 'terminal');
+});
+
+test('one batch repair charges the session and each selected feature once', () => {
+  const definition = fixture();
+  definition.repair = { selection: 'batch', budget: { total: 1, perFeature: 1 } };
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'fail', catalog: 'fail',
+  }));
+  assert.deepEqual(action(state).repair.nodeIds, ['accounts', 'catalog']);
+  state = progressionEngine.recordResult(state, repairedGrade(state, 'batch-repair', {
+    accounts: 'fail', catalog: 'fail',
+  }));
+  assert.equal(state.attempts.filter(attempt => attempt.repair).length, 1);
+  assert.equal(state.nodes.accounts!.repairs.used, 1);
+  assert.equal(state.nodes.catalog!.repairs.used, 1);
+});
+
+test('provider failure costs zero and a completed repair with failed grading awaits its grade', () => {
+  let state = progressionEngine.initialize(fixture());
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'fail', catalog: 'pass',
+  }));
+  state = progressionEngine.recordResult(state, {
+    attemptId: 'provider-failure', outcome: 'inconclusive',
+    category: 'provider_failure', reason: 'provider stopped',
+  });
+  assert.equal(state.nodes.accounts!.repairs.used, 0);
+  assert.equal(action(state).repair.awaitingGrade, undefined);
+  state = progressionEngine.recordResult(state, {
+    attemptId: 'grade-failure', outcome: 'inconclusive',
+    category: 'harness_failure', reason: 'grader stopped',
+    completedRepair: true,
+  });
+  // Charged, but nothing about the feature changes until the repaired source
+  // is graded: no finalization, no children opened, no fourth state.
+  assert.equal(state.nodes.accounts!.repairs.used, 1);
+  assert.equal(state.nodes.accounts!.status, 'active');
+  assert.equal(state.nodes.ownership!.status, 'locked');
+  assert.equal(state.phase, 'active');
+  assert.deepEqual(action(state).repair, { nodeIds: ['accounts'], remaining: 0, awaitingGrade: true });
+  // A second grader failure on the regrade neither charges nor changes anything.
+  state = progressionEngine.recordResult(state, {
+    attemptId: 'regrade-failure', outcome: 'inconclusive',
+    category: 'harness_failure', reason: 'grader stopped again',
+  });
+  assert.equal(state.nodes.accounts!.repairs.used, 1);
+  assert.deepEqual(action(state).repair, { nodeIds: ['accounts'], remaining: 0, awaitingGrade: true });
+  // The conclusive regrade settles the charged repair without charging again.
+  state = progressionEngine.recordResult(state, grade(state, 'regrade', {
+    accounts: 'fail', catalog: 'pass',
+  }));
+  assert.equal(state.nodes.accounts!.repairs.used, 1);
+  assert.equal(state.nodes.accounts!.status, 'failed');
+  assert.equal(state.nodes.accounts!.exhaustionReason, 'feature-repairs-exhausted');
+  assert.equal(state.nodes.ownership!.status, 'blocked');
+  assert.deepEqual(prompt(state).nodeIds, ['search']);
+  assert.equal(JSON.stringify(progressionEngine.replay(fixture(), state.events)),
+    JSON.stringify(state));
+});
+
+test('a completed repair with an inconclusive grade spends shared budget but settles only when graded', () => {
+  const definition = fixture();
+  definition.repair.budget = { total: 1 };
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'fail', catalog: 'fail',
+  }));
+  state = progressionEngine.recordResult(state, {
+    attemptId: 'inconclusive-repair', outcome: 'inconclusive',
+    category: 'harness_failure', reason: 'grader stopped',
+    completedRepair: true,
+  });
+  assert.equal(state.attempts.filter(attempt => attempt.repair).length, 1);
+  assert.equal(state.nodes.accounts!.status, 'active');
+  assert.equal(state.nodes.catalog!.status, 'active');
+  assert.equal(state.phase, 'active');
+  state = progressionEngine.recordResult(state, grade(state, 'regrade', {
+    accounts: 'pass', catalog: 'fail',
+  }));
+  assert.equal(state.nodes.accounts!.status, 'passed');
+  assert.equal(state.nodes.catalog!.status, 'failed');
+  assert.equal(state.nodes.catalog!.exhaustionReason, 'total-repairs-exhausted');
+  assert.deepEqual(prompt(state).nodeIds, ['ownership']);
+});
+
+test('a rolled-back repair with regression feedback is charged exactly once', () => {
+  let state = progressionEngine.initialize(fixture());
+  state = progressionEngine.recordResult(state, grade(state, 'roots', {
+    accounts: 'pass', catalog: 'fail',
+  }));
+  state = progressionEngine.recordResult(state, {
+    ...repairedGrade(state, 'rolled-back', { accounts: 'pass', catalog: 'fail', ownership: 'pass' }),
+    repairRegression: { ownerNodeIds: ['catalog'], report: 'The account list no longer loads.' },
+  });
+  assert.equal(state.attempts.filter(attempt => attempt.repair).length, 1);
+  assert.equal(state.nodes.catalog!.repairs.used, 1);
+  assert.equal(state.attempts.at(-1)?.repairRegression?.ownerNodeIds[0], 'catalog');
+  assert.equal(state.nodes.catalog!.status, 'failed');
+  assert.equal(state.nodes.catalog!.exhaustionReason, 'feature-repairs-exhausted');
+});
+
+test('unused depth repairs carry forward when configured', () => {
+  const definition = fixture();
+  definition.repair.budget = { perDepth: { count: 1, carry: true } };
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'roots', {
+    accounts: 'pass', catalog: 'pass',
+  }));
+  state = progressionEngine.recordResult(state, grade(state, 'depth-two', {
+    accounts: 'pass', catalog: 'pass', ownership: 'fail', search: 'fail',
+  }));
+  assert.deepEqual(action(state).repair, { nodeIds: ['ownership'], remaining: 2 });
+  state = progressionEngine.recordResult(state, repairedGrade(state, 'ownership-repair', {
+    accounts: 'pass', ownership: 'fail',
+  }));
+  assert.deepEqual(action(state).repair, { nodeIds: ['ownership'], remaining: 1 });
+});
+
+test('depth repairs do not carry forward unless configured', () => {
+  const definition = fixture();
+  definition.repair.budget = { perDepth: { count: 1, carry: false } };
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'roots', {
+    accounts: 'pass', catalog: 'pass',
+  }));
+  state = progressionEngine.recordResult(state, grade(state, 'depth-two', {
+    accounts: 'pass', catalog: 'pass', ownership: 'fail', search: 'fail',
+  }));
+  assert.deepEqual(action(state).repair, { nodeIds: ['ownership'], remaining: 1 });
+  state = progressionEngine.recordResult(state, repairedGrade(state, 'ownership-repair', {
+    accounts: 'pass', ownership: 'fail',
+  }));
+  assert.equal(state.nodes.ownership!.exhaustionReason, 'depth-repairs-exhausted');
+  assert.equal(state.nodes.search!.exhaustionReason, 'depth-repairs-exhausted');
+  assert.equal(state.nodes.search!.repairs.used, 0);
+});
+
+test('repeated failures stop their branch while unmeasured work remains build work', () => {
+  const definition = fixture();
+  definition.unchangedFailureLimit = 2;
+  definition.repair.budget = { perFeature: 5 };
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'not-run', catalog: 'fail',
+  }));
+  assert.equal(state.nodes.catalog!.unchangedFailure.count, 1);
+  state = progressionEngine.recordResult(state, repairedGrade(state, 'unchanged', {
+    catalog: 'fail',
+  }));
+  assert(Object.values(state.nodes.accounts!.checks).every(outcome => outcome === null));
+  assert.equal(state.nodes.accounts!.repairs.used, 0);
+  assert.equal(state.nodes.catalog!.unchangedFailure.count, 2);
+  assert.equal(state.nodes.catalog!.exhaustionReason, 'repeated-findings');
+  assert.equal(action(state).type, 'build');
+  assert.deepEqual(prompt(state).nodeIds, ['accounts']);
+});
+
+test('only a completed repair can count as a repeated finding', () => {
+  const definition = fixture();
+  definition.unchangedFailureLimit = 2;
+  definition.repair.budget = { perFeature: 5 };
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'fail', catalog: 'pass',
+  }));
+  // A regrade of unchanged source observes the same findings without a repair.
+  state = progressionEngine.recordResult(state, grade(state, 'regrade', {
+    accounts: 'fail', catalog: 'pass', search: 'pass',
+  }));
+  assert.equal(state.nodes.accounts!.unchangedFailure.count, 1);
+  assert.equal(state.nodes.accounts!.status, 'active');
+  // A repair that changes the findings starts the count over.
+  state = progressionEngine.recordResult(state, repairedGrade(state, 'changed', {
+    accounts: { 'check.accounts.1': 'pass', 'check.accounts.2': 'fail' }, catalog: 'pass',
+  }));
+  assert.equal(state.nodes.accounts!.unchangedFailure.count, 1);
+  assert.equal(state.nodes.accounts!.repairs.used, 1);
+  state = progressionEngine.recordResult(state, repairedGrade(state, 'unchanged', {
+    accounts: { 'check.accounts.1': 'pass', 'check.accounts.2': 'fail' }, catalog: 'pass',
+  }));
+  assert.equal(state.nodes.accounts!.unchangedFailure.count, 2);
+  assert.equal(state.nodes.accounts!.exhaustionReason, 'repeated-findings');
+});
+
+test('repair order follows dependency depth, then the declared catalog order', () => {
+  // The queue repairs the first failed feature by depth, then declared order,
+  // until it passes or stops, then moves to the next. Alphabetical id order
+  // is not a factor, and a replay of the same events reproduces the sequence.
+  const definition = fixture();
+  definition.repair.budget = { total: 4, perFeature: 5 };
+  definition.unchangedFailureLimit = 3;
+  definition.nodes = [
+    node('zeta', [], 'identity'),
+    node('alpha', [], 'discovery'),
+    node('mid', [], 'identity'),
+  ];
+  const compiled = compileDependencyMode(definition);
+  assert.deepEqual(compiled.nodes.map(item => item.id), ['zeta', 'alpha', 'mid']);
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    zeta: 'fail', alpha: 'fail', mid: 'fail',
+  }));
+  const sequence: string[][] = [];
+  while (progressionEngine.nextAction(state).type === 'repair') {
+    sequence.push([...action(state).repair.nodeIds]);
+    state = progressionEngine.recordResult(state, repairedGrade(state, `repair-${sequence.length}`, {
+      zeta: 'fail', alpha: 'fail', mid: 'fail',
+    }));
+  }
+  assert.deepEqual(sequence, [['zeta'], ['zeta'], ['alpha'], ['alpha']]);
+  assert.equal(state.nodes.zeta!.exhaustionReason, 'repeated-findings');
+  // alpha's second repair both reached the stall limit and spent the last
+  // run-wide repair; the budget check runs first and names the reason.
+  assert.equal(state.nodes.alpha!.exhaustionReason, 'total-repairs-exhausted');
+  assert.equal(state.nodes.mid!.exhaustionReason, 'total-repairs-exhausted');
+  const replayed = progressionEngine.replay(definition, state.events);
+  assert.equal(JSON.stringify(replayed), JSON.stringify(state));
+  assert.deepEqual(state.attempts.filter(attempt => attempt.repair)
+    .map(attempt => attempt.repair!.nodeIds), sequence);
+});
+
+test('application startup failures target current work without consuming a repair', () => {
+  let state = progressionEngine.initialize(fixture());
+  state = progressionEngine.recordResult(state, {
+    ...grade(state, 'startup-failure', { accounts: 'fail', catalog: 'fail' }),
+    applicationFailure: { phase: 'startup', reason: 'application did not start' },
+  });
+  assert.equal(state.nodes.accounts!.repairs.used, 0);
+  assert.equal(state.nodes.catalog!.repairs.used, 0);
+  assert.deepEqual(action(state).repair, { nodeIds: ['accounts'], remaining: 1 });
+  const missing = grade(state, 'missing-check', { accounts: 'fail' });
+  missing.nodes[0]!.checks.pop();
+  assert.throws(() => progressionEngine.recordResult(state, missing), /missing checks/);
+});
+
+test('a result must cover the selected graph exactly', () => {
+  let state = progressionEngine.initialize(fixture());
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'fail', catalog: 'pass',
+  }));
+  const missingNode = grade(state, 'missing-node', { accounts: 'fail' });
+  missingNode.nodes.pop();
+  assert.throws(() => progressionEngine.recordResult(state, missingNode), /missing nodes/);
+  const repeated = grade(state, 'repeated-check', { accounts: 'fail' });
+  repeated.nodes[0]!.checks.push({ ...repeated.nodes[0]!.checks[0]! });
+  assert.throws(() => progressionEngine.recordResult(state, repeated), /repeats check/);
+  const unselected = grade(state, 'unselected-node', { accounts: 'fail' });
+  unselected.nodes.push({ id: 'recovery', checks: [] });
+  assert.throws(() => progressionEngine.recordResult(state, unselected), /unselected node/);
+  const foreignRegression = {
+    ...repairedGrade(state, 'foreign-regression', { accounts: 'fail', catalog: 'pass' }),
+    repairRegression: { ownerNodeIds: ['catalog'], report: 'Catalog broke.' },
+  };
+  assert.throws(() => progressionEngine.recordResult(state, foreignRegression),
+    /does not belong to the current repair/);
+  const staleRepair = { ...grade(state, 'stale-repair', { accounts: 'fail' }), completedRepair: true };
+  const passed = progressionEngine.recordResult(state, grade(state, 'passed', {
+    accounts: 'pass', catalog: 'pass',
+  }));
+  assert.throws(() => progressionEngine.recordResult(passed, staleRepair),
+    /only a repair action can record a completed repair/);
+});
+
+test('feature work selection requests one ready feature at a time', () => {
+  const definition = fixture();
+  definition.workSelection = 'feature';
+  definition.repair.budget = { total: 0 };
+  let state = progressionEngine.initialize(definition);
+  assert.deepEqual(prompt(state).nodeIds, ['accounts']);
+  state = progressionEngine.recordResult(state, grade(state, 'accounts', { accounts: 'pass' }));
+  assert.deepEqual(prompt(state).nodeIds, ['catalog']);
+  state = progressionEngine.recordResult(state, grade(state, 'catalog', {
+    accounts: 'pass', catalog: 'pass',
+  }));
+  assert.deepEqual(prompt(state).nodeIds, ['ownership']);
+});
+
+test('all-at-once repairs one failure and regrades the complete graph', () => {
+  const definition = fixture();
+  definition.workSelection = 'all-at-once';
+  let state = progressionEngine.initialize(definition);
+  assert.deepEqual(prompt(state).nodeIds, [
+    'accounts', 'catalog', 'ownership', 'search', 'recovery', 'recommendations',
+  ]);
+  assert.equal(grading(state).checks.length, 7);
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'fail',
+  }));
+  assert.deepEqual(prompt(state).nodeIds, ['accounts']);
+  assert.equal(grading(state).nodeIds.length, 6);
+  state = progressionEngine.recordResult(state, repairedGrade(state, 'repair', {
+    accounts: 'pass',
+  }));
+  assert.equal(state.nodes.accounts!.repairs.used, 1);
+  assert.equal(state.phase, 'terminal');
+  assert.equal(state.terminalOutcome?.kind, 'passed');
+});
+
+test('multi-parent work waits for both parents and an ancestor regression closes its path', () => {
+  const definition = fixture();
+  definition.nodes.find(item => item.id === 'ownership')!.dependencies = [
+    { id: 'accounts', reason: 'ownership requires accounts' },
+    { id: 'catalog', reason: 'ownership requires catalog' },
+  ];
+
+  let waiting = progressionEngine.initialize(definition);
+  waiting = progressionEngine.recordResult(waiting, grade(waiting, 'one-parent', {
+    accounts: 'pass', catalog: 'fail',
+  }));
+  assert.equal(waiting.nodes.ownership!.status, 'locked');
+
+  let regressed = progressionEngine.initialize(definition);
+  regressed = progressionEngine.recordResult(regressed, grade(regressed, 'roots', {
+    accounts: 'pass', catalog: 'pass',
+  }));
+  regressed = progressionEngine.recordResult(regressed, grade(regressed, 'children', {
+    ownership: 'pass', search: 'pass',
+  }));
+  regressed = progressionEngine.recordResult(regressed, grade(regressed, 'ancestor-regression', {
+    accounts: 'fail', recommendations: 'pass', recovery: 'pass',
+  }));
+  assert.deepEqual(prompt(regressed).nodeIds, ['accounts']);
+  assert.equal(regressed.nodes.ownership!.status, 'locked');
+  assert.equal(regressed.nodes.recovery!.status, 'locked');
+  assert.equal(regressed.nodes.recommendations!.status, 'passed');
+});
+
+test('a repair grant reopens the exact exhausted branch', () => {
+  const definition = fixture();
+  definition.repair.budget = { total: 0 };
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'fail', catalog: 'fail',
+  }));
+  assert.equal(state.phase, 'terminal');
+  state = progressionEngine.grantRepairs(state, {
+    grantId: 'grant-1', level: 1, nodeIds: ['accounts'], repairs: 1,
+  });
+  assert.deepEqual(action(state).repair, {
+    nodeIds: ['accounts'], remaining: 1, grantId: 'grant-1',
+  });
+  state = progressionEngine.recordResult(state, repairedGrade(state, 'granted-repair', {
+    accounts: 'pass',
+  }));
+  assert.equal(state.nodes.accounts!.status, 'passed');
+  assert.equal(state.nodes.accounts!.repairs.used, 1);
+  assert.deepEqual(prompt(state).nodeIds, ['ownership']);
+});
+
+test('score keeps blocked points and averages questlines equally', () => {
+  const definition = fixture();
+  definition.repair.budget = { total: 0 };
+  let state = progressionEngine.initialize(definition);
+  state = progressionEngine.recordResult(state, grade(state, 'initial', {
+    accounts: 'pass', catalog: 'fail',
+  }));
+  state = progressionEngine.recordResult(state, grade(state, 'ownership', {
+    accounts: 'pass', ownership: 'pass',
+  }));
+  state = progressionEngine.recordResult(state, grade(state, 'recovery', {
+    accounts: 'pass', ownership: 'pass', recovery: 'pass',
+  }));
+  const score = progressionEngine.score(state) as DependencyScore;
+  assert.equal(score.questlines.find(item => item.id === 'identity')!.passedPoints, 5);
+  assert.equal(score.questlines.find(item => item.id === 'discovery')!.blockedPoints, 2);
+  assert.equal(score.questlineAveragePercentage, 50);
+});
diff --git a/tools/stack-bench/tests/dependency-neutral-prompt.contract.ts b/tools/stack-bench/tests/dependency-neutral-prompt.contract.ts
new file mode 100644
index 00000000000..bc2f6e01c64
--- /dev/null
+++ b/tools/stack-bench/tests/dependency-neutral-prompt.contract.ts
@@ -0,0 +1,217 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { resolve } from 'node:path';
+import test from 'node:test';
+
+import { resolveGuidanceProfile } from '../src/campaigns/condition-compiler.js';
+import type { ResolvedGuidanceProfile } from '../src/campaigns/condition-compiler.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { resolveFeatureCatalog } from '../src/progression/feature-catalog-selection.js';
+import { resolveProgressionRecipeLevelSelection }
+  from '../src/progression/progression-recipe-selection.js';
+import { agentVisibleContractText } from '../src/composition/agent-visible-contract.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { readAgentSkillDocuments } from '../src/agents/agent-materials.js';
+
+const AGENT = resolve(STACK_BENCH_ROOT, 'dist', 'commands', 'agent.js');
+const STACKS = ['mongodb', 'postgres', 'spacetime'] as const;
+const EVALUATION_LANGUAGE =
+  /\b(?:benchmark|harness|grader|graded|grading|scored|scoring|tests?|testing|evaluation|criterion|testids?)\b|stackbench|Stack Bench|external client|run configuration/i;
+const UNSTATED_QUALITY_LANGUAGE = [
+  /\b(?:reload|reconnect|live)\b/i,
+  /\b(?:another customer|another account)\b/i,
+  /\b(?:changes nothing|without (?:a )?reload)\b/i,
+  /\benforce (?:this|the) rule on the server\b/i,
+  /\binvalid quantity\b|`-3`/i,
+];
+type Stack = typeof STACKS[number];
+type Level = 1 | 2 | 3;
+
+test('agent contract validation leaves product language unchanged', () => {
+  assert.equal(agentVisibleContractText('Use this application action. Keep the contest action.'),
+    'Use this application action. Keep the contest action.');
+});
+
+function renderPrompt({ level, stack, task, guidance }: {
+  level: Level;
+  stack: Stack;
+  task: unknown;
+  guidance: ResolvedGuidanceProfile;
+}): string {
+  const document = guidance.documents[stack];
+  const skills = guidance.skills[stack];
+  assert.notEqual(document, undefined);
+  assert.ok(skills);
+  return execFileSync(process.execPath, [AGENT,
+    '--mode', level === 1 ? 'build' : 'upgrade',
+    '--backend', stack,
+    '--track', 'ecommerce',
+    '--level', String(level),
+    '--run-index', '0',
+    '--app', '/prompt-review/app',
+    '--guidance', 'neutral',
+    '--guidance-document-json', JSON.stringify(document),
+    '--credential-aliases-json', JSON.stringify(guidance.credentialAliases),
+    '--skill-identity-json', JSON.stringify(skills),
+    '--recipe-task-json', JSON.stringify(task),
+    '--print-prompt',
+  ], {
+    encoding: 'utf8',
+    stdio: 'pipe',
+    maxBuffer: 64 * 1024 * 1024,
+    env: { ...process.env, STACK_BENCH_APPLIANCE: '1',
+      STACK_BENCH_IMAGE: 'prompt-review-does-not-use-docker' },
+  });
+}
+
+test('neutral dependency prompts include only selected product and stack contracts', () => {
+  const track = loadTrack('ecommerce');
+  const catalog = resolveFeatureCatalog('ecommerce.questlines@2.0.2', track);
+  const guidance = resolveGuidanceProfile('neutral@1.8.0', STACKS);
+  const spacetimeReference = readAgentSkillDocuments(
+    resolve(STACK_BENCH_ROOT, '..', '..'), guidance.skills.spacetime?.ids ?? []);
+  assert.match(spacetimeReference, /schema\(\{ score_record \}\).*spacetimedb\.reducer/s);
+  assert.match(spacetimeReference, /ctx\.sender/);
+  assert.match(spacetimeReference, /SenderError/);
+  assert.match(spacetimeReference, /clientVisibilityFilter/);
+  assert.match(spacetimeReference, /DbConnection\.builder\(\).*withToken.*subscriptionBuilder/s);
+  for (const level of [1, 2, 3] as const) {
+    const binding = resolveRecipeRelease(track, level, 'ecommerce.progression-depth3@2.0.2');
+    const selected = resolveProgressionRecipeLevelSelection(binding, catalog, level,
+      { cumulative: true });
+    assert.deepEqual(selected.agent.request.selection.requested.specifications, {
+      requested: [],
+      expected: [],
+      observed: [],
+    });
+    assert(selected.grader.request.selection.requested.specifications.expected.length > 0);
+    const moduleTypes = new Map(binding.release.components.packs
+      .map(pack => [pack.id, pack.moduleType]));
+    for (const check of selected.grader.selection.scoredChecks) {
+      assert.equal(check.treatment,
+        moduleTypes.get(check.packId ?? '') === 'specification' ? 'expected' : 'requested');
+    }
+    for (const stack of STACKS) {
+      const prompt = renderPrompt({ level, stack, task: selected.agent.request, guidance });
+      assert.doesNotMatch(prompt,
+        new RegExp(`${EVALUATION_LANGUAGE.source}|Branding & Styling|App title:|<!-- /?interface`, 'i'));
+      assert.doesNotMatch(prompt, /\blevel\s+\d+\b/i);
+      assert.doesNotMatch(prompt,
+        /After the client|client must listen|client architecture|application behavior/i);
+      const marker = level === 1 ? '## New application' : '## Existing application';
+      const markerIndex = prompt.indexOf(marker);
+      assert.notEqual(markerIndex, -1);
+      const applicationRequest = prompt.slice(markerIndex);
+      assert.match(applicationRequest, /## Application interface/);
+      for (const language of UNSTATED_QUALITY_LANGUAGE) {
+        assert.doesNotMatch(applicationRequest, language);
+      }
+      assert.doesNotMatch(applicationRequest, /## External data synchronization/);
+      const startingCatalog = JSON.stringify({
+        warehouses: binding.plan.fixture.warehouses,
+        items: binding.plan.fixture.items,
+      }, null, 2);
+      if (level === 1) {
+        assert.match(applicationRequest, /## Starting catalog/);
+        assert.ok(applicationRequest.includes(startingCatalog));
+      } else {
+        assert.doesNotMatch(applicationRequest, /## Starting catalog/);
+      }
+      if (stack === 'spacetime') {
+        assert.match(prompt, /file:\/deps\/spacetimedb\.tgz/);
+        assert.doesNotMatch(prompt, /file:\/deps\/bindings-typescript/);
+        assert.doesNotMatch(applicationRequest, /\b(?:GET|POST|PATCH|DELETE) \//);
+        if (level === 1) assert.match(applicationRequest, /`signUp` and `signIn` reducers/);
+      } else {
+        assert.match(applicationRequest, /\b(?:GET|POST|PATCH|DELETE) \//);
+        assert.doesNotMatch(applicationRequest, /\breducer(?:s)?\b/i);
+        if (level === 1) assert.match(applicationRequest, /POST \/api\/auth\/signup/);
+      }
+    }
+  }
+});
+
+test('direct neutral guidance uses the current stack access documents', () => {
+  for (const stack of STACKS) {
+    const prompt = execFileSync(process.execPath, [AGENT,
+      '--mode', 'build',
+      '--backend', stack,
+      '--track', 'ecommerce',
+      '--level', '1',
+      '--run-index', '0',
+      '--app', '/prompt-review/app',
+      '--guidance', 'neutral',
+      '--print-prompt',
+    ], {
+      encoding: 'utf8',
+      stdio: 'pipe',
+      maxBuffer: 64 * 1024 * 1024,
+      env: { ...process.env, STACK_BENCH_APPLIANCE: '1',
+        STACK_BENCH_IMAGE: 'prompt-review-does-not-use-docker' },
+    });
+    assert.doesNotMatch(prompt, /Branding & Styling|App title:/i);
+    assert.doesNotMatch(prompt, EVALUATION_LANGUAGE);
+    assert.match(prompt, /store-admin-2026/);
+    assert.match(prompt, /Create `\/app\/start\.sh`/);
+    assert.match(prompt, /clean\s+source checkout.*install\s+dependencies.*build.*start/s);
+    assert.match(prompt, /APP_WARM_START=1.*reuse them instead of installing them again/s);
+    assert.match(prompt, /script must not change source files/);
+    assert.doesNotMatch(prompt, /package cache/i);
+    assert.doesNotMatch(prompt, /npm `start` script|either `\/app\/start\.sh`/);
+    if (stack !== 'spacetime') {
+      assert.match(prompt, /service is already running/);
+      assert.match(prompt, /Do not\s+start another .* server/);
+      assert.match(prompt, /Serve the complete application on `\d+`/);
+      assert.doesNotMatch(prompt, /Application service port/);
+    } else {
+      assert.match(prompt, /withToken/);
+      assert.match(prompt, /ctx\.sender/);
+      assert.match(prompt, /clientVisibilityFilter/);
+    }
+  }
+});
+
+test('direct prescribed SpacetimeDB guidance includes token-handling guidance', () => {
+  const prompt = execFileSync(process.execPath, [AGENT,
+    '--mode', 'build',
+    '--backend', 'spacetime',
+    '--track', 'ecommerce',
+    '--level', '1',
+    '--run-index', '0',
+    '--app', '/prompt-review/app',
+    '--guidance', 'prescribed',
+    '--print-prompt',
+  ], {
+    encoding: 'utf8',
+    stdio: 'pipe',
+    maxBuffer: 64 * 1024 * 1024,
+    env: { ...process.env, STACK_BENCH_APPLIANCE: '1',
+      STACK_BENCH_IMAGE: 'prompt-review-does-not-use-docker' },
+  });
+  assert.match(prompt, /withToken/);
+  assert.match(prompt, /localStorage/);
+  assert.doesNotMatch(prompt, EVALUATION_LANGUAGE);
+  assert.match(prompt, /store-admin-2026/);
+});
+
+test('campaign skill material cannot change after compilation', () => {
+  const identity = resolveGuidanceProfile('neutral@1.8.0', ['spacetime']).skills.spacetime;
+  assert(identity);
+  assert.throws(() => execFileSync(process.execPath, [AGENT,
+    '--mode', 'build',
+    '--backend', 'spacetime',
+    '--track', 'ecommerce',
+    '--level', '1',
+    '--run-index', '0',
+    '--app', '/prompt-review/app',
+    '--guidance', 'neutral',
+    '--skill-identity-json', JSON.stringify({ ...identity, bytes: identity.bytes + 1 }),
+    '--print-prompt',
+  ], {
+    encoding: 'utf8',
+    stdio: 'pipe',
+    env: { ...process.env, STACK_BENCH_APPLIANCE: '1',
+      STACK_BENCH_IMAGE: 'prompt-review-does-not-use-docker' },
+  }), /campaign skill material changed after compilation/);
+});
diff --git a/tools/stack-bench/tests/dependency-volume.test.ts b/tools/stack-bench/tests/dependency-volume.test.ts
new file mode 100644
index 00000000000..f966e11b13f
--- /dev/null
+++ b/tools/stack-bench/tests/dependency-volume.test.ts
@@ -0,0 +1,52 @@
+import assert from 'node:assert/strict';
+import { chmodSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test, { type TestContext } from 'node:test';
+
+import { createDependencyManifest, initializeDependencyVolume, manifestSha256,
+  verifyDependencyTree } from '../appliance/dependency-volume.js';
+
+function fixture(t: TestContext): { source: string; target: string } {
+  const root = join(tmpdir(), `stack-bench-deps-${process.pid}-${Math.random().toString(16).slice(2)}`);
+  const source = join(root, 'source');
+  const target = join(root, 'target');
+  mkdirSync(join(source, 'bindings-typescript'), { recursive: true });
+  writeFileSync(join(source, 'bindings-typescript', 'package.json'), '{"name":"sdk"}\n');
+  writeFileSync(join(source, 'spacetimedb-cli'), 'cli');
+  chmodSync(join(source, 'spacetimedb-cli'), 0o755);
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  return { source, target };
+}
+
+test('dependency volume initialization is exact and idempotent for one release', t => {
+  const { source, target } = fixture(t);
+  const manifest = createDependencyManifest(source);
+  const first = initializeDependencyVolume({ source, target, manifest });
+  assert.equal(first.initialized, true);
+  assert.equal(first.manifestSha256, manifestSha256(manifest));
+  assert.deepEqual(verifyDependencyTree(target, manifest, { allowMarker: true }), {
+    manifestSha256: manifestSha256(manifest), files: 2,
+  });
+  assert.equal(initializeDependencyVolume({ source, target, manifest }).initialized, false);
+});
+
+test('dependency volume refuses unmarked, stale, changed and wrong-release content', t => {
+  const { source, target } = fixture(t);
+  const manifest = createDependencyManifest(source);
+  mkdirSync(target);
+  writeFileSync(join(target, 'foreign'), 'x');
+  assert.throws(() => initializeDependencyVolume({ source, target, manifest }), /no release marker/);
+
+  const clean = join(target, '..', 'clean');
+  initializeDependencyVolume({ source, target: clean, manifest });
+  writeFileSync(join(clean, 'spacetimedb-cli'), 'changed');
+  assert.throws(() => verifyDependencyTree(clean, manifest, { allowMarker: true }), /does not match/);
+  assert.throws(() => initializeDependencyVolume({ source, target: clean, manifest }), /does not match/);
+
+  const marker = JSON.parse(readFileSync(join(clean, '.stack-bench-release-deps.json'), 'utf8'));
+  marker.manifestSha256 = '0'.repeat(64);
+  chmodSync(join(clean, '.stack-bench-release-deps.json'), 0o644);
+  writeFileSync(join(clean, '.stack-bench-release-deps.json'), JSON.stringify(marker));
+  assert.throws(() => initializeDependencyVolume({ source, target: clean, manifest }), /different release/);
+});
diff --git a/tools/stack-bench/tests/diagnostic-sanitizer.test.ts b/tools/stack-bench/tests/diagnostic-sanitizer.test.ts
new file mode 100644
index 00000000000..ff5bad1e0d6
--- /dev/null
+++ b/tools/stack-bench/tests/diagnostic-sanitizer.test.ts
@@ -0,0 +1,42 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import {
+  redactCredentials,
+  sanitiseConsoleError,
+  sanitiseDiagnostic,
+} from '../src/evidence/diagnostic-sanitizer.js';
+
+const forbidden = /data-(?:role|testid)|getBy(?:TestId|Role|Text)|waitForSelector|locator\(|selectOption|control,#|data-state|localhost|127\.0\.0\.1|host\.docker\.internal|https?:\/\/|[A-Za-z]:[\\/]|\/tools\/stack-bench|\b\d+(?:ms|s)\b|runExpect/i;
+
+test('sanitiser removes selector, timing, endpoint and harness-path mechanics', () => {
+  const input = `Timeout 5000ms exceeded at C:\\repo\\tools\\stack-bench\\dist\\grader\\grade.js\n`
+    + `waiting for locator('[data-testid="admin-panel"]') at http://127.0.0.1:6573/private\n`
+    + `Call log:\n  - waiting for getByTestId('admin-panel')\n  - element is not enabled after 250ms\n`
+    + `  - /tools/stack-bench/dist/grader/grade.js:99\n`
+    + `  at runExpect (/tools/stack-bench/dist/grader/grade.js:99:2)\n`
+    + `  waiting for getByRole('button', { name: 'secret grader label' }) for 2s`;
+  const result = sanitiseDiagnostic(input);
+  assert.doesNotMatch(result, forbidden);
+  assert.match(result, /element is not enabled/i);
+});
+
+test('sanitiser handles single-quoted and unquoted test selectors', () => {
+  const result = sanitiseDiagnostic("[data-role='one'],#one [data-test=two] [data-cy=three]");
+  assert.equal(result, 'the control the control the control');
+});
+
+test('credentials are redacted from diagnostics and console output', () => {
+  const result = sanitiseConsoleError('Authorization: Bearer secret.payload api_key=sk-abcdefghijklmnop `oops`');
+  assert.doesNotMatch(result, /secret\.payload|sk-abcdefghijklmnop|`/);
+  assert.match(result, /redacted/i);
+});
+
+test('credential redaction covers provider environment and JSON spellings', () => {
+  const input = 'ANTHROPIC_API_KEY=provider-value '
+    + 'CLAUDE_CODE_OAUTH_TOKEN=subscription-value '
+    + '{"apiKey":"json-value","oauth_token":"oauth-value"} '
+    + 'mongodb://user:database-password@database:27017/app';
+  const result = redactCredentials(input);
+  assert.doesNotMatch(result, /provider-value|subscription-value|json-value|oauth-value|database-password/);
+  assert.equal(result.match(/\[redacted credential\]/g)?.length, 5);
+});
diff --git a/tools/stack-bench/tests/disclosure.contract.ts b/tools/stack-bench/tests/disclosure.contract.ts
new file mode 100644
index 00000000000..10ae24e7ccf
--- /dev/null
+++ b/tools/stack-bench/tests/disclosure.contract.ts
@@ -0,0 +1,103 @@
+import assert from 'node:assert/strict';
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compileCampaignFile } from '../src/campaigns/campaign-compiler.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import type { CompiledStep } from '../src/composition/definition-compiler.js';
+
+// A scored check may require a name to exist in the application only when
+// the request carries that name: a control id or attribute from a contract,
+// a route or reducer from a contract or the track's actions, a table from an
+// interface the contract names. What a dependency-mode request carries is
+// the feature prompts, the contracts, the fixture, and the track actions;
+// a specification's text arrives only when a catalog node lists it in
+// `promptModules`.
+const reference = join(STACK_BENCH_ROOT, 'appliance', 'campaign.ecommerce-progression-reference.json');
+const STOCK_TABLES = ['item', 'warehouse', 'stock'];
+
+const placeholder = (route: string): string => route.replace(/\{[a-zA-Z]+\}|:[a-zA-Z]+/g, '{}');
+
+function* eachStep(steps: readonly CompiledStep[]): Generator<CompiledStep> {
+  for (const step of steps) {
+    yield step;
+    for (const branch of step.branches ?? []) yield* eachStep(branch);
+  }
+}
+
+test('every name a scored check requires reaches the coding agent', () => {
+  const track = loadTrack('ecommerce');
+  const campaign = compileCampaignFile(reference);
+  const catalog = campaign.featureCatalog;
+  assert.ok(catalog);
+  const binding = resolveRecipeRelease(track, 1, 'ecommerce.progression-catalog@2.0.2');
+  assert.ok(binding);
+  const { plan } = binding;
+
+  const requestedModules = new Set(catalog.definition.nodes.flatMap(node => node.promptModules ?? []));
+  const read = (relative: string): string => {
+    for (const base of [track.dir, join(track.dir, 'composition')]) {
+      const file = join(base, relative);
+      if (existsSync(file)) return readFileSync(file, 'utf8');
+    }
+    throw new Error(`cannot read ${relative}`);
+  };
+  const isSpecification = (owner: string): boolean => /\.spec\.|specifications/.test(owner);
+  let delivered = '';
+  for (const fragment of plan.recipe.task.requirements) {
+    const withheld = fragment.owners.length > 0 && fragment.owners.every(owner =>
+      isSpecification(owner) && !requestedModules.has(owner));
+    if (!withheld) delivered += `\n${read(fragment.path)}`;
+  }
+  for (const fragment of plan.recipe.task.contracts) delivered += `\n${read(fragment.path)}`;
+  delivered += `\n${JSON.stringify(plan.fixture)}`;
+  const routes = new Set(track.actions.map(action => placeholder(action.path)));
+  const reducers = new Set(track.actions.map(action => action.reducer));
+  for (const match of delivered.matchAll(/`(?:GET|POST|PUT|PATCH|DELETE) ([^`]+)`/g)) routes.add(placeholder(match[1]!));
+  const has = (name: string): boolean => delivered.includes(name);
+  const hasRoute = (route: string): boolean => routes.has(placeholder(route)) || has(route);
+  const hasReducer = (reducer: string): boolean => reducers.has(reducer) || has(reducer);
+  const stockInterface = STOCK_TABLES.every(table => new RegExp(`\`${table}\\(`).test(delivered));
+
+  const steps = new Map<string, CompiledStep[]>();
+  for (const execution of plan.execution) for (const group of execution.checkGroups) {
+    for (const criterion of group.feature.criteria) {
+      steps.set(`${group.packId}|${group.checkGroupId}|${criterion.id}`,
+        [...eachStep([...group.feature.setup, ...criterion.steps])]);
+    }
+  }
+  const byKey = new Map(plan.checks.map(check =>
+    [check.stableKey, steps.get(`${check.packId}|${check.checkGroupId}|${check.criterionId}`)]));
+
+  const missing: string[] = [];
+  let scored = 0;
+  for (const node of catalog.definition.nodes) for (const check of node.gradingChecks) {
+    const list = byKey.get(check.id);
+    assert.ok(list, `${check.id} has scenario steps`);
+    scored += 1;
+    const needs = new Set<string>();
+    for (const step of list) {
+      for (const control of [step.testid, step.in?.testid,
+        (step.namedTarget as { testid?: string } | undefined)?.testid,
+        (step.input as { testid?: string } | undefined)?.testid]) {
+        if (control && !has(control)) needs.add(`control ${control}`);
+      }
+      for (const attribute of [(step.input as { attribute?: string } | undefined)?.attribute,
+        (step.namedTarget as { attribute?: string } | undefined)?.attribute]) {
+        if (attribute && !has(attribute)) needs.add(`attribute ${attribute}`);
+      }
+      const named = step.namedAction as { reducer?: string; path?: string } | undefined;
+      if (named?.reducer && !hasReducer(named.reducer)) needs.add(`reducer ${named.reducer}`);
+      if (named?.path && !hasRoute(named.path)) needs.add(`route ${named.path}`);
+      if ((step.do === 'callAction' || step.do === 'callConcurrently') && !named
+        && !track.actions.some(action => action.id === step.action)) needs.add(`action ${step.action}`);
+      if (step.do === 'dbSetStock' && !stockInterface) needs.add('stock data interface');
+    }
+    if (needs.size) missing.push(`${node.id} ${check.id}: ${[...needs].join(', ')}`);
+  }
+  assert.ok(scored > 100, `${scored} scored checks`);
+  assert.deepEqual(missing, []);
+});
diff --git a/tools/stack-bench/tests/docker-network.test.ts b/tools/stack-bench/tests/docker-network.test.ts
new file mode 100644
index 00000000000..f9be331a8c2
--- /dev/null
+++ b/tools/stack-bench/tests/docker-network.test.ts
@@ -0,0 +1,17 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { dockerHostGatewayArguments, dockerHostServiceAddress } from '../src/runtime/docker-network.js';
+
+test('bridge containers bind the portable Docker host gateway alias', () => {
+  assert.deepEqual(dockerHostGatewayArguments('bridge'),
+    ['--add-host', 'host.docker.internal:host-gateway']);
+  assert.deepEqual(dockerHostGatewayArguments('host'), []);
+  assert.throws(() => dockerHostGatewayArguments('ambient'), /unsupported Docker network mode/);
+});
+
+test('host services use the address reachable from the selected network namespace', () => {
+  assert.equal(dockerHostServiceAddress('bridge'), 'host.docker.internal');
+  assert.equal(dockerHostServiceAddress('host'), '127.0.0.1');
+  assert.throws(() => dockerHostServiceAddress('ambient'), /unsupported Docker network mode/);
+});
diff --git a/tools/stack-bench/tests/ecommerce-progression-campaign.contract.ts b/tools/stack-bench/tests/ecommerce-progression-campaign.contract.ts
new file mode 100644
index 00000000000..831073a00a2
--- /dev/null
+++ b/tools/stack-bench/tests/ecommerce-progression-campaign.contract.ts
@@ -0,0 +1,236 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { AGENT_ADAPTER_REGISTRY } from '../src/agents/agent-adapters.js';
+import { compileCampaignFile, validateCompiledCampaignPlan }
+  from '../src/campaigns/campaign-compiler.js';
+import { runCampaignAdmission } from '../src/campaigns/campaign-admission.js';
+import type { CampaignAdmissionPreflightRequest }
+  from '../src/campaigns/campaign-admission.js';
+import { attemptArgv } from '../src/campaigns/campaign-runner.js';
+import { parseBenchArguments } from '../commands/bench-arguments.js';
+import { DEFAULT_BUILD_IMAGE } from '../src/composition/product-config.js';
+import { writeArtifact } from '../src/evidence/artifacts.js';
+import { progressionEngine } from '../src/progression/progression-engine.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { parseReferenceAgentArgs } from '../src/references/reference-agent.js';
+import { loadReferenceRegistry, selectReferenceFixture, validateReferenceRegistry }
+  from '../src/references/reference-fixtures.js';
+
+const root = STACK_BENCH_ROOT;
+const campaignPath = join(root, 'appliance', 'campaign.ecommerce-progression-reference.json');
+// One compile of the reference campaign, cloned for each test that reads it.
+let referencePlanCache: ReturnType<typeof compileCampaignFile> | null = null;
+const referencePlan = (): ReturnType<typeof compileCampaignFile> =>
+  structuredClone(referencePlanCache ??= compileCampaignFile(campaignPath));
+
+type UnknownRecord = Record<string, unknown>;
+const record = (value: unknown): value is UnknownRecord =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const first = <Value>(values: readonly Value[]): Value => {
+  const value = values[0];
+  assert(value);
+  return value;
+};
+
+function collectInputAttributes(value: unknown, attributes = new Set<string>()): Set<string> {
+  if (Array.isArray(value)) value.forEach(item => collectInputAttributes(item, attributes));
+  else if (record(value)) {
+    if (record(value.input) && typeof value.input.attribute === 'string') {
+      attributes.add(value.input.attribute);
+    }
+    Object.values(value).forEach(item => collectInputAttributes(item, attributes));
+  }
+  return attributes;
+}
+
+function sourceText(directory: string): string {
+  return readdirSync(directory, { recursive: true, withFileTypes: true })
+    .filter(entry => entry.isFile() && /\.(?:js|jsx|ts|tsx|html)$/.test(entry.name))
+    .map(entry => readFileSync(join(entry.parentPath, entry.name), 'utf8')).join('\n');
+}
+
+test('the ecommerce reference pilot resolves the exact L1-L6 progression inputs', () => {
+  const plan = referencePlan();
+  assert(plan.featureCatalog);
+  assert(plan.dependencyPolicy);
+  assert.deepEqual(plan.definition.levels, [1, 2, 3, 4, 5, 6]);
+  assert.equal(plan.featureCatalog.identity.id, 'ecommerce.questlines');
+  assert.equal(plan.featureCatalog.identity.version, '2.0.2');
+  assert.equal(plan.dependencyPolicy.identity.id, 'dependency-graph');
+  assert.deepEqual(plan.bindings.map(binding => `${binding.recipe.id}@${binding.recipe.version}`),
+    Array(6).fill('ecommerce.progression-catalog@2.0.2'));
+  assert.deepEqual(plan.attempts.map(attempt => attempt.stack).sort(),
+    ['mongodb', 'postgres', 'spacetime']);
+  assert(plan.attempts.every(attempt => attempt.agentAdapter === 'reference-fixture'));
+  assert.equal(validateCompiledCampaignPlan(plan).contentSha256, plan.contentSha256);
+});
+
+test('sequential mode can run a prefix of the same ecommerce feature catalog', () => {
+  const directory = mkdtempSync(join(tmpdir(), 'stack-bench-sequential-prefix-'));
+  try {
+    const manifest = JSON.parse(readFileSync(campaignPath, 'utf8'));
+    manifest.id = 'ecommerce-sequential-prefix-proof';
+    manifest.mode = { id: 'sequential', version: '1.0.0' };
+    manifest.repair = { selection: 'batch', budget: { total: 1 } };
+    manifest.levels = [1, 2, 3];
+    manifest.selection.levels = manifest.selection.levels.slice(0, 3);
+    const path = join(directory, 'campaign.json');
+    writeFileSync(path, `${JSON.stringify(manifest, null, 2)}\n`);
+    const plan = compileCampaignFile(path);
+    const featureCatalog = plan.featureCatalog;
+    assert(featureCatalog);
+    const condition = first(plan.conditions);
+    assert.deepEqual(plan.definition.levels, [1, 2, 3]);
+    assert(plan.attempts.every(attempt => attempt.dependencyPolicy === undefined));
+    assert(plan.attempts.every(attempt => {
+      assert(attempt.featureCatalog);
+      return attempt.featureCatalog.sha256 === featureCatalog.identity.sha256;
+    }));
+    assert.deepEqual(condition.requested.levels.map(level => level.level), [1, 2, 3]);
+    assert.deepEqual(condition.requested.levels.map(level => {
+      assert(level.selection.scoredChecks);
+      return level.selection.scoredChecks.length;
+    }), [9, 41, 58]);
+  } finally {
+    rmSync(directory, { recursive: true, force: true });
+  }
+});
+
+test('dependency mode stops at the selected catalog prefix', () => {
+  const directory = mkdtempSync(join(tmpdir(), 'stack-bench-dependency-prefix-'));
+  try {
+    const manifest = JSON.parse(readFileSync(campaignPath, 'utf8'));
+    manifest.id = 'ecommerce-dependency-prefix-proof';
+    manifest.levels = [1, 2, 3];
+    manifest.selection.levels = manifest.selection.levels.slice(0, 3);
+    const sourcePath = join(directory, 'campaign.json');
+    writeFileSync(sourcePath, `${JSON.stringify(manifest, null, 2)}\n`);
+    const plan = compileCampaignFile(sourcePath);
+    assert(plan.dependencyPolicy);
+    assert.deepEqual(plan.dependencyPolicy.definition.levels, [1, 2, 3]);
+    assert.deepEqual(plan.dependencyPolicy.definition.repair,
+      { selection: 'feature', budget: { total: 0 }, order: 'declared' });
+    assert.deepEqual(plan.dependencyPolicy.definition.nodeOrder,
+      plan.featureCatalog?.definition.nodes.map(node => node.id));
+
+    const planPath = join(directory, 'plan.json');
+    writeArtifact(planPath, { kind: 'campaign_plan', id: `${plan.id}-plan`, payload: plan });
+    const attempt = first(plan.attempts);
+    const args = parseBenchArguments(['node', ...attemptArgv(plan, attempt,
+      join(directory, 'result'), 0, planPath)]);
+    assert(args.progression);
+    assert.deepEqual(args.levelList, [1, 2, 3]);
+    assert.equal(Math.max(...args.progression.definition.nodes.map(node => node.level)), 3);
+
+    let state = progressionEngine.initialize(args.progression.definition);
+    const visited: number[] = [];
+    while (state.phase === 'active') {
+      const action = progressionEngine.nextAction(state);
+      if (typeof action.level !== 'number') throw new Error('active progression has no level');
+      visited.push(action.level);
+      const selection = progressionEngine.gradingSelection(state);
+      state = progressionEngine.recordResult(state, {
+        attemptId: `level-${action.level}`,
+        outcome: 'conclusive',
+        nodes: selection.nodeIds.map(id => ({ id,
+          checks: selection.checks.filter(check => check.nodeId === id)
+            .map(check => ({ id: check.id, outcome: 'pass' })) })),
+      });
+    }
+    assert.deepEqual(visited, [1, 2, 3]);
+    assert.equal(progressionEngine.nextAction(state).type, 'terminal');
+  } finally {
+    rmSync(directory, { recursive: true, force: true });
+  }
+});
+
+test('every campaign level resolves one current reference for each stack', () => {
+  const registry = loadReferenceRegistry();
+  assert.deepEqual(validateReferenceRegistry(registry), { ok: true, issues: [] });
+  for (const backend of ['mongodb', 'postgres', 'spacetime']) {
+    for (let level = 1; level <= 5; level += 1) {
+      const fixture = selectReferenceFixture(registry, {
+        backend,
+        track: 'ecommerce',
+        level,
+        recipe: 'ecommerce.progression-catalog@2.0.2',
+      });
+      assert.equal(fixture.status, 'candidate');
+      assert.equal(fixture.targetPath, `reference-apps/ecommerce/${backend}`);
+    }
+  }
+});
+
+test('every progression action input is exposed by every reference app', () => {
+  const track = loadTrack('ecommerce');
+  const binding = resolveRecipeRelease(track, 5, 'ecommerce.progression-catalog@2.0.2');
+  const attributes = new Set<string>();
+  for (const execution of binding.plan.execution) {
+    collectInputAttributes(JSON.parse(readFileSync(join(track.dir, execution.source), 'utf8')),
+      attributes);
+  }
+  assert(attributes.size > 0);
+  const missing: string[] = [];
+  for (const backend of ['mongodb', 'postgres', 'spacetime']) {
+    const text = sourceText(join(root, 'reference-apps', 'ecommerce', backend));
+    for (const attribute of attributes) {
+      if (!text.includes(attribute)) missing.push(`${backend}:${attribute}`);
+    }
+  }
+  assert.deepEqual(missing, []);
+});
+
+test('the model-free reference adapter can advance through progression levels', () => {
+  const adapter = AGENT_ADAPTER_REGISTRY.get('reference-fixture');
+  assert.deepEqual(adapter.modes, ['build', 'fix', 'upgrade']);
+  const parsed = parseReferenceAgentArgs([
+    'node', 'reference-agent.js',
+    '--backend', 'mongodb',
+    '--app', 'app',
+    '--track', 'ecommerce',
+    '--level', '2',
+    '--run-index', '0',
+    '--mode', 'upgrade',
+  ]);
+  assert.equal(parsed.mode, 'upgrade');
+  assert.equal(parsed.level, 2);
+});
+
+test('campaign admission sends the exact catalog, mode, and default build image to preflight', () => {
+  const output = mkdtempSync(join(tmpdir(), 'stack-bench-progression-admission-'));
+  try {
+    const plan = referencePlan();
+    const featureCatalog = plan.featureCatalog;
+    assert(featureCatalog);
+    const calls: CampaignAdmissionPreflightRequest[] = [];
+    const admission = runCampaignAdmission(plan, output, { codingContainers: () => [],
+      env: {}, now: '2026-08-25T00:00:00.000Z', uuid: () => 'test',
+      preflight: request => {
+        calls.push(request);
+        return { schemaVersion: 1, generatedAt: '2026-08-25T00:00:00.000Z',
+          request: { backends: request.backends, track: request.track,
+            levels: request.levelList, runIndex: request.runIndex,
+            parallelism: request.parallelism,
+            agentAdapter: request.agentAdapter, packs: request.packIds,
+            checks: request.checkKeys, image: request.image,
+            resultsDir: request.resultsDir, smoke: request.smoke },
+          ok: true, summary: { passed: 0, failed: 0, warnings: 0 }, checks: [] };
+      },
+    });
+    assert.equal(admission.payload.ok, true);
+    assert.equal(calls.length, plan.summary.parallelism);
+    assert.equal(plan.summary.parallelism, 1);
+    assert(calls.every(call => call.image === DEFAULT_BUILD_IMAGE));
+    assert(calls.every(call => {
+      assert(call.featureCatalog);
+      return call.featureCatalog.identity.sha256 === featureCatalog.identity.sha256;
+    }));
+    assert(calls.every(call => call.mode.id === 'dependency'));
+  } finally { rmSync(output, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/ecommerce-progression.contract.ts b/tools/stack-bench/tests/ecommerce-progression.contract.ts
new file mode 100644
index 00000000000..70e13aa64ae
--- /dev/null
+++ b/tools/stack-bench/tests/ecommerce-progression.contract.ts
@@ -0,0 +1,517 @@
+import assert from 'node:assert/strict';
+import { readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compileCampaignFile } from '../src/campaigns/campaign-compiler.js';
+import { compilePackDefinition, compileRecipeFile, type CompiledPackDefinition }
+  from '../src/composition/composition-compiler.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { compileScenarioDefinition } from '../src/composition/definition-compiler.js';
+import { buildRecipeRelease, type RecipeBinding } from '../src/composition/recipe-release.js';
+import { compileProgressionDefinition, compileProgressionDefinitionFile,
+  compileDependencyPolicyInput, compileFeatureCatalogInput,
+  dependencyRuntimeDefinition, type CompiledProgressionNode }
+  from '../src/progression/progression-definition.js';
+import { progressionEngine } from '../src/progression/progression-engine.js';
+import type { ProgressionWorkAction } from '../src/progression/progression-engine.js';
+import { resolveProgressionRecipeAction, resolveProgressionRepairTarget,
+  validateProgressionRecipeBindings } from '../src/progression/progression-recipe-selection.js';
+
+const trackRoot = join(STACK_BENCH_ROOT, 'tracks', 'ecommerce');
+const packRoot = join(trackRoot, 'composition', 'packs');
+const definitionPath = join(trackRoot, 'progression', 'ecommerce-2.0.2.json');
+const readJson = (path: string): unknown => JSON.parse(readFileSync(path, 'utf8'));
+
+function packChecks(pack: CompiledPackDefinition): string[] {
+  return pack.checks.flatMap(check => {
+    const scenario = compileScenarioDefinition(readJson(join(trackRoot, check.source)), {
+      source: check.source,
+    });
+    const feature = scenario.features.find(candidate => candidate.id === check.feature);
+    assert(feature, `${pack.id}.${check.id} must select a feature`);
+    const criteria = check.criteria === undefined
+      ? feature.criteria
+      : check.criteria.map(id => {
+        const criterion = feature.criteria.find(candidate => candidate.id === id);
+        assert(criterion, `${pack.id}.${check.id} must select ${id}`);
+        return criterion;
+      });
+    return criteria.map(criterion =>
+      `${pack.stableId ?? pack.id}.${check.stableId ?? check.id}.${criterion.id}`);
+  });
+}
+
+test('the ecommerce progression definition is complete and calculated from its dependencies', () => {
+  const definition = compileProgressionDefinitionFile(definitionPath, { trackRoot });
+  assert.equal(definition.nodes.length, 43);
+  assert.deepEqual(Object.fromEntries([1, 2, 3, 4, 5, 6].map(level => [
+    level,
+    definition.nodes.filter(node => node.level === level).length,
+  ])), { 1: 4, 2: 10, 3: 13, 4: 9, 5: 6, 6: 1 });
+  assert.equal(definition.questlines.length, 12);
+  assert.equal(new Set(definition.nodes.flatMap(node => node.gradingChecks.map(check => check.id))).size,
+    157);
+  assert.equal(definition.nodes.flatMap(node => node.gradingChecks)
+    .reduce((total, check) => total + check.points, 0), 294);
+  assert(definition.nodes.every(node => Object.keys(node.dependencyReasons).length
+    === node.dependencies.length));
+  assert(definition.questlines.every(questline =>
+    definition.nodes.some(node => node.questline === questline.id)));
+
+  const byId = new Map(definition.nodes.map(node => [node.id, node]));
+  assert.deepEqual(requiredNode(byId, 'faceted-search').dependencies, ['catalog-discovery']);
+  assert.deepEqual(requiredNode(byId, 'scheduled-restocks').dependencies, ['warehouse-admin']);
+  assert.deepEqual(requiredNode(byId, 'price-history').dependencies,
+    ['catalog-management']);
+  assert.deepEqual(requiredNode(byId, 'warehouse-admin').dependencies, ['catalog', 'staff-access']);
+  assert.deepEqual(requiredNode(byId, 'stock-transfers').dependencies, ['warehouse-admin']);
+  assert.deepEqual(requiredNode(byId, 'catalog-management').dependencies,
+    ['catalog-discovery', 'staff-roles']);
+  assert.deepEqual(requiredNode(byId, 'warehouse-admin').gradingChecks.map(check => check.id), [
+    'ecommerce.feature.warehouse-admin.admin-write.103a',
+    'ecommerce.feature.warehouse-admin.warehouse-view.7b',
+    'ecommerce.spec.access-control.warehouse-area-boundary.7a',
+    'ecommerce.spec.access-control.warehouse-write-boundary.103b',
+    'ecommerce.spec.external-data-sync.external-stock.901a',
+    'ecommerce.spec.external-data-sync.external-stock.901c',
+    'ecommerce.spec.external-data-sync.external-stock.901d',
+    'ecommerce.spec.live-state.warehouse-stock.7c',
+  ]);
+  assert(requiredNode(byId, 'fulfilment-queue').gradingChecks.some(check =>
+    check.id === 'ecommerce.spec.concurrency-safety.last-unit.201a'));
+  assert(requiredNode(byId, 'fulfilment-queue').gradingChecks.some(check =>
+    check.id === 'ecommerce.spec.concurrency-safety.restock-race.202a'));
+  assert(requiredNode(byId, 'order-delivery').gradingChecks.some(check =>
+    check.id === 'ecommerce.returns-pricing.cancellation-and-return.3d'));
+  assert.deepEqual(requiredNode(byId, 'personalized-recommendations').dependencies,
+    ['recommendations']);
+  assert.deepEqual(requiredNode(byId, 'automatic-reorder').dependencies,
+    ['scheduled-restocks', 'staff-roles']);
+  assert.deepEqual(requiredNode(byId, 'order-delivery').dependencies,
+    ['fulfilment-queue', 'order-cancellation']);
+  assert.deepEqual(requiredNode(byId, 'order-returns').dependencies,
+    ['order-delivery']);
+  assert.deepEqual(requiredNode(byId, 'support-refunds').dependencies,
+    ['order-cancellation', 'order-support']);
+});
+
+test('every progression feature reference and scored check binds to repository data', () => {
+  const packs: Array<[string, CompiledPackDefinition]> = readdirSync(packRoot)
+    .filter(name => name.endsWith('.json')).map(name => {
+    const pack = compilePackDefinition(readJson(join(packRoot, name)), { source: name });
+      return [`${pack.id}@${pack.version}`, pack];
+  });
+  const packByRef = new Map(packs);
+  assert.equal(packByRef.size, packs.length, 'pack id and version pairs must be unique');
+
+  const definition = compileProgressionDefinitionFile(definitionPath, { trackRoot });
+  for (const node of definition.nodes) {
+    assert.deepEqual(node.promptModules, node.featureRefs);
+    const owned = new Set(node.gradingChecks.map(check => check.id));
+    for (const reference of node.featureRefs) {
+      const pack = packByRef.get(reference);
+      assert(pack, `${node.id} references missing ${reference}`);
+      assert.equal(pack.moduleType, 'feature');
+      assert(packChecks(pack).every(key => owned.has(key)),
+        `${node.id} must own every check selected by ${reference}`);
+    }
+  }
+
+  const recipe = compileRecipeFile(join(trackRoot, 'composition', 'recipes',
+    'progression-catalog-2.0.2.json'), {
+    trackRoot,
+  });
+  const actual = new Map(definition.nodes.flatMap(node => node.gradingChecks)
+    .map(check => [check.id, check.points]));
+  for (const check of recipe.checks.filter(item => item.points > 0)) {
+    if (check.stableKey.startsWith('ecommerce.feature.catalog.catalog.')) continue;
+    assert.equal(actual.get(check.stableKey), check.points,
+      `progression must preserve ${check.stableKey} from the L3 candidate`);
+  }
+  assert.deepEqual([...actual.keys()].filter(key => key.startsWith('ecommerce.feature.catalog.')).sort(),
+    ['ecommerce.feature.catalog.catalog-ranking.2b',
+      'ecommerce.feature.catalog.catalog-search.2d',
+      'ecommerce.feature.catalog.catalog-values.2a']);
+});
+
+test('signed-out purchase access does not depend on cart controls', () => {
+  const pack = compilePackDefinition(
+    readJson(join(packRoot, 'spec-access-control-2.0.0.json')),
+    { source: 'spec-access-control-2.0.0.json' },
+  );
+  const purchase = pack.checks.find(check => check.id === 'signed-out-purchase');
+  assert(purchase, 'access control must include signed-out-purchase');
+  assert.deepEqual(purchase.requiresFeatures, ['ecommerce.feature.purchasing']);
+  assert.equal(purchase.source, 'scenarios/progression-signed-out-purchase-1.0.0.json');
+
+  const scenario = compileScenarioDefinition(readJson(join(trackRoot, purchase.source)), {
+    source: purchase.source,
+  });
+  const criterion = scenario.features.find(feature => feature.id === purchase.feature)
+    ?.criteria.find(candidate => candidate.id === '3a');
+  assert(criterion, 'signed-out purchase must own criterion 3a');
+  assert.equal(criterion.points, 1);
+  assert.deepEqual(criterion.steps.map(step => step.testid), ['buy-now']);
+
+  const cartBoundary = pack.checks.find(check => check.id === 'cart-boundary');
+  assert(cartBoundary, 'access control must include cart-boundary');
+  assert.deepEqual(cartBoundary.requiresFeatures, ['ecommerce.feature.cart']);
+  assert.notEqual(cartBoundary.source, purchase.source);
+});
+
+test('cart isolation reads the action input from the acting customer', () => {
+  const pack = compilePackDefinition(
+    readJson(join(packRoot, 'spec-access-control-2.0.1.json')),
+    { source: 'spec-access-control-2.0.1.json' },
+  );
+  const source = pack.checks.find(check => check.id === 'cart-boundary')?.source;
+  assert(source, 'access control must include cart-boundary');
+  const scenario = compileScenarioDefinition(readJson(join(trackRoot, source)), { source });
+  const action = scenario.features.find(feature => feature.id === 109)
+    ?.criteria.find(criterion => criterion.id === '109a')
+    ?.steps.find(step => step.do === 'callAction');
+  assert(action && action.do === 'callAction');
+  assert.equal(action.actor, 'stranger');
+  assert.equal(action.from, undefined);
+});
+
+test('every progression feature is a whole module and every direct graph edge is required', () => {
+  const packByRef = new Map<string, CompiledPackDefinition>(readdirSync(packRoot)
+    .filter(name => name.endsWith('.json'))
+    .map(name => {
+      const pack = compilePackDefinition(readJson(join(packRoot, name)), { source: name });
+      return [`${pack.id}@${pack.version}`, pack];
+    }));
+  const definition = compileProgressionDefinitionFile(definitionPath, { trackRoot });
+  const nodeById = new Map(definition.nodes.map(node => [node.id, node]));
+  const ownerByRef = new Map(definition.nodes
+    .flatMap(node => node.featureRefs.map(reference => [reference, node.id])));
+  const ancestors = (nodeId: string): Set<string> => {
+    const found = new Set<string>();
+    const visit = (id: string): void => requiredNode(nodeById, id).dependencies.forEach(parent => {
+      if (found.has(parent)) return;
+      found.add(parent);
+      visit(parent);
+    });
+    visit(nodeId);
+    return found;
+  };
+
+  for (const node of definition.nodes) {
+    const featurePacks = node.featureRefs.map(reference => packByRef.get(reference));
+    const requiredPacks = featurePacks.map((pack, index) => {
+      assert(pack, `${node.id} references missing ${node.featureRefs[index] ?? '<unknown>'}`);
+      return pack;
+    });
+    for (const pack of requiredPacks) {
+      assert.equal(pack.task.requirements.length, 1,
+        `${node.id} must have one product prompt module`);
+      assert.equal(pack.task.contracts.length, 1,
+        `${node.id} must have one application interface module`);
+      for (const fragment of [...pack.task.requirements, ...pack.task.contracts]) {
+        assert.equal(fragment.from, undefined, `${node.id} must not slice ${fragment.path}`);
+        assert.equal(fragment.until, undefined, `${node.id} must not slice ${fragment.path}`);
+      }
+    }
+    const requiredOwners = [...new Set(requiredPacks.flatMap(pack => pack.requiresPacks)
+      .map(reference => ownerByRef.get(reference))
+      .filter((owner): owner is string => typeof owner === 'string' && owner !== node.id))];
+    const directRequiredOwners = requiredOwners.filter(owner => !requiredOwners.some(other =>
+      other !== owner && ancestors(other).has(owner))).sort();
+    assert.deepEqual(node.dependencies, directRequiredOwners,
+      `${node.id} graph parents must be the minimal feature dependency set`);
+  }
+});
+
+test('one progression catalog binds every node and selects only current work', () => {
+  const definition = compileProgressionDefinitionFile(definitionPath, { trackRoot });
+  const input = compileFeatureCatalogInput(definition);
+  const track = loadTrack('ecommerce');
+  const bindings = [1, 2, 3, 4, 5, 6].map(level => ({
+    level,
+    binding: resolveRecipeRelease(track, level, 'ecommerce.progression-catalog@2.0.2'),
+  }));
+  validateProgressionRecipeBindings(input, bindings);
+  assert.equal(new Set(bindings.map(item => item.binding.release.contentSha256)).size, 1);
+
+  const allFeatureIds = new Set(definition.nodes.flatMap(node => node.featureRefs)
+    .map(reference => reference.slice(0, reference.lastIndexOf('@'))));
+  const firstBinding = bindings[0];
+  const secondBinding = bindings[1];
+  assert(firstBinding && secondBinding, 'progression must bind levels 1 and 2');
+  const release = firstBinding.binding.release;
+  assert([...allFeatureIds].every(id => release.components.packs.some(pack => pack.id === id)));
+  assert(definition.nodes.flatMap(node => node.gradingChecks)
+    .every(check => release.checkCatalog.some(item => item.stableKey === check.id)));
+
+  const policy = compileDependencyPolicyInput({ selection: 'feature',
+    budget: { perFeature: 3 } }, input);
+  let state = progressionEngine.initialize(dependencyRuntimeDefinition(input, policy));
+  const first = resolveProgressionRecipeAction(firstBinding.binding, state);
+  if (first.action.type === 'terminal') throw new Error('L1 must produce work');
+  assert('agent' in first && 'grader' in first, 'L1 must have agent and grader selections');
+  const firstFeatures = definition.nodes.filter(node => node.level === 1)
+    .flatMap(node => node.featureRefs).map(reference => reference.slice(0, reference.lastIndexOf('@')))
+    .sort();
+  assert.equal(first.agent.request.task.mode, 'fresh');
+  assert.deepEqual(first.agent.request.selection.requested.features, firstFeatures);
+  assert.deepEqual([...first.grader.checkKeys].sort(),
+    gradingCheckIds(first.action).sort());
+  assert([...allFeatureIds].filter(id => !firstFeatures.includes(id))
+    .every(id => !first.agent.request.selection.promptPacks.includes(id)));
+
+  const grading = progressionEngine.gradingSelection(state);
+  state = progressionEngine.recordResult(state, {
+    attemptId: 'level-1-pass',
+    outcome: 'conclusive',
+    nodes: grading.nodeIds.map(nodeId => ({
+      id: nodeId,
+      checks: grading.checks.filter(check => check.nodeId === nodeId)
+        .map(check => ({ id: check.id, outcome: 'pass' })),
+    })),
+  });
+  const second = resolveProgressionRecipeAction(secondBinding.binding, state);
+  if (second.action.type === 'terminal') throw new Error('L2 must produce work');
+  assert('agent' in second && 'grader' in second, 'L2 must have agent and grader selections');
+  const secondFeatures = definition.nodes.filter(node => node.level === 2)
+    .flatMap(node => node.featureRefs).map(reference => reference.slice(0, reference.lastIndexOf('@')))
+    .sort();
+  assert.equal(second.action.level, 2);
+  assert.equal(second.agent.request.task.mode, 'upgrade');
+  assert.deepEqual(second.agent.request.selection.requested.features, secondFeatures);
+  assert.deepEqual([...second.grader.checkKeys].sort(),
+    gradingCheckIds(second.action).sort());
+  const futureFeatures = definition.nodes.filter(node => node.level > 2)
+    .flatMap(node => node.featureRefs).map(reference => reference.slice(0, reference.lastIndexOf('@')));
+  assert(futureFeatures.every(id => !second.agent.request.selection.promptPacks.includes(id)));
+
+  const secondGrading = progressionEngine.gradingSelection(state);
+  state = progressionEngine.recordResult(state, {
+    attemptId: 'level-2-account-regression',
+    outcome: 'conclusive',
+    nodes: secondGrading.nodeIds.map(nodeId => ({
+      id: nodeId,
+      checks: secondGrading.checks.filter(check => check.nodeId === nodeId)
+        .map(check => ({ id: check.id, outcome: nodeId === 'accounts' ? 'fail' : 'pass' })),
+    })),
+  });
+  const next = resolveProgressionRecipeAction(firstBinding.binding, state);
+  if (next.action.type === 'terminal') throw new Error('the regression must produce repair work');
+  assert('agent' in next, 'the repair must have an agent selection');
+  assert.equal(next.action.type, 'repair');
+  assert.equal(next.action.level, 1);
+  assert.deepEqual(actionPromptNodeIds(next.action), ['accounts']);
+  assert.equal(next.agent.request.task.mode, 'upgrade');
+  assert.deepEqual(next.agent.request.selection.requested.features,
+    definition.nodes.filter(node => actionPromptNodeIds(next.action).includes(node.id))
+      .flatMap(node => node.featureRefs)
+      .map(reference => reference.slice(0, reference.lastIndexOf('@'))).sort());
+  const repairTarget = resolveProgressionRepairTarget(firstBinding.binding, state);
+  assert.deepEqual(repairTarget.request.selection.requested.features,
+    next.agent.request.selection.requested.features);
+  assert(repairTarget.checkKeys.length > 0);
+  assert(repairTarget.checkKeys.every(check => next.grader.checkKeys.includes(check)));
+  assert(repairTarget.checkKeys.length < next.grader.checkKeys.length);
+});
+
+test('all-at-once composes every selected feature into one fresh request', () => {
+  const definition = compileProgressionDefinitionFile(definitionPath, { trackRoot });
+  const catalog = compileFeatureCatalogInput(definition);
+  const policy = compileDependencyPolicyInput({ selection: 'batch', budget: { total: 1 } },
+    catalog, { workSelection: 'all-at-once' });
+  const state = progressionEngine.initialize(dependencyRuntimeDefinition(catalog, policy));
+  const binding = resolveRecipeRelease(loadTrack('ecommerce'), 6,
+    'ecommerce.progression-catalog@2.0.2');
+  const selected = resolveProgressionRecipeAction(binding, state);
+  if (selected.action.type === 'terminal' || !('agent' in selected)) {
+    throw new Error('all-at-once must produce one build request');
+  }
+  const featureIds = definition.nodes.flatMap(node => node.featureRefs)
+    .map(reference => reference.slice(0, reference.lastIndexOf('@'))).sort();
+  assert.equal(selected.action.level, 6);
+  assert.equal(selected.agent.request.task.mode, 'fresh');
+  assert.deepEqual(selected.agent.request.selection.requested.features, featureIds);
+  assert(selected.agent.task.requirementIds.includes('ecommerce.progression.managed-support'));
+});
+
+test('the current campaign binds the full graph to one catalog across six levels', () => {
+  const plan = compileCampaignFile(join(STACK_BENCH_ROOT, 'appliance',
+    'campaign.ecommerce-progression-reference.json'));
+  assert.deepEqual(plan.definition.levels, [1, 2, 3, 4, 5, 6]);
+  assert(plan.featureCatalog, 'the campaign must compile its feature catalog');
+  assert.equal(plan.featureCatalog.definition.nodes.length, 43);
+  assert.equal(new Set(plan.bindings.map(binding => binding.recipe.contentSha256)).size, 1);
+  const condition = plan.conditions[0];
+  assert(condition, 'the campaign must have a condition');
+  assert(condition.requested.levels.every(level =>
+    typeof level.task.mode === 'string' && ['fresh', 'upgrade'].includes(level.task.mode)));
+});
+
+test('every feature and grading check binds to the progression recipe', () => {
+  const definition = compileProgressionDefinitionFile(definitionPath, { trackRoot });
+  const recipePath = join(trackRoot, 'composition', 'recipes', 'progression-catalog-2.0.2.json');
+  const plan = compileRecipeFile(recipePath, { trackRoot });
+  const release = buildRecipeRelease(recipePath, { trackRoot });
+  const binding: RecipeBinding = {
+    alias: 'ecommerce.progression-catalog@2.0.2',
+    status: 'draft',
+    catalog: { id: plan.recipe.id, version: plan.recipe.version, state: 'draft',
+      title: plan.recipe.title, path: recipePath, sha256: release.contentSha256 },
+    recipePath, plan, release, execution: [],
+  };
+  const levels = [...new Set(definition.nodes.map(node => node.level))].sort((a, b) => a - b);
+  validateProgressionRecipeBindings(compileFeatureCatalogInput(definition),
+    levels.map(level => ({ level, binding })), { levels });
+
+  const owned = new Set(definition.nodes.flatMap(node =>
+    node.gradingChecks.map(check => check.id)));
+  const unowned = plan.checks.filter(check => !owned.has(check.stableKey));
+  assert.deepEqual(unowned.map(check => [check.stableKey, check.points]), [
+    ['ecommerce.spec.external-data-sync.external-stock.901b', 0],
+    ['ecommerce.spec.concurrency-safety.restock-race.202-control', 0],
+  ], 'only zero-point controls may sit outside feature scoring');
+});
+
+test('every feature pack declares a bounded, testable product contract', () => {
+  const definition = compileProgressionDefinitionFile(definitionPath, { trackRoot });
+  const plan = compileRecipeFile(join(trackRoot, 'composition', 'recipes',
+    'progression-catalog-2.0.2.json'), { trackRoot });
+  const featurePacks = plan.packs.filter(pack => pack.moduleType === 'feature');
+  assert.equal(featurePacks.length, definition.nodes.length,
+    'each graph node must own one feature pack');
+  for (const pack of featurePacks) {
+    const at = `${pack.id}@${pack.version}`;
+    assert(pack.capabilities.length > 0, `${at} must declare its required capabilities`);
+    assert(pack.evidence.length > 0, `${at} must declare its required evidence`);
+    assert.equal(pack.budget.status, 'bounded', `${at} must have a bounded runtime`);
+    assert(pack.budget.maxRuntimeMs > 0, `${at} must have a positive runtime limit`);
+  }
+});
+
+test('cross-feature grading requirements stay separate from product dependencies', () => {
+  // A check may need a feature outside its node's ancestry; that is declared
+  // grading scope, never a product edge, and the list is held explicit so it
+  // cannot grow unnoticed.
+  const definition = compileProgressionDefinitionFile(definitionPath, { trackRoot });
+  const nodes = new Map(definition.nodes.map(node => [node.id, node]));
+  const ownerByFeature = new Map(definition.nodes.flatMap(node => node.featureRefs
+    .map(ref => [ref.replace(/@.*$/, ''), node.id] as const)));
+  const ancestors = (nodeId: string, found = new Set([nodeId])): Set<string> => {
+    for (const dependency of nodes.get(nodeId)?.dependencies ?? []) {
+      if (!found.has(dependency)) {
+        found.add(dependency);
+        ancestors(dependency, found);
+      }
+    }
+    return found;
+  };
+  const deferred = definition.nodes.flatMap(node => {
+    const productAncestors = ancestors(node.id);
+    return node.gradingChecks.flatMap(check => (check.requiresFeatures ?? []).flatMap(feature => {
+      const owner = ownerByFeature.get(feature);
+      return owner && !productAncestors.has(owner) ? [`${node.id}:${check.id}:${owner}`] : [];
+    }));
+  }).sort();
+  assert.deepEqual(deferred, [
+    'automatic-reorder:ecommerce.progression.automatic-reorder.automatic-reorder.502a:purchasing',
+    'automatic-reorder:ecommerce.progression.automatic-reorder.automatic-reorder.502b:purchasing',
+    'inventory-dashboard:ecommerce.inventory-operations.operational-views.5e:purchasing',
+    'inventory-dashboard:ecommerce.spec.live-state.inventory-dashboard.5a:purchasing',
+    'price-history:ecommerce.returns-pricing.price-history.4a:purchasing',
+    'price-history:ecommerce.returns-pricing.price-history.4c:checkout',
+    'sales-dashboard:ecommerce.spec.transactional-integrity.books-balance.107a:warehouse-admin',
+    'sales-dashboard:ecommerce.spec.transactional-integrity.books-balance.107b:warehouse-admin',
+    'stock-transfers:ecommerce.inventory-operations.stock-conservation.202d:purchasing',
+  ]);
+});
+
+interface AuthoredNode {
+  id: string;
+  featureRefs: string[];
+  gradingGroups: string[];
+  dependencies: Array<{ id: string; reason: string }>;
+}
+
+const authoredDefinition = (): { nodes: AuthoredNode[] } =>
+  JSON.parse(readFileSync(definitionPath, 'utf8')) as { nodes: AuthoredNode[] };
+
+test('the authored graph rejects test-driven edges, missing packs, and stray ownership', async t => {
+  const cases: Array<[string, (input: { nodes: AuthoredNode[] }) => void, RegExp]> = [
+    ['a test-driven product edge', input => {
+      const dashboard = input.nodes.find(node => node.id === 'inventory-dashboard');
+      assert.ok(dashboard);
+      dashboard.dependencies.push({ id: 'purchasing', reason: 'A grading scenario uses purchase data.' });
+    }, /inventory-dashboard\.dependencies: must equal minimal product dependencies: warehouse-admin/],
+    ['a missing product dependency', input => {
+      const purchasing = input.nodes.find(node => node.id === 'purchasing');
+      assert.ok(purchasing);
+      purchasing.dependencies = purchasing.dependencies.filter(dependency => dependency.id !== 'accounts');
+    }, /purchasing\.dependencies: must equal minimal product dependencies: accounts, catalog/],
+    ['an unnecessary product dependency', input => {
+      const reviews = input.nodes.find(node => node.id === 'reviews');
+      assert.ok(reviews);
+      reviews.dependencies.push({ id: 'accounts', reason: 'A grading scenario uses a customer.' });
+    }, /reviews\.dependencies: must equal minimal product dependencies: purchasing/],
+    ['a missing feature pack', input => {
+      input.nodes[0]!.featureRefs = ['ecommerce.missing@1.0.0'];
+    }, /missing pack/],
+    ['a missing grading group', input => {
+      input.nodes[0]!.gradingGroups[0] = 'ecommerce.feature.accounts@1.1.0#missing';
+    }, /missing group/],
+    ['feature checks omitted from their owner', input => {
+      input.nodes[0]!.gradingGroups = input.nodes[0]!.gradingGroups
+        .filter(reference => !reference.endsWith('#account-create'));
+    }, /must own feature group/],
+    ['a group owned twice', input => {
+      input.nodes[1]!.gradingGroups.push(input.nodes[0]!.gradingGroups[0]!);
+    }, /already owned/],
+    ['a feature reference whose version differs from its grading group', input => {
+      const reviews = input.nodes.find(node => node.id === 'reviews');
+      assert.ok(reviews);
+      reviews.featureRefs = ['ecommerce.feature.reviews@1.1.0'];
+    }, /must own feature group ecommerce\.feature\.reviews@1\.1\.0#reviews/],
+  ];
+  for (const [name, mutate, expected] of cases) {
+    await t.test(name, () => {
+      const input = authoredDefinition();
+      mutate(input);
+      assert.throws(() => compileProgressionDefinition(input, { trackRoot }), expected);
+    });
+  }
+});
+
+function requiredNode(
+  nodes: ReadonlyMap<string, CompiledProgressionNode>,
+  nodeId: string,
+): CompiledProgressionNode {
+  const node = nodes.get(nodeId);
+  if (!node) throw new Error(`progression node ${nodeId} is required`);
+  return node;
+}
+
+function gradingCheckIds(action: ProgressionWorkAction): string[] {
+  if (!isRecord(action.grading) || !Array.isArray(action.grading.checks)) {
+    throw new Error('progression work must have grading checks');
+  }
+  return action.grading.checks.map((check, index) => {
+    if (!isRecord(check) || typeof check.id !== 'string') {
+      throw new Error(`progression grading check ${index} must have an id`);
+    }
+    return check.id;
+  });
+}
+
+function actionPromptNodeIds(action: ProgressionWorkAction): string[] {
+  if (!isRecord(action.prompt) || !Array.isArray(action.prompt.nodeIds)
+    || !action.prompt.nodeIds.every(id => typeof id === 'string')) {
+    throw new Error('progression work must have prompt node ids');
+  }
+  return action.prompt.nodeIds;
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
diff --git a/tools/stack-bench/tests/element-selector.test.ts b/tools/stack-bench/tests/element-selector.test.ts
new file mode 100644
index 00000000000..adae0eec9cc
--- /dev/null
+++ b/tools/stack-bench/tests/element-selector.test.ts
@@ -0,0 +1,10 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { stableElementSelector } from '../src/actions/element-selector.js';
+
+test('stable selectors support application interface names', () => {
+  assert.equal(stableElementSelector('account-name'),
+    '[data-role="account-name"],#account-name');
+  assert.throws(() => stableElementSelector('account name'), /invalid application interface name/);
+});
diff --git a/tools/stack-bench/tests/engine-identity.contract.ts b/tools/stack-bench/tests/engine-identity.contract.ts
new file mode 100644
index 00000000000..d23bbef8069
--- /dev/null
+++ b/tools/stack-bench/tests/engine-identity.contract.ts
@@ -0,0 +1,65 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import { cpSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, relative } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+function currentIdentity(root: string): unknown {
+  const artifactsUrl = pathToFileURL(join(root, 'dist', 'src', 'evidence', 'artifacts.js')).href;
+  const result = spawnSync(process.execPath, ['--input-type=module', '--eval',
+    `import { currentEngineIdentity } from ${JSON.stringify(artifactsUrl)}; console.log(JSON.stringify(currentEngineIdentity()));`],
+  { cwd: root, encoding: 'utf8' });
+  assert.equal(result.status, 0, result.stderr);
+  return JSON.parse(result.stdout ?? '');
+}
+
+function writableEngineRoot(): { temp: string; root: string } {
+  const temp = mkdtempSync(join(tmpdir(), 'stack-bench-engine-'));
+  const root = join(temp, 'stack-bench');
+  const excluded = new Set(['archive', 'local-notes', 'media', 'node_modules',
+    'qualification-evidence', 'reference-apps', 'results', 'tests', 'tracks', 'transcripts']);
+  cpSync(STACK_BENCH_ROOT, root, { recursive: true, filter: source => {
+    if (source === STACK_BENCH_ROOT) return true;
+    return !excluded.has(relative(STACK_BENCH_ROOT, source).split(/[\\/]/)[0] ?? '');
+  } });
+  mkdirSync(join(root, 'node_modules'), { recursive: true });
+  cpSync(join(STACK_BENCH_ROOT, 'node_modules', 'zod'), join(root, 'node_modules', 'zod'),
+    { recursive: true });
+  return { temp, root };
+}
+
+test('engine identity excludes generated and local-only files', () => {
+  const copy = writableEngineRoot();
+  const before = currentIdentity(copy.root);
+  try {
+    const root = copy.root;
+    const runtime = mkdtempSync(join(root, '.engine-runtime-'));
+    writeFileSync(join(runtime, 'generated.mjs'), 'generated runtime state\n');
+    writeFileSync(join(runtime, 'session.json'), '{"turns":999}\n');
+    const nested = join(root, 'grader', '.generated');
+    mkdirSync(nested, { recursive: true });
+    writeFileSync(join(nested, 'candidate.mjs'), 'generated candidate\n');
+    writeFileSync(join(root, 'grader', '.generated-report.json'), '{"generated":true}\n');
+
+    for (const directory of ['archive', 'local-notes', 'media', 'qualification-evidence',
+      'transcripts']) {
+      const path = join(root, directory);
+      mkdirSync(path, { recursive: true });
+      writeFileSync(join(path, 'generated.json'), '{"generated":true}\n');
+    }
+    writeFileSync(join(root, 'dependency-manifest.json'), '{"schemaVersion":1}\n');
+
+    const path = join(root, 'grader', 'node_modules', 'generated-package');
+    mkdirSync(path, { recursive: true });
+    writeFileSync(join(path, 'index.js'), 'installed dependency\n');
+    writeFileSync(join(path, 'package.json'), '{"name":"generated-package"}\n');
+
+    assert.deepEqual(currentIdentity(root), before);
+  } finally {
+    rmSync(copy.temp, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/evidence-timing.test.ts b/tools/stack-bench/tests/evidence-timing.test.ts
new file mode 100644
index 00000000000..9fbaaa1b7f4
--- /dev/null
+++ b/tools/stack-bench/tests/evidence-timing.test.ts
@@ -0,0 +1,13 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { evidenceNowMs } from '../src/evidence/evidence-timing.js';
+
+test('evidence timestamps are epoch-shaped integers and never move backwards', () => {
+  const first = evidenceNowMs();
+  const second = evidenceNowMs();
+
+  assert(Number.isInteger(first));
+  assert(first > 1_000_000_000_000);
+  assert(second >= first);
+});
diff --git a/tools/stack-bench/tests/external-data-sync.mutation.ts b/tools/stack-bench/tests/external-data-sync.mutation.ts
new file mode 100644
index 00000000000..4bfeb9d2956
--- /dev/null
+++ b/tools/stack-bench/tests/external-data-sync.mutation.ts
@@ -0,0 +1,314 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import ts from 'typescript';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compilePackDefinition } from '../src/composition/composition-compiler.js';
+import { compileScenarioDefinition, type CompiledCriterion, type CompiledFeature }
+  from '../src/composition/definition-compiler.js';
+import { mutationFileEdits, mutationScenario, readMutationManifest,
+  validateMutationDefinitions, type LoadedMutationDefinition,
+  type LoadedMutationManifest, type MutationFileEdit }
+  from '../src/evidence/mutation-analysis.js';
+import { loadReferenceRegistry, prepareReferenceFixtureSource,
+  selectReferenceFixture, type ReferenceFixtureSelector }
+  from '../src/references/reference-fixtures.js';
+import { buildRecipeRelease } from '../src/composition/recipe-release.js';
+import { selectScenarioChecks } from '../src/composition/recipe-selection.js';
+
+const ROOT = STACK_BENCH_ROOT;
+const LIVE_SCENARIO = 'tracks/ecommerce/scenarios/01-external-live-sync-1.1.0.json';
+const RELOAD_SCENARIO = 'tracks/ecommerce/scenarios/01-external-reload-sync-1.1.0.json';
+const RESTART_SCENARIO = 'tracks/ecommerce/scenarios/01-external-server-restart-sync-1.1.0.json';
+const RECONNECT_SCENARIO = 'tracks/ecommerce/scenarios/01-external-reconnect-sync-1.1.0.json';
+const PACK = 'tracks/ecommerce/composition/packs/spec-external-data-sync-1.1.0.json';
+const registry = loadReferenceRegistry();
+
+function prepareReferenceSource(args: ReferenceFixtureSelector & { app: string }) {
+  const fixture = selectReferenceFixture(loadReferenceRegistry(), args);
+  const prepared = prepareReferenceFixtureSource(fixture, args.app);
+  return { fixture, sourceSha256: prepared.sha256 };
+}
+
+interface ExternalSyncCase {
+  backend: string;
+  fixtureSha256: string;
+  mutations: Array<[id: string, scenario: string, targets: string[]]>;
+}
+
+const cases: ExternalSyncCase[] = [
+  {
+    backend: 'mongodb',
+    fixtureSha256: 'feeaf484f5c5d2eae6f61b192e3e50b0a7e6da85e2f761685e33261708acf8c6',
+    mutations: [
+      ['external-stock-polling-disabled', LIVE_SCENARIO, ['ecommerce.spec.external-data-sync.external-stock.901a']],
+      ['server-restart-disables-catalog-recovery', RESTART_SCENARIO, ['ecommerce.spec.external-data-sync.external-stock.901c']],
+      ['reconnect-generation-ignores-current-catalog', RECONNECT_SCENARIO, ['ecommerce.spec.external-data-sync.external-stock.901d']],
+    ],
+  },
+  {
+    backend: 'postgres',
+    fixtureSha256: 'e461967ff8b99394c278e6d382e455a7fc3086c88016543fa668baf808baec0d',
+    mutations: [
+      ['external-stock-polling-disabled', LIVE_SCENARIO, ['ecommerce.spec.external-data-sync.external-stock.901a']],
+      ['server-restart-does-not-resynchronize-catalog', RESTART_SCENARIO, ['ecommerce.spec.external-data-sync.external-stock.901c']],
+      ['reconnect-does-not-send-current-catalog', RECONNECT_SCENARIO, ['ecommerce.spec.external-data-sync.external-stock.901d']],
+    ],
+  },
+  {
+    backend: 'spacetime',
+    fixtureSha256: '58a193d61e02eac8e2c4801dc4cefb78db42468515a452a17e2544f2132148ce',
+    mutations: [
+      ['stock-subscription-snapshotted-once', LIVE_SCENARIO, ['ecommerce.spec.external-data-sync.external-stock.901a']],
+      ['stock-view-ignores-update-across-app-server-stop', RESTART_SCENARIO, ['ecommerce.spec.external-data-sync.external-stock.901c']],
+      ['stock-view-keeps-pre-reconnect-snapshot', RECONNECT_SCENARIO, ['ecommerce.spec.external-data-sync.external-stock.901d']],
+    ],
+  },
+];
+
+function json(relative: string): unknown {
+  return JSON.parse(readFileSync(join(ROOT, relative), 'utf8'));
+}
+
+test('external synchronization scenarios are focused and state-independent', () => {
+  const live = compileScenarioDefinition(json(LIVE_SCENARIO), {
+    source: LIVE_SCENARIO,
+    expectedLevel: 1,
+  });
+  const reconnect = compileScenarioDefinition(json(RECONNECT_SCENARIO), {
+    source: RECONNECT_SCENARIO,
+    expectedLevel: 1,
+  });
+  const reload = compileScenarioDefinition(json(RELOAD_SCENARIO), {
+    source: RELOAD_SCENARIO,
+    expectedLevel: 1,
+  });
+  const restart = compileScenarioDefinition(json(RESTART_SCENARIO), {
+    source: RESTART_SCENARIO,
+    expectedLevel: 1,
+  });
+
+  const liveFeature = requiredFeature(live.features[0], LIVE_SCENARIO);
+  const reconnectFeature = requiredFeature(reconnect.features[0], RECONNECT_SCENARIO);
+  const reloadFeature = requiredFeature(reload.features[0], RELOAD_SCENARIO);
+  const restartFeature = requiredFeature(restart.features[0], RESTART_SCENARIO);
+  const liveCriterion = requiredCriterion(liveFeature.criteria[0], LIVE_SCENARIO);
+  const reconnectCriterion = requiredCriterion(reconnectFeature.criteria[0], RECONNECT_SCENARIO);
+  const reloadCriterion = requiredCriterion(reloadFeature.criteria[0], RELOAD_SCENARIO);
+  const restartCriterion = requiredCriterion(restartFeature.criteria[0], RESTART_SCENARIO);
+
+  assert.deepEqual(liveFeature.criteria.map(criterion => criterion.id), ['901a']);
+  assert.deepEqual(liveCriterion.steps.map(step => step.do),
+    ['dbSetStock', 'expectNumber']);
+  assert.equal(liveCriterion.points, 1,
+    'the candidate source and explicit recipe score must agree');
+  assert.deepEqual(reloadCriterion.steps.map(step => step.do),
+    ['dbSetStock', 'reload', 'expectNumber']);
+  assert.equal(reloadCriterion.points, 0,
+    'reload persistence is supporting evidence, not a second score');
+
+  const reconnectSteps = reconnectCriterion.steps;
+  assert.deepEqual(reconnectSteps.map(step => step.do),
+    ['setOffline', 'dbSetStock', 'setOffline', 'expectNumber']);
+  const disconnectedWrite = reconnectSteps[1];
+  const reconnectResult = reconnectSteps.at(-1);
+  assert(disconnectedWrite && reconnectResult, 'reconnect checks must contain their boundary steps');
+  assert.equal(disconnectedWrite.settleMs, 4000,
+    'the external write must remain inside the disconnected window before network restoration');
+  assert.equal(reconnectResult.equals, 52,
+    'East 7 + untouched West 45 must not depend on the server-restart scenario');
+  assert.equal(reconnectSteps.some(step => ['startAppServer', 'stopAppServer'].includes(step.do)), false);
+  assert.equal(reconnectCriterion.points, 1,
+    'the candidate source and explicit recipe score must agree');
+
+  const restartSteps = restartCriterion.steps;
+  assert.deepEqual(restartSteps.map(step => step.do),
+    ['stopAppServer', 'dbSetStock', 'startAppServer', 'expectNumber']);
+  const restartResult = restartSteps.at(-1);
+  assert(restartResult, 'restart checks must contain a final result');
+  assert.equal(restartResult.equals, 65,
+    'untouched East 55 + West 10 must not depend on the live-sync scenario');
+  assert.equal(restartCriterion.points, 1,
+    'the previously promoted server-restart score must be preserved');
+});
+
+test('the qualified pack preserves the existing stable check identities', () => {
+  const pack = compilePackDefinition(json(PACK), { source: PACK });
+  assert.equal(pack.state, 'qualified');
+  assert.deepEqual(pack.checks.map(check => [check.id, check.stableId, check.criteria]), [
+    ['external-live', 'external-stock', ['901a']],
+    ['external-reload', 'external-stock', ['901b']],
+    ['external-server-restart', 'external-stock', ['901c']],
+    ['external-reconnect', 'external-stock', ['901d']],
+  ]);
+});
+
+test('901b is independently selectable from the current L1 recipe', () => {
+  const release = buildRecipeRelease(join(ROOT, 'tracks', 'ecommerce', 'composition', 'recipes',
+    'sequential-l1-2.5.0.json'));
+  const key = 'ecommerce.spec.external-data-sync.external-stock.901b';
+  const check = release.checkCatalog.find(candidate => candidate.stableKey === key);
+  assert(check, `${key} must exist in the release`);
+  assert.equal(check.source, 'scenarios/01-external-reload-sync-1.1.0.json');
+  assert.equal(check.points, 0);
+  const reloadScenario = compileScenarioDefinition(json(RELOAD_SCENARIO), {
+    source: RELOAD_SCENARIO,
+    expectedLevel: 1,
+  });
+  const selected = selectScenarioChecks(reloadScenario, { checks: release.checkCatalog }, [key]);
+  const feature = requiredFeature(selected.features[0], RELOAD_SCENARIO);
+  const criterion = requiredCriterion(feature.criteria[0], RELOAD_SCENARIO);
+  const setup = feature.setup[0];
+  assert(setup, 'the selected reload scenario must have setup');
+  assert.deepEqual(feature.criteria.map(item => item.id), ['901b']);
+  assert.equal(setup.equals, 100);
+  assert.deepEqual(criterion.steps.map(step => step.do),
+    ['dbSetStock', 'reload', 'expectNumber']);
+});
+
+for (const entry of cases) {
+  test(`${entry.backend} external-sync mutations are exact and fixture-bound`, () => {
+    const manifest = manifestFor(entry.backend);
+    const work = mkdtempSync(join(tmpdir(), `stack-bench-external-sync-${entry.backend}-`));
+    try {
+      const app = join(work, 'app');
+      const prepared = prepareReferenceSource({
+        backend: entry.backend,
+        track: 'ecommerce',
+        level: 1,
+        recipe: 'ecommerce.sequential-l1@2.5.0',
+        app,
+      });
+      assert.equal(prepared.fixture.id, `ecommerce-reference-${entry.backend}`);
+      assert.equal(prepared.sourceSha256, entry.fixtureSha256);
+      assert.equal(manifest.fixtureSha256, prepared.sourceSha256);
+      assert.deepEqual(validateMutationDefinitions(manifest.mutations, {
+        defaultScenario: manifest.scenario,
+        requireScenario: true,
+      }).issues, []);
+      const mutations = manifest.mutations.filter(mutation =>
+        mutation.targets.some(key =>
+          key.startsWith('ecommerce.spec.external-data-sync.external-stock.901')));
+      assert.deepEqual(mutations.map(mutation => [
+        mutation.id,
+        mutationScenario(manifest, mutation),
+        mutation.targets,
+      ]), entry.mutations);
+      assert.equal(mutations.some(mutation =>
+        mutation.targets.includes('ecommerce.spec.external-data-sync.external-stock.901b')), false,
+      'supporting reload evidence must not acquire a synthetic mutant');
+
+      for (const mutation of mutations) {
+        const edits = mutationFileEdits(mutation);
+        assert(edits.length > 0, `${mutation.id} must contain edits`);
+        const file = requiredMutationFile(mutation);
+        const source = readFileSync(join(app, file), 'utf8');
+        for (const edit of edits) {
+          assert.equal(source.split(edit.find).length - 1, 1,
+            `${mutation.id} anchor must match exactly once`);
+        }
+        const mutated = edits
+          .reduce((value, edit) => value.replace(edit.find, edit.replace), source);
+        for (const edit of edits) {
+          assert.equal(mutated.includes(edit.find), false,
+            `${mutation.id} must remove its correct behavior`);
+          assert.equal(mutated.includes(edit.replace), true,
+            `${mutation.id} must install its declared defect`);
+        }
+        const transpiled = ts.transpileModule(mutated, {
+          compilerOptions: {
+            jsx: ts.JsxEmit.ReactJSX,
+            module: ts.ModuleKind.ESNext,
+            target: ts.ScriptTarget.ES2022,
+          },
+          fileName: file,
+          reportDiagnostics: true,
+        });
+        assert.deepEqual((transpiled.diagnostics ?? [])
+          .filter(diagnostic => diagnostic.category === ts.DiagnosticCategory.Error)
+          .map(diagnostic => ts.flattenDiagnosticMessageText(diagnostic.messageText, '\n')), []);
+      }
+    } finally {
+      rmSync(work, { recursive: true, force: true });
+    }
+  });
+}
+
+test('MongoDB reconnect calibration freezes both catalog recovery paths only after going offline', () => {
+  const manifest = manifestFor('mongodb');
+  const mutation = requiredMutation(manifest, manifest.mutations.find(candidate =>
+    candidate.id === 'reconnect-generation-ignores-current-catalog'));
+  assert.deepEqual(mutation.targets, ['ecommerce.spec.external-data-sync.external-stock.901d']);
+  assert.equal(mutation.file, 'client/src/App.tsx');
+  const edits = mutationFileEdits(mutation);
+  assert.equal(edits.length, 3);
+  assert.match(requiredEdit(edits[0], mutation.id).replace, /addEventListener\("offline"/);
+  assert.match(requiredEdit(edits[1], mutation.id).replace, /acceptCatalogUpdates\.current/);
+  assert.match(requiredEdit(edits[2], mutation.id).replace, /acceptCatalogUpdates\.current/);
+});
+
+test('PostgreSQL reconnect calibration freezes catalog updates only after the offline boundary', () => {
+  const manifest = manifestFor('postgres');
+  const mutation = requiredMutation(manifest, manifest.mutations.find(candidate =>
+    candidate.id === 'reconnect-does-not-send-current-catalog'));
+  assert.deepEqual(mutation.targets, ['ecommerce.spec.external-data-sync.external-stock.901d']);
+  assert.equal(mutation.file, 'client/src/App.tsx');
+  const edits = mutationFileEdits(mutation);
+  assert.match(requiredEdit(edits[0], mutation.id).replace, /addEventListener\("offline"/);
+  assert.match(requiredEdit(edits[1], mutation.id).replace, /acceptCatalogUpdates\.current/);
+});
+
+test('SpacetimeDB reconnect calibration preserves the last online stock snapshot', () => {
+  const manifest = manifestFor('spacetime');
+  const mutation = requiredMutation(manifest, manifest.mutations.find(candidate =>
+    candidate.id === 'stock-view-keeps-pre-reconnect-snapshot'));
+  const replacement = requiredEdit(mutationFileEdits(mutation).at(-1), mutation.id).replace;
+  assert.deepEqual(mutation.targets, ['ecommerce.spec.external-data-sync.external-stock.901d']);
+  assert.equal(mutation.file, 'client/src/App.tsx');
+  assert.match(replacement, /addEventListener\('offline'/);
+  assert.match(replacement, /lastOnlineStocks\.current = liveStocks/);
+  assert.match(replacement, /freezeStockAfterOffline \? lastOnlineStocks\.current/);
+});
+
+function manifestFor(backend: string): LoadedMutationManifest {
+  const fixture = registry.fixtures.find(candidate =>
+    candidate.track === 'ecommerce' && candidate.backend === backend);
+  assert.equal(fixture?.mutationManifests?.length, 1);
+  const manifestPath = fixture?.mutationManifests?.[0];
+  assert(manifestPath);
+  return readMutationManifest(join(ROOT, manifestPath));
+}
+
+function requiredMutation(
+  manifest: LoadedMutationManifest,
+  mutation: LoadedMutationDefinition | undefined,
+): LoadedMutationDefinition {
+  if (!mutation) throw new Error(`${manifest.backend} reconnect mutation is required`);
+  return mutation;
+}
+
+function requiredMutationFile(mutation: LoadedMutationDefinition): string {
+  if (!mutation.file) throw new Error(`${mutation.id} must have a default file`);
+  return mutation.file;
+}
+
+function requiredEdit(edit: MutationFileEdit | undefined, mutationId: string): MutationFileEdit {
+  if (!edit) throw new Error(`${mutationId} must contain the expected edit`);
+  return edit;
+}
+
+function requiredFeature(feature: CompiledFeature | undefined, source: string): CompiledFeature {
+  if (!feature) throw new Error(`${source} must contain a feature`);
+  return feature;
+}
+
+function requiredCriterion(
+  criterion: CompiledCriterion | undefined,
+  source: string,
+): CompiledCriterion {
+  if (!criterion) throw new Error(`${source} must contain a criterion`);
+  return criterion;
+}
diff --git a/tools/stack-bench/tests/feature-catalog-selection.contract.ts b/tools/stack-bench/tests/feature-catalog-selection.contract.ts
new file mode 100644
index 00000000000..88b532974b4
--- /dev/null
+++ b/tools/stack-bench/tests/feature-catalog-selection.contract.ts
@@ -0,0 +1,39 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { loadTrack } from '../src/composition/tracks.js';
+import { resolveFeatureCatalog } from '../src/progression/feature-catalog-selection.js';
+import { compileFeatureCatalogInput } from '../src/progression/progression-definition.js';
+
+test('feature catalogs resolve by exact identity', () => {
+  const catalog = resolveFeatureCatalog('ecommerce.questlines@2.0.2', loadTrack('ecommerce'));
+  assert.equal(catalog.definition.id, 'ecommerce.questlines');
+  assert.equal(catalog.definition.version, '2.0.2');
+  assert.equal(catalog.definition.nodes.length, 43);
+  assert.throws(() => resolveFeatureCatalog('ecommerce.questlines', loadTrack('ecommerce')),
+    /exact id@version/);
+  assert.throws(() => resolveFeatureCatalog('ecommerce.missing@1.0.0', loadTrack('ecommerce')),
+    /resolve exactly one/);
+});
+
+test('feature catalog identity excludes root governance text only', () => {
+  const catalog = resolveFeatureCatalog('ecommerce.questlines@2.0.2', loadTrack('ecommerce'));
+  const governance = compileFeatureCatalogInput({
+    ...catalog.definition,
+    state: catalog.definition.state === 'draft' ? 'qualified' : 'draft',
+    title: `${catalog.definition.title} renamed`,
+  });
+  assert.equal(governance.identity.sha256, catalog.identity.sha256);
+
+  const nodeTitle = structuredClone(catalog.definition);
+  nodeTitle.nodes[0]!.title += ' renamed';
+  assert.notEqual(compileFeatureCatalogInput(nodeTitle).identity.sha256, catalog.identity.sha256);
+
+  const questlineTitle = structuredClone(catalog.definition);
+  questlineTitle.questlines[0]!.title += ' renamed';
+  assert.notEqual(compileFeatureCatalogInput(questlineTitle).identity.sha256, catalog.identity.sha256);
+
+  const behavior = structuredClone(catalog.definition);
+  behavior.nodes[0]!.gradingChecks[0]!.points += 1;
+  assert.notEqual(compileFeatureCatalogInput(behavior).identity.sha256, catalog.identity.sha256);
+});
diff --git a/tools/stack-bench/tests/fixtures/crash-agent.ts b/tools/stack-bench/tests/fixtures/crash-agent.ts
new file mode 100644
index 00000000000..e22f98ba4e4
--- /dev/null
+++ b/tools/stack-bench/tests/fixtures/crash-agent.ts
@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+// Enter a partial Docker restart, then fail to test owned-resource cleanup.
+
+import { execFileSync } from 'node:child_process';
+import { mkdirSync, renameSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { publicBackendLease, readBackendLease } from '../../src/runtime/backend-lease.js';
+import { compiledEntrypoint } from '../../src/package-root.js';
+import { controlSpacetime } from '../../src/stacks/spacetime-lifecycle.js';
+const args: Record<string, string | undefined> = {};
+for (let i = 2; i < process.argv.length; i += 2) {
+  const option = process.argv[i];
+  if (option) args[option.replace(/^--/, '')] = process.argv[i + 1];
+}
+
+const app = args.app;
+const backend = args.backend;
+if (!app || !backend) throw new Error('fault-agent requires --app and --backend');
+if (backend !== 'spacetime') throw new Error('fault-agent supports only the spacetime backend');
+const leasePath = process.env.STACK_BENCH_LEASE ?? '';
+const leaseToken = process.env.STACK_BENCH_LEASE_TOKEN ?? '';
+if (!leasePath || !leaseToken) throw new Error('fault-agent requires an active backend lease');
+mkdirSync(app, { recursive: true });
+// Match the real agent's build-mode pin. Teardown must know that any app
+// watchers live inside Docker before it considers host process cleanup.
+writeFileSync(join(app, '..', '.stack-bench-isolation'), 'container');
+
+execFileSync(process.execPath,
+  [compiledEntrypoint('container', 'run-build.js'), '--app', app,
+    '--backend', backend, '--prepare-only'],
+  { stdio: 'pipe', maxBuffer: 16 * 1024 * 1024 });
+const beforeRestart = readBackendLease(leasePath, {
+  token: leaseToken, backend, active: true,
+});
+
+// Enter the real restart path's most dangerous partial state: the old owned
+// listener is gone, the lease is `restarting`, and the replacement has not yet
+// started. The test hook fails at that exact boundary.
+let restartStopped = false;
+let restartFailure = '';
+process.env.STACK_BENCH_TEST_FAIL_AFTER_RESTART_STOP = '1';
+try {
+  await controlSpacetime({ lease: beforeRestart });
+} catch (error: unknown) {
+  const failure = error instanceof Error ? error as Error & { code?: string } : null;
+  restartStopped = failure?.code === 'injected_restart_stop_failure';
+  restartFailure = failure?.message ?? String(error);
+} finally {
+  delete process.env.STACK_BENCH_TEST_FAIL_AFTER_RESTART_STOP;
+}
+if (!restartStopped) throw new Error(
+  `restart fault hook did not stop at the expected boundary (${restartFailure || 'restart exited zero'})`);
+const lease = readBackendLease(leasePath, {
+  token: leaseToken, backend,
+});
+if (lease.state !== 'restarting') throw new Error(`expected restarting lease, got ${lease.state}`);
+const marker = join(app, '.fault-ready.json');
+const temporary = `${marker}.${process.pid}.tmp`;
+writeFileSync(temporary, `${JSON.stringify({ phase: 'restart-stopped', leasePath,
+  lease: publicBackendLease(lease) }, null, 2)}\n`);
+renameSync(temporary, marker);
+
+// An ordinary non-zero child exit exercises the same finally/exit cleanup path
+// as an unexpected coding-agent failure and works on Windows, where Node maps
+// SIGTERM to TerminateProcess and cannot run JavaScript signal handlers.
+process.exit(42);
diff --git a/tools/stack-bench/tests/fixtures/dashboard-fixture.ts b/tools/stack-bench/tests/fixtures/dashboard-fixture.ts
new file mode 100644
index 00000000000..36a5777a70c
--- /dev/null
+++ b/tools/stack-bench/tests/fixtures/dashboard-fixture.ts
@@ -0,0 +1,205 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+import { ARTIFACT_FILE, emptyArtifactIdentities, writeArtifact } from '../../src/evidence/artifacts.js';
+import { claimNextAttempt, createCampaignState, finishCampaignExecution }
+  from '../../src/campaigns/campaign-scheduler.js';
+import type { CampaignState } from '../../src/campaigns/campaign-scheduler.js';
+import { compileCampaignFile } from '../../src/campaigns/campaign-compiler.js';
+import type { CampaignAttemptPlan, CompiledCampaignPlan }
+  from '../../src/campaigns/campaign-compiler.js';
+import { compileProgressionInput, dependencyRuntimeDefinition }
+  from '../../src/progression/progression-definition.js';
+import { createCheckEvidence } from '../../src/evidence/check-evidence.js';
+import { hashDirectory } from '../../src/evidence/provenance.js';
+import { progressionEngine } from '../../src/progression/progression-engine.js';
+import { writeProgressionState } from '../../src/progression/progression-state.js';
+import type { ProgressionState } from '../../src/progression/progression-state.js';
+import { STACK_BENCH_ROOT } from '../../src/package-root.js';
+
+// The results trees the dashboard tests and the screenshot script read: a
+// sequential week at appliance scale, and one dependency campaign whose
+// progression state carries builds, repairs and a failure.
+
+export const EXAMPLE_CAMPAIGN = join(STACK_BENCH_ROOT, 'appliance', 'campaign.example.json');
+export const DEPENDENCY_CAMPAIGN = join(STACK_BENCH_ROOT, 'appliance',
+  'campaign.ecommerce-progression-reference.json');
+
+export function writeCampaign(root: string, plan: CompiledCampaignPlan, state: CampaignState): void {
+  mkdirSync(root, { recursive: true });
+  writeArtifact(join(root, 'plan.json'), { kind: 'campaign_plan', id: `${plan.id}-plan`,
+    identities: emptyArtifactIdentities(), payload: plan });
+  writeArtifact(join(root, 'state.json'), { kind: 'campaign_state', id: `${plan.id}-state`,
+    identities: emptyArtifactIdentities(), payload: state });
+}
+
+// A results tree the size of a real appliance week: thirty campaigns, nine
+// attempts each, with the artifacts the views actually read.
+export const FIXTURE_CAMPAIGNS = 30;
+
+export function writeRunEvidence(output: string, plan: CompiledCampaignPlan,
+  attempt: CampaignAttemptPlan, deficit: number): void {
+  const agent = plan.agents.find(item => item.adapter === attempt.agentAdapter)!;
+  const stack = plan.stacks.find(item => item.id === attempt.stack)!;
+  const selection = structuredClone(attempt.condition.requested.levels
+    .find(item => item.level === 1)!.selection) as { sha256: string;
+      scoredPoints: number; scoredChecks?: Array<{ stableKey: string; points: number }> };
+  const max = selection.scoredPoints;
+  const score = max;
+  const outcome = { kind: 'passed', inconclusive: [], harnessFailures: [] };
+  const firstOutcome = { kind: 'app_failure', phase: 'grading', reason: null,
+    appFailures: [], inconclusive: [], harnessFailures: [] };
+  const source = join(output, 'source');
+  mkdirSync(source, { recursive: true });
+  writeFileSync(join(source, 'app.js'), 'export const ready = true;\n');
+  const checks = selection.scoredChecks ?? [];
+  const checkKeys = checks.map(check => check.stableKey);
+  const evidence = createCheckEvidence({ status: 'passed', code: 'completed',
+    phase: 'assertion', startedAtMs: 1, completedAtMs: 2 });
+  writeArtifact(join(output, 'grading', 'bundle.json'), {
+    kind: 'grade_bundle', id: `${attempt.id}-grade-l1`, payload: {
+      observation: 'scored', source: { sha256: hashDirectory(source).sha256 },
+      suites: { fixture: { features: [{ id: 'fixture', name: 'Fixture',
+        setupEvidence: createCheckEvidence({ status: 'passed', code: 'completed',
+          phase: 'setup', startedAtMs: 1, completedAtMs: 2 }),
+        criteria: checks.map(check => ({ id: check.stableKey, stableKey: check.stableKey,
+          desc: check.stableKey, points: check.points, evidence })) }] } },
+      totals: { score, max },
+      selection: { sha256: selection.sha256, checks, attemptedChecks: checkKeys,
+        reportedChecks: checkKeys, notRun: [] },
+    },
+  });
+  writeArtifact(join(output, 'run.json'), { kind: 'benchmark_run', id: `${attempt.id}-run`,
+    attempt: { id: `${attempt.id}-run`, parentId: attempt.id },
+    identities: emptyArtifactIdentities({ engine: plan.identities.engine,
+      experiment: { id: plan.id, version: plan.version, sha256: plan.contentSha256,
+        state: plan.state },
+      agentAdapter: agent.identity, stackAdapter: stack }),
+    payload: {
+      mode: attempt.mode, track: plan.definition.track, backend: attempt.stack,
+      model: attempt.model, pricing: attempt.pricing, guidance: attempt.guidance,
+      condition: attempt.condition, selectionRequest: plan.definition.selection,
+      featureCatalog: attempt.featureCatalog ?? null,
+      dependencyPolicy: attempt.dependencyPolicy ?? null, progressionOwner: null,
+      skills: attempt.skills, runtime: { buildImage: plan.definition.runtime.buildImage },
+      totals: { score, max, costUsd: 1.25, costComplete: true, durationSec: 900 },
+      levels: [{ level: 1, graded: true, selection, score, max, repairs: 3,
+        firstBuild: { score: score - deficit, max, outcome: firstOutcome },
+        repair: { status: 'corrected', limit: 3, used: 3, stopReason: null },
+        durationSec: 900, buildCostUsd: 1.25, outcome }],
+      outcome: { kind: 'passed' },
+    } });
+  writeFileSync(join(output, 'process.stdout.log'),
+    `=== ${attempt.stack}-l1-first (${attempt.stack}) ===\n  TOTAL ... ${score - 1}/${max}\n`
+    + `--- repair 1/3 ---\n=== ${attempt.stack}-l1-fix1 (${attempt.stack}) ===\n`
+    + `  TOTAL ... ${score}/${max}\n`);
+}
+
+export function writeFixtureResults(resultsRoot: string, { running = false }: {
+  running?: boolean;
+} = {}): void {
+  const plan = compileCampaignFile(EXAMPLE_CAMPAIGN);
+  const now = '2026-08-18T12:00:00.000Z';
+  for (let index = 0; index < FIXTURE_CAMPAIGNS; index += 1) {
+    const directory = join(resultsRoot, 'campaigns', `fixture-run-${index}`);
+    let state = createCampaignState(plan, { now });
+    const claims = [];
+    for (;;) {
+      const claimed = claimNextAttempt(state, { now, admissionId: `admission-${index}` });
+      if (!claimed.claim) break;
+      claims.push(claimed.claim);
+      state = running && claims.length === 1 ? claimed.state
+        : finishCampaignExecution(claimed.state, claimed.claim.executionId,
+          { exitCode: 0, run: { outcome: { kind: 'passed' } } }, { now });
+    }
+    writeCampaign(directory, plan, state);
+    claims.forEach((claim, ordinal) => {
+      const output = join(directory, claim.output);
+      mkdirSync(output, { recursive: true });
+      writeRunEvidence(output, plan, claim.attempt, (ordinal % 3) * 4 + 1);
+    });
+  }
+}
+
+export function dependencyProgressionEvidence(plan: CompiledCampaignPlan,
+  attempt: CampaignAttemptPlan): ProgressionState {
+  assert.ok(plan.featureCatalog && plan.dependencyPolicy);
+  const input = compileProgressionInput(dependencyRuntimeDefinition(
+    plan.featureCatalog, plan.dependencyPolicy));
+  let state = progressionEngine.initialize(input.definition);
+  const missed = new Set<string>();
+  for (let step = 1; step <= 24; step += 1) {
+    if (progressionEngine.nextAction(state).type === 'terminal') break;
+    const selection = progressionEngine.gradingSelection(state);
+    // One feature per grade misses a check the first time it is graded, so the
+    // replay carries repairs as well as builds.
+    const target = selection.nodeIds.find(nodeId => !missed.has(nodeId));
+    state = progressionEngine.recordResult(state, {
+      attemptId: `${attempt.id}-${step}`,
+      outcome: 'conclusive',
+      nodes: selection.nodeIds.map(nodeId => ({ id: nodeId,
+        checks: selection.checks.filter(check => check.nodeId === nodeId).map((check, index) => ({
+          id: check.id,
+          outcome: nodeId === target && index === 0 ? 'fail' as const : 'pass' as const })) })),
+    });
+    if (target) missed.add(target);
+  }
+  return state;
+}
+
+
+// One dependency campaign with a progression state per stack, which is what the
+// graph and the replay read.
+export function writeDependencyResults(resultsRoot: string, key: string): void {
+  const plan = compileCampaignFile(DEPENDENCY_CAMPAIGN);
+  assert.ok(plan.featureCatalog && plan.dependencyPolicy);
+  const now = '2026-08-25T12:00:00.000Z';
+  const directory = join(resultsRoot, 'campaigns', key);
+  let state = createCampaignState(plan, { now });
+  const claims = [];
+  for (;;) {
+    const claimed = claimNextAttempt(state, { now, admissionId: 'admission-1' });
+    if (!claimed.claim) break;
+    claims.push(claimed.claim);
+    state = claimed.state;
+  }
+  writeCampaign(directory, plan, state);
+  const progression = compileProgressionInput(dependencyRuntimeDefinition(
+    plan.featureCatalog, plan.dependencyPolicy));
+  for (const claim of claims) {
+    const output = join(directory, claim.output);
+    mkdirSync(join(output, 'source'), { recursive: true });
+    writeProgressionState(join(output, ARTIFACT_FILE.progressionState), {
+      progression,
+      featureCatalogIdentity: plan.featureCatalog.identity,
+      dependencyPolicyIdentity: plan.dependencyPolicy.identity,
+      owner: { schemaVersion: 1,
+        campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+        attempt: { id: claim.attempt.id, track: plan.definition.track, stack: claim.attempt.stack,
+          agentAdapter: claim.attempt.agentAdapter, model: claim.attempt.model,
+          conditionSha256: claim.attempt.condition.sha256 },
+        workspace: { appDirectory: 'source' } },
+      state: dependencyProgressionEvidence(plan, claim.attempt) });
+  }
+}
+
+// Three plans as the Plans page sees them: one frozen and startable, one draft,
+// and one file that does not compile.
+export function writePlanFixtures(plansRoot: string): void {
+  mkdirSync(plansRoot, { recursive: true });
+  const frozen = JSON.parse(readFileSync(DEPENDENCY_CAMPAIGN, 'utf8')) as {
+    state: string;
+    budgets: { maxCostUsdPerAttempt: number | null };
+    runtime: { controllerImage: string | null; buildImage: string | null };
+  };
+  frozen.state = 'frozen';
+  frozen.budgets.maxCostUsdPerAttempt = 12;
+  const digest = `sha256:${'a1'.repeat(32)}`;
+  frozen.runtime.controllerImage = `stack-bench-controller@${digest}`;
+  frozen.runtime.buildImage = `stack-bench-build@${digest}`;
+  writeFileSync(join(plansRoot, 'ecommerce-progression-reference.json'),
+    JSON.stringify(frozen, null, 2));
+  writeFileSync(join(plansRoot, 'campaign.example.json'), readFileSync(EXAMPLE_CAMPAIGN));
+  writeFileSync(join(plansRoot, 'broken.json'), '{');
+}
diff --git a/tools/stack-bench/tests/fixtures/definitions/all-actions.json b/tools/stack-bench/tests/fixtures/definitions/all-actions.json
new file mode 100644
index 00000000000..d8ce40fd85f
--- /dev/null
+++ b/tools/stack-bench/tests/fixtures/definitions/all-actions.json
@@ -0,0 +1,72 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "name": "Action language fixture",
+  "features": [
+    {
+      "id": 1,
+      "name": "Every registered action",
+      "actors": ["a", "b"],
+      "max": 0,
+      "setup": [],
+      "criteria": [
+        {
+          "id": "all-actions",
+          "desc": "Compiles one representative of every registered action",
+          "points": 0,
+          "steps": [
+            { "do": "callAction", "actor": "a", "action": "buy", "input": { "testid": "item-card", "contains": "item", "attribute": "data-action-input" }, "authentication": "none", "settleMs": 1 },
+            { "do": "callConcurrently", "actors": ["a", "b"], "action": "buy", "settleMs": 1 },
+            { "do": "clearInput", "actor": "a" },
+            { "do": "click", "actor": "a", "testid": "button" },
+            { "do": "clickConcurrently", "actors": ["a", "b"], "testid": "button", "settleMs": 1 },
+            { "do": "closeClient", "actor": "a" },
+            { "do": "createRoom", "actor": "a", "room": "room" },
+            { "do": "dbSetStock", "item": "item", "warehouse": "warehouse", "quantity": 1, "settleMs": 1 },
+            { "do": "ensureSignedIn", "actor": "a", "name": "alice" },
+            { "do": "enterRoom", "actor": "a", "room": "room" },
+            { "do": "expect", "actor": "a", "testid": "status" },
+            { "do": "expectActionOutcome", "actor": "a", "outcome": "refused" },
+            { "do": "expectActorsWith", "actors": ["a", "b"], "testid": "status", "contains": "ok", "equals": 2, "maxEach": 1 },
+            { "do": "expectAgreement", "actors": ["a", "b"], "testid": "status" },
+            { "do": "expectAllPresent", "actor": "a", "prefix": "message", "count": 1, "within": 1 },
+            { "do": "expectCallOutcomes", "accepted": 1 },
+            { "do": "expectElementCount", "actor": "a", "testid": "row", "contains": "item", "equals": 1, "within": 1 },
+            { "do": "expectForgeryRejected", "actor": "a" },
+            { "do": "expectNotReceived", "actor": "a", "contains": "secret" },
+            { "do": "expectNumber", "actor": "a", "testid": "count", "equals": 1 },
+            { "do": "expectOrderMatches", "actors": ["a", "b"], "prefix": "message" },
+            { "do": "expectReceived", "actor": "a", "contains": "hello", "within": 1 },
+            { "do": "expectReplayRejected", "actor": "a" },
+            { "do": "expectSequence", "actor": "a", "testid": "row", "equals": ["one", "two"] },
+            { "do": "expectStable", "actor": "a", "testid": "count", "samples": 2, "intervalMs": 1 },
+            { "do": "expectUnavailable", "actor": "a", "testid": "admin" },
+            { "do": "fill", "actor": "a", "testid": "input", "text": "value" },
+            { "do": "forgeWrite", "actor": "a", "fromActor": "b", "settleMs": 1 },
+            { "do": "freshClient", "actor": "a" },
+            { "do": "openClient", "actor": "a" },
+            { "do": "pressKey", "actor": "a", "key": "Enter" },
+            { "do": "race", "branches": [[{ "do": "wait", "actor": "a", "ms": 1 }], [{ "do": "wait", "actor": "b", "ms": 1 }]], "settleMs": 1 },
+            { "do": "recordNumber", "actor": "a", "testid": "count", "as": "before" },
+            { "do": "reload", "actor": "a", "settleMs": 1 },
+            { "do": "replayAs", "actor": "a", "from": "b", "match": "write" },
+            { "do": "replayConcurrently", "actors": ["a", "b"], "settleMs": 1 },
+            { "do": "restartBackend", "settleMs": 1 },
+            { "do": "runScript", "script": "fixture.mjs", "args": [] },
+            { "do": "send", "actor": "a", "text": "hello" },
+            { "do": "sendConcurrently", "senders": [{ "actor": "a", "prefix": "message-a", "count": 1 }, { "actor": "b", "prefix": "message-b", "count": 1 }], "delayMs": 1 },
+            { "do": "sendMany", "actor": "a", "prefix": "message", "count": 1, "delayMs": 1 },
+            { "do": "setOffline", "actor": "a" },
+            { "do": "signIn", "actor": "a", "name": "alice" },
+            { "do": "signUp", "actor": "a", "name": "alice" },
+            { "do": "startAppServer" },
+            { "do": "stopAppServer" },
+            { "do": "typeInto", "actor": "a", "text": "value" },
+            { "do": "wait", "actor": "a", "ms": 1 },
+            { "do": "waitUntilAbsent", "actor": "a", "testid": "status" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tests/fixtures/dependency-model-free-campaign.json b/tools/stack-bench/tests/fixtures/dependency-model-free-campaign.json
new file mode 100644
index 00000000000..4e5a1d1d326
--- /dev/null
+++ b/tools/stack-bench/tests/fixtures/dependency-model-free-campaign.json
@@ -0,0 +1,142 @@
+{
+  "schemaVersion": 7,
+  "kind": "campaign-manifest",
+  "id": "dependency-model-free-proof",
+  "version": "1.0.0",
+  "state": "draft",
+  "title": "Internal dependency campaign proof",
+  "track": "ecommerce",
+  "mode": { "id": "dependency", "version": "4.3.0", "workSelection": "progressive" },
+  "repair": { "selection": "feature", "budget": { "total": 2, "perFeature": 1 } },
+  "selection": {
+    "levels": [
+      {
+        "level": 1,
+        "recipe": "ecommerce.sequential-l1@2.5.0"
+      }
+    ]
+  },
+  "featureCatalog": {
+    "schemaVersion": 1,
+    "kind": "feature-catalog",
+    "id": "dependency-model-free-proof",
+    "version": "2.0.0",
+    "state": "draft",
+    "title": "Internal dependency campaign proof",
+    "nodes": [
+      {
+        "id": "accounts",
+        "title": "Accounts",
+        "questline": "identity",
+        "dependencies": [],
+        "featureRefs": ["ecommerce.feature.accounts@1.1.0"],
+        "promptModules": [],
+        "gradingChecks": [
+          {
+            "id": "ecommerce.feature.accounts.accounts.1a",
+            "points": 1,
+            "role": "feature"
+          }
+        ]
+      },
+      {
+        "id": "catalog",
+        "title": "Catalog",
+        "questline": "catalog",
+        "dependencies": [],
+        "featureRefs": ["ecommerce.feature.catalog@1.1.0"],
+        "promptModules": [],
+        "gradingChecks": [
+          {
+            "id": "ecommerce.feature.catalog.catalog.2a",
+            "points": 1,
+            "role": "feature"
+          }
+        ]
+      }
+    ],
+    "questlines": [
+      {
+        "id": "identity",
+        "title": "Identity",
+        "nodes": ["accounts"]
+      },
+      {
+        "id": "catalog",
+        "title": "Catalog",
+        "nodes": ["catalog"]
+      }
+    ]
+  },
+  "stacks": [
+    { "id": "stub", "adapterVersion": "1.1.0" }
+  ],
+  "agents": [
+    {
+      "adapter": "deterministic",
+      "adapterVersion": "1.3.0",
+      "model": "deterministic-stall"
+    }
+  ],
+  "conditions": [
+    {
+      "id": "model-free",
+      "version": "1.0.0",
+      "guidanceProfile": "model-free-stub@1.1.0",
+      "repairPolicy": "scored-only@1.1.0"
+    }
+  ],
+  "repetitions": 1,
+  "parallelism": 1,
+  "ordering": {
+    "method": "balanced-rotation",
+    "seed": "internal-model-free-proof"
+  },
+  "budgets": {
+    "attemptTimeoutMinutes": 10,
+    "maxCostUsdPerAttempt": null
+  },
+  "attemptPolicy": {
+    "retries": 0,
+    "retryOn": [],
+    "excludeFromAnalysis": [
+      "contaminated",
+      "harness_failure",
+      "inconclusive",
+      "ungraded"
+    ]
+  },
+  "runtime": {
+    "releaseManifestSha256": null,
+    "controllerImage": null,
+    "buildImage": null,
+    "platform": "linux/amd64"
+  },
+  "pricing": {
+    "currency": "USD",
+    "unit": "USD-per-million-tokens",
+    "capturedAt": "2026-08-25T00:00:00.000Z",
+    "source": "internal deterministic adapter makes no provider calls",
+    "models": {
+      "deterministic-stall": {
+        "input": 0,
+        "output": 0,
+        "cacheWrite5m": 0,
+        "cacheWrite1h": 0,
+        "cacheRead": 0
+      }
+    }
+  },
+  "analysis": {
+    "primaryMetric": "finalScoreRate",
+    "secondaryMetrics": [
+      "totalCostUsd",
+      "totalDurationMs",
+      "invalidAttemptRate"
+    ],
+    "dispersion": "median-iqr",
+    "invalidAttempts": "report-separately",
+    "missingData": "no-imputation",
+    "comparisonUnit": "stack-agent-condition-recipe"
+  }
+}
diff --git a/tools/stack-bench/tests/fixtures/repair-agent.ts b/tools/stack-bench/tests/fixtures/repair-agent.ts
new file mode 100644
index 00000000000..23a877ca68c
--- /dev/null
+++ b/tools/stack-bench/tests/fixtures/repair-agent.ts
@@ -0,0 +1,37 @@
+#!/usr/bin/env node
+// Deterministic coding agent for repair-loop tests.
+import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+
+const passingApp = '<!doctype html><html><body><h1 id="app-title">Fixture Chat</h1></body></html>\n';
+const failingApp = '<!doctype html><html><body><h1>Fixture</h1></body></html>\n';
+
+const args: Record<string, string | undefined> = {};
+for (let i = 2; i < process.argv.length; i += 2) {
+  const option = process.argv[i];
+  if (option) args[option.replace(/^--/, '')] = process.argv[i + 1];
+}
+const app = args.app;
+if (!app) throw new Error('stub-agent requires --app');
+
+const resumed = join(app, '..', '.stub-resumed');
+if (args.mode === 'resume' && args.model === 'deterministic-deferred') {
+  writeFileSync(resumed, 'ready\n');
+}
+const canFix = args.model !== 'deterministic-stall'
+  && (args.model !== 'deterministic-deferred' || existsSync(resumed));
+mkdirSync(app, { recursive: true });
+writeFileSync(join(app, 'index.html'), args.mode === 'fix' && canFix ? passingApp : failingApp);
+
+console.log(JSON.stringify({
+  appDir: app, mode: args.mode, level: Number(args.level ?? 1),
+  track: args.track, backend: args.backend, model: args.model,
+  guidance: args.guidance,
+  setup: { isolation: { mode: 'deterministic-fixture' }, session: 'model-free-test' },
+  costUsd: args.mode === 'fix' ? 0.05 : args.mode === 'resume' ? 0.1 : 0.5,
+  tokens: 1000, outputTokens: 100,
+  usage: { input: 100, output: 100, cacheWrite: 300, cacheRead: 500 },
+  turns: args.mode === 'fix' ? 2 : args.mode === 'resume' ? 1 : 3,
+  promptBytes: args.mode === 'fix' ? 200 : args.mode === 'resume' ? 150 : 300,
+  durationMs: 50, sessionId: `stub-${args.mode}`, ok: true,
+}));
diff --git a/tools/stack-bench/tests/fixtures/resource-lock-process.ts b/tools/stack-bench/tests/fixtures/resource-lock-process.ts
new file mode 100644
index 00000000000..8b658123c15
--- /dev/null
+++ b/tools/stack-bench/tests/fixtures/resource-lock-process.ts
@@ -0,0 +1,23 @@
+import { createBackendLease, acquireResourceLock,
+  resourceLockScope } from '../../src/runtime/backend-lease.js';
+
+const [root, runId, mode = 'acquire'] = process.argv.slice(2);
+if (!root || !runId) process.exit(2);
+
+try {
+  const lease = createBackendLease({
+    runId, backend: 'stub', track: 'process-test', runIndex: 0,
+  });
+  const scope = resourceLockScope({
+    STACK_BENCH_APPLIANCE: '1',
+    STACK_BENCH_RESOURCE_LOCK_DIR: root,
+  });
+  lease.resources.locks.push(acquireResourceLock({
+    ...scope, key: 'slot:process-test:stub:run0', lease,
+  }));
+  process.stdout.write('acquired\n');
+  if (mode === 'hold') setInterval(() => {}, 1_000);
+} catch (error) {
+  process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+  process.exitCode = 3;
+}
diff --git a/tools/stack-bench/tests/fixtures/spacetime-module/package.json b/tools/stack-bench/tests/fixtures/spacetime-module/package.json
new file mode 100644
index 00000000000..432e3e95b66
--- /dev/null
+++ b/tools/stack-bench/tests/fixtures/spacetime-module/package.json
@@ -0,0 +1,11 @@
+{
+  "name": "stack-bench-container-smoke-module",
+  "private": true,
+  "type": "module",
+  "dependencies": {
+    "spacetimedb": "file:/deps/bindings-typescript"
+  },
+  "devDependencies": {
+    "typescript": "5.6.3"
+  }
+}
diff --git a/tools/stack-bench/tests/fixtures/spacetime-module/src/index.ts b/tools/stack-bench/tests/fixtures/spacetime-module/src/index.ts
new file mode 100644
index 00000000000..4fae5ce63cb
--- /dev/null
+++ b/tools/stack-bench/tests/fixtures/spacetime-module/src/index.ts
@@ -0,0 +1,14 @@
+import { schema, table, t } from 'spacetimedb/server';
+
+const app = schema({
+  smokeItem: table({ public: true }, {
+    id: t.u64().primaryKey(),
+    value: t.string(),
+  }),
+});
+
+export default app;
+
+export const seed = app.reducer({ value: t.string() }, (ctx, { value }) => {
+  ctx.db.smokeItem.insert({ id: 1n, value });
+});
diff --git a/tools/stack-bench/tests/fixtures/spacetime-module/tsconfig.json b/tools/stack-bench/tests/fixtures/spacetime-module/tsconfig.json
new file mode 100644
index 00000000000..41a333124ba
--- /dev/null
+++ b/tools/stack-bench/tests/fixtures/spacetime-module/tsconfig.json
@@ -0,0 +1,13 @@
+{
+  "compilerOptions": {
+    "strict": true,
+    "skipLibCheck": true,
+    "moduleResolution": "bundler",
+    "target": "ESNext",
+    "lib": ["ES2021"],
+    "module": "ESNext",
+    "isolatedModules": true,
+    "noEmit": true
+  },
+  "include": ["src/**/*.ts"]
+}
diff --git a/tools/stack-bench/tests/grader-cleanup.test.ts b/tools/stack-bench/tests/grader-cleanup.test.ts
new file mode 100644
index 00000000000..250173a7fe0
--- /dev/null
+++ b/tools/stack-bench/tests/grader-cleanup.test.ts
@@ -0,0 +1,56 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { closeActorContexts } from '../grader/grade.js';
+import { harnessBrowserFailure,
+  runBrowserInfrastructureOperation } from '../src/evidence/harness-errors.js';
+
+test('grader context cleanup records browser failures instead of throwing away the report', async () => {
+  const context = {
+    tracing: { stop: async () => { throw new Error('trace target closed'); } },
+    close: async () => { throw new Error('browser context closed unexpectedly'); },
+  };
+  const video = {
+    saveAs: async () => { throw new Error('video unavailable'); },
+    delete: async () => { throw new Error('video already removed'); },
+  };
+  const failures = await closeActorContexts([
+    { context, name: 'buyer', page: { video: () => video } },
+  ], { trace: true, media: '/tmp/media', slug: 'account-create' });
+
+  assert.deepEqual(failures.map(failure => failure.stage),
+    ['trace', 'context-close', 'video-save', 'video-delete']);
+  assert(failures.every(failure => failure.actor === 'buyer'));
+});
+
+test('grader context cleanup stays silent when cleanup succeeds', async () => {
+  const context = { tracing: { stop: async () => {} }, close: async () => {} };
+  const failures = await closeActorContexts([
+    { context, name: 'buyer', page: { video: () => null } },
+  ], { trace: true, media: '/tmp/media', slug: 'account-create' });
+  assert.deepEqual(failures, []);
+});
+
+test('grader context cleanup closes a context when page creation failed', async () => {
+  let closed = false;
+  const context = {
+    tracing: { stop: async () => {} },
+    close: async () => { closed = true; },
+  };
+  const failures = await closeActorContexts([
+    { context, name: 'buyer', page: null },
+  ], { media: '/tmp/media', slug: 'account-create' });
+  assert.equal(closed, true);
+  assert.deepEqual(failures, []);
+});
+
+test('browser setup operations are harness failures but app navigation is not', async () => {
+  let infrastructure: unknown;
+  try {
+    await runBrowserInfrastructureOperation('page creation', async () => {
+      throw new Error('page allocation failed');
+    });
+  } catch (error) { infrastructure = error; }
+  assert.match(harnessBrowserFailure(infrastructure) ?? '', /browser page creation failed/);
+  assert.equal(harnessBrowserFailure(new Error('net::ERR_CONNECTION_REFUSED')), null);
+});
diff --git a/tools/stack-bench/tests/grader-entrypoints.test.ts b/tools/stack-bench/tests/grader-entrypoints.test.ts
new file mode 100644
index 00000000000..e822356e6b5
--- /dev/null
+++ b/tools/stack-bench/tests/grader-entrypoints.test.ts
@@ -0,0 +1,38 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { parseGradeArgs } from '../grader/grade.js';
+import { parseMutationArgs, remainingMutationBatchMs } from '../grader/mutation-test.js';
+
+test('grader arguments require an explicit scenario and valid numeric selectors', () => {
+  assert.throws(() => parseGradeArgs(['node', 'grade', '--url', 'http://localhost:1']),
+    /--spec/);
+  assert.throws(() => parseGradeArgs(['node', 'grade', '--url', 'file:///tmp/app',
+    '--spec', 'scenario.json']), /HTTP or HTTPS/);
+  assert.throws(() => parseGradeArgs(['node', 'grade', '--url', 'http://localhost:1',
+    '--spec', 'scenario.json', '--level', '0']), /positive integer/);
+  assert.equal(parseGradeArgs(['node', 'grade', '--url', 'http://localhost:1',
+    '--spec', 'scenario.json', '--level', '2']).level, 2);
+  assert.equal(parseGradeArgs(['node', 'grade', '--url', 'http://localhost:1',
+    '--spec', 'scenario.json', '--browser-ws-endpoint', 'ws://127.0.0.1:9000/session'])
+    .browserWsEndpoint, 'ws://127.0.0.1:9000/session');
+  assert.throws(() => parseGradeArgs(['node', 'grade', '--url', 'http://localhost:1',
+    '--spec', 'scenario.json', '--browser-ws-endpoint', 'http://127.0.0.1:9000']),
+  /must use ws or wss/);
+});
+
+test('mutation arguments fail before execution when the batch bounds are invalid', () => {
+  const base = ['node', 'mutation-test', '--app', 'app', '--url', 'http://localhost:1',
+    '--mutations', 'mutations.json', '--level', '3', '--recipe', 'recipe@1.0.0'];
+  assert.throws(() => parseMutationArgs([...base, '--mutation-shard-index', '0']),
+    /must be supplied together/);
+  assert.throws(() => parseMutationArgs([...base, '--max-runtime-minutes', '0']),
+    /from 1 through 120/);
+  assert.equal(parseMutationArgs([...base, '--max-runtime-minutes', '30']).maxRuntimeMinutes, 30);
+});
+
+test('mutation operations use only the remaining batch time', () => {
+  assert.equal(remainingMutationBatchMs(10_000, 2_500), 7_500);
+  assert.throws(() => remainingMutationBatchMs(10_000, 10_000),
+    /deadline reached/);
+});
diff --git a/tools/stack-bench/tests/grading-timeout.test.ts b/tools/stack-bench/tests/grading-timeout.test.ts
new file mode 100644
index 00000000000..50eeb4f375a
--- /dev/null
+++ b/tools/stack-bench/tests/grading-timeout.test.ts
@@ -0,0 +1,25 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { GRADER_SOURCE_TIMEOUT_MS, gradingRunTimeoutMs, selectedGradingSourceCount }
+  from '../src/runtime/grading-timeout.js';
+
+test('grading source count deduplicates checks that share one scenario source', () => {
+  assert.equal(selectedGradingSourceCount(
+    [{ source: 'scenarios/accounts.json' }, { source: 'scenarios/accounts.json' }],
+    [{ source: 'scenarios/orders.json' }],
+  ), 2);
+});
+
+test('grading timeout gives each selected source one child deadline', () => {
+  assert.equal(gradingRunTimeoutMs(0), 20 * 60_000);
+  assert.equal(gradingRunTimeoutMs(1), 20 * 60_000 + GRADER_SOURCE_TIMEOUT_MS);
+  assert.equal(gradingRunTimeoutMs(6), 110 * 60_000);
+});
+
+test('grading timeout remains bounded for a full catalog', () => {
+  assert.equal(gradingRunTimeoutMs(92), 120 * 60_000);
+  assert.equal(gradingRunTimeoutMs(Number.MAX_SAFE_INTEGER), 120 * 60_000);
+  assert.throws(() => gradingRunTimeoutMs(-1), /non-negative safe integer/);
+  assert.throws(() => gradingRunTimeoutMs(1.5), /non-negative safe integer/);
+});
diff --git a/tools/stack-bench/tests/harness-errors.test.ts b/tools/stack-bench/tests/harness-errors.test.ts
new file mode 100644
index 00000000000..a35b9dcee97
--- /dev/null
+++ b/tools/stack-bench/tests/harness-errors.test.ts
@@ -0,0 +1,32 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { harnessBrowserFailure, harnessProcessFailure } from '../src/evidence/harness-errors.js';
+
+test('child-process timeouts are harness failures, not application findings', () => {
+  const error = Object.assign(new Error('spawnSync docker ETIMEDOUT'), {
+    code: 'ETIMEDOUT',
+    path: 'docker',
+    status: null,
+  });
+  assert.equal(harnessProcessFailure(error), 'docker failed in the harness (ETIMEDOUT)');
+});
+
+test('a child process non-zero exit remains eligible as an application finding', () => {
+  const error = Object.assign(new Error('command failed'), { status: 1, path: 'docker' });
+  assert.equal(harnessProcessFailure(error), null);
+});
+
+test('a missing harness database container is not blamed on the application', () => {
+  const error = Object.assign(new Error('docker exec failed'), {
+    status: 1,
+    stderr: 'Error response from daemon: No such container: stack-bench-mongodb',
+  });
+  assert.equal(harnessProcessFailure(error),
+    'database container selected by the harness is unavailable');
+});
+
+test('a crashed browser target is inconclusive harness evidence', () => {
+  assert.match(harnessBrowserFailure(new Error('browserContext.setOffline: Target crashed ')) ?? '',
+    /^browser target failed in the harness/);
+  assert.equal(harnessBrowserFailure(new Error('expected stock 15, saw 20')), null);
+});
diff --git a/tools/stack-bench/tests/harness-regressions.test.ts b/tools/stack-bench/tests/harness-regressions.test.ts
new file mode 100644
index 00000000000..3e103b55e6a
--- /dev/null
+++ b/tools/stack-bench/tests/harness-regressions.test.ts
@@ -0,0 +1,73 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { addCostUsd, finalizeRunTotals } from '../src/evidence/benchmark-run.js';
+import { checkDatabaseProvenance } from '../commands/run-suite.js';
+import { AGENT_PROCESS_TIMEOUT_MS, CODING_SESSION_TIMEOUT_MS }
+  from '../src/agents/coding-session-timeouts.js';
+import { summarizeSessions } from '../src/evidence/session-metrics.js';
+
+test('database provenance accepts the leased environment and rejects an unrelated literal', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-database-provenance-'));
+  try {
+    const server = join(root, 'server');
+    mkdirSync(server);
+    writeFileSync(join(server, 'db.ts'),
+      'export const connectionString = process.env.DATABASE_URL;\n');
+    assert.deepEqual(checkDatabaseProvenance({ app: root, backend: 'postgres' }), {
+      ok: true, url: 'process.env.DATABASE_URL',
+      reason: 'app reads the database URL supplied by its authenticated backend lease',
+    });
+    writeFileSync(join(server, 'db.ts'),
+      'export const connectionString = "postgresql://user:pass@localhost:5433/wrong";\n');
+    const wrong = checkDatabaseProvenance({ app: root, backend: 'postgres' });
+    assert.equal(wrong.ok, false);
+    assert.match(wrong.reason, /benchmark database is on port 6532/);
+    writeFileSync(join(server, 'db.ts'),
+      'export const connectionString = "postgresql://user:pass@localhost:5433/wrong?note=:6532/";\n');
+    assert.equal(checkDatabaseProvenance({ app: root, backend: 'postgres' }).ok, false);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('coding sessions are bounded without the former 55-minute cutoff', () => {
+  assert.equal(CODING_SESSION_TIMEOUT_MS, 120 * 60_000);
+  assert.equal(AGENT_PROCESS_TIMEOUT_MS, CODING_SESSION_TIMEOUT_MS + 3 * 60_000);
+});
+
+test('an interrupted later level keeps completed totals and marks cost incomplete', () => {
+  const run = { levels: [{ level: 1, graded: true, score: 58, max: 58,
+    buildCostUsd: 10, repairCostUsd: 2.5, repairs: 1,
+    sessionTotals: { sessions: 2, tokens: 100, outputTokens: 20, turns: 8, durationMs: 900 } }] };
+  assert.deepEqual(finalizeRunTotals(run, 1_000, { now: 11_000, costComplete: false }), {
+    score: 58, max: 58, costUsd: 12.5, costComplete: false, repairs: 1,
+    sessions: 2, tokens: 100, outputTokens: 20, turns: 8, modelDurationMs: 900,
+    durationSec: 10, ungraded: [],
+  });
+});
+
+test('dependency totals use the cumulative progression score', () => {
+  const run = {
+    levels: [
+      { level: 1, graded: true, score: 8, max: 12 },
+      { level: 2, graded: true, score: 13, max: 15 },
+    ],
+    progressionStatus: { score: { uniqueChecks: { passedPoints: 17, availablePoints: 162 } } },
+  };
+  const totals = finalizeRunTotals(run, 1_000, { now: 2_000 });
+  assert.equal(totals.score, 17);
+  assert.equal(totals.max, 162);
+});
+
+test('session and run totals keep receipt precision', () => {
+  const sessions = [{ costUsd: 0.123456 }, { costUsd: 0.234567 }, { costUsd: 0.345678 }];
+  assert.equal(summarizeSessions(sessions).costUsd, 0.703701);
+  const run = { levels: [{ level: 1, buildCostUsd: 0.123456, repairCostUsd: 0.234567 },
+    { level: 2, buildCostUsd: 0.345678, repairCostUsd: 0 }] };
+  assert.equal(finalizeRunTotals(run, 0, { now: 1 }).costUsd, 0.703701);
+  assert.equal(addCostUsd(0.123456, 0.234567, 0.345678), 0.703701);
+});
diff --git a/tools/stack-bench/tests/helpers/progression-source.ts b/tools/stack-bench/tests/helpers/progression-source.ts
new file mode 100644
index 00000000000..75e3fa73be8
--- /dev/null
+++ b/tools/stack-bench/tests/helpers/progression-source.ts
@@ -0,0 +1,37 @@
+import { readFileSync } from 'node:fs';
+
+import { compileProgressionDefinition } from '../../src/progression/progression-definition.js';
+import type { CompiledProgressionDefinition }
+  from '../../src/progression/progression-definition.js';
+
+export interface ValidatedProgressionSource {
+  definition: CompiledProgressionDefinition;
+  gradingGroups(nodeId: string): string[];
+}
+
+export function loadValidatedProgressionSource(
+  path: string,
+  trackRoot: string,
+): ValidatedProgressionSource {
+  const source: unknown = JSON.parse(readFileSync(path, 'utf8'));
+  const definition = compileProgressionDefinition(source, { trackRoot, source: path });
+  return { definition, gradingGroups: nodeId => authoredGradingGroups(source, nodeId) };
+}
+
+function authoredGradingGroups(source: unknown, nodeId: string): string[] {
+  if (source === null || typeof source !== 'object' || Array.isArray(source)
+    || !('nodes' in source) || !Array.isArray(source.nodes)) {
+    throw new Error('validated progression source must contain nodes');
+  }
+  const node = source.nodes.find(candidate => candidate !== null && typeof candidate === 'object'
+    && !Array.isArray(candidate) && 'id' in candidate && candidate.id === nodeId);
+  if (!node || !('gradingGroups' in node) || !Array.isArray(node.gradingGroups)) {
+    throw new Error(`validated progression node ${nodeId} must contain grading groups`);
+  }
+  for (const group of node.gradingGroups) {
+    if (typeof group !== 'string') {
+      throw new Error(`validated progression node ${nodeId} has an invalid grading group`);
+    }
+  }
+  return node.gradingGroups;
+}
diff --git a/tools/stack-bench/tests/isolation.test.ts b/tools/stack-bench/tests/isolation.test.ts
new file mode 100644
index 00000000000..f3b1a7b9bdf
--- /dev/null
+++ b/tools/stack-bench/tests/isolation.test.ts
@@ -0,0 +1,60 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { mkdtempSync, readdirSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { parseAgentArgs } from '../commands/agent.js';
+import { compiledEntrypoint } from '../src/package-root.js';
+
+const AGENT = compiledEntrypoint('commands', 'agent.js');
+
+const args = (app: string) => [AGENT, '--mode', 'build', '--backend', 'spacetime', '--track', 'loop',
+  '--level', '1', '--app', app];
+
+function isCommandFailure(error: unknown): error is Error & { status: number; stderr: unknown } {
+  return error instanceof Error
+    && typeof Reflect.get(error, 'status') === 'number'
+    && Reflect.has(error, 'stderr');
+}
+
+test('an unavailable isolation image refuses a coding session instead of falling back to the host', () => {
+  const app = mkdtempSync(join(tmpdir(), 'stack-bench-isolation-'));
+  try {
+    assert.throws(() => execFileSync(process.execPath, args(app), {
+      env: { ...process.env, STACK_BENCH_IMAGE: 'stack-bench-image-that-does-not-exist' },
+      stdio: 'pipe',
+    }), /Command failed/);
+  } finally { rmSync(app, { recursive: true, force: true }); }
+});
+
+test('prompt review does not require Docker or mutate the application directory', () => {
+  const app = mkdtempSync(join(tmpdir(), 'stack-bench-isolation-'));
+  try {
+    const prompt = execFileSync(process.execPath, [...args(app), '--print-prompt'], {
+      env: { ...process.env, STACK_BENCH_IMAGE: 'stack-bench-image-that-does-not-exist' },
+      encoding: 'utf8', stdio: 'pipe',
+    });
+    assert.match(prompt, /Build the application described below/);
+    assert.equal(readdirSync(app).length, 0);
+  } finally { rmSync(app, { recursive: true, force: true }); }
+});
+
+test('host execution flags are rejected rather than opening a second runtime path', () => {
+  const app = mkdtempSync(join(tmpdir(), 'stack-bench-isolation-'));
+  try {
+    assert.throws(() => execFileSync(process.execPath, [...args(app), '--print-prompt', '--diagnostic-host'], {
+      stdio: 'pipe',
+    }), error => isCommandFailure(error)
+      && /Unknown option '--diagnostic-host'/.test(String(error.stderr)));
+  } finally { rmSync(app, { recursive: true, force: true }); }
+});
+
+test('agent arguments reject invalid modes and partial numbers', () => {
+  const base = ['node', 'agent', '--backend', 'postgres', '--app', 'app'];
+  assert.throws(() => parseAgentArgs([...base, '--mode', 'typo']), /--mode must be/);
+  assert.throws(() => parseAgentArgs([...base, '--mode', 'build', '--level', '2junk']),
+    /--level must be a positive integer/);
+  assert.throws(() => parseAgentArgs([...base, '--mode', 'build', '--run-index', '1junk']),
+    /--run-index must be a non-negative integer/);
+});
diff --git a/tools/stack-bench/tests/l1-concurrency-completion.mutation.ts b/tools/stack-bench/tests/l1-concurrency-completion.mutation.ts
new file mode 100644
index 00000000000..2eb25596414
--- /dev/null
+++ b/tools/stack-bench/tests/l1-concurrency-completion.mutation.ts
@@ -0,0 +1,204 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import ts from 'typescript';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { mutationScenario, mutationTargetKeys,
+  readMutationManifest, validateMutationDefinitions, type LoadedMutationDefinition }
+  from '../src/evidence/mutation-analysis.js';
+import { loadReferenceRegistry, prepareReferenceFixtureSource,
+  selectReferenceFixture, type ReferenceFixtureSelector } from '../src/references/reference-fixtures.js';
+import { buildRecipeRelease, type RecipeRelease } from '../src/composition/recipe-release.js';
+import { selectScenarioChecks } from '../src/composition/recipe-selection.js';
+import { compileScenarioDefinition } from '../src/composition/definition-compiler.js';
+
+const ROOT = STACK_BENCH_ROOT;
+const TRACK = join(ROOT, 'tracks', 'ecommerce');
+const release = buildRecipeRelease(join(TRACK, 'composition', 'recipes',
+  'sequential-l1-2.5.0.json'));
+
+function prepareReferenceSource(args: ReferenceFixtureSelector & { app: string }) {
+  const fixture = selectReferenceFixture(loadReferenceRegistry(), args);
+  const prepared = prepareReferenceFixtureSource(fixture, args.app);
+  return { fixture, sourceSha256: prepared.sha256 };
+}
+
+interface CandidateCase {
+  backend: string;
+  sourceSha256: string;
+  manifest: string;
+  lastUnitMutation: string;
+}
+const cases: CandidateCase[] = [
+  {
+    backend: 'mongodb',
+    sourceSha256: 'feeaf484f5c5d2eae6f61b192e3e50b0a7e6da85e2f761685e33261708acf8c6',
+    manifest: 'mongodb-ecommerce-2.0.1.json',
+    lastUnitMutation: 'last-unit-allows-negative-stock',
+  },
+  {
+    backend: 'postgres',
+    sourceSha256: 'e461967ff8b99394c278e6d382e455a7fc3086c88016543fa668baf808baec0d',
+    manifest: 'postgres-ecommerce-2.0.1.json',
+    lastUnitMutation: 'oversell-no-row-lock',
+  },
+  {
+    backend: 'spacetime',
+    sourceSha256: '58a193d61e02eac8e2c4801dc4cefb78db42468515a452a17e2544f2132148ce',
+    manifest: 'spacetime-ecommerce-2.0.1.json',
+    lastUnitMutation: 'purchase-does-not-reserve-stock-last-unit',
+  },
+];
+
+function byStableKey(candidate: RecipeRelease) {
+  return new Map(candidate.checkCatalog.map(check => [check.stableKey, check]));
+}
+
+test('current L1 has the complete scored concurrency and live-state surface', () => {
+  assert.equal(release.checkCatalog.length, 48);
+  assert.equal(release.scoring.points, 58);
+  assert.equal(release.checkCatalog.filter(check => check.points === 0).length, 2);
+  const restockControl = byStableKey(release)
+    .get('ecommerce.spec.concurrency-safety.restock-race.202-control');
+  assert(restockControl, 'the restock control must exist');
+  assert.equal(restockControl.points, 0,
+    'the ordinary-restock precondition must not double-count already-scored restock behavior');
+});
+
+test('each last-unit score retains the shared purchase race when selected alone', () => {
+  const scenarioPath = join(TRACK, 'scenarios', '01-last-unit-2.3.0.json');
+  const scenario = compileScenarioDefinition(readJson(scenarioPath), { source: scenarioPath });
+  for (const criterionId of ['201a', '201b', '201c']) {
+    const key = `ecommerce.spec.concurrency-safety.last-unit.${criterionId}`;
+    const selected = selectScenarioChecks(scenario, { checks: release.checkCatalog }, [key]);
+    const [feature] = selected.features;
+    assert(feature, 'the selected scenario must have a feature');
+    assert.deepEqual(feature.criteria.map(criterion => criterion.id), [criterionId]);
+    const races = feature.setup.filter(step => step.do === 'clickConcurrently');
+    assert.equal(races.length, 1);
+    const [race] = races;
+    assert(race, 'the selected scenario must have a race');
+    assert.deepEqual(race.actors, ['a', 'b', 'c', 'd', 'e', 'f']);
+    assert.equal(race.testid, 'buy-now');
+    assert.equal(recordValue(race.in, 'race locator').contains, 'Air Purifier');
+    const selectedCriterion = feature.criteria.find(criterion => criterion.id === criterionId);
+    assert(selectedCriterion, 'the selected feature must retain its criterion');
+    assert.equal(selectedCriterion.steps.some(step => step.do === 'clickConcurrently'
+      && step.testid === 'buy-now'), false);
+    const baseline = feature.setup.findIndex(step => step.as === 'revenue-before-last-unit');
+    assert(baseline >= 0 && baseline < feature.setup.indexOf(race),
+      'the revenue baseline must be recorded before the shared purchase race');
+  }
+});
+
+test('the restock race retains its admin page prerequisite when selected alone', () => {
+  const scenarioPath = join(TRACK, 'scenarios', '01-restock-race-2.3.0.json');
+  const scenario = compileScenarioDefinition(readJson(scenarioPath), { source: scenarioPath });
+  const key = 'ecommerce.spec.concurrency-safety.restock-race.202a';
+  const selected = selectScenarioChecks(scenario, { checks: release.checkCatalog }, [key]);
+  const [feature] = selected.features;
+  assert(feature, 'the selected scenario must have a feature');
+  assert.deepEqual(feature.criteria.map(criterion => criterion.id), ['202a']);
+  assert(feature.setup.some(step => step.do === 'click' && step.actor === 'admin'
+    && step.testid === 'admin-link'));
+  const [criterion] = feature.criteria;
+  assert(criterion, 'the selected feature must have a criterion');
+  assert(criterion.steps.some(step => step.do === 'race'));
+});
+
+test('duplicate checkout metadata describes the current cross-stack named action', () => {
+  const scenarioPath = join(TRACK, 'scenarios', '01-duplicate-checkout-2.3.0.json');
+  const scenario = compileScenarioDefinition(readJson(scenarioPath), { source: scenarioPath });
+  const [feature] = scenario.features;
+  assert(feature, 'duplicate checkout must have a feature');
+  const checkout = feature.criteria.find(criterion => criterion.id === '203b');
+  assert(checkout, 'duplicate checkout must have criterion 203b');
+  const metadata = [checkout.note, checkout.provenBy, checkout.withheld].join('\n');
+  assert.match(metadata, /callConcurrently/);
+  assert.match(metadata, /MongoDB/);
+  assert.match(metadata, /PostgreSQL/);
+  assert.match(metadata, /SpacetimeDB/);
+  assert.match(metadata, /Docker mutation qualification/);
+  assert.doesNotMatch(metadata, /replayConcurrently|INCONCLUSIVE|lastWrites|captured HTTP write/);
+  assert.deepEqual(checkout.steps.filter(step => ['callConcurrently', 'expectCallOutcomes']
+    .includes(step.do)).map(step => step.do), ['callConcurrently', 'expectCallOutcomes']);
+});
+
+for (const entry of cases) {
+test(`${entry.backend} binds the current L1 mutation inventory to its effective source`, () => {
+    const work = mkdtempSync(join(tmpdir(), `stack-bench-l1-concurrency-${entry.backend}-`));
+    try {
+      const app = join(work, 'app');
+      const prepared = prepareReferenceSource({
+        backend: entry.backend,
+        track: 'ecommerce',
+        level: 1,
+        recipe: 'ecommerce.sequential-l1@2.5.0',
+        app,
+      });
+      assert.equal(prepared.sourceSha256, entry.sourceSha256);
+
+      const manifest = readMutationManifest(join(ROOT, 'grader', 'mutations', entry.manifest));
+      assert.equal(manifest.fixtureSha256, prepared.sourceSha256);
+      assert.deepEqual(validateMutationDefinitions(manifest.mutations, {
+        defaultScenario: manifest.scenario,
+        requireScenario: true,
+      }).issues, []);
+
+      assert.equal(manifest.mutations.some(mutation => mutationTargetKeys(mutation)
+        .includes('ecommerce.spec.external-data-sync.external-stock.901b')), false, '901b has no deterministic candidate mutation');
+      const mutations = new Map(manifest.mutations.map(mutation => [mutation.id, mutation]));
+      const lastUnit = requiredMutation(mutations, entry.lastUnitMutation);
+      assert.equal(mutationScenario(manifest, lastUnit),
+        'tracks/ecommerce/scenarios/01-last-unit-2.3.1.json');
+      assert.deepEqual(mutationTargetKeys(lastUnit), ['ecommerce.spec.concurrency-safety.last-unit.201a', 'ecommerce.spec.concurrency-safety.last-unit.201b', 'ecommerce.spec.concurrency-safety.last-unit.201c']);
+
+      const purchase = requiredMutation(mutations, 'purchase-does-not-reserve-stock-restock-race');
+      assert.equal(mutationScenario(manifest, purchase),
+        'tracks/ecommerce/scenarios/01-restock-race-2.3.0.json');
+      assert.deepEqual(mutationTargetKeys(purchase), ['ecommerce.spec.concurrency-safety.restock-race.202a']);
+      const releaseKeys = new Set(release.checkCatalog.map(check => check.stableKey));
+      for (const mutation of manifest.mutations.filter(candidate =>
+        mutationTargetKeys(candidate).some(key => releaseKeys.has(key)))) {
+        for (const key of mutationTargetKeys(mutation)) {
+          assert(releaseKeys.has(key),
+          `${mutation.id} must target an exact check in the current release`);
+        }
+        assert(mutation.file, `${mutation.id} must declare a source file`);
+        const source = readFileSync(join(app, mutation.file), 'utf8');
+        for (const edit of mutation.edits) {
+          assert.equal(source.split(edit.find).length - 1, 1,
+            `${mutation.id} anchor must match exactly once`);
+          const mutated = source.replace(edit.find, edit.replace);
+          const transpiled = ts.transpileModule(mutated, {
+            compilerOptions: { module: ts.ModuleKind.ESNext, target: ts.ScriptTarget.ES2022 },
+            fileName: mutation.file,
+            reportDiagnostics: true,
+          });
+          assert.deepEqual((transpiled.diagnostics ?? [])
+            .filter(diagnostic => diagnostic.category === ts.DiagnosticCategory.Error)
+            .map(diagnostic => ts.flattenDiagnosticMessageText(diagnostic.messageText, '\n')), []);
+        }
+      }
+    } finally {
+      rmSync(work, { recursive: true, force: true });
+    }
+  });
+}
+
+function readJson(path: string): unknown { return JSON.parse(readFileSync(path, 'utf8')); }
+function recordValue(value: unknown, label: string): Record<string, unknown> {
+  if (!isRecord(value)) throw new Error(`${label} must be an object`);
+  return value;
+}
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+function requiredMutation(mutations: Map<string, LoadedMutationDefinition>, id: string): LoadedMutationDefinition {
+  const mutation = mutations.get(id);
+  if (!mutation) throw new Error(`mutation ${id} is required`);
+  return mutation;
+}
diff --git a/tools/stack-bench/tests/l3-composition-candidate.contract.ts b/tools/stack-bench/tests/l3-composition-candidate.contract.ts
new file mode 100644
index 00000000000..d6896b25b2a
--- /dev/null
+++ b/tools/stack-bench/tests/l3-composition-candidate.contract.ts
@@ -0,0 +1,358 @@
+import assert from 'node:assert/strict';
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compilePackDefinition, compileRecipeFile, type CompiledPackDefinition }
+  from '../src/composition/composition-compiler.js';
+import { compileScenarioDefinition, type CompiledFeature, type CompiledStep }
+  from '../src/composition/definition-compiler.js';
+
+const trackRoot = join(STACK_BENCH_ROOT, 'tracks', 'ecommerce');
+const packRoot = join(trackRoot, 'composition', 'packs');
+const readJson = (path: string): unknown => JSON.parse(readFileSync(path, 'utf8'));
+const candidateRecipe = recipePacks(readJson(join(trackRoot, 'composition', 'recipes', 'sequential-l3-1.0.0.json')));
+const packNames = candidateRecipe
+  .map(pack => pack.path.split('/').at(-1))
+  .filter((name): name is string => name !== undefined && name.startsWith('l3-'))
+  .sort();
+const packs = packNames.map(name => compilePackDefinition(readJson(join(packRoot, name)), { source: name }));
+const allPacks = readdirSync(packRoot).filter(name => name.endsWith('.json'))
+  .map(name => compilePackDefinition(readJson(join(packRoot, name)), { source: name }));
+const packByRef = new Map(allPacks.map(pack => [`${pack.id}@${pack.version}`, pack]));
+const selected = packs.flatMap(pack => pack.checks.map(check => ({ pack, check })));
+const scenarioFor = (check: CompiledPackDefinition['checks'][number]) => {
+  const source = join(trackRoot, check.source);
+  return compileScenarioDefinition(readJson(source), { source, expectedLevel: 3 });
+};
+const featureFor = (check: CompiledPackDefinition['checks'][number]): CompiledFeature => {
+  const feature = scenarioFor(check).features.find(candidate => candidate.id === check.feature);
+  if (!feature) throw new Error(`${check.id} must select a feature`);
+  return feature;
+};
+const nestedSteps = (feature: CompiledFeature): CompiledStep[] =>
+  [...feature.setup, ...feature.criteria.flatMap(criterion => criterion.steps)].flatMap(flatten);
+
+function flatten(step: CompiledStep): CompiledStep[] {
+  if (step.do !== 'race') return [step];
+  if (!Array.isArray(step.branches)) throw new Error('race step must have branches');
+  return [step, ...step.branches.flatMap(branch => branch.flatMap(flatten))];
+}
+
+function requiredPack(id: string): CompiledPackDefinition {
+  const pack = packs.find(candidate => candidate.id === id);
+  if (!pack) throw new Error(`missing pack ${id}`);
+  return pack;
+}
+
+function requiredCheck(pack: CompiledPackDefinition, id?: string): CompiledPackDefinition['checks'][number] {
+  const check = id === undefined ? pack.checks[0] : pack.checks.find(candidate => candidate.id === id);
+  if (!check) throw new Error(`missing check ${id ?? 'first'} in ${pack.id}`);
+  return check;
+}
+
+function firstCriterion(feature: CompiledFeature) {
+  const criterion = feature.criteria[0];
+  if (!criterion) throw new Error(`feature ${feature.id} must have a criterion`);
+  return criterion;
+}
+
+function lastStep(steps: CompiledStep[]): CompiledStep {
+  const step = steps.at(-1);
+  if (!step) throw new Error('scenario must have at least one step');
+  return step;
+}
+
+function atLeast(value: unknown, minimum: number): boolean {
+  return typeof value === 'number' && value >= minimum;
+}
+
+function atMost(value: unknown, maximum: number): boolean {
+  return typeof value === 'number' && value <= maximum;
+}
+
+function maxRuntimeMs(pack: CompiledPackDefinition): number {
+  const runtime = pack.budget.maxRuntimeMs;
+  if (typeof runtime !== 'number') throw new Error(`${pack.id} must declare maxRuntimeMs`);
+  return runtime;
+}
+
+function resolveFragment(fragment: CompiledPackDefinition['task']['requirements'][number]): string {
+  const path = join(trackRoot, fragment.path);
+  assert(existsSync(path), `missing fragment source ${fragment.path}`);
+  const text = readFileSync(path, 'utf8');
+  const start = fragment.from ? text.indexOf(fragment.from) : 0;
+  assert(start >= 0, `${fragment.id} has no start marker ${fragment.from}`);
+  const end = fragment.until ? text.indexOf(fragment.until, start + (fragment.from?.length ?? 0)) : text.length;
+  assert(end > start, `${fragment.id} resolves to empty or reversed text`);
+  return text.slice(start, end).trim();
+}
+
+test('L3 product work and production specifications are separate modules', () => {
+  assert.equal(packs.length, 8);
+  assert.equal(packs.filter(pack => pack.moduleType === 'feature').length, 4);
+  assert.equal(packs.filter(pack => pack.moduleType === 'specification').length, 4);
+
+  for (const pack of packs) {
+    const promptPaths = pack.task.requirements.map(fragment => fragment.path);
+    if (pack.moduleType === 'feature') {
+      assert(promptPaths.every(path => path === 'prompts/modular/l3-features-1.0.0.md'));
+      assert(pack.checks.every(check => check.role === 'feature'));
+    } else {
+      assert(promptPaths.every(path => path === 'prompts/modular/l3-specifications-1.0.0.md'));
+      assert(pack.task.requirements.every(fragment => fragment.requiresFeatures?.length));
+      assert(pack.checks.every(check => check.role === 'guarantee'));
+      assert(pack.checks.every(check => check.observations?.includes('unmentioned')));
+    }
+  }
+});
+
+test('every L3 scored check has isolated setup and one criterion', () => {
+  assert.equal(selected.length, 22);
+  const stableKeys = new Set();
+
+  for (const { pack, check } of selected) {
+    const feature = featureFor(check);
+    assert(feature, `${pack.id}.${check.id} must select a real feature`);
+    assert.equal(feature.criteria.length, 1,
+      `${pack.id}.${check.id} must not depend on another criterion's side effects`);
+    assert(feature.setup.length > 0, `${pack.id}.${check.id} must own its setup`);
+    const criterion = firstCriterion(feature);
+    const key = `${pack.stableId ?? pack.id}.${check.stableId ?? check.id}.${criterion.id}`;
+    assert(!stableKeys.has(key), `duplicate stable check ${key}`);
+    stableKeys.add(key);
+  }
+});
+
+test('L3 dependencies close over real exact pack releases', () => {
+  const visit = (pack: CompiledPackDefinition, seen = new Set<string>()): Set<string> => {
+    const ref = `${pack.id}@${pack.version}`;
+    if (seen.has(ref)) return seen;
+    seen.add(ref);
+    for (const required of pack.requiresPacks) {
+      const dependency = packByRef.get(required);
+      assert(dependency, `${ref} requires missing ${required}`);
+      visit(dependency, seen);
+    }
+    return seen;
+  };
+  for (const pack of packs) visit(pack);
+  const order = requiredPack('ecommerce.l3.order-delivery-features');
+  assert(visit(order).has('ecommerce.returns-pricing-features@1.1.0'));
+});
+
+test('L3 prompt and contract fragments resolve to non-empty text', () => {
+  const fragments = new Map();
+  for (const pack of packs) {
+    for (const fragment of [...pack.task.requirements, ...pack.task.contracts]) {
+      const text = resolveFragment(fragment);
+      assert(text.length > 20, `${fragment.id} is too small to be useful`);
+      const previous = fragments.get(fragment.id);
+      if (previous) {
+        assert.equal(text, previous, `${fragment.id} must resolve identically for every owner`);
+      } else {
+        fragments.set(fragment.id, text);
+      }
+    }
+  }
+  assert.equal(
+    packs.flatMap(pack => pack.task.contracts)
+      .filter(fragment => fragment.id === 'ecommerce.l3.reservation-hooks').length,
+    2,
+    'reservations and cart expiration must share one testing-interface fragment',
+  );
+  const scheduled = requiredPack('ecommerce.l3.scheduled-restocks-features');
+  const calls = scheduled.task.contracts.find(fragment =>
+    fragment.id === 'ecommerce.l3.scheduled-restock-testing-calls');
+  assert(calls, 'scheduled restocks must include direct testing calls');
+  assert.match(resolveFragment(calls), /DELETE \/api\/admin\/scheduled-restocks\/:id/);
+  assert.match(resolveFragment(calls), /cancelScheduledRestock/);
+});
+
+test('L3 feature requests and production specifications do not claim the same work', () => {
+  const featureText = readFileSync(join(trackRoot, 'prompts', 'modular', 'l3-features-1.0.0.md'), 'utf8');
+  const specificationText = readFileSync(
+    join(trackRoot, 'prompts', 'modular', 'l3-specifications-1.0.0.md'), 'utf8');
+  assert.doesNotMatch(featureText, /survive a backend restart|more than once|without an open browser|Only an admin/);
+  assert.doesNotMatch(specificationText, /shows the remaining|enters the stock ledger|returns empty/);
+
+  const featureCriteria = selected.filter(entry => entry.pack.moduleType === 'feature')
+    .map(entry => firstCriterion(featureFor(entry.check)));
+  const specificationCriteria = selected.filter(entry => entry.pack.moduleType === 'specification')
+    .map(entry => firstCriterion(featureFor(entry.check)));
+  const featureSteps = new Set(featureCriteria.map(criterion => JSON.stringify(criterion.steps)));
+  assert(specificationCriteria.every(criterion => !featureSteps.has(JSON.stringify(criterion.steps))),
+    'a production check must not duplicate a product check byte for byte');
+});
+
+test('the sequential L3 brief agrees with cumulative L2 shipping behavior', () => {
+  const sequentialBrief = readFileSync(join(trackRoot, 'prompts', '03-scheduled.md'), 'utf8');
+  assert.match(sequentialBrief, /Shipping remains the immediate staff action introduced at level 2/);
+  assert.match(sequentialBrief, /shipped order moves to `delivered` \*\*60 seconds\*\* after shipping/);
+  assert.doesNotMatch(sequentialBrief, /pending.*moves to.*shipped/is);
+  assert.doesNotMatch(sequentialBrief, /time it actually ran/);
+});
+
+test('L3 capability and evidence declarations match the selected actions', () => {
+  const knownCapabilities = new Set([
+    'backend-lifecycle', 'browser', 'concurrency', 'concurrent-actors', 'database-observation',
+    'direct-database-write', 'direct-server-call', 'request-replay',
+  ]);
+  const knownEvidence = new Set([
+    'browser-observation', 'concurrent-outcome', 'database-observation', 'fresh-client-observation',
+    'server-action-observation', 'server-refusal', 'server-response',
+  ]);
+  for (const pack of packs) {
+    assert(pack.capabilities.every(value => knownCapabilities.has(value)));
+    assert(pack.evidence.every(value => knownEvidence.has(value)));
+    const actions = selected.filter(entry => entry.pack.id === pack.id)
+      .flatMap(entry => nestedSteps(featureFor(entry.check)).map(step => step.do));
+    if (actions.includes('restartBackend')) assert(pack.capabilities.includes('backend-lifecycle'));
+    if (actions.includes('callAction')) {
+      assert(pack.capabilities.includes('direct-server-call'));
+      assert(pack.evidence.includes('server-response'));
+    }
+    if (actions.includes('replayAs')) {
+      assert(pack.capabilities.includes('request-replay'));
+      assert(pack.evidence.includes('server-refusal'));
+    }
+    assert(!pack.evidence.includes('fresh-client-observation'),
+      `${pack.id} does not run freshClient and must not claim fresh-client evidence`);
+  }
+});
+
+test('timed and restarted work has conclusive before-and-after observations', () => {
+  const durationText = readFileSync(join(trackRoot, 'prompts', 'modular', 'l3-features-1.0.0.md'), 'utf8');
+  assert.match(durationText, /90 seconds/);
+
+  const durability = requiredPack('ecommerce.l3.deferred-durability-specifications');
+  for (const check of durability.checks) {
+    const feature = featureFor(check);
+    const steps = nestedSteps(feature);
+    const restart = steps.findIndex(step => step.do === 'restartBackend');
+    assert(restart > 0);
+    assert(steps.slice(0, restart).some(step => ['expect', 'expectNumber'].includes(step.do)),
+      `${check.id} needs a pre-restart observation`);
+    assert(steps.slice(restart + 1).some(step => ['expect', 'expectNumber'].includes(step.do)),
+      `${check.id} needs a post-restart completion observation`);
+  }
+
+  const timedChecks: ReadonlyArray<readonly [packId: string, checkId: string]> = [
+    ['ecommerce.l3.reservations-features', 'countdown'],
+    ['ecommerce.l3.scheduled-restocks-features', 'pending'],
+  ];
+  for (const [packId, checkId] of timedChecks) {
+    const pack = requiredPack(packId);
+    const feature = featureFor(requiredCheck(pack, checkId));
+    const numbers = nestedSteps(feature).filter(step => step.do === 'expectNumber');
+    assert(numbers.some(step => atLeast(step.atLeast, 80)));
+    assert(numbers.some(step => atMost(step.atMost, 75)));
+    assert(nestedSteps(feature).some(step => step.do === 'wait' && atLeast(step.ms, 15000)));
+  }
+});
+
+test('scheduled-work access tests both server actions and cleans up pending work', () => {
+  const pack = requiredPack('ecommerce.l3.deferred-access-specifications');
+  const steps = nestedSteps(featureFor(requiredCheck(pack)));
+  assert(steps.some(step => step.do === 'callAction' && step.action === 'scheduleRestock'));
+  assert(steps.some(step => step.do === 'replayAs'
+    && step.namedAction?.id === 'cancelScheduledRestock'));
+  assert(steps.some(step => step.do === 'expectActionOutcome' && step.outcome === 'refused'));
+  assert(steps.some(step => step.do === 'expectReplayRejected'));
+  assert.equal(lastStep(steps).do, 'click');
+  assert.equal(lastStep(steps).testid, 'pending-restock-cancel');
+});
+
+test('pending-work checks cancel or complete the work they create', () => {
+  const pendingPack = requiredPack('ecommerce.l3.scheduled-restocks-features');
+  const pendingSteps = nestedSteps(featureFor(
+    requiredCheck(pendingPack, 'pending')));
+  assert.equal(lastStep(pendingSteps).do, 'click');
+  assert.equal(lastStep(pendingSteps).testid, 'pending-restock-cancel');
+
+  const timePack = requiredPack('ecommerce.l3.server-time-specifications');
+  const timeSteps = nestedSteps(featureFor(requiredCheck(timePack, 'not-early')));
+  assert(timeSteps.some(step => step.do === 'expectNumber' && step.plus === 4));
+  assert.equal(timeSteps.some(step => step.testid === 'pending-restock-remaining'), false);
+  assert.equal(lastStep(timeSteps).do, 'expect');
+  assert.equal(lastStep(timeSteps).absent, true);
+});
+
+test('L3 budgets cover declared waits without becoming unbounded estimates', () => {
+  for (const pack of packs) {
+    const declaredDelay = selected.filter(entry => entry.pack.id === pack.id)
+      .reduce((total, entry) => {
+        const steps = nestedSteps(featureFor(entry.check));
+        const fixed = steps.reduce((sum, step) =>
+          sum + Number(step.ms ?? 0) + Number(step.settleMs ?? 0), 0);
+        const longestObservation = Math.max(0, ...steps.map(step => Number(step.within ?? 0)));
+        return total + fixed + longestObservation;
+      }, 0);
+    assert(maxRuntimeMs(pack) >= declaredDelay,
+      `${pack.id} budget is below its declared waits`);
+    assert(maxRuntimeMs(pack) <= declaredDelay + 180000,
+      `${pack.id} budget has more than three minutes of unexplained slack`);
+  }
+});
+
+test('L3 covers each declared product area and production behavior', () => {
+  assert.deepEqual(new Set(packs.filter(pack => pack.moduleType === 'feature').map(pack => pack.id)), new Set([
+    'ecommerce.l3.reservations-features',
+    'ecommerce.l3.scheduled-restocks-features',
+    'ecommerce.l3.order-delivery-features',
+    'ecommerce.l3.cart-expiration-features',
+  ]));
+  assert.deepEqual(new Set(packs.filter(pack => pack.moduleType === 'specification').map(pack => pack.id)), new Set([
+    'ecommerce.l3.deferred-durability-specifications',
+    'ecommerce.l3.deferred-integrity-specifications',
+    'ecommerce.l3.server-time-specifications',
+    'ecommerce.l3.deferred-access-specifications',
+  ]));
+});
+
+test('the cumulative L3 recipe adds every L3 check', () => {
+  const plan = compileRecipeFile(
+    join(trackRoot, 'composition', 'recipes', 'sequential-l3-1.0.0.json'),
+    { trackRoot },
+  );
+  assert.equal(plan.checks.length, 98);
+  assert.equal(plan.scoring.points, 180);
+  assert.equal(plan.execution.length, 49);
+
+  const plannedKeys = new Set(plan.checks.map(check => check.stableKey));
+  const expectedL3Keys = selected.flatMap(({ pack, check }) => {
+    const feature = featureFor(check);
+    const criteria = check.criteria === undefined
+      ? feature.criteria
+      : check.criteria.map(id => feature.criteria.find(criterion => criterion.id === id));
+    return criteria.map(criterion => {
+      if (!criterion) throw new Error(`${check.id} must select a real criterion`);
+      return `${pack.stableId ?? pack.id}.${check.stableId ?? check.id}.${criterion.id}`;
+    });
+  });
+  assert.equal(expectedL3Keys.length, 22);
+  assert(expectedL3Keys.every(key => plannedKeys.has(key)));
+
+  const reservationHooks = plan.recipe.task.contracts.find(fragment =>
+    fragment.id === 'ecommerce.l3.reservation-hooks');
+  assert(reservationHooks, 'L3 recipe must contain reservation hooks');
+  assert.deepEqual(reservationHooks.owners, [
+    'ecommerce.l3.cart-expiration-features',
+    'ecommerce.l3.reservations-features',
+  ]);
+});
+
+function recipePacks(value: unknown): Array<{ path: string }> {
+  if (!isRecord(value) || !Array.isArray(value.packs)) throw new Error('candidate recipe must have packs');
+  return value.packs.map((pack, index) => {
+    if (!isRecord(pack) || typeof pack.path !== 'string') {
+      throw new Error(`candidate recipe pack ${index} must have a path`);
+    }
+    return { path: pack.path };
+  });
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
diff --git a/tools/stack-bench/tests/leak-audit.test.ts b/tools/stack-bench/tests/leak-audit.test.ts
new file mode 100644
index 00000000000..08f89d30b38
--- /dev/null
+++ b/tools/stack-bench/tests/leak-audit.test.ts
@@ -0,0 +1,104 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { auditTranscript, networkTargetsFromBash, pathsFromBash } from '../commands/leak-audit.js';
+
+test('Bash reader extraction keeps absolute file arguments', () => {
+  assert.deepEqual(pathsFromBash('cat /app/src/main.ts; rg secret /outside/notes.md'),
+    ['/app/src/main.ts', '/outside/notes.md']);
+});
+
+test('a completed external Bash read contaminates the transcript', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-leak-audit-'));
+  const transcript = join(root, 'session.jsonl');
+  try {
+    const events = [
+      { cwd: '/app', message: { content: [{ type: 'tool_use', id: 'read-1', name: 'Bash',
+        input: { command: 'cat /tools/stack-bench/grader/grade.ts' } }] } },
+      { message: { content: [{ type: 'tool_result', tool_use_id: 'read-1', is_error: false }] } },
+    ];
+    writeFileSync(transcript, `${events.map(event => JSON.stringify(event)).join('\n')}\n`);
+
+    const result = auditTranscript(transcript, '/app');
+
+    assert.equal(result.cwd, '/app');
+    assert.equal(result.refused.length, 0);
+    assert.deepEqual(result.hits.map(hit => ({ path: hit.path, kind: hit.kind })), [{
+      path: '/tools/stack-bench/grader/grade.ts',
+      kind: 'GRADER / TEST SPECS',
+    }]);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('private grading reads inside the app contaminate the transcript', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-private-leak-audit-'));
+  const transcript = join(root, 'session.jsonl');
+  try {
+    const events = [
+      { cwd: '/app', message: { content: [{ type: 'tool_use', id: 'read-1', name: 'Bash',
+        input: { command: 'cat stack-bench/bundle.json' } }] } },
+      { message: { content: [{ type: 'tool_result', tool_use_id: 'read-1', is_error: false }] } },
+    ];
+    writeFileSync(transcript, `${events.map(event => JSON.stringify(event)).join('\n')}\n`);
+
+    const result = auditTranscript(transcript, '/app');
+
+    assert.deepEqual(result.hits.map(hit => ({ path: hit.path, kind: hit.kind })), [{
+      path: '/app/stack-bench/bundle.json',
+      kind: 'GRADER / TEST SPECS',
+    }]);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('network targets come from URLs and raw sockets in a shell command', () => {
+  assert.deepEqual(networkTargetsFromBash(
+    'curl -s http://127.0.0.1:7331/api/overview && wget https://registry.npmjs.org/react; '
+    + 'nc -z host.docker.internal 6532; node -e "fetch(\'http://localhost:6173/\')"'), [
+    { host: '127.0.0.1', port: 7331 },
+    { host: 'registry.npmjs.org', port: null },
+    { host: 'localhost', port: 6173 },
+    { host: 'host.docker.internal', port: 6532 },
+  ]);
+  assert.deepEqual(networkTargetsFromBash('npm install && npm run build'), []);
+});
+
+test('a local network read outside the run\'s own ports contaminates the transcript', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-network-leak-audit-'));
+  const transcript = join(root, 'session.jsonl');
+  try {
+    const events = [
+      { cwd: '/app', message: { content: [{ type: 'tool_use', id: 'own', name: 'Bash',
+        input: { command: 'curl -s http://localhost:6173/api/items' } }] } },
+      { message: { content: [{ type: 'tool_result', tool_use_id: 'own', is_error: false }] } },
+      { message: { content: [{ type: 'tool_use', id: 'other', name: 'Bash',
+        input: { command: 'curl -s http://127.0.0.1:3211/v1/database/app-ecom-run1/schema' } }] } },
+      { message: { content: [{ type: 'tool_result', tool_use_id: 'other', is_error: false }] } },
+      { message: { content: [{ type: 'tool_use', id: 'blocked', name: 'Bash',
+        input: { command: 'curl -s http://127.0.0.1:7331/api/overview' } }] } },
+      { message: { content: [{ type: 'tool_result', tool_use_id: 'blocked', is_error: true }] } },
+      { message: { content: [{ type: 'tool_use', id: 'registry', name: 'Bash',
+        input: { command: 'curl -sI https://registry.npmjs.org/express' } }] } },
+      { message: { content: [{ type: 'tool_result', tool_use_id: 'registry', is_error: false }] } },
+    ];
+    writeFileSync(transcript, `${events.map(event => JSON.stringify(event)).join('\n')}\n`);
+
+    const result = auditTranscript(transcript, '/app', { ownPorts: [6173, 6001, 3210] });
+
+    assert.deepEqual(result.hits.map(hit => ({ path: hit.path, kind: hit.kind })), [
+      { path: '127.0.0.1:3211', kind: 'NETWORK / OTHER RUN' },
+      { path: 'registry.npmjs.org', kind: 'network (internet)' },
+    ]);
+    assert.deepEqual(result.refused.map(hit => ({ path: hit.path, kind: hit.kind })), [
+      { path: '127.0.0.1:7331', kind: 'NETWORK / OTHER RUN' },
+    ]);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/linter-coverage.contract.ts b/tools/stack-bench/tests/linter-coverage.contract.ts
new file mode 100644
index 00000000000..e7e22fb82db
--- /dev/null
+++ b/tools/stack-bench/tests/linter-coverage.contract.ts
@@ -0,0 +1,111 @@
+import assert from 'node:assert/strict';
+import { resolve } from 'node:path';
+import test from 'node:test';
+
+import { completeAbortedHooks, completeUnvisitedHooks, loadHooks, selectHooks } from '../linter/lint.js';
+import { stableElementSelector } from '../src/actions/element-selector.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+interface TestHook {
+  id: string;
+  element: string;
+  stage: string;
+  check: 'visible' | 'attached';
+  note: string;
+  revealedBy?: string;
+}
+
+interface TestResult {
+  id: string;
+  status: 'PASS' | 'FAIL' | 'BLOCKED' | 'SCENARIO';
+  detail?: string;
+}
+
+test('stable element selectors support one-off ids and repeated roles', () => {
+  assert.equal(stableElementSelector('account-name'),
+    '[data-role="account-name"],#account-name');
+  assert.throws(() => stableElementSelector('account name'), /invalid application interface name/);
+});
+
+test('a selected lint surface excludes unrelated hooks and keeps unknown hooks for scenario grading', () => {
+  const selected = selectHooks([
+    { id: 'accounts', element: 'accounts', stage: 'landing', check: 'visible', note: '' },
+    { id: 'cart', element: 'cart', stage: 'cart', check: 'visible', note: '' },
+  ], ['support-link', 'accounts']);
+  assert.deepEqual(selected.map(hook => hook.id), ['accounts', 'support-link']);
+  assert.equal(selected[1]?.stage, 'scenario');
+});
+
+test('selected scenario controls do not require retired JSON contract files', () => {
+  const hooks = loadHooks(3, { contracts: resolve(STACK_BENCH_ROOT, 'tracks/ecommerce/contracts') },
+    ['current-user']);
+  assert.deepEqual(hooks, [{
+    id: 'current-user',
+    element: 'the selected application control current-user',
+    stage: 'scenario',
+    check: 'visible',
+    note: 'checked by the selected feature suite',
+  }]);
+});
+
+test('selected hooks keep contract order when one control reveals another', () => {
+  const selected = selectHooks([
+    { id: 'signin-toggle', element: 'sign-in toggle', stage: 'landing', check: 'visible', note: '' },
+    { id: 'signin-username', element: 'sign-in user', stage: 'landing', check: 'attached', note: '', revealedBy: 'signin-toggle' },
+    { id: 'signin-password', element: 'sign-in password', stage: 'landing', check: 'attached', note: '', revealedBy: 'signin-toggle' },
+  ], ['signin-password', 'signin-toggle', 'signin-username']);
+
+  assert.deepEqual(selected.map(hook => hook.id), [
+    'signin-toggle',
+    'signin-username',
+    'signin-password',
+  ]);
+});
+
+test('contract lint fails closed when a core flow forgets a lintable stage', () => {
+  const hooks: TestHook[] = [
+    { id: 'seen', element: 'seen control', stage: 'landing', check: 'visible', note: '' },
+    { id: 'forgotten', element: 'forgotten control', stage: 'operations', check: 'visible', note: '' },
+    { id: 'scenario-only', element: 'scenario control', stage: 'scenario', check: 'visible', note: 'requires two actors' },
+  ];
+  const results: TestResult[] = [{ id: 'seen', status: 'PASS' }];
+
+  completeUnvisitedHooks(hooks, results);
+
+  assert.deepEqual(results, [
+    { id: 'seen', status: 'PASS' },
+    { id: 'forgotten', status: 'BLOCKED',
+      detail: 'the core flow did not visit contract stage "operations"' },
+    { id: 'scenario-only', status: 'SCENARIO', detail: 'requires two actors' },
+  ]);
+});
+
+test('contract lint does not duplicate hooks already visited by the walk', () => {
+  const hooks: TestHook[] = [{ id: 'queue-depth', element: 'queue depth', stage: 'fulfilment', check: 'visible', note: '' }];
+  const results: TestResult[] = [{ id: 'queue-depth', status: 'FAIL', detail: 'missing' }];
+
+  completeUnvisitedHooks(hooks, results);
+
+  assert.equal(results.length, 1);
+});
+
+test('an unexpected walk error records one failure before blocking later hooks', () => {
+  const hooks: TestHook[] = [
+    { id: 'seen', element: 'seen control', stage: 'landing', check: 'visible', note: '' },
+    { id: 'cart-panel', element: 'cart panel', stage: 'cart', check: 'visible', note: '' },
+    { id: 'order-list', element: 'order list', stage: 'after-checkout', check: 'visible', note: '' },
+    { id: 'scenario-only', element: 'scenario control', stage: 'scenario', check: 'visible', note: 'requires setup' },
+  ];
+  const results: TestResult[] = [{ id: 'seen', status: 'PASS' }];
+
+  completeAbortedHooks(hooks, results, new Error('target product was not visible\nlocator details'));
+
+  assert.deepEqual(results, [
+    { id: 'seen', status: 'PASS' },
+    { id: 'core-flow', status: 'FAIL',
+      detail: 'core flow aborted: target product was not visible locator details' },
+    { id: 'cart-panel', status: 'BLOCKED', detail: 'core flow aborted' },
+    { id: 'order-list', status: 'BLOCKED', detail: 'core flow aborted' },
+    { id: 'scenario-only', status: 'SCENARIO', detail: 'requires setup' },
+  ]);
+});
diff --git a/tools/stack-bench/tests/live-progression.test.ts b/tools/stack-bench/tests/live-progression.test.ts
new file mode 100644
index 00000000000..0fa7b29b74a
--- /dev/null
+++ b/tools/stack-bench/tests/live-progression.test.ts
@@ -0,0 +1,645 @@
+import assert from 'node:assert/strict';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync }
+  from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { loadTrack } from '../src/composition/tracks.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { artifactPayload, createArtifact, emptyArtifactIdentities, writeArtifact }
+  from '../src/evidence/artifacts.js';
+import { createCheckEvidence } from '../src/evidence/check-evidence.js';
+import type { CheckEvidenceStatus } from '../src/evidence/check-evidence.js';
+import { hashAppSource } from '../src/runtime/source-snapshot.js';
+import { compileDependencyPolicyInput, compileFeatureCatalogInput, compileProgressionInput }
+  from '../src/progression/progression-definition.js';
+import type { ProgressionInput } from '../src/progression/progression-definition.js';
+import { createLiveProgressionExecution, type LiveProgressionExecution,
+  type LiveProgressionStatus }
+  from '../src/progression/live-progression.js';
+import { auditProgressionReferenceRun }
+  from '../src/progression/progression-reference-audit.js';
+import type { ProgressionWorkAction } from '../src/progression/progression-engine.js';
+import type { ProgressionRecipeAction, ProgressionRecipeSelections }
+  from '../src/progression/progression-recipe-selection.js';
+import type { ProgressionState } from '../src/progression/progression-state.js';
+import type { ProgressionNodeState } from '../src/progression/progression-state.js';
+import { validateCampaignRun } from '../src/campaigns/campaign-run-validation.js';
+import type { RepairPlanInput } from '../src/progression/repair-plan.js';
+
+interface FixtureDependency {
+  id: string;
+  reason: string;
+}
+
+interface FixtureNode {
+  id: string;
+  title: string;
+  questline: string;
+  dependencies: FixtureDependency[];
+  featureRefs: string[];
+  promptModules: string[];
+  gradingChecks: Array<{ id: string; points: number; role: 'feature' | 'guarantee' }>;
+}
+
+interface FixtureQuestline {
+  id: string;
+  title: string;
+  nodes?: string[];
+}
+
+interface FixtureDefinition {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  policy: string;
+  repair: RepairPlanInput;
+  workSelection?: 'feature' | 'progressive' | 'all-at-once';
+  nodes: FixtureNode[];
+  questlines: FixtureQuestline[];
+}
+
+type WorkSelection = { action: ProgressionWorkAction } & ProgressionRecipeSelections;
+
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function workSelection(selected: ProgressionRecipeAction): WorkSelection {
+  assert('grader' in selected, 'expected a progression work action');
+  return selected;
+}
+
+function executionState(execution: LiveProgressionExecution): ProgressionState {
+  assert(execution.state, 'expected initialized progression state');
+  return execution.state;
+}
+
+function nodeState(state: ProgressionState, id: string): ProgressionNodeState {
+  const node = state.nodes[id];
+  assert(node, `expected progression node ${id}`);
+  return node;
+}
+
+function latestStatus(states: LiveProgressionStatus[]): LiveProgressionStatus {
+  const status = states.at(-1);
+  assert(status, 'expected a reported progression status');
+  return status;
+}
+
+function workAction(action: ProgressionRecipeAction['action']): ProgressionWorkAction {
+  assert.notEqual(action.type, 'terminal');
+  return action as ProgressionWorkAction;
+}
+
+const definition = (): FixtureDefinition => ({
+  schemaVersion: 7,
+  kind: 'progression-mode',
+  id: 'live-fixture',
+  version: '1.0.0',
+  state: 'draft',
+  title: 'Live fixture',
+  policy: 'dependency-graph',
+  repair: { selection: 'feature', budget: { perFeature: 2 } },
+  workSelection: 'progressive',
+  nodes: [{
+    id: 'accounts',
+    title: 'Accounts',
+    questline: 'identity',
+    dependencies: [],
+    featureRefs: ['ecommerce.feature.accounts@1.1.0'],
+    promptModules: [],
+    gradingChecks: [{ id: 'ecommerce.feature.accounts.accounts.1a', points: 1,
+      role: 'feature' }],
+  }],
+  questlines: [{ id: 'identity', title: 'Identity' }],
+});
+const splitIdentities = (progression: ProgressionInput) => {
+  const progressionDefinition = progression.definition as typeof progression.definition & {
+    repair?: RepairPlanInput;
+    workSelection?: 'feature' | 'progressive' | 'all-at-once';
+  };
+  const { policy: _policy, repair, unchangedFailureLimit: _limit, workSelection,
+    ...catalogDefinition } = progressionDefinition;
+  assert(repair);
+  const featureCatalog = compileFeatureCatalogInput({ ...catalogDefinition,
+    schemaVersion: 1, kind: 'feature-catalog' });
+  const dependencyPolicy = compileDependencyPolicyInput(repair, featureCatalog,
+    { workSelection });
+  return { featureCatalog, dependencyPolicy,
+    featureCatalogIdentity: featureCatalog.identity,
+    dependencyPolicyIdentity: dependencyPolicy.identity };
+};
+
+const evidence = (status: CheckEvidenceStatus) => createCheckEvidence({
+  status,
+  code: status === 'passed' ? 'completed' : 'test_result',
+  phase: 'assertion',
+  startedAtMs: 1,
+  completedAtMs: 2,
+});
+const setupEvidence = () => createCheckEvidence({
+  status: 'passed',
+  code: 'completed',
+  phase: 'setup',
+  startedAtMs: 1,
+  completedAtMs: 2,
+});
+
+test('live progression binds and persists one exact accepted action', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-live-progression-'));
+  try {
+    const appDir = join(root, 'app');
+    const outputDir = join(root, 'result');
+    mkdirSync(join(appDir, 'stack-bench'), { recursive: true });
+    mkdirSync(outputDir, { recursive: true });
+    writeFileSync(join(appDir, 'index.js'), 'export const ready = true;\n');
+
+    const progression = compileProgressionInput(definition());
+    const split = splitIdentities(progression);
+    const binding = resolveRecipeRelease(loadTrack('ecommerce'), 1,
+      'ecommerce.sequential-l1@2.5.0');
+    const owner = {
+      schemaVersion: 1,
+      campaign: { id: 'campaign', version: '1.0.0', sha256: 'a'.repeat(64) },
+      attempt: { id: 'campaign-r1', track: 'ecommerce', stack: 'postgres',
+        agentAdapter: 'claude-code', model: 'test-model', conditionSha256: 'b'.repeat(64) },
+      workspace: { appDirectory: 'source' },
+    };
+    const identities = emptyArtifactIdentities({
+      experiment: { ...owner.campaign, state: 'draft' },
+      agentAdapter: { id: owner.attempt.agentAdapter },
+      stackAdapter: { id: owner.attempt.stack },
+    });
+    const runArtifact = createArtifact({
+      kind: 'benchmark_run',
+      id: 'run-1',
+      attempt: { id: 'run-1', parentId: owner.attempt.id },
+      identities,
+      payload: {
+        mode: { id: 'dependency', version: '3.2.0' },
+        backend: owner.attempt.stack,
+        model: owner.attempt.model,
+        condition: { sha256: owner.attempt.conditionSha256 },
+        featureCatalog: split.featureCatalogIdentity,
+        dependencyPolicy: split.dependencyPolicyIdentity,
+        progressionOwner: { schemaVersion: 1, campaign: owner.campaign, attempt: owner.attempt },
+      },
+    });
+    const states: LiveProgressionStatus[] = [];
+    const execution = createLiveProgressionExecution({
+      progression,
+      ...split,
+      owner,
+      statePath: join(outputDir, 'progression-state.json'),
+      runId: 'run-1',
+      outputDir,
+      appDir,
+      track: 'ecommerce',
+      backend: owner.attempt.stack,
+      identities,
+      recipeBindings: new Map([[1, binding]]),
+      getRunArtifact: () => runArtifact,
+      onState: status => states.push(status),
+    });
+    execution.initialize();
+    const selected = workSelection(execution.bind());
+    const source = hashAppSource(appDir);
+    const key = selected.grader.checkKeys[0];
+    const recipe = selected.grader.request.recipe;
+    const grade = {
+      observation: 'scored',
+      source: { sha256: source.sha256 },
+      selection: {
+        sha256: selected.grader.selectionSha256,
+        checks: [{ stableKey: key, points: 1 }],
+        attemptedChecks: [key],
+        reportedChecks: [key],
+        notRun: [],
+      },
+      totals: { score: 1, max: 1, regression: null },
+      suites: { application: { features: [{ setupEvidence: setupEvidence(), criteria: [
+        { stableKey: key, points: 1, evidence: evidence('passed') },
+      ] }] } },
+      outcome: { kind: 'passed' },
+    };
+    const gradeArtifact = {
+      kind: 'grade_bundle',
+      id: 'grade-1',
+      attempt: { id: 'grade-1', parentId: 'run-1' },
+      identities: emptyArtifactIdentities({
+        recipe: { id: recipe.id, version: recipe.version, sha256: recipe.contentSha256 },
+        stackAdapter: { id: owner.attempt.stack },
+      }),
+      payload: grade,
+    };
+    writeArtifact(join(appDir, 'stack-bench', 'bundle.json'), gradeArtifact);
+    mkdirSync(join(outputDir, 'grading'), { recursive: true });
+    writeArtifact(join(outputDir, 'grading', 'bundle.json'), gradeArtifact);
+
+    const next = execution.record({ selected,
+      bundle: { ...grade, totals: { score: 0, max: 1, regression: null },
+        outcome: { kind: 'app_failure' } }, level: 1 });
+    assert(next);
+    assert.equal(next.type, 'terminal');
+    assert.equal(nodeState(executionState(execution), 'accounts').status, 'passed');
+    assert.equal(latestStatus(states).score.questlineAveragePercentage, 100);
+    assert(existsSync(join(outputDir, 'progression-state.json')));
+    assert(existsSync(join(outputDir, 'progression', 'attempt-001', 'bundle.json')));
+    assert(!existsSync(join(outputDir, 'level-l1-checkpoint.json')));
+    assert(existsSync(join(outputDir, 'source', 'index.js')));
+    assert.doesNotThrow(() => createArtifact({
+      ...runArtifact,
+      attempt: { id: 'run-1', parentId: owner.attempt.id },
+      payload: { ...runArtifact.payload, progressionStatus: states.at(-1) },
+    }));
+    assert.throws(() => createArtifact({
+      ...runArtifact,
+      attempt: { id: 'run-1', parentId: owner.attempt.id },
+      payload: { ...runArtifact.payload,
+        progressionStatus: { ...states.at(-1), stateArtifact: '../state.json' } },
+    }), /stateArtifact is invalid/);
+
+    const attempt = {
+      id: owner.attempt.id,
+      mode: { id: 'dependency', version: '3.2.0' },
+      levels: [1],
+      featureCatalog: split.featureCatalogIdentity,
+      dependencyPolicy: split.dependencyPolicyIdentity,
+      stack: owner.attempt.stack,
+      agentAdapter: owner.attempt.agentAdapter,
+      model: owner.attempt.model,
+      guidance: 'neutral',
+      condition: { sha256: owner.attempt.conditionSha256 },
+      skills: [],
+    };
+    const agentIdentity = identities.agentAdapter;
+    const stackIdentity = identities.stackAdapter;
+    const engineIdentity = identities.engine;
+    assert(agentIdentity);
+    assert(stackIdentity);
+    assert(engineIdentity);
+    const plan = {
+      id: owner.campaign.id,
+      version: owner.campaign.version,
+      state: 'draft',
+      contentSha256: owner.campaign.sha256,
+      featureCatalog: split.featureCatalog,
+      dependencyPolicy: split.dependencyPolicy,
+      definition: { track: owner.attempt.track, selection: { levels: [] },
+        runtime: { buildImage: null },
+        repair: { selection: 'feature' as const, budget: { perFeature: 2 },
+          order: 'declared' as const },
+        budgets: { maxCostUsdPerAttempt: null } },
+      agents: [{ adapter: owner.attempt.agentAdapter, model: owner.attempt.model,
+        costLimit: 'non-billable', identity: agentIdentity }],
+      stacks: [{ id: owner.attempt.stack,
+        version: stackIdentity.version }],
+      conditions: [attempt.condition],
+      identities: { engine: engineIdentity },
+    };
+    const completedRun = artifactPayload(createArtifact({
+      ...runArtifact,
+      attempt: { id: 'run-1', parentId: owner.attempt.id },
+      payload: {
+        ...runArtifact.payload,
+        track: owner.attempt.track,
+        guidance: attempt.guidance,
+        condition: attempt.condition,
+        selectionRequest: plan.definition.selection,
+        skills: attempt.skills,
+        runtime: { buildImage: null },
+        progressionStatus: states.at(-1),
+        validation: { ladder: { policy: 'dependency-graph', requestedLevels: [1],
+          completedLevels: [1], stoppedAfterLevel: null, blockedLevels: [] } },
+        levels: [{ level: 1, selection: selected.grader.selection,
+          graded: true, score: 1, max: 1, repairs: 0,
+          repair: { status: 'not-needed', limit: 0, used: 0,
+            stopReason: 'not-needed', nodeRepairs: [
+              { nodeId: 'accounts', used: 0, exhaustionReason: null },
+            ] },
+          outcome: { kind: 'passed' } }],
+        totals: { score: 1, max: 1, costUsd: 0 },
+        outcome: { kind: 'passed' },
+      },
+    }));
+    assert.equal(validateCampaignRun(plan, attempt, completedRun, { resultDir: outputDir }),
+      completedRun);
+    assert.throws(() => validateCampaignRun(plan, attempt, {
+      ...completedRun,
+      totals: { ...completedRun.totals, score: 2 },
+    }, { resultDir: outputDir }), /totals\.score/);
+    assert.throws(() => validateCampaignRun(plan, attempt, {
+      ...completedRun,
+      progressionStatus: { ...completedRun.progressionStatus, attempts: 0 },
+    }, { resultDir: outputDir }), /progressionStatus/);
+    assert.throws(() => validateCampaignRun(plan, attempt, {
+      ...completedRun,
+      levels: completedRun.levels?.map(level => ({ ...level,
+        repair: { ...level.repair, nodeRepairs: level.repair?.nodeRepairs?.map(node => ({
+          ...node, used: node.nodeId === 'accounts' ? 1 : node.used,
+        })) } })),
+    }, { resultDir: outputDir }), /levels\.L1\.repair\.nodeRepairs/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('live progression records provider interruptions without consuming a repair', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-live-provider-failure-'));
+  try {
+    const appDir = join(root, 'app');
+    const outputDir = join(root, 'result');
+    mkdirSync(appDir, { recursive: true });
+    mkdirSync(outputDir, { recursive: true });
+    const progression = compileProgressionInput(definition());
+    const split = splitIdentities(progression);
+    const binding = resolveRecipeRelease(loadTrack('ecommerce'), 1,
+      'ecommerce.sequential-l1@2.5.0');
+    const owner = { schemaVersion: 1,
+      campaign: { id: 'campaign', version: '1.0.0', sha256: 'a'.repeat(64) },
+      attempt: { id: 'campaign-r1', track: 'ecommerce', stack: 'postgres',
+        agentAdapter: 'claude-code', model: 'test-model', conditionSha256: 'b'.repeat(64) },
+      workspace: { appDirectory: 'source' } };
+    const identities = emptyArtifactIdentities({
+      agentAdapter: { id: owner.attempt.agentAdapter },
+      stackAdapter: { id: owner.attempt.stack },
+    });
+    const runArtifact = createArtifact({ kind: 'benchmark_run', id: 'run-1',
+      attempt: { id: 'run-1', parentId: owner.attempt.id }, identities,
+      payload: { backend: owner.attempt.stack, model: owner.attempt.model,
+        condition: { sha256: owner.attempt.conditionSha256 },
+        featureCatalog: split.featureCatalogIdentity,
+        dependencyPolicy: split.dependencyPolicyIdentity,
+        progressionOwner: { schemaVersion: 1, campaign: owner.campaign, attempt: owner.attempt } } });
+    const execution = createLiveProgressionExecution({ progression, ...split, owner,
+      statePath: join(outputDir, 'progression-state.json'), runId: 'run-1',
+      outputDir, appDir, track: owner.attempt.track, backend: owner.attempt.stack,
+      identities, recipeBindings: new Map([[1, binding]]),
+      getRunArtifact: () => runArtifact });
+    execution.initialize();
+    const selected = workSelection(execution.bind());
+    execution.record({ selected, bundle: null, level: 1,
+      failure: { kind: 'provider_failure', reason: 'provider-connection-error' } });
+    const state = executionState(execution);
+    const attempt = state.attempts[0];
+    assert(attempt);
+    assert.equal(state.attempts.length, 1);
+    assert.equal(attempt.outcome, 'inconclusive');
+    assert.equal(attempt.category, 'provider_failure');
+    assert.equal(nodeState(state, 'accounts').repairs.used, 0);
+    assert.equal(existsSync(join(outputDir, 'progression', 'attempt-001')), false);
+    assert.equal(existsSync(join(outputDir, 'progression-state.json')), true);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('an interrupted execution restores the saved source and resumes the next graph action', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-live-resume-'));
+  try {
+    const firstOutput = join(root, 'execution-1');
+    const secondOutput = join(root, 'execution-2');
+    const firstApp = join(root, 'first-app');
+    const secondApp = join(root, 'second-app');
+    for (const path of [firstOutput, secondOutput, firstApp, secondApp]) {
+      mkdirSync(path, { recursive: true });
+    }
+    writeFileSync(join(firstApp, 'index.js'), 'export const level = 1;\n');
+    writeFileSync(join(secondApp, 'index.js'), 'export const interrupted = true;\n');
+
+    const value = definition();
+    const accounts = value.nodes[0];
+    assert(accounts);
+    value.nodes = [
+      accounts,
+      { id: 'catalog', title: 'Catalog', questline: 'catalog', dependencies: [],
+        featureRefs: ['ecommerce.feature.catalog@1.1.0'], promptModules: [],
+        gradingChecks: [{ id: 'ecommerce.feature.catalog.catalog.2a', points: 1,
+          role: 'feature' }] },
+      { id: 'purchasing', title: 'Purchasing', questline: 'identity', dependencies: [
+        { id: 'accounts', reason: 'Purchasing requires an account.' },
+        { id: 'catalog', reason: 'Purchasing requires a catalog item.' },
+      ], featureRefs: ['ecommerce.feature.purchasing@1.1.0'], promptModules: [],
+      gradingChecks: [{ id: 'ecommerce.feature.purchasing.purchase-order.3c', points: 1,
+        role: 'feature' }] },
+    ];
+    value.questlines = [
+      { id: 'identity', title: 'Identity', nodes: ['accounts', 'purchasing'] },
+      { id: 'catalog', title: 'Catalog', nodes: ['catalog'] },
+    ];
+    const progression = compileProgressionInput(value);
+    const split = splitIdentities(progression);
+    const binding = resolveRecipeRelease(loadTrack('ecommerce'), 1,
+      'ecommerce.sequential-l1@2.5.0');
+    const owner = {
+      schemaVersion: 1,
+      campaign: { id: 'campaign', version: '1.0.0', sha256: 'a'.repeat(64) },
+      attempt: { id: 'campaign-r1', track: 'ecommerce', stack: 'postgres',
+        agentAdapter: 'claude-code', model: 'test-model', conditionSha256: 'b'.repeat(64) },
+      workspace: { appDirectory: 'source' },
+    };
+    const identities = emptyArtifactIdentities({
+      agentAdapter: { id: owner.attempt.agentAdapter },
+      stackAdapter: { id: owner.attempt.stack },
+    });
+    const runArtifact = createArtifact({
+      kind: 'benchmark_run', id: 'run-1',
+      attempt: { id: 'run-1', parentId: owner.attempt.id }, identities,
+      payload: { backend: owner.attempt.stack, model: owner.attempt.model,
+        condition: { sha256: owner.attempt.conditionSha256 },
+        featureCatalog: split.featureCatalogIdentity,
+        dependencyPolicy: split.dependencyPolicyIdentity,
+        progressionOwner: { schemaVersion: 1, campaign: owner.campaign, attempt: owner.attempt } },
+    });
+    const first = createLiveProgressionExecution({ progression, ...split, owner,
+      statePath: join(firstOutput, 'progression-state.json'), runId: 'run-1',
+      outputDir: firstOutput, appDir: firstApp, track: owner.attempt.track,
+      backend: owner.attempt.stack, identities,
+      recipeBindings: new Map([[1, binding], [2, binding]]),
+      getRunArtifact: () => runArtifact });
+    assert.equal(first.initialize().resumed, false);
+    const selected = workSelection(first.bind());
+    const source = hashAppSource(firstApp);
+    const checks = selected.grader.checkKeys.map(stableKey => ({ stableKey, points: 1 }));
+    const recipe = selected.grader.request.recipe;
+    const grade = {
+      observation: 'scored', source: { sha256: source.sha256 },
+      selection: { sha256: selected.grader.selectionSha256, checks,
+        attemptedChecks: checks.map(check => check.stableKey),
+        reportedChecks: checks.map(check => check.stableKey), notRun: [] },
+      totals: { score: checks.length, max: checks.length, regression: null },
+      suites: { application: { features: [{ setupEvidence: setupEvidence(), criteria:
+        checks.map(check => ({ ...check, evidence: evidence('passed') })) }] } },
+      outcome: { kind: 'passed' },
+    };
+    mkdirSync(join(firstApp, 'stack-bench'), { recursive: true });
+    writeArtifact(join(firstApp, 'stack-bench', 'bundle.json'), {
+      kind: 'grade_bundle', id: 'grade-1',
+      attempt: { id: 'grade-1', parentId: 'run-1' },
+      identities: emptyArtifactIdentities({ recipe: { id: recipe.id, version: recipe.version,
+        sha256: recipe.contentSha256 }, stackAdapter: { id: owner.attempt.stack } }),
+      payload: grade,
+    });
+    const next = first.record({ selected, bundle: grade, level: 1 });
+    assert(next);
+    assert.equal(next.level, 2);
+    writeArtifact(join(firstOutput, 'run.json'), {
+      ...runArtifact,
+      payload: { ...runArtifact.payload, progressionStatus: first.status() },
+    });
+    writeFileSync(join(firstApp, 'index.js'), 'export const interrupted = true;\n');
+
+    const resumed = createLiveProgressionExecution({ progression, ...split, owner,
+      statePath: join(secondOutput, 'progression-state.json'), runId: 'run-2',
+      outputDir: secondOutput, appDir: secondApp, track: owner.attempt.track,
+      backend: owner.attempt.stack, identities, resumeFrom: firstOutput,
+      recipeBindings: new Map([[1, binding], [2, binding]]),
+      getRunArtifact: () => { throw new Error('grading is not part of this resume check'); } });
+    const restored = resumed.initialize();
+    assert.equal(restored.resumed, true);
+    assert.equal(restored.action.type, 'build');
+    assert.equal(restored.action.level, 2);
+    const restoredAction = workAction(restored.action);
+    assert(object(restoredAction.prompt));
+    assert.deepEqual(restoredAction.prompt.nodeIds, ['purchasing']);
+    const resumedState = executionState(resumed);
+    assert.equal(resumedState.attempts.length, 1);
+    assert.equal(nodeState(resumedState, 'accounts').status, 'passed');
+    assert.equal(nodeState(resumedState, 'catalog').status, 'passed');
+    assert.equal(readFileSync(join(secondApp, 'index.js'), 'utf8'),
+      'export const level = 1;\n');
+    assert(existsSync(join(secondOutput, 'progression-state.json')));
+
+    writeFileSync(join(secondOutput, 'source', 'index.js'), 'tampered\n');
+    const rejected = createLiveProgressionExecution({ progression, ...split, owner,
+      statePath: join(secondOutput, 'progression-state.json'), runId: 'run-2',
+      outputDir: secondOutput, appDir: secondApp, track: owner.attempt.track,
+      backend: owner.attempt.stack, identities,
+      recipeBindings: new Map([[1, binding], [2, binding]]),
+      getRunArtifact: () => runArtifact });
+    assert.throws(() => rejected.initialize(), /source does not match its state/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('an interrupted repair resumes with its failed evidence and regression feedback', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-live-repair-resume-'));
+  try {
+    const firstOutput = join(root, 'execution-1');
+    const secondOutput = join(root, 'execution-2');
+    const firstApp = join(root, 'first-app');
+    const secondApp = join(root, 'second-app');
+    for (const path of [firstOutput, secondOutput, firstApp, secondApp]) {
+      mkdirSync(path, { recursive: true });
+    }
+    writeFileSync(join(firstApp, 'index.js'), 'export const broken = true;\n');
+    const input = definition();
+    input.repair.budget.perFeature = 3;
+    const progression = compileProgressionInput(input);
+    const split = splitIdentities(progression);
+    const binding = resolveRecipeRelease(loadTrack('ecommerce'), 1,
+      'ecommerce.sequential-l1@2.5.0');
+    const owner = { schemaVersion: 1,
+      campaign: { id: 'campaign', version: '1.0.0', sha256: 'a'.repeat(64) },
+      attempt: { id: 'campaign-r1', track: 'ecommerce', stack: 'postgres',
+        agentAdapter: 'claude-code', model: 'test-model', conditionSha256: 'b'.repeat(64) },
+      workspace: { appDirectory: 'source' } };
+    const identities = emptyArtifactIdentities({
+      agentAdapter: { id: owner.attempt.agentAdapter },
+      stackAdapter: { id: owner.attempt.stack },
+    });
+    const runArtifact = createArtifact({ kind: 'benchmark_run', id: 'run-1',
+      attempt: { id: 'run-1', parentId: owner.attempt.id }, identities,
+      payload: { backend: owner.attempt.stack, model: owner.attempt.model,
+        condition: { sha256: owner.attempt.conditionSha256 },
+        featureCatalog: split.featureCatalogIdentity,
+        dependencyPolicy: split.dependencyPolicyIdentity,
+        progressionOwner: { schemaVersion: 1, campaign: owner.campaign, attempt: owner.attempt } } });
+    const first = createLiveProgressionExecution({ progression, ...split, owner,
+      statePath: join(firstOutput, 'progression-state.json'), runId: 'run-1',
+      outputDir: firstOutput, appDir: firstApp, track: owner.attempt.track,
+      backend: owner.attempt.stack, identities, recipeBindings: new Map([[1, binding]]),
+      getRunArtifact: () => runArtifact });
+    first.initialize();
+    const selected = workSelection(first.bind());
+    const source = hashAppSource(firstApp);
+    const key = selected.grader.checkKeys[0];
+    const recipe = selected.grader.request.recipe;
+    const grade = { observation: 'scored', source: { sha256: source.sha256 },
+      selection: { sha256: selected.grader.selectionSha256,
+        checks: [{ stableKey: key, points: 1 }], attemptedChecks: [key],
+        reportedChecks: [key], notRun: [] },
+      totals: { score: 0, max: 1, regression: null },
+      suites: { application: { features: [{ setupEvidence: setupEvidence(), criteria: [
+        { stableKey: key, points: 1, evidence: evidence('failed') },
+      ] }] } } };
+    mkdirSync(join(firstApp, 'stack-bench'), { recursive: true });
+    writeArtifact(join(firstApp, 'stack-bench', 'bundle.json'), {
+      kind: 'grade_bundle', id: 'grade-failed',
+      attempt: { id: 'grade-failed', parentId: 'run-1' },
+      identities: emptyArtifactIdentities({ recipe: { id: recipe.id, version: recipe.version,
+        sha256: recipe.contentSha256 }, stackAdapter: { id: owner.attempt.stack } }),
+      payload: grade,
+    });
+    const next = first.record({ selected, bundle: grade, level: 1 });
+    assert(next);
+    assert.equal(next.type, 'repair');
+    const repairSelected = workSelection(first.bind());
+    const repairRecipe = repairSelected.grader.request.recipe;
+    const repairGrade = { ...grade, selection: {
+      ...grade.selection, sha256: repairSelected.grader.selectionSha256,
+    } };
+    writeArtifact(join(firstApp, 'stack-bench', 'bundle.json'), {
+      kind: 'grade_bundle', id: 'grade-regression',
+      attempt: { id: 'grade-regression', parentId: 'run-1' },
+      identities: emptyArtifactIdentities({ recipe: { id: repairRecipe.id,
+        version: repairRecipe.version, sha256: repairRecipe.contentSha256 },
+      stackAdapter: { id: owner.attempt.stack } }),
+      payload: repairGrade,
+    });
+    const afterRegression = first.record({ selected: repairSelected, bundle: repairGrade, level: 1,
+      completedRepair: true,
+      repairRegression: { ownerNodeIds: ['accounts'],
+        report: '# Previous repair regression\n\nThe earlier account behavior stopped working.\n' } });
+    assert(afterRegression);
+    assert.equal(afterRegression.type, 'repair');
+    writeArtifact(join(firstOutput, 'run.json'), { ...runArtifact,
+      payload: { ...runArtifact.payload, progressionStatus: first.status(),
+        totals: { costUsd: 1.25, costComplete: true }, levels: [] } });
+    const audit = auditProgressionReferenceRun({ outputDir: firstOutput, progression,
+      ...split, owner, recipeBindings: new Map([[1, binding]]), release: binding.release });
+    assert.equal(audit.actions.length, 2);
+
+    const resumed = createLiveProgressionExecution({ progression, ...split, owner,
+      statePath: join(secondOutput, 'progression-state.json'), runId: 'run-2',
+      outputDir: secondOutput, appDir: secondApp, track: owner.attempt.track,
+      backend: owner.attempt.stack, identities, resumeFrom: firstOutput,
+      recipeBindings: new Map([[1, binding]]),
+      getRunArtifact: () => { throw new Error('grading is not part of this resume check'); } });
+    mkdirSync(join(secondApp, 'stack-bench'), { recursive: true });
+    writeFileSync(join(secondApp, 'stack-bench', 'stale.json'), '{}\n');
+    const restored = resumed.initialize();
+    assert.equal(restored.action.type, 'repair');
+    assert.equal(restored.action.level, 1);
+    assert.equal(executionState(resumed).attempts.length, 2);
+    assert.deepEqual(executionState(resumed).attempts.at(-1)?.repairRegression,
+      { ownerNodeIds: ['accounts'],
+        report: '# Previous repair regression\n\nThe earlier account behavior stopped working.\n' });
+    assert.equal(readFileSync(join(secondApp, 'index.js'), 'utf8'),
+      'export const broken = true;\n');
+    assert(existsSync(join(secondApp, 'stack-bench', 'bundle.json')));
+    assert.equal(existsSync(join(secondApp, 'stack-bench', 'stale.json')), false);
+    assert(existsSync(join(secondOutput, 'progression', 'attempt-002', 'bundle.json')));
+    assert(restored.priorRun);
+    const totals = restored.priorRun.payload.totals;
+    assert(object(totals));
+    assert.equal(totals.costUsd, 1.25);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/modular-selection.test.ts b/tools/stack-bench/tests/modular-selection.test.ts
new file mode 100644
index 00000000000..900fccf49a0
--- /dev/null
+++ b/tools/stack-bench/tests/modular-selection.test.ts
@@ -0,0 +1,201 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { createModularRecipeTaskRequest, resolveModularRecipeSelection,
+  resolveModularRecipeTaskRequest } from '../src/composition/recipe-selection.js';
+import type { ModularRecipePack, ModularRecipeRelease, ModularRecipeTaskBinding,
+  RecipeTaskPlan } from '../src/composition/recipe-selection.js';
+import type { RecipeCheck } from '../src/composition/recipe-release.js';
+
+const module = (id: string, moduleType: 'feature' | 'specification', requiresPacks: string[] = []):
+  ModularRecipePack => ({
+  id, version: '1.0.0', moduleType, requiresPacks,
+});
+const check = (packId: string, suffix: string, observations?: string[],
+  requiresFeatures?: string[]): RecipeCheck => ({
+  stableKey: `${packId}.${suffix}`, packId, executionId: packId, points: 1,
+  ...(observations ? { observations } : {}),
+  ...(requiresFeatures ? { requiresFeatures } : {}),
+});
+const release: ModularRecipeRelease = {
+  id: 'example.modular', version: '1.0.0',
+  contentSha256: 'a'.repeat(64),
+  components: { packs: [
+    module('example.accounts', 'feature'),
+    module('example.cart', 'feature', ['example.accounts@1.0.0']),
+    module('example.durability', 'specification'),
+    module('example.concurrency', 'specification'),
+    module('example.reconnect', 'specification'),
+  ] },
+  checkCatalog: [
+    check('example.accounts', 'works'),
+    check('example.cart', 'works'),
+    check('example.durability', 'survives', ['requested', 'unmentioned'], ['example.cart']),
+    check('example.concurrency', 'safe', ['requested', 'unmentioned'], ['example.cart']),
+    check('example.reconnect', 'catches-up', ['requested', 'unmentioned'], ['example.cart']),
+  ],
+};
+
+const plan: RecipeTaskPlan = { packs: release.components.packs, recipe: { task: {
+  mode: 'fresh',
+  requirements: [
+    { id: 'frame', owners: ['recipe'], modes: ['fresh'], text: 'Build this product.\n' },
+    { id: 'accounts', owners: ['example.accounts'], modes: ['fresh'], text: 'Support accounts.\n' },
+    { id: 'cart', owners: ['example.cart'], modes: ['fresh'], text: 'Support a cart.\n' },
+    { id: 'durability', owners: ['example.durability'], modes: ['fresh'], text: 'Survive restarts.\n' },
+    { id: 'concurrency', owners: ['example.concurrency'], modes: ['fresh'], text: 'Handle races.\n' },
+    { id: 'reconnect', owners: ['example.reconnect'], modes: ['fresh'], text: 'Catch up after reconnect.\n' },
+  ],
+  contracts: [
+    { id: 'cart-hook', owners: ['example.cart'], modes: ['fresh'], text: 'Expose a cart button.\n' },
+    { id: 'probe-hook', owners: ['example.concurrency'], modes: ['fresh'], text: 'DO NOT LEAK.\n' },
+  ],
+} } };
+const binding: ModularRecipeTaskBinding = { release, plan };
+
+test('requested, expected, and observed specification treatments stay independent', () => {
+  const selection = resolveModularRecipeSelection(release, {
+    featureIds: ['example.cart'],
+    requestedSpecifications: ['example.durability@1.0.0'],
+    expectedSpecifications: ['example.concurrency@1.0.0'],
+    observedSpecifications: ['example.reconnect@1.0.0'],
+  });
+  assert.deepEqual(selection.features, ['example.accounts', 'example.cart']);
+  assert.deepEqual(selection.specifications, {
+    requested: ['example.durability@1.0.0'],
+    expected: ['example.concurrency@1.0.0'],
+    observed: ['example.reconnect@1.0.0'],
+  });
+  assert.deepEqual(selection.promptPacks,
+    ['example.accounts', 'example.cart', 'example.durability']);
+  assert.deepEqual(selection.scoredChecks.map(item => item.stableKey), [
+    'example.accounts.works', 'example.cart.works', 'example.durability.survives',
+    'example.concurrency.safe',
+  ]);
+  const expectedCheck = selection.scoredChecks.find(item =>
+    item.stableKey === 'example.concurrency.safe');
+  assert(expectedCheck);
+  assert.equal(expectedCheck.treatment, 'expected');
+  assert.deepEqual(selection.observedChecks.map(item => item.stableKey),
+    ['example.reconnect.catches-up']);
+  assert.match(selection.sha256, /^[a-f0-9]{64}$/);
+});
+
+test('recursive feature dependencies contribute their stable family', () => {
+  const familyRelease: ModularRecipeRelease = {
+    ...release,
+    components: { packs: [
+      { ...module('example.accounts-v1', 'feature'), stableId: 'example.accounts' },
+      { ...module('example.accounts-v2', 'feature'), stableId: 'example.accounts' },
+      module('example.cart-v2', 'feature', ['example.accounts-v2@1.0.0']),
+    ] },
+    checkCatalog: [
+      check('example.accounts-v2', 'works'),
+      check('example.cart-v2', 'works', undefined, ['example.accounts-v1']),
+    ],
+  };
+  const selection = resolveModularRecipeSelection(familyRelease, {
+    featureIds: ['example.cart-v2'],
+  });
+  assert.deepEqual(selection.features, ['example.accounts-v2', 'example.cart-v2']);
+  assert.deepEqual(selection.scoredChecks.map(item => item.stableKey), [
+    'example.accounts-v2.works', 'example.cart-v2.works',
+  ]);
+});
+
+test('modular selection rejects overlap, wrong module kinds, and unobservable checks', () => {
+  assert.throws(() => resolveModularRecipeSelection(release, {
+    requestedSpecifications: ['example.durability@1.0.0'],
+    expectedSpecifications: ['example.durability@1.0.0'],
+  }), /both requested and expected/);
+  assert.throws(() => resolveModularRecipeSelection(release, {
+    requestedSpecifications: ['example.cart@1.0.0'],
+  }), /no requested specification/);
+  const noProbe = structuredClone(release);
+  const noProbeCheck = noProbe.checkCatalog.find(item => item.packId === 'example.concurrency');
+  assert(noProbeCheck);
+  noProbeCheck.observations = ['requested'];
+  assert.throws(() => resolveModularRecipeSelection(noProbe, {
+    expectedSpecifications: ['example.concurrency@1.0.0'],
+  }), /has no evaluation without prompting/);
+  const noRequested = structuredClone(release);
+  const noRequestedCheck = noRequested.checkCatalog.find(item => item.packId === 'example.durability');
+  assert(noRequestedCheck);
+  noRequestedCheck.observations = ['unmentioned'];
+  assert.throws(() => resolveModularRecipeSelection(noRequested, {
+    requestedSpecifications: ['example.durability@1.0.0'],
+  }), /has no prompted evaluation/);
+  assert.throws(() => resolveModularRecipeSelection(release, {
+    featureIds: ['example.accounts'],
+    requestedSpecifications: ['example.durability@1.0.0'],
+  }), /has no prompted evaluation/);
+  const featureAddingSpec = structuredClone(release);
+  const durabilityPack = featureAddingSpec.components.packs.find(item => item.id === 'example.durability');
+  assert(durabilityPack);
+  durabilityPack.requiresPacks = ['example.cart@1.0.0'];
+  assert.throws(() => resolveModularRecipeSelection(featureAddingSpec, {
+    featureIds: ['example.accounts'],
+    requestedSpecifications: ['example.durability@1.0.0'],
+  }), /cannot add feature example.cart@1.0.0/);
+});
+
+test('scored check filters can select expected checks but cannot reach observed-only scope', () => {
+  const expected = resolveModularRecipeSelection(release, {
+    expectedSpecifications: ['example.concurrency@1.0.0'],
+    checkKeys: ['example.concurrency.safe'],
+  });
+  assert.deepEqual(expected.scoredChecks.map(check => check.stableKey),
+    ['example.concurrency.safe']);
+  assert.throws(() => resolveModularRecipeSelection(release, {
+    observedSpecifications: ['example.reconnect@1.0.0'],
+    checkKeys: ['example.reconnect.catches-up'],
+  }), /outside the requested\/expected/);
+});
+
+test('modular task composition includes requested specs and withholds expected and observed specs', () => {
+  const compiled = createModularRecipeTaskRequest(binding, {
+    featureIds: ['example.cart'],
+    requestedSpecifications: ['example.durability@1.0.0'],
+    expectedSpecifications: ['example.concurrency@1.0.0'],
+    observedSpecifications: ['example.reconnect@1.0.0'],
+  });
+  assert.equal(compiled.task.requirementText,
+    'Build this product.\n\nSupport accounts.\n\nSupport a cart.\n\nSurvive restarts.\n');
+  assert.equal(compiled.task.contractText, 'Expose a cart button.\n');
+  assert.equal(compiled.task.requirementText.includes('Handle races'), false);
+  assert.equal(compiled.task.requirementText.includes('Catch up after reconnect'), false);
+  assert.equal(compiled.task.contractText.includes('DO NOT LEAK'), false);
+  assert.deepEqual(compiled.request.selection.scoredChecks, [
+    'example.accounts.works', 'example.cart.works', 'example.durability.survives',
+    'example.concurrency.safe',
+  ]);
+  assert.deepEqual(compiled.request.selection.observedChecks, ['example.reconnect.catches-up']);
+  assert.deepEqual(resolveModularRecipeTaskRequest(binding, compiled.request).request,
+    compiled.request);
+
+  const requestedOnly = createModularRecipeTaskRequest(binding, {
+    featureIds: ['example.cart'],
+    requestedSpecifications: ['example.durability@1.0.0'],
+  });
+  assert.equal(requestedOnly.task.requirementSha256, compiled.task.requirementSha256);
+  assert.equal(requestedOnly.task.contractSha256, compiled.task.contractSha256);
+  assert.equal(requestedOnly.task.sha256, compiled.task.sha256);
+  assert.notEqual(requestedOnly.selection.sha256, compiled.selection.sha256);
+});
+
+test('a fresh action includes directly selected upgrade-only feature text', () => {
+  const actionPlan = structuredClone(plan);
+  actionPlan.recipe.task.mode = 'action';
+  actionPlan.recipe.task.requirements.push({
+    id: 'upgrade-frame', owners: ['recipe'], modes: ['upgrade'], text: 'Update this product.\n',
+  });
+  const cart = actionPlan.recipe.task.requirements.find(fragment => fragment.id === 'cart')!;
+  cart.modes = ['upgrade'];
+  const task = createModularRecipeTaskRequest({ release, plan: actionPlan }, {
+    featureIds: ['example.cart'], taskMode: 'fresh',
+  }).task;
+  assert.match(task.requirementText, /Build this product/);
+  assert.match(task.requirementText, /Support accounts/);
+  assert.match(task.requirementText, /Support a cart/);
+  assert.doesNotMatch(task.requirementText, /Update this product/);
+});
diff --git a/tools/stack-bench/tests/module-layout.contract.ts b/tools/stack-bench/tests/module-layout.contract.ts
new file mode 100644
index 00000000000..e85a20ead01
--- /dev/null
+++ b/tools/stack-bench/tests/module-layout.contract.ts
@@ -0,0 +1,140 @@
+import assert from 'node:assert/strict';
+import { existsSync, readdirSync, readFileSync } from 'node:fs';
+import { dirname, extname, join, relative, resolve } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT as ROOT } from '../src/package-root.js';
+
+const SOURCE_AREAS = [
+  'actions', 'agents', 'campaigns', 'composition', 'evidence', 'grading',
+  'progression', 'references', 'releases', 'runtime', 'stacks',
+];
+const SKIPPED_DIRECTORIES = new Set([
+  'archive', 'dist', 'local-notes', 'node_modules', 'results',
+]);
+const RELATIVE_MODULE = /(?:from\s+|import\s*\()(['"])(\.\.?\/[^'"\r\n]+?\.js)\1/g;
+
+function filesBelow(directory: string, output: string[] = []): string[] {
+  for (const entry of readdirSync(directory, { withFileTypes: true })) {
+    if (entry.isDirectory() && SKIPPED_DIRECTORIES.has(entry.name)) continue;
+    const path = join(directory, entry.name);
+    if (entry.isDirectory()) filesBelow(path, output);
+    else if (entry.isFile()) output.push(path);
+  }
+  return output;
+}
+
+function modulesBelow(directory: string): string[] {
+  return filesBelow(directory)
+    .filter(path => !relative(ROOT, path).split(/[\\/]/).includes('tests'))
+    .filter(path => extname(path) === '.ts' && !path.endsWith('.d.ts'));
+}
+
+function relativeModuleTargets(file: string): string[] {
+  const runtimeSource = readFileSync(file, 'utf8')
+    .replace(/(?:import|export)\s+type\b[\s\S]*?\bfrom\s+['"][^'"]+['"];?/g, '');
+  return [...runtimeSource.matchAll(RELATIVE_MODULE)]
+    .map(match => resolve(dirname(file), `${match[2]?.slice(0, -3)}.ts`));
+}
+
+test('the project root contains no implementation modules', () => {
+  const rootModules = readdirSync(ROOT, { withFileTypes: true })
+    .filter(entry => entry.isFile() && entry.name.endsWith('.ts'))
+    .map(entry => entry.name);
+  assert.deepEqual(rootModules, []);
+  assert.deepEqual(readdirSync(join(ROOT, 'src'), { withFileTypes: true })
+    .filter(entry => entry.isDirectory()).map(entry => entry.name).sort(), SOURCE_AREAS);
+});
+
+test('tracked production areas contain no tmp-named scratch modules', () => {
+  const scratch = modulesBelow(ROOT)
+    .map(path => relative(ROOT, path))
+    .filter(path => /(?:^|[\\/])tmp-/.test(path));
+  assert.deepEqual(scratch, []);
+});
+
+test('the authored project contains TypeScript, not JavaScript implementation files', () => {
+  const authoredJavaScript = filesBelow(ROOT)
+    .filter(path => ['.js', '.mjs'].includes(extname(path)))
+    .map(path => relative(ROOT, path));
+  assert.deepEqual(authoredJavaScript, []);
+});
+
+test('production libraries do not import command entrypoints', () => {
+  const violations: string[] = [];
+  for (const area of ['src', 'grader', 'dashboard']) {
+    const directory = join(ROOT, area);
+    if (!existsSync(directory)) continue;
+    for (const file of modulesBelow(directory)) {
+      const source = readFileSync(file, 'utf8');
+      if (/from\s+['"][^'"]*commands\/|import\s*\(['"][^'"]*commands\//.test(source)) {
+        violations.push(relative(ROOT, file));
+      }
+    }
+  }
+  assert.deepEqual(violations, []);
+});
+
+test('production modules have no circular imports', () => {
+  const files = modulesBelow(ROOT);
+  const known = new Set(files);
+  const graph = new Map(files.map(file => [file,
+    relativeModuleTargets(file).filter(target => known.has(target))]));
+  const visited = new Set();
+  const active = new Set();
+  const stack: string[] = [];
+  function visit(file: string): void {
+    if (active.has(file)) {
+      const cycle = [...stack.slice(stack.indexOf(file)), file]
+        .map(path => relative(ROOT, path)).join(' -> ');
+      assert.fail(`circular import: ${cycle}`);
+    }
+    if (visited.has(file)) return;
+    visited.add(file);
+    active.add(file);
+    stack.push(file);
+    for (const target of graph.get(file) ?? []) visit(target);
+    stack.pop();
+    active.delete(file);
+  }
+  for (const file of files) visit(file);
+});
+
+test('package command entrypoints exist', () => {
+  const parsed: unknown = JSON.parse(readFileSync(join(ROOT, 'package.json'), 'utf8'));
+  assert(parsed && typeof parsed === 'object' && 'scripts' in parsed);
+  const scripts = parsed.scripts;
+  assert(scripts && typeof scripts === 'object');
+  for (const [name, command] of Object.entries(scripts)) {
+    if (typeof command !== 'string') continue;
+    const match = command.match(/^node\s+([^\s]+\.js)(?:\s|$)/);
+    if (!match) continue;
+    const entrypoint = match[1];
+    assert(entrypoint);
+    assert.equal(existsSync(join(ROOT, entrypoint)), true,
+      `${name} points to missing entrypoint ${entrypoint}`);
+  }
+});
+
+test('local and appliance compose files pin the same images but isolate resources', () => {
+  const local = readFileSync(join(ROOT, 'docker-compose.yaml'), 'utf8');
+  const appliance = readFileSync(join(ROOT, 'appliance', 'docker-compose.yaml'), 'utf8');
+  const image = (source: string, service: string): string | null => source.match(new RegExp(
+    `^  ${service}:\\r?\\n(?:    .*\\r?\\n)*?    image: (\\S+)$`, 'm'))?.[1] ?? null;
+  for (const service of ['postgres', 'mongodb']) {
+    assert.match(image(local, service) ?? '', /@sha256:[a-f0-9]{64}$/);
+    assert.equal(image(local, service), image(appliance, service));
+  }
+  for (const port of ['6532:5432', '6537:27017']) {
+    assert.match(local, new RegExp(`127\\.0\\.0\\.1:${port}`));
+    assert.match(appliance, new RegExp(`127\\.0\\.0\\.1:${port}`));
+  }
+  assert.match(appliance,
+    /STACK_BENCH_DASHBOARD_CONTROL_SECRET_FILE: \$\{STACK_BENCH_DASHBOARD_CONTROL_SECRET_FILE:-\/var\/lib\/stack-bench\/secrets\/dashboard_control_secret\}/);
+  assert.doesNotMatch(appliance, /STACK_BENCH_DASHBOARD_CONTROL_SECRET:/);
+  for (const resource of ['postgres', 'mongodb', 'pgdata', 'mongodata']) {
+    assert.match(local, new RegExp(`stack-bench-dev-${resource}`));
+    assert.match(appliance, new RegExp(`stack-bench-(?:appliance-)?${resource}`));
+    assert.doesNotMatch(appliance, new RegExp(`stack-bench-dev-${resource}`));
+  }
+});
diff --git a/tools/stack-bench/tests/mongodb-progression-reference.contract.ts b/tools/stack-bench/tests/mongodb-progression-reference.contract.ts
new file mode 100644
index 00000000000..9e6d3e80db3
--- /dev/null
+++ b/tools/stack-bench/tests/mongodb-progression-reference.contract.ts
@@ -0,0 +1,95 @@
+import assert from 'node:assert/strict';
+import { readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+import { compilePackDefinition } from '../src/composition/composition-compiler.js';
+import { compileProgressionDefinitionFile } from '../src/progression/progression-definition.js';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+const stackBenchRoot = STACK_BENCH_ROOT;
+const trackRoot = join(stackBenchRoot, 'tracks', 'ecommerce');
+const packRoot = join(trackRoot, 'composition', 'packs');
+const appRoot = join(stackBenchRoot, 'reference-apps', 'ecommerce', 'mongodb');
+const readJson = (path: string): unknown => JSON.parse(readFileSync(path, 'utf8'));
+
+function record(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function visit(value: unknown, callback: (item: Record<string, unknown>) => void): void {
+  if (Array.isArray(value)) value.forEach(entry => visit(entry, callback));
+  else if (record(value)) {
+    callback(value);
+    Object.values(value).forEach(entry => visit(entry, callback));
+  }
+}
+
+test('the MongoDB progression reference exposes every graph testing hook', () => {
+  const graph = compileProgressionDefinitionFile(join(trackRoot, 'progression', 'ecommerce-2.0.2.json'));
+  const packs = new Map(readdirSync(packRoot).filter(name => name.endsWith('.json')).map(name => {
+    const pack = compilePackDefinition(readJson(join(packRoot, name)), { source: name });
+    return [`${pack.id}@${pack.version}`, pack];
+  }));
+  const packRefs = new Set(graph.nodes.flatMap(node => node.featureRefs));
+  const testIds = new Set<string>();
+
+  for (const reference of packRefs) {
+    const pack = packs.get(reference);
+    assert(pack, `missing graph pack ${reference}`);
+    for (const check of pack.checks ?? []) {
+      const scenario = readJson(join(trackRoot, check.source));
+      visit(scenario, value => {
+        if (typeof value.testid === 'string') testIds.add(value.testid);
+      });
+    }
+  }
+
+  const clientSource = readdirSync(join(appRoot, 'client', 'src'))
+    .filter(name => name.endsWith('.tsx'))
+    .map(name => readFileSync(join(appRoot, 'client', 'src', name), 'utf8'))
+    .join('\n');
+  const missing = [...testIds].filter(id => !clientSource.includes(id)).sort();
+  assert.deepEqual(missing, []);
+});
+
+test('the MongoDB progression reference binds named actions and its runtime', () => {
+  const clientSource = readFileSync(join(appRoot, 'client', 'src', 'ProgressionPanel.tsx'), 'utf8');
+  const serverSource = [
+    readFileSync(join(appRoot, 'server', 'src', 'index.ts'), 'utf8'),
+    readFileSync(join(appRoot, 'server', 'src', 'progression.ts'), 'utf8'),
+  ].join('\n');
+  const reservationSource = readFileSync(join(appRoot, 'server', 'src', 'stock-reservations.ts'), 'utf8');
+  const reference = readJson(join(appRoot, 'reference.json'));
+  const serverPackage = readJson(join(appRoot, 'server', 'package.json'));
+  const clientPackage = readJson(join(appRoot, 'client', 'package.json'));
+  assert(record(reference));
+  assert(record(serverPackage));
+  assert(record(clientPackage));
+  assert(Array.isArray(reference.installDirectories));
+  assert(record(reference.server));
+  assert(record(reference.client));
+  assert(record(serverPackage.scripts));
+  assert(record(clientPackage.scripts));
+  const viteConfig = readFileSync(join(appRoot, 'client', 'vite.config.ts'), 'utf8');
+
+  assert.match(clientSource, /data-action-input/);
+  assert.match(clientSource, /\/api\/support\/cases\/\$\{ticket\.id\}\/order/);
+  assert.match(clientSource, /\/api\/support\/cases\/\$\{ticket\.id\}\/refund/);
+  assert.match(clientSource, /\/api\/admin\/scheduled-restocks/);
+  assert.match(serverSource, /app\.use\("\/api\/support", supportRouter\)/);
+  assert.match(serverSource, /app\.use\("\/api\/admin", adminRouter\)/);
+  assert.match(serverSource, /installProgressionRoutes\(app, io/);
+  assert.match(serverSource, /JWT_SECRET \|\| "stack-bench-reference-only-secret-2026"/);
+  assert.match(serverSource, /reserveStock\(item\._id, qty\)/);
+  assert.match(reservationSource, /quantity: \{ \$gte: 1 \}/);
+  assert.match(reservationSource, /\$inc: \{ quantity: -1 \}/);
+  assert.deepEqual(reference.installDirectories, ['server', 'client']);
+  assert.deepEqual(reference.server, { directory: 'server' });
+  assert.deepEqual(reference.client, { directory: 'client' });
+  assert.equal(serverPackage.scripts.typecheck, 'tsc --noEmit');
+  assert.equal(serverPackage.scripts.test, 'tsx --test src/*.test.ts');
+  assert.equal(clientPackage.scripts.build, 'vite build');
+  assert.match(viteConfig, /Number\(process\.env\.API_PORT\) \|\| 6401/);
+  assert.match(viteConfig, /Number\(process\.env\.VITE_PORT\) \|\| 6673/);
+  assert.match(viteConfig, /host: "0\.0\.0\.0"/);
+});
diff --git a/tools/stack-bench/tests/mutation-analysis.contract.ts b/tools/stack-bench/tests/mutation-analysis.contract.ts
new file mode 100644
index 00000000000..b10b9193fcd
--- /dev/null
+++ b/tools/stack-bench/tests/mutation-analysis.contract.ts
@@ -0,0 +1,297 @@
+import assert from 'node:assert/strict';
+import { join } from 'node:path';
+import test from 'node:test';
+import { classifyMutationResult, groupMutationsByScenario, mutationScenario,
+  indexMutationReport, mutationFileEdits, validateMutationBaseline, isRetryableMutationBaseline,
+  isRetryableMutationResult,
+  releaseScenarioCheckKeys, resolveMutationFile, resolveMutationScenarioPath,
+  reusableMutationBaseline,
+  validateMutationDefinitions } from '../src/evidence/mutation-analysis.js';
+import { createCheckEvidence } from '../src/evidence/check-evidence.js';
+import { buildRecipeRelease, requireRecipeRelease as resolveRecipeRelease }
+  from '../src/composition/recipe-release.js';
+import { loadTrack } from '../src/composition/tracks.js';
+
+type CriterionValue = boolean | 'inconclusive';
+
+const report = (criteria: Record<string, CriterionValue>, setupError: string | null = null) => ({
+  total: Object.values(criteria).filter(value => value === true).length,
+  max: Object.keys(criteria).length,
+  features: [{
+    id: 7,
+    criteria: Object.entries(criteria).map(([id, value]) => ({ id, stableKey: `check.${id}`,
+      evidence: createCheckEvidence({
+        status: value === true ? 'passed' : value === 'inconclusive' ? 'inconclusive' : 'failed',
+        code: value === true ? 'completed' : 'test_result',
+        phase: setupError ? 'setup' : 'assertion', summary: setupError,
+        startedAtMs: 1, completedAtMs: 2,
+      }) })),
+  }],
+});
+const mutation = { id: 'break-b', targets: ['check.b'] };
+
+test('a clean scenario report is reused only for the exact run identity and check set', () => {
+  const scenario = { total: 2, max: 2, selection: { checks: [
+    { stableKey: 'check.a' }, { stableKey: 'check.b' },
+  ] }, features: [] };
+  const bundle = {
+    backend: 'postgres', track: 'ecommerce', level: 3,
+    source: { sha256: 'fixture' },
+    recipeRelease: { id: 'recipe', version: '1.0.0', contentSha256: 'recipe-sha' },
+    artifactEnvelope: { identities: {
+      engine: { id: 'stack-bench', version: null, sha256: 'engine', state: null },
+      calibration: { id: 'calibration', version: '1.0.0', sha256: 'calibration-sha',
+        state: 'qualified' },
+      stackAdapter: { id: 'postgres', version: null, sha256: null, state: null },
+    } },
+    suites: { scenario, another: { selection: { checks: [{ stableKey: 'check.c' }] } } },
+  };
+  const expected = { backend: 'postgres', track: 'ecommerce', level: 3,
+    fixtureSha256: 'fixture', recipe: { id: 'recipe', version: '1.0.0', sha256: 'recipe-sha' },
+    identities: structuredClone(bundle.artifactEnvelope.identities),
+    selectedCheckKeys: ['check.b', 'check.a'] };
+
+  assert.deepEqual(reusableMutationBaseline(bundle, expected), { ok: true, report: scenario });
+  const fixtureMismatch = reusableMutationBaseline(bundle, { ...expected, fixtureSha256: 'other' });
+  assert.equal(fixtureMismatch.ok, false);
+  if (fixtureMismatch.ok) assert.fail('fixture mismatch was accepted');
+  assert.match(fixtureMismatch.reason, /fixture/);
+  const selectionMismatch = reusableMutationBaseline(bundle, { ...expected,
+    selectedCheckKeys: ['check.a'] });
+  assert.equal(selectionMismatch.ok, false);
+  if (selectionMismatch.ok) assert.fail('selection mismatch was accepted');
+  assert.match(selectionMismatch.reason, /0 exact scenario matches/);
+  const engineMismatch = reusableMutationBaseline(bundle, { ...expected, identities: {
+    ...expected.identities,
+    engine: { ...expected.identities.engine, sha256: 'new-engine' },
+  } });
+  assert.equal(engineMismatch.ok, false);
+  if (engineMismatch.ok) assert.fail('engine mismatch was accepted');
+  assert.match(engineMismatch.reason, /engine/);
+  const calibrationMismatch = reusableMutationBaseline(bundle, { ...expected, identities: {
+    ...expected.identities,
+    calibration: { ...expected.identities.calibration, sha256: 'new-calibration' },
+  } });
+  assert.equal(calibrationMismatch.ok, false);
+  if (calibrationMismatch.ok) assert.fail('calibration mismatch was accepted');
+  assert.match(calibrationMismatch.reason, /calibration/);
+});
+
+test('mutation definitions name exact criteria and contain real edits', () => {
+  const valid = { ...mutation, file: 'src/app.ts', find: 'correct', replace: 'broken' };
+  assert.equal(validateMutationDefinitions([valid]).ok, true);
+  const invalid = validateMutationDefinitions([
+    { id: 'duplicate', file: '', targets: [], find: 'same', replace: 'same' },
+    { id: 'duplicate', file: 'src/app.ts', targets: ['check.b', 'check.b'], edits: [] },
+  ]);
+  assert.equal(invalid.ok, false);
+  assert.deepEqual([...new Set(invalid.issues.map(issue => issue.kind))],
+    ['bad_file', 'bad_targets', 'bad_edit', 'duplicate_id', 'missing_edits']);
+});
+
+test('one mutation may atomically edit multiple application files', () => {
+  const multiFile = {
+    ...mutation,
+    edits: [
+      { file: 'server/schema.sql', find: 'UNIQUE (item_id, account_id)', replace: '-- removed' },
+      { file: 'server/src/index.ts', find: 'ON CONFLICT', replace: '/* no conflict guard */' },
+    ],
+  };
+  assert.equal(validateMutationDefinitions([multiFile]).ok, true);
+  assert.deepEqual(mutationFileEdits(multiFile).map(edit => edit.file),
+    ['server/schema.sql', 'server/src/index.ts']);
+
+  const inheritedFile = {
+    ...mutation,
+    file: 'client/src/App.tsx',
+    edits: [{ find: 'first', replace: 'broken first' },
+      { file: 'server/src/index.ts', find: 'second', replace: 'broken second' }],
+  };
+  assert.deepEqual(mutationFileEdits(inheritedFile).map(edit => edit.file),
+    ['client/src/App.tsx', 'server/src/index.ts']);
+  assert.equal(validateMutationDefinitions([{ ...multiFile,
+    edits: [{ file: '', find: 'x', replace: 'y' }] }]).ok, false);
+});
+
+test('mutation scenarios may override a manifest default and are required for execution', () => {
+  const valid = { ...mutation, file: 'src/app.ts', find: 'correct', replace: 'broken' };
+  assert.equal(mutationScenario({ scenario: 'scenarios/base.json' }, valid), 'scenarios/base.json');
+  assert.equal(mutationScenario({ scenario: 'scenarios/base.json' },
+    { ...valid, scenario: 'scenarios/upgrade.json' }), 'scenarios/upgrade.json');
+  assert.equal(validateMutationDefinitions([valid], { requireScenario: true }).ok, false);
+  assert.equal(validateMutationDefinitions([{ ...valid, scenario: 'scenarios/upgrade.json' }],
+    { requireScenario: true }).ok, true);
+  const groups = groupMutationsByScenario({ scenario: 'scenarios/base.json', mutations: [
+    valid, { ...valid, id: 'upgrade', scenario: 'scenarios/upgrade.json' },
+  ] });
+  assert.deepEqual([...groups.keys()], ['scenarios/base.json', 'scenarios/upgrade.json']);
+  assert.deepEqual([...groups.values()].map(entries => entries.map(entry => entry.id)),
+    [['break-b'], ['upgrade']]);
+});
+
+test('mutation scenarios resolve from the package assets after TypeScript compilation', () => {
+  assert.equal(resolveMutationScenarioPath(
+    'tracks/ecommerce/scenarios/01-account-create-2.4.0.json'),
+  join(loadTrack('ecommerce').dir, 'scenarios', '01-account-create-2.4.0.json'));
+  assert.throws(() => resolveMutationScenarioPath('dist/tracks/ecommerce/scenarios/example.json'),
+    /escapes the tracks directory/);
+  assert.throws(() => resolveMutationScenarioPath('../outside.json'),
+    /escapes the tracks directory/);
+});
+
+test('recipe-bound mutation grading selects only checks owned by the scenario', () => {
+  const track = loadTrack('ecommerce');
+  const release = buildRecipeRelease(join(track.dir, 'composition', 'recipes',
+    'sequential-l2-1.6.0.json'), { trackRoot: track.dir });
+  const keys = releaseScenarioCheckKeys(release, track.dir,
+    join(track.dir, 'scenarios', '02-features.json'));
+  assert(keys.includes('ecommerce.operations-access.fulfilment-queue.1a'));
+  assert(!keys.includes('ecommerce.operations-access.fulfilment-queue.1b'),
+    '1b moved to a self-contained scenario and must not be graded from the legacy source');
+  assert(!keys.includes('ecommerce.inventory-operations.operational-views.5a'),
+    '5a moved to an isolated scenario and must not share state with the remaining views');
+  assert.deepEqual(releaseScenarioCheckKeys(release, track.dir,
+    join(track.dir, 'scenarios', '02-low-stock-1.4.0.json')), [
+    'ecommerce.inventory-operations.operational-views.5a',
+  ]);
+  assert.throws(() => releaseScenarioCheckKeys(release, track.dir,
+    join(track.dir, 'scenarios', '03-features.json')),
+  /has no checks/);
+});
+
+test('recipe-bound mutation grading excludes zero-point controls', () => {
+  const track = loadTrack('ecommerce');
+  const binding = resolveRecipeRelease(track, 3, 'ecommerce.progression-catalog@2.0.2');
+  assert.deepEqual(releaseScenarioCheckKeys(binding.release, track.dir,
+    join(track.dir, 'scenarios', '01-restock-race-2.3.0.json')), [
+    'ecommerce.spec.concurrency-safety.restock-race.202a',
+  ]);
+});
+
+test('recipe-bound mutation grading keeps only checks selected for the run', () => {
+  const track = loadTrack('ecommerce');
+  const binding = resolveRecipeRelease(track, 3, 'ecommerce.progression-catalog@2.0.2');
+  assert.deepEqual(releaseScenarioCheckKeys(binding.release, track.dir,
+    join(track.dir, 'scenarios', '02-strengthened-1.4.0.json'), [
+      'ecommerce.inventory-operations.warehouse-transfer.2a',
+    ]), [
+    'ecommerce.inventory-operations.warehouse-transfer.2a',
+  ]);
+});
+
+test('a mutation can declare exact targets across multiple features', () => {
+  const crossFeature = {
+    id: 'cross-feature', file: 'src/app.ts', find: 'correct', replace: 'broken',
+    targets: ['check.b', 'check.c'],
+  };
+  assert.equal(validateMutationDefinitions([crossFeature]).ok, true);
+  assert.equal(validateMutationDefinitions([{ ...crossFeature, breaks: 7, kills: ['b'] }]).ok, false);
+  const baseline = { total: 2, max: 2, features: [
+    { id: 7, criteria: [report({ b: true }).features[0]!.criteria[0]!] },
+    { id: 8, criteria: [report({ c: true }).features[0]!.criteria[0]!] },
+  ] };
+  const mutant = { total: 0, max: 2, features: [
+    { id: 7, criteria: [report({ b: false }).features[0]!.criteria[0]!] },
+    { id: 8, criteria: [report({ c: false }).features[0]!.criteria[0]!] },
+  ] };
+  assert.equal(validateMutationBaseline(baseline, [crossFeature]).ok, true);
+  assert.equal(classifyMutationResult(baseline, mutant, crossFeature).status, 'CAUGHT');
+});
+
+test('mutation files cannot escape the application directory', () => {
+  assert.match(resolveMutationFile('/fixture/app', 'server/src/index.ts'), /server[\\/]src[\\/]index\.ts$/);
+  assert.throws(() => resolveMutationFile('/fixture/app', '../outside.ts'), /escapes the app directory/);
+  assert.throws(() => resolveMutationFile('/fixture/app', '/outside.ts'), /escapes the app directory/);
+});
+
+test('a mutation baseline must pass every criterion and contain every declared target', () => {
+  assert.equal(validateMutationBaseline(report({ a: true, b: true }), [mutation]).ok, true);
+  const invalid = validateMutationBaseline(report({ a: true, b: 'inconclusive' }), [
+    mutation, { id: 'missing', targets: ['check.c'] },
+  ]);
+  assert.equal(invalid.ok, false);
+  assert.deepEqual(invalid.issues.map(issue => issue.kind),
+    ['score_not_full', 'inconclusive', 'missing_target']);
+});
+
+test('mutation reports reject duplicate criterion identities', () => {
+  const duplicate = report({ a: true });
+  duplicate.features[0]!.criteria.push({ ...duplicate.features[0]!.criteria[0]! });
+  assert.throws(() => indexMutationReport(duplicate), /duplicate mutation criterion identity/);
+});
+
+test('only transient baseline failures are retried', () => {
+  assert.equal(isRetryableMutationBaseline([
+    { kind: 'score_not_full' }, { kind: 'setup_failure' }, { kind: 'inconclusive' },
+  ]), true);
+  assert.equal(isRetryableMutationBaseline([
+    { kind: 'score_not_full' }, { kind: 'criterion_failure' },
+  ]), false);
+  assert.equal(isRetryableMutationBaseline([{ kind: 'missing_target' }]), false);
+});
+
+test('only unusable mutation results are retried', () => {
+  for (const status of ['INVALID_SETUP', 'INVALID_HARNESS_FAILURE',
+    'INVALID_INCONCLUSIVE'] as const) {
+    assert.equal(isRetryableMutationResult(status), true);
+  }
+  for (const status of ['CAUGHT', 'INVALID_REPORT', 'WRONG_CRITERION', 'SURVIVED',
+    'CAUGHT_COLLATERAL'] as const) {
+    assert.equal(isRetryableMutationResult(status), false);
+  }
+});
+
+test('only a conclusive failure of the declared criterion is a clean kill', () => {
+  const result = classifyMutationResult(report({ a: true, b: true }), report({ a: true, b: false }), mutation);
+  assert.equal(result.status, 'CAUGHT');
+  assert.deepEqual(result.regressions.map(item => item.key), ['check.b']);
+});
+
+test('a score drop caused by setup failure is rejected', () => {
+  const result = classifyMutationResult(report({ a: true, b: true }),
+    report({ a: false, b: false }, 'sign in failed'), mutation);
+  assert.equal(result.status, 'INVALID_SETUP');
+});
+
+test('an inconclusive target does not kill a mutant', () => {
+  const result = classifyMutationResult(report({ a: true, b: true }),
+    report({ a: true, b: 'inconclusive' }), mutation);
+  assert.equal(result.status, 'INVALID_INCONCLUSIVE');
+});
+
+test('a typed harness failure is not mistaken for an inconclusive or caught mutant', () => {
+  const evidence = createCheckEvidence({ status: 'harness_failure', code: 'browser_failure',
+    phase: 'assertion', summary: 'not an application observation', startedAtMs: 1, completedAtMs: 2 });
+  const mutant = report({ a: true, b: true });
+  mutant.total = 1;
+  mutant.features[0]!.criteria[1] = { id: 'b', stableKey: 'check.b', evidence };
+  const result = classifyMutationResult(report({ a: true, b: true }), mutant, mutation);
+  assert.equal(result.status, 'INVALID_HARNESS_FAILURE');
+  assert.deepEqual(result.targetHarnessFailures, ['check.b']);
+});
+
+test('lost evidence outside the declared target invalidates a mutation kill', () => {
+  const inconclusive = classifyMutationResult(report({ a: true, b: true }),
+    report({ a: 'inconclusive', b: false }), mutation);
+  assert.equal(inconclusive.status, 'INVALID_INCONCLUSIVE');
+  assert.deepEqual(inconclusive.collateralInconclusive, ['check.a']);
+
+  const harnessEvidence = createCheckEvidence({ status: 'harness_failure', code: 'browser_failure',
+    phase: 'assertion', summary: 'browser disappeared', startedAtMs: 1, completedAtMs: 2 });
+  const mutant = report({ a: true, b: false });
+  mutant.features[0]!.criteria[0] = { id: 'a', stableKey: 'check.a', evidence: harnessEvidence };
+  const harness = classifyMutationResult(report({ a: true, b: true }), mutant, mutation);
+  assert.equal(harness.status, 'INVALID_HARNESS_FAILURE');
+  assert.deepEqual(harness.collateralHarnessFailures, ['check.a']);
+});
+
+test('failure in the wrong criterion is distinguished from survival', () => {
+  const result = classifyMutationResult(report({ a: true, b: true }), report({ a: false, b: true }), mutation);
+  assert.equal(result.status, 'WRONG_CRITERION');
+  assert.deepEqual(result.collateral.map(item => item.key), ['check.a']);
+});
+
+test('collateral damage fails even when the intended criterion catches the mutant', () => {
+  const result = classifyMutationResult(report({ a: true, b: true }), report({ a: false, b: false }), mutation);
+  assert.equal(result.status, 'CAUGHT_COLLATERAL');
+});
diff --git a/tools/stack-bench/tests/mutation-checkpoint.test.ts b/tools/stack-bench/tests/mutation-checkpoint.test.ts
new file mode 100644
index 00000000000..0244572eaa9
--- /dev/null
+++ b/tools/stack-bench/tests/mutation-checkpoint.test.ts
@@ -0,0 +1,72 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { reusableMutationEvidence } from '../src/evidence/mutation-checkpoint.js';
+import type { MutationCheckpointEvidence, MutationCheckpointIdentity }
+  from '../src/evidence/mutation-checkpoint.js';
+
+function identity(): MutationCheckpointIdentity {
+  return {
+    schemaVersion: 1,
+    engineSha256: 'a'.repeat(64),
+    recipeSha256: 'b'.repeat(64),
+    fixtureSha256: 'c'.repeat(64),
+    calibrationSha256: '8'.repeat(64),
+    imageId: 'sha256:image',
+    backend: 'mongodb',
+    track: 'ecommerce',
+    level: 3,
+    trackSha256: '9'.repeat(64),
+    shard: { index: 0, count: 1, mutationIds: ['m1', 'm2'] },
+    groups: [
+      { scenario: 'first.json', identitySha256: 'd'.repeat(64), mutationIds: ['m1'] },
+      { scenario: 'second.json', identitySha256: 'e'.repeat(64), mutationIds: ['m2'] },
+    ],
+  };
+}
+
+function evidence(checkpoint: MutationCheckpointIdentity = identity()): MutationCheckpointEvidence {
+  return { checkpoint, results: [
+    { id: 'm1', scenario: 'first.json', status: 'CAUGHT' },
+    { id: 'm2', scenario: 'second.json', status: 'CAUGHT' },
+  ], baseline: { scenarios: [
+    { scenario: 'first.json', identitySha256: 'd'.repeat(64), total: 1, max: 1 },
+    { scenario: 'second.json', identitySha256: 'e'.repeat(64), total: 1, max: 1 },
+  ] } };
+}
+
+test('mutation checkpoints reuse only unchanged scenario groups', () => {
+  const current = identity();
+  current.groups[1]!.identitySha256 = 'f'.repeat(64);
+  const reusable = reusableMutationEvidence(evidence(), current);
+  assert.deepEqual(reusable.results.map(result => result.id), ['m1']);
+  assert.deepEqual(reusable.baselines.map(result => result.scenario), ['first.json']);
+});
+
+test('mutation checkpoints fail closed when a global identity changes', () => {
+  const fields = ['engineSha256', 'recipeSha256', 'fixtureSha256',
+    'calibrationSha256', 'imageId', 'backend', 'track', 'level', 'trackSha256'] as const;
+  for (const field of fields) {
+    const current = identity();
+    current[field] = `changed-${field}`;
+    assert.throws(() => reusableMutationEvidence(evidence(), current),
+      new RegExp(`checkpoint ${field} does not match`));
+  }
+  const current = identity();
+  current.shard = { index: 0, count: 2, mutationIds: ['m1'] };
+  assert.throws(() => reusableMutationEvidence(evidence(), current),
+    /checkpoint shard does not match/);
+});
+
+test('checkpoint identity comparison ignores object property order', () => {
+  const current = identity();
+  current.shard = { mutationIds: ['m1', 'm2'], count: 1, index: 0 };
+  assert.deepEqual(reusableMutationEvidence(evidence(), current).results.map(result => result.id),
+    ['m1', 'm2']);
+});
+
+test('mutation checkpoints reject duplicate scenario groups', () => {
+  const current = identity();
+  current.groups.push({ ...current.groups[0]! });
+  assert.throws(() => reusableMutationEvidence(evidence(), current), /duplicates scenario first\.json/);
+});
diff --git a/tools/stack-bench/tests/mutation-manifests.mutation.ts b/tools/stack-bench/tests/mutation-manifests.mutation.ts
new file mode 100644
index 00000000000..fe0a894e6c0
--- /dev/null
+++ b/tools/stack-bench/tests/mutation-manifests.mutation.ts
@@ -0,0 +1,103 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, readdirSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { mutationFileEdits, mutationScenario, mutationTargetKeys,
+  validateMutationDefinitions, type MutationManifest }
+  from '../src/evidence/mutation-analysis.js';
+import { loadReferenceRegistry, prepareReferenceFixtureSource } from '../src/references/reference-fixtures.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+const MUTATIONS = join(STACK_BENCH_ROOT, 'grader', 'mutations');
+
+function readJson(path: string): unknown {
+  return JSON.parse(readFileSync(path, 'utf8'));
+}
+
+function record(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function isMutationManifest(value: unknown): value is MutationManifest & Record<string, unknown> {
+  return record(value) && (value.mutations === undefined
+    || Array.isArray(value.mutations) && value.mutations.every(record));
+}
+
+function manifestAt(path: string): MutationManifest & Record<string, unknown> {
+  const value = readJson(path);
+  if (!isMutationManifest(value)) throw new Error(`${path} mutations must be an array`);
+  return value;
+}
+
+test('every mutation manifest binds valid edits to exact scenario criteria', () => {
+  const files = readdirSync(MUTATIONS).filter(file => file.endsWith('.json')).sort();
+  assert.ok(files.length > 0, 'expected mutation manifests');
+  for (const file of files) {
+    const manifest = manifestAt(join(MUTATIONS, file));
+    const definitions = validateMutationDefinitions(manifest.mutations,
+      { defaultScenario: typeof manifest.scenario === 'string' ? manifest.scenario : null, requireScenario: true });
+    assert.deepEqual(definitions.issues, [], `${file} has an invalid mutation definition`);
+    assert(typeof manifest.status === 'string');
+    assert.match(manifest.status, /^(active|candidate)$/);
+    assert.equal(manifest.schemaVersion, 2);
+    assert.deepEqual(Object.keys(manifest).filter(field => !new Set([
+      'schemaVersion', 'status', 'fixtureSha256', 'backend', 'track', 'scenario', 'note', 'mutations',
+    ]).has(field)), [], `${file} has unknown root fields`);
+    assert(typeof manifest.backend === 'string');
+    assert.match(manifest.backend, /^(spacetime|postgres|mongodb)$/);
+    assert.equal(typeof manifest.track, 'string');
+    assert.equal(manifest.level, undefined);
+    assert(typeof manifest.fixtureSha256 === 'string');
+    assert.match(manifest.fixtureSha256, /^[a-f0-9]{64}$/);
+
+    for (const mutation of manifest.mutations ?? []) {
+      const scenarioPath = mutationScenario(manifest, mutation);
+      assert.equal(typeof scenarioPath, 'string');
+      for (const target of mutationTargetKeys(mutation)) {
+        assert.match(target, /^[a-z0-9][a-z0-9.-]+$/,
+          `${file}/${mutation.id} has an invalid stable check ID`);
+      }
+    }
+  }
+});
+
+test('current mutation anchors match their hash-bound canonical fixture exactly once', () => {
+  const registry = loadReferenceRegistry();
+  for (const fixture of registry.fixtures.filter(candidate =>
+    candidate.status === 'candidate' || candidate.status === 'active')) {
+    const manifests = fixture.mutationManifests ?? [];
+    if (!manifests.length) continue;
+    if ((!fixture.source && !fixture.targetPath) || !fixture.imported?.sourceSha256) {
+      throw new Error(`${fixture.id} mutation fixture has incomplete source identity`);
+    }
+    const temporary = fixture.source
+      ? mkdtempSync(join(tmpdir(), `stack-bench-mutation-fixture-${fixture.backend}-`)) : null;
+    try {
+      let sourceRoot: string;
+      if (temporary) {
+        prepareReferenceFixtureSource(fixture, temporary);
+        sourceRoot = temporary;
+      } else {
+        if (!fixture.targetPath) throw new Error(`${fixture.id} has no target path`);
+        sourceRoot = join(STACK_BENCH_ROOT, fixture.targetPath);
+      }
+      for (const relativeManifest of manifests) {
+        const manifest = manifestAt(join(STACK_BENCH_ROOT, relativeManifest));
+        assert(typeof manifest.fixtureSha256 === 'string');
+        assert.equal(manifest.fixtureSha256, fixture.imported.sourceSha256,
+          `${fixture.id} manifest is bound to different source bytes`);
+        for (const mutation of manifest.mutations ?? []) {
+          for (const edit of mutationFileEdits(mutation)) {
+            const source = readFileSync(join(sourceRoot, edit.file), 'utf8');
+            const matches = source.split(edit.find).length - 1;
+            assert.equal(matches, 1,
+              `${fixture.id}/${mutation.id} anchor matched ${matches} times in ${edit.file}`);
+          }
+        }
+      }
+    } finally {
+      if (temporary) rmSync(temporary, { recursive: true, force: true });
+    }
+  }
+});
diff --git a/tools/stack-bench/tests/mutation-preflight.test.ts b/tools/stack-bench/tests/mutation-preflight.test.ts
new file mode 100644
index 00000000000..28793b5c145
--- /dev/null
+++ b/tools/stack-bench/tests/mutation-preflight.test.ts
@@ -0,0 +1,131 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { existsSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { MUTATION_GRADE_MAX_TIMEOUT_MS, mutationControlArgv, mutationControlTimeoutMs,
+  mutationGradeTimeoutMs } from '../src/evidence/mutation-control.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { STACK_BENCH_ROOT, compiledEntrypoint } from '../src/package-root.js';
+
+test('campaign-bound mutation grading forwards the run level and exact recipe', () => {
+  const manifest = join(STACK_BENCH_ROOT, 'grader', 'mutations', 'mongodb-ecommerce-2.0.1.json');
+  const recipeTask = { schemaVersion: 3,
+    recipe: { id: 'ecommerce.sequential-l1', version: '2.5.0' },
+    selection: {}, task: {} };
+  const args = { out: 'output', mutations: manifest, backend: 'mongodb',
+    track: 'ecommerce', levelList: [1], runIndex: 0, parentAttemptId: 'campaign-attempt',
+    recipe: null, recipeTasks: new Map([[1, { request: recipeTask }]]) };
+  const argv = mutationControlArgv(args, 'app', 'http://localhost:5173',
+    loadTrack('ecommerce'));
+  assert.equal(argv[argv.indexOf('--recipe') + 1], 'ecommerce.sequential-l1@2.5.0');
+  assert.equal(argv[argv.indexOf('--level') + 1], '1');
+  assert.deepEqual(JSON.parse(argv[argv.indexOf('--restart-spec') + 1] ?? ''), {
+    backend: 'mongodb', app: 'app', port: 6673, probe: '',
+  });
+  assert.throws(() => mutationControlArgv({ ...args,
+    recipe: 'ecommerce.sequential-l2@1.6.0' }, 'app', 'http://localhost:5173',
+    loadTrack('ecommerce')), /does not match bound task/);
+});
+
+test('mutation grading receives the exact scored checks selected for the run', () => {
+  const manifest = join(STACK_BENCH_ROOT, 'grader', 'mutations', 'mongodb-ecommerce-2.0.1.json');
+  const args = { out: 'output', mutations: manifest, backend: 'mongodb',
+    track: 'ecommerce', levelList: [3], runIndex: 0, parentAttemptId: 'selected-attempt',
+    recipe: null, recipeTasks: new Map([[3, {
+      request: { schemaVersion: 3,
+        recipe: { id: 'ecommerce.progression-catalog', version: '2.0.1' },
+        selection: {}, task: {} },
+      selection: { scoredChecks: [
+        { stableKey: 'ecommerce.inventory-operations.warehouse-transfer.2a' },
+        { stableKey: 'ecommerce.inventory-operations.stock-conservation.202a' },
+      ] },
+    }]]) };
+  const argv = mutationControlArgv(args, 'app', 'http://localhost:5173',
+    loadTrack('ecommerce'));
+  assert.deepEqual(argv.flatMap((value, index) => value === '--selected-check'
+    ? [argv[index + 1]] : []), [
+    'ecommerce.inventory-operations.warehouse-transfer.2a',
+    'ecommerce.inventory-operations.stock-conservation.202a',
+  ]);
+});
+
+test('mutation control timeout follows its explicit runtime budget', () => {
+  assert.equal(mutationControlTimeoutMs(), 80 * 60_000);
+  assert.equal(mutationControlTimeoutMs(15), 35 * 60_000);
+  assert.throws(() => mutationControlTimeoutMs(0), /positive number/);
+});
+
+test('each mutation grade uses only the remaining batch time', () => {
+  const now = 1_000_000;
+  assert.equal(mutationGradeTimeoutMs(now + 30_000, now), 30_000);
+  assert.equal(mutationGradeTimeoutMs(now + MUTATION_GRADE_MAX_TIMEOUT_MS + 1, now),
+    MUTATION_GRADE_MAX_TIMEOUT_MS);
+  assert.equal(mutationGradeTimeoutMs(now, now), 0);
+  assert.equal(mutationGradeTimeoutMs(now - 1, now), 0);
+  assert.throws(() => mutationGradeTimeoutMs(Number.NaN, now), /must be finite/);
+});
+
+test('mutation shard coordinates reach the mutation runner together', () => {
+  const manifest = join(STACK_BENCH_ROOT, 'grader', 'mutations', 'mongodb-ecommerce-2.0.1.json');
+  const args = { out: 'output', mutations: manifest, backend: 'mongodb',
+    track: 'ecommerce', levelList: [1], runIndex: 4, parentAttemptId: 'parallel-attempt',
+    recipe: null, recipeTasks: new Map(), mutationShardIndex: 2, mutationShardCount: 4 };
+  const argv = mutationControlArgv(args, 'app', 'http://localhost:5173',
+    loadTrack('ecommerce'));
+  const index = argv.indexOf('--mutation-shard-index');
+  assert.deepEqual(argv.slice(index, index + 4),
+    ['--mutation-shard-index', '2', '--mutation-shard-count', '4']);
+});
+
+test('mutation checkpoint controls reach the mutation runner', () => {
+  const manifest = join(STACK_BENCH_ROOT, 'grader', 'mutations', 'mongodb-ecommerce-2.0.1.json');
+  const args = { out: 'output', mutations: manifest, backend: 'mongodb',
+    track: 'ecommerce', levelList: [1], runIndex: 4, parentAttemptId: 'resume-attempt',
+    recipe: null, recipeTasks: new Map(), mutationResumeFrom: 'prior.json',
+    mutationCheckpointOut: 'next.json', mutationMaxRuntimeMinutes: 30,
+    mutationImageId: 'sha256:image', mutationBaselineBundle: 'baseline.json',
+    expectedMutationCalibration: { id: 'calibration', version: '1.0.0',
+      sha256: 'calibration-sha', state: 'qualified' } };
+  const argv = mutationControlArgv(args, 'app', 'http://localhost:5173',
+    loadTrack('ecommerce'));
+  const after = (flag: string): string => {
+    const value = argv[argv.indexOf(flag) + 1];
+    if (value === undefined) throw new Error(`missing value for ${flag}`);
+    return value;
+  };
+  assert.equal(after('--resume-from'), 'prior.json');
+  assert.equal(after('--checkpoint-out'), 'next.json');
+  assert.equal(after('--max-runtime-minutes'), '30');
+  assert.equal(after('--image-id'), 'sha256:image');
+  assert.equal(after('--baseline-bundle'), 'baseline.json');
+  assert.deepEqual(JSON.parse(after('--expected-calibration-json')),
+    args.expectedMutationCalibration);
+});
+
+test('a mismatched mutation fixture fails before acquiring any backend resource', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-mutation-preflight-'));
+  const output = join(root, 'output');
+  const manifest = join(root, 'mutations.json');
+  const locks = join(tmpdir(), 'stack-bench-resource-locks');
+  const lock = join(locks, `${createHash('sha256').update('slot:ecommerce:mongodb:run19').digest('hex')}.lock.json`);
+  try {
+    assert.equal(existsSync(lock), false, 'test slot is already leased');
+    writeFileSync(join(root, 'source.txt'), 'fixture\n');
+    // Use root as the explicit app; the manifest intentionally targets other
+    // bytes. No Docker or database lookup should happen before this rejection.
+    writeFileSync(manifest, JSON.stringify({ schemaVersion: 2, status: 'candidate',
+      fixtureSha256: '0'.repeat(64), backend: 'mongodb', track: 'ecommerce',
+      scenario: 'tracks/ecommerce/scenarios/01-contention.json', mutations: [] }));
+    assert.throws(() => execFileSync(process.execPath, [compiledEntrypoint('commands', 'bench.js'),
+      '--backend', 'mongodb', '--track', 'ecommerce', '--levels', '1',
+      '--run-index', '19', '--app', root, '--out', output,
+      '--agent-adapter', 'deterministic', '--mutations', manifest, '--no-media'],
+    { encoding: 'utf8', stdio: 'pipe', timeout: 30_000 }), /targets fixture/);
+    assert.equal(existsSync(lock), false);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/mutation-shards.test.ts b/tools/stack-bench/tests/mutation-shards.test.ts
new file mode 100644
index 00000000000..c4d9de009ce
--- /dev/null
+++ b/tools/stack-bench/tests/mutation-shards.test.ts
@@ -0,0 +1,57 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { mergeMutationShards, mutationShard, mutationWorkerSlots }
+  from '../src/evidence/mutation-shards.js';
+
+const mutations = [
+  { id: 'a', scenario: 'one' },
+  { id: 'b', scenario: 'two' },
+  { id: 'c', scenario: 'one' },
+  { id: 'd', scenario: 'three' },
+  { id: 'e', scenario: 'two' },
+];
+
+test('mutation workers reserve one consecutive proven run slot each', () => {
+  assert.deepEqual(mutationWorkerSlots({ workerCount: 4, runIndex: 8, maxRunIndex: 20 }),
+    [8, 9, 10, 11]);
+  assert.throws(() => mutationWorkerSlots({ workerCount: 2, runIndex: 20, maxRunIndex: 20 }),
+    /exceed run-index cap/);
+  for (const workerCount of [0, 1.5, NaN]) {
+    assert.throws(() => mutationWorkerSlots({ workerCount, runIndex: 0, maxRunIndex: 20 }));
+  }
+});
+
+test('mutation partitioning balances individual defects and permits empty trailing shards', () => {
+  assert.deepEqual(mutationShard(mutations, { index: 0, count: 3 }).mutationIds, ['a', 'd']);
+  assert.deepEqual(mutationShard(mutations, { index: 1, count: 3 }).mutationIds, ['b', 'e']);
+  assert.deepEqual(mutationShard(mutations, { index: 2, count: 3 }).mutationIds, ['c']);
+  assert.deepEqual(mutationShard([{ id: 'a', scenario: 'one' }],
+    { index: 2, count: 3 }).mutationIds, []);
+  assert.deepEqual(mutationShard([{ id: 'a' }, { id: 'b' }],
+    { index: 0, count: 2, defaultScenario: 'shared' }).mutationIds, ['a']);
+  assert.deepEqual(mutationShard([{ id: 'a' }, { id: 'b' }],
+    { index: 1, count: 2, defaultScenario: 'shared' }).mutationIds, ['b']);
+});
+
+test('mutation shard merging restores manifest order and rejects incomplete unions', () => {
+  const shards = Array.from({ length: 3 }, (_, index) => {
+    const plan = mutationShard(mutations, { index, count: 3 });
+    return { ...plan, results: plan.mutationIds.map(id => ({ id, status: 'CAUGHT' })) };
+  });
+  assert.deepEqual(mergeMutationShards(mutations, [shards[2]!, shards[0]!, shards[1]!])
+    .map(result => result.id), ['a', 'b', 'c', 'd', 'e']);
+  assert.throws(() => mergeMutationShards(mutations, shards.slice(1)), /declared shard count/);
+  assert.throws(() => mergeMutationShards(mutations, [shards[0]!, shards[0]!, shards[2]!]),
+    /duplicated/);
+  assert.throws(() => mergeMutationShards(mutations, [
+    { ...shards[0]!, mutationIds: ['a'] }, shards[1]!, shards[2]!,
+  ]), /exact assigned/);
+});
+
+test('mutation shard inputs reject duplicate and malformed mutation identities', () => {
+  assert.throws(() => mutationShard([{ id: 'a' }, { id: 'a' }], { index: 0, count: 1 }),
+    /unique/);
+  assert.throws(() => mutationShard([{ nope: true }], { index: 0, count: 1 }), /has no id/);
+  assert.throws(() => mutationShard(mutations, { index: 3, count: 3 }), /0 through 2/);
+});
diff --git a/tools/stack-bench/tests/neutral-guidance.contract.ts b/tools/stack-bench/tests/neutral-guidance.contract.ts
new file mode 100644
index 00000000000..4c56664eb81
--- /dev/null
+++ b/tools/stack-bench/tests/neutral-guidance.contract.ts
@@ -0,0 +1,34 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { resolveGuidanceProfile } from '../src/campaigns/condition-compiler.js';
+const root = STACK_BENCH_ROOT;
+const files = Object.values(resolveGuidanceProfile('neutral@1.8.0',
+  ['mongodb', 'postgres', 'spacetime']).documents)
+  .map(document => resolve(root, document.path));
+const prescribedFiles = Object.values(resolveGuidanceProfile('prescribed@1.2.0',
+  ['mongodb', 'postgres', 'spacetime']).documents)
+  .map(document => resolve(root, document.path));
+const presentationAdvice = /brand|styling|theme|colour|color|app title/i;
+
+test('neutral backend documents contain only stack access facts', () => {
+  const implementationAdvice = /\b(express|socket\.io|mongoose|drizzle|prisma|orm|polling|locking)\b/i;
+  const evaluationLanguage = /stack bench|benchmark|harness|test(?:ing|ed|s)?|grader|score/i;
+  for (const file of files) {
+    const content = readFileSync(file, 'utf8');
+    assert.doesNotMatch(content, implementationAdvice, file);
+    assert.doesNotMatch(content, evaluationLanguage, file);
+    assert.doesNotMatch(content, presentationAdvice, file);
+    assert.match(content, /Choose the/);
+    assert.match(content, /## Connection/);
+  }
+});
+
+test('backend guidance does not control product presentation', () => {
+  for (const file of prescribedFiles) {
+    assert.doesNotMatch(readFileSync(file, 'utf8'), presentationAdvice, file);
+  }
+});
diff --git a/tools/stack-bench/tests/null-control-analysis.test.ts b/tools/stack-bench/tests/null-control-analysis.test.ts
new file mode 100644
index 00000000000..6165f97d51a
--- /dev/null
+++ b/tools/stack-bench/tests/null-control-analysis.test.ts
@@ -0,0 +1,83 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { analyseNullReports } from '../src/evidence/null-control-analysis.js';
+import {
+  createCheckEvidence,
+  type CheckEvidenceStatus,
+} from '../src/evidence/check-evidence.js';
+
+const criterion = (
+  id: string,
+  points: number,
+  status: CheckEvidenceStatus,
+  phase: 'setup' | 'assertion' = 'assertion',
+  summary: string | null = null,
+) => ({
+  id, points, evidence: createCheckEvidence({ status,
+    code: status === 'passed' ? 'completed' : 'test_result', phase, summary,
+    startedAtMs: 1, completedAtMs: 2 }),
+});
+
+test('null analysis separates expected failures, vacuous passes and oracle gaps', () => {
+  const result = analyseNullReports([{ track: 'shop', level: 1, id: 'features', scenario: '01.json',
+    report: { features: [{ id: 1, name: 'Items', criteria: [
+      criterion('1a', 2, 'failed', 'assertion', 'missing control'),
+      criterion('1b', 3, 'passed'),
+      criterion('1c', 4, 'inconclusive', 'assertion', 'harness could not issue action'),
+      criterion('diagnostic', 0, 'passed'),
+    ] }] } }]);
+
+  assert.equal(result.ok, false);
+  assert.deepEqual(result.summary, {
+    criteria: 3,
+    points: 9,
+    expectedFailures: { criteria: 1, points: 2 },
+    expectedFailureStages: {
+      setup: { criteria: 0, points: 0 },
+      assertion: { criteria: 1, points: 2 },
+    },
+    vacuousPasses: { criteria: 1, points: 3 },
+    oracleGaps: { criteria: 1, points: 4 },
+    unscored: { criteria: 1, passed: 1, failed: 0, inconclusive: 0 },
+  });
+  assert.deepEqual(result.criteria.map(item => item.status),
+    ['expected_fail', 'vacuous_pass', 'oracle_gap']);
+});
+
+test('all conclusive failures make the null control pass', () => {
+  const result = analyseNullReports([{ track: 'chat', level: 2, id: 'invariants', scenario: '02.json',
+    report: { features: [{ id: 10, criteria: [
+      criterion('10a', 1, 'failed'),
+      criterion('10b', 2, 'failed', 'setup', 'sign in did not complete'),
+      criterion('diagnostic', 0, 'inconclusive'),
+    ] }] } }]);
+  assert.equal(result.ok, true);
+  assert.deepEqual(result.summary.expectedFailures, { criteria: 2, points: 3 });
+  assert.deepEqual(result.summary.expectedFailureStages, {
+    setup: { criteria: 1, points: 2 },
+    assertion: { criteria: 1, points: 1 },
+  });
+  assert.deepEqual(result.summary.unscored,
+    { criteria: 1, passed: 0, failed: 0, inconclusive: 1 });
+});
+
+test('typed null analysis gets failure phase from evidence, not detail wording', () => {
+  const evidence = createCheckEvidence({ status: 'failed', code: 'application_failure', phase: 'setup',
+    summary: 'wording without the historical prefix', startedAtMs: 1, completedAtMs: 2 });
+  const result = analyseNullReports([{ track: 'shop', level: 1, id: 'features',
+    report: { features: [{ id: 1, criteria: [
+      { id: 'a', points: 1, evidence },
+    ] }] } }]);
+  assert.equal(result.criteria[0]?.failureStage, 'setup');
+  assert.equal(result.ok, true);
+});
+
+test('null analysis rejects invalid rubric points', () => {
+  const evidence = createCheckEvidence({ status: 'failed', code: 'test_result', phase: 'assertion',
+    summary: null, startedAtMs: 1, completedAtMs: 2 });
+  for (const points of [Number.NaN, -1, 1.5, '2']) {
+    assert.throws(() => analyseNullReports([{ track: 'shop', level: 1, id: 'features',
+      report: { features: [{ id: 1, criteria: [{ id: 'a', points, evidence }] }] } }]),
+    /points must be a non-negative integer/);
+  }
+});
diff --git a/tools/stack-bench/tests/null-control-cli.contract.ts b/tools/stack-bench/tests/null-control-cli.contract.ts
new file mode 100644
index 00000000000..b14474e2f72
--- /dev/null
+++ b/tools/stack-bench/tests/null-control-cli.contract.ts
@@ -0,0 +1,88 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import test from 'node:test';
+
+import { compileScenarioDefinition } from '../src/composition/definition-compiler.js';
+import { nullControlSuites, parseNullControlArgs } from '../commands/null-control.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import type { RecipeCheck } from '../src/composition/recipe-release.js';
+import { selectScenarioChecks } from '../src/composition/recipe-selection.js';
+import { loadTrack } from '../src/composition/tracks.js';
+
+const readJson = (path: string): unknown => JSON.parse(readFileSync(path, 'utf8'));
+
+interface RecipeSuite {
+  id: string;
+  spec: string;
+  level: number;
+  checks: RecipeCheck[];
+}
+
+function hasChecks(suite: unknown): suite is RecipeSuite {
+  return suite !== null && typeof suite === 'object' && 'checks' in suite
+    && Array.isArray(suite.checks);
+}
+
+test('null qualification can select one exact track and level', () => {
+  const args = parseNullControlArgs(['node', 'null-control.js',
+    '--track', 'ecommerce', '--level', '1']);
+  assert.deepEqual(args.tracks, ['ecommerce']);
+  assert.equal(args.level, 1);
+  assert.throws(() => parseNullControlArgs(['node', 'null-control.js',
+    '--track', 'ecommerce,chat', '--level', '1']), /exactly one/);
+  assert.throws(() => parseNullControlArgs(['node', 'null-control.js',
+    '--track', 'ecommerce', '--level', '0']), /positive integer/);
+  assert.equal(parseNullControlArgs(['node', 'null-control.js', '--track', 'ecommerce',
+    '--level', '1', '--recipe', 'ecommerce.sequential-l1@2.5.0']).recipe,
+  'ecommerce.sequential-l1@2.5.0');
+  assert.throws(() => parseNullControlArgs(['node', 'null-control.js', '--track', 'ecommerce',
+    '--recipe', 'ecommerce.sequential-l1@2.5.0']), /requires --level/);
+  const track = loadTrack('ecommerce');
+  assert.deepEqual(nullControlSuites(track, 2).map(suite => suite.level), [2, 2, 2, 2, 2]);
+  assert.throws(() => nullControlSuites(track, 4), /not declared/);
+});
+
+test('recipe-bound null qualification grades the exact modular execution and checks', () => {
+  const track = loadTrack('ecommerce');
+  const binding = resolveRecipeRelease(track, 1, 'ecommerce.sequential-l1@2.5.0');
+  const suites = nullControlSuites(track, 1, binding);
+  assert(suites.every(hasChecks));
+  const recipeSuites = suites.filter(hasChecks);
+  const checks = recipeSuites.flatMap(suite => suite.checks);
+
+  assert.deepEqual(suites.map(suite => suite.id), binding.execution.map(execution => execution.id));
+  assert.equal(checks.length, 48);
+  assert.equal(checks.reduce((total, check) => total + check.points, 0), 58);
+  assert.equal(checks.filter(check => check.points === 0).length, 2);
+  assert.equal(new Set(checks.map(check => check.stableKey)).size, 48);
+
+  const selectedByExecution = new Map(recipeSuites.map(suite => {
+    const scenario = compileScenarioDefinition(readJson(suite.spec),
+      { source: suite.spec, expectedLevel: 1 });
+    const selected = selectScenarioChecks(scenario, { checks: binding.release.checkCatalog },
+      suite.checks.map(check => check.stableKey));
+    const selectedKeys = selected.features.flatMap(feature => feature.criteria
+      .map(criterion => suite.checks.find(check => check.featureId === feature.id
+        && check.criterionId === criterion.id)?.stableKey)).filter(Boolean).sort();
+    assert.deepEqual(selectedKeys, suite.checks.map(check => check.stableKey).sort());
+    return [suite.id, selectedKeys];
+  }));
+  for (const criterion of ['101a', '102a', '103a', '104a']) {
+    const owners = [...selectedByExecution.entries()]
+      .filter(([, keys]) => keys.some(key => key.endsWith(`.${criterion}`)));
+    assert.equal(owners.length, 1);
+    const owner = owners[0];
+    assert(owner);
+    assert.equal(owner[0].includes('invariants'), false);
+  }
+});
+
+test('recipe-bound null qualification rejects an execution with no mapped checks', () => {
+  const track = loadTrack('ecommerce');
+  const binding = structuredClone(resolveRecipeRelease(track, 1, 'ecommerce.sequential-l1@2.5.0'));
+  const firstExecution = binding.execution[0];
+  assert(firstExecution);
+  binding.execution.push({ id: 'empty-execution', source: firstExecution.source,
+    ownership: { kind: 'current', level: 1 } });
+  assert.throws(() => nullControlSuites(track, 1, binding), /maps no checks/);
+});
diff --git a/tools/stack-bench/tests/open-list-live.mutation.ts b/tools/stack-bench/tests/open-list-live.mutation.ts
new file mode 100644
index 00000000000..672aaa461eb
--- /dev/null
+++ b/tools/stack-bench/tests/open-list-live.mutation.ts
@@ -0,0 +1,150 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import ts from 'typescript';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compileScenarioDefinition } from '../src/composition/definition-compiler.js';
+import { mutationEdits, mutationScenario, mutationTargetKeys,
+  readMutationManifest, validateMutationDefinitions } from '../src/evidence/mutation-analysis.js';
+import { loadReferenceRegistry, prepareReferenceFixtureSource,
+  selectReferenceFixture } from '../src/references/reference-fixtures.js';
+import type { MutationDefinition } from '../src/evidence/mutation-analysis.js';
+import type { ReferenceFixtureSelector } from '../src/references/reference-fixtures.js';
+
+const ROOT = STACK_BENCH_ROOT;
+const SCENARIO_RELATIVE = 'tracks/ecommerce/scenarios/01-open-list-live-2.3.0.json';
+const MUTATION_SCENARIO = 'tracks/ecommerce/scenarios/progression-open-list-live-1.0.0.json';
+const SCENARIO = join(ROOT, SCENARIO_RELATIVE);
+const registry = loadReferenceRegistry();
+
+const cases: ReadonlyArray<readonly [backend: string, fixtureSha256: string]> = [
+  ['mongodb', 'feeaf484f5c5d2eae6f61b192e3e50b0a7e6da85e2f761685e33261708acf8c6'],
+  ['postgres', 'e461967ff8b99394c278e6d382e455a7fc3086c88016543fa668baf808baec0d'],
+  ['spacetime', '58a193d61e02eac8e2c4801dc4cefb78db42468515a452a17e2544f2132148ce'],
+];
+
+interface ReferenceSourceArguments extends ReferenceFixtureSelector {
+  app: string;
+}
+
+function prepareReferenceSource(args: ReferenceSourceArguments) {
+  const fixture = selectReferenceFixture(loadReferenceRegistry(), args);
+  const prepared = prepareReferenceFixtureSource(fixture, args.app);
+  return { fixture, sourceSha256: prepared.sha256 };
+}
+
+test('the focused 902a candidate deterministically checks an already-open live list', () => {
+  const scenario = compileScenarioDefinition(readJson(SCENARIO),
+    { source: SCENARIO, expectedLevel: 1 });
+  const feature = scenario.features.find(candidate => candidate.id === 902);
+  assert(feature, 'scenario must include feature 902');
+  const criterion = feature.criteria.find(candidate => String(candidate.id) === '902a');
+  assert(criterion, 'feature 902 must include criterion 902a');
+  assert.equal(criterion.points, 1);
+  assert.deepEqual(criterion.steps.map(step => step.do),
+    ['click', 'expect', 'fill', 'click', 'expectElementCount', 'expectElementCount']);
+  assert.deepEqual(criterion.steps.slice(0, 2).map(step => step.actor), ['reader', 'reader'],
+    'the reader view must be visibly open before the write begins');
+  assert.equal(criterion.steps.some(action => action.do === 'race' || action.do === 'wait'), false);
+  assert.deepEqual(criterion.steps.at(-2), {
+    do: 'expectElementCount', actor: 'reviewer', testid: 'review-item',
+    contains: 'live-review-kbd', equals: 1, within: 10000,
+  }, 'the writer must prove the review committed before grading the reader');
+  assert.deepEqual(criterion.steps.at(-1), {
+    do: 'expectElementCount', actor: 'reader', testid: 'review-item',
+    contains: 'live-review-kbd', equals: 1, within: 10000,
+  });
+  assert.match(stringValue(criterion.note, 'criterion 902a note'),
+    /without assuming HTTP, WebSockets, subscriptions, or any project layout/);
+});
+
+for (const [backend, fixtureSha256] of cases) {
+  test(`${backend} has exact known defects for the open-list check`, () => {
+    const fixture = registry.fixtures.find(candidate =>
+      candidate.track === 'ecommerce' && candidate.backend === backend);
+    assert.equal(fixture?.mutationManifests?.length, 1);
+    const manifestPath = fixture?.mutationManifests?.[0];
+    assert(manifestPath);
+    const manifest = readMutationManifest(join(ROOT, manifestPath));
+    const mutations = manifest.mutations.filter(mutation =>
+      mutationTargetKeys(mutation).includes('ecommerce.spec.live-state.open-list.902a'));
+    assert.equal(manifest.fixtureSha256, fixtureSha256);
+    assert.deepEqual(validateMutationDefinitions(mutations, {
+      defaultScenario: manifest.scenario,
+      requireScenario: true,
+    }).issues, []);
+    assert.equal(mutations.length, backend === 'mongodb' ? 1 : 2);
+    assert(mutations.every(mutation => mutationTargetKeys(mutation).length === 1
+      && mutationTargetKeys(mutation)[0] === 'ecommerce.spec.live-state.open-list.902a'));
+    assert(mutations.some(mutation => /ignore|snapshot/i.test(mutationDescription(mutation))),
+      'one mutation must omit the committed review from the open reader');
+    if (backend !== 'mongodb') {
+      assert(mutations.some(mutation => /twice/i.test(mutationDescription(mutation))),
+        'one mutation must duplicate the committed review');
+    }
+
+    const work = mkdtempSync(join(tmpdir(), `stack-bench-open-list-${backend}-`));
+    try {
+      const app = join(work, 'app');
+      const prepared = prepareReferenceSource({
+        backend,
+        track: 'ecommerce',
+        level: 1,
+        recipe: 'ecommerce.sequential-l1@2.5.0',
+        app,
+      });
+      assert.equal(prepared.sourceSha256, fixtureSha256);
+      for (const mutation of mutations) {
+        assert.equal(mutationScenario(manifest, mutation), MUTATION_SCENARIO);
+        const source = readFileSync(join(app, mutationFile(mutation)), 'utf8');
+        let mutated = source;
+        for (const edit of validMutationEdits(mutation)) {
+          assert.equal(mutated.split(edit.find).length - 1, 1,
+            `${mutation.id} anchor must match exactly once`);
+          mutated = mutated.replace(edit.find, edit.replace);
+        }
+        const transpiled = ts.transpileModule(mutated, {
+          compilerOptions: {
+            jsx: ts.JsxEmit.ReactJSX,
+            module: ts.ModuleKind.ESNext,
+            target: ts.ScriptTarget.ES2022,
+          },
+          fileName: mutationFile(mutation),
+          reportDiagnostics: true,
+        });
+        assert.deepEqual((transpiled.diagnostics ?? [])
+          .filter(diagnostic => diagnostic.category === ts.DiagnosticCategory.Error)
+          .map(diagnostic => ts.flattenDiagnosticMessageText(diagnostic.messageText, '\n')), []);
+      }
+    } finally {
+      rmSync(work, { recursive: true, force: true });
+    }
+  });
+}
+
+function readJson(path: string): unknown {
+  return JSON.parse(readFileSync(path, 'utf8'));
+}
+
+function stringValue(value: unknown, label: string): string {
+  if (typeof value !== 'string') throw new Error(`${label} must be a string`);
+  return value;
+}
+
+function mutationDescription(mutation: MutationDefinition): string {
+  return stringValue(mutation.desc, 'mutation description');
+}
+
+function mutationFile(mutation: MutationDefinition): string {
+  return stringValue(mutation.file, 'mutation file');
+}
+
+function validMutationEdits(mutation: MutationDefinition): Array<{ find: string; replace: string }> {
+  return mutationEdits(mutation).map(edit => ({
+    find: stringValue(edit.find, 'mutation edit find'),
+    replace: stringValue(edit.replace, 'mutation edit replace'),
+  }));
+}
diff --git a/tools/stack-bench/tests/operational-paths.test.ts b/tools/stack-bench/tests/operational-paths.test.ts
new file mode 100644
index 00000000000..3d9f3a80dd6
--- /dev/null
+++ b/tools/stack-bench/tests/operational-paths.test.ts
@@ -0,0 +1,60 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, readFileSync, rmSync,
+  writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import test from 'node:test';
+
+import { archiveTranscripts } from '../src/agents/transcript-archive.js';
+import { stackBenchResultsRoot } from '../src/runtime/operational-paths.js';
+
+test('results default to the package results directory', t => {
+  const moduleRoot = mkdtempSync(join(tmpdir(), 'stack-bench-module-'));
+  t.after(() => rmSync(moduleRoot, { recursive: true, force: true }));
+  assert.equal(stackBenchResultsRoot(moduleRoot, {}), resolve(moduleRoot, 'results'));
+});
+
+test('appliance output uses the configured durable results root', t => {
+  const moduleRoot = mkdtempSync(join(tmpdir(), 'stack-bench-module-'));
+  const resultsRoot = mkdtempSync(join(tmpdir(), 'stack-bench-results-'));
+  t.after(() => rmSync(moduleRoot, { recursive: true, force: true }));
+  t.after(() => rmSync(resultsRoot, { recursive: true, force: true }));
+  assert.equal(
+    stackBenchResultsRoot(moduleRoot, { STACK_BENCH_RESULTS_DIR: resultsRoot }),
+    resolve(resultsRoot),
+  );
+});
+
+test('configured operational output must be an exact absolute path', () => {
+  assert.throws(
+    () => stackBenchResultsRoot('/opt/stack-bench', { STACK_BENCH_RESULTS_DIR: 'results' }),
+    /absolute path/,
+  );
+  const absolute = resolve(tmpdir(), 'stack-bench-results');
+  assert.throws(
+    () => stackBenchResultsRoot('/opt/stack-bench', { STACK_BENCH_RESULTS_DIR: ` ${absolute}` }),
+    /surrounding whitespace/,
+  );
+});
+
+test('transcript archiving includes nested agent sessions without replacing a longer archive', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-archive-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const app = join(root, 'app');
+  const storeRoot = join(root, 'store');
+  const storeName = resolve(app).replace(/[\\/:]/g, '-').toLowerCase().replace(/^-+/, '');
+  const nested = join(storeRoot, storeName, 'session', 'subagents');
+  const output = join(root, 'output');
+  mkdirSync(nested, { recursive: true });
+  writeFileSync(join(nested, 'agent-1.jsonl'), 'first\n');
+
+  const first = archiveTranscripts(app, 'attempt-1', output, storeRoot);
+  const archived = join(output, 'attempt-1', 'session__subagents__agent-1.jsonl');
+  assert.deepEqual(first, { copied: 1, missing: 0, outputDirectory: output });
+  assert.equal(readFileSync(archived, 'utf8'), 'first\n');
+
+  writeFileSync(archived, 'longer preserved archive\n');
+  const second = archiveTranscripts(app, 'attempt-1', output, storeRoot);
+  assert.equal(second.copied, 0);
+  assert.equal(readFileSync(archived, 'utf8'), 'longer preserved archive\n');
+});
diff --git a/tools/stack-bench/tests/outcomes.test.ts b/tools/stack-bench/tests/outcomes.test.ts
new file mode 100644
index 00000000000..e5a4006839a
--- /dev/null
+++ b/tools/stack-bench/tests/outcomes.test.ts
@@ -0,0 +1,249 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { aggregateRunOutcome, classifyBundle, ladderMayAdvance, ladderMayContinue,
+  mutationControlEligible, runExitCode, runOutcomeKind,
+  type OutcomeCriterion } from '../src/evidence/outcomes.js';
+import { createCheckEvidence, type CheckEvidence,
+  type CheckEvidenceStatus } from '../src/evidence/check-evidence.js';
+
+interface TestFeature {
+  cleanupEvidence?: { status: string; failures: readonly unknown[] };
+  criteria: OutcomeCriterion[];
+  id: string;
+}
+
+interface TestBundle {
+  readonly totals: { score: number; max: number };
+  readonly suites: {
+    readonly feature: { readonly features: TestFeature[] };
+    readonly lint: { readonly pass: boolean };
+  };
+}
+
+const bundle = (criteria: OutcomeCriterion[]): TestBundle => ({
+  totals: { score: 1, max: 2 },
+  suites: { feature: { features: [{ id: 'f', criteria }] }, lint: { pass: true } },
+});
+
+const typed = (
+  id: string,
+  status: CheckEvidenceStatus,
+  summary: string | null,
+  points = 1,
+): OutcomeCriterion & { readonly evidence: CheckEvidence; readonly id: string; readonly points: number } => {
+  const evidence = createCheckEvidence({ status, code: status === 'passed' ? 'completed' : 'test_result',
+    phase: 'assertion', summary, startedAtMs: 1, completedAtMs: 2 });
+  return { id, points, evidence };
+};
+
+test('missing output and explicit harness failure are not app failures', () => {
+  assert.equal(classifyBundle(null).kind, 'ungraded');
+  assert.equal(classifyBundle({ outcome: { kind: 'harness_failure', phase: 'reset', reason: 'down' } }).kind,
+    'harness_failure');
+});
+
+test('provider failures preserve their cause and stop the run', () => {
+  const provider = { kind: 'provider_failure', phase: 'coding-session',
+    reason: 'provider-connection-error', provider: { providerStatus: null } };
+  assert.deepEqual(classifyBundle({ outcome: provider }), {
+    ...provider, appFailures: [], inconclusive: [], harnessFailures: [],
+  });
+  const outcome = aggregateRunOutcome([{ level: 1, outcome: provider }]);
+  assert.equal(outcome.kind, 'provider_failure');
+  assert.equal(outcome.reason, 'provider-connection-error');
+  assert.deepEqual(outcome.provider, { providerStatus: null });
+  assert.equal(runExitCode(outcome), 1);
+  assert.equal(ladderMayContinue(outcome), false);
+});
+
+test('ungraded and harness-failed runs return a failing process status', () => {
+  assert.equal(runExitCode({ kind: 'harness_failure' }), 1);
+  assert.equal(runExitCode({ kind: 'provider_failure' }), 1);
+  assert.equal(runExitCode({ kind: 'ungraded' }), 1);
+  assert.equal(runExitCode({ kind: 'app_failure' }), 0);
+  assert.equal(runExitCode({ kind: 'passed' }), 0);
+  assert.equal(runExitCode({ kind: 'inconclusive' }), 1);
+  assert.equal(runExitCode({ kind: 'incomplete' }), 1);
+});
+
+test('a ladder stops after an ungraded or harness-failed level', () => {
+  assert.equal(ladderMayContinue({ kind: 'app_failure' }), true);
+  assert.equal(ladderMayContinue({ kind: 'inconclusive' }), false);
+  assert.equal(ladderMayContinue({ kind: 'app_failure', inconclusive: ['feature/check'] }), false);
+  assert.equal(ladderMayContinue({ kind: 'passed' }), true);
+  assert.equal(ladderMayContinue({ kind: 'harness_failure' }), false);
+  assert.equal(ladderMayContinue({ kind: 'provider_failure' }), false);
+  assert.equal(ladderMayContinue({ kind: 'ungraded' }), false);
+});
+
+test('a ladder advances only from a level that actually passed', () => {
+  assert.equal(ladderMayAdvance({ kind: 'passed' }), true);
+  assert.equal(ladderMayAdvance({ kind: 'app_failure' }), false);
+  assert.equal(ladderMayAdvance({ kind: 'inconclusive' }), false);
+  assert.equal(ladderMayAdvance({ kind: 'harness_failure' }), false);
+  assert.equal(ladderMayAdvance({ kind: 'ungraded' }), false);
+});
+
+test('app failures and inconclusive evidence remain separately visible', () => {
+  const outcome = classifyBundle(bundle([
+    typed('a', 'failed', 'not observed'),
+    typed('b', 'inconclusive', 'not measurable'),
+  ]));
+  assert.equal(outcome.kind, 'app_failure');
+  assert.deepEqual(outcome.appFailures, ['feature/f/a']);
+  assert.deepEqual(outcome.inconclusive, ['feature/f/b']);
+});
+
+test('inconclusive-only grades are not reported as passing', () => {
+  assert.equal(classifyBundle(bundle([typed('a', 'inconclusive', 'not measurable')])).kind,
+    'inconclusive');
+});
+
+test('zero-point evidence cannot fail or invalidate a scored benchmark outcome', () => {
+  const outcome = classifyBundle(bundle([
+    typed('scored', 'passed', null),
+    typed('candidate', 'failed', 'candidate behavior failed', 0),
+    typed('control', 'inconclusive', 'supporting control unavailable', 0),
+  ]));
+  assert.equal(outcome.kind, 'passed');
+  assert.deepEqual(outcome.appFailures, []);
+  assert.deepEqual(outcome.inconclusive, []);
+});
+
+test('an explicitly selected zero-only scope still has a qualification outcome', () => {
+  const scoped = {
+    totals: { score: 0, max: 0 },
+    selection: { checks: [{ stableKey: 'candidate', points: 0 }], attemptedChecks: ['candidate'],
+      reportedChecks: ['candidate'], notRun: [] },
+    suites: { development: { features: [{ id: 'f', criteria: [
+      { ...typed('candidate', 'failed', 'candidate behavior failed', 0), stableKey: 'candidate' },
+    ] }] }, lint: { pass: true } },
+  };
+  assert.equal(classifyBundle(scoped).kind, 'app_failure');
+  assert.deepEqual(classifyBundle(scoped).appFailures, ['development/f/candidate']);
+});
+
+test('typed harness failures outrank prose and application failures', () => {
+  const outcome = classifyBundle(bundle([
+    typed('app', 'failed', 'INCONCLUSIVE: wording must not control status'),
+    typed('harness', 'harness_failure', 'this sentence sounds harmless'),
+  ]));
+  assert.equal(outcome.kind, 'harness_failure');
+  assert.deepEqual(outcome.harnessFailures, ['feature/f/harness']);
+  assert.deepEqual(outcome.appFailures, ['feature/f/app']);
+});
+
+test('completed check evidence outranks a declared application failure', () => {
+  const criterion = { ...typed('check', 'harness_failure',
+    'grader could not observe the result'), stableKey: 'feature.check' };
+  const scoped = {
+    ...bundle([criterion]),
+    totals: { score: 0, max: 1 },
+    selection: { checks: [{ stableKey: 'feature.check', points: 1 }],
+      attemptedChecks: ['feature.check'], reportedChecks: ['feature.check'], notRun: [] },
+    outcome: { kind: 'app_failure', phase: 'grading', appFailures: ['declared-failure'] },
+  };
+  const outcome = classifyBundle(scoped);
+  assert.equal(outcome.kind, 'harness_failure');
+  assert.deepEqual(outcome.harnessFailures, ['feature/f/check']);
+});
+
+test('grader cleanup failures invalidate the bundle', () => {
+  const scoped = bundle([typed('works', 'passed', null)]);
+  const feature = scoped.suites.feature.features[0];
+  assert(feature);
+  feature.cleanupEvidence = {
+    status: 'harness_failure', failures: [{ stage: 'context-close' }],
+  };
+  const outcome = classifyBundle(scoped);
+  assert.equal(outcome.kind, 'harness_failure');
+  assert.equal(outcome.phase, 'grading-cleanup');
+  assert.deepEqual(outcome.harnessFailures, ['feature/f/cleanup']);
+});
+
+test('a fully reported zero-point selection is graded rather than mistaken for missing output', () => {
+  const scoped = {
+    totals: { score: 0, max: 0 },
+    selection: {
+      checks: [{ stableKey: 'pack.control.zero', points: 0 }],
+      attemptedChecks: ['pack.control.zero'],
+      reportedChecks: ['pack.control.zero'],
+      notRun: [],
+    },
+    suites: { control: { features: [{ id: 'f', criteria: [
+      { ...typed('zero', 'passed', null), stableKey: 'pack.control.zero', points: 0 },
+    ] }] }, lint: { pass: true } },
+  };
+  assert.equal(classifyBundle(scoped).kind, 'passed');
+  scoped.selection.reportedChecks = [];
+  assert.equal(classifyBundle(scoped).kind, 'ungraded');
+});
+
+test('recipe-bound scores must exactly match their check evidence', () => {
+  const passed = { ...typed('works', 'passed', null, 2), stableKey: 'pack.feature.works' };
+  const scoped = {
+    totals: { score: 1, max: 2, regression: null },
+    selection: {
+      checks: [{ stableKey: 'pack.feature.works', points: 2 }],
+      attemptedChecks: ['pack.feature.works'],
+      reportedChecks: ['pack.feature.works'],
+      notRun: [],
+    },
+    suites: { feature: { features: [{ id: 'f', criteria: [passed] }] }, lint: { pass: true } },
+  };
+  const outcome = classifyBundle(scoped);
+  assert.equal(outcome.kind, 'harness_failure');
+  assert.equal(outcome.phase, 'grading');
+  assert.match(outcome.reason ?? '', /reported score 1\/2 disagrees with check evidence 2\/2/);
+
+  scoped.totals.score = 2;
+  assert.equal(classifyBundle(scoped).kind, 'passed');
+
+  scoped.selection.checks.push({ stableKey: 'pack.feature.other', points: 2 });
+  scoped.selection.reportedChecks.push('pack.feature.other');
+  scoped.selection.attemptedChecks.push('pack.feature.other');
+  const feature = scoped.suites.feature.features[0];
+  assert(feature);
+  feature.criteria.push({ ...passed, id: 'duplicate' });
+  scoped.totals = { score: 4, max: 4, regression: null };
+  assert.equal(classifyBundle(scoped).kind, 'harness_failure',
+    'duplicating one check must not stand in for a different selected check');
+});
+
+test('mutation control runs only after a conclusive passing pristine grade', () => {
+  assert.equal(mutationControlEligible({ kind: 'passed' }), true);
+  for (const kind of ['app_failure', 'inconclusive', 'harness_failure', 'ungraded']) {
+    assert.equal(mutationControlEligible({ kind }), false, kind);
+  }
+});
+
+test('run aggregation preserves every level and prioritizes harness failure', () => {
+  const outcome = aggregateRunOutcome([
+    { level: 1, outcome: { kind: 'app_failure' } },
+    { level: 2, outcome: { kind: 'harness_failure', phase: 'grading' } },
+  ]);
+  assert.equal(outcome.kind, 'harness_failure');
+  assert.equal(outcome.levels['1']?.kind, 'app_failure');
+});
+
+test('an incomplete selected scope is never accepted through a positive denominator', () => {
+  const scoped = {
+    totals: { score: 1, max: 2 },
+    selection: {
+      checks: [{ stableKey: 'pack.feature.a', points: 1 },
+        { stableKey: 'pack.feature.b', points: 1 }],
+      reportedChecks: ['pack.feature.a'],
+      notRun: [{ stableKey: 'pack.feature.b' }],
+    },
+    suites: { feature: { features: [{ id: 'f', criteria: [
+      { ...typed('a', 'passed', null), stableKey: 'pack.feature.a' },
+    ] }] }, lint: { pass: true } },
+  };
+  assert.equal(classifyBundle(scoped).kind, 'ungraded');
+});
+
+test('unknown outcome names fail closed', () => {
+  assert.equal(runExitCode({ kind: 'typo' }), 1);
+  assert.equal(ladderMayContinue({ kind: 'typo' }), false);
+  assert.throws(() => runOutcomeKind('typo'), /invalid run outcome kind/);
+});
diff --git a/tools/stack-bench/tests/pack-budget.test.ts b/tools/stack-bench/tests/pack-budget.test.ts
new file mode 100644
index 00000000000..14eb0d31ea5
--- /dev/null
+++ b/tools/stack-bench/tests/pack-budget.test.ts
@@ -0,0 +1,192 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import test from 'node:test';
+
+import { createArtifact, currentEngineIdentity, recipeArtifactIdentities, writeArtifact } from '../src/evidence/artifacts.js';
+import { calibrationQualificationIdentity, resolveCalibrationForRelease } from '../src/composition/calibration-compiler.js';
+import { PACK_RUNTIME_METRIC } from '../src/composition/pack-runtime.js';
+import { parsePackBudgetArgs } from '../commands/pack-budget.js';
+import { loadPackBudgetEvidence, PACK_BUDGET_POLICY, recommendPackBudgets }
+  from '../src/composition/pack-budget.js';
+import type { PackBudgetEvidence, PackRuntime, ReferenceQualificationPayload,
+  RunnerObservation } from '../src/composition/pack-budget.js';
+import type { Artifact, ArtifactIdentity } from '../src/evidence/artifacts.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { loadTrack } from '../src/composition/tracks.js';
+
+const track = loadTrack('ecommerce');
+const binding = resolveRecipeRelease(track, 1);
+const resolvedCalibration = resolveCalibrationForRelease(binding.release, { trackRoot: track.dir });
+assert(resolvedCalibration);
+const calibration = structuredClone(resolvedCalibration);
+calibration.qualification.runner = {
+  schemaVersion: 1, mode: 'appliance', platform: 'linux', architecture: 'x64',
+};
+const applianceRunner: RunnerObservation = Object.freeze({ ...calibration.qualification.runner,
+  dockerEngineVersion: '29.1.2', dockerOs: 'linux', dockerArchitecture: 'x86_64',
+  kernelVersion: '6.8.0-test', cpuCount: 8, memoryBytes: 16_000_000_000 });
+
+function runtime(stackIndex: number, repetition: number): PackRuntime {
+  const counts = new Map<string, number>(binding.plan.packs.map(pack => [pack.id, 0]));
+  for (const check of binding.release.checkCatalog) {
+    if (!check.packId) throw new Error(`check ${check.stableKey} has no pack`);
+    counts.set(check.packId, (counts.get(check.packId) ?? 0) + 1);
+  }
+  return { schemaVersion: 1, metric: PACK_RUNTIME_METRIC,
+    packs: [...counts].sort(([a], [b]) => a.localeCompare(b)).map(([id, checkCount], packIndex) => {
+      const measuredRuntimeMs = 1_000 + stackIndex * 100 + repetition * 10 + packIndex;
+      return { id, checkCount, setupRuntimeMs: 100, criterionRuntimeMs: measuredRuntimeMs - 100,
+        measuredRuntimeMs, budget: { status: 'unmeasured' }, exceeded: null };
+    }) };
+}
+
+function reference(stack: string, stackIndex: number,
+  overrides: Partial<ReferenceQualificationPayload> = {}): Artifact<ReferenceQualificationPayload> {
+  const identity = calibrationQualificationIdentity(calibration);
+  const fixture = calibration.references.entries.find(entry => entry.backend === stack);
+  assert(fixture);
+  return createArtifact({ kind: 'reference_qualification', id: `reference-${stack}`,
+    identities: recipeArtifactIdentities(binding.release, {
+      engine: currentEngineIdentity(), calibration: identity, stackAdapter: { id: stack },
+      fixture: { id: fixture.id, sha256: fixture.sourceSha256 },
+    }),
+    payload: { fixture: fixture.id, fixtureSha256: fixture.sourceSha256,
+      requiredRepetitions: 1, isolation: 'docker', mutationControl: false,
+      runner: { ...applianceRunner },
+      stable: true, sameImage: true, sameHarness: true, harnessSha256: 'b'.repeat(64), ok: true,
+      runs: [1].map(repetition => ({ repetition, ok: true, packRuntime: runtime(stackIndex, repetition) })),
+      ...overrides } });
+}
+
+function exactEvidence(): PackBudgetEvidence[] {
+  return ['mongodb', 'postgres', 'spacetime'].map((stack, index) => ({
+    path: `${stack}.json`, sha256: String(index).repeat(64), artifact: reference(stack, index),
+    runtimeCalibration: { id: calibration.id, version: calibration.version,
+      sha256: calibration.contentSha256 },
+  }));
+}
+
+function evidenceAt(evidence: PackBudgetEvidence[], index: number): PackBudgetEvidence {
+  const item = evidence[index];
+  assert(item);
+  return item;
+}
+
+function identity(value: ArtifactIdentity | null): ArtifactIdentity {
+  assert(value);
+  return value;
+}
+
+test('budget recommendation requires every exact reference repetition and applies the published rule', () => {
+  const result = recommendPackBudgets({ binding, calibration, evidence: exactEvidence() });
+  assert.equal(result.samples.length, binding.plan.packs.length * 3);
+  assert.equal(result.recommendations.length, binding.plan.packs.length);
+  assert(result.recommendations.every(item => item.sampleCount === 3));
+  assert(result.recommendations.every(item => item.maxRuntimeMs === 3_000));
+  assert.equal(PACK_BUDGET_POLICY.multiplier, 2);
+  assert.deepEqual(result.measuredEngine, currentEngineIdentity());
+  assert.deepEqual(result.measuredRunner, applianceRunner);
+});
+
+test('budget recommendation rejects mutation, duplicate, incomplete, and cross-scope evidence', () => {
+  const mutation = exactEvidence();
+  evidenceAt(mutation, 0).artifact.payload.mutationControl = true;
+  assert.throws(() => recommendPackBudgets({ binding, calibration, evidence: mutation }), /mutation evidence/);
+  const duplicate = exactEvidence();
+  identity(evidenceAt(duplicate, 2).artifact.identities.stackAdapter).id = 'postgres';
+  assert.throws(() => recommendPackBudgets({ binding, calibration, evidence: duplicate }), /repeats stack/);
+  assert.throws(() => recommendPackBudgets({ binding, calibration, evidence: exactEvidence().slice(1) }),
+    /cover each supported stack/);
+  const stale = exactEvidence();
+  identity(evidenceAt(stale, 0).artifact.identities.recipe).sha256 = 'f'.repeat(64);
+  assert.throws(() => recommendPackBudgets({ binding, calibration, evidence: stale }),
+    /does not match the selected qualification scope/);
+  const staleRuntime = exactEvidence();
+  const staleRuntimeIdentity = evidenceAt(staleRuntime, 0).runtimeCalibration;
+  assert(staleRuntimeIdentity);
+  staleRuntimeIdentity.sha256 = 'f'.repeat(64);
+  assert.throws(() => recommendPackBudgets({ binding, calibration, evidence: staleRuntime }),
+    /retainedRuntimeCalibration.sha256/);
+});
+
+test('budget recommendation rejects timing captured outside the Linux appliance', () => {
+  const local = exactEvidence();
+  const localRunner = evidenceAt(local, 0).artifact.payload.runner;
+  assert(localRunner);
+  localRunner.mode = 'local-controller';
+  localRunner.platform = 'win32';
+  assert.throws(() => recommendPackBudgets({ binding, calibration, evidence: local }),
+    /not supported appliance timing evidence/);
+
+  const legacy = exactEvidence();
+  delete evidenceAt(legacy, 0).artifact.payload.runner;
+  assert.throws(() => recommendPackBudgets({ binding, calibration, evidence: legacy }),
+    /runner\.schemaVersion must be 1/);
+
+  const unobserved = exactEvidence();
+  evidenceAt(unobserved, 0).artifact.payload.runner = { ...calibration.qualification.runner };
+  assert.throws(() => recommendPackBudgets({ binding, calibration, evidence: unobserved }),
+    /runner observation is missing/);
+
+  const mixed = exactEvidence();
+  const mixedRunner = evidenceAt(mixed, 1).artifact.payload.runner;
+  assert(mixedRunner);
+  mixedRunner.cpuCount = 16;
+  assert.throws(() => recommendPackBudgets({ binding, calibration, evidence: mixed }),
+    /different appliance runner environment/);
+});
+
+test('budget CLI parsing requires explicit unique evidence and output', () => {
+  const parsed = parsePackBudgetArgs(['node', 'pack-budget.js', 'recommend', '--track', 'ecommerce',
+    '--level', '1', '--evidence', 'mongo.json', '--out', 'budgets.json']);
+  assert.equal(parsed.command, 'recommend');
+  assert.equal(parsed.evidence.length, 1);
+  assert.equal(parsePackBudgetArgs(['node', 'pack-budget.js', 'recommend', '--track', 'ecommerce',
+    '--level', '1', '--recipe', 'ecommerce.sequential-l1@2.5.0',
+    '--evidence', 'mongo.json', '--out', 'budgets.json']).recipe,
+  'ecommerce.sequential-l1@2.5.0');
+  assert.throws(() => parsePackBudgetArgs(['node', 'pack-budget.js', 'recommend',
+    '--track', 'ecommerce', '--level', '1']), /usage/);
+});
+
+test('budget evidence loader verifies retained raw runs against their summary', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-pack-budget-'));
+  try {
+    const path = join(root, 'mongodb.json');
+    const artifact = reference('mongodb', 0);
+    for (const run of artifact.payload.runs) {
+      run.output = `mongodb.runs/r${run.repetition}`;
+      const output = join(root, 'mongodb.runs', `r${run.repetition}`);
+      mkdirSync(join(output, 'grading'), { recursive: true });
+      const raw = createArtifact({ kind: 'benchmark_run', id: `run-${run.repetition}`,
+        identities: recipeArtifactIdentities(null, { engine: artifact.identities.engine,
+          agentAdapter: { id: 'reference-fixture' }, stackAdapter: { id: 'mongodb' } }) });
+      writeArtifact(join(output, 'run.json'), raw);
+      writeArtifact(join(output, 'grading', 'bundle.json'), { kind: 'grade_bundle',
+        id: `bundle-${run.repetition}`, identities: recipeArtifactIdentities(binding.release, {
+          engine: artifact.identities.engine, stackAdapter: artifact.identities.stackAdapter,
+          calibration: { id: calibration.id, version: calibration.version,
+            sha256: calibration.contentSha256 } }),
+        payload: { packRuntime: run.packRuntime } });
+    }
+    writeArtifact(path, artifact);
+    const loaded = loadPackBudgetEvidence([path]);
+    assert.equal(loaded.length, 1);
+    const loadedEvidence = evidenceAt(loaded, 0);
+    assert.match(loadedEvidence.sha256, /^[a-f0-9]{64}$/);
+    assert(loadedEvidence.runtimeCalibration);
+    assert.equal(loadedEvidence.runtimeCalibration.sha256, calibration.contentSha256);
+
+    const bundlePath = join(root, 'mongodb.runs', 'r1', 'grading', 'bundle.json');
+    const changed = createArtifact({ kind: 'grade_bundle', id: 'changed',
+      identities: recipeArtifactIdentities(binding.release, {
+        engine: artifact.identities.engine, stackAdapter: artifact.identities.stackAdapter,
+        calibration: { id: calibration.id, version: calibration.version,
+          sha256: calibration.contentSha256 } }),
+      payload: { packRuntime: runtime(2, 2) } });
+    writeArtifact(bundlePath, changed);
+    assert.throws(() => loadPackBudgetEvidence([path]), /summary differs/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/pack-runtime.test.ts b/tools/stack-bench/tests/pack-runtime.test.ts
new file mode 100644
index 00000000000..cb4cac7ee31
--- /dev/null
+++ b/tools/stack-bench/tests/pack-runtime.test.ts
@@ -0,0 +1,98 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { createCheckEvidence } from '../src/evidence/check-evidence.js';
+import { aggregatePackRuntime, exceededPackBudgets, measureGradePackRuntime,
+  PACK_RUNTIME_METRIC } from '../src/composition/pack-runtime.js';
+
+const evidence = (durationMs: number) => createCheckEvidence({ status: 'passed', code: 'completed',
+  phase: 'assertion', startedAtMs: 100, completedAtMs: 100 + durationMs });
+const setupEvidence = (durationMs: number) => createCheckEvidence({ status: 'passed', code: 'completed',
+  phase: 'setup', startedAtMs: 10, completedAtMs: 10 + durationMs });
+
+function report() {
+  return {
+    total: 3,
+    max: 3,
+    selection: { checks: [
+      { stableKey: 'pack-a/check-1', packId: 'pack-a' },
+      { stableKey: 'pack-b/check-1', packId: 'pack-b' },
+      { stableKey: 'pack-a/check-2', packId: 'pack-a' },
+    ] },
+    features: [{ id: 1, name: 'feature', score: 3, max: 3, consoleErrors: [],
+      setupEvidence: setupEvidence(5), criteria: [
+      { id: 'check-1', desc: 'check 1', points: 1,
+        stableKey: 'pack-a/check-1', evidence: evidence(30) },
+      { id: 'check-2', desc: 'check 2', points: 1,
+        stableKey: 'pack-b/check-1', evidence: evidence(10) },
+      { id: 'check-3', desc: 'check 3', points: 1,
+        stableKey: 'pack-a/check-2', evidence: evidence(20) },
+    ] }],
+  };
+}
+
+function requireFirst<T>(items: readonly T[]): T {
+  const item = items[0];
+  assert.ok(item);
+  return item;
+}
+
+test('grade timing is attributed by permanent check key and pack id', () => {
+  assert.deepEqual(measureGradePackRuntime(report()), {
+    schemaVersion: 1,
+    metric: PACK_RUNTIME_METRIC,
+    packs: [
+      { id: 'pack-a', checkCount: 2, setupRuntimeMs: 5, criterionRuntimeMs: 50,
+        measuredRuntimeMs: 55 },
+      { id: 'pack-b', checkCount: 1, setupRuntimeMs: 5, criterionRuntimeMs: 10,
+        measuredRuntimeMs: 15 },
+    ],
+  });
+});
+
+test('pack timing refuses missing, repeated, and out-of-scope evidence', () => {
+  const missing = report();
+  requireFirst(missing.features).criteria.pop();
+  assert.throws(() => measureGradePackRuntime(missing), /missing pack-a\/check-2/);
+  const repeated = report();
+  const repeatedCriteria = requireFirst(repeated.features).criteria;
+  repeatedCriteria.push(requireFirst(repeatedCriteria));
+  assert.throws(() => measureGradePackRuntime(repeated), /repeats stable key/);
+  const unknown = report();
+  requireFirst(requireFirst(unknown.features).criteria).stableKey = 'other/check';
+  assert.throws(() => measureGradePackRuntime(unknown), /unknown stable key/);
+});
+
+test('suite timing accumulates across suites and enforces only declared bounds', () => {
+  const first = { packRuntime: measureGradePackRuntime(report()) };
+  const secondReport = report();
+  const secondCriteria = requireFirst(secondReport.features).criteria;
+  requireFirst(secondCriteria).evidence = evidence(11);
+  const secondCriterion = secondCriteria[1];
+  assert.ok(secondCriterion);
+  secondCriterion.evidence = evidence(9);
+  const thirdCriterion = secondCriteria[2];
+  assert.ok(thirdCriterion);
+  thirdCriterion.evidence = evidence(10);
+  const runtime = aggregatePackRuntime([first, { packRuntime: measureGradePackRuntime(secondReport) }], [
+    { id: 'pack-a', budget: { status: 'bounded', maxRuntimeMs: 80 } },
+    { id: 'pack-b', budget: { status: 'unmeasured' } },
+  ]);
+  assert.deepEqual(runtime.packs, [
+    { id: 'pack-a', checkCount: 4, setupRuntimeMs: 10, criterionRuntimeMs: 71,
+      measuredRuntimeMs: 81, budget: { status: 'bounded', maxRuntimeMs: 80 }, exceeded: true },
+    { id: 'pack-b', checkCount: 2, setupRuntimeMs: 10, criterionRuntimeMs: 19, measuredRuntimeMs: 29,
+      budget: { status: 'unmeasured' }, exceeded: null },
+  ]);
+  assert.deepEqual(exceededPackBudgets(runtime).map(pack => pack.id), ['pack-a']);
+});
+
+test('suite timing rejects inconsistent measurements', () => {
+  const packRuntime = measureGradePackRuntime(report());
+  const first = packRuntime.packs[0];
+  assert(first);
+  first.measuredRuntimeMs += 1;
+  assert.throws(() => aggregatePackRuntime([{ packRuntime }], [
+    { id: 'pack-a', budget: { status: 'unmeasured' } },
+    { id: 'pack-b', budget: { status: 'unmeasured' } },
+  ]), /must equal setupRuntimeMs \+ criterionRuntimeMs/);
+});
diff --git a/tools/stack-bench/tests/package-root.test.ts b/tools/stack-bench/tests/package-root.test.ts
new file mode 100644
index 00000000000..442fd5f9c0e
--- /dev/null
+++ b/tools/stack-bench/tests/package-root.test.ts
@@ -0,0 +1,15 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { REPOSITORY_ROOT, STACK_BENCH_ROOT, findStackBenchRoot }
+  from '../src/package-root.js';
+
+test('compiled modules resolve the Stack Bench package and repository roots', () => {
+  const manifest: unknown = JSON.parse(readFileSync(join(STACK_BENCH_ROOT, 'package.json'), 'utf8'));
+  assert(manifest && typeof manifest === 'object' && 'name' in manifest);
+  assert.equal(manifest.name, '@spacetimedb/stack-bench');
+  assert.equal(join(REPOSITORY_ROOT, 'tools', 'stack-bench'), STACK_BENCH_ROOT);
+  assert.equal(findStackBenchRoot(import.meta.url), STACK_BENCH_ROOT);
+});
diff --git a/tools/stack-bench/tests/path-safety.test.ts b/tools/stack-bench/tests/path-safety.test.ts
new file mode 100644
index 00000000000..4ccaaa7492f
--- /dev/null
+++ b/tools/stack-bench/tests/path-safety.test.ts
@@ -0,0 +1,49 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, symlinkSync,
+  writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+
+import { assertNewOrEmptyDirectory } from '../src/runtime/path-safety.js';
+
+test('new and empty output directories are accepted', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-path-'));
+  try {
+    const missing = join(root, 'missing');
+    assert.equal(assertNewOrEmptyDirectory(missing, 'output'), missing);
+    const empty = join(root, 'empty');
+    mkdirSync(empty);
+    assert.equal(assertNewOrEmptyDirectory(empty, 'output'), empty);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('existing content is refused and left untouched', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-path-'));
+  try {
+    const target = join(root, 'owned-by-caller');
+    mkdirSync(target);
+    const sentinel = join(target, 'keep.txt');
+    writeFileSync(sentinel, 'keep me');
+    assert.throws(() => assertNewOrEmptyDirectory(target, 'output'), /refusing to overwrite/);
+    assert.equal(existsSync(sentinel), true);
+    assert.equal(readFileSync(sentinel, 'utf8'), 'keep me');
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('symlink destinations are refused even when their target is empty', { skip: process.platform === 'win32' }, () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-path-'));
+  try {
+    const target = join(root, 'target');
+    const link = join(root, 'link');
+    mkdirSync(target);
+    symlinkSync(target, link, 'dir');
+    assert.throws(() => assertNewOrEmptyDirectory(link, 'output'), /real directory/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/platform-process-tree.test.ts b/tools/stack-bench/tests/platform-process-tree.test.ts
new file mode 100644
index 00000000000..ad373d245d8
--- /dev/null
+++ b/tools/stack-bench/tests/platform-process-tree.test.ts
@@ -0,0 +1,27 @@
+import test from 'node:test';
+import assert from 'node:assert/strict';
+
+import { processTreePids } from '../src/runtime/platform.js';
+
+test('process trees are ordered deepest-child-first for safe teardown', () => {
+  const rows = `
+    10 1
+    11 10
+    12 10
+    13 11
+    14 13
+    20 1
+  `;
+  assert.deepEqual(processTreePids(10, rows), [14, 13, 11, 12, 10]);
+});
+
+test('malformed, unrelated, and cyclic process rows cannot broaden teardown', () => {
+  const rows = `
+    not-a-row
+    31 30
+    30 31
+    40 1
+  `;
+  assert.deepEqual(processTreePids(30, rows), [31, 30]);
+  assert.deepEqual(processTreePids(0, rows), []);
+});
diff --git a/tools/stack-bench/tests/preflight.test.ts b/tools/stack-bench/tests/preflight.test.ts
new file mode 100644
index 00000000000..cb909b83883
--- /dev/null
+++ b/tools/stack-bench/tests/preflight.test.ts
@@ -0,0 +1,519 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { parsePreflightArgs } from '../commands/preflight-cli.js';
+import { probeLoopbackPort, runPreflight, verifyPostgresServiceIdentity }
+  from '../src/runtime/preflight.js';
+import type { PreflightCheck, PreflightReport } from '../src/runtime/preflight.js';
+import { isExactImageReference } from '../src/runtime/container-image.js';
+import { createArtifact, validateArtifact } from '../src/evidence/artifacts.js';
+import { compileCampaignFile, validateCampaignDefinition }
+  from '../src/campaigns/campaign-compiler.js';
+import { preflightResourceFloors } from '../src/composition/product-config.js';
+
+const IMAGE_ID = `sha256:${'a'.repeat(64)}`;
+const EXACT_IMAGE = `registry.example/stack-bench/build@${IMAGE_ID}`;
+const progressionCampaign = join(STACK_BENCH_ROOT, 'appliance',
+  'campaign.ecommerce-progression-reference.json');
+let progressionPlanCache: ReturnType<typeof compileCampaignFile> | null = null;
+const progressionPlan = (): ReturnType<typeof compileCampaignFile> =>
+  structuredClone(progressionPlanCache ??= compileCampaignFile(progressionCampaign));
+
+type DockerCommand = (file: string, args: string[]) => string;
+
+function dockerInfo(overrides: Record<string, unknown> = {}): string {
+  return JSON.stringify({ OSType: 'linux', Architecture: 'x86_64', ServerVersion: '29.0.0',
+    NCPU: 8, MemTotal: 16 * 1024 ** 3, SystemTime: '2026-08-12T12:00:00.000Z', ...overrides });
+}
+
+function request(root: string, extra: string[] = []) {
+  return parsePreflightArgs(['node', 'preflight.js', '--backend', 'stub', '--track', 'loop',
+    '--levels', '1', '--agent-adapter', 'deterministic', '--results-dir', root, ...extra]);
+}
+
+function requiredArgument(args: string[], index: number): string {
+  const value = args[index];
+  assert.ok(value, `missing command argument at index ${index}`);
+  return value;
+}
+
+function requiredCheck(report: PreflightReport, id: string): PreflightCheck {
+  const check = report.checks.find(candidate => candidate.id === id);
+  assert.ok(check, `missing preflight check ${id}`);
+  return check;
+}
+
+function record(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function stringArray(value: unknown, field: string): string[] {
+  assert.ok(record(value), 'expected evidence object');
+  const selected = value[field];
+  assert.ok(Array.isArray(selected) && selected.every(item => typeof item === 'string'),
+    `expected ${field} string array`);
+  return selected;
+}
+
+test('PostgreSQL preflight proves the configured role, password, and database', () => {
+  let command: string[] | undefined;
+  const identity = verifyPostgresServiceIdentity('stack-bench-postgres', {
+    execute: (file, args) => {
+      command = [file, ...args];
+      return 'appuser|app\n';
+    },
+  });
+  assert.equal(identity, 'appuser|app');
+  assert.ok(command);
+  assert.deepEqual(command.slice(0, 4),
+    ['docker', 'exec', '-e', 'PGPASSWORD=local-app-password']);
+  assert(command.includes('stack-bench-postgres'));
+  assert(command.includes('127.0.0.1'));
+  assert.throws(() => verifyPostgresServiceIdentity('stack-bench-postgres', {
+    execute: () => 'stackbench|stackbench\n',
+  }), /expected appuser\|app/);
+});
+
+test('preflight validates exact scope and a model-free container/result-volume smoke', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-'));
+  try {
+    let smokeArgs: string[] | undefined;
+    const run: DockerCommand = (_file, args) => {
+      if (args[0] === 'info') return dockerInfo();
+      if (args[0] === 'compose') return '2.40.0'; if (args[0] === 'ps') return '';
+      if (args[0] === 'image') return args[3] === '{{.Os}}/{{.Architecture}}'
+        ? 'linux/amd64' : `${IMAGE_ID}\n`;
+      if (args[0] === 'run') {
+        smokeArgs = args;
+        const mount = requiredArgument(args, args.indexOf('-v') + 1).split(':/results')[0];
+        const marker = requiredArgument(args, args.length - 1);
+        assert.ok(mount);
+        writeFileSync(join(mount, marker), 'container-write-ok');
+        return JSON.stringify({ platform: 'linux', arch: 'x64', node: 'v22.0.0',
+          reached: [{ url: 'https://registry.npmjs.org', status: 200 }],
+          tcpReached: [],
+          executables: {}, credentialStatus: 'not-checked',
+          diskFreeBytes: 20 * 1024 ** 3 });
+      }
+      throw new Error(`unexpected docker command: ${args.join(' ')}`);
+    };
+    const report = runPreflight(request(root, ['--smoke']), {
+      run, now: Date.parse('2026-08-12T12:00:00.100Z'), env: {}, home: root,
+      statfs: () => ({ bavail: 20n, bsize: 1024n ** 3n }),
+      pidsOnPort: () => [], probePort: () => ({ free: true }),
+    });
+    assert.equal(report.ok, true, JSON.stringify(report.checks, null, 2));
+    assert.equal(report.request.smoke, true);
+    assert.equal(requiredCheck(report, 'smoke.container').status, 'pass');
+    assert.match(requiredCheck(report, 'smoke.container').summary,
+      /0 database route\(s\); 0 agent executable\(s\)/);
+    assert.equal(requiredCheck(report, 'storage.container').status, 'pass');
+    assert.equal(report.checks.some(check => check.id === 'outbound.container'), false);
+    assert.ok(smokeArgs);
+    assert.equal(requiredArgument(smokeArgs, smokeArgs.indexOf('--network') + 1), 'bridge');
+    assert.equal(requiredArgument(smokeArgs, smokeArgs.indexOf('--add-host') + 1),
+      'host.docker.internal:host-gateway');
+    const artifact = createArtifact({ kind: 'preflight', id: 'preflight-test', payload: report });
+    assert.equal(validateArtifact(artifact).payload.ok, true);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('appliance preflight rejects mutable controller and build image references', () => {
+  assert.equal(isExactImageReference(EXACT_IMAGE), true);
+  assert.equal(isExactImageReference('stack-bench-controller:latest'), false);
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-images-'));
+  try {
+    const run: DockerCommand = (_file, args) => {
+      if (args[0] === 'info') return dockerInfo();
+      if (args[0] === 'compose') return '2.40.0'; if (args[0] === 'ps') return '';
+      if (args[0] === 'image') return args[3] === '{{.Os}}/{{.Architecture}}'
+        ? 'linux/amd64' : `${IMAGE_ID}\n`;
+      throw new Error(`unexpected docker command: ${args.join(' ')}`);
+    };
+    const report = runPreflight({ ...request(root), image: 'stack-bench-build:latest' }, {
+      run, now: Date.parse('2026-08-12T12:00:00.100Z'),
+      env: { STACK_BENCH_APPLIANCE: '1',
+        STACK_BENCH_CONTROLLER_IMAGE: 'stack-bench-controller:latest' },
+      home: root, statfs: () => ({ bavail: 20n, bsize: 1024n ** 3n }),
+      pidsOnPort: () => [], probePort: () => ({ free: true }),
+    });
+    assert.equal(requiredCheck(report, 'image.controller-reference').status,
+      'fail');
+    assert.equal(requiredCheck(report, 'image.build-reference').status, 'fail');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('preflight does not count Docker info latency as clock skew', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-clock-'));
+  try {
+    const times = [
+      Date.parse('2026-08-12T12:00:00.000Z'),
+      Date.parse('2026-08-12T12:00:00.100Z'),
+      Date.parse('2026-08-12T12:00:10.100Z'),
+    ];
+    const run: DockerCommand = (_file, args) => {
+      if (args[0] === 'info') return dockerInfo({ SystemTime: '2026-08-12T12:00:05.000Z' });
+      if (args[0] === 'compose') return '2.40.0'; if (args[0] === 'ps') return '';
+      if (args[0] === 'image') return args[3] === '{{.Os}}/{{.Architecture}}'
+        ? 'linux/amd64' : `${IMAGE_ID}\n`;
+      throw new Error(`unexpected docker command: ${args.join(' ')}`);
+    };
+    const report = runPreflight(request(root), {
+      run, now: () => {
+        const time = times.shift();
+        if (time === undefined) {
+          throw new Error('preflight requested more clock samples than expected');
+        }
+        return time;
+      },
+      env: {}, home: root,
+      statfs: () => ({ bavail: 20n, bsize: 1024n ** 3n }),
+      pidsOnPort: () => [], probePort: () => ({ free: true }),
+    });
+    const clock = requiredCheck(report, 'docker.clock');
+    assert.equal(clock.status, 'pass', clock.summary);
+    assert.equal(clock.summary, 'host/engine skew 0 ms');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('preflight reserves capacity for all concurrent build containers', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-parallel-capacity-'));
+  try {
+    const run: DockerCommand = (_file, args) => {
+      if (args[0] === 'info') return dockerInfo({ NCPU: 7, MemTotal: 15 * 1024 ** 3 });
+      if (args[0] === 'compose') return '2.40.0'; if (args[0] === 'ps') return '';
+      if (args[0] === 'image') return args[3] === '{{.Os}}/{{.Architecture}}'
+        ? 'linux/amd64' : `${IMAGE_ID}\n`;
+      throw new Error(`unexpected docker command: ${args.join(' ')}`);
+    };
+    const report = runPreflight(request(root, ['--parallelism', '3']), {
+      run, now: Date.parse('2026-08-12T12:00:00.100Z'), env: {}, home: root,
+      statfs: () => ({ bavail: 20n, bsize: 1024n ** 3n }),
+      pidsOnPort: () => [], probePort: () => ({ free: true }),
+    });
+    // The host offers less than the floors the product configuration sets for
+    // three concurrent attempts, so both checks fail and name the floor.
+    const floors = preflightResourceFloors(3);
+    assert.equal(report.request.parallelism, 3);
+    assert.equal(requiredCheck(report, 'docker.cpu').status, 'fail');
+    assert.match(requiredCheck(report, 'docker.cpu').remediation ?? '',
+      new RegExp(`at least ${floors.cpuCount} CPUs`));
+    assert.equal(requiredCheck(report, 'docker.memory').status, 'fail');
+    assert.match(requiredCheck(report, 'docker.memory').remediation ?? '',
+      new RegExp(`at least ${(floors.memoryBytes / 1024 ** 3).toFixed(1)} GiB`));
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('an admitted campaign smoke skips only the duplicate container run', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-admitted-'));
+  try {
+    const run: DockerCommand = (_file, args) => {
+      if (args[0] === 'info') return dockerInfo();
+      if (args[0] === 'compose') return '2.40.0'; if (args[0] === 'ps') return '';
+      if (args[0] === 'image') return args[3] === '{{.Os}}/{{.Architecture}}'
+        ? 'linux/amd64' : `${IMAGE_ID}\n`;
+      if (args[0] === 'run') throw new Error('duplicate container smoke ran');
+      throw new Error(`unexpected docker command: ${args.join(' ')}`);
+    };
+    const admittedSmoke = { id: 'admission-1', createdAt: '2026-08-12T12:00:00.000Z' };
+    const report = runPreflight({ ...request(root), smoke: false, admittedSmoke }, {
+      run, now: Date.parse('2026-08-12T12:00:00.100Z'), env: {}, home: root,
+      statfs: () => ({ bavail: 20n, bsize: 1024n ** 3n }),
+      pidsOnPort: () => [], probePort: () => ({ free: true }),
+    });
+    assert.equal(requiredCheck(report, 'smoke.admission').status, 'pass');
+    assert.equal(report.checks.some(check => check.id === 'smoke.container'), false);
+    assert.equal(report.checks.some(check => check.id === 'outbound.container'), false);
+    assert.deepEqual(report.request.admittedSmoke, admittedSmoke);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('preflight validates campaign-owned dependency selections through the progression graph', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-progression-'));
+  try {
+    const plan = progressionPlan();
+    const report = runPreflight({
+      backends: ['mongodb'],
+      track: plan.definition.track,
+      levelList: plan.definition.levels,
+      runIndex: 0,
+      agentAdapter: 'reference-fixture',
+      guidance: plan.conditions[0].guidance.mode,
+      packIds: [],
+      checkKeys: [],
+      requestedScopes: plan.conditions.map(condition => condition.requested),
+      featureCatalog: plan.featureCatalog,
+      mode: plan.definition.mode,
+      smoke: false,
+      image: 'unavailable-in-focused-test',
+      resultsDir: root,
+    }, {
+      run: () => { throw new Error('Docker unavailable in this focused test'); },
+      env: {}, home: root,
+      statfs: () => ({ bavail: 20n, bsize: 1024n ** 3n }),
+      pidsOnPort: () => [], probePort: () => ({ free: true }),
+    });
+    const scope = requiredCheck(report, 'request.scope');
+    assert.equal(scope.status, 'pass', scope.summary);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('preflight validates each sequential catalog level without cumulative scope', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-sequential-'));
+  try {
+    const manifest = validateCampaignDefinition(
+      JSON.parse(readFileSync(progressionCampaign, 'utf8')),
+      { source: progressionCampaign },
+    );
+    manifest.id = 'sequential-preflight-proof';
+    manifest.mode = { id: 'sequential', version: '1.0.0' };
+    manifest.repair = { selection: 'batch', budget: { total: 0 }, order: 'declared' };
+    manifest.levels = [1, 2];
+    assert.ok(manifest.selection.levels, 'campaign must select progression levels');
+    manifest.selection.levels = manifest.selection.levels.slice(0, 2);
+    const path = join(root, 'campaign.json');
+    writeFileSync(path, `${JSON.stringify(manifest, null, 2)}\n`);
+    const plan = compileCampaignFile(path);
+    const report = runPreflight({
+      backends: ['mongodb'], track: plan.definition.track,
+      levelList: plan.definition.levels, runIndex: 0,
+      agentAdapter: 'reference-fixture', guidance: plan.conditions[0].guidance.mode,
+      packIds: [], checkKeys: [],
+      requestedScopes: plan.conditions.map(condition => condition.requested),
+      featureCatalog: plan.featureCatalog, mode: plan.definition.mode,
+      smoke: false, image: 'unavailable-in-focused-test', resultsDir: root,
+    }, {
+      run: () => { throw new Error('Docker unavailable in this focused test'); },
+      env: {}, home: root,
+      statfs: () => ({ bavail: 20n, bsize: 1024n ** 3n }),
+      pidsOnPort: () => [], probePort: () => ({ free: true }),
+    });
+    const scope = requiredCheck(report, 'request.scope');
+    assert.equal(scope.status, 'pass', scope.summary);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('preflight fails before a paid run when the selected agent executable is absent', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-agent-'));
+  try {
+    const selected = parsePreflightArgs(['node', 'preflight.js', '--backend', 'stub',
+      '--track', 'loop', '--levels', '1', '--agent-adapter', 'claude-code',
+      '--results-dir', root, '--smoke']);
+    let requestedExecutables: unknown;
+    const run: DockerCommand = (_file, args) => {
+      if (args[0] === 'info') return dockerInfo();
+      if (args[0] === 'compose') return '2.40.0'; if (args[0] === 'ps') return '';
+      if (args[0] === 'image') return args[3] === '{{.Os}}/{{.Architecture}}'
+        ? 'linux/amd64' : `${IMAGE_ID}\n`;
+      if (args[0] === 'run') {
+        const mount = requiredArgument(args, args.indexOf('-v') + 1).split(':/results')[0];
+        assert.ok(mount);
+        writeFileSync(join(mount, requiredArgument(args, args.length - 1)), 'container-write-ok');
+        requestedExecutables = JSON.parse(requiredArgument(args, args.length - 4));
+        return JSON.stringify({ platform: 'linux', arch: 'x64', node: 'v22.0.0',
+          reached: [], tcpReached: [], executables: {}, credentialStatus: 'not-checked',
+          diskFreeBytes: 20 * 1024 ** 3 });
+      }
+      throw new Error(`unexpected docker command: ${args.join(' ')}`);
+    };
+    const report = runPreflight(selected, { run, now: Date.parse('2026-08-12T12:00:00.100Z'),
+      env: { ANTHROPIC_API_KEY: '<test-present>' }, home: root,
+      statfs: () => ({ bavail: 20n, bsize: 1024n ** 3n }), pidsOnPort: () => [],
+      probePort: () => ({ free: true }) });
+    assert.deepEqual(requestedExecutables, ['claude']);
+    assert.equal(report.ok, false);
+    assert.equal(requiredCheck(report, 'smoke.container').status, 'fail');
+    assert.doesNotMatch(JSON.stringify(report), /test-present/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('a rotating interactive credential cannot satisfy preflight', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-credential-'));
+  try {
+    const credential = join(root, '.claude', '.credentials.json');
+    mkdirSync(join(root, '.claude'));
+    writeFileSync(credential, '{}');
+    const selected = parsePreflightArgs(['node', 'preflight.js', '--backend', 'stub',
+      '--track', 'loop', '--levels', '1', '--agent-adapter', 'claude-code',
+      '--results-dir', root]);
+    const run: DockerCommand = (_file, args) => {
+      if (args[0] === 'info') return dockerInfo();
+      if (args[0] === 'compose') return '2.40.0'; if (args[0] === 'ps') return '';
+      if (args[0] === 'image') return args[3] === '{{.Os}}/{{.Architecture}}'
+        ? 'linux/amd64' : `${IMAGE_ID}\n`;
+      throw new Error(`unexpected docker command: ${args.join(' ')}`);
+    };
+    const report = runPreflight(selected, { run, now: Date.parse('2026-08-12T12:00:00.100Z'),
+      env: {}, home: root, statfs: () => ({ bavail: 20n, bsize: 1024n ** 3n }),
+      pidsOnPort: () => [], probePort: () => ({ free: true }) });
+    assert.equal(report.ok, false);
+    assert.equal(requiredCheck(report, 'agent.credentials').status, 'fail');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('long-lived subscription token is mounted read-only and checked without exposing its value', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-subscription-token-'));
+  try {
+    const tokenFile = join(root, 'claude-token');
+    writeFileSync(tokenFile, 'must-not-appear-in-report\n');
+    const selected = parsePreflightArgs(['node', 'preflight.js', '--backend', 'stub',
+      '--track', 'loop', '--levels', '1', '--agent-adapter', 'claude-code',
+      '--results-dir', root, '--smoke']);
+    let dockerArgs: string[] | undefined;
+    const run: DockerCommand = (_file, args) => {
+      if (args[0] === 'info') return dockerInfo();
+      if (args[0] === 'compose') return '2.40.0'; if (args[0] === 'ps') return '';
+      if (args[0] === 'image') return args[3] === '{{.Os}}/{{.Architecture}}'
+        ? 'linux/amd64' : `${IMAGE_ID}\n`;
+      if (args[0] === 'run') {
+        dockerArgs = args;
+        const mount = requiredArgument(args, args.indexOf('-v') + 1).split(':/results')[0];
+        assert.ok(mount);
+        writeFileSync(join(mount, requiredArgument(args, args.length - 1)), 'container-write-ok');
+        return JSON.stringify({ platform: 'linux', arch: 'x64', node: 'v22.0.0', reached: [],
+          tcpReached: [], executables: { claude: '/usr/local/bin/claude' },
+          credentialStatus: 'ready', diskFreeBytes: 20 * 1024 ** 3 });
+      }
+      throw new Error(`unexpected docker command: ${args.join(' ')}`);
+    };
+    const report = runPreflight(selected, { run, now: Date.parse('2026-08-12T12:00:00.100Z'),
+      env: { CLAUDE_CODE_OAUTH_TOKEN_FILE: tokenFile }, home: root,
+      statfs: () => ({ bavail: 20n, bsize: 1024n ** 3n }), pidsOnPort: () => [],
+      probePort: () => ({ free: true }) });
+    assert.equal(report.ok, true, JSON.stringify(report.checks, null, 2));
+    assert.equal(requiredCheck(report, 'agent.authentication').status, 'pass');
+    assert.ok(dockerArgs);
+    assert.match(requiredArgument(dockerArgs, dockerArgs.indexOf('--mount') + 1),
+      /src=.*claude-token,dst=\/run\/secrets\/agent-credential,readonly$/);
+    assert.deepEqual(JSON.parse(requiredArgument(dockerArgs, dockerArgs.length - 2)), {
+      name: 'CLAUDE_CODE_OAUTH_TOKEN', file: '/run/secrets/agent-credential',
+    });
+    assert.doesNotMatch(JSON.stringify({ report, dockerArgs }), /must-not-appear-in-report/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('preflight fails before launch when a stack default skill document is absent', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-materials-'));
+  try {
+    for (const [guidance, missing, skills] of [
+      ['prescribed', 'typescript-server', ['typescript-server', 'typescript-client']],
+      ['neutral', 'typescript-client', ['typescript-server', 'typescript-client']],
+    ] as const) {
+      const selected = parsePreflightArgs(['node', 'preflight.js', '--backend', 'spacetime',
+        '--track', 'ecommerce', '--levels', '1', '--agent-adapter', 'claude-code',
+        '--guidance', guidance, '--results-dir', root]);
+      const report = runPreflight(selected, {
+        run: () => { throw new Error('Docker unavailable in this focused test'); },
+        env: { ANTHROPIC_API_KEY: '<test-present>' }, home: root,
+        exists: path => !String(path).includes(`${join('skills', missing)}`),
+        statfs: () => ({ bavail: 20n, bsize: 1024n ** 3n }), pidsOnPort: () => [],
+        probePort: () => ({ free: true }),
+      });
+      const materials = requiredCheck(report, 'materials.spacetime.skills');
+      assert.equal(materials.status, 'fail');
+      assert.deepEqual(stringArray(materials.evidence, 'skills'), skills);
+      assert.equal(stringArray(materials.evidence, 'missing').length, 1);
+    }
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('preflight fails closed on inherited ownership, unavailable Docker, and occupied ports', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-'));
+  try {
+    const report = runPreflight(request(root), {
+      run: () => { throw new Error('daemon unavailable'); },
+      now: Date.parse('2026-08-12T12:00:00Z'),
+      env: { STACK_BENCH_LEASE_TOKEN: 'must-not-be-reported' }, home: root,
+      pidsOnPort: () => ['4242'], probePort: () => ({ free: false }),
+    });
+    assert.equal(report.ok, false);
+    assert.equal(requiredCheck(report, 'ambient.stack_bench_lease_token').status, 'fail');
+    assert.equal(requiredCheck(report, 'docker.engine').status, 'fail');
+    assert.equal(requiredCheck(report, 'port.stub.vite').status, 'fail');
+    assert.doesNotMatch(JSON.stringify(report), /must-not-be-reported/);
+    assert.equal(requiredCheck(report, 'outbound.container').status, 'warn');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('a supervised benchmark accepts only its exact fresh handoff path', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-supervisor-'));
+  try {
+    const supervisorState = join(root, 'supervisor.json');
+    const dependencies = { run: () => { throw new Error('daemon unavailable'); },
+      now: Date.parse('2026-08-12T12:00:00Z'), home: root, pidsOnPort: () => [],
+      probePort: () => ({ free: true }) };
+    const accepted = runPreflight({ ...request(root), supervisorState }, {
+      ...dependencies, env: { STACK_BENCH_SUPERVISOR_STATE: supervisorState },
+    });
+    assert.equal(requiredCheck(accepted, 'ambient.stack_bench_supervisor_state').status, 'pass');
+
+    writeFileSync(supervisorState, '{}');
+    const stale = runPreflight({ ...request(root), supervisorState }, {
+      ...dependencies, env: { STACK_BENCH_SUPERVISOR_STATE: supervisorState },
+    });
+    assert.equal(requiredCheck(stale, 'ambient.stack_bench_supervisor_state').status, 'fail');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('preflight argument parsing rejects ambiguous ranges and missing backends', () => {
+  assert.throws(() => parsePreflightArgs(['node', 'preflight.js']), /--backend is required/);
+  assert.throws(() => parsePreflightArgs(['node', 'preflight.js', '--backend', 'stub',
+    '--levels', '3-1']), /--levels/);
+  assert.throws(() => parsePreflightArgs(['node', 'preflight.js', '--backend', 'stub',
+    '--mystery']), /Unknown option/);
+  assert.equal(parsePreflightArgs(['node', 'preflight.js', '--backend', 'spacetime',
+    '--guidance', 'neutral']).guidance, 'neutral');
+  assert.throws(() => parsePreflightArgs(['node', 'preflight.js', '--backend', 'spacetime',
+    '--guidance', 'unknown']), /--guidance/);
+  assert.throws(() => parsePreflightArgs(['node', 'preflight.js', '--backend', 'spacetime',
+    '--guidance', '']), /--guidance/);
+  assert.throws(() => parsePreflightArgs(['node', 'preflight.js', '--backend', 'spacetime',
+    '--parallelism', '']), /--parallelism/);
+  assert.equal(parsePreflightArgs(['node', 'preflight.js', '--backend', 'postgres',
+    '--track', 'ecommerce', '--levels', '1', '--recipe', 'ecommerce.sequential-l1@2.5.0'])
+    .recipe, 'ecommerce.sequential-l1@2.5.0');
+  assert.throws(() => parsePreflightArgs(['node', 'preflight.js', '--backend', 'postgres',
+    '--track', 'ecommerce', '--levels', '1-2', '--recipe', 'ecommerce.sequential-l1@2.5.0']),
+  /exactly one/);
+});
+
+test('appliance preflight defaults to its configured persistent result directory', () => {
+  const resultsDir = resolve(tmpdir(), 'stack-bench-appliance-results');
+  const parsed = parsePreflightArgs(['node', 'preflight.js', '--backend', 'postgres'], {
+    env: { STACK_BENCH_RESULTS_DIR: resultsDir, STACK_BENCH_IMAGE: 'exact-build-image' },
+  });
+  assert.equal(parsed.resultsDir, resultsDir);
+  assert.equal(parsed.image, 'exact-build-image');
+});
+
+test('unknown requested scope becomes a failed report instead of terminating the process', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-preflight-'));
+  try {
+    const report = runPreflight({ ...request(root), track: 'not-a-track' }, {
+      run: (_file, args) => args[0] === 'info' ? dockerInfo()
+        : args[0] === 'compose' ? '2.40.0' : args[0] === 'ps' ? ''
+          : args[3] === '{{.Os}}/{{.Architecture}}' ? 'linux/amd64' : IMAGE_ID,
+      now: Date.parse('2026-08-12T12:00:00Z'), env: {}, home: root, pidsOnPort: () => [],
+      probePort: () => ({ free: true }),
+    });
+    assert.equal(report.ok, false);
+    assert.equal(requiredCheck(report, 'request.scope').status, 'fail');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('loopback port proof detects a listener without relying on process visibility', async t => {
+  const { createServer } = await import('node:net');
+  const server = createServer();
+  await new Promise<void>((resolveListen, reject) => {
+    server.once('error', reject);
+    server.listen(0, '127.0.0.1', resolveListen);
+  });
+  t.after(() => server.close());
+  const address = server.address();
+  assert.ok(address && typeof address !== 'string');
+  assert.deepEqual(probeLoopbackPort(address.port), { free: false });
+});
diff --git a/tools/stack-bench/tests/pricing-authority.test.ts b/tools/stack-bench/tests/pricing-authority.test.ts
new file mode 100644
index 00000000000..4f64943920b
--- /dev/null
+++ b/tools/stack-bench/tests/pricing-authority.test.ts
@@ -0,0 +1,32 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { CLAUDE_SONNET_RATES, claudeRatesForModel, priceClaudeUsage }
+  from '../src/evidence/claude-usage-cost.js';
+import { PRICING_UNIT, validatePricingAuthority }
+  from '../src/evidence/pricing-authority.js';
+
+test('the direct Sonnet 5 fallback uses the recorded five-rate schedule', () => {
+  assert.deepEqual(CLAUDE_SONNET_RATES, {
+    input: 2, output: 10, cacheWrite5m: 2.5, cacheWrite1h: 4, cacheRead: 0.2,
+  });
+  assert.equal(claudeRatesForModel('claude-sonnet-5'), CLAUDE_SONNET_RATES);
+  assert.equal(priceClaudeUsage({
+    input_tokens: 1_000_000,
+    output_tokens: 1_000_000,
+    cache_read_input_tokens: 1_000_000,
+    cache_creation: {
+      ephemeral_5m_input_tokens: 1_000_000,
+      ephemeral_1h_input_tokens: 1_000_000,
+    },
+  }), 18.7);
+});
+
+test('pricing authority requires one unit and the exact five-rate shape', () => {
+  const value = { unit: PRICING_UNIT, rates: CLAUDE_SONNET_RATES };
+  assert.deepEqual(validatePricingAuthority(value), value);
+  assert.throws(() => validatePricingAuthority({ ...value, unit: 'USD-per-token' }),
+    /pricing\.unit/);
+  assert.throws(() => validatePricingAuthority({ ...value,
+    rates: { ...value.rates, cacheWrite: 3 } }), /contain only/);
+});
diff --git a/tools/stack-bench/tests/product-config.test.ts b/tools/stack-bench/tests/product-config.test.ts
new file mode 100644
index 00000000000..25165637d7e
--- /dev/null
+++ b/tools/stack-bench/tests/product-config.test.ts
@@ -0,0 +1,33 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { BUILD_CONTAINER_RESOURCE_LIMITS, DEFAULT_BUILD_IMAGE,
+  preflightResourceFloors } from '../src/composition/product-config.js';
+
+test('product configuration keeps the published build image and container limits', () => {
+  assert.equal(DEFAULT_BUILD_IMAGE, 'stack-bench-build:2.1.226');
+  assert.deepEqual(BUILD_CONTAINER_RESOURCE_LIMITS, {
+    cpuCount: 2,
+    memoryBytes: 4 * 1024 ** 3,
+    memorySwapBytes: 4 * 1024 ** 3,
+    pids: 512,
+  });
+});
+
+test('preflight resource floors scale with concurrent attempts', () => {
+  assert.deepEqual(preflightResourceFloors(1), {
+    cpuCount: 4,
+    memoryBytes: 8 * 1024 ** 3,
+    resultDiskBytes: 10 * 1024 ** 3,
+    clockSkewMs: 5_000,
+  });
+  assert.deepEqual(preflightResourceFloors(3), {
+    cpuCount: 10,
+    memoryBytes: 16 * 1024 ** 3,
+    resultDiskBytes: 10 * 1024 ** 3,
+    clockSkewMs: 5_000,
+  });
+  assert.equal(preflightResourceFloors(9).memoryBytes, 40 * 1024 ** 3);
+  assert.throws(() => preflightResourceFloors(0), /parallelism must be a positive integer/);
+  assert.throws(() => preflightResourceFloors(1.5), /parallelism must be a positive integer/);
+});
diff --git a/tools/stack-bench/tests/progression-behavior-evidence-packs.contract.ts b/tools/stack-bench/tests/progression-behavior-evidence-packs.contract.ts
new file mode 100644
index 00000000000..a9977f3d9c3
--- /dev/null
+++ b/tools/stack-bench/tests/progression-behavior-evidence-packs.contract.ts
@@ -0,0 +1,221 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compilePackDefinition, resolveTaskFragment, type CompiledPackDefinition }
+  from '../src/composition/composition-compiler.js';
+import { compileScenarioDefinition, type CompiledCriterion, type CompiledFeature }
+  from '../src/composition/definition-compiler.js';
+import { compileProgressionDefinitionFile, type CompiledProgressionNode }
+  from '../src/progression/progression-definition.js';
+
+const trackRoot = join(STACK_BENCH_ROOT, 'tracks', 'ecommerce');
+const packRoot = join(trackRoot, 'composition', 'packs');
+const readJson = (path: string): unknown => JSON.parse(readFileSync(path, 'utf8'));
+const readPack = (name: string): CompiledPackDefinition =>
+  compilePackDefinition(readJson(join(packRoot, name)), { source: name });
+const packNames = [
+  'progression-automatic-reorder-2.0.0.json',
+  'progression-cart-recovery-2.0.0.json',
+  'progression-personalized-recommendations-2.0.0.json',
+];
+
+function fragmentText(
+  fragment: CompiledPackDefinition['task']['requirements'][number],
+): string {
+  return resolveTaskFragment(fragment, { trackRoot, source: fragment.id }).text;
+}
+
+function featureFor(pack: CompiledPackDefinition): CompiledFeature {
+  const check = pack.checks[0];
+  if (!check) throw new Error(`${pack.id} must have a check`);
+  const source = check.source;
+  const scenario = compileScenarioDefinition(readJson(join(trackRoot, source)), { source });
+  const feature = scenario.features.find(candidate => candidate.id === check.feature);
+  assert(feature, `${pack.id}.${check.id} must select a feature`);
+  return feature;
+}
+
+function criterion(feature: CompiledFeature, id: string): CompiledCriterion {
+  const selected = feature.criteria.find(item => item.id === id);
+  assert(selected, `feature ${feature.id} must contain criterion ${id}`);
+  return selected;
+}
+
+test('the three behavior packs have isolated, non-prescriptive contracts', () => {
+  const packs = packNames.map(readPack);
+  for (const pack of packs) {
+    assert.equal(pack.moduleType, 'feature');
+    assert.equal(pack.task.requirements.length, 1);
+    assert.equal(pack.task.contracts.length, 1);
+    for (const fragment of [...pack.task.requirements, ...pack.task.contracts]) {
+      assert.deepEqual(fragment.modes, ['upgrade']);
+      assert.equal(fragment.from, undefined);
+      assert.equal(fragment.until, undefined);
+    }
+    const text = `${fragmentText(requiredRequirement(pack))}\n${fragmentText(requiredContract(pack))}`;
+    assert.doesNotMatch(text, /framework|ORM|database|websocket|table|query|endpoint/i);
+  }
+  assert.equal(new Set(packs.map(pack => requiredRequirement(pack).path)).size, packs.length);
+  assert.equal(new Set(packs.map(pack => requiredContract(pack).path)).size, packs.length);
+});
+
+test('the three behavior packs declare exact dependencies and check ownership', () => {
+  const packs = new Map(packNames.map(name => {
+    const pack = readPack(name);
+    return [pack.id, pack];
+  }));
+
+  const reorder = requiredPack(packs, 'ecommerce.progression.automatic-reorder');
+  const recovery = requiredPack(packs, 'ecommerce.progression.cart-recovery');
+  const recommendations = requiredPack(packs, 'ecommerce.progression.personalized-recommendations');
+  assert.deepEqual(reorder.requiresPacks,
+    ['ecommerce.l3.scheduled-restocks-features@1.1.1',
+      'ecommerce.progression.staff-roles@1.0.0']);
+  assert.deepEqual(recovery.requiresPacks,
+    ['ecommerce.l3.cart-expiration-features@2.0.0']);
+  assert.deepEqual(recommendations.requiresPacks,
+    ['ecommerce.l2.recommendations@2.0.0']);
+
+  assert.deepEqual(reorder.checks
+    .map(check => [check.id, check.criteria]),
+  [['threshold', ['502a', '502b']], ['access', ['502c']]]);
+  assert.deepEqual(recovery.checks
+    .map(check => [check.id, check.criteria]),
+  [['available', ['503a']], ['partial', ['503b']]]);
+  assert.deepEqual(recommendations.checks
+    .map(check => [check.id, check.criteria]),
+  [['ordering', ['403a']], ['isolation', ['403b']]]);
+
+  for (const pack of packs.values()) {
+    const feature = featureFor(pack);
+    const criteria = new Set(feature.criteria.map(item => item.id));
+    const selected = pack.checks.flatMap(check => {
+      if (!check.criteria) throw new Error(`${pack.id}.${check.id} must select criteria`);
+      return check.criteria;
+    });
+    assert.equal(new Set(selected).size, selected.length);
+    assert.deepEqual(new Set(selected), criteria);
+  }
+});
+
+test('automatic reorder proves staff access and rejects a customer replay', () => {
+  const pack = readPack(requiredPackName(0));
+  const feature = featureFor(pack);
+  assert.equal(feature.setup.filter(step => step.do === 'dbSetStock'
+    && step.item === 'Desk Lamp').reduce((total, step) =>
+    total + (typeof step.quantity === 'number' ? step.quantity : 0), 0), 3);
+  assert(feature.setup.some(step => step.do === 'signIn' && step.actor === 'staff'));
+  assert(feature.setup.some(step => step.do === 'click' && step.actor === 'staff'
+    && step.testid === 'reorder-submit'));
+  const access = criterion(feature, '502c').steps;
+  assert(access.some(step => step.do === 'expect' && step.actor === 'customer'
+    && step.testid === 'reorder-link' && step.absent === true));
+  assert(access.some(step => step.do === 'replayAs' && step.actor === 'customer'
+    && step.from === 'staff'));
+  assert(access.some(step => step.do === 'expectReplayRejected' && step.actor === 'customer'));
+  assert(access.some(step => step.do === 'expectElementCount'
+    && step.testid === 'reorder-rule-item' && step.equals === 1));
+});
+
+test('cart recovery proves complete and partial restoration', () => {
+  const pack = readPack(requiredPackName(1));
+  const feature = featureFor(pack);
+  const available = criterion(feature, '503a').steps;
+  assert(available.some(step => step.do === 'expect' && step.testid === 'cart-item'
+    && step.contains === 'Keyboard'));
+  assert(available.some(step => step.do === 'expect' && step.testid === 'cart-restore-warning'
+    && step.absent === true));
+
+  const partial = criterion(feature, '503b').steps;
+  assert.equal(partial.filter(step => step.do === 'dbSetStock'
+    && step.item === 'Desk Lamp' && step.quantity === 0).length, 2);
+  assert(partial.some(step => step.do === 'expect' && step.testid === 'cart-item'
+    && step.contains === 'Gaming Mouse'));
+  assert(partial.some(step => step.do === 'expect' && step.testid === 'cart-item'
+    && step.contains === 'Desk Lamp' && step.absent === true));
+  assert(partial.some(step => step.do === 'expect' && step.testid === 'cart-restore-warning'
+    && step.contains === 'Desk Lamp'));
+});
+
+test('personalized recommendations prove sales ordering, name ties, and isolation', () => {
+  const pack = readPack(requiredPackName(2));
+  const feature = featureFor(pack);
+  assert.equal(feature.setup.filter(step => step.do === 'click'
+    && step.actor === 'sales-helper' && step.contains === undefined
+    && step.in?.contains === 'Desk Lamp').length, 3);
+  const expectedNameOrder = ['Gaming Mouse', 'Laptop Stand', 'Webcam'];
+  const ordering = criterion(feature, '403a').steps;
+  assert(ordering.some(step => step.do === 'expectNumber'
+    && step.actor === 'home-customer' && step.testid === 'recommendation-rank'
+    && step.in?.contains === 'Desk Lamp' && step.equals === 1));
+  assert(ordering.some(step => step.do === 'expectSequence'
+    && step.actor === 'computing-customer'
+    && JSON.stringify(step.equals) === JSON.stringify(expectedNameOrder)));
+  assert(ordering.some(step => step.do === 'expect' && step.actor === 'audio-customer'
+    && step.contains === 'Headphones'));
+
+  const isolation = criterion(feature, '403b').steps;
+  assert(isolation.some(step => step.do === 'expect' && step.actor === 'audio-customer'
+    && step.contains === 'Headphones' && step.absent === true));
+  assert(isolation.some(step => step.do === 'expectNumber'
+    && step.actor === 'home-customer' && step.testid === 'recommendation-rank'
+    && step.in?.contains === 'Desk Lamp' && step.equals === 1));
+  assert(isolation.some(step => step.do === 'expectSequence'
+    && step.actor === 'computing-customer'
+    && JSON.stringify(step.equals) === JSON.stringify(expectedNameOrder)));
+});
+
+test('the graph selects every behavior check and required dependency', () => {
+  const definition = compileProgressionDefinitionFile(
+    join(trackRoot, 'progression', 'ecommerce-2.0.2.json'), { trackRoot });
+  const byId = new Map(definition.nodes.map(node => [node.id, node]));
+
+  assert.deepEqual(requiredNode(byId, 'automatic-reorder').dependencies,
+    ['scheduled-restocks', 'staff-roles']);
+  assert.equal(requiredNode(byId, 'automatic-reorder').gradingChecks.length, 3);
+  assert.equal(requiredNode(byId, 'cart-recovery').gradingChecks.length, 2);
+  assert.equal(requiredNode(byId, 'personalized-recommendations').gradingChecks.length, 2);
+});
+
+function requiredPackName(index: number): string {
+  const name = packNames[index];
+  if (!name) throw new Error(`behavior pack name ${index} is required`);
+  return name;
+}
+
+function requiredPack(
+  packs: ReadonlyMap<string, CompiledPackDefinition>,
+  packId: string,
+): CompiledPackDefinition {
+  const pack = packs.get(packId);
+  if (!pack) throw new Error(`pack ${packId} is required`);
+  return pack;
+}
+
+function requiredRequirement(
+  pack: CompiledPackDefinition,
+): CompiledPackDefinition['task']['requirements'][number] {
+  const requirement = pack.task.requirements[0];
+  if (!requirement) throw new Error(`${pack.id} must have a product requirement`);
+  return requirement;
+}
+
+function requiredContract(
+  pack: CompiledPackDefinition,
+): CompiledPackDefinition['task']['contracts'][number] {
+  const contract = pack.task.contracts[0];
+  if (!contract) throw new Error(`${pack.id} must have a testing contract`);
+  return contract;
+}
+
+function requiredNode(
+  nodes: ReadonlyMap<string, CompiledProgressionNode>,
+  nodeId: string,
+): CompiledProgressionNode {
+  const node = nodes.get(nodeId);
+  if (!node) throw new Error(`progression node ${nodeId} is required`);
+  return node;
+}
diff --git a/tools/stack-bench/tests/progression-depth3-composition.contract.ts b/tools/stack-bench/tests/progression-depth3-composition.contract.ts
new file mode 100644
index 00000000000..87e9df118d7
--- /dev/null
+++ b/tools/stack-bench/tests/progression-depth3-composition.contract.ts
@@ -0,0 +1,91 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { buildRecipeRelease, requireRecipeRelease }
+  from '../src/composition/recipe-release.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { compileFeatureCatalogInput, compileProgressionDefinitionFile,
+  selectFeatureCatalogLevels } from '../src/progression/progression-definition.js';
+import { loadReferenceRegistry, selectReferenceFixture }
+  from '../src/references/reference-fixtures.js';
+
+const ROOT = STACK_BENCH_ROOT;
+const TRACK = join(ROOT, 'tracks', 'ecommerce');
+const RECIPE = join(TRACK, 'composition', 'recipes', 'progression-depth3-2.0.2.json');
+const PROGRESSION = join(TRACK, 'progression', 'ecommerce-2.0.2.json');
+
+test('catalog fixtures, warehouse counts, and pagination agree', () => {
+  const fixture = JSON.parse(readFileSync(join(TRACK,
+    'composition', 'fixtures', 'storefront-1.0.1.json'), 'utf8')) as {
+    items: Array<{ name: string }>; warehouses: unknown[];
+  };
+  const operations = JSON.parse(readFileSync(join(TRACK,
+    'composition', 'fixtures', 'operations-1.0.1.json'), 'utf8')) as {
+    items: Array<{ name: string }>; warehouses: unknown[];
+  };
+  assert.deepEqual(operations.items.map(item => item.name), fixture.items.map(item => item.name));
+  assert.equal(operations.warehouses.length, fixture.warehouses.length);
+  for (const file of ['01-warehouse-admin-staff-1.0.0.json',
+    '01-warehouse-admin-2.4.0.json', '01-features.json']) {
+    const scenario = JSON.parse(readFileSync(join(TRACK, 'scenarios', file), 'utf8')) as {
+      features: Array<{ criteria: Array<{ id: string; steps: Array<{
+        testid?: string; count?: number;
+      }> }> }>;
+    };
+    const steps = scenario.features.flatMap(feature => feature.criteria)
+      .find(criterion => criterion.id === '7b')?.steps ?? [];
+    assert.equal(steps.find(step => step.testid === 'admin-item-row')?.count,
+      fixture.items.length, file);
+    const locations = steps.find(step => step.testid === 'admin-location-row');
+    if (locations) assert.equal(locations.count,
+      fixture.items.length * fixture.warehouses.length, file);
+  }
+  const pagination = JSON.parse(readFileSync(join(TRACK,
+    'scenarios', 'progression-faceted-pagination-1.0.0.json'), 'utf8')) as {
+    features: Array<{ criteria: Array<{ id: string; steps: Array<{ equals?: string[] }> }> }>;
+  };
+  const pages = pagination.features.flatMap(feature => feature.criteria)
+    .find(criterion => criterion.id === '402a')?.steps
+    .flatMap(step => step.equals ? [step.equals] : []) ?? [];
+  const names = fixture.items.map(item => item.name).sort();
+  assert.deepEqual(pages, [names.slice(0, 10), names.slice(10), names.slice(0, 10)]);
+});
+
+test('the depth-3 recipe covers only the first three graph depths', () => {
+  const release = buildRecipeRelease(RECIPE, { trackRoot: TRACK });
+  const catalog = selectFeatureCatalogLevels(compileFeatureCatalogInput(
+    compileProgressionDefinitionFile(PROGRESSION, { trackRoot: TRACK })), [1, 2, 3]);
+  const selectedPackIds = release.components.packs.map(pack => pack.id);
+
+  assert.equal(catalog.definition.nodes.length, 27);
+  assert.equal(release.components.packs.length, 42);
+  assert.equal(release.checkCatalog.length, 110);
+  assert.equal(release.scoring.points, 175);
+  for (const excluded of [
+    'ecommerce.l2.price-history-features',
+    'ecommerce.l3.reservations-features',
+    'ecommerce.progression.automatic-reorder',
+  ]) assert.equal(selectedPackIds.includes(excluded), false, `${excluded} exceeds depth 3`);
+});
+
+test('the candidate catalog binds the same scoped recipe to L1 through L3', () => {
+  const track = loadTrack('ecommerce');
+  for (const level of [1, 2, 3]) {
+    const binding = requireRecipeRelease(track, level,
+      'ecommerce.progression-depth3@2.0.2');
+    assert.equal(binding.release.id, 'ecommerce.progression-depth3');
+    assert.equal(binding.status, 'candidate');
+  }
+});
+
+test('the depth-3 recipe binds one maintained reference per stack', () => {
+  const registry = loadReferenceRegistry();
+  for (const backend of ['mongodb', 'postgres', 'spacetime']) {
+    const fixture = selectReferenceFixture(registry, { backend, track: 'ecommerce', level: 3,
+      recipe: 'ecommerce.progression-depth3@2.0.2' });
+    assert.equal(fixture.id, `ecommerce-reference-${backend}`);
+  }
+});
diff --git a/tools/stack-bench/tests/progression-feature-packs.contract.ts b/tools/stack-bench/tests/progression-feature-packs.contract.ts
new file mode 100644
index 00000000000..1762674d7a3
--- /dev/null
+++ b/tools/stack-bench/tests/progression-feature-packs.contract.ts
@@ -0,0 +1,222 @@
+import assert from 'node:assert/strict';
+import { readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compilePackDefinition, compileRecipeFile, resolveTaskFragment,
+  type CompiledPackDefinition } from '../src/composition/composition-compiler.js';
+import { compileScenarioDefinition, type CompiledCriterion, type CompiledFeature }
+  from '../src/composition/definition-compiler.js';
+import { compileProgressionDefinitionFile, type CompiledProgressionNode }
+  from '../src/progression/progression-definition.js';
+
+// Rules every feature pack in the dependency catalog must hold, checked once
+// over the whole catalog rather than restated per pack. Exact ids, points,
+// paths and hook names are data the compiler already binds; they are not
+// asserted here.
+
+const trackRoot = join(STACK_BENCH_ROOT, 'tracks', 'ecommerce');
+const packRoot = join(trackRoot, 'composition', 'packs');
+const readJson = (path: string): unknown => JSON.parse(readFileSync(path, 'utf8'));
+const packs = new Map<string, CompiledPackDefinition>(readdirSync(packRoot)
+  .filter(name => name.endsWith('.json')).map(name => {
+    const pack = compilePackDefinition(readJson(join(packRoot, name)), { source: name });
+    return [`${pack.id}@${pack.version}`, pack];
+  }));
+const definition = compileProgressionDefinitionFile(
+  join(trackRoot, 'progression', 'ecommerce-2.0.2.json'), { trackRoot });
+
+function requiredPack(reference: string): CompiledPackDefinition {
+  const pack = packs.get(reference);
+  if (!pack) throw new Error(`the catalog references missing pack ${reference}`);
+  return pack;
+}
+
+const featurePacks: Array<{ node: CompiledProgressionNode; pack: CompiledPackDefinition }> =
+  definition.nodes.flatMap(node => node.featureRefs.map(reference =>
+    ({ node, pack: requiredPack(reference) })));
+
+type Fragment = CompiledPackDefinition['task']['requirements'][number];
+
+function fragmentText(fragment: Fragment): string {
+  return resolveTaskFragment(fragment, { trackRoot, source: fragment.id }).text;
+}
+
+function scenarioFeature(check: CompiledPackDefinition['checks'][number],
+  at: string): { feature: CompiledFeature } {
+  const scenario = compileScenarioDefinition(readJson(join(trackRoot, check.source)),
+    { source: check.source });
+  const feature = scenario.features.find(candidate => candidate.id === check.feature);
+  assert(feature, `${at} must select a feature that exists in ${check.source}`);
+  return { feature };
+}
+
+function selectedCriteria(pack: CompiledPackDefinition): CompiledCriterion[] {
+  return pack.checks.flatMap(check => {
+    const at = `${pack.id}.${check.id}`;
+    const { feature } = scenarioFeature(check, at);
+    const ids = check.criteria ?? feature.criteria.map(criterion => criterion.id);
+    return ids.map(id => {
+      const criterion = feature.criteria.find(candidate => candidate.id === id);
+      assert(criterion, `${at} must select ${id} from ${check.source}`);
+      return criterion;
+    });
+  });
+}
+
+test('every feature pack states one whole product request and one interface it can add to an app', () => {
+  const requirementPaths = new Set<string>();
+  const contractPaths = new Set<string>();
+  for (const { pack } of featurePacks) {
+    const at = `${pack.id}@${pack.version}`;
+    assert.equal(pack.moduleType, 'feature', at);
+    assert.equal(pack.task.requirements.length, 1, `${at} must state one product request`);
+    assert.equal(pack.task.contracts.length, 1, `${at} must state one application interface`);
+    const [requirement] = pack.task.requirements;
+    const [contract] = pack.task.contracts;
+    assert(requirement && contract);
+    // Dependency mode adds features to an existing app, so every feature
+    // must compose as an upgrade, and its interface must travel with it.
+    assert(requirement.modes?.includes('upgrade'), `${at} must compose as an upgrade`);
+    assert.deepEqual(contract.modes, requirement.modes, `${at} interface modes must match its request`);
+    for (const fragment of [requirement, contract]) {
+      assert.equal(fragment.from, undefined, `${at} must not slice ${fragment.path}`);
+      assert.equal(fragment.until, undefined, `${at} must not slice ${fragment.path}`);
+    }
+    assert.equal(requirementPaths.has(requirement.path), false,
+      `${requirement.path} is shared by two feature packs`);
+    assert.equal(contractPaths.has(contract.path), false,
+      `${contract.path} is shared by two feature packs`);
+    requirementPaths.add(requirement.path);
+    contractPaths.add(contract.path);
+  }
+});
+
+test('feature requests are implementation-neutral and never name the testing interface', () => {
+  for (const { pack } of featurePacks) {
+    const [requirement] = pack.task.requirements;
+    assert(requirement);
+    assert.doesNotMatch(fragmentText(requirement),
+      /framework|ORM|database|websocket|endpoint|\broutes?\b|reducer|testid|MongoDB|PostgreSQL|SpacetimeDB/i,
+      `${pack.id}@${pack.version} ${requirement.path}`);
+  }
+});
+
+test('every check selects criteria that exist in its scenario', () => {
+  for (const { pack } of featurePacks) {
+    for (const check of pack.checks) {
+      const at = `${pack.id}.${check.id}`;
+      const { feature } = scenarioFeature(check, at);
+      for (const id of check.criteria ?? []) {
+        assert(feature.criteria.some(criterion => criterion.id === id),
+          `${at} selects ${id}, which ${check.source} does not define`);
+      }
+    }
+  }
+});
+
+test('shopping criteria in one scenario never share a product, so state cannot leak between them', () => {
+  const [quantity, checkout] = requiredPack('ecommerce.feature.cart@2.0.0').checks.length
+    ? selectedCriteria(requiredPack('ecommerce.feature.cart@2.0.0'))
+      .concat(selectedCriteria(requiredPack('ecommerce.feature.checkout@2.0.0')))
+    : [];
+  assert(quantity && checkout, 'cart and checkout must each select a criterion');
+  const product = (criterion: CompiledCriterion): string => {
+    const add = criterion.steps.find(step => step.do === 'click' && step.testid === 'add-to-cart');
+    assert(add && typeof add.in?.contains === 'string', `${criterion.id} must add a named product`);
+    return add.in.contains;
+  };
+  assert.notEqual(product(quantity), product(checkout));
+});
+
+test('fulfilment and cancellation keep separate authorization owners', () => {
+  // A cross-feature authorization check is graded by exactly one feature, so
+  // a failure has one repair owner.
+  const access = requiredPack('ecommerce.progression.operations-access-specifications@1.0.0');
+  assert.equal(access.moduleType, 'specification');
+  const owners = new Map(access.checks.map(check => [check.id, check.requiresFeatures]));
+  assert.deepEqual(owners.get('operator-authorization-direct'),
+    ['ecommerce.progression.fulfilment-queue']);
+  assert.deepEqual(owners.get('order-owner-direct'), ['ecommerce.l2.order-cancellation-features']);
+  const fulfilment = definition.nodes.find(node => node.id === 'fulfilment-queue');
+  const cancellation = definition.nodes.find(node => node.id === 'order-cancellation');
+  assert(fulfilment && cancellation);
+  const owns = (node: CompiledProgressionNode, checkId: string): boolean => {
+    const check = access.checks.find(candidate => candidate.id === checkId);
+    assert(check, `${access.id} must define ${checkId}`);
+    const prefix = `${access.stableId ?? access.id}.${check.stableId ?? check.id}.`;
+    return node.gradingChecks.some(graded => graded.id.startsWith(prefix));
+  };
+  assert(owns(fulfilment, 'operator-authorization-direct'));
+  assert(!owns(fulfilment, 'order-owner-direct'));
+  assert(owns(cancellation, 'order-owner-direct'));
+  assert(!owns(cancellation, 'operator-authorization-direct'));
+});
+
+test('every replayed request names a declared actor whose request it replays', () => {
+  // A replay captured from an actor the scenario never declared records
+  // nothing and degrades to inconclusive, which reads as a pass on its own.
+  // Replaying one's own request is legitimate (idempotency); an undeclared
+  // source is not.
+  const graded = new Set(definition.nodes.flatMap(node => node.gradingChecks.map(check => check.id)));
+  let replays = 0;
+  for (const pack of packs.values()) {
+    for (const check of pack.checks) {
+      const prefix = `${pack.stableId ?? pack.id}.${check.stableId ?? check.id}.`;
+      if (![...graded].some(id => id.startsWith(prefix))) continue;
+      const { feature } = scenarioFeature(check, `${pack.id}.${check.id}`);
+      const actors = feature.actors ?? [];
+      for (const criterion of feature.criteria) {
+        for (const step of criterion.steps.filter(candidate => candidate.do === 'replayAs')) {
+          replays += 1;
+          assert(typeof step.from === 'string' && actors.includes(step.from),
+            `${check.source} ${criterion.id} replays a request from undeclared actor ${String(step.from)}`);
+          assert(typeof step.actor === 'string' && actors.includes(step.actor),
+            `${check.source} ${criterion.id} replays as undeclared actor ${String(step.actor)}`);
+        }
+      }
+    }
+  }
+  assert(replays > 0, 'the catalog must grade at least one replayed request');
+});
+
+test('privacy checks prove a server or transport boundary, not a hidden control', () => {
+  const review = requiredPack('ecommerce.progression.review-access-specifications@1.0.0');
+  const [reviewCriterion] = selectedCriteria(review);
+  assert(reviewCriterion);
+  assert(reviewCriterion.steps.some(step => step.do === 'replayAs'));
+  assert(reviewCriterion.steps.some(step => step.do === 'expectReplayRejected'));
+
+  const support = requiredPack('ecommerce.progression.support-privacy-specifications@1.0.0');
+  const [supportCriterion] = selectedCriteria(support);
+  assert(supportCriterion);
+  // A "not received" veto is only meaningful beside a positive control.
+  assert.deepEqual(supportCriterion.steps.map(step => step.do),
+    ['expectReceived', 'expectNotReceived']);
+});
+
+test('promotion rules use values a datetime-local input accepts', () => {
+  const [criterion] = selectedCriteria(requiredPack('ecommerce.progression.promotion-rules@1.0.1'));
+  assert(criterion);
+  const values = criterion.steps
+    .filter(step => step.do === 'fill' && typeof step.testid === 'string'
+      && ['promotion-start', 'promotion-end'].includes(step.testid))
+    .map(step => step.text);
+  assert.equal(values.length, 2);
+  for (const value of values) assert.match(String(value), /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}$/);
+});
+
+test('the sequential L2 recipe runs every source its operations feature packs own', () => {
+  const recipe = compileRecipeFile(
+    join(trackRoot, 'composition', 'recipes', 'sequential-l2-1.6.0.json'), { trackRoot });
+  const sources = new Set(recipe.execution.map(entry => entry.source));
+  for (const name of ['operations-access-features-1.0.0.json',
+    'inventory-operations-features-1.2.0.json', 'returns-pricing-features-1.1.0.json']) {
+    const pack = compilePackDefinition(readJson(join(packRoot, name)), { source: name });
+    assert.equal(pack.moduleType, 'feature');
+    for (const check of pack.checks) {
+      assert(sources.has(check.source), `${name} must run ${check.source}`);
+    }
+  }
+});
diff --git a/tools/stack-bench/tests/progression-grade-bundle.test.ts b/tools/stack-bench/tests/progression-grade-bundle.test.ts
new file mode 100644
index 00000000000..f9a3735d265
--- /dev/null
+++ b/tools/stack-bench/tests/progression-grade-bundle.test.ts
@@ -0,0 +1,238 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { createCheckEvidence } from '../src/evidence/check-evidence.js';
+import type { CheckEvidence, CheckEvidenceStatus } from '../src/evidence/check-evidence.js';
+import { createArtifact, emptyArtifactIdentities } from '../src/evidence/artifacts.js';
+import { gradeBundleToProgressionResult }
+  from '../src/progression/grade-bundle-result.js';
+
+interface BundleFixture {
+  observation: string;
+  source: { sha256: string };
+  selection: {
+    sha256: string;
+    checks: Array<{ stableKey: string; points: number }>;
+    attemptedChecks: string[];
+    reportedChecks: string[];
+    notRun: Array<{ stableKey: string; reason: string }>;
+  };
+  outcome?: { kind: string; reason: string; phase?: string };
+  totals: { score: number; max: number; regression: { score: number; max: number } | null };
+  suites: { application: { features: Array<{
+    id: number;
+    setupEvidence: CheckEvidence;
+    criteria: Array<{ stableKey: string; points: number; evidence: CheckEvidence }>;
+  }> } };
+}
+
+const evidence = (status: CheckEvidenceStatus): CheckEvidence => createCheckEvidence({
+  status,
+  code: status === 'passed' ? 'completed' : 'test_result',
+  phase: 'assertion',
+  startedAtMs: 1,
+  completedAtMs: 2,
+});
+const setupEvidence = () => createCheckEvidence({ status: 'passed', code: 'completed',
+  phase: 'setup', startedAtMs: 1, completedAtMs: 2 });
+const sourceSha256 = 'c'.repeat(64);
+const recipeIdentity = { id: 'ecommerce-l1', version: '1.0.0', sha256: 'd'.repeat(64) };
+const progressionIdentity = { id: 'dependency', version: '1.0.0',
+  policy: 'dependency-graph', sha256: '8'.repeat(64) };
+const featureCatalogIdentity = { id: 'catalog', version: '1.0.0', sha256: '7'.repeat(64) };
+const owner = { schemaVersion: 1,
+  campaign: { id: 'campaign', version: '1.0.0', sha256: 'e'.repeat(64) },
+  attempt: { id: 'campaign-r1', track: 'ecommerce', stack: 'postgres',
+    agentAdapter: 'claude-code', model: 'test-model', conditionSha256: 'f'.repeat(64) },
+  workspace: { appDirectory: 'app' } };
+const runArtifact = () => createArtifact({ kind: 'benchmark_run', id: 'run-1',
+  attempt: { id: 'run-1', parentId: owner.attempt.id },
+  identities: emptyArtifactIdentities({ agentAdapter: { id: owner.attempt.agentAdapter },
+    stackAdapter: { id: owner.attempt.stack } }),
+  payload: { backend: owner.attempt.stack, model: owner.attempt.model,
+    condition: { sha256: owner.attempt.conditionSha256 },
+    featureCatalog: featureCatalogIdentity, dependencyPolicy: progressionIdentity,
+    progressionOwner: { schemaVersion: owner.schemaVersion,
+      campaign: owner.campaign, attempt: owner.attempt } },
+});
+
+const action = () => ({
+  type: 'repair',
+  prompt: { nodeIds: ['accounts', 'catalog'] },
+  grading: {
+    nodeIds: ['accounts', 'catalog'],
+    checks: [
+      { id: 'check.accounts', nodeId: 'accounts', points: 1 },
+      { id: 'check.catalog', nodeId: 'catalog', points: 2 },
+    ],
+  },
+});
+
+const bundle = (): BundleFixture => ({
+  observation: 'scored',
+  source: { sha256: sourceSha256 },
+  selection: {
+    sha256: 'a'.repeat(64),
+    checks: [
+      { stableKey: 'check.accounts', points: 1 },
+      { stableKey: 'check.catalog', points: 2 },
+    ],
+    attemptedChecks: ['check.accounts', 'check.catalog'],
+    reportedChecks: ['check.accounts', 'check.catalog'],
+    notRun: [],
+  },
+  totals: { score: 1, max: 3, regression: null },
+  suites: { application: { features: [{ id: 1, setupEvidence: setupEvidence(), criteria: [
+    { stableKey: 'check.accounts', points: 1, evidence: evidence('passed') },
+    { stableKey: 'check.catalog', points: 2, evidence: evidence('failed') },
+  ] }] } },
+});
+
+const artifact = (payload = bundle(), id = 'grade-1') => createArtifact({
+  kind: 'grade_bundle', id,
+  attempt: { id, parentId: 'run-1' },
+  identities: emptyArtifactIdentities({ recipe: recipeIdentity,
+    stackAdapter: { id: owner.attempt.stack } }),
+  payload,
+});
+
+const conversion = { owner, runArtifact: runArtifact(), featureCatalogIdentity,
+  dependencyPolicyIdentity: progressionIdentity,
+  sourceSha256, recipeIdentity,
+  selectionSha256: 'a'.repeat(64) };
+
+test('grade bundle conversion preserves exact node ownership and measured outcomes', () => {
+  assert.deepEqual(gradeBundleToProgressionResult(artifact(), action(), conversion), {
+    attemptId: 'grade-1',
+    runId: 'run-1',
+    sourceSha256,
+    selectionSha256: 'a'.repeat(64),
+    outcome: 'conclusive',
+    nodes: [
+      { id: 'accounts', checks: [{ id: 'check.accounts', outcome: 'pass' }] },
+      { id: 'catalog', checks: [{ id: 'check.catalog', outcome: 'fail' }] },
+    ],
+  });
+});
+
+test('grade bundle conversion rejects incomplete, duplicate, or changed grading scope', () => {
+  const missing = bundle();
+  missing.selection.reportedChecks.pop();
+  assert.throws(() => gradeBundleToProgressionResult(artifact(missing, 'missing'),
+    action(), conversion), /complete progression evidence/);
+  const duplicate = bundle();
+  duplicate.suites.application.features[0]!.criteria.push(
+    structuredClone(duplicate.suites.application.features[0]!.criteria[0]!));
+  assert.throws(() => gradeBundleToProgressionResult(artifact(duplicate, 'duplicate'),
+    action(), conversion), /repeats check/);
+  const points = bundle();
+  points.selection.checks[0]!.points = 2;
+  assert.throws(() => gradeBundleToProgressionResult(artifact(points, 'points'),
+    action(), conversion), /points.*do not match/);
+  assert.throws(() => gradeBundleToProgressionResult(artifact(), action(), {
+    ...conversion, selectionSha256: 'b'.repeat(64),
+  }), /selection identity/);
+  assert.throws(() => gradeBundleToProgressionResult(artifact(), action(), {
+    ...conversion, selectionSha256: undefined,
+  }), /selection identity is required/);
+  const totals = bundle();
+  totals.totals.score = 2;
+  assert.throws(() => gradeBundleToProgressionResult(artifact(totals, 'totals'),
+    action(), conversion), /totals do not match/);
+});
+
+test('grade bundle conversion binds the artifact owner, source, stack, recipe, and nodes', () => {
+  const stale = artifact();
+  stale.attempt.parentId = 'different-run';
+  assert.throws(() => gradeBundleToProgressionResult(stale, action(), conversion),
+    /does not belong/);
+  assert.throws(() => gradeBundleToProgressionResult(artifact(), action(), {
+    ...conversion, sourceSha256: '9'.repeat(64),
+  }), /source identity/);
+  const foreignRun = runArtifact();
+  foreignRun.attempt.parentId = 'different-attempt';
+  assert.throws(() => gradeBundleToProgressionResult(artifact(), action(), {
+    ...conversion, runArtifact: foreignRun,
+  }), /owned progression benchmark run/);
+  const oldCampaign = runArtifact();
+  oldCampaign.payload.progressionOwner.campaign.sha256 = '7'.repeat(64);
+  assert.throws(() => gradeBundleToProgressionResult(artifact(), action(), {
+    ...conversion, runArtifact: oldCampaign,
+  }), /benchmark owner/);
+  const badNodes = action();
+  badNodes.grading.nodeIds.push('accounts');
+  assert.throws(() => gradeBundleToProgressionResult(artifact(), badNodes, conversion),
+    /node ownership/);
+  const foreign = action();
+  foreign.grading.checks[0]!.nodeId = 'foreign';
+  assert.throws(() => gradeBundleToProgressionResult(artifact(), foreign, conversion),
+    /node ownership/);
+});
+
+test('typed grader failures do not consume a progression repair as a zero score', () => {
+  const failed = bundle();
+  failed.outcome = { kind: 'harness_failure', reason: 'browser worker stopped' };
+  assert.deepEqual(gradeBundleToProgressionResult(artifact(failed, 'harness'),
+    action(), conversion), { attemptId: 'harness', runId: 'run-1', sourceSha256,
+    selectionSha256: 'a'.repeat(64),
+    outcome: 'inconclusive', category: 'harness_failure',
+    reason: 'browser worker stopped' });
+});
+
+test('one unmeasured check makes the grading attempt inconclusive', () => {
+  const mixed = bundle();
+  mixed.outcome = { kind: 'app_failure', phase: 'grading', reason: 'catalog failed' };
+  mixed.suites.application.features[0]!.criteria[0]!.evidence = evidence('inconclusive');
+  mixed.suites.application.features[0]!.criteria[1]!.evidence = evidence('failed');
+  mixed.totals.score = 0;
+  assert.deepEqual(gradeBundleToProgressionResult(artifact(mixed, 'mixed'),
+    action(), conversion), {
+    attemptId: 'mixed', runId: 'run-1', sourceSha256,
+    selectionSha256: 'a'.repeat(64), outcome: 'inconclusive',
+    category: 'inconclusive_evidence',
+    reason: '1 selected check did not produce measured evidence',
+  });
+});
+
+test('completed progression evidence outranks a stale application failure', () => {
+  const completed = bundle();
+  completed.outcome = { kind: 'app_failure', phase: 'grading', reason: 'stale summary' };
+  const result = gradeBundleToProgressionResult(artifact(completed, 'completed'),
+    action(), conversion);
+  assert.equal(result.outcome, 'conclusive');
+  if (result.outcome !== 'conclusive') throw new Error('expected a conclusive result');
+  assert.equal(result.applicationFailure, undefined);
+  assert.deepEqual(result.nodes, [
+    { id: 'accounts', checks: [{ id: 'check.accounts', outcome: 'pass' }] },
+    { id: 'catalog', checks: [{ id: 'check.catalog', outcome: 'fail' }] },
+  ]);
+});
+
+test('a typed application abort charges current work but not earlier regression guards', () => {
+  const failed = bundle();
+  failed.outcome = { kind: 'app_failure', phase: 'application-start',
+    reason: 'the generated application did not start' };
+  failed.selection.attemptedChecks = [];
+  failed.selection.reportedChecks = [];
+  failed.selection.notRun = failed.selection.checks.map(check => ({
+    stableKey: check.stableKey, reason: failed.outcome!.reason,
+  }));
+  failed.totals = { score: 0, max: 3, regression: null };
+  const selected = action();
+  selected.prompt.nodeIds = ['catalog'];
+  const result = gradeBundleToProgressionResult(artifact(failed, 'app-failure'),
+    selected, conversion);
+  assert.equal(result.outcome, 'conclusive');
+  if (result.outcome !== 'conclusive') throw new Error('expected a conclusive result');
+  assert.deepEqual(result.applicationFailure, {
+    phase: 'application-start', reason: 'the generated application did not start',
+  });
+  assert.deepEqual(result.nodes, [
+    { id: 'accounts', checks: [{ id: 'check.accounts', outcome: 'not-run' }] },
+    { id: 'catalog', checks: [{ id: 'check.catalog', outcome: 'fail' }] },
+  ]);
+  const incomplete = structuredClone(failed);
+  incomplete.selection.notRun.pop();
+  assert.throws(() => gradeBundleToProgressionResult(artifact(incomplete, 'bad-abort'),
+    action(), conversion), /application abort is incomplete/);
+});
diff --git a/tools/stack-bench/tests/progression-graph.contract.ts b/tools/stack-bench/tests/progression-graph.contract.ts
new file mode 100644
index 00000000000..9082554d9ea
--- /dev/null
+++ b/tools/stack-bench/tests/progression-graph.contract.ts
@@ -0,0 +1,48 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import {
+  compileProgressionGraph,
+  renderProgressionGraphHtml,
+  type ProgressionGraph,
+} from '../src/progression/progression-graph.js';
+
+const projectRoot = STACK_BENCH_ROOT;
+const trackRoot = join(projectRoot, 'tracks', 'ecommerce');
+const definitionPath = join(trackRoot, 'progression', 'ecommerce-2.0.2.json');
+
+test('the dependency graph page is generated from the ecommerce definition', () => {
+  const htmlPath = join(projectRoot, 'docs', 'dependency-graph.html');
+  const html = readFileSync(htmlPath, 'utf8');
+  const graph = compileProgressionGraph(definitionPath, { trackRoot });
+  assert.equal(graph.nodes.length, 43);
+  assert.equal(graph.levels, 6);
+  assert(graph.nodes.every(node => node.description.length > 0));
+  assert.deepEqual(graph.nodes.filter(node => node.level === 1).map(node => node.id),
+    ['accounts', 'catalog', 'staff-access', 'support-intake']);
+  assert.equal(renderProgressionGraphHtml(html, graph), html,
+    'run npm run graph after changing the progression definition');
+});
+
+test('graph rendering rejects HTML without generated-data markers', () => {
+  const graph = compileProgressionGraph(definitionPath, { trackRoot });
+  assert.throws(() => renderProgressionGraphHtml('<html></html>', graph),
+    /has no generated-data markers/);
+});
+
+test('graph rendering escapes less-than signs in embedded JSON', () => {
+  const graph: ProgressionGraph = {
+    schemaVersion: 1,
+    definition: { id: 'example.graph', version: '1.0.0', state: 'draft' },
+    levels: 1,
+    questlines: [{ id: 'example', title: 'Example <script>' }],
+    nodes: [],
+  };
+  const html = 'before /* STACK_BENCH_GRAPH_START */ old /* STACK_BENCH_GRAPH_END */ after';
+  const rendered = renderProgressionGraphHtml(html, graph);
+  assert.match(rendered, /Example \\u003cscript>/);
+  assert.doesNotMatch(rendered, /Example <script>/);
+});
diff --git a/tools/stack-bench/tests/progression-integration.contract.ts b/tools/stack-bench/tests/progression-integration.contract.ts
new file mode 100644
index 00000000000..942dcb88091
--- /dev/null
+++ b/tools/stack-bench/tests/progression-integration.contract.ts
@@ -0,0 +1,268 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { loadTrack } from '../src/composition/tracks.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import type { RecipeBinding } from '../src/composition/recipe-release.js';
+import { progressionEngine } from '../src/progression/progression-engine.js';
+import { compileProgressionInput, progressionLevels,
+  validateProgressionInput } from '../src/progression/progression-definition.js';
+import { resolveProgressionRecipeAction,
+  validateProgressionRecipeBindings,
+  type ProgressionRecipeAction } from '../src/progression/progression-recipe-selection.js';
+import type { ProgressionState } from '../src/progression/progression-state.js';
+
+interface DefinitionNode {
+  id: string;
+  title: string;
+  questline: string;
+  dependencies: Array<{ id: string; reason: string }>;
+  featureRefs: string[];
+  promptModules: string[];
+  gradingChecks: Array<{ id: string; points: number; role: 'feature' | 'guarantee' }>;
+}
+
+interface DefinitionFixture {
+  schemaVersion: number;
+  kind: string;
+  id: string;
+  version: string;
+  state: string;
+  title: string;
+  policy: string;
+  repair: { selection: 'feature'; budget: { perFeature: number } };
+  unchangedFailureLimit: number;
+  workSelection: 'progressive';
+  nodes: DefinitionNode[];
+  questlines: Array<{ id: string; title: string; nodes: string[] }>;
+}
+
+type WorkRecipeAction = Exclude<ProgressionRecipeAction,
+  { action: { type: 'terminal' } }>;
+
+function resolveWorkRecipeAction(binding: RecipeBinding,
+  state: ProgressionState): WorkRecipeAction {
+  const selected = resolveProgressionRecipeAction(binding, state);
+  if (!('agent' in selected)) throw new Error('expected active progression work');
+  return selected;
+}
+
+const definition = (): DefinitionFixture => ({
+  schemaVersion: 7,
+  kind: 'progression-mode',
+  id: 'ecommerce-dependency',
+  version: '1.0.0',
+  state: 'draft',
+  title: 'Ecommerce dependency fixture',
+  policy: 'dependency-graph',
+  repair: { selection: 'feature', budget: { perFeature: 2 } },
+  unchangedFailureLimit: 3,
+  workSelection: 'progressive',
+  nodes: [{
+    id: 'accounts',
+    title: 'Accounts',
+    questline: 'identity',
+    dependencies: [],
+    featureRefs: ['ecommerce.feature.accounts@1.1.0'],
+    promptModules: [],
+    gradingChecks: [
+      { id: 'ecommerce.feature.accounts.accounts.1a', points: 1, role: 'feature' },
+      { id: 'ecommerce.feature.accounts.accounts.1b', points: 1, role: 'feature' },
+    ],
+  }],
+  questlines: [{ id: 'identity', title: 'Identity', nodes: ['accounts'] }],
+});
+
+test('progression input freezes the compiled graph and rejects a rewritten identity', () => {
+  const input = compileProgressionInput(definition());
+  assert.deepEqual(progressionLevels(input), [1]);
+  assert.deepEqual(validateProgressionInput(input), input);
+  const changed = structuredClone(input);
+  changed.identity.sha256 = 'a'.repeat(64);
+  assert.throws(() => validateProgressionInput(changed), /identity does not match/);
+});
+
+test('the recipe boundary keeps agent work separate from exact grader checks', () => {
+  const track = loadTrack('ecommerce');
+  const binding = resolveRecipeRelease(track, 1, 'ecommerce.sequential-l1@2.5.0');
+  const input = compileProgressionInput(definition());
+  validateProgressionRecipeBindings(input, [{ level: 1, binding }]);
+  const state = progressionEngine.initialize(input.definition);
+  const selected = resolveWorkRecipeAction(binding, state);
+
+  assert.equal(selected.action.type, 'build');
+  assert.deepEqual(selected.agent.request.selection.requested, {
+    features: ['ecommerce.feature.accounts'],
+    specifications: { expected: [], observed: [], requested: [] },
+    checks: [],
+    dependencyExpansion: 'exact',
+  });
+  assert.deepEqual(selected.grader.checkKeys, [
+    'ecommerce.feature.accounts.accounts.1a',
+    'ecommerce.feature.accounts.accounts.1b',
+  ]);
+  assert.deepEqual(selected.grader.request.selection.requested.checks,
+    selected.grader.checkKeys);
+  assert.deepEqual(selected.agent.request.selection.promptPacks,
+    ['ecommerce.feature.accounts']);
+});
+
+test('dependent feature actions validate graph ancestors without restating their prompts', () => {
+  const track = loadTrack('ecommerce');
+  const binding = resolveRecipeRelease(track, 1, 'ecommerce.sequential-l1@2.5.0');
+  const value = definition();
+  value.nodes = [
+    { id: 'accounts', title: 'Accounts', questline: 'account-purchase', dependencies: [],
+      featureRefs: ['ecommerce.feature.accounts@1.1.0'], promptModules: [],
+      gradingChecks: [{ id: 'ecommerce.feature.accounts.accounts.1a', points: 1,
+        role: 'feature' }] },
+    { id: 'catalog', title: 'Catalog', questline: 'catalog-purchase', dependencies: [],
+      featureRefs: ['ecommerce.feature.catalog@1.1.0'], promptModules: [],
+      gradingChecks: [{ id: 'ecommerce.feature.catalog.catalog.2a', points: 1,
+        role: 'feature' }] },
+    { id: 'purchasing', title: 'Purchasing', questline: 'account-purchase',
+      dependencies: [
+        { id: 'accounts', reason: 'Purchasing requires an account.' },
+        { id: 'catalog', reason: 'Purchasing requires a catalog item.' },
+      ],
+      featureRefs: ['ecommerce.feature.purchasing@1.1.0'], promptModules: [],
+      gradingChecks: [{ id: 'ecommerce.feature.purchasing.purchase-order.3c', points: 1,
+        role: 'feature' }] },
+  ];
+  value.questlines = [
+    { id: 'account-purchase', title: 'Account purchase', nodes: ['accounts', 'purchasing'] },
+    { id: 'catalog-purchase', title: 'Catalog purchase', nodes: ['catalog'] },
+  ];
+  const input = compileProgressionInput(value);
+  validateProgressionRecipeBindings(input, [
+    { level: 1, binding }, { level: 2, binding },
+  ]);
+  let state = progressionEngine.initialize(input.definition);
+  state = progressionEngine.recordResult(state, {
+    attemptId: 'parents', outcome: 'conclusive', nodes: [
+      { id: 'accounts', checks: [{ id: 'ecommerce.feature.accounts.accounts.1a', outcome: 'pass' }] },
+      { id: 'catalog', checks: [{ id: 'ecommerce.feature.catalog.catalog.2a', outcome: 'pass' }] },
+    ],
+  });
+  const selected = resolveWorkRecipeAction(binding, state);
+  assert.deepEqual(selected.agent.selection.promptPacks, ['ecommerce.feature.purchasing']);
+  assert.deepEqual(selected.agent.task.requirementIds, [
+    'ecommerce.sequential-l1.framing',
+    'ecommerce.feature.purchasing.requirement',
+  ]);
+  assert.deepEqual(selected.agent.task.contractIds, [
+    'ecommerce.sequential-l1.interface',
+    'ecommerce.feature.purchasing.hooks',
+    'ecommerce.sequential-l1.purchase-action-input',
+  ]);
+
+  const malformed = structuredClone(value);
+  malformed.nodes[2]!.dependencies = [
+    { id: 'accounts', reason: 'Purchasing requires an account.' },
+  ];
+  malformed.questlines = [
+    { id: 'account-purchase', title: 'Account purchase', nodes: ['accounts', 'purchasing'] },
+    { id: 'catalog-purchase', title: 'Catalog purchase', nodes: ['catalog'] },
+  ];
+  assert.throws(() => validateProgressionRecipeBindings(compileProgressionInput(malformed), [
+    { level: 1, binding }, { level: 2, binding },
+  ]), /requires ecommerce\.feature\.catalog@1\.1\.0 in its node or ancestors/);
+});
+
+test('binding validation rejects a check borrowed from a selected sibling', () => {
+  const binding = resolveRecipeRelease(loadTrack('ecommerce'), 1,
+    'ecommerce.sequential-l1@2.5.0');
+  const value = definition();
+  value.nodes.push({ id: 'catalog', title: 'Catalog', questline: 'catalog', dependencies: [],
+    featureRefs: ['ecommerce.feature.catalog@1.1.0'], promptModules: [],
+    gradingChecks: [{ id: 'ecommerce.feature.catalog.catalog.2b', points: 1,
+      role: 'feature' }] });
+  value.nodes[0]!.gradingChecks = [
+    { id: 'ecommerce.feature.catalog.catalog.2a', points: 1, role: 'feature' },
+  ];
+  value.questlines = [
+    { id: 'identity', title: 'Identity', nodes: ['accounts'] },
+    { id: 'catalog', title: 'Catalog', nodes: ['catalog'] },
+  ];
+  assert.throws(() => validateProgressionRecipeBindings(compileProgressionInput(value), [
+    { level: 1, binding },
+  ]), /belongs to an unselected feature/);
+});
+
+test('binding validation allows grading setup elsewhere in the feature graph', () => {
+  const binding = resolveRecipeRelease(loadTrack('ecommerce'), 1,
+    'ecommerce.sequential-l1@2.5.0');
+  const value = definition();
+  value.nodes[0]!.gradingChecks.push({
+    id: 'ecommerce.spec.state-durability.account-state-recovery.105a', points: 1,
+    role: 'guarantee',
+  });
+  value.nodes.push({ id: 'catalog', title: 'Catalog', questline: 'catalog', dependencies: [],
+    featureRefs: ['ecommerce.feature.catalog@1.1.0'], promptModules: [],
+    gradingChecks: [{ id: 'ecommerce.feature.catalog.catalog.2a', points: 1,
+      role: 'feature' }] });
+  value.nodes.push({ id: 'cart', title: 'Cart', questline: 'cart', dependencies: [
+    { id: 'accounts', reason: 'the cart belongs to an account' },
+    { id: 'catalog', reason: 'the cart contains catalog items' },
+  ], featureRefs: ['ecommerce.feature.cart-checkout@1.2.0'], promptModules: [],
+  gradingChecks: [{ id: 'ecommerce.feature.cart-checkout.cart.4a', points: 1,
+    role: 'feature' }] });
+  value.questlines = [
+    { id: 'identity', title: 'Identity', nodes: ['accounts'] },
+    { id: 'catalog', title: 'Catalog', nodes: ['catalog'] },
+    { id: 'cart', title: 'Cart', nodes: ['cart'] },
+  ];
+
+  assert.doesNotThrow(() => validateProgressionRecipeBindings(compileProgressionInput(value), [
+    { level: 1, binding }, { level: 2, binding },
+  ]));
+});
+
+test('expected specification dependencies stay in grader scope and out of the agent prompt', () => {
+  const binding = structuredClone(resolveRecipeRelease(loadTrack('ecommerce'), 1,
+    'ecommerce.sequential-l1@2.5.0'));
+  const durability = binding.release.components.packs.find(module =>
+    module.id === 'ecommerce.spec.state-durability');
+  assert(durability);
+  durability.requiresPacks = ['ecommerce.spec.access-control@1.2.0'];
+  const accessCheck = binding.release.checkCatalog.find(check =>
+    check.packId === 'ecommerce.spec.access-control');
+  assert(accessCheck);
+  accessCheck.requiresFeatures = ['ecommerce.feature.accounts'];
+  const value = definition();
+  value.nodes[0]!.gradingChecks.push({
+    id: 'ecommerce.spec.state-durability.session-reload.1e', points: 1,
+    role: 'guarantee',
+  });
+  const input = compileProgressionInput(value);
+  validateProgressionRecipeBindings(input, [{ level: 1, binding }]);
+  const selected = resolveWorkRecipeAction(binding,
+    progressionEngine.initialize(input.definition));
+  assert.deepEqual(selected.agent.request.selection.requested.specifications.requested, []);
+  assert.deepEqual(selected.grader.request.selection.requested.specifications.expected, [
+    'ecommerce.spec.access-control@1.2.0',
+    'ecommerce.spec.state-durability@1.1.0',
+  ]);
+  assert.deepEqual(selected.grader.checkKeys, [
+    'ecommerce.feature.accounts.accounts.1a',
+    'ecommerce.feature.accounts.accounts.1b',
+    'ecommerce.spec.state-durability.session-reload.1e',
+  ]);
+});
+
+test('the recipe boundary rejects stale module versions, check points, and check owners', () => {
+  const track = loadTrack('ecommerce');
+  const binding = resolveRecipeRelease(track, 1, 'ecommerce.sequential-l1@2.5.0');
+  const stale = definition();
+  stale.nodes[0]!.featureRefs = ['ecommerce.feature.accounts@1.0.0'];
+  assert.throws(() => validateProgressionRecipeBindings(compileProgressionInput(stale),
+    [{ level: 1, binding }]), /outside the selected recipe/);
+  const wrongPoints = definition();
+  wrongPoints.nodes[0]!.gradingChecks[0]!.points = 2;
+  assert.throws(() => validateProgressionRecipeBindings(compileProgressionInput(wrongPoints),
+    [{ level: 1, binding }]), /points.*differ/);
+  const wrongOwner = definition();
+  wrongOwner.nodes[0]!.gradingChecks[0]!.id = 'ecommerce.feature.catalog.catalog.2a';
+  assert.throws(() => validateProgressionRecipeBindings(compileProgressionInput(wrongOwner),
+    [{ level: 1, binding }]), /unselected feature/);
+});
diff --git a/tools/stack-bench/tests/progression-pagination.contract.ts b/tools/stack-bench/tests/progression-pagination.contract.ts
new file mode 100644
index 00000000000..940c95e3d71
--- /dev/null
+++ b/tools/stack-bench/tests/progression-pagination.contract.ts
@@ -0,0 +1,93 @@
+import assert from 'node:assert/strict';
+import { readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { compileFixtureDefinition, compilePackDefinition }
+  from '../src/composition/composition-compiler.js';
+import type { PackCheck } from '../src/composition/composition-compiler.js';
+import { compileScenarioDefinition } from '../src/composition/definition-compiler.js';
+import type { CompiledStep } from '../src/composition/definition-compiler.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { loadValidatedProgressionSource } from './helpers/progression-source.js';
+
+const root = join(STACK_BENCH_ROOT, 'tracks', 'ecommerce');
+const readJson = (path: string): unknown => JSON.parse(readFileSync(path, 'utf8'));
+
+function selectedChecks(): PackCheck[] {
+  const source = loadValidatedProgressionSource(
+    join(root, 'progression', 'ecommerce-2.0.2.json'), root);
+  const packRoot = join(root, 'composition', 'packs');
+  const packs = new Map(readdirSync(packRoot).filter(name => name.endsWith('.json')).map(name => {
+    const pack = compilePackDefinition(readJson(join(packRoot, name)), { source: name });
+    return [`${pack.id}@${pack.version}`, pack];
+  }));
+
+  return source.definition.nodes.flatMap(node => source.gradingGroups(node.id).flatMap(reference => {
+    const [packRef, checkId] = reference.split('#');
+    assert(packRef && checkId);
+    const pack = packs.get(packRef);
+    assert(pack, `${node.id} references missing pack ${packRef}`);
+    return pack.checks.filter(check => check.id === checkId);
+  }));
+}
+
+function actors(step: CompiledStep): string[] {
+  return step.actor === undefined ? (step.actors ?? []) : [step.actor];
+}
+
+function inspectSteps(steps: CompiledStep[], navigation: Map<string, { search: string; page: number }>,
+  secondPageItems: Set<string>, failures: string[], context: string): void {
+  for (const step of steps) {
+    for (const branch of step.branches ?? []) {
+      inspectSteps(branch, new Map(navigation), secondPageItems, failures, context);
+    }
+    for (const actor of actors(step)) {
+      if (step.do === 'fill' && step.testid === 'search-input') {
+        navigation.set(actor, { search: String(step.text), page: 1 });
+      } else if (step.do === 'click' && step.testid === 'search-next-page') {
+        navigation.set(actor, { search: '', page: 2 });
+      } else if (step.do === 'reload' || step.do === 'openClient') {
+        navigation.delete(actor);
+      } else if (step.do === 'freshClient') {
+        navigation.delete(`${actor}-fresh`);
+      }
+    }
+
+    const item = step.in?.testid === 'item-card'
+      ? step.in.contains
+      : (step.testid === 'item-card' ? step.contains : undefined);
+    if (item === undefined || !secondPageItems.has(item)) continue;
+    for (const actor of actors(step)) {
+      const state = navigation.get(actor);
+      const foundBySearch = state?.search !== undefined
+        && item.toLowerCase().includes(state.search.toLowerCase());
+      if (!foundBySearch && state?.page !== 2) failures.push(`${context}: ${actor} targets ${item}`);
+    }
+  }
+}
+
+test('selected scenarios navigate before using products outside the first catalog page', () => {
+  const fixture = compileFixtureDefinition(readJson(join(root, 'composition', 'fixtures',
+    'operations-1.0.0.json')));
+  const secondPageItems = new Set(fixture.items.map(item => item.name).sort().slice(10));
+  const failures: string[] = [];
+
+  for (const check of selectedChecks()) {
+    const scenario = compileScenarioDefinition(readJson(join(root, check.source)),
+      { source: check.source });
+    const feature = scenario.features.find(candidate => candidate.id === check.feature);
+    assert(feature, `${check.source} is missing feature ${check.feature}`);
+    const criteria = check.criteria === undefined
+      ? feature.criteria
+      : feature.criteria.filter(criterion => check.criteria?.includes(criterion.id) === true);
+    for (const criterion of criteria) {
+      const navigation = new Map<string, { search: string; page: number }>();
+      const context = `${check.source}#${feature.id}.${criterion.id}`;
+      inspectSteps(feature.setup, navigation, secondPageItems, failures, context);
+      inspectSteps(criterion.steps, navigation, secondPageItems, failures, context);
+    }
+  }
+
+  assert.deepEqual(failures, []);
+});
diff --git a/tools/stack-bench/tests/progression-postgres-reference.contract.ts b/tools/stack-bench/tests/progression-postgres-reference.contract.ts
new file mode 100644
index 00000000000..825880fd7d6
--- /dev/null
+++ b/tools/stack-bench/tests/progression-postgres-reference.contract.ts
@@ -0,0 +1,91 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+const root = join(STACK_BENCH_ROOT, 'reference-apps', 'ecommerce', 'postgres');
+const read = (...parts: string[]): string => readFileSync(join(root, ...parts), 'utf8');
+
+type PackageMetadata = {
+  scripts: Record<string, string>;
+  dependencies: Record<string, string>;
+  devDependencies: Record<string, string>;
+};
+
+const object = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+
+function stringMap(value: unknown, at: string): Record<string, string> {
+  if (!object(value)) throw new Error(`${at} must be an object`);
+  const entries: Record<string, string> = {};
+  for (const [key, entry] of Object.entries(value)) {
+    if (typeof entry !== 'string') throw new Error(`${at}.${key} must be a string`);
+    entries[key] = entry;
+  }
+  return entries;
+}
+
+function readPackage(...parts: string[]): PackageMetadata {
+  const value: unknown = JSON.parse(read(...parts));
+  if (!object(value)) throw new Error(`package ${parts.join('/')} must be an object`);
+  return { scripts: stringMap(value.scripts, 'package.scripts'),
+    dependencies: stringMap(value.dependencies, 'package.dependencies'),
+    devDependencies: stringMap(value.devDependencies, 'package.devDependencies') };
+}
+
+function required(map: Record<string, string>, key: string): string {
+  const value = map[key];
+  if (value === undefined) throw new Error(`package field ${key} is missing`);
+  return value;
+}
+
+test('PostgreSQL progression reference has local production builds', () => {
+  const server = readPackage('server', 'package.json');
+  const client = readPackage('client', 'package.json');
+  assert.equal(server.scripts.build, 'tsc --noEmit');
+  assert.equal(client.scripts.build, 'vite build');
+  assert.match(required(server.dependencies, 'drizzle-orm'), /0\.45\.[2-9]|0\.[5-9]\d|[1-9]\d*\./);
+  assert.equal(required(server.devDependencies, 'drizzle-kit'), '^0.31.10');
+  assert.match(read('server', 'drizzle.config.ts'), /schema: '\.\/src\/schema\.ts'/);
+  assert.match(required(client.devDependencies, 'vite'), /8\./);
+});
+
+test('PostgreSQL progression reference exposes required routes', () => {
+  const server = `${read('server', 'src', 'index.ts')}\n${read('server', 'src', 'progression.ts')}`;
+  for (const route of [
+    '/api/profile', '/api/staff/:id/role', '/api/catalog/products', '/api/support/cases',
+    '/api/promotions', '/api/cart/promotion', '/api/notifications/preferences',
+    '/api/items/:id/stock-alert', '/api/admin/scheduled-restocks', '/api/reorders/:itemId',
+    '/api/cart/recover/:id', '/api/recommendations/:itemId/dismiss',
+  ]) assert.match(server, new RegExp(route.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')));
+});
+
+test('PostgreSQL progression reference exposes stable application interfaces', () => {
+  const client = `${read('client', 'src', 'App.tsx')}\n${read('client', 'src', 'ProgressionPanel.tsx')}`;
+  for (const handle of [
+    'profile-save', 'staff-signin-submit', 'staff-role-save', 'catalog-save',
+    'support-submit', 'support-update', 'support-reply-submit', 'support-link-order', 'support-refund',
+    'promotion-submit', 'apply-promotion', 'notification-save', 'stock-alert',
+    'schedule-restock-submit', 'pending-restock-cancel', 'reorder-submit', 'restore-cart',
+    'dismiss-recommendation', 'completed-order-status', 'payment-record', 'promotion-report',
+    'category-filter', 'search-next-page', 'cart-reservation-timer', 'cart-expired-notice',
+  ]) assert.ok(client.includes(`data-role="${handle}"`), `missing ${handle}`);
+  for (const attribute of [
+    'data-restock-input', 'data-transfer-input', 'data-price-input', 'data-ship-input',
+    'data-cancel-input', 'data-action-input',
+  ]) assert.ok(client.includes(attribute), `missing ${attribute}`);
+});
+
+test('support order choices expose product names as separate actions', () => {
+  const client = read('client', 'src', 'ProgressionPanel.tsx');
+  assert.match(client, /orders\.map\(\(order\) => <button data-role="support-order-option"/);
+  assert.match(client, /order\.items\?\.map\(\(item\) => item\.name\)/);
+  assert.doesNotMatch(client, /<select data-role="support-order-option"/);
+});
+
+test('scheduled restocks expose the identifier used by access-control replay', () => {
+  const client = read('client', 'src', 'ProgressionPanel.tsx');
+  assert.match(client,
+    /data-role="pending-restock-item" data-entity-id=\{String\(item\.id\)\}/);
+});
diff --git a/tools/stack-bench/tests/progression-reference-audit.contract.ts b/tools/stack-bench/tests/progression-reference-audit.contract.ts
new file mode 100644
index 00000000000..5738386fe81
--- /dev/null
+++ b/tools/stack-bench/tests/progression-reference-audit.contract.ts
@@ -0,0 +1,199 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { loadTrack } from '../src/composition/tracks.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { createCheckEvidence } from '../src/evidence/check-evidence.js';
+import { emptyArtifactIdentities, writeArtifact } from '../src/evidence/artifacts.js';
+import { progressionEngine } from '../src/progression/progression-engine.js';
+import { gradeBundleToProgressionResult } from '../src/progression/grade-bundle-result.js';
+import { compileDependencyPolicyInput, compileFeatureCatalogInput,
+  compileProgressionDefinitionFile, compileProgressionInput, dependencyRuntimeDefinition }
+  from '../src/progression/progression-definition.js';
+import { auditProgressionReferenceRun }
+  from '../src/progression/progression-reference-audit.js';
+import { resolveProgressionRecipeAction }
+  from '../src/progression/progression-recipe-selection.js';
+import { writeProgressionState } from '../src/progression/progression-state.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+const owner = {
+  schemaVersion: 1,
+  campaign: { id: 'progression-reference', version: '1.0.0', sha256: 'e'.repeat(64) },
+  attempt: { id: 'progression-reference-mongodb-r1', track: 'ecommerce', stack: 'mongodb',
+    agentAdapter: 'reference-fixture', model: 'reference-fixture',
+    conditionSha256: 'f'.repeat(64) },
+  workspace: { appDirectory: 'source' },
+};
+
+const passedEvidence = () => createCheckEvidence({ status: 'passed', code: 'completed',
+  phase: 'assertion', startedAtMs: 1, completedAtMs: 2 });
+const setupEvidence = () => createCheckEvidence({ status: 'passed', code: 'completed',
+  phase: 'setup', startedAtMs: 1, completedAtMs: 2 });
+
+const track = loadTrack('ecommerce');
+const featureCatalog = compileFeatureCatalogInput(compileProgressionDefinitionFile(
+  join(STACK_BENCH_ROOT, 'tracks', 'ecommerce', 'progression', 'ecommerce-2.0.2.json'),
+  { trackRoot: track.dir },
+));
+const dependencyPolicy = compileDependencyPolicyInput(
+  { selection: 'feature', budget: { perFeature: 2 } }, featureCatalog);
+const progression = compileProgressionInput(dependencyRuntimeDefinition(
+  featureCatalog, dependencyPolicy));
+const recipeBindings = new Map([1, 2, 3, 4, 5, 6].map(level => [level,
+  resolveRecipeRelease(track, level, 'ecommerce.progression-catalog@2.0.2')]));
+const release = recipeBindings.get(6)!.release;
+
+interface ReferenceRunOptions {
+  attempts?: number;
+  tamperRecordedResult?: boolean;
+}
+
+function writeReferenceRun(root: string,
+  { attempts = Infinity, tamperRecordedResult = false }: ReferenceRunOptions = {}) {
+  const runArtifact = writeArtifact(join(root, 'run.json'), {
+    kind: 'benchmark_run',
+    id: 'reference-run',
+    attempt: { id: 'reference-run', parentId: owner.attempt.id },
+    identities: emptyArtifactIdentities({
+      agentAdapter: { id: owner.attempt.agentAdapter },
+      stackAdapter: { id: owner.attempt.stack },
+    }),
+    payload: {
+      track: owner.attempt.track,
+      backend: owner.attempt.stack,
+      model: owner.attempt.model,
+      condition: { sha256: owner.attempt.conditionSha256 },
+      featureCatalog: featureCatalog.identity,
+      dependencyPolicy: dependencyPolicy.identity,
+      progressionOwner: { schemaVersion: owner.schemaVersion,
+        campaign: owner.campaign, attempt: owner.attempt },
+    },
+  });
+  let state = progressionEngine.initialize(progression.definition);
+  let sequence = 0;
+  while (sequence < attempts) {
+    const action = progressionEngine.nextAction(state);
+    if (action.type === 'terminal') break;
+    sequence += 1;
+    const binding = recipeBindings.get(action.level);
+    if (!binding) throw new Error(`missing recipe binding for L${action.level}`);
+    const selected = resolveProgressionRecipeAction(binding, state);
+    if (!('grader' in selected)) throw new Error('expected active progression recipe work');
+    const checks = selected.grader.selection.scoredChecks;
+    const keys = checks.map(check => check.stableKey);
+    const max = checks.reduce((total, check) => total + check.points, 0);
+    const sourceSha256 = String(sequence).repeat(64);
+    const bundle = writeArtifact(join(root, 'progression',
+      `attempt-${String(sequence).padStart(3, '0')}`, 'bundle.json'), {
+      kind: 'grade_bundle',
+      id: `grade-${sequence}`,
+      attempt: { id: `grade-${sequence}`, parentId: runArtifact.id },
+      identities: emptyArtifactIdentities({
+        recipe: { id: release.id, version: release.version, sha256: release.contentSha256 },
+        stackAdapter: { id: owner.attempt.stack },
+      }),
+      payload: {
+        observation: 'scored',
+        source: { sha256: sourceSha256 },
+        selection: { sha256: selected.grader.selectionSha256, checks,
+          attemptedChecks: keys, reportedChecks: keys, notRun: [] },
+        totals: { score: max, max, regression: null },
+        suites: { application: { features: [{ id: sequence, setupEvidence: setupEvidence(),
+          criteria: checks.map(check => ({
+            stableKey: check.stableKey, points: check.points, evidence: passedEvidence(),
+          })) }] } },
+      },
+    });
+    let result = gradeBundleToProgressionResult(bundle, action, {
+      owner,
+      runArtifact,
+      featureCatalogIdentity: featureCatalog.identity,
+      dependencyPolicyIdentity: dependencyPolicy.identity,
+      selectionSha256: selected.grader.selectionSha256,
+      sourceSha256,
+      recipeIdentity: { id: release.id, version: release.version,
+        sha256: release.contentSha256 },
+      sequence,
+    });
+    if (tamperRecordedResult && sequence === 1) {
+      result = { ...result, selectionSha256: '9'.repeat(64) };
+    }
+    state = progressionEngine.recordResult(state, result);
+  }
+  writeProgressionState(join(root, 'progression-state.json'), {
+    progression,
+    featureCatalogIdentity: featureCatalog.identity,
+    dependencyPolicyIdentity: dependencyPolicy.identity,
+    owner,
+    state,
+    id: 'progression-state',
+  });
+  return { progression, featureCatalogIdentity: featureCatalog.identity,
+    dependencyPolicyIdentity: dependencyPolicy.identity, recipeBindings, release };
+}
+
+function audit(root: string, input: ReturnType<typeof writeReferenceRun>) {
+  return auditProgressionReferenceRun({ outputDir: root, owner, ...input });
+}
+
+test('progression reference audit replays every action and separates catalog coverage', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-progression-reference-audit-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const input = writeReferenceRun(root);
+  const report = audit(root, input);
+
+  assert.equal(report.ok, false);
+  assert.deepEqual(report.actions.map(action => [action.level, action.checks]),
+    [[1, 9], [2, 50], [3, 108], [4, 142], [5, 155], [6, 157]]);
+  assert.deepEqual(report.graphOwned, {
+    nodes: 43, checks: 157, points: 294,
+    coveredNodes: 43, coveredChecks: 157,
+    missingNodes: [], missingChecks: [], complete: true,
+  });
+  assert.equal(report.finalCatalogAudit.required, true);
+  assert.equal(report.finalCatalogAudit.status, 'not-run');
+  assert.equal(report.finalCatalogAudit.checks, 159);
+  assert.equal(report.finalCatalogAudit.points, 294);
+  assert.equal(report.finalCatalogAudit.zeroPointChecks, 2);
+  assert.equal(report.finalCatalogAudit.checkKeys.length, 159);
+  assert.equal(report.finalCatalogAudit.additionalChecks.length, 2);
+});
+
+test('progression reference audit rejects a changed saved grade bundle', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-progression-reference-tamper-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const input = writeReferenceRun(root);
+  const path = join(root, 'progression', 'attempt-002', 'bundle.json');
+  const bundle = JSON.parse(readFileSync(path, 'utf8'));
+  bundle.payload.selection.sha256 = '8'.repeat(64);
+  writeFileSync(path, `${JSON.stringify(bundle, null, 2)}\n`);
+
+  assert.throws(() => audit(root, input), /selection identity does not match/);
+});
+
+test('progression reference audit rejects a recorded result that differs from evidence', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-progression-reference-result-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const input = writeReferenceRun(root, { tamperRecordedResult: true });
+
+  assert.throws(() => audit(root, input), /recorded result differs/);
+});
+
+test('progression reference audit reports incomplete graph coverage without hiding catalog scope', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-progression-reference-partial-'));
+  t.after(() => rmSync(root, { recursive: true, force: true }));
+  const input = writeReferenceRun(root, { attempts: 1 });
+  const report = audit(root, input);
+
+  assert.equal(report.ok, false);
+  assert.equal(report.actions.length, 1);
+  assert.equal(report.graphOwned.coveredNodes, 4);
+  assert.equal(report.graphOwned.coveredChecks, 9);
+  assert.equal(report.graphOwned.complete, false);
+  assert.equal(report.finalCatalogAudit.checks, 159);
+  assert.equal(report.finalCatalogAudit.status, 'not-run');
+});
diff --git a/tools/stack-bench/tests/progression-reference-campaign-audit.contract.ts b/tools/stack-bench/tests/progression-reference-campaign-audit.contract.ts
new file mode 100644
index 00000000000..f7abd6d2235
--- /dev/null
+++ b/tools/stack-bench/tests/progression-reference-campaign-audit.contract.ts
@@ -0,0 +1,109 @@
+import assert from 'node:assert/strict';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { compileCampaignFile } from '../src/campaigns/campaign-compiler.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { auditProgressionReferenceCampaign, formatProgressionReferenceCampaignAudit }
+  from '../src/campaigns/progression-reference-campaign-audit.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+const campaignPath = join(STACK_BENCH_ROOT, 'appliance',
+  'campaign.ecommerce-progression-reference.json');
+const plan = compileCampaignFile(campaignPath);
+
+function completedCampaign() {
+  const state = { status: 'completed', attempts: plan.attempts.map(attempt => ({
+    plan: attempt,
+    status: 'completed',
+    executions: [{
+      id: `${attempt.id}-execution1`,
+      output: `attempts/${attempt.id}/execution-1`,
+    }],
+  })) };
+  return { plan, state, paths: { root: join(STACK_BENCH_ROOT, 'tests', 'fixtures', 'campaign-audit') } };
+}
+
+const passingAudit = {
+  ok: false,
+  graphOwned: {
+    nodes: 43,
+    checks: 146,
+    points: 281,
+    coveredNodes: 43,
+    coveredChecks: 146,
+    missingNodes: [],
+    missingChecks: [],
+    complete: true,
+  },
+  finalCatalogAudit: {
+    status: 'not-run',
+    checks: 148,
+    points: 281,
+    zeroPointChecks: 2,
+    additionalChecks: [
+      { stableKey: 'ecommerce.spec.external-data-sync.external-stock.901b', points: 0 },
+      { stableKey: 'ecommerce.spec.concurrency-safety.restock-race.202-control', points: 0 },
+    ],
+  },
+};
+
+test('completed reference campaigns audit exact owners and recipe bindings', () => {
+  const campaign = completedCampaign();
+  const calls = [];
+  const report = auditProgressionReferenceCampaign(campaign.paths.root, {
+    readState: () => campaign,
+    auditRun: input => {
+      calls.push(input);
+      const expected = plan.attempts.find(attempt => attempt.id === input.owner.attempt.id);
+      assert(expected);
+      assert.deepEqual(input.owner, {
+        schemaVersion: 1,
+        campaign: { id: plan.id, version: plan.version, sha256: plan.contentSha256 },
+        attempt: {
+          id: expected.id,
+          track: plan.definition.track,
+          stack: expected.stack,
+          agentAdapter: expected.agentAdapter,
+          model: expected.model,
+          conditionSha256: expected.condition.sha256,
+        },
+        workspace: { appDirectory: 'source' },
+      });
+      assert.deepEqual([...input.recipeBindings.keys()], [1, 2, 3, 4, 5, 6]);
+      assert.equal(input.release.id, 'ecommerce.progression-catalog');
+      assert.equal(input.release.version, '2.0.2');
+      return structuredClone(passingAudit);
+    },
+  });
+
+  assert(report);
+  assert.equal(calls.length, 3);
+  assert.equal(report.ok, false);
+  assert.deepEqual(report.attempts.map(attempt => attempt.stack).sort(),
+    ['mongodb', 'postgres', 'spacetime']);
+  const first = report.attempts[0];
+  assert(first);
+  assert.deepEqual(first.progressionGraph.checks, { covered: 146, total: 146 });
+  assert.equal(first.fullRecipeCatalog.status, 'not-run');
+  assert.equal(first.fullRecipeCatalog.outsideGraph.length, 2);
+  assert.match(formatProgressionReferenceCampaignAudit(report),
+    /Reference progression audit: INCOMPLETE/);
+  assert.match(formatProgressionReferenceCampaignAudit(report),
+    /graph 43\/43 nodes, 146\/146 checks, 281 points; full recipe catalog not-run, 148 checks, 281 points, 2 outside the graph/);
+});
+
+test('reference campaign audit rejects a recipe that changed after planning', () => {
+  const campaign = completedCampaign();
+  assert.throws(() => auditProgressionReferenceCampaign(campaign.paths.root, {
+    readState: () => campaign,
+    auditRun: () => { throw new Error('audit must not run'); },
+    resolveRelease: (selectedTrack, level, reference) => {
+      const binding = resolveRecipeRelease(selectedTrack, level, reference);
+      const planned = plan.bindings.find(item => item.level === level);
+      assert(planned);
+      return { ...binding, release: { ...binding.release,
+        contentSha256: level === 3 ? 'a'.repeat(64) : planned.recipe.contentSha256 } };
+    },
+  }), /recipe binding for L3 changed after planning/);
+});
diff --git a/tools/stack-bench/tests/progression-spacetime-policy.contract.ts b/tools/stack-bench/tests/progression-spacetime-policy.contract.ts
new file mode 100644
index 00000000000..b53ed982d1e
--- /dev/null
+++ b/tools/stack-bench/tests/progression-spacetime-policy.contract.ts
@@ -0,0 +1,47 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import {
+  hasPendingRestockForRule,
+  isTicketCreator,
+  planStockAllocation,
+} from '../reference-apps/ecommerce/spacetime/backend/spacetimedb/src/progression-policy.js';
+
+const appRoot = join(STACK_BENCH_ROOT, 'reference-apps', 'ecommerce', 'spacetime');
+const read = (path: string) => readFileSync(path, 'utf8');
+
+test('cart reservations can span warehouses without over-allocating stock', () => {
+  const allocation = planStockAllocation([
+    { warehouseId: 1n, quantity: 2 },
+    { warehouseId: 2n, quantity: 3 },
+  ], 4);
+
+  assert.deepEqual(allocation, [
+    { warehouseId: 1n, quantity: 2 },
+    { warehouseId: 2n, quantity: 2 },
+  ]);
+  assert.equal(planStockAllocation([{ warehouseId: 1n, quantity: 2 }], 3), null);
+});
+
+test('support ticket visibility follows the submitting SpacetimeDB identity', () => {
+  assert.equal(isTicketCreator('visitor-a', 'visitor-a'), true);
+  assert.equal(isTicketCreator('visitor-b', 'visitor-a'), false);
+
+  const schema = read(join(appRoot, 'backend', 'spacetimedb', 'src', 'schema.ts'));
+  const backend = read(join(appRoot, 'backend', 'spacetimedb', 'src', 'index.ts'));
+  const client = read(join(appRoot, 'client', 'src', 'components', 'ProgressionWorkbench.tsx'));
+  assert.match(schema, /creatorIdentity:\s*t\.identity\(\)/);
+  assert.match(backend, /creatorIdentity:\s*ctx\.sender/);
+  assert.match(backend, /isTicketCreator\(sender, row\.creatorIdentity\.toHexString\(\)\)/);
+  assert.match(client, /supportTickets[\s\S]+?\.reference \?\? ''/);
+  assert.doesNotMatch(client, /Ticket submitted:/);
+});
+
+test('automatic restock suppression is scoped to one rule', () => {
+  const pending = [{ reorderRuleId: 7n, status: 'pending' }];
+  assert.equal(hasPendingRestockForRule(pending, 7n), true);
+  assert.equal(hasPendingRestockForRule(pending, 8n), false);
+});
diff --git a/tools/stack-bench/tests/progression-spacetime-reference.contract.ts b/tools/stack-bench/tests/progression-spacetime-reference.contract.ts
new file mode 100644
index 00000000000..8834f3da4d3
--- /dev/null
+++ b/tools/stack-bench/tests/progression-spacetime-reference.contract.ts
@@ -0,0 +1,196 @@
+import assert from 'node:assert/strict';
+import { readFileSync, readdirSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compilePackDefinition } from '../src/composition/composition-compiler.js';
+import { compileProgressionDefinitionFile }
+  from '../src/progression/progression-definition.js';
+
+const root = STACK_BENCH_ROOT;
+const appRoot = join(root, 'reference-apps', 'ecommerce', 'spacetime');
+const trackRoot = join(root, 'tracks', 'ecommerce');
+const read = (path: string): string => readFileSync(path, 'utf8');
+const readJson = (path: string): unknown => JSON.parse(read(path));
+
+function filesBelow(directory: string): string[] {
+  return readdirSync(directory, { withFileTypes: true }).flatMap(entry => {
+    const path = join(directory, entry.name);
+    return entry.isDirectory() ? filesBelow(path) : [path];
+  });
+}
+
+interface ScenarioInterface {
+  roles: Set<string>;
+  attributes: Set<string>;
+}
+
+function collectScenarioInterface(value: unknown, interfaceNames: ScenarioInterface): void {
+  if (Array.isArray(value)) {
+    for (const entry of value) collectScenarioInterface(entry, interfaceNames);
+    return;
+  }
+  if (!isRecord(value)) return;
+  if (typeof value.testid === 'string') interfaceNames.roles.add(value.testid);
+  if (typeof value.attribute === 'string' && value.attribute.startsWith('data-')) {
+    interfaceNames.attributes.add(value.attribute);
+  }
+  for (const entry of Object.values(value)) collectScenarioInterface(entry, interfaceNames);
+}
+
+const backendMarkers: Record<string, string> = {
+  accounts: 'export const signUp',
+  catalog: 'export const item = table',
+  'catalog-discovery': 'export const catalogDetails',
+  'customer-profile': 'export const saveProfile',
+  purchasing: 'export const buyNow',
+  cart: 'export const addToCart',
+  checkout: 'export const checkout',
+  'warehouse-admin': 'export const adminRestock',
+  reviews: 'export const writeReview',
+  'fulfilment-queue': 'export const shipOrder',
+  'stock-transfers': 'export const adminTransferStock',
+  'order-cancellation': 'export const cancelOrder',
+  'price-history': 'export const adminChangePrice',
+  'inventory-dashboard': 'export const itemStats = table',
+  'sales-dashboard': 'export const categoryTotals',
+  recommendations: 'export const recommended',
+  reservations: 'export const reservation = table',
+  'order-delivery': 'export const deliverySchedule = table',
+  'order-returns': 'export const returnOrderItem',
+  'scheduled-restocks': 'export const scheduleRestock',
+  'cart-expiration': 'export const cartExpiry = table',
+  'staff-access': 'export const signIn',
+  'staff-roles': 'export const assignStaffRole',
+  'catalog-management': 'export const addCatalogProduct',
+  'support-intake': 'export const createSupportTicket',
+  'support-triage': 'export const triageSupport',
+  'support-history': 'export const visibleSupportTickets',
+  'promotion-rules': 'export const createPromotion',
+  'notification-preferences': 'export const saveNotificationPreferences',
+  'faceted-search': 'export const itemCategory = table',
+  'payment-records': 'export const paymentRecord = table',
+  'managed-support': 'export const replySupport',
+  'promotion-checkout': 'export const applyPromotion',
+  'stock-alerts': 'export const requestStockAlert',
+  'personalized-recommendations': 'export const recommended',
+  'staff-activity': 'export const activityHistory',
+  'order-support': 'export const linkSupportOrder',
+  'promotion-reporting': 'export const promotionReports',
+  'automatic-reorder': 'export const saveReorderRule',
+  'cart-recovery': 'export const restoreExpiredCart',
+  'delivery-notifications': 'export const myNotifications',
+  'recommendation-feedback': 'export const dismissRecommendation',
+  'support-refunds': 'export const supportRefund',
+};
+
+test('the SpacetimeDB progression backend covers every graph feature', () => {
+  const graph = progressionGraph();
+  assert.deepEqual(Object.keys(backendMarkers).sort(), graph.nodes.map(node => node.id).sort());
+  const source = `${read(join(appRoot, 'backend', 'spacetimedb', 'src', 'schema.ts'))}\n`
+    + read(join(appRoot, 'backend', 'spacetimedb', 'src', 'index.ts'));
+  for (const node of graph.nodes) {
+    const marker = backendMarkers[node.id];
+    assert(marker, `${node.id} must have an implementation marker`);
+    assert(source.includes(marker),
+      `${node.id} must have a SpacetimeDB implementation marker`);
+  }
+});
+
+test('the progression candidate retains the maintained SpacetimeDB build layout', () => {
+  const reference = referenceLayout(readJson(join(appRoot, 'reference.json')));
+  assert.equal(reference.kind, 'spacetime');
+  assert.equal(reference.moduleDirectory, 'backend/spacetimedb');
+  assert.equal(reference.bindingsDirectory, 'client/src/module_bindings');
+  assert.deepEqual(reference.installDirectories, ['backend/spacetimedb', 'client']);
+});
+
+test('the client implements every graph feature interface', () => {
+  const graph = progressionGraph();
+  const catalogPath = join(trackRoot, 'composition', 'recipes', 'progression-catalog-2.0.2.json');
+  const packs = recipePackPaths(readJson(catalogPath), catalogPath);
+  const interfaceNames: ScenarioInterface = { roles: new Set<string>(), attributes: new Set<string>() };
+
+  for (const node of graph.nodes) {
+    for (const featureRef of node.featureRefs) {
+      const packPath = packs.get(featureRef);
+      assert(packPath, `catalog must resolve ${featureRef}`);
+      const pack = compilePackDefinition(readJson(packPath), { source: packPath });
+      for (const check of pack.checks) {
+        const scenarioPath = resolve(dirname(packPath), '..', '..', check.source);
+        collectScenarioInterface(readJson(scenarioPath), interfaceNames);
+      }
+    }
+  }
+
+  const clientSource = filesBelow(join(appRoot, 'client', 'src'))
+    .filter(path => /\.(tsx|ts)$/.test(path) && !path.includes('module_bindings'))
+    .map(read)
+    .join('\n');
+  for (const role of interfaceNames.roles) {
+    assert(clientSource.includes(`data-role="${role}"`), `client must expose ${role}`);
+  }
+  for (const attribute of interfaceNames.attributes) {
+    assert(clientSource.includes(`${attribute}=`), `client must expose ${attribute}`);
+  }
+});
+
+function progressionGraph() {
+  return compileProgressionDefinitionFile(join(trackRoot, 'progression', 'ecommerce-2.0.2.json'), {
+    trackRoot,
+  });
+}
+
+interface ReferenceLayout {
+  kind: string;
+  moduleDirectory: string;
+  bindingsDirectory: string;
+  installDirectories: string[];
+}
+
+function referenceLayout(value: unknown): ReferenceLayout {
+  if (!isRecord(value) || typeof value.kind !== 'string'
+    || typeof value.moduleDirectory !== 'string' || typeof value.bindingsDirectory !== 'string'
+    || !stringArray(value.installDirectories)) {
+    throw new Error('reference layout is not valid');
+  }
+  return {
+    kind: value.kind,
+    moduleDirectory: value.moduleDirectory,
+    bindingsDirectory: value.bindingsDirectory,
+    installDirectories: value.installDirectories,
+  };
+}
+
+function recipePackPaths(value: unknown, catalogPath: string): Map<string, string> {
+  if (!isRecord(value) || !Array.isArray(value.packs)) {
+    throw new Error('progression catalog must have packs');
+  }
+  const packs = new Map<string, string>();
+  for (const entry of value.packs) {
+    if (!isRecord(entry) || typeof entry.id !== 'string' || typeof entry.version !== 'string'
+      || typeof entry.path !== 'string') {
+      throw new Error('progression catalog pack is not valid');
+    }
+    packs.set(`${entry.id}@${entry.version}`, resolve(dirname(catalogPath), entry.path));
+  }
+  return packs;
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function stringArray(value: unknown): value is string[] {
+  return Array.isArray(value) && value.every(item => typeof item === 'string');
+}
+
+test('direct action handles carry scenario-owned values before form interaction', () => {
+  const source = read(join(appRoot, 'client', 'src', 'components', 'AdminPanel.tsx'));
+  assert.match(source, /item\.name === 'Gaming Mouse'[\s\S]*price: 1/);
+  assert.match(source, /warehouse\.name === 'East'/);
+  assert.match(source, /warehouse\.name === 'West'/);
+  assert.match(source, /item\.name === 'Headphones'[\s\S]*quantity: 25/);
+  assert.doesNotMatch(source, /fromWarehouseId: Number\(transfer\.from \|\| 0\)/);
+});
diff --git a/tools/stack-bench/tests/progression-state.test.ts b/tools/stack-bench/tests/progression-state.test.ts
new file mode 100644
index 00000000000..facf2128dae
--- /dev/null
+++ b/tools/stack-bench/tests/progression-state.test.ts
@@ -0,0 +1,154 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { progressionEngine } from '../src/progression/progression-engine.js';
+import { canonicalDefinitionJson } from '../src/composition/definition-plan.js';
+import { sha256 } from '../src/evidence/provenance.js';
+import { compileProgressionInput } from '../src/progression/progression-definition.js';
+import { grantProgressionState, readProgressionState, writeProgressionState }
+  from '../src/progression/progression-state.js';
+import { hashAppSource } from '../src/runtime/source-snapshot.js';
+
+interface TestState extends Record<string, unknown> {
+  phase: string;
+  events: Array<{ type: string; result: { attemptId: string } }>;
+  nodes: Record<string, { status: string; repairs: { used: number } }>;
+}
+
+interface TestProgressionEngine {
+  initialize(definition: unknown): TestState;
+  recordResult(state: TestState, result: unknown): TestState;
+  nextAction(state: TestState): unknown;
+}
+
+const engine = progressionEngine as unknown as TestProgressionEngine;
+
+const progression = () => compileProgressionInput({
+  schemaVersion: 7,
+  kind: 'progression-mode',
+  id: 'persisted-runner',
+  version: '1.0.0',
+  state: 'draft',
+  title: 'Persisted runner',
+  policy: 'dependency-graph',
+  repair: { selection: 'feature', budget: { total: 0 } },
+  unchangedFailureLimit: 3,
+  workSelection: 'progressive',
+  nodes: [{ id: 'account', title: 'Account', questline: 'identity', dependencies: [],
+    featureRefs: ['feature.account@1.0.0'], promptModules: [],
+    gradingChecks: [{ id: 'check.account', points: 1, role: 'feature' }] }],
+  questlines: [{ id: 'identity', title: 'Identity', nodes: ['account'] }],
+});
+const stateIdentities = Object.freeze({
+  featureCatalogIdentity: { id: 'persisted-runner', version: '1.0.0',
+    sha256: 'c'.repeat(64), state: 'draft' },
+  dependencyPolicyIdentity: { id: 'dependency-graph', version: '4.3.0',
+    sha256: 'd'.repeat(64) },
+});
+const owner = () => ({ schemaVersion: 1,
+  campaign: { id: 'campaign', version: '1.0.0', sha256: 'a'.repeat(64) },
+  attempt: { id: 'campaign-r1', track: 'ecommerce', stack: 'postgres',
+    agentAdapter: 'claude-code', model: 'test-model', conditionSha256: 'b'.repeat(64) },
+  workspace: { appDirectory: 'app' } });
+
+const grade = (attemptId: string, outcome: string, sourceSha256?: string) =>
+  ({ attemptId, outcome: 'conclusive',
+  ...(sourceSha256 ? { sourceSha256 } : {}),
+  nodes: [{ id: 'account', checks: [{ id: 'check.account', outcome }] }] });
+
+test('progression state stores one replay-verified event log', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-progression-state-'));
+  const path = join(root, 'state.json');
+  try {
+    const input = progression();
+    let state = engine.initialize(input.definition);
+    state = engine.recordResult(state, grade('first', 'fail'));
+    const scope = owner();
+    const written = writeProgressionState(path, { progression: input, ...stateIdentities,
+      owner: scope, state });
+    assert.equal(written.artifact.payload.events.length, 1);
+    assert.equal(written.artifact.payload.snapshot, undefined);
+    assert.match(written.stateSha256, /^[a-f0-9]{64}$/);
+    assert.deepEqual(readProgressionState(path, { progression: input, ...stateIdentities,
+      owner: scope }).state, state);
+    const wrongOwner = owner();
+    wrongOwner.attempt.id = 'campaign-r2';
+    assert.throws(() => readProgressionState(path, { progression: input, ...stateIdentities,
+      owner: wrongOwner }),
+      /wrong campaign attempt owner/);
+
+    const contradictory = structuredClone(state);
+    contradictory.nodes.account!.status = 'active';
+    assert.throws(() => writeProgressionState(path, { progression: input, ...stateIdentities,
+      owner: scope, state: contradictory }), /contradicts its event history/);
+
+    const changed = JSON.parse(readFileSync(path, 'utf8'));
+    changed.payload.events[0].sequence = 2;
+    writeFileSync(path, JSON.stringify(changed));
+    assert.throws(() => readProgressionState(path, { progression: input, ...stateIdentities,
+      owner: scope }),
+      /state identity does not match/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('continuation grants keep the current accepted source and dispatch through the mode engine', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-progression-grant-'));
+  const path = join(root, 'state.json');
+  try {
+    const input = progression();
+    const scope = owner();
+    const app = join(root, 'app');
+    mkdirSync(app);
+    writeFileSync(join(app, 'app.js'), 'export const version = 3;\n');
+    const sourceSha256 = hashAppSource(app).sha256;
+    let state = engine.initialize(input.definition);
+    state = engine.recordResult(state, { ...grade('failed', 'fail', sourceSha256),
+      runId: 'run-1', selectionSha256: 'c'.repeat(64) });
+    const resume = { actionSha256: sha256(canonicalDefinitionJson(engine.nextAction(state))), source: {
+      directory: 'app', sha256: sourceSha256, files: hashAppSource(app).files.length,
+    } };
+    const terminal = writeProgressionState(path, { progression: input, ...stateIdentities,
+      owner: scope, state, resume });
+
+    writeFileSync(join(app, 'app.js'), 'export const version = 4;\n');
+    assert.throws(() => grantProgressionState(path, { progression: input, ...stateIdentities,
+      owner: scope,
+      expectedStateSha256: terminal.stateSha256,
+      grant: { grantId: 'wrong-source', level: 1, nodeIds: ['account'], repairs: 2 } }),
+    /current accepted source does not match/);
+    assert.equal(readProgressionState(path, { progression: input, ...stateIdentities,
+      owner: scope }).stateSha256,
+      terminal.stateSha256);
+
+    writeFileSync(join(app, 'app.js'), 'export const version = 3;\n');
+    const granted = grantProgressionState(path, { progression: input, ...stateIdentities,
+      owner: scope,
+      expectedStateSha256: terminal.stateSha256,
+      grant: { grantId: 'grant-1', level: 1, nodeIds: ['account'], repairs: 2 } });
+    assert.equal(granted.state.phase, 'active');
+    const grantedState = granted.state as unknown as TestState;
+    const grantedResume = granted.resume as {
+      source: { directory: string; sha256: string };
+      actionSha256: string;
+    };
+    assert.equal(grantedState.nodes.account!.repairs.used, 0);
+    assert.deepEqual(grantedState.events.map(event => event.type),
+      ['attempt-recorded', 'repairs-granted']);
+    assert.equal(grantedResume.source.directory, 'app');
+    assert.equal(grantedResume.source.sha256, sourceSha256);
+    assert.match(grantedResume.actionSha256, /^[a-f0-9]{64}$/);
+    assert.equal(readFileSync(join(app, 'app.js'), 'utf8'), 'export const version = 3;\n');
+    assert.throws(() => grantProgressionState(path, { progression: input, ...stateIdentities,
+      owner: scope,
+      expectedStateSha256: terminal.stateSha256,
+      grant: { grantId: 'grant-2', level: 1, nodeIds: ['account'], repairs: 1 } }),
+    /state changed/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/progression-survivor-regressions.mutation.ts b/tools/stack-bench/tests/progression-survivor-regressions.mutation.ts
new file mode 100644
index 00000000000..1761ac4b9cd
--- /dev/null
+++ b/tools/stack-bench/tests/progression-survivor-regressions.mutation.ts
@@ -0,0 +1,203 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compileScenarioDefinition, type CompiledCriterion }
+  from '../src/composition/definition-compiler.js';
+import { readMutationManifest, type LoadedMutationDefinition }
+  from '../src/evidence/mutation-analysis.js';
+
+const ROOT = STACK_BENCH_ROOT;
+const readJson = (...parts: string[]): unknown =>
+  JSON.parse(readFileSync(join(ROOT, ...parts), 'utf8'));
+
+function postgresMutationSource(id: string, file: string): string {
+  const manifest = mutationManifest('postgres-ecommerce-2.0.1.json');
+  const mutation = manifest.mutations.find(candidate => candidate.id === id);
+  assert(mutation, `missing PostgreSQL mutation ${id}`);
+  let source = readFileSync(join(ROOT, 'reference-apps', 'ecommerce',
+    'postgres', ...file.split('/')), 'utf8');
+  for (const edit of mutation.edits.filter(candidate => (candidate.file ?? mutation.file) === file)) {
+    assert.equal(source.split(edit.find).length - 1, 1, `${id} anchor must match once`);
+    source = source.replace(edit.find, edit.replace);
+  }
+  return source;
+}
+
+function criterion(source: unknown, id: string): CompiledCriterion {
+  const scenario = compileScenarioDefinition(source);
+  const selected = scenario.features.flatMap(feature => feature.criteria)
+    .find(candidate => candidate.id === id);
+  assert(selected, `scenario must contain criterion ${id}`);
+  return selected;
+}
+
+test('scheduled-restock access targets the live restock through the named action', () => {
+  const scenario = readJson('tracks', 'ecommerce', 'scenarios', '03-deferred-access-1.0.0.json');
+  const compiled = compileScenarioDefinition(scenario);
+  const feature = compiled.features[0];
+  assert(feature, 'the deferred access scenario must contain a feature');
+  assert.equal(feature.setup.some(step => step.do === 'click'
+    && step.testid === 'pending-restock-cancel'), false,
+  'setup must not leave an earlier DELETE for replayAs to select');
+
+  const replay = criterion(scenario, '317a').steps.find(step => step.do === 'replayAs');
+  assert(replay, 'criterion 317a must contain a replay action');
+  assert(isRecord(replay.namedAction), 'the replay action must name its target action');
+  assert.equal(replay.namedAction.id, 'cancelScheduledRestock');
+  assert.deepEqual(replay.namedTarget, {
+    testid: 'pending-restock-item',
+    contains: 'Webcam',
+    attribute: 'data-entity-id',
+    valueType: 'string',
+  });
+});
+
+test('stock-alert uniqueness waits for the second restock update before counting', () => {
+  const scenario = readJson('tracks', 'ecommerce', 'scenarios',
+    'progression-stock-alerts-1.0.0.json');
+  const steps = criterion(scenario, '631a').steps;
+  const secondRestock = steps.filter(step => step.do === 'click'
+    && step.testid === 'restock-submit')[0];
+  const finalCount = steps.at(-1);
+
+  assert(secondRestock, 'criterion 631a must contain a second restock');
+  assert(typeof secondRestock.settleMs === 'number');
+  assert(secondRestock.settleMs >= 1000);
+  assert(finalCount, 'criterion 631a must end with a count check');
+  assert.equal(finalCount.do, 'expectElementCount');
+  assert.equal(finalCount.equals, 1);
+});
+
+test('the duplicate-payment mutation remains visible through the payment view', () => {
+  const scenario = readJson('tracks', 'ecommerce', 'scenarios',
+    'progression-core-business-1.0.0.json');
+  const compiled = compileScenarioDefinition(scenario);
+  const feature = compiled.features.find(candidate => candidate.id === 623);
+  assert(feature, 'the core business scenario must contain feature 623');
+  const concurrentCall = feature.setup.at(-3);
+  const callOutcome = feature.setup.at(-2);
+  const ordersToggle = feature.setup.at(-1);
+  assert(concurrentCall && callOutcome && ordersToggle, 'feature 623 must contain its setup');
+  assert.equal(concurrentCall.do, 'callConcurrently');
+  assert.equal(callOutcome.do, 'expectCallOutcomes');
+  assert.equal(ordersToggle.testid, 'orders-toggle');
+  assert.equal(criterion(scenario, '623a').steps.some(step => step.do === 'callConcurrently'), false);
+  assert.equal(criterion(scenario, '623b').steps.some(step => step.do === 'callConcurrently'), false);
+
+  const manifest = mutationManifest('spacetime-ecommerce-2.0.1.json');
+  const mutation = manifest.mutations.find(candidate =>
+    candidate.id === 'checkout-records-duplicate-payments');
+  assert(mutation);
+  const edit = mutation.edits[0];
+  assert(edit, 'the duplicate-payment mutation must contain an edit');
+  assert.match(edit.replace,
+    /amount: order\.total \+ 0\.01, status: 'paid'/);
+});
+
+test('cart expiration waits for the durable expiration state after restart', () => {
+  const scenario = readJson('tracks', 'ecommerce', 'scenarios',
+    '03-deferred-durability-1.0.0.json');
+  const steps = criterion(scenario, '316a').steps;
+  const [reload, cartToggle, cartCount, expiredNotice, itemStock] = steps;
+  assert(reload && cartToggle && cartCount && expiredNotice && itemStock,
+    'criterion 316a must contain all durable expiration checks');
+  assert.equal(reload.do, 'reload');
+  assert.equal(cartToggle.testid, 'cart-toggle');
+  assert.equal(cartCount.testid, 'cart-count');
+  assert.equal(cartCount.within, 220000);
+  assert.equal(expiredNotice.testid, 'cart-expired-notice');
+  assert.equal(itemStock.testid, 'item-stock');
+});
+
+test('PostgreSQL cart live-update mutation changes the route used by the owned check', () => {
+  const source = postgresMutationSource('progression-cart-update-uses-wrong-room',
+    'server/src/index.ts');
+  assert.match(source, /await reserveCartItem\(accountId, itemId, qty\);[\s\S]*?io\.to\(`account:\$\{accountId\}:mutation`\)\.emit\("cart:update", state\);/);
+});
+
+test('PostgreSQL catalog mutations isolate product name and variant failures', () => {
+  const nameSource = postgresMutationSource('progression-catalog-product-name-is-not-published',
+    'client/src/App.tsx');
+  assert.match(nameSource, /item\.name === "Travel Mug" \? "" : item\.name/);
+  assert.match(nameSource, /item\.variants\?\.map/);
+
+  const variantsSource = postgresMutationSource('progression-catalog-variants-are-discarded',
+    'server/src/progression.ts');
+  assert.match(variantsSource, /\[name, category, price\.toFixed\(2\), \[\]\]/);
+});
+
+test('concurrent cart quantity mutations do not change checkout state', () => {
+  const postgres = requiredMutation(mutationManifest('postgres-ecommerce-2.0.1.json')
+    .mutations.find(candidate => candidate.id === 'progression-concurrent-cart-line-does-not-increment'),
+  'progression-concurrent-cart-line-does-not-increment');
+  assert.equal(postgres.file, 'client/src/App.tsx');
+  const postgresEdit = postgres.edits[0];
+  assert(postgresEdit, 'the PostgreSQL cart mutation must contain an edit');
+  assert.equal(postgresEdit.replace.trim(), 'value={1}');
+
+  const spacetime = requiredMutation(mutationManifest('spacetime-ecommerce-2.0.1.json')
+    .mutations.find(candidate => candidate.id === 'existing-cart-line-does-not-increment'),
+  'existing-cart-line-does-not-increment');
+  assert.equal(spacetime.file, 'client/src/components/CartPanel.tsx');
+  const spacetimeEdit = spacetime.edits[0];
+  assert(spacetimeEdit, 'the SpacetimeDB cart mutation must contain an edit');
+  assert.equal(spacetimeEdit.replace.trim(), 'value={1}');
+});
+
+test('staff role check reloads the saved value on each progression reference', () => {
+  const scenario = readJson('tracks', 'ecommerce', 'scenarios',
+    'progression-staff-roles-1.0.0.json');
+  const steps = criterion(scenario, '621a').steps;
+  const reload = steps.at(-4);
+  const savedRole = steps.at(-1);
+  assert(reload && savedRole, 'criterion 621a must reload and check the saved role');
+  assert.equal(reload.do, 'reload');
+  assert.deepEqual(savedRole, {
+    do: 'expect', actor: 'admin', testid: 'staff-role-select',
+    in: { testid: 'staff-role-row', contains: 'staff' },
+    value: 'inventory', within: 10000,
+  });
+
+  const mongoPanel = readFileSync(join(ROOT, 'reference-apps', 'ecommerce',
+    'mongodb', 'client', 'src', 'ProgressionPanel.tsx'), 'utf8');
+  assert.match(mongoPanel, /roles\[entry\.username\] \?\? entry\.roles\?\.join\(", "\) \?\? ""/);
+
+  const postgresPanel = readFileSync(join(ROOT, 'reference-apps', 'ecommerce',
+    'postgres', 'client', 'src', 'ProgressionPanel.tsx'), 'utf8');
+  assert.match(postgresPanel, /defaultValue=\{role\.role\}/);
+
+  const spacetimePanel = readFileSync(join(ROOT, 'reference-apps', 'ecommerce',
+    'spacetime', 'client', 'src', 'components', 'ProgressionWorkbench.tsx'), 'utf8');
+  assert.match(spacetimePanel, /defaultValue=\{row\.role\}/);
+
+  const source = postgresMutationSource('progression-staff-role-update-is-disabled',
+    'server/src/progression.ts');
+  assert.doesNotMatch(source, /app\.put\("\/api\/staff\/:id\/role",/);
+  assert.match(source, /app\.put\("\/api\/mutation-disabled-staff\/:id\/role",/);
+});
+
+test('PostgreSQL reservation mutation remains valid SQL and changes only stock reduction', () => {
+  const source = postgresMutationSource('progression-reservation-does-not-reduce-stock',
+    'server/src/progression.ts');
+  assert.match(source,
+    /UPDATE stock SET quantity = quantity \+ \(\$1 \* 0\) WHERE item_id = \$2 AND warehouse_id = \$3`,[\s\S]*?\[take, itemId, row\.warehouse_id\]/);
+});
+
+function mutationManifest(name: string) {
+  return readMutationManifest(join(ROOT, 'grader', 'mutations', name));
+}
+
+function requiredMutation(
+  mutation: LoadedMutationDefinition | undefined,
+  id: string,
+): LoadedMutationDefinition {
+  if (!mutation) throw new Error(`mutation ${id} is required`);
+  return mutation;
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
diff --git a/tools/stack-bench/tests/progression.mutation.ts b/tools/stack-bench/tests/progression.mutation.ts
new file mode 100644
index 00000000000..1dc0a0696b8
--- /dev/null
+++ b/tools/stack-bench/tests/progression.mutation.ts
@@ -0,0 +1,184 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { extname, join } from 'node:path';
+import test from 'node:test';
+import ts from 'typescript';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { mutationFileEdits, mutationTargetKeys, readMutationManifest,
+  type LoadedMutationDefinition }
+  from '../src/evidence/mutation-analysis.js';
+import { compileFeatureCatalogInput,
+  compileProgressionDefinitionFile } from '../src/progression/progression-definition.js';
+import { resolveProgressionRecipeLevelSelection }
+  from '../src/progression/progression-recipe-selection.js';
+import { loadReferenceRegistry } from '../src/references/reference-fixtures.js';
+
+const ROOT = STACK_BENCH_ROOT;
+const TRACK = join(ROOT, 'tracks', 'ecommerce');
+const definition = compileProgressionDefinitionFile(
+  join(TRACK, 'progression', 'ecommerce-2.0.2.json'), { trackRoot: TRACK });
+const binding = resolveRecipeRelease(loadTrack('ecommerce'), 3,
+  'ecommerce.progression-catalog@2.0.2');
+const selection = resolveProgressionRecipeLevelSelection(binding,
+  compileFeatureCatalogInput(definition), 3, { cumulative: true });
+const fixtures = new Map(loadReferenceRegistry().fixtures
+  .filter(fixture => fixture.track === 'ecommerce')
+  .map(fixture => [fixture.backend, fixture]));
+
+function mutationManifest(backend: string) {
+  const fixture = fixtures.get(backend);
+  assert(fixture, `missing ${backend} ecommerce reference`);
+  assert.equal(fixture.mutationManifests?.length, 1);
+  const manifestPath = fixture.mutationManifests?.[0];
+  assert(manifestPath);
+  return readMutationManifest(join(ROOT, manifestPath));
+}
+
+function syntaxErrors(source: string, file: string): string[] {
+  if (!['.ts', '.tsx'].includes(extname(file))) return [];
+  return (ts.transpileModule(source, {
+    compilerOptions: { jsx: ts.JsxEmit.ReactJSX, module: ts.ModuleKind.ESNext,
+      target: ts.ScriptTarget.ES2022 },
+    fileName: file,
+    reportDiagnostics: true,
+  }).diagnostics ?? []).filter(diagnostic => diagnostic.category === ts.DiagnosticCategory.Error)
+    .map(diagnostic => ts.flattenDiagnosticMessageText(diagnostic.messageText, '\n'));
+}
+
+for (const backend of ['mongodb', 'postgres', 'spacetime']) {
+  test(`${backend} progression mutations cover every selected L1-L3 check`, () => {
+    const fixture = fixtures.get(backend);
+    assert(fixture, `missing ${backend} ecommerce reference`);
+    assert(fixture.targetPath, `${backend} fixture must have a target path`);
+    const manifest = mutationManifest(backend);
+    const selected = new Set(selection.grader.checkKeys);
+    const covered = new Set(manifest.mutations.flatMap(mutation => mutationTargetKeys(mutation)));
+    assert.equal(selected.size, 97);
+    assert.deepEqual([...selected].filter(check => !covered.has(check)), []);
+
+    for (const mutation of manifest.mutations) {
+      const editsByFile = new Map<string, ReturnType<typeof mutationFileEdits>>();
+      for (const edit of mutationFileEdits(mutation)) {
+        const edits = editsByFile.get(edit.file) ?? [];
+        edits.push(edit);
+        editsByFile.set(edit.file, edits);
+      }
+      for (const [file, edits] of editsByFile) {
+        let source: string = readFileSync(join(ROOT, fixture.targetPath, ...file.split('/')), 'utf8');
+        for (const edit of edits) {
+          assert.equal(source.split(edit.find).length - 1, 1,
+            `${mutation.id} anchor must match once in ${file}`);
+          source = source.replace(edit.find, edit.replace);
+        }
+        assert.deepEqual(syntaxErrors(source, file), [],
+          `${mutation.id} must remain syntactically valid`);
+      }
+    }
+  });
+}
+
+test('SpacetimeDB reservation and catalog mutants affect only their owned checks', () => {
+  const fixture = fixtures.get('spacetime');
+  assert(fixture, 'missing spacetime progression fixture');
+  assert(fixture.targetPath, 'the spacetime fixture must have a target path');
+  const manifest = readMutationManifest(join(ROOT, 'grader', 'mutations',
+    'spacetime-ecommerce-2.0.2.json'));
+  const mutations = new Map(manifest.mutations.map(mutation => [mutation.id, mutation]));
+
+  const renewal = mutations.get('renewed-reservation-expires-too-soon');
+  assert(renewal, 'the reservation renewal mutation must exist');
+  assert.deepEqual(renewal.targets, ['ecommerce.l3.reservations.reservations.308a']);
+  const renewalEdit = mutationFileEdits(renewal)[0];
+  assert(renewalEdit, 'the reservation renewal mutation must have an edit');
+  const renewalPath = join(ROOT, fixture.targetPath, ...renewalEdit.file.split('/'));
+  const renewalSource = readFileSync(renewalPath, 'utf8');
+  assert.equal(renewalSource.split(renewalEdit.find).length - 1, 1);
+  const renewed = renewalSource.replace(renewalEdit.find, renewalEdit.replace);
+  assert.notEqual(renewed, renewalSource);
+  assert.match(renewed, /const expiresMicros = nowMicros\(ctx\) \+ 90n \* SECOND/,
+    'initial reservations must keep their 90-second window');
+  assert.match(renewed, /for \(const renewed of findReservations/,
+    'only the replacement path should shorten the renewed reservation');
+  assert.deepEqual(syntaxErrors(renewed, renewalEdit.file), []);
+
+  const catalog = mutations.get('catalog-product-is-not-published');
+  assert(catalog, 'the catalog mutation must exist');
+  assert.deepEqual(catalog.targets,
+    ['ecommerce.progression.catalog-management.catalog-management.622a']);
+  const catalogEdit = mutationFileEdits(catalog)[0];
+  assert(catalogEdit, 'the catalog mutation must have an edit');
+  const catalogPath = join(ROOT, fixture.targetPath, ...catalogEdit.file.split('/'));
+  const catalogSource = readFileSync(catalogPath, 'utf8');
+  assert.equal(catalogSource.split(catalogEdit.find).length - 1, 1);
+  const unpublished = catalogSource.replace(catalogEdit.find, catalogEdit.replace);
+  assert.notEqual(unpublished, catalogSource);
+  assert.match(unpublished, /variants\.map\(variant =>/,
+    'the product variants must remain public for their separate check');
+  assert.deepEqual(syntaxErrors(unpublished, catalogEdit.file), []);
+});
+
+test('catalog and duplicate-checkout mutants keep independent check ownership', () => {
+  const catalogCases = [
+    { backend: 'mongodb', nameId: 'catalog-product-name-is-not-published',
+      variantsId: 'catalog-variants-are-discarded' },
+    { backend: 'postgres', nameId: 'progression-catalog-product-name-is-not-published',
+      variantsId: 'progression-catalog-variants-are-discarded' },
+  ];
+  for (const item of catalogCases) {
+    const fixture = fixtures.get(item.backend);
+    assert(fixture, `missing ${item.backend} ecommerce reference`);
+    assert(fixture.targetPath, `${item.backend} fixture must have a target path`);
+    const manifest = mutationManifest(item.backend);
+    const mutations = new Map(manifest.mutations.map(mutation => [mutation.id, mutation]));
+    const name = mutations.get(item.nameId);
+    const variants = mutations.get(item.variantsId);
+    assert(name, `missing ${item.nameId}`);
+    assert(variants, `missing ${item.variantsId}`);
+    assert.deepEqual(name.targets,
+      ['ecommerce.progression.catalog-management.catalog-management.622a']);
+    assert.deepEqual(variants.targets,
+      ['ecommerce.progression.catalog-management.catalog-management.622b']);
+
+    for (const mutation of [name, variants]) {
+      const edit = mutationFileEdits(mutation)[0];
+      assert(edit, `${mutation.id} must have an edit`);
+      const file = join(ROOT, fixture.targetPath, ...edit.file.split('/'));
+      const source = readFileSync(file, 'utf8');
+      assert.equal(source.split(edit.find).length - 1, 1,
+        `${mutation.id} anchor must match once`);
+      assert.deepEqual(syntaxErrors(source.replace(edit.find, edit.replace), edit.file), []);
+    }
+    const nameEdit = mutationFileEdits(name)[0];
+    const variantEdit = mutationFileEdits(variants)[0];
+    assert(nameEdit, `${name.id} must have an edit`);
+    assert(variantEdit, `${variants.id} must have an edit`);
+    assert.match(nameEdit.replace, /Travel Mug/);
+    assert.doesNotMatch(variantEdit.replace, /Unavailable product/);
+  }
+
+  const cartCases = [
+    { backend: 'postgres', incrementId: 'progression-concurrent-cart-line-does-not-increment',
+      checkoutId: 'progression-concurrent-checkout-leaves-cart-lines' },
+    { backend: 'spacetime', incrementId: 'existing-cart-line-does-not-increment',
+      checkoutId: 'checkout-does-not-empty-cart' },
+  ];
+  for (const item of cartCases) {
+    const manifest = mutationManifest(item.backend);
+    const mutations = new Map(manifest.mutations.map(mutation => [mutation.id, mutation]));
+    const increment = requiredMutation(mutations, item.incrementId);
+    const checkout = requiredMutation(mutations, item.checkoutId);
+    assert.deepEqual(increment.targets,
+      ['ecommerce.spec.concurrency-safety.duplicate-checkout.203a']);
+    assert.deepEqual(checkout.targets,
+      ['ecommerce.spec.concurrency-safety.duplicate-checkout.203b']);
+  }
+});
+
+function requiredMutation(mutations: Map<string, LoadedMutationDefinition>, id: string): LoadedMutationDefinition {
+  const mutation = mutations.get(id);
+  if (!mutation) throw new Error(`mutation ${id} is required`);
+  return mutation;
+}
diff --git a/tools/stack-bench/tests/provenance.test.ts b/tools/stack-bench/tests/provenance.test.ts
new file mode 100644
index 00000000000..b9e15d32fcb
--- /dev/null
+++ b/tools/stack-bench/tests/provenance.test.ts
@@ -0,0 +1,87 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { hashDirectory, hashFiles, hashRubric, sessionProvenance, sha256 } from '../src/evidence/provenance.js';
+
+test('file-set hashes bind both relative names and exact bytes', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-provenance-'));
+  try {
+    mkdirSync(join(root, 'a'));
+    const one = join(root, 'a', 'one.txt');
+    const two = join(root, 'two.txt');
+    writeFileSync(one, 'ab');
+    writeFileSync(two, 'c');
+    const first = hashFiles([two, one], { base: root });
+    assert.deepEqual(first.files, ['a/one.txt', 'two.txt']);
+    assert.equal(first.sha256, hashFiles([one, two], { base: root }).sha256);
+    writeFileSync(two, 'changed');
+    assert.notEqual(first.sha256, hashFiles([one, two], { base: root }).sha256);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('rubric hash changes with points but not scenario mechanics', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-provenance-'));
+  const spec = join(root, 'spec.json');
+  try {
+    const write = (points: number, within: number) => writeFileSync(spec, JSON.stringify({
+      schemaVersion: 1, level: 1, features: [{ id: 1, name: 'Feature', setup: [],
+        criteria: [{ id: '1a', desc: 'works', points,
+          steps: [{ do: 'expect', actor: 'user', testid: 'result', within }] }] }],
+    }));
+    write(2, 100);
+    const initial = hashRubric([spec], { base: root });
+    write(2, 500);
+    assert.equal(initial.sha256, hashRubric([spec], { base: root }).sha256);
+    write(3, 500);
+    assert.notEqual(initial.sha256, hashRubric([spec], { base: root }).sha256);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('rubric hashes reject malformed criterion points', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-provenance-invalid-'));
+  const spec = join(root, 'scenario.json');
+  try {
+    writeFileSync(spec, JSON.stringify({ schemaVersion: 1, level: 1, features: [{ id: 1,
+      name: 'Feature', setup: [], criteria: [{ id: '1a', desc: 'works', points: -1,
+        steps: [{ do: 'expect', actor: 'user', testid: 'result' }] }] }] }));
+    assert.throws(() => hashRubric([spec], { base: root }), /points.*non-negative integer/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('directory hashes can exclude reproducible build output', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-provenance-'));
+  try {
+    mkdirSync(join(root, 'src'));
+    mkdirSync(join(root, 'dist'));
+    writeFileSync(join(root, 'src', 'index.ts'), 'source');
+    writeFileSync(join(root, 'dist', 'index.js'), 'first build');
+    const source = () => hashDirectory(root, { exclude: name => name === 'dist' || name.startsWith('dist/') });
+    const first = source();
+    writeFileSync(join(root, 'dist', 'index.js'), 'second build');
+    assert.equal(first.sha256, source().sha256);
+    writeFileSync(join(root, 'src', 'index.ts'), 'changed source');
+    assert.notEqual(first.sha256, source().sha256);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('session provenance identifies every comparison-defining input', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-provenance-'));
+  try {
+    const manifest = join(root, 'track.json');
+    const spec = join(root, 'scenario.json');
+    writeFileSync(manifest, '{}');
+    writeFileSync(spec, JSON.stringify({ schemaVersion: 1, level: 1, features: [{ id: 1,
+      name: 'Feature', setup: [], criteria: [{ id: '1a', desc: 'works', points: 1,
+        steps: [{ do: 'expect', actor: 'user', testid: 'result' }] }] }] }));
+    const result = sessionProvenance({ prompt: 'prompt', skillsText: 'skill',
+      contractText: 'contract', scenarioPaths: [spec], trackDir: root,
+      trackManifestPath: manifest });
+    assert.equal(result.promptSha256, sha256('prompt'));
+    assert.equal(result.skillsSha256, sha256('skill'));
+    assert.equal(result.contractSha256, sha256('contract'));
+    assert.equal(result.scenarioFiles[0], 'scenario.json');
+    assert.match(result.rubric.sha256, /^[0-9a-f]{64}$/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/qualification-cli.contract.ts b/tools/stack-bench/tests/qualification-cli.contract.ts
new file mode 100644
index 00000000000..01de1271114
--- /dev/null
+++ b/tools/stack-bench/tests/qualification-cli.contract.ts
@@ -0,0 +1,92 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { mutationWorkerCount, parseQualificationArgs, qualificationReadiness }
+  from '../commands/qualification-cli.js';
+
+test('mutation worker count uses only mutations selected by calibration', () => {
+  const calibration = { mutations: [{ backend: 'postgres', path: 'manifest.json',
+    targets: [{ id: 'selected' }] }] };
+  const manifest = { mutations: [
+    { id: 'selected', scenario: 'one.json' },
+    { id: 'not-selected-a', scenario: 'two.json' },
+    { id: 'not-selected-b', scenario: 'three.json' },
+    { id: 'not-selected-c', scenario: 'four.json' },
+  ] };
+  assert.equal(mutationWorkerCount(calibration, 'postgres', () => manifest), 1);
+  const calibrationMutation = calibration.mutations[0];
+  assert(calibrationMutation);
+  assert.throws(() => mutationWorkerCount({ mutations: [{ ...calibrationMutation,
+    targets: [{ id: 'missing' }] }] }, 'postgres', () => manifest), /missing mutations/);
+});
+
+test('mutation workers split defects even when they use one scenario', () => {
+  const calibration = { mutations: [{ backend: 'postgres', path: 'manifest.json',
+    targets: ['a', 'b', 'c', 'd', 'e'].map(id => ({ id })) }] };
+  const manifest = { scenario: 'shared.json',
+    mutations: ['a', 'b', 'c', 'd', 'e'].map(id => ({ id })) };
+  assert.equal(mutationWorkerCount(calibration, 'postgres', () => manifest), 4);
+});
+
+test('pending L1 qualification lists the required evidence without writing', () => {
+  const status = qualificationReadiness('ecommerce', 1);
+  assert.match(status.scope.calibration.sha256, /^[a-f0-9]{64}$/);
+  assert.equal(status.requiredEvidence.length, 7);
+  assert.equal(status.commands.length, 4);
+  assert.equal(status.budgetPreparation.required, false);
+  assert.deepEqual(status.budgetPreparation.commands, []);
+  assert.equal(status.launch.ok, true);
+  assert.deepEqual(status.launch.blockers, []);
+  assert.equal(status.promotion.ready, false);
+  assert.equal(status.promotion.blockers.filter(item => item.code === 'evidence_missing').length, 7);
+  assert(status.promotion.governance.some(item => item.path === 'recipe.state'
+    && item.state === 'draft' && item.target === 'qualified'));
+  assert.equal(status.promotion.blockers.some(item => item.code === 'source_not_promoted'), false);
+});
+
+test('qualification status rejects ambiguous or undeclared scope', () => {
+  assert.deepEqual(parseQualificationArgs(['node', 'qualification-cli.mjs', 'status',
+    '--track', 'ecommerce', '--level', '1']), { command: 'status', track: 'ecommerce', level: 1 });
+  assert.throws(() => qualificationReadiness('ecommerce', 3), /has no L3 calibration/);
+  assert.throws(() => qualificationReadiness('ecommerce', 3,
+    'ecommerce.progression-depth3@2.0.2'), /has no L3 calibration/);
+  assert.throws(() => qualificationReadiness('ecommerce', 4), /not declared/);
+  assert.throws(() => parseQualificationArgs(['node', 'qualification-cli.mjs', 'status',
+    '--track', 'ecommerce']), /usage/);
+});
+
+test('sequential L2 qualification uses its exact current L1 base', () => {
+  assert.equal(qualificationReadiness('ecommerce', 2).scope.recipe.version, '1.6.0');
+});
+
+test('qualification resolves the pending sequential L1 release exactly and by default', () => {
+  const parsed = parseQualificationArgs(['node', 'qualification-cli.mjs', 'status',
+    '--track', 'ecommerce', '--level', '1', '--recipe', 'ecommerce.sequential-l1@2.5.0']);
+  assert.equal(parsed.command, 'status');
+  assert.equal(parsed.recipe, 'ecommerce.sequential-l1@2.5.0');
+  const track = parsed.track;
+  assert(track);
+  const level = parsed.level;
+  assert(level !== null);
+  const recipe = parsed.recipe;
+  assert(recipe);
+  const status = qualificationReadiness(track, level, recipe);
+  assert.equal(status.scope.recipe.version, '2.5.0');
+  assert.equal(status.scope.calibration.version, '2.5.0');
+  assert.equal(status.launch.ok, true);
+  assert.equal(status.requiredEvidence.length, 7);
+  assert.equal(status.promotion.ready, false);
+  assert(status.promotion.governance.some(item => item.path === 'promotion.status'
+    && item.state === 'candidate' && item.target === 'promoted'));
+  assert(status.commands.every(command => command.includes('--recipe ecommerce.sequential-l1@2.5.0')));
+  const defaultStatus = qualificationReadiness('ecommerce', 1);
+  assert.equal(defaultStatus.scope.recipe.version, '2.5.0');
+  assert(defaultStatus.commands.every(command =>
+    command.includes('--recipe ecommerce.sequential-l1@2.5.0')));
+});
+
+test('pending modular L2 resolves only the current exact recipe', () => {
+  assert.equal(qualificationReadiness('ecommerce', 2,
+    'ecommerce.sequential-l2@1.6.0').scope.recipe.version, '1.6.0');
+  assert.equal(qualificationReadiness('ecommerce', 2).scope.recipe.version, '1.6.0');
+});
diff --git a/tools/stack-bench/tests/qualification-scope.test.ts b/tools/stack-bench/tests/qualification-scope.test.ts
new file mode 100644
index 00000000000..8db50947983
--- /dev/null
+++ b/tools/stack-bench/tests/qualification-scope.test.ts
@@ -0,0 +1,233 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import test from 'node:test';
+
+import { qualificationScopeIdentity, validateQualificationScopeIdentity }
+  from '../src/composition/qualification-scope.js';
+import type { QualificationKind } from '../src/composition/qualification-scope.js';
+
+type TestStack = 'mongodb' | 'postgres';
+
+const digest = (character: string): string => character.repeat(64);
+const release = {
+  id: 'ecommerce.l1', version: '1.0.0', contentSha256: digest('a'), track: 'ecommerce',
+  checkCatalog: [
+    { stableKey: 'check.a', executionId: 'suite', source: 'scenarios/a.json',
+      featureId: '1', criterionId: 'a', points: 1 },
+    { stableKey: 'check.b', executionId: 'suite', source: 'scenarios/b.json',
+      featureId: '1', criterionId: 'b', points: 2 },
+  ],
+};
+const references: Record<TestStack, { backend: TestStack; id: string; sourceSha256: string }> = {
+  mongodb: { backend: 'mongodb', id: 'mongo-reference', sourceSha256: digest('b') },
+  postgres: { backend: 'postgres', id: 'postgres-reference', sourceSha256: digest('c') },
+};
+const mutations: Record<TestStack, { backend: TestStack; executionSha256: string }> = {
+  mongodb: { backend: 'mongodb', executionSha256: digest('d') },
+  postgres: { backend: 'postgres', executionSha256: digest('e') },
+};
+
+function write(root: string, path: string, source = ''): void {
+  const target = join(root, path);
+  mkdirSync(dirname(target), { recursive: true });
+  writeFileSync(target, source);
+}
+
+function fixture(): string {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-qualification-scope-'));
+  for (const path of [
+    'commands/run-suite.ts', 'commands/check-actions.ts', 'commands/reset-backend.ts',
+    'commands/bench.ts',
+    'commands/null-control.ts', 'src/references/reference-live.ts',
+    'src/references/reference-agent.ts', 'container/run-build.ts', 'grader/grade.ts',
+    'grader/mutation-test.ts', 'linter/lint.ts', 'package.json', 'package-lock.json',
+    'docker-compose.yaml', 'appliance/Controller.Dockerfile', 'appliance/docker-compose.yaml',
+    'tracks/ecommerce/walk.ts', 'src/evidence/provenance.ts',
+  ]) write(root, path, `${path}\n`);
+  write(root, 'src/references/reference-live.ts',
+    "import '../evidence/provenance.js';\n");
+  write(root, 'commands/bench.ts', "import '../src/stacks/stack-adapters.js';\n");
+  write(root, 'grader/grade.ts', "import '../src/stacks/stack-adapters.js';\n");
+  write(root, 'src/stacks/stack-adapters.ts', [
+    "import './backends/mongodb-adapter.js';",
+    "import './backends/mongodb-identity.js';",
+    "import './backends/mongodb-operations.js';",
+    "import './backends/postgres-adapter.js';",
+    "import './backends/postgres-identity.js';",
+    "import './backends/postgres-operations.js';",
+    "import './backends/spacetime-adapter.js';",
+    "import './backends/spacetime-identity.js';",
+    "import './backends/spacetime-operations.js';",
+    '',
+  ].join('\n'));
+  write(root, 'src/stacks/stack-adapter-common.ts', 'shared adapter helpers\n');
+  for (const stack of ['mongodb', 'postgres', 'spacetime']) {
+    write(root, `src/stacks/backends/${stack}-adapter.ts`,
+      `import '../stack-adapter-common.js';\n${stack} adapter\n`);
+    write(root, `src/stacks/backends/${stack}-identity.ts`, `${stack} identity\n`);
+    write(root, `src/stacks/backends/${stack}-operations.ts`, `${stack} operations\n`);
+  }
+  return root;
+}
+
+function scoped(root: string, kind: QualificationKind, stack: TestStack | null = null,
+  changedRelease = release) {
+  return qualificationScopeIdentity({
+    kind,
+    release: changedRelease,
+    stack,
+    reference: stack === null ? null : references[stack],
+    mutation: kind === 'mutation' && stack !== null ? mutations[stack] : null,
+    stackBenchRoot: root,
+  });
+}
+
+test('qualification identities isolate stack, mutation, and selected-check inputs', () => {
+  const root = fixture();
+  try {
+    const mongoReference = scoped(root, 'reference', 'mongodb');
+    const postgresReference = scoped(root, 'reference', 'postgres');
+    const mongoMutation = scoped(root, 'mutation', 'mongodb');
+    assert.notEqual(mongoReference.executableSha256, postgresReference.executableSha256);
+    assert.equal(mongoReference.checksSha256, postgresReference.checksSha256);
+    assert.notDeepEqual(mongoReference.stack, postgresReference.stack);
+    assert.notEqual(mongoReference.sha256, postgresReference.sha256);
+    assert.notEqual(mongoReference.executableSha256, mongoMutation.executableSha256);
+
+    const changedChecks = structuredClone(release);
+    const firstCheck = changedChecks.checkCatalog[0];
+    assert(firstCheck);
+    firstCheck.points = 3;
+    assert.notEqual(scoped(root, 'reference', 'mongodb', changedChecks).checksSha256,
+      mongoReference.checksSha256);
+
+    const changedReference = structuredClone(references.mongodb);
+    changedReference.sourceSha256 = digest('f');
+    const changedMongo = qualificationScopeIdentity({ kind: 'reference', release,
+      stack: 'mongodb', reference: changedReference, stackBenchRoot: root });
+    assert.notEqual(changedMongo.sha256, mongoReference.sha256);
+    assert.deepEqual(scoped(root, 'reference', 'postgres'), postgresReference);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('stack-owned reset and version changes invalidate only their stack', () => {
+  const root = fixture();
+  try {
+    const beforeMongoReference = scoped(root, 'reference', 'mongodb');
+    const beforeMongoMutation = scoped(root, 'mutation', 'mongodb');
+    const beforePostgresReference = scoped(root, 'reference', 'postgres');
+    const beforePostgresMutation = scoped(root, 'mutation', 'postgres');
+    const beforeNull = scoped(root, 'null');
+
+    write(root, 'src/stacks/backends/postgres-operations.ts', 'changed postgres reset\n');
+    assert.deepEqual(scoped(root, 'reference', 'mongodb'), beforeMongoReference);
+    assert.deepEqual(scoped(root, 'mutation', 'mongodb'), beforeMongoMutation);
+    assert.notEqual(scoped(root, 'reference', 'postgres').sha256, beforePostgresReference.sha256);
+    assert.notEqual(scoped(root, 'mutation', 'postgres').sha256, beforePostgresMutation.sha256);
+    assert.deepEqual(scoped(root, 'null'), beforeNull);
+
+    const afterResetMongo = scoped(root, 'reference', 'mongodb');
+    const afterResetPostgres = scoped(root, 'reference', 'postgres');
+    const afterResetNull = scoped(root, 'null');
+    write(root, 'src/stacks/backends/postgres-identity.ts', 'changed postgres version\n');
+    assert.deepEqual(scoped(root, 'reference', 'mongodb'), afterResetMongo);
+    assert.notEqual(scoped(root, 'reference', 'postgres').sha256, afterResetPostgres.sha256);
+    assert.deepEqual(scoped(root, 'null'), afterResetNull);
+
+    const afterVersionMongo = scoped(root, 'reference', 'mongodb');
+    const afterVersionPostgres = scoped(root, 'reference', 'postgres');
+    const afterVersionNull = scoped(root, 'null');
+    write(root, 'src/stacks/backends/postgres-adapter.ts', 'changed postgres adapter\n');
+    assert.deepEqual(scoped(root, 'reference', 'mongodb'), afterVersionMongo);
+    assert.notEqual(scoped(root, 'reference', 'postgres').sha256, afterVersionPostgres.sha256);
+    assert.deepEqual(scoped(root, 'null'), afterVersionNull);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('shared grading changes invalidate every affected scope while mutation-only changes do not', () => {
+  const root = fixture();
+  try {
+    const beforeReference = scoped(root, 'reference', 'mongodb');
+    const beforeMutation = scoped(root, 'mutation', 'mongodb');
+    write(root, 'grader/mutation-test.ts', 'changed mutation runner\n');
+    assert.deepEqual(scoped(root, 'reference', 'mongodb'), beforeReference);
+    assert.notEqual(scoped(root, 'mutation', 'mongodb').sha256, beforeMutation.sha256);
+
+    const beforeMongo = scoped(root, 'reference', 'mongodb');
+    const beforeResetMutation = scoped(root, 'mutation', 'mongodb');
+    const beforeNull = scoped(root, 'null');
+    write(root, 'commands/reset-backend.ts', 'changed backend reset\n');
+    assert.notEqual(scoped(root, 'reference', 'mongodb').sha256, beforeMongo.sha256);
+    assert.notEqual(scoped(root, 'mutation', 'mongodb').sha256, beforeResetMutation.sha256);
+    assert.deepEqual(scoped(root, 'null'), beforeNull);
+
+    const afterResetMongo = scoped(root, 'reference', 'mongodb');
+    const afterResetPostgres = scoped(root, 'reference', 'postgres');
+    const afterResetMutation = scoped(root, 'mutation', 'mongodb');
+    write(root, 'grader/grade.ts', 'changed shared grader\n');
+    assert.notEqual(scoped(root, 'reference', 'mongodb').sha256, afterResetMongo.sha256);
+    assert.notEqual(scoped(root, 'reference', 'postgres').sha256, afterResetPostgres.sha256);
+    assert.notEqual(scoped(root, 'mutation', 'mongodb').sha256, afterResetMutation.sha256);
+    assert.notEqual(scoped(root, 'null').sha256, beforeNull.sha256);
+
+    const afterGradeReference = scoped(root, 'reference', 'mongodb');
+    const afterGradeMutation = scoped(root, 'mutation', 'mongodb');
+    const afterGradeNull = scoped(root, 'null');
+    write(root, 'commands/run-suite.ts', 'changed suite runner\n');
+    assert.notEqual(scoped(root, 'reference', 'mongodb').sha256, afterGradeReference.sha256);
+    assert.notEqual(scoped(root, 'mutation', 'mongodb').sha256, afterGradeMutation.sha256);
+    assert.deepEqual(scoped(root, 'null'), afterGradeNull);
+
+    const beforeAdapterMongo = scoped(root, 'reference', 'mongodb');
+    const beforeAdapterPostgres = scoped(root, 'reference', 'postgres');
+    const beforeAdapterNull = scoped(root, 'null');
+    write(root, 'src/stacks/stack-adapter-common.ts', 'changed shared adapter helpers\n');
+    assert.notEqual(scoped(root, 'reference', 'mongodb').sha256, beforeAdapterMongo.sha256);
+    assert.notEqual(scoped(root, 'reference', 'postgres').sha256,
+      beforeAdapterPostgres.sha256);
+    assert.deepEqual(scoped(root, 'null'), beforeAdapterNull);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('reference deployment and its container launcher invalidate qualification', () => {
+  const root = fixture();
+  try {
+    const beforeReference = scoped(root, 'reference', 'mongodb');
+    const beforeMutation = scoped(root, 'mutation', 'mongodb');
+    const beforeNull = scoped(root, 'null');
+
+    write(root, 'container/run-build.ts', 'changed coding container\n');
+    assert.notEqual(scoped(root, 'reference', 'mongodb').sha256, beforeReference.sha256);
+    assert.notEqual(scoped(root, 'mutation', 'mongodb').sha256, beforeMutation.sha256);
+    assert.deepEqual(scoped(root, 'null'), beforeNull);
+
+    const afterLauncherReference = scoped(root, 'reference', 'mongodb');
+    const afterLauncherMutation = scoped(root, 'mutation', 'mongodb');
+    write(root, 'src/references/reference-agent.ts', 'changed reference agent\n');
+    assert.notEqual(scoped(root, 'reference', 'mongodb').sha256, afterLauncherReference.sha256);
+    assert.notEqual(scoped(root, 'mutation', 'mongodb').sha256, afterLauncherMutation.sha256);
+    assert.deepEqual(scoped(root, 'null'), beforeNull);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('unmapped executable imports and tampered identities fail closed', () => {
+  const root = fixture();
+  try {
+    write(root, 'grader/grade.ts', 'await import(runtimeModule)\n');
+    assert.throws(() => scoped(root, 'reference', 'mongodb'), /unmapped dynamic import/);
+    write(root, 'grader/grade.ts', 'shared grader\n');
+    const identity = scoped(root, 'reference', 'mongodb');
+    assert.deepEqual(validateQualificationScopeIdentity(identity), identity);
+    assert.throws(() => validateQualificationScopeIdentity({ ...identity, unknown: true }),
+      /unknown/);
+    assert.throws(() => validateQualificationScopeIdentity({ ...identity, sha256: digest('0') }),
+      /does not match/);
+
+    write(root, 'src/stacks/stack-adapters.ts',
+      "import './backends/unowned-reset.js';\n");
+    write(root, 'src/stacks/backends/unowned-reset.ts', 'unowned\n');
+    assert.throws(() => scoped(root, 'reference', 'mongodb'), /unmapped stack-owned module/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/readiness.test.ts b/tools/stack-bench/tests/readiness.test.ts
new file mode 100644
index 00000000000..c465420ceb1
--- /dev/null
+++ b/tools/stack-bench/tests/readiness.test.ts
@@ -0,0 +1,21 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { fetchStatus } from '../src/runtime/readiness.js';
+
+test('a readiness fetch that never settles terminates at its explicit deadline', async () => {
+  const started = Date.now();
+  const status = await fetchStatus('http://example.invalid', {
+    timeoutMs: 25,
+    fetchImpl: () => new Promise(() => {}),
+  });
+  assert.equal(status, null);
+  assert.ok(Date.now() - started >= 15);
+  assert.ok(Date.now() - started < 1000);
+});
+
+test('readiness returns an HTTP status and clears its deadline', async () => {
+  assert.equal(await fetchStatus('http://example.invalid', {
+    timeoutMs: 1000,
+    fetchImpl: async () => ({ status: 204 }),
+  }), 204);
+});
diff --git a/tools/stack-bench/tests/recipe-release.contract.ts b/tools/stack-bench/tests/recipe-release.contract.ts
new file mode 100644
index 00000000000..75d4856619b
--- /dev/null
+++ b/tools/stack-bench/tests/recipe-release.contract.ts
@@ -0,0 +1,459 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import { cpSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT, compiledEntrypoint } from '../src/package-root.js';
+import {
+  buildRecipeRelease,
+  bundleRecipeRelease,
+  gradeRecipeRelease,
+  requireRecipeRelease as resolveRecipeRelease,
+  resolveGradeRecipeArtifactBinding,
+  resolveGradeRecipeRelease,
+  resolveRecipeRelease as resolveOptionalRecipeRelease,
+  validateExactRecipeRequest,
+} from '../src/composition/recipe-release.js';
+import { compileTrackManifest } from '../src/composition/definition-compiler.js';
+import { loadTrack, type Track } from '../src/composition/tracks.js';
+
+const ECOMMERCE = join(STACK_BENCH_ROOT, 'tracks', 'ecommerce');
+const L1_RECIPE = join(ECOMMERCE, 'composition', 'recipes', 'sequential-l1-2.5.0.json');
+
+function copyTrack(): { temp: string; root: string; recipe: string } {
+  const temp = mkdtempSync(join(tmpdir(), 'stack-bench-release-'));
+  const root = join(temp, 'ecommerce');
+  cpSync(ECOMMERCE, root, { recursive: true });
+  return { temp, root, recipe: join(root, 'composition', 'recipes', 'sequential-l1-2.5.0.json') };
+}
+
+function editJson(path: string, change: (value: unknown) => void): void {
+  const value: unknown = JSON.parse(readFileSync(path, 'utf8'));
+  change(value);
+  writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`);
+}
+
+test('optional recipe resolution keeps missing composition explicit', () => {
+  const box = copyTrack();
+  try {
+    rmSync(join(box.root, 'composition', 'promotions.json'));
+    const track = copiedTrack(loadTrack('ecommerce'), box.root);
+    assert.equal(resolveOptionalRecipeRelease(track, 1), null);
+    assert.throws(() => resolveRecipeRelease(track, 1), /L1 has no recipe release/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+function promoteRecipe(root: string, alias: string, recipe: {
+  path: string;
+  id: string;
+  version: string;
+}): void {
+  editJson(join(root, 'composition', 'promotions.json'), value => {
+    const entries = array(object(value, 'promotion catalog').entries,
+      'promotion catalog.entries');
+    let target = entries.map(entry => object(entry, 'promotion entry')).find(entry => {
+      const entryRecipe = object(entry.recipe, 'promotion entry.recipe');
+      return entry.alias === alias && entryRecipe.id === recipe.id
+        && entryRecipe.version === recipe.version;
+    });
+    for (const entryValue of entries) {
+      const entry = object(entryValue, 'promotion entry');
+      if (entry.alias === alias && entry.status === 'promoted') entry.status = 'retired';
+    }
+    if (!target) {
+      target = { alias, status: 'promoted', recipe };
+      entries.push(target);
+    }
+    target.status = 'promoted';
+  });
+}
+
+function qualifyRecipe(root: string, name: string): void {
+  const path = join(root, 'composition', 'recipes', name);
+  const recipe = object(JSON.parse(readFileSync(path, 'utf8')), 'recipe');
+  for (const selection of [object(recipe.fixture, 'recipe.fixture'),
+    ...array(recipe.packs, 'recipe.packs').map(pack => object(pack, 'recipe pack'))]) {
+    editJson(join(root, 'composition', 'recipes', string(selection.path, 'selection.path')),
+      value => { object(value, 'selection').state = 'qualified'; });
+  }
+  editJson(path, value => { object(value, 'recipe').state = 'qualified'; });
+}
+
+function promoteCurrentDefaults(root: string): void {
+  qualifyRecipe(root, 'sequential-l1-2.5.0.json');
+  qualifyRecipe(root, 'sequential-l2-1.6.0.json');
+  promoteRecipe(root, 'L1', {
+    path: 'recipes/sequential-l1-2.5.0.json', id: 'ecommerce.sequential-l1', version: '2.5.0',
+  });
+  promoteRecipe(root, 'L2', {
+    path: 'recipes/sequential-l2-1.6.0.json', id: 'ecommerce.sequential-l2', version: '1.6.0',
+  });
+}
+
+function firstStepWithTestId(value: unknown): Record<string, unknown> {
+  const scenario = object(value, 'scenario');
+  for (const featureValue of array(scenario.features, 'scenario.features')) {
+    const feature = object(featureValue, 'scenario feature');
+    for (const criterionValue of array(feature.criteria, 'feature.criteria')) {
+      const criterion = object(criterionValue, 'scenario criterion');
+      const pending = [...array(criterion.steps, 'criterion.steps')];
+      while (pending.length) {
+        const step = pending.shift();
+        const stepObject = object(step, 'scenario step');
+        if (typeof stepObject.testid === 'string') return stepObject;
+        if (stepObject.do === 'race') {
+          for (const branch of array(stepObject.branches, 'race.branches')) {
+            pending.push(...array(branch, 'race branch'));
+          }
+        }
+      }
+    }
+  }
+  throw new Error('fixture scenario has no criterion selector');
+}
+
+test('recipe releases are deterministic, compact, and bind L2 to the exact L1 release', () => {
+  const l1a = buildRecipeRelease(L1_RECIPE, { trackRoot: ECOMMERCE });
+  const l1b = buildRecipeRelease(L1_RECIPE, { trackRoot: ECOMMERCE });
+  assert.deepEqual(l1a, l1b);
+  assert.equal(l1a.checkCatalog.length, 48);
+  assert.equal(l1a.scoring.points, 58);
+  assert.equal(new Set(l1a.checkCatalog.map(check => check.stableKey)).size, 48);
+  assert.match(l1a.task.composedSha256, /^[a-f0-9]{64}$/);
+  assert(l1a.task.requirements.some(fragment =>
+    fragment.id === 'ecommerce.spec.state-durability.accounts'));
+  assert.match(l1a.contentSha256, /^[a-f0-9]{64}$/);
+  assert.match(l1a.sourceManifestSha256, /^[a-f0-9]{64}$/);
+  assert(l1a.sourceManifest.some(source => source.kinds.includes('fixture')));
+  assert(!JSON.stringify(l1a).includes('stackbench-admin-2026'));
+
+  const l2 = buildRecipeRelease(
+    join(ECOMMERCE, 'composition', 'recipes', 'sequential-l2-1.6.0.json'),
+    { trackRoot: ECOMMERCE },
+  );
+  assert.equal(l2.checkCatalog.length, 76);
+  assert.equal(l2.scoring.points, 117);
+  assert(l2.task.baseRecipe, 'L2 must bind its base recipe');
+  assert.equal(l2.task.baseRecipe.contentSha256, l1a.contentSha256);
+  assert(!JSON.stringify(l2).includes('stackbench-staff-2026'));
+});
+
+test('source formatting and pack declaration order do not change recipe content identity', () => {
+  const box = copyTrack();
+  try {
+    const before = buildRecipeRelease(box.recipe, { trackRoot: box.root });
+    editJson(box.recipe, recipe => {
+      const value = object(recipe, 'recipe');
+      value.packs = array(value.packs, 'recipe.packs').reverse();
+    });
+    const after = buildRecipeRelease(box.recipe, { trackRoot: box.root });
+    assert.equal(after.meaningSha256, before.meaningSha256);
+    assert.equal(after.executionSha256, before.executionSha256);
+    assert.equal(after.contentSha256, before.contentSha256);
+    assert.notEqual(after.sourceManifestSha256, before.sourceManifestSha256);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('requirement edits change meaning while selector and fixture edits only change execution', () => {
+  const descriptionBox = copyTrack();
+  try {
+    const before = buildRecipeRelease(descriptionBox.recipe, { trackRoot: descriptionBox.root });
+    const scenario = join(descriptionBox.root, 'scenarios', '01-account-create-2.4.0.json');
+    editJson(scenario, value => {
+      const criterion = scenarioCriterion(value, 0, 0);
+      criterion.desc = `${string(criterion.desc, 'criterion.desc')} with the revised guarantee`;
+    });
+    const after = buildRecipeRelease(descriptionBox.recipe, { trackRoot: descriptionBox.root });
+    assert.notEqual(after.meaningSha256, before.meaningSha256);
+    assert.equal(after.executionSha256, before.executionSha256);
+    assert.notEqual(after.contentSha256, before.contentSha256);
+  } finally { rmSync(descriptionBox.temp, { recursive: true, force: true }); }
+
+  const selectorBox = copyTrack();
+  try {
+    const before = buildRecipeRelease(selectorBox.recipe, { trackRoot: selectorBox.root });
+    const scenario = join(selectorBox.root, 'scenarios', '01-account-create-2.4.0.json');
+    editJson(scenario, value => {
+      const step = firstStepWithTestId(value);
+      step.testid = `${string(step.testid, 'step.testid')}-revised`;
+    });
+    const after = buildRecipeRelease(selectorBox.recipe, { trackRoot: selectorBox.root });
+    assert.equal(after.meaningSha256, before.meaningSha256);
+    assert.notEqual(after.executionSha256, before.executionSha256);
+    assert.notEqual(after.contentSha256, before.contentSha256);
+  } finally { rmSync(selectorBox.temp, { recursive: true, force: true }); }
+
+  const fixtureBox = copyTrack();
+  try {
+    const before = buildRecipeRelease(fixtureBox.recipe, { trackRoot: fixtureBox.root });
+    const fixture = join(fixtureBox.root, 'composition', 'fixtures', 'storefront-1.0.1.json');
+    editJson(fixture, value => {
+      const fixtureValue = object(value, 'fixture');
+      const account = object(requiredAt(array(fixtureValue.accounts, 'fixture.accounts'), 0,
+        'fixture account'), 'fixture account');
+      account.password = `${string(account.password, 'account.password')}-revised`;
+    });
+    const after = buildRecipeRelease(fixtureBox.recipe, { trackRoot: fixtureBox.root });
+    assert.equal(after.meaningSha256, before.meaningSha256);
+    assert.notEqual(after.executionSha256, before.executionSha256);
+    assert.notEqual(after.contentSha256, before.contentSha256);
+  } finally { rmSync(fixtureBox.temp, { recursive: true, force: true }); }
+});
+
+test('promoted runner binding fails closed on drift and emits only the selected execution catalog', () => {
+  const box = copyTrack();
+  try {
+    promoteCurrentDefaults(box.root);
+    const track = copiedTrack(loadTrack('ecommerce'), box.root);
+    const binding = resolveRecipeRelease(track, 2);
+    assert.equal(binding.alias, 'L2');
+    assert.equal(binding.status, 'promoted');
+    const reportRelease = gradeRecipeRelease(binding, 'features-existing@L2');
+    assert(reportRelease, 'the selected execution must produce a grade release');
+    assert(reportRelease.checks.length > 0);
+    assert(reportRelease.checks.every(check => check.executionId === 'features-existing@L2'));
+    assert.equal(reportRelease.contentSha256, binding.release.contentSha256);
+    const resolvedReport = resolveGradeRecipeRelease(track, 2,
+      join(track.dir, 'scenarios', '02-features.json'));
+    assert.deepEqual(resolvedReport, reportRelease);
+    const artifactBinding = resolveGradeRecipeArtifactBinding(track, 2,
+      join(track.dir, 'scenarios', '02-features.json'));
+    assert(artifactBinding, 'the selected execution must produce an artifact binding');
+    assert.deepEqual(artifactBinding.release, reportRelease);
+    assert.equal(artifactBinding.sourceRelease.components.fixture.sha256,
+      binding.release.components.fixture.sha256);
+    assert(artifactBinding.sourceRelease.components.packs
+      .every(pack => /^[a-f0-9]{64}$/.test(pack.sha256)));
+    const bundled = bundleRecipeRelease(binding);
+    assert(bundled, 'the promoted binding must produce a release bundle');
+    assert.equal(bundled.selection.alias, 'L2');
+    assert.equal(bundled.checkCatalog.length, 76);
+    assert(!JSON.stringify(bundled).includes('stackbench-staff-2026'));
+    assert.throws(() => resolveGradeRecipeRelease(track, 2,
+      join(track.dir, 'scenarios', '03-features.json')), /does not select scenario/);
+
+    editJson(join(box.root, 'composition', 'recipes', 'sequential-l2-1.6.0.json'),
+      value => {
+        const recipe = object(value, 'recipe');
+        const execution = object(requiredAt(array(recipe.execution, 'recipe.execution'), 0,
+          'recipe execution'), 'recipe execution');
+        execution.source = 'scenarios/does-not-exist.json';
+      });
+    assert.throws(() => resolveRecipeRelease(track, 2), /does-not-exist|ENOENT/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('the current sequential release supports exact resolution and rejects bad identities', () => {
+  const box = copyTrack();
+  try {
+    promoteCurrentDefaults(box.root);
+    const track = copiedTrack(loadTrack('ecommerce'), box.root);
+    const promoted = resolveRecipeRelease(track, 1);
+    const exact = resolveRecipeRelease(track, 1, 'ecommerce.sequential-l1@2.5.0');
+    assert.equal(promoted.release.id, 'ecommerce.sequential-l1');
+    assert.equal(promoted.release.version, '2.5.0');
+    assert.equal(promoted.status, 'promoted');
+    assert.equal(exact.release.version, '2.5.0');
+    assert.equal(exact.status, 'promoted');
+    assert.equal(promoted.release.checkCatalog.length, 48);
+    assert.equal(promoted.release.scoring.points, 58);
+    assert.equal(resolveRecipeRelease(track, 1, {
+      id: promoted.release.id,
+      version: promoted.release.version,
+      contentSha256: promoted.release.contentSha256,
+    }).release.contentSha256, promoted.release.contentSha256);
+    assert.throws(() => resolveRecipeRelease(track, 1, 'ecommerce.unknown@9.9.9'),
+      /exactly one catalogued/);
+    assert.throws(() => resolveRecipeRelease(track, 1, {
+      id: promoted.release.id, version: promoted.release.version, contentSha256: '0'.repeat(64),
+    }), /content changed/);
+    assert.throws(() => resolveRecipeRelease(track, 1, {
+      id: promoted.release.id, version: promoted.release.version, contentSha256: '',
+    }), /must be a SHA-256 digest/);
+    assert.throws(() => validateExactRecipeRequest({
+      id: promoted.release.id, version: promoted.release.version, unexpected: true,
+    }), /unknown field/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('the current L2 release binds sequential L1 exactly and retains its own checks', () => {
+  const box = copyTrack();
+  try {
+    promoteCurrentDefaults(box.root);
+    const track = copiedTrack(loadTrack('ecommerce'), box.root);
+    const binding = resolveRecipeRelease(track, 2, 'ecommerce.sequential-l2@1.6.0');
+    const l1 = buildRecipeRelease(
+      join(box.root, 'composition', 'recipes', 'sequential-l1-2.5.0.json'),
+      { trackRoot: box.root },
+    );
+    assert.equal(binding.status, 'promoted');
+    const baseRecipe = binding.release.task.baseRecipe;
+    assert(baseRecipe, 'the promoted L2 release must bind its base recipe');
+    assert.equal(baseRecipe.contentSha256, l1.contentSha256);
+    assert.equal(baseRecipe.meaningSha256, l1.meaningSha256);
+    assert.equal(baseRecipe.executionSha256, l1.executionSha256);
+    assert.deepEqual({ checks: binding.release.checkCatalog.length,
+      points: binding.release.scoring.points }, { checks: 76, points: 117 });
+    assert.deepEqual(binding.release.checkCatalog
+      .filter(check => l1.checkCatalog.some(base => base.stableKey === check.stableKey))
+      .map(check => check.stableKey).sort(), l1.checkCatalog.map(check => check.stableKey).sort());
+    assert(binding.release.checkCatalog.some(check =>
+      !l1.checkCatalog.some(base => base.stableKey === check.stableKey)));
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('an exact promoted release stays separate from public level defaults', () => {
+  const box = copyTrack();
+  try {
+    promoteCurrentDefaults(box.root);
+    const recipePath = join(box.root, 'composition', 'recipes', 'progression-depth3-2.0.2.json');
+    const recipe = object(JSON.parse(readFileSync(recipePath, 'utf8')), 'progression recipe');
+    for (const packValue of array(recipe.packs, 'progression recipe.packs')) {
+      const pack = object(packValue, 'progression recipe pack');
+      editJson(join(box.root, 'composition', 'recipes', string(pack.path, 'pack.path')),
+        value => { object(value, 'pack').state = 'qualified'; });
+    }
+    editJson(recipePath, value => { object(value, 'recipe').state = 'qualified'; });
+    editJson(join(box.root, 'composition', 'candidates.json'), value => {
+      for (const entryValue of array(object(value, 'candidate catalog').entries,
+        'candidate catalog.entries')) {
+        const entry = object(entryValue, 'candidate entry');
+        const entryRecipe = object(entry.recipe, 'candidate entry.recipe');
+        if (entryRecipe.id === 'ecommerce.progression-depth3'
+          && entryRecipe.version === '2.0.2') entry.status = 'promoted';
+      }
+    });
+    const track = loadTrack('ecommerce');
+    const copied = copiedTrack(track, box.root);
+
+    assert.equal(resolveRecipeRelease(copied, 1).release.id, 'ecommerce.sequential-l1');
+    assert.equal(resolveRecipeRelease(copied, 2).release.id, 'ecommerce.sequential-l2');
+    for (const level of [1, 2, 3]) {
+      const exact = resolveRecipeRelease(copied, level,
+        'ecommerce.progression-depth3@2.0.2');
+      assert.equal(exact.status, 'promoted');
+      assert.equal(exact.catalog.id, 'ecommerce.recipe-candidates');
+    }
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('a sequential candidate accepts the exact current prior level', () => {
+  const box = copyTrack();
+  try {
+    const recipe = join(box.root, 'composition', 'recipes', 'l3-bootstrap-1.0.0.json');
+    const source = object(JSON.parse(readFileSync(
+      join(box.root, 'composition', 'recipes', 'sequential-l2-1.6.0.json'), 'utf8')),
+    'L2 recipe');
+    source.id = 'ecommerce.l3-bootstrap';
+    source.version = '1.0.0';
+    source.state = 'draft';
+    source.title = 'L3 bootstrap fixture';
+    source.sequence = { level: 3 };
+    object(source.task, 'recipe.task').baseRecipe = { path: 'sequential-l2-1.6.0.json',
+      id: 'ecommerce.sequential-l2', version: '1.6.0' };
+    writeFileSync(recipe, `${JSON.stringify(source, null, 2)}\n`);
+    writeFileSync(join(box.root, 'composition', 'candidates.json'), `${JSON.stringify({
+      schemaVersion: 1,
+      kind: 'promotion-catalog',
+      id: 'ecommerce.candidates',
+      version: '1.0.0',
+      state: 'draft',
+      title: 'Test candidates',
+      entries: [{ alias: 'L3', status: 'candidate', recipe: {
+        path: 'recipes/l3-bootstrap-1.0.0.json',
+        id: string(source.id, 'recipe.id'), version: string(source.version, 'recipe.version'),
+      } }],
+    }, null, 2)}\n`);
+    const track = loadTrack('ecommerce');
+    const copied = copiedTrack(track, box.root);
+
+    const candidate = resolveRecipeRelease(copied, 3, 'ecommerce.l3-bootstrap@1.0.0');
+    assert.equal(candidate.status, 'candidate');
+    assert(candidate.execution.every(execution => execution.ownership.kind === 'inherited'));
+    const inheritedLevels = candidate.execution.flatMap(execution =>
+      execution.ownership.kind === 'inherited' && typeof execution.ownership.fromLevel === 'number'
+        ? [execution.ownership.fromLevel] : []);
+    assert.deepEqual([...new Set(inheritedLevels)]
+      .sort(), [1, 2]);
+
+    editJson(recipe, value => {
+      object(object(value, 'recipe').task, 'recipe.task').baseRecipe = {
+        path: 'sequential-l1-2.5.0.json',
+        id: 'ecommerce.sequential-l2', version: '1.6.0' };
+    });
+    assert.throws(() => resolveRecipeRelease(copied, 3,
+      'ecommerce.l3-bootstrap@1.0.0'), /expected ecommerce\.sequential-l2@1\.6\.0/);
+  } finally { rmSync(box.temp, { recursive: true, force: true }); }
+});
+
+test('the grader rejects parent/child recipe drift before launching a browser', () => {
+  const grader = compiledEntrypoint('grader', 'grade.js');
+  const result = spawnSync(process.execPath, [grader,
+    '--url', 'http://127.0.0.1:1',
+    '--level', '1',
+    '--track', 'ecommerce',
+    '--spec', join(ECOMMERCE, 'scenarios', '01-account-create-2.4.0.json'),
+    '--expected-recipe-sha256', '0'.repeat(64),
+  ], { encoding: 'utf8' });
+  assert.notEqual(result.status, 0);
+  assert.match(`${result.stdout}${result.stderr}`, /recipe changed before grading/);
+  assert.doesNotMatch(`${result.stdout}${result.stderr}`, /browser.*launch|ECONNREFUSED/i);
+});
+
+test('the grader rejects a stale selected check before launching a browser', () => {
+  const grader = compiledEntrypoint('grader', 'grade.js');
+  const result = spawnSync(process.execPath, [grader,
+    '--url', 'http://127.0.0.1:1',
+    '--level', '1',
+    '--track', 'ecommerce',
+    '--spec', join(ECOMMERCE, 'scenarios', '01-account-create-2.4.0.json'),
+    '--selected-check', 'ecommerce.missing.check',
+  ], { encoding: 'utf8' });
+  assert.notEqual(result.status, 0);
+  assert.match(`${result.stdout}${result.stderr}`, /no selected check/);
+  assert.doesNotMatch(`${result.stdout}${result.stderr}`, /browser.*launch|ECONNREFUSED/i);
+});
+
+function object(value: unknown, at: string): Record<string, unknown> {
+  if (!isRecord(value)) {
+    throw new Error(`${at} must be an object`);
+  }
+  return value;
+}
+
+function array(value: unknown, at: string): unknown[] {
+  if (!Array.isArray(value)) throw new Error(`${at} must be an array`);
+  return value;
+}
+
+function string(value: unknown, at: string): string {
+  if (typeof value !== 'string') throw new Error(`${at} must be a string`);
+  return value;
+}
+
+function requiredAt(values: unknown[], index: number, at: string): unknown {
+  const value = values[index];
+  if (value === undefined) throw new Error(`${at} is required`);
+  return value;
+}
+
+function scenarioCriterion(value: unknown, featureIndex: number, criterionIndex: number):
+  Record<string, unknown> {
+  const scenario = object(value, 'scenario');
+  const feature = object(requiredAt(array(scenario.features, 'scenario.features'), featureIndex,
+    'scenario feature'), 'scenario feature');
+  return object(requiredAt(array(feature.criteria, 'feature.criteria'), criterionIndex,
+    'scenario criterion'), 'scenario criterion');
+}
+
+function copiedTrack(track: Track, root: string): Track {
+  const manifest: unknown = JSON.parse(readFileSync(join(root, 'track.json'), 'utf8'));
+  const compiled = compileTrackManifest(manifest, { source: join(root, 'track.json') });
+  return { ...track, dir: root, suites: compiled.suites };
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
diff --git a/tools/stack-bench/tests/recovery.test.ts b/tools/stack-bench/tests/recovery.test.ts
new file mode 100644
index 00000000000..6996d650812
--- /dev/null
+++ b/tools/stack-bench/tests/recovery.test.ts
@@ -0,0 +1,179 @@
+import assert from 'node:assert/strict';
+import { existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { createServer } from 'node:http';
+import test from 'node:test';
+
+import { readArtifactPayload } from '../src/evidence/artifacts.js';
+import { acquireResourceLock, createBackendLease, readBackendLease,
+  writeBackendLease, type BackendLease } from '../src/runtime/backend-lease.js';
+import { recoverBackendLease, recoveryPlan, recoverSupervisedRun, SUPERVISOR_STATE_VERSION,
+  validateSupervisorState, type SupervisorState } from '../src/runtime/recovery.js';
+
+function fixture({ state = 'active' }: { state?: BackendLease['state'] } = {}) {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-recovery-'));
+  const output = join(root, 'results');
+  const runtimeRoot = join(root, 'runtime');
+  const leasePath = join(runtimeRoot, 'private', 'backend-lease.json');
+  const statePath = join(runtimeRoot, 'private', 'supervisor.json');
+  const locks = join(root, 'locks');
+  mkdirSync(output, { recursive: true });
+  const lease = createBackendLease({ runId: 'recovery-postgres-run0', backend: 'postgres',
+    track: 'ecommerce', runIndex: 0, database: 'app_recovery',
+    container: { name: 'stack-bench-postgres', id: 'postgres-id' } });
+  lease.state = state;
+  lease.resources.locks.push(acquireResourceLock({ root: locks,
+    key: 'slot:ecommerce:postgres:run0', lease }));
+  writeBackendLease(leasePath, lease);
+  const supervisor: SupervisorState = { version: SUPERVISOR_STATE_VERSION, runId: lease.runId,
+    backend: lease.backend, runtimeDir: resolve(join(runtimeRoot, 'private')),
+    leasePath: resolve(leasePath), ownershipToken: lease.ownershipToken,
+    output: resolve(output) };
+  writeFileSync(statePath, `${JSON.stringify(supervisor)}\n`);
+  return { root, runtimeRoot, output, leasePath, statePath, lease, supervisor };
+}
+
+test('recovery plans are deterministic, public, and actionable', () => {
+  const f = fixture();
+  try {
+    const plan = recoveryPlan(f.lease, { cleanupSucceeded: false, reason: 'identity mismatch\nsecret tail' });
+    assert.equal(plan.status, 'quarantined');
+    assert.equal(plan.reason, 'identity mismatch');
+    assert.deepEqual(plan.resources.locks,
+      [{ key: 'slot:ecommerce:postgres:run0', released: false }]);
+    assert.equal(JSON.stringify(plan).includes(f.lease.ownershipToken), false);
+    assert.ok(plan.instructions.some(line => /Do not start another run/.test(line)));
+  } finally { rmSync(f.root, { recursive: true, force: true }); }
+});
+
+test('authenticated recovery releases exact lease resources and removes private state', () => {
+  const f = fixture();
+  try {
+    const result = recoverSupervisedRun(f.statePath, { runtimeRoot: f.runtimeRoot });
+    assert.equal(result.ok, true);
+    assert.equal(existsSync(f.statePath), false);
+    assert.equal(existsSync(f.leasePath), false, 'private runtime lease must be removed after recovery');
+    assert.equal(existsSync(firstLockPath(f.lease)), false);
+    const recovery = readArtifactPayload(join(f.output, 'recovery.json'),
+      { expectedKind: 'recovery' });
+    assert.equal(recovery.status, 'clean');
+    assert.equal(JSON.stringify(recovery).includes(f.lease.ownershipToken), false);
+  } finally { rmSync(f.root, { recursive: true, force: true }); }
+});
+
+test('authenticated lease recovery works when parent supervisor state is missing', () => {
+  const f = fixture();
+  const output = join(f.root, 'lease-recovery');
+  try {
+    rmSync(f.statePath, { force: true });
+    const result = recoverBackendLease(f.leasePath, resolve(output), { runtimeRoot: f.runtimeRoot });
+    assert.equal(result.ok, true);
+    assert.equal(existsSync(f.leasePath), false);
+    assert.equal(existsSync(firstLockPath(f.lease)), false);
+    const recovery = readArtifactPayload(join(output, 'recovery.json'),
+      { expectedKind: 'recovery' });
+    assert.equal(recovery.status, 'clean');
+    assert.equal(JSON.stringify(recovery).includes(f.lease.ownershipToken), false);
+  } finally { rmSync(f.root, { recursive: true, force: true }); }
+});
+
+test('recovery refuses a lease outside the configured runtime root', () => {
+  const f = fixture();
+  const sentinel = join(f.runtimeRoot, 'private', 'keep.txt');
+  try {
+    writeFileSync(sentinel, 'keep\n');
+    assert.throws(() => recoverBackendLease(f.leasePath, resolve(join(f.root, 'rejected')), {
+      runtimeRoot: join(f.root, 'different-runtime-root'),
+    }), /not a direct child/);
+    assert.equal(existsSync(sentinel), true);
+    assert.equal(existsSync(f.leasePath), true);
+    assert.equal(existsSync(firstLockPath(f.lease)), true);
+  } finally { rmSync(f.root, { recursive: true, force: true }); }
+});
+
+test('wrong credentials and malformed supervisor state never clean resources', () => {
+  const f = fixture();
+  try {
+    const wrong = { ...f.supervisor, ownershipToken: 'wrong' };
+    writeFileSync(f.statePath, JSON.stringify(wrong));
+    assert.throws(() => recoverSupervisedRun(f.statePath, { runtimeRoot: f.runtimeRoot }),
+      /token does not match/);
+    assert.equal(readBackendLease(f.leasePath, { token: f.lease.ownershipToken }).state, 'active');
+    assert.equal(existsSync(firstLockPath(f.lease)), true);
+    assert.throws(() => validateSupervisorState({ ...f.supervisor, extra: true }), /extra is unknown/);
+    assert.throws(() => validateSupervisorState({ ...f.supervisor, leasePath: 'relative.json' }),
+      /must be absolute/);
+  } finally { rmSync(f.root, { recursive: true, force: true }); }
+});
+
+test('an unleased live listener produces quarantine and remains untouched until safe retry', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-recovery-refusal-'));
+  const output = join(root, 'results');
+  const runtimeRoot = join(root, 'runtime');
+  const leasePath = join(runtimeRoot, 'private', 'backend-lease.json');
+  const statePath = join(runtimeRoot, 'private', 'supervisor.json');
+  mkdirSync(output, { recursive: true });
+  const server = createServer((_request, response) => response.end('foreign'));
+  await new Promise<void>((done, fail) => server.listen(0, '127.0.0.1', done).once('error', fail));
+  try {
+    const address = server.address();
+    assert(address && typeof address !== 'string', 'the recovery listener must have a port');
+    const port = address.port;
+    const lease = createBackendLease({ runId: 'recovery-spacetime-run0', backend: 'spacetime',
+      track: 'ecommerce', runIndex: 0, serverUri: `http://127.0.0.1:${port}`,
+      module: 'recovery-module', dataDir: join(root, 'data') });
+    lease.state = 'active';
+    lease.resources.listenerProcesses = [{ pid: process.pid + 100_000, startMarker: '1' }];
+    writeBackendLease(leasePath, lease);
+    writeFileSync(statePath, JSON.stringify({ version: SUPERVISOR_STATE_VERSION,
+      runId: lease.runId, backend: lease.backend, runtimeDir: resolve(join(runtimeRoot, 'private')),
+      leasePath: resolve(leasePath),
+      ownershipToken: lease.ownershipToken, output: resolve(output) }));
+
+    const refused = recoverSupervisedRun(statePath, { runtimeRoot });
+    assert.deepEqual(refused, { ok: false, state: 'quarantined', runId: lease.runId,
+      recoveryPath: join(output, 'recovery.json') });
+    assert.equal(existsSync(statePath), true, 'private recovery authority must survive refusal');
+    assert.equal((await fetch(`http://127.0.0.1:${port}`)).status, 200,
+      'unleased listener was disturbed');
+    const quarantine = readArtifactPayload(join(output, 'recovery.json'),
+      { expectedKind: 'recovery' });
+    assert.equal(quarantine.status, 'quarantined');
+    assert.deepEqual(quarantineResources(quarantine).listenerProcesses,
+      [{ pid: process.pid + 100_000, startMarker: '1' }]);
+
+    server.closeAllConnections();
+    await closeServer(server);
+    const cleaned = recoverSupervisedRun(statePath, { runtimeRoot });
+    assert.equal(cleaned.ok, true);
+    assert.equal(existsSync(statePath), false);
+  } finally {
+    if (server.listening) {
+      server.closeAllConnections();
+      await closeServer(server);
+    }
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+function firstLockPath(lease: BackendLease): string {
+  const [lock] = lease.resources.locks;
+  if (!lock) throw new Error('the recovery fixture must own a lock');
+  return lock.path;
+}
+
+function quarantineResources(value: unknown): { listenerProcesses: unknown[] } {
+  if (!isRecord(value) || !isRecord(value.resources) || !Array.isArray(value.resources.listenerProcesses)) {
+    throw new Error('recovery artifact has no listener process ids');
+  }
+  return { listenerProcesses: value.resources.listenerProcesses };
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function closeServer(server: ReturnType<typeof createServer>): Promise<void> {
+  return new Promise((resolveClose, reject) => server.close(error => error ? reject(error) : resolveClose()));
+}
diff --git a/tools/stack-bench/tests/reference-agent.contract.ts b/tools/stack-bench/tests/reference-agent.contract.ts
new file mode 100644
index 00000000000..d4ce67fd439
--- /dev/null
+++ b/tools/stack-bench/tests/reference-agent.contract.ts
@@ -0,0 +1,252 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { deployReferenceAndRestoreSource, parseReferenceAgentArgs, prepareReferenceSource, referenceDevCommand,
+  restoreReferenceSourceIdentity } from '../src/references/reference-agent.js';
+import { agentRequestArgv } from '../src/agents/agent-adapter-contract.js';
+import { AGENT_ADAPTER_REGISTRY } from '../src/agents/agent-adapters.js';
+import { loadReferenceRegistry, prepareReferenceFixtureSource,
+  selectReferenceFixture } from '../src/references/reference-fixtures.js';
+
+interface ArgvOptions {
+  mode?: string;
+  level?: string;
+  runIndex?: string;
+  recipe?: string;
+}
+
+function argv({ mode = 'build', level = '2', runIndex = '0', recipe }: ArgvOptions = {}): string[] {
+  return ['node', 'reference-agent.js', '--mode', mode, '--backend', 'mongodb',
+    '--app', '/work/reference', '--track', 'ecommerce', '--level', level,
+    '--run-index', runIndex, ...(recipe ? ['--recipe', recipe] : [])];
+}
+
+test('the model-free reference builder accepts any explicit positive level', () => {
+  assert.equal(parseReferenceAgentArgs(argv({ level: '1' })).level, 1);
+  assert.equal(parseReferenceAgentArgs(argv({ level: '2' })).level, 2);
+  assert.equal(parseReferenceAgentArgs(argv({ level: '3' })).level, 3);
+  assert.equal(parseReferenceAgentArgs(argv({ mode: 'upgrade', level: '4' })).mode, 'upgrade');
+  assert.equal(parseReferenceAgentArgs(argv({ mode: 'fix', level: '4' })).mode, 'fix');
+});
+
+test('the shared adapter request forwards the exact recipe into reference selection', async () => {
+  const adapter = AGENT_ADAPTER_REGISTRY.get('reference-fixture');
+  assert(adapter, 'the reference-fixture adapter must be registered');
+  const command = agentRequestArgv(adapter, {
+    mode: 'build', backend: 'mongodb', level: 1, app: '/work/reference',
+    track: 'ecommerce', runIndex: 0, model: 'reference-fixture',
+    guidance: 'prescribed', recipe: 'ecommerce.sequential-l1@2.5.0',
+  });
+  const parsed = parseReferenceAgentArgs(['node', ...command]);
+  assert.equal(parsed.recipe, 'ecommerce.sequential-l1@2.5.0');
+});
+
+test('the model-free reference builder rejects unsupported modes and malformed scope', () => {
+  assert.throws(() => parseReferenceAgentArgs(argv({ mode: 'resume' })),
+    /only build, upgrade and fix modes/);
+  assert.throws(() => parseReferenceAgentArgs(argv({ level: '0' })), /positive integer level/);
+  assert.throws(() => parseReferenceAgentArgs(argv({ level: '1.5' })), /positive integer level/);
+  assert.throws(() => parseReferenceAgentArgs(argv({ runIndex: '-1' })), /run-index/);
+});
+
+test('dependency progression seeds once and verifies the same full fixture on later levels', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-agent-progression-'));
+  try {
+    const app = join(root, 'app');
+    const common = { mode: 'build', backend: 'mongodb', track: 'ecommerce', level: 1,
+      recipe: 'ecommerce.progression-catalog@2.0.2', app };
+    const fresh = prepareReferenceSource(common);
+    assert.equal(fresh.fixture.id, 'ecommerce-reference-mongodb');
+    assert.equal(fresh.seeded, true);
+
+    const upgraded = prepareReferenceSource({ ...common, mode: 'upgrade', level: 2 });
+    assert.equal(upgraded.fixture.id, fresh.fixture.id);
+    assert.equal(upgraded.sourceSha256, fresh.sourceSha256);
+    assert.equal(upgraded.seeded, false);
+
+    const repaired = prepareReferenceSource({ ...common, mode: 'fix', level: 2 });
+    assert.equal(repaired.fixture.id, fresh.fixture.id);
+    assert.equal(repaired.sourceSha256, fresh.sourceSha256);
+    assert.equal(repaired.seeded, false);
+
+    const dependencyDirectory = join(app, 'client', 'node_modules', '.bin');
+    mkdirSync(dependencyDirectory, { recursive: true });
+    try {
+      symlinkSync(join(app, 'client', 'package.json'), join(dependencyDirectory, 'package-link'), 'file');
+      const afterInstall = prepareReferenceSource({ ...common, mode: 'upgrade', level: 2 });
+      assert.equal(afterInstall.sourceSha256, fresh.sourceSha256);
+    } catch (error) {
+      if (!isFileSystemError(error) || !['EPERM', 'EACCES'].includes(error.code)) throw error;
+    }
+
+    writeFileSync(join(app, 'unexpected.txt'), 'not part of the fixture');
+    assert.throws(() => prepareReferenceSource({ ...common, mode: 'upgrade', level: 3 }),
+      /contains source other than/);
+
+    const empty = join(root, 'empty');
+    assert.throws(() => prepareReferenceSource({ ...common, mode: 'upgrade', level: 2, app: empty }),
+      /upgrade requires the existing ecommerce-reference-mongodb source/);
+    assert.throws(() => prepareReferenceSource({ ...common, mode: 'fix', level: 2,
+      app: join(root, 'empty-fix') }),
+    /fix requires the existing ecommerce-reference-mongodb source/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('reference deployment restores canonical source while retaining generated bindings', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-agent-identity-'));
+  try {
+    const app = join(root, 'app');
+    const prepared = prepareReferenceSource({
+      mode: 'build', backend: 'spacetime', track: 'ecommerce', level: 1,
+      recipe: 'ecommerce.progression-catalog@2.0.2', app,
+    });
+    const lock = join(app, 'client', 'package-lock.json');
+    const canonicalLock = readFileSync(lock, 'utf8');
+    writeFileSync(lock, 'runtime-generated lockfile\n');
+    const bindings = join(app, 'client', 'src', 'module_bindings', 'index.ts');
+    mkdirSync(join(app, 'client', 'src', 'module_bindings'), { recursive: true });
+    writeFileSync(bindings, 'export const generated = true;\n');
+    const viteCache = join(app, 'client', 'node_modules', '.vite', 'deps_temp', 'package.json');
+    mkdirSync(join(app, 'client', 'node_modules', '.vite', 'deps_temp'), { recursive: true });
+    writeFileSync(viteCache, '{"type":"module"}\n');
+
+    const restored = restoreReferenceSourceIdentity(prepared.fixture, app);
+    assert.equal(restored.sha256, prepared.sourceSha256);
+    assert.equal(readFileSync(lock, 'utf8'), canonicalLock);
+    assert.equal(readFileSync(bindings, 'utf8'), 'export const generated = true;\n');
+    assert.equal(readFileSync(viteCache, 'utf8'), '{"type":"module"}\n');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('reference deployment restores source after a failed deploy', async () => {
+  const events: string[] = [];
+  await assert.rejects(() => deployReferenceAndRestoreSource(async () => {
+    events.push('deploy');
+    throw new Error('deploy failed');
+  }, () => events.push('restore')), /deploy failed/);
+  assert.deepEqual(events, ['deploy', 'restore']);
+});
+
+test('reference deployment reports both deploy and restoration failures', async () => {
+  await assert.rejects(() => deployReferenceAndRestoreSource(async () => {
+    throw new Error('deploy failed');
+  }, () => { throw new Error('restore failed'); }), error => {
+    assert(error instanceof AggregateError);
+    assert.deepEqual(error.errors.map(errorMessage), ['deploy failed', 'restore failed']);
+    return true;
+  });
+});
+
+test('reference clients are explicitly reachable outside their build container', () => {
+  const prefix = 'umask 022; exec /usr/bin/setpriv --reuid=10001 --regid=10001 --init-groups '
+    + '/usr/local/bin/npm run ';
+  assert.equal(referenceDevCommand('reference-server'),
+    `${prefix}dev > /run/application/reference-server.log 2>&1`);
+  assert.equal(referenceDevCommand('reference-server', { script: 'start' }),
+    `${prefix}start > /run/application/reference-server.log 2>&1`);
+  assert.equal(referenceDevCommand('reference-client', { networkVisible: true }),
+    `${prefix}dev -- --host 0.0.0.0 > /run/application/reference-client.log 2>&1`);
+  assert.equal(referenceDevCommand('reference-client', { networkVisible: true, port: 6475 }),
+    `${prefix}dev -- --host 0.0.0.0 --port 6475 --strictPort `
+      + '> /run/application/reference-client.log 2>&1');
+  assert.throws(() => referenceDevCommand('reference-client', { port: 0 }),
+    /invalid reference port 0/);
+  assert.throws(() => referenceDevCommand('../unsafe'), /unsafe reference log name/);
+  assert.throws(() => referenceDevCommand('reference-server', { script: 'start; unsafe' }),
+    /unsafe reference script/);
+});
+
+test('reference adapter seeds an empty campaign app from the exact registered fixture', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-agent-'));
+  try {
+    const args = { backend: 'mongodb', track: 'ecommerce', level: 1,
+      app: join(root, 'app') };
+    const seeded = prepareReferenceSource(args);
+    assert.equal(seeded.fixture.id, 'ecommerce-reference-mongodb');
+    assert.equal(seeded.seeded, true);
+    assert.equal(prepareReferenceSource(args).seeded, false);
+    writeFileSync(join(args.app, 'unexpected.txt'), 'different source');
+    assert.throws(() => prepareReferenceSource(args), /contains source other than/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('an unknown recipe-specific reference cannot be launched', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-agent-unknown-'));
+  try {
+    const args = { backend: 'mongodb', track: 'ecommerce', level: 1,
+      recipe: 'ecommerce.sequential-l1@0.0.0', app: join(root, 'app') };
+    assert.throws(() => prepareReferenceSource(args),
+      /requires exactly one catalogued ecommerce\.sequential-l1@0\.0\.0; found 0/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('the candidate L1 2.5 release uses the shared reference fixture', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-agent-l1-shared-'));
+  try {
+    const args = { backend: 'mongodb', track: 'ecommerce', level: 1,
+      recipe: 'ecommerce.sequential-l1@2.5.0', app: join(root, 'app') };
+    const seeded = prepareReferenceSource(args);
+    assert.equal(seeded.fixture.id, 'ecommerce-reference-mongodb');
+    assert.equal(seeded.sourceSha256, seeded.fixture.imported?.sourceSha256);
+    const client = readFileSync(join(args.app, 'client', 'src', 'App.tsx'), 'utf8');
+    for (const attribute of ['data-buy-input=', 'data-cart-input=', 'data-restock-input=']) {
+      assert.match(client, new RegExp(attribute));
+    }
+    assert.equal(prepareReferenceSource(args).seeded, false);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('the cumulative L2 fixture source prepares the exact seven action inputs for every backend', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-agent-l2-shared-'));
+  const registry = loadReferenceRegistry();
+  try {
+    for (const backend of ['mongodb', 'postgres', 'spacetime']) {
+      const app = join(root, backend);
+      const fixture = selectReferenceFixture(registry, { backend, track: 'ecommerce', level: 2,
+        recipe: 'ecommerce.sequential-l2@1.6.0' });
+      assert.equal(fixture.id, `ecommerce-reference-${backend}`);
+      assert.equal(prepareReferenceFixtureSource(fixture, app).sha256,
+        fixture.imported?.sourceSha256);
+      const files = backend === 'spacetime'
+        ? ['client/src/components/ItemCard.tsx', 'client/src/components/OrdersPanel.tsx',
+          'client/src/components/AdminPanel.tsx', 'client/src/components/CartPanel.tsx']
+        : ['client/src/App.tsx'];
+      const client = files.map(path => readFileSync(join(app, ...path.split('/')), 'utf8')).join('\n');
+      for (const attribute of [
+        'data-buy-input=', 'data-ship-input=', 'data-cancel-input=', 'data-transfer-input=',
+        'data-restock-input=', 'data-price-input=', 'data-cart-input=',
+      ]) assert.match(client, new RegExp(attribute));
+      assert.equal(prepareReferenceFixtureSource(fixture, app).sha256,
+        fixture.imported?.sourceSha256);
+    }
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('reference seeding rejects an unbound link in an otherwise empty destination', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-agent-link-'));
+  try {
+    const app = join(root, 'app');
+    mkdirSync(app);
+    try { symlinkSync(join(root, 'missing-target'), join(app, 'unchecked-link'), 'file'); }
+    catch (error) {
+      if (isFileSystemError(error) && ['EPERM', 'EACCES'].includes(error.code)) {
+        t.skip('filesystem cannot create test symlinks'); return;
+      }
+      throw error;
+    }
+    assert.throws(() => prepareReferenceSource({
+      backend: 'mongodb', track: 'ecommerce', level: 1, app,
+    }), /unsupported filesystem entry/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+function isFileSystemError(error: unknown): error is NodeJS.ErrnoException & { code: string } {
+  return error instanceof Error && 'code' in error && typeof error.code === 'string';
+}
+
+function errorMessage(error: unknown): string {
+  return error instanceof Error ? error.message : String(error);
+}
diff --git a/tools/stack-bench/tests/reference-fixtures.contract.ts b/tools/stack-bench/tests/reference-fixtures.contract.ts
new file mode 100644
index 00000000000..90b66a675d1
--- /dev/null
+++ b/tools/stack-bench/tests/reference-fixtures.contract.ts
@@ -0,0 +1,220 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, rmSync, symlinkSync, unlinkSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { hashDirectory } from '../src/evidence/provenance.js';
+import { loadReferenceRegistry, inspectImportedReference, selectReferenceFixture,
+  referenceMetadataIssues, validateReferenceRegistry, type ReferenceFixture, type ReferenceRegistry }
+  from '../src/references/reference-fixtures.js';
+import { resolveReferenceSelection } from '../src/references/reference-selection.js';
+
+test('the reference registry binds its current statuses and provenance', () => {
+  const registry = loadReferenceRegistry();
+  const result = validateReferenceRegistry(registry);
+  assert.deepEqual(result.issues, []);
+  assert.equal(registry.fixtures.filter(fixture => fixture.status === 'active').length, 0);
+  assert.equal(registry.fixtures.filter(fixture => fixture.status === 'candidate').length, 3);
+  assert.equal(registry.fixtures.filter(fixture => fixture.status === 'blocked').length, 0);
+  const escaped = structuredClone(registry);
+  const escapedFixture = escaped.fixtures[0];
+  assert(escapedFixture, 'the registry must contain a fixture');
+  escapedFixture.origin = { kind: 'imported' };
+  assert(validateReferenceRegistry(escaped).issues.some(issue => issue.includes('must be authored')));
+  escapedFixture.source = { basePath: 'reference-apps/old', patchPath: 'reference-apps/old.json' };
+  assert(validateReferenceRegistry(escaped).issues.some(issue =>
+    issue.includes('source overlays are not supported')));
+});
+
+test('reference validation contains malformed input and unsafe execution paths', () => {
+  assert(validateReferenceRegistry({ schemaVersion: 4, fixtures: [null] }).issues
+    .includes('fixture must be an object'));
+  assert(referenceMetadataIssues({ schemaVersion: 1, kind: 'node-api',
+    installDirectories: ['server'], server: { directory: '../server' },
+    client: { directory: 'client' } }).some(issue => issue.includes('server.directory')));
+  assert(referenceMetadataIssues({ schemaVersion: 1, kind: 'node-api',
+    installDirectories: ['server'], server: { directory: 'server' },
+    client: { directory: 'client' } }).some(issue => issue.includes('must be listed')));
+});
+
+test('a recipe-bound full fixture can serve only its declared progression action levels', () => {
+  const registry = loadReferenceRegistry();
+  for (const backend of ['mongodb', 'postgres', 'spacetime']) {
+    for (const level of [1, 2, 3, 4, 5, 6]) {
+      assert.equal(selectReferenceFixture(registry, { backend, track: 'ecommerce', level,
+        recipe: 'ecommerce.progression-catalog@2.0.2' }).id,
+      `ecommerce-reference-${backend}`);
+    }
+  }
+
+  const invalid = structuredClone(registry);
+  const invalidFixture = invalid.fixtures[0];
+  assert(invalidFixture, 'the registry must contain a fixture');
+  invalidFixture.actionLevels = [1, 2, 2, 6];
+  const issues = validateReferenceRegistry(invalid).issues.filter(issue =>
+    issue.startsWith('ecommerce-reference-mongodb:'));
+  assert(issues.some(issue => issue.includes('unique positive integer levels')));
+  const invalidRange = structuredClone(registry);
+  const invalidRangeFixture = invalidRange.fixtures[0];
+  assert(invalidRangeFixture, 'the registry must contain a fixture');
+  invalidRangeFixture.actionLevels = [1, 5, 7];
+  assert(validateReferenceRegistry(invalidRange).issues.some(issue =>
+    issue.includes('cannot exceed the fixture level')));
+});
+
+test('reference selection uses only current recipe fixtures', () => {
+  const registry = loadReferenceRegistry();
+  assert.equal(selectReferenceFixture(registry, { backend: 'mongodb', track: 'ecommerce', level: 1,
+    recipe: 'ecommerce.sequential-l1@2.5.0' }).id, 'ecommerce-reference-mongodb');
+  const blocked = structuredClone(registry);
+  const blockedFixture = blocked.fixtures
+    .find(fixture => fixture.id === 'ecommerce-reference-mongodb');
+  assert(blockedFixture, 'the current L1 fixture must exist');
+  blockedFixture.status = 'blocked';
+  assert.throws(() => selectReferenceFixture(blocked, { backend: 'mongodb', track: 'ecommerce', level: 1,
+    recipe: 'ecommerce.sequential-l1@2.5.0' }), /exactly one/);
+});
+
+test('default reference tooling follows the current candidate recipe', () => {
+  const registry = loadReferenceRegistry();
+  const selection = resolveReferenceSelection(registry, {
+    backend: 'mongodb', track: 'ecommerce', level: 1,
+  });
+  assert.equal(selection.recipe, 'ecommerce.sequential-l1@2.5.0');
+  assert.equal(selection.binding.status, 'candidate');
+  assert.equal(selection.fixture.id, 'ecommerce-reference-mongodb');
+
+  const l2 = resolveReferenceSelection(registry, {
+    backend: 'mongodb', track: 'ecommerce', level: 2,
+  });
+  assert.equal(l2.recipe, 'ecommerce.sequential-l2@1.6.0');
+  assert.equal(l2.fixture.id, 'ecommerce-reference-mongodb');
+
+  assert.throws(() => resolveReferenceSelection(registry, {
+    backend: 'mongodb', track: 'ecommerce', level: 1,
+    recipe: 'ecommerce.sequential-l1@0.0.0',
+  }), /requires exactly one catalogued ecommerce\.sequential-l1@0\.0\.0; found 0/);
+});
+
+test('the L2 recipe selects one current fixture per backend', () => {
+  const registry = loadReferenceRegistry();
+  for (const backend of ['mongodb', 'postgres', 'spacetime']) {
+    assert.equal(selectReferenceFixture(registry, { backend, track: 'ecommerce', level: 2,
+      recipe: 'ecommerce.sequential-l2@1.6.0' }).id,
+    `ecommerce-reference-${backend}`);
+  }
+});
+
+test('reference inspection rejects a symlink that the regular-file hash does not bind', t => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-link-'));
+  try {
+    const target = join(root, 'reference-apps', 'linked');
+    mkdirSync(join(target, 'server'), { recursive: true });
+    mkdirSync(join(target, 'client'), { recursive: true });
+    writeFileSync(join(target, 'server', 'package.json'), '{}\n');
+    writeFileSync(join(target, 'server', 'package-lock.json'), '{"lockfileVersion":3}\n');
+    writeFileSync(join(target, 'client', 'package.json'), '{}\n');
+    writeFileSync(join(target, 'client', 'package-lock.json'), '{"lockfileVersion":3}\n');
+    writeFileSync(join(target, 'reference.json'), JSON.stringify({
+      schemaVersion: 1, kind: 'node-api', installDirectories: ['server', 'client'],
+      server: { directory: 'server' }, client: { directory: 'client' },
+    }));
+    const fixture: ReferenceFixture & { imported: { path: string; sourceSha256: string } } = {
+      id: 'linked', backend: 'mongodb', track: 'ecommerce',
+      level: 1, status: 'candidate', targetPath: 'reference-apps/linked', imported: {
+      path: 'reference-apps/linked', sourceSha256: hashDirectory(target).sha256,
+    } };
+    const link = join(target, 'unchecked-link.txt');
+    try { symlinkSync(join(target, 'server', 'package.json'), link, 'file'); }
+    catch (error) {
+      if (isFileSystemError(error) && ['EPERM', 'EACCES'].includes(error.code)) {
+        t.skip('filesystem cannot create test symlinks'); return;
+      }
+      throw error;
+    }
+    assert.equal(hashDirectory(target).sha256, fixture.imported.sourceSha256);
+    const failure = inspectImportedReference(fixture, { root }).failures[0];
+    assert(failure, 'the symlink must produce an inspection failure');
+    assert.match(failure, /unsupported filesystem entry/);
+    unlinkSync(link);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('imported fixture inspection requires locks and rejects local or generated files', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-import-'));
+  try {
+    const target = join(root, 'reference-apps', 'example');
+    mkdirSync(join(target, 'server'), { recursive: true });
+    mkdirSync(join(target, 'client'), { recursive: true });
+    writeFileSync(join(target, 'server', 'package.json'), '{}\n');
+    writeFileSync(join(target, 'server', 'package-lock.json'), '{"lockfileVersion":3}\n');
+    writeFileSync(join(target, 'client', 'package.json'), '{}\n');
+    writeFileSync(join(target, 'client', 'package-lock.json'), '{"lockfileVersion":3}\n');
+    writeFileSync(join(target, 'start.sh'), '#!/bin/sh\n');
+    writeFileSync(join(target, 'reference.json'), JSON.stringify({ schemaVersion: 1,
+      kind: 'node-api', installDirectories: ['server', 'client'],
+      server: { directory: 'server' }, client: { directory: 'client' } }));
+    const fixture: ReferenceFixture & { imported: { path: string; sourceSha256: string } } = {
+      id: 'import', backend: 'mongodb', track: 'ecommerce',
+      level: 1, status: 'candidate', targetPath: 'reference-apps/example', imported: {
+      path: 'reference-apps/example', sourceSha256: hashDirectory(target).sha256,
+    } };
+    assert.equal(inspectImportedReference(fixture, { root }).ok, true);
+
+    mkdirSync(join(target, 'server', 'dist'));
+    writeFileSync(join(target, 'server', 'dist', 'app.js'), 'generated\n');
+    writeFileSync(join(target, 'local.ts'), 'const local = "D:/Development/private";\n');
+    fixture.imported.sourceSha256 = hashDirectory(target).sha256;
+    const result = inspectImportedReference(fixture, { root });
+    assert.equal(result.ok, false);
+    assert.deepEqual(result.failures,
+      ['reference source contains forbidden generated directory server/dist']);
+
+    rmSync(join(target, 'server', 'dist'), { recursive: true });
+    fixture.imported.sourceSha256 = hashDirectory(target).sha256;
+    assert(inspectImportedReference(fixture, { root }).failures
+      .some(failure => failure.includes('workstation absolute path')));
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('authored references bind checked-in bytes', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-authored-reference-'));
+  try {
+    const target = join(root, 'reference-apps', 'authored');
+    mkdirSync(join(target, 'server'), { recursive: true });
+    mkdirSync(join(target, 'client'), { recursive: true });
+    writeFileSync(join(target, 'server', 'package.json'), '{}\n');
+    writeFileSync(join(target, 'server', 'package-lock.json'), '{"lockfileVersion":3}\n');
+    writeFileSync(join(target, 'client', 'package.json'), '{}\n');
+    writeFileSync(join(target, 'client', 'package-lock.json'), '{"lockfileVersion":3}\n');
+    writeFileSync(join(target, 'start.sh'), '#!/bin/sh\n');
+    writeFileSync(join(target, 'reference.json'), JSON.stringify({
+      schemaVersion: 1, kind: 'node-api', installDirectories: ['server', 'client'],
+      server: { directory: 'server' }, client: { directory: 'client' },
+    }));
+    const fixture: ReferenceFixture & { imported: { path: string; sourceSha256: string } } = {
+      id: 'authored', backend: 'mongodb', track: 'ecommerce', level: 2,
+      status: 'candidate', targetPath: 'reference-apps/authored', mutationManifests: [],
+      origin: { kind: 'authored', note: 'Maintained as a benchmark oracle.' },
+      imported: { path: 'reference-apps/authored', sourceSha256: hashDirectory(target).sha256 } };
+    const registry: ReferenceRegistry = { schemaVersion: 4, fixtures: [fixture] };
+
+    assert.deepEqual(validateReferenceRegistry(registry, { root }).issues, []);
+    const reused = structuredClone(fixture);
+    reused.id = 'authored-next-level';
+    reused.level = 3;
+    registry.fixtures.push(reused);
+    assert.deepEqual(validateReferenceRegistry(registry, { root }).issues, []);
+    assert.equal(inspectImportedReference(fixture, { root }).ok, true);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+function isFileSystemError(error: unknown): error is NodeJS.ErrnoException & { code: string } {
+  return error instanceof Error && 'code' in error && typeof error.code === 'string';
+}
diff --git a/tools/stack-bench/tests/reference-install.test.ts b/tools/stack-bench/tests/reference-install.test.ts
new file mode 100644
index 00000000000..64d394252d9
--- /dev/null
+++ b/tools/stack-bench/tests/reference-install.test.ts
@@ -0,0 +1,36 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { referenceInstallSteps } from '../src/references/reference-install.js';
+
+test('Spacetime references use the checked-in release SDK lock', () => {
+  assert.deepEqual(referenceInstallSteps({
+    kind: 'spacetime',
+    frozenLock: true,
+    installDirectories: ['backend/spacetimedb', 'client'],
+    moduleDirectory: 'backend/spacetimedb',
+  }), [
+    { directory: 'backend/spacetimedb', command: 'npm', args: ['ci', '--no-audit', '--no-fund'] },
+    { directory: 'client', command: 'npm', args: ['ci', '--no-audit', '--no-fund'] },
+  ]);
+});
+
+test('Spacetime references explicitly refresh the local SDK lock until it is frozen', () => {
+  assert.deepEqual(referenceInstallSteps({
+    kind: 'spacetime', installDirectories: ['client'],
+  }), [
+    { directory: 'client', command: 'npm',
+      args: ['install', 'spacetimedb@file:/deps/spacetimedb.tgz', '--package-lock-only',
+        '--ignore-scripts', '--no-audit', '--no-fund'] },
+    { directory: 'client', command: 'npm', args: ['ci', '--no-audit', '--no-fund'] },
+  ]);
+});
+
+test('hosted references retain clean installs without lock rewriting', () => {
+  assert.deepEqual(referenceInstallSteps({
+    kind: 'node-api', installDirectories: ['server', 'client'],
+  }), [
+    { directory: 'server', command: 'npm', args: ['ci', '--no-audit', '--no-fund'] },
+    { directory: 'client', command: 'npm', args: ['ci', '--no-audit', '--no-fund'] },
+  ]);
+});
diff --git a/tools/stack-bench/tests/reference-live.contract.ts b/tools/stack-bench/tests/reference-live.contract.ts
new file mode 100644
index 00000000000..d928f365a5d
--- /dev/null
+++ b/tools/stack-bench/tests/reference-live.contract.ts
@@ -0,0 +1,784 @@
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import test from 'node:test';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+import { tmpdir } from 'node:os';
+import { parseReferenceQualificationArgs,
+  mutationWorkerRequiresSiblingAbort, referenceQualificationContext,
+  parallelMutationChildArgv, parallelMutationResourceLockKeys, preflightParallelMutationResources,
+  parallelMutationResults, readParallelMutationWorker, referenceQualificationPaths,
+  qualificationMutationManifest,
+  companionReferenceArtifactPath,
+  assertReleaseCandidateRepetitions,
+  qualificationArtifactsOk,
+  referenceQualificationRelease,
+  referenceQualificationRunner,
+  referenceQualificationSelectionArgs,
+  referenceQualificationWorkRoot, referenceRunFromMutationBaseline,
+  targetedMutationCheckKeys } from '../src/references/reference-live.js';
+import { auditMutationWorkerRun, auditReferenceRun }
+  from '../src/references/reference-qualification-audit.js';
+import { runBounded } from '../src/runtime/bounded-process.js';
+import { rescueSupervisedLease } from '../src/runtime/recovery.js';
+import { emptyArtifactIdentities, readArtifact, writeArtifact, writeRunJson }
+  from '../src/evidence/artifacts.js';
+import { createCheckEvidence } from '../src/evidence/check-evidence.js';
+import { readMutationManifest } from '../src/evidence/mutation-analysis.js';
+import { createBoundRecipeTaskRequest } from '../src/composition/recipe-selection.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { resolveFeatureCatalog } from '../src/progression/feature-catalog-selection.js';
+import { resolveProgressionRecipeLevelSelection }
+  from '../src/progression/progression-recipe-selection.js';
+import type { ReferenceFixture } from '../src/references/reference-fixtures.js';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+const fixture: ReferenceFixture & { imported: { sourceSha256: string } } = {
+  id: 'reference-live-test', backend: 'mongodb', track: 'ecommerce', level: 1,
+  status: 'qualified',
+  imported: { sourceSha256: 'a'.repeat(64) } };
+
+function required<T>(value: T | null | undefined, description: string): T {
+  if (value === null || value === undefined) throw new Error(`${description} is required`);
+  return value;
+}
+
+function valuesAfter(argv: readonly string[], flag: string): string[] {
+  return required(argv[argv.indexOf(flag) + 1], `${flag} value`).split(',');
+}
+
+function record(value: unknown, description: string): Record<string, unknown> {
+  if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+    throw new Error(`${description} must be an object`);
+  }
+  return Object.fromEntries(Object.entries(value));
+}
+
+test('reference qualification runs only the mutations selected by its check scope', () => {
+  const path = 'grader/mutations/mongodb-ecommerce-2.0.1.json';
+  const source = readMutationManifest(join(STACK_BENCH_ROOT, path));
+  const ids = source.mutations.slice(0, 2).map(mutation => mutation.id);
+  const context = { calibration: { mutations: [{ backend: 'mongodb', path,
+    targets: ids.map(id => ({ id, stableKeys: [] })) }] } };
+  const selected = qualificationMutationManifest({ ...fixture, id: 'selected-mutations',
+    mutationManifests: ['grader/mutations/unused.json', path] }, context);
+
+  assert.deepEqual(selected.mutations.map(mutation => mutation.id), ids);
+  assert.deepEqual(qualificationMutationManifest({ ...fixture, id: 'targeted-mutation',
+    mutationManifests: [path] }, context, [required(ids[1], 'second mutation id')])
+    .mutations.map(mutation => mutation.id), [ids[1]]);
+  assert.throws(() => qualificationMutationManifest({ ...fixture, id: 'missing-target',
+    mutationManifests: [path] }, context, ['not-selected']), /targeted mutation selection is missing/);
+  assert.throws(() => qualificationMutationManifest({ ...fixture, id: 'missing-mutation',
+    mutationManifests: [path] }, { calibration: { mutations: [{ backend: 'mongodb', path,
+      targets: [{ id: 'not-present' }] }] } }), /mutation selection is missing/);
+  assert.throws(() => qualificationMutationManifest({ ...fixture, id: 'wrong-owner',
+    mutationManifests: [] }, context), /does not own its calibrated mutation manifest/);
+});
+
+test('targeted mutation diagnostics grade only their scored target checks', () => {
+  const context = { binding: { release: { checkCatalog: [
+    { stableKey: 'check.a', points: 1 },
+    { stableKey: 'check.b', points: 2 },
+    { stableKey: 'check.control', points: 0 },
+    { stableKey: 'check.outside', points: 1 },
+  ] } }, selectedCheckKeys: ['check.a', 'check.b', 'check.control'] };
+  const manifest = { mutations: [
+    { id: 'break-b', targets: ['check.b', 'check.control'] },
+  ] };
+  assert.deepEqual(targetedMutationCheckKeys(context, manifest), ['check.b']);
+  assert.throws(() => targetedMutationCheckKeys(context, { mutations: [
+    { id: 'outside', targets: ['check.outside'] },
+  ] }), /outside the run scope/);
+  assert.throws(() => targetedMutationCheckKeys(context, { mutations: [
+    { id: 'missing', targets: ['check.missing'] },
+  ] }), /unknown checks/);
+});
+
+test('reference qualification requires an explicit valid stack scope', () => {
+  const args = parseReferenceQualificationArgs(['node', 'reference-live.js', '--backend', 'postgres',
+    '--track', 'ecommerce', '--level', '2']);
+  assert.equal(args.track, 'ecommerce');
+  assert.equal(args.level, 2);
+  assert.equal(args.mutations, false);
+  assert.deepEqual(args.selectedCheckKeys, []);
+  assert.equal(args.timeoutMinutes, 60);
+  const mutationArgs = parseReferenceQualificationArgs(['node', 'reference-live.js', '--backend', 'postgres',
+    '--mutations', '--release-candidate']);
+  assert.equal(mutationArgs.mutations, true);
+  assert.equal(mutationArgs.timeoutMinutes, 120);
+  assert.equal(mutationArgs.mutationMaxRuntimeMinutes, 60);
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--mutations']), /requires --release-candidate/);
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--release-candidate']), /requires --mutations/);
+  const targeted = parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--mutations', '--mutation-id', 'one-defect']);
+  assert.deepEqual(targeted.mutationIds, ['one-defect']);
+  assert.equal(targeted.releaseCandidate, undefined);
+  const selected = parseReferenceQualificationArgs(['node', 'reference-live.js', '--backend', 'postgres',
+    '--selected-check', 'check.one', '--selected-check', 'check.two']);
+  assert.deepEqual(selected.selectedCheckKeys, ['check.one', 'check.two']);
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--mutations', '--mutation-id', 'one-defect',
+    '--selected-check', 'check.one']), /cannot be combined/);
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--mutation-id', 'one-defect']), /requires --mutations/);
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--mutations', '--release-candidate', '--mutation-id', 'one-defect']),
+  /cannot select individual mutations/);
+  assert.equal(parseReferenceQualificationArgs(['node', 'reference-live.js', '--backend', 'postgres',
+    '--mutations', '--release-candidate', '--timeout-minutes', '120']).timeoutMinutes, 120);
+  assert.equal(parseReferenceQualificationArgs(['node', 'reference-live.js', '--backend', 'postgres',
+    '--mutations', '--release-candidate', '--timeout-minutes', '60', '--mutation-max-runtime-minutes', '30'])
+    .mutationMaxRuntimeMinutes, 30);
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--mutations', '--release-candidate', '--timeout-minutes', '60']), /plus 20 minutes/);
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--mutations', '--release-candidate', '--timeout-minutes', '181']), /through 180/);
+  assert.equal(parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--track', 'ecommerce', '--level', '3']).level, 3);
+  assert.equal(parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--feature-catalog', 'ecommerce.questlines@2.0.2'])
+    .featureCatalog, 'ecommerce.questlines@2.0.2');
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--track', 'ecommerce', '--level', '4']), /declared/);
+  assert.equal(parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--track', 'ecommerce', '--level', '1',
+    '--recipe', 'ecommerce.sequential-l1@2.5.0']).recipe, 'ecommerce.sequential-l1@2.5.0');
+  assert.equal(parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--repetitions', '1']).repetitions, 1);
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'postgres', '--repetitions', '0']), /positive integer/);
+});
+
+test('parallel Spacetime qualification derives an isolated listener port from the run index', () => {
+  const first = parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'spacetime', '--run-index', '0']);
+  const parallel = parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'spacetime', '--run-index', '14']);
+  const explicit = parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'spacetime', '--run-index', '14', '--spacetime-port', '4411']);
+
+  assert.equal(first.spacetimePort, 3310);
+  assert.equal(parallel.spacetimePort, 3324);
+  assert.notEqual(first.spacetimePort, parallel.spacetimePort);
+  assert.equal(explicit.spacetimePort, 4411);
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'spacetime', '--mutations', '--release-candidate', '--mutation-workers', '2',
+    '--spacetime-port', '65535']), /worker offsets/);
+});
+
+test('parallel mutation qualification reserves bounded slots and exact child shards', () => {
+  const args = parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'mongodb', '--mutations', '--release-candidate', '--mutation-workers', '4', '--run-index', '8']);
+  assert.equal(args.mutationWorkers, 4);
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'mongodb', '--mutation-workers', '2']), /requires --mutations/);
+  assert.throws(() => parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'mongodb', '--mutations', '--release-candidate', '--mutation-workers', '2', '--run-index', '20']),
+  /run-index cap/);
+
+  const argv = parallelMutationChildArgv(args,
+    { binding: { release: { id: 'ecommerce.sequential-l2', version: '1.5.0' } } },
+    { artifactPath: '/results/w3.json', baselineBundle: '/results/clean/bundle.json',
+      workerIndex: 2, workerCount: 4 });
+  const after = (flag: string) => required(argv[argv.indexOf(flag) + 1], `${flag} value`);
+  assert.equal(after('--run-index'), '10');
+  assert.equal(after('--mutation-shard-index'), '2');
+  assert.equal(after('--mutation-shard-count'), '4');
+  assert.equal(after('--repetitions'), '1');
+  assert.equal(after('--out'), '/results/w3.json');
+  assert.equal(argv.includes('--reference-mutation-only'), true);
+  assert.equal(after('--mutation-baseline-bundle').replaceAll('\\', '/'),
+    '/results/clean/bundle.json');
+
+  args.mutationIds = ['one-defect'];
+  const targetedArgv = parallelMutationChildArgv(args,
+    { binding: { release: { id: 'ecommerce.sequential-l2', version: '1.5.0' } } },
+    { artifactPath: '/results/w3.json', baselineBundle: '/results/clean/bundle.json',
+      workerIndex: 2, workerCount: 4 });
+  assert.equal(targetedArgv[targetedArgv.indexOf('--mutation-id') + 1], 'one-defect');
+
+  args.mutationCheckpointDir = '/results/checkpoints';
+  const resumable = parallelMutationChildArgv(args,
+    { binding: { release: { id: 'ecommerce.sequential-l2', version: '1.5.0' } } },
+    { artifactPath: '/results/w3.json', baselineBundle: '/results/clean/bundle.json',
+      workerIndex: 2, workerCount: 4 });
+  assert.equal(required(resumable[resumable.indexOf('--mutation-checkpoint') + 1], 'mutation checkpoint')
+    .replaceAll('\\', '/'), '/results/checkpoints/mongodb-worker-3.json');
+  assert.equal(resumable[resumable.indexOf('--mutation-max-runtime-minutes') + 1], '60');
+});
+
+test('parallel mutation workers stop siblings only for unusable failures', () => {
+  const complete = { assigned: ['one'], control: {
+    checkpoint: { status: 'complete' }, results: [{ id: 'one', status: 'SURVIVED' }],
+  } };
+  assert.equal(mutationWorkerRequiresSiblingAbort({ ok: false }, complete), false,
+    'a conclusive survivor is usable mutation evidence');
+  assert.equal(mutationWorkerRequiresSiblingAbort({ ok: false }, {
+    assigned: ['one'], control: { outcome: { kind: 'harness_failure' } },
+  }), true);
+  assert.equal(mutationWorkerRequiresSiblingAbort({ ok: false }, {
+    assigned: ['one'], control: null,
+  }), true);
+});
+
+test('mutation-only worker audit requires Docker, caught defects, and released resources', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-mutation-worker-audit-'));
+  try {
+    const identities = emptyArtifactIdentities({ stackAdapter: { id: 'mongodb' } });
+    writeArtifact(join(root, 'mutation-control.json'), { kind: 'mutation_control', id: 'control',
+      identities, payload: { fixtureSha256: fixture.imported.sourceSha256, ok: true,
+        baseline: { total: 2, max: 2 }, summary: { caught: 1, completed: 1, total: 1,
+          remaining: 0 }, results: [{ id: 'mutation', status: 'CAUGHT' }] } });
+    writeArtifact(join(root, 'run.json'), { kind: 'benchmark_run', id: 'run', identities,
+      payload: { backend: 'mongodb', track: 'ecommerce', setup: { isolation: {
+        mode: 'container', imageId: 'sha256:image' } }, outcome: { kind: 'passed' },
+        mutationControl: { ok: true }, backendLease: { state: 'released', resources: {
+          buildContainer: { running: false }, locks: [{ key: 'slot', releasedAt: new Date().toISOString() }],
+        } } } });
+    const audited = auditMutationWorkerRun(root, fixture);
+    assert.equal(audited.ok, true);
+    assert.equal(audited.imageId, 'sha256:image');
+
+    const failed = readArtifact<{ results: Array<{ status: string }> }>(join(root, 'mutation-control.json'));
+    required(failed.payload.results[0], 'first mutation result').status = 'SURVIVED';
+    writeFileSync(join(root, 'mutation-control.json'), `${JSON.stringify(failed)}\n`);
+    assert.equal(auditMutationWorkerRun(root, fixture).ok, false);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('parallel mutation preflight covers every worker slot and Spacetime listener', () => {
+  const args = parseReferenceQualificationArgs(['node', 'reference-live.js',
+    '--backend', 'spacetime', '--track', 'ecommerce', '--mutations', '--release-candidate',
+    '--mutation-workers', '3', '--run-index', '8']);
+  const keys = parallelMutationResourceLockKeys(args);
+  assert.deepEqual(keys, [
+    'listener:http://127.0.0.1:3318',
+    'listener:http://127.0.0.1:3319',
+    'listener:http://127.0.0.1:3320',
+    'slot:ecommerce:spacetime:run10',
+    'slot:ecommerce:spacetime:run8',
+    'slot:ecommerce:spacetime:run9',
+  ]);
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-parallel-preflight-'));
+  try {
+    for (const key of keys) {
+      const digest = createHash('sha256').update(key).digest('hex');
+      const path = join(root, `${digest}.lock.json`);
+      writeFileSync(path, '{}\n');
+      assert.throws(() => preflightParallelMutationResources(args,
+        { STACK_BENCH_RESOURCE_LOCK_DIR: root }), new RegExp(key.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')));
+      rmSync(path);
+    }
+    assert.doesNotThrow(() => preflightParallelMutationResources(args,
+      { STACK_BENCH_RESOURCE_LOCK_DIR: root }));
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('parallel worker evidence is read only from its exact contained output', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-parallel-worker-'));
+  try {
+    const artifactPath = join(root, 'w1.json');
+    const output = join(root, 'w1.runs', 'r1');
+    mkdirSync(output, { recursive: true });
+    const identities = emptyArtifactIdentities({
+      fixture: { id: 'fixture', sha256: 'a'.repeat(64), state: 'candidate' },
+      recipe: { id: 'recipe', version: '1.0.0', sha256: 'b'.repeat(64), state: 'candidate' },
+      calibration: { id: 'calibration', version: '1.0.0', sha256: 'c'.repeat(64), state: 'draft' },
+      stackAdapter: { id: 'mongodb' },
+    });
+    const mutationIds = ['first', 'second'];
+    writeArtifact(join(output, 'mutation-control.json'), { kind: 'mutation_control', id: 'control',
+      payload: { ok: true, shard: { index: 0, count: 1, mutationIds },
+        results: mutationIds.toReversed().map(id => ({ id, status: 'CAUGHT' })) } });
+    writeArtifact(artifactPath, { kind: 'reference_qualification', id: 'worker', identities,
+      payload: { fixture: 'fixture', mutationControl: true, requiredRepetitions: 1, ok: true,
+        runs: [{ ok: true, output: 'w1.runs/r1' }] } });
+    const inspected = readParallelMutationWorker(artifactPath, { ok: true },
+      { ...identities, workerIndex: 0, workerCount: 1 },
+      { scenario: 'shared', mutations: mutationIds.map(id => ({ id })) });
+    assert.deepEqual(inspected.failures, []);
+    assert.deepEqual(required(inspected.control, 'worker mutation control').results
+      ?.map(result => result.id), ['second', 'first']);
+
+    writeArtifact(join(output, 'mutation-control.json'), { kind: 'mutation_control', id: 'control',
+      payload: { ok: true } });
+    const empty = readParallelMutationWorker(artifactPath, { ok: true },
+      { ...identities, workerIndex: 0, workerCount: 1 },
+      { scenario: 'shared', mutations: mutationIds.map(id => ({ id })) });
+    assert.equal(empty.shardVerified, false);
+    assert(empty.failures.includes('worker mutation shard is missing'));
+    assert(empty.failures.includes('worker mutation results are missing'));
+
+    writeArtifact(join(output, 'mutation-control.json'), { kind: 'mutation_control', id: 'control',
+      payload: { ok: true, shard: { index: 0, count: 1, mutationIds },
+        results: mutationIds.map(id => ({ id, status: 'CAUGHT' })) } });
+
+    const escaped = readArtifact<{ runs: Array<{ output: string }> }>(artifactPath);
+    required(escaped.payload.runs[0], 'worker run').output = '../outside';
+    writeFileSync(artifactPath, JSON.stringify(escaped));
+    const rejected = readParallelMutationWorker(artifactPath, { ok: true },
+      { ...identities, workerIndex: 0, workerCount: 1 },
+      { scenario: 'shared', mutations: mutationIds.map(id => ({ id })) });
+    assert(rejected.failures.includes('worker run output escapes its artifact directory'));
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('parallel mutation accounting keeps the expected assignment when a worker stops early', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-parallel-worker-failure-'));
+  try {
+    const artifactPath = join(root, 'w2.json');
+    const output = join(root, 'w2.runs', 'r1');
+    mkdirSync(output, { recursive: true });
+    const identities = emptyArtifactIdentities({
+      fixture: { id: 'fixture', sha256: 'a'.repeat(64), state: 'candidate' },
+      recipe: { id: 'recipe', version: '1.0.0', sha256: 'b'.repeat(64), state: 'candidate' },
+      calibration: { id: 'calibration', version: '1.0.0', sha256: 'c'.repeat(64), state: 'draft' },
+      stackAdapter: { id: 'mongodb' },
+    });
+    const manifest = { mutations: [
+      { id: 'first', scenario: 'a' }, { id: 'second', scenario: 'b' },
+      { id: 'third', scenario: 'c' }, { id: 'fourth', scenario: 'd' },
+    ] };
+    writeArtifact(join(output, 'mutation-control.json'), { kind: 'mutation_control', id: 'control',
+      payload: { ok: false, outcome: { kind: 'harness_failure', phase: 'mutation-control',
+        reason: 'baseline deadline exceeded' } } });
+    writeArtifact(artifactPath, { kind: 'reference_qualification', id: 'worker', identities,
+      payload: { fixture: 'fixture', mutationControl: true, requiredRepetitions: 1, ok: false,
+        runs: [{ ok: false, output: 'w2.runs/r1' }] } });
+
+    const inspected = readParallelMutationWorker(artifactPath, { ok: false, code: 2 },
+      { ...identities, workerIndex: 1, workerCount: 2 }, manifest);
+    assert.deepEqual(inspected.assigned, ['second', 'fourth']);
+    assert.equal(inspected.shardVerified, false);
+    assert.equal(inspected.failures.includes('worker mutation shard does not match its assignment'), false);
+
+    const missing = readParallelMutationWorker(join(root, 'missing.json'), { ok: false, code: 2 },
+      { ...identities, workerIndex: 1, workerCount: 2 }, manifest);
+    assert.deepEqual(missing.assigned, ['second', 'fourth']);
+    assert(missing.failures.includes('worker artifact is missing'));
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('partial parallel mutation accounting preserves completed shard results', () => {
+  const manifest = { mutations: [
+    { id: 'first', scenario: 'a' }, { id: 'second', scenario: 'b' },
+    { id: 'third', scenario: 'c' }, { id: 'fourth', scenario: 'd' },
+  ] };
+  const completed = { shardVerified: true, control: { shard: {
+    index: 0, count: 2, mutationIds: ['first', 'third'],
+  }, results: [{ id: 'third', status: 'CAUGHT' }, { id: 'first', status: 'SURVIVED' }] } };
+  const failed = { shardVerified: false, control: { ok: false } };
+
+  assert.deepEqual(parallelMutationResults(manifest, [completed, failed])
+    .map(result => result.id), ['first', 'third']);
+  assert.deepEqual(parallelMutationResults(manifest, [completed, {
+    shardVerified: true, control: { shard: {
+      index: 1, count: 2, mutationIds: ['second', 'fourth'],
+    }, results: [{ id: 'fourth', status: 'CAUGHT' }, { id: 'second', status: 'CAUGHT' }] },
+  }]).map(result => result.id), ['first', 'second', 'third', 'fourth']);
+});
+
+test('reference qualification resolves the exact executable calibration identity', () => {
+  const context = referenceQualificationContext({ ...fixture, id: 'ecommerce-reference-mongodb',
+    imported: { sourceSha256: 'edb9732535b2273232a320b8e7b4ad6758991683a6bd06103f2ec4be07dafe20' } });
+  assert.equal(record(context.identity, 'qualification identity').id, 'ecommerce.sequential-l1-calibration');
+  assert.equal(record(context.identity, 'qualification identity').sha256, context.calibration.qualificationSha256);
+});
+
+test('reference qualification resolves the current calibration', () => {
+  const context = referenceQualificationContext({ ...fixture, id: 'ecommerce-reference-mongodb',
+    imported: { sourceSha256: 'edb9732535b2273232a320b8e7b4ad6758991683a6bd06103f2ec4be07dafe20' } },
+  'ecommerce.sequential-l1@2.5.0');
+  assert.equal(context.binding.release.version, '2.5.0');
+  assert.equal(context.calibration.version, '2.5.0');
+  assert.equal(context.calibration.state, 'draft');
+});
+
+test('modular reference qualification selects every exact check without prescribing specifications', () => {
+  const binding = resolveRecipeRelease(loadTrack('ecommerce'), 1,
+    'ecommerce.sequential-l1@2.5.0');
+  const argv = referenceQualificationSelectionArgs(binding);
+  const featureIds = valuesAfter(argv, '--feature-module');
+  const expectedSpecifications = valuesAfter(argv, '--expect-spec');
+  const checkKeys = valuesAfter(argv, '--check');
+
+  assert.equal(argv.includes('--request-spec'), false);
+  assert.equal(checkKeys.length, 48);
+  assert.equal(new Set(checkKeys).size, 48);
+  const task = createBoundRecipeTaskRequest(binding,
+    { featureIds, expectedSpecifications, checkKeys });
+  assert.equal(task.selection.checks.length, 48);
+  assert.equal(task.selection.scoredPoints, 58);
+  assert.equal(task.selection.checks.filter(check => check.points === 0).length, 2);
+  assert.equal(required(task.selection.specifications, 'task specifications').requested.length, 0);
+  assert.equal(required(task.selection.specifications, 'task specifications').expected.length, expectedSpecifications.length);
+});
+
+test('progression reference qualification follows the catalog check selection', () => {
+  const track = loadTrack('ecommerce');
+  const binding = resolveRecipeRelease(track, 3, 'ecommerce.progression-depth3@2.0.2');
+  const catalog = resolveFeatureCatalog('ecommerce.questlines@2.0.2', track);
+  const selection = resolveProgressionRecipeLevelSelection(binding, catalog, 3,
+    { cumulative: true });
+  const argv = referenceQualificationSelectionArgs(binding, selection);
+  assert.deepEqual(valuesAfter(argv, '--check').sort(), [...selection.grader.checkKeys].sort());
+  assert.deepEqual(valuesAfter(argv, '--feature-module').sort(),
+    [...selection.grader.selection.requested.features].sort());
+  assert.deepEqual(valuesAfter(argv, '--expect-spec').sort(),
+    [...selection.grader.selection.requested.specifications.expected].sort());
+  assert.equal(required(valuesAfter(argv, '--task-mode')[0], 'task mode'), 'upgrade');
+  assert.equal(selection.grader.checkKeys.length, 108);
+  assert.equal(selection.grader.checkKeys.some(key => key.includes('automatic-reorder')), false);
+  assert.deepEqual(referenceQualificationSelectionArgs(binding, selection,
+    [required(selection.grader.checkKeys[0], 'first check key')]).filter((_value, index, argv) =>
+    argv[index - 1] === '--check'), [required(selection.grader.checkKeys[0], 'first check key')]);
+  const scoped = referenceQualificationRelease(binding.release, selection.grader.checkKeys);
+  assert.equal(scoped.checkCatalog.length, 108);
+  assert.throws(() => referenceQualificationRelease(binding.release,
+    [...selection.grader.checkKeys, 'missing.check']), /unknown checks/);
+});
+
+test('reference qualification keeps underlying runs beside the requested artifact', () => {
+  const root = join(tmpdir(), 'stack-bench-reference-output-test');
+  const paths = referenceQualificationPaths({ out: join(root, 'postgres-reference.json') }, 'ignored-id');
+  assert.equal(paths.artifactPath, join(root, 'postgres-reference.json'));
+  assert.equal(paths.artifactDirectory, root);
+  assert.equal(paths.runsRoot, join(root, 'postgres-reference.runs'));
+});
+
+test('release mutation evidence gives its clean baseline a separate reference path', () => {
+  const root = join(tmpdir(), 'stack-bench-companion-path-test');
+  assert.equal(companionReferenceArtifactPath(join(root, 'ecommerce-l3-postgres-mutation.json')),
+    join(root, 'ecommerce-l3-postgres-reference.json'));
+  assert.equal(companionReferenceArtifactPath(join(root, 'custom.json')),
+    join(root, 'custom-reference.json'));
+});
+
+test('release mutation evidence requires the calibrated repetition count', () => {
+  const calibration = { qualification: { mutationRepetitions: 2 } };
+  assert.doesNotThrow(() => assertReleaseCandidateRepetitions(
+    { releaseCandidate: true, repetitions: 2 }, calibration));
+  assert.throws(() => assertReleaseCandidateRepetitions(
+    { releaseCandidate: true, repetitions: 1 }, calibration), /exactly 2/);
+  assert.doesNotThrow(() => assertReleaseCandidateRepetitions(
+    { releaseCandidate: false, repetitions: 1 }, calibration));
+});
+
+test('release qualification fails when either required artifact fails', () => {
+  assert.equal(qualificationArtifactsOk({ ok: true }, { ok: true }), true);
+  assert.equal(qualificationArtifactsOk({ ok: true }, { ok: false }), false);
+  assert.equal(qualificationArtifactsOk({ ok: false }, { ok: true }), false);
+  assert.equal(qualificationArtifactsOk({ ok: true }), true);
+});
+
+test('reference qualification uses the daemon-visible appliance work root', () => {
+  assert.equal(referenceQualificationWorkRoot({ STACK_BENCH_WORK_DIR: '/var/lib/stack-bench/work' }),
+    resolve('/var/lib/stack-bench/work'));
+});
+
+test('reference qualification records whether its controller is the supported Linux appliance', () => {
+  assert.deepEqual(referenceQualificationRunner({ env: { STACK_BENCH_APPLIANCE: '1' },
+    platform: 'linux', architecture: 'x64', hostname: 'runner-1', dockerInfo: {
+      ServerVersion: '29.1.2', OSType: 'linux', Architecture: 'x86_64',
+      KernelVersion: '6.8.0-test', NCPU: 8, MemTotal: 16_000_000_000, ContainersRunning: 3,
+    } }), {
+    schemaVersion: 1, mode: 'appliance', platform: 'linux', architecture: 'x64',
+    hostname: 'runner-1',
+    dockerEngineVersion: '29.1.2', dockerOs: 'linux', dockerArchitecture: 'x86_64',
+    kernelVersion: '6.8.0-test', cpuCount: 8, memoryBytes: 16_000_000_000, containersRunning: 3,
+  });
+  assert.deepEqual(referenceQualificationRunner({ env: {}, platform: 'win32', architecture: 'x64',
+    hostname: 'dev-box' }), {
+    schemaVersion: 1, mode: 'local-controller', platform: 'win32', architecture: 'x64',
+    hostname: 'dev-box',
+  });
+  assert.throws(() => referenceQualificationRunner({ env: { STACK_BENCH_APPLIANCE: '1' },
+    platform: 'linux', architecture: 'x64', dockerInfo: {} }),
+  /Docker daemon inspection did not return ServerVersion/);
+});
+
+function writeEvidence(root: string, { id, points, passed }: {
+  id: string;
+  points: number;
+  passed: boolean;
+}) {
+  const stableKey = `test.reference.${id}`;
+  const release = { id: 'test.reference', version: '1.0.0', contentSha256: 'b'.repeat(64),
+    checkCatalog: [{ stableKey, points, source: 'scenarios/test.json', executionId: 'systems',
+      featureId: 901, criterionId: id, packId: 'test.reference', checkGroupId: 'systems' }] };
+  const identities = emptyArtifactIdentities({ recipe: { id: release.id, version: release.version,
+    sha256: release.contentSha256, state: 'qualified' } });
+  mkdirSync(join(root, 'grading'), { recursive: true });
+  writeRunJson(join(root, 'run.json'), {
+    id: 'reference-run', backend: 'mongodb', track: 'ecommerce',
+    identities,
+    setup: { isolation: { mode: 'container', imageId: 'sha256:test' } },
+    outcome: { kind: 'passed' },
+    levels: [{ level: 1, graded: true, contractPass: true, score: points, max: points }],
+    backendLease: { state: 'released', resources: {
+      buildContainer: { running: false }, locks: [{ key: 'slot:test', releasedAt: 'now' }],
+    } },
+  });
+  const setupEvidence = createCheckEvidence({ status: 'passed', code: 'completed', phase: 'setup',
+    startedAtMs: 1, completedAtMs: 2 });
+  const evidence = createCheckEvidence({ status: passed ? 'passed' : 'failed',
+    code: passed ? 'completed' : 'test_result', phase: 'assertion',
+    startedAtMs: 1, completedAtMs: 2 });
+  writeArtifact(join(root, 'grading', 'bundle.json'), { kind: 'grade_bundle', id: 'reference-bundle',
+    identities,
+    payload: { recipeRelease: release, selection: {
+      recipe: { id: release.id, version: release.version, contentSha256: release.contentSha256 },
+      checks: release.checkCatalog, reportedChecks: [stableKey], notRun: [],
+    }, suites: {
+      lint: { pass: true },
+      systems: { features: [{ id: 901, setupEvidence,
+        criteria: [{ id, stableKey, points, evidence }] }] },
+    } } });
+  return release;
+}
+
+test('reference qualification audits zero-point criteria and teardown evidence', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-live-test-'));
+  try {
+    const release = writeEvidence(root, { id: '901a', points: 0, passed: true });
+    const audit = auditReferenceRun(root, fixture, { release });
+    assert.equal(audit.ok, true);
+    assert.equal(audit.criteria, 1);
+    assert.equal(audit.zeroPointCriteria, 1);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('reference qualification reports the exact level score', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-live-test-'));
+  try {
+    const release = writeEvidence(root, { id: '901a', points: 2, passed: true });
+    const audit = auditReferenceRun(root, fixture, { release });
+    assert.equal(audit.ok, true);
+    assert.equal(audit.score, '2/2');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('reference qualification reports malformed evidence instead of throwing', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-live-test-'));
+  try {
+    mkdirSync(join(root, 'grading'), { recursive: true });
+    writeFileSync(join(root, 'run.json'), '{');
+    writeFileSync(join(root, 'grading', 'bundle.json'), '{}');
+    const audit = auditReferenceRun(root, fixture);
+    assert.equal(audit.ok, false);
+    assert.match(audit.failures[0] ?? '', /qualification evidence is invalid/);
+    writeFileSync(join(root, 'mutation-control.json'), '{}');
+    const mutationAudit = auditMutationWorkerRun(root, fixture);
+    assert.match(mutationAudit.failures[0] ?? '', /mutation evidence is invalid/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('a mutation run reuses its stored clean baseline as reference evidence', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-live-test-'));
+  try {
+    const baseline = join(root, 'clean');
+    const release = writeEvidence(baseline, { id: '901a', points: 2, passed: true });
+    const run = referenceRunFromMutationBaseline(root, {
+      repetition: 1,
+      output: 'workers',
+      baselineOutput: 'clean',
+      durationMs: 200,
+      baselineDurationMs: 100,
+      harnessSha256Before: 'b'.repeat(64),
+      harnessSha256After: 'b'.repeat(64),
+      baselineHarnessSha256Before: 'a'.repeat(64),
+      baselineHarnessSha256After: 'a'.repeat(64),
+    }, fixture, { release, level: 1,
+      selectedCheckKeys: release.checkCatalog.map(check => check.stableKey) });
+    assert.equal(run.ok, true);
+    assert.equal(run.output, 'clean');
+    assert.equal(run.durationMs, 100);
+    assert.equal(run.score, '2/2');
+    assert.equal(run.mutations, null);
+    assert.equal(run.harnessSha256Before, 'a'.repeat(64));
+    assert.equal(run.harnessSha256After, 'a'.repeat(64));
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('reference qualification rejects a failed zero-point criterion', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-live-test-'));
+  try {
+    const release = writeEvidence(root, { id: '901a', points: 0, passed: false });
+    const audit = auditReferenceRun(root, fixture, { release });
+    assert.equal(audit.ok, false);
+    assert.deepEqual(audit.failures, ['systems/901/901a did not pass']);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('mutation qualification requires a full baseline and every exact mutant caught', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-live-test-'));
+  try {
+    const release = writeEvidence(root, { id: '901a', points: 0, passed: true });
+    const runPath = join(root, 'run.json');
+    const run = JSON.parse(readFileSync(runPath, 'utf8'));
+    run.payload.mutationControl = { ok: true };
+    writeFileSync(runPath, JSON.stringify(run));
+    writeArtifact(join(root, 'mutation-control.json'), { kind: 'mutation_control', id: 'mutation-run',
+      payload: { ok: true, fixtureSha256: fixture.imported.sourceSha256,
+        baseline: { total: 2, max: 2 }, summary: { caught: 1, total: 1 },
+        results: [{ id: 'known-defect', status: 'CAUGHT' }] } });
+    const passing = auditReferenceRun(root, fixture, { requireMutationControl: true, release });
+    assert.equal(passing.ok, true);
+    assert.deepEqual(passing.mutations, { caught: 1, total: 1 });
+
+    const failed = JSON.parse(readFileSync(join(root, 'mutation-control.json'), 'utf8'));
+    failed.payload.results[0].status = 'SURVIVED';
+    writeFileSync(join(root, 'mutation-control.json'), JSON.stringify(failed));
+    const audit = auditReferenceRun(root, fixture, { requireMutationControl: true, release });
+    assert.equal(audit.ok, false);
+    assert(audit.failures.includes('known-defect is SURVIVED'));
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('reference qualification refuses identity-less or wrong same-sized check evidence', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reference-live-test-'));
+  try {
+    const release = writeEvidence(root, { id: '901a', points: 1, passed: true });
+    const bundlePath = join(root, 'grading', 'bundle.json');
+    const bundle = JSON.parse(readFileSync(bundlePath, 'utf8'));
+    bundle.payload.selection.checks[0].stableKey = 'wrong.same-sized.check';
+    bundle.payload.selection.reportedChecks = ['wrong.same-sized.check'];
+    bundle.payload.suites.systems.features[0].criteria[0].stableKey = 'wrong.same-sized.check';
+    writeFileSync(bundlePath, JSON.stringify(bundle));
+    const wrong = auditReferenceRun(root, fixture, { release });
+    assert.equal(wrong.ok, false);
+    assert(wrong.failures.includes('graded check catalog does not match the requested release'));
+
+    const unidentified = auditReferenceRun(root, fixture);
+    assert.equal(unidentified.ok, false);
+    assert(unidentified.failures.includes('exact recipe release was not supplied to the qualification audit'));
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('reference qualification terminates a child at its repetition deadline', async () => {
+  const started = Date.now();
+  const result = await runBounded(process.execPath,
+    ['-e', 'setInterval(() => {}, 1000)'], {
+      stdio: 'ignore', timeoutMs: 50,
+      terminate: pid => process.kill(pid, 'SIGKILL'),
+    });
+  assert.equal(result.ok, false);
+  assert.equal(result.timedOut, true);
+  assert(Date.now() - started < 10_000, 'timed-out child was not terminated promptly');
+});
+
+test('bounded execution validates deadlines before opening logs', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-process-deadline-'));
+  const stdout = join(root, 'stdout.log');
+  const stderr = join(root, 'stderr.log');
+  try {
+    await assert.rejects(runBounded(process.execPath, [], {
+      timeoutMs: 0, logs: { stdout, stderr },
+    }), /timeoutMs must be a positive safe integer/);
+    assert.equal(existsSync(stdout), false);
+    assert.equal(existsSync(stderr), false);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('bounded execution removes empty logs when process setup throws', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-process-setup-'));
+  const stdout = join(root, 'stdout.log');
+  const stderr = join(root, 'stderr.log');
+  try {
+    await assert.rejects(runBounded(null as unknown as string, [], {
+      timeoutMs: 1_000, logs: { stdout, stderr },
+    }));
+    assert.equal(existsSync(stdout), false);
+    assert.equal(existsSync(stderr), false);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('parallel qualification cancellation terminates every bounded child', async () => {
+  const cancellation = new AbortController();
+  setTimeout(() => cancellation.abort(), 50);
+  const result = await runBounded(process.execPath,
+    ['-e', 'setInterval(() => {}, 1000)'], {
+      stdio: 'ignore', timeoutMs: 10_000, signal: cancellation.signal,
+      terminate: pid => process.kill(pid, 'SIGKILL'),
+    });
+  assert.equal(result.ok, false);
+  assert.equal(result.cancelled, true);
+  assert.equal(result.timedOut, false);
+});
+
+test('parallel qualification gives a worker time to release resources on cancellation',
+  { skip: process.platform === 'win32' }, async () => {
+    const root = mkdtempSync(join(tmpdir(), 'stack-bench-graceful-cancel-test-'));
+    const marker = join(root, 'released');
+    const cancellation = new AbortController();
+    setTimeout(() => cancellation.abort(), 50);
+    try {
+      const result = await runBounded(process.execPath,
+        ['-e', `process.on('SIGTERM',()=>{require('fs').writeFileSync(${JSON.stringify(marker)},'ok');process.exit(0)});setInterval(()=>{},1000)`],
+        { cwd: root, env: process.env, stdio: 'ignore', timeoutMs: 10_000,
+          signal: cancellation.signal, gracefulCancellationMs: 2_000 });
+      assert.equal(result.cancelled, true);
+      assert.equal(readFileSync(marker, 'utf8'), 'ok');
+    } finally { rmSync(root, { recursive: true, force: true }); }
+  });
+
+test('bounded execution tees useful tails and caps durable process logs', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-process-log-'));
+  try {
+    const result = await runBounded(process.execPath,
+      ['-e', 'process.stdout.write("abcdefgh"); process.stderr.write("actual failure\\n")'], {
+        stdio: 'inherit', timeoutMs: 5_000,
+        logs: { stdout: join(root, 'stdout.log'), stderr: join(root, 'stderr.log'), maxBytes: 5 },
+      });
+    assert.equal(result.ok, true);
+    assert.equal(readFileSync(join(root, 'stdout.log'), 'utf8'), 'abcde');
+    assert.equal(readFileSync(join(root, 'stderr.log'), 'utf8'), 'actua');
+    const stdoutLog = required(required(result.logs, 'process logs').stdout, 'stdout process log');
+    assert.deepEqual({ bytes: stdoutLog.bytes, retainedBytes: stdoutLog.retainedBytes,
+      truncated: stdoutLog.truncated }, { bytes: 8, retainedBytes: 5, truncated: true });
+    assert.match(result.stderrTail, /actual failure/);
+    assert.equal(stdoutLog.sha256, createHash('sha256').update('abcde').digest('hex'));
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('bounded execution refuses to overwrite an existing process log', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-exclusive-log-'));
+  const stdout = join(root, 'stdout.log');
+  writeFileSync(stdout, 'preserve');
+  try {
+    await assert.rejects(runBounded(process.execPath, ['-e', 'process.stdout.write("new")'], {
+      stdio: 'ignore', timeoutMs: 5_000,
+      logs: { stdout, stderr: join(root, 'stderr.log') },
+    }), /EEXIST/);
+    assert.equal(readFileSync(stdout, 'utf8'), 'preserve');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('supervisor accepts a deleted private lease only with matching released evidence', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-supervisor-evidence-'));
+  try {
+    const state = join(root, 'supervisor.json');
+    const output = join(root, 'output');
+    mkdirSync(output);
+    const runtimeDir = join(root, 'runtime');
+    writeFileSync(state, JSON.stringify({ version: 2, runId: 'released-run', backend: 'mongodb',
+      runtimeDir, leasePath: join(runtimeDir, 'backend-lease.json'),
+      ownershipToken: 'private-token', output }));
+    writeRunJson(join(output, 'run.json'), { id: 'released-run', backendLease: {
+      runId: 'released-run', state: 'released', resources: {
+        buildContainer: { running: false }, locks: [{ releasedAt: 'now' }],
+      },
+    } });
+    assert.doesNotThrow(() => rescueSupervisedLease(state, output));
+    const run = JSON.parse(readFileSync(join(output, 'run.json'), 'utf8'));
+    run.payload.backendLease.state = 'active';
+    writeFileSync(join(output, 'run.json'), JSON.stringify(run));
+    assert.throws(() => rescueSupervisedLease(state, output), /without released run evidence/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/release-bundle.test.ts b/tools/stack-bench/tests/release-bundle.test.ts
new file mode 100644
index 00000000000..ccd288f0152
--- /dev/null
+++ b/tools/stack-bench/tests/release-bundle.test.ts
@@ -0,0 +1,96 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import test from 'node:test';
+
+import { generateSpdxImageSbom, materializeReleaseManifest } from '../src/releases/release-bundle.js';
+import { RELEASE_MANIFEST_SCHEMA_VERSION } from '../src/releases/release-manifest.js';
+import { compiledEntrypoint } from '../src/package-root.js';
+
+const digest = 'a'.repeat(64);
+const reference = `registry.example/controller@sha256:${digest}`;
+
+function document(boundDigest = digest) {
+  return { spdxVersion: 'SPDX-2.3', dataLicense: 'CC0-1.0', SPDXID: 'SPDXRef-DOCUMENT',
+    creationInfo: { creators: ['Tool: test'] }, packages: [{ externalRefs: [{
+      referenceLocator: `pkg:oci/controller@sha256:${boundDigest}` }] }] };
+}
+
+test('SBOM generation uses registry resolution, verifies digest binding, and refuses overwrite', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-sbom-'));
+  try {
+    const outputPath = join(root, 'controller.spdx.json');
+    const calls: Array<{ executable: string; args: string[] }> = [];
+    const result = generateSpdxImageSbom({ reference, outputPath,
+      runCommand: (executable: string, args: string[]) => {
+        calls.push({ executable, args });
+        writeFileSync(args[args.indexOf('--output') + 1]!, JSON.stringify(document()));
+      } });
+    assert.equal(result.image, reference);
+    assert.equal(result.bytes, readFileSync(outputPath).length);
+    assert.equal(calls[0]!.executable, 'docker');
+    assert.equal(calls[0]!.args.at(-1), `registry://${reference}`);
+    assert.ok(calls[0]!.args.includes('linux/amd64'));
+    assert.throws(() => generateSpdxImageSbom({ reference, outputPath, runCommand: () => {} }),
+      /refusing to overwrite/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('SBOM generation leaves no output after invalid or unbound tool output', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-sbom-'));
+  try {
+    const outputPath = join(root, 'controller.spdx.json');
+    assert.throws(() => generateSpdxImageSbom({ reference, outputPath,
+      runCommand: (_executable: string, args: string[]) => writeFileSync(args[args.indexOf('--output') + 1]!,
+        JSON.stringify(document('b'.repeat(64)))) }), /does not bind image digest/);
+    assert.equal(existsSync(outputPath), false);
+    assert.throws(() => generateSpdxImageSbom({ reference: `https://${reference}`,
+      outputPath, runCommand: () => {} }), /normalized registry reference/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('release bundle CLI rejects unknown and duplicate options', () => {
+  const script = compiledEntrypoint('src', 'releases', 'release-bundle.js');
+  const unknown = spawnSync(process.execPath, [script, 'sbom', reference,
+    '--output', 'x', '--surprise', 'y'], { encoding: 'utf8' });
+  assert.equal(unknown.status, 2);
+  assert.match(unknown.stderr, /unknown option --surprise/);
+  const duplicate = spawnSync(process.execPath, [script, 'sbom', reference,
+    '--output', 'x', '--output', 'y'], { encoding: 'utf8' });
+  assert.equal(duplicate.status, 2);
+  assert.match(duplicate.stderr, /duplicate option --output/);
+});
+
+test('manifest assembly computes file metadata and rejects missing and escaping inputs', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-bundle-'));
+  try {
+    const roles = ['controller', 'build-sandbox', 'postgres', 'mongodb'];
+    const files = [['compose.yaml', 'compose'], ['deps', 'dependency'], ['OPERATOR.md', 'operator-guide'],
+      ['secrets.example', 'secrets-template'], ['SUPPORT.md', 'support-policy'],
+      ...roles.map(role => [`sbom/${role}.json`, 'sbom'])]
+      .map(([path, role]) => ({ path, role }));
+    for (const { path } of files) {
+      const absolute = join(root, ...path!.split('/'));
+      mkdirSync(dirname(absolute), { recursive: true });
+      writeFileSync(absolute, path!.startsWith('sbom/') ? JSON.stringify(document()) : path!);
+    }
+    const specification = { schemaVersion: RELEASE_MANIFEST_SCHEMA_VERSION,
+      id: 'stack-bench', version: '1.0.0', state: 'candidate', sourceRevision: 'a'.repeat(40),
+      sourceSha256: 'b'.repeat(64), supportedRunner: { os: 'linux', architecture: 'amd64',
+        stateRoot: '/var/lib/stack-bench', networkMode: 'host', dockerSocket: true },
+      images: roles.map(role => ({ id: `stack-bench-${role}`, role, reference,
+        digest, platform: 'linux/amd64', sbomPath: `sbom/${role}.json` })), files,
+      outboundDestinations: [], secrets: [], signing: null };
+    const manifest = materializeReleaseManifest(specification, root);
+    assert.equal(manifest.files.length, files.length);
+    assert.ok(manifest.files.every(file => file.sha256.length === 64 && file.bytes > 0));
+
+    assert.throws(() => materializeReleaseManifest({ ...specification,
+      files: [...files, { path: 'missing', role: 'support-policy', extra: true }] }, root),
+    /accepts only path and role/);
+    assert.throws(() => materializeReleaseManifest({ ...specification,
+      files: [...files, { path: '../escape', role: 'support-policy' }] }, root), /invalid bundle path/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/release-manifest.test.ts b/tools/stack-bench/tests/release-manifest.test.ts
new file mode 100644
index 00000000000..84b89fe7bbf
--- /dev/null
+++ b/tools/stack-bench/tests/release-manifest.test.ts
@@ -0,0 +1,180 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, statSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import test from 'node:test';
+
+import { sha256 } from '../src/evidence/provenance.js';
+import { RELEASE_MANIFEST_SCHEMA_VERSION, validateReleaseManifest,
+  verifyReleaseBundle } from '../src/releases/release-manifest.js';
+import type { ReleaseFileRole, ReleaseManifest } from '../src/releases/release-manifest.js';
+
+const roles = ['controller', 'build-sandbox', 'postgres', 'mongodb'] as const;
+
+function spdx(role: string, digest: string): string {
+  return JSON.stringify({ spdxVersion: 'SPDX-2.3', dataLicense: 'CC0-1.0',
+    SPDXID: 'SPDXRef-DOCUMENT', name: `stack-bench-${role}`,
+    creationInfo: { creators: ['Tool: fixture'], created: '2026-08-12T00:00:00Z' },
+    packages: [{ name: role, SPDXID: 'SPDXRef-DocumentRoot', externalRefs: [{
+      referenceLocator: `pkg:oci/${role}@sha256:${digest}` }]}] }, null, 2);
+}
+
+function fixture(root: string, { state = 'candidate' }: { state?: 'candidate' | 'qualified' } = {}): ReleaseManifest {
+  const digests = Object.fromEntries(roles.map((role, index) =>
+    [role, String(index + 1).repeat(64)])) as Record<(typeof roles)[number], string>;
+  const specifications: Array<[string, ReleaseFileRole, string]> = [
+    ['compose.yaml', 'compose', 'compose\n'],
+    ['deps.tar.zst', 'dependency', 'dependency\n'],
+    ['OPERATOR.md', 'operator-guide', 'operator\n'],
+    ['secrets.example', 'secrets-template', 'secrets\n'],
+    ['SUPPORT.md', 'support-policy', 'support\n'],
+    ...roles.map((role): [string, ReleaseFileRole, string] =>
+      [`sbom/${role}.spdx.json`, 'sbom', spdx(role, digests[role])]),
+    ...(state === 'qualified' ? [
+      ['signing/cosign.pub', 'public-key', 'trusted public key\n'] as [string, ReleaseFileRole, string],
+    ] : []),
+  ];
+  const files = specifications.map(([path, role, content]) => {
+    const absolute = join(root, ...path.split('/'));
+    mkdirSync(dirname(absolute), { recursive: true });
+    writeFileSync(absolute, content);
+    const bytes = readFileSync(absolute);
+    return { path, role, sha256: sha256(bytes), bytes: statSync(absolute).size };
+  });
+  if (state === 'qualified') {
+    mkdirSync(join(root, 'signing'), { recursive: true });
+    writeFileSync(join(root, 'signing', 'release-manifest.sigstore.json'), '{}\n');
+  }
+  const images = roles.map(role => ({ id: `stack-bench-${role}`, role,
+    reference: `registry.example/stack-bench/${role}@sha256:${digests[role]}`,
+    digest: digests[role], platform: 'linux/amd64' as const, sbomPath: `sbom/${role}.spdx.json` }));
+  return {
+    schemaVersion: RELEASE_MANIFEST_SCHEMA_VERSION,
+    id: 'stack-bench-v1', version: '1.0.0', state,
+    sourceRevision: 'a'.repeat(40), sourceSha256: 'b'.repeat(64),
+    supportedRunner: { os: 'linux', architecture: 'amd64',
+      stateRoot: '/var/lib/stack-bench', networkMode: 'host', dockerSocket: true },
+    images, files,
+    outboundDestinations: [
+      { owner: 'build-sandbox', url: 'https://registry.npmjs.org' },
+      { owner: 'claude-code', url: 'https://api.anthropic.com' },
+    ],
+    secrets: [{ id: 'provider-api-key', adapter: 'claude-code',
+      composeTarget: '/run/secrets/provider_api_key', required: true }],
+    signing: state === 'qualified' ? { scheme: 'cosign-public-key-v1',
+      publicKeyPath: 'signing/cosign.pub',
+      manifestBundlePath: 'signing/release-manifest.sigstore.json' } : null,
+  };
+}
+
+test('candidate manifest binds files and digest-bearing SPDX without placeholder signatures', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-release-'));
+  try {
+    const manifest = fixture(root);
+    assert.deepEqual(validateReleaseManifest(manifest), manifest);
+    const verified = verifyReleaseBundle(manifest, root);
+    assert.equal(verified.ok, true, JSON.stringify(verified.results));
+    assert.equal(verified.verificationLevel, 'candidate-file-integrity');
+    assert.equal(verified.results.filter(result => result.check === 'spdx-image-binding').length, 4);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('release verification detects changed, missing, escaping, and wrong-image SBOM files', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-release-'));
+  try {
+    const changed = fixture(root);
+    writeFileSync(join(root, 'compose.yaml'), 'changed');
+    assert.equal(verifyReleaseBundle(changed, root).results
+      .find(result => result.path === 'compose.yaml')!.reason, 'size mismatch');
+
+    const missing = fixture(root);
+    rmSync(join(root, 'OPERATOR.md'));
+    assert.equal(verifyReleaseBundle(missing, root).results
+      .find(result => result.path === 'OPERATOR.md')!.reason, 'missing');
+
+    const escaped = fixture(root);
+    escaped.files[0]!.path = '../compose.yaml';
+    assert.throws(() => verifyReleaseBundle(escaped, root), /relative POSIX path/);
+
+    const wrongSbom = fixture(root);
+    const sbomFile = wrongSbom.files.find(file => file.path === wrongSbom.images[0]!.sbomPath)!;
+    const sbomPath = join(root, ...sbomFile.path.split('/'));
+    const document = JSON.parse(readFileSync(sbomPath, 'utf8'));
+    document.packages[0].externalRefs[0].referenceLocator = `pkg:oci/controller@sha256:${'f'.repeat(64)}`;
+    writeFileSync(sbomPath, JSON.stringify(document));
+    sbomFile.sha256 = sha256(readFileSync(sbomPath));
+    sbomFile.bytes = statSync(sbomPath).size;
+    assert.match(verifyReleaseBundle(wrongSbom, root).results
+      .find(result => result.check === 'spdx-image-binding' && !result.ok)!.reason ?? '',
+    /does not bind image digest/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('release schema refuses mutable images, incomplete roles, false signing, and unsafe inputs', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-release-'));
+  try {
+    const mutable = fixture(root);
+    mutable.images[0]!.reference = 'registry.example/controller:latest';
+    assert.throws(() => validateReleaseManifest(mutable), /exact digest/);
+
+    const malformed = fixture(root);
+    malformed.images[0]!.reference = `https://registry.example/controller@sha256:${malformed.images[0]!.digest}`;
+    assert.throws(() => validateReleaseManifest(malformed), /normalized registry reference/);
+
+    const incomplete = fixture(root);
+    incomplete.images.pop();
+    assert.throws(() => validateReleaseManifest(incomplete), /missing mongodb/);
+
+    const insecure = fixture(root);
+    insecure.outboundDestinations[0]!.url = 'http://registry.npmjs.org';
+    assert.throws(() => validateReleaseManifest(insecure), /must be HTTPS/);
+
+    const secretEscape = fixture(root);
+    secretEscape.secrets[0]!.composeTarget = '/run/secrets/../host';
+    assert.throws(() => validateReleaseManifest(secretEscape), /under \/run\/secrets/);
+
+    const unknownSignature = fixture(root);
+    (unknownSignature.images[0] as unknown as Record<string, unknown>).signaturePath = 'signatures/fake';
+    assert.throws(() => validateReleaseManifest(unknownSignature), /signaturePath is unknown/);
+
+    const qualified = fixture(root, { state: 'qualified' });
+    qualified.signing = null;
+    assert.throws(() => validateReleaseManifest(qualified), /must be an object/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('qualified verification requires the signed disk manifest and an external matching trust key', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-release-'));
+  try {
+    const manifest = fixture(root, { state: 'qualified' });
+    const manifestPath = join(root, 'release.json');
+    const trustedKeyPath = join(root, '..', `trusted-${Date.now()}.pub`);
+    writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
+    writeFileSync(trustedKeyPath, 'trusted public key\n');
+    try {
+      assert.throws(() => verifyReleaseBundle(manifest, root, { manifestPath }),
+        /external trusted public key/);
+      writeFileSync(trustedKeyPath, 'wrong key\n');
+      assert.throws(() => verifyReleaseBundle(manifest, root, { manifestPath, trustedKeyPath }),
+        /differs from the external trusted/);
+      writeFileSync(trustedKeyPath, 'trusted public key\n');
+      const calls: Array<{ executable: string; args: string[] }> = [];
+      const verified = verifyReleaseBundle(manifest, root, { manifestPath, trustedKeyPath,
+        cosignPath: 'cosign-test', runCommand: (executable, args) => {
+          calls.push({ executable, args });
+          return { ok: true };
+        } });
+      assert.equal(verified.ok, true);
+      assert.equal(verified.verificationLevel, 'qualified-cryptographic');
+      assert.equal(calls.length, 5);
+      assert.deepEqual(calls.map(call => call.args[0]), ['verify-blob', 'verify', 'verify', 'verify', 'verify']);
+      assert.ok(calls.every(call => call.executable === 'cosign-test'));
+
+      const failed = verifyReleaseBundle(manifest, root, { manifestPath, trustedKeyPath,
+        runCommand: (_executable, args) => ({ ok: args[0] !== 'verify', detail: 'bad bundle' }) });
+      assert.equal(failed.ok, false);
+      assert.ok(failed.cryptographicVerification && 'checks' in failed.cryptographicVerification);
+      assert.equal(failed.cryptographicVerification.checks[0]!.detail, 'bad bundle');
+    } finally { rmSync(trustedKeyPath, { force: true }); }
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/release-source.contract.ts b/tools/stack-bench/tests/release-source.contract.ts
new file mode 100644
index 00000000000..ba6252ed3b8
--- /dev/null
+++ b/tools/stack-bench/tests/release-source.contract.ts
@@ -0,0 +1,121 @@
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { mkdirSync, mkdtempSync, readFileSync, realpathSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import test from 'node:test';
+
+import { REPOSITORY_ROOT, STACK_BENCH_ROOT } from '../src/package-root.js';
+import { releaseSourceIdentity, releaseSourceRoot } from '../src/releases/release-source.js';
+import type { GitRunner } from '../src/releases/release-source.js';
+
+test('the release-source CLI anchors itself to the repository instead of the caller cwd', () => {
+  assert.equal(releaseSourceRoot(), realpathSync(REPOSITORY_ROOT));
+});
+
+function repository(): { root: string; files: string[] } {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-source-'));
+  const files = ['licenses/BSL.txt', 'package.json', 'pnpm-lock.yaml', 'pnpm-workspace.yaml',
+    'crates/bindings-typescript/package.json', 'skills/typescript-server/SKILL.md',
+    'tools/stack-bench/commands/bench.ts',
+    'tools/stack-bench/container/spacetimedb-binaries.json'];
+  for (const path of files) {
+    const absolute = join(root, ...path.split('/'));
+    mkdirSync(dirname(absolute), { recursive: true });
+    writeFileSync(absolute, `${path}\n`);
+  }
+  mkdirSync(join(root, 'tools', 'stack-bench'), { recursive: true });
+  writeFileSync(join(root, 'tools', 'stack-bench', 'JOURNAL.local.md'), 'local only\n');
+  return { root, files };
+}
+
+function canonicalBytes(root: string, path: string): Buffer {
+  return Buffer.from(readFileSync(join(root, ...path.split('/')), 'utf8').replaceAll('\r\n', '\n'));
+}
+
+function blobId(bytes: Buffer): string {
+  return createHash('sha1').update(`blob ${bytes.length}\0`).update(bytes).digest('hex');
+}
+
+function git(files: string[], { changed = '' }: { changed?: string } = {}): GitRunner {
+  return (root, args, options = {}) => {
+    if (args[0] === 'rev-parse') return `${'a'.repeat(40)}\n`;
+    if (args[0] === 'status') return changed;
+    if (args[0] === 'ls-files') return files.map(path => {
+      const bytes = canonicalBytes(root, path);
+      return `100644 ${blobId(bytes)} 0\t${path}\0`;
+    }).join('');
+    if (args[0] === 'cat-file') {
+      const byId = new Map(files.map(path => {
+        const bytes = canonicalBytes(root, path);
+        return [blobId(bytes), bytes] as const;
+      }));
+      const objects = String(options.input ?? '').trim().split('\n').filter(Boolean).map(id => {
+        const bytes = byId.get(id);
+        if (!bytes) throw new Error(`unknown fake git object ${id}`);
+        return Buffer.concat([Buffer.from(`${id} blob ${bytes.length}\n`), bytes, Buffer.from('\n')]);
+      });
+      return Buffer.concat(objects);
+    }
+    throw new Error(`unexpected git call ${args.join(' ')}`);
+  };
+}
+
+test('release source identity hashes only the exact tracked build inputs', () => {
+  const { root, files } = repository();
+  try {
+    const before = releaseSourceIdentity(root, { runGit: git(files) });
+    assert.equal(before.revision, 'a'.repeat(40));
+    assert.equal(before.files, files.length);
+    assert.equal(before.paths.includes('pnpm-lock.yaml'), true);
+    assert.equal(before.paths.includes('skills'), true);
+    assert.equal(before.paths.includes('.dockerignore'), false);
+    assert.equal(before.paths.includes('.gitattributes'), false);
+    writeFileSync(join(root, 'tools', 'stack-bench', 'JOURNAL.local.md'), 'different local notes\n');
+    assert.deepEqual(releaseSourceIdentity(root, { runGit: git(files) }), before);
+    writeFileSync(join(root, 'tools', 'stack-bench', 'container',
+      'spacetimedb-binaries.json'), 'changed provenance\n');
+    const provenanceChanged = releaseSourceIdentity(root, { runGit: git(files) });
+    assert.notEqual(provenanceChanged.sha256, before.sha256);
+    assert.equal(provenanceChanged.binarySourceSha256, before.binarySourceSha256);
+    writeFileSync(join(root, 'tools', 'stack-bench', 'commands', 'bench.ts'), 'changed tracked input\n');
+    assert.notEqual(releaseSourceIdentity(root, { runGit: git(files) }).sha256, before.sha256);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('release source identity refuses a changed or untracked release input', () => {
+  const { root, files } = repository();
+  try {
+    assert.throws(() => releaseSourceIdentity(root, { runGit: git(files,
+      { changed: ' M tools/stack-bench/commands/bench.ts\n?? tools/stack-bench/local.ts\n' }) }),
+    /release source paths are not clean/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('controller build context includes every repository root copied by its Dockerfile', () => {
+  const dockerfile = readFileSync(join(STACK_BENCH_ROOT, 'appliance', 'Controller.Dockerfile'), 'utf8');
+  const ignore = readFileSync(join(STACK_BENCH_ROOT, 'appliance',
+    'Controller.Dockerfile.dockerignore'), 'utf8');
+  const roots = [...dockerfile.matchAll(/^COPY (?!-)\s*([^/\s]+)(?:\/|\s)/gm)].map(match => match[1]);
+  for (const root of new Set(roots)) {
+    assert.match(ignore, new RegExp(`^!${root}(?:\\r?\\n|/)`, 'm'),
+      `${root} is copied but excluded from the controller build context`);
+  }
+});
+
+test('controller build context excludes ignored local Stack Bench state', () => {
+  const ignore = readFileSync(join(STACK_BENCH_ROOT, 'appliance',
+    'Controller.Dockerfile.dockerignore'), 'utf8');
+  const rules = new Set(ignore.split(/\r?\n/));
+  const localPaths = [
+    'tools/stack-bench/local-notes',
+    'tools/stack-bench/media',
+    'tools/stack-bench/snapshot-l*',
+    'tools/stack-bench/grader/.candidates',
+    'tools/stack-bench/grader/.mutation-report.json',
+    'tools/stack-bench/tracks/*/overview.html',
+  ];
+  for (const path of localPaths) {
+    assert.equal(rules.has(path), true, `${path} can leak into the controller build context`);
+  }
+});
diff --git a/tools/stack-bench/tests/repair-cli.test.ts b/tools/stack-bench/tests/repair-cli.test.ts
new file mode 100644
index 00000000000..f9851c0ec38
--- /dev/null
+++ b/tools/stack-bench/tests/repair-cli.test.ts
@@ -0,0 +1,32 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { parseRepairArgs } from '../commands/repair-cli.js';
+
+test('repair CLI separates inspection from one explicitly bounded grant', () => {
+  const status = parseRepairArgs(['node', 'repair-cli.js', 'status', './run', '--level', '2']);
+  assert.equal(status.command, 'status');
+  assert.equal(status.level, 2);
+
+  const grant = parseRepairArgs(['node', 'repair-cli.js', 'grant', './run',
+    '--level', '2', '--repairs', '4', '--max-budget-usd', '25', '--timeout-minutes', '90']);
+  assert.equal(grant.command, 'grant');
+  assert.equal(grant.level, 2);
+  assert.equal(grant.repairs, 4);
+  assert.equal(grant.maxBudgetUsd, 25);
+  assert.equal(grant.timeoutMinutes, 90);
+});
+
+test('repair CLI rejects unbounded, duplicate, and ambiguous requests', () => {
+  const invalid = [
+    ['grant', './run', '--level', '1'],
+    ['grant', './run', '--level', '1', '--repairs', '0'],
+    ['grant', './run', '--level', '1', '--repairs', '1.5'],
+    ['grant', './run', '--level', '1', '--level', '2', '--repairs', '4'],
+    ['grant', './run', '--level', '1', '--repairs', '4', '--timeout-minutes', '0'],
+    ['status', './run'],
+  ];
+  for (const args of invalid) {
+    assert.throws(() => parseRepairArgs(['node', 'repair-cli.js', ...args]));
+  }
+});
diff --git a/tools/stack-bench/tests/repair-grant.test.ts b/tools/stack-bench/tests/repair-grant.test.ts
new file mode 100644
index 00000000000..42f85768558
--- /dev/null
+++ b/tools/stack-bench/tests/repair-grant.test.ts
@@ -0,0 +1,177 @@
+import assert from 'node:assert/strict';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { emptyArtifactIdentities, writeRunJson } from '../src/evidence/artifacts.js';
+import { compareRepairBaseline, createRepairGrant, inspectRepairParent }
+  from '../src/runtime/repair-grant.js';
+import type { RepairOutcome, RepairSelection }
+  from '../src/runtime/repair-grant.js';
+import type { RunRepairRecord } from '../src/evidence/benchmark-run.js';
+import { preserveLevelCheckpoint } from '../src/runtime/source-checkpoint.js';
+
+interface FixtureSelection extends RepairSelection {
+  sha256: string;
+  scoredPoints: number;
+  recipe: { id: string; version: string };
+}
+
+interface FixtureOverrides {
+  repair?: RunRepairRecord;
+  outcome?: RepairOutcome;
+  selection?: FixtureSelection;
+  identities?: unknown;
+  mode?: { id: string; version: string };
+}
+
+function parentFixture(root: string, overrides: FixtureOverrides = {}) {
+  const app = join(root, 'app');
+  mkdirSync(app, { recursive: true });
+  writeFileSync(join(app, 'app.js'), 'export const broken = true;\n');
+  const id = 'parent-run';
+  const repair = overrides.repair ?? { status: 'budget-exhausted', limit: 3,
+    used: 3, stopReason: 'budget-exhausted' };
+  const outcome = overrides.outcome ?? { kind: 'app_failure', phase: 'grading', reason: null,
+    appFailures: ['feature/failure'], inconclusive: [], harnessFailures: [] };
+  const selection = overrides.selection ?? { sha256: 'c'.repeat(64), scoredPoints: 2,
+    recipe: { id: 'ecommerce.sequential-l1', version: '2.5.0' } };
+  const identities = overrides.identities ?? emptyArtifactIdentities({
+    agentAdapter: { id: 'deterministic', version: '1.0.0', sha256: 'b'.repeat(64) },
+    stackAdapter: { id: 'stub', version: '1.0.0' },
+  });
+  const checkpoint = preserveLevelCheckpoint({ appDir: app, outputDir: root, runId: id,
+    identities, track: 'loop', backend: 'stub', level: 1, repair, outcome,
+    selectionSha256: selection.sha256 });
+  const level = { level: 1, graded: true, score: 1, max: 2, repairs: repair.used,
+    repair, outcome, selection, checkpoint, buildCostUsd: 2, repairCostUsd: 0.5, durationSec: 60 };
+  const downstream = { level: 2, graded: true, score: 4, max: 4, repairs: 0,
+    repair: { status: 'not-needed', limit: 3, used: 0, stopReason: 'not-needed' },
+    outcome: { kind: 'passed', phase: 'grading', reason: null, appFailures: [], inconclusive: [],
+      harnessFailures: [] }, buildCostUsd: 99, repairCostUsd: 0, durationSec: 100 };
+  writeRunJson(join(root, 'run.json'), {
+    id,
+    kind: 'benchmark_run',
+    startedAt: '2026-08-16T12:00:00.000Z',
+    completedAt: '2026-08-16T12:01:00.000Z',
+    identities,
+    track: 'loop', backend: 'stub', model: 'deterministic', guidance: 'prescribed',
+    condition: null, selectionRequest: { packs: [], checks: [] }, skills: [],
+    ...(overrides.mode ? { mode: overrides.mode } : {}),
+    runtime: { buildImage: 'test-build-image', url: 'http://localhost:1234' },
+    backendLease: { runIndex: 0 },
+    levels: [level, downstream], contaminated: false,
+    totals: { score: 5, max: 6, repairs: repair.used, costUsd: 101.5, durationSec: 160 },
+    outcome: { kind: outcome.kind, levels: { 1: outcome, 2: downstream.outcome } },
+  });
+  return { app, level, checkpoint };
+}
+
+test('a finite grant is derived only from the exact exhausted parent checkpoint', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-grant-'));
+  try {
+    const fixture = parentFixture(root);
+    const resolved = createRepairGrant(root, { level: 1, repairs: 4 });
+    assert.equal(resolved.parent.id, 'parent-run');
+    assert.equal(resolved.sourcePath, join(root, fixture.checkpoint.directory));
+    assert.equal(resolved.grant.repairsGranted, 4);
+    assert.equal(resolved.grant.cumulativeRepairsBefore, 3);
+    assert.equal(resolved.grant.cumulativeRepairsAfter, 3);
+    assert.equal(resolved.configuration.agentAdapter, 'deterministic');
+    assert.equal(resolved.configuration.recipe, 'ecommerce.sequential-l1@2.5.0');
+    assert.equal(resolved.configuration.runIndex, 0);
+    assert.equal(resolved.configuration.url, 'http://localhost:1234');
+    assert.equal(resolved.grant.cumulativeCostBeforeUsd, 101.5);
+    assert.equal(resolved.grant.cumulativeDurationBeforeSec, 160);
+    assert.deepEqual(resolved.grant.downstreamLevelsToRerun, [2]);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('a finite grant can continue an explicitly paused checkpoint', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-paused-'));
+  try {
+    for (const stopReason of ['repeated-findings', 'no-source-change']) {
+      rmSync(root, { recursive: true, force: true });
+      parentFixture(root, { repair: { status: 'incomplete', limit: 10,
+        used: 4, stopReason } });
+      const resolved = createRepairGrant(root, { level: 1, repairs: 3 });
+      assert.equal(resolved.grant.repairsGranted, 3);
+      assert.equal(resolved.grant.cumulativeRepairsBefore, 4);
+    }
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('a no-source-change pause can occur on the final budgeted round', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-no-change-'));
+  try {
+    parentFixture(root, { repair: { status: 'incomplete', limit: 3,
+      used: 3, stopReason: 'no-source-change' } });
+    assert.doesNotThrow(() => inspectRepairParent(root, 1));
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('repair grants reject incomplete evidence, remaining budget, and changed source bytes', () => {
+  const incompleteRoot = mkdtempSync(join(tmpdir(), 'stack-bench-repair-incomplete-'));
+  const remainingRoot = mkdtempSync(join(tmpdir(), 'stack-bench-repair-remaining-'));
+  const changedRoot = mkdtempSync(join(tmpdir(), 'stack-bench-repair-changed-'));
+  try {
+    parentFixture(incompleteRoot, { outcome: { kind: 'app_failure', phase: 'grading', reason: null,
+      appFailures: ['failure'], inconclusive: ['missing'], harnessFailures: [] } });
+    assert.throws(() => inspectRepairParent(incompleteRoot, 1), /complete conclusive measurement/);
+
+    parentFixture(remainingRoot, { repair: { status: 'incomplete', limit: 3,
+      used: 2, stopReason: 'agent-session-failure' } });
+    assert.throws(() => inspectRepairParent(remainingRoot, 1), /did not exhaust or pause/);
+
+    const changed = parentFixture(changedRoot);
+    writeFileSync(join(changedRoot, changed.checkpoint.directory, 'app.js'),
+      'export const broken = false;\n');
+    assert.throws(() => inspectRepairParent(changedRoot, 1), /source bytes do not match/);
+  } finally {
+    rmSync(incompleteRoot, { recursive: true, force: true });
+    rmSync(remainingRoot, { recursive: true, force: true });
+    rmSync(changedRoot, { recursive: true, force: true });
+  }
+});
+
+test('generic repair grants reject dependency campaigns', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-dependency-'));
+  try {
+    parentFixture(root, { mode: { id: 'dependency', version: '3.2.0' } });
+    assert.throws(() => createRepairGrant(root, { level: 1, repairs: 2 }),
+      /do not support dependency campaigns/);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('repair grants are finite and explicitly bounded', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-rounds-'));
+  try {
+    parentFixture(root);
+    for (const repairs of [0, 1.5]) {
+      assert.throws(() => createRepairGrant(root, { level: 1, repairs }), /positive safe integer/);
+    }
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('a continuation baseline must reproduce score, scope, and exact failed criteria', () => {
+  const parent = { score: 4, max: 6, selection: { sha256: 'a'.repeat(64) }, outcome: {
+    kind: 'app_failure', appFailures: ['suite/b', 'suite/a'], inconclusive: [], harnessFailures: [],
+  } };
+  const exact = compareRepairBaseline(parent, { score: 4, max: 6,
+    selectionSha256: 'a'.repeat(64), sourceSha256: 'b'.repeat(64),
+    expectedSourceSha256: 'b'.repeat(64), outcome: { kind: 'app_failure',
+      appFailures: ['suite/a', 'suite/b'], inconclusive: [], harnessFailures: [] } });
+  assert.deepEqual(exact, { reproduced: true, mismatches: [] });
+  const changed = compareRepairBaseline(parent, { score: 4, max: 6,
+    selectionSha256: 'a'.repeat(64), sourceSha256: 'b'.repeat(64),
+    expectedSourceSha256: 'b'.repeat(64), outcome: { kind: 'app_failure',
+      appFailures: ['suite/a'], inconclusive: ['suite/b'], harnessFailures: [] } });
+  assert.equal(changed.reproduced, false);
+  assert.deepEqual(changed.mismatches, ['measurement', 'failed criteria']);
+  const changedSource = compareRepairBaseline(parent, { score: 4, max: 6,
+    selectionSha256: 'a'.repeat(64), sourceSha256: 'c'.repeat(64),
+    expectedSourceSha256: 'b'.repeat(64), outcome: { kind: 'app_failure',
+      appFailures: ['suite/a', 'suite/b'], inconclusive: [], harnessFailures: [] } });
+  assert.deepEqual(changedSource, { reproduced: false, mismatches: ['source'] });
+});
diff --git a/tools/stack-bench/tests/report-bugs.test.ts b/tools/stack-bench/tests/report-bugs.test.ts
new file mode 100644
index 00000000000..cdd16bb7e28
--- /dev/null
+++ b/tools/stack-bench/tests/report-bugs.test.ts
@@ -0,0 +1,411 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { writeArtifact } from '../src/evidence/artifacts.js';
+import { parseReportBugsArgs } from '../commands/report-bugs.js';
+import { createCheckEvidence } from '../src/evidence/check-evidence.js';
+import { finding } from '../src/actions/action-findings.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+const CLI = join(STACK_BENCH_ROOT, 'dist', 'commands', 'report-bugs.js');
+
+test('repair reports can read an isolated grading directory', () => {
+  const args = parseReportBugsArgs(['node', 'report-bugs', '--app', '/app',
+    '--results', '/results']);
+  assert.equal(args.results, '/results');
+  assert.equal(args.out, join('/app', 'BUG_REPORT.md'));
+});
+
+type EvidenceStatus = 'passed' | 'failed' | 'inconclusive' | 'harness_failure';
+
+interface WriteGradeOptions {
+  grading?: string;
+  feature?: string;
+  points?: number;
+  criterion?: string;
+  stableKey?: string;
+  file?: string;
+  url?: string;
+  consoleErrors?: string[];
+  statedBy?: string;
+  evidence?: ReturnType<typeof createCheckEvidence>;
+}
+
+function writeGrade(app: string, status: EvidenceStatus, summary: string,
+  { grading = join(app, 'stack-bench'), feature = 'Accounts', points = 1,
+    criterion = 'owner', stableKey = criterion, file = 'grading-features.json',
+    url = 'http://app', consoleErrors = [], statedBy, evidence: suppliedEvidence }:
+    WriteGradeOptions = {}): void {
+  mkdirSync(grading, { recursive: true });
+  const setupEvidence = createCheckEvidence({ status: 'passed', code: 'completed', phase: 'setup',
+    startedAtMs: 1, completedAtMs: 2 });
+  const evidence = suppliedEvidence ?? createCheckEvidence({ status,
+    code: status === 'passed' ? 'completed' : 'test_result', phase: 'assertion', summary,
+    startedAtMs: 3, completedAtMs: 4 });
+  writeArtifact(join(grading, file), {
+    kind: 'grade', id: 'repair-selection-grade', identities: {},
+    payload: {
+      url,
+      total: status === 'passed' ? points : 0,
+      max: status === 'inconclusive' || status === 'harness_failure' ? 0 : points,
+      features: [{ id: 1, name: feature, score: status === 'passed' ? points : 0,
+        max: status === 'inconclusive' || status === 'harness_failure' ? 0 : points,
+        setupEvidence, consoleErrors, criteria: [{ id: criterion, stableKey,
+          desc: `Expected ${criterion}`, ...(statedBy ? { statedBy } : {}), points, evidence }] }],
+    },
+  });
+}
+
+test('repair report selection follows typed evidence even when prose claims the opposite', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-selection-'));
+  try {
+    const harnessApp = join(root, 'harness');
+    writeGrade(harnessApp, 'harness_failure', 'FAILED: the generated app is definitely broken');
+    const skipped = spawnSync(process.execPath, [CLI, '--app', harnessApp], { encoding: 'utf8' });
+    assert.equal(skipped.status, 3, skipped.stderr);
+    assert.equal(existsSync(join(harnessApp, 'BUG_REPORT.md')), false);
+
+    const failedApp = join(root, 'failed');
+    writeGrade(failedApp, 'failed', 'INCONCLUSIVE: this wording must not suppress repair');
+    const reported = spawnSync(process.execPath, [CLI, '--app', failedApp], { encoding: 'utf8' });
+    assert.equal(reported.status, 0, reported.stderr);
+    const repair = readFileSync(join(failedApp, 'BUG_REPORT.md'), 'utf8');
+    assert.match(repair, /Actual:\*\* the application did not do this/);
+    assert.doesNotMatch(repair, /INCONCLUSIVE: this wording/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('repair feedback includes actionable runtime evidence without private artifact names', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-diagnostics-'));
+  try {
+    const app = join(root, 'app');
+    const total = finding('number-mismatch', { control: 'cart-total', observed: 9, expected: { equals: 12 } });
+    const evidence = createCheckEvidence({
+      status: 'failed', code: 'test_result', phase: 'assertion', actor: 'buyer',
+      summary: 'cart total was wrong', observation: { value: 9 }, expected: { value: 12 },
+      finding: total, startedAtMs: 3, completedAtMs: 4,
+      actions: [{ actor: 'buyer', evidence: {
+        schemaVersion: 2, action: { id: 'expectNumber', version: '1.0.0' },
+        status: 'failed', type: 'browser-number', code: 'application_failure', phase: 'execute',
+        summary: 'cart total was wrong', finding: total, observation: { value: 9 }, expected: { value: 12 },
+        retryable: false, timing: { startedAtMs: 3, completedAtMs: 4, durationMs: 1,
+          deadlineMs: 5_000 }, attachments: [], sensitivity: [],
+      } }],
+      attachments: [{ kind: 'screenshot', ref: 'failure-buyer.png' }],
+    });
+    writeGrade(app, 'failed', 'cart total was wrong', {
+      feature: 'Cart', criterion: 'total', stableKey: 'private.check.cart.total',
+      statedBy: 'the cart total equals the sum of its lines',
+      url: 'http://app/cart', consoleErrors: ['POST /api/cart returned HTTP 500'], evidence,
+    });
+
+    const reported = spawnSync(process.execPath, [CLI, '--app', app], { encoding: 'utf8' });
+    assert.equal(reported.status, 0, reported.stderr);
+    const repair = readFileSync(join(app, 'BUG_REPORT.md'), 'utf8');
+    assert.match(repair, /Actor\/session:\*\* buyer/);
+    assert.match(repair, /Expected:\*\* the cart total equals the sum of its lines/);
+    assert.match(repair, /Actual:\*\* the cart-total control reads 9, expected exactly 12/);
+    assert.doesNotMatch(repair, /cart total was wrong/);
+    assert.doesNotMatch(repair, /Application URL|http:\/\//);
+    assert.doesNotMatch(repair, /failure-buyer\.png/);
+    assert.match(repair, /Console or network errors:[\s\S]*HTTP 500/);
+    assert.doesNotMatch(repair, /expect number|private\.check|Stack Bench|grader|criterion/i);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('repair feedback describes behavior instead of browser commands', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-browser-language-'));
+  try {
+    const app = join(root, 'app');
+    const detail = `locator.selectOption: Timeout 5000ms exceeded.\n`
+      + `waiting for locator('[data-testid="notification-frequency"]')`;
+    const choice = finding('choice-missing', { control: 'notification-frequency', detail });
+    const evidence = createCheckEvidence({
+      status: 'failed', code: 'test_result', phase: 'assertion', summary: detail,
+      finding: choice, observation: detail, startedAtMs: 3, completedAtMs: 4,
+      actions: [{ actor: 'owner', evidence: {
+        schemaVersion: 2, action: { id: 'fill', version: '1.0.0' },
+        status: 'failed', type: 'browser-interaction-evidence', code: 'application_failure',
+        phase: 'execute', summary: detail, finding: choice, observation: null, expected: null,
+        retryable: false, timing: { startedAtMs: 3, completedAtMs: 4,
+          durationMs: 1, deadlineMs: 60_000 }, attachments: [], sensitivity: [],
+      } }],
+    });
+    writeGrade(app, 'failed', detail, { evidence });
+
+    const reported = spawnSync(process.execPath, [CLI, '--app', app], { encoding: 'utf8' });
+    assert.equal(reported.status, 0, reported.stderr);
+    const repair = readFileSync(join(app, 'BUG_REPORT.md'), 'utf8');
+    assert.match(repair, /Actual:\*\* the notification-frequency control did not offer the required choice/);
+    assert.match(repair, /Failed action:\*\* Select the requested choice/);
+    assert.doesNotMatch(repair, /locator|selectOption|data-(?:role|testid)|Timeout|5000ms|http:\/\//);
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('repair feedback refuses internal evaluation language', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-disclosure-'));
+  try {
+    const app = join(root, 'app');
+    writeGrade(app, 'failed', 'x', { statedBy: 'the Stack Bench test failed' });
+    const reported = spawnSync(process.execPath, [CLI, '--app', app], { encoding: 'utf8' });
+    assert.equal(reported.status, 2);
+    assert.match(reported.stderr, /contains internal language/);
+    assert.equal(existsSync(join(app, 'BUG_REPORT.md')), false);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('dependency repair feedback contains only checks selected for that feature', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-check-selection-'));
+  try {
+    const app = join(root, 'app');
+    writeGrade(app, 'failed', 'account ownership failed', {
+      criterion: 'owner', stableKey: 'check.accounts.owner',
+      file: 'grading-accounts.json', feature: 'Accounts',
+    });
+    writeGrade(app, 'failed', 'catalog search failed', {
+      criterion: 'search', stableKey: 'check.catalog.search',
+      file: 'grading-catalog.json', feature: 'Catalog',
+    });
+    const reported = spawnSync(process.execPath, [CLI, '--app', app,
+      '--checks-json', JSON.stringify(['check.accounts.owner']),
+      '--history-json', JSON.stringify([{ round: 1, result: 'incomplete',
+        remainingFailures: ['check.accounts.owner', 'check.catalog.search'] }])],
+    { encoding: 'utf8' });
+    assert.equal(reported.status, 0, reported.stderr);
+    const repair = readFileSync(join(app, 'BUG_REPORT.md'), 'utf8');
+    assert.match(repair, /Accounts|account ownership failed/);
+    assert.match(repair, /Earlier work/);
+    assert.doesNotMatch(repair, /remaining:/);
+    assert.doesNotMatch(repair, /Catalog|catalog search failed/);
+    assert.doesNotMatch(repair, /check\.catalog\.search/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('repair feedback includes failures caused by the rejected prior repair', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-regression-'));
+  try {
+    const app = join(root, 'app');
+    writeGrade(app, 'failed', 'checkout still fails', {
+      feature: 'Checkout', criterion: 'checkout', stableKey: 'check.checkout',
+    });
+    const regression = join(root, 'regression.md');
+    writeFileSync(regression, [
+      '## Behavior', '',
+      '### Bug 1: Accounts', '', '**Expected:** the owner keeps access', '',
+      '**Actual:** the owner was signed out', '',
+    ].join('\n'));
+
+    const reported = spawnSync(process.execPath, [CLI, '--app', app,
+      '--prior-regression', regression], { encoding: 'utf8' });
+    assert.equal(reported.status, 0, reported.stderr);
+    const repair = readFileSync(join(app, 'BUG_REPORT.md'), 'utf8');
+    assert.match(repair, /Actual:\*\* the application did not do this/);
+    assert.match(repair, /Previous repair regression/);
+    assert.match(repair, /Accounts/);
+    assert.match(repair, /owner was signed out/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('expected failures enter repairs while observed-only failures stay isolated', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-treatment-repair-'));
+  try {
+    const app = join(root, 'app');
+    writeGrade(app, 'failed', 'durability was expected but state was lost',
+      { feature: 'State durability' });
+    writeGrade(app, 'failed', 'observed-only failure must not enter repair', {
+      grading: join(root, 'run', 'first-build-l1-observed'), feature: 'Observed behavior',
+    });
+
+    const reported = spawnSync(process.execPath, [CLI, '--app', app], { encoding: 'utf8' });
+    assert.equal(reported.status, 0, reported.stderr);
+    const repair = readFileSync(join(app, 'BUG_REPORT.md'), 'utf8');
+    assert.match(repair, /State durability/);
+    assert.match(repair, /Expected:\*\* Expected owner/);
+    assert.doesNotMatch(repair, /observed-only failure must not enter repair|Observed behavior/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('zero-point test-development failures never enter repair feedback', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-zero-point-repair-'));
+  try {
+    const app = join(root, 'app');
+    writeGrade(app, 'failed', 'candidate behavior failed',
+      { feature: 'Candidate concurrency check', points: 0 });
+    const reported = spawnSync(process.execPath, [CLI, '--app', app], { encoding: 'utf8' });
+    assert.equal(reported.status, 3, reported.stderr);
+    assert.equal(existsSync(join(app, 'BUG_REPORT.md')), false);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('application setup failures become actionable repair feedback without criterion results', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-setup-repair-'));
+  try {
+    const app = join(root, 'app');
+    const grading = join(app, 'stack-bench');
+    mkdirSync(grading, { recursive: true });
+    writeArtifact(join(grading, 'bundle.json'), {
+      kind: 'grade_bundle', id: 'setup-failure-bundle', identities: {},
+      payload: {
+        definitionSchemaVersion: 1, recipeRelease: null, calibration: null,
+        label: 'postgres-l1', track: 'ecommerce', backend: 'postgres', url: 'http://app',
+        app, level: 1, observation: 'scored', suites: {},
+        totals: { score: 0, max: 58, dirty: false, contractPass: null, regression: null },
+        error: 'database reset failed: server/package.json has no dev or start script',
+        outcome: { kind: 'app_failure', phase: 'application-restart',
+          reason: 'database reset failed: server/package.json has no dev or start script',
+          appFailures: ['application-restart'] },
+        selection: null,
+      },
+    });
+    const reported = spawnSync(process.execPath, [CLI, '--app', app], { encoding: 'utf8' });
+    assert.equal(reported.status, 0, reported.stderr);
+    const repair = readFileSync(join(app, 'BUG_REPORT.md'), 'utf8');
+    assert.match(repair, /Application setup/);
+    assert.match(repair, /must provide \/app\/start\.sh/);
+    assert.match(repair, /no dev or start script/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('contract feedback reports the clean-state observation without claiming the element exists', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-contract-repair-'));
+  try {
+    const app = join(root, 'app');
+    const grading = join(app, 'stack-bench');
+    mkdirSync(grading, { recursive: true });
+    writeArtifact(join(grading, 'contract-lint.json'), {
+      kind: 'contract_lint', id: 'contract-repair-lint', identities: {},
+      payload: {
+        label: 'spacetime-l1', url: 'http://app', level: 1, pass: false,
+        counts: { lintable: 2, pass: 0, fail: 1, blocked: 1, scenario: 1 },
+        results: [
+          { id: 'review-average', status: 'FAIL',
+            detail: 'no element matching [data-testid="review-average"] became visible — expected: the item average as a number' },
+          { id: 'cart-panel', status: 'BLOCKED', detail: 'earlier core flow step failed' },
+        ],
+      },
+    });
+
+    const reported = spawnSync(process.execPath, [CLI, '--app', app], { encoding: 'utf8' });
+    assert.equal(reported.status, 0, reported.stderr);
+    const repair = readFileSync(join(app, 'BUG_REPORT.md'), 'utf8');
+    assert.match(repair, /clean application state/);
+    assert.match(repair, /review-average/);
+    assert.match(repair, /no element matching/);
+    assert.doesNotMatch(repair, /These elements exist/);
+    assert.doesNotMatch(repair, /cart-panel/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('dependency repair feedback contains only interfaces selected for that feature', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-control-selection-'));
+  try {
+    const app = join(root, 'app');
+    const grading = join(app, 'stack-bench');
+    mkdirSync(grading, { recursive: true });
+    writeArtifact(join(grading, 'contract-lint.json'), {
+      kind: 'contract_lint', id: 'contract-repair-lint', identities: {},
+      payload: {
+        label: 'postgres-l1', url: 'http://app', level: 1, pass: false,
+        counts: { lintable: 2, pass: 0, fail: 2, blocked: 0, scenario: 1 },
+        results: [
+          { id: 'account-menu', status: 'FAIL', detail: 'account menu missing' },
+          { id: 'catalog-search', status: 'FAIL', detail: 'catalog search missing' },
+        ],
+      },
+    });
+    const reported = spawnSync(process.execPath, [CLI, '--app', app,
+      '--checks-json', JSON.stringify(['check.accounts.owner']),
+      '--controls-json', JSON.stringify(['account-menu'])], { encoding: 'utf8' });
+    assert.equal(reported.status, 0, reported.stderr);
+    const repair = readFileSync(join(app, 'BUG_REPORT.md'), 'utf8');
+    assert.match(repair, /account-menu/);
+    assert.doesNotMatch(repair, /catalog-search/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('repair feedback states clean authority without exposing scoring history', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-history-'));
+  try {
+    const app = join(root, 'app');
+    writeGrade(app, 'failed', 'the owner check still failed');
+    const history = [
+      { round: 1, beforeScore: 4, beforeMax: 6, afterScore: 4,
+        afterMax: 6, result: 'kept with no score gain', remainingFailures: ['accounts/owner'] },
+      { round: 2, beforeScore: 4, beforeMax: 6, afterScore: 4,
+        afterMax: 6, result: 'kept with no score gain', remainingFailures: ['accounts/owner'] },
+    ];
+    const archive = join(app, 'stack-bench', 'records', 'bug-report-round2.md');
+    const reported = spawnSync(process.execPath,
+      [CLI, '--app', app, '--history-json', JSON.stringify(history), '--archive', archive],
+      { encoding: 'utf8' });
+    assert.equal(reported.status, 0, reported.stderr);
+    const repair = readFileSync(join(app, 'BUG_REPORT.md'), 'utf8');
+    assert.match(repair, /clean database reset and a fresh/);
+    assert.match(repair, /Earlier work/);
+    assert.doesNotMatch(repair, /Round|4\/6|accounts\/owner|score/i);
+    assert.match(repair, /existing local state/);
+    assert.equal(readFileSync(archive, 'utf8'), repair);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('repair feedback is assembled from the authored sentence, the finding, and console errors only', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-repair-sources-'));
+  try {
+    const app = join(root, 'app');
+    const delivered = finding('message-delivered', { actor: 'other' });
+    const evidence = createCheckEvidence({
+      status: 'failed', code: 'test_result', phase: 'assertion', actor: 'other',
+      summary: '"support-secret-619" was delivered to other', finding: delivered,
+      observation: 'other received support-secret-619 in the ticket list',
+      expected: 'no message containing support-secret-619 reaches other',
+      startedAtMs: 3, completedAtMs: 4,
+      actions: [{ actor: 'other', evidence: {
+        schemaVersion: 2, action: { id: 'expectNotReceived', version: '1.0.0' },
+        status: 'failed', type: 'transport-evidence', code: 'application_failure', phase: 'execute',
+        summary: '"support-secret-619" was delivered to other', finding: delivered,
+        observation: 'other received support-secret-619', expected: null,
+        retryable: false, timing: { startedAtMs: 3, completedAtMs: 4, durationMs: 1,
+          deadlineMs: 5_000 }, attachments: [], sensitivity: [],
+      } }],
+    });
+    writeGrade(app, 'failed', 'unused', { feature: 'Support message privacy', criterion: '619a',
+      statedBy: 'a support message is visible only to its customer and to staff',
+      consoleErrors: ['POST /api/support returned 500'], evidence });
+
+    const reported = spawnSync(process.execPath, [CLI, '--app', app], { encoding: 'utf8' });
+    assert.equal(reported.status, 0, reported.stderr);
+    const repair = readFileSync(join(app, 'BUG_REPORT.md'), 'utf8');
+    assert.doesNotMatch(repair, /support-secret-619|ticket list|was delivered to other"/);
+    assert.match(repair, /Expected:\*\* a support message is visible only to its customer and to staff/);
+    assert.match(repair, /Actual:\*\* a private message was delivered to other, who is not a participant/);
+    assert.match(repair, /Console or network errors:[\s\S]*POST \/api\/support returned 500/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/reset-backend.integration.ts b/tools/stack-bench/tests/reset-backend.integration.ts
new file mode 100644
index 00000000000..92b3e1b6e1a
--- /dev/null
+++ b/tools/stack-bench/tests/reset-backend.integration.ts
@@ -0,0 +1,77 @@
+import assert from 'node:assert/strict';
+import { execFileSync } from 'node:child_process';
+import test from 'node:test';
+
+import type { TextCommandOptions } from '../src/runtime/command-executor.js';
+import { proveMongoDbUse } from '../src/stacks/backends/mongodb-operations.js';
+import { provePostgresUse, resetPostgres } from '../src/stacks/backends/postgres-operations.js';
+import { POSTGRES_APPLICATION_IDENTITY } from '../src/stacks/hosted-database-identity.js';
+
+const POSTGRES_USER = POSTGRES_APPLICATION_IDENTITY.user;
+const docker = (args: readonly string[], options: Partial<TextCommandOptions> = {}): string =>
+  execFileSync('docker', args, { encoding: 'utf8', stdio: 'pipe', timeout: 120_000, ...options });
+
+test('runtime database provenance works against the Docker services', () => {
+  const suffix = `${process.pid}_${Date.now()}`;
+  const marker = `application-proof-${suffix}`;
+  const postgresDatabase = `application_proof_${suffix}`;
+  const mongoDatabase = `application_proof_${suffix}`;
+  const container = (name: string): { name: string; id: string } => ({ name,
+    id: docker(['inspect', '--format', '{{.Id}}', name]).trim() });
+  try {
+    docker(['exec', 'stack-bench-postgres', 'psql', '-U', POSTGRES_USER, '-d', 'postgres',
+      '-v', 'ON_ERROR_STOP=1', '-c', `CREATE DATABASE ${postgresDatabase} OWNER ${POSTGRES_USER};`]);
+    docker(['exec', 'stack-bench-postgres', 'psql', '-U', POSTGRES_USER, '-d', postgresDatabase,
+      '-v', 'ON_ERROR_STOP=1', '-c',
+      `CREATE TABLE account (username text NOT NULL); INSERT INTO account VALUES ('${marker}');`]);
+    docker(['exec', 'stack-bench-mongodb', 'mongosh', mongoDatabase, '--quiet', '--eval',
+      `db.account.insertOne({ username: ${JSON.stringify(marker)} })`]);
+
+    assert.equal(provePostgresUse({ lease: { resources: { database: postgresDatabase,
+      container: container('stack-bench-postgres') } }, marker }).ok, true);
+    assert.equal(proveMongoDbUse({ lease: { resources: { database: mongoDatabase,
+      container: container('stack-bench-mongodb') } }, marker }).ok, true);
+  } finally {
+    try {
+      docker(['exec', 'stack-bench-postgres', 'psql', '-U', POSTGRES_USER, '-d', 'postgres',
+        '-v', 'ON_ERROR_STOP=1', '-c', `DROP DATABASE IF EXISTS ${postgresDatabase} WITH (FORCE);`]);
+    } catch { /* preserve the test failure */ }
+    try {
+      docker(['exec', 'stack-bench-mongodb', 'mongosh', mongoDatabase, '--quiet', '--eval',
+        'db.dropDatabase()']);
+    } catch { /* preserve the test failure */ }
+  }
+});
+
+test('PostgreSQL reset preserves schema and does not touch another lease database', () => {
+  const suffix = `${process.pid}_${Date.now()}`;
+  const target = `application_reset_${suffix}`;
+  const neighbor = `application_neighbor_${suffix}`;
+  const container = 'stack-bench-postgres';
+  const database = (name: string, sql: string): string =>
+    docker(['exec', container, 'psql', '-U', POSTGRES_USER,
+      '-d', name, '-v', 'ON_ERROR_STOP=1', '-tAc', sql]);
+  try {
+    const id = docker(['inspect', '--format', '{{.Id}}', container]).trim();
+    for (const name of [target, neighbor]) {
+      docker(['exec', container, 'psql', '-U', POSTGRES_USER, '-d', 'postgres',
+        '-v', 'ON_ERROR_STOP=1', '-c', `CREATE DATABASE ${name} OWNER ${POSTGRES_USER};`]);
+      database(name, 'CREATE TABLE item (id bigserial PRIMARY KEY, name text NOT NULL); '
+        + "INSERT INTO item(name) VALUES ('kept schema');");
+    }
+    resetPostgres({ lease: { resources: { database: target,
+      container: { name: container, id } } } });
+    assert.equal(database(target,
+      "SELECT to_regclass('public.item') IS NOT NULL, count(*) FROM item;").trim(), 't|0');
+    database(target, "INSERT INTO item(name) VALUES ('reseeded');");
+    assert.equal(database(target, "SELECT id FROM item WHERE name = 'reseeded';").trim(), '1');
+    assert.equal(database(neighbor, 'SELECT count(*) FROM item;').trim(), '1');
+  } finally {
+    for (const name of [target, neighbor]) {
+      try {
+        docker(['exec', container, 'psql', '-U', POSTGRES_USER, '-d', 'postgres',
+          '-v', 'ON_ERROR_STOP=1', '-c', `DROP DATABASE IF EXISTS ${name} WITH (FORCE);`]);
+      } catch { /* preserve the test failure */ }
+    }
+  }
+});
diff --git a/tools/stack-bench/tests/reset-backend.test.ts b/tools/stack-bench/tests/reset-backend.test.ts
new file mode 100644
index 00000000000..ef7503e3a4c
--- /dev/null
+++ b/tools/stack-bench/tests/reset-backend.test.ts
@@ -0,0 +1,356 @@
+import assert from 'node:assert/strict';
+import { execFileSync, spawnSync } from 'node:child_process';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+import { createBackendLease, writeBackendLease } from '../src/runtime/backend-lease.js';
+import { resetBackend } from '../src/stacks/backend-reset.js';
+import { proveMongoDbUse } from '../src/stacks/backends/mongodb-operations.js';
+import { provePostgresUse, resetPostgres } from '../src/stacks/backends/postgres-operations.js';
+import { proveSpacetimeUse } from '../src/stacks/backends/spacetime-operations.js';
+import { containerReachableSpacetimeUri } from '../src/runtime/spacetime-target.js';
+import { GeneratedAppLayoutError, resolveSpacetimeModuleLayout }
+  from '../src/runtime/spacetime-layout.js';
+import type { TextCommandOptions } from '../src/runtime/command-executor.js';
+import type { BackendLeaseContainer } from '../src/runtime/backend-lease.js';
+import { compiledEntrypoint } from '../src/package-root.js';
+
+interface CommandCall {
+  command: string;
+  args: readonly string[];
+  options: TextCommandOptions;
+}
+
+interface ArgvCall {
+  argv: string[];
+  options: TextCommandOptions;
+}
+
+function writeModule(directory: string): void {
+  mkdirSync(join(directory, 'src'), { recursive: true });
+  writeFileSync(join(directory, 'package.json'), JSON.stringify({
+    dependencies: { spacetimedb: 'file:/deps/bindings-typescript' },
+  }));
+  writeFileSync(join(directory, 'src', 'index.ts'),
+    "import { schema } from 'spacetimedb/server';\nexport default schema({});\n");
+}
+
+test('Spacetime container targets follow their recorded network topology', () => {
+  const bridgeLease = { resources: { serverUri: 'http://127.0.0.1:3310',
+    buildContainer: null } };
+  const hostLease: { resources: { serverUri: string;
+    buildContainer: Pick<BackendLeaseContainer, 'networkMode'> } } = {
+      resources: { serverUri: 'http://127.0.0.1:3310',
+        buildContainer: { networkMode: 'host' } },
+    };
+  assert.equal(containerReachableSpacetimeUri(bridgeLease), 'http://host.docker.internal:3310');
+  assert.equal(containerReachableSpacetimeUri(hostLease), 'http://127.0.0.1:3310');
+  assert.throws(() => containerReachableSpacetimeUri(bridgeLease, 'unknown'),
+    /unsupported build container network mode/);
+});
+
+test('the Node reset entrypoint refuses without an authenticated lease', () => {
+  const env = { ...process.env };
+  delete env.STACK_BENCH_LEASE;
+  delete env.STACK_BENCH_LEASE_TOKEN;
+  assert.throws(() => execFileSync(process.execPath,
+    [compiledEntrypoint('commands', 'reset-backend.js'), 'mongodb', '.'], { env, stdio: 'pipe' }),
+  /STACK_BENCH_LEASE is required/);
+});
+
+test('the reset entrypoint reports a generated layout separately from a harness failure', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reset-layout-exit-'));
+  const app = join(root, 'app');
+  const leasePath = join(root, 'lease.json');
+  mkdirSync(app);
+  const lease = createBackendLease({ runId: 'layout-exit', backend: 'spacetime', track: 'ecommerce',
+    runIndex: 0, serverUri: 'http://127.0.0.1:3310', module: 'app-ecom-run0',
+    dataDir: join(root, 'data') });
+  lease.state = 'active';
+  writeBackendLease(leasePath, lease);
+  try {
+    const result = spawnSync(process.execPath,
+      [compiledEntrypoint('commands', 'reset-backend.js'), 'spacetime', app], {
+        encoding: 'utf8',
+        env: { ...process.env, STACK_BENCH_LEASE: leasePath,
+          STACK_BENCH_LEASE_TOKEN: lease.ownershipToken },
+      });
+    assert.equal(result.status, 10);
+    assert.match(result.stderr, /^GENERATED_APP_LAYOUT:/);
+    assert.doesNotMatch(result.stderr, /at file:/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('PostgreSQL per-check reset clears rows without removing the app schema', () => {
+  const lease = {
+    resources: {
+      database: 'app_ecom_run0',
+      container: { name: 'postgres-service', id: 'a'.repeat(64) },
+    },
+  };
+  const calls: CommandCall[] = [];
+  const exec = (command: string, args: readonly string[], options: TextCommandOptions): string => {
+    calls.push({ command, args, options });
+    if (args[0] === 'inspect') return `${lease.resources.container.id}\n`;
+    return '';
+  };
+
+  resetPostgres({ lease, exec });
+  const reset = calls.find(call => call.args.includes('psql'));
+  assert(reset);
+  const sql = reset.args[reset.args.indexOf('-c') + 1];
+  assert(sql);
+  assert.match(sql, /FROM pg_tables WHERE schemaname = 'public'/);
+  assert.match(sql, /TRUNCATE TABLE/);
+  assert.match(sql, /RESTART IDENTITY CASCADE/);
+  assert.doesNotMatch(sql, /DROP SCHEMA/);
+  assert.equal(reset.args[reset.args.indexOf('-v') + 1], 'ON_ERROR_STOP=1');
+  assert.equal(reset.args[reset.args.indexOf('-d') + 1], lease.resources.database);
+});
+
+test('PostgreSQL runtime provenance finds an application marker in the exact leased database', () => {
+  const lease = { resources: { database: 'app_ecom_run0',
+    container: { name: 'postgres-service', id: 'a'.repeat(64) } } };
+  const calls: CommandCall[] = [];
+  const exec = (command: string, args: readonly string[], options: TextCommandOptions): string => {
+    calls.push({ command, args, options });
+    if (args[0] === 'inspect') return `${lease.resources.container.id}\n`;
+    return 'public.account.username\n';
+  };
+
+  assert.deepEqual(provePostgresUse({ lease, marker: "ann'proof", exec }), {
+    ok: true,
+    verified: true,
+    matches: 1,
+    reason: 'the application marker exists in the leased PostgreSQL database',
+  });
+  const proof = calls.at(-1);
+  assert(proof);
+  assert.deepEqual(proof.args.slice(0, 3), ['exec', '-i', 'a'.repeat(64)]);
+  assert.equal(proof.args.includes('ON_ERROR_STOP=1'), true);
+  assert.match(proof.options.input ?? '', /FROM information_schema\.columns/);
+  assert.match(proof.options.input ?? '', /ann''proof/);
+  assert.match(proof.options.input ?? '', /ORDER BY table_name, ordinal_position\n\\gexec/);
+
+  const emptyExec = (_command: string, args: readonly string[], _options: TextCommandOptions): string =>
+    args[0] === 'inspect'
+    ? `${lease.resources.container.id}\n` : '';
+  assert.equal(provePostgresUse({ lease, marker: 'missing', exec: emptyExec }).ok, false);
+  assert.throws(() => provePostgresUse({ lease, marker: '', exec }),
+    /requires a non-empty application marker/);
+});
+
+test('MongoDB runtime provenance finds an application marker in the exact leased database', () => {
+  const lease = { resources: { database: 'app_ecom_run0',
+    container: { name: 'mongodb-service', id: 'b'.repeat(64) } } };
+  const calls: CommandCall[] = [];
+  const execWith = (output: string) =>
+    (command: string, args: readonly string[], options: TextCommandOptions): string => {
+    calls.push({ command, args, options });
+    return args[0] === 'inspect' ? `${lease.resources.container.id}\n` : output;
+  };
+
+  assert.deepEqual(proveMongoDbUse({ lease, marker: 'ann-proof', exec: execWith('2\n') }), {
+    ok: true,
+    verified: true,
+    matches: 2,
+    reason: 'the application marker exists in the leased MongoDB database',
+  });
+  const script = calls.at(-1)?.args.at(-1);
+  assert(script);
+  assert.match(script, /const marker = "ann-proof"/);
+  assert.match(script, /containsMarker/);
+  assert.equal(proveMongoDbUse({ lease, marker: 'missing', exec: execWith('0\n') }).ok, false);
+  assert.throws(() => proveMongoDbUse({ lease, marker: 'proof', exec: execWith('not-a-count\n') }),
+    /invalid count/);
+  assert.throws(() => proveMongoDbUse({ lease, marker: '', exec: execWith('0\n') }),
+    /requires a non-empty application marker/);
+});
+
+test('SpacetimeDB runtime provenance finds an application marker in the exact leased module', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-spacetime-provenance-'));
+  const leasePath = join(root, 'lease.json');
+  const lease = createBackendLease({ runId: 'spacetime-proof', backend: 'spacetime',
+    track: 'ecommerce', runIndex: 0, module: 'app_ecom_run0',
+    serverUri: 'http://127.0.0.1:3210', dataDir: root });
+  lease.state = 'active';
+  lease.resources.buildContainer = { name: 'build', id: 'c'.repeat(64), image: 'stack-bench:test',
+    owned: true, running: true, networkMode: 'host',
+    resourceLimits: { cpuCount: 1, memoryBytes: 1, memorySwapBytes: 1, pids: 1 } };
+  writeBackendLease(leasePath, lease);
+  const previousPath = process.env.STACK_BENCH_LEASE;
+  const previousToken = process.env.STACK_BENCH_LEASE_TOKEN;
+  process.env.STACK_BENCH_LEASE = leasePath;
+  process.env.STACK_BENCH_LEASE_TOKEN = lease.ownershipToken;
+  const schema = { sections: [
+    { Typespace: { types: [{ Product: { elements: [
+      { name: { some: 'username' }, algebraic_type: { String: {} } },
+      { name: { some: 'id' }, algebraic_type: { U64: {} } },
+    ] } }] } },
+    { Tables: [{ source_name: 'account', product_type_ref: 0 }] },
+  ] };
+  const exec = (_command: string, args: readonly string[]): string => {
+    if (args[0] === 'inspect') return `${lease.resources.buildContainer?.id}\n`;
+    if (args.includes('describe')) return JSON.stringify(schema);
+    return args.at(-1)?.includes("'proof'") ? ' username\n----------\n "proof"\n' : '';
+  };
+  const proofLease = { resources: { module: 'app_ecom_run0', serverUri: 'http://127.0.0.1:3210' } };
+  try {
+    assert.deepEqual(proveSpacetimeUse({ lease: proofLease, marker: 'proof', exec }), {
+      ok: true,
+      verified: true,
+      matches: 1,
+      reason: 'the application marker exists in the leased SpacetimeDB module',
+    });
+    assert.equal(proveSpacetimeUse({ lease: proofLease, marker: 'missing', exec }).ok, false);
+    assert.throws(() => proveSpacetimeUse({ lease: proofLease, marker: '', exec }),
+      /requires a non-empty application marker/);
+  } finally {
+    if (previousPath === undefined) delete process.env.STACK_BENCH_LEASE;
+    else process.env.STACK_BENCH_LEASE = previousPath;
+    if (previousToken === undefined) delete process.env.STACK_BENCH_LEASE_TOKEN;
+    else process.env.STACK_BENCH_LEASE_TOKEN = previousToken;
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('Spacetime reset publishes inside the exact leased build container', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reset-node-'));
+  const app = join(root, 'app');
+  const leasePath = join(root, 'lease.json');
+  writeModule(join(app, 'backend', 'spacetimedb'));
+  const lease = createBackendLease({ runId: 'reset-test', backend: 'spacetime', track: 'ecommerce',
+    runIndex: 0, serverUri: 'http://127.0.0.1:3310', module: 'app-ecom-run0',
+    dataDir: join(root, 'data') });
+  lease.state = 'active';
+  lease.resources.buildContainer = { name: 'leased-build', id: 'a'.repeat(64), running: true,
+    owned: true, image: `sha256:${'b'.repeat(64)}`,
+    resourceLimits: { cpuCount: 2, memoryBytes: 1024, memorySwapBytes: 1024, pids: 32 } };
+  writeBackendLease(leasePath, lease);
+  const previousLease = process.env.STACK_BENCH_LEASE;
+  const previousToken = process.env.STACK_BENCH_LEASE_TOKEN;
+  process.env.STACK_BENCH_LEASE = leasePath;
+  process.env.STACK_BENCH_LEASE_TOKEN = lease.ownershipToken;
+  const buildContainer = lease.resources.buildContainer;
+  assert(buildContainer);
+  const calls: ArgvCall[] = [];
+  const exec = (command: string, args: readonly string[], options: TextCommandOptions): string => {
+    calls.push({ argv: [command, ...args], options });
+    if (args[0] === 'inspect') return `${buildContainer.id}\n`;
+    return '';
+  };
+  try {
+    resetBackend({ backend: 'spacetime', app, exec });
+    const publish = calls.find(call => call.argv.includes('publish'));
+    assert(publish);
+    assert.deepEqual(publish.argv.slice(0, 8), ['docker', 'exec', '--user', '10001:10001',
+      '-e', 'HOME=/home/developer', '-e', 'USER=developer']);
+    assert.equal(publish.argv[publish.argv.indexOf('-w') + 1], '/app/backend/spacetimedb');
+    assert.ok(publish.argv.includes(buildContainer.id));
+    assert.ok(publish.argv.includes('/deps/spacetimedb-cli'));
+    assert.ok(publish.argv.includes('app-ecom-run0'));
+    assert.ok(publish.argv.includes('http://host.docker.internal:3310'));
+    assert.equal(publish.argv.includes(join(app, 'backend', 'spacetimedb')), false);
+    assert.equal(calls.every(call => call.options.timeout === 120_000), true);
+  } finally {
+    if (previousLease === undefined) delete process.env.STACK_BENCH_LEASE;
+    else process.env.STACK_BENCH_LEASE = previousLease;
+    if (previousToken === undefined) delete process.env.STACK_BENCH_LEASE_TOKEN;
+    else process.env.STACK_BENCH_LEASE_TOKEN = previousToken;
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('Spacetime reset honors the module path declared by a generated project', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-reset-declared-'));
+  const app = join(root, 'app');
+  const leasePath = join(root, 'lease.json');
+  writeModule(join(app, 'server', 'spacetimedb'));
+  writeFileSync(join(app, 'server', 'spacetime.json'), JSON.stringify({
+    server: 'bench', 'module-path': './spacetimedb',
+  }));
+  const lease = createBackendLease({ runId: 'reset-declared', backend: 'spacetime', track: 'ecommerce',
+    runIndex: 0, serverUri: 'http://127.0.0.1:3310', module: 'app-ecom-run0',
+    dataDir: join(root, 'data') });
+  lease.state = 'active';
+  lease.resources.buildContainer = { name: 'leased-build', id: 'a'.repeat(64), running: true,
+    owned: true, image: `sha256:${'b'.repeat(64)}`,
+    resourceLimits: { cpuCount: 2, memoryBytes: 1024, memorySwapBytes: 1024, pids: 32 } };
+  writeBackendLease(leasePath, lease);
+  const previousLease = process.env.STACK_BENCH_LEASE;
+  const previousToken = process.env.STACK_BENCH_LEASE_TOKEN;
+  process.env.STACK_BENCH_LEASE = leasePath;
+  process.env.STACK_BENCH_LEASE_TOKEN = lease.ownershipToken;
+  const buildContainer = lease.resources.buildContainer;
+  assert(buildContainer);
+  const calls: ArgvCall[] = [];
+  const exec = (command: string, args: readonly string[], options: TextCommandOptions): string => {
+    calls.push({ argv: [command, ...args], options });
+    if (args[0] === 'inspect') return `${buildContainer.id}\n`;
+    return '';
+  };
+  try {
+    assert.deepEqual(resolveSpacetimeModuleLayout(app), {
+      moduleDirectory: 'server/spacetimedb',
+      hostPath: join(app, 'server', 'spacetimedb'),
+      containerPath: '/app/server/spacetimedb',
+      configPath: 'server/spacetime.json',
+      source: 'spacetime.json',
+    });
+    resetBackend({ backend: 'spacetime', app, exec });
+    const publish = calls.find(call => call.argv.includes('publish'));
+    assert(publish);
+    assert.deepEqual(publish.argv.slice(0, 8), ['docker', 'exec', '--user', '10001:10001',
+      '-e', 'HOME=/home/developer', '-e', 'USER=developer']);
+    assert.equal(publish.argv[publish.argv.indexOf('-w') + 1], '/app/server/spacetimedb');
+    assert.ok(publish.argv.includes(buildContainer.id));
+    assert.ok(publish.argv.includes('/deps/spacetimedb-cli'));
+    assert.equal(publish.argv.filter(value => value === '/app/server/spacetimedb').length, 2);
+  } finally {
+    if (previousLease === undefined) delete process.env.STACK_BENCH_LEASE;
+    else process.env.STACK_BENCH_LEASE = previousLease;
+    if (previousToken === undefined) delete process.env.STACK_BENCH_LEASE_TOKEN;
+    else process.env.STACK_BENCH_LEASE_TOKEN = previousToken;
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('Spacetime layout resolution rejects missing, escaping, and ambiguous modules', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-layout-invalid-'));
+  try {
+    const missing = join(root, 'missing');
+    mkdirSync(missing);
+    assert.throws(() => resolveSpacetimeModuleLayout(missing), GeneratedAppLayoutError);
+
+    const escaping = join(root, 'escaping');
+    mkdirSync(escaping);
+    writeFileSync(join(escaping, 'spacetime.json'), JSON.stringify({ 'module-path': '..' }));
+    assert.throws(() => resolveSpacetimeModuleLayout(escaping), /escapes the application/);
+
+    const ambiguous = join(root, 'ambiguous');
+    writeModule(join(ambiguous, 'one'));
+    writeModule(join(ambiguous, 'two'));
+    assert.throws(() => resolveSpacetimeModuleLayout(ambiguous), /multiple SpacetimeDB module directories/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('Spacetime layout resolution maps container-absolute module paths into the mounted app', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-layout-container-path-'));
+  try {
+    writeModule(join(root, 'backend', 'spacetimedb'));
+    writeFileSync(join(root, 'spacetime.json'), JSON.stringify({
+      'module-path': '/app/backend/spacetimedb',
+    }));
+    const layout = resolveSpacetimeModuleLayout(root);
+    assert.equal(layout.moduleDirectory, 'backend/spacetimedb');
+    assert.equal(layout.containerPath, '/app/backend/spacetimedb');
+    assert.equal(layout.source, 'spacetime.json');
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/run-session-artifacts.test.ts b/tools/stack-bench/tests/run-session-artifacts.test.ts
new file mode 100644
index 00000000000..961dbc48d0b
--- /dev/null
+++ b/tools/stack-bench/tests/run-session-artifacts.test.ts
@@ -0,0 +1,123 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { runSessionRecord } from '../src/evidence/benchmark-run.js';
+import { readRunJson, writeRunJson } from '../src/evidence/artifacts.js';
+import type { AgentCostReceiptEntry, ValidatedAgentResult }
+  from '../src/agents/agent-result-contract.js';
+import type { RunSessionRecord } from '../src/evidence/benchmark-run.js';
+
+function receipt(): AgentCostReceiptEntry[] {
+  return [{ invocation: 1, receipt: { schemaVersion: 3, source: 'credential-broker', exact: true, estimatedRequests: 0,
+    estimatedByReason: { 'no-usage': 0, 'response-aborted': 0, 'upstream-error': 0 },
+    model: 'test-model', maxBudgetUsd: 10, costUsd: 1, cliCostUsd: 1,
+    calculatedCostUsd: 1, usage: { input: 1, output: 1, cacheWrite5m: 0,
+      cacheWrite1h: 0, cacheRead: 0 }, pricingRates: { input: 1, output: 1,
+      cacheWrite5m: 1, cacheWrite1h: 1, cacheRead: 1 }, complete: true,
+    reconciled: true, error: null } }];
+}
+
+function session(marker: string,
+  { billable = true, costComplete = true }: { billable?: boolean; costComplete?: boolean } = {},
+): ValidatedAgentResult {
+  return { appDir: '/app', mode: 'build', level: 1, backend: 'stub', track: 'loop',
+    model: 'test-model', guidance: null, ok: true, sessionId: marker,
+    costUsd: billable ? 1 : 0, durationMs: 10,
+    usage: { input: 1, output: 1, cacheWrite: 0, cacheRead: 0 },
+    costReceipts: billable ? receipt() : [],
+    setup: { resources: { buildContainerMemory: {
+      currentBytes: 100, peakBytes: 200, limitBytes: 400,
+    }, memoryProbeError: null } }, tokens: 2, outputTokens: 1, turns: 1,
+    promptBytes: 20, thinking: null, transcript: { kind: 'test', id: marker },
+    provenance: null, providerMetadata: null, costComplete };
+}
+
+type SessionLocation = 'buildSessions' | 'repairSessions';
+
+interface SessionArtifactLevel {
+  buildSessions?: RunSessionRecord[];
+  repairSessions?: RunSessionRecord[];
+  resumedRepair?: Record<string, unknown>;
+  outcome?: { kind: string; phase?: string };
+}
+
+interface SessionCase {
+  name: string;
+  marker: string;
+  billable?: boolean;
+  costComplete?: boolean;
+  round?: number;
+  level: (source: ValidatedAgentResult) => SessionArtifactLevel;
+  location: SessionLocation;
+}
+
+const cases: readonly SessionCase[] = [
+  { name: 'successful build', marker: 'build',
+    level: source => ({ buildSessions: [runSessionRecord(source)] }),
+    location: 'buildSessions' },
+  { name: 'failed build', marker: 'failed-build', costComplete: false,
+    level: source => ({ outcome: { kind: 'harness_failure' },
+      buildSessions: [runSessionRecord(source)] }),
+    location: 'buildSessions' },
+  { name: 'normal repair', marker: 'repair', round: 1,
+    level: source => ({ repairSessions: [runSessionRecord(source, 1)] }),
+    location: 'repairSessions' },
+  { name: 'resumed repair', marker: 'resumed-repair', round: 4,
+    level: source => ({ resumedRepair: {}, repairSessions: [runSessionRecord(source, 4)] }),
+    location: 'repairSessions' },
+  { name: 'model-free early exit', marker: 'model-free', billable: false,
+    level: source => ({ outcome: { kind: 'ungraded', phase: 'reference-mutation-only' },
+      buildSessions: [runSessionRecord(source)] }),
+    location: 'buildSessions' },
+];
+
+interface StoredSession {
+  costReceipts: unknown[];
+  costComplete: boolean;
+  round?: number;
+  resources: unknown;
+}
+
+function object(value: unknown): value is Record<string, unknown> {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function storedSession(run: unknown, location: SessionLocation): StoredSession {
+  if (!object(run) || !Array.isArray(run.levels) || !object(run.levels[0])) {
+    throw new Error('run artifact is missing its first level');
+  }
+  const level = run.levels[0];
+  const sessions = level[location];
+  const candidate = Array.isArray(sessions) ? sessions[0] : undefined;
+  if (!object(candidate) || !Array.isArray(candidate.costReceipts)
+    || typeof candidate.costComplete !== 'boolean') {
+    throw new Error(`run artifact is missing ${location} cost data`);
+  }
+  const round = typeof candidate.round === 'number' ? candidate.round : undefined;
+  return { costReceipts: candidate.costReceipts, costComplete: candidate.costComplete,
+    resources: candidate.resources,
+    ...(round === undefined ? {} : { round }) };
+}
+
+for (const item of cases) {
+  test(`${item.name} keeps its cost receipts in run.json`, () => {
+    const root = mkdtempSync(join(tmpdir(), 'stack-bench-session-artifact-'));
+    try {
+      const path = join(root, 'run.json');
+      const source = session(item.marker, { billable: item.billable !== false,
+        costComplete: item.costComplete !== false });
+      writeRunJson(path, { id: `run-${item.marker}`, levels: [item.level(source)] });
+      const stored = storedSession(readRunJson(path, `run-${item.marker}`), item.location);
+      assert.deepEqual(stored.costReceipts, source.costReceipts);
+      assert.equal(Object.hasOwn(stored, 'costReceipts'), true);
+      assert.equal(stored.costComplete, source.costComplete);
+      assert.deepEqual(stored.resources, source.setup.resources);
+      if (item.round !== undefined) assert.equal(stored.round, item.round);
+    } finally {
+      rmSync(root, { recursive: true, force: true });
+    }
+  });
+}
diff --git a/tools/stack-bench/tests/run-suite.test.ts b/tools/stack-bench/tests/run-suite.test.ts
new file mode 100644
index 00000000000..5545ce72ce8
--- /dev/null
+++ b/tools/stack-bench/tests/run-suite.test.ts
@@ -0,0 +1,517 @@
+import assert from 'node:assert/strict';
+import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { createBoundRecipeTaskRequest } from '../src/composition/recipe-selection.js';
+import { isModularRecipeTaskRequest } from '../src/composition/recipe-selection.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { attachRegressionScope, childFailureDetail, clearPreviousGradeOutputs, findMutationBackups, selectObservationScope,
+  applicationFailureTotals, checkDatabaseProvenance, codeMetrics, resetFailureOutcome, suitesForRecipe,
+  checkRuntimeDatabaseProvenance, databaseProvenanceFailure, writeApplicationDatabaseMarker,
+  contractLintArgv, databaseLeaseForGrading, databaseNameForGrading, runGraderChild,
+  verifyApplicationProbe, waitForApplicationProbe }
+  from '../commands/run-suite.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { GENERATED_APP_LAYOUT_EXIT_CODE } from '../src/stacks/backend-reset.js';
+import { createBackendLease } from '../src/runtime/backend-lease.js';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+const ECOMMERCE = join(STACK_BENCH_ROOT, 'tracks', 'ecommerce');
+
+type JsonRecord = Record<string, unknown>;
+
+function isRecord(value: unknown): value is JsonRecord {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+function readJsonRecord(path: string): JsonRecord {
+  const value: unknown = JSON.parse(readFileSync(path, 'utf8'));
+  if (!isRecord(value)) throw new Error(`${path} must contain an object`);
+  return value;
+}
+
+function recordArray(value: JsonRecord, key: string): JsonRecord[] {
+  const entries = value[key];
+  if (!Array.isArray(entries) || entries.some(entry => !isRecord(entry))) {
+    throw new Error(`${key} must be an array of objects`);
+  }
+  return entries;
+}
+
+function promoteSequentialL1(root: string): void {
+  const promotionsPath = join(root, 'composition', 'promotions.json');
+  const promotions = readJsonRecord(promotionsPath);
+  const entries = recordArray(promotions, 'entries');
+  const entry = entries.find(candidate => {
+    const recipe = candidate.recipe;
+    return candidate.alias === 'L1' && isRecord(recipe)
+      && recipe.id === 'ecommerce.sequential-l1' && recipe.version === '2.5.0';
+  });
+  if (!entry) throw new Error('L1 promotion entry is missing');
+  entry.status = 'promoted';
+  writeFileSync(promotionsPath, `${JSON.stringify(promotions, null, 2)}\n`);
+  const recipePath = join(root, 'composition', 'recipes', 'sequential-l1-2.5.0.json');
+  const recipe = readJsonRecord(recipePath);
+  recipe.state = 'qualified';
+  writeFileSync(recipePath, `${JSON.stringify(recipe, null, 2)}\n`);
+  // A qualified recipe may select only qualified inputs, so its fixture and
+  // packs are promoted with it in this copy of the track.
+  const fixture = recipe.fixture;
+  if (!isRecord(fixture) || typeof fixture.path !== 'string') {
+    throw new Error('L1 recipe must select a fixture');
+  }
+  const components = [fixture.path, ...recordArray(recipe, 'packs').map(pack => {
+    if (typeof pack.path !== 'string') throw new Error('L1 recipe packs must have paths');
+    return pack.path;
+  })];
+  for (const relative of components) {
+    const path = join(root, 'composition', 'recipes', relative);
+    const value = readJsonRecord(path);
+    value.state = 'qualified';
+    writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`);
+  }
+}
+
+function sequentialL2Track() {
+  const temp = mkdtempSync(join(tmpdir(), 'stack-bench-sequential-l2-'));
+  const root = join(temp, 'ecommerce');
+  cpSync(ECOMMERCE, root, { recursive: true });
+  promoteSequentialL1(root);
+  return { temp, track: { ...loadTrack('ecommerce'), dir: root } };
+}
+
+test('contract lint receives the selected credential aliases', () => {
+  const aliases = { 'stackbench-admin-2026': 'store-admin-2026' };
+  const argv = contractLintArgv({
+    url: 'http://app', level: '1', track: 'ecommerce', label: 'attempt',
+    out: '/results', bundleArtifactId: 'attempt', credentialAliases: aliases,
+  });
+  assert.equal(argv[argv.indexOf('--credential-aliases-json') + 1], JSON.stringify(aliases));
+});
+
+test('code metrics count each package manifest once when server code is at the app root', () => {
+  const temp = mkdtempSync(join(tmpdir(), 'stack-bench-code-metrics-'));
+  try {
+    mkdirSync(join(temp, 'client'), { recursive: true });
+    writeFileSync(join(temp, 'index.js'), 'export const app = true;\n');
+    writeFileSync(join(temp, 'package.json'), JSON.stringify({
+      dependencies: { express: '1', mongodb: '1' },
+    }));
+    writeFileSync(join(temp, 'client', 'package.json'), JSON.stringify({
+      dependencies: { react: '1' },
+    }));
+
+    assert.equal(codeMetrics({ app: temp, backend: 'mongodb' }).runtimeDeps, 3);
+  } finally {
+    rmSync(temp, { recursive: true, force: true });
+  }
+});
+
+test('mutation backup scanning ignores volatile build caches and tolerates their removal', () => {
+  const temp = mkdtempSync(join(tmpdir(), 'stack-bench-mutation-scan-'));
+  try {
+    mkdirSync(join(temp, 'server', 'src'), { recursive: true });
+    mkdirSync(join(temp, 'client', 'node_modules', '.vite', 'deps_temp'), { recursive: true });
+    const backup = join(temp, 'server', 'src', 'index.ts.mutation-backup');
+    writeFileSync(backup, 'source');
+    writeFileSync(join(temp, 'client', 'node_modules', '.vite', 'deps_temp',
+      'cache.mutation-backup'), 'generated');
+    assert.deepEqual(findMutationBackups(temp), [backup]);
+
+    const disappearing = Object.assign(new Error('directory disappeared'), { code: 'ENOENT' });
+    const directory = { name: 'source', isDirectory: () => true, isFile: () => false };
+    assert.deepEqual(findMutationBackups('/app', {
+      readDir: dir => {
+        if (dir === '/app') return [directory];
+        throw disappearing;
+      },
+    }), []);
+  } finally { rmSync(temp, { recursive: true, force: true }); }
+});
+
+test('grader child diagnostics retain the cause instead of only trailing stack frames', () => {
+  const stderr = [
+    'Error: check evidence action is malformed',
+    '    at validateCheckEvidence (check-evidence.mjs:1:1)',
+    '    at buildCheckEvidence (grade.mjs:2:2)',
+    '    at gradeFeature (grade.mjs:3:3)',
+    '    at async main (grade.mjs:4:4)',
+    '',
+    'Node.js v24.18.1',
+  ].join('\n');
+  const detail = childFailureDetail({ stderr, message: 'command failed' });
+  assert.match(detail, /^Error: check evidence action is malformed \|/);
+  assert.match(detail, /gradeFeature/);
+  assert.doesNotMatch(detail, /validateCheckEvidence/);
+});
+
+test('grader child diagnostics skip Node rejection boilerplate', () => {
+  const stderr = [
+    'node:internal/process/promises:394',
+    '    triggerUncaughtException(err, true /* fromPromise */);',
+    '    ^',
+    '',
+    'browserContext.close: Target page, context or browser has been closed',
+    '    at closeAll (grade.mjs:596:21)',
+    'Node.js v24.18.1',
+  ].join('\n');
+  assert.match(childFailureDetail({ stderr }),
+    /^browserContext\.close: Target page, context or browser has been closed/);
+});
+
+test('child diagnostics prefer process stderr over generated command text', () => {
+  const detail = childFailureDetail({
+    stderr: 'hosted application port 6301 still has a listener',
+    message: 'Command failed: docker exec generated-app sh -lc <large command>',
+  });
+  assert.equal(detail, 'hosted application port 6301 still has a listener');
+  assert.doesNotMatch(detail, /docker exec/);
+});
+
+test('grader subprocesses run asynchronously and retain redacted output', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-grader-child-'));
+  try {
+    const result = await runGraderChild(['--eval',
+      "console.log('starting account-create'); console.error('ANTHROPIC_API_KEY=should-not-leak'); process.exit(1)"],
+    root, 'account-create');
+    assert(result.failure);
+    assert.match(result.stderr, /\[redacted credential\]/);
+    assert.doesNotMatch(result.stderr, /should-not-leak/);
+    assert.equal(readFileSync(join(root, result.stdoutName), 'utf8'), 'starting account-create\n');
+    assert.equal(readFileSync(join(root, result.stderrName), 'utf8'), '[redacted credential]\n');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('database grading uses the exact container from the authenticated run lease', () => {
+  const calls: Array<{ path: string;
+    expected?: { token?: string; backend?: string; active?: boolean } }> = [];
+  const lease = databaseLeaseForGrading('mongodb', {
+    STACK_BENCH_LEASE: 'private/lease.json',
+    STACK_BENCH_LEASE_TOKEN: 'secret-token',
+  }, {
+    readLease: (path, expected) => {
+      calls.push({ path, expected });
+      return createBackendLease({ runId: 'grading-test', backend: 'mongodb', track: 'ecommerce',
+        runIndex: 0, database: 'app_ecommerce_run0', container: {
+          name: 'stack-bench-mongodb', id: 'mongodb-container-id' } });
+    },
+  });
+  assert.equal(lease?.resources.container?.name, 'stack-bench-mongodb');
+  assert.equal(lease?.resources.container?.id, 'mongodb-container-id');
+  assert.deepEqual(calls, [{ path: 'private/lease.json',
+    expected: { token: 'secret-token', backend: 'mongodb', active: true } }]);
+  assert.throws(() => databaseLeaseForGrading('postgres', {
+    STACK_BENCH_LEASE: 'private/lease.json',
+  }), /both lease path and lease token/);
+  assert.equal(databaseLeaseForGrading('spacetime', {}), null);
+});
+
+test('database grading uses the exact database from the authenticated run lease', () => {
+  const track = { slug: 'ecom' };
+  assert.equal(databaseNameForGrading(track, 3), 'app_ecom_run3');
+  assert.equal(databaseNameForGrading(track, 3, {
+    resources: { database: 'leased_database' },
+  }), 'leased_database');
+  assert.throws(() => databaseNameForGrading(track, 3, { resources: {} }),
+    /active database lease has no database name/);
+});
+
+test('SpacetimeDB grading uses the authenticated module lease', () => {
+  const lease = databaseLeaseForGrading('spacetime', {
+    STACK_BENCH_LEASE: 'private/lease.json',
+    STACK_BENCH_LEASE_TOKEN: 'secret-token',
+  }, {
+    readLease: () => createBackendLease({ runId: 'grading-test', backend: 'spacetime',
+      track: 'ecommerce', runIndex: 0, module: 'app_ecommerce_run0',
+      serverUri: 'http://127.0.0.1:3210', dataDir: join(tmpdir(), 'stack-bench-spacetime-test') }),
+  });
+  assert.equal(lease?.resources.module, 'app_ecommerce_run0');
+  assert.equal(lease?.resources.serverUri, 'http://127.0.0.1:3210');
+});
+
+test('database provenance parses the port instead of accepting a matching substring', () => {
+  const temp = mkdtempSync(join(tmpdir(), 'stack-bench-database-provenance-'));
+  try {
+    writeFileSync(join(temp, 'server.js'),
+      "const url = 'mongodb://localhost:6537/app_ecom_run0';\n");
+    assert.equal(checkDatabaseProvenance({ app: temp, backend: 'mongodb' }).ok, true);
+    writeFileSync(join(temp, 'server.js'),
+      "const url = 'mongodb://localhost:16537/app_ecom_run0';\n");
+    assert.equal(checkDatabaseProvenance({ app: temp, backend: 'mongodb' }).ok, false);
+  } finally {
+    rmSync(temp, { recursive: true, force: true });
+  }
+});
+
+test('runtime database marker uses the declared application action', async () => {
+  const track = loadTrack('ecommerce');
+  const requests: Array<{ url: string; body: JsonRecord }> = [];
+  const written = await writeApplicationDatabaseMarker(
+    { backend: 'postgres', url: 'http://shop.test' }, track, track.databaseProvenance,
+    async (url, init) => {
+      requests.push({ url, body: JSON.parse(init.body) as JsonRecord });
+      return { ok: true, status: 201 };
+    });
+  assert(written.ok);
+  const request = requests[0];
+  assert(request);
+  assert.equal(request.url, 'http://shop.test/api/auth/signup');
+  assert.equal(request.body.password, 'stack-bench-provenance-password');
+  assert.equal(request.body.username, written.marker);
+  assert.match(written.marker, /^sb[a-f0-9]{16}$/);
+
+  const refused = await writeApplicationDatabaseMarker(
+    { backend: 'postgres', url: 'http://shop.test' }, track, track.databaseProvenance,
+    async () => ({ ok: false, status: 422 }));
+  assert.deepEqual(refused, { ok: false, marker: null,
+    reason: 'application provenance action returned HTTP 422' });
+});
+
+test('runtime database proof reports command failures as harness failures', () => {
+  assert.deepEqual(databaseProvenanceFailure(new Error('docker command failed')), {
+    kind: 'harness_failure',
+    phase: 'database-provenance',
+    reason: 'runtime database provenance failed: docker command failed',
+  });
+});
+
+test('runtime database proof requires an authenticated lease', () => {
+  assert.deepEqual(checkRuntimeDatabaseProvenance({ backend: 'spacetime' }), {
+    ok: null,
+    verified: false,
+    reason: 'standalone grading has no authenticated database lease',
+  });
+});
+
+test('generated layout and restart defects are repairable app failures, not harness failures', () => {
+  const application = Object.assign(new Error('server/package.json has no dev or start script'),
+    { code: 'generated_app_not_restartable' });
+  assert.deepEqual(resetFailureOutcome(application),
+    { kind: 'app_failure', phase: 'application-restart',
+      appFailures: ['application-restart'] });
+  assert.deepEqual(resetFailureOutcome(new Error('database container disappeared')),
+    { kind: 'harness_failure', phase: 'database-reset' });
+  assert.deepEqual(resetFailureOutcome({ status: GENERATED_APP_LAYOUT_EXIT_CODE }),
+    { kind: 'app_failure', phase: 'application-layout',
+      appFailures: ['application-layout'] });
+});
+
+test('reset readiness probes the public application', async () => {
+  let requests = 0;
+  const result = await verifyApplicationProbe('http://app', {
+    fetchImpl: async () => {
+      requests += 1;
+      return { ok: true, status: 200 };
+    },
+  });
+  assert.deepEqual(result, { ok: true, detail: null });
+  assert.equal(requests, 1);
+});
+
+test('reset readiness rejects an unhealthy public application', async () => {
+  const result = await verifyApplicationProbe('http://app', {
+    fetchImpl: async () => ({ ok: false, status: 503 }),
+  });
+  assert.deepEqual(result, {
+    ok: false,
+    detail: 'application returned HTTP 503',
+  });
+});
+
+test('application readiness returns as soon as the public app responds', async () => {
+  const observed: number[] = [];
+  const waits: number[] = [];
+  const result = await waitForApplicationProbe('http://app', {
+    attempts: 5,
+    intervalMs: 25,
+    probe: async () => {
+      observed.push(observed.length + 1);
+      return observed.length < 3
+        ? { ok: false, detail: 'not ready' }
+        : { ok: true, detail: null };
+    },
+    sleepImpl: async ms => { waits.push(ms); },
+  });
+  assert.deepEqual(result, { ok: true, detail: null });
+  assert.deepEqual(observed, [1, 2, 3]);
+  assert.deepEqual(waits, [25, 25]);
+});
+
+test('application readiness returns the last failure after its bounded attempts', async () => {
+  let calls = 0;
+  const result = await waitForApplicationProbe('http://app', {
+    attempts: 2, intervalMs: 0,
+    probe: async () => { calls += 1; return { ok: false, detail: 'not ready' }; },
+    sleepImpl: async () => {},
+  });
+  assert.deepEqual(result, { ok: false, detail: 'not ready' });
+  assert.equal(calls, 2);
+});
+
+test('an application setup failure receives the exact current and inherited denominators', () => {
+  const selection = { checks: [
+    { executionId: 'current', points: 3 },
+    { executionId: 'inherited', points: 2 },
+    { executionId: 'control', points: 0 },
+  ] };
+  assert.deepEqual(applicationFailureTotals(selection, [
+    { id: 'current' }, { id: 'inherited', inherited: true }, { id: 'control' },
+  ]), { score: 0, max: 3, dirty: false, contractPass: null,
+    regression: { score: 0, max: 2 } });
+});
+
+test('a new grade removes every prior grade output but keeps operator records', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-grade-cleanup-'));
+  try {
+    mkdirSync(join(root, 'failure-media'), { recursive: true });
+    mkdirSync(join(root, 'database-provenance'), { recursive: true });
+    writeFileSync(join(root, 'bundle.json'), 'old');
+    writeFileSync(join(root, 'grading-features.json'), 'old');
+    writeFileSync(join(root, 'grader-features.stdout.log'), 'old');
+    writeFileSync(join(root, 'grader-features.stderr.log'), 'old');
+    writeFileSync(join(root, 'grading-account-create@L1.json'), 'stale earlier level');
+    writeFileSync(join(root, 'grader-account-create@L1.stdout.log'), 'stale earlier level');
+    writeFileSync(join(root, 'operator-notes.txt'), 'keep');
+    clearPreviousGradeOutputs(root);
+    assert.equal(existsSync(join(root, 'bundle.json')), false);
+    assert.equal(existsSync(join(root, 'grading-features.json')), false);
+    assert.equal(existsSync(join(root, 'grader-features.stdout.log')), false);
+    assert.equal(existsSync(join(root, 'grader-features.stderr.log')), false);
+    assert.equal(existsSync(join(root, 'grading-account-create@L1.json')), false);
+    assert.equal(existsSync(join(root, 'grader-account-create@L1.stdout.log')), false);
+    assert.equal(existsSync(join(root, 'failure-media')), false);
+    assert.equal(existsSync(join(root, 'database-provenance')), false);
+    assert.equal(readFileSync(join(root, 'operator-notes.txt'), 'utf8'), 'keep');
+  } finally { rmSync(root, { recursive: true, force: true }); }
+});
+
+test('observed-only scope is modular, disjoint, and contributes no score', () => {
+  const binding = resolveRecipeRelease(loadTrack('ecommerce'), 1,
+    'ecommerce.sequential-l1@2.5.0');
+  const selected = createBoundRecipeTaskRequest(binding, {
+    featureIds: ['ecommerce.feature.accounts'],
+    observedSpecifications: ['ecommerce.spec.state-durability@1.1.0'],
+  });
+  assert(isModularRecipeTaskRequest(selected));
+  const scored = selectObservationScope(selected, 'scored');
+  const observed = selectObservationScope(selected, 'observed');
+  assert(scored);
+  assert(observed);
+  assert(observed.observedPoints !== undefined);
+  assert.deepEqual(observed.checks, selected.selection.observedChecks);
+  assert.equal(observed.scoredPoints, 0);
+  assert(observed.observedPoints > 0);
+  assert.equal(observed.checks.some(check => scored.checks.includes(check)), false);
+  assert.throws(() => selectObservationScope(
+    createBoundRecipeTaskRequest(binding, { featureIds: ['ecommerce.feature.accounts'] }),
+    'observed'), /scope is empty/);
+});
+
+test('recipe-bound grading uses the recipe execution sources', () => {
+  const track = loadTrack('ecommerce');
+  const binding = resolveRecipeRelease(track, 1, 'ecommerce.sequential-l1@2.5.0');
+  const suites = suitesForRecipe(track, binding);
+
+  const duplicateCheckout = suites.find(suite => suite.id === 'duplicate-checkout');
+  assert(duplicateCheckout);
+  assert.match(duplicateCheckout.spec,
+    /01-duplicate-checkout-2\.3\.0\.json$/);
+  assert.equal(suites.some(suite => suite.inherited), false);
+});
+
+test('hardened modular grading isolates the four direct server checks', () => {
+  const track = loadTrack('ecommerce');
+  const binding = resolveRecipeRelease(track, 1, 'ecommerce.sequential-l1@2.5.0');
+  const suites = suitesForRecipe(track, binding);
+
+  const expected = new Map([
+    ['purchase-session', '101a'], ['purchase-attribution', '102a'],
+    ['admin-write', '103a'], ['server-price', '104a'],
+  ]);
+  for (const [executionId, criterionId] of expected) {
+    assert(suites.some(suite => suite.id === executionId));
+    const check = binding.release.checkCatalog.find(candidate => candidate.executionId === executionId);
+    assert(check);
+    assert.equal(check.criterionId, criterionId);
+  }
+});
+
+test('recipe execution keeps inherited suites out of the current-level score', () => {
+  const { temp, track } = sequentialL2Track();
+  try {
+    const binding = resolveRecipeRelease(track, 2, 'ecommerce.sequential-l2@1.6.0');
+    const suites = suitesForRecipe(track, binding);
+    const inherited = suites.filter(suite => suite.inherited);
+    assert.equal(inherited.length, 31);
+    assert(inherited.every(suite => suite.fromLevel === 1));
+    assert.equal(suites.filter(suite => !suite.inherited).length, 10);
+  } finally { rmSync(temp, { recursive: true, force: true }); }
+});
+
+test('L2 grading rechecks the exact selected L1 score without adding it to L2 points', () => {
+  const { temp, track } = sequentialL2Track();
+  try {
+    const l1 = resolveRecipeRelease(track, 1, 'ecommerce.sequential-l1@2.5.0');
+    const l2 = resolveRecipeRelease(track, 2, 'ecommerce.sequential-l2@1.6.0');
+    const prior = createBoundRecipeTaskRequest(l1, {
+      featureIds: ['ecommerce.feature.accounts', 'ecommerce.feature.cart-checkout',
+        'ecommerce.feature.catalog', 'ecommerce.feature.purchasing',
+        'ecommerce.feature.reviews', 'ecommerce.feature.warehouse-admin'],
+      expectedSpecifications: ['ecommerce.spec.access-control@1.2.0',
+        'ecommerce.spec.concurrency-safety@1.3.0',
+        'ecommerce.spec.external-data-sync@1.1.0', 'ecommerce.spec.live-state@1.2.0',
+        'ecommerce.spec.state-durability@1.1.0',
+        'ecommerce.spec.transactional-integrity@1.3.0'],
+    });
+    const current = createBoundRecipeTaskRequest(l2, {
+      featureIds: ['ecommerce.inventory-operations-features',
+        'ecommerce.operations-access-features', 'ecommerce.returns-pricing-features'],
+      expectedSpecifications: ['ecommerce.inventory-operations-specifications@1.0.0',
+        'ecommerce.operations-access-specifications@1.0.0',
+        'ecommerce.returns-pricing-specifications@1.0.0'],
+    });
+    assert(isModularRecipeTaskRequest(prior));
+    assert(isModularRecipeTaskRequest(current));
+    const scope = attachRegressionScope(current.selection, l2, suitesForRecipe(track, l2),
+      prior.selection.scoredChecks.map(check => check.stableKey));
+    assert(scope);
+    assert(scope.regressionChecks);
+    assert(scope.evaluationSha256);
+    assert.equal(scope.scoredPoints, 59);
+    assert.equal(scope.regressionPoints, 58);
+    assert.equal(scope.regressionChecks.length, prior.selection.scoredChecks.length);
+    assert.equal(scope.checks.length,
+      current.selection.scoredChecks.length + prior.selection.scoredChecks.length);
+    assert.match(scope.evaluationSha256, /^[a-f0-9]{64}$/);
+  } finally { rmSync(temp, { recursive: true, force: true }); }
+});
+
+test('cumulative ownership survives inherited execution id renames', () => {
+  const temp = mkdtempSync(join(tmpdir(), 'stack-bench-execution-ownership-'));
+  const root = join(temp, 'ecommerce');
+  try {
+    cpSync(ECOMMERCE, root, { recursive: true });
+    const recipe = join(root, 'composition', 'recipes', 'sequential-l2-1.6.0.json');
+    const value = readJsonRecord(recipe);
+    for (const execution of recordArray(value, 'execution')) {
+      if (typeof execution.id !== 'string') throw new Error('recipe execution must have an id');
+      if (execution.id.endsWith('@L1')) execution.id = `${execution.id.slice(0, -3)}-base`;
+    }
+    writeFileSync(recipe, `${JSON.stringify(value, null, 2)}\n`);
+    const track = { ...loadTrack('ecommerce'), dir: root };
+    promoteSequentialL1(root);
+    const binding = resolveRecipeRelease(track, 2, 'ecommerce.sequential-l2@1.6.0');
+    const suites = suitesForRecipe(track, binding);
+    const inherited = suites.filter(suite => suite.inherited);
+
+    assert.equal(inherited.length, 31);
+    assert(inherited.every(suite => suite.id.endsWith('-base')));
+    assert(inherited.every(suite => suite.fromLevel === 1));
+    assert.deepEqual(suites.filter(suite => !suite.inherited).map(suite => suite.id),
+      ['features-existing@L2', 'low-stock@L2', 'invariants-existing@L2',
+        'queue-warehouse@L2', 'transfer-totals@L2', 'paid-price-history@L2',
+        'live-price@L2', 'self-contained@L2', 'strengthened@L2', 'server-actions@L2']);
+  } finally { rmSync(temp, { recursive: true, force: true }); }
+});
diff --git a/tools/stack-bench/tests/runner-environment.test.ts b/tools/stack-bench/tests/runner-environment.test.ts
new file mode 100644
index 00000000000..1127c2905bc
--- /dev/null
+++ b/tools/stack-bench/tests/runner-environment.test.ts
@@ -0,0 +1,56 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { controllerRunner, missingRunnerObservation, RUNNER_OBSERVATION_FIELDS }
+  from '../src/runtime/runner-environment.js';
+
+test('local controllers record only host identity', () => {
+  assert.deepEqual(controllerRunner({ env: {}, platform: 'win32', architecture: 'x64', hostname: 'dev-box' }), {
+    schemaVersion: 1,
+    mode: 'local-controller',
+    platform: 'win32',
+    architecture: 'x64',
+    hostname: 'dev-box',
+  });
+});
+
+test('appliance controllers record Docker daemon observations', () => {
+  const runner = controllerRunner({
+    env: { STACK_BENCH_APPLIANCE: '1' },
+    platform: 'linux',
+    architecture: 'x64',
+    hostname: 'runner-1',
+    dockerInfo: {
+      ServerVersion: '29.1.2',
+      OSType: 'linux',
+      Architecture: 'x86_64',
+      KernelVersion: '6.8.0-test',
+      NCPU: 8,
+      MemTotal: 16_000_000_000,
+      ContainersRunning: 4,
+    },
+  });
+  assert.deepEqual(runner, {
+    schemaVersion: 1,
+    mode: 'appliance',
+    platform: 'linux',
+    architecture: 'x64',
+    hostname: 'runner-1',
+    dockerEngineVersion: '29.1.2',
+    dockerOs: 'linux',
+    dockerArchitecture: 'x86_64',
+    kernelVersion: '6.8.0-test',
+    cpuCount: 8,
+    memoryBytes: 16_000_000_000,
+    containersRunning: 4,
+  });
+  assert.deepEqual(missingRunnerObservation(runner), []);
+  assert.deepEqual(missingRunnerObservation(null), RUNNER_OBSERVATION_FIELDS);
+});
+
+test('appliance controllers reject incomplete Docker observations', () => {
+  assert.throws(() => controllerRunner({
+    env: { STACK_BENCH_APPLIANCE: '1' },
+    dockerInfo: {},
+  }), /Docker daemon inspection did not return ServerVersion/);
+});
diff --git a/tools/stack-bench/tests/runtime-action-executors.test.ts b/tools/stack-bench/tests/runtime-action-executors.test.ts
new file mode 100644
index 00000000000..38abfcd6634
--- /dev/null
+++ b/tools/stack-bench/tests/runtime-action-executors.test.ts
@@ -0,0 +1,343 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { ACTION_REGISTRY } from '../src/actions/action-catalog.js';
+import { executeAction } from '../src/actions/action-contract.js';
+import {
+  createDatabaseWriteCapability,
+  createLifecycleCapability,
+  databaseWriteFailureDetail,
+  RUNTIME_ACTION_IMPLEMENTATIONS,
+} from '../src/actions/runtime-action-executors.js';
+
+type UnknownRecord = Record<string, unknown>;
+type Event = string | readonly [string, boolean, number];
+
+interface ServiceOverrides {
+  readonly applicationLifecycle?: unknown;
+  readonly backendLifecycle?: unknown;
+  readonly browser?: unknown;
+  readonly clock?: unknown;
+  readonly concurrency?: unknown;
+  readonly databaseWrite?: unknown;
+}
+
+const sleep = async (_milliseconds?: number, _signal?: AbortSignal): Promise<void> => {};
+const restartSpec = { backend: 'stub', app: '.', port: 7000, probe: '' };
+
+function services(
+  actors: ReadonlyMap<string, unknown> = new Map(),
+  overrides: ServiceOverrides = {},
+): Record<string, unknown> {
+  return {
+    actors: { get: (name: string) => actors.get(name) },
+    'application-lifecycle': overrides.applicationLifecycle
+      ?? createLifecycleCapability({ target: 'app-server', sleep, control: async () => {} }),
+    'backend-lifecycle': overrides.backendLifecycle
+      ?? createLifecycleCapability({ target: 'backend-runtime', sleep, control: async () => {} }),
+    'browser-interaction': overrides.browser ?? {
+      clients: { open: async () => {}, fresh: async () => 'a-fresh' },
+      sleep,
+    },
+    clock: overrides.clock ?? { sleep },
+    concurrency: overrides.concurrency ?? {
+      defaultWithin: 5000,
+      dispatch: async () => null,
+      expand: (value: string | undefined) => value,
+      sleep,
+      testId: (id: string) => `[data-testid="${id}"]`,
+    },
+    'database-write': overrides.databaseWrite ?? { setStock: async (input: unknown) => input },
+  };
+}
+
+async function run(input: UnknownRecord, capabilities: Record<string, unknown>) {
+  const action = String(input.do);
+  return executeAction(ACTION_REGISTRY, action, input, {
+    capabilities,
+  });
+}
+
+function observation(result: { readonly observation: unknown }): UnknownRecord {
+  assert(result.observation !== null && typeof result.observation === 'object');
+  return result.observation as UnknownRecord;
+}
+
+test('the runtime executor registry contains only registered actions', () => {
+  for (const id of Object.keys(RUNTIME_ACTION_IMPLEMENTATIONS)) {
+    assert(ACTION_REGISTRY.get(id).timeoutMs > 0, id);
+  }
+});
+
+test('race preserves branch ordering while overlapping branches through registered dispatch', async () => {
+  const events: string[] = [];
+  const capability = services(new Map(), { concurrency: {
+    defaultWithin: 5000,
+    expand: (value: string | undefined) => value,
+    sleep,
+    testId: (id: string) => id,
+    dispatch: async (step: UnknownRecord) => {
+      events.push(`start-${String(step.actor)}-${String(step.ms)}`);
+      if (step.ms === 1) await new Promise(resolve => setImmediate(resolve));
+      events.push(`end-${String(step.actor)}-${String(step.ms)}`);
+    },
+  } });
+  const result = await run({ do: 'race', settleMs: 0, branches: [
+    [{ do: 'wait', actor: 'a', ms: 1 }, { do: 'wait', actor: 'a', ms: 2 }],
+    [{ do: 'wait', actor: 'b', ms: 3 }],
+  ] }, capability);
+  assert.equal(result.status, 'passed');
+  assert(events.indexOf('start-b-3') < events.indexOf('start-a-2'));
+  assert(events.indexOf('end-a-1') < events.indexOf('start-a-2'));
+
+  const nestedFailure = new Error('nested action failed');
+  Object.defineProperty(nestedFailure, 'actionEvidence', { value: {
+    status: 'failed', summary: 'nested application mismatch',
+  } });
+  const failed = await run({ do: 'race', settleMs: 0, branches: [
+    [{ do: 'wait', actor: 'a', ms: 1 }], [{ do: 'wait', actor: 'b', ms: 1 }],
+  ] }, services(new Map(), { concurrency: {
+    defaultWithin: 5000, expand: (value: string | undefined) => value, sleep,
+    testId: (id: string) => id,
+    dispatch: async () => { throw nestedFailure; },
+  } }));
+  assert.equal(failed.status, 'failed');
+  assert.equal(failed.summary, 'nested application mismatch');
+});
+
+test('concurrent replay refuses to invent contention when fewer than two writes exist', async () => {
+  const actor = { writes: [], lastWrites: {}, lastWrite: null };
+  const result = await run({ do: 'replayConcurrently', actors: ['a', 'b'],
+    settleMs: 0 }, services(new Map([['a', actor], ['b', actor]])));
+  assert.equal(result.status, 'inconclusive');
+  assert.match(result.summary ?? '', /never contended/);
+});
+
+test('lifecycle operations distinguish missing control, unsafe refusal, and success', async () => {
+  const missing = await run({ do: 'restartBackend', settleMs: 0 }, services());
+  assert.equal(missing.status, 'inconclusive');
+  assert.match(missing.summary ?? '', /no control over the database runtime/);
+
+  const refusedError = Object.assign(new Error('refused'), { status: 3 });
+  const refusedCapability = createLifecycleCapability({ restartSpec,
+    target: 'backend-runtime', sleep,
+    control: async () => { throw refusedError; } });
+  const refused = await run({ do: 'restartBackend', settleMs: 0 },
+    services(new Map(), { backendLifecycle: refusedCapability }));
+  assert.equal(refused.status, 'inconclusive');
+  assert.match(refused.summary ?? '', /was refused on this host/);
+
+  const calls: Array<readonly [unknown, string]> = [];
+  const operated: Array<'restart' | 'start' | 'stop'> = [];
+  const successful = createLifecycleCapability({ restartSpec,
+    target: 'backend-runtime', sleep,
+    control: async (spec, mode) => { calls.push([spec, mode]); },
+    onOperated: mode => operated.push(mode) });
+  const passed = await run({ do: 'restartBackend', settleMs: 0 },
+    services(new Map(), { backendLifecycle: successful }));
+  assert.equal(passed.status, 'passed');
+  assert.deepEqual(calls, [[restartSpec, 'restart']]);
+  assert.deepEqual(operated, ['restart']);
+});
+
+test('a lifecycle operation reports the state it left only when the control completed', async () => {
+  const operated: Array<'restart' | 'start' | 'stop'> = [];
+  const failing = createLifecycleCapability({ restartSpec, target: 'app-server', sleep,
+    control: async () => { throw Object.assign(new Error('exit 1'), { status: 1, stdout: 'port busy' }); },
+    onOperated: mode => operated.push(mode) });
+  const failed = await run({ do: 'stopAppServer', settleMs: 0 },
+    services(new Map(), { applicationLifecycle: failing }));
+  assert.equal(failed.status, 'failed');
+  assert.equal(operated.length, 0);
+
+  const working = createLifecycleCapability({ restartSpec, target: 'app-server', sleep,
+    control: async () => {}, onOperated: mode => operated.push(mode) });
+  const capabilities = services(new Map(), { applicationLifecycle: working });
+  assert.equal((await run({ do: 'stopAppServer', settleMs: 0 }, capabilities)).status, 'passed');
+  assert.equal((await run({ do: 'startAppServer', settleMs: 0 }, capabilities)).status, 'passed');
+  assert.deepEqual(operated, ['stop', 'start']);
+});
+
+test('a generated app server timing out is an application failure, not a harness failure', async () => {
+  const timedOut = Object.assign(new Error('app start timed out'), { code: 'ETIMEDOUT' });
+  const applicationLifecycle = createLifecycleCapability({ restartSpec,
+    target: 'app-server', sleep, control: async () => { throw timedOut; } });
+  const appResult = await run({ do: 'startAppServer', settleMs: 0 },
+    services(new Map(), { applicationLifecycle }));
+  assert.equal(appResult.status, 'failed');
+  assert.match(appResult.summary ?? '', /application server could not start/);
+
+  const backendLifecycle = createLifecycleCapability({ restartSpec,
+    target: 'backend-runtime', sleep,
+    control: async () => { throw timedOut; } });
+  const backendResult = await run({ do: 'restartBackend', settleMs: 0 },
+    services(new Map(), { backendLifecycle }));
+  assert.equal(backendResult.status, 'harness_failure');
+});
+
+test('direct PostgreSQL stock writes quote names and require exactly one updated row', async () => {
+  const waits: number[] = [];
+  let stockSql = '';
+  const databaseLease = { resources: { database: 'bench',
+    container: { name: 'leased-postgres', id: 'postgres-id' } } };
+  const capability = createDatabaseWriteCapability({
+    backend: 'postgres',
+    databaseLease,
+    expand: value => value,
+    exec: (_command, args, options) => {
+      if (args[0] === 'inspect') return 'postgres-id\n';
+      stockSql = options.input ?? '';
+      return 'UPDATE 1\n';
+    },
+  });
+  const passed = await run({ do: 'dbSetStock', item: "Kid's Keyboard", warehouse: 'Main',
+    quantity: 7, settleMs: 17 }, {
+    ...services(new Map(), { databaseWrite: capability, clock: {
+      sleep: async (ms: number) => { waits.push(ms); },
+    } }),
+  });
+  assert.equal(passed.status, 'passed');
+  assert.match(stockSql, /Kid''s Keyboard/);
+  assert.match(stockSql, /\\gexec/);
+  assert.deepEqual(waits, [17]);
+
+  const missed = createDatabaseWriteCapability({ backend: 'postgres', databaseLease,
+    expand: value => value, exec: (_command, args) => {
+      if (args[0] === 'inspect') return 'postgres-id\n';
+      return 'UPDATE 0\n';
+    } });
+  const failed = await run({ do: 'dbSetStock', item: 'Missing', warehouse: 'Main',
+    quantity: 7, settleMs: 0 }, services(new Map(), { databaseWrite: missed }));
+  assert.equal(failed.status, 'failed');
+  assert.equal(failed.finding?.kind, 'stock-interface-missing');
+  assert.match(String(failed.finding?.fields.detail), /could not locate one relational stock row/);
+});
+
+test('a database without the stock interface is an application failure that keeps its diagnostic', async () => {
+  const error = Object.assign(new Error('direct stock correction requires singular collections '
+    + '`item`, `warehouse`, and `stock`'), { stdout: 'MISSING\n' });
+  assert.match(databaseWriteFailureDetail(error), /singular collections/);
+  assert.match(databaseWriteFailureDetail(error), /MISSING/);
+
+  const capability = createDatabaseWriteCapability({ backend: 'mongodb',
+    databaseLease: { resources: { database: 'bench',
+      container: { name: 'leased-mongodb', id: 'mongodb-id' } } },
+    expand: value => value, exec: (_command, args) => {
+      if (args[0] === 'inspect') return 'mongodb-id\n';
+      throw error;
+    } });
+  const result = await run({ do: 'dbSetStock', item: 'Desk Lamp', warehouse: 'East',
+    quantity: 5, settleMs: 0 }, services(new Map(), { databaseWrite: capability }));
+  // The contract names the stock tables; an app without them has failed the
+  // interface, and the writer's diagnostic travels as detail.
+  assert.equal(result.status, 'failed');
+  assert.equal(result.finding?.kind, 'stock-interface-missing');
+  assert.match(String(result.finding?.fields.detail), /singular collections/);
+  assert.match(String(result.finding?.fields.detail), /MISSING/);
+});
+
+test('direct database writes target the container selected by the run lease', async () => {
+  const calls: Array<readonly [string, readonly string[]]> = [];
+  const capability = createDatabaseWriteCapability({
+    backend: 'mongodb',
+    databaseLease: { resources: { database: 'bench',
+      container: { name: 'leased-mongodb', id: 'mongodb-id' } } },
+    expand: value => value,
+    exec: (command, args) => {
+      calls.push([command, args]);
+      return args[0] === 'inspect' ? 'mongodb-id\n' : 'OK\n';
+    },
+  });
+  const result = await run({ do: 'dbSetStock', item: 'Desk Lamp', warehouse: 'East',
+    quantity: 5, settleMs: 0 }, services(new Map(), { databaseWrite: capability }));
+  assert.equal(result.status, 'passed');
+  assert.deepEqual(calls.find(([, args]) => args.includes('mongosh'))?.[1].slice(0, 2),
+    ['exec', 'mongodb-id']);
+});
+
+test('direct database writes fail as harness errors without lease authority', async () => {
+  const capability = createDatabaseWriteCapability({
+    backend: 'postgres', expand: value => value, exec: () => 'UPDATE 1\n',
+  });
+  const result = await run({ do: 'dbSetStock', item: 'Desk Lamp', warehouse: 'East',
+    quantity: 5, settleMs: 0 }, services(new Map(), { databaseWrite: capability }));
+  assert.equal(result.status, 'harness_failure');
+  assert.match(result.summary ?? '', /authenticated backend lease/);
+});
+
+test('the null control can skip direct database writes', async () => {
+  const capability = createDatabaseWriteCapability({
+    backend: 'postgres', skip: true, expand: value => value,
+    exec: () => { throw new Error('must not execute'); },
+  });
+  const result = await run({ do: 'dbSetStock', item: 'Desk Lamp', warehouse: 'East',
+    quantity: 5, settleMs: 0 }, services(new Map(), { databaseWrite: capability }));
+  assert.equal(result.status, 'passed');
+});
+
+test('offline lifecycle preserves settling time and verifies browser network state', async () => {
+  const offlineStates: boolean[] = [];
+  const waits: number[] = [];
+  let browserOnline = true;
+  const actor = { page: {
+    evaluate: async () => browserOnline,
+    context: () => ({
+    setOffline: async (value: boolean) => {
+      offlineStates.push(value);
+      browserOnline = !value;
+    },
+  }) } };
+  const capabilities = services(new Map([['a', actor]]), { browser: {
+    clients: { open: async () => {}, fresh: async () => 'a-fresh' },
+    sleep: async (ms: number) => { waits.push(ms); },
+  } });
+  const disconnected = await run({ do: 'setOffline', actor: 'a', offline: true, settleMs: 10 },
+    capabilities);
+  const reconnected = await run({ do: 'setOffline', actor: 'a', offline: false, settleMs: 20 },
+    capabilities);
+  assert.equal(disconnected.status, 'passed');
+  assert.equal(observation(disconnected).browserOnline, false);
+  assert.equal(reconnected.status, 'passed');
+  assert.equal(observation(reconnected).browserOnline, true);
+  assert.deepEqual(offlineStates, [true, false]);
+  assert.deepEqual(waits, [10, 20]);
+});
+
+test('offline lifecycle fails closed when browser network state does not change', async () => {
+  const actor = { page: { evaluate: async () => true,
+    context: () => ({ setOffline: async () => {} }) } };
+  const result = await run({ do: 'setOffline', actor: 'a', offline: true, settleMs: 1 },
+    services(new Map([['a', actor]])));
+  assert.equal(result.status, 'harness_failure');
+  assert.match(result.summary ?? '', /navigator\.onLine remained true/);
+});
+
+test('client lifecycle delegates through the narrow browser capability', async () => {
+  const events: Event[] = [];
+  const actor = { page: { close: async () => events.push('close') } };
+  const capabilities = services(new Map([['a', actor]]), { browser: {
+    clients: {
+      open: async (value: unknown, settleMs: number) => {
+        events.push(['open', value === actor, settleMs]);
+      },
+      fresh: async () => { events.push('fresh'); return 'a-fresh'; },
+    },
+    sleep,
+  } });
+  assert.equal((await run({ do: 'closeClient', actor: 'a' }, capabilities)).status, 'passed');
+  assert.equal((await run({ do: 'openClient', actor: 'a', settleMs: 9 }, capabilities)).status, 'passed');
+  const fresh = await run({ do: 'freshClient', actor: 'a' }, capabilities);
+  assert.equal(fresh.status, 'passed');
+  assert.deepEqual(events, ['close', ['open', true, 9], 'fresh']);
+  assert.deepEqual(fresh.observation, { actor: 'a-fresh' });
+});
+
+test('a crashed page during a concurrency barrier remains a harness failure', async () => {
+  const actor = { loc: () => ({ waitFor: async () => {
+    throw new Error('locator.waitFor: Target page, context or browser has been closed');
+  } }) };
+  const result = await run({ do: 'clickConcurrently', actors: ['a', 'b'],
+    testid: 'buy', settleMs: 0 }, services(new Map([['a', actor], ['b', actor]])));
+  assert.equal(result.status, 'harness_failure');
+  assert.equal(result.code, 'unclassified_exception');
+});
diff --git a/tools/stack-bench/tests/scenario-contract-check.contract.ts b/tools/stack-bench/tests/scenario-contract-check.contract.ts
new file mode 100644
index 00000000000..6a350667e61
--- /dev/null
+++ b/tools/stack-bench/tests/scenario-contract-check.contract.ts
@@ -0,0 +1,29 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import test from 'node:test';
+import { STACK_BENCH_ROOT, compiledEntrypoint } from '../src/package-root.js';
+
+function checkScenarioArgs(args: readonly string[]): void {
+  const result = spawnSync(process.execPath, [compiledEntrypoint('commands',
+    'check-scenarios.js'), ...args], {
+    cwd: STACK_BENCH_ROOT,
+    encoding: 'utf8',
+  });
+  assert.equal(result.status, 0, result.stdout + result.stderr);
+  assert.match(result.stdout, /0 errors; 0 warnings/);
+}
+
+test('the progression scenarios use only their selected application interfaces', () => {
+  checkScenarioArgs(['--track', 'ecommerce', '--recipe', 'progression-catalog-2.0.2.json']);
+});
+
+for (const recipe of [
+  'progression-depth3-2.0.2.json',
+  'sequential-l1-2.5.0.json',
+  'sequential-l2-1.6.0.json',
+  'sequential-l3-1.0.0.json',
+]) {
+  test(`${recipe} scenarios match the product request and application interface`, () => {
+    checkScenarioArgs(['--track', 'ecommerce', '--recipe', recipe]);
+  });
+}
diff --git a/tools/stack-bench/tests/scoring.test.ts b/tools/stack-bench/tests/scoring.test.ts
new file mode 100644
index 00000000000..2e846277c57
--- /dev/null
+++ b/tools/stack-bench/tests/scoring.test.ts
@@ -0,0 +1,133 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { compareCriterionEvidence, formatRepairProgress } from '../src/evidence/scoring.js';
+import {
+  createCheckEvidence,
+  type CheckEvidenceStatus,
+} from '../src/evidence/check-evidence.js';
+
+const typedCriterion = (id: string, status: CheckEvidenceStatus, summary: string | null) => {
+  const evidence = createCheckEvidence({ status, code: 'test_result', phase: 'assertion', summary,
+    startedAtMs: 1, completedAtMs: 2 });
+  return { id, stableKey: id, points: 1, evidence };
+};
+const criterion = (
+  id: string,
+  passed: boolean,
+  options: { inconclusive?: boolean; points?: number } = {},
+) => ({
+  ...typedCriterion(id, options.inconclusive ? 'inconclusive' : passed ? 'passed' : 'failed', null),
+  points: options.points ?? 1,
+});
+const bundle = (
+  criteria: ReturnType<typeof typedCriterion>[],
+  suite = 'features',
+  featureId: string | number = 1,
+) => ({
+  suites: { [suite]: { features: [{ id: featureId, name: 'Display name', criteria }] } },
+});
+
+test('a newly measurable failure does not make unchanged shared criteria regress', () => {
+  const before = bundle([
+    criterion('stable', true),
+    criterion('new', false, { inconclusive: true }),
+  ]);
+  const after = bundle([
+    criterion('stable', true),
+    criterion('new', false),
+  ]);
+
+  const result = compareCriterionEvidence(before, after);
+  assert.equal(result.before, 1);
+  assert.equal(result.after, 1);
+  assert.deepEqual(result.newlyConclusive, ['features/1/new']);
+  assert.deepEqual(result.lostEvidence, []);
+  assert.equal(formatRepairProgress(result,
+    { before: 1, beforeMax: 1, after: 1, afterMax: 2 }),
+  'no change among 1 criterion measured in both rounds (1/1 points); 1 previously unavailable criterion became measurable; overall 1/1 -> 1/2');
+});
+
+test('unchanged repair evidence is reported without hiding the overall scores', () => {
+  const result = compareCriterionEvidence(
+    bundle([criterion('a', true)]),
+    bundle([criterion('a', true)]),
+  );
+  assert.equal(formatRepairProgress(result,
+    { before: 1, beforeMax: 1, after: 1, afterMax: 1 }),
+  'no improvement among 1 criterion measured in both rounds (1/1 points); overall 1/1 -> 1/1');
+});
+
+test('pass to inconclusive is reported as lost evidence', () => {
+  const result = compareCriterionEvidence(
+    bundle([criterion('a', true)]),
+    bundle([criterion('a', false, { inconclusive: true })]),
+  );
+  assert.deepEqual(result.lostEvidence, ['features/1/a']);
+});
+
+test('fail to inconclusive is reported as lost evidence', () => {
+  const result = compareCriterionEvidence(
+    bundle([criterion('a', false)]),
+    bundle([criterion('a', false, { inconclusive: true })]),
+  );
+  assert.deepEqual(result.lostEvidence, ['features/1/a']);
+});
+
+test('a real regression is compared on stable evidence', () => {
+  const result = compareCriterionEvidence(
+    bundle([criterion('a', true)]),
+    bundle([criterion('a', false)]),
+  );
+  assert.equal(result.before, 1);
+  assert.equal(result.after, 0);
+  assert.deepEqual(result.lostEvidence, []);
+  assert.deepEqual(result.regressions, ['a']);
+});
+
+test('suite identity prevents unrelated criteria from colliding', () => {
+  const before = {
+    suites: {
+      features: bundle([criterion('same', true)]).suites.features,
+      invariants: bundle([criterion('same', false)]).suites.features,
+    },
+  };
+  const after = {
+    suites: {
+      features: bundle([criterion('same', false)]).suites.features,
+      invariants: bundle([criterion('same', true)]).suites.features,
+    },
+  };
+  const result = compareCriterionEvidence(before, after);
+  assert.equal(result.count, 2);
+  assert.equal(result.before, 1);
+  assert.equal(result.after, 1);
+});
+
+test('rubric point changes invalidate the comparison', () => {
+  const result = compareCriterionEvidence(
+    bundle([criterion('a', true)]),
+    bundle([criterion('a', true, { points: 2 })]),
+  );
+  assert.deepEqual(result.definitionChanges, [
+    { key: 'features/1/a', before: 1, after: 2 },
+  ]);
+});
+
+test('typed scoring never reparses a misleading summary', () => {
+  const result = compareCriterionEvidence(
+    bundle([typedCriterion('a', 'passed', null)]),
+    bundle([typedCriterion('a', 'failed', 'INCONCLUSIVE: merely presentation text')]),
+  );
+  assert.equal(result.count, 1);
+  assert.equal(result.before, 1);
+  assert.equal(result.after, 0);
+  assert.deepEqual(result.lostEvidence, []);
+});
+
+test('repair comparison rejects invalid rubric points', () => {
+  assert.throws(() => compareCriterionEvidence(
+    bundle([criterion('a', true, { points: -1 })]),
+    bundle([criterion('a', true)]),
+  ), /points must be a non-negative integer/);
+});
diff --git a/tools/stack-bench/tests/selected-grade.integration.ts b/tools/stack-bench/tests/selected-grade.integration.ts
new file mode 100644
index 00000000000..ef446724739
--- /dev/null
+++ b/tools/stack-bench/tests/selected-grade.integration.ts
@@ -0,0 +1,257 @@
+import assert from 'node:assert/strict';
+import { execFile, spawn } from 'node:child_process';
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { readGradeArtifactPayload } from '../src/evidence/artifacts.js';
+import { requireRecipeRelease as resolveRecipeRelease } from '../src/composition/recipe-release.js';
+import { resolveRecipeSelection } from '../src/composition/recipe-selection.js';
+import { loadTrack } from '../src/composition/tracks.js';
+import { compiledEntrypoint } from '../src/package-root.js';
+
+const GRADER = compiledEntrypoint('grader', 'grade.js');
+
+const first = <Value>(values: readonly Value[]): Value => {
+  const value = values[0];
+  assert(value);
+  return value;
+};
+const record = (value: unknown): value is Record<string, unknown> =>
+  value !== null && typeof value === 'object' && !Array.isArray(value);
+const actionIds = (actions: ReadonlyArray<{ evidence: unknown }>): string[] => actions.map(entry => {
+  if (!record(entry.evidence) || !record(entry.evidence.action)
+    || typeof entry.evidence.action.id !== 'string') {
+    throw new Error('grade action evidence has no action id');
+  }
+  return entry.evidence.action.id;
+});
+
+function startBlankApp(html: string = '<!doctype html><html><body></body></html>') {
+  const source = `
+    import { createServer } from 'node:http';
+    const server = createServer((request, response) => {
+      response.writeHead(200, { 'content-type': 'text/html; charset=utf-8' });
+      response.end(${JSON.stringify(html)});
+    });
+    server.listen(0, '127.0.0.1', () => console.log(server.address().port));
+    process.on('SIGTERM', () => server.close(() => process.exit(0)));
+  `;
+  const child = spawn(process.execPath, ['--input-type=module', '--eval', source], {
+    stdio: ['ignore', 'pipe', 'pipe'], windowsHide: true,
+  });
+  const port = new Promise<number>((resolve, reject) => {
+    const deadline = setTimeout(() => reject(new Error('blank app did not start')), 10_000);
+    child.once('error', reject);
+    child.stdout.once('data', data => {
+      clearTimeout(deadline);
+      resolve(Number(data.toString().trim()));
+    });
+  });
+  return { child, port };
+}
+
+function run(file: string, argv: readonly string[]): Promise<{ stdout: string; stderr: string }> {
+  return new Promise((resolve, reject) => {
+    execFile(process.execPath, [file, ...argv], {
+      encoding: 'utf8', timeout: 60_000, maxBuffer: 8 * 1024 * 1024,
+    }, (error, stdout, stderr) => {
+      if (error) reject(new Error(`${error.message}\n${stdout}\n${stderr}`));
+      else resolve({ stdout, stderr });
+    });
+  });
+}
+
+test('the live grader executes and reports exactly one selected stable check', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-selected-grade-'));
+  const app = join(root, 'app');
+  const out = join(root, 'grade.json');
+  mkdirSync(app, { recursive: true });
+  const server = startBlankApp();
+  try {
+    const port = await server.port;
+    const track = loadTrack('ecommerce');
+    const binding = resolveRecipeRelease(track, 1);
+    const check = binding.release.checkCatalog.find(candidate => candidate.criterionId === '2a');
+    assert(check);
+    assert(check.source);
+    const selection = resolveRecipeSelection(binding.release, { checkKeys: [check.stableKey] });
+    await run(GRADER, [
+      '--url', `http://127.0.0.1:${port}`,
+      '--level', '1', '--track', 'ecommerce', '--backend', 'postgres', '--app', app,
+      '--spec', join(track.dir, check.source), '--out', out,
+      '--expected-recipe-sha256', binding.release.contentSha256,
+      '--selected-check', check.stableKey, '--selection-sha256', selection.sha256,
+    ]);
+    const report = readGradeArtifactPayload(out);
+    assert(report.selection);
+    assert.equal(report.selection.sha256, selection.sha256);
+    assert.deepEqual(report.selection.checks.map(item => item.stableKey), [check.stableKey]);
+    assert.equal(report.features.length, 1);
+    const feature = first(report.features);
+    const criterion = first(feature.criteria);
+    assert.deepEqual(feature.criteria.map(item => item.stableKey), [check.stableKey]);
+    assert.equal(feature.setupEvidence.status, 'failed');
+    assert.equal(criterion.evidence.status, 'failed');
+    assert.equal(criterion.evidence.phase, 'setup');
+    assert.deepEqual(criterion.evidence.actions, []);
+    assert.deepEqual(criterion.evidence.attachments,
+      [{ kind: 'check-evidence', ref: 'feature.setupEvidence' }]);
+  } finally {
+    server.child.kill('SIGTERM');
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('the live grader executes account setup through the registered actor executor', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-actor-grade-'));
+  const out = join(root, 'grade.json');
+  const spec = join(root, 'scenario.json');
+  writeFileSync(spec, JSON.stringify({
+    schemaVersion: 1,
+    level: 1,
+    features: [{
+      id: 1,
+      name: 'account setup',
+      actors: ['a'],
+      setup: [{ do: 'signUp', actor: 'a', name: 'Alice' }],
+      criteria: [{ id: '1a', desc: 'signed-in identity is visible',
+        steps: [{ do: 'expect', actor: 'a', testid: 'current-user' }] }],
+    }],
+  }));
+  const server = startBlankApp(`<!doctype html><html><body>
+    <input data-role="signup-username"><input data-role="signup-password">
+    <button data-role="signup-submit">Sign up</button>
+    <div data-role="current-user" hidden></div>
+    <script>
+      document.querySelector('[data-role="signup-submit"]').onclick = () => {
+        const current = document.querySelector('[data-role="current-user"]');
+        current.textContent = document.querySelector('[data-role="signup-username"]').value;
+        current.hidden = false;
+      };
+    </script>
+  </body></html>`);
+  try {
+    const port = await server.port;
+    await run(GRADER, ['--url', `http://127.0.0.1:${port}`, '--level', '1',
+      '--spec', spec, '--out', out]);
+    const report = readGradeArtifactPayload(out);
+    assert.equal(report.total, 1);
+    assert.equal(report.max, 1);
+    const feature = first(report.features);
+    const criterion = first(feature.criteria);
+    assert.equal(criterion.evidence.status, 'passed');
+    assert.equal(feature.setupEvidence.status, 'passed');
+    assert.deepEqual(actionIds(feature.setupEvidence.actions), ['signUp']);
+    assert.equal(criterion.evidence.status, 'passed');
+    assert.deepEqual(actionIds(criterion.evidence.actions), ['expect']);
+  } finally {
+    server.child.kill('SIGTERM');
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('setup can wait for app readiness without relaxing scored checks', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-ready-grade-'));
+  const out = join(root, 'grade.json');
+  const spec = join(root, 'scenario.json');
+  writeFileSync(spec, JSON.stringify({
+    schemaVersion: 1,
+    level: 1,
+    features: [{
+      id: 1,
+      name: 'delayed app readiness',
+      actors: ['a'],
+      setup: [{ do: 'signUp', actor: 'a', name: 'Alice' }],
+      criteria: [
+        { id: '1a', desc: 'setup completed', points: 1,
+          steps: [{ do: 'expect', actor: 'a', testid: 'current-user' }] },
+        { id: '1b', desc: 'scored checks keep the normal deadline', points: 1,
+          steps: [
+            { do: 'click', actor: 'a', testid: 'slow-action' },
+            { do: 'expect', actor: 'a', testid: 'slow-result' },
+          ] },
+      ],
+    }],
+  }));
+  const server = startBlankApp(`<!doctype html><html><body>
+    <div id="app"></div>
+    <script>
+      setTimeout(() => {
+        document.querySelector('#app').innerHTML = \`
+          <input data-role="signup-username"><input data-role="signup-password">
+          <button data-role="signup-submit">Sign up</button>
+          <div data-role="current-user" hidden></div>
+          <button data-role="slow-action">Start</button>
+        \`;
+        document.querySelector('[data-role="signup-submit"]').onclick = () => {
+          const current = document.querySelector('[data-role="current-user"]');
+          current.textContent = document.querySelector('[data-role="signup-username"]').value;
+          current.hidden = false;
+        };
+        document.querySelector('[data-role="slow-action"]').onclick = () => {
+          setTimeout(() => {
+            const result = document.createElement('div');
+            result.dataset.testid = 'slow-result';
+            document.body.append(result);
+          }, 6000);
+        };
+      }, 6000);
+    </script>
+  </body></html>`);
+  try {
+    const port = await server.port;
+    await run(GRADER, ['--url', `http://127.0.0.1:${port}`, '--level', '1',
+      '--spec', spec, '--out', out]);
+    const report = readGradeArtifactPayload(out);
+    const feature = first(report.features);
+    assert.equal(feature.setupEvidence.status, 'passed');
+    assert.equal(report.total, 1);
+    assert.equal(report.max, 2);
+    assert.equal(first(feature.criteria).evidence.status, 'passed');
+    const failedCriterion = feature.criteria[1];
+    assert(failedCriterion);
+    assert.equal(failedCriterion.evidence.status, 'failed');
+  } finally {
+    server.child.kill('SIGTERM');
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('an inconclusive check keeps the recipe denominator fixed', async () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-fixed-denominator-'));
+  const app = join(root, 'app');
+  const out = join(root, 'grade.json');
+  const spec = join(root, 'scenario.json');
+  mkdirSync(app, { recursive: true });
+  writeFileSync(spec, JSON.stringify({
+    schemaVersion: 1,
+    level: 1,
+    features: [{
+      id: 1,
+      name: 'unsupported action',
+      actors: ['a'],
+      setup: [],
+      criteria: [{ id: '1a', desc: 'the declared point remains in the contract', points: 3,
+        steps: [{ do: 'callAction', actor: 'a', action: 'not-declared',
+          input: { testid: 'action-input', attribute: 'data-input' } }] }],
+    }],
+  }));
+  const server = startBlankApp('<!doctype html><div data-role="action-input" data-input="{}"></div>');
+  try {
+    const port = await server.port;
+    await run(GRADER, ['--url', `http://127.0.0.1:${port}`, '--level', '1',
+      '--backend', 'postgres', '--app', app, '--spec', spec, '--out', out]);
+    const report = readGradeArtifactPayload(out);
+    assert.equal(report.total, 0);
+    assert.equal(report.max, 3);
+    const feature = first(report.features);
+    assert.equal(feature.max, 3);
+    assert.equal(first(feature.criteria).evidence.status, 'inconclusive');
+    assert.equal(first(report.inconclusive).points, 3);
+  } finally {
+    server.child.kill('SIGTERM');
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/semantic-version.test.ts b/tools/stack-bench/tests/semantic-version.test.ts
new file mode 100644
index 00000000000..2bbf5a19654
--- /dev/null
+++ b/tools/stack-bench/tests/semantic-version.test.ts
@@ -0,0 +1,22 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { isExactSemanticVersion, parseVersionedReference } from '../src/semantic-version.js';
+
+test('accepts exact semantic versions', () => {
+  assert.equal(isExactSemanticVersion('1.2.3'), true);
+  assert.equal(isExactSemanticVersion('1.2.3-beta.1+build.4'), true);
+});
+
+test('rejects normalized and incomplete versions', () => {
+  for (const value of ['v1.2.3', ' 1.2.3 ', '01.2.3', '1.2']) {
+    assert.equal(isExactSemanticVersion(value), false, value);
+  }
+});
+
+test('parses an exact versioned reference', () => {
+  const identifier = (value: string): boolean => /^[a-z][a-z0-9.-]*$/.test(value);
+  assert.deepEqual(parseVersionedReference('feature.accounts@1.2.3', identifier),
+    { id: 'feature.accounts', version: '1.2.3' });
+  assert.equal(parseVersionedReference('Feature@1.2.3', identifier), null);
+});
diff --git a/tools/stack-bench/tests/sequential-l1-calibration.contract.ts b/tools/stack-bench/tests/sequential-l1-calibration.contract.ts
new file mode 100644
index 00000000000..bbdd5d9b313
--- /dev/null
+++ b/tools/stack-bench/tests/sequential-l1-calibration.contract.ts
@@ -0,0 +1,68 @@
+import assert from 'node:assert/strict';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compileCalibrationFile } from '../src/composition/calibration-compiler.js';
+import { loadReferenceRegistry, validateReferenceRegistry } from '../src/references/reference-fixtures.js';
+import { buildRecipeRelease } from '../src/composition/recipe-release.js';
+
+const BENCH = STACK_BENCH_ROOT;
+const TRACK = join(BENCH, 'tracks', 'ecommerce');
+const BACKENDS = ['mongodb', 'postgres', 'spacetime'];
+const release = buildRecipeRelease(join(TRACK, 'composition', 'recipes',
+  'sequential-l1-2.5.0.json'));
+const calibration = compileCalibrationFile('composition/calibrations/sequential-l1-2.5.0.json', {
+  trackRoot: TRACK,
+  stackBenchRoot: BENCH,
+  release,
+});
+
+test('the sequential L1 release remains available while qualification is pending', () => {
+  assert.equal(release.state, 'draft');
+  assert.equal(calibration.state, 'draft');
+  assert.equal(calibration.promotion.status, 'candidate');
+  assert.deepEqual(calibration.qualification.evidence, []);
+  assert.deepEqual(calibration.qualification.stacks, [
+    { id: 'mongodb', status: 'candidate' },
+    { id: 'postgres', status: 'candidate' },
+    { id: 'spacetime', status: 'candidate' },
+  ]);
+  assert.equal(calibration.references.entries.every(reference =>
+    reference.status === 'candidate'
+      && reference.targetPath === `reference-apps/ecommerce/${reference.backend}`), true);
+  assert.equal(calibration.mutations.every(mutation => mutation.status === 'candidate'), true);
+});
+
+test('the candidate registry owns one current L1 mutation set per backend', () => {
+  const registry = loadReferenceRegistry();
+  assert.deepEqual(validateReferenceRegistry(registry).issues, []);
+  for (const backend of BACKENDS) {
+    const fixture = registry.fixtures.find(candidate =>
+      candidate.id === `ecommerce-reference-${backend}`);
+    assert(fixture?.recipes);
+    assert(fixture.mutationManifests);
+    assert(fixture.recipes.includes('ecommerce.sequential-l1@2.5.0'));
+    const calibrated = calibration.mutations.find(mutation => mutation.backend === backend);
+    assert(calibrated);
+    assert.deepEqual(fixture.mutationManifests, [calibrated.path]);
+  }
+});
+
+test('the comprehensive release has scored defects and only two supporting controls', () => {
+  const scoredKeys = release.checkCatalog.filter(check => check.points > 0)
+    .map(check => check.stableKey).sort();
+  assert.equal(release.checkCatalog.length, 48);
+  assert.equal(release.scoring.points, 58);
+  assert.equal(scoredKeys.length, 46);
+  for (const backend of BACKENDS) {
+    const mutation = calibration.mutations.find(entry => entry.backend === backend);
+    assert(mutation);
+    assert.deepEqual([...new Set(mutation.targets.flatMap(target => target.stableKeys))]
+      .filter(key => scoredKeys.includes(key)).sort(), scoredKeys);
+  }
+  assert.deepEqual(calibration.controls.map(control => [control.stableKey, control.role]), [
+    ['ecommerce.spec.concurrency-safety.restock-race.202-control', 'precondition'],
+    ['ecommerce.spec.external-data-sync.external-stock.901b', 'precondition'],
+  ]);
+});
diff --git a/tools/stack-bench/tests/sequential-l2-calibration.contract.ts b/tools/stack-bench/tests/sequential-l2-calibration.contract.ts
new file mode 100644
index 00000000000..cd51f28ee39
--- /dev/null
+++ b/tools/stack-bench/tests/sequential-l2-calibration.contract.ts
@@ -0,0 +1,100 @@
+import assert from 'node:assert/strict';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { qualificationReadiness } from '../commands/qualification-cli.js';
+import { compileCalibrationFile } from '../src/composition/calibration-compiler.js';
+import { compilePromotionFile } from '../src/composition/composition-compiler.js';
+import { buildRecipeRelease } from '../src/composition/recipe-release.js';
+import { loadReferenceRegistry, validateReferenceRegistry } from '../src/references/reference-fixtures.js';
+
+const BENCH = STACK_BENCH_ROOT;
+const TRACK_ROOT = join(BENCH, 'tracks', 'ecommerce');
+const RECIPE = join(TRACK_ROOT, 'composition', 'recipes', 'sequential-l2-1.6.0.json');
+const release = buildRecipeRelease(RECIPE, { trackRoot: TRACK_ROOT });
+const calibration = compileCalibrationFile('composition/calibrations/sequential-l2-1.6.0.json', {
+  trackRoot: TRACK_ROOT,
+  stackBenchRoot: BENCH,
+  release,
+});
+
+test('L2 1.6 calibration binds every scored check to an exact defect per backend', () => {
+  const scoredKeys = release.checkCatalog.filter(check => check.points > 0)
+    .map(check => check.stableKey).sort();
+  assert.equal(scoredKeys.length, 74);
+
+  for (const backend of ['mongodb', 'postgres', 'spacetime']) {
+    const mutation = calibration.mutations.find(entry => entry.backend === backend);
+    assert(mutation, `${backend} must have an exact mutation manifest`);
+    const covered = [...new Set(mutation.targets.flatMap(target => target.stableKeys))]
+      .filter(stableKey => scoredKeys.includes(stableKey)).sort();
+    assert.deepEqual(covered, scoredKeys, `${backend} must cover all 74 scored stable keys`);
+  }
+
+  assert.deepEqual(calibration.controls.map(control => [control.stableKey, control.role]), [
+    ['ecommerce.spec.concurrency-safety.restock-race.202-control', 'precondition'],
+    ['ecommerce.spec.external-data-sync.external-stock.901b', 'precondition'],
+  ]);
+});
+
+test('L2 1.6 remains available while current qualification is pending', () => {
+  assert.equal(release.state, 'draft');
+  assert.equal(calibration.state, 'draft');
+  assert.equal(calibration.promotion.status, 'candidate');
+  assert.deepEqual(calibration.qualification.evidence, []);
+  assert.deepEqual(calibration.qualification.stacks, [
+    { id: 'mongodb', status: 'candidate' },
+    { id: 'postgres', status: 'candidate' },
+    { id: 'spacetime', status: 'candidate' },
+  ]);
+  assert(calibration.references.entries.every(reference => reference.status === 'candidate'));
+  assert(calibration.mutations.every(mutation => mutation.status === 'candidate'));
+
+  assert.equal(release.version, '1.6.0');
+  assert.equal(release.task.mode, 'upgrade');
+  const baseRecipe = release.task.baseRecipe;
+  if (!baseRecipe) throw new Error('L2 1.6 release has no base recipe');
+  assert.deepEqual([baseRecipe.id, baseRecipe.version],
+    ['ecommerce.sequential-l1', '2.5.0']);
+});
+
+test('L2 qualification uses the exact current L1 base', () => {
+  assert.equal(qualificationReadiness('ecommerce', 2,
+    'ecommerce.sequential-l2@1.6.0').scope.recipe.version, '1.6.0');
+});
+
+test('the catalogs and registry retain L2 1.6 as an exact candidate', () => {
+  const catalog = compilePromotionFile(join(TRACK_ROOT, 'composition', 'candidates.json'), {
+    trackRoot: TRACK_ROOT,
+  });
+  assert.deepEqual(catalog.entries.filter(entry => entry.alias === 'L2'
+    && entry.recipe.id === 'ecommerce.sequential-l2'), []);
+  const promotions = compilePromotionFile(join(TRACK_ROOT, 'composition', 'promotions.json'), {
+    trackRoot: TRACK_ROOT,
+  });
+  assert.deepEqual(promotions.entries.filter(entry => entry.alias === 'L2'
+    && entry.status === 'candidate'), [{
+    alias: 'L2',
+    status: 'candidate',
+    recipe: {
+      path: 'recipes/sequential-l2-1.6.0.json',
+      id: 'ecommerce.sequential-l2',
+      version: '1.6.0',
+    },
+  }]);
+
+  const registry = loadReferenceRegistry();
+  assert.deepEqual(validateReferenceRegistry(registry).issues, []);
+  for (const backend of ['mongodb', 'postgres', 'spacetime']) {
+    const fixture = registry.fixtures.find(entry =>
+      entry.id === `ecommerce-reference-${backend}`);
+    assert(fixture);
+    assert.equal(fixture.status, 'candidate');
+    assert(fixture.recipes);
+    assert(fixture.recipes.includes('ecommerce.sequential-l2@1.6.0'));
+    const calibrated = calibration.mutations.find(mutation => mutation.backend === backend);
+    assert(calibrated);
+    assert.deepEqual(fixture.mutationManifests, [calibrated.path]);
+  }
+});
diff --git a/tools/stack-bench/tests/session-metrics.test.ts b/tools/stack-bench/tests/session-metrics.test.ts
new file mode 100644
index 00000000000..30f68dd0bcf
--- /dev/null
+++ b/tools/stack-bench/tests/session-metrics.test.ts
@@ -0,0 +1,47 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+import { summarizeSessions } from '../src/evidence/session-metrics.js';
+
+test('session totals include build and every fix without treating missing metrics as data', () => {
+  const totals = summarizeSessions([
+    { costUsd: 1.11111, tokens: 100, outputTokens: 10, turns: 2, durationMs: 50,
+      promptBytes: 20, usage: { input: 10, output: 20, cacheWrite: 30, cacheRead: 40 },
+      providerThrottle: { waits: 2, waitedMs: 20 },
+      thinking: { blocks: 2, signatureBytes: 200 } },
+    { costUsd: 0.22222, tokens: 50, outputTokens: 5, turns: 1, durationMs: 25,
+      promptBytes: 10, usage: { input: 5, output: 10, cacheWrite: 15, cacheRead: 20 } },
+    { costUsd: 0.1 },
+  ]);
+
+  assert.deepEqual(totals, {
+    sessions: 3,
+    costUsd: 1.43333,
+    tokens: 150,
+    outputTokens: 15,
+    turns: 3,
+    durationMs: 75,
+    activeDurationMs: 55,
+    providerThrottle: { waits: 2, waitedMs: 20 },
+    promptBytes: 30,
+    usage: { input: 15, output: 30, cacheWrite: 45, cacheRead: 60 },
+    thinking: { blocks: 2, signatureBytes: 200, sessions: 1 },
+  });
+});
+
+test('empty session totals are explicit zeroes', () => {
+  assert.deepEqual(summarizeSessions([]), {
+    sessions: 0, costUsd: 0, tokens: 0, outputTokens: 0, turns: 0,
+    durationMs: 0, activeDurationMs: 0, promptBytes: 0,
+    providerThrottle: { waits: 0, waitedMs: 0 },
+    usage: { input: 0, output: 0, cacheWrite: 0, cacheRead: 0 },
+    thinking: null,
+  });
+});
+
+test('session totals reject impossible metrics', () => {
+  assert.throws(() => summarizeSessions([{ costUsd: -1 }]), /costUsd/);
+  assert.throws(() => summarizeSessions([{ tokens: 1.5 }]), /tokens/);
+  assert.throws(() => summarizeSessions([{
+    durationMs: 10, providerThrottle: { waitedMs: 11 },
+  }]), /exceeds total session duration/);
+});
diff --git a/tools/stack-bench/tests/snapshots/definitions/all-actions.snapshot.json b/tools/stack-bench/tests/snapshots/definitions/all-actions.snapshot.json
new file mode 100644
index 00000000000..d4829b39dce
--- /dev/null
+++ b/tools/stack-bench/tests/snapshots/definitions/all-actions.snapshot.json
@@ -0,0 +1,336 @@
+{
+  "features": [
+    {
+      "actors": [
+        "a",
+        "b"
+      ],
+      "criteria": [
+        {
+          "desc": "Compiles one representative of every registered action",
+          "id": "all-actions",
+          "points": 0,
+          "steps": [
+            {
+              "action": "buy",
+              "actor": "a",
+              "authentication": "none",
+              "do": "callAction",
+              "input": {
+                "attribute": "data-action-input",
+                "contains": "item",
+                "testid": "item-card"
+              },
+              "settleMs": 1
+            },
+            {
+              "action": "buy",
+              "actors": [
+                "a",
+                "b"
+              ],
+              "do": "callConcurrently",
+              "settleMs": 1
+            },
+            {
+              "actor": "a",
+              "do": "clearInput"
+            },
+            {
+              "actor": "a",
+              "do": "click",
+              "testid": "button"
+            },
+            {
+              "actors": [
+                "a",
+                "b"
+              ],
+              "do": "clickConcurrently",
+              "settleMs": 1,
+              "testid": "button"
+            },
+            {
+              "actor": "a",
+              "do": "closeClient"
+            },
+            {
+              "actor": "a",
+              "do": "createRoom",
+              "room": "room"
+            },
+            {
+              "do": "dbSetStock",
+              "item": "item",
+              "quantity": 1,
+              "settleMs": 1,
+              "warehouse": "warehouse"
+            },
+            {
+              "actor": "a",
+              "do": "ensureSignedIn",
+              "name": "alice"
+            },
+            {
+              "actor": "a",
+              "do": "enterRoom",
+              "room": "room"
+            },
+            {
+              "actor": "a",
+              "do": "expect",
+              "testid": "status"
+            },
+            {
+              "actor": "a",
+              "do": "expectActionOutcome",
+              "outcome": "refused"
+            },
+            {
+              "actors": [
+                "a",
+                "b"
+              ],
+              "contains": "ok",
+              "do": "expectActorsWith",
+              "equals": 2,
+              "maxEach": 1,
+              "testid": "status"
+            },
+            {
+              "actors": [
+                "a",
+                "b"
+              ],
+              "do": "expectAgreement",
+              "testid": "status"
+            },
+            {
+              "actor": "a",
+              "count": 1,
+              "do": "expectAllPresent",
+              "prefix": "message",
+              "within": 1
+            },
+            {
+              "accepted": 1,
+              "do": "expectCallOutcomes"
+            },
+            {
+              "actor": "a",
+              "contains": "item",
+              "do": "expectElementCount",
+              "equals": 1,
+              "testid": "row",
+              "within": 1
+            },
+            {
+              "actor": "a",
+              "do": "expectForgeryRejected"
+            },
+            {
+              "actor": "a",
+              "contains": "secret",
+              "do": "expectNotReceived"
+            },
+            {
+              "actor": "a",
+              "do": "expectNumber",
+              "equals": 1,
+              "testid": "count"
+            },
+            {
+              "actors": [
+                "a",
+                "b"
+              ],
+              "do": "expectOrderMatches",
+              "prefix": "message"
+            },
+            {
+              "actor": "a",
+              "contains": "hello",
+              "do": "expectReceived",
+              "within": 1
+            },
+            {
+              "actor": "a",
+              "do": "expectReplayRejected"
+            },
+            {
+              "actor": "a",
+              "do": "expectSequence",
+              "equals": [
+                "one",
+                "two"
+              ],
+              "testid": "row"
+            },
+            {
+              "actor": "a",
+              "do": "expectStable",
+              "intervalMs": 1,
+              "samples": 2,
+              "testid": "count"
+            },
+            {
+              "actor": "a",
+              "do": "expectUnavailable",
+              "testid": "admin"
+            },
+            {
+              "actor": "a",
+              "do": "fill",
+              "testid": "input",
+              "text": "value"
+            },
+            {
+              "actor": "a",
+              "do": "forgeWrite",
+              "fromActor": "b",
+              "settleMs": 1
+            },
+            {
+              "actor": "a",
+              "do": "freshClient"
+            },
+            {
+              "actor": "a",
+              "do": "openClient"
+            },
+            {
+              "actor": "a",
+              "do": "pressKey",
+              "key": "Enter"
+            },
+            {
+              "branches": [
+                [
+                  {
+                    "actor": "a",
+                    "do": "wait",
+                    "ms": 1
+                  }
+                ],
+                [
+                  {
+                    "actor": "b",
+                    "do": "wait",
+                    "ms": 1
+                  }
+                ]
+              ],
+              "do": "race",
+              "settleMs": 1
+            },
+            {
+              "actor": "a",
+              "as": "before",
+              "do": "recordNumber",
+              "testid": "count"
+            },
+            {
+              "actor": "a",
+              "do": "reload",
+              "settleMs": 1
+            },
+            {
+              "actor": "a",
+              "do": "replayAs",
+              "from": "b",
+              "match": "write"
+            },
+            {
+              "actors": [
+                "a",
+                "b"
+              ],
+              "do": "replayConcurrently",
+              "settleMs": 1
+            },
+            {
+              "do": "restartBackend",
+              "settleMs": 1
+            },
+            {
+              "args": [],
+              "do": "runScript",
+              "script": "fixture.mjs"
+            },
+            {
+              "actor": "a",
+              "do": "send",
+              "text": "hello"
+            },
+            {
+              "delayMs": 1,
+              "do": "sendConcurrently",
+              "senders": [
+                {
+                  "actor": "a",
+                  "count": 1,
+                  "prefix": "message-a"
+                },
+                {
+                  "actor": "b",
+                  "count": 1,
+                  "prefix": "message-b"
+                }
+              ]
+            },
+            {
+              "actor": "a",
+              "count": 1,
+              "delayMs": 1,
+              "do": "sendMany",
+              "prefix": "message"
+            },
+            {
+              "actor": "a",
+              "do": "setOffline",
+              "offline": true
+            },
+            {
+              "actor": "a",
+              "do": "signIn",
+              "name": "alice"
+            },
+            {
+              "actor": "a",
+              "do": "signUp",
+              "name": "alice"
+            },
+            {
+              "do": "startAppServer"
+            },
+            {
+              "do": "stopAppServer"
+            },
+            {
+              "actor": "a",
+              "do": "typeInto",
+              "text": "value"
+            },
+            {
+              "actor": "a",
+              "do": "wait",
+              "ms": 1
+            },
+            {
+              "actor": "a",
+              "do": "waitUntilAbsent",
+              "testid": "status"
+            }
+          ]
+        }
+      ],
+      "id": 1,
+      "max": 0,
+      "name": "Every registered action",
+      "setup": []
+    }
+  ],
+  "level": 1,
+  "name": "Action language fixture",
+  "schemaVersion": 1
+}
diff --git a/tools/stack-bench/tests/snapshots/definitions/chat.snapshot.json b/tools/stack-bench/tests/snapshots/definitions/chat.snapshot.json
new file mode 100644
index 00000000000..ed340439848
--- /dev/null
+++ b/tools/stack-bench/tests/snapshots/definitions/chat.snapshot.json
@@ -0,0 +1,3440 @@
+{
+  "definitionSchemaVersion": 1,
+  "levels": [
+    {
+      "level": 1,
+      "suites": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "scenario": "scenarios/01-basic-chat.json"
+        },
+        {
+          "id": "invariants",
+          "inherit": "all-higher-levels",
+          "scenario": "scenarios/01-invariants.json"
+        },
+        {
+          "id": "delivery",
+          "inherit": "none",
+          "scenario": "scenarios/01-delivery.json"
+        },
+        {
+          "id": "systems",
+          "inherit": "all-higher-levels",
+          "scenario": "scenarios/01-systems.json"
+        }
+      ]
+    },
+    {
+      "level": 2,
+      "suites": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "scenario": "scenarios/02-features.json"
+        },
+        {
+          "id": "invariants",
+          "inherit": "all-higher-levels",
+          "scenario": "scenarios/02-invariants.json"
+        },
+        {
+          "id": "systems",
+          "inherit": "all-higher-levels",
+          "scenario": "scenarios/02-systems.json"
+        }
+      ]
+    }
+  ],
+  "manifest": {
+    "plannedThrough": 5,
+    "portOffset": 0,
+    "restartProbe": "/api/rooms",
+    "schemaVersion": 1,
+    "slug": "",
+    "suites": {
+      "1": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "spec": "scenarios/01-basic-chat.json"
+        },
+        {
+          "id": "invariants",
+          "inherit": "all-higher-levels",
+          "spec": "scenarios/01-invariants.json"
+        },
+        {
+          "id": "delivery",
+          "inherit": "none",
+          "spec": "scenarios/01-delivery.json"
+        },
+        {
+          "id": "systems",
+          "inherit": "all-higher-levels",
+          "spec": "scenarios/01-systems.json"
+        }
+      ],
+      "2": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "spec": "scenarios/02-features.json"
+        },
+        {
+          "id": "invariants",
+          "inherit": "all-higher-levels",
+          "spec": "scenarios/02-invariants.json"
+        },
+        {
+          "id": "systems",
+          "inherit": "all-higher-levels",
+          "spec": "scenarios/02-systems.json"
+        }
+      ]
+    },
+    "title": "Chat",
+    "validatedThrough": 0
+  },
+  "scenarios": [
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "Creating an account signs the user in and shows their username",
+                "id": "signup-signs-in",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "contains": "Alice",
+                    "do": "expect",
+                    "testid": "current-user",
+                    "within": 6000
+                  }
+                ]
+              },
+              {
+                "desc": "Signing up with a taken username is rejected with a visible error, and must not sign the visitor in as the existing account",
+                "id": "duplicate-username-rejected",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "bob",
+                    "do": "signUp",
+                    "expectFailure": true,
+                    "name": "Alice"
+                  },
+                  {
+                    "actor": "bob",
+                    "do": "expect",
+                    "testid": "auth-error",
+                    "within": 6000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "bob",
+                    "do": "expect",
+                    "testid": "current-user",
+                    "within": 3000
+                  }
+                ]
+              },
+              {
+                "desc": "A user can sign out and sign back in with the same credentials",
+                "id": "signout-and-signin",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "click",
+                    "testid": "signout"
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "expect",
+                    "testid": "signup-username",
+                    "within": 6000
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "signIn",
+                    "name": "Alice"
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "Alice",
+                    "do": "expect",
+                    "testid": "current-user",
+                    "within": 6000
+                  }
+                ]
+              }
+            ],
+            "id": 1,
+            "name": "Accounts",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "A sent message appears in the sender's own message list",
+                "id": "own-message-appears",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "send",
+                    "text": "hello from alice"
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "hello from alice",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 5000
+                  }
+                ]
+              },
+              {
+                "desc": "A second user in the same room receives messages live, with no reload",
+                "id": "cross-user-realtime",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "bob",
+                    "do": "enterRoom",
+                    "room": "general"
+                  },
+                  {
+                    "actor": "bob",
+                    "contains": "hello from alice",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 5000
+                  },
+                  {
+                    "actor": "bob",
+                    "do": "send",
+                    "text": "hello from bob"
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "hello from bob",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 3000
+                  }
+                ]
+              },
+              {
+                "desc": "Online users lists both participants; leaving a room works",
+                "id": "presence-and-leave",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "contains": "Bob",
+                    "do": "expect",
+                    "testid": "online-users",
+                    "within": 5000
+                  },
+                  {
+                    "actor": "bob",
+                    "do": "click",
+                    "testid": "leave-room"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "bob",
+                    "do": "expect",
+                    "testid": "message-input",
+                    "within": 5000
+                  }
+                ]
+              }
+            ],
+            "id": 2,
+            "name": "Basic Chat",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "general"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "general"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob",
+              "carol"
+            ],
+            "criteria": [
+              {
+                "desc": "Typing by another user in the same room shows an indicator live",
+                "id": "indicator-appears",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "bob",
+                    "do": "typeInto",
+                    "text": "composing a reply"
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "typing",
+                    "do": "expect",
+                    "testid": "typing-indicator",
+                    "within": 4000
+                  }
+                ]
+              },
+              {
+                "desc": "Indicator disappears within 6s once typing stops",
+                "id": "indicator-expires",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "bob",
+                    "do": "clearInput"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "alice",
+                    "contains": "typing",
+                    "do": "expect",
+                    "testid": "typing-indicator",
+                    "within": 6500
+                  }
+                ]
+              },
+              {
+                "desc": "Typing is scoped to the room — a user in another room sees nothing",
+                "id": "scoped-to-room",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "bob",
+                    "do": "typeInto",
+                    "text": "still typing here"
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "typing",
+                    "do": "expect",
+                    "testid": "typing-indicator",
+                    "within": 4000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "carol",
+                    "contains": "typing",
+                    "do": "expect",
+                    "testid": "typing-indicator",
+                    "within": 2000
+                  }
+                ]
+              }
+            ],
+            "id": 3,
+            "name": "Typing Indicators",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "carol",
+                "do": "signUp",
+                "name": "Carol"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "typing-a"
+              },
+              {
+                "actor": "carol",
+                "do": "createRoom",
+                "room": "typing-b"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "typing-a"
+              },
+              {
+                "actor": "bob",
+                "do": "enterRoom",
+                "room": "typing-a"
+              },
+              {
+                "actor": "carol",
+                "do": "enterRoom",
+                "room": "typing-b"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "Receipt appears for the sender once another user views the message",
+                "id": "receipt-appears",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "bob",
+                    "do": "enterRoom",
+                    "room": "receipts"
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "expect",
+                    "testid": "read-receipt",
+                    "within": 6000
+                  }
+                ]
+              },
+              {
+                "desc": "Receipt names the user who read it",
+                "id": "receipt-names-reader",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "contains": "Bob",
+                    "do": "expect",
+                    "testid": "read-receipt",
+                    "within": 6000
+                  }
+                ]
+              },
+              {
+                "desc": "The sender is not listed as a reader of their own message",
+                "id": "sender-excluded",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "expect",
+                    "notContains": "Alice",
+                    "testid": "read-receipt",
+                    "within": 6000
+                  }
+                ]
+              }
+            ],
+            "id": 4,
+            "name": "Read Receipts",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "receipts"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "receipts"
+              },
+              {
+                "actor": "alice",
+                "do": "send",
+                "text": "did you see this"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "A badge appears live on a room with unread messages",
+                "id": "badge-appears",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "send",
+                    "text": "unread one"
+                  },
+                  {
+                    "actor": "bob",
+                    "do": "expect",
+                    "in": {
+                      "contains": "{room:unread-main}",
+                      "testid": "room-item"
+                    },
+                    "testid": "unread-badge",
+                    "within": 5000
+                  }
+                ]
+              },
+              {
+                "desc": "The badge reflects the number of unread messages (paced above the app's send rate limit)",
+                "id": "badge-counts",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "wait",
+                    "ms": 1400
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "send",
+                    "text": "unread two"
+                  },
+                  {
+                    "actor": "bob",
+                    "contains": "2",
+                    "do": "expect",
+                    "in": {
+                      "contains": "{room:unread-main}",
+                      "testid": "room-item"
+                    },
+                    "testid": "unread-badge",
+                    "within": 5000
+                  }
+                ]
+              },
+              {
+                "desc": "The badge clears when the room is opened",
+                "id": "badge-clears",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "bob",
+                    "do": "enterRoom",
+                    "room": "unread-main"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "bob",
+                    "do": "expect",
+                    "in": {
+                      "contains": "{room:unread-main}",
+                      "testid": "room-item"
+                    },
+                    "testid": "unread-badge",
+                    "within": 5000
+                  }
+                ]
+              }
+            ],
+            "id": 5,
+            "name": "Unread Message Counts",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "unread-main"
+              },
+              {
+                "actor": "bob",
+                "do": "createRoom",
+                "room": "unread-side"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "unread-main"
+              },
+              {
+                "actor": "bob",
+                "do": "enterRoom",
+                "room": "unread-main"
+              },
+              {
+                "actor": "bob",
+                "do": "enterRoom",
+                "room": "unread-side"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "Someone joining a room appears in its member panel without anyone reloading",
+                "id": "members-appear-live",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "bob",
+                    "do": "enterRoom",
+                    "room": "team"
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "Bob",
+                    "do": "expect",
+                    "testid": "member-item",
+                    "within": 8000
+                  }
+                ]
+              },
+              {
+                "desc": "The room's creator is marked as its owner",
+                "id": "owner-is-shown",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "expect",
+                    "testid": "member-owner",
+                    "within": 6000
+                  }
+                ]
+              },
+              {
+                "desc": "Removing a member takes them out of the panel live, for everyone still in the room",
+                "id": "removed-member-disappears",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "click",
+                    "in": {
+                      "contains": "Bob",
+                      "testid": "member-item"
+                    },
+                    "testid": "member-remove"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "alice",
+                    "contains": "Bob",
+                    "do": "expect",
+                    "testid": "member-item",
+                    "within": 8000
+                  }
+                ]
+              }
+            ],
+            "id": 6,
+            "name": "Room Members and Roles",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "team"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "team"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "A user can open a direct conversation with another user",
+                "id": "dm-can-be-started",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "click",
+                    "in": {
+                      "contains": "Bob",
+                      "testid": "online-user"
+                    },
+                    "testid": "dm-start"
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "Bob",
+                    "do": "expect",
+                    "testid": "dm-item",
+                    "within": 8000
+                  }
+                ]
+              },
+              {
+                "desc": "A direct message reaches the other participant live, with no reload",
+                "id": "dm-delivers-live",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "click",
+                    "in": {
+                      "contains": "Bob",
+                      "testid": "dm-list"
+                    },
+                    "testid": "dm-item"
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "send",
+                    "text": "a private word"
+                  },
+                  {
+                    "actor": "bob",
+                    "contains": "a private word",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "A direct conversation and its messages survive a reload",
+                "id": "dm-persists",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "bob",
+                    "do": "reload",
+                    "settleMs": 3500
+                  },
+                  {
+                    "actor": "bob",
+                    "contains": "Alice",
+                    "do": "expect",
+                    "testid": "dm-item",
+                    "within": 10000
+                  }
+                ]
+              }
+            ],
+            "id": 7,
+            "name": "Direct Messages",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "wait",
+                "ms": 2000
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "The author of a message is offered edit and delete on it",
+                "id": "author-can-edit-and-delete",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "expect",
+                    "in": {
+                      "contains": "a message of my own",
+                      "testid": "message-item"
+                    },
+                    "testid": "message-edit",
+                    "within": 6000
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "expect",
+                    "in": {
+                      "contains": "a message of my own",
+                      "testid": "message-item"
+                    },
+                    "testid": "message-delete",
+                    "within": 6000
+                  }
+                ]
+              },
+              {
+                "desc": "Nobody else is offered edit or delete on that message",
+                "id": "others-are-not",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "bob",
+                    "contains": "a message of my own",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 8000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "bob",
+                    "do": "expect",
+                    "in": {
+                      "contains": "a message of my own",
+                      "testid": "message-item"
+                    },
+                    "testid": "message-edit",
+                    "within": 5000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "bob",
+                    "do": "expect",
+                    "in": {
+                      "contains": "a message of my own",
+                      "testid": "message-item"
+                    },
+                    "testid": "message-delete",
+                    "within": 5000
+                  }
+                ]
+              }
+            ],
+            "id": 8,
+            "name": "Message Ownership",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "owned"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "owned"
+              },
+              {
+                "actor": "bob",
+                "do": "enterRoom",
+                "room": "owned"
+              },
+              {
+                "actor": "alice",
+                "do": "send",
+                "text": "a message of my own"
+              }
+            ]
+          }
+        ],
+        "level": 1,
+        "note": "Level 1 is sequential's basic chat with accounts added. Accounts replace the display-name stub; typing indicators, read receipts and unread counts are sequential's, unchanged apart from signing up rather than naming yourself.",
+        "schemaVersion": 1
+      },
+      "path": "scenarios/01-basic-chat.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "Under a concurrent write storm from two clients, the sender sees every message exactly once — no drops, no double-render from optimistic insert plus broadcast echo",
+                "id": "no-loss-no-duplication-sender",
+                "points": 1,
+                "steps": [
+                  {
+                    "delayMs": 1400,
+                    "do": "sendConcurrently",
+                    "senders": [
+                      {
+                        "actor": "alice",
+                        "count": 6,
+                        "prefix": "AA"
+                      },
+                      {
+                        "actor": "bob",
+                        "count": 6,
+                        "prefix": "BB"
+                      }
+                    ]
+                  },
+                  {
+                    "actor": "alice",
+                    "count": 6,
+                    "do": "expectAllPresent",
+                    "prefix": "AA",
+                    "within": 20000
+                  }
+                ]
+              },
+              {
+                "desc": "The receiving client also observes every message from the other sender exactly once",
+                "id": "no-loss-no-duplication-receiver",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "count": 6,
+                    "do": "expectAllPresent",
+                    "prefix": "BB",
+                    "within": 20000
+                  },
+                  {
+                    "actor": "bob",
+                    "count": 6,
+                    "do": "expectAllPresent",
+                    "prefix": "AA",
+                    "within": 20000
+                  }
+                ]
+              },
+              {
+                "desc": "Both clients observe the interleaved messages in the SAME order. Non-atomic broadcast lets concurrent senders interleave differently per client.",
+                "id": "consistent-order-across-clients",
+                "points": 1,
+                "steps": [
+                  {
+                    "actors": [
+                      "alice",
+                      "bob"
+                    ],
+                    "do": "expectOrderMatches",
+                    "prefix": "AA"
+                  },
+                  {
+                    "actors": [
+                      "alice",
+                      "bob"
+                    ],
+                    "do": "expectOrderMatches",
+                    "prefix": "BB"
+                  }
+                ]
+              }
+            ],
+            "id": 201,
+            "max": 3,
+            "name": "Delivery Integrity",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "storm"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "storm"
+              },
+              {
+                "actor": "bob",
+                "do": "enterRoom",
+                "room": "storm"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "A client that loses its connection and regains it must catch up on everything it missed, WITHOUT a reload. Reconnect handling is something an Express app has to implement; a SpacetimeDB subscription re-delivers state on reconnect.",
+                "id": "resync-after-disconnect",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "setOffline",
+                    "offline": true,
+                    "settleMs": 1500
+                  },
+                  {
+                    "actor": "bob",
+                    "count": 3,
+                    "delayMs": 1400,
+                    "do": "sendMany",
+                    "prefix": "OFFLINE"
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "setOffline",
+                    "offline": false,
+                    "settleMs": 3000
+                  },
+                  {
+                    "actor": "alice",
+                    "count": 3,
+                    "do": "expectAllPresent",
+                    "prefix": "OFFLINE",
+                    "within": 15000
+                  }
+                ]
+              },
+              {
+                "desc": "Catching up must not double-deliver messages the client already had (resubscribe replaying history on top of existing state)",
+                "id": "no-duplication-after-resync",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "bob",
+                    "count": 2,
+                    "delayMs": 1400,
+                    "do": "sendMany",
+                    "prefix": "AFTER"
+                  },
+                  {
+                    "actor": "alice",
+                    "count": 2,
+                    "do": "expectAllPresent",
+                    "prefix": "AFTER",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "alice",
+                    "count": 3,
+                    "do": "expectAllPresent",
+                    "prefix": "OFFLINE",
+                    "within": 5000
+                  }
+                ]
+              }
+            ],
+            "id": 202,
+            "max": 2,
+            "name": "Connection Resilience",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "resilience"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "resilience"
+              },
+              {
+                "actor": "bob",
+                "do": "enterRoom",
+                "room": "resilience"
+              }
+            ]
+          }
+        ],
+        "level": 1,
+        "note": "Delivery and resilience invariants — properties of the transport, not of any feature. These are the ones a human grader cannot test at all (you cannot generate concurrency or simulate a network drop by clicking), and where the asymmetry is structural: Express stacks broadcast with io.emit() AFTER awaiting the write, so delivery is not atomic with the commit; a SpacetimeDB subscription update IS the commit. Senders pace themselves above the apps' rate limits (observed: 400ms SpacetimeDB, 350ms Mongo) — the spec requires spam prevention, so a 0-delay burst is correctly rejected and would test nothing. Concurrency comes from multiple senders overlapping, not from one sender bursting. Actors sign up with credentials, as level 1 requires.",
+        "schemaVersion": 1
+      },
+      "path": "scenarios/01-delivery.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "victim",
+              "impostor"
+            ],
+            "criteria": [
+              {
+                "desc": "Knowing a username must not grant access to that account. Signing up with a taken username, or signing in with the wrong password, must be rejected — not silently resolved to the existing account.",
+                "id": "username-is-not-a-credential",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "impostor",
+                    "do": "signUp",
+                    "expectFailure": true,
+                    "name": "Victim"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "impostor",
+                    "contains": "Victim",
+                    "do": "expect",
+                    "testid": "current-user",
+                    "within": 5000
+                  }
+                ]
+              },
+              {
+                "desc": "Signing in with a wrong password is rejected and grants nothing",
+                "id": "wrong-password-rejected",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "impostor",
+                    "do": "signIn",
+                    "expectFailure": true,
+                    "name": "Victim",
+                    "password": "not-the-password"
+                  },
+                  {
+                    "actor": "impostor",
+                    "do": "expect",
+                    "testid": "auth-error",
+                    "within": 6000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "impostor",
+                    "contains": "victim private message",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 4000
+                  }
+                ]
+              }
+            ],
+            "id": 101,
+            "max": 2,
+            "name": "Account Integrity",
+            "setup": [
+              {
+                "actor": "victim",
+                "do": "signUp",
+                "name": "Victim"
+              },
+              {
+                "actor": "victim",
+                "do": "createRoom",
+                "room": "private-notes"
+              },
+              {
+                "actor": "victim",
+                "do": "enterRoom",
+                "room": "private-notes"
+              },
+              {
+                "actor": "victim",
+                "do": "send",
+                "text": "victim private message"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice"
+            ],
+            "criteria": [
+              {
+                "desc": "Reloading keeps the user signed in as the same account",
+                "id": "session-survives-reload",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "reload",
+                    "settleMs": 3000
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "Alice",
+                    "do": "expect",
+                    "testid": "current-user",
+                    "within": 8000
+                  }
+                ]
+              },
+              {
+                "desc": "A user who loses and regains their connection while sitting on the page is still signed in as the same account. The connection drops and re-establishes on its own; re-identifying the client here would orphan everything it owns.",
+                "id": "session-survives-reconnect",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "setOffline",
+                    "offline": true,
+                    "settleMs": 3000
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "setOffline",
+                    "offline": false,
+                    "settleMs": 6000
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "Alice",
+                    "do": "expect",
+                    "testid": "current-user",
+                    "within": 20000
+                  }
+                ]
+              },
+              {
+                "desc": "After reconnecting the user still owns what they created — their room and their message are still theirs",
+                "id": "own-content-still-owned-after-reconnect",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "enterRoom",
+                    "room": "mine"
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "alice message",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 15000
+                  }
+                ]
+              }
+            ],
+            "id": 102,
+            "max": 3,
+            "name": "Session Durability",
+            "note": "Session durability is tested by dropping the client's connection, not by restarting the backend. Both force the same reconnect, but only one needs a server the harness owns — and restarting a shared host takes unrelated databases down with it. Backend restarts belong where they test storage rather than session handling (level 4).",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "mine"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "mine"
+              },
+              {
+                "actor": "alice",
+                "do": "send",
+                "text": "alice message"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "A message sent in one room never appears in another",
+                "id": "messages-scoped-to-room",
+                "points": 1,
+                "steps": [
+                  {
+                    "absent": true,
+                    "actor": "bob",
+                    "contains": "message for room a",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 5000
+                  }
+                ]
+              },
+              {
+                "desc": "A room renders exactly once in the list — an optimistic insert plus a broadcast echo duplicates it",
+                "id": "no-duplicate-rooms",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "contains": "{room:room-a}",
+                    "count": 1,
+                    "do": "expect",
+                    "testid": "room-item",
+                    "within": 5000
+                  }
+                ]
+              }
+            ],
+            "id": 103,
+            "max": 2,
+            "name": "Data Isolation",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "room-a"
+              },
+              {
+                "actor": "bob",
+                "do": "createRoom",
+                "room": "room-b"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "room-a"
+              },
+              {
+                "actor": "bob",
+                "do": "enterRoom",
+                "room": "room-b"
+              },
+              {
+                "actor": "alice",
+                "do": "send",
+                "text": "message for room a"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "Your own message must never count as unread for you. (historical: a sender's own badge went to 1 on SpacetimeDB, twice)",
+                "id": "own-messages-not-unread",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "send",
+                    "text": "alice speaking"
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "wait",
+                    "ms": 1400
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "enterRoom",
+                    "room": "side"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "alice",
+                    "do": "expect",
+                    "in": {
+                      "contains": "{room:main}",
+                      "testid": "room-item"
+                    },
+                    "testid": "unread-badge",
+                    "within": 5000
+                  }
+                ]
+              },
+              {
+                "desc": "Once a room is open its badge stays clear while new messages arrive in it — you are looking at them. (historical: badges that never cleared)",
+                "id": "unread-does-not-resurrect",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "enterRoom",
+                    "room": "main"
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "wait",
+                    "ms": 1400
+                  },
+                  {
+                    "actor": "bob",
+                    "do": "send",
+                    "text": "bob speaking"
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "bob speaking",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 6000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "alice",
+                    "do": "expect",
+                    "in": {
+                      "contains": "{room:main}",
+                      "testid": "room-item"
+                    },
+                    "testid": "unread-badge",
+                    "within": 4000
+                  }
+                ]
+              },
+              {
+                "desc": "Receipts stay live for later messages, not just the first one. (historical: 'Seen by' that only appeared after leaving and re-entering the room)",
+                "id": "receipts-keep-updating",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "wait",
+                    "ms": 1400
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "send",
+                    "text": "second message from alice"
+                  },
+                  {
+                    "actor": "bob",
+                    "contains": "second message from alice",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 6000
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "Bob",
+                    "do": "expect",
+                    "testid": "read-receipt",
+                    "within": 10000
+                  }
+                ]
+              }
+            ],
+            "id": 104,
+            "max": 3,
+            "name": "Per-User State Integrity",
+            "note": "Unread counts and read receipts are per-user state derived from other people's actions. The historical grading data has more defects here than anywhere else in level 1.",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "main"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "side"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "main"
+              },
+              {
+                "actor": "bob",
+                "do": "enterRoom",
+                "room": "main"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "The 'Seen by' list must not change while nothing is happening. (historical: names flipping order continuously from an unstable sort)",
+                "id": "receipt-text-does-not-flicker",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "expect",
+                    "testid": "read-receipt",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "expectStable",
+                    "intervalMs": 700,
+                    "samples": 4,
+                    "testid": "read-receipt"
+                  }
+                ]
+              },
+              {
+                "desc": "A user who signs out disappears from the online list. (historical: presence lists stale or stuck, six runs)",
+                "id": "presence-drops-signed-out-user",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "contains": "Bob",
+                    "do": "expect",
+                    "testid": "online-users",
+                    "within": 8000
+                  },
+                  {
+                    "actor": "bob",
+                    "do": "click",
+                    "testid": "signout"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "alice",
+                    "contains": "Bob",
+                    "do": "expect",
+                    "testid": "online-users",
+                    "within": 12000
+                  }
+                ]
+              }
+            ],
+            "id": 105,
+            "max": 2,
+            "name": "Presence and Display Stability",
+            "note": "Presence was wrong in six of the historically graded runs, and 'Seen by' lists were seen flickering between orderings. Neither is visible to a single assertion.",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "lobby"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "lobby"
+              },
+              {
+                "actor": "bob",
+                "do": "enterRoom",
+                "room": "lobby"
+              },
+              {
+                "actor": "alice",
+                "do": "send",
+                "text": "who is here"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob"
+            ],
+            "criteria": [
+              {
+                "desc": "A message the server refused for exceeding the rate limit must not stay visible to its sender. An optimistic insert without rollback leaves the sender believing they said something nobody received.",
+                "id": "rejected-message-does-not-linger",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "send",
+                    "text": "first of a burst"
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "send",
+                    "text": "REJECTED BY RATE LIMIT"
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "wait",
+                    "ms": 4000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "bob",
+                    "contains": "REJECTED BY RATE LIMIT",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 4000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "alice",
+                    "contains": "REJECTED BY RATE LIMIT",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 4000
+                  }
+                ]
+              },
+              {
+                "desc": "A brand-new browser sees what the acting client claims. Anything visible only to the client that performed the action never reached the server.",
+                "id": "a-fresh-client-sees-the-same-thing",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "wait",
+                    "ms": 1500
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "send",
+                    "text": "durable statement"
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "durable statement",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 6000
+                  },
+                  {
+                    "actor": "bob",
+                    "do": "freshClient"
+                  },
+                  {
+                    "actor": "bob-fresh",
+                    "do": "signUp",
+                    "name": "Observer"
+                  },
+                  {
+                    "actor": "bob-fresh",
+                    "do": "enterRoom",
+                    "room": "truth"
+                  },
+                  {
+                    "actor": "bob-fresh",
+                    "contains": "durable statement",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 10000
+                  }
+                ]
+              }
+            ],
+            "id": 107,
+            "max": 2,
+            "name": "Server-Side Truth",
+            "note": "Whatever the acting client shows must actually exist on the server. Optimistic inserts that were never confirmed, and counts incremented only in one browser, are invisible to any assertion made from that same browser.",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "truth"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "truth"
+              },
+              {
+                "actor": "bob",
+                "do": "enterRoom",
+                "room": "truth"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "alice",
+              "bob",
+              "snoop"
+            ],
+            "criteria": [
+              {
+                "desc": "A third party does not see the conversation in their list",
+                "id": "outsider-cannot-see-the-conversation",
+                "points": 1,
+                "steps": [
+                  {
+                    "absent": true,
+                    "actor": "snoop",
+                    "contains": "Alice",
+                    "do": "expect",
+                    "testid": "dm-item",
+                    "within": 6000
+                  }
+                ]
+              },
+              {
+                "desc": "A third party never sees the messages",
+                "id": "outsider-cannot-read-the-messages",
+                "points": 1,
+                "steps": [
+                  {
+                    "absent": true,
+                    "actor": "snoop",
+                    "contains": "SECRET between alice and bob",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 6000
+                  }
+                ]
+              },
+              {
+                "desc": "A third party's client is never SENT the private message. Hiding it in the interface is not privacy — anyone with developer tools can read what their own browser received.",
+                "id": "outsider-never-receives-it-over-the-wire",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "snoop",
+                    "contains": "a public message in the lobby",
+                    "do": "expectReceived",
+                    "within": 8000
+                  },
+                  {
+                    "actor": "bob",
+                    "do": "click",
+                    "in": {
+                      "contains": "Alice",
+                      "testid": "dm-list"
+                    },
+                    "testid": "dm-item"
+                  },
+                  {
+                    "actor": "bob",
+                    "do": "wait",
+                    "ms": 2000
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "send",
+                    "text": "SECOND SECRET for bob only"
+                  },
+                  {
+                    "actor": "alice",
+                    "do": "wait",
+                    "ms": 4000
+                  },
+                  {
+                    "actor": "bob",
+                    "contains": "SECOND SECRET for bob only",
+                    "do": "expectReceived",
+                    "within": 8000
+                  },
+                  {
+                    "actor": "snoop",
+                    "contains": "SECOND SECRET for bob only",
+                    "do": "expectNotReceived"
+                  }
+                ]
+              }
+            ],
+            "id": 109,
+            "max": 3,
+            "name": "Direct Message Privacy",
+            "note": "A direct conversation is the first data in level 1 that must not reach someone. The wire check is the one that matters: an app that broadcasts widely and filters in the browser looks perfect on screen while the data is already in every client.",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "Alice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "Bob"
+              },
+              {
+                "actor": "snoop",
+                "do": "signUp",
+                "name": "Snoop"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "lobby"
+              },
+              {
+                "actor": "alice",
+                "do": "enterRoom",
+                "room": "lobby"
+              },
+              {
+                "actor": "snoop",
+                "do": "enterRoom",
+                "room": "lobby"
+              },
+              {
+                "actor": "alice",
+                "do": "send",
+                "text": "a public message in the lobby"
+              },
+              {
+                "actor": "alice",
+                "do": "wait",
+                "ms": 2500
+              },
+              {
+                "actor": "alice",
+                "do": "click",
+                "in": {
+                  "contains": "Bob",
+                  "testid": "online-user"
+                },
+                "testid": "dm-start"
+              },
+              {
+                "actor": "alice",
+                "do": "wait",
+                "ms": 2000
+              },
+              {
+                "actor": "alice",
+                "do": "click",
+                "in": {
+                  "contains": "Bob",
+                  "testid": "dm-list"
+                },
+                "testid": "dm-item"
+              },
+              {
+                "actor": "alice",
+                "do": "send",
+                "text": "SECRET between alice and bob"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "owner",
+              "member",
+              "target",
+              "outsider"
+            ],
+            "criteria": [
+              {
+                "desc": "Someone who never joined the room cannot read its history",
+                "id": "outsider-cannot-read-the-room",
+                "points": 1,
+                "steps": [
+                  {
+                    "absent": true,
+                    "actor": "outsider",
+                    "contains": "owner message",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 6000
+                  }
+                ]
+              },
+              {
+                "desc": "Someone who never joined cannot post to the room, even by re-issuing a member's own send request",
+                "id": "outsider-cannot-post-to-the-room",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "outsider",
+                    "do": "replayAs",
+                    "from": "owner",
+                    "match": "owner message",
+                    "swap": {
+                      "find": "owner message",
+                      "with": "posted by an outsider"
+                    }
+                  },
+                  {
+                    "actor": "outsider",
+                    "do": "expectReplayRejected"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "owner",
+                    "contains": "posted by an outsider",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 6000
+                  }
+                ]
+              },
+              {
+                "desc": "A removed user stops receiving the room's messages immediately, without reloading. Revoking access has to stop the stream, not just stop the interface drawing it.",
+                "id": "removed-member-stops-receiving",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "target",
+                    "contains": "owner message",
+                    "do": "expectReceived",
+                    "within": 8000
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "click",
+                    "in": {
+                      "contains": "Target",
+                      "testid": "member-item"
+                    },
+                    "testid": "member-remove"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "wait",
+                    "ms": 3000
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "send",
+                    "text": "after the removal"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "wait",
+                    "ms": 4000
+                  },
+                  {
+                    "actor": "target",
+                    "contains": "after the removal",
+                    "do": "expectNotReceived"
+                  }
+                ]
+              },
+              {
+                "desc": "A member who is not an owner cannot remove anyone — not through the interface, and not by re-issuing the owner's own removal request against a different person",
+                "id": "only-an-owner-can-remove-a-member",
+                "points": 1,
+                "steps": [
+                  {
+                    "absent": true,
+                    "actor": "member",
+                    "do": "expect",
+                    "testid": "member-remove",
+                    "within": 5000
+                  },
+                  {
+                    "actor": "member",
+                    "do": "replayAs",
+                    "from": "owner",
+                    "match": "member",
+                    "swap": {
+                      "find": "{user:Target}",
+                      "with": "{user:Owner}"
+                    }
+                  },
+                  {
+                    "actor": "member",
+                    "do": "expectReplayRejected"
+                  },
+                  {
+                    "actor": "owner",
+                    "contains": "Owner",
+                    "do": "expect",
+                    "testid": "member-item",
+                    "within": 6000
+                  }
+                ]
+              }
+            ],
+            "id": 108,
+            "max": 4,
+            "name": "Authorization",
+            "note": "Each of these is an action the wrong person must not be able to take. Where the app writes over HTTP the request is re-issued with the wrong user's credentials, because a hidden control is not a check. Where identity comes from the live connection there is nothing to re-issue: that replay records as unverified and never scores or penalises, so the point rests on what the interface actually does.",
+            "setup": [
+              {
+                "actor": "owner",
+                "do": "signUp",
+                "name": "Owner"
+              },
+              {
+                "actor": "member",
+                "do": "signUp",
+                "name": "Member"
+              },
+              {
+                "actor": "target",
+                "do": "signUp",
+                "name": "Target"
+              },
+              {
+                "actor": "outsider",
+                "do": "signUp",
+                "name": "Outsider"
+              },
+              {
+                "actor": "owner",
+                "do": "createRoom",
+                "room": "guarded"
+              },
+              {
+                "actor": "owner",
+                "do": "enterRoom",
+                "room": "guarded"
+              },
+              {
+                "actor": "member",
+                "do": "enterRoom",
+                "room": "guarded"
+              },
+              {
+                "actor": "target",
+                "do": "enterRoom",
+                "room": "guarded"
+              },
+              {
+                "actor": "owner",
+                "do": "send",
+                "text": "owner message"
+              },
+              {
+                "actor": "owner",
+                "do": "wait",
+                "ms": 2500
+              }
+            ]
+          }
+        ],
+        "level": 1,
+        "note": "Cross-cutting properties, scored on a separate axis from features. A feature-only score cannot see these: an app can implement every listed feature and still let one user take over another's account. Each invariant is its own feature with fresh contexts, so one root defect cannot cascade into several apparent problems.",
+        "schemaVersion": 1,
+        "track": "stack-bench"
+      },
+      "path": "scenarios/01-invariants.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "alice",
+              "bob",
+              "auditor"
+            ],
+            "criteria": [
+              {
+                "desc": "a back-office script purges SysBob's messages directly in the database; a client with the room open sees them disappear without touching the page",
+                "id": "901a",
+                "note": "WITHHELD until proven against a mutant (backoffice-writes-via-server) and a real failing build. The script is the app's own scripts/backoffice.mjs, required by the spec to write to the database without the web server's help — moderation, compliance takedowns and data-retention jobs all look exactly like this.",
+                "points": 0,
+                "steps": [
+                  {
+                    "args": [
+                      "purge-user",
+                      "{user:SysBob}"
+                    ],
+                    "do": "runScript",
+                    "script": "scripts/backoffice.mjs",
+                    "settleMs": 4000
+                  },
+                  {
+                    "actor": "alice",
+                    "contains": "purge-me",
+                    "do": "expectElementCount",
+                    "equals": 0,
+                    "testid": "message-item",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "a customer arriving after the purge never sees the messages — the rows are gone from the database, not merely from one client's memory",
+                "id": "901b",
+                "note": "WITHHELD — promoted together with 901a. A fresh actor rather than a reload, so this cannot be confused by session-persistence behaviour, which invariant 105 scores separately.",
+                "points": 0,
+                "steps": [
+                  {
+                    "actor": "auditor",
+                    "do": "signUp",
+                    "name": "SysAuditor"
+                  },
+                  {
+                    "actor": "auditor",
+                    "do": "enterRoom",
+                    "room": "sysroom"
+                  },
+                  {
+                    "actor": "auditor",
+                    "contains": "purge-me",
+                    "do": "expectElementCount",
+                    "equals": 0,
+                    "testid": "message-item",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "a purge that lands while the app server is down is still reflected to an open client once the server returns — the deploy window loses nothing",
+                "id": "901c",
+                "note": "WITHHELD — same promotion rule, plus this is the anti-cheat phase: a script that talks to the app server fails here outright. NOTIFY-style event relays also fail unless the app refetches on reconnect, because a notification fired while nobody listened is gone forever.",
+                "points": 0,
+                "steps": [
+                  {
+                    "actor": "alice",
+                    "do": "send",
+                    "text": "deploy-window-msg"
+                  },
+                  {
+                    "actor": "auditor",
+                    "contains": "deploy-window-msg",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 8000
+                  },
+                  {
+                    "do": "stopAppServer"
+                  },
+                  {
+                    "args": [
+                      "purge-user",
+                      "{user:SysAlice}"
+                    ],
+                    "do": "runScript",
+                    "script": "scripts/backoffice.mjs"
+                  },
+                  {
+                    "do": "startAppServer"
+                  },
+                  {
+                    "actor": "auditor",
+                    "contains": "deploy-window-msg",
+                    "do": "expectElementCount",
+                    "equals": 0,
+                    "testid": "message-item",
+                    "within": 20000
+                  }
+                ]
+              }
+            ],
+            "id": 901,
+            "name": "A write from outside the app is visible without reload",
+            "setup": [
+              {
+                "actor": "alice",
+                "do": "signUp",
+                "name": "SysAlice"
+              },
+              {
+                "actor": "bob",
+                "do": "signUp",
+                "name": "SysBob"
+              },
+              {
+                "actor": "alice",
+                "do": "createRoom",
+                "room": "sysroom"
+              },
+              {
+                "actor": "bob",
+                "do": "enterRoom",
+                "room": "sysroom"
+              },
+              {
+                "actor": "bob",
+                "do": "send",
+                "text": "purge-me-alpha"
+              },
+              {
+                "actor": "bob",
+                "do": "send",
+                "text": "purge-me-beta"
+              },
+              {
+                "actor": "alice",
+                "contains": "purge-me-beta",
+                "do": "expect",
+                "testid": "message-item",
+                "within": 8000
+              }
+            ]
+          },
+          {
+            "actors": [
+              "host",
+              "watcher",
+              "joiner"
+            ],
+            "criteria": [
+              {
+                "desc": "one user enters the room — fetching its member list — at the same moment another joins: the fetcher ends with the joiner exactly once, not zero (stale fetch) and not twice (fetch merged with the join broadcast)",
+                "id": "902a",
+                "note": "WITHHELD until proven against a mutant (fetch-then-append-dupe) and a real failing build. The race window is real; INCONCLUSIVE on a missed race, never a false FAIL.",
+                "points": 0,
+                "steps": [
+                  {
+                    "branches": [
+                      [
+                        {
+                          "actor": "watcher",
+                          "do": "enterRoom",
+                          "room": "raceroom"
+                        }
+                      ],
+                      [
+                        {
+                          "actor": "joiner",
+                          "do": "enterRoom",
+                          "room": "raceroom"
+                        }
+                      ]
+                    ],
+                    "do": "race",
+                    "settleMs": 4000
+                  },
+                  {
+                    "actor": "watcher",
+                    "contains": "RaceJoiner",
+                    "do": "expectElementCount",
+                    "equals": 1,
+                    "testid": "member-item",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "watcher",
+                    "contains": "RaceHost",
+                    "do": "expectElementCount",
+                    "equals": 1,
+                    "testid": "member-item",
+                    "within": 10000
+                  }
+                ]
+              }
+            ],
+            "id": 902,
+            "name": "A list being opened while its contents change",
+            "setup": [
+              {
+                "actor": "host",
+                "do": "signUp",
+                "name": "RaceHost"
+              },
+              {
+                "actor": "watcher",
+                "do": "signUp",
+                "name": "RaceWatcher"
+              },
+              {
+                "actor": "joiner",
+                "do": "signUp",
+                "name": "RaceJoiner"
+              },
+              {
+                "actor": "host",
+                "do": "createRoom",
+                "room": "raceroom"
+              }
+            ]
+          }
+        ],
+        "level": 1,
+        "note": "Properties of the system, not of any one feature: what happens when the database changes underneath the app, and when two things happen at the same time. A broadcast layer only announces writes that went through it — a moderation script that deletes rows directly leaves every open client showing messages that no longer exist. Every criterion is withheld at 0 points until it demonstrably fails a real build AND its mutant is CAUGHT, the same promotion rule as contention.",
+        "schemaVersion": 1
+      },
+      "path": "scenarios/01-systems.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "owner",
+              "outsider"
+            ],
+            "criteria": [
+              {
+                "desc": "the owner sees the private badge on their room",
+                "id": "201a",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "owner",
+                    "do": "expect",
+                    "testid": "room-private-badge",
+                    "within": 8000
+                  }
+                ]
+              },
+              {
+                "desc": "a private room does not appear in a non-member's room list at all",
+                "id": "201b",
+                "points": 2,
+                "steps": [
+                  {
+                    "absent": true,
+                    "actor": "outsider",
+                    "contains": "{room:vault}",
+                    "do": "expect",
+                    "testid": "room-item",
+                    "within": 6000
+                  }
+                ]
+              }
+            ],
+            "id": 201,
+            "name": "Private Rooms",
+            "setup": [
+              {
+                "actor": "owner",
+                "do": "signUp",
+                "name": "Pria"
+              },
+              {
+                "actor": "outsider",
+                "do": "signUp",
+                "name": "Oleg"
+              },
+              {
+                "actor": "owner",
+                "do": "createRoom",
+                "private": true,
+                "room": "vault"
+              },
+              {
+                "actor": "owner",
+                "do": "send",
+                "text": "vault-secret-note"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "owner",
+              "guest"
+            ],
+            "criteria": [
+              {
+                "desc": "an invited user gains access and can read the room's history",
+                "id": "202a",
+                "points": 2,
+                "steps": [
+                  {
+                    "actor": "owner",
+                    "do": "fill",
+                    "testid": "invite-input",
+                    "text": "{user:Gina}"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "click",
+                    "settleMs": 1200,
+                    "testid": "invite-submit"
+                  },
+                  {
+                    "actor": "guest",
+                    "do": "enterRoom",
+                    "room": "committee"
+                  },
+                  {
+                    "actor": "guest",
+                    "contains": "pre-invite-history",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "removal takes effect live: the removed member stops receiving without reloading",
+                "id": "202b",
+                "points": 2,
+                "steps": [
+                  {
+                    "actor": "owner",
+                    "do": "click",
+                    "in": {
+                      "contains": "Gina",
+                      "testid": "member-item"
+                    },
+                    "settleMs": 1500,
+                    "testid": "member-remove"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "send",
+                    "text": "post-removal-note"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "absent": true,
+                    "actor": "guest",
+                    "contains": "post-removal-note",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 4000
+                  }
+                ]
+              }
+            ],
+            "id": 202,
+            "name": "Invitation and Removal",
+            "setup": [
+              {
+                "actor": "owner",
+                "do": "signUp",
+                "name": "Held"
+              },
+              {
+                "actor": "guest",
+                "do": "signUp",
+                "name": "Gina"
+              },
+              {
+                "actor": "owner",
+                "do": "createRoom",
+                "private": true,
+                "room": "committee"
+              },
+              {
+                "actor": "owner",
+                "do": "send",
+                "text": "pre-invite-history"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "subject",
+              "viewer"
+            ],
+            "criteria": [
+              {
+                "desc": "clicking a username opens that person's profile with their name and bio",
+                "id": "203a",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "viewer",
+                    "contains": "Sana",
+                    "do": "click",
+                    "settleMs": 1200,
+                    "testid": "member-item"
+                  },
+                  {
+                    "actor": "viewer",
+                    "contains": "Sana",
+                    "do": "expect",
+                    "testid": "profile-name",
+                    "within": 8000
+                  },
+                  {
+                    "actor": "viewer",
+                    "contains": "first-bio-text",
+                    "do": "expect",
+                    "testid": "profile-bio",
+                    "within": 8000
+                  }
+                ]
+              },
+              {
+                "desc": "an open profile panel is live: a bio edit appears to a viewer without reopening",
+                "id": "203b",
+                "points": 2,
+                "steps": [
+                  {
+                    "actor": "subject",
+                    "do": "fill",
+                    "testid": "bio-input",
+                    "text": "second-bio-text"
+                  },
+                  {
+                    "actor": "subject",
+                    "do": "click",
+                    "testid": "bio-save"
+                  },
+                  {
+                    "actor": "viewer",
+                    "contains": "second-bio-text",
+                    "do": "expect",
+                    "testid": "profile-bio",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "the panel closes, and reopening shows current data",
+                "id": "203c",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "viewer",
+                    "do": "click",
+                    "settleMs": 800,
+                    "testid": "profile-close"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "viewer",
+                    "do": "expect",
+                    "testid": "profile-bio",
+                    "within": 4000
+                  },
+                  {
+                    "actor": "viewer",
+                    "contains": "Sana",
+                    "do": "click",
+                    "settleMs": 1200,
+                    "testid": "member-item"
+                  },
+                  {
+                    "actor": "viewer",
+                    "contains": "second-bio-text",
+                    "do": "expect",
+                    "testid": "profile-bio",
+                    "within": 8000
+                  }
+                ]
+              }
+            ],
+            "id": 203,
+            "name": "Profiles",
+            "setup": [
+              {
+                "actor": "subject",
+                "do": "signUp",
+                "name": "Sana"
+              },
+              {
+                "actor": "viewer",
+                "do": "signUp",
+                "name": "Vero"
+              },
+              {
+                "actor": "subject",
+                "do": "createRoom",
+                "room": "profroom"
+              },
+              {
+                "actor": "viewer",
+                "do": "enterRoom",
+                "room": "profroom"
+              },
+              {
+                "actor": "subject",
+                "do": "fill",
+                "testid": "bio-input",
+                "text": "first-bio-text"
+              },
+              {
+                "actor": "subject",
+                "do": "click",
+                "settleMs": 1200,
+                "testid": "bio-save"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "asker",
+              "asked",
+              "third"
+            ],
+            "criteria": [
+              {
+                "desc": "a request reaches the recipient as pending, and accepting puts each user in the other's friends list — live, no reloads anywhere",
+                "id": "204a",
+                "points": 2,
+                "steps": [
+                  {
+                    "actor": "asker",
+                    "contains": "Freya",
+                    "do": "click",
+                    "settleMs": 1200,
+                    "testid": "member-item"
+                  },
+                  {
+                    "actor": "asker",
+                    "do": "click",
+                    "settleMs": 1200,
+                    "testid": "friend-request"
+                  },
+                  {
+                    "actor": "asked",
+                    "contains": "Finn",
+                    "do": "expect",
+                    "testid": "friend-pending",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "asked",
+                    "do": "click",
+                    "in": {
+                      "contains": "Finn",
+                      "testid": "friend-pending"
+                    },
+                    "settleMs": 1500,
+                    "testid": "friend-accept"
+                  },
+                  {
+                    "actor": "asker",
+                    "contains": "Freya",
+                    "do": "expect",
+                    "testid": "friend-item",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "asked",
+                    "contains": "Finn",
+                    "do": "expect",
+                    "testid": "friend-item",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "a declined request creates no friendship on either side",
+                "id": "204b",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "third",
+                    "contains": "Freya",
+                    "do": "click",
+                    "settleMs": 1200,
+                    "testid": "member-item"
+                  },
+                  {
+                    "actor": "third",
+                    "do": "click",
+                    "settleMs": 1200,
+                    "testid": "friend-request"
+                  },
+                  {
+                    "actor": "asked",
+                    "do": "click",
+                    "in": {
+                      "contains": "Falk",
+                      "testid": "friend-pending"
+                    },
+                    "settleMs": 1500,
+                    "testid": "friend-decline"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "third",
+                    "contains": "Freya",
+                    "do": "expect",
+                    "testid": "friend-item",
+                    "within": 5000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "asked",
+                    "contains": "Falk",
+                    "do": "expect",
+                    "testid": "friend-item",
+                    "within": 5000
+                  }
+                ]
+              },
+              {
+                "desc": "unfriending removes the row live from BOTH lists",
+                "id": "204c",
+                "points": 2,
+                "steps": [
+                  {
+                    "actor": "asker",
+                    "do": "click",
+                    "in": {
+                      "contains": "Freya",
+                      "testid": "friend-item"
+                    },
+                    "settleMs": 1500,
+                    "testid": "unfriend"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "asker",
+                    "contains": "Freya",
+                    "do": "expect",
+                    "testid": "friend-item",
+                    "within": 8000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "asked",
+                    "contains": "Finn",
+                    "do": "expect",
+                    "testid": "friend-item",
+                    "within": 8000
+                  }
+                ]
+              }
+            ],
+            "id": 204,
+            "name": "Friends",
+            "setup": [
+              {
+                "actor": "asker",
+                "do": "signUp",
+                "name": "Finn"
+              },
+              {
+                "actor": "asked",
+                "do": "signUp",
+                "name": "Freya"
+              },
+              {
+                "actor": "third",
+                "do": "signUp",
+                "name": "Falk"
+              },
+              {
+                "actor": "asker",
+                "do": "createRoom",
+                "room": "friendroom"
+              },
+              {
+                "actor": "asked",
+                "do": "enterRoom",
+                "room": "friendroom"
+              },
+              {
+                "actor": "third",
+                "do": "enterRoom",
+                "room": "friendroom"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "watcher",
+              "flapper"
+            ],
+            "criteria": [
+              {
+                "desc": "a friend's presence flips to offline live when they leave, and back when they return",
+                "id": "205a",
+                "points": 2,
+                "steps": [
+                  {
+                    "actor": "watcher",
+                    "contains": "online",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Flip",
+                      "testid": "friend-item"
+                    },
+                    "testid": "friend-presence",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "flapper",
+                    "do": "closeClient"
+                  },
+                  {
+                    "actor": "watcher",
+                    "contains": "offline",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Flip",
+                      "testid": "friend-item"
+                    },
+                    "testid": "friend-presence",
+                    "within": 15000
+                  },
+                  {
+                    "actor": "flapper",
+                    "do": "openClient"
+                  },
+                  {
+                    "actor": "flapper",
+                    "do": "ensureSignedIn",
+                    "name": "Flip"
+                  },
+                  {
+                    "actor": "watcher",
+                    "contains": "online",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Flip",
+                      "testid": "friend-item"
+                    },
+                    "testid": "friend-presence",
+                    "within": 15000
+                  }
+                ]
+              }
+            ],
+            "id": 205,
+            "name": "Friend Presence",
+            "setup": [
+              {
+                "actor": "watcher",
+                "do": "signUp",
+                "name": "Wava"
+              },
+              {
+                "actor": "flapper",
+                "do": "signUp",
+                "name": "Flip"
+              },
+              {
+                "actor": "watcher",
+                "do": "createRoom",
+                "room": "presroom"
+              },
+              {
+                "actor": "flapper",
+                "do": "enterRoom",
+                "room": "presroom"
+              },
+              {
+                "actor": "watcher",
+                "contains": "Flip",
+                "do": "click",
+                "settleMs": 1200,
+                "testid": "member-item"
+              },
+              {
+                "actor": "watcher",
+                "do": "click",
+                "settleMs": 1200,
+                "testid": "friend-request"
+              },
+              {
+                "actor": "flapper",
+                "do": "click",
+                "in": {
+                  "contains": "Wava",
+                  "testid": "friend-pending"
+                },
+                "settleMs": 1500,
+                "testid": "friend-accept"
+              }
+            ]
+          }
+        ],
+        "level": 2,
+        "note": "Level 2 features: access control and the social layer. Levels are cumulative — these run against the same app as level 1's suites, after the upgrade.",
+        "schemaVersion": 1
+      },
+      "path": "scenarios/02-features.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "owner",
+              "member",
+              "outsider"
+            ],
+            "criteria": [
+              {
+                "desc": "a private message reaches a member and is never sent over the wire to a non-member — regardless of what any page renders",
+                "id": "211a",
+                "points": 2,
+                "steps": [
+                  {
+                    "actor": "owner",
+                    "do": "send",
+                    "text": "sealed-room-secret"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "wait",
+                    "ms": 4000
+                  },
+                  {
+                    "actor": "member",
+                    "contains": "sealed-room-secret",
+                    "do": "expectReceived",
+                    "within": 8000
+                  },
+                  {
+                    "actor": "outsider",
+                    "contains": "sealed-room-secret",
+                    "do": "expectNotReceived"
+                  }
+                ]
+              },
+              {
+                "desc": "a non-member's post into a private room, issued as a raw request, is rejected and appears to nobody",
+                "id": "211b",
+                "points": 2,
+                "steps": [
+                  {
+                    "actor": "outsider",
+                    "do": "replayAs",
+                    "from": "owner",
+                    "match": "sealed-room-secret",
+                    "swap": {
+                      "find": "sealed-room-secret",
+                      "with": "smuggled-outsider-post"
+                    }
+                  },
+                  {
+                    "actor": "outsider",
+                    "do": "expectReplayRejected"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "member",
+                    "contains": "smuggled-outsider-post",
+                    "do": "expect",
+                    "testid": "message-item",
+                    "within": 5000
+                  }
+                ]
+              }
+            ],
+            "id": 211,
+            "name": "Private Room Privacy",
+            "setup": [
+              {
+                "actor": "owner",
+                "do": "signUp",
+                "name": "Opal"
+              },
+              {
+                "actor": "member",
+                "do": "signUp",
+                "name": "Mia"
+              },
+              {
+                "actor": "outsider",
+                "do": "signUp",
+                "name": "Xeno"
+              },
+              {
+                "actor": "owner",
+                "do": "createRoom",
+                "private": true,
+                "room": "sealed"
+              },
+              {
+                "actor": "owner",
+                "do": "fill",
+                "testid": "invite-input",
+                "text": "{user:Mia}"
+              },
+              {
+                "actor": "owner",
+                "do": "click",
+                "settleMs": 1500,
+                "testid": "invite-submit"
+              },
+              {
+                "actor": "member",
+                "do": "enterRoom",
+                "room": "sealed"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "a",
+              "b"
+            ],
+            "criteria": [
+              {
+                "desc": "after an accept, each side holds exactly one row for the other — never two, never a half-friendship",
+                "id": "212a",
+                "points": 1,
+                "steps": [
+                  {
+                    "actor": "a",
+                    "contains": "Ben",
+                    "do": "expectElementCount",
+                    "equals": 1,
+                    "testid": "friend-item",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "b",
+                    "contains": "Ada",
+                    "do": "expectElementCount",
+                    "equals": 1,
+                    "testid": "friend-item",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "replaying the accept a second time as a raw request creates no second friendship",
+                "id": "212b",
+                "points": 2,
+                "steps": [
+                  {
+                    "actor": "b",
+                    "do": "replayAs",
+                    "from": "b",
+                    "match": "friend"
+                  },
+                  {
+                    "actor": "b",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "a",
+                    "contains": "Ben",
+                    "do": "expectElementCount",
+                    "equals": 1,
+                    "testid": "friend-item",
+                    "within": 8000
+                  },
+                  {
+                    "actor": "b",
+                    "contains": "Ada",
+                    "do": "expectElementCount",
+                    "equals": 1,
+                    "testid": "friend-item",
+                    "within": 8000
+                  }
+                ]
+              }
+            ],
+            "id": 212,
+            "name": "Friendship Is One Relationship",
+            "setup": [
+              {
+                "actor": "a",
+                "do": "signUp",
+                "name": "Ada"
+              },
+              {
+                "actor": "b",
+                "do": "signUp",
+                "name": "Ben"
+              },
+              {
+                "actor": "a",
+                "do": "createRoom",
+                "room": "symroom"
+              },
+              {
+                "actor": "b",
+                "do": "enterRoom",
+                "room": "symroom"
+              },
+              {
+                "actor": "a",
+                "contains": "Ben",
+                "do": "click",
+                "settleMs": 1200,
+                "testid": "member-item"
+              },
+              {
+                "actor": "a",
+                "do": "click",
+                "settleMs": 1200,
+                "testid": "friend-request"
+              },
+              {
+                "actor": "b",
+                "do": "click",
+                "in": {
+                  "contains": "Ada",
+                  "testid": "friend-pending"
+                },
+                "settleMs": 1500,
+                "testid": "friend-accept"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "victim",
+              "attacker"
+            ],
+            "criteria": [
+              {
+                "desc": "another user's raw request to edit someone's bio is rejected, and the bio is unchanged for everyone",
+                "id": "213a",
+                "points": 2,
+                "steps": [
+                  {
+                    "actor": "attacker",
+                    "do": "replayAs",
+                    "from": "victim",
+                    "match": "authentic-bio-text",
+                    "swap": {
+                      "find": "authentic-bio-text",
+                      "with": "defaced-bio-text"
+                    }
+                  },
+                  {
+                    "actor": "attacker",
+                    "do": "expectReplayRejected"
+                  },
+                  {
+                    "actor": "attacker",
+                    "contains": "Vik",
+                    "do": "click",
+                    "settleMs": 1200,
+                    "testid": "member-item"
+                  },
+                  {
+                    "actor": "attacker",
+                    "contains": "authentic-bio-text",
+                    "do": "expect",
+                    "testid": "profile-bio",
+                    "within": 8000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "attacker",
+                    "contains": "defaced-bio-text",
+                    "do": "expect",
+                    "testid": "profile-bio",
+                    "within": 4000
+                  }
+                ]
+              }
+            ],
+            "id": 213,
+            "name": "A Profile Belongs to Its Owner",
+            "setup": [
+              {
+                "actor": "victim",
+                "do": "signUp",
+                "name": "Vik"
+              },
+              {
+                "actor": "attacker",
+                "do": "signUp",
+                "name": "Axl"
+              },
+              {
+                "actor": "victim",
+                "do": "createRoom",
+                "room": "bioroom"
+              },
+              {
+                "actor": "attacker",
+                "do": "enterRoom",
+                "room": "bioroom"
+              },
+              {
+                "actor": "victim",
+                "do": "fill",
+                "testid": "bio-input",
+                "text": "authentic-bio-text"
+              },
+              {
+                "actor": "victim",
+                "do": "click",
+                "settleMs": 1500,
+                "testid": "bio-save"
+              }
+            ]
+          }
+        ],
+        "level": 2,
+        "note": "What level 2 must hold true regardless of UI: privacy is a property of the wire, not of what a page chooses to render; a friendship is one relationship; a profile belongs to its owner. Three-way verdicts follow level 1's replay conventions.",
+        "schemaVersion": 1
+      },
+      "path": "scenarios/02-invariants.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "subject",
+              "viewer"
+            ],
+            "criteria": [
+              {
+                "desc": "a profile panel opened at the same moment the bio is saved converges on the NEW bio — the panel's subscription outlives its opening fetch",
+                "id": "921a",
+                "note": "WITHHELD until proven against a mutant (fetch-on-open-no-subscribe) and a real failing build. A fetch-on-open panel that races the save shows bio-before-race forever; a subscribed panel converges.",
+                "points": 0,
+                "steps": [
+                  {
+                    "branches": [
+                      [
+                        {
+                          "actor": "viewer",
+                          "contains": "Zed",
+                          "do": "click",
+                          "testid": "member-item"
+                        }
+                      ],
+                      [
+                        {
+                          "actor": "subject",
+                          "do": "click",
+                          "testid": "bio-save"
+                        }
+                      ]
+                    ],
+                    "do": "race",
+                    "settleMs": 4000
+                  },
+                  {
+                    "actor": "viewer",
+                    "contains": "bio-after-race",
+                    "do": "expect",
+                    "testid": "profile-bio",
+                    "within": 10000
+                  }
+                ]
+              }
+            ],
+            "id": 921,
+            "name": "A panel opened at the moment its contents change",
+            "setup": [
+              {
+                "actor": "subject",
+                "do": "signUp",
+                "name": "Zed"
+              },
+              {
+                "actor": "viewer",
+                "do": "signUp",
+                "name": "Yara"
+              },
+              {
+                "actor": "subject",
+                "do": "createRoom",
+                "room": "panelrace"
+              },
+              {
+                "actor": "viewer",
+                "do": "enterRoom",
+                "room": "panelrace"
+              },
+              {
+                "actor": "subject",
+                "do": "fill",
+                "testid": "bio-input",
+                "text": "bio-before-race"
+              },
+              {
+                "actor": "subject",
+                "do": "click",
+                "settleMs": 1500,
+                "testid": "bio-save"
+              },
+              {
+                "actor": "subject",
+                "do": "fill",
+                "testid": "bio-input",
+                "text": "bio-after-race"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "asker",
+              "asked"
+            ],
+            "criteria": [
+              {
+                "desc": "the accept lands while the asker's client is mid-refresh: the new friend appears exactly once — not zero (stale fetch), not twice (fetch merged with the accept broadcast)",
+                "id": "922a",
+                "note": "WITHHELD until proven against a mutant (fetch-then-append-dupe) and a real failing build. The reload is what forces the asker's client into a full refetch for the accept to race.",
+                "points": 0,
+                "steps": [
+                  {
+                    "branches": [
+                      [
+                        {
+                          "actor": "asker",
+                          "do": "reload",
+                          "settleMs": 500
+                        }
+                      ],
+                      [
+                        {
+                          "actor": "asked",
+                          "do": "click",
+                          "in": {
+                            "contains": "Quin",
+                            "testid": "friend-pending"
+                          },
+                          "testid": "friend-accept"
+                        }
+                      ]
+                    ],
+                    "do": "race",
+                    "settleMs": 5000
+                  },
+                  {
+                    "actor": "asker",
+                    "do": "ensureSignedIn",
+                    "name": "Quin"
+                  },
+                  {
+                    "actor": "asker",
+                    "contains": "Rune",
+                    "do": "expectElementCount",
+                    "equals": 1,
+                    "testid": "friend-item",
+                    "within": 12000
+                  },
+                  {
+                    "actor": "asked",
+                    "contains": "Quin",
+                    "do": "expectElementCount",
+                    "equals": 1,
+                    "testid": "friend-item",
+                    "within": 12000
+                  }
+                ]
+              }
+            ],
+            "id": 922,
+            "name": "A friendship formed while the list showing it is fetched",
+            "setup": [
+              {
+                "actor": "asker",
+                "do": "signUp",
+                "name": "Quin"
+              },
+              {
+                "actor": "asked",
+                "do": "signUp",
+                "name": "Rune"
+              },
+              {
+                "actor": "asker",
+                "do": "createRoom",
+                "room": "listrace"
+              },
+              {
+                "actor": "asked",
+                "do": "enterRoom",
+                "room": "listrace"
+              },
+              {
+                "actor": "asker",
+                "contains": "Rune",
+                "do": "click",
+                "settleMs": 1200,
+                "testid": "member-item"
+              },
+              {
+                "actor": "asker",
+                "do": "click",
+                "settleMs": 1500,
+                "testid": "friend-request"
+              }
+            ]
+          }
+        ],
+        "level": 2,
+        "note": "The subscription-lifecycle races level 2's surfaces make possible: a panel that opens at the moment its contents change, and a relationship that forms while the list showing it is being fetched. Fetch-on-open architectures pass every sequential test and fail exactly here. Every criterion is withheld at 0 points until it demonstrably fails a real build AND its mutant is CAUGHT — same promotion rule as contention.",
+        "schemaVersion": 1
+      },
+      "path": "scenarios/02-systems.json"
+    }
+  ],
+  "track": "chat"
+}
diff --git a/tools/stack-bench/tests/snapshots/definitions/ecommerce.snapshot.json b/tools/stack-bench/tests/snapshots/definitions/ecommerce.snapshot.json
new file mode 100644
index 00000000000..88e936be4d0
--- /dev/null
+++ b/tools/stack-bench/tests/snapshots/definitions/ecommerce.snapshot.json
@@ -0,0 +1,5728 @@
+{
+  "definitionSchemaVersion": 1,
+  "levels": [
+    {
+      "level": 1,
+      "suites": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "scenario": "scenarios/01-features.json"
+        },
+        {
+          "id": "invariants",
+          "inherit": "all-higher-levels",
+          "scenario": "scenarios/01-invariants.json"
+        },
+        {
+          "id": "contention",
+          "inherit": "all-higher-levels",
+          "scenario": "scenarios/01-contention.json"
+        },
+        {
+          "id": "systems",
+          "inherit": "all-higher-levels",
+          "scenario": "scenarios/01-systems.json"
+        }
+      ]
+    },
+    {
+      "level": 2,
+      "suites": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "scenario": "scenarios/02-features.json"
+        },
+        {
+          "id": "invariants",
+          "inherit": "all-higher-levels",
+          "scenario": "scenarios/02-invariants.json"
+        },
+        {
+          "id": "contention",
+          "inherit": "all-higher-levels",
+          "scenario": "scenarios/01-contention.json"
+        }
+      ]
+    },
+    {
+      "level": 3,
+      "suites": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "scenario": "scenarios/03-features.json"
+        },
+        {
+          "id": "invariants",
+          "inherit": "all-higher-levels",
+          "scenario": "scenarios/03-invariants.json"
+        },
+        {
+          "id": "systems",
+          "inherit": "all-higher-levels",
+          "scenario": "scenarios/01-systems.json"
+        }
+      ]
+    }
+  ],
+  "manifest": {
+    "actions": [
+      {
+        "args": [
+          0
+        ],
+        "id": "buy",
+        "path": "/api/items/00000000-0000-0000-0000-000000000000/buy",
+        "reducer": "buy_now"
+      },
+      {
+        "args": [
+          0,
+          1
+        ],
+        "id": "addToCart",
+        "path": "/api/cart",
+        "reducer": "add_to_cart"
+      },
+      {
+        "args": [],
+        "id": "checkout",
+        "path": "/api/checkout",
+        "reducer": "checkout"
+      },
+      {
+        "args": [
+          0,
+          0,
+          1
+        ],
+        "id": "restock",
+        "path": "/api/admin/restock",
+        "reducer": "admin_restock"
+      },
+      {
+        "args": [
+          "",
+          ""
+        ],
+        "id": "signUp",
+        "params": [
+          {
+            "in": "body",
+            "name": "username"
+          },
+          {
+            "in": "body",
+            "name": "password"
+          }
+        ],
+        "path": "/api/auth/signup",
+        "reducer": "sign_up"
+      },
+      {
+        "args": [
+          "",
+          ""
+        ],
+        "id": "signIn",
+        "path": "/api/auth/signin",
+        "reducer": "sign_in"
+      }
+    ],
+    "databaseProvenance": {
+      "action": "signUp",
+      "body": {
+        "password": "stack-bench-provenance-password",
+        "username": ""
+      },
+      "markerParameter": "username"
+    },
+    "plannedThrough": 6,
+    "portOffset": 300,
+    "reseedOnReset": true,
+    "restartProbe": "/api/items",
+    "schemaVersion": 1,
+    "slug": "ecom",
+    "suites": {
+      "1": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "spec": "scenarios/01-features.json"
+        },
+        {
+          "id": "invariants",
+          "inherit": "all-higher-levels",
+          "spec": "scenarios/01-invariants.json"
+        },
+        {
+          "id": "contention",
+          "inherit": "all-higher-levels",
+          "spec": "scenarios/01-contention.json"
+        },
+        {
+          "id": "systems",
+          "inherit": "all-higher-levels",
+          "spec": "scenarios/01-systems.json"
+        }
+      ],
+      "2": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "spec": "scenarios/02-features.json"
+        },
+        {
+          "id": "invariants",
+          "inherit": "all-higher-levels",
+          "spec": "scenarios/02-invariants.json"
+        },
+        {
+          "id": "contention",
+          "inherit": "all-higher-levels",
+          "spec": "scenarios/01-contention.json"
+        }
+      ],
+      "3": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "spec": "scenarios/03-features.json"
+        },
+        {
+          "id": "invariants",
+          "inherit": "all-higher-levels",
+          "spec": "scenarios/03-invariants.json"
+        },
+        {
+          "id": "systems",
+          "inherit": "all-higher-levels",
+          "spec": "scenarios/01-systems.json"
+        }
+      ]
+    },
+    "title": "Shop",
+    "validatedThrough": 0
+  },
+  "scenarios": [
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "a",
+              "b",
+              "c",
+              "d",
+              "e",
+              "f"
+            ],
+            "criteria": [
+              {
+                "desc": "six customers buy the last three units at once: stock lands on exactly zero, never below",
+                "id": "201a",
+                "points": 1,
+                "provenBy": "Candidate backend-specific mutants are declared for this criterion and must pass the live Docker mutation gate before this oracle is called production-validated. PostgreSQL and MongoDB remove an explicit concurrency control; SpacetimeDB omits inventory reservation because reducer transactions make the equivalent interleaving defect inexpressible.",
+                "statedBy": "stock may never go negative, and two customers must never both get the last unit",
+                "steps": [
+                  {
+                    "actors": [
+                      "a",
+                      "b",
+                      "c",
+                      "d",
+                      "e",
+                      "f"
+                    ],
+                    "do": "clickConcurrently",
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "settleMs": 6000,
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "a",
+                    "do": "expectNumber",
+                    "equals": 0,
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actors": [
+                      "a",
+                      "b",
+                      "c",
+                      "d",
+                      "e",
+                      "f"
+                    ],
+                    "do": "expectAgreement",
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "numeric": true,
+                    "testid": "item-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "exactly three of the six customers end up with an order, and none is charged twice",
+                "id": "201b",
+                "points": 0,
+                "statedBy": "two customers must never both get the last unit",
+                "steps": [
+                  {
+                    "actors": [
+                      "a",
+                      "b",
+                      "c",
+                      "d",
+                      "e",
+                      "f"
+                    ],
+                    "do": "clickConcurrently",
+                    "settleMs": 2500,
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actors": [
+                      "a",
+                      "b",
+                      "c",
+                      "d",
+                      "e",
+                      "f"
+                    ],
+                    "contains": "Mirrorless Camera",
+                    "do": "expectActorsWith",
+                    "equals": 3,
+                    "maxEach": 1,
+                    "testid": "order-item"
+                  }
+                ],
+                "withheld": "rewritten to count the population instead of one participant: the old phrasing asked actor a for at most one order, which passes when nobody got one. Stays at 0 points until it kills a mutant on a real build."
+              },
+              {
+                "desc": "revenue counts three sales, not six",
+                "id": "201c",
+                "points": 0,
+                "statedBy": "stock must never leave a warehouse without a corresponding order",
+                "steps": [],
+                "withheld": "needs an admin actor; wire once 201a has demonstrably failed somewhere"
+              }
+            ],
+            "id": 201,
+            "name": "The last unit is sold once",
+            "setup": [
+              {
+                "actor": "a",
+                "do": "signUp",
+                "name": "c1"
+              },
+              {
+                "actor": "b",
+                "do": "signUp",
+                "name": "c2"
+              },
+              {
+                "actor": "c",
+                "do": "signUp",
+                "name": "c3"
+              },
+              {
+                "actor": "d",
+                "do": "signUp",
+                "name": "c4"
+              },
+              {
+                "actor": "e",
+                "do": "signUp",
+                "name": "c5"
+              },
+              {
+                "actor": "f",
+                "do": "signUp",
+                "name": "c6"
+              },
+              {
+                "actor": "a",
+                "do": "fill",
+                "enter": true,
+                "settleMs": 1200,
+                "testid": "search-input",
+                "text": "Mirrorless Camera"
+              },
+              {
+                "actor": "b",
+                "do": "fill",
+                "enter": true,
+                "settleMs": 1200,
+                "testid": "search-input",
+                "text": "Mirrorless Camera"
+              },
+              {
+                "actor": "c",
+                "do": "fill",
+                "enter": true,
+                "settleMs": 1200,
+                "testid": "search-input",
+                "text": "Mirrorless Camera"
+              },
+              {
+                "actor": "d",
+                "do": "fill",
+                "enter": true,
+                "settleMs": 1200,
+                "testid": "search-input",
+                "text": "Mirrorless Camera"
+              },
+              {
+                "actor": "e",
+                "do": "fill",
+                "enter": true,
+                "settleMs": 1200,
+                "testid": "search-input",
+                "text": "Mirrorless Camera"
+              },
+              {
+                "actor": "f",
+                "do": "fill",
+                "enter": true,
+                "settleMs": 1200,
+                "testid": "search-input",
+                "text": "Mirrorless Camera"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "admin",
+              "a",
+              "b",
+              "c"
+            ],
+            "criteria": [
+              {
+                "desc": "an uncontended restock of five is stored by the server and shows on the storefront",
+                "id": "202-control",
+                "points": 0,
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "testid": "admin-link"
+                  },
+                  {
+                    "actor": "admin",
+                    "as": "warehouse-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "admin-location-qty"
+                  },
+                  {
+                    "actor": "a",
+                    "as": "storefront-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "restock-input",
+                    "text": "5"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "restock-submit"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "wait",
+                    "ms": 4000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "admin-location-row"
+                    },
+                    "plus": 5,
+                    "relativeTo": "warehouse-before",
+                    "testid": "admin-location-qty",
+                    "within": 8000
+                  },
+                  {
+                    "actor": "a",
+                    "do": "pressKey",
+                    "key": "Escape",
+                    "settleMs": 800
+                  },
+                  {
+                    "actor": "a",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "plus": 5,
+                    "relativeTo": "storefront-before",
+                    "testid": "item-stock",
+                    "within": 8000
+                  }
+                ],
+                "withheld": "diagnostic: establishes that a restock is applied and reaches the storefront"
+              },
+              {
+                "desc": "three purchases and a restock of five during the rush leave stock at start + 2",
+                "id": "202a",
+                "points": 0,
+                "statedBy": "a restock in one warehouse raises the storefront number live",
+                "steps": [
+                  {
+                    "actor": "a",
+                    "as": "rush-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actors": [
+                      "a",
+                      "b",
+                      "c"
+                    ],
+                    "do": "clickConcurrently",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "settleMs": 500,
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "restock-input",
+                    "text": "5"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "restock-submit"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "wait",
+                    "ms": 6000
+                  },
+                  {
+                    "actor": "a",
+                    "do": "pressKey",
+                    "key": "Escape",
+                    "settleMs": 800
+                  },
+                  {
+                    "actor": "a",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "plus": 2,
+                    "relativeTo": "rush-before",
+                    "testid": "item-stock",
+                    "within": 10000
+                  }
+                ],
+                "withheld": "A candidate cross-feature mutation now omits purchase inventory reservation and directly makes this read start + 5 instead of start + 2. Keep at zero until that exact target passes the repeated live Docker mutation gate."
+              }
+            ],
+            "id": 202,
+            "name": "A restock during a rush is not lost",
+            "note": "The rush assertion only means something if a restock works at all, so the control runs first and has to move the number. Without it a restock that never reached the server and a restock lost to a race look identical: both leave stock at start - purchases. The control also separates the two, by reading what the server stored (admin-location-qty) before what the buyer sees (item-stock). Totals are asserted as CHANGES rather than absolute values, because earlier features buy from the same catalogue.",
+            "setup": [
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "a",
+                "do": "signUp",
+                "name": "r1"
+              },
+              {
+                "actor": "b",
+                "do": "signUp",
+                "name": "r2"
+              },
+              {
+                "actor": "c",
+                "do": "signUp",
+                "name": "r3"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "tab1",
+              "tab2",
+              "filler"
+            ],
+            "criteria": [
+              {
+                "desc": "the same item added from two tabs at once becomes one line of two",
+                "id": "203a",
+                "points": 0,
+                "statedBy": "raises its quantity rather than adding a second line",
+                "steps": [
+                  {
+                    "actors": [
+                      "tab1",
+                      "tab2"
+                    ],
+                    "do": "clickConcurrently",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "item-card"
+                    },
+                    "settleMs": 4000,
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "click",
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "tab1",
+                    "contains": "Gaming Mouse",
+                    "count": 1,
+                    "do": "expect",
+                    "testid": "cart-item"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "expectNumber",
+                    "equals": 2,
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "cart-item"
+                    },
+                    "testid": "cart-quantity"
+                  }
+                ],
+                "withheld": "runs clean (2/2) but no mutant has been attempted against it yet."
+              },
+              {
+                "desc": "checking the same cart out twice at once produces one order",
+                "id": "203b",
+                "note": "replayConcurrently replays each actor's LAST POST, so a racing tab must not touch the cart after its checkout is captured — that would overwrite the captured request with an add-to-cart. A third session on the same account fills the cart instead, leaving tab1 and tab2 holding nothing but their checkouts. A checkout carries no JSON body, so it never lands in lastWrites — the replay must select it by URL with the match option, or it silently races the last add-to-cart instead.",
+                "points": 1,
+                "provenBy": "checkout-not-idempotent (postgres-ecom-l1.json): stripping FOR UPDATE from the cart read at checkout made two replayed checkout requests each create an order — the criterion failed on its own assertion (expected exactly 1 order containing Keyboard, found 2). The unmutated app passes, refusing the second checkout with a 400.",
+                "statedBy": "checking out twice must not produce two orders",
+                "steps": [
+                  {
+                    "actor": "tab1",
+                    "do": "click",
+                    "testid": "checkout-submit"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "tab2",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Webcam"
+                  },
+                  {
+                    "actor": "tab2",
+                    "do": "click",
+                    "in": {
+                      "contains": "Webcam",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "tab2",
+                    "do": "wait",
+                    "ms": 1200
+                  },
+                  {
+                    "actor": "tab2",
+                    "do": "click",
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "tab2",
+                    "do": "click",
+                    "testid": "checkout-submit"
+                  },
+                  {
+                    "actor": "tab2",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "filler",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Keyboard"
+                  },
+                  {
+                    "actor": "filler",
+                    "do": "click",
+                    "in": {
+                      "contains": "Keyboard",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "filler",
+                    "do": "wait",
+                    "ms": 2000
+                  },
+                  {
+                    "action": "checkout",
+                    "actors": [
+                      "tab1",
+                      "tab2"
+                    ],
+                    "do": "callConcurrently",
+                    "settleMs": 5000
+                  },
+                  {
+                    "accepted": 1,
+                    "do": "expectCallOutcomes"
+                  },
+                  {
+                    "actor": "filler",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "filler",
+                    "contains": "Keyboard",
+                    "count": 1,
+                    "do": "expect",
+                    "testid": "order-item"
+                  }
+                ],
+                "withheld": "uses the spec's named `checkout` action so it can be issued on either stack. It previously replayed a captured HTTP write, which SpacetimeDB never produces — that client writes over WebSocket — so the criterion reported INCONCLUSIVE there and the two backends were scored out of different totals. Points retained: it has already failed a mutant on the stacks that could run it."
+              }
+            ],
+            "id": 203,
+            "name": "One cart, two tabs, one checkout",
+            "note": "Both tabs reach the item by search rather than trusting the storefront: earlier features in this suite buy things, which re-ranks the top ten. Each tab opens its OWN cart — panel state belongs to a browser context, not to the feature.",
+            "setup": [
+              {
+                "actor": "tab1",
+                "do": "signUp",
+                "name": "twin"
+              },
+              {
+                "actor": "tab2",
+                "do": "signIn",
+                "name": "twin"
+              },
+              {
+                "actor": "filler",
+                "do": "signIn",
+                "name": "twin"
+              },
+              {
+                "actor": "tab1",
+                "do": "fill",
+                "enter": true,
+                "settleMs": 1500,
+                "testid": "search-input",
+                "text": "Gaming Mouse"
+              },
+              {
+                "actor": "tab2",
+                "do": "fill",
+                "enter": true,
+                "settleMs": 1500,
+                "testid": "search-input",
+                "text": "Gaming Mouse"
+              }
+            ]
+          }
+        ],
+        "level": 1,
+        "name": "Storefront and warehouse — contention (WITHHELD)",
+        "note": "Candidate checks score zero until qualification proves the reference passes and the declared mutation fails only its own criterion. Setup failure, inconclusive evidence, a different failed criterion, or collateral regressions do not qualify.",
+        "schemaVersion": 1,
+        "track": "ecommerce",
+        "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses"
+      },
+      "path": "scenarios/01-contention.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "shopper",
+              "impostor"
+            ],
+            "criteria": [
+              {
+                "desc": "a visitor can create an account and is signed in as it",
+                "id": "1a",
+                "points": 1,
+                "statedBy": "a visitor can create an account with a username and password",
+                "steps": [
+                  {
+                    "actor": "shopper",
+                    "contains": "ann",
+                    "do": "expect",
+                    "testid": "current-user",
+                    "within": 6000
+                  }
+                ]
+              },
+              {
+                "desc": "a taken username is refused and does not sign the visitor in as the existing account",
+                "id": "1b",
+                "points": 1,
+                "statedBy": "signing up with a taken username fails with a visible error and\nmust never sign the visitor in as the existing account",
+                "steps": [
+                  {
+                    "actor": "impostor",
+                    "do": "signUp",
+                    "expectFailure": true,
+                    "name": "ann",
+                    "password": "different-pw"
+                  },
+                  {
+                    "actor": "impostor",
+                    "do": "expect",
+                    "testid": "auth-error",
+                    "within": 6000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "impostor",
+                    "do": "expect",
+                    "testid": "current-user"
+                  }
+                ]
+              },
+              {
+                "desc": "a wrong password is refused",
+                "id": "1c",
+                "points": 1,
+                "statedBy": "signing in with a wrong password fails with a visible error",
+                "steps": [
+                  {
+                    "actor": "impostor",
+                    "do": "signIn",
+                    "expectFailure": true,
+                    "name": "ann",
+                    "password": "wrong-pw"
+                  },
+                  {
+                    "actor": "impostor",
+                    "do": "expect",
+                    "testid": "auth-error",
+                    "within": 6000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "impostor",
+                    "do": "expect",
+                    "testid": "current-user"
+                  }
+                ]
+              },
+              {
+                "desc": "signing out and back in returns the same account",
+                "id": "1d",
+                "points": 1,
+                "statedBy": "a signed-in user can sign out, returning to the signed-out state",
+                "steps": [
+                  {
+                    "actor": "shopper",
+                    "do": "click",
+                    "testid": "signout"
+                  },
+                  {
+                    "actor": "shopper",
+                    "do": "expect",
+                    "testid": "signup-username",
+                    "within": 6000
+                  },
+                  {
+                    "actor": "shopper",
+                    "do": "signIn",
+                    "name": "ann"
+                  },
+                  {
+                    "actor": "shopper",
+                    "contains": "ann",
+                    "do": "expect",
+                    "testid": "current-user",
+                    "within": 6000
+                  }
+                ]
+              },
+              {
+                "desc": "the session survives a reload",
+                "id": "1e",
+                "points": 1,
+                "statedBy": "a signed-in session persists across a page reload",
+                "steps": [
+                  {
+                    "actor": "shopper",
+                    "do": "reload",
+                    "settleMs": 4000
+                  },
+                  {
+                    "actor": "shopper",
+                    "contains": "ann",
+                    "do": "expect",
+                    "testid": "current-user",
+                    "within": 6000
+                  }
+                ]
+              }
+            ],
+            "id": 1,
+            "name": "Accounts",
+            "note": "The refusals are attempted by a second, signed-out actor: a client that is already signed in has no sign-up form to submit, so re-using one actor would test nothing.",
+            "setup": [
+              {
+                "actor": "shopper",
+                "do": "signUp",
+                "name": "ann"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "buyer",
+              "visitor"
+            ],
+            "criteria": [
+              {
+                "desc": "a signed-out visitor sees the catalogue with prices and stock",
+                "id": "2a",
+                "points": 1,
+                "statedBy": "every item shows its name, price and current stock",
+                "steps": [
+                  {
+                    "actor": "visitor",
+                    "contains": "Air Purifier",
+                    "do": "expect",
+                    "testid": "item-card"
+                  },
+                  {
+                    "actor": "visitor",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-price"
+                  },
+                  {
+                    "actor": "visitor",
+                    "atLeast": 1,
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "the storefront shows ten items, alphabetically while nothing has been bought",
+                "id": "2b",
+                "points": 1,
+                "statedBy": "the storefront shows the 10 most-purchased items",
+                "steps": [
+                  {
+                    "actor": "visitor",
+                    "count": 10,
+                    "do": "expect",
+                    "testid": "item-card"
+                  },
+                  {
+                    "actor": "visitor",
+                    "contains": "Air Purifier",
+                    "do": "expect",
+                    "testid": "item-card"
+                  },
+                  {
+                    "actor": "visitor",
+                    "contains": "Laptop Stand",
+                    "do": "expect",
+                    "testid": "item-card"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "visitor",
+                    "contains": "Mirrorless Camera",
+                    "do": "expect",
+                    "testid": "item-card"
+                  }
+                ]
+              },
+              {
+                "desc": "a purchase moves the bought item to the front of the ranking, live",
+                "id": "2c",
+                "points": 1,
+                "statedBy": "when anyone buys something, every\nvisitor's storefront updates without a reload",
+                "steps": [
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Coffee Grinder",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "visitor",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "visitor",
+                    "contains": "Coffee Grinder",
+                    "do": "expect",
+                    "in": {
+                      "testid": "item-list"
+                    },
+                    "testid": "item-name"
+                  },
+                  {
+                    "actors": [
+                      "buyer",
+                      "visitor"
+                    ],
+                    "do": "expectAgreement",
+                    "in": {
+                      "contains": "Coffee Grinder",
+                      "testid": "item-card"
+                    },
+                    "numeric": true,
+                    "testid": "item-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "search finds an item that is not on the storefront",
+                "id": "2d",
+                "points": 1,
+                "statedBy": "search covers the whole catalogue, not just the items currently on the storefront",
+                "steps": [
+                  {
+                    "actor": "visitor",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Mirrorless"
+                  },
+                  {
+                    "actor": "visitor",
+                    "contains": "Mirrorless Camera",
+                    "do": "expect",
+                    "in": {
+                      "testid": "search-results"
+                    },
+                    "testid": "item-card"
+                  }
+                ]
+              }
+            ],
+            "id": 2,
+            "name": "Storefront is public and live",
+            "setup": [
+              {
+                "actor": "buyer",
+                "do": "signUp",
+                "name": "dov"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "buyer",
+              "watcher",
+              "visitor"
+            ],
+            "criteria": [
+              {
+                "desc": "a signed-out visitor is offered no way to buy",
+                "id": "3a",
+                "points": 1,
+                "statedBy": "a signed-out visitor sees no buy or\nadd-to-cart action",
+                "steps": [
+                  {
+                    "absent": true,
+                    "actor": "visitor",
+                    "do": "expect",
+                    "testid": "buy-now"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "visitor",
+                    "do": "expect",
+                    "testid": "add-to-cart"
+                  }
+                ]
+              },
+              {
+                "desc": "buying reduces the stock every other client sees, without a reload",
+                "id": "3b",
+                "points": 2,
+                "statedBy": "buying an item reduces its stock by one for everyone",
+                "steps": [
+                  {
+                    "actor": "watcher",
+                    "do": "expectNumber",
+                    "equals": 100,
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "expectNumber",
+                    "equals": 99,
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "visitor",
+                    "do": "expectNumber",
+                    "equals": 99,
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "the purchase is recorded in the buyer's order history at the price paid",
+                "id": "3c",
+                "points": 1,
+                "statedBy": "it creates an order for the buyer,\nvisible in their order history",
+                "steps": [
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "buyer",
+                    "contains": "Espresso Machine",
+                    "do": "expect",
+                    "testid": "order-item"
+                  },
+                  {
+                    "actor": "buyer",
+                    "atLeast": 449,
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "order-item"
+                    },
+                    "testid": "order-total"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "pressKey",
+                    "key": "Escape",
+                    "settleMs": 800
+                  }
+                ]
+              },
+              {
+                "desc": "an item sells out visibly, and a checkout exceeding stock is refused and changes nothing",
+                "id": "3d",
+                "points": 2,
+                "statedBy": "an item with zero stock cannot be bought",
+                "steps": [
+                  {
+                    "actor": "buyer",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Mirrorless Camera"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "wait",
+                    "ms": 800
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "wait",
+                    "ms": 800
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "wait",
+                    "ms": 800
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "wait",
+                    "ms": 800
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "expectNumber",
+                    "equals": 0,
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "testid": "out-of-stock"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "testid": "checkout-submit"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "expect",
+                    "testid": "buy-error",
+                    "within": 6000
+                  },
+                  {
+                    "actor": "buyer",
+                    "contains": "Mirrorless Camera",
+                    "do": "expect",
+                    "testid": "cart-item"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "pressKey",
+                    "key": "Escape",
+                    "settleMs": 800
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "expectNumber",
+                    "equals": 0,
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  }
+                ]
+              }
+            ],
+            "id": 3,
+            "name": "Buying",
+            "setup": [
+              {
+                "actor": "buyer",
+                "do": "signUp",
+                "name": "eli"
+              },
+              {
+                "actor": "watcher",
+                "do": "signUp",
+                "name": "fay"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "tab1",
+              "tab2"
+            ],
+            "criteria": [
+              {
+                "desc": "adding the same item twice raises its quantity instead of adding a second line",
+                "id": "4a",
+                "points": 1,
+                "statedBy": "adding an item that is already in the cart raises its quantity",
+                "steps": [
+                  {
+                    "actor": "tab1",
+                    "do": "click",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "wait",
+                    "ms": 800
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "click",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "click",
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "tab1",
+                    "contains": "Headphones",
+                    "count": 1,
+                    "do": "expect",
+                    "testid": "cart-item"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "expectNumber",
+                    "equals": 2,
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "cart-item"
+                    },
+                    "testid": "cart-quantity"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "pressKey",
+                    "key": "Escape",
+                    "settleMs": 800
+                  }
+                ]
+              },
+              {
+                "desc": "the cart survives a reload",
+                "id": "4b",
+                "points": 1,
+                "statedBy": "the cart survives a reload",
+                "steps": [
+                  {
+                    "actor": "tab1",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Laptop Stand"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "click",
+                    "in": {
+                      "contains": "Laptop Stand",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "reload",
+                    "settleMs": 4000
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "click",
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "tab1",
+                    "contains": "Laptop Stand",
+                    "do": "expect",
+                    "testid": "cart-item"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "pressKey",
+                    "key": "Escape",
+                    "settleMs": 800
+                  }
+                ]
+              },
+              {
+                "desc": "the same account signed in elsewhere sees one cart, live",
+                "id": "4c",
+                "points": 2,
+                "statedBy": "the same account signed\nin twice sees one cart, and a change made in one place appears in the other without a\nreload",
+                "steps": [
+                  {
+                    "actor": "tab2",
+                    "do": "signIn",
+                    "name": "gus"
+                  },
+                  {
+                    "actor": "tab2",
+                    "do": "click",
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "tab2",
+                    "contains": "Laptop Stand",
+                    "do": "expect",
+                    "testid": "cart-item"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Induction Cooktop"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "click",
+                    "in": {
+                      "contains": "Induction Cooktop",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "tab2",
+                    "contains": "Induction Cooktop",
+                    "do": "expect",
+                    "testid": "cart-item",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "checkout creates one order, reduces stock and empties the cart",
+                "id": "4d",
+                "points": 2,
+                "statedBy": "checkout turns the cart into one order, reduces stock for every line, and\nempties the cart",
+                "steps": [
+                  {
+                    "actor": "tab1",
+                    "do": "click",
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "click",
+                    "testid": "checkout-submit"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "wait",
+                    "ms": 2000
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "expect",
+                    "testid": "empty-cart"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "pressKey",
+                    "key": "Escape",
+                    "settleMs": 800
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1200,
+                    "testid": "search-input",
+                    "text": ""
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "expectNumber",
+                    "equals": 98,
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "tab1",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "tab1",
+                    "contains": "Headphones",
+                    "do": "expect",
+                    "testid": "order-item"
+                  }
+                ]
+              }
+            ],
+            "id": 4,
+            "name": "Cart belongs to the account",
+            "setup": [
+              {
+                "actor": "tab1",
+                "do": "signUp",
+                "name": "gus"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "author",
+              "other",
+              "visitor"
+            ],
+            "criteria": [
+              {
+                "desc": "a customer can review an item and everyone sees it, signed out included",
+                "id": "6a",
+                "points": 2,
+                "statedBy": "reviews are visible to everyone, including signed-out visitors",
+                "steps": [
+                  {
+                    "actor": "author",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Induction Cooktop"
+                  },
+                  {
+                    "actor": "author",
+                    "do": "click",
+                    "in": {
+                      "contains": "Induction Cooktop",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-name"
+                  },
+                  {
+                    "actor": "author",
+                    "do": "fill",
+                    "testid": "review-rating",
+                    "text": "4"
+                  },
+                  {
+                    "actor": "author",
+                    "do": "fill",
+                    "testid": "review-input",
+                    "text": "solid mold"
+                  },
+                  {
+                    "actor": "author",
+                    "do": "click",
+                    "testid": "review-submit"
+                  },
+                  {
+                    "actor": "author",
+                    "contains": "solid mold",
+                    "do": "expect",
+                    "testid": "review-item"
+                  },
+                  {
+                    "actor": "visitor",
+                    "do": "click",
+                    "in": {
+                      "contains": "Induction Cooktop",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-name"
+                  },
+                  {
+                    "actor": "visitor",
+                    "contains": "solid mold",
+                    "do": "expect",
+                    "testid": "review-item",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "one review per customer per item — a second does not add a duplicate",
+                "id": "6b",
+                "points": 1,
+                "statedBy": "one review per customer per item",
+                "steps": [
+                  {
+                    "actor": "author",
+                    "do": "fill",
+                    "testid": "review-rating",
+                    "text": "2"
+                  },
+                  {
+                    "actor": "author",
+                    "do": "fill",
+                    "testid": "review-input",
+                    "text": "changed my mind"
+                  },
+                  {
+                    "actor": "author",
+                    "do": "click",
+                    "testid": "review-submit"
+                  },
+                  {
+                    "actor": "author",
+                    "do": "wait",
+                    "ms": 2000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "author",
+                    "contains": "solid mold",
+                    "do": "expect",
+                    "testid": "review-item"
+                  }
+                ]
+              },
+              {
+                "desc": "the average rating reflects both reviewers, live",
+                "id": "6c",
+                "points": 1,
+                "statedBy": "each item shows its average rating, which updates live as reviews arrive",
+                "steps": [
+                  {
+                    "actor": "other",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Induction Cooktop"
+                  },
+                  {
+                    "actor": "other",
+                    "do": "click",
+                    "in": {
+                      "contains": "Induction Cooktop",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-name"
+                  },
+                  {
+                    "actor": "other",
+                    "do": "fill",
+                    "testid": "review-rating",
+                    "text": "4"
+                  },
+                  {
+                    "actor": "other",
+                    "do": "fill",
+                    "testid": "review-input",
+                    "text": "does the job"
+                  },
+                  {
+                    "actor": "other",
+                    "do": "click",
+                    "testid": "review-submit"
+                  },
+                  {
+                    "actor": "other",
+                    "do": "expectNumber",
+                    "equals": 3,
+                    "testid": "review-average",
+                    "within": 10000
+                  },
+                  {
+                    "actors": [
+                      "author",
+                      "other"
+                    ],
+                    "do": "expectAgreement",
+                    "numeric": true,
+                    "testid": "review-average"
+                  }
+                ]
+              }
+            ],
+            "id": 6,
+            "name": "Reviews",
+            "note": "Both reviewers buy the item in setup: reviews are gated on a purchase, so an unpurchased reviewer would be refused by a compliant app.",
+            "setup": [
+              {
+                "actor": "author",
+                "do": "signUp",
+                "name": "hal"
+              },
+              {
+                "actor": "other",
+                "do": "signUp",
+                "name": "ivy"
+              },
+              {
+                "actor": "author",
+                "do": "click",
+                "in": {
+                  "contains": "Induction Cooktop",
+                  "testid": "item-card"
+                },
+                "testid": "buy-now"
+              },
+              {
+                "actor": "author",
+                "do": "wait",
+                "ms": 800
+              },
+              {
+                "actor": "other",
+                "do": "click",
+                "in": {
+                  "contains": "Induction Cooktop",
+                  "testid": "item-card"
+                },
+                "testid": "buy-now"
+              },
+              {
+                "actor": "other",
+                "do": "wait",
+                "ms": 800
+              }
+            ]
+          },
+          {
+            "actors": [
+              "admin",
+              "customer",
+              "visitor"
+            ],
+            "criteria": [
+              {
+                "desc": "the admin area is for admins only",
+                "id": "7a",
+                "points": 1,
+                "statedBy": "admin accounts see an admin area; customers do not",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "expect",
+                    "testid": "admin-link"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "customer",
+                    "do": "expect",
+                    "testid": "admin-link"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "customer",
+                    "do": "expect",
+                    "testid": "admin-panel"
+                  }
+                ]
+              },
+              {
+                "desc": "admin lists every item, every warehouse, and what each warehouse holds",
+                "id": "7b",
+                "points": 1,
+                "statedBy": "admin lists every item with its stock, every warehouse, and the stock of\neach item in each warehouse",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "testid": "admin-link"
+                  },
+                  {
+                    "actor": "admin",
+                    "count": 13,
+                    "do": "expect",
+                    "testid": "admin-item-row"
+                  },
+                  {
+                    "actor": "admin",
+                    "contains": "East",
+                    "do": "expect",
+                    "testid": "admin-warehouse-item"
+                  },
+                  {
+                    "actor": "admin",
+                    "contains": "West",
+                    "do": "expect",
+                    "testid": "admin-warehouse-item"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "equals": 100,
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "admin-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "the storefront stock is the sum across warehouses, and a restock raises it live",
+                "id": "7c",
+                "points": 2,
+                "statedBy": "an item's stock on the storefront is the sum of that item's units across all\nwarehouses",
+                "steps": [
+                  {
+                    "actor": "visitor",
+                    "do": "pressKey",
+                    "key": "Escape",
+                    "settleMs": 800
+                  },
+                  {
+                    "actor": "visitor",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Gaming Mouse"
+                  },
+                  {
+                    "actor": "visitor",
+                    "do": "expectNumber",
+                    "equals": 100,
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "restock-input",
+                    "text": "25"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "restock-submit"
+                  },
+                  {
+                    "actor": "visitor",
+                    "do": "expectNumber",
+                    "equals": 125,
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "equals": 125,
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "admin-stock"
+                  }
+                ]
+              }
+            ],
+            "id": 7,
+            "name": "Admin and warehouses",
+            "setup": [
+              {
+                "actor": "customer",
+                "do": "signUp",
+                "name": "jon"
+              },
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              }
+            ]
+          }
+        ],
+        "level": 1,
+        "name": "Storefront and warehouse — features",
+        "note": "Each feature is given its own seeded items where it mutates stock, because features share one database and a purchase in one would otherwise move another's numbers. Items reserved per feature: F2 Coffee Grinder, F3 Espresso Machine + Mirrorless Camera, F4 Headphones + Laptop Stand, F6 Induction Cooktop, F7 Gaming Mouse. Panels are closed after use and items are reached via search, because the storefront shows only the top ten and earlier features change that ranking.",
+        "schemaVersion": 1,
+        "track": "ecommerce",
+        "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses"
+      },
+      "path": "scenarios/01-features.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "buyer",
+              "guest"
+            ],
+            "criteria": [
+              {
+                "desc": "a purchase request replayed without a session creates no order and moves no stock",
+                "id": "101a",
+                "points": 2,
+                "statedBy": "the server must refuse a purchase request that arrives without a valid session",
+                "steps": [
+                  {
+                    "actor": "buyer",
+                    "do": "expectNumber",
+                    "equals": 100,
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "wait",
+                    "ms": 1500
+                  },
+                  {
+                    "actor": "guest",
+                    "do": "replayAs",
+                    "from": "buyer",
+                    "match": "buy",
+                    "settleMs": 2500
+                  },
+                  {
+                    "actor": "guest",
+                    "do": "expectReplayRejected"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "expectNumber",
+                    "equals": 99,
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  }
+                ]
+              }
+            ],
+            "id": 101,
+            "name": "Purchase requires an account",
+            "setup": [
+              {
+                "actor": "buyer",
+                "do": "signUp",
+                "name": "kim"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "victim",
+              "attacker"
+            ],
+            "criteria": [
+              {
+                "desc": "an order cannot be placed in someone else's name by editing the request",
+                "id": "102a",
+                "points": 2,
+                "statedBy": "knowing someone's username must never grant access to it",
+                "steps": [
+                  {
+                    "actor": "attacker",
+                    "do": "click",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "attacker",
+                    "do": "wait",
+                    "ms": 1500
+                  },
+                  {
+                    "actor": "attacker",
+                    "do": "forgeWrite",
+                    "fromActor": "victim",
+                    "settleMs": 2500
+                  },
+                  {
+                    "actor": "attacker",
+                    "do": "expectForgeryRejected"
+                  },
+                  {
+                    "actor": "victim",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "victim",
+                    "contains": "Desk Lamp",
+                    "do": "expect",
+                    "testid": "order-item"
+                  }
+                ]
+              }
+            ],
+            "id": 102,
+            "name": "Purchases are attributed to whoever made them",
+            "setup": [
+              {
+                "actor": "victim",
+                "do": "signUp",
+                "name": "lee"
+              },
+              {
+                "actor": "attacker",
+                "do": "signUp",
+                "name": "mel"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "admin",
+              "customer"
+            ],
+            "criteria": [
+              {
+                "desc": "a restock replayed by a customer is refused and changes no stock",
+                "id": "103a",
+                "points": 2,
+                "statedBy": "the server must refuse admin actions from a non-admin account",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "testid": "admin-link"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "restock-input",
+                    "text": "10"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "restock-submit"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "wait",
+                    "ms": 2000
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "pressKey",
+                    "key": "Escape",
+                    "settleMs": 800
+                  },
+                  {
+                    "actor": "customer",
+                    "as": "purifier-after-admin-restock",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "replayAs",
+                    "from": "admin",
+                    "match": "restock",
+                    "settleMs": 2500
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectReplayRejected"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "item-card"
+                    },
+                    "plus": 0,
+                    "relativeTo": "purifier-after-admin-restock",
+                    "testid": "item-stock"
+                  }
+                ]
+              }
+            ],
+            "id": 103,
+            "name": "Stock is administered by admins only",
+            "setup": [
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "customer",
+                "do": "signUp",
+                "name": "ned"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "buyer"
+            ],
+            "criteria": [
+              {
+                "desc": "a purchase request with the price edited does not sell the item for less",
+                "id": "104a",
+                "points": 2,
+                "statedBy": "the price at the time of purchase",
+                "steps": [
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "wait",
+                    "ms": 1500
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "replayAs",
+                    "from": "buyer",
+                    "match": "buy",
+                    "settleMs": 2500,
+                    "swap": {
+                      "find": "449",
+                      "with": "1"
+                    }
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "expectReplayRejected"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "buyer",
+                    "atLeast": 449,
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "order-item"
+                    },
+                    "testid": "order-total"
+                  }
+                ]
+              }
+            ],
+            "id": 104,
+            "name": "The price is the store's to set",
+            "setup": [
+              {
+                "actor": "buyer",
+                "do": "signUp",
+                "name": "oli"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "shopper"
+            ],
+            "criteria": [
+              {
+                "desc": "cart and order history survive a reload as the same account",
+                "id": "105a",
+                "points": 1,
+                "statedBy": "persists across a page reload",
+                "steps": [
+                  {
+                    "actor": "shopper",
+                    "do": "click",
+                    "in": {
+                      "contains": "Keyboard",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "shopper",
+                    "do": "click",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "shopper",
+                    "do": "reload",
+                    "settleMs": 4000
+                  },
+                  {
+                    "actor": "shopper",
+                    "contains": "pat",
+                    "do": "expect",
+                    "testid": "current-user"
+                  },
+                  {
+                    "actor": "shopper",
+                    "do": "click",
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "shopper",
+                    "contains": "Keyboard",
+                    "do": "expect",
+                    "testid": "cart-item"
+                  },
+                  {
+                    "actor": "shopper",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "shopper",
+                    "contains": "Headphones",
+                    "do": "expect",
+                    "testid": "order-item"
+                  }
+                ]
+              },
+              {
+                "desc": "the same account survives the connection dropping and coming back",
+                "id": "105b",
+                "points": 1,
+                "statedBy": "across the connection dropping and re-establishing",
+                "steps": [
+                  {
+                    "actor": "shopper",
+                    "do": "setOffline",
+                    "offline": true,
+                    "settleMs": 3000
+                  },
+                  {
+                    "actor": "shopper",
+                    "do": "setOffline",
+                    "offline": false,
+                    "settleMs": 6000
+                  },
+                  {
+                    "actor": "shopper",
+                    "contains": "pat",
+                    "do": "expect",
+                    "testid": "current-user"
+                  },
+                  {
+                    "actor": "shopper",
+                    "do": "click",
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "shopper",
+                    "contains": "Keyboard",
+                    "do": "expect",
+                    "testid": "cart-item"
+                  }
+                ]
+              }
+            ],
+            "id": 105,
+            "name": "An account keeps what belongs to it",
+            "setup": [
+              {
+                "actor": "shopper",
+                "do": "signUp",
+                "name": "pat"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "one",
+              "two"
+            ],
+            "criteria": [
+              {
+                "desc": "a customer's order history contains only their own orders",
+                "id": "106a",
+                "points": 1,
+                "statedBy": "a customer sees only their own orders",
+                "steps": [
+                  {
+                    "actor": "one",
+                    "do": "click",
+                    "in": {
+                      "contains": "Coffee Grinder",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "one",
+                    "do": "wait",
+                    "ms": 2000
+                  },
+                  {
+                    "actor": "two",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "two",
+                    "contains": "Coffee Grinder",
+                    "do": "expect",
+                    "testid": "order-item"
+                  }
+                ]
+              }
+            ],
+            "id": 106,
+            "name": "One customer's orders are not another's",
+            "setup": [
+              {
+                "actor": "one",
+                "do": "signUp",
+                "name": "quin"
+              },
+              {
+                "actor": "two",
+                "do": "signUp",
+                "name": "ros"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "buyer",
+              "admin"
+            ],
+            "criteria": [
+              {
+                "desc": "revenue rises by exactly what was bought",
+                "id": "107a",
+                "points": 1,
+                "statedBy": "the sum of all order totals",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "testid": "admin-link"
+                  },
+                  {
+                    "actor": "admin",
+                    "as": "revenue-before",
+                    "do": "recordNumber",
+                    "testid": "admin-revenue"
+                  },
+                  {
+                    "actor": "admin",
+                    "as": "brick-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Laptop Stand",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "admin-stock"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "pressKey",
+                    "key": "Escape",
+                    "settleMs": 800
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Laptop Stand",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "wait",
+                    "ms": 1000
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Laptop Stand",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "wait",
+                    "ms": 2000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "plus": 58,
+                    "relativeTo": "revenue-before",
+                    "testid": "admin-revenue",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "what the store sold is what left the warehouses, and a fresh client agrees",
+                "id": "107b",
+                "points": 1,
+                "statedBy": "must always equal what the orders themselves add up to",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Laptop Stand",
+                      "testid": "admin-item-row"
+                    },
+                    "plus": -2,
+                    "relativeTo": "brick-before",
+                    "testid": "admin-stock"
+                  },
+                  {
+                    "actor": "buyer",
+                    "do": "freshClient"
+                  },
+                  {
+                    "actor": "buyer-fresh",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Laptop Stand",
+                      "testid": "item-card"
+                    },
+                    "plus": -2,
+                    "relativeTo": "brick-before",
+                    "testid": "item-stock"
+                  }
+                ]
+              }
+            ],
+            "id": 107,
+            "name": "The books balance",
+            "setup": [
+              {
+                "actor": "buyer",
+                "do": "signUp",
+                "name": "sam"
+              },
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "owner",
+              "stranger"
+            ],
+            "criteria": [
+              {
+                "desc": "someone who never bought the item cannot review it",
+                "id": "108a",
+                "points": 2,
+                "statedBy": "refuses a review from someone who has never ordered the item",
+                "steps": [
+                  {
+                    "actor": "stranger",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Webcam"
+                  },
+                  {
+                    "actor": "stranger",
+                    "do": "click",
+                    "in": {
+                      "contains": "Webcam",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-name"
+                  },
+                  {
+                    "actor": "stranger",
+                    "do": "fill",
+                    "testid": "review-rating",
+                    "text": "5"
+                  },
+                  {
+                    "actor": "stranger",
+                    "do": "fill",
+                    "testid": "review-input",
+                    "text": "never bought this"
+                  },
+                  {
+                    "actor": "stranger",
+                    "do": "click",
+                    "testid": "review-submit"
+                  },
+                  {
+                    "actor": "stranger",
+                    "do": "expect",
+                    "testid": "review-error",
+                    "within": 6000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "stranger",
+                    "contains": "never bought this",
+                    "do": "expect",
+                    "testid": "review-item"
+                  }
+                ]
+              },
+              {
+                "desc": "buying the item earns the right to review it",
+                "id": "108b",
+                "points": 1,
+                "statedBy": "a review of an item they have bought",
+                "steps": [
+                  {
+                    "actor": "owner",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Webcam"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "click",
+                    "in": {
+                      "contains": "Webcam",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "wait",
+                    "ms": 2000
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "click",
+                    "in": {
+                      "contains": "Webcam",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-name"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "fill",
+                    "testid": "review-rating",
+                    "text": "4"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "fill",
+                    "testid": "review-input",
+                    "text": "bought and used it"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "click",
+                    "testid": "review-submit"
+                  },
+                  {
+                    "actor": "owner",
+                    "contains": "bought and used it",
+                    "do": "expect",
+                    "testid": "review-item",
+                    "within": 8000
+                  }
+                ]
+              }
+            ],
+            "id": 108,
+            "name": "A review is a claim about a purchase",
+            "setup": [
+              {
+                "actor": "owner",
+                "do": "signUp",
+                "name": "tam"
+              },
+              {
+                "actor": "stranger",
+                "do": "signUp",
+                "name": "uma"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "owner",
+              "stranger"
+            ],
+            "criteria": [
+              {
+                "desc": "one customer’s cart request replayed by another leaves the owner’s cart untouched",
+                "id": "109a",
+                "note": "A cart add request that contains only an item and quantity is legitimately reusable by another authenticated customer: the server applies it to the caller's own cart. The ownership assertion below is the security boundary; requiring every replay to return non-2xx incorrectly rejects identity-derived APIs.",
+                "points": 2,
+                "statedBy": "nobody else can read or change it",
+                "steps": [
+                  {
+                    "actor": "owner",
+                    "do": "click",
+                    "in": {
+                      "contains": "Coffee Grinder",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "wait",
+                    "ms": 1500
+                  },
+                  {
+                    "actor": "stranger",
+                    "do": "replayAs",
+                    "from": "owner",
+                    "match": "cart",
+                    "settleMs": 2500
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "click",
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "owner",
+                    "do": "expectNumber",
+                    "equals": 1,
+                    "in": {
+                      "contains": "Coffee Grinder",
+                      "testid": "cart-item"
+                    },
+                    "testid": "cart-quantity"
+                  }
+                ]
+              },
+              {
+                "desc": "a quantity below one is refused rather than credited",
+                "id": "109b",
+                "points": 1,
+                "statedBy": "a request carrying zero or a negative quantity is refused and changes nothing",
+                "steps": [
+                  {
+                    "actor": "owner",
+                    "do": "replayAs",
+                    "from": "owner",
+                    "match": "cart",
+                    "settleMs": 2500,
+                    "swap": {
+                      "find": "\"quantity\":1",
+                      "with": "\"quantity\":-3"
+                    }
+                  },
+                  {
+                    "actor": "owner",
+                    "atLeast": 0,
+                    "do": "expectNumber",
+                    "testid": "cart-total"
+                  },
+                  {
+                    "actor": "owner",
+                    "atLeast": 1,
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Coffee Grinder",
+                      "testid": "cart-item"
+                    },
+                    "testid": "cart-quantity"
+                  }
+                ]
+              }
+            ],
+            "id": 109,
+            "name": "A cart is nobody else’s business",
+            "setup": [
+              {
+                "actor": "owner",
+                "do": "signUp",
+                "name": "vic"
+              },
+              {
+                "actor": "stranger",
+                "do": "signUp",
+                "name": "wes"
+              }
+            ]
+          }
+        ],
+        "level": 1,
+        "name": "Storefront and warehouse — invariants",
+        "note": "Cross-cutting properties, scored separately from features because an app can implement every feature and still let anyone spend anyone else's money. Each is stated as an outcome a customer would recognise, not as a protocol detail — a backend must not lose points for being harder to inspect, nor gain them for it. 108 and 109 cover what a customer may assert about things that are not theirs: a rating is a claim about a purchase, and a cart belongs to exactly one account.",
+        "schemaVersion": 1,
+        "track": "ecommerce",
+        "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses"
+      },
+      "path": "scenarios/01-invariants.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "viewer"
+            ],
+            "criteria": [
+              {
+                "desc": "a back-office script sets Desk Lamp's East stock to 5, directly in the database; an anonymous viewer with the storefront already open sees 50 without touching the page",
+                "id": "901a",
+                "note": "WITHHELD until proven against a mutant (backoffice-writes-via-server) and a real failing build. The script is the app's own scripts/backoffice.mjs, required by the spec to write to the database without the web server's help — the way a cron job or another team's service would.",
+                "points": 0,
+                "statedBy": "when data changes by a path its server never saw",
+                "steps": [
+                  {
+                    "do": "dbSetStock",
+                    "item": "Desk Lamp",
+                    "quantity": 5,
+                    "settleMs": 4000,
+                    "warehouse": "East"
+                  },
+                  {
+                    "actor": "viewer",
+                    "do": "expectNumber",
+                    "equals": 50,
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "the out-of-band change survives a reload — the page did not merely patch its own memory",
+                "id": "901b",
+                "note": "WITHHELD — promoted together with 901a.",
+                "points": 0,
+                "statedBy": "the app must remain correct - and its open pages current",
+                "steps": [
+                  {
+                    "actor": "viewer",
+                    "do": "reload",
+                    "settleMs": 3000
+                  },
+                  {
+                    "actor": "viewer",
+                    "do": "expectNumber",
+                    "equals": 50,
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "a stock correction that lands while the app server is down shows on an open storefront once the server returns: East 5 + West 10 = 15, no reload",
+                "id": "901c",
+                "note": "WITHHELD — same promotion rule, plus this is the anti-cheat phase: a script that talks to the app server fails here outright. Fire-and-forget event relays (NOTIFY) also fail unless the app refetches on reconnect.",
+                "points": 1,
+                "provenBy": "PROMOTED 2026-08-09 on evidence from two real builds rather than a mutant, which is stronger: it FAILED postgres-ecom-run0 (a one-shot build that scored 50/50 on features and invariants) and PASSED spacetime-ecom-run0 the same day. The postgres app calls pg_notify from its route handlers, so a correction written directly to the database while the server was down was never announced and nothing reconciled on reconnect: the database read 15 and the storefront read 50. SpacetimeDB re-reads committed state on resubscribe and showed 15. 901a and 901b pass on both stacks and stay at 0 — a criterion nothing has ever failed has not yet shown it can discriminate.",
+                "statedBy": "a page that was open across a restart must end up showing the current numbers",
+                "steps": [
+                  {
+                    "do": "stopAppServer"
+                  },
+                  {
+                    "do": "dbSetStock",
+                    "item": "Desk Lamp",
+                    "quantity": 10,
+                    "settleMs": 4000,
+                    "warehouse": "West"
+                  },
+                  {
+                    "do": "startAppServer"
+                  },
+                  {
+                    "actor": "viewer",
+                    "do": "expectNumber",
+                    "equals": 15,
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock",
+                    "within": 20000
+                  }
+                ]
+              },
+              {
+                "desc": "the client, not the server, misses the window: a correction lands while this browser is disconnected, and the page is current again once it reconnects",
+                "id": "901d",
+                "points": 0,
+                "steps": [
+                  {
+                    "actor": "viewer",
+                    "do": "setOffline",
+                    "offline": true
+                  },
+                  {
+                    "do": "dbSetStock",
+                    "item": "Desk Lamp",
+                    "quantity": 7,
+                    "settleMs": 4000,
+                    "warehouse": "East"
+                  },
+                  {
+                    "actor": "viewer",
+                    "do": "setOffline",
+                    "offline": false
+                  },
+                  {
+                    "actor": "viewer",
+                    "do": "expectNumber",
+                    "equals": 17,
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock",
+                    "within": 20000
+                  }
+                ],
+                "withheld": "WITHHELD until it has failed one real build and passed another, the same gate 901c cleared. Distinct from 901c: there the SERVER was down, so nothing was listening at all. Here the server stays up and sees the write; it is this CLIENT that was disconnected. An app that resumes its stream on reconnect without asking for current state stays wrong, and a dropped connection is far more common than a deploy — a closed laptop, a tunnel, a flaky phone."
+              }
+            ],
+            "id": 901,
+            "name": "A write from outside the app is visible without reload",
+            "setup": [
+              {
+                "actor": "viewer",
+                "do": "expectNumber",
+                "equals": 100,
+                "in": {
+                  "contains": "Desk Lamp",
+                  "testid": "item-card"
+                },
+                "testid": "item-stock"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "reader",
+              "reviewer"
+            ],
+            "criteria": [
+              {
+                "desc": "one customer opens the Keyboard's reviews at the same moment another posts one: the opener ends with that review exactly once — not zero (stale fetch), not twice (fetch merged with its own live echo)",
+                "id": "902a",
+                "note": "WITHHELD until proven against a mutant (fetch-then-append-dupe) and a real failing build. The race window is real and the criterion may need repetition to be reliable; INCONCLUSIVE on a missed race, never a false FAIL.",
+                "points": 0,
+                "steps": [
+                  {
+                    "branches": [
+                      [
+                        {
+                          "actor": "reader",
+                          "do": "click",
+                          "in": {
+                            "contains": "Keyboard",
+                            "testid": "item-card"
+                          },
+                          "testid": "item-name"
+                        }
+                      ],
+                      [
+                        {
+                          "actor": "reviewer",
+                          "do": "fill",
+                          "testid": "review-input",
+                          "text": "race-review-kbd"
+                        },
+                        {
+                          "actor": "reviewer",
+                          "do": "click",
+                          "testid": "review-submit"
+                        }
+                      ]
+                    ],
+                    "do": "race",
+                    "settleMs": 4000
+                  },
+                  {
+                    "actor": "reader",
+                    "contains": "race-review-kbd",
+                    "do": "expectElementCount",
+                    "equals": 1,
+                    "testid": "review-item",
+                    "within": 10000
+                  }
+                ]
+              }
+            ],
+            "id": 902,
+            "name": "A list being opened while its contents change",
+            "setup": [
+              {
+                "actor": "reviewer",
+                "do": "signUp",
+                "name": "raceR"
+              },
+              {
+                "actor": "reader",
+                "do": "signUp",
+                "name": "raceL"
+              },
+              {
+                "actor": "reviewer",
+                "do": "click",
+                "in": {
+                  "contains": "Keyboard",
+                  "testid": "item-card"
+                },
+                "testid": "buy-now"
+              },
+              {
+                "actor": "reviewer",
+                "do": "wait",
+                "ms": 800
+              },
+              {
+                "actor": "reviewer",
+                "do": "click",
+                "in": {
+                  "contains": "Keyboard",
+                  "testid": "item-card"
+                },
+                "settleMs": 1200,
+                "testid": "item-name"
+              },
+              {
+                "actor": "reviewer",
+                "do": "fill",
+                "testid": "review-rating",
+                "text": "5"
+              }
+            ]
+          }
+        ],
+        "level": 1,
+        "name": "Storefront and warehouse — systems",
+        "note": "Properties of the system, not of any one feature: what happens when the database changes underneath the app, and when two things happen at the same time. These are the failures that appear in production and never in a demo — a broadcast layer only announces writes that went through it, and a fetch-then-merge list drops or duplicates whatever moved while it was fetching. Every criterion is withheld at 0 points until it demonstrably fails a real build AND its mutant is CAUGHT, the same promotion rule as contention.",
+        "schemaVersion": 1,
+        "track": "ecommerce",
+        "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses"
+      },
+      "path": "scenarios/01-systems.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "customer",
+              "staff",
+              "admin"
+            ],
+            "criteria": [
+              {
+                "desc": "an order placed by a customer appears in the staff queue without a reload",
+                "id": "1a",
+                "points": 2,
+                "statedBy": "appears in the fulfilment queue in the order it was placed",
+                "steps": [
+                  {
+                    "actor": "staff",
+                    "do": "click",
+                    "testid": "staff-link"
+                  },
+                  {
+                    "actor": "staff",
+                    "as": "depth-before",
+                    "do": "recordNumber",
+                    "testid": "queue-depth"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Desk Lamp"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "staff",
+                    "contains": "Desk Lamp",
+                    "do": "expect",
+                    "testid": "queue-item",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "staff",
+                    "do": "expectNumber",
+                    "plus": 1,
+                    "relativeTo": "depth-before",
+                    "testid": "queue-depth"
+                  }
+                ]
+              },
+              {
+                "desc": "the queue names the warehouse the order will ship from",
+                "id": "1b",
+                "points": 1,
+                "statedBy": "which warehouse each will ship from",
+                "steps": [
+                  {
+                    "actor": "staff",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "queue-item"
+                    },
+                    "testid": "queue-warehouse"
+                  }
+                ]
+              },
+              {
+                "desc": "shipping removes the order from the queue for staff and marks it shipped for the customer, live",
+                "id": "1c",
+                "points": 2,
+                "statedBy": "it leaves the queue for everyone watching the queue, and the customer's order history shows it as shipped, live",
+                "steps": [
+                  {
+                    "actor": "staff",
+                    "do": "click",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "queue-item"
+                    },
+                    "testid": "ship-submit"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "staff",
+                    "contains": "Desk Lamp",
+                    "do": "expect",
+                    "testid": "queue-item",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "customer",
+                    "contains": "hipped",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "order-item"
+                    },
+                    "testid": "order-status",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "the fulfilment area is for staff and admins, not customers",
+                "id": "1d",
+                "points": 1,
+                "statedBy": "a staff account signs in like anyone else but sees the fulfilment area instead of the admin area",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "expect",
+                    "testid": "staff-link"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "customer",
+                    "do": "expect",
+                    "testid": "staff-link"
+                  }
+                ]
+              },
+              {
+                "desc": "the server refuses a ship request from a customer, not just the button",
+                "id": "1e",
+                "points": 2,
+                "statedBy": "staff cannot change prices or create items; admins can do everything staff can",
+                "steps": [
+                  {
+                    "actor": "customer",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Webcam"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Webcam",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "replayAs",
+                    "from": "staff",
+                    "match": "ship",
+                    "namedAction": {
+                      "args": [
+                        0
+                      ],
+                      "id": "ship",
+                      "path": "/api/fulfilment/ship",
+                      "reducer": "ship_order"
+                    },
+                    "namedTarget": {
+                      "attribute": "data-entity-id",
+                      "contains": "Webcam",
+                      "testid": "order-item",
+                      "valueType": "number"
+                    },
+                    "settleMs": 2500,
+                    "swap": {
+                      "find": "Desk Lamp",
+                      "with": "Webcam"
+                    }
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectReplayRejected"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Webcam",
+                      "testid": "order-item"
+                    },
+                    "notContains": "hipped",
+                    "testid": "order-status"
+                  }
+                ]
+              }
+            ],
+            "id": 1,
+            "name": "Fulfilment queue",
+            "setup": [
+              {
+                "actor": "customer",
+                "do": "signUp",
+                "name": "fq"
+              },
+              {
+                "actor": "staff",
+                "do": "signIn",
+                "exact": true,
+                "name": "staff",
+                "password": "stackbench-staff-2026"
+              },
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "admin",
+              "staff",
+              "visitor"
+            ],
+            "criteria": [
+              {
+                "desc": "a transfer moves stock without creating or destroying any",
+                "id": "2a",
+                "points": 3,
+                "statedBy": "a transfer moves stock, it does not create or destroy it",
+                "steps": [
+                  {
+                    "actor": "visitor",
+                    "as": "total-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "admin",
+                    "as": "east-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "admin-location-qty"
+                  },
+                  {
+                    "actor": "admin",
+                    "as": "west-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "West",
+                      "testid": "admin-warehouse-item"
+                    },
+                    "testid": "warehouse-total"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-from",
+                    "text": "East"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-to",
+                    "text": "West"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-qty",
+                    "text": "10"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-submit"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-location-row"
+                    },
+                    "plus": -10,
+                    "relativeTo": "east-before",
+                    "testid": "admin-location-qty"
+                  },
+                  {
+                    "actor": "visitor",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "item-card"
+                    },
+                    "plus": 0,
+                    "relativeTo": "total-before",
+                    "testid": "item-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "the warehouse totals move live as stock is transferred",
+                "id": "2b",
+                "points": 2,
+                "statedBy": "the per-warehouse numbers staff and admins see both move at once",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "West",
+                      "testid": "admin-warehouse-item"
+                    },
+                    "plus": 10,
+                    "relativeTo": "west-before",
+                    "testid": "warehouse-total",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "a transfer that would overdraw a warehouse is refused and changes nothing",
+                "id": "2c",
+                "points": 2,
+                "statedBy": "a transfer that would leave a warehouse short is refused and changes nothing",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "as": "total-guard",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "admin-stock"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-from",
+                    "text": "East"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-to",
+                    "text": "West"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-qty",
+                    "text": "99999"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-submit"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expect",
+                    "testid": "order-error",
+                    "within": 6000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "plus": 0,
+                    "relativeTo": "total-guard",
+                    "testid": "admin-stock"
+                  }
+                ]
+              }
+            ],
+            "id": 2,
+            "name": "Moving stock between warehouses",
+            "setup": [
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "staff",
+                "do": "signIn",
+                "exact": true,
+                "name": "staff",
+                "password": "stackbench-staff-2026"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "testid": "admin-link"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "customer",
+              "staff",
+              "admin"
+            ],
+            "criteria": [
+              {
+                "desc": "cancelling a pending order returns its stock, empties it from the queue and lowers revenue",
+                "id": "3a",
+                "points": 3,
+                "statedBy": "the stock goes back to the warehouse it came from, the order leaves the fulfilment queue, and revenue falls",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "as": "rev-before",
+                    "do": "recordNumber",
+                    "testid": "admin-revenue"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Coffee Grinder"
+                  },
+                  {
+                    "actor": "customer",
+                    "as": "stock-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Coffee Grinder",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Coffee Grinder",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Coffee Grinder",
+                      "testid": "order-item"
+                    },
+                    "testid": "cancel-order"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "absent": true,
+                    "actor": "staff",
+                    "contains": "Coffee Grinder",
+                    "do": "expect",
+                    "testid": "queue-item",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "plus": 0,
+                    "relativeTo": "rev-before",
+                    "testid": "admin-revenue",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "pressKey",
+                    "key": "Escape"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Coffee Grinder",
+                      "testid": "item-card"
+                    },
+                    "plus": 0,
+                    "relativeTo": "stock-before",
+                    "testid": "item-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "a cancelled order is shown as cancelled in the customer’s history",
+                "id": "3b",
+                "points": 1,
+                "statedBy": "a customer can cancel an order that has not shipped",
+                "steps": [
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "settleMs": 1200,
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "customer",
+                    "contains": "ancel",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Coffee Grinder",
+                      "testid": "order-item"
+                    },
+                    "testid": "order-status",
+                    "within": 8000
+                  }
+                ]
+              },
+              {
+                "desc": "returning an item from a shipped order brings the stock back and lowers revenue",
+                "id": "3c",
+                "points": 3,
+                "statedBy": "the stock comes back, revenue falls by what was paid for it, and the order shows the item as returned",
+                "steps": [
+                  {
+                    "actor": "customer",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Keyboard"
+                  },
+                  {
+                    "actor": "customer",
+                    "as": "kb-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Keyboard",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "admin",
+                    "as": "rev2-before",
+                    "do": "recordNumber",
+                    "testid": "admin-revenue"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Keyboard",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "staff",
+                    "do": "click",
+                    "in": {
+                      "contains": "Keyboard",
+                      "testid": "queue-item"
+                    },
+                    "testid": "ship-submit"
+                  },
+                  {
+                    "actor": "staff",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Keyboard",
+                      "testid": "order-item"
+                    },
+                    "testid": "return-item"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "plus": 0,
+                    "relativeTo": "rev2-before",
+                    "testid": "admin-revenue",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "pressKey",
+                    "key": "Escape"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Keyboard",
+                      "testid": "item-card"
+                    },
+                    "plus": 0,
+                    "relativeTo": "kb-before",
+                    "testid": "item-stock"
+                  }
+                ]
+              }
+            ],
+            "id": 3,
+            "name": "Cancelling and returning",
+            "setup": [
+              {
+                "actor": "customer",
+                "do": "signUp",
+                "name": "cr"
+              },
+              {
+                "actor": "staff",
+                "do": "signIn",
+                "exact": true,
+                "name": "staff",
+                "password": "stackbench-staff-2026"
+              },
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "testid": "admin-link"
+              },
+              {
+                "actor": "staff",
+                "do": "click",
+                "testid": "staff-link"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "admin",
+              "customer",
+              "visitor"
+            ],
+            "criteria": [
+              {
+                "desc": "a customer's receipt keeps the price that was paid after the price changes",
+                "id": "4a",
+                "points": 3,
+                "statedBy": "past orders keep the price that was paid",
+                "steps": [
+                  {
+                    "actor": "customer",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Air Purifier"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "price-input",
+                    "text": "1.00"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "price-submit"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "customer",
+                    "atLeast": 189,
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "order-item"
+                    },
+                    "testid": "order-total"
+                  }
+                ]
+              },
+              {
+                "desc": "the new price reaches a signed-out visitor without a reload",
+                "id": "4b",
+                "points": 2,
+                "statedBy": "the storefront shows the new price immediately, to everyone",
+                "steps": [
+                  {
+                    "actor": "visitor",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Air Purifier"
+                  },
+                  {
+                    "actor": "visitor",
+                    "do": "expectNumber",
+                    "equals": 1,
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-price",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "a price change updates an open cart and checkout charges the new price",
+                "id": "4c",
+                "points": 3,
+                "statedBy": "an item in someone's cart at the moment the price changes is charged the new price at checkout, and the cart total they are looking at updates to match",
+                "steps": [
+                  {
+                    "actor": "customer",
+                    "do": "pressKey",
+                    "key": "Escape"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Desk Lamp"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectNumber",
+                    "equals": 42,
+                    "testid": "cart-total"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "price-input",
+                    "text": "52.00"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "price-submit"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectNumber",
+                    "equals": 52,
+                    "testid": "cart-total",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "testid": "checkout-submit"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "settleMs": 1500,
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectNumber",
+                    "equals": 52,
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "order-item"
+                    },
+                    "testid": "order-total"
+                  }
+                ]
+              }
+            ],
+            "id": 4,
+            "name": "Prices change, history does not",
+            "setup": [
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "customer",
+                "do": "signUp",
+                "name": "pr"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "testid": "admin-link"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "admin",
+              "customer",
+              "visitor"
+            ],
+            "criteria": [
+              {
+                "desc": "an item falling to ten units or fewer joins the low-stock list, live",
+                "id": "5a",
+                "points": 3,
+                "statedBy": "items enter and leave this list as stock moves, sells, is restocked, cancelled or returned",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "contains": "Mirrorless Camera",
+                    "do": "expect",
+                    "testid": "low-stock-item",
+                    "within": 8000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "restock-input",
+                    "text": "8"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "admin-location-row"
+                    },
+                    "testid": "restock-submit"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "admin",
+                    "contains": "Mirrorless Camera",
+                    "do": "expect",
+                    "testid": "low-stock-item",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Mirrorless Camera"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Mirrorless Camera",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "admin",
+                    "contains": "Mirrorless Camera",
+                    "do": "expect",
+                    "testid": "low-stock-item",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "a purchase moves that category's units and revenue, live",
+                "id": "5b",
+                "points": 3,
+                "statedBy": "for each\ncategory, how many units have been sold and the revenue they earned, live",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "as": "audio-units",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Audio",
+                      "testid": "category-row"
+                    },
+                    "testid": "category-units"
+                  },
+                  {
+                    "actor": "admin",
+                    "as": "audio-rev",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Audio",
+                      "testid": "category-row"
+                    },
+                    "testid": "category-revenue"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Bluetooth Speaker"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Audio",
+                      "testid": "category-row"
+                    },
+                    "plus": 1,
+                    "relativeTo": "audio-units",
+                    "testid": "category-units",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Audio",
+                      "testid": "category-row"
+                    },
+                    "plus": 79.5,
+                    "relativeTo": "audio-rev",
+                    "testid": "category-revenue",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "buying from a category makes that category's other items recommended",
+                "id": "5c",
+                "points": 2,
+                "statedBy": "the items from categories\nthey have bought from, most-purchased first, excluding items already in\ntheir cart",
+                "steps": [
+                  {
+                    "actor": "customer",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Bluetooth Speaker"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "pressKey",
+                    "key": "Escape"
+                  },
+                  {
+                    "actor": "customer",
+                    "contains": "Headphones",
+                    "do": "expect",
+                    "testid": "recommended-item",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "fill",
+                    "enter": true,
+                    "settleMs": 1500,
+                    "testid": "search-input",
+                    "text": "Headphones"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "item-card"
+                    },
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "pressKey",
+                    "key": "Escape"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "customer",
+                    "contains": "Headphones",
+                    "do": "expect",
+                    "testid": "recommended-item",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "a signed-out visitor sees best sellers in the recommendations slot",
+                "id": "5d",
+                "points": 1,
+                "statedBy": "for a signed-out visitor this is simply the best sellers",
+                "steps": [
+                  {
+                    "actor": "visitor",
+                    "contains": "Bluetooth Speaker",
+                    "do": "expect",
+                    "testid": "recommended-item",
+                    "within": 10000
+                  }
+                ]
+              }
+            ],
+            "id": 5,
+            "name": "The operational views",
+            "setup": [
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "customer",
+                "do": "signUp",
+                "name": "ops"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "testid": "admin-link"
+              }
+            ]
+          }
+        ],
+        "level": 2,
+        "name": "Running the business — features",
+        "note": "The level's thesis is that eight actions each touch several of ten live views. These features are therefore written as ONE action watched by SEVERAL viewers at once, not as one action checked once — a backend that updates the view the actor is looking at and forgets the others fails on the watcher, not on the actor. Items are reached by search because earlier features re-rank the storefront. Panels are closed with Escape, which the spec requires, rather than by clicking an opener again.",
+        "schemaVersion": 1,
+        "track": "ecommerce",
+        "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses|\\/transfer|\\/cancel|\\/return|\\/ship|\\/price|\\/fulfil"
+      },
+      "path": "scenarios/02-features.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "admin",
+              "customer"
+            ],
+            "criteria": [
+              {
+                "desc": "a customer replaying an admin's transfer moves no stock",
+                "id": "201a",
+                "points": 2,
+                "statedBy": "an admin can transfer a number of units of an item from one warehouse to another",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-from",
+                    "text": "East"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-to",
+                    "text": "West"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-qty",
+                    "text": "5"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-submit"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "customer",
+                    "as": "after-admin-move",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "replayAs",
+                    "from": "admin",
+                    "match": "transfer",
+                    "settleMs": 2500
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectReplayRejected"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "item-card"
+                    },
+                    "plus": 0,
+                    "relativeTo": "after-admin-move",
+                    "testid": "item-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "a customer cannot set a price by replaying an admin's change",
+                "id": "201b",
+                "points": 2,
+                "statedBy": "an admin can change an item's price",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "price-input",
+                    "text": "77.00"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "price-submit"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "replayAs",
+                    "from": "admin",
+                    "match": "price",
+                    "settleMs": 2500,
+                    "swap": {
+                      "find": "77",
+                      "with": "1"
+                    }
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectReplayRejected"
+                  },
+                  {
+                    "actor": "customer",
+                    "atLeast": 77,
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Gaming Mouse",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-price"
+                  }
+                ]
+              },
+              {
+                "desc": "a customer cannot ship their own order",
+                "id": "201c",
+                "note": "DOM diagnostic: checks the ship control is absent for a customer. The SERVER-side refusal of a customer's ship request is now criterion 1e, which replays a real ship as the customer and requires the server to reject it. Kept at 0 points so hiding the button is never mistaken for enforcement.",
+                "points": 0,
+                "statedBy": "staff cannot change prices or create items; admins can do everything staff can",
+                "steps": [
+                  {
+                    "actor": "customer",
+                    "do": "pressKey",
+                    "key": "Escape"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Laptop Stand",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "customer",
+                    "do": "expect",
+                    "testid": "ship-submit"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Laptop Stand",
+                      "testid": "order-item"
+                    },
+                    "notContains": "hipped",
+                    "testid": "order-status"
+                  }
+                ]
+              }
+            ],
+            "id": 201,
+            "name": "Operating the store requires being an operator",
+            "setup": [
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "customer",
+                "do": "signUp",
+                "name": "notstaff"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "testid": "admin-link"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "admin",
+              "customer"
+            ],
+            "criteria": [
+              {
+                "desc": "a transfer changes where stock is, never how much there is",
+                "id": "202a",
+                "points": 2,
+                "statedBy": "a transfer moves stock, it does not create or destroy it",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "as": "espresso-total",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "admin-stock"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-from",
+                    "text": "East"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-to",
+                    "text": "West"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-qty",
+                    "text": "17"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "transfer-submit"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "wait",
+                    "ms": 3000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "admin-item-row"
+                    },
+                    "plus": 0,
+                    "relativeTo": "espresso-total",
+                    "testid": "admin-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "a sale and its cancellation leave the shelf exactly as they found it",
+                "id": "202b",
+                "points": 2,
+                "statedBy": "the stock goes back to the warehouse it came from",
+                "steps": [
+                  {
+                    "actor": "customer",
+                    "as": "cooktop-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Induction Cooktop",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Induction Cooktop",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2000
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Induction Cooktop",
+                      "testid": "item-card"
+                    },
+                    "plus": -1,
+                    "relativeTo": "cooktop-before",
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Induction Cooktop",
+                      "testid": "order-item"
+                    },
+                    "testid": "cancel-order"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "pressKey",
+                    "key": "Escape"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Induction Cooktop",
+                      "testid": "item-card"
+                    },
+                    "plus": 0,
+                    "relativeTo": "cooktop-before",
+                    "testid": "item-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "a fresh client sees the same totals, so nothing was only corrected in one browser",
+                "id": "202c",
+                "points": 1,
+                "statedBy": "every one of these numbers is the same for every person looking at it",
+                "steps": [
+                  {
+                    "actor": "customer",
+                    "do": "freshClient"
+                  },
+                  {
+                    "actor": "customer-fresh",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Induction Cooktop",
+                      "testid": "item-card"
+                    },
+                    "plus": 0,
+                    "relativeTo": "cooktop-before",
+                    "testid": "item-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "a transfer racing a purchase loses no unit between the rows: total = before − sold, exactly, however the two interleave",
+                "id": "202d",
+                "note": "WITHHELD until proven against a mutant (transfer-read-modify-write) and a real failing build. A non-transactional transfer reads both rows, computes, writes both — a purchase landing between the read and the write is erased. Sequential tests cannot see this; 202a passes either way.",
+                "points": 0,
+                "statedBy": "a transfer moves stock, it does not create or destroy it",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "as": "hp-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "admin-stock"
+                  },
+                  {
+                    "branches": [
+                      [
+                        {
+                          "actor": "admin",
+                          "do": "fill",
+                          "in": {
+                            "contains": "Headphones",
+                            "testid": "admin-item-row"
+                          },
+                          "testid": "transfer-from",
+                          "text": "East"
+                        },
+                        {
+                          "actor": "admin",
+                          "do": "fill",
+                          "in": {
+                            "contains": "Headphones",
+                            "testid": "admin-item-row"
+                          },
+                          "testid": "transfer-to",
+                          "text": "West"
+                        },
+                        {
+                          "actor": "admin",
+                          "do": "fill",
+                          "in": {
+                            "contains": "Headphones",
+                            "testid": "admin-item-row"
+                          },
+                          "testid": "transfer-qty",
+                          "text": "25"
+                        },
+                        {
+                          "actor": "admin",
+                          "do": "click",
+                          "in": {
+                            "contains": "Headphones",
+                            "testid": "admin-item-row"
+                          },
+                          "testid": "transfer-submit"
+                        }
+                      ],
+                      [
+                        {
+                          "actor": "customer",
+                          "do": "click",
+                          "in": {
+                            "contains": "Headphones",
+                            "testid": "item-card"
+                          },
+                          "testid": "buy-now"
+                        }
+                      ]
+                    ],
+                    "do": "race",
+                    "settleMs": 5000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Headphones",
+                      "testid": "admin-item-row"
+                    },
+                    "plus": -1,
+                    "relativeTo": "hp-before",
+                    "testid": "admin-stock",
+                    "within": 12000
+                  }
+                ]
+              }
+            ],
+            "id": 202,
+            "name": "Stock is conserved however it moves",
+            "setup": [
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "customer",
+                "do": "signUp",
+                "name": "conserve"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "testid": "admin-link"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "admin",
+              "customer"
+            ],
+            "criteria": [
+              {
+                "desc": "revenue rises by what was bought and falls by what was cancelled",
+                "id": "203a",
+                "points": 3,
+                "statedBy": "revenue always equals the sum of orders that are still standing",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "as": "rev-start",
+                    "do": "recordNumber",
+                    "testid": "admin-revenue"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "plus": 42,
+                    "relativeTo": "rev-start",
+                    "testid": "admin-revenue",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "order-item"
+                    },
+                    "testid": "cancel-order"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "plus": 0,
+                    "relativeTo": "rev-start",
+                    "testid": "admin-revenue",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "a price change does not rewrite revenue already earned",
+                "id": "203b",
+                "points": 2,
+                "statedBy": "changing a price never alters the history, the revenue already recorded",
+                "steps": [
+                  {
+                    "actor": "customer",
+                    "do": "pressKey",
+                    "key": "Escape"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "click",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "customer",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "admin",
+                    "as": "rev-after-sale",
+                    "do": "recordNumber",
+                    "testid": "admin-revenue"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "price-input",
+                    "text": "5.00"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "admin-item-row"
+                    },
+                    "testid": "price-submit"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "wait",
+                    "ms": 3000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "plus": 0,
+                    "relativeTo": "rev-after-sale",
+                    "testid": "admin-revenue"
+                  }
+                ]
+              }
+            ],
+            "id": 203,
+            "name": "The books still balance once money can flow backwards",
+            "setup": [
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "customer",
+                "do": "signUp",
+                "name": "books"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "testid": "admin-link"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "one",
+              "two"
+            ],
+            "criteria": [
+              {
+                "desc": "one customer cannot cancel another's order",
+                "id": "204a",
+                "note": "WITHHELD: the current replay happens after the owner's cancellation, so a state-only rejection can masquerade as an ownership check. Restore points only after the harness can replay a captured cancellation against a still-pending order and a cross-account authorization mutant is caught.",
+                "points": 0,
+                "statedBy": "a customer can cancel an order that has not shipped",
+                "steps": [
+                  {
+                    "actor": "one",
+                    "do": "click",
+                    "in": {
+                      "contains": "Laptop Stand",
+                      "testid": "item-card"
+                    },
+                    "testid": "buy-now"
+                  },
+                  {
+                    "actor": "one",
+                    "do": "wait",
+                    "ms": 2500
+                  },
+                  {
+                    "actor": "one",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "actor": "one",
+                    "do": "click",
+                    "in": {
+                      "contains": "Laptop Stand",
+                      "testid": "order-item"
+                    },
+                    "testid": "cancel-order"
+                  },
+                  {
+                    "actor": "one",
+                    "do": "wait",
+                    "ms": 2000
+                  },
+                  {
+                    "actor": "two",
+                    "do": "replayAs",
+                    "from": "one",
+                    "match": "cancel",
+                    "settleMs": 2500
+                  },
+                  {
+                    "actor": "two",
+                    "do": "expectReplayRejected"
+                  },
+                  {
+                    "actor": "two",
+                    "do": "click",
+                    "testid": "orders-toggle"
+                  },
+                  {
+                    "absent": true,
+                    "actor": "two",
+                    "contains": "Laptop Stand",
+                    "do": "expect",
+                    "testid": "order-item"
+                  }
+                ]
+              }
+            ],
+            "id": 204,
+            "name": "An order belongs to the person who placed it",
+            "setup": [
+              {
+                "actor": "one",
+                "do": "signUp",
+                "name": "owner"
+              },
+              {
+                "actor": "two",
+                "do": "signUp",
+                "name": "other"
+              }
+            ]
+          }
+        ],
+        "level": 2,
+        "name": "Running the business — invariants",
+        "note": "Properties that must survive the new operations regardless of which feature works. Level 2 adds two roles and six ways to move stock or money, so the questions are: can someone do an operator's job without being an operator, does conservation still hold once stock can flow backwards, and does anything a customer sends decide what the store charges. Stated as outcomes a person would recognise, and scored so a backend is never penalised for a check the harness could not run against it.",
+        "schemaVersion": 1,
+        "track": "ecommerce",
+        "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses|\\/transfer|\\/cancel|\\/return|\\/ship|\\/price|\\/fulfil"
+      },
+      "path": "scenarios/02-invariants.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "shopper",
+              "watcher"
+            ],
+            "criteria": [
+              {
+                "desc": "adding to the cart takes a unit off the shelf immediately, for a signed-out viewer who never touched the page",
+                "id": "301a",
+                "points": 2,
+                "statedBy": "storefront stock drops immediately, for everyone",
+                "steps": [
+                  {
+                    "actor": "shopper",
+                    "do": "click",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "item-card"
+                    },
+                    "settleMs": 1500,
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "item-card"
+                    },
+                    "plus": -1,
+                    "relativeTo": "lamp-before",
+                    "testid": "item-stock",
+                    "within": 10000
+                  }
+                ]
+              },
+              {
+                "desc": "the cart line shows the reservation counting down",
+                "id": "301b",
+                "points": 1,
+                "statedBy": "the cart line shows the reservation's remaining time, live",
+                "steps": [
+                  {
+                    "actor": "shopper",
+                    "do": "click",
+                    "settleMs": 1200,
+                    "testid": "cart-toggle"
+                  },
+                  {
+                    "actor": "shopper",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "cart-item"
+                    },
+                    "testid": "cart-reservation-timer",
+                    "within": 8000
+                  }
+                ]
+              },
+              {
+                "desc": "left alone, the reservation expires on its own: the unit returns to the shelf for the watcher without a reload, and the line is marked expired rather than vanishing",
+                "id": "301c",
+                "note": "waits out the spec's 90-second window plus slack; slow by nature.",
+                "points": 3,
+                "statedBy": "the reservation expires on its own and the unit returns to\nstorefront stock - visibly, without anyone reloading",
+                "steps": [
+                  {
+                    "actor": "shopper",
+                    "do": "wait",
+                    "ms": 100000
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "item-card"
+                    },
+                    "plus": 0,
+                    "relativeTo": "lamp-before",
+                    "testid": "item-stock",
+                    "within": 30000
+                  },
+                  {
+                    "actor": "shopper",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Desk Lamp",
+                      "testid": "cart-item"
+                    },
+                    "testid": "cart-item-expired",
+                    "within": 15000
+                  }
+                ]
+              }
+            ],
+            "id": 301,
+            "name": "A reservation holds stock and then releases it",
+            "setup": [
+              {
+                "actor": "shopper",
+                "do": "signUp",
+                "name": "resa"
+              },
+              {
+                "actor": "watcher",
+                "as": "lamp-before",
+                "do": "recordNumber",
+                "in": {
+                  "contains": "Desk Lamp",
+                  "testid": "item-card"
+                },
+                "testid": "item-stock"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "admin",
+              "watcher"
+            ],
+            "criteria": [
+              {
+                "desc": "a scheduled restock appears as pending with time remaining, and has not yet changed stock",
+                "id": "302a",
+                "points": 2,
+                "statedBy": "the pending restocks list shows each one with its remaining time, live",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "testid": "schedule-restock-item",
+                    "text": "Webcam"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "testid": "schedule-restock-warehouse",
+                    "text": "East"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "testid": "schedule-restock-qty",
+                    "text": "7"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "testid": "schedule-restock-delay",
+                    "text": "45"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "settleMs": 2000,
+                    "testid": "schedule-restock-submit"
+                  },
+                  {
+                    "actor": "admin",
+                    "contains": "Webcam",
+                    "do": "expect",
+                    "testid": "pending-restock-item",
+                    "within": 8000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expect",
+                    "in": {
+                      "contains": "Webcam",
+                      "testid": "pending-restock-item"
+                    },
+                    "testid": "pending-restock-remaining",
+                    "within": 8000
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Webcam",
+                      "testid": "item-card"
+                    },
+                    "plus": 0,
+                    "relativeTo": "webcam-before",
+                    "testid": "item-stock"
+                  }
+                ]
+              },
+              {
+                "desc": "when the delay elapses it applies itself: stock rises for a viewer who did nothing, and it leaves the pending list",
+                "id": "302b",
+                "points": 3,
+                "statedBy": "the entry leaves the pending list, and it appears in the stock ledger",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "wait",
+                    "ms": 55000
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Webcam",
+                      "testid": "item-card"
+                    },
+                    "plus": 7,
+                    "relativeTo": "webcam-before",
+                    "testid": "item-stock",
+                    "within": 30000
+                  },
+                  {
+                    "absent": true,
+                    "actor": "admin",
+                    "contains": "Webcam",
+                    "do": "expect",
+                    "testid": "pending-restock-item",
+                    "within": 15000
+                  }
+                ]
+              },
+              {
+                "desc": "a cancelled restock never applies",
+                "id": "302c",
+                "points": 2,
+                "statedBy": "an admin can cancel a pending restock before it fires; cancelled restocks\nnever apply",
+                "steps": [
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "testid": "schedule-restock-item",
+                    "text": "Keyboard"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "testid": "schedule-restock-warehouse",
+                    "text": "West"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "testid": "schedule-restock-qty",
+                    "text": "9"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "fill",
+                    "testid": "schedule-restock-delay",
+                    "text": "40"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "settleMs": 2000,
+                    "testid": "schedule-restock-submit"
+                  },
+                  {
+                    "actor": "watcher",
+                    "as": "kbd-before",
+                    "do": "recordNumber",
+                    "in": {
+                      "contains": "Keyboard",
+                      "testid": "item-card"
+                    },
+                    "testid": "item-stock"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "click",
+                    "in": {
+                      "contains": "Keyboard",
+                      "testid": "pending-restock-item"
+                    },
+                    "settleMs": 2000,
+                    "testid": "pending-restock-cancel"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "wait",
+                    "ms": 50000
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Keyboard",
+                      "testid": "item-card"
+                    },
+                    "plus": 0,
+                    "relativeTo": "kbd-before",
+                    "testid": "item-stock",
+                    "within": 10000
+                  }
+                ]
+              }
+            ],
+            "id": 302,
+            "name": "A restock scheduled for later applies itself",
+            "setup": [
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "settleMs": 1500,
+                "testid": "admin-link"
+              },
+              {
+                "actor": "watcher",
+                "as": "webcam-before",
+                "do": "recordNumber",
+                "in": {
+                  "contains": "Webcam",
+                  "testid": "item-card"
+                },
+                "testid": "item-stock"
+              }
+            ]
+          }
+        ],
+        "level": 3,
+        "name": "Work that happens later — features",
+        "note": "Deferred work observed from the outside: a reservation that releases itself, a restock that fires on a timer, an order that advances with nobody watching. Every wait here is real time — these criteria are slow by nature and the timings come from the spec (90s reservation, 60s transitions), not from guesses about implementation.",
+        "schemaVersion": 1,
+        "track": "ecommerce",
+        "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses|\\/schedule"
+      },
+      "path": "scenarios/03-features.json"
+    },
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "admin",
+              "watcher"
+            ],
+            "criteria": [
+              {
+                "desc": "a restock scheduled before a restart still fires after it, once, at its own time — an in-memory timer does not survive and must not be how this was built",
+                "id": "311a",
+                "points": 4,
+                "statedBy": "work scheduled\nbefore a restart fires after it, once, at the right time",
+                "steps": [
+                  {
+                    "do": "restartBackend",
+                    "settleMs": 15000
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "reload",
+                    "settleMs": 5000
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "item-card"
+                    },
+                    "plus": 5,
+                    "relativeTo": "air-before",
+                    "testid": "item-stock",
+                    "within": 90000
+                  }
+                ]
+              },
+              {
+                "desc": "it fired exactly once — the restart did not replay it",
+                "id": "311b",
+                "points": 3,
+                "statedBy": "must never double-apply\na scheduled restock or advance an order twice",
+                "steps": [
+                  {
+                    "actor": "watcher",
+                    "do": "wait",
+                    "ms": 20000
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Air Purifier",
+                      "testid": "item-card"
+                    },
+                    "plus": 5,
+                    "relativeTo": "air-before",
+                    "testid": "item-stock"
+                  }
+                ]
+              }
+            ],
+            "id": 311,
+            "name": "Scheduled work survives a restart",
+            "setup": [
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "settleMs": 1500,
+                "testid": "admin-link"
+              },
+              {
+                "actor": "watcher",
+                "as": "air-before",
+                "do": "recordNumber",
+                "in": {
+                  "contains": "Air Purifier",
+                  "testid": "item-card"
+                },
+                "testid": "item-stock"
+              },
+              {
+                "actor": "admin",
+                "do": "fill",
+                "testid": "schedule-restock-item",
+                "text": "Air Purifier"
+              },
+              {
+                "actor": "admin",
+                "do": "fill",
+                "testid": "schedule-restock-warehouse",
+                "text": "East"
+              },
+              {
+                "actor": "admin",
+                "do": "fill",
+                "testid": "schedule-restock-qty",
+                "text": "5"
+              },
+              {
+                "actor": "admin",
+                "do": "fill",
+                "testid": "schedule-restock-delay",
+                "text": "70"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "settleMs": 2000,
+                "testid": "schedule-restock-submit"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "admin",
+              "watcher"
+            ],
+            "criteria": [
+              {
+                "desc": "a restock due in three minutes has not applied thirty seconds after a restart — re-reading pending work must not run it",
+                "id": "312a",
+                "points": 3,
+                "statedBy": "a restart must not cause pending work to run\nimmediately",
+                "steps": [
+                  {
+                    "do": "restartBackend",
+                    "settleMs": 15000
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "reload",
+                    "settleMs": 5000
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "wait",
+                    "ms": 25000
+                  },
+                  {
+                    "actor": "watcher",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Espresso Machine",
+                      "testid": "item-card"
+                    },
+                    "plus": 0,
+                    "relativeTo": "esp-before",
+                    "testid": "item-stock"
+                  }
+                ]
+              }
+            ],
+            "id": 312,
+            "name": "A restart does not make pending work fire early",
+            "setup": [
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "settleMs": 1500,
+                "testid": "admin-link"
+              },
+              {
+                "actor": "watcher",
+                "as": "esp-before",
+                "do": "recordNumber",
+                "in": {
+                  "contains": "Espresso Machine",
+                  "testid": "item-card"
+                },
+                "testid": "item-stock"
+              },
+              {
+                "actor": "admin",
+                "do": "fill",
+                "testid": "schedule-restock-item",
+                "text": "Espresso Machine"
+              },
+              {
+                "actor": "admin",
+                "do": "fill",
+                "testid": "schedule-restock-warehouse",
+                "text": "West"
+              },
+              {
+                "actor": "admin",
+                "do": "fill",
+                "testid": "schedule-restock-qty",
+                "text": "4"
+              },
+              {
+                "actor": "admin",
+                "do": "fill",
+                "testid": "schedule-restock-delay",
+                "text": "180"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "settleMs": 2000,
+                "testid": "schedule-restock-submit"
+              }
+            ]
+          },
+          {
+            "actors": [
+              "shopper",
+              "admin"
+            ],
+            "criteria": [
+              {
+                "desc": "a reservation taken and left to expire returns exactly what it took, counted in the admin's own totals",
+                "id": "313a",
+                "points": 3,
+                "statedBy": "units are never created or destroyed by the\npassage of time",
+                "steps": [
+                  {
+                    "actor": "shopper",
+                    "do": "click",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "item-card"
+                    },
+                    "settleMs": 1500,
+                    "testid": "add-to-cart"
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "admin-item-row"
+                    },
+                    "plus": -1,
+                    "relativeTo": "spk-before",
+                    "testid": "admin-stock",
+                    "within": 10000
+                  },
+                  {
+                    "actor": "shopper",
+                    "do": "wait",
+                    "ms": 100000
+                  },
+                  {
+                    "actor": "admin",
+                    "do": "expectNumber",
+                    "in": {
+                      "contains": "Bluetooth Speaker",
+                      "testid": "admin-item-row"
+                    },
+                    "plus": 0,
+                    "relativeTo": "spk-before",
+                    "testid": "admin-stock",
+                    "within": 30000
+                  }
+                ]
+              }
+            ],
+            "id": 313,
+            "name": "Time does not create or destroy stock",
+            "setup": [
+              {
+                "actor": "shopper",
+                "do": "signUp",
+                "name": "consv"
+              },
+              {
+                "actor": "admin",
+                "do": "signIn",
+                "exact": true,
+                "name": "admin",
+                "password": "stackbench-admin-2026"
+              },
+              {
+                "actor": "admin",
+                "do": "click",
+                "settleMs": 1500,
+                "testid": "admin-link"
+              },
+              {
+                "actor": "admin",
+                "as": "spk-before",
+                "do": "recordNumber",
+                "in": {
+                  "contains": "Bluetooth Speaker",
+                  "testid": "admin-item-row"
+                },
+                "testid": "admin-stock"
+              }
+            ]
+          }
+        ],
+        "level": 3,
+        "name": "Work that happens later — invariants",
+        "note": "What must hold about deferred work regardless of how it is implemented: it survives a restart, it fires once, it does not fire early, and time never creates or destroys stock. This is the level where in-memory timers stop being an implementation detail and become a defect.",
+        "schemaVersion": 1,
+        "track": "ecommerce",
+        "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses|\\/schedule"
+      },
+      "path": "scenarios/03-invariants.json"
+    }
+  ],
+  "track": "ecommerce"
+}
diff --git a/tools/stack-bench/tests/snapshots/definitions/loop.snapshot.json b/tools/stack-bench/tests/snapshots/definitions/loop.snapshot.json
new file mode 100644
index 00000000000..9e4aa01a677
--- /dev/null
+++ b/tools/stack-bench/tests/snapshots/definitions/loop.snapshot.json
@@ -0,0 +1,71 @@
+{
+  "definitionSchemaVersion": 1,
+  "levels": [
+    {
+      "level": 1,
+      "suites": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "scenario": "scenarios/01-loop.json"
+        }
+      ]
+    }
+  ],
+  "manifest": {
+    "internal": true,
+    "plannedThrough": 1,
+    "portOffset": 600,
+    "restartProbe": "/",
+    "schemaVersion": 1,
+    "slug": "loop",
+    "suites": {
+      "1": [
+        {
+          "id": "features",
+          "inherit": "none",
+          "spec": "scenarios/01-loop.json"
+        }
+      ]
+    },
+    "title": "Loop Fixture",
+    "validatedThrough": 1
+  },
+  "scenarios": [
+    {
+      "definition": {
+        "features": [
+          {
+            "actors": [
+              "viewer"
+            ],
+            "criteria": [
+              {
+                "desc": "The application title is visible",
+                "id": "title-visible",
+                "points": 1,
+                "statedBy": "Fixture Chat",
+                "steps": [
+                  {
+                    "actor": "viewer",
+                    "contains": "Fixture Chat",
+                    "do": "expect",
+                    "testid": "app-title",
+                    "within": 1000
+                  }
+                ]
+              }
+            ],
+            "id": 1,
+            "name": "Application title",
+            "setup": []
+          }
+        ],
+        "level": 1,
+        "schemaVersion": 1
+      },
+      "path": "scenarios/01-loop.json"
+    }
+  ],
+  "track": "loop"
+}
diff --git a/tools/stack-bench/tests/source-checkpoint.test.ts b/tools/stack-bench/tests/source-checkpoint.test.ts
new file mode 100644
index 00000000000..fa5be1cecc0
--- /dev/null
+++ b/tools/stack-bench/tests/source-checkpoint.test.ts
@@ -0,0 +1,99 @@
+import assert from 'node:assert/strict';
+import { existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { createArtifact, readArtifact } from '../src/evidence/artifacts.js';
+import { preserveLevelCheckpoint } from '../src/runtime/source-checkpoint.js';
+
+interface CheckpointPayload extends Record<string, unknown> {
+  source: { sha256: string; directory: string };
+}
+
+test('a level checkpoint preserves only source and binds it to the parent run', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-level-checkpoint-'));
+  const app = join(root, 'app');
+  const output = join(root, 'result');
+  try {
+    mkdirSync(join(app, 'src'), { recursive: true });
+    writeFileSync(join(app, 'src', 'app.ts'), 'export const answer = 42;\n');
+    mkdirSync(join(app, 'node_modules', 'dep'), { recursive: true });
+    writeFileSync(join(app, 'node_modules', 'dep', 'index.js'), 'not source\n');
+    writeFileSync(join(app, 'BUG_REPORT.md'), 'private repair evidence\n');
+
+    const checkpoint = preserveLevelCheckpoint({
+      appDir: app,
+      outputDir: output,
+      runId: 'run-parent',
+      track: 'ecommerce',
+      backend: 'postgres',
+      level: 1,
+      repair: { status: 'budget-exhausted', limit: 3, used: 3,
+        stopReason: 'budget-exhausted' },
+      outcome: { kind: 'app_failure', failed: 1 },
+      selectionSha256: 'a'.repeat(64),
+    });
+
+    const artifact = readArtifact<CheckpointPayload>(join(output, checkpoint.artifact),
+      { expectedKind: 'source_checkpoint', expectedId: 'run-parent-l1-checkpoint' });
+    assert.equal(artifact.attempt.parentId, 'run-parent');
+    assert.equal(artifact.payload.source.sha256, checkpoint.sha256);
+    assert.equal(artifact.payload.source.directory, 'level-l1-source');
+    assert.equal(existsSync(join(output, checkpoint.directory, 'src', 'app.ts')), true);
+    assert.equal(existsSync(join(output, checkpoint.directory, 'node_modules')), false);
+    assert.equal(existsSync(join(output, checkpoint.directory, 'BUG_REPORT.md')), false);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('source checkpoint artifacts reject paths and repair accounting that cannot be trusted', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-level-checkpoint-invalid-'));
+  const app = join(root, 'app');
+  try {
+    mkdirSync(app, { recursive: true });
+    writeFileSync(join(app, 'app.js'), 'export default true;\n');
+    assert.throws(() => createArtifact({
+      kind: 'source_checkpoint',
+      id: 'wrong-path',
+      payload: {
+        schemaVersion: 3,
+        track: 'ecommerce',
+        backend: 'postgres',
+        level: 1,
+        source: { directory: '../outside', sha256: 'a'.repeat(64), files: 1 },
+        repair: { status: 'budget-exhausted', limit: 3, used: 3,
+          stopReason: 'budget-exhausted' },
+        outcome: { kind: 'app_failure' },
+        selectionSha256: null,
+      },
+    }), /directory does not match its level/);
+    assert.throws(() => preserveLevelCheckpoint({
+      appDir: app,
+      outputDir: join(root, 'result'),
+      runId: 'run-parent',
+      track: 'ecommerce',
+      backend: 'postgres',
+      level: 1,
+      repair: { status: 'budget-exhausted', limit: 3, used: 4,
+        stopReason: 'budget-exhausted' },
+      outcome: { kind: 'app_failure' },
+    }), /used exceeds its budget/);
+    assert.throws(() => preserveLevelCheckpoint({
+      appDir: app,
+      outputDir: join(root, 'feature-repairs'),
+      runId: 'run-parent',
+      track: 'ecommerce',
+      backend: 'postgres',
+      level: 1,
+      repair: { status: 'budget-exhausted', limit: 2, used: 2,
+        stopReason: 'budget-exhausted', nodeRepairs: [
+          { nodeId: 'accounts', used: -1, exhaustionReason: null },
+        ] },
+      outcome: { kind: 'app_failure' },
+    }), /nodeRepairs\[0\] is invalid/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/source-snapshot.test.ts b/tools/stack-bench/tests/source-snapshot.test.ts
new file mode 100644
index 00000000000..dc28a752e9e
--- /dev/null
+++ b/tools/stack-bench/tests/source-snapshot.test.ts
@@ -0,0 +1,300 @@
+import assert from 'node:assert/strict';
+import { chmodSync, existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, statSync,
+  symlinkSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { assertAppSourceIdentity, assertPlainAppSourceTree, hashAppSource, resetAppToSource,
+  restoreAppSource, seedAppSource, snapshotAppSource } from '../src/runtime/source-snapshot.js';
+
+const put = (path: string, content: string): void => {
+  mkdirSync(join(path, '..'), { recursive: true });
+  writeFileSync(path, content);
+};
+
+test('source rollback is layout-independent and preserves watched directories and nested dependencies', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-source-snapshot-'));
+  const app = join(root, 'app');
+  const snapshot = join(root, 'snapshot');
+  const client = join(app, 'ui', 'src');
+  put(join(client, 'App.tsx'), 'export const value = "good";\n');
+  put(join(app, 'functions', 'handler.mjs'), 'export default "original";\n');
+  put(join(app, 'backend', 'spacetimedb', 'node_modules', 'dep', 'index.js'), 'dependency\n');
+  put(join(app, 'BUG_REPORT.md'), 'current harness report\n');
+  put(join(app, 'bug-report-quality.json'), '{}\n');
+  put(join(app, '.read-guard-settings.json'), '{}\n');
+  put(join(app, '.stack-bench-backend'), 'mongodb\n');
+  put(join(app, '.prompt-build-l1.md'), 'prompt\n');
+  put(join(app, '.session-fix-l1.json'), '{}\n');
+  put(join(app, 'ui', 'dist', 'bundle.js'), 'compiled\n');
+  put(join(app, 'ui', 'src', 'module_bindings', 'index.ts'), 'generated\n');
+  put(join(app, 'server.log'), 'server output\n');
+  put(join(app, '.server.pid'), '100\n');
+  put(join(app, 'ui', 'vite.log'), 'client output\n');
+  put(join(app, 'src', 'stack-bench', 'runtime.ts'), 'export const owned = true;\n');
+  put(join(app, 'src', 'server.log'), 'model-authored input\n');
+
+  const watchedDirectoryIdentity = statSync(client).ino;
+  snapshotAppSource(app, snapshot);
+
+  assert.equal(existsSync(join(snapshot, 'backend', 'spacetimedb', 'node_modules')), false);
+  assert.equal(existsSync(join(snapshot, 'BUG_REPORT.md')), false);
+  for (const file of ['bug-report-quality.json', '.read-guard-settings.json',
+    '.stack-bench-backend', '.prompt-build-l1.md',
+    '.session-fix-l1.json']) {
+    assert.equal(existsSync(join(snapshot, file)), true);
+  }
+  assert.equal(existsSync(join(snapshot, 'ui', 'dist')), false);
+  assert.equal(existsSync(join(snapshot, 'ui', 'src', 'module_bindings')), true);
+  assert.equal(existsSync(join(snapshot, 'server.log')), false);
+  assert.equal(existsSync(join(snapshot, '.server.pid')), false);
+  assert.equal(existsSync(join(snapshot, 'ui', 'vite.log')), true);
+  assert.equal(existsSync(join(snapshot, 'src', 'stack-bench', 'runtime.ts')), true);
+  assert.equal(existsSync(join(snapshot, 'src', 'server.log')), true);
+
+  put(join(client, 'App.tsx'), 'export const value = "bad fix";\n');
+  put(join(client, 'introduced.ts'), 'remove me\n');
+  put(join(app, 'functions', 'handler.mjs'), 'broken\n');
+  put(join(app, 'new-layout', 'bad-source.js'), 'remove me\n');
+  put(join(app, 'new-layout', 'node_modules', 'installed', 'index.js'), 'keep me\n');
+  put(join(app, 'ui', 'dist', 'stale.js'), 'remove me\n');
+  put(join(app, 'ui', 'src', 'module_bindings', 'new.ts'), 'stale binding\n');
+  put(join(app, 'BUG_REPORT.md'), 'latest harness report\n');
+  put(join(app, 'bug-report-quality.json'), '{"latest":true}\n');
+  put(join(app, 'server.log'), 'new server output\n');
+  put(join(app, '.server.pid'), '200\n');
+  put(join(app, 'ui', 'vite.log'), 'new client output\n');
+
+  restoreAppSource(snapshot, app);
+
+  assert.equal(readFileSync(join(client, 'App.tsx'), 'utf8'), 'export const value = "good";\n');
+  assert.equal(readFileSync(join(app, 'functions', 'handler.mjs'), 'utf8'), 'export default "original";\n');
+  assert.equal(existsSync(join(client, 'introduced.ts')), false);
+  assert.equal(existsSync(join(app, 'new-layout', 'bad-source.js')), false);
+  assert.equal(readFileSync(join(app, 'new-layout', 'node_modules', 'installed', 'index.js'), 'utf8'), 'keep me\n');
+  assert.equal(readFileSync(join(app, 'backend', 'spacetimedb', 'node_modules', 'dep', 'index.js'), 'utf8'), 'dependency\n');
+  assert.equal(existsSync(join(app, 'ui', 'dist')), false);
+  assert.equal(existsSync(join(app, 'ui', 'src', 'module_bindings')), true);
+  assert.equal(readFileSync(join(app, 'BUG_REPORT.md'), 'utf8'), 'latest harness report\n');
+  assert.equal(readFileSync(join(app, 'bug-report-quality.json'), 'utf8'), '{}\n');
+  assert.equal(readFileSync(join(app, 'server.log'), 'utf8'), 'new server output\n');
+  assert.equal(readFileSync(join(app, '.server.pid'), 'utf8'), '200\n');
+  assert.equal(readFileSync(join(app, 'ui', 'vite.log'), 'utf8'), 'client output\n');
+  assert.equal(statSync(client).ino, watchedDirectoryIdentity, 'restore replaced a watched source directory');
+});
+
+test('source seeding copies arbitrary layouts without dependencies or repair evidence', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-source-seed-'));
+  const source = join(root, 'source');
+  const target = join(root, 'target');
+  put(join(source, 'unconventional', 'api', 'main.go'), 'package main\n');
+  put(join(source, 'unconventional', 'node_modules', 'dep.js'), 'dependency\n');
+  put(join(source, '.prompt-build-l1.md'), 'model-authored file\n');
+
+  seedAppSource(source, target);
+
+  assert.equal(readFileSync(join(target, 'unconventional', 'api', 'main.go'), 'utf8'), 'package main\n');
+  assert.equal(existsSync(join(target, 'unconventional', 'node_modules')), false);
+  assert.equal(readFileSync(join(target, '.prompt-build-l1.md'), 'utf8'), 'model-authored file\n');
+  if (process.platform !== 'win32') {
+    assert.equal(statSync(join(target, 'unconventional')).mode & 0o002, 0o002);
+    assert.equal(statSync(join(target, 'unconventional', 'api', 'main.go')).mode & 0o002, 0o002);
+  }
+});
+
+test('source operations reject overlapping trees before deleting data', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-source-overlap-'));
+  const app = join(root, 'app');
+  try {
+    put(join(app, 'src', 'app.ts'), 'preserve me\n');
+    assert.throws(() => snapshotAppSource(app, app), /must not overlap/);
+    assert.throws(() => snapshotAppSource(app, join(app, 'snapshot')), /must not overlap/);
+    assert.throws(() => resetAppToSource(join(app, 'src'), app), /must not overlap/);
+    assert.equal(readFileSync(join(app, 'src', 'app.ts'), 'utf8'), 'preserve me\n');
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('source copies reject symbolic links before changing permissions', { skip: process.platform === 'win32' }, () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-source-link-'));
+  const source = join(root, 'source');
+  const outside = join(root, 'outside.txt');
+  try {
+    put(outside, 'outside\n');
+    mkdirSync(source, { recursive: true });
+    symlinkSync(outside, join(source, 'link.txt'));
+    assert.throws(() => seedAppSource(source, join(root, 'target')),
+      /unsupported filesystem entry link\.txt/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('source snapshots ignore nested node_modules symlinks', { skip: process.platform === 'win32' }, () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-source-dependency-link-'));
+  const app = join(root, 'app');
+  const snapshot = join(root, 'snapshot');
+  const dependencies = join(root, 'dependencies');
+  const dependencyLink = join(app, '_scratch', 'rls-client', 'node_modules');
+  try {
+    put(join(app, 'src', 'app.ts'), 'export const app = true;\n');
+    put(join(dependencies, 'package', 'index.js'), 'dependency\n');
+    mkdirSync(join(app, '_scratch', 'rls-client'), { recursive: true });
+    symlinkSync(dependencies, dependencyLink, 'dir');
+
+    const identity = hashAppSource(app);
+    assert.doesNotThrow(() => assertPlainAppSourceTree(app));
+    snapshotAppSource(app, snapshot);
+    assert.equal(existsSync(join(snapshot, '_scratch', 'rls-client', 'node_modules')), false);
+    restoreAppSource(snapshot, app);
+    assert.equal(existsSync(dependencyLink), true);
+    put(join(dependencies, 'package', 'index.js'), 'changed dependency\n');
+    assert.equal(hashAppSource(app).sha256, identity.sha256);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('source restore replaces symbolic links without touching their targets',
+  { skip: process.platform === 'win32' }, () => {
+    const root = mkdtempSync(join(tmpdir(), 'stack-bench-restore-link-'));
+    const snapshot = join(root, 'snapshot');
+    const app = join(root, 'app');
+    const outside = join(root, 'outside.txt');
+    try {
+      put(join(snapshot, 'src', 'app.ts'), 'restored\n');
+      put(outside, 'outside\n');
+      mkdirSync(join(app, 'src'), { recursive: true });
+      symlinkSync(outside, join(app, 'src', 'app.ts'));
+      restoreAppSource(snapshot, app);
+      assert.equal(readFileSync(join(app, 'src', 'app.ts'), 'utf8'), 'restored\n');
+      assert.equal(readFileSync(outside, 'utf8'), 'outside\n');
+    } finally {
+      rmSync(root, { recursive: true, force: true });
+    }
+  });
+
+test('source snapshots exclude package and browser tool caches', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-source-caches-'));
+  const app = join(root, 'app');
+  const snapshot = join(root, 'snapshot');
+  try {
+    put(join(app, 'src', 'app.ts'), 'export const app = true;\n');
+    put(join(app, 'client', 'tsconfig.tsbuildinfo'), 'compiler cache\n');
+    for (const directory of ['.apt', '.cache', '.debroot', '.libs', '.npm-cache', '.pw-browsers', '.pwcache']) {
+      put(join(app, directory, 'tool-artifact'), 'not application source\n');
+    }
+    const before = hashAppSource(app);
+    snapshotAppSource(app, snapshot);
+    assert.equal(readFileSync(join(snapshot, 'src', 'app.ts'), 'utf8'),
+      'export const app = true;\n');
+    assert.equal(existsSync(join(snapshot, 'client', 'tsconfig.tsbuildinfo')), false);
+    restoreAppSource(snapshot, app);
+    assert.equal(existsSync(join(app, 'client', 'tsconfig.tsbuildinfo')), false);
+    for (const directory of ['.apt', '.cache', '.debroot', '.libs', '.npm-cache', '.pw-browsers', '.pwcache']) {
+      assert.equal(existsSync(join(snapshot, directory)), false);
+    }
+    assert.equal(hashAppSource(snapshot).sha256, before.sha256);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('clean source reset removes all runtime state and preserves only root git metadata', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-clean-source-reset-'));
+  const app = join(root, 'app');
+  const snapshot = join(root, 'snapshot');
+  try {
+    put(join(app, 'src', 'app.ts'), 'export const value = 1;\n');
+    put(join(app, 'src', 'stack-bench', 'runtime.ts'), 'export const owned = true;\n');
+    put(join(app, 'src', 'server.log'), 'model-authored input\n');
+    put(join(app, '.git', 'HEAD'), 'before-reset\n');
+    snapshotAppSource(app, snapshot);
+
+    put(join(app, 'src', 'app.ts'), 'export const value = 2;\n');
+    put(join(app, 'introduced.ts'), 'remove me\n');
+    put(join(app, '.git', 'HEAD'), 'preserved\n');
+    put(join(app, 'node_modules', 'package', 'index.js'), 'patched dependency\n');
+    put(join(app, 'server', 'node_modules', 'package', 'index.js'), 'nested dependency\n');
+    put(join(app, 'dist', 'server.js'), 'generated\n');
+    put(join(app, 'client', '.vite', 'bundle.js'), 'generated\n');
+    put(join(app, 'client', '.cache', 'entry'), 'cached\n');
+    put(join(app, 'client', 'src', 'module_bindings', 'index.ts'), 'generated binding\n');
+    put(join(app, 'server', 'tsconfig.tsbuildinfo'), 'compiler cache\n');
+    put(join(app, 'stack-bench', 'bundle.json'), '{"private":true}\n');
+    put(join(app, 'BUG_REPORT.md'), 'repair evidence\n');
+    put(join(app, 'server.log'), 'runtime log\n');
+    put(join(app, 'client.log'), 'runtime log\n');
+    put(join(app, 'vite.log'), 'runtime log\n');
+    put(join(app, '.server.pid'), '200\n');
+
+    resetAppToSource(snapshot, app);
+
+    assert.equal(readFileSync(join(app, 'src', 'app.ts'), 'utf8'), 'export const value = 1;\n');
+    assert.equal(readFileSync(join(app, 'src', 'stack-bench', 'runtime.ts'), 'utf8'),
+      'export const owned = true;\n');
+    assert.equal(readFileSync(join(app, 'src', 'server.log'), 'utf8'), 'model-authored input\n');
+    assert.equal(readFileSync(join(app, '.git', 'HEAD'), 'utf8'), 'preserved\n');
+    for (const path of ['introduced.ts', 'node_modules', join('server', 'node_modules'),
+      'dist', join('client', '.vite'), join('client', '.cache'),
+      join('client', 'src', 'module_bindings'), join('server', 'tsconfig.tsbuildinfo'),
+      'stack-bench', 'BUG_REPORT.md', 'server.log', 'client.log', 'vite.log', '.server.pid']) {
+      assert.equal(existsSync(join(app, path)), false, `${path} survived the clean source reset`);
+    }
+    if (process.platform !== 'win32') {
+      chmodSync(join(snapshot, 'src'), 0o555);
+      chmodSync(join(snapshot, 'src', 'app.ts'), 0o444);
+      resetAppToSource(snapshot, app);
+      assert.equal(statSync(join(app, 'src')).mode & 0o002, 0o002);
+      assert.equal(statSync(join(app, 'src', 'app.ts')).mode & 0o002, 0o002);
+    }
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
+
+test('source identity matches preserved bytes and ignores dependencies and harness evidence', () => {
+  const root = mkdtempSync(join(tmpdir(), 'stack-bench-source-identity-'));
+  const app = join(root, 'app');
+  const snapshot = join(root, 'snapshot');
+  try {
+    put(join(app, 'src', 'app.ts'), 'export const value = 1;\n');
+    put(join(app, 'node_modules', 'dep', 'index.js'), 'dependency v1\n');
+    put(join(app, 'stack-bench', 'bundle.json'), '{}\n');
+    put(join(app, 'client', 'src', 'module_bindings', 'index.ts'), 'generated v1\n');
+    put(join(app, 'BUG_REPORT.md'), 'private evidence\n');
+    put(join(app, 'bug-report-quality.json'), '{}\n');
+    put(join(app, 'server.log'), 'server output v1\n');
+    put(join(app, '.server.pid'), '100\n');
+    put(join(app, 'client', 'vite.log'), 'client output v1\n');
+    put(join(app, 'src', 'stack-bench', 'runtime.ts'), 'export const owned = 1;\n');
+    put(join(app, 'src', 'server.log'), 'model-authored input v1\n');
+    const first = hashAppSource(app);
+    assert.deepEqual(assertAppSourceIdentity(app, first.sha256), first);
+    snapshotAppSource(app, snapshot);
+    assert.equal(hashAppSource(snapshot).sha256, first.sha256);
+    put(join(app, 'node_modules', 'dep', 'index.js'), 'dependency v2\n');
+    put(join(app, 'stack-bench', 'bundle.json'), '{"changed":true}\n');
+    put(join(app, 'client', 'src', 'module_bindings', 'index.ts'), 'generated v2\n');
+    put(join(app, 'server.log'), 'server output v2\n');
+    put(join(app, '.server.pid'), '200\n');
+    assert.equal(hashAppSource(app).sha256, first.sha256);
+    put(join(app, 'client', 'vite.log'), 'client output v2\n');
+    assert.notEqual(hashAppSource(app).sha256, first.sha256);
+    put(join(app, 'client', 'vite.log'), 'client output v1\n');
+    put(join(app, 'src', 'stack-bench', 'runtime.ts'), 'export const owned = 2;\n');
+    assert.notEqual(hashAppSource(app).sha256, first.sha256);
+    put(join(app, 'src', 'stack-bench', 'runtime.ts'), 'export const owned = 1;\n');
+    put(join(app, 'src', 'server.log'), 'model-authored input v2\n');
+    assert.notEqual(hashAppSource(app).sha256, first.sha256);
+    put(join(app, 'src', 'server.log'), 'model-authored input v1\n');
+    put(join(app, 'src', 'app.ts'), 'export const value = 2;\n');
+    assert.notEqual(hashAppSource(app).sha256, first.sha256);
+    assert.throws(() => assertAppSourceIdentity(app, first.sha256, 'restored mutation source'),
+      /restored mutation source hash .* does not match/);
+  } finally {
+    rmSync(root, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/spacetime-guidance.contract.ts b/tools/stack-bench/tests/spacetime-guidance.contract.ts
new file mode 100644
index 00000000000..048e440e149
--- /dev/null
+++ b/tools/stack-bench/tests/spacetime-guidance.contract.ts
@@ -0,0 +1,17 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import test from 'node:test';
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+
+test('SpacetimeDB guidance uses the repeatable local authentication path', () => {
+  const guidance = readFileSync(join(STACK_BENCH_ROOT, 'backends', 'spacetime.md'), 'utf8');
+  const commands = guidance.split(/\r?\n/).filter(line => line.includes('<STDB_BIN>'));
+  const stateful = commands.filter(line => /\b(?:publish|dev)\b/.test(line));
+
+  assert.equal(stateful.length, 2, 'expected one publish and one development command');
+  for (const command of stateful) assert.match(command, /--yes\b/, command);
+  assert.doesNotMatch(guidance, /echo\s+y\s*\|/i);
+  assert.doesNotMatch(guidance, /--delete-data\b/);
+  assert.doesNotMatch(guidance, /<STDB_BIN>\s+(?:publish|dev)[^\n]*--anonymous/);
+});
diff --git a/tools/stack-bench/tests/stack-adapters.test.ts b/tools/stack-bench/tests/stack-adapters.test.ts
new file mode 100644
index 00000000000..1a220832192
--- /dev/null
+++ b/tools/stack-bench/tests/stack-adapters.test.ts
@@ -0,0 +1,169 @@
+import assert from 'node:assert/strict';
+import { resolve } from 'node:path';
+import test from 'node:test';
+
+import { GRADING_CAPABILITY_IDS } from '../src/actions/action-contract.js';
+import { createStackAdapterRegistry } from '../src/stacks/stack-adapter-contract.js';
+import { leasedDatabaseEnvironment, STACK_ADAPTER_REGISTRY } from '../src/stacks/stack-adapters.js';
+import { stackAdapterVersion } from '../src/stacks/stack-identities.js';
+import { setSpacetimeStock } from '../src/stacks/backends/spacetime-operations.js';
+import type { Track } from '../src/composition/tracks.js';
+
+test('built-in adapters preserve the port grid and lease identity', () => {
+  assert.deepEqual(STACK_ADAPTER_REGISTRY.ids, ['mongodb', 'postgres', 'spacetime', 'stub']);
+  assert.equal(stackAdapterVersion('postgres'), '1.5.0');
+  assert.equal(STACK_ADAPTER_REGISTRY.get('mongodb').version, '1.4.0');
+  assert.equal(STACK_ADAPTER_REGISTRY.get('spacetime').version, '1.3.0');
+  assert.equal(STACK_ADAPTER_REGISTRY.get('stub').version, '1.1.0');
+  assert.throws(() => stackAdapterVersion('unknown'), /unknown stack adapter/);
+
+  const postgres = STACK_ADAPTER_REGISTRY.get('postgres');
+  assert.deepEqual(postgres.ports.forRun({ trackOffset: 100, runIndex: 2 }),
+    { vite: 6375, express: 6103, dbPort: 6532 });
+  assert.deepEqual(postgres.lease.prepare({
+    track: { name: 'shop' } as Track,
+    runIndex: 2,
+    serverUri: null,
+    runtimeDir: resolve('runtime'),
+    env: {},
+    helpers: {
+      moduleName: () => 'unused',
+      dbName: (track: Track, runIndex: number) => `${track.name}-${runIndex}`,
+      containerIdentity: (name: string) => ({ name, id: 'container-id' }),
+    },
+  }), {
+    lease: { serverUri: null, database: 'shop-2', module: null, dataDir: null,
+      container: { name: 'stack-bench-dev-postgres', id: 'container-id' } },
+    lockKeys: [],
+  });
+  assert.equal(typeof postgres.reset.run, 'function');
+  assert.equal(typeof postgres.databaseWrite.setStock, 'function');
+});
+
+test('build plans expose only artifacts owned by the selected stack', () => {
+  const appDir = resolve('bench', 'run', 'app');
+  const repo = resolve('repo');
+  const spacetime = STACK_ADAPTER_REGISTRY.get('spacetime').buildContainer.plan({ repo, appDir });
+  assert.equal(spacetime.mounts.some(mount => mount.target === '/deps/.spacetimedb-cli'), true);
+  const encodedWrapper = spacetime.init.match(/printf %s ([A-Za-z0-9+/=]+) \| base64/)?.[1];
+  assert(encodedWrapper);
+  assert.match(Buffer.from(encodedWrapper, 'base64').toString(),
+    /SpacetimeDB publish and dev must use the run identity/);
+  assert.equal(spacetime.readyFile, '/deps/.ready');
+  assert.equal(spacetime.networkNamespace, null);
+
+  const appliance = STACK_ADAPTER_REGISTRY.get('spacetime').buildContainer.plan({
+    repo,
+    appDir,
+    env: { STACK_BENCH_RELEASE_DEPS_VOLUME: 'stack-bench-release-deps',
+      STACK_BENCH_APPLIANCE: '1' },
+  });
+  assert.deepEqual(appliance.requiredPaths, []);
+  assert.deepEqual(appliance.mounts, [
+    { kind: 'volume', source: 'stack-bench-release-deps', target: '/release-deps', readOnly: true },
+  ]);
+  assert.doesNotMatch(appliance.init, /npm install|npm pack/);
+  assert.equal(appliance.networkNamespace, 'host');
+
+  for (const adapter of [STACK_ADAPTER_REGISTRY.get('postgres'),
+    STACK_ADAPTER_REGISTRY.get('mongodb'), STACK_ADAPTER_REGISTRY.get('stub')]) {
+    const plan = adapter.buildContainer.plan({ env: {} });
+    assert.deepEqual(plan.mounts, [], `${adapter.id} must not receive another stack's artifacts`);
+    assert.deepEqual(plan.requiredPaths, []);
+    assert.equal(plan.readyFile, null);
+  }
+});
+
+test('hosted stacks receive the exact leased database environment', () => {
+  assert.deepEqual(leasedDatabaseEnvironment(STACK_ADAPTER_REGISTRY.get('postgres'), {
+    database: 'app_ecom_run6', networkMode: 'host',
+  }), { DATABASE_URL: 'postgresql://appuser:local-app-password@127.0.0.1:6532/app_ecom_run6' });
+  assert.deepEqual(leasedDatabaseEnvironment(STACK_ADAPTER_REGISTRY.get('mongodb'), {
+    database: 'app_ecom_run7', networkMode: 'bridge',
+  }), { DATABASE_URL: 'mongodb://host.docker.internal:6537/app_ecom_run7' });
+  assert.deepEqual(leasedDatabaseEnvironment(STACK_ADAPTER_REGISTRY.get('spacetime'), {
+    database: null, networkMode: 'host',
+  }), {});
+});
+
+test('SpacetimeDB container operations use the isolated agent identity', () => {
+  const calls: Array<[string, readonly string[]]> = [];
+  const exec = (command: string, args: readonly string[]): string => {
+    calls.push([command, args]);
+    const sql = args.at(-1);
+    assert(sql);
+    if (/select id from item/.test(sql)) return '1\n';
+    if (/select id from warehouse/.test(sql)) return '2\n';
+    if (/select quantity/.test(sql)) return '3\n';
+    return '';
+  };
+  setSpacetimeStock({ item: 'widget', warehouse: 'east', quantity: 3,
+    spacetime: { buildContainer: { name: 'leased-build', id: 'leased-build-id' }, mod: 'shop',
+      containerUri: 'http://host.docker.internal:3000' }, exec });
+  assert.equal(calls.length, 4);
+  for (const [command, args] of calls) {
+    assert.equal(command, 'docker');
+    assert.deepEqual(args.slice(0, 8), ['exec', '--user', '10001:10001', '-e',
+      'HOME=/home/developer', '-e', 'USER=developer', 'leased-build-id']);
+  }
+});
+
+test('named actions map parameters to HTTP and SpacetimeDB requests', () => {
+  const restock = { id: 'restock', path: '/api/admin/restock', reducer: 'admin_restock',
+    args: [0, 0, 1], params: [{ name: 'itemId', in: 'body' as const, wireType: 'u64' as const },
+      { name: 'warehouseId', in: 'body' as const, wireType: 'u64' as const },
+      { name: 'quantity', in: 'body' as const }] };
+  const http = STACK_ADAPTER_REGISTRY.get('postgres').namedAction.request({
+    action: restock,
+    input: { values: { itemId: 'item', warehouseId: 'warehouse', quantity: 3 } },
+    url: 'http://app.test',
+  });
+  assert.deepEqual(JSON.parse(http.body),
+    { itemId: 'item', warehouseId: 'warehouse', quantity: 3 });
+
+  const spacetime = STACK_ADAPTER_REGISTRY.get('spacetime').namedAction.request({
+    action: restock,
+    input: { values: { itemId: '7', warehouseId: '18446744073709551615', quantity: 3 } },
+    spacetime: { uri: 'http://stdb.test', mod: 'shop' },
+  });
+  assert.equal(spacetime.url, 'http://stdb.test/v1/database/shop/call/admin_restock');
+  assert.equal(spacetime.body, '[7,18446744073709551615,3]');
+  assert.throws(() => STACK_ADAPTER_REGISTRY.get('spacetime').namedAction.request({
+    action: restock,
+    input: { values: { itemId: '-1', warehouseId: '9', quantity: 3 } },
+    spacetime: { uri: 'http://stdb.test', mod: 'shop' },
+  }), /invalid u64 value/);
+});
+
+test('every adapter declares what the grader can measure on it', () => {
+  const known = new Set<string>(GRADING_CAPABILITY_IDS);
+  for (const id of STACK_ADAPTER_REGISTRY.ids) {
+    const { grading } = STACK_ADAPTER_REGISTRY.get(id);
+    assert.ok(['http', 'reducer'].includes(grading.transport), `${id} transport`);
+    assert.ok(grading.capabilities.every(capability => known.has(capability)), `${id} capabilities`);
+    assert.equal(new Set(grading.capabilities).size, grading.capabilities.length, `${id} duplicates`);
+  }
+  assert.equal(STACK_ADAPTER_REGISTRY.get('spacetime').grading.transport, 'reducer');
+  for (const id of ['postgres', 'mongodb', 'stub'] as const) {
+    assert.equal(STACK_ADAPTER_REGISTRY.get(id).grading.transport, 'http');
+  }
+  for (const id of ['spacetime', 'postgres', 'mongodb'] as const) {
+    assert.deepEqual([...STACK_ADAPTER_REGISTRY.get(id).grading.capabilities], [...GRADING_CAPABILITY_IDS]);
+  }
+  const stub = STACK_ADAPTER_REGISTRY.get('stub');
+  const stubCapabilities: readonly string[] = stub.grading.capabilities;
+  assert.deepEqual(GRADING_CAPABILITY_IDS.filter(id => !stubCapabilities.includes(id)),
+    ['backend-lifecycle', 'database-write']);
+  assert.equal('databaseWrite' in stub, false);
+  assert.equal(stub.lifecycle.control, undefined);
+});
+
+test('registry rejects unknown, duplicate, and invalid adapter identities', () => {
+  assert.throws(() => STACK_ADAPTER_REGISTRY.get('new-db'), /unknown stack adapter/);
+  const identity = { id: 'fake', version: '1.0.0',
+    lifecycle: { activate: () => undefined } } as const;
+  assert.equal(createStackAdapterRegistry([identity]).get('fake').version, '1.0.0');
+  assert.throws(() => createStackAdapterRegistry([identity, identity]), /duplicate stack adapter/);
+  assert.throws(() => createStackAdapterRegistry([{ ...identity, version: 'latest' }]),
+    /version is invalid/);
+});
diff --git a/tools/stack-bench/tests/stack-grading-operations.test.ts b/tools/stack-bench/tests/stack-grading-operations.test.ts
new file mode 100644
index 00000000000..3cb287a766e
--- /dev/null
+++ b/tools/stack-bench/tests/stack-grading-operations.test.ts
@@ -0,0 +1,75 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import {
+  httpNamedActionRequest,
+  spacetimeNamedActionRequest,
+} from '../src/stacks/stack-grading-operations.js';
+
+test('SpacetimeDB requests preserve full unsigned 64-bit values', () => {
+  const request = spacetimeNamedActionRequest({
+    action: {
+      path: '',
+      reducer: 'set_stock',
+      params: [{ name: 'quantity', wireType: 'u64' }],
+    },
+    input: { values: { quantity: '18446744073709551615' } },
+    spacetime: { uri: 'http://127.0.0.1:3000', mod: 'shop' },
+  });
+
+  assert.equal(request.url, 'http://127.0.0.1:3000/v1/database/shop/call/set_stock');
+  assert.equal(request.body, '[18446744073709551615]');
+  assert.throws(
+    () => spacetimeNamedActionRequest({
+      action: {
+        path: '',
+        reducer: 'set_stock',
+        params: [{ name: 'quantity', wireType: 'u64' }],
+      },
+      input: { values: { quantity: '18446744073709551616' } },
+      spacetime: { uri: 'http://127.0.0.1:3000', mod: 'shop' },
+    }),
+    (error: unknown) => {
+      assert(error instanceof Error);
+      assert.equal((error as Error & { code?: string }).code, 'invalid_named_action_input');
+      return true;
+    },
+  );
+});
+
+test('HTTP requests substitute path values and keep other values in the body', () => {
+  const request = httpNamedActionRequest({
+    action: {
+      path: '/items/:item',
+      method: 'PATCH',
+      params: [
+        { name: 'item', in: 'path', placeholder: ':item' },
+        { name: 'quantity' },
+      ],
+    },
+    input: { values: { item: 'camera/one', quantity: 3 } },
+    url: 'http://127.0.0.1:4000/',
+  });
+
+  assert.deepEqual(request, {
+    url: 'http://127.0.0.1:4000/items/camera%2Fone',
+    method: 'PATCH',
+    body: '{"quantity":3}',
+    missingNote: 'no route at /items/:item',
+  });
+
+  const replay = httpNamedActionRequest({
+    action: {
+      path: '/items/:item/reviews',
+      params: [
+        { name: 'item', in: 'path', placeholder: ':item' },
+        { name: 'rating' },
+        { name: 'comment' },
+      ],
+    },
+    input: { args: [42, 5, 'verified purchase'] },
+    url: 'http://127.0.0.1:4000',
+  });
+  assert.equal(replay.url, 'http://127.0.0.1:4000/items/42/reviews');
+  assert.deepEqual(JSON.parse(replay.body), { rating: 5, comment: 'verified purchase' });
+});
diff --git a/tools/stack-bench/tests/stack-parity.contract.ts b/tools/stack-bench/tests/stack-parity.contract.ts
new file mode 100644
index 00000000000..192457a3c79
--- /dev/null
+++ b/tools/stack-bench/tests/stack-parity.contract.ts
@@ -0,0 +1,56 @@
+import assert from 'node:assert/strict';
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import test from 'node:test';
+
+import { STACK_BENCH_ROOT } from '../src/package-root.js';
+import { compileCampaignFile } from '../src/campaigns/campaign-compiler.js';
+import type { CompiledCampaignPlan } from '../src/campaigns/campaign-compiler.js';
+
+const reference = join(STACK_BENCH_ROOT, 'appliance', 'campaign.ecommerce-progression-reference.json');
+
+// Every level's scored checks, with their points, in a stable order.
+function gradedChecks(plan: CompiledCampaignPlan): string[] {
+  const attempt = plan.attempts[0];
+  assert.ok(attempt);
+  return attempt.condition.requested.levels.map(level => `L${level.level} `
+    + (level.selection.scoredChecks ?? []).map(check => `${check.stableKey}=${check.points}`).sort().join(' '));
+}
+
+// Points available per questline: the denominators of the questline average.
+function questlinePoints(plan: CompiledCampaignPlan): string[] {
+  const catalog = plan.featureCatalog;
+  assert.ok(catalog);
+  const nodePoints = new Map(catalog.definition.nodes.map(node =>
+    [node.id, node.gradingChecks.reduce((total, check) => total + check.points, 0)]));
+  return catalog.definition.questlines.map(questline => `${questline.id}=`
+    + questline.nodes.reduce((total, id) => total + (nodePoints.get(id) ?? 0), 0));
+}
+
+test('each stack compiles the reference graph to identical checks, points, and questline denominators', () => {
+  const source = JSON.parse(readFileSync(reference, 'utf8')) as {
+    stacks: Array<{ id: string; adapterVersion: string }>;
+  };
+  assert.deepEqual(source.stacks.map(stack => stack.id).sort(), ['mongodb', 'postgres', 'spacetime']);
+  const dir = mkdtempSync(join(tmpdir(), 'stack-parity-'));
+  try {
+    const together = compileCampaignFile(reference);
+    const alone = source.stacks.map(stack => {
+      const file = join(dir, `${stack.id}.json`);
+      writeFileSync(file, JSON.stringify({ ...source, stacks: [stack] }));
+      const plan = compileCampaignFile(file);
+      assert.deepEqual(plan.stacks.map(item => item.id), [stack.id]);
+      return plan;
+    });
+    for (const plan of alone) {
+      assert.deepEqual(gradedChecks(plan), gradedChecks(together));
+      assert.deepEqual(questlinePoints(plan), questlinePoints(together));
+    }
+    const levels = together.attempts[0]!.condition.requested.levels;
+    assert.equal(levels.length, 6);
+    assert.ok(levels.every(level => (level.selection.scoredChecks ?? []).length > 0));
+  } finally {
+    rmSync(dir, { recursive: true, force: true });
+  }
+});
diff --git a/tools/stack-bench/tests/stack-reference-operations.test.ts b/tools/stack-bench/tests/stack-reference-operations.test.ts
new file mode 100644
index 00000000000..a4e828ff025
--- /dev/null
+++ b/tools/stack-bench/tests/stack-reference-operations.test.ts
@@ -0,0 +1,117 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { deployMongoDbReference, deployPostgresReference, deploySpacetimeReference }
+  from '../src/stacks/stack-reference-operations.js';
+import type { HostedReferenceHelpers, SpacetimeReferenceHelpers }
+  from '../src/stacks/stack-reference-operations.js';
+import { loadTrack } from '../src/composition/tracks.js';
+
+test('PostgreSQL reference deployment uses its locked schema tool', async () => {
+  const dockerCalls: Array<Parameters<HostedReferenceHelpers['docker']>> = [];
+  const helpers: HostedReferenceHelpers = {
+    dbName() { return 'app_ecom_run0'; },
+    runSync(label: string) {
+      return label === 'inspecting leased database container' ? 'container-id\n' : '';
+    },
+    docker(...args) { dockerCalls.push(args); },
+    phase() {},
+    startDetached() {},
+    async waitFor() {},
+    containerLogs() { return ''; },
+  };
+  await deployPostgresReference({
+    args: { backend: 'postgres', runIndex: 0 },
+    metadata: { installDirectories: [], server: { directory: 'server' },
+      client: { directory: 'client' } },
+    lease: { resources: { database: 'app_ecom_run0',
+      container: { name: 'postgres', id: 'container-id' } } },
+    track: { slug: 'ecommerce', restartProbe: '/api/items' }, container: 'build-0',
+    ports: { dbPort: 6532, vite: 6573 }, buildNetworkMode: 'host', helpers,
+  });
+
+  assert.equal(dockerCalls.length, 2);
+  const dockerCall = dockerCalls.find(call => call[2] === './node_modules/.bin/drizzle-kit');
+  assert(dockerCall);
+  assert.deepEqual(dockerCall.slice(0, 4), [
+    'build-0', '/app/server', './node_modules/.bin/drizzle-kit', ['push', '--force'],
+  ]);
+  assert.match(dockerCall[4]?.DATABASE_URL ?? '', /app_ecom_run0/);
+  assert.deepEqual(dockerCalls[1]?.slice(0, 4), [
+    'build-0', '/app/client', 'npm', ['run', 'build'],
+  ]);
+});
+
+test('hosted reference credentials stay in process environment', async () => {
+  const starts: Array<Parameters<HostedReferenceHelpers['startDetached']>> = [];
+  const helpers: HostedReferenceHelpers = {
+    dbName() { return 'app_ecom_run0'; },
+    runSync(label: string) {
+      return label === 'inspecting leased database container' ? 'container-id\n' : '';
+    },
+    docker() {},
+    phase() {},
+    startDetached(...args) { starts.push(args); },
+    async waitFor() {},
+    containerLogs() { return ''; },
+  };
+  await deployMongoDbReference({
+    args: { backend: 'mongodb', runIndex: 0 },
+    metadata: { installDirectories: [], server: { directory: 'server' },
+      client: { directory: 'client' } },
+    lease: { resources: { database: 'app_ecom_run0',
+      container: { name: 'mongodb', id: 'container-id' } } },
+    track: { slug: 'ecommerce', restartProbe: '' }, container: 'build-0',
+    ports: { dbPort: 6537, vite: 6673 },
+    buildNetworkMode: 'host', helpers,
+  });
+  const applicationStart = starts[0];
+  assert(applicationStart);
+  assert.match(applicationStart[3].DATABASE_URL ?? '', /app_ecom_run0/);
+  assert.deepEqual(applicationStart.slice(0, 3), ['build-0', '/app', 'reference-application']);
+  assert.equal(applicationStart[3].PORT, '6673');
+  assert.equal(applicationStart[3].JWT_SECRET, 'stack-bench-reference-only-secret-2026');
+  assert.deepEqual(applicationStart[4], { script: 'start' });
+});
+
+test('Spacetime reference client uses its assigned Vite port', async () => {
+  const starts: Array<Parameters<SpacetimeReferenceHelpers['startDetached']>> = [];
+  const waits: Array<Parameters<SpacetimeReferenceHelpers['waitFor']>> = [];
+  const helpers: SpacetimeReferenceHelpers = {
+    docker() {},
+    loadTrack() { return loadTrack('ecommerce'); },
+    moduleName() { return 'ecommerce_42'; },
+    startDetached(...args) { starts.push(args); },
+    async waitFor(...args) { waits.push(args); },
+    containerLogs() { return ''; },
+  };
+
+  await deploySpacetimeReference({
+    args: { track: 'ecommerce', runIndex: 42 },
+    metadata: {
+      kind: 'spacetime',
+      installDirectories: [],
+      moduleDirectory: 'backend/spacetimedb',
+      bindingsDirectory: 'client/src/module_bindings',
+      client: { directory: 'client' },
+    },
+    lease: { resources: {
+      module: 'ecommerce_42',
+      serverUri: 'ws://host.docker.internal:3315',
+    } },
+    container: 'build-42',
+    ports: { vite: 6475 },
+    buildNetworkMode: 'bridge',
+    helpers,
+  });
+
+  assert.equal(starts.length, 1);
+  const clientStart = starts[0];
+  const clientWait = waits[0];
+  assert(clientStart);
+  assert(clientWait);
+  assert.deepEqual(clientStart.slice(0, 3), ['build-42', '/app/client', 'reference-client']);
+  assert.equal(clientStart[3].VITE_PORT, '6475');
+  assert.deepEqual(clientStart[4], { networkVisible: true, port: 6475 });
+  assert.equal(clientWait[0], 'http://127.0.0.1:6475');
+});
diff --git a/tools/stack-bench/tests/stack-testability.test.ts b/tools/stack-bench/tests/stack-testability.test.ts
new file mode 100644
index 00000000000..28ccfe448ad
--- /dev/null
+++ b/tools/stack-bench/tests/stack-testability.test.ts
@@ -0,0 +1,87 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import { GRADING_CAPABILITY_IDS } from '../src/actions/action-contract.js';
+import { describeStackTestabilityProblems,
+  resolveStackTestability } from '../src/campaigns/stack-testability.js';
+import type { CompiledRecipePlan } from '../src/composition/composition-compiler.js';
+import type { CompiledStep } from '../src/composition/definition-compiler.js';
+import type { TrackAction } from '../src/composition/tracks.js';
+
+const boundAction = { id: 'buy', path: '/api/buy', reducer: 'buy_now', args: [0],
+  params: [{ name: 'itemId', in: 'body' }] };
+
+const criteria: Record<string, CompiledStep[]> = {
+  replay: [{ do: 'replayAs', actor: 'other', from: 'owner', match: 'secret' }],
+  namedReplay: [{ do: 'replayAs', actor: 'other', from: 'owner', match: 'secret',
+    namedAction: boundAction }],
+  routeOnly: [{ do: 'replayAs', actor: 'other', from: 'owner', match: 'secret',
+    namedAction: { id: 'ship', path: '/api/ship', args: [] } }],
+  trackCall: [{ do: 'callAction', actor: 'owner', action: 'buy', input: {} }],
+  unknownCall: [{ do: 'callAction', actor: 'owner', action: 'refund', input: {} }],
+  stock: [{ do: 'dbSetStock', item: 'Lamp', warehouse: 'East', quantity: 1 }],
+  raced: [{ do: 'race', branches: [[{ do: 'forgeWrite', actor: 'a', fromActor: 'b' }],
+    [{ do: 'click', actor: 'a', testid: 'buy-now' }]] }],
+  browser: [{ do: 'click', actor: 'owner', testid: 'buy-now' }],
+};
+
+function plan(setup: CompiledStep[] = []): CompiledRecipePlan {
+  const feature = { id: 1, name: 'feature', setup,
+    criteria: Object.entries(criteria).map(([id, steps]) => ({ id, desc: id, points: 1, steps })) };
+  return {
+    checks: Object.keys(criteria).map(id => ({ stableKey: `pack.feature.${id}`, packId: 'pack',
+      checkGroupId: 'group', criterionId: id, role: 'feature', source: 'scenario.json',
+      featureId: 1, description: id, sourcePoints: 1, points: 1 })),
+    execution: [{ id: 'exec', source: 'scenario.json', checkGroups: [{ packId: 'pack',
+      packVersion: '1.0.0', checkGroupId: 'group', role: 'feature', source: 'scenario.json',
+      feature, actions: [] }] }],
+  } as unknown as CompiledRecipePlan;
+}
+
+const http = { id: 'postgres', grading: { transport: 'http' as const, capabilities: GRADING_CAPABILITY_IDS } };
+const reducer = { id: 'spacetime', grading: { transport: 'reducer' as const, capabilities: GRADING_CAPABILITY_IDS } };
+const stub = { id: 'stub', grading: { transport: 'http' as const,
+  capabilities: GRADING_CAPABILITY_IDS.filter(id => id !== 'database-write') } };
+const trackActions = [boundAction] as unknown as TrackAction[];
+const keys = (...ids: string[]) => ids.map(id => `pack.feature.${id}`);
+
+const resolve = (checkKeys: string[], stacks = [http, reducer, stub], setup?: CompiledStep[]) =>
+  describeStackTestabilityProblems(resolveStackTestability({
+    plan: plan(setup), checkKeys, trackActions, stacks }));
+
+test('a replay without a named action only resolves where HTTP writes are captured', () => {
+  assert.deepEqual(resolve(keys('replay')), [
+    'spacetime cannot measure pack.feature.replay: replayAs re-issues a captured HTTP write, '
+    + 'and spacetime issues writes as reducer calls; give the step a named action',
+  ]);
+  assert.deepEqual(resolve(keys('namedReplay')), []);
+});
+
+test('named actions need the binding each transport issues', () => {
+  assert.deepEqual(resolve(keys('routeOnly')), [
+    'spacetime cannot measure pack.feature.routeOnly: replayAs application action ship declares no reducer for spacetime',
+  ]);
+  assert.deepEqual(resolve(keys('trackCall')), []);
+  assert.deepEqual(resolve(keys('unknownCall'), [http]), [
+    'postgres cannot measure pack.feature.unknownCall: callAction names no application action "refund"',
+  ]);
+});
+
+test('runtime capabilities come from the action registry and the stack declaration', () => {
+  assert.deepEqual(resolve(keys('stock')), [
+    'stub cannot measure pack.feature.stock: dbSetStock needs the database-write capability, which stub does not provide',
+  ]);
+  assert.deepEqual(resolve(keys('browser')), []);
+});
+
+test('branches and feature setup count, unselected criteria do not', () => {
+  assert.deepEqual(resolve(keys('raced'), [reducer]), [
+    'spacetime cannot measure pack.feature.raced: forgeWrite re-issues a captured HTTP write, '
+    + 'and spacetime issues writes as reducer calls; give the step a named action',
+  ]);
+  assert.deepEqual(resolve(keys('browser'), [stub], criteria.stock), [
+    'stub cannot measure pack.feature.browser: dbSetStock needs the database-write capability, which stub does not provide',
+  ]);
+  assert.deepEqual(resolve(keys('browser'), [reducer]), []);
+  assert.throws(() => resolve(keys('missing')), /selected check pack\.feature\.missing is not in the recipe/);
+});
diff --git a/tools/stack-bench/tests/tracks.test.ts b/tools/stack-bench/tests/tracks.test.ts
new file mode 100644
index 00000000000..e104fcc3b95
--- /dev/null
+++ b/tools/stack-bench/tests/tracks.test.ts
@@ -0,0 +1,67 @@
+import assert from 'node:assert/strict';
+import { existsSync } from 'node:fs';
+import test from 'node:test';
+
+import { levelPrompt, listTracks, loadTrack, portsFor, RUN_INDEX_CAP, suitesFor }
+  from '../src/composition/tracks.js';
+import type { TrackSuiteSource } from '../src/composition/tracks.js';
+
+test('each validated track level has a prompt and declared scenario files', () => {
+  for (const name of listTracks()) {
+    const track = loadTrack(name);
+    assert.ok(track.validatedThrough >= 0, `${name} validatedThrough must be non-negative`);
+    assert.ok(track.plannedThrough >= track.validatedThrough,
+      `${name} plannedThrough must include its validated levels`);
+    for (let level = 1; level <= track.validatedThrough; level += 1) {
+      assert.ok(levelPrompt(track, level).trim(), `${name} L${level} prompt is empty`);
+      const suites = suitesFor(track, level);
+      assert.ok(suites.length > 0, `${name} L${level} has no suites`);
+      for (const suite of suites) {
+        assert.ok(existsSync(suite.spec), `${name} L${level} suite is missing: ${suite.spec}`);
+      }
+    }
+  }
+});
+
+test('an undeclared level never falls back to L1 grading', () => {
+  const chat = loadTrack('chat');
+  assert.throws(() => suitesFor(chat, 3), /No scenario suites declared/);
+});
+
+test('invalid track and run-index inputs throw instead of terminating the process', () => {
+  assert.throws(() => loadTrack('missing-track'), /Unknown track/);
+  const track = loadTrack('ecommerce');
+  for (const runIndex of [-1, 0.5, RUN_INDEX_CAP + 1]) {
+    assert.throws(() => portsFor(track, 'mongodb', runIndex), /integer from 0 through/);
+  }
+});
+
+test('declared levels remain available before validation', () => {
+  const chat = loadTrack('chat');
+  const ecommerce = loadTrack('ecommerce');
+  assert.equal(chat.validatedThrough, 0);
+  assert.equal(ecommerce.validatedThrough, 0);
+  assert.equal(ecommerce.plannedThrough, 6);
+  assert.ok(suitesFor(ecommerce, 3).some(suite => suite.id === 'features'));
+});
+
+test('suite inheritance follows the manifest policy instead of suite-name magic', () => {
+  const ecommerce = loadTrack('ecommerce');
+  const inherited = suitesFor(ecommerce, 3).filter(suite => suite.inherited);
+  assert.deepEqual(inherited.map(suite => suite.id), [
+    'invariants@L1', 'contention@L1', 'invariants@L2',
+  ]);
+
+  const synthetic: TrackSuiteSource = {
+    name: 'synthetic',
+    dir: ecommerce.dir,
+    suites: {
+      1: [
+        { id: 'features', spec: 'feature.json', inherit: 'all-higher-levels' },
+        { id: 'invariants', spec: 'invariant.json', inherit: 'none' },
+      ],
+      2: [{ id: 'next', spec: 'next.json', inherit: 'none' }],
+    },
+  };
+  assert.deepEqual(suitesFor(synthetic, 2).map(suite => suite.id), ['next', 'features@L1']);
+});
diff --git a/tools/stack-bench/tests/transport-frames.test.ts b/tools/stack-bench/tests/transport-frames.test.ts
new file mode 100644
index 00000000000..57fda2f8634
Binary files /dev/null and b/tools/stack-bench/tests/transport-frames.test.ts differ
diff --git a/tools/stack-bench/tracks/chat/LEVELS.md b/tools/stack-bench/tracks/chat/LEVELS.md
new file mode 100644
index 00000000000..006fe936772
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/LEVELS.md
@@ -0,0 +1,35 @@
+# Chat progression
+
+The chat track covers rooms, messages, presence, and per-user state. Its L1 and
+L2 definitions are available, but it has no active reference fixtures. Do not
+present chat results as a qualified cross-stack comparison.
+
+`track.json` is the source of truth for available suites and the validation
+boundary.
+
+## L1: Chat and accounts
+
+- account creation and sessions;
+- room creation and messages;
+- presence and typing state;
+- read receipts and unread counts;
+- ordering, reconnect, and system invariants.
+
+Each actor uses a separate browser context so identity and per-user state are
+measured independently.
+
+## L2: Authorization and people
+
+- room ownership and private rooms;
+- membership, invitations, and removal;
+- profiles and friend requests;
+- presence privacy and authorization.
+
+## Planned work
+
+- L3 adds contended counters, bounded capacity, unique claims, and transfers.
+- L4 adds scheduled and expiring work.
+- L5 adds correctness and efficiency under load.
+
+Planned work is not launchable or qualified. New scored checks require matching
+reference, null-control, and defect-detection evidence before promotion.
diff --git a/tools/stack-bench/tracks/chat/contracts/01-basic-chat.json b/tools/stack-bench/tracks/chat/contracts/01-basic-chat.json
new file mode 100644
index 00000000000..5e31a6302e8
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/contracts/01-basic-chat.json
@@ -0,0 +1,277 @@
+{
+  "level": 1,
+  "track": "stack-bench",
+  "hooks": [
+    {
+      "id": "app-title",
+      "element": "the app's visible title, \"Chat\"",
+      "stage": "landing",
+      "check": "visible"
+    },
+    {
+      "id": "signup-username",
+      "element": "username input on the sign-up form",
+      "stage": "landing",
+      "check": "visible"
+    },
+    {
+      "id": "signup-password",
+      "element": "password input on the sign-up form",
+      "stage": "landing",
+      "check": "visible"
+    },
+    {
+      "id": "signup-submit",
+      "element": "button that creates the account",
+      "stage": "landing",
+      "check": "visible"
+    },
+    {
+      "id": "signin-toggle",
+      "element": "control that switches from the sign-up form to the sign-in form",
+      "stage": "landing",
+      "check": "attached"
+    },
+    {
+      "id": "signin-username",
+      "element": "username input on the sign-in form",
+      "stage": "landing",
+      "check": "attached",
+      "revealedBy": "signin-toggle"
+    },
+    {
+      "id": "signin-password",
+      "element": "password input on the sign-in form",
+      "stage": "landing",
+      "check": "attached",
+      "revealedBy": "signin-toggle"
+    },
+    {
+      "id": "signin-submit",
+      "element": "button that signs the user in with existing credentials",
+      "stage": "landing",
+      "check": "attached",
+      "revealedBy": "signin-toggle"
+    },
+    {
+      "id": "auth-error",
+      "element": "error message shown when sign-up or sign-in is rejected (taken username, wrong password)",
+      "stage": "scenario",
+      "note": "visible after a rejected sign-up or sign-in; must not appear on success"
+    },
+    {
+      "id": "current-user",
+      "element": "element displaying the signed-in account's username",
+      "stage": "main",
+      "check": "visible"
+    },
+    {
+      "id": "signout",
+      "element": "button that signs the current user out",
+      "stage": "main",
+      "check": "attached"
+    },
+    {
+      "id": "room-create",
+      "element": "control that starts creating a new room",
+      "stage": "main",
+      "check": "visible"
+    },
+    {
+      "id": "room-name-input",
+      "element": "text input for the new room's name",
+      "stage": "main",
+      "check": "attached",
+      "revealedBy": "room-create"
+    },
+    {
+      "id": "room-name-submit",
+      "element": "button that confirms room creation",
+      "stage": "main",
+      "check": "attached",
+      "revealedBy": "room-create"
+    },
+    {
+      "id": "room-list",
+      "element": "container listing the rooms",
+      "stage": "main",
+      "check": "attached"
+    },
+    {
+      "id": "room-item",
+      "element": "one entry per room inside the room list (repeated testid), containing the room name",
+      "stage": "main-after-create",
+      "check": "visible"
+    },
+    {
+      "id": "online-users",
+      "element": "container listing the usernames of users currently online",
+      "stage": "main",
+      "check": "attached",
+      "note": "container listing signed-in users"
+    },
+    {
+      "id": "online-user",
+      "element": "one entry per signed-in user (repeated testid), containing that user's username",
+      "stage": "scenario",
+      "note": "appears while that user is signed in, gone once they sign out"
+    },
+    {
+      "id": "message-input",
+      "element": "text input for composing a message; pressing Enter sends it",
+      "stage": "room",
+      "check": "visible"
+    },
+    {
+      "id": "message-list",
+      "element": "scrollable container holding the room's messages",
+      "stage": "room",
+      "check": "attached"
+    },
+    {
+      "id": "message-item",
+      "element": "one entry per message (repeated testid), containing the message text and its author's username",
+      "stage": "room-after-send",
+      "check": "visible"
+    },
+    {
+      "id": "leave-room",
+      "element": "button that leaves the current room",
+      "stage": "room",
+      "check": "attached"
+    },
+    {
+      "id": "send-error",
+      "element": "error shown when a message is rejected (empty, too long, or rate limited)",
+      "stage": "scenario",
+      "note": "visible after a rejected send; must not appear on a successful send"
+    },
+    {
+      "id": "typing-indicator",
+      "element": "the \"User is typing...\" text element",
+      "stage": "scenario",
+      "note": "visible while another user in the SAME room is typing; gone within 6s of inactivity"
+    },
+    {
+      "id": "read-receipt",
+      "element": "the \"Seen by ...\" element under a message, listing the account names that have seen it (never the sender)",
+      "stage": "scenario",
+      "note": "appears under a message after another user has viewed it"
+    },
+    {
+      "id": "unread-badge",
+      "element": "numeric unread-count badge on a room entry in the sidebar",
+      "stage": "scenario",
+      "note": "appears on a room entry that has unread messages for the current user; clears when that room is opened"
+    },
+    {
+      "id": "react-button",
+      "element": "control on a message that adds a reaction (an emoji picker trigger or a specific emoji button)",
+      "stage": "scenario",
+      "note": "present on each message; clicking it adds the current user's reaction"
+    },
+    {
+      "id": "reaction-count",
+      "element": "the numeric count shown beside an emoji on a message",
+      "stage": "scenario",
+      "note": "shows how many users reacted with that emoji; repeated per emoji per message"
+    },
+    {
+      "id": "pin-button",
+      "element": "control on a message that pins it",
+      "stage": "scenario",
+      "note": "present on each message"
+    },
+    {
+      "id": "pinned-item",
+      "element": "one entry per pinned message in the room's pinned list (repeated testid)",
+      "stage": "scenario",
+      "note": "the room's pinned messages, capped at three"
+    },
+    {
+      "id": "pin-error",
+      "element": "error shown when pinning is refused because the room already has three pinned messages",
+      "stage": "scenario",
+      "note": "visible after a rejected pin; must not appear on a successful one"
+    },
+    {
+      "id": "pinned-unpin",
+      "element": "control on a pinned entry that unpins it",
+      "stage": "scenario",
+      "note": "present on each pinned-item"
+    },
+    {
+      "id": "member-panel",
+      "element": "container listing the members of the current room",
+      "stage": "room",
+      "check": "attached"
+    },
+    {
+      "id": "member-item",
+      "element": "one entry per room member (repeated testid), containing that member's username",
+      "stage": "scenario",
+      "note": "appears for each member of the current room; gone once they leave or are removed"
+    },
+    {
+      "id": "member-owner",
+      "element": "marker on a member entry showing they own the room",
+      "stage": "scenario",
+      "note": "present on the owner's entry only"
+    },
+    {
+      "id": "member-remove",
+      "element": "control on a member entry that removes them from the room",
+      "stage": "scenario",
+      "note": "shown to owners only"
+    },
+    {
+      "id": "member-promote",
+      "element": "control on a member entry that promotes them to owner",
+      "stage": "scenario",
+      "note": "shown to owners only"
+    },
+    {
+      "id": "dm-start",
+      "element": "control on another user's entry that opens a direct conversation with them",
+      "stage": "scenario",
+      "note": "present on each other user listed as online, and on each member entry"
+    },
+    {
+      "id": "dm-list",
+      "element": "container listing the user's direct conversations",
+      "stage": "main",
+      "check": "attached"
+    },
+    {
+      "id": "dm-item",
+      "element": "one entry per direct conversation (repeated testid), naming the other participant",
+      "stage": "scenario",
+      "note": "appears once a direct conversation exists; visible only to its two participants"
+    },
+    {
+      "id": "permission-error",
+      "element": "error shown when the server refuses an action the user is not allowed to take",
+      "stage": "scenario",
+      "note": "visible after a refused unpin, removal, promotion, edit or delete"
+    },
+    {
+      "id": "message-edit",
+      "element": "control on a message that edits it",
+      "stage": "scenario",
+      "note": "shown on the author's own messages"
+    },
+    {
+      "id": "message-delete",
+      "element": "control on a message that deletes it",
+      "stage": "scenario",
+      "note": "shown on the author's own messages"
+    },
+    {
+      "id": "edited-marker",
+      "element": "marker showing a message has been edited",
+      "stage": "scenario",
+      "note": "appears on a message after it is edited"
+    }
+  ],
+  "note": "Level 1 is sequential's basic chat with accounts added. Hooks cover the sign-up and sign-in forms, rooms and messages, plus typing indicators, read receipts and unread counts."
+}
diff --git a/tools/stack-bench/tracks/chat/contracts/02-authorization.json b/tools/stack-bench/tracks/chat/contracts/02-authorization.json
new file mode 100644
index 00000000000..411ad2ba6cc
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/contracts/02-authorization.json
@@ -0,0 +1,108 @@
+{
+  "level": 2,
+  "track": "chat",
+  "note": "The core flow remains L1-only. Level 2 runs as scenarios. Repeated hooks use one element per row with identifying text.",
+  "hooks": [
+    {
+      "id": "room-private-toggle",
+      "element": "control at room creation that marks the room private",
+      "stage": "scenario",
+      "note": "present on the room creation surface; its state at creation decides visibility"
+    },
+    {
+      "id": "room-private-badge",
+      "element": "marker on a room that is private, visible to its members",
+      "stage": "scenario",
+      "note": "absent on public rooms"
+    },
+    {
+      "id": "invite-input",
+      "element": "input where a room owner enters a username to invite",
+      "stage": "scenario",
+      "note": "owner-only, on private rooms"
+    },
+    {
+      "id": "invite-submit",
+      "element": "control that sends the invitation",
+      "stage": "scenario",
+      "note": "owner-only, on private rooms"
+    },
+    {
+      "id": "perm-error",
+      "element": "error shown when an action is refused for lack of permission",
+      "stage": "scenario",
+      "note": "visible after a refused action; must not appear on permitted ones"
+    },
+    {
+      "id": "profile-panel",
+      "element": "panel showing a user's profile, opened by clicking their username",
+      "stage": "scenario",
+      "note": "one panel; contents change with the user being viewed"
+    },
+    {
+      "id": "profile-name",
+      "element": "the viewed user's display name inside the profile panel",
+      "stage": "scenario"
+    },
+    {
+      "id": "profile-bio",
+      "element": "the viewed user's bio inside the profile panel",
+      "stage": "scenario",
+      "note": "live while the panel is open — an edit by the profile's owner appears without reopening"
+    },
+    {
+      "id": "profile-close",
+      "element": "control that closes the profile panel",
+      "stage": "scenario"
+    },
+    {
+      "id": "bio-input",
+      "element": "input where a user edits their own bio",
+      "stage": "scenario",
+      "note": "only on the viewer's own profile"
+    },
+    {
+      "id": "bio-save",
+      "element": "control that saves the bio edit",
+      "stage": "scenario",
+      "note": "only on the viewer's own profile"
+    },
+    {
+      "id": "friend-request",
+      "element": "control on another user's profile that sends a friend request",
+      "stage": "scenario",
+      "note": "absent on one's own profile and on an existing friend's profile"
+    },
+    {
+      "id": "friend-pending",
+      "element": "one entry per incoming friend request (repeated testid), containing the sender's username",
+      "stage": "scenario"
+    },
+    {
+      "id": "friend-accept",
+      "element": "control on a pending request that accepts it",
+      "stage": "scenario"
+    },
+    {
+      "id": "friend-decline",
+      "element": "control on a pending request that declines it",
+      "stage": "scenario"
+    },
+    {
+      "id": "friend-item",
+      "element": "one entry per friend in the friends list (repeated testid), containing that friend's username",
+      "stage": "scenario"
+    },
+    {
+      "id": "friend-presence",
+      "element": "online/offline indicator inside a friend entry",
+      "stage": "scenario",
+      "note": "contains the word 'online' or 'offline'; flips live when the friend signs in or out"
+    },
+    {
+      "id": "unfriend",
+      "element": "control inside a friend entry that removes the friendship",
+      "stage": "scenario"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/chat/contracts/appendix-01.md b/tools/stack-bench/tracks/chat/contracts/appendix-01.md
new file mode 100644
index 00000000000..1db55af0d91
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/contracts/appendix-01.md
@@ -0,0 +1,63 @@
+
+
+## Application interface
+
+Use each interface name below as an exact HTML attribute value. Use `id` for a
+one-off element. Use `data-role` when the same interface can appear more than
+once. These attributes do not prescribe the design, architecture, or
+implementation.
+
+Rules:
+- Values are exactly as listed in kebab-case.
+- An element that is hidden until a menu/toggle opens still counts, as long as it is in the DOM after its toggle is clicked.
+- Do not reuse these names on unrelated elements.
+
+| Element ID | Element |
+|---|---|
+| `app-title` | the app's visible title, `Chat` |
+| `signup-username` | username input on the sign-up form |
+| `signup-password` | password input on the sign-up form |
+| `signup-submit` | button that creates the account |
+| `signin-toggle` | control that switches from the sign-up form to the sign-in form |
+| `signin-username` | username input on the sign-in form |
+| `signin-password` | password input on the sign-in form |
+| `signin-submit` | button that signs the user in with existing credentials |
+| `auth-error` | visible after a rejected sign-up or sign-in; must not appear on success |
+| `current-user` | element displaying the signed-in account's username |
+| `signout` | button that signs the current user out |
+| `room-create` | control that starts creating a new room |
+| `room-name-input` | text input for the new room's name |
+| `room-name-submit` | button that confirms room creation |
+| `room-list` | container listing the rooms |
+| `room-item` | one entry per room inside the room list, containing the room name |
+| `online-users` | container listing the usernames of users currently online |
+| `online-user` | appears while that user is signed in, gone once they sign out |
+| `message-input` | text input for composing a message; pressing Enter sends it |
+| `message-list` | scrollable container holding the room's messages |
+| `message-item` | one entry per message, containing the message text and its author's username |
+| `leave-room` | button that leaves the current room |
+| `send-error` | visible after a rejected send; must not appear on a successful send |
+| `typing-indicator` | visible while another user in the SAME room is typing; gone within 6s of inactivity |
+| `read-receipt` | appears under a message after another user has viewed it |
+| `unread-badge` | appears on a room entry that has unread messages for the current user; clears when that room is opened |
+| `react-button` | present on each message; clicking it adds the current user's reaction |
+| `reaction-count` | shows how many users reacted with that emoji; repeated per emoji per message |
+| `pin-button` | present on each message |
+| `pinned-item` | the room's pinned messages, capped at three |
+| `pin-error` | visible after a rejected pin; must not appear on a successful one |
+| `pinned-unpin` | present on each pinned-item |
+| `member-panel` | container listing the members of the current room |
+| `member-item` | appears for each member of the current room; gone once they leave or are removed |
+| `member-owner` | present on the owner's entry only |
+| `member-remove` | shown to owners only |
+| `member-promote` | shown to owners only |
+| `dm-start` | present on each other user listed as online, and on each member entry |
+| `dm-list` | container listing the user's direct conversations |
+| `dm-item` | appears once a direct conversation exists; visible only to its two participants |
+| `permission-error` | visible after a refused unpin, removal, promotion, edit or delete |
+| `message-edit` | shown on the author's own messages |
+| `message-delete` | shown on the author's own messages |
+| `edited-marker` | appears on a message after it is edited |
+
+Before declaring DEPLOY_COMPLETE, verify the interface by running the contract
+linter (command provided in your build instructions) and fix any failures.
diff --git a/tools/stack-bench/tracks/chat/contracts/appendix-02.md b/tools/stack-bench/tracks/chat/contracts/appendix-02.md
new file mode 100644
index 00000000000..3960479ebdd
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/contracts/appendix-02.md
@@ -0,0 +1,81 @@
+
+
+## Application interface
+
+Use each interface name below as an exact HTML attribute value. Use `id` for a
+one-off element. Use `data-role` when the same interface can appear more than
+once. These attributes do not prescribe the design, architecture, or
+implementation.
+
+Rules:
+- Values are exactly as listed in kebab-case.
+- An element that is hidden until a menu/toggle opens still counts, as long as it is in the DOM after its toggle is clicked.
+- Do not reuse these names on unrelated elements.
+
+| Element ID | Element |
+|---|---|
+| `app-title` | the app's visible title, `Chat` |
+| `signup-username` | username input on the sign-up form |
+| `signup-password` | password input on the sign-up form |
+| `signup-submit` | button that creates the account |
+| `signin-toggle` | control that switches from the sign-up form to the sign-in form |
+| `signin-username` | username input on the sign-in form |
+| `signin-password` | password input on the sign-in form |
+| `signin-submit` | button that signs the user in with existing credentials |
+| `auth-error` | visible after a rejected sign-up or sign-in; must not appear on success |
+| `current-user` | element displaying the signed-in account's username |
+| `signout` | button that signs the current user out |
+| `room-create` | control that starts creating a new room |
+| `room-name-input` | text input for the new room's name |
+| `room-name-submit` | button that confirms room creation |
+| `room-list` | container listing the rooms |
+| `room-item` | one entry per room inside the room list, containing the room name |
+| `online-users` | container listing the usernames of users currently online |
+| `online-user` | appears while that user is signed in, gone once they sign out |
+| `message-input` | text input for composing a message; pressing Enter sends it |
+| `message-list` | scrollable container holding the room's messages |
+| `message-item` | one entry per message, containing the message text and its author's username |
+| `leave-room` | button that leaves the current room |
+| `send-error` | visible after a rejected send; must not appear on a successful send |
+| `typing-indicator` | visible while another user in the SAME room is typing; gone within 6s of inactivity |
+| `read-receipt` | appears under a message after another user has viewed it |
+| `unread-badge` | appears on a room entry that has unread messages for the current user; clears when that room is opened |
+| `react-button` | present on each message; clicking it adds the current user's reaction |
+| `reaction-count` | shows how many users reacted with that emoji; repeated per emoji per message |
+| `pin-button` | present on each message |
+| `pinned-item` | the room's pinned messages, capped at three |
+| `pin-error` | visible after a rejected pin; must not appear on a successful one |
+| `pinned-unpin` | present on each pinned-item |
+| `member-panel` | container listing the members of the current room |
+| `member-item` | appears for each member of the current room; gone once they leave or are removed |
+| `member-owner` | present on the owner's entry only |
+| `member-remove` | shown to owners only |
+| `member-promote` | shown to owners only |
+| `dm-start` | present on each other user listed as online, and on each member entry |
+| `dm-list` | container listing the user's direct conversations |
+| `dm-item` | appears once a direct conversation exists; visible only to its two participants |
+| `permission-error` | visible after a refused unpin, removal, promotion, edit or delete |
+| `message-edit` | shown on the author's own messages |
+| `message-delete` | shown on the author's own messages |
+| `edited-marker` | appears on a message after it is edited |
+| `room-private-toggle` | present on the room creation surface; its state at creation decides visibility |
+| `room-private-badge` | absent on public rooms |
+| `invite-input` | owner-only, on private rooms |
+| `invite-submit` | owner-only, on private rooms |
+| `perm-error` | visible after a refused action; must not appear on permitted ones |
+| `profile-panel` | one panel; contents change with the user being viewed |
+| `profile-name` | undefined |
+| `profile-bio` | live while the panel is open — an edit by the profile's owner appears without reopening |
+| `profile-close` | undefined |
+| `bio-input` | only on the viewer's own profile |
+| `bio-save` | only on the viewer's own profile |
+| `friend-request` | absent on one's own profile and on an existing friend's profile |
+| `friend-pending` | undefined |
+| `friend-accept` | undefined |
+| `friend-decline` | undefined |
+| `friend-item` | undefined |
+| `friend-presence` | contains the word 'online' or 'offline'; flips live when the friend signs in or out |
+| `unfriend` | undefined |
+
+Before declaring DEPLOY_COMPLETE, verify the interface by running the contract
+linter (command provided in your build instructions) and fix any failures.
diff --git a/tools/stack-bench/tracks/chat/prompts/01-basic-chat.md b/tools/stack-bench/tracks/chat/prompts/01-basic-chat.md
new file mode 100644
index 00000000000..836c88fe6c9
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/prompts/01-basic-chat.md
@@ -0,0 +1,163 @@
+# Level 1 — Basic chat
+
+Create a **real-time chat app**.
+
+
+## UI & Style Guide
+
+### Layout
+- **Sidebar** (left, ~220px fixed): app title/branding, user info with status, room list, online users
+- **Main area** (right, flex): room header bar, scrollable message list, input bar pinned to bottom
+- **Panels** (right slide-in or overlay): threads, pinned messages, profiles, settings
+
+### Visual Design
+- Dark theme with a blue primary accent
+- Background: darkest shade for main bg, slightly lighter for sidebar and cards
+- Text: light on dark, muted color for timestamps and secondary info
+- Borders: subtle 1px, low contrast against background
+- Consistent spacing scale (8/12/16/24px)
+- Font: system font stack, clear hierarchy (bold headers, regular body, small muted metadata)
+- Rounded corners on inputs, buttons, cards, and message containers
+
+### Components
+- **Messages**: sender name (colored) + timestamp (muted) + text. Group consecutive messages from same sender. Action buttons appear on hover only (which buttons depend on the features below).
+- **Inputs**: full-width, rounded, subtle border, placeholder text, focus ring using primary color
+- **Buttons**: filled with primary color for main actions, outlined/ghost for secondary. Clear hover and active states.
+- **Badges**: small pill-shaped with count, contrasting color (e.g., unread count on rooms)
+- **Modals/panels**: slide-in from right with subtle backdrop, or dropdown overlays
+- **Status indicators**: small colored dots (green=online, yellow=away, red=DND, grey=offline)
+- **Room list**: room names with optional icon prefix (#), active room highlighted, unread badge
+
+### Interaction & UX
+- Show loading/connecting state while backend connects (spinner or skeleton, not blank screen)
+- Empty states: helpful text when no rooms, no messages, no results ("Create a room to get started")
+- Error feedback: inline error messages or toast notifications, never silent failures
+- Smooth transitions: fade/slide for panels, modals, and state changes
+- Hover reveals: message action buttons, tooltips on reactions, user profile cards
+- Keyboard support: Enter to send messages, Escape to close modals/panels
+- Auto-scroll to newest message, with scroll-to-bottom button when scrolled up
+
+## Features
+
+### Accounts
+
+- A visitor can **create an account** with a username and password
+- A returning visitor can **sign in** with those credentials
+- A signed-in user can **sign out**, returning to the signed-out state
+- A signed-in session **persists across a page reload** — a returning user is not asked to
+  sign in again — and across the connection dropping and re-establishing. The same person
+  stays the same account throughout, keeping their rooms, messages and authorship.
+- Usernames are unique. Signing up with a taken username fails with a visible error and must
+  never sign the visitor in as the existing account.
+- Signing in with a wrong password fails with a visible error.
+- A user's account name is shown on their messages.
+
+Identity is an account, not a display name: knowing someone's username must never grant
+access to it.
+
+### Basic Chat Features
+
+- Users can create chat rooms and join/leave them
+- Users can send messages to rooms they've joined
+- Show who's online
+- Include reasonable validation (e.g., don't let users spam, enforce sensible limits)
+
+
+### Typing Indicators
+
+- Show when other users are currently typing in the SAME room (typing must be scoped to room — do not broadcast typing to users in different rooms)
+- Typing indicator should automatically expire after a few seconds of inactivity
+- Display "User is typing..." or "Multiple users are typing..." in the UI
+
+
+### Read Receipts
+
+- Track which users have seen which messages
+- Display "Seen by X, Y, Z" under messages — only show OTHER users who have seen it, not the sender
+- Update read status in real-time as users view messages
+
+
+### Unread Message Counts
+
+- Show unread message count badges on the room list
+- Track last-read position per user per room
+- Update counts in real-time as new messages arrive or are read
+
+### Room Members and Roles
+
+- Each room shows a **member panel**: everyone who has joined it, with their online state
+- The panel updates live as people join, leave, connect and disconnect
+- The user who created a room is its **owner**; the panel shows who that is
+- An owner can **promote** another member to owner, and can **remove** a member from the room
+- Only members can read a room's messages or post to it. A non-member is refused by the
+  server, not merely prevented by hiding a button.
+- **Removal takes effect immediately.** A removed user stops receiving that room's messages
+  without reloading, loses access to its history, and cannot rejoin a room they were removed
+  from unless an owner re-adds them.
+
+### Direct Messages
+
+- A user can open a **direct conversation** with another user from that user's entry in the
+  online list or a member panel. It reads and composes like a room.
+- A direct conversation is visible only to its two participants. Nobody else can read it —
+  not through the interface, not through any request the client can make, and it is never
+  sent to anybody else's browser in the first place.
+- Direct messages arrive live, are attributed, and persist like room messages
+- Unread counts cover direct conversations too
+
+### Reactions
+
+- Users can react to a message with an emoji, and remove their own reaction
+- Each message shows each emoji with a **count** of how many users have reacted with it
+- A user may react at most once per emoji per message — reacting again does not raise the
+  count by two
+- Counts update live for everyone in the room, and every client shows the same count
+
+### Pinned Messages
+
+- Any member of a room can **pin** a message
+- Only the user who pinned a message, or an owner of the room, can unpin it
+- Pinned messages are listed for the room, visible to everyone in it
+- A room may have **at most 3 pinned messages**. An attempt to pin a fourth is rejected with
+  a visible error and changes nothing.
+- Unpinning frees a slot
+- The pinned list updates live, and every client in the room shows the same list
+
+### Ownership
+
+Every action belongs to somebody, and the server decides who may take it:
+
+- Only the author of a message can edit or delete it; edited messages show as edited
+- Only the pinner or a room owner can unpin
+- Only a room owner can promote or remove members
+- An attempt by the wrong user is refused with a visible error and changes nothing. Enforce
+  this on the server — hiding a control in the interface is not enforcement.
+
+### Back office
+
+**Your app does not own its data.** Real chat services have other systems
+writing to the same database: moderation tooling, compliance takedowns,
+data-retention jobs. The app must remain correct — and its open pages current —
+when data changes by a path its server never saw. This is a property of your
+architecture, not a feature to bolt on.
+
+As the concrete instance of that property, ship a script at
+`scripts/backoffice.mjs` (run with `node`, from the app directory) supporting:
+
+```
+node scripts/backoffice.mjs purge-user <username>
+```
+
+It deletes every message that user has sent **by writing to the database
+directly** — it must work even when the web server is not running, and it must
+not talk to the web server. Every open browser must reflect the purge like any
+other change: the messages disappear live, without a reload.
+
+### Limits
+
+- Enforce the message rate limit **on the server**: at most one message per second per
+  account, with a visible error when exceeded
+- The limit applies to the account, not to a browser tab — the same account in two tabs
+  shares one budget
+- Limits and presence are properties of the application, not of a running process: they must
+  still be correct after the backend restarts
diff --git a/tools/stack-bench/tracks/chat/prompts/02-authorization.md b/tools/stack-bench/tracks/chat/prompts/02-authorization.md
new file mode 100644
index 00000000000..31ee4df1ba2
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/prompts/02-authorization.md
@@ -0,0 +1,57 @@
+# Level 2 — Authorization and People
+
+Adds ownership, access control, and a social layer to the app from level 1.
+Everything from level 1 must keep working.
+
+## Features
+
+### Private rooms
+
+- A room creator can mark a room **private** at creation time
+- A private room's messages are readable only by its members. A non-member must not be able
+  to read them by any means the app offers — not by entering the room, not by any link, and
+  not through any request the client can make.
+- A private room does not appear in a non-member's room list at all — its existence and its
+  name are members-only
+- Public rooms remain readable by any signed-in user
+
+### Membership
+
+- A room creator is its **owner**
+- An owner can **invite** another user to a private room; the invitee gains access
+- An owner can **remove** a member. Removal takes effect immediately: the removed user stops
+  receiving that room's messages without reloading, and loses read access to its history.
+- A removed user can be re-invited
+
+### Permissions
+
+- Only an owner sees owner controls (invite, remove, delete room)
+- A non-owner must not be able to perform an owner action, including by issuing the request
+  directly rather than through the UI
+- Only the author of a message can delete it; a deleted message disappears live for everyone
+- Attempting an unpermitted action shows a visible error and changes nothing
+
+### Profiles
+
+- Every account has a **profile**: display name, a short bio, and a joined-date.
+  The owner can edit their display name and bio.
+- Clicking a username anywhere it appears (a message, the member list) opens that
+  person's **profile panel**
+- A profile panel is **live for as long as it is open**: if the person edits their
+  bio while someone else is looking at their profile, the viewer sees the new bio
+  without reopening the panel or reloading
+- The panel can be closed; a closed panel is gone — reopening it shows current data
+
+### Friends
+
+- A signed-in user can **send a friend request** from a profile panel
+- The recipient sees the pending request and can **accept** or **decline**; the
+  sender sees which of these happened
+- Each user has a **friends list** showing their friends and each friend's
+  **online/offline presence**
+- The friends list is live: a request accepted while the list is open appears in
+  it without a reload, and a friend signing in or out flips their presence for
+  everyone whose list shows them
+- Either side can **unfriend**; the row disappears live from both lists
+- Friend state is one relationship, not two: A's list and B's list can never
+  disagree about whether they are friends
diff --git a/tools/stack-bench/tracks/chat/prompts/03-contention.md b/tools/stack-bench/tracks/chat/prompts/03-contention.md
new file mode 100644
index 00000000000..1fc2e984119
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/prompts/03-contention.md
@@ -0,0 +1,34 @@
+# Level 3 — Contended state
+
+Adds shared state that many users mutate at the same time, on top of levels 1 and 2.
+Everything from earlier levels must keep working.
+
+## Features
+
+### Reactions
+
+- A user can add an emoji reaction to a message, and remove their own
+- Each message shows each emoji with a **count** of how many users reacted with it
+- A user may react at most once per emoji per message — reacting twice does not raise the
+  count by two
+- Counts update live for everyone in the room
+
+### Polls
+
+- A user can post a **poll** to a room: a question and two or more options
+- Each user may cast **one vote**, and may change it — changing a vote moves the tally, it
+  does not add to it
+- The poll shows per-option vote counts and a total, updating live
+- A poll can be closed by its author; votes after closing are rejected
+
+### Limited-capacity events
+
+- A user can create an **event** in a room with a fixed number of seats
+- Users claim seats until the event is full; further claims are rejected with a visible error
+- The number of claimed seats must never exceed the capacity, no matter how many users claim
+  at the same moment
+- A user can release a seat, freeing it for someone else
+- Seat counts update live
+
+Correctness under simultaneous use is the point of this level. Totals must be exact when
+many users act at the same instant: no lost updates, no double-counting, no overselling.
diff --git a/tools/stack-bench/tracks/chat/prompts/04-deferred.md b/tools/stack-bench/tracks/chat/prompts/04-deferred.md
new file mode 100644
index 00000000000..c05db9a3fbd
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/prompts/04-deferred.md
@@ -0,0 +1,31 @@
+# Level 4 — Deferred and expiring work
+
+Adds work that happens later, on top of levels 1 to 3. Everything from earlier levels must
+keep working.
+
+## Features
+
+### Scheduled messages
+
+- A user can compose a message and schedule it to send at a future time, as little as 60
+  seconds ahead
+- The author sees their pending scheduled messages and can cancel one before it sends
+- A scheduled message does not appear in the room before its time
+- At its time it appears for everyone in the room, attributed to its author
+- **Pending scheduled messages survive a backend restart** and still send at their time
+
+### Expiring messages
+
+- A user can send a message that expires after a chosen duration, selectable down to 30
+  seconds
+- An expiring message shows a countdown or expiry indicator
+- When it expires it disappears for everyone, live, without a reload
+- Expired content is **actually deleted** from storage, not merely hidden in the interface
+- Expiry survives a backend restart: a message due to expire during the restart is gone
+  afterwards, and one not yet due still expires on time
+
+### Reminders
+
+- A user can set a personal reminder on a message for a future time
+- At that time the user is notified in the app
+- A reminder is visible only to the user who set it, and survives a restart
diff --git a/tools/stack-bench/tracks/chat/prompts/05-volume.md b/tools/stack-bench/tracks/chat/prompts/05-volume.md
new file mode 100644
index 00000000000..cdc5bc114cb
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/prompts/05-volume.md
@@ -0,0 +1,30 @@
+# Level 5 — Volume
+
+The app from levels 1 to 4 must stay correct and responsive as data and usage grow.
+No new user-facing features; this level is about behaviour at scale.
+
+## Requirements
+
+### Data volume
+
+- A room with **50,000 messages** loads and remains usable
+- A user in **200 rooms** sees their room list without noticeable delay
+- Message history is paginated or virtualised rather than loaded in full
+- Reading a room's recent messages must not get slower as its history grows
+
+### Concurrency
+
+- **100 concurrent signed-in clients** across a shared set of rooms remain correct:
+  every message reaches every client in its room, exactly once, in the same order for all
+- Sustained writes continue to be delivered without loss under continuous load
+
+### Responsiveness
+
+- A sent message reaches other clients in the same room in **under one second at the 95th
+  percentile** under the load above
+- The interface stays responsive while receiving continuous updates
+
+### Efficiency
+
+- Per-message work must not grow with the size of the room's history
+- Queries backing the main views use indexes rather than scanning
diff --git a/tools/stack-bench/tracks/chat/scenarios/01-basic-chat.json b/tools/stack-bench/tracks/chat/scenarios/01-basic-chat.json
new file mode 100644
index 00000000000..dc5b15605f0
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/scenarios/01-basic-chat.json
@@ -0,0 +1,813 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "note": "Level 1 is sequential's basic chat with accounts added. Accounts replace the display-name stub; typing indicators, read receipts and unread counts are sequential's, unchanged apart from signing up rather than naming yourself.",
+  "features": [
+    {
+      "id": 1,
+      "name": "Accounts",
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "signup-signs-in",
+          "points": 1,
+          "desc": "Creating an account signs the user in and shows their username",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "current-user",
+              "contains": "Alice",
+              "within": 6000
+            }
+          ]
+        },
+        {
+          "id": "duplicate-username-rejected",
+          "points": 1,
+          "desc": "Signing up with a taken username is rejected with a visible error, and must not sign the visitor in as the existing account",
+          "steps": [
+            {
+              "do": "signUp",
+              "actor": "bob",
+              "name": "Alice",
+              "expectFailure": true
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "auth-error",
+              "within": 6000
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "current-user",
+              "absent": true,
+              "within": 3000
+            }
+          ]
+        },
+        {
+          "id": "signout-and-signin",
+          "points": 1,
+          "desc": "A user can sign out and sign back in with the same credentials",
+          "steps": [
+            {
+              "do": "click",
+              "actor": "alice",
+              "testid": "signout"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "signup-username",
+              "within": 6000
+            },
+            {
+              "do": "signIn",
+              "actor": "alice",
+              "name": "Alice"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "current-user",
+              "contains": "Alice",
+              "within": 6000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 2,
+      "name": "Basic Chat",
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "general"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "general"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "own-message-appears",
+          "points": 1,
+          "desc": "A sent message appears in the sender's own message list",
+          "steps": [
+            {
+              "do": "send",
+              "actor": "alice",
+              "text": "hello from alice"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "message-item",
+              "contains": "hello from alice",
+              "within": 5000
+            }
+          ]
+        },
+        {
+          "id": "cross-user-realtime",
+          "points": 1,
+          "desc": "A second user in the same room receives messages live, with no reload",
+          "steps": [
+            {
+              "do": "enterRoom",
+              "actor": "bob",
+              "room": "general"
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "message-item",
+              "contains": "hello from alice",
+              "within": 5000
+            },
+            {
+              "do": "send",
+              "actor": "bob",
+              "text": "hello from bob"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "message-item",
+              "contains": "hello from bob",
+              "within": 3000
+            }
+          ]
+        },
+        {
+          "id": "presence-and-leave",
+          "points": 1,
+          "desc": "Online users lists both participants; leaving a room works",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "online-users",
+              "contains": "Bob",
+              "within": 5000
+            },
+            {
+              "do": "click",
+              "actor": "bob",
+              "testid": "leave-room"
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "message-input",
+              "absent": true,
+              "within": 5000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 3,
+      "name": "Typing Indicators",
+      "actors": [
+        "alice",
+        "bob",
+        "carol"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "signUp",
+          "actor": "carol",
+          "name": "Carol"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "typing-a"
+        },
+        {
+          "do": "createRoom",
+          "actor": "carol",
+          "room": "typing-b"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "typing-a"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "typing-a"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "carol",
+          "room": "typing-b"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "indicator-appears",
+          "points": 1,
+          "desc": "Typing by another user in the same room shows an indicator live",
+          "steps": [
+            {
+              "do": "typeInto",
+              "actor": "bob",
+              "text": "composing a reply"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "typing-indicator",
+              "within": 4000,
+              "contains": "typing"
+            }
+          ]
+        },
+        {
+          "id": "indicator-expires",
+          "points": 1,
+          "desc": "Indicator disappears within 6s once typing stops",
+          "steps": [
+            {
+              "do": "clearInput",
+              "actor": "bob"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "typing-indicator",
+              "absent": true,
+              "within": 6500,
+              "contains": "typing"
+            }
+          ]
+        },
+        {
+          "id": "scoped-to-room",
+          "points": 1,
+          "desc": "Typing is scoped to the room \u2014 a user in another room sees nothing",
+          "steps": [
+            {
+              "do": "typeInto",
+              "actor": "bob",
+              "text": "still typing here"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "typing-indicator",
+              "within": 4000,
+              "contains": "typing"
+            },
+            {
+              "do": "expect",
+              "actor": "carol",
+              "testid": "typing-indicator",
+              "absent": true,
+              "within": 2000,
+              "contains": "typing"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 4,
+      "name": "Read Receipts",
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "receipts"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "receipts"
+        },
+        {
+          "do": "send",
+          "actor": "alice",
+          "text": "did you see this"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "receipt-appears",
+          "points": 1,
+          "desc": "Receipt appears for the sender once another user views the message",
+          "steps": [
+            {
+              "do": "enterRoom",
+              "actor": "bob",
+              "room": "receipts"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "read-receipt",
+              "within": 6000
+            }
+          ]
+        },
+        {
+          "id": "receipt-names-reader",
+          "points": 1,
+          "desc": "Receipt names the user who read it",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "read-receipt",
+              "contains": "Bob",
+              "within": 6000
+            }
+          ]
+        },
+        {
+          "id": "sender-excluded",
+          "points": 1,
+          "desc": "The sender is not listed as a reader of their own message",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "read-receipt",
+              "notContains": "Alice",
+              "within": 6000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 5,
+      "name": "Unread Message Counts",
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "unread-main"
+        },
+        {
+          "do": "createRoom",
+          "actor": "bob",
+          "room": "unread-side"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "unread-main"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "unread-main"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "unread-side"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "badge-appears",
+          "points": 1,
+          "desc": "A badge appears live on a room with unread messages",
+          "steps": [
+            {
+              "do": "send",
+              "actor": "alice",
+              "text": "unread one"
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "unread-badge",
+              "in": {
+                "testid": "room-item",
+                "contains": "{room:unread-main}"
+              },
+              "within": 5000
+            }
+          ]
+        },
+        {
+          "id": "badge-counts",
+          "points": 1,
+          "desc": "The badge reflects the number of unread messages (paced above the app's send rate limit)",
+          "steps": [
+            {
+              "do": "wait",
+              "actor": "alice",
+              "ms": 1400
+            },
+            {
+              "do": "send",
+              "actor": "alice",
+              "text": "unread two"
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "unread-badge",
+              "contains": "2",
+              "in": {
+                "testid": "room-item",
+                "contains": "{room:unread-main}"
+              },
+              "within": 5000
+            }
+          ]
+        },
+        {
+          "id": "badge-clears",
+          "points": 1,
+          "desc": "The badge clears when the room is opened",
+          "steps": [
+            {
+              "do": "enterRoom",
+              "actor": "bob",
+              "room": "unread-main"
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "unread-badge",
+              "in": {
+                "testid": "room-item",
+                "contains": "{room:unread-main}"
+              },
+              "absent": true,
+              "within": 5000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 6,
+      "name": "Room Members and Roles",
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "team"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "team"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "members-appear-live",
+          "points": 1,
+          "desc": "Someone joining a room appears in its member panel without anyone reloading",
+          "steps": [
+            {
+              "do": "enterRoom",
+              "actor": "bob",
+              "room": "team"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "member-item",
+              "contains": "Bob",
+              "within": 8000
+            }
+          ]
+        },
+        {
+          "id": "owner-is-shown",
+          "points": 1,
+          "desc": "The room's creator is marked as its owner",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "member-owner",
+              "within": 6000
+            }
+          ]
+        },
+        {
+          "id": "removed-member-disappears",
+          "points": 1,
+          "desc": "Removing a member takes them out of the panel live, for everyone still in the room",
+          "steps": [
+            {
+              "do": "click",
+              "actor": "alice",
+              "testid": "member-remove",
+              "in": {
+                "testid": "member-item",
+                "contains": "Bob"
+              }
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "member-item",
+              "contains": "Bob",
+              "absent": true,
+              "within": 8000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 7,
+      "name": "Direct Messages",
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "wait",
+          "actor": "alice",
+          "ms": 2000
+        }
+      ],
+      "criteria": [
+        {
+          "id": "dm-can-be-started",
+          "points": 1,
+          "desc": "A user can open a direct conversation with another user",
+          "steps": [
+            {
+              "do": "click",
+              "actor": "alice",
+              "testid": "dm-start",
+              "in": {
+                "testid": "online-user",
+                "contains": "Bob"
+              }
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "dm-item",
+              "contains": "Bob",
+              "within": 8000
+            }
+          ]
+        },
+        {
+          "id": "dm-delivers-live",
+          "points": 1,
+          "desc": "A direct message reaches the other participant live, with no reload",
+          "steps": [
+            {
+              "do": "click",
+              "actor": "alice",
+              "testid": "dm-item",
+              "in": {
+                "testid": "dm-list",
+                "contains": "Bob"
+              }
+            },
+            {
+              "do": "send",
+              "actor": "alice",
+              "text": "a private word"
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "message-item",
+              "contains": "a private word",
+              "within": 10000
+            }
+          ]
+        },
+        {
+          "id": "dm-persists",
+          "points": 1,
+          "desc": "A direct conversation and its messages survive a reload",
+          "steps": [
+            {
+              "do": "reload",
+              "actor": "bob",
+              "settleMs": 3500
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "dm-item",
+              "contains": "Alice",
+              "within": 10000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 8,
+      "name": "Message Ownership",
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "owned"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "owned"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "owned"
+        },
+        {
+          "do": "send",
+          "actor": "alice",
+          "text": "a message of my own"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "author-can-edit-and-delete",
+          "points": 1,
+          "desc": "The author of a message is offered edit and delete on it",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "message-edit",
+              "in": {
+                "testid": "message-item",
+                "contains": "a message of my own"
+              },
+              "within": 6000
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "message-delete",
+              "in": {
+                "testid": "message-item",
+                "contains": "a message of my own"
+              },
+              "within": 6000
+            }
+          ]
+        },
+        {
+          "id": "others-are-not",
+          "points": 1,
+          "desc": "Nobody else is offered edit or delete on that message",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "message-item",
+              "contains": "a message of my own",
+              "within": 8000
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "message-edit",
+              "in": {
+                "testid": "message-item",
+                "contains": "a message of my own"
+              },
+              "absent": true,
+              "within": 5000
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "message-delete",
+              "in": {
+                "testid": "message-item",
+                "contains": "a message of my own"
+              },
+              "absent": true,
+              "within": 5000
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
\ No newline at end of file
diff --git a/tools/stack-bench/tracks/chat/scenarios/01-contention-wip.json b/tools/stack-bench/tracks/chat/scenarios/01-contention-wip.json
new file mode 100644
index 00000000000..b3158d2451e
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/scenarios/01-contention-wip.json
@@ -0,0 +1,282 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "status": "under development \u2014 NOT part of the scored suite",
+  "note": "These contention criteria do not affect scoring. Browser clicks do not overlap enough to create a reliable race. Activate them only after parallel request replay passes on clean reference apps and detects exact known defects on every supported stack.",
+  "features": [
+    {
+      "id": 106,
+      "name": "Concurrent State Integrity",
+      "max": 4,
+      "actors": [
+        "alice",
+        "bob",
+        "carol",
+        "dave"
+      ],
+      "note": "The pin cap is the real contention target: it must read the current count and decide, which is check-then-insert and genuinely racy. Reactions cannot show a lost update \u2014 one row per user per emoji with onConflictDoNothing cannot lose one whatever the ordering \u2014 so they test agreement and correctness rather than atomicity.",
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "signUp",
+          "actor": "carol",
+          "name": "Carol"
+        },
+        {
+          "do": "signUp",
+          "actor": "dave",
+          "name": "Dave"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "busy"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "busy"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "busy"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "carol",
+          "room": "busy"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "dave",
+          "room": "busy"
+        },
+        {
+          "do": "send",
+          "actor": "alice",
+          "text": "react to this"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "reaction-count-is-exact",
+          "points": 1,
+          "desc": "Four users reacting to the same message at the same instant leave a count of exactly four. The reactions are issued together rather than clicked in sequence: clicks arrive milliseconds apart and each request finishes in less, so they never overlap and no race occurs.",
+          "steps": [
+            {
+              "do": "clickConcurrently",
+              "actors": [
+                "alice",
+                "bob",
+                "carol",
+                "dave"
+              ],
+              "testid": "react-button",
+              "settleMs": 3500
+            },
+            {
+              "do": "clickConcurrently",
+              "actors": [
+                "alice",
+                "bob",
+                "carol",
+                "dave"
+              ],
+              "testid": "react-button",
+              "settleMs": 3500
+            },
+            {
+              "do": "replayConcurrently",
+              "actors": [
+                "alice",
+                "bob",
+                "carol",
+                "dave"
+              ],
+              "settleMs": 4000
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "reaction-count",
+              "contains": "4",
+              "within": 12000
+            }
+          ]
+        },
+        {
+          "id": "reaction-count-agrees-across-clients",
+          "points": 1,
+          "desc": "Every client shows the same count. One client being right while another is wrong is what a broadcast that is not atomic with the write produces.",
+          "steps": [
+            {
+              "do": "expectAgreement",
+              "actors": [
+                "alice",
+                "bob",
+                "carol",
+                "dave"
+              ],
+              "testid": "reaction-count",
+              "within": 10000
+            }
+          ]
+        },
+        {
+          "id": "removing-a-reaction-decrements-once",
+          "points": 1,
+          "desc": "A user removing their reaction takes exactly one off the count, and every client agrees on the new total. One user contributes at most one either way.",
+          "steps": [
+            {
+              "do": "click",
+              "actor": "alice",
+              "testid": "react-button"
+            },
+            {
+              "do": "wait",
+              "actor": "alice",
+              "ms": 3000
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "reaction-count",
+              "contains": "3",
+              "within": 8000
+            },
+            {
+              "do": "expectAgreement",
+              "actors": [
+                "alice",
+                "bob",
+                "carol",
+                "dave"
+              ],
+              "testid": "reaction-count",
+              "within": 10000
+            }
+          ]
+        },
+        {
+          "id": "pin-cap-holds-under-concurrency",
+          "points": 1,
+          "desc": "Four users pinning four different messages at the same instant, against a cap of three, must leave exactly three. The pins are issued together rather than clicked in sequence, because clicks arrive milliseconds apart and never contend.",
+          "steps": [
+            {
+              "do": "sendMany",
+              "actor": "alice",
+              "prefix": "PIN",
+              "count": 4,
+              "delayMs": 1400
+            },
+            {
+              "do": "wait",
+              "actor": "alice",
+              "ms": 2000
+            },
+            {
+              "do": "click",
+              "actor": "alice",
+              "testid": "pin-button",
+              "in": {
+                "testid": "message-item",
+                "contains": "PIN-1"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "bob",
+              "testid": "pin-button",
+              "in": {
+                "testid": "message-item",
+                "contains": "PIN-2"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "carol",
+              "testid": "pin-button",
+              "in": {
+                "testid": "message-item",
+                "contains": "PIN-3"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "alice",
+              "ms": 3000
+            },
+            {
+              "do": "click",
+              "actor": "alice",
+              "testid": "pinned-unpin",
+              "in": {
+                "testid": "pinned-item",
+                "contains": "PIN-1"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "bob",
+              "testid": "pinned-unpin",
+              "in": {
+                "testid": "pinned-item",
+                "contains": "PIN-2"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "carol",
+              "testid": "pinned-unpin",
+              "in": {
+                "testid": "pinned-item",
+                "contains": "PIN-3"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "alice",
+              "ms": 3000
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "pinned-item",
+              "count": 0,
+              "within": 8000
+            },
+            {
+              "do": "replayConcurrently",
+              "actors": [
+                "alice",
+                "bob",
+                "carol"
+              ],
+              "method": "POST",
+              "settleMs": 5000
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "pinned-item",
+              "count": 3,
+              "within": 12000
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "blocked_on": "The write path is a WebSocket, so replaying captured HTTP requests cannot reach it. The rebuilt PostgreSQL app pins over socket.io ('pin:add'), authenticated by a session token from the signup response and passed as socket.handshake.auth.token. Driving contention needs a socket-aware mechanism: connect a client with that token and emit the captured event several times without awaiting the acknowledgements. Everything needed is already captured \u2014 Actor.lastWsWrite records the socket.io event name and payload.",
+  "why_it_matters": "This rebuild is genuinely vulnerable and would be the first real contention finding. Its pin cap reads the count and inserts inside one transaction with NO advisory lock, so at READ COMMITTED concurrent transactions can all see room under the cap and all insert. The previous build defended the same code with pg_advisory_xact_lock and a comment explaining the race. Two builds of the same spec, one safe and one not, is exactly the variance a benchmark exists to measure \u2014 and the harness currently cannot see it."
+}
diff --git a/tools/stack-bench/tracks/chat/scenarios/01-delivery.json b/tools/stack-bench/tracks/chat/scenarios/01-delivery.json
new file mode 100644
index 00000000000..9287faf0c97
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/scenarios/01-delivery.json
@@ -0,0 +1,218 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "note": "Delivery and resilience invariants \u2014 properties of the transport, not of any feature. These are the ones a human grader cannot test at all (you cannot generate concurrency or simulate a network drop by clicking), and where the asymmetry is structural: Express stacks broadcast with io.emit() AFTER awaiting the write, so delivery is not atomic with the commit; a SpacetimeDB subscription update IS the commit. Senders pace themselves above the apps' rate limits (observed: 400ms SpacetimeDB, 350ms Mongo) \u2014 the spec requires spam prevention, so a 0-delay burst is correctly rejected and would test nothing. Concurrency comes from multiple senders overlapping, not from one sender bursting. Actors sign up with credentials, as level 1 requires.",
+  "features": [
+    {
+      "id": 201,
+      "name": "Delivery Integrity",
+      "max": 3,
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "storm"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "storm"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "storm"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "no-loss-no-duplication-sender",
+          "points": 1,
+          "desc": "Under a concurrent write storm from two clients, the sender sees every message exactly once \u2014 no drops, no double-render from optimistic insert plus broadcast echo",
+          "steps": [
+            {
+              "do": "sendConcurrently",
+              "senders": [
+                {
+                  "actor": "alice",
+                  "prefix": "AA",
+                  "count": 6
+                },
+                {
+                  "actor": "bob",
+                  "prefix": "BB",
+                  "count": 6
+                }
+              ],
+              "delayMs": 1400
+            },
+            {
+              "do": "expectAllPresent",
+              "actor": "alice",
+              "prefix": "AA",
+              "count": 6,
+              "within": 20000
+            }
+          ]
+        },
+        {
+          "id": "no-loss-no-duplication-receiver",
+          "points": 1,
+          "desc": "The receiving client also observes every message from the other sender exactly once",
+          "steps": [
+            {
+              "do": "expectAllPresent",
+              "actor": "alice",
+              "prefix": "BB",
+              "count": 6,
+              "within": 20000
+            },
+            {
+              "do": "expectAllPresent",
+              "actor": "bob",
+              "prefix": "AA",
+              "count": 6,
+              "within": 20000
+            }
+          ]
+        },
+        {
+          "id": "consistent-order-across-clients",
+          "points": 1,
+          "desc": "Both clients observe the interleaved messages in the SAME order. Non-atomic broadcast lets concurrent senders interleave differently per client.",
+          "steps": [
+            {
+              "do": "expectOrderMatches",
+              "actors": [
+                "alice",
+                "bob"
+              ],
+              "prefix": "AA"
+            },
+            {
+              "do": "expectOrderMatches",
+              "actors": [
+                "alice",
+                "bob"
+              ],
+              "prefix": "BB"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 202,
+      "name": "Connection Resilience",
+      "max": 2,
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "resilience"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "resilience"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "resilience"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "resync-after-disconnect",
+          "points": 1,
+          "desc": "A client that loses its connection and regains it must catch up on everything it missed, WITHOUT a reload. Reconnect handling is something an Express app has to implement; a SpacetimeDB subscription re-delivers state on reconnect.",
+          "steps": [
+            {
+              "do": "setOffline",
+              "actor": "alice",
+              "offline": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "sendMany",
+              "actor": "bob",
+              "prefix": "OFFLINE",
+              "count": 3,
+              "delayMs": 1400
+            },
+            {
+              "do": "setOffline",
+              "actor": "alice",
+              "offline": false,
+              "settleMs": 3000
+            },
+            {
+              "do": "expectAllPresent",
+              "actor": "alice",
+              "prefix": "OFFLINE",
+              "count": 3,
+              "within": 15000
+            }
+          ]
+        },
+        {
+          "id": "no-duplication-after-resync",
+          "points": 1,
+          "desc": "Catching up must not double-deliver messages the client already had (resubscribe replaying history on top of existing state)",
+          "steps": [
+            {
+              "do": "sendMany",
+              "actor": "bob",
+              "prefix": "AFTER",
+              "count": 2,
+              "delayMs": 1400
+            },
+            {
+              "do": "expectAllPresent",
+              "actor": "alice",
+              "prefix": "AFTER",
+              "count": 2,
+              "within": 10000
+            },
+            {
+              "do": "expectAllPresent",
+              "actor": "alice",
+              "prefix": "OFFLINE",
+              "count": 3,
+              "within": 5000
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
\ No newline at end of file
diff --git a/tools/stack-bench/tracks/chat/scenarios/01-invariants.json b/tools/stack-bench/tracks/chat/scenarios/01-invariants.json
new file mode 100644
index 00000000000..ae9a95a74c3
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/scenarios/01-invariants.json
@@ -0,0 +1,974 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "stack-bench",
+  "note": "Cross-cutting properties, scored on a separate axis from features. A feature-only score cannot see these: an app can implement every listed feature and still let one user take over another's account. Each invariant is its own feature with fresh contexts, so one root defect cannot cascade into several apparent problems.",
+  "features": [
+    {
+      "id": 101,
+      "name": "Account Integrity",
+      "max": 2,
+      "actors": [
+        "victim",
+        "impostor"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "victim",
+          "name": "Victim"
+        },
+        {
+          "do": "createRoom",
+          "actor": "victim",
+          "room": "private-notes"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "victim",
+          "room": "private-notes"
+        },
+        {
+          "do": "send",
+          "actor": "victim",
+          "text": "victim private message"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "username-is-not-a-credential",
+          "points": 1,
+          "desc": "Knowing a username must not grant access to that account. Signing up with a taken username, or signing in with the wrong password, must be rejected \u2014 not silently resolved to the existing account.",
+          "steps": [
+            {
+              "do": "signUp",
+              "actor": "impostor",
+              "name": "Victim",
+              "expectFailure": true
+            },
+            {
+              "do": "expect",
+              "actor": "impostor",
+              "testid": "current-user",
+              "contains": "Victim",
+              "absent": true,
+              "within": 5000
+            }
+          ]
+        },
+        {
+          "id": "wrong-password-rejected",
+          "points": 1,
+          "desc": "Signing in with a wrong password is rejected and grants nothing",
+          "steps": [
+            {
+              "do": "signIn",
+              "actor": "impostor",
+              "name": "Victim",
+              "password": "not-the-password",
+              "expectFailure": true
+            },
+            {
+              "do": "expect",
+              "actor": "impostor",
+              "testid": "auth-error",
+              "within": 6000
+            },
+            {
+              "do": "expect",
+              "actor": "impostor",
+              "testid": "message-item",
+              "contains": "victim private message",
+              "absent": true,
+              "within": 4000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 102,
+      "name": "Session Durability",
+      "max": 3,
+      "actors": [
+        "alice"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "mine"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "mine"
+        },
+        {
+          "do": "send",
+          "actor": "alice",
+          "text": "alice message"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "session-survives-reload",
+          "points": 1,
+          "desc": "Reloading keeps the user signed in as the same account",
+          "steps": [
+            {
+              "do": "reload",
+              "actor": "alice",
+              "settleMs": 3000
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "current-user",
+              "contains": "Alice",
+              "within": 8000
+            }
+          ]
+        },
+        {
+          "id": "session-survives-reconnect",
+          "points": 1,
+          "desc": "A user who loses and regains their connection while sitting on the page is still signed in as the same account. The connection drops and re-establishes on its own; re-identifying the client here would orphan everything it owns.",
+          "steps": [
+            {
+              "do": "setOffline",
+              "actor": "alice",
+              "offline": true,
+              "settleMs": 3000
+            },
+            {
+              "do": "setOffline",
+              "actor": "alice",
+              "offline": false,
+              "settleMs": 6000
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "current-user",
+              "contains": "Alice",
+              "within": 20000
+            }
+          ]
+        },
+        {
+          "id": "own-content-still-owned-after-reconnect",
+          "points": 1,
+          "desc": "After reconnecting the user still owns what they created \u2014 their room and their message are still theirs",
+          "steps": [
+            {
+              "do": "enterRoom",
+              "actor": "alice",
+              "room": "mine"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "message-item",
+              "contains": "alice message",
+              "within": 15000
+            }
+          ]
+        }
+      ],
+      "note": "Session durability is tested by dropping the client's connection, not by restarting the backend. Both force the same reconnect, but only one needs a server the harness owns \u2014 and restarting a shared host takes unrelated databases down with it. Backend restarts belong where they test storage rather than session handling (level 4)."
+    },
+    {
+      "id": 103,
+      "name": "Data Isolation",
+      "max": 2,
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "room-a"
+        },
+        {
+          "do": "createRoom",
+          "actor": "bob",
+          "room": "room-b"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "room-a"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "room-b"
+        },
+        {
+          "do": "send",
+          "actor": "alice",
+          "text": "message for room a"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "messages-scoped-to-room",
+          "points": 1,
+          "desc": "A message sent in one room never appears in another",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "message-item",
+              "contains": "message for room a",
+              "absent": true,
+              "within": 5000
+            }
+          ]
+        },
+        {
+          "id": "no-duplicate-rooms",
+          "points": 1,
+          "desc": "A room renders exactly once in the list \u2014 an optimistic insert plus a broadcast echo duplicates it",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "room-item",
+              "contains": "{room:room-a}",
+              "count": 1,
+              "within": 5000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 104,
+      "name": "Per-User State Integrity",
+      "max": 3,
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "note": "Unread counts and read receipts are per-user state derived from other people's actions. The historical grading data has more defects here than anywhere else in level 1.",
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "main"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "side"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "main"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "main"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "own-messages-not-unread",
+          "points": 1,
+          "desc": "Your own message must never count as unread for you. (historical: a sender's own badge went to 1 on SpacetimeDB, twice)",
+          "steps": [
+            {
+              "do": "send",
+              "actor": "alice",
+              "text": "alice speaking"
+            },
+            {
+              "do": "wait",
+              "actor": "alice",
+              "ms": 1400
+            },
+            {
+              "do": "enterRoom",
+              "actor": "alice",
+              "room": "side"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "unread-badge",
+              "in": {
+                "testid": "room-item",
+                "contains": "{room:main}"
+              },
+              "absent": true,
+              "within": 5000
+            }
+          ]
+        },
+        {
+          "id": "unread-does-not-resurrect",
+          "points": 1,
+          "desc": "Once a room is open its badge stays clear while new messages arrive in it \u2014 you are looking at them. (historical: badges that never cleared)",
+          "steps": [
+            {
+              "do": "enterRoom",
+              "actor": "alice",
+              "room": "main"
+            },
+            {
+              "do": "wait",
+              "actor": "alice",
+              "ms": 1400
+            },
+            {
+              "do": "send",
+              "actor": "bob",
+              "text": "bob speaking"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "message-item",
+              "contains": "bob speaking",
+              "within": 6000
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "unread-badge",
+              "in": {
+                "testid": "room-item",
+                "contains": "{room:main}"
+              },
+              "absent": true,
+              "within": 4000
+            }
+          ]
+        },
+        {
+          "id": "receipts-keep-updating",
+          "points": 1,
+          "desc": "Receipts stay live for later messages, not just the first one. (historical: 'Seen by' that only appeared after leaving and re-entering the room)",
+          "steps": [
+            {
+              "do": "wait",
+              "actor": "alice",
+              "ms": 1400
+            },
+            {
+              "do": "send",
+              "actor": "alice",
+              "text": "second message from alice"
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "message-item",
+              "contains": "second message from alice",
+              "within": 6000
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "read-receipt",
+              "contains": "Bob",
+              "within": 10000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 105,
+      "name": "Presence and Display Stability",
+      "max": 2,
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "note": "Presence was wrong in six of the historically graded runs, and 'Seen by' lists were seen flickering between orderings. Neither is visible to a single assertion.",
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "lobby"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "lobby"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "lobby"
+        },
+        {
+          "do": "send",
+          "actor": "alice",
+          "text": "who is here"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "receipt-text-does-not-flicker",
+          "points": 1,
+          "desc": "The 'Seen by' list must not change while nothing is happening. (historical: names flipping order continuously from an unstable sort)",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "read-receipt",
+              "within": 10000
+            },
+            {
+              "do": "expectStable",
+              "actor": "alice",
+              "testid": "read-receipt",
+              "samples": 4,
+              "intervalMs": 700
+            }
+          ]
+        },
+        {
+          "id": "presence-drops-signed-out-user",
+          "points": 1,
+          "desc": "A user who signs out disappears from the online list. (historical: presence lists stale or stuck, six runs)",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "online-users",
+              "contains": "Bob",
+              "within": 8000
+            },
+            {
+              "do": "click",
+              "actor": "bob",
+              "testid": "signout"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "online-users",
+              "contains": "Bob",
+              "absent": true,
+              "within": 12000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 107,
+      "name": "Server-Side Truth",
+      "max": 2,
+      "actors": [
+        "alice",
+        "bob"
+      ],
+      "note": "Whatever the acting client shows must actually exist on the server. Optimistic inserts that were never confirmed, and counts incremented only in one browser, are invisible to any assertion made from that same browser.",
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "truth"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "truth"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "truth"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "rejected-message-does-not-linger",
+          "points": 1,
+          "desc": "A message the server refused for exceeding the rate limit must not stay visible to its sender. An optimistic insert without rollback leaves the sender believing they said something nobody received.",
+          "steps": [
+            {
+              "do": "send",
+              "actor": "alice",
+              "text": "first of a burst"
+            },
+            {
+              "do": "send",
+              "actor": "alice",
+              "text": "REJECTED BY RATE LIMIT"
+            },
+            {
+              "do": "wait",
+              "actor": "alice",
+              "ms": 4000
+            },
+            {
+              "do": "expect",
+              "actor": "bob",
+              "testid": "message-item",
+              "contains": "REJECTED BY RATE LIMIT",
+              "absent": true,
+              "within": 4000
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "message-item",
+              "contains": "REJECTED BY RATE LIMIT",
+              "absent": true,
+              "within": 4000
+            }
+          ]
+        },
+        {
+          "id": "a-fresh-client-sees-the-same-thing",
+          "points": 1,
+          "desc": "A brand-new browser sees what the acting client claims. Anything visible only to the client that performed the action never reached the server.",
+          "steps": [
+            {
+              "do": "wait",
+              "actor": "alice",
+              "ms": 1500
+            },
+            {
+              "do": "send",
+              "actor": "alice",
+              "text": "durable statement"
+            },
+            {
+              "do": "expect",
+              "actor": "alice",
+              "testid": "message-item",
+              "contains": "durable statement",
+              "within": 6000
+            },
+            {
+              "do": "freshClient",
+              "actor": "bob"
+            },
+            {
+              "do": "signUp",
+              "actor": "bob-fresh",
+              "name": "Observer"
+            },
+            {
+              "do": "enterRoom",
+              "actor": "bob-fresh",
+              "room": "truth"
+            },
+            {
+              "do": "expect",
+              "actor": "bob-fresh",
+              "testid": "message-item",
+              "contains": "durable statement",
+              "within": 10000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 109,
+      "name": "Direct Message Privacy",
+      "max": 3,
+      "actors": [
+        "alice",
+        "bob",
+        "snoop"
+      ],
+      "note": "A direct conversation is the first data in level 1 that must not reach someone. The wire check is the one that matters: an app that broadcasts widely and filters in the browser looks perfect on screen while the data is already in every client.",
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "Alice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "Bob"
+        },
+        {
+          "do": "signUp",
+          "actor": "snoop",
+          "name": "Snoop"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "lobby"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "alice",
+          "room": "lobby"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "snoop",
+          "room": "lobby"
+        },
+        {
+          "do": "send",
+          "actor": "alice",
+          "text": "a public message in the lobby"
+        },
+        {
+          "do": "wait",
+          "actor": "alice",
+          "ms": 2500
+        },
+        {
+          "do": "click",
+          "actor": "alice",
+          "testid": "dm-start",
+          "in": {
+            "testid": "online-user",
+            "contains": "Bob"
+          }
+        },
+        {
+          "do": "wait",
+          "actor": "alice",
+          "ms": 2000
+        },
+        {
+          "do": "click",
+          "actor": "alice",
+          "testid": "dm-item",
+          "in": {
+            "testid": "dm-list",
+            "contains": "Bob"
+          }
+        },
+        {
+          "do": "send",
+          "actor": "alice",
+          "text": "SECRET between alice and bob"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "outsider-cannot-see-the-conversation",
+          "points": 1,
+          "desc": "A third party does not see the conversation in their list",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "snoop",
+              "testid": "dm-item",
+              "contains": "Alice",
+              "absent": true,
+              "within": 6000
+            }
+          ]
+        },
+        {
+          "id": "outsider-cannot-read-the-messages",
+          "points": 1,
+          "desc": "A third party never sees the messages",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "snoop",
+              "testid": "message-item",
+              "contains": "SECRET between alice and bob",
+              "absent": true,
+              "within": 6000
+            }
+          ]
+        },
+        {
+          "id": "outsider-never-receives-it-over-the-wire",
+          "points": 1,
+          "desc": "A third party's client is never SENT the private message. Hiding it in the interface is not privacy \u2014 anyone with developer tools can read what their own browser received.",
+          "steps": [
+            {
+              "do": "expectReceived",
+              "actor": "snoop",
+              "contains": "a public message in the lobby",
+              "within": 8000
+            },
+            {
+              "do": "click",
+              "actor": "bob",
+              "testid": "dm-item",
+              "in": {
+                "testid": "dm-list",
+                "contains": "Alice"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "bob",
+              "ms": 2000
+            },
+            {
+              "do": "send",
+              "actor": "alice",
+              "text": "SECOND SECRET for bob only"
+            },
+            {
+              "do": "wait",
+              "actor": "alice",
+              "ms": 4000
+            },
+            {
+              "do": "expectReceived",
+              "actor": "bob",
+              "contains": "SECOND SECRET for bob only",
+              "within": 8000
+            },
+            {
+              "do": "expectNotReceived",
+              "actor": "snoop",
+              "contains": "SECOND SECRET for bob only"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 108,
+      "name": "Authorization",
+      "max": 4,
+      "actors": [
+        "owner",
+        "member",
+        "target",
+        "outsider"
+      ],
+      "note": "Each of these is an action the wrong person must not be able to take. Where the app writes over HTTP the request is re-issued with the wrong user's credentials, because a hidden control is not a check. Where identity comes from the live connection there is nothing to re-issue: that replay records as unverified and never scores or penalises, so the point rests on what the interface actually does.",
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "owner",
+          "name": "Owner"
+        },
+        {
+          "do": "signUp",
+          "actor": "member",
+          "name": "Member"
+        },
+        {
+          "do": "signUp",
+          "actor": "target",
+          "name": "Target"
+        },
+        {
+          "do": "signUp",
+          "actor": "outsider",
+          "name": "Outsider"
+        },
+        {
+          "do": "createRoom",
+          "actor": "owner",
+          "room": "guarded"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "owner",
+          "room": "guarded"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "member",
+          "room": "guarded"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "target",
+          "room": "guarded"
+        },
+        {
+          "do": "send",
+          "actor": "owner",
+          "text": "owner message"
+        },
+        {
+          "do": "wait",
+          "actor": "owner",
+          "ms": 2500
+        }
+      ],
+      "criteria": [
+        {
+          "id": "outsider-cannot-read-the-room",
+          "points": 1,
+          "desc": "Someone who never joined the room cannot read its history",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "outsider",
+              "testid": "message-item",
+              "contains": "owner message",
+              "absent": true,
+              "within": 6000
+            }
+          ]
+        },
+        {
+          "id": "outsider-cannot-post-to-the-room",
+          "points": 1,
+          "desc": "Someone who never joined cannot post to the room, even by re-issuing a member's own send request",
+          "steps": [
+            {
+              "do": "replayAs",
+              "actor": "outsider",
+              "from": "owner",
+              "match": "owner message",
+              "swap": {
+                "find": "owner message",
+                "with": "posted by an outsider"
+              }
+            },
+            {
+              "do": "expectReplayRejected",
+              "actor": "outsider"
+            },
+            {
+              "do": "expect",
+              "actor": "owner",
+              "testid": "message-item",
+              "contains": "posted by an outsider",
+              "absent": true,
+              "within": 6000
+            }
+          ]
+        },
+        {
+          "id": "removed-member-stops-receiving",
+          "points": 1,
+          "desc": "A removed user stops receiving the room's messages immediately, without reloading. Revoking access has to stop the stream, not just stop the interface drawing it.",
+          "steps": [
+            {
+              "do": "expectReceived",
+              "actor": "target",
+              "contains": "owner message",
+              "within": 8000
+            },
+            {
+              "do": "click",
+              "actor": "owner",
+              "testid": "member-remove",
+              "in": {
+                "testid": "member-item",
+                "contains": "Target"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "owner",
+              "ms": 3000
+            },
+            {
+              "do": "send",
+              "actor": "owner",
+              "text": "after the removal"
+            },
+            {
+              "do": "wait",
+              "actor": "owner",
+              "ms": 4000
+            },
+            {
+              "do": "expectNotReceived",
+              "actor": "target",
+              "contains": "after the removal"
+            }
+          ]
+        },
+        {
+          "id": "only-an-owner-can-remove-a-member",
+          "points": 1,
+          "desc": "A member who is not an owner cannot remove anyone \u2014 not through the interface, and not by re-issuing the owner's own removal request against a different person",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "member",
+              "testid": "member-remove",
+              "absent": true,
+              "within": 5000
+            },
+            {
+              "do": "replayAs",
+              "actor": "member",
+              "from": "owner",
+              "match": "member",
+              "swap": {
+                "find": "{user:Target}",
+                "with": "{user:Owner}"
+              }
+            },
+            {
+              "do": "expectReplayRejected",
+              "actor": "member"
+            },
+            {
+              "do": "expect",
+              "actor": "owner",
+              "testid": "member-item",
+              "contains": "Owner",
+              "within": 6000
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
\ No newline at end of file
diff --git a/tools/stack-bench/tracks/chat/scenarios/01-systems.json b/tools/stack-bench/tracks/chat/scenarios/01-systems.json
new file mode 100644
index 00000000000..13072870336
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/scenarios/01-systems.json
@@ -0,0 +1,227 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "note": "Properties of the system, not of any one feature: what happens when the database changes underneath the app, and when two things happen at the same time. A broadcast layer only announces writes that went through it — a moderation script that deletes rows directly leaves every open client showing messages that no longer exist. Every criterion is withheld at 0 points until it demonstrably fails a real build AND its mutant is CAUGHT, the same promotion rule as contention.",
+  "features": [
+    {
+      "id": 901,
+      "name": "A write from outside the app is visible without reload",
+      "actors": [
+        "alice",
+        "bob",
+        "auditor"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "alice",
+          "name": "SysAlice"
+        },
+        {
+          "do": "signUp",
+          "actor": "bob",
+          "name": "SysBob"
+        },
+        {
+          "do": "createRoom",
+          "actor": "alice",
+          "room": "sysroom"
+        },
+        {
+          "do": "enterRoom",
+          "actor": "bob",
+          "room": "sysroom"
+        },
+        {
+          "do": "send",
+          "actor": "bob",
+          "text": "purge-me-alpha"
+        },
+        {
+          "do": "send",
+          "actor": "bob",
+          "text": "purge-me-beta"
+        },
+        {
+          "do": "expect",
+          "actor": "alice",
+          "testid": "message-item",
+          "contains": "purge-me-beta",
+          "within": 8000
+        }
+      ],
+      "criteria": [
+        {
+          "id": "901a",
+          "desc": "a back-office script purges SysBob's messages directly in the database; a client with the room open sees them disappear without touching the page",
+          "points": 0,
+          "note": "WITHHELD until proven against a mutant (backoffice-writes-via-server) and a real failing build. The script is the app's own scripts/backoffice.mjs, required by the spec to write to the database without the web server's help — moderation, compliance takedowns and data-retention jobs all look exactly like this.",
+          "steps": [
+            {
+              "do": "runScript",
+              "script": "scripts/backoffice.mjs",
+              "args": [
+                "purge-user",
+                "{user:SysBob}"
+              ],
+              "settleMs": 4000
+            },
+            {
+              "do": "expectElementCount",
+              "actor": "alice",
+              "testid": "message-item",
+              "contains": "purge-me",
+              "equals": 0,
+              "within": 10000
+            }
+          ]
+        },
+        {
+          "id": "901b",
+          "desc": "a customer arriving after the purge never sees the messages — the rows are gone from the database, not merely from one client's memory",
+          "points": 0,
+          "note": "WITHHELD — promoted together with 901a. A fresh actor rather than a reload, so this cannot be confused by session-persistence behaviour, which invariant 105 scores separately.",
+          "steps": [
+            {
+              "do": "signUp",
+              "actor": "auditor",
+              "name": "SysAuditor"
+            },
+            {
+              "do": "enterRoom",
+              "actor": "auditor",
+              "room": "sysroom"
+            },
+            {
+              "do": "expectElementCount",
+              "actor": "auditor",
+              "testid": "message-item",
+              "contains": "purge-me",
+              "equals": 0,
+              "within": 10000
+            }
+          ]
+        },
+        {
+          "id": "901c",
+          "desc": "a purge that lands while the app server is down is still reflected to an open client once the server returns — the deploy window loses nothing",
+          "points": 0,
+          "note": "WITHHELD — same promotion rule, plus this is the anti-cheat phase: a script that talks to the app server fails here outright. NOTIFY-style event relays also fail unless the app refetches on reconnect, because a notification fired while nobody listened is gone forever.",
+          "steps": [
+            {
+              "do": "send",
+              "actor": "alice",
+              "text": "deploy-window-msg"
+            },
+            {
+              "do": "expect",
+              "actor": "auditor",
+              "testid": "message-item",
+              "contains": "deploy-window-msg",
+              "within": 8000
+            },
+            {
+              "do": "stopAppServer"
+            },
+            {
+              "do": "runScript",
+              "script": "scripts/backoffice.mjs",
+              "args": [
+                "purge-user",
+                "{user:SysAlice}"
+              ]
+            },
+            {
+              "do": "startAppServer"
+            },
+            {
+              "do": "expectElementCount",
+              "actor": "auditor",
+              "testid": "message-item",
+              "contains": "deploy-window-msg",
+              "equals": 0,
+              "within": 20000
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 902,
+      "name": "A list being opened while its contents change",
+      "actors": [
+        "host",
+        "watcher",
+        "joiner"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "host",
+          "name": "RaceHost"
+        },
+        {
+          "do": "signUp",
+          "actor": "watcher",
+          "name": "RaceWatcher"
+        },
+        {
+          "do": "signUp",
+          "actor": "joiner",
+          "name": "RaceJoiner"
+        },
+        {
+          "do": "createRoom",
+          "actor": "host",
+          "room": "raceroom"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "902a",
+          "desc": "one user enters the room — fetching its member list — at the same moment another joins: the fetcher ends with the joiner exactly once, not zero (stale fetch) and not twice (fetch merged with the join broadcast)",
+          "points": 0,
+          "note": "WITHHELD until proven against a mutant (fetch-then-append-dupe) and a real failing build. The race window is real; INCONCLUSIVE on a missed race, never a false FAIL.",
+          "steps": [
+            {
+              "do": "race",
+              "branches": [
+                [
+                  {
+                    "do": "enterRoom",
+                    "actor": "watcher",
+                    "room": "raceroom"
+                  }
+                ],
+                [
+                  {
+                    "do": "enterRoom",
+                    "actor": "joiner",
+                    "room": "raceroom"
+                  }
+                ]
+              ],
+              "settleMs": 4000
+            },
+            {
+              "do": "expectElementCount",
+              "actor": "watcher",
+              "testid": "member-item",
+              "contains": "RaceJoiner",
+              "equals": 1,
+              "within": 10000
+            },
+            {
+              "do": "expectElementCount",
+              "actor": "watcher",
+              "testid": "member-item",
+              "contains": "RaceHost",
+              "equals": 1,
+              "within": 10000
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/chat/scenarios/02-features.json b/tools/stack-bench/tracks/chat/scenarios/02-features.json
new file mode 100644
index 00000000000..596e3c10e8e
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/scenarios/02-features.json
@@ -0,0 +1,196 @@
+{
+  "schemaVersion": 1,
+  "level": 2,
+  "note": "Level 2 features: access control and the social layer. Levels are cumulative — these run against the same app as level 1's suites, after the upgrade.",
+  "features": [
+    {
+      "id": 201,
+      "name": "Private Rooms",
+      "actors": ["owner", "outsider"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "Pria" },
+        { "do": "signUp", "actor": "outsider", "name": "Oleg" },
+        { "do": "createRoom", "actor": "owner", "room": "vault", "private": true },
+        { "do": "send", "actor": "owner", "text": "vault-secret-note" }
+      ],
+      "criteria": [
+        {
+          "id": "201a",
+          "desc": "the owner sees the private badge on their room",
+          "points": 1,
+          "steps": [
+            { "do": "expect", "actor": "owner", "testid": "room-private-badge", "within": 8000 }
+          ]
+        },
+        {
+          "id": "201b",
+          "desc": "a private room does not appear in a non-member's room list at all",
+          "points": 2,
+          "steps": [
+            { "do": "expect", "actor": "outsider", "testid": "room-item", "contains": "{room:vault}", "absent": true, "within": 6000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 202,
+      "name": "Invitation and Removal",
+      "actors": ["owner", "guest"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "Held" },
+        { "do": "signUp", "actor": "guest", "name": "Gina" },
+        { "do": "createRoom", "actor": "owner", "room": "committee", "private": true },
+        { "do": "send", "actor": "owner", "text": "pre-invite-history" }
+      ],
+      "criteria": [
+        {
+          "id": "202a",
+          "desc": "an invited user gains access and can read the room's history",
+          "points": 2,
+          "steps": [
+            { "do": "fill", "actor": "owner", "testid": "invite-input", "text": "{user:Gina}" },
+            { "do": "click", "actor": "owner", "testid": "invite-submit", "settleMs": 1200 },
+            { "do": "enterRoom", "actor": "guest", "room": "committee" },
+            { "do": "expect", "actor": "guest", "testid": "message-item", "contains": "pre-invite-history", "within": 10000 }
+          ]
+        },
+        {
+          "id": "202b",
+          "desc": "removal takes effect live: the removed member stops receiving without reloading",
+          "points": 2,
+          "steps": [
+            { "do": "click", "actor": "owner", "testid": "member-remove", "in": { "testid": "member-item", "contains": "Gina" }, "settleMs": 1500 },
+            { "do": "send", "actor": "owner", "text": "post-removal-note" },
+            { "do": "wait", "actor": "owner", "ms": 2500 },
+            { "do": "expect", "actor": "guest", "testid": "message-item", "contains": "post-removal-note", "absent": true, "within": 4000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 203,
+      "name": "Profiles",
+      "actors": ["subject", "viewer"],
+      "setup": [
+        { "do": "signUp", "actor": "subject", "name": "Sana" },
+        { "do": "signUp", "actor": "viewer", "name": "Vero" },
+        { "do": "createRoom", "actor": "subject", "room": "profroom" },
+        { "do": "enterRoom", "actor": "viewer", "room": "profroom" },
+        { "do": "fill", "actor": "subject", "testid": "bio-input", "text": "first-bio-text" },
+        { "do": "click", "actor": "subject", "testid": "bio-save", "settleMs": 1200 }
+      ],
+      "criteria": [
+        {
+          "id": "203a",
+          "desc": "clicking a username opens that person's profile with their name and bio",
+          "points": 1,
+          "steps": [
+            { "do": "click", "actor": "viewer", "testid": "member-item", "contains": "Sana", "settleMs": 1200 },
+            { "do": "expect", "actor": "viewer", "testid": "profile-name", "contains": "Sana", "within": 8000 },
+            { "do": "expect", "actor": "viewer", "testid": "profile-bio", "contains": "first-bio-text", "within": 8000 }
+          ]
+        },
+        {
+          "id": "203b",
+          "desc": "an open profile panel is live: a bio edit appears to a viewer without reopening",
+          "points": 2,
+          "steps": [
+            { "do": "fill", "actor": "subject", "testid": "bio-input", "text": "second-bio-text" },
+            { "do": "click", "actor": "subject", "testid": "bio-save" },
+            { "do": "expect", "actor": "viewer", "testid": "profile-bio", "contains": "second-bio-text", "within": 10000 }
+          ]
+        },
+        {
+          "id": "203c",
+          "desc": "the panel closes, and reopening shows current data",
+          "points": 1,
+          "steps": [
+            { "do": "click", "actor": "viewer", "testid": "profile-close", "settleMs": 800 },
+            { "do": "expect", "actor": "viewer", "testid": "profile-bio", "absent": true, "within": 4000 },
+            { "do": "click", "actor": "viewer", "testid": "member-item", "contains": "Sana", "settleMs": 1200 },
+            { "do": "expect", "actor": "viewer", "testid": "profile-bio", "contains": "second-bio-text", "within": 8000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 204,
+      "name": "Friends",
+      "actors": ["asker", "asked", "third"],
+      "setup": [
+        { "do": "signUp", "actor": "asker", "name": "Finn" },
+        { "do": "signUp", "actor": "asked", "name": "Freya" },
+        { "do": "signUp", "actor": "third", "name": "Falk" },
+        { "do": "createRoom", "actor": "asker", "room": "friendroom" },
+        { "do": "enterRoom", "actor": "asked", "room": "friendroom" },
+        { "do": "enterRoom", "actor": "third", "room": "friendroom" }
+      ],
+      "criteria": [
+        {
+          "id": "204a",
+          "desc": "a request reaches the recipient as pending, and accepting puts each user in the other's friends list — live, no reloads anywhere",
+          "points": 2,
+          "steps": [
+            { "do": "click", "actor": "asker", "testid": "member-item", "contains": "Freya", "settleMs": 1200 },
+            { "do": "click", "actor": "asker", "testid": "friend-request", "settleMs": 1200 },
+            { "do": "expect", "actor": "asked", "testid": "friend-pending", "contains": "Finn", "within": 10000 },
+            { "do": "click", "actor": "asked", "testid": "friend-accept", "in": { "testid": "friend-pending", "contains": "Finn" }, "settleMs": 1500 },
+            { "do": "expect", "actor": "asker", "testid": "friend-item", "contains": "Freya", "within": 10000 },
+            { "do": "expect", "actor": "asked", "testid": "friend-item", "contains": "Finn", "within": 10000 }
+          ]
+        },
+        {
+          "id": "204b",
+          "desc": "a declined request creates no friendship on either side",
+          "points": 1,
+          "steps": [
+            { "do": "click", "actor": "third", "testid": "member-item", "contains": "Freya", "settleMs": 1200 },
+            { "do": "click", "actor": "third", "testid": "friend-request", "settleMs": 1200 },
+            { "do": "click", "actor": "asked", "testid": "friend-decline", "in": { "testid": "friend-pending", "contains": "Falk" }, "settleMs": 1500 },
+            { "do": "expect", "actor": "third", "testid": "friend-item", "contains": "Freya", "absent": true, "within": 5000 },
+            { "do": "expect", "actor": "asked", "testid": "friend-item", "contains": "Falk", "absent": true, "within": 5000 }
+          ]
+        },
+        {
+          "id": "204c",
+          "desc": "unfriending removes the row live from BOTH lists",
+          "points": 2,
+          "steps": [
+            { "do": "click", "actor": "asker", "testid": "unfriend", "in": { "testid": "friend-item", "contains": "Freya" }, "settleMs": 1500 },
+            { "do": "expect", "actor": "asker", "testid": "friend-item", "contains": "Freya", "absent": true, "within": 8000 },
+            { "do": "expect", "actor": "asked", "testid": "friend-item", "contains": "Finn", "absent": true, "within": 8000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 205,
+      "name": "Friend Presence",
+      "actors": ["watcher", "flapper"],
+      "setup": [
+        { "do": "signUp", "actor": "watcher", "name": "Wava" },
+        { "do": "signUp", "actor": "flapper", "name": "Flip" },
+        { "do": "createRoom", "actor": "watcher", "room": "presroom" },
+        { "do": "enterRoom", "actor": "flapper", "room": "presroom" },
+        { "do": "click", "actor": "watcher", "testid": "member-item", "contains": "Flip", "settleMs": 1200 },
+        { "do": "click", "actor": "watcher", "testid": "friend-request", "settleMs": 1200 },
+        { "do": "click", "actor": "flapper", "testid": "friend-accept", "in": { "testid": "friend-pending", "contains": "Wava" }, "settleMs": 1500 }
+      ],
+      "criteria": [
+        {
+          "id": "205a",
+          "desc": "a friend's presence flips to offline live when they leave, and back when they return",
+          "points": 2,
+          "steps": [
+            { "do": "expect", "actor": "watcher", "testid": "friend-presence", "in": { "testid": "friend-item", "contains": "Flip" }, "contains": "online", "within": 10000 },
+            { "do": "closeClient", "actor": "flapper" },
+            { "do": "expect", "actor": "watcher", "testid": "friend-presence", "in": { "testid": "friend-item", "contains": "Flip" }, "contains": "offline", "within": 15000 },
+            { "do": "openClient", "actor": "flapper" },
+            { "do": "ensureSignedIn", "actor": "flapper", "name": "Flip" },
+            { "do": "expect", "actor": "watcher", "testid": "friend-presence", "in": { "testid": "friend-item", "contains": "Flip" }, "contains": "online", "within": 15000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/chat/scenarios/02-invariants.json b/tools/stack-bench/tracks/chat/scenarios/02-invariants.json
new file mode 100644
index 00000000000..2fbfdec204a
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/scenarios/02-invariants.json
@@ -0,0 +1,107 @@
+{
+  "schemaVersion": 1,
+  "level": 2,
+  "note": "What level 2 must hold true regardless of UI: privacy is a property of the wire, not of what a page chooses to render; a friendship is one relationship; a profile belongs to its owner. Three-way verdicts follow level 1's replay conventions.",
+  "features": [
+    {
+      "id": 211,
+      "name": "Private Room Privacy",
+      "actors": ["owner", "member", "outsider"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "Opal" },
+        { "do": "signUp", "actor": "member", "name": "Mia" },
+        { "do": "signUp", "actor": "outsider", "name": "Xeno" },
+        { "do": "createRoom", "actor": "owner", "room": "sealed", "private": true },
+        { "do": "fill", "actor": "owner", "testid": "invite-input", "text": "{user:Mia}" },
+        { "do": "click", "actor": "owner", "testid": "invite-submit", "settleMs": 1500 },
+        { "do": "enterRoom", "actor": "member", "room": "sealed" }
+      ],
+      "criteria": [
+        {
+          "id": "211a",
+          "desc": "a private message reaches a member and is never sent over the wire to a non-member — regardless of what any page renders",
+          "points": 2,
+          "steps": [
+            { "do": "send", "actor": "owner", "text": "sealed-room-secret" },
+            { "do": "wait", "actor": "owner", "ms": 4000 },
+            { "do": "expectReceived", "actor": "member", "contains": "sealed-room-secret", "within": 8000 },
+            { "do": "expectNotReceived", "actor": "outsider", "contains": "sealed-room-secret" }
+          ]
+        },
+        {
+          "id": "211b",
+          "desc": "a non-member's post into a private room, issued as a raw request, is rejected and appears to nobody",
+          "points": 2,
+          "steps": [
+            { "do": "replayAs", "actor": "outsider", "from": "owner", "match": "sealed-room-secret", "swap": { "find": "sealed-room-secret", "with": "smuggled-outsider-post" } },
+            { "do": "expectReplayRejected", "actor": "outsider" },
+            { "do": "expect", "actor": "member", "testid": "message-item", "contains": "smuggled-outsider-post", "absent": true, "within": 5000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 212,
+      "name": "Friendship Is One Relationship",
+      "actors": ["a", "b"],
+      "setup": [
+        { "do": "signUp", "actor": "a", "name": "Ada" },
+        { "do": "signUp", "actor": "b", "name": "Ben" },
+        { "do": "createRoom", "actor": "a", "room": "symroom" },
+        { "do": "enterRoom", "actor": "b", "room": "symroom" },
+        { "do": "click", "actor": "a", "testid": "member-item", "contains": "Ben", "settleMs": 1200 },
+        { "do": "click", "actor": "a", "testid": "friend-request", "settleMs": 1200 },
+        { "do": "click", "actor": "b", "testid": "friend-accept", "in": { "testid": "friend-pending", "contains": "Ada" }, "settleMs": 1500 }
+      ],
+      "criteria": [
+        {
+          "id": "212a",
+          "desc": "after an accept, each side holds exactly one row for the other — never two, never a half-friendship",
+          "points": 1,
+          "steps": [
+            { "do": "expectElementCount", "actor": "a", "testid": "friend-item", "contains": "Ben", "equals": 1, "within": 10000 },
+            { "do": "expectElementCount", "actor": "b", "testid": "friend-item", "contains": "Ada", "equals": 1, "within": 10000 }
+          ]
+        },
+        {
+          "id": "212b",
+          "desc": "replaying the accept a second time as a raw request creates no second friendship",
+          "points": 2,
+          "steps": [
+            { "do": "replayAs", "actor": "b", "from": "b", "match": "friend" },
+            { "do": "wait", "actor": "b", "ms": 2500 },
+            { "do": "expectElementCount", "actor": "a", "testid": "friend-item", "contains": "Ben", "equals": 1, "within": 8000 },
+            { "do": "expectElementCount", "actor": "b", "testid": "friend-item", "contains": "Ada", "equals": 1, "within": 8000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 213,
+      "name": "A Profile Belongs to Its Owner",
+      "actors": ["victim", "attacker"],
+      "setup": [
+        { "do": "signUp", "actor": "victim", "name": "Vik" },
+        { "do": "signUp", "actor": "attacker", "name": "Axl" },
+        { "do": "createRoom", "actor": "victim", "room": "bioroom" },
+        { "do": "enterRoom", "actor": "attacker", "room": "bioroom" },
+        { "do": "fill", "actor": "victim", "testid": "bio-input", "text": "authentic-bio-text" },
+        { "do": "click", "actor": "victim", "testid": "bio-save", "settleMs": 1500 }
+      ],
+      "criteria": [
+        {
+          "id": "213a",
+          "desc": "another user's raw request to edit someone's bio is rejected, and the bio is unchanged for everyone",
+          "points": 2,
+          "steps": [
+            { "do": "replayAs", "actor": "attacker", "from": "victim", "match": "authentic-bio-text", "swap": { "find": "authentic-bio-text", "with": "defaced-bio-text" } },
+            { "do": "expectReplayRejected", "actor": "attacker" },
+            { "do": "click", "actor": "attacker", "testid": "member-item", "contains": "Vik", "settleMs": 1200 },
+            { "do": "expect", "actor": "attacker", "testid": "profile-bio", "contains": "authentic-bio-text", "within": 8000 },
+            { "do": "expect", "actor": "attacker", "testid": "profile-bio", "contains": "defaced-bio-text", "absent": true, "within": 4000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/chat/scenarios/02-systems.json b/tools/stack-bench/tracks/chat/scenarios/02-systems.json
new file mode 100644
index 00000000000..6d8716d9917
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/scenarios/02-systems.json
@@ -0,0 +1,82 @@
+{
+  "schemaVersion": 1,
+  "level": 2,
+  "note": "The subscription-lifecycle races level 2's surfaces make possible: a panel that opens at the moment its contents change, and a relationship that forms while the list showing it is being fetched. Fetch-on-open architectures pass every sequential test and fail exactly here. Every criterion is withheld at 0 points until it demonstrably fails a real build AND its mutant is CAUGHT — same promotion rule as contention.",
+  "features": [
+    {
+      "id": 921,
+      "name": "A panel opened at the moment its contents change",
+      "actors": ["subject", "viewer"],
+      "setup": [
+        { "do": "signUp", "actor": "subject", "name": "Zed" },
+        { "do": "signUp", "actor": "viewer", "name": "Yara" },
+        { "do": "createRoom", "actor": "subject", "room": "panelrace" },
+        { "do": "enterRoom", "actor": "viewer", "room": "panelrace" },
+        { "do": "fill", "actor": "subject", "testid": "bio-input", "text": "bio-before-race" },
+        { "do": "click", "actor": "subject", "testid": "bio-save", "settleMs": 1500 },
+        { "do": "fill", "actor": "subject", "testid": "bio-input", "text": "bio-after-race" }
+      ],
+      "criteria": [
+        {
+          "id": "921a",
+          "desc": "a profile panel opened at the same moment the bio is saved converges on the NEW bio — the panel's subscription outlives its opening fetch",
+          "points": 0,
+          "note": "WITHHELD until proven against a mutant (fetch-on-open-no-subscribe) and a real failing build. A fetch-on-open panel that races the save shows bio-before-race forever; a subscribed panel converges.",
+          "steps": [
+            {
+              "do": "race",
+              "branches": [
+                [
+                  { "do": "click", "actor": "viewer", "testid": "member-item", "contains": "Zed" }
+                ],
+                [
+                  { "do": "click", "actor": "subject", "testid": "bio-save" }
+                ]
+              ],
+              "settleMs": 4000
+            },
+            { "do": "expect", "actor": "viewer", "testid": "profile-bio", "contains": "bio-after-race", "within": 10000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 922,
+      "name": "A friendship formed while the list showing it is fetched",
+      "actors": ["asker", "asked"],
+      "setup": [
+        { "do": "signUp", "actor": "asker", "name": "Quin" },
+        { "do": "signUp", "actor": "asked", "name": "Rune" },
+        { "do": "createRoom", "actor": "asker", "room": "listrace" },
+        { "do": "enterRoom", "actor": "asked", "room": "listrace" },
+        { "do": "click", "actor": "asker", "testid": "member-item", "contains": "Rune", "settleMs": 1200 },
+        { "do": "click", "actor": "asker", "testid": "friend-request", "settleMs": 1500 }
+      ],
+      "criteria": [
+        {
+          "id": "922a",
+          "desc": "the accept lands while the asker's client is mid-refresh: the new friend appears exactly once — not zero (stale fetch), not twice (fetch merged with the accept broadcast)",
+          "points": 0,
+          "note": "WITHHELD until proven against a mutant (fetch-then-append-dupe) and a real failing build. The reload is what forces the asker's client into a full refetch for the accept to race.",
+          "steps": [
+            {
+              "do": "race",
+              "branches": [
+                [
+                  { "do": "reload", "actor": "asker", "settleMs": 500 }
+                ],
+                [
+                  { "do": "click", "actor": "asked", "testid": "friend-accept", "in": { "testid": "friend-pending", "contains": "Quin" } }
+                ]
+              ],
+              "settleMs": 5000
+            },
+            { "do": "ensureSignedIn", "actor": "asker", "name": "Quin" },
+            { "do": "expectElementCount", "actor": "asker", "testid": "friend-item", "contains": "Rune", "equals": 1, "within": 12000 },
+            { "do": "expectElementCount", "actor": "asked", "testid": "friend-item", "contains": "Quin", "equals": 1, "within": 12000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/chat/track.json b/tools/stack-bench/tracks/chat/track.json
new file mode 100644
index 00000000000..48c4891baab
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/track.json
@@ -0,0 +1,50 @@
+{
+  "schemaVersion": 1,
+  "title": "Chat",
+  "slug": "",
+  "validatedThrough": 0,
+  "plannedThrough": 5,
+  "portOffset": 0,
+  "restartProbe": "/api/rooms",
+  "suites": {
+    "1": [
+      {
+        "id": "features",
+        "inherit": "none",
+        "spec": "scenarios/01-basic-chat.json"
+      },
+      {
+        "id": "invariants",
+        "inherit": "all-higher-levels",
+        "spec": "scenarios/01-invariants.json"
+      },
+      {
+        "id": "delivery",
+        "inherit": "none",
+        "spec": "scenarios/01-delivery.json"
+      },
+      {
+        "id": "systems",
+        "inherit": "all-higher-levels",
+        "spec": "scenarios/01-systems.json"
+      }
+    ],
+    "2": [
+      {
+        "id": "features",
+        "inherit": "none",
+        "spec": "scenarios/02-features.json"
+      },
+      {
+        "id": "invariants",
+        "inherit": "all-higher-levels",
+        "spec": "scenarios/02-invariants.json"
+      },
+      {
+        "id": "systems",
+        "inherit": "all-higher-levels",
+        "spec": "scenarios/02-systems.json"
+      }
+    ]
+  }
+}
diff --git a/tools/stack-bench/tracks/chat/walk.ts b/tools/stack-bench/tracks/chat/walk.ts
new file mode 100644
index 00000000000..5d9c4d5c0d3
--- /dev/null
+++ b/tools/stack-bench/tracks/chat/walk.ts
@@ -0,0 +1,85 @@
+import type { LintWalkContext } from '../../linter/lint.js';
+
+// Keep this recorded contract walk stable.
+
+export async function walk({ page, args, hooks, byStage, blocked, checkHook, results, uniq, tid, CHECK_TIMEOUT }: LintWalkContext): Promise<void> {
+  await page.goto(args.url ?? '', { waitUntil: 'domcontentloaded', timeout: 15000 });
+
+  // Stage: landing (fresh identity -> registration UI must be shown)
+  let ok = true;
+  for (const h of byStage('landing')) ok = (await checkHook(page, h, results)) && ok;
+
+  if (ok) {
+    // Use alphanumeric credentials because username character rules are not part of the contract.
+    await page.locator(tid('signup-username')).first().fill(`lint${uniq}`);
+    await page.locator(tid('signup-password')).first().fill(`pwlint${uniq}`);
+    await page.locator(tid('signup-submit')).first().click();
+  }
+
+  // Stage: main (registered -> rooms + online users)
+  if (ok) {
+    for (const h of byStage('main')) ok = (await checkHook(page, h, results)) && ok;
+  } else blocked('main');
+
+  // Create a room, then check hooks that need one to exist. The created room
+  // must arrive in the list via the app's live update path (no reload) — this
+  // is itself a contract requirement, so we wait for OUR room, not any room.
+  const ourRoom = page.locator(tid('room-item'), { hasText: `lint-room-${uniq}` }).first();
+  if (ok) {
+    const nameInput = page.locator(tid('room-name-input')).first();
+    if (!(await nameInput.isVisible().catch(() => false))) {
+      await page.locator(tid('room-create')).first().click();
+    }
+    await nameInput.fill(`lint-room-${uniq}`);
+    await page.locator(tid('room-name-submit')).first().click();
+    for (const h of byStage('main-after-create')) {
+      if (h.id === 'room-item') {
+        try {
+          await ourRoom.waitFor({ state: 'visible', timeout: CHECK_TIMEOUT });
+          results.push({ id: h.id, status: 'PASS' });
+        } catch {
+          results.push({
+            id: h.id, status: 'FAIL',
+            detail: `created room "lint-room-${uniq}" but no ${tid(h.id)} containing it appeared without a reload`,
+          });
+          ok = false;
+        }
+      } else ok = (await checkHook(page, h, results)) && ok;
+    }
+  } else blocked('main-after-create');
+
+  // Stage: room (enter our room, send a probe message via Enter).
+  // Apps may implement click-to-join then click-to-enter; allow a second click.
+  if (ok) {
+    await ourRoom.click();
+    const msgInput = page.locator(tid('message-input')).first();
+    if (!(await msgInput.isVisible().catch(() => false))) {
+      await page.waitForTimeout(750);
+      if (!(await msgInput.isVisible().catch(() => false))) await ourRoom.click();
+    }
+    for (const h of byStage('room')) await checkHook(page, h, results); // non-blocking: check all
+    ok = !results.some(r => r.status === 'FAIL' && hooks.find(h => h.id === r.id)?.stage === 'room');
+  } else blocked('room');
+
+  if (ok && !results.some(r => r.id === 'message-input' && r.status !== 'PASS')) {
+    const probe = `lint probe ${uniq}`;
+    await page.locator(tid('message-input')).first().fill(probe);
+    await page.locator(tid('message-input')).first().press('Enter');
+    for (const h of byStage('room-after-send')) {
+      const loc = page.locator(tid(h.id), { hasText: probe }).first();
+      try {
+        await loc.waitFor({ state: 'visible', timeout: CHECK_TIMEOUT });
+        results.push({ id: h.id, status: 'PASS' });
+      } catch {
+        results.push({
+          id: h.id, status: 'FAIL',
+          detail: `sent "${probe}" via Enter but no ${tid(h.id)} containing it appeared — expected: ${h.element}`,
+        });
+      }
+    }
+  } else blocked('room-after-send');
+
+  for (const h of byStage('scenario')) {
+    results.push({ id: h.id, status: 'SCENARIO', detail: h.note });
+  }
+}
diff --git a/tools/stack-bench/tracks/ecommerce/LEVELS.md b/tools/stack-bench/tracks/ecommerce/LEVELS.md
new file mode 100644
index 00000000000..46e5a9d8e86
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/LEVELS.md
@@ -0,0 +1,81 @@
+# Ecommerce progression
+
+The ecommerce track tests shared numeric state, per-account state, access
+control, concurrency, and deferred work through a storefront and warehouse
+system.
+
+The track supports two run modes. They use the same feature packs and checks,
+but order the work differently.
+
+## Sequential mode
+
+Sequential levels are cumulative. A higher level repeats earlier checks so a
+regression stays visible.
+
+### L1: Storefront and warehouse
+
+- accounts and sessions;
+- catalog, ranking, stock, and ratings;
+- carts, checkout, purchases, and order history;
+- reviews and warehouse administration;
+- ownership, durability, live updates, and bounded contention.
+
+### L2: Business operations
+
+- fulfilment and shipping;
+- stock transfers;
+- cancellation and returns;
+- price history and paid-price preservation;
+- inventory, sales, and recommendation views;
+- staff authorization and accounting invariants.
+
+### L3: Deferred work
+
+- reservations and expiration;
+- scheduled restocks;
+- automatic order delivery;
+- abandoned-cart cleanup;
+- restart durability and exactly-once execution.
+
+The current sequential aliases and candidate recipes are defined in
+`composition/promotions.json` and `composition/candidates.json`. Use
+`qualification status` for launch and promotion state. This file does not copy
+that changing status.
+
+## Dependency mode
+
+Dependency mode follows the feature graph in
+`progression/ecommerce-2.0.2.json`. A feature opens only after its declared
+parents pass. Failed branches can stop while unrelated branches continue.
+
+Graph depth is calculated from prerequisites. It is not the same as a sequential
+release label. The graph includes independent product areas such as identity,
+catalog, checkout, inventory, staff access, support, promotions, notifications,
+and recommendations.
+
+Run this command to regenerate the public graph:
+
+```bash
+npm run graph
+```
+
+The generated file is `docs/dependency-graph.html`. Do not edit it by hand.
+
+## Composition and scoring
+
+Features and specifications are separate packs. A campaign chooses the product
+work, which specifications appear in the request, and which applicable checks
+are scored.
+
+Every check produces `passed`, `failed`, `inconclusive`, or `harness_failure`.
+Only passed checks add points. Missing or inconclusive evidence never changes
+the declared denominator.
+
+The score is passed points over every selected point in the graph, for the
+first build and for the final result alike. The questline average, each
+questline's own percentage averaged with equal weight, is reported beside it
+as a secondary view; questlines range from 9 to 59 points, so the two can
+differ. Blocked and unfinished work stays in the denominator.
+
+See [composition/README.md](composition/README.md) for pack, recipe, and
+calibration ownership.
diff --git a/tools/stack-bench/tracks/ecommerce/composition/README.md b/tools/stack-bench/tracks/ecommerce/composition/README.md
new file mode 100644
index 00000000000..2ebdb287ea8
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/README.md
@@ -0,0 +1,75 @@
+# Ecommerce composition
+
+This directory defines the versioned ecommerce work that Stack Bench can ask
+for and grade.
+
+## Ownership
+
+- `packs/` contains selectable product features and specifications.
+- `fixtures/` contains exact starting data.
+- `recipes/` selects pack, fixture, prompt, execution, and scoring versions.
+- `promotions.json` maps public sequential aliases to exact recipes.
+- `candidates.json` lists draft recipes that can be qualified directly.
+- `calibrations/` binds a recipe to reference apps, mutations, null controls,
+  repetition policy, and qualification state.
+
+These files are the source of truth. Do not copy current versions, counts, or
+qualification status into documentation.
+
+## Selection rules
+
+A pack selection changes the requested product work. Its declared dependencies
+join both the prompt and grading scope.
+
+A check selection narrows measurement inside that requested work. It does not
+change the product request. A check outside the selected packs is rejected.
+
+Prompt selection and scoring selection remain independent. Specifications have
+three treatments:
+
+- **requested:** included in the initial request and scored;
+- **expected:** omitted from the initial request, but scored and eligible for
+  repair feedback after a failure;
+- **observed:** measured after the first build without affecting the main score
+  or repair loop.
+
+See the [prompting method](../../../docs/prompting.md) for the complete request
+pipeline and examples of each treatment.
+
+## Identity
+
+Recipes use normalized JSON. Object keys are sorted. Arrays keep their order when
+order changes meaning or execution.
+
+- `meaningSha256` covers task text, contracts, checks, roles, and points.
+- `executionSha256` covers fixtures, actions, timing, capabilities, and budgets.
+- `contentSha256` binds meaning and execution.
+- `sourceManifestSha256` binds source paths and raw bytes.
+
+Human versions are labels. Hashes identify the exact content.
+
+## Authoring commands
+
+Run these commands from `tools/stack-bench`:
+
+```bash
+npm run check:composition
+npm run check:calibration
+npm run pack -- validate <pack.json> --track ecommerce
+npm run recipe -- validate <recipe.json> --track ecommerce
+npm run recipe -- show <recipe.json> --track ecommerce
+npm run recipe -- diff <old-recipe.json> <new-recipe.json> --track ecommerce
+```
+
+Use `recipe show --pack <pack-id>` or `--check <check-id>` to inspect a selected
+scope and its hash.
+
+Use the compiler-owned command for current qualification status:
+
+```bash
+node dist/commands/qualification-cli.js status --track ecommerce --level <N>
+```
+
+Do not infer launch or promotion status from this README. Qualification evidence
+must match the exact recipe, fixture, calibration, engine, image, stack, and
+runner identities.
diff --git a/tools/stack-bench/tracks/ecommerce/composition/calibrations/sequential-l1-2.5.0.json b/tools/stack-bench/tracks/ecommerce/composition/calibrations/sequential-l1-2.5.0.json
new file mode 100644
index 00000000000..121ec31d6d7
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/calibrations/sequential-l1-2.5.0.json
@@ -0,0 +1,167 @@
+{
+  "schemaVersion": 1,
+  "kind": "calibration-manifest",
+  "id": "ecommerce.sequential-l1-calibration",
+  "version": "2.5.0",
+  "state": "draft",
+  "title": "Ecommerce sequential L1 calibration",
+  "track": "ecommerce",
+  "recipe": {
+    "path": "../recipes/sequential-l1-2.5.0.json",
+    "id": "ecommerce.sequential-l1",
+    "version": "2.5.0",
+    "meaningSha256": "4498333a7259158c2881697441209d8f73bc51cf0259e1eccf291f9dc3518f78",
+    "executionSha256": "49160ed8dc570736bad1e2b5b8a5d2254bf2b7cdef17362f9b0c77bf76e6ee9f",
+    "contentSha256": "dc0bf747a2b6170821dcb90e6d734e90e6c2504c69c6ce89af4c4e92ba435aee"
+  },
+  "fixture": {
+    "id": "ecommerce.storefront",
+    "version": "1.0.1",
+    "sourceSha256": "978def51fb2a51f2afbb274f8c0847c1cb75625294fd22a7652e50ffd5016535"
+  },
+  "references": {
+    "registryPath": "reference-apps/registry.json",
+    "entries": [
+      {
+        "backend": "mongodb",
+        "id": "ecommerce-reference-mongodb",
+        "sourceSha256": "edb9732535b2273232a320b8e7b4ad6758991683a6bd06103f2ec4be07dafe20"
+      },
+      {
+        "backend": "postgres",
+        "id": "ecommerce-reference-postgres",
+        "sourceSha256": "356a4fb0602bc1ca4ac5b272ae6d9a434039a7f8da71c2f237a8793988e86fe0"
+      },
+      {
+        "backend": "spacetime",
+        "id": "ecommerce-reference-spacetime",
+        "sourceSha256": "f68523d7db3e236051b678a56dfdc278b88ed126dc4ef04b1f20fe2c20fcf3d6"
+      }
+    ]
+  },
+  "mutations": [
+    {
+      "backend": "mongodb",
+      "path": "grader/mutations/mongodb-ecommerce-2.0.1.json",
+      "sha256": "533b7b54b54b46760b448a8cc75ae5095805478b32ca8657d5b45c0060171a7c",
+      "referenceId": "ecommerce-reference-mongodb"
+    },
+    {
+      "backend": "postgres",
+      "path": "grader/mutations/postgres-ecommerce-2.0.1.json",
+      "sha256": "ac2116da568bd988cb82e87e29bc5a9c4ee3856508e672fc7f1e983efed14f2a",
+      "referenceId": "ecommerce-reference-postgres"
+    },
+    {
+      "backend": "spacetime",
+      "path": "grader/mutations/spacetime-ecommerce-2.0.1.json",
+      "sha256": "bd0f34ac1c4ac39914c26b03f98bdfef501c17879069bafcacfce3eae75e5d38",
+      "referenceId": "ecommerce-reference-spacetime"
+    }
+  ],
+  "nullControl": {
+    "pointBearing": "must-fail-conclusively",
+    "zeroPoint": "typed-policy",
+    "repetitions": 1
+  },
+  "controls": [
+    {
+      "stableKey": "ecommerce.spec.concurrency-safety.restock-race.202-control",
+      "role": "precondition",
+      "promotionPolicy": "must-pass-reference",
+      "mutationTargets": [],
+      "reason": "This proves that ordinary restock works before the contended restock check; it does not duplicate the existing scored restock behavior."
+    },
+    {
+      "stableKey": "ecommerce.spec.external-data-sync.external-stock.901b",
+      "role": "precondition",
+      "promotionPolicy": "must-pass-reference",
+      "mutationTargets": [],
+      "reason": "This reload assertion confirms that the scored live update came from persisted data rather than a page-only patch."
+    }
+  ],
+  "qualification": {
+    "exactCombinationRequired": true,
+    "referenceRepetitions": 1,
+    "mutationRepetitions": 1,
+    "checks":
+    [
+      "ecommerce.feature.accounts.accounts.1a",
+      "ecommerce.feature.accounts.accounts.1b",
+      "ecommerce.feature.accounts.accounts.1c",
+      "ecommerce.feature.accounts.accounts.1d",
+      "ecommerce.spec.state-durability.session-reload.1e",
+      "ecommerce.feature.catalog.catalog.2a",
+      "ecommerce.feature.catalog.catalog.2b",
+      "ecommerce.spec.live-state.ranking.2c",
+      "ecommerce.feature.catalog.catalog.2d",
+      "ecommerce.spec.access-control.signed-out-purchase.3a",
+      "ecommerce.spec.live-state.purchase-stock.3b",
+      "ecommerce.feature.purchasing.purchase-order.3c",
+      "ecommerce.spec.concurrency-safety.stock-limit.3d",
+      "ecommerce.feature.cart-checkout.cart.4a",
+      "ecommerce.spec.state-durability.cart-reload.4b",
+      "ecommerce.spec.live-state.shared-cart.4c",
+      "ecommerce.feature.cart-checkout.cart.4d",
+      "ecommerce.feature.reviews.reviews.6a",
+      "ecommerce.spec.transactional-integrity.unique-review.6b",
+      "ecommerce.spec.live-state.rating.6c",
+      "ecommerce.spec.access-control.admin-ui.7a",
+      "ecommerce.feature.warehouse-admin.warehouse-view.7b",
+      "ecommerce.spec.live-state.warehouse-stock.7c",
+      "ecommerce.spec.access-control.purchase-session.101a",
+      "ecommerce.spec.access-control.purchase-attribution.102a",
+      "ecommerce.spec.access-control.admin-write.103a",
+      "ecommerce.spec.transactional-integrity.server-price.104a",
+      "ecommerce.spec.state-durability.account-state-recovery.105a",
+      "ecommerce.spec.state-durability.account-state-recovery.105b",
+      "ecommerce.spec.access-control.order-ownership.106a",
+      "ecommerce.spec.transactional-integrity.books-balance.107a",
+      "ecommerce.spec.transactional-integrity.books-balance.107b",
+      "ecommerce.spec.access-control.review-eligibility.108a",
+      "ecommerce.spec.access-control.review-eligibility.108b",
+      "ecommerce.spec.access-control.cart-boundary.109a",
+      "ecommerce.spec.access-control.cart-boundary.109b",
+      "ecommerce.spec.concurrency-safety.last-unit.201a",
+      "ecommerce.spec.concurrency-safety.last-unit.201b",
+      "ecommerce.spec.concurrency-safety.last-unit.201c",
+      "ecommerce.spec.concurrency-safety.restock-race.202-control",
+      "ecommerce.spec.concurrency-safety.restock-race.202a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203b",
+      "ecommerce.spec.external-data-sync.external-stock.901a",
+      "ecommerce.spec.external-data-sync.external-stock.901b",
+      "ecommerce.spec.external-data-sync.external-stock.901c",
+      "ecommerce.spec.external-data-sync.external-stock.901d",
+      "ecommerce.spec.live-state.open-list.902a"
+    ],
+    "runner": {
+      "schemaVersion": 1,
+      "mode": "appliance",
+      "platform": "linux",
+      "architecture": "x64"
+    },
+    "stacks": [
+      {
+        "id": "mongodb",
+        "status": "candidate"
+      },
+      {
+        "id": "postgres",
+        "status": "candidate"
+      },
+      {
+        "id": "spacetime",
+        "status": "candidate"
+      }
+    ],
+    "evidence": []
+  },
+  "equivalenceDecisions": [],
+  "promotion": {
+    "catalogPath": "composition/promotions.json",
+    "catalogSha256": "61e691af29f611ac04ada88ba050e2e63ca93099004c6b14b42babac2aa94cac",
+    "alias": "L1",
+    "status": "candidate"
+  }
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/calibrations/sequential-l2-1.6.0.json b/tools/stack-bench/tracks/ecommerce/composition/calibrations/sequential-l2-1.6.0.json
new file mode 100644
index 00000000000..9147f2ff054
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/calibrations/sequential-l2-1.6.0.json
@@ -0,0 +1,195 @@
+{
+  "schemaVersion": 1,
+  "kind": "calibration-manifest",
+  "id": "ecommerce.sequential-l2-calibration",
+  "version": "1.6.0",
+  "state": "draft",
+  "title": "Ecommerce sequential L2 calibration",
+  "track": "ecommerce",
+  "recipe": {
+    "path": "../recipes/sequential-l2-1.6.0.json",
+    "id": "ecommerce.sequential-l2",
+    "version": "1.6.0",
+    "meaningSha256": "468e2bdf5a86b779935e293a2db3d07ee9899d50a11ba642a70ec1af5e03fd2d",
+    "executionSha256": "405a9997337784d0543cd107b8cba4f08c5c56637844bc86a1247d215732cd42",
+    "contentSha256": "e34a2fbd5024da887aafcdb0255add0f18bfe1571786212f1c7ea851b43808d3"
+  },
+  "fixture": {
+    "id": "ecommerce.operations",
+    "version": "1.0.1",
+    "sourceSha256": "068e2f457a89752e84766a23a84baa453b4247c7501dd7c28bae091891447c08"
+  },
+  "references": {
+    "registryPath": "reference-apps/registry.json",
+    "entries": [
+      {
+        "backend": "mongodb",
+        "id": "ecommerce-reference-mongodb",
+        "sourceSha256": "edb9732535b2273232a320b8e7b4ad6758991683a6bd06103f2ec4be07dafe20"
+      },
+      {
+        "backend": "postgres",
+        "id": "ecommerce-reference-postgres",
+        "sourceSha256": "356a4fb0602bc1ca4ac5b272ae6d9a434039a7f8da71c2f237a8793988e86fe0"
+      },
+      {
+        "backend": "spacetime",
+        "id": "ecommerce-reference-spacetime",
+        "sourceSha256": "f68523d7db3e236051b678a56dfdc278b88ed126dc4ef04b1f20fe2c20fcf3d6"
+      }
+    ]
+  },
+  "mutations": [
+    {
+      "backend": "mongodb",
+      "path": "grader/mutations/mongodb-ecommerce-2.0.1.json",
+      "sha256": "533b7b54b54b46760b448a8cc75ae5095805478b32ca8657d5b45c0060171a7c",
+      "referenceId": "ecommerce-reference-mongodb"
+    },
+    {
+      "backend": "postgres",
+      "path": "grader/mutations/postgres-ecommerce-2.0.1.json",
+      "sha256": "ac2116da568bd988cb82e87e29bc5a9c4ee3856508e672fc7f1e983efed14f2a",
+      "referenceId": "ecommerce-reference-postgres"
+    },
+    {
+      "backend": "spacetime",
+      "path": "grader/mutations/spacetime-ecommerce-2.0.1.json",
+      "sha256": "bd0f34ac1c4ac39914c26b03f98bdfef501c17879069bafcacfce3eae75e5d38",
+      "referenceId": "ecommerce-reference-spacetime"
+    }
+  ],
+  "nullControl": {
+    "pointBearing": "must-fail-conclusively",
+    "zeroPoint": "typed-policy",
+    "repetitions": 1
+  },
+  "controls": [
+    {
+      "stableKey": "ecommerce.spec.concurrency-safety.restock-race.202-control",
+      "role": "precondition",
+      "promotionPolicy": "must-pass-reference",
+      "mutationTargets": [],
+      "reason": "This proves ordinary restock before the scored overlap check without counting the same behavior twice."
+    },
+    {
+      "stableKey": "ecommerce.spec.external-data-sync.external-stock.901b",
+      "role": "precondition",
+      "promotionPolicy": "must-pass-reference",
+      "mutationTargets": [],
+      "reason": "This proves the external write persisted before the scored live-update behavior is evaluated."
+    }
+  ],
+  "qualification": {
+    "exactCombinationRequired": true,
+    "referenceRepetitions": 1,
+    "mutationRepetitions": 1,
+    "checks":
+    [
+      "ecommerce.feature.accounts.accounts.1a",
+      "ecommerce.feature.accounts.accounts.1b",
+      "ecommerce.feature.accounts.accounts.1c",
+      "ecommerce.feature.accounts.accounts.1d",
+      "ecommerce.spec.state-durability.session-reload.1e",
+      "ecommerce.feature.catalog.catalog.2a",
+      "ecommerce.feature.catalog.catalog.2b",
+      "ecommerce.spec.live-state.ranking.2c",
+      "ecommerce.feature.catalog.catalog.2d",
+      "ecommerce.spec.access-control.signed-out-purchase.3a",
+      "ecommerce.spec.live-state.purchase-stock.3b",
+      "ecommerce.feature.purchasing.purchase-order.3c",
+      "ecommerce.spec.concurrency-safety.stock-limit.3d",
+      "ecommerce.feature.cart-checkout.cart.4a",
+      "ecommerce.spec.state-durability.cart-reload.4b",
+      "ecommerce.spec.live-state.shared-cart.4c",
+      "ecommerce.feature.cart-checkout.cart.4d",
+      "ecommerce.feature.reviews.reviews.6a",
+      "ecommerce.spec.transactional-integrity.unique-review.6b",
+      "ecommerce.spec.live-state.rating.6c",
+      "ecommerce.spec.access-control.admin-ui.7a",
+      "ecommerce.feature.warehouse-admin.warehouse-view.7b",
+      "ecommerce.spec.live-state.warehouse-stock.7c",
+      "ecommerce.spec.access-control.purchase-session.101a",
+      "ecommerce.spec.access-control.purchase-attribution.102a",
+      "ecommerce.spec.access-control.admin-write.103a",
+      "ecommerce.spec.transactional-integrity.server-price.104a",
+      "ecommerce.spec.state-durability.account-state-recovery.105a",
+      "ecommerce.spec.state-durability.account-state-recovery.105b",
+      "ecommerce.spec.access-control.order-ownership.106a",
+      "ecommerce.spec.transactional-integrity.books-balance.107a",
+      "ecommerce.spec.transactional-integrity.books-balance.107b",
+      "ecommerce.spec.access-control.review-eligibility.108a",
+      "ecommerce.spec.access-control.review-eligibility.108b",
+      "ecommerce.spec.access-control.cart-boundary.109a",
+      "ecommerce.spec.access-control.cart-boundary.109b",
+      "ecommerce.spec.concurrency-safety.last-unit.201a",
+      "ecommerce.spec.concurrency-safety.last-unit.201b",
+      "ecommerce.spec.concurrency-safety.last-unit.201c",
+      "ecommerce.spec.concurrency-safety.restock-race.202-control",
+      "ecommerce.spec.concurrency-safety.restock-race.202a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203a",
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203b",
+      "ecommerce.spec.external-data-sync.external-stock.901a",
+      "ecommerce.spec.external-data-sync.external-stock.901b",
+      "ecommerce.spec.external-data-sync.external-stock.901c",
+      "ecommerce.spec.external-data-sync.external-stock.901d",
+      "ecommerce.spec.live-state.open-list.902a",
+      "ecommerce.operations-access.fulfilment-queue.1a",
+      "ecommerce.operations-access.fulfilment-queue.1b",
+      "ecommerce.operations-access.fulfilment-queue.1c",
+      "ecommerce.operations-access.fulfilment-queue.1d",
+      "ecommerce.operations-access.fulfilment-queue.1e",
+      "ecommerce.inventory-operations.warehouse-transfer.2a",
+      "ecommerce.inventory-operations.warehouse-transfer.2b",
+      "ecommerce.inventory-operations.warehouse-transfer.2c",
+      "ecommerce.returns-pricing.cancellation-and-return.3a",
+      "ecommerce.returns-pricing.cancellation-and-return.3b",
+      "ecommerce.returns-pricing.cancellation-and-return.3c",
+      "ecommerce.returns-pricing.price-history.4a",
+      "ecommerce.returns-pricing.price-history.4b",
+      "ecommerce.returns-pricing.price-history.4c",
+      "ecommerce.inventory-operations.operational-views.5a",
+      "ecommerce.inventory-operations.operational-views.5b",
+      "ecommerce.inventory-operations.operational-views.5c",
+      "ecommerce.inventory-operations.operational-views.5d",
+      "ecommerce.operations-access.operator-authorization.201a",
+      "ecommerce.operations-access.operator-authorization.201b",
+      "ecommerce.inventory-operations.stock-conservation.202a",
+      "ecommerce.inventory-operations.stock-conservation.202b",
+      "ecommerce.inventory-operations.stock-conservation.202c",
+      "ecommerce.returns-pricing.refund-accounting.203a",
+      "ecommerce.returns-pricing.refund-accounting.203b",
+      "ecommerce.operations-access.operator-authorization.201c",
+      "ecommerce.inventory-operations.stock-conservation.202d",
+      "ecommerce.operations-access.order-owner.204a"
+    ],
+    "runner": {
+      "schemaVersion": 1,
+      "mode": "appliance",
+      "platform": "linux",
+      "architecture": "x64"
+    },
+    "stacks": [
+      {
+        "id": "mongodb",
+        "status": "candidate"
+      },
+      {
+        "id": "postgres",
+        "status": "candidate"
+      },
+      {
+        "id": "spacetime",
+        "status": "candidate"
+      }
+    ],
+    "evidence": []
+  },
+  "equivalenceDecisions": [],
+  "promotion": {
+    "catalogPath": "composition/promotions.json",
+    "catalogSha256": "61e691af29f611ac04ada88ba050e2e63ca93099004c6b14b42babac2aa94cac",
+    "alias": "L2",
+    "status": "candidate"
+  }
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/candidates.json b/tools/stack-bench/tracks/ecommerce/composition/candidates.json
new file mode 100644
index 00000000000..bbfb5a30c47
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/candidates.json
@@ -0,0 +1,55 @@
+{
+  "schemaVersion": 1,
+  "kind": "promotion-catalog",
+  "id": "ecommerce.recipe-candidates",
+  "version": "1.20.0",
+  "state": "draft",
+  "title": "Ecommerce recipe candidates",
+  "entries": [
+    {
+      "alias": "L1",
+      "status": "candidate",
+      "recipe": { "path": "recipes/progression-catalog-2.0.2.json", "id": "ecommerce.progression-catalog", "version": "2.0.2" }
+    },
+    {
+      "alias": "L2",
+      "status": "candidate",
+      "recipe": { "path": "recipes/progression-catalog-2.0.2.json", "id": "ecommerce.progression-catalog", "version": "2.0.2" }
+    },
+    {
+      "alias": "L3",
+      "status": "candidate",
+      "recipe": { "path": "recipes/progression-catalog-2.0.2.json", "id": "ecommerce.progression-catalog", "version": "2.0.2" }
+    },
+    {
+      "alias": "L4",
+      "status": "candidate",
+      "recipe": { "path": "recipes/progression-catalog-2.0.2.json", "id": "ecommerce.progression-catalog", "version": "2.0.2" }
+    },
+    {
+      "alias": "L5",
+      "status": "candidate",
+      "recipe": { "path": "recipes/progression-catalog-2.0.2.json", "id": "ecommerce.progression-catalog", "version": "2.0.2" }
+    },
+    {
+      "alias": "L6",
+      "status": "candidate",
+      "recipe": { "path": "recipes/progression-catalog-2.0.2.json", "id": "ecommerce.progression-catalog", "version": "2.0.2" }
+    },
+    {
+      "alias": "L1",
+      "status": "candidate",
+      "recipe": { "path": "recipes/progression-depth3-2.0.2.json", "id": "ecommerce.progression-depth3", "version": "2.0.2" }
+    },
+    {
+      "alias": "L2",
+      "status": "candidate",
+      "recipe": { "path": "recipes/progression-depth3-2.0.2.json", "id": "ecommerce.progression-depth3", "version": "2.0.2" }
+    },
+    {
+      "alias": "L3",
+      "status": "candidate",
+      "recipe": { "path": "recipes/progression-depth3-2.0.2.json", "id": "ecommerce.progression-depth3", "version": "2.0.2" }
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/fixtures/operations-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/fixtures/operations-1.0.0.json
new file mode 100644
index 00000000000..1b1da0c617f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/fixtures/operations-1.0.0.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "kind": "fixture-set",
+  "id": "ecommerce.operations",
+  "version": "1.0.0",
+  "state": "qualified",
+  "title": "Ecommerce operations starting data",
+  "warehouses": ["East", "West"],
+  "items": [
+    { "name": "Air Purifier", "price": "189.00", "category": "Home", "stock": { "East": 60, "West": 40 } },
+    { "name": "Bluetooth Speaker", "price": "79.50", "category": "Audio", "stock": { "East": 50, "West": 50 } },
+    { "name": "Coffee Grinder", "price": "64.00", "category": "Home", "stock": { "East": 70, "West": 30 } },
+    { "name": "Desk Lamp", "price": "42.00", "category": "Home", "stock": { "East": 55, "West": 45 } },
+    { "name": "Espresso Machine", "price": "449.00", "category": "Home", "stock": { "East": 80, "West": 20 } },
+    { "name": "Gaming Mouse", "price": "59.00", "category": "Computing", "stock": { "East": 50, "West": 50 } },
+    { "name": "Headphones", "price": "199.00", "category": "Audio", "stock": { "East": 60, "West": 40 } },
+    { "name": "Induction Cooktop", "price": "329.00", "category": "Home", "stock": { "East": 50, "West": 50 } },
+    { "name": "Keyboard", "price": "89.00", "category": "Computing", "stock": { "East": 70, "West": 30 } },
+    { "name": "Laptop Stand", "price": "29.00", "category": "Computing", "stock": { "East": 90, "West": 10 } },
+    { "name": "Mirrorless Camera", "price": "1299.00", "category": "Photo", "stock": { "East": 2, "West": 1 } },
+    { "name": "Webcam", "price": "69.00", "category": "Computing", "stock": { "East": 60, "West": 40 } }
+  ],
+  "accounts": [
+    { "username": "admin", "password": "stackbench-admin-2026", "roles": ["admin"] },
+    { "username": "staff", "password": "stackbench-staff-2026", "roles": ["staff"] }
+  ],
+  "empty": ["carts", "orders", "reviews", "returns"]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/fixtures/operations-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/fixtures/operations-1.0.1.json
new file mode 100644
index 00000000000..97beefc30a4
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/fixtures/operations-1.0.1.json
@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "kind": "fixture-set",
+  "id": "ecommerce.operations",
+  "version": "1.0.1",
+  "state": "draft",
+  "title": "Ecommerce operations starting data",
+  "warehouses": ["East", "West"],
+  "items": [
+    { "name": "Air Purifier", "price": "189.00", "category": "Home", "stock": { "East": 60, "West": 40 } },
+    { "name": "Bluetooth Speaker", "price": "79.50", "category": "Audio", "stock": { "East": 50, "West": 50 } },
+    { "name": "Coffee Grinder", "price": "64.00", "category": "Home", "stock": { "East": 70, "West": 30 } },
+    { "name": "Desk Lamp", "price": "42.00", "category": "Home", "stock": { "East": 55, "West": 45 } },
+    { "name": "Espresso Machine", "price": "449.00", "category": "Home", "stock": { "East": 80, "West": 20 } },
+    { "name": "Gaming Mouse", "price": "59.00", "category": "Computing", "stock": { "East": 50, "West": 50 } },
+    { "name": "Headphones", "price": "199.00", "category": "Audio", "stock": { "East": 60, "West": 40 } },
+    { "name": "Induction Cooktop", "price": "329.00", "category": "Home", "stock": { "East": 50, "West": 50 } },
+    { "name": "Keyboard", "price": "89.00", "category": "Computing", "stock": { "East": 70, "West": 30 } },
+    { "name": "Laptop Stand", "price": "29.00", "category": "Computing", "stock": { "East": 90, "West": 10 } },
+    { "name": "Mirrorless Camera", "price": "1299.00", "category": "Photo", "stock": { "East": 2, "West": 1 } },
+    { "name": "USB Cable", "price": "65.00", "category": "Home", "stock": { "East": 0, "West": 0 } },
+    { "name": "Webcam", "price": "69.00", "category": "Computing", "stock": { "East": 60, "West": 40 } }
+  ],
+  "accounts": [
+    { "username": "admin", "password": "stackbench-admin-2026", "roles": ["admin"] },
+    { "username": "staff", "password": "stackbench-staff-2026", "roles": ["staff"] }
+  ],
+  "empty": ["carts", "orders", "reviews", "returns"]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/fixtures/storefront-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/fixtures/storefront-1.0.0.json
new file mode 100644
index 00000000000..a83d4287e60
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/fixtures/storefront-1.0.0.json
@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "kind": "fixture-set",
+  "id": "ecommerce.storefront",
+  "version": "1.0.0",
+  "state": "qualified",
+  "title": "Ecommerce storefront starting data",
+  "warehouses": ["East", "West"],
+  "items": [
+    { "name": "Air Purifier", "price": "189.00", "category": "Home", "stock": { "East": 60, "West": 40 } },
+    { "name": "Bluetooth Speaker", "price": "79.50", "category": "Audio", "stock": { "East": 50, "West": 50 } },
+    { "name": "Coffee Grinder", "price": "64.00", "category": "Home", "stock": { "East": 70, "West": 30 } },
+    { "name": "Desk Lamp", "price": "42.00", "category": "Home", "stock": { "East": 55, "West": 45 } },
+    { "name": "Espresso Machine", "price": "449.00", "category": "Home", "stock": { "East": 80, "West": 20 } },
+    { "name": "Gaming Mouse", "price": "59.00", "category": "Computing", "stock": { "East": 50, "West": 50 } },
+    { "name": "Headphones", "price": "199.00", "category": "Audio", "stock": { "East": 60, "West": 40 } },
+    { "name": "Induction Cooktop", "price": "329.00", "category": "Home", "stock": { "East": 50, "West": 50 } },
+    { "name": "Keyboard", "price": "89.00", "category": "Computing", "stock": { "East": 70, "West": 30 } },
+    { "name": "Laptop Stand", "price": "29.00", "category": "Computing", "stock": { "East": 90, "West": 10 } },
+    { "name": "Mirrorless Camera", "price": "1299.00", "category": "Photo", "stock": { "East": 2, "West": 1 } },
+    { "name": "Webcam", "price": "69.00", "category": "Computing", "stock": { "East": 60, "West": 40 } }
+  ],
+  "accounts": [
+    { "username": "admin", "password": "stackbench-admin-2026", "roles": ["admin"] }
+  ],
+  "empty": ["carts", "orders", "reviews"]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/fixtures/storefront-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/fixtures/storefront-1.0.1.json
new file mode 100644
index 00000000000..51abc6995c7
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/fixtures/storefront-1.0.1.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "kind": "fixture-set",
+  "id": "ecommerce.storefront",
+  "version": "1.0.1",
+  "state": "draft",
+  "title": "Ecommerce storefront starting data",
+  "warehouses": ["East", "West"],
+  "items": [
+    { "name": "Air Purifier", "price": "189.00", "category": "Home", "stock": { "East": 60, "West": 40 } },
+    { "name": "Bluetooth Speaker", "price": "79.50", "category": "Audio", "stock": { "East": 50, "West": 50 } },
+    { "name": "Coffee Grinder", "price": "64.00", "category": "Home", "stock": { "East": 70, "West": 30 } },
+    { "name": "Desk Lamp", "price": "42.00", "category": "Home", "stock": { "East": 55, "West": 45 } },
+    { "name": "Espresso Machine", "price": "449.00", "category": "Home", "stock": { "East": 80, "West": 20 } },
+    { "name": "Gaming Mouse", "price": "59.00", "category": "Computing", "stock": { "East": 50, "West": 50 } },
+    { "name": "Headphones", "price": "199.00", "category": "Audio", "stock": { "East": 60, "West": 40 } },
+    { "name": "Induction Cooktop", "price": "329.00", "category": "Home", "stock": { "East": 50, "West": 50 } },
+    { "name": "Keyboard", "price": "89.00", "category": "Computing", "stock": { "East": 70, "West": 30 } },
+    { "name": "Laptop Stand", "price": "29.00", "category": "Computing", "stock": { "East": 90, "West": 10 } },
+    { "name": "Mirrorless Camera", "price": "1299.00", "category": "Photo", "stock": { "East": 2, "West": 1 } },
+    { "name": "USB Cable", "price": "65.00", "category": "Home", "stock": { "East": 0, "West": 0 } },
+    { "name": "Webcam", "price": "69.00", "category": "Computing", "stock": { "East": 60, "West": 40 } }
+  ],
+  "accounts": [
+    { "username": "admin", "password": "stackbench-admin-2026", "roles": ["admin"] }
+  ],
+  "empty": ["carts", "orders", "reviews"]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/framing/smoke-requirements.md b/tools/stack-bench/tracks/ecommerce/composition/framing/smoke-requirements.md
new file mode 100644
index 00000000000..f2a68253a8d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/framing/smoke-requirements.md
@@ -0,0 +1,7 @@
+# Ecommerce capability smoke
+
+Build a real-time store with the selected capabilities below. Keep shared state
+current across open clients without a reload. Show useful loading, empty, and
+error states, and keep the interface keyboard accessible.
+
+## Features
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-accounts-1.1.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-accounts-1.1.0.json
new file mode 100644
index 00000000000..343cb303a53
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-accounts-1.1.0.json
@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.accounts",
+  "version": "1.1.0",
+  "state": "qualified",
+  "title": "Accounts",
+  "moduleType": "feature",
+  "description": "Account creation, sign-in, and sign-out.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 18000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.feature.accounts.requirement", "path": "prompts/modular/l1-features.md", "order": 100, "from": "## Accounts", "until": "## Catalog", "modes": ["fresh"] }
+    ],
+    "contracts": [
+      { "id": "ecommerce.feature.accounts.hooks", "path": "prompts/modular/l1-hooks.md", "order": 2100, "from": "## Account controls", "until": "## Purchasing controls", "modes": ["fresh"] }
+    ]
+  },
+  "checks": [
+    { "id": "account-create", "stableId": "accounts", "source": "scenarios/01-account-create-2.4.0.json", "feature": 1, "criteria": ["1a"], "role": "feature" },
+    { "id": "account-duplicate", "stableId": "accounts", "source": "scenarios/01-account-duplicate-2.4.0.json", "feature": 1, "criteria": ["1b"], "role": "feature" },
+    { "id": "account-password", "stableId": "accounts", "source": "scenarios/01-account-password-2.4.0.json", "feature": 1, "criteria": ["1c"], "role": "feature" },
+    { "id": "account-signout", "stableId": "accounts", "source": "scenarios/01-account-signout-2.4.0.json", "feature": 1, "criteria": ["1d"], "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-accounts-1.2.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-accounts-1.2.0.json
new file mode 100644
index 00000000000..0b269abc98b
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-accounts-1.2.0.json
@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.accounts",
+  "version": "1.2.0",
+  "state": "qualified",
+  "title": "Accounts",
+  "moduleType": "feature",
+  "description": "Account creation, sign-in, and sign-out.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 18000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.feature.accounts.requirement", "path": "prompts/modular/accounts-1.2.0.md", "order": 100, "modes": ["fresh", "upgrade"] }
+    ],
+    "contracts": [
+      { "id": "ecommerce.feature.accounts.hooks", "path": "contracts/accounts-1.2.md", "order": 2100, "modes": ["fresh", "upgrade"] }
+    ]
+  },
+  "checks": [
+    { "id": "account-create", "stableId": "accounts", "source": "scenarios/01-account-create-2.4.0.json", "feature": 1, "criteria": ["1a"], "role": "feature" },
+    { "id": "account-duplicate", "stableId": "accounts", "source": "scenarios/01-account-duplicate-2.4.0.json", "feature": 1, "criteria": ["1b"], "role": "feature" },
+    { "id": "account-password", "stableId": "accounts", "source": "scenarios/01-account-password-2.4.0.json", "feature": 1, "criteria": ["1c"], "role": "feature" },
+    { "id": "account-signout", "stableId": "accounts", "source": "scenarios/01-account-signout-2.4.0.json", "feature": 1, "criteria": ["1d"], "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-cart-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-cart-2.0.0.json
new file mode 100644
index 00000000000..dc9073a2177
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-cart-2.0.0.json
@@ -0,0 +1,62 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.cart",
+  "stableId": "ecommerce.feature.cart-checkout",
+  "version": "2.0.0",
+  "state": "qualified",
+  "title": "Cart",
+  "moduleType": "feature",
+  "description": "A signed-in customer cart.",
+  "requiresPacks": [
+    "ecommerce.feature.accounts@1.2.0",
+    "ecommerce.feature.catalog-items@1.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 42000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.feature.cart.requirement",
+        "path": "prompts/modular/cart-2.0.0.md",
+        "order": 400,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.feature.cart.hooks",
+        "path": "contracts/cart-2.0.md",
+        "order": 2300,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "cart",
+      "stableId": "cart",
+      "source": "scenarios/progression-cart-checkout-1.0.0.json",
+      "feature": 4,
+      "criteria": [
+        "4a"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-cart-checkout-1.2.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-cart-checkout-1.2.0.json
new file mode 100644
index 00000000000..708bd1bd5f9
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-cart-checkout-1.2.0.json
@@ -0,0 +1,63 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.cart-checkout",
+  "version": "1.2.0",
+  "state": "qualified",
+  "title": "Cart and checkout",
+  "moduleType": "feature",
+  "description": "Account cart operations and checkout.",
+  "requiresPacks": [
+    "ecommerce.feature.accounts@1.1.0",
+    "ecommerce.feature.catalog@1.1.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 42000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.feature.cart-checkout.requirement",
+        "path": "prompts/modular/l1-features-1.1.0.md",
+        "order": 400,
+        "from": "## Cart and checkout",
+        "until": "## Reviews",
+        "modes": [
+          "fresh"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.feature.cart-checkout.hooks",
+        "path": "prompts/modular/l1-hooks.md",
+        "order": 2300,
+        "from": "## Cart controls",
+        "until": "## Review controls",
+        "modes": [
+          "fresh"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "cart",
+      "source": "scenarios/01-cart-2.4.0.json",
+      "feature": 4,
+      "criteria": [
+        "4a",
+        "4d"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-catalog-1.1.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-catalog-1.1.0.json
new file mode 100644
index 00000000000..13801533a67
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-catalog-1.1.0.json
@@ -0,0 +1,26 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.catalog",
+  "version": "1.1.0",
+  "state": "qualified",
+  "title": "Catalog",
+  "moduleType": "feature",
+  "description": "Storefront listing, ranking, search, and item details.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 30000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.feature.catalog.requirement", "path": "prompts/modular/l1-features.md", "order": 200, "from": "## Catalog", "until": "## Purchasing and orders", "modes": ["fresh"] }
+    ],
+    "contracts": [
+      { "id": "ecommerce.feature.catalog.hooks", "path": "prompts/modular/l1-hooks.md", "order": 2000, "from": "## Catalog controls", "until": "## Account controls", "modes": ["fresh"] }
+    ]
+  },
+  "checks": [
+    { "id": "catalog", "source": "scenarios/01-core-2.4.0.json", "feature": 2, "criteria": ["2a", "2b", "2d"], "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-catalog-discovery-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-catalog-discovery-1.0.0.json
new file mode 100644
index 00000000000..5d0f520eb93
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-catalog-discovery-1.0.0.json
@@ -0,0 +1,71 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.catalog-discovery",
+  "stableId": "ecommerce.feature.catalog",
+  "version": "1.0.0",
+  "state": "qualified",
+  "title": "Catalog discovery",
+  "moduleType": "feature",
+  "description": "Public catalog ranking and full-catalog search.",
+  "requiresPacks": [
+    "ecommerce.feature.catalog-items@1.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 30000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.feature.catalog-discovery.requirement",
+        "path": "prompts/modular/catalog-discovery-1.0.0.md",
+        "order": 210,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.feature.catalog-discovery.hooks",
+        "path": "contracts/catalog-discovery-1.0.md",
+        "order": 2010,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "ranking",
+      "stableId": "catalog-ranking",
+      "source": "scenarios/01-catalog-ranking-1.0.0.json",
+      "feature": 2,
+      "criteria": [
+        "2b"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "search",
+      "stableId": "catalog-search",
+      "source": "scenarios/01-catalog-search-1.0.0.json",
+      "feature": 2,
+      "criteria": [
+        "2d"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-catalog-items-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-catalog-items-1.0.0.json
new file mode 100644
index 00000000000..c8ce385b7ce
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-catalog-items-1.0.0.json
@@ -0,0 +1,59 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.catalog-items",
+  "stableId": "ecommerce.feature.catalog",
+  "version": "1.0.0",
+  "state": "qualified",
+  "title": "Catalog items",
+  "moduleType": "feature",
+  "description": "Public catalog item values used by shopping features.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 30000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.feature.catalog-items.requirement",
+        "path": "prompts/modular/catalog-items-1.0.0.md",
+        "order": 200,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.feature.catalog-items.hooks",
+        "path": "contracts/catalog-items-1.0.md",
+        "order": 2000,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "values",
+      "stableId": "catalog-values",
+      "source": "scenarios/01-catalog-values-1.0.0.json",
+      "feature": 2,
+      "criteria": [
+        "2a"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-checkout-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-checkout-2.0.0.json
new file mode 100644
index 00000000000..511b98fb3d9
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-checkout-2.0.0.json
@@ -0,0 +1,61 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.checkout",
+  "stableId": "ecommerce.feature.cart-checkout",
+  "version": "2.0.0",
+  "state": "qualified",
+  "title": "Checkout",
+  "moduleType": "feature",
+  "description": "Turn a cart into an order.",
+  "requiresPacks": [
+    "ecommerce.feature.cart@2.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 42000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.feature.checkout.requirement",
+        "path": "prompts/modular/checkout-2.0.0.md",
+        "order": 410,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.feature.checkout.hooks",
+        "path": "contracts/checkout-2.0.md",
+        "order": 2310,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "checkout",
+      "stableId": "cart",
+      "source": "scenarios/progression-cart-checkout-1.0.0.json",
+      "feature": 4,
+      "criteria": [
+        "4d"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-purchasing-1.1.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-purchasing-1.1.0.json
new file mode 100644
index 00000000000..af5508a25e4
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-purchasing-1.1.0.json
@@ -0,0 +1,26 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.purchasing",
+  "version": "1.1.0",
+  "state": "qualified",
+  "title": "Purchasing and orders",
+  "moduleType": "feature",
+  "description": "Immediate purchase and customer order history.",
+  "requiresPacks": ["ecommerce.feature.accounts@1.1.0", "ecommerce.feature.catalog@1.1.0"],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 24000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.feature.purchasing.requirement", "path": "prompts/modular/l1-features.md", "order": 300, "from": "## Purchasing and orders", "until": "## Cart and checkout", "modes": ["fresh"] }
+    ],
+    "contracts": [
+      { "id": "ecommerce.feature.purchasing.hooks", "path": "prompts/modular/l1-hooks.md", "order": 2200, "from": "## Purchasing controls", "until": "## Cart controls", "modes": ["fresh"] }
+    ]
+  },
+  "checks": [
+    { "id": "purchase-order", "source": "scenarios/01-buying-2.4.0.json", "feature": 3, "criteria": ["3c"], "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-purchasing-1.2.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-purchasing-1.2.1.json
new file mode 100644
index 00000000000..5936e7788b8
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-purchasing-1.2.1.json
@@ -0,0 +1,60 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.purchasing",
+  "version": "1.2.1",
+  "state": "qualified",
+  "title": "Purchasing and orders",
+  "moduleType": "feature",
+  "description": "Immediate purchase and customer order history.",
+  "requiresPacks": [
+    "ecommerce.feature.accounts@1.2.0",
+    "ecommerce.feature.catalog-items@1.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 24000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.feature.purchasing.requirement",
+        "path": "prompts/modular/purchasing-1.0.0.md",
+        "order": 300,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.feature.purchasing.hooks",
+        "path": "contracts/purchasing-1.0.md",
+        "order": 2200,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "purchase-order",
+      "source": "scenarios/progression-purchasing-1.0.0.json",
+      "feature": 3,
+      "criteria": [
+        "3c"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-reviews-1.1.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-reviews-1.1.0.json
new file mode 100644
index 00000000000..20d04e90edf
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-reviews-1.1.0.json
@@ -0,0 +1,26 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.reviews",
+  "version": "1.1.0",
+  "state": "qualified",
+  "title": "Reviews",
+  "moduleType": "feature",
+  "description": "Item ratings and comments.",
+  "requiresPacks": ["ecommerce.feature.accounts@1.1.0", "ecommerce.feature.catalog@1.1.0", "ecommerce.feature.purchasing@1.1.0"],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 22000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.feature.reviews.requirement", "path": "prompts/modular/l1-features.md", "order": 500, "from": "## Reviews", "until": "## Warehouse administration", "modes": ["fresh"] }
+    ],
+    "contracts": [
+      { "id": "ecommerce.feature.reviews.hooks", "path": "prompts/modular/l1-hooks.md", "order": 2400, "from": "## Review controls", "until": "## Warehouse administration controls", "modes": ["fresh"] }
+    ]
+  },
+  "checks": [
+    { "id": "reviews", "source": "scenarios/01-review-visibility-2.4.0.json", "feature": 6, "criteria": ["6a"], "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-reviews-1.2.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-reviews-1.2.1.json
new file mode 100644
index 00000000000..1816311dcf1
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-reviews-1.2.1.json
@@ -0,0 +1,61 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.reviews",
+  "version": "1.2.1",
+  "state": "qualified",
+  "title": "Reviews",
+  "moduleType": "feature",
+  "description": "Item ratings and comments.",
+  "requiresPacks": [
+    "ecommerce.feature.accounts@1.2.0",
+    "ecommerce.feature.catalog-items@1.0.0",
+    "ecommerce.feature.purchasing@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 22000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.feature.reviews.requirement",
+        "path": "prompts/modular/reviews-1.0.0.md",
+        "order": 500,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.feature.reviews.hooks",
+        "path": "contracts/reviews-1.0.md",
+        "order": 2400,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "reviews",
+      "source": "scenarios/01-review-visibility-2.4.0.json",
+      "feature": 6,
+      "criteria": [
+        "6a"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-reviews-1.2.2.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-reviews-1.2.2.json
new file mode 100644
index 00000000000..9523dcd2a64
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-reviews-1.2.2.json
@@ -0,0 +1,61 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.reviews",
+  "version": "1.2.2",
+  "state": "draft",
+  "title": "Reviews",
+  "moduleType": "feature",
+  "description": "Item ratings and comments.",
+  "requiresPacks": [
+    "ecommerce.feature.accounts@1.2.0",
+    "ecommerce.feature.catalog-items@1.0.0",
+    "ecommerce.feature.purchasing@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 22000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.feature.reviews.requirement",
+        "path": "prompts/modular/reviews-1.0.0.md",
+        "order": 500,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.feature.reviews.hooks",
+        "path": "contracts/reviews-1.1.md",
+        "order": 2400,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "reviews",
+      "source": "scenarios/01-review-visibility-2.4.0.json",
+      "feature": 6,
+      "criteria": [
+        "6a"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-warehouse-admin-1.1.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-warehouse-admin-1.1.0.json
new file mode 100644
index 00000000000..7804495d1f0
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-warehouse-admin-1.1.0.json
@@ -0,0 +1,26 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.warehouse-admin",
+  "version": "1.1.0",
+  "state": "draft",
+  "title": "Warehouse administration",
+  "moduleType": "feature",
+  "description": "Warehouse inventory, restocking, and revenue views.",
+  "requiresPacks": ["ecommerce.feature.accounts@1.1.0", "ecommerce.feature.catalog@1.1.0"],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 30000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.feature.warehouse-admin.requirement", "path": "prompts/modular/l1-features.md", "order": 600, "from": "## Warehouse administration", "modes": ["fresh"] }
+    ],
+    "contracts": [
+      { "id": "ecommerce.feature.warehouse-admin.hooks", "path": "prompts/modular/l1-hooks.md", "order": 2500, "from": "## Warehouse administration controls", "modes": ["fresh"] }
+    ]
+  },
+  "checks": [
+    { "id": "warehouse-view", "source": "scenarios/01-warehouse-admin-2.4.0.json", "feature": 7, "criteria": ["7b"], "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/feature-warehouse-admin-1.2.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-warehouse-admin-1.2.1.json
new file mode 100644
index 00000000000..35d2f121f5c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/feature-warehouse-admin-1.2.1.json
@@ -0,0 +1,69 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.feature.warehouse-admin",
+  "version": "1.2.1",
+  "state": "draft",
+  "title": "Warehouse administration",
+  "moduleType": "feature",
+  "description": "Warehouse inventory, restocking, and revenue views.",
+  "requiresPacks": [
+    "ecommerce.feature.catalog-items@1.0.0",
+    "ecommerce.progression.staff-access@1.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 30000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.feature.warehouse-admin.requirement",
+        "path": "prompts/modular/warehouse-administration-1.0.0.md",
+        "order": 600,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.feature.warehouse-admin.hooks",
+        "path": "contracts/warehouse-administration-1.0.md",
+        "order": 2500,
+        "modes": [
+          "fresh",
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "warehouse-view",
+      "source": "scenarios/01-warehouse-admin-staff-1.0.0.json",
+      "feature": 7,
+      "criteria": [
+        "7b"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "admin-write",
+      "source": "scenarios/01-admin-write-staff-1.0.0.json",
+      "feature": 103,
+      "criteria": [
+        "103a"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/inventory-operations-features-1.2.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/inventory-operations-features-1.2.0.json
new file mode 100644
index 00000000000..7a8ee4885ed
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/inventory-operations-features-1.2.0.json
@@ -0,0 +1,142 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.inventory-operations-features",
+  "stableId": "ecommerce.inventory-operations",
+  "version": "1.2.0",
+  "state": "qualified",
+  "moduleType": "feature",
+  "title": "Inventory operations",
+  "description": "Warehouse transfers and live operational views.",
+  "requiresPacks": [
+    "ecommerce.returns-pricing-features@1.1.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 86000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l2.stock-transfer",
+        "path": "prompts/02-operations.md",
+        "order": 30,
+        "from": "### Moving stock",
+        "until": "### Cancelling and returning",
+        "modes": [
+          "upgrade"
+        ]
+      },
+      {
+        "id": "ecommerce.l2.operational-views",
+        "path": "prompts/02-operations.md",
+        "order": 50,
+        "from": "### Live operational views",
+        "until": "### What must stay true",
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l2.transfer-hooks",
+        "path": "contracts/appendix-02.md",
+        "order": 2030,
+        "from": "| `transfer-from`",
+        "until": "| `price-input`",
+        "modes": [
+          "upgrade"
+        ]
+      },
+      {
+        "id": "ecommerce.l2.operational-view-hooks",
+        "path": "contracts/appendix-02.md",
+        "order": 2050,
+        "from": "| `low-stock-list`",
+        "until": "| `order-status`",
+        "modes": [
+          "upgrade"
+        ]
+      },
+      {
+        "id": "ecommerce.l2.inventory-action-inputs",
+        "path": "prompts/l2-action-inputs.md",
+        "order": 2090,
+        "from": "## Inventory contention action inputs",
+        "modes": [
+          "upgrade"
+        ]
+      },
+      {
+        "id": "ecommerce.l2.transfer-testing-call",
+        "path": "prompts/fragments/named-actions-inventory-operations-1.0.0.md",
+        "order": 2095,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "warehouse-transfer-corrected",
+      "stableId": "warehouse-transfer",
+      "source": "scenarios/02-strengthened-1.4.0.json",
+      "feature": 2,
+      "criteria": [
+        "2a",
+        "2c"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "warehouse-transfer-independent",
+      "stableId": "warehouse-transfer",
+      "source": "scenarios/02-transfer-totals-1.4.0.json",
+      "feature": 2,
+      "criteria": [
+        "2b"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "operational-views-low-stock",
+      "stableId": "operational-views",
+      "source": "scenarios/02-low-stock-1.4.0.json",
+      "feature": 5,
+      "criteria": [
+        "5a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "operational-views-core",
+      "stableId": "operational-views",
+      "source": "scenarios/02-features.json",
+      "feature": 5,
+      "criteria": [
+        "5b",
+        "5c"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "operational-views-kept-purchases",
+      "stableId": "operational-views",
+      "source": "scenarios/02-strengthened-1.4.0.json",
+      "feature": 5,
+      "criteria": [
+        "5d"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/inventory-operations-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/inventory-operations-specifications-1.0.0.json
new file mode 100644
index 00000000000..9fc14654da8
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/inventory-operations-specifications-1.0.0.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.inventory-operations-specifications",
+  "stableId": "ecommerce.inventory-operations",
+  "version": "1.0.0",
+  "state": "qualified",
+  "moduleType": "specification",
+  "title": "Inventory conservation",
+  "description": "Stock remains exact across transfers, cancellations, clients, and overlapping writes.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "concurrency", "direct-server-call"],
+  "evidence": ["browser-observation", "server-response"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 52000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.l2.inventory-invariants", "path": "prompts/02-operations.md", "order": 60, "from": "### What must stay true", "until": "- Revenue always", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.inventory-operations-features"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "stock-conservation-directional", "stableId": "stock-conservation", "source": "scenarios/02-strengthened-1.4.0.json", "feature": 202, "criteria": ["202a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.inventory-operations-features"] },
+    { "id": "stock-conservation-cancel", "stableId": "stock-conservation", "source": "scenarios/02-self-contained-1.4.0.json", "feature": 202, "criteria": ["202b"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.inventory-operations-features", "ecommerce.returns-pricing-features"] },
+    { "id": "stock-conservation-fresh-client", "stableId": "stock-conservation", "source": "scenarios/02-self-contained-1.4.0.json", "feature": 202, "criteria": ["202c"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.inventory-operations-features", "ecommerce.returns-pricing-features"] },
+    { "id": "stock-conservation-contention", "stableId": "stock-conservation", "source": "scenarios/02-server-actions-1.1.0.json", "feature": 202, "criteria": ["202d"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.inventory-operations-features"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l2-inventory-dashboard-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-inventory-dashboard-2.0.0.json
new file mode 100644
index 00000000000..f35afdf34e8
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-inventory-dashboard-2.0.0.json
@@ -0,0 +1,62 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l2.inventory-dashboard",
+  "stableId": "ecommerce.inventory-operations",
+  "version": "2.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Inventory dashboard",
+  "description": "A low-stock dashboard.",
+  "requiresPacks": [
+    "ecommerce.feature.warehouse-admin@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 86000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l2.inventory-dashboard",
+        "path": "prompts/modular/inventory-dashboard-2.0.0.md",
+        "order": 50,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l2.inventory-dashboard-hooks",
+        "path": "contracts/inventory-dashboard-2.0.md",
+        "order": 2050,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "low-stock",
+      "stableId": "operational-views",
+      "source": "scenarios/02-low-stock-1.4.0.json",
+      "feature": 5,
+      "criteria": [
+        "5e"
+      ],
+      "role": "feature",
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l2-order-cancellation-features-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-order-cancellation-features-1.0.1.json
new file mode 100644
index 00000000000..4fdc5297329
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-order-cancellation-features-1.0.1.json
@@ -0,0 +1,70 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l2.order-cancellation-features",
+  "stableId": "ecommerce.returns-pricing",
+  "version": "1.0.1",
+  "state": "qualified",
+  "moduleType": "feature",
+  "title": "Order cancellation",
+  "description": "Cancel pending orders without losing stock or accounting accuracy.",
+  "requiresPacks": [
+    "ecommerce.feature.purchasing@1.2.1",
+    "ecommerce.feature.warehouse-admin@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 60000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l2.order-cancellation",
+        "path": "prompts/modular/order-cancellation-1.0.0.md",
+        "order": 2040,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l2.order-cancellation-hooks",
+        "path": "contracts/order-cancellation-1.0.md",
+        "order": 2060,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "cancellation-core",
+      "stableId": "cancellation-and-return",
+      "source": "scenarios/02-order-cancellation-core-1.0.0.json",
+      "feature": 3,
+      "criteria": [
+        "3a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "cancellation-history",
+      "stableId": "cancellation-and-return",
+      "source": "scenarios/02-order-cancellation-history-1.0.0.json",
+      "feature": 3,
+      "criteria": [
+        "3b"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l2-price-history-features-2.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-price-history-features-2.0.1.json
new file mode 100644
index 00000000000..15947380d69
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-price-history-features-2.0.1.json
@@ -0,0 +1,85 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l2.price-history-features",
+  "stableId": "ecommerce.returns-pricing",
+  "version": "2.0.1",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Price history",
+  "description": "Update product prices and retain a history of those changes.",
+  "requiresPacks": [
+    "ecommerce.progression.catalog-management@1.0.2"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 94000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l2.price-history",
+        "path": "prompts/modular/price-history-1.0.0.md",
+        "order": 2040,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l2.price-hooks",
+        "path": "contracts/price-history-2.0.md",
+        "order": 2041,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "price-history-exact",
+      "stableId": "price-history",
+      "source": "scenarios/02-paid-price-history-1.4.0.json",
+      "feature": 4,
+      "criteria": [
+        "4a"
+      ],
+      "role": "feature",
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "price-live-independent",
+      "stableId": "price-history",
+      "source": "scenarios/02-live-price-1.4.0.json",
+      "feature": 4,
+      "criteria": [
+        "4b"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "price-cart-checkout",
+      "stableId": "price-history",
+      "source": "scenarios/progression-price-cart-checkout-1.0.0.json",
+      "feature": 420,
+      "criteria": [
+        "4c"
+      ],
+      "role": "feature",
+      "requiresFeatures": [
+        "ecommerce.feature.checkout"
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l2-price-history-features-2.0.2.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-price-history-features-2.0.2.json
new file mode 100644
index 00000000000..1eaed836e99
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-price-history-features-2.0.2.json
@@ -0,0 +1,16 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.l2.price-history-features", "stableId": "ecommerce.returns-pricing", "version": "2.0.2", "state": "draft", "moduleType": "feature",
+  "title": "Price history", "description": "Update product prices and retain a history of those changes.",
+  "requiresPacks": ["ecommerce.progression.catalog-management@1.0.3"],
+  "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 94000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.l2.price-history", "path": "prompts/modular/price-history-1.0.0.md", "order": 2040, "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.l2.price-hooks", "path": "contracts/price-history-2.0.md", "order": 2041, "modes": ["upgrade"] }]
+  },
+  "checks": [
+    { "id": "price-history-exact", "stableId": "price-history", "source": "scenarios/02-paid-price-history-1.4.0.json", "feature": 4, "criteria": ["4a"], "role": "feature", "requiresFeatures": ["ecommerce.feature.purchasing"] },
+    { "id": "price-live-independent", "stableId": "price-history", "source": "scenarios/02-live-price-1.4.0.json", "feature": 4, "criteria": ["4b"], "role": "feature" },
+    { "id": "price-cart-checkout", "stableId": "price-history", "source": "scenarios/progression-price-cart-checkout-1.0.0.json", "feature": 420, "criteria": ["4c"], "role": "feature", "requiresFeatures": ["ecommerce.feature.checkout"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l2-recommendations-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-recommendations-2.0.0.json
new file mode 100644
index 00000000000..0b449af80cb
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-recommendations-2.0.0.json
@@ -0,0 +1,60 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l2.recommendations",
+  "stableId": "ecommerce.inventory-operations",
+  "version": "2.0.0",
+  "state": "qualified",
+  "moduleType": "feature",
+  "title": "Recommendations",
+  "description": "Customer recommendations based on purchase activity and cart contents.",
+  "requiresPacks": [
+    "ecommerce.feature.cart@2.0.0",
+    "ecommerce.feature.purchasing@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 86000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l2.recommendations",
+        "path": "prompts/modular/recommendations-2.0.0.md",
+        "order": 70,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l2.recommendations-hooks",
+        "path": "contracts/recommendations-2.0.md",
+        "order": 2070,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "recommendations",
+      "stableId": "operational-views",
+      "source": "scenarios/02-operational-recommendations-1.0.0.json",
+      "feature": 5,
+      "criteria": [
+        "5c"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l2-sales-dashboard-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-sales-dashboard-2.0.0.json
new file mode 100644
index 00000000000..bd2a8544797
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-sales-dashboard-2.0.0.json
@@ -0,0 +1,69 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l2.sales-dashboard",
+  "stableId": "ecommerce.inventory-operations",
+  "version": "2.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Sales dashboard",
+  "description": "Category totals and best sellers.",
+  "requiresPacks": [
+    "ecommerce.feature.purchasing@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 86000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l2.sales-dashboard",
+        "path": "prompts/modular/sales-dashboard-2.0.0.md",
+        "order": 60,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l2.sales-dashboard-hooks",
+        "path": "contracts/sales-dashboard-2.0.md",
+        "order": 2060,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "category-totals",
+      "stableId": "operational-views",
+      "source": "scenarios/02-operational-category-totals-1.0.0.json",
+      "feature": 5,
+      "criteria": [
+        "5f"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "best-sellers",
+      "stableId": "operational-views",
+      "source": "scenarios/02-operational-best-sellers-1.0.0.json",
+      "feature": 5,
+      "criteria": [
+        "5d"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l2-stock-transfers-features-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-stock-transfers-features-1.0.1.json
new file mode 100644
index 00000000000..115c331bc3a
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l2-stock-transfers-features-1.0.1.json
@@ -0,0 +1,59 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l2.stock-transfers-features",
+  "stableId": "ecommerce.inventory-operations",
+  "version": "1.0.1",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Stock transfers",
+  "description": "Move stock between warehouses without changing the total.",
+  "requiresPacks": [
+    "ecommerce.feature.warehouse-admin@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 86000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l2.stock-transfer",
+        "path": "prompts/modular/stock-transfers-1.0.0.md",
+        "order": 2030,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l2.transfer-hooks",
+        "path": "contracts/stock-transfers-1.0.md",
+        "order": 2031,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "transfer",
+      "stableId": "warehouse-transfer",
+      "source": "scenarios/02-strengthened-1.4.0.json",
+      "feature": 2,
+      "criteria": [
+        "2a"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-cart-expiration-features-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-cart-expiration-features-1.0.0.json
new file mode 100644
index 00000000000..e4cd308cf59
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-cart-expiration-features-1.0.0.json
@@ -0,0 +1,23 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.cart-expiration-features",
+  "stableId": "ecommerce.l3.cart-expiration",
+  "version": "1.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Cart expiration",
+  "description": "Inactive carts expire, release stock, and return empty.",
+  "requiresPacks": ["ecommerce.l3.reservations-features@1.0.0"],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 360000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.l3.cart-expiration", "path": "prompts/modular/l3-features-1.0.0.md", "order": 3030, "from": "## Cart expiration", "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.l3.reservation-hooks", "path": "contracts/l3-hooks-1.0.md", "order": 3900, "from": "## Reservation controls", "until": "## Scheduled restock controls", "modes": ["upgrade"] }]
+  },
+  "checks": [
+    { "id": "inactive-cart", "stableId": "cart-expiration", "source": "scenarios/03-cart-expiration-1.0.0.json", "feature": 304, "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-cart-expiration-features-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-cart-expiration-features-2.0.0.json
new file mode 100644
index 00000000000..8b310353287
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-cart-expiration-features-2.0.0.json
@@ -0,0 +1,56 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.cart-expiration-features",
+  "stableId": "ecommerce.l3.cart-expiration",
+  "version": "2.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Cart expiration",
+  "description": "Inactive carts expire, release stock, and return empty.",
+  "requiresPacks": [
+    "ecommerce.l3.reservations-features@2.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 360000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l3.cart-expiration",
+        "path": "prompts/modular/cart-expiration-1.0.0.md",
+        "order": 3030,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l3.cart-expiration-hooks",
+        "path": "contracts/cart-expiration-1.0.md",
+        "order": 3930,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "inactive-cart",
+      "stableId": "cart-expiration",
+      "source": "scenarios/03-cart-expiration-1.0.0.json",
+      "feature": 304,
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-deferred-access-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-deferred-access-specifications-1.0.0.json
new file mode 100644
index 00000000000..c9069b90747
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-deferred-access-specifications-1.0.0.json
@@ -0,0 +1,23 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.deferred-access-specifications",
+  "stableId": "ecommerce.l3.deferred-access",
+  "version": "1.0.0",
+  "state": "qualified",
+  "moduleType": "specification",
+  "title": "Scheduled-work access",
+  "description": "Customers cannot schedule or cancel restocks.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "direct-server-call", "request-replay"],
+  "evidence": ["browser-observation", "server-refusal", "server-response"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 60000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.l3.deferred-access", "path": "prompts/modular/l3-specifications-1.0.0.md", "order": 3130, "from": "## Deferred-work access", "until": "## Stock conservation", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l3.scheduled-restocks-features"] }],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "customer-refused", "stableId": "scheduled-work-access", "source": "scenarios/03-deferred-access-1.0.0.json", "feature": 317, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l3.scheduled-restocks-features"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-deferred-durability-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-deferred-durability-specifications-1.0.0.json
new file mode 100644
index 00000000000..e4a5b63e522
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-deferred-durability-specifications-1.0.0.json
@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.deferred-durability-specifications",
+  "stableId": "ecommerce.l3.deferred-durability",
+  "version": "1.0.0",
+  "state": "qualified",
+  "moduleType": "specification",
+  "title": "Deferred-work durability",
+  "description": "Pending work survives a backend restart.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "backend-lifecycle"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 720000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.l3.durable-reservations", "path": "prompts/modular/l3-specifications-1.0.0.md", "order": 3100, "from": "## Durable reservations", "until": "## Durable restocks", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l3.reservations-features"] },
+      { "id": "ecommerce.l3.durable-restocks", "path": "prompts/modular/l3-specifications-1.0.0.md", "order": 3101, "from": "## Durable restocks", "until": "## Durable order delivery", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l3.scheduled-restocks-features"] },
+      { "id": "ecommerce.l3.durable-order-delivery", "path": "prompts/modular/l3-specifications-1.0.0.md", "order": 3102, "from": "## Durable order delivery", "until": "## Durable cart expiration", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l3.order-delivery-features"] },
+      { "id": "ecommerce.l3.durable-cart-expiration", "path": "prompts/modular/l3-specifications-1.0.0.md", "order": 3103, "from": "## Durable cart expiration", "until": "## Exactly-once restocks", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l3.cart-expiration-features"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "restock-restart", "stableId": "restart-survival", "source": "scenarios/03-deferred-durability-1.0.0.json", "feature": 311, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l3.scheduled-restocks-features"] },
+    { "id": "reservation-restart", "stableId": "restart-survival", "source": "scenarios/03-deferred-durability-1.0.0.json", "feature": 314, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l3.reservations-features"] },
+    { "id": "delivery-restart", "stableId": "restart-survival", "source": "scenarios/03-deferred-durability-1.0.0.json", "feature": 315, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l3.order-delivery-features"] },
+    { "id": "cart-restart", "stableId": "restart-survival", "source": "scenarios/03-deferred-durability-1.0.0.json", "feature": 316, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l3.cart-expiration-features"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-deferred-integrity-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-deferred-integrity-specifications-1.0.0.json
new file mode 100644
index 00000000000..20587ef0313
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-deferred-integrity-specifications-1.0.0.json
@@ -0,0 +1,30 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.deferred-integrity-specifications",
+  "stableId": "ecommerce.l3.deferred-integrity",
+  "version": "1.0.0",
+  "state": "qualified",
+  "moduleType": "specification",
+  "title": "Deferred-work integrity",
+  "description": "Deferred work applies once and preserves stock.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "backend-lifecycle"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 340000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.l3.exactly-once-restocks", "path": "prompts/modular/l3-specifications-1.0.0.md", "order": 3110, "from": "## Exactly-once restocks", "until": "## Exactly-once delivery", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l3.scheduled-restocks-features"] },
+      { "id": "ecommerce.l3.exactly-once-delivery", "path": "prompts/modular/l3-specifications-1.0.0.md", "order": 3111, "from": "## Exactly-once delivery", "until": "## Server-timed restocks", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l3.order-delivery-features"] },
+      { "id": "ecommerce.l3.stock-conservation", "path": "prompts/modular/l3-specifications-1.0.0.md", "order": 3140, "from": "## Stock conservation", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l3.reservations-features"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "restock-once", "stableId": "exactly-once", "source": "scenarios/03-deferred-integrity-1.0.0.json", "feature": 311, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l3.scheduled-restocks-features"] },
+    { "id": "delivery-once", "stableId": "exactly-once", "source": "scenarios/03-deferred-integrity-1.0.0.json", "feature": 312, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l3.order-delivery-features"] },
+    { "id": "reservation-stock", "stableId": "stock-conservation", "source": "scenarios/03-deferred-integrity-1.0.0.json", "feature": 313, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l3.reservations-features"] },
+    { "id": "reserved-checkout", "stableId": "stock-conservation", "source": "scenarios/03-deferred-integrity-1.0.0.json", "feature": 314, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l3.reservations-features"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-order-delivery-features-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-order-delivery-features-1.0.0.json
new file mode 100644
index 00000000000..cf972fa0f1f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-order-delivery-features-1.0.0.json
@@ -0,0 +1,24 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.order-delivery-features",
+  "stableId": "ecommerce.l3.order-delivery",
+  "version": "1.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Order delivery",
+  "description": "Automatic delivery and final cancellation.",
+  "requiresPacks": ["ecommerce.returns-pricing-features@1.1.0"],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 190000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.l3.order-delivery", "path": "prompts/modular/l3-features-1.0.0.md", "order": 3020, "from": "## Order delivery", "until": "## Cart expiration", "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.l3.order-delivery-hooks", "path": "contracts/l3-hooks-1.0.md", "order": 3920, "from": "## Order delivery controls", "modes": ["upgrade"] }]
+  },
+  "checks": [
+    { "id": "automatic-delivery", "stableId": "order-delivery", "source": "scenarios/03-order-delivery-1.0.0.json", "feature": 303, "role": "feature" },
+    { "id": "cancel-final", "stableId": "order-delivery", "source": "scenarios/03-order-delivery-1.0.0.json", "feature": 305, "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-order-delivery-features-1.1.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-order-delivery-features-1.1.1.json
new file mode 100644
index 00000000000..fc437967f27
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-order-delivery-features-1.1.1.json
@@ -0,0 +1,64 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.order-delivery-features",
+  "stableId": "ecommerce.l3.order-delivery",
+  "version": "1.1.1",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Order delivery",
+  "description": "Automatic delivery and final cancellation.",
+  "requiresPacks": [
+    "ecommerce.progression.fulfilment-queue@1.0.1",
+    "ecommerce.l2.order-cancellation-features@1.0.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 190000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l3.order-delivery",
+        "path": "prompts/modular/order-delivery-1.0.0.md",
+        "order": 3020,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l3.order-delivery-hooks",
+        "path": "contracts/order-delivery-1.0.md",
+        "order": 3920,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "automatic-delivery",
+      "stableId": "order-delivery",
+      "source": "scenarios/03-order-delivery-1.0.0.json",
+      "feature": 303,
+      "role": "feature"
+    },
+    {
+      "id": "cancel-final",
+      "stableId": "order-delivery",
+      "source": "scenarios/03-order-delivery-1.0.0.json",
+      "feature": 305,
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-order-returns-features-1.1.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-order-returns-features-1.1.1.json
new file mode 100644
index 00000000000..057fb9cc529
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-order-returns-features-1.1.1.json
@@ -0,0 +1,70 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.order-returns-features",
+  "stableId": "ecommerce.returns-pricing",
+  "version": "1.1.1",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Returns",
+  "description": "Return shipped items without losing stock or accounting accuracy.",
+  "requiresPacks": [
+    "ecommerce.l3.order-delivery-features@1.1.1",
+    "ecommerce.feature.warehouse-admin@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 60000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l3.order-returns",
+        "path": "prompts/modular/order-returns-1.0.0.md",
+        "order": 4040,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l3.order-return-hooks",
+        "path": "contracts/order-returns-1.0.md",
+        "order": 4041,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "return-complete",
+      "stableId": "cancellation-and-return",
+      "source": "scenarios/progression-order-return-complete-1.0.0.json",
+      "feature": 330,
+      "criteria": [
+        "3c"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "return-before-shipping",
+      "stableId": "cancellation-and-return",
+      "source": "scenarios/progression-order-return-boundary-1.0.0.json",
+      "feature": 331,
+      "criteria": [
+        "3e"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-reservations-features-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-reservations-features-1.0.0.json
new file mode 100644
index 00000000000..50816febde1
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-reservations-features-1.0.0.json
@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.reservations-features",
+  "stableId": "ecommerce.l3.reservations",
+  "version": "1.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Reservations",
+  "description": "Timed cart reservations, renewal, checkout, and expiry.",
+  "requiresPacks": ["ecommerce.feature.cart-checkout@1.2.0"],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 300000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.l3.reservations", "path": "prompts/modular/l3-features-1.0.0.md", "order": 3000, "from": "## Reservations", "until": "## Scheduled restocks", "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.l3.reservation-hooks", "path": "contracts/l3-hooks-1.0.md", "order": 3900, "from": "## Reservation controls", "until": "## Scheduled restock controls", "modes": ["upgrade"] }]
+  },
+  "checks": [
+    { "id": "stock-hold", "stableId": "reservations", "source": "scenarios/03-reservations-1.0.0.json", "feature": 301, "role": "feature" },
+    { "id": "countdown", "stableId": "reservations", "source": "scenarios/03-reservations-1.0.0.json", "feature": 305, "role": "feature" },
+    { "id": "checkout", "stableId": "reservations", "source": "scenarios/03-reservations-1.0.0.json", "feature": 306, "role": "feature" },
+    { "id": "expiry", "stableId": "reservations", "source": "scenarios/03-reservations-1.0.0.json", "feature": 307, "role": "feature" },
+    { "id": "renewal", "stableId": "reservations", "source": "scenarios/03-reservations-1.0.0.json", "feature": 308, "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-reservations-features-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-reservations-features-2.0.0.json
new file mode 100644
index 00000000000..91b7f71f5d3
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-reservations-features-2.0.0.json
@@ -0,0 +1,85 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.reservations-features",
+  "stableId": "ecommerce.l3.reservations",
+  "version": "2.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Reservations",
+  "description": "Timed cart reservations, renewal, checkout, and expiry.",
+  "requiresPacks": [
+    "ecommerce.feature.checkout@2.0.0",
+    "ecommerce.feature.warehouse-admin@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 300000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l3.reservations",
+        "path": "prompts/modular/reservations-1.0.0.md",
+        "order": 3000,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l3.reservation-hooks",
+        "path": "contracts/reservations-1.0.md",
+        "order": 3900,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "stock-hold",
+      "stableId": "reservations",
+      "source": "scenarios/03-reservations-1.0.0.json",
+      "feature": 301,
+      "role": "feature"
+    },
+    {
+      "id": "countdown",
+      "stableId": "reservations",
+      "source": "scenarios/03-reservations-1.0.0.json",
+      "feature": 305,
+      "role": "feature"
+    },
+    {
+      "id": "checkout",
+      "stableId": "reservations",
+      "source": "scenarios/03-reservations-1.0.0.json",
+      "feature": 306,
+      "role": "feature"
+    },
+    {
+      "id": "expiry",
+      "stableId": "reservations",
+      "source": "scenarios/03-reservations-1.0.0.json",
+      "feature": 307,
+      "role": "feature"
+    },
+    {
+      "id": "renewal",
+      "stableId": "reservations",
+      "source": "scenarios/03-reservations-1.0.0.json",
+      "feature": 308,
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-scheduled-restocks-features-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-scheduled-restocks-features-1.0.0.json
new file mode 100644
index 00000000000..fa414da121d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-scheduled-restocks-features-1.0.0.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.scheduled-restocks-features",
+  "stableId": "ecommerce.l3.scheduled-restocks",
+  "version": "1.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Scheduled restocks",
+  "description": "Pending, completed, and cancelled scheduled restocks.",
+  "requiresPacks": ["ecommerce.inventory-operations-features@1.2.0"],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 90000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.l3.scheduled-restocks", "path": "prompts/modular/l3-features-1.0.0.md", "order": 3010, "from": "## Scheduled restocks", "until": "## Order delivery", "modes": ["upgrade"] }],
+    "contracts": [
+      { "id": "ecommerce.l3.scheduled-restock-hooks", "path": "contracts/l3-hooks-1.0.md", "order": 3910, "from": "## Scheduled restock controls", "until": "## Order delivery controls", "modes": ["upgrade"] },
+      { "id": "ecommerce.l3.scheduled-restock-testing-calls", "path": "prompts/fragments/named-actions-scheduled-restocks-1.0.0.md", "order": 3911, "modes": ["upgrade"] }
+    ]
+  },
+  "checks": [
+    { "id": "pending", "stableId": "scheduled-restocks", "source": "scenarios/03-scheduled-restocks-1.0.0.json", "feature": 302, "role": "feature" },
+    { "id": "applies", "stableId": "scheduled-restocks", "source": "scenarios/03-scheduled-restocks-1.0.0.json", "feature": 305, "role": "feature" },
+    { "id": "cancels", "stableId": "scheduled-restocks", "source": "scenarios/03-scheduled-restocks-1.0.0.json", "feature": 306, "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-scheduled-restocks-features-1.1.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-scheduled-restocks-features-1.1.1.json
new file mode 100644
index 00000000000..8548ac4f834
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-scheduled-restocks-features-1.1.1.json
@@ -0,0 +1,70 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.scheduled-restocks-features",
+  "stableId": "ecommerce.l3.scheduled-restocks",
+  "version": "1.1.1",
+  "state": "qualified",
+  "moduleType": "feature",
+  "title": "Scheduled restocks",
+  "description": "Pending, completed, and cancelled scheduled restocks.",
+  "requiresPacks": [
+    "ecommerce.feature.warehouse-admin@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 90000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l3.scheduled-restocks",
+        "path": "prompts/modular/scheduled-restocks-1.0.0.md",
+        "order": 3010,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l3.scheduled-restock-hooks",
+        "path": "contracts/scheduled-restocks-1.0.md",
+        "order": 3910,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "pending",
+      "stableId": "scheduled-restocks",
+      "source": "scenarios/03-scheduled-restocks-1.0.0.json",
+      "feature": 302,
+      "role": "feature"
+    },
+    {
+      "id": "applies",
+      "stableId": "scheduled-restocks",
+      "source": "scenarios/03-scheduled-restocks-1.0.0.json",
+      "feature": 305,
+      "role": "feature"
+    },
+    {
+      "id": "cancels",
+      "stableId": "scheduled-restocks",
+      "source": "scenarios/03-scheduled-restocks-1.0.0.json",
+      "feature": 306,
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/l3-server-time-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-server-time-specifications-1.0.0.json
new file mode 100644
index 00000000000..e3c97652cc2
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/l3-server-time-specifications-1.0.0.json
@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.l3.server-time-specifications",
+  "stableId": "ecommerce.l3.server-time",
+  "version": "1.0.0",
+  "state": "qualified",
+  "moduleType": "specification",
+  "title": "Server-controlled time",
+  "description": "Deferred work does not require a browser and does not run early.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "backend-lifecycle"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 300000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.l3.server-timed-restocks", "path": "prompts/modular/l3-specifications-1.0.0.md", "order": 3120, "from": "## Server-timed restocks", "until": "## Server-timed reservations", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l3.scheduled-restocks-features"] },
+      { "id": "ecommerce.l3.server-timed-reservations", "path": "prompts/modular/l3-specifications-1.0.0.md", "order": 3121, "from": "## Server-timed reservations", "until": "## Deferred-work access", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l3.reservations-features"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "not-early", "stableId": "server-time", "source": "scenarios/03-server-time-1.0.0.json", "feature": 312, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l3.scheduled-restocks-features"] },
+    { "id": "no-browser", "stableId": "server-time", "source": "scenarios/03-server-time-1.0.0.json", "feature": 313, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l3.reservations-features"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/operations-access-features-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/operations-access-features-1.0.0.json
new file mode 100644
index 00000000000..897062ac6cb
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/operations-access-features-1.0.0.json
@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.operations-access-features",
+  "stableId": "ecommerce.operations-access",
+  "version": "1.0.0",
+  "state": "qualified",
+  "moduleType": "feature",
+  "title": "Fulfilment operations",
+  "description": "Customer, staff, and administrator fulfilment workflows.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "direct-database-write", "direct-server-call"],
+  "evidence": ["browser-observation", "server-refusal"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 76000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.l2.staff-fulfilment", "path": "prompts/02-operations.md", "order": 20, "from": "## New: warehouse staff", "until": "- Staff cannot change prices", "modes": ["upgrade"] },
+      { "id": "ecommerce.l2.fulfilment-feature", "path": "prompts/02-operations.md", "order": 22, "from": "## Features", "until": "The\nsame authentication and staff-only authorization", "modes": ["upgrade"] }
+    ],
+    "contracts": [
+      { "id": "ecommerce.l2.fulfilment-hooks", "path": "contracts/appendix-02.md", "order": 2020, "from": "| `staff-link`", "until": "| `transfer-from`", "modes": ["upgrade"] },
+      { "id": "ecommerce.l2.operator-action-inputs", "path": "prompts/l2-action-inputs.md", "order": 2080, "until": "## Price action input", "modes": ["upgrade"] }
+    ]
+  },
+  "checks": [
+    { "id": "fulfilment-core", "stableId": "fulfilment-queue", "source": "scenarios/02-features.json", "feature": 1, "criteria": ["1a", "1d"], "role": "feature" },
+    { "id": "fulfilment-warehouse", "stableId": "fulfilment-queue", "source": "scenarios/02-queue-warehouse-1.4.0.json", "feature": 1, "criteria": ["1b"], "role": "feature" },
+    { "id": "fulfilment-independent", "stableId": "fulfilment-queue", "source": "scenarios/02-self-contained-1.4.0.json", "feature": 1, "criteria": ["1c", "1e"], "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/operations-access-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/operations-access-specifications-1.0.0.json
new file mode 100644
index 00000000000..4d1a18e6218
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/operations-access-specifications-1.0.0.json
@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.operations-access-specifications",
+  "stableId": "ecommerce.operations-access",
+  "version": "1.0.0",
+  "state": "qualified",
+  "moduleType": "specification",
+  "title": "Operator authorization",
+  "description": "Server-enforced operator permissions and customer order ownership.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "direct-server-call", "request-replay"],
+  "evidence": ["browser-observation", "server-refusal", "server-response"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 44000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.l2.operator-authorization", "path": "prompts/02-operations.md", "order": 21, "from": "- Staff cannot change prices", "until": "## Features", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.operations-access-features"] },
+      { "id": "ecommerce.l2.shipping-authorization", "path": "prompts/02-operations.md", "order": 23, "from": "The\nsame authentication and staff-only authorization", "until": "### Moving stock", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.operations-access-features"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "operator-transfer-authorization", "stableId": "operator-authorization", "source": "scenarios/02-strengthened-1.4.0.json", "feature": 201, "criteria": ["201a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.inventory-operations-features"] },
+    { "id": "operator-price-authorization", "stableId": "operator-authorization", "source": "scenarios/02-strengthened-1.4.0.json", "feature": 201, "criteria": ["201b"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.returns-pricing-features"] },
+    { "id": "operator-authorization-direct", "stableId": "operator-authorization", "source": "scenarios/02-server-actions-1.1.0.json", "feature": 201, "criteria": ["201c"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.operations-access-features"] },
+    { "id": "order-owner-direct", "stableId": "order-owner", "source": "scenarios/02-server-actions-1.1.0.json", "feature": 204, "criteria": ["204a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.operations-access-features"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-automatic-reorder-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-automatic-reorder-2.0.0.json
new file mode 100644
index 00000000000..5287eae4c4e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-automatic-reorder-2.0.0.json
@@ -0,0 +1,73 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.automatic-reorder",
+  "version": "2.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Automatic reorder rules",
+  "description": "Threshold rules schedule one pending restock.",
+  "requiresPacks": [
+    "ecommerce.l3.scheduled-restocks-features@1.1.1",
+    "ecommerce.progression.staff-roles@1.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 90000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.automatic-reorder",
+        "path": "prompts/modular/progression-automatic-reorder-1.0.0.md",
+        "order": 5010,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.automatic-reorder-hooks",
+        "path": "contracts/progression-automatic-reorder-2.0.md",
+        "order": 5910,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "threshold",
+      "stableId": "automatic-reorder",
+      "source": "scenarios/progression-automatic-reorder-1.0.0.json",
+      "feature": 502,
+      "criteria": [
+        "502a",
+        "502b"
+      ],
+      "role": "feature",
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "access",
+      "stableId": "automatic-reorder",
+      "source": "scenarios/progression-automatic-reorder-1.0.0.json",
+      "feature": 502,
+      "criteria": [
+        "502c"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-automatic-reorder-2.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-automatic-reorder-2.0.1.json
new file mode 100644
index 00000000000..77b2c477ef1
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-automatic-reorder-2.0.1.json
@@ -0,0 +1,15 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.progression.automatic-reorder", "version": "2.0.1", "state": "draft", "moduleType": "feature",
+  "title": "Automatic reorder rules", "description": "Threshold rules schedule one pending restock.",
+  "requiresPacks": ["ecommerce.l3.scheduled-restocks-features@1.1.1", "ecommerce.progression.staff-roles@1.0.1"],
+  "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 90000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.automatic-reorder", "path": "prompts/modular/progression-automatic-reorder-1.0.0.md", "order": 5010, "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.progression.automatic-reorder-hooks", "path": "contracts/progression-automatic-reorder-2.0.md", "order": 5910, "modes": ["upgrade"] }]
+  },
+  "checks": [
+    { "id": "threshold", "stableId": "automatic-reorder", "source": "scenarios/progression-automatic-reorder-1.0.0.json", "feature": 502, "criteria": ["502a", "502b"], "role": "feature", "requiresFeatures": ["ecommerce.feature.purchasing"] },
+    { "id": "access", "stableId": "automatic-reorder", "source": "scenarios/progression-automatic-reorder-1.0.0.json", "feature": 502, "criteria": ["502c"], "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-cancellation-accounting-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-cancellation-accounting-specifications-1.0.0.json
new file mode 100644
index 00000000000..c7d8daf61b3
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-cancellation-accounting-specifications-1.0.0.json
@@ -0,0 +1,23 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.cancellation-accounting-specifications",
+  "stableId": "ecommerce.returns-pricing",
+  "version": "1.0.0",
+  "state": "qualified",
+  "moduleType": "specification",
+  "title": "Cancellation accounting",
+  "description": "Cancellation removes the exact cancelled amount from revenue.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 24000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.cancellation-accounting", "path": "prompts/modular/order-accounting-1.0.0.md", "order": 2100, "from": "## Cancellation accounting", "until": "## Price accounting", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l2.order-cancellation-features"] }],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "cancellation-accounting", "stableId": "refund-accounting", "source": "scenarios/02-invariants.json", "feature": 203, "criteria": ["203a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l2.order-cancellation-features"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-cancellation-queue-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-cancellation-queue-specifications-1.0.0.json
new file mode 100644
index 00000000000..dc503574a48
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-cancellation-queue-specifications-1.0.0.json
@@ -0,0 +1,25 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.cancellation-queue-specifications",
+  "stableId": "ecommerce.returns-pricing",
+  "version": "1.0.0",
+  "state": "draft",
+  "moduleType": "specification",
+  "title": "Cancellation and fulfilment",
+  "description": "A cancelled pending order leaves the fulfilment queue.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 24000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.progression.cancellation-queue", "path": "prompts/modular/cancellation-queue-1.0.0.md", "order": 2045, "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l2.order-cancellation-features", "ecommerce.progression.fulfilment-queue"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "queue-removal", "stableId": "cancellation-and-return", "source": "scenarios/02-cancellation-queue-1.0.0.json", "feature": 3, "criteria": ["3d"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l2.order-cancellation-features", "ecommerce.progression.fulfilment-queue"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-cart-recovery-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-cart-recovery-2.0.0.json
new file mode 100644
index 00000000000..29446183d40
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-cart-recovery-2.0.0.json
@@ -0,0 +1,68 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.cart-recovery",
+  "version": "2.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Cart recovery",
+  "description": "Safe restoration of available items from an expired cart.",
+  "requiresPacks": [
+    "ecommerce.l3.cart-expiration-features@2.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 350000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.cart-recovery",
+        "path": "prompts/modular/progression-cart-recovery-1.0.0.md",
+        "order": 5020,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.cart-recovery-hooks",
+        "path": "contracts/progression-cart-recovery-1.0.md",
+        "order": 5920,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "available",
+      "stableId": "cart-recovery",
+      "source": "scenarios/progression-cart-recovery-1.0.0.json",
+      "feature": 503,
+      "criteria": [
+        "503a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "partial",
+      "stableId": "cart-recovery",
+      "source": "scenarios/progression-cart-recovery-1.0.0.json",
+      "feature": 503,
+      "criteria": [
+        "503b"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-catalog-management-1.0.2.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-catalog-management-1.0.2.json
new file mode 100644
index 00000000000..32912da9436
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-catalog-management-1.0.2.json
@@ -0,0 +1,56 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.catalog-management",
+  "version": "1.0.2",
+  "state": "qualified",
+  "moduleType": "feature",
+  "title": "Catalog management",
+  "description": "Staff-managed products and named variants.",
+  "requiresPacks": [
+    "ecommerce.feature.catalog-discovery@1.0.0",
+    "ecommerce.progression.staff-roles@1.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 30000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.catalog-management",
+        "path": "prompts/modular/catalog-management-1.0.0.md",
+        "order": 1300,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.catalog-management-hooks",
+        "path": "contracts/catalog-management-1.0.md",
+        "order": 1970,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "products",
+      "stableId": "catalog-management",
+      "source": "scenarios/progression-catalog-management-1.0.1.json",
+      "feature": 622,
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-catalog-management-1.0.3.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-catalog-management-1.0.3.json
new file mode 100644
index 00000000000..bb9e799dcdc
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-catalog-management-1.0.3.json
@@ -0,0 +1,12 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.progression.catalog-management", "version": "1.0.3", "state": "draft", "moduleType": "feature",
+  "title": "Catalog management", "description": "Staff-managed products and named variants.",
+  "requiresPacks": ["ecommerce.feature.catalog-discovery@1.0.0", "ecommerce.progression.staff-roles@1.0.1"],
+  "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 30000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.catalog-management", "path": "prompts/modular/catalog-management-1.0.0.md", "order": 1300, "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.progression.catalog-management-hooks", "path": "contracts/catalog-management-1.0.md", "order": 1970, "modes": ["upgrade"] }]
+  },
+  "checks": [{ "id": "products", "stableId": "catalog-management", "source": "scenarios/progression-catalog-management-1.0.1.json", "feature": 622, "role": "feature" }]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-customer-profile-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-customer-profile-1.0.0.json
new file mode 100644
index 00000000000..10ed3cf07d1
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-customer-profile-1.0.0.json
@@ -0,0 +1,11 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.progression.customer-profile", "version": "1.0.0", "state": "draft", "moduleType": "feature",
+  "title": "Customer profile", "description": "Customer details and shipping address.",
+  "requiresPacks": ["ecommerce.feature.accounts@1.2.0"], "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 30000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.customer-profile", "path": "prompts/modular/customer-profile-1.0.0.md", "order": 1200, "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.progression.customer-profile-hooks", "path": "contracts/customer-profile-1.0.md", "order": 1950, "modes": ["upgrade"] }]
+  },
+  "checks": [{ "id": "profile", "stableId": "customer-profile", "source": "scenarios/progression-customer-profile-1.0.0.json", "feature": 620, "criteria": ["620c"], "role": "feature" }]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-delivery-notifications-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-delivery-notifications-1.0.1.json
new file mode 100644
index 00000000000..97bf5371773
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-delivery-notifications-1.0.1.json
@@ -0,0 +1,69 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.delivery-notifications",
+  "version": "1.0.1",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Delivery notifications",
+  "description": "Exactly one private notification for a delivered order.",
+  "requiresPacks": [
+    "ecommerce.l3.order-delivery-features@1.1.1",
+    "ecommerce.progression.notification-preferences@1.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 110000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.delivery-notifications",
+        "path": "prompts/modular/delivery-notifications-1.0.0.md",
+        "order": 5000,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.delivery-notification-hooks",
+        "path": "contracts/delivery-notifications-1.0.md",
+        "order": 5900,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "delivery",
+      "stableId": "delivery-notification-delivery",
+      "source": "scenarios/progression-delivery-notifications-1.0.0.json",
+      "feature": 501,
+      "criteria": [
+        "501a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "privacy",
+      "stableId": "delivery-notification-privacy",
+      "source": "scenarios/progression-delivery-notifications-1.0.0.json",
+      "feature": 501,
+      "criteria": [
+        "501b"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-faceted-search-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-faceted-search-1.0.1.json
new file mode 100644
index 00000000000..9baffc6d561
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-faceted-search-1.0.1.json
@@ -0,0 +1,68 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.faceted-search",
+  "version": "1.0.1",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Faceted search",
+  "description": "Combined catalogue filters with stable pagination.",
+  "requiresPacks": [
+    "ecommerce.feature.catalog-discovery@1.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 60000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.faceted-search",
+        "path": "prompts/modular/faceted-search-1.0.0.md",
+        "order": 4000,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.faceted-search-hooks",
+        "path": "contracts/faceted-search-1.0.md",
+        "order": 4900,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "filters",
+      "stableId": "faceted-search",
+      "source": "scenarios/progression-faceted-filters-1.0.0.json",
+      "feature": 401,
+      "criteria": [
+        "401a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "pagination",
+      "stableId": "faceted-search",
+      "source": "scenarios/progression-faceted-pagination-1.0.0.json",
+      "feature": 402,
+      "criteria": [
+        "402a"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-fulfilment-queue-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-fulfilment-queue-1.0.1.json
new file mode 100644
index 00000000000..e404ce925cf
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-fulfilment-queue-1.0.1.json
@@ -0,0 +1,72 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.fulfilment-queue",
+  "stableId": "ecommerce.operations-access",
+  "version": "1.0.1",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Fulfilment queue",
+  "description": "Staff and administrator fulfilment workflows.",
+  "requiresPacks": [
+    "ecommerce.feature.purchasing@1.2.1",
+    "ecommerce.feature.warehouse-admin@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser",
+    "direct-server-call"
+  ],
+  "evidence": [
+    "browser-observation",
+    "server-refusal"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 76000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.fulfilment-queue",
+        "path": "prompts/modular/operations-access-1.1.0.md",
+        "order": 2020,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.fulfilment-queue-hooks",
+        "path": "contracts/operations-access-1.1.md",
+        "order": 2920,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "fulfilment-warehouse",
+      "stableId": "fulfilment-queue",
+      "source": "scenarios/02-queue-warehouse-1.4.0.json",
+      "feature": 1,
+      "criteria": [
+        "1b"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "fulfilment-ship",
+      "stableId": "fulfilment-queue",
+      "source": "scenarios/02-fulfilment-ship-1.0.0.json",
+      "feature": 1,
+      "criteria": [
+        "1c"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-inventory-conservation-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-inventory-conservation-specifications-1.0.0.json
new file mode 100644
index 00000000000..9a5dc03e15e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-inventory-conservation-specifications-1.0.0.json
@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.inventory-conservation-specifications",
+  "stableId": "ecommerce.inventory-operations",
+  "version": "1.0.0",
+  "state": "qualified",
+  "moduleType": "specification",
+  "title": "Inventory conservation",
+  "description": "Stock remains exact across transfers, cancellations, clients, and overlapping writes.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "concurrent-actors", "direct-server-call"],
+  "evidence": ["browser-observation", "server-response"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 52000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.progression.transfer-conservation", "path": "prompts/modular/stock-conservation-1.0.0.md", "order": 2970, "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l2.stock-transfers-features"] },
+      { "id": "ecommerce.progression.cancellation-conservation", "path": "prompts/modular/cancellation-conservation-1.0.0.md", "order": 2980, "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l2.order-cancellation-features"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "stock-conservation-directional", "stableId": "stock-conservation", "source": "scenarios/02-strengthened-1.4.0.json", "feature": 202, "criteria": ["202a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l2.stock-transfers-features"] },
+    { "id": "stock-conservation-cancel", "stableId": "stock-conservation", "source": "scenarios/02-self-contained-1.4.0.json", "feature": 202, "criteria": ["202b"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l2.order-cancellation-features"] },
+    { "id": "stock-conservation-fresh-client", "stableId": "stock-conservation", "source": "scenarios/02-self-contained-1.4.0.json", "feature": 202, "criteria": ["202c"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l2.order-cancellation-features"] },
+    { "id": "stock-conservation-contention", "stableId": "stock-conservation", "source": "scenarios/02-server-actions-1.1.0.json", "feature": 202, "criteria": ["202d"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l2.stock-transfers-features", "ecommerce.feature.purchasing"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-managed-support-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-managed-support-1.0.0.json
new file mode 100644
index 00000000000..8a2966c9792
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-managed-support-1.0.0.json
@@ -0,0 +1,46 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.managed-support",
+  "version": "1.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Managed support cases",
+  "description": "Customer and staff support case updates.",
+  "requiresPacks": [
+    "ecommerce.progression.support-history@1.0.0",
+    "ecommerce.progression.support-triage@1.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 55000 },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.managed-support",
+        "path": "prompts/modular/managed-support-1.0.0.md",
+        "order": 3100,
+        "modes": ["upgrade"]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.managed-support-hooks",
+        "path": "contracts/managed-support-1.0.md",
+        "order": 3900,
+        "modes": ["upgrade"]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "case-updates",
+      "stableId": "managed-support",
+      "source": "scenarios/progression-managed-support-shared-1.0.0.json",
+      "feature": 613,
+      "criteria": ["613c"],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-notification-preferences-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-notification-preferences-1.0.0.json
new file mode 100644
index 00000000000..04b3d7168c7
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-notification-preferences-1.0.0.json
@@ -0,0 +1,13 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.progression.notification-preferences", "version": "1.0.0", "state": "draft", "moduleType": "feature",
+  "title": "Notification preferences", "description": "Customer notification choices.",
+  "requiresPacks": ["ecommerce.feature.accounts@1.2.0"], "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 40000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.notification-preferences", "path": "prompts/modular/notification-preferences-1.0.0.md", "order": 2300, "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.progression.notification-preferences-hooks", "path": "contracts/notification-preferences-1.0.md", "order": 2990, "modes": ["upgrade"] }]
+  },
+  "checks": [
+    { "id": "preferences", "stableId": "notification-preferences", "source": "scenarios/progression-notification-preferences-1.0.0.json", "feature": 630, "criteria": ["630c"], "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-operations-access-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-operations-access-specifications-1.0.0.json
new file mode 100644
index 00000000000..6d2593e90c6
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-operations-access-specifications-1.0.0.json
@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.operations-access-specifications",
+  "stableId": "ecommerce.operations-access",
+  "version": "1.0.0",
+  "state": "qualified",
+  "moduleType": "specification",
+  "title": "Server-enforced operations access",
+  "description": "Direct authorization checks owned by the product work they protect.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "direct-server-call", "request-replay"],
+  "evidence": ["server-refusal", "server-response"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 44000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.progression.transfer-authorization", "path": "prompts/modular/transfer-authorization-1.0.0.md", "order": 2930, "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l2.stock-transfers-features"] },
+      { "id": "ecommerce.progression.price-authorization", "path": "prompts/modular/price-authorization-1.0.0.md", "order": 2940, "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l2.price-history-features"] },
+      { "id": "ecommerce.progression.shipping-authorization", "path": "prompts/modular/shipping-authorization-1.0.0.md", "order": 2950, "modes": ["upgrade"], "requiresFeatures": ["ecommerce.progression.fulfilment-queue"] },
+      { "id": "ecommerce.progression.order-ownership", "path": "prompts/modular/order-ownership-1.0.0.md", "order": 2960, "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l2.order-cancellation-features"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "operator-transfer-authorization", "stableId": "operator-authorization", "source": "scenarios/02-strengthened-1.4.0.json", "feature": 201, "criteria": ["201a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l2.stock-transfers-features"] },
+    { "id": "operator-price-authorization", "stableId": "operator-authorization", "source": "scenarios/02-strengthened-1.4.0.json", "feature": 201, "criteria": ["201b"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l2.price-history-features"] },
+    { "id": "operator-authorization-direct", "stableId": "operator-authorization", "source": "scenarios/02-server-actions-1.1.0.json", "feature": 201, "criteria": ["201c"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.progression.fulfilment-queue"] },
+    { "id": "order-owner-direct", "stableId": "order-owner", "source": "scenarios/02-server-actions-1.1.0.json", "feature": 204, "criteria": ["204a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l2.order-cancellation-features"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-order-support-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-order-support-1.0.1.json
new file mode 100644
index 00000000000..0e1a5ca9143
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-order-support-1.0.1.json
@@ -0,0 +1,69 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.order-support",
+  "version": "1.0.1",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Order-linked support",
+  "description": "Owned order links that authorized staff can inspect.",
+  "requiresPacks": [
+    "ecommerce.progression.managed-support@1.0.0",
+    "ecommerce.feature.purchasing@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 65000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.order-support",
+        "path": "prompts/modular/order-support-1.0.0.md",
+        "order": 4100,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.order-support-hooks",
+        "path": "contracts/order-support-1.0.md",
+        "order": 4900,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "owned-order",
+      "stableId": "order-support-owned",
+      "source": "scenarios/progression-order-support-owned-1.0.0.json",
+      "feature": 614,
+      "criteria": [
+        "614a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "ownership-boundary",
+      "stableId": "order-support-boundary",
+      "source": "scenarios/progression-order-support-boundary-1.0.0.json",
+      "feature": 614,
+      "criteria": [
+        "614b"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-payment-records-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-payment-records-2.0.0.json
new file mode 100644
index 00000000000..42f377c06a4
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-payment-records-2.0.0.json
@@ -0,0 +1,56 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.payment-records",
+  "version": "2.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Payment records",
+  "description": "Exact and non-duplicated payment records at checkout.",
+  "requiresPacks": [
+    "ecommerce.feature.checkout@2.0.0",
+    "ecommerce.feature.purchasing@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 30000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.payment-records",
+        "path": "prompts/modular/payment-records-1.0.0.md",
+        "order": 1350,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.payment-record-hooks",
+        "path": "contracts/payment-records-1.0.md",
+        "order": 1980,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "payment",
+      "stableId": "payment-records",
+      "source": "scenarios/progression-core-business-1.0.0.json",
+      "feature": 623,
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-personalized-recommendations-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-personalized-recommendations-2.0.0.json
new file mode 100644
index 00000000000..cf074b87462
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-personalized-recommendations-2.0.0.json
@@ -0,0 +1,68 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.personalized-recommendations",
+  "version": "2.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Personalized recommendations",
+  "description": "Deterministic recommendations isolated by customer.",
+  "requiresPacks": [
+    "ecommerce.l2.recommendations@2.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 70000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.personalized-recommendations",
+        "path": "prompts/modular/progression-personalized-recommendations-1.0.0.md",
+        "order": 4010,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.personalized-recommendation-hooks",
+        "path": "contracts/progression-personalized-recommendations-1.0.md",
+        "order": 4910,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "ordering",
+      "stableId": "personalized-recommendations",
+      "source": "scenarios/progression-personalized-recommendations-1.0.0.json",
+      "feature": 403,
+      "criteria": [
+        "403a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "isolation",
+      "stableId": "personalized-recommendations",
+      "source": "scenarios/progression-personalized-recommendations-1.0.0.json",
+      "feature": 403,
+      "criteria": [
+        "403b"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-price-accounting-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-price-accounting-specifications-1.0.0.json
new file mode 100644
index 00000000000..efd1e55fc05
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-price-accounting-specifications-1.0.0.json
@@ -0,0 +1,23 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.price-accounting-specifications",
+  "stableId": "ecommerce.returns-pricing",
+  "version": "1.0.0",
+  "state": "draft",
+  "moduleType": "specification",
+  "title": "Price accounting",
+  "description": "Later price changes do not rewrite recorded order value.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 24000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.price-accounting", "path": "prompts/modular/order-accounting-1.0.0.md", "order": 2110, "from": "## Price accounting", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.l2.price-history-features"] }],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "price-accounting", "stableId": "refund-accounting", "source": "scenarios/02-invariants.json", "feature": 203, "criteria": ["203b"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l2.price-history-features"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-promotion-checkout-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-promotion-checkout-2.0.0.json
new file mode 100644
index 00000000000..6aa023f55d0
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-promotion-checkout-2.0.0.json
@@ -0,0 +1,79 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.promotion-checkout",
+  "version": "2.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Promotion checkout",
+  "description": "Server-calculated discounts recorded on orders.",
+  "requiresPacks": [
+    "ecommerce.progression.promotion-rules@1.0.1",
+    "ecommerce.feature.checkout@2.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 55000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.promotion-checkout",
+        "path": "prompts/modular/promotion-checkout-1.0.0.md",
+        "order": 3200,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.promotion-checkout-hooks",
+        "path": "contracts/promotion-checkout-1.0.md",
+        "order": 3950,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "active",
+      "stableId": "promotion-checkout-active",
+      "source": "scenarios/progression-promotion-checkout-1.0.0.json",
+      "feature": 621,
+      "criteria": [
+        "621a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "expired",
+      "stableId": "promotion-checkout-expired",
+      "source": "scenarios/progression-promotion-checkout-1.0.0.json",
+      "feature": 621,
+      "criteria": [
+        "621b"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "exhausted",
+      "stableId": "promotion-checkout-exhausted",
+      "source": "scenarios/progression-promotion-checkout-1.0.0.json",
+      "feature": 621,
+      "criteria": [
+        "621c"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-promotion-reporting-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-promotion-reporting-2.0.0.json
new file mode 100644
index 00000000000..4300bfc583d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-promotion-reporting-2.0.0.json
@@ -0,0 +1,68 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.promotion-reporting",
+  "version": "2.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Promotion reporting",
+  "description": "Exact promotion redemptions and revenue.",
+  "requiresPacks": [
+    "ecommerce.progression.promotion-checkout@2.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 40000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.promotion-reporting",
+        "path": "prompts/modular/promotion-reporting-1.0.0.md",
+        "order": 4200,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.promotion-reporting-hooks",
+        "path": "contracts/promotion-reporting-1.0.md",
+        "order": 4950,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "redemptions",
+      "stableId": "promotion-report-redemptions",
+      "source": "scenarios/progression-promotion-reporting-1.0.0.json",
+      "feature": 622,
+      "criteria": [
+        "622a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "revenue",
+      "stableId": "promotion-report-revenue",
+      "source": "scenarios/progression-promotion-reporting-1.0.0.json",
+      "feature": 622,
+      "criteria": [
+        "622b"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-promotion-rules-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-promotion-rules-1.0.1.json
new file mode 100644
index 00000000000..bce85952b95
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-promotion-rules-1.0.1.json
@@ -0,0 +1,59 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.promotion-rules",
+  "version": "1.0.1",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Promotion rules",
+  "description": "Staff-managed bounded promotion codes.",
+  "requiresPacks": [
+    "ecommerce.progression.staff-access@1.0.0",
+    "ecommerce.feature.catalog-items@1.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 45000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.promotion-rules",
+        "path": "prompts/modular/promotion-rules-1.0.0.md",
+        "order": 2200,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.promotion-rules-hooks",
+        "path": "contracts/promotion-rules-1.0.md",
+        "order": 2950,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "values",
+      "stableId": "promotion-rule-values",
+      "source": "scenarios/progression-promotion-rules-1.0.0.json",
+      "feature": 620,
+      "criteria": [
+        "620a"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-recommendation-feedback-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-recommendation-feedback-2.0.0.json
new file mode 100644
index 00000000000..c073a21e795
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-recommendation-feedback-2.0.0.json
@@ -0,0 +1,55 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.recommendation-feedback",
+  "version": "2.0.0",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Recommendation feedback",
+  "description": "Durable customer-specific recommendation dismissal.",
+  "requiresPacks": [
+    "ecommerce.progression.personalized-recommendations@2.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 70000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.recommendation-feedback",
+        "path": "prompts/modular/recommendation-feedback-1.0.0.md",
+        "order": 5030,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.recommendation-feedback-hooks",
+        "path": "contracts/recommendation-feedback-1.0.md",
+        "order": 5930,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "dismissal",
+      "stableId": "recommendation-feedback",
+      "source": "scenarios/progression-recommendation-feedback-1.0.0.json",
+      "feature": 504,
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-review-access-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-review-access-specifications-1.0.0.json
new file mode 100644
index 00000000000..2c4a0b8ad40
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-review-access-specifications-1.0.0.json
@@ -0,0 +1,39 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.review-access-specifications",
+  "version": "1.0.0",
+  "state": "draft",
+  "moduleType": "specification",
+  "title": "Review access",
+  "description": "Direct proof that review eligibility is enforced by the server.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "direct-server-call", "request-replay"],
+  "evidence": ["browser-observation", "server-refusal", "server-response"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 30000 },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.review-access",
+        "path": "prompts/modular/review-access-1.0.0.md",
+        "order": 2970,
+        "modes": ["upgrade"],
+        "requiresFeatures": ["ecommerce.feature.reviews"]
+      }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    {
+      "id": "review-eligibility-direct",
+      "stableId": "review-eligibility-direct",
+      "source": "scenarios/progression-review-access-1.0.0.json",
+      "feature": 618,
+      "criteria": ["618a"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.feature.reviews"]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-access-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-access-1.0.0.json
new file mode 100644
index 00000000000..9fc5dac8bc2
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-access-1.0.0.json
@@ -0,0 +1,11 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.progression.staff-access", "version": "1.0.0", "state": "draft", "moduleType": "feature",
+  "title": "Staff access", "description": "Staff and administrator sign-in.",
+  "requiresPacks": [], "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 30000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.staff-access", "path": "prompts/modular/staff-access-1.0.0.md", "order": 1100, "modes": ["fresh", "upgrade"] }],
+    "contracts": [{ "id": "ecommerce.progression.staff-access-hooks", "path": "contracts/staff-access-1.0.md", "order": 1900, "modes": ["fresh", "upgrade"] }]
+  },
+  "checks": [{ "id": "staff-sign-in", "stableId": "staff-access", "source": "scenarios/progression-staff-access-1.0.0.json", "feature": 601, "criteria": ["601a"], "role": "feature" }]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-activity-1.0.2.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-activity-1.0.2.json
new file mode 100644
index 00000000000..c70bdc51c39
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-activity-1.0.2.json
@@ -0,0 +1,56 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.staff-activity",
+  "version": "1.0.2",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Staff activity history",
+  "description": "Attributable and private history of administrative changes.",
+  "requiresPacks": [
+    "ecommerce.progression.staff-roles@1.0.0",
+    "ecommerce.progression.catalog-management@1.0.2"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 30000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.staff-activity",
+        "path": "prompts/modular/staff-activity-1.0.0.md",
+        "order": 1400,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.staff-activity-hooks",
+        "path": "contracts/staff-activity-1.0.md",
+        "order": 1990,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "activity",
+      "stableId": "staff-activity",
+      "source": "scenarios/progression-staff-activity-1.0.0.json",
+      "feature": 624,
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-activity-1.0.3.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-activity-1.0.3.json
new file mode 100644
index 00000000000..39c2438aec7
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-activity-1.0.3.json
@@ -0,0 +1,12 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.progression.staff-activity", "version": "1.0.3", "state": "draft", "moduleType": "feature",
+  "title": "Staff activity history", "description": "Attributable and private history of administrative changes.",
+  "requiresPacks": ["ecommerce.progression.staff-roles@1.0.1", "ecommerce.progression.catalog-management@1.0.3"],
+  "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 30000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.staff-activity", "path": "prompts/modular/staff-activity-1.0.0.md", "order": 1400, "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.progression.staff-activity-hooks", "path": "contracts/staff-activity-1.0.md", "order": 1990, "modes": ["upgrade"] }]
+  },
+  "checks": [{ "id": "activity", "stableId": "staff-activity", "source": "scenarios/progression-staff-activity-1.0.0.json", "feature": 624, "role": "feature" }]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-roles-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-roles-1.0.0.json
new file mode 100644
index 00000000000..55d548ff471
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-roles-1.0.0.json
@@ -0,0 +1,11 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.progression.staff-roles", "version": "1.0.0", "state": "qualified", "moduleType": "feature",
+  "title": "Staff roles", "description": "Role assignment and staff permission boundaries.",
+  "requiresPacks": ["ecommerce.progression.staff-access@1.0.0"], "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 30000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.staff-roles", "path": "prompts/modular/staff-roles-1.0.0.md", "order": 1250, "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.progression.staff-role-hooks", "path": "contracts/staff-roles-1.0.md", "order": 1960, "modes": ["upgrade"] }]
+  },
+  "checks": [{ "id": "roles", "stableId": "staff-roles", "source": "scenarios/progression-staff-roles-1.0.0.json", "feature": 621, "criteria": ["621a", "621b"], "role": "feature" }]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-roles-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-roles-1.0.1.json
new file mode 100644
index 00000000000..304fc33ab50
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-staff-roles-1.0.1.json
@@ -0,0 +1,11 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.progression.staff-roles", "version": "1.0.1", "state": "draft", "moduleType": "feature",
+  "title": "Staff roles", "description": "Role assignment for staff accounts.",
+  "requiresPacks": ["ecommerce.progression.staff-access@1.0.0"], "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 30000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.staff-roles", "path": "prompts/modular/staff-roles-1.0.0.md", "order": 1250, "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.progression.staff-role-hooks", "path": "contracts/staff-roles-1.0.md", "order": 1960, "modes": ["upgrade"] }]
+  },
+  "checks": [{ "id": "assignment", "stableId": "staff-roles", "source": "scenarios/progression-staff-roles-1.0.1.json", "feature": 621, "criteria": ["621c"], "role": "feature" }]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-stock-alerts-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-stock-alerts-1.0.1.json
new file mode 100644
index 00000000000..189d1e8ab20
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-stock-alerts-1.0.1.json
@@ -0,0 +1,60 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.stock-alerts",
+  "version": "1.0.1",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Stock alerts",
+  "description": "Customer alerts when stock returns.",
+  "requiresPacks": [
+    "ecommerce.progression.notification-preferences@1.0.0",
+    "ecommerce.feature.warehouse-admin@1.2.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser",
+    "direct-database-write"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 60000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.stock-alerts",
+        "path": "prompts/modular/stock-alerts-1.0.0.md",
+        "order": 3300,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.stock-alert-hooks",
+        "path": "contracts/stock-alerts-1.0.md",
+        "order": 3990,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "delivery",
+      "stableId": "stock-alert-delivery",
+      "source": "scenarios/progression-stock-alerts-1.0.0.json",
+      "feature": 631,
+      "criteria": [
+        "631c"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-history-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-history-1.0.0.json
new file mode 100644
index 00000000000..0826697ee0e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-history-1.0.0.json
@@ -0,0 +1,13 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.progression.support-history", "version": "1.0.0", "state": "draft", "moduleType": "feature",
+  "title": "Customer support history", "description": "Customer support ticket history.",
+  "requiresPacks": ["ecommerce.feature.accounts@1.2.0", "ecommerce.progression.support-intake@1.0.0"], "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 50000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.support-history", "path": "prompts/modular/support-history-1.0.0.md", "order": 2110, "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.progression.support-history-hooks", "path": "contracts/support-history-1.0.md", "order": 2900, "modes": ["upgrade"] }]
+  },
+  "checks": [
+    { "id": "history", "stableId": "support-history", "source": "scenarios/progression-support-history-1.0.0.json", "feature": 612, "criteria": ["612c"], "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-intake-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-intake-1.0.0.json
new file mode 100644
index 00000000000..db5711c4b55
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-intake-1.0.0.json
@@ -0,0 +1,11 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.progression.support-intake", "version": "1.0.0", "state": "qualified", "moduleType": "feature",
+  "title": "Support intake", "description": "Public support ticket creation and references.",
+  "requiresPacks": [], "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 30000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.support-intake", "path": "prompts/modular/support-intake-1.0.0.md", "order": 1200, "modes": ["fresh", "upgrade"] }],
+    "contracts": [{ "id": "ecommerce.progression.support-intake-hooks", "path": "contracts/support-intake-1.0.md", "order": 2900, "modes": ["fresh", "upgrade"] }]
+  },
+  "checks": [{ "id": "ticket-create", "stableId": "support-intake", "source": "scenarios/progression-support-intake-1.0.0.json", "feature": 610, "role": "feature" }]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-privacy-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-privacy-specifications-1.0.0.json
new file mode 100644
index 00000000000..835368b039c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-privacy-specifications-1.0.0.json
@@ -0,0 +1,39 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.support-privacy-specifications",
+  "version": "1.0.0",
+  "state": "draft",
+  "moduleType": "specification",
+  "title": "Support message privacy",
+  "description": "Transport-level proof that private support messages stay within their account.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation", "server-response"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 25000 },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.support-privacy",
+        "path": "prompts/modular/support-privacy-1.0.0.md",
+        "order": 2980,
+        "modes": ["upgrade"],
+        "requiresFeatures": ["ecommerce.progression.support-history"]
+      }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    {
+      "id": "private-message-delivery",
+      "stableId": "private-message-delivery",
+      "source": "scenarios/progression-support-read-privacy-1.0.0.json",
+      "feature": 619,
+      "criteria": ["619a"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.support-history"]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-refunds-1.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-refunds-1.0.1.json
new file mode 100644
index 00000000000..4d96da8af03
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-refunds-1.0.1.json
@@ -0,0 +1,79 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.progression.support-refunds",
+  "version": "1.0.1",
+  "state": "draft",
+  "moduleType": "feature",
+  "title": "Support refunds",
+  "description": "Authorized, exact, and single-application support refunds.",
+  "requiresPacks": [
+    "ecommerce.progression.order-support@1.0.1",
+    "ecommerce.l2.order-cancellation-features@1.0.1"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 70000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.progression.support-refunds",
+        "path": "prompts/modular/support-refunds-1.0.0.md",
+        "order": 5100,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.progression.support-refund-hooks",
+        "path": "contracts/support-refunds-1.0.md",
+        "order": 5900,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "resolution",
+      "stableId": "support-refunds-resolution",
+      "source": "scenarios/progression-support-refunds-resolution-1.0.0.json",
+      "feature": 615,
+      "criteria": [
+        "615a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "accounting",
+      "stableId": "support-refunds-accounting",
+      "source": "scenarios/progression-support-refunds-accounting-1.0.0.json",
+      "feature": 615,
+      "criteria": [
+        "615b"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "access",
+      "stableId": "support-refunds-access",
+      "source": "scenarios/progression-support-refunds-access-1.0.0.json",
+      "feature": 615,
+      "criteria": [
+        "615c"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-triage-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-triage-1.0.0.json
new file mode 100644
index 00000000000..ac62d12b28c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/progression-support-triage-1.0.0.json
@@ -0,0 +1,15 @@
+{
+  "schemaVersion": 1, "kind": "test-pack", "id": "ecommerce.progression.support-triage", "version": "1.0.0", "state": "qualified", "moduleType": "feature",
+  "title": "Support triage", "description": "Staff assignment, priority, and status changes.",
+  "requiresPacks": ["ecommerce.progression.staff-access@1.0.0", "ecommerce.progression.support-intake@1.0.0"], "conflictsWith": [], "capabilities": ["browser"], "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 45000 },
+  "task": {
+    "requirements": [{ "id": "ecommerce.progression.support-triage", "path": "prompts/modular/support-triage-1.0.0.md", "order": 2100, "modes": ["upgrade"] }],
+    "contracts": [{ "id": "ecommerce.progression.support-triage-hooks", "path": "contracts/support-triage-1.0.md", "order": 2900, "modes": ["upgrade"] }]
+  },
+  "checks": [
+    { "id": "assignment", "stableId": "support-assignment", "source": "scenarios/progression-support-triage-1.0.0.json", "feature": 611, "criteria": ["611a"], "role": "feature" },
+    { "id": "priority", "stableId": "support-priority", "source": "scenarios/progression-support-triage-1.0.0.json", "feature": 611, "criteria": ["611b"], "role": "feature" },
+    { "id": "status", "stableId": "support-status", "source": "scenarios/progression-support-triage-1.0.0.json", "feature": 611, "criteria": ["611c"], "role": "feature" }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/returns-pricing-features-1.1.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/returns-pricing-features-1.1.0.json
new file mode 100644
index 00000000000..2184b99b2fb
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/returns-pricing-features-1.1.0.json
@@ -0,0 +1,139 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.returns-pricing-features",
+  "stableId": "ecommerce.returns-pricing",
+  "version": "1.1.0",
+  "state": "qualified",
+  "moduleType": "feature",
+  "title": "Returns and pricing",
+  "description": "Cancellation, returns, live catalog prices, and immutable receipts.",
+  "requiresPacks": [
+    "ecommerce.operations-access-features@1.0.0"
+  ],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser"
+  ],
+  "evidence": [
+    "browser-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 94000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.l2.returns-pricing",
+        "path": "prompts/02-operations.md",
+        "order": 40,
+        "from": "### Cancelling and returning",
+        "until": "### Live operational views",
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ],
+    "contracts": [
+      {
+        "id": "ecommerce.l2.price-hooks",
+        "path": "contracts/appendix-02.md",
+        "order": 2040,
+        "from": "| `price-input`",
+        "until": "| `low-stock-list`",
+        "modes": [
+          "upgrade"
+        ]
+      },
+      {
+        "id": "ecommerce.l2.return-hooks",
+        "path": "contracts/l2-order-hooks-1.4.md",
+        "order": 2060,
+        "modes": [
+          "upgrade"
+        ]
+      },
+      {
+        "id": "ecommerce.l2.price-action-input",
+        "path": "prompts/l2-action-inputs.md",
+        "order": 2085,
+        "from": "## Price action input",
+        "until": "## Inventory contention action inputs",
+        "modes": [
+          "upgrade"
+        ]
+      },
+      {
+        "id": "ecommerce.l2.returns-pricing-testing-calls",
+        "path": "prompts/fragments/named-actions-returns-pricing-1.0.0.md",
+        "order": 2087,
+        "modes": [
+          "upgrade"
+        ]
+      }
+    ]
+  },
+  "checks": [
+    {
+      "id": "cancellation-core",
+      "stableId": "cancellation-and-return",
+      "source": "scenarios/02-features.json",
+      "feature": 3,
+      "criteria": [
+        "3a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "cancellation-history",
+      "stableId": "cancellation-and-return",
+      "source": "scenarios/02-self-contained-1.4.0.json",
+      "feature": 3,
+      "criteria": [
+        "3b"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "return-complete",
+      "stableId": "cancellation-and-return",
+      "source": "scenarios/02-strengthened-1.4.0.json",
+      "feature": 3,
+      "criteria": [
+        "3c"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "price-history-exact",
+      "stableId": "price-history",
+      "source": "scenarios/02-paid-price-history-1.4.0.json",
+      "feature": 4,
+      "criteria": [
+        "4a"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "price-live-independent",
+      "stableId": "price-history",
+      "source": "scenarios/02-live-price-1.4.0.json",
+      "feature": 4,
+      "criteria": [
+        "4b"
+      ],
+      "role": "feature"
+    },
+    {
+      "id": "price-cart-checkout",
+      "stableId": "price-history",
+      "source": "scenarios/02-features.json",
+      "feature": 4,
+      "criteria": [
+        "4c"
+      ],
+      "role": "feature"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/returns-pricing-specifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/returns-pricing-specifications-1.0.0.json
new file mode 100644
index 00000000000..97b0aca5442
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/returns-pricing-specifications-1.0.0.json
@@ -0,0 +1,25 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.returns-pricing-specifications",
+  "stableId": "ecommerce.returns-pricing",
+  "version": "1.0.0",
+  "state": "qualified",
+  "moduleType": "specification",
+  "title": "Refund accounting",
+  "description": "Revenue remains exact through cancellations, returns, and later price changes.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser"],
+  "evidence": ["browser-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 36000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.l2.refund-invariants", "path": "prompts/02-operations.md", "order": 61, "from": "- Revenue always", "until": "## Starting data", "modes": ["upgrade"], "requiresFeatures": ["ecommerce.returns-pricing-features"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "refund-accounting", "stableId": "refund-accounting", "source": "scenarios/02-invariants.json", "feature": 203, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.returns-pricing-features"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-access-control-1.2.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-access-control-1.2.0.json
new file mode 100644
index 00000000000..a51605006a6
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-access-control-1.2.0.json
@@ -0,0 +1,34 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.access-control",
+  "version": "1.2.0",
+  "state": "qualified",
+  "title": "Access control",
+  "moduleType": "specification",
+  "description": "Server-enforced authentication, authorization, ownership, and privacy.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "direct-server-call", "request-replay"],
+  "evidence": ["browser-observation", "server-response"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 90000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.spec.access-control.purchasing", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1000, "from": "## Access control: purchasing", "until": "## Access control: warehouse administration", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.purchasing"] },
+      { "id": "ecommerce.spec.access-control.warehouse-admin", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1010, "from": "## Access control: warehouse administration", "until": "## Access control: reviews", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.warehouse-admin"] },
+      { "id": "ecommerce.spec.access-control.reviews", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1020, "from": "## Access control: reviews", "until": "## Access control: cart", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.reviews"] },
+      { "id": "ecommerce.spec.access-control.cart", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1030, "from": "## Access control: cart", "until": "## State durability: accounts", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.cart-checkout"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "signed-out-purchase", "source": "scenarios/01-buying-2.4.0.json", "feature": 3, "criteria": ["3a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.purchasing"] },
+    { "id": "admin-ui", "source": "scenarios/01-warehouse-admin-2.4.0.json", "feature": 7, "criteria": ["7a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.warehouse-admin"] },
+    { "id": "purchase-session", "source": "scenarios/01-purchase-session-2.4.0.json", "feature": 101, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.purchasing"] },
+    { "id": "purchase-attribution", "source": "scenarios/01-purchase-attribution-2.4.0.json", "feature": 102, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.purchasing"] },
+    { "id": "admin-write", "source": "scenarios/01-admin-write-2.4.0.json", "feature": 103, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.warehouse-admin"] },
+    { "id": "order-ownership", "source": "scenarios/01-order-ownership-2.4.0.json", "feature": 106, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.purchasing"] },
+    { "id": "review-eligibility", "source": "scenarios/01-review-eligibility-2.4.0.json", "feature": 108, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.reviews"] },
+    { "id": "cart-boundary", "source": "scenarios/01-cart-boundary-2.4.0.json", "feature": 109, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.cart-checkout"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-access-control-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-access-control-2.0.0.json
new file mode 100644
index 00000000000..2aa7397a6f0
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-access-control-2.0.0.json
@@ -0,0 +1,165 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.access-control",
+  "version": "2.0.0",
+  "state": "qualified",
+  "title": "Access control",
+  "moduleType": "specification",
+  "description": "Server-enforced authentication, authorization, ownership, and privacy.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser",
+    "direct-server-call",
+    "request-replay"
+  ],
+  "evidence": [
+    "browser-observation",
+    "server-response"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 90000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.spec.access-control.purchasing",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1000,
+        "from": "## Access control: purchasing",
+        "until": "## Access control: warehouse administration",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.purchasing"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.access-control.warehouse-admin",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1010,
+        "from": "## Access control: warehouse administration",
+        "until": "## Access control: reviews",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.warehouse-admin"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.access-control.reviews",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1020,
+        "from": "## Access control: reviews",
+        "until": "## Access control: cart",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.reviews"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.access-control.cart",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1030,
+        "from": "## Access control: cart",
+        "until": "## State durability: accounts",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.cart"
+        ]
+      }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    {
+      "id": "signed-out-purchase",
+      "source": "scenarios/progression-signed-out-purchase-1.0.0.json",
+      "feature": 3,
+      "criteria": [
+        "3a"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "purchase-session",
+      "source": "scenarios/01-purchase-session-2.4.0.json",
+      "feature": 101,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "purchase-attribution",
+      "source": "scenarios/01-purchase-attribution-2.4.0.json",
+      "feature": 102,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "order-ownership",
+      "source": "scenarios/01-order-ownership-2.4.0.json",
+      "feature": 106,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "review-eligibility",
+      "source": "scenarios/01-review-eligibility-2.4.0.json",
+      "feature": 108,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.reviews"
+      ]
+    },
+    {
+      "id": "cart-boundary",
+      "source": "scenarios/01-cart-boundary-2.4.0.json",
+      "feature": 109,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.cart"
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-access-control-2.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-access-control-2.0.1.json
new file mode 100644
index 00000000000..0e044a02217
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-access-control-2.0.1.json
@@ -0,0 +1,264 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.access-control",
+  "version": "2.0.1",
+  "state": "draft",
+  "title": "Access control",
+  "moduleType": "specification",
+  "description": "Server-enforced authentication, authorization, ownership, and privacy.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser",
+    "direct-server-call",
+    "request-replay"
+  ],
+  "evidence": [
+    "browser-observation",
+    "server-response"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 90000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.spec.access-control.purchasing",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1000,
+        "from": "## Access control: purchasing",
+        "until": "## Access control: warehouse administration",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.purchasing"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.access-control.warehouse-admin",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1010,
+        "from": "## Access control: warehouse administration",
+        "until": "## Access control: reviews",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.warehouse-admin"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.access-control.reviews",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1020,
+        "from": "## Access control: reviews",
+        "until": "## Access control: cart",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.reviews"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.access-control.cart",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1030,
+        "from": "## Access control: cart",
+        "until": "## State durability: accounts",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.cart"
+        ]
+      }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    {
+      "id": "signed-out-purchase",
+      "source": "scenarios/progression-signed-out-purchase-1.0.0.json",
+      "feature": 3,
+      "criteria": [
+        "3a"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "purchase-session",
+      "source": "scenarios/01-purchase-session-2.4.0.json",
+      "feature": 101,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "purchase-attribution",
+      "source": "scenarios/01-purchase-attribution-2.4.0.json",
+      "feature": 102,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "order-ownership",
+      "source": "scenarios/01-order-ownership-2.4.0.json",
+      "feature": 106,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "review-eligibility",
+      "source": "scenarios/01-review-eligibility-2.4.0.json",
+      "feature": 108,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.reviews"
+      ]
+    },
+    {
+      "id": "cart-boundary",
+      "source": "scenarios/01-cart-boundary-2.4.1.json",
+      "feature": 109,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.cart"
+      ]
+    },
+    {
+      "id": "staff-area-boundary",
+      "source": "scenarios/progression-staff-access-1.0.0.json",
+      "feature": 601,
+      "criteria": ["601b"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.staff-access"]
+    },
+    {
+      "id": "warehouse-area-boundary",
+      "source": "scenarios/01-warehouse-admin-staff-1.0.0.json",
+      "feature": 7,
+      "criteria": ["7a"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.feature.warehouse-admin"]
+    },
+    {
+      "id": "warehouse-write-boundary",
+      "source": "scenarios/01-admin-write-staff-1.0.0.json",
+      "feature": 103,
+      "criteria": ["103b"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.feature.warehouse-admin"]
+    },
+    {
+      "id": "fulfilment-area-boundary",
+      "source": "scenarios/02-fulfilment-access-1.0.0.json",
+      "feature": 1,
+      "criteria": ["1d"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.fulfilment-queue"]
+    },
+    {
+      "id": "customer-profile-privacy",
+      "source": "scenarios/progression-customer-profile-1.0.0.json",
+      "feature": 620,
+      "criteria": ["620b"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.customer-profile"]
+    },
+    {
+      "id": "notification-preferences-privacy",
+      "source": "scenarios/progression-notification-preferences-1.0.0.json",
+      "feature": 630,
+      "criteria": ["630b"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.notification-preferences"]
+    },
+    {
+      "id": "promotion-management-boundary",
+      "source": "scenarios/progression-promotion-rules-1.0.0.json",
+      "feature": 620,
+      "criteria": ["620b"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.promotion-rules"]
+    },
+    {
+      "id": "staff-role-boundary",
+      "source": "scenarios/progression-staff-roles-1.0.1.json",
+      "feature": 621,
+      "criteria": ["621b"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.staff-roles"]
+    },
+    {
+      "id": "support-history-privacy",
+      "source": "scenarios/progression-support-history-1.0.0.json",
+      "feature": 612,
+      "criteria": ["612b"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.support-history"]
+    },
+    {
+      "id": "managed-support-privacy",
+      "source": "scenarios/progression-managed-support-privacy-1.0.0.json",
+      "feature": 613,
+      "criteria": ["613b"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.managed-support"]
+    },
+    {
+      "id": "stock-alert-privacy",
+      "source": "scenarios/progression-stock-alerts-1.0.0.json",
+      "feature": 631,
+      "criteria": ["631b"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.stock-alerts"]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-concurrency-safety-1.3.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-concurrency-safety-1.3.0.json
new file mode 100644
index 00000000000..ed98d3a09ab
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-concurrency-safety-1.3.0.json
@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.concurrency-safety",
+  "version": "1.3.0",
+  "state": "qualified",
+  "title": "Concurrency safety",
+  "moduleType": "specification",
+  "description": "Stock race safety and duplicate-submit protection.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "concurrent-actors"],
+  "evidence": ["concurrent-outcome", "database-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 125000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.spec.concurrency-safety.purchasing", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1300, "from": "## Concurrency safety: purchasing", "until": "## Concurrency safety: restocking", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.purchasing"] },
+      { "id": "ecommerce.spec.concurrency-safety.restocking", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1310, "from": "## Concurrency safety: restocking", "until": "## Concurrency safety: checkout", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.purchasing", "ecommerce.feature.warehouse-admin"] },
+      { "id": "ecommerce.spec.concurrency-safety.checkout", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1320, "from": "## Concurrency safety: checkout", "until": "## Transactional integrity: reviews", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.cart-checkout"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "stock-limit", "source": "scenarios/01-buying-2.4.0.json", "feature": 3, "criteria": ["3d"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.cart-checkout", "ecommerce.feature.purchasing"] },
+    { "id": "last-unit", "source": "scenarios/01-last-unit-2.3.0.json", "feature": 201, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.catalog", "ecommerce.feature.purchasing", "ecommerce.feature.warehouse-admin"] },
+    { "id": "restock-race", "source": "scenarios/01-restock-race-2.3.0.json", "feature": 202, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.purchasing", "ecommerce.feature.warehouse-admin"] },
+    { "id": "duplicate-checkout", "source": "scenarios/01-duplicate-checkout-2.3.0.json", "feature": 203, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.cart-checkout"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-concurrency-safety-2.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-concurrency-safety-2.0.1.json
new file mode 100644
index 00000000000..383b3461fff
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-concurrency-safety-2.0.1.json
@@ -0,0 +1,129 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.concurrency-safety",
+  "version": "2.0.1",
+  "state": "qualified",
+  "title": "Concurrency safety",
+  "moduleType": "specification",
+  "description": "Stock race safety and duplicate-submit protection.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser",
+    "concurrent-actors"
+  ],
+  "evidence": [
+    "concurrent-outcome",
+    "database-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 125000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.spec.concurrency-safety.purchasing",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1300,
+        "from": "## Concurrency safety: purchasing",
+        "until": "## Concurrency safety: restocking",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.purchasing"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.concurrency-safety.restocking",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1310,
+        "from": "## Concurrency safety: restocking",
+        "until": "## Concurrency safety: checkout",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.purchasing",
+          "ecommerce.feature.warehouse-admin"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.concurrency-safety.checkout",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1320,
+        "from": "## Concurrency safety: checkout",
+        "until": "## Transactional integrity: reviews",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.checkout"
+        ]
+      }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    {
+      "id": "stock-limit",
+      "source": "scenarios/progression-stock-limit-1.0.0.json",
+      "feature": 3,
+      "criteria": [
+        "3d"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "last-unit",
+      "source": "scenarios/01-last-unit-2.3.1.json",
+      "feature": 201,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.catalog-items",
+        "ecommerce.feature.purchasing",
+        "ecommerce.feature.warehouse-admin"
+      ]
+    },
+    {
+      "id": "restock-race",
+      "source": "scenarios/01-restock-race-2.3.0.json",
+      "feature": 202,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.purchasing",
+        "ecommerce.feature.warehouse-admin"
+      ]
+    },
+    {
+      "id": "duplicate-checkout",
+      "source": "scenarios/01-duplicate-checkout-2.3.1.json",
+      "feature": 203,
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.checkout"
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-external-data-sync-1.1.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-external-data-sync-1.1.0.json
new file mode 100644
index 00000000000..49462e50520
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-external-data-sync-1.1.0.json
@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.external-data-sync",
+  "version": "1.1.0",
+  "state": "qualified",
+  "title": "External data synchronization",
+  "moduleType": "specification",
+  "description": "Independent probes for live external writes, reload persistence, server restart recovery, and client reconnect catch-up.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "direct-database-write", "backend-lifecycle"],
+  "evidence": ["database-observation", "fresh-client-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 105000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.spec.external-data-sync.requirement", "path": "prompts/modular/l1-specifications.md", "order": 1500, "from": "## External data synchronization", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.catalog", "ecommerce.feature.warehouse-admin"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "external-live", "stableId": "external-stock", "source": "scenarios/01-external-live-sync-1.1.0.json", "feature": 901, "criteria": ["901a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.catalog", "ecommerce.feature.warehouse-admin"] },
+    { "id": "external-reload", "stableId": "external-stock", "source": "scenarios/01-external-reload-sync-1.1.0.json", "feature": 901, "criteria": ["901b"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.catalog", "ecommerce.feature.warehouse-admin"] },
+    { "id": "external-server-restart", "stableId": "external-stock", "source": "scenarios/01-external-server-restart-sync-1.1.0.json", "feature": 901, "criteria": ["901c"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.catalog", "ecommerce.feature.warehouse-admin"] },
+    { "id": "external-reconnect", "stableId": "external-stock", "source": "scenarios/01-external-reconnect-sync-1.1.0.json", "feature": 901, "criteria": ["901d"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.catalog", "ecommerce.feature.warehouse-admin"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-external-data-sync-1.1.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-external-data-sync-1.1.1.json
new file mode 100644
index 00000000000..dd8e143facb
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-external-data-sync-1.1.1.json
@@ -0,0 +1,117 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.external-data-sync",
+  "version": "1.1.1",
+  "state": "qualified",
+  "title": "External data synchronization",
+  "moduleType": "specification",
+  "description": "Independent probes for live external writes, reload persistence, server restart recovery, and client reconnect catch-up.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser",
+    "direct-database-write",
+    "backend-lifecycle"
+  ],
+  "evidence": [
+    "database-observation",
+    "fresh-client-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 105000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.spec.external-data-sync.requirement",
+        "path": "prompts/modular/l1-specifications.md",
+        "order": 1500,
+        "from": "## External data synchronization",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.catalog-items",
+          "ecommerce.feature.warehouse-admin"
+        ]
+      }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    {
+      "id": "external-live",
+      "stableId": "external-stock",
+      "source": "scenarios/01-external-live-sync-1.1.0.json",
+      "feature": 901,
+      "criteria": [
+        "901a"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.catalog-items",
+        "ecommerce.feature.warehouse-admin"
+      ]
+    },
+    {
+      "id": "external-reload",
+      "stableId": "external-stock",
+      "source": "scenarios/01-external-reload-sync-1.1.0.json",
+      "feature": 901,
+      "criteria": [
+        "901b"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.catalog-items",
+        "ecommerce.feature.warehouse-admin"
+      ]
+    },
+    {
+      "id": "external-server-restart",
+      "stableId": "external-stock",
+      "source": "scenarios/01-external-server-restart-sync-1.1.0.json",
+      "feature": 901,
+      "criteria": [
+        "901c"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.catalog-items",
+        "ecommerce.feature.warehouse-admin"
+      ]
+    },
+    {
+      "id": "external-reconnect",
+      "stableId": "external-stock",
+      "source": "scenarios/01-external-reconnect-sync-1.1.0.json",
+      "feature": 901,
+      "criteria": [
+        "901d"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.catalog-items",
+        "ecommerce.feature.warehouse-admin"
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-external-data-sync-1.2.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-external-data-sync-1.2.0.json
new file mode 100644
index 00000000000..e7a561e99ff
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-external-data-sync-1.2.0.json
@@ -0,0 +1,113 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.external-data-sync",
+  "version": "1.2.0",
+  "state": "draft",
+  "title": "External data synchronization",
+  "moduleType": "specification",
+  "description": "Independent probes for live external writes, reload persistence, server restart recovery, and client reconnect catch-up.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser",
+    "direct-database-write",
+    "backend-lifecycle"
+  ],
+  "evidence": [
+    "database-observation",
+    "fresh-client-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 105000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.spec.external-data-sync.requirement",
+        "path": "prompts/modular/l1-specifications-1.2.0.md",
+        "order": 1500,
+        "from": "## External data synchronization",
+        "modes": [
+          "fresh",
+          "upgrade"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.warehouse-admin"
+        ]
+      }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    {
+      "id": "external-live",
+      "stableId": "external-stock",
+      "source": "scenarios/01-external-live-sync-1.1.0.json",
+      "feature": 901,
+      "criteria": [
+        "901a"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.warehouse-admin"
+      ]
+    },
+    {
+      "id": "external-reload",
+      "stableId": "external-stock",
+      "source": "scenarios/01-external-reload-sync-1.1.0.json",
+      "feature": 901,
+      "criteria": [
+        "901b"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.warehouse-admin"
+      ]
+    },
+    {
+      "id": "external-server-restart",
+      "stableId": "external-stock",
+      "source": "scenarios/01-external-server-restart-sync-1.1.0.json",
+      "feature": 901,
+      "criteria": [
+        "901c"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.warehouse-admin"
+      ]
+    },
+    {
+      "id": "external-reconnect",
+      "stableId": "external-stock",
+      "source": "scenarios/01-external-reconnect-sync-1.1.0.json",
+      "feature": 901,
+      "criteria": [
+        "901d"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.warehouse-admin"
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-live-state-1.2.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-live-state-1.2.0.json
new file mode 100644
index 00000000000..2c372de2e21
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-live-state-1.2.0.json
@@ -0,0 +1,32 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.live-state",
+  "version": "1.2.0",
+  "state": "qualified",
+  "title": "Live state",
+  "moduleType": "specification",
+  "description": "Cross-client updates and reconnect convergence without reload.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "concurrent-actors"],
+  "evidence": ["browser-observation", "fresh-client-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 85000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.spec.live-state.catalog-purchasing", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1200, "from": "## Live state: catalog and purchasing", "until": "## Live state: cart", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.catalog", "ecommerce.feature.purchasing"] },
+      { "id": "ecommerce.spec.live-state.cart", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1210, "from": "## Live state: cart", "until": "## Live state: reviews", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.cart-checkout"] },
+      { "id": "ecommerce.spec.live-state.reviews", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1220, "from": "## Live state: reviews", "until": "## Live state: warehouse administration", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.reviews"] },
+      { "id": "ecommerce.spec.live-state.warehouse-admin", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1230, "from": "## Live state: warehouse administration", "until": "## Concurrency safety: purchasing", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.catalog", "ecommerce.feature.warehouse-admin"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "ranking", "source": "scenarios/01-core-2.4.0.json", "feature": 2, "criteria": ["2c"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.catalog", "ecommerce.feature.purchasing"] },
+    { "id": "purchase-stock", "source": "scenarios/01-buying-2.4.0.json", "feature": 3, "criteria": ["3b"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.catalog", "ecommerce.feature.purchasing"] },
+    { "id": "shared-cart", "source": "scenarios/01-cart-2.4.0.json", "feature": 4, "criteria": ["4c"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.cart-checkout"] },
+    { "id": "rating", "source": "scenarios/01-review-rating-live-2.4.0.json", "feature": 6, "criteria": ["6c"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.reviews"] },
+    { "id": "warehouse-stock", "source": "scenarios/01-warehouse-stock-live-2.4.0.json", "feature": 7, "criteria": ["7c"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.catalog", "ecommerce.feature.warehouse-admin"] },
+    { "id": "open-list", "source": "scenarios/01-open-list-live-2.3.0.json", "feature": 902, "criteria": ["902a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.reviews"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-live-state-2.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-live-state-2.0.0.json
new file mode 100644
index 00000000000..66e1e220594
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-live-state-2.0.0.json
@@ -0,0 +1,221 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.live-state",
+  "version": "2.0.0",
+  "state": "draft",
+  "title": "Live state",
+  "moduleType": "specification",
+  "description": "Cross-client updates and reconnect convergence without reload.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser",
+    "concurrent-actors"
+  ],
+  "evidence": [
+    "browser-observation",
+    "fresh-client-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 85000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.spec.live-state.catalog-purchasing",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1200,
+        "from": "## Live state: catalog and purchasing",
+        "until": "## Live state: cart",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.catalog-items",
+          "ecommerce.feature.purchasing"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.live-state.cart",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1210,
+        "from": "## Live state: cart",
+        "until": "## Live state: reviews",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.cart"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.live-state.reviews",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1220,
+        "from": "## Live state: reviews",
+        "until": "## Live state: warehouse administration",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.reviews"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.live-state.warehouse-admin",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1230,
+        "from": "## Live state: warehouse administration",
+        "until": "## Concurrency safety: purchasing",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.catalog-items",
+          "ecommerce.feature.warehouse-admin"
+        ]
+      }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    {
+      "id": "ranking",
+      "source": "scenarios/01-core-2.4.0.json",
+      "feature": 2,
+      "criteria": [
+        "2c"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.catalog-items",
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "purchase-stock",
+      "source": "scenarios/01-buying-2.4.0.json",
+      "feature": 3,
+      "criteria": [
+        "3b"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.catalog-items",
+        "ecommerce.feature.purchasing"
+      ]
+    },
+    {
+      "id": "shared-cart",
+      "source": "scenarios/01-cart-2.4.0.json",
+      "feature": 4,
+      "criteria": [
+        "4c"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.cart"
+      ]
+    },
+    {
+      "id": "rating",
+      "source": "scenarios/01-review-rating-live-2.4.0.json",
+      "feature": 6,
+      "criteria": [
+        "6c"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.reviews"
+      ]
+    },
+    {
+      "id": "open-list",
+      "source": "scenarios/progression-open-list-live-1.0.0.json",
+      "feature": 902,
+      "criteria": [
+        "902a"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.reviews"
+      ]
+    },
+    {
+      "id": "warehouse-stock",
+      "source": "scenarios/01-warehouse-stock-live-staff-1.0.0.json",
+      "feature": 7,
+      "criteria": ["7c"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.feature.catalog-items", "ecommerce.feature.warehouse-admin"]
+    },
+    {
+      "id": "fulfilment-queue",
+      "source": "scenarios/02-fulfilment-live-1.0.0.json",
+      "feature": 1,
+      "criteria": ["1a"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.fulfilment-queue"]
+    },
+    {
+      "id": "inventory-dashboard",
+      "source": "scenarios/02-low-stock-1.4.0.json",
+      "feature": 5,
+      "criteria": ["5a"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.l2.inventory-dashboard", "ecommerce.feature.purchasing"]
+    },
+    {
+      "id": "sales-dashboard",
+      "source": "scenarios/02-operational-category-totals-1.0.0.json",
+      "feature": 5,
+      "criteria": ["5b"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.l2.sales-dashboard", "ecommerce.feature.purchasing"]
+    },
+    {
+      "id": "stock-transfers",
+      "source": "scenarios/02-transfer-totals-1.4.0.json",
+      "feature": 2,
+      "criteria": ["2b"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.l2.stock-transfers-features"]
+    },
+    {
+      "id": "managed-support",
+      "source": "scenarios/progression-managed-support-shared-1.0.0.json",
+      "feature": 613,
+      "criteria": ["613a"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.managed-support"]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-state-durability-1.1.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-state-durability-1.1.0.json
new file mode 100644
index 00000000000..03110bcf69f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-state-durability-1.1.0.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.state-durability",
+  "version": "1.1.0",
+  "state": "qualified",
+  "title": "State durability",
+  "moduleType": "specification",
+  "description": "Session and account-state continuity across reload and reconnect.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "backend-lifecycle"],
+  "evidence": ["browser-observation", "fresh-client-observation"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 48000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.spec.state-durability.accounts", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1100, "from": "## State durability: accounts", "until": "## State durability: account data", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.accounts"] },
+      { "id": "ecommerce.spec.state-durability.account-data", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1110, "from": "## State durability: account data", "until": "## Live state: catalog and purchasing", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.accounts", "ecommerce.feature.cart-checkout"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "session-reload", "source": "scenarios/01-account-reload-2.4.0.json", "feature": 1, "criteria": ["1e"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.accounts"] },
+    { "id": "cart-reload", "source": "scenarios/01-cart-2.4.0.json", "feature": 4, "criteria": ["4b"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.cart-checkout"] },
+    { "id": "account-state-reload", "stableId": "account-state-recovery", "source": "scenarios/01-account-state-reload-2.4.0.json", "feature": 105, "criteria": ["105a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.accounts", "ecommerce.feature.cart-checkout"] },
+    { "id": "account-state-reconnect", "stableId": "account-state-recovery", "source": "scenarios/01-account-state-reconnect-2.4.0.json", "feature": 105, "criteria": ["105b"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.accounts", "ecommerce.feature.cart-checkout"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-state-durability-2.0.1.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-state-durability-2.0.1.json
new file mode 100644
index 00000000000..eae2890a271
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-state-durability-2.0.1.json
@@ -0,0 +1,162 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.state-durability",
+  "version": "2.0.1",
+  "state": "draft",
+  "title": "State durability",
+  "moduleType": "specification",
+  "description": "Session and account-state continuity across reload and reconnect.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": [
+    "browser",
+    "backend-lifecycle"
+  ],
+  "evidence": [
+    "browser-observation",
+    "fresh-client-observation"
+  ],
+  "budget": {
+    "status": "bounded",
+    "maxRuntimeMs": 48000
+  },
+  "task": {
+    "requirements": [
+      {
+        "id": "ecommerce.spec.state-durability.accounts",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1100,
+        "from": "## State durability: accounts",
+        "until": "## State durability: account data",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.accounts"
+        ]
+      },
+      {
+        "id": "ecommerce.spec.state-durability.account-data",
+        "path": "prompts/modular/l1-specifications-1.1.0.md",
+        "order": 1110,
+        "from": "## State durability: account data",
+        "until": "## Live state: catalog and purchasing",
+        "modes": [
+          "fresh"
+        ],
+        "requiresFeatures": [
+          "ecommerce.feature.accounts",
+          "ecommerce.feature.cart"
+        ]
+      }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    {
+      "id": "session-reload",
+      "source": "scenarios/01-account-reload-2.4.0.json",
+      "feature": 1,
+      "criteria": [
+        "1e"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.accounts"
+      ]
+    },
+    {
+      "id": "cart-reload",
+      "source": "scenarios/01-cart-2.4.0.json",
+      "feature": 4,
+      "criteria": [
+        "4b"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.cart"
+      ]
+    },
+    {
+      "id": "account-state-reload",
+      "stableId": "account-state-recovery",
+      "source": "scenarios/progression-account-state-reload-1.0.1.json",
+      "feature": 105,
+      "criteria": [
+        "105a"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.accounts",
+        "ecommerce.feature.checkout"
+      ]
+    },
+    {
+      "id": "account-state-reconnect",
+      "stableId": "account-state-recovery",
+      "source": "scenarios/progression-account-state-reconnect-1.0.0.json",
+      "feature": 105,
+      "criteria": [
+        "105b"
+      ],
+      "role": "guarantee",
+      "observations": [
+        "requested",
+        "unmentioned"
+      ],
+      "requiresFeatures": [
+        "ecommerce.feature.accounts",
+        "ecommerce.feature.checkout"
+      ]
+    },
+    {
+      "id": "customer-profile-reload",
+      "source": "scenarios/progression-customer-profile-1.0.0.json",
+      "feature": 620,
+      "criteria": ["620a"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.customer-profile"]
+    },
+    {
+      "id": "notification-preferences-reload",
+      "source": "scenarios/progression-notification-preferences-1.0.0.json",
+      "feature": 630,
+      "criteria": ["630a"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.notification-preferences"]
+    },
+    {
+      "id": "staff-role-reload",
+      "source": "scenarios/progression-staff-roles-1.0.1.json",
+      "feature": 621,
+      "criteria": ["621a"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.staff-roles"]
+    },
+    {
+      "id": "support-history-reload",
+      "source": "scenarios/progression-support-history-1.0.0.json",
+      "feature": 612,
+      "criteria": ["612a"],
+      "role": "guarantee",
+      "observations": ["requested", "unmentioned"],
+      "requiresFeatures": ["ecommerce.progression.support-history"]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-transactional-integrity-1.3.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-transactional-integrity-1.3.0.json
new file mode 100644
index 00000000000..db37ad2518c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-transactional-integrity-1.3.0.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.transactional-integrity",
+  "version": "1.3.0",
+  "state": "qualified",
+  "title": "Transactional integrity",
+  "moduleType": "specification",
+  "description": "Server authority, accounting, valid quantities, and unique reviews.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "database-observation", "direct-server-call"],
+  "evidence": ["browser-observation", "database-observation", "server-response"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 75000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.spec.transactional-integrity.reviews", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1400, "from": "## Transactional integrity: reviews", "until": "## Transactional integrity: purchasing", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.reviews"] },
+      { "id": "ecommerce.spec.transactional-integrity.purchasing", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1410, "from": "## Transactional integrity: purchasing", "until": "## Transactional integrity: warehouse accounting", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.purchasing"] },
+      { "id": "ecommerce.spec.transactional-integrity.warehouse-accounting", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1420, "from": "## Transactional integrity: warehouse accounting", "until": "## External data synchronization", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.purchasing", "ecommerce.feature.warehouse-admin"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "unique-review", "source": "scenarios/01-review-uniqueness-2.4.0.json", "feature": 6, "criteria": ["6b"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.reviews"] },
+    { "id": "server-price", "source": "scenarios/01-server-price-2.4.0.json", "feature": 104, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.purchasing"] },
+    { "id": "books-balance", "source": "scenarios/01-books-balance-2.4.0.json", "feature": 107, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.purchasing", "ecommerce.feature.warehouse-admin"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/packs/spec-transactional-integrity-1.4.0.json b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-transactional-integrity-1.4.0.json
new file mode 100644
index 00000000000..af875a24117
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/packs/spec-transactional-integrity-1.4.0.json
@@ -0,0 +1,30 @@
+{
+  "schemaVersion": 1,
+  "kind": "test-pack",
+  "id": "ecommerce.spec.transactional-integrity",
+  "version": "1.4.0",
+  "state": "draft",
+  "title": "Transactional integrity",
+  "moduleType": "specification",
+  "description": "Server authority, accounting, valid quantities, and unique reviews.",
+  "requiresPacks": [],
+  "conflictsWith": [],
+  "capabilities": ["browser", "database-observation", "direct-server-call"],
+  "evidence": ["browser-observation", "database-observation", "server-response"],
+  "budget": { "status": "bounded", "maxRuntimeMs": 75000 },
+  "task": {
+    "requirements": [
+      { "id": "ecommerce.spec.transactional-integrity.reviews", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1400, "from": "## Transactional integrity: reviews", "until": "## Transactional integrity: purchasing", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.reviews"] },
+      { "id": "ecommerce.spec.transactional-integrity.purchasing", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1410, "from": "## Transactional integrity: purchasing", "until": "## Transactional integrity: warehouse accounting", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.purchasing"] },
+      { "id": "ecommerce.spec.transactional-integrity.warehouse-accounting", "path": "prompts/modular/l1-specifications-1.1.0.md", "order": 1420, "from": "## Transactional integrity: warehouse accounting", "until": "## External data synchronization", "modes": ["fresh"], "requiresFeatures": ["ecommerce.feature.purchasing", "ecommerce.feature.warehouse-admin"] }
+    ],
+    "contracts": []
+  },
+  "checks": [
+    { "id": "unique-review", "source": "scenarios/01-review-uniqueness-2.4.0.json", "feature": 6, "criteria": ["6b"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.reviews"] },
+    { "id": "server-price", "source": "scenarios/01-server-price-2.4.0.json", "feature": 104, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.purchasing"] },
+    { "id": "books-balance", "source": "scenarios/progression-books-balance-1.0.0.json", "feature": 107, "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.feature.purchasing", "ecommerce.feature.warehouse-admin"] },
+    { "id": "stock-transfer-overdraw", "source": "scenarios/02-strengthened-1.4.0.json", "feature": 2, "criteria": ["2c"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.l2.stock-transfers-features"] },
+    { "id": "stock-alert-deduplication", "source": "scenarios/progression-stock-alerts-1.0.0.json", "feature": 631, "criteria": ["631a"], "role": "guarantee", "observations": ["requested", "unmentioned"], "requiresFeatures": ["ecommerce.progression.stock-alerts"] }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/promotions.json b/tools/stack-bench/tracks/ecommerce/composition/promotions.json
new file mode 100644
index 00000000000..d319a232970
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/promotions.json
@@ -0,0 +1,25 @@
+{
+  "schemaVersion": 1,
+  "kind": "promotion-catalog",
+  "id": "ecommerce.recipes",
+  "version": "2.0.0",
+  "state": "draft",
+  "title": "Ecommerce recipe releases",
+  "entries": [
+    {
+      "alias": "L1",
+      "status": "candidate",
+      "recipe": { "path": "recipes/sequential-l1-2.5.0.json", "id": "ecommerce.sequential-l1", "version": "2.5.0" }
+    },
+    {
+      "alias": "L2",
+      "status": "candidate",
+      "recipe": { "path": "recipes/sequential-l2-1.6.0.json", "id": "ecommerce.sequential-l2", "version": "1.6.0" }
+    },
+    {
+      "alias": "L3",
+      "status": "candidate",
+      "recipe": { "path": "recipes/sequential-l3-1.0.0.json", "id": "ecommerce.sequential-l3", "version": "1.0.0" }
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/recipes/progression-catalog-2.0.2.json b/tools/stack-bench/tracks/ecommerce/composition/recipes/progression-catalog-2.0.2.json
new file mode 100644
index 00000000000..6c6e85a1013
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/recipes/progression-catalog-2.0.2.json
@@ -0,0 +1,536 @@
+{
+  "schemaVersion": 1,
+  "kind": "benchmark-recipe",
+  "id": "ecommerce.progression-catalog",
+  "version": "2.0.2",
+  "state": "draft",
+  "title": "Ecommerce progression catalog",
+  "track": "ecommerce",
+  "fixture": {
+    "path": "../fixtures/operations-1.0.1.json",
+    "id": "ecommerce.operations",
+    "version": "1.0.1"
+  },
+  "task": {
+    "mode": "action",
+    "framing": {
+      "requirements": [
+        {
+          "id": "ecommerce.progression.fresh",
+          "path": "prompts/modular/progression-framing-1.0.0.md",
+          "order": 0,
+          "until": "## Existing application",
+          "modes": [
+            "fresh"
+          ]
+        },
+        {
+          "id": "ecommerce.progression.upgrade",
+          "path": "prompts/modular/progression-framing-1.0.0.md",
+          "order": 0,
+          "from": "## Existing application",
+          "modes": [
+            "upgrade"
+          ]
+        }
+      ],
+      "contracts": [
+        {
+          "id": "ecommerce.application-interface",
+          "path": "contracts/application-interface-1.0.md",
+          "order": 0,
+          "modes": [
+            "fresh",
+            "upgrade"
+          ]
+        }
+      ]
+    }
+  },
+  "packs": [
+    {
+      "path": "../packs/feature-accounts-1.2.0.json",
+      "id": "ecommerce.feature.accounts",
+      "version": "1.2.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-cart-2.0.0.json",
+      "id": "ecommerce.feature.cart",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-checkout-2.0.0.json",
+      "id": "ecommerce.feature.checkout",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-catalog-items-1.0.0.json",
+      "id": "ecommerce.feature.catalog-items",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-catalog-discovery-1.0.0.json",
+      "id": "ecommerce.feature.catalog-discovery",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-purchasing-1.2.1.json",
+      "id": "ecommerce.feature.purchasing",
+      "version": "1.2.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-reviews-1.2.2.json",
+      "id": "ecommerce.feature.reviews",
+      "version": "1.2.2",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-warehouse-admin-1.2.1.json",
+      "id": "ecommerce.feature.warehouse-admin",
+      "version": "1.2.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-inventory-conservation-specifications-1.0.0.json",
+      "id": "ecommerce.progression.inventory-conservation-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/l2-inventory-dashboard-2.0.0.json",
+      "id": "ecommerce.l2.inventory-dashboard",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l2-sales-dashboard-2.0.0.json",
+      "id": "ecommerce.l2.sales-dashboard",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l2-recommendations-2.0.0.json",
+      "id": "ecommerce.l2.recommendations",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l2-order-cancellation-features-1.0.1.json",
+      "id": "ecommerce.l2.order-cancellation-features",
+      "version": "1.0.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l2-price-history-features-2.0.2.json",
+      "id": "ecommerce.l2.price-history-features",
+      "version": "2.0.2",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l2-stock-transfers-features-1.0.1.json",
+      "id": "ecommerce.l2.stock-transfers-features",
+      "version": "1.0.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l3-cart-expiration-features-2.0.0.json",
+      "id": "ecommerce.l3.cart-expiration-features",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l3-deferred-access-specifications-1.0.0.json",
+      "id": "ecommerce.l3.deferred-access-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/l3-deferred-durability-specifications-1.0.0.json",
+      "id": "ecommerce.l3.deferred-durability-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/l3-deferred-integrity-specifications-1.0.0.json",
+      "id": "ecommerce.l3.deferred-integrity-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/l3-order-delivery-features-1.1.1.json",
+      "id": "ecommerce.l3.order-delivery-features",
+      "version": "1.1.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l3-order-returns-features-1.1.1.json",
+      "id": "ecommerce.l3.order-returns-features",
+      "version": "1.1.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l3-reservations-features-2.0.0.json",
+      "id": "ecommerce.l3.reservations-features",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l3-scheduled-restocks-features-1.1.1.json",
+      "id": "ecommerce.l3.scheduled-restocks-features",
+      "version": "1.1.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l3-server-time-specifications-1.0.0.json",
+      "id": "ecommerce.l3.server-time-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/progression-fulfilment-queue-1.0.1.json",
+      "id": "ecommerce.progression.fulfilment-queue",
+      "version": "1.0.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-operations-access-specifications-1.0.0.json",
+      "id": "ecommerce.progression.operations-access-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/progression-automatic-reorder-2.0.1.json",
+      "id": "ecommerce.progression.automatic-reorder",
+      "version": "2.0.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-cancellation-accounting-specifications-1.0.0.json",
+      "id": "ecommerce.progression.cancellation-accounting-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/progression-cancellation-queue-specifications-1.0.0.json",
+      "id": "ecommerce.progression.cancellation-queue-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/progression-cart-recovery-2.0.0.json",
+      "id": "ecommerce.progression.cart-recovery",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-catalog-management-1.0.3.json",
+      "id": "ecommerce.progression.catalog-management",
+      "version": "1.0.3",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-customer-profile-1.0.0.json",
+      "id": "ecommerce.progression.customer-profile",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-delivery-notifications-1.0.1.json",
+      "id": "ecommerce.progression.delivery-notifications",
+      "version": "1.0.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-faceted-search-1.0.1.json",
+      "id": "ecommerce.progression.faceted-search",
+      "version": "1.0.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-managed-support-1.0.0.json",
+      "id": "ecommerce.progression.managed-support",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-notification-preferences-1.0.0.json",
+      "id": "ecommerce.progression.notification-preferences",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-order-support-1.0.1.json",
+      "id": "ecommerce.progression.order-support",
+      "version": "1.0.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-payment-records-2.0.0.json",
+      "id": "ecommerce.progression.payment-records",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-personalized-recommendations-2.0.0.json",
+      "id": "ecommerce.progression.personalized-recommendations",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-price-accounting-specifications-1.0.0.json",
+      "id": "ecommerce.progression.price-accounting-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/progression-promotion-checkout-2.0.0.json",
+      "id": "ecommerce.progression.promotion-checkout",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-promotion-reporting-2.0.0.json",
+      "id": "ecommerce.progression.promotion-reporting",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-promotion-rules-1.0.1.json",
+      "id": "ecommerce.progression.promotion-rules",
+      "version": "1.0.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-recommendation-feedback-2.0.0.json",
+      "id": "ecommerce.progression.recommendation-feedback",
+      "version": "2.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-review-access-specifications-1.0.0.json",
+      "id": "ecommerce.progression.review-access-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/progression-staff-access-1.0.0.json",
+      "id": "ecommerce.progression.staff-access",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-staff-activity-1.0.3.json",
+      "id": "ecommerce.progression.staff-activity",
+      "version": "1.0.3",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-staff-roles-1.0.1.json",
+      "id": "ecommerce.progression.staff-roles",
+      "version": "1.0.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-stock-alerts-1.0.1.json",
+      "id": "ecommerce.progression.stock-alerts",
+      "version": "1.0.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-support-history-1.0.0.json",
+      "id": "ecommerce.progression.support-history",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-support-privacy-specifications-1.0.0.json",
+      "id": "ecommerce.progression.support-privacy-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/progression-support-intake-1.0.0.json",
+      "id": "ecommerce.progression.support-intake",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-support-refunds-1.0.1.json",
+      "id": "ecommerce.progression.support-refunds",
+      "version": "1.0.1",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/progression-support-triage-1.0.0.json",
+      "id": "ecommerce.progression.support-triage",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/spec-access-control-2.0.1.json",
+      "id": "ecommerce.spec.access-control",
+      "version": "2.0.1",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-concurrency-safety-2.0.1.json",
+      "id": "ecommerce.spec.concurrency-safety",
+      "version": "2.0.1",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-external-data-sync-1.2.0.json",
+      "id": "ecommerce.spec.external-data-sync",
+      "version": "1.2.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-live-state-2.0.0.json",
+      "id": "ecommerce.spec.live-state",
+      "version": "2.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-state-durability-2.0.1.json",
+      "id": "ecommerce.spec.state-durability",
+      "version": "2.0.1",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-transactional-integrity-1.4.0.json",
+      "id": "ecommerce.spec.transactional-integrity",
+      "version": "1.4.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    }
+  ],
+  "execution": "all-selected-sources",
+  "scoring": {
+    "mode": "source-points"
+  }
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/recipes/progression-depth3-2.0.2.json b/tools/stack-bench/tracks/ecommerce/composition/recipes/progression-depth3-2.0.2.json
new file mode 100644
index 00000000000..e888af2dfe3
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/recipes/progression-depth3-2.0.2.json
@@ -0,0 +1,73 @@
+{
+  "schemaVersion": 1,
+  "kind": "benchmark-recipe",
+  "id": "ecommerce.progression-depth3",
+  "version": "2.0.2",
+  "state": "draft",
+  "title": "Ecommerce progression through depth 3",
+  "track": "ecommerce",
+  "fixture": { "path": "../fixtures/operations-1.0.1.json", "id": "ecommerce.operations", "version": "1.0.1" },
+  "task": {
+    "mode": "action",
+    "framing": {
+      "requirements": [
+        { "id": "ecommerce.progression.fresh", "path": "prompts/modular/progression-framing-1.0.0.md", "order": 0, "until": "## Existing application", "modes": ["fresh"] },
+        { "id": "ecommerce.progression.upgrade", "path": "prompts/modular/progression-framing-1.0.0.md", "order": 0, "from": "## Existing application", "modes": ["upgrade"] }
+      ],
+      "contracts": [
+        {
+          "id": "ecommerce.application-interface",
+          "path": "contracts/application-interface-1.0.md",
+          "order": 0,
+          "modes": ["fresh", "upgrade"]
+        }
+      ]
+    }
+  },
+  "packs": [
+    { "path": "../packs/feature-accounts-1.2.0.json", "id": "ecommerce.feature.accounts", "version": "1.2.0", "includeRoles": ["feature"] },
+    { "path": "../packs/feature-cart-2.0.0.json", "id": "ecommerce.feature.cart", "version": "2.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/feature-checkout-2.0.0.json", "id": "ecommerce.feature.checkout", "version": "2.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/feature-catalog-items-1.0.0.json", "id": "ecommerce.feature.catalog-items", "version": "1.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/feature-catalog-discovery-1.0.0.json", "id": "ecommerce.feature.catalog-discovery", "version": "1.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/feature-purchasing-1.2.1.json", "id": "ecommerce.feature.purchasing", "version": "1.2.1", "includeRoles": ["feature"] },
+    { "path": "../packs/feature-reviews-1.2.2.json", "id": "ecommerce.feature.reviews", "version": "1.2.2", "includeRoles": ["feature"] },
+    { "path": "../packs/feature-warehouse-admin-1.2.1.json", "id": "ecommerce.feature.warehouse-admin", "version": "1.2.1", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-inventory-conservation-specifications-1.0.0.json", "id": "ecommerce.progression.inventory-conservation-specifications", "version": "1.0.0", "includeRoles": ["guarantee"], "includeCheckGroups": ["stock-conservation-directional", "stock-conservation-cancel", "stock-conservation-fresh-client", "stock-conservation-contention"] },
+    { "path": "../packs/l2-inventory-dashboard-2.0.0.json", "id": "ecommerce.l2.inventory-dashboard", "version": "2.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/l2-sales-dashboard-2.0.0.json", "id": "ecommerce.l2.sales-dashboard", "version": "2.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/l2-recommendations-2.0.0.json", "id": "ecommerce.l2.recommendations", "version": "2.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/l2-order-cancellation-features-1.0.1.json", "id": "ecommerce.l2.order-cancellation-features", "version": "1.0.1", "includeRoles": ["feature"] },
+    { "path": "../packs/l2-stock-transfers-features-1.0.1.json", "id": "ecommerce.l2.stock-transfers-features", "version": "1.0.1", "includeRoles": ["feature"] },
+    { "path": "../packs/l3-deferred-access-specifications-1.0.0.json", "id": "ecommerce.l3.deferred-access-specifications", "version": "1.0.0", "includeRoles": ["guarantee"], "includeCheckGroups": ["customer-refused"] },
+    { "path": "../packs/l3-deferred-durability-specifications-1.0.0.json", "id": "ecommerce.l3.deferred-durability-specifications", "version": "1.0.0", "includeRoles": ["guarantee"], "includeCheckGroups": ["restock-restart"] },
+    { "path": "../packs/l3-deferred-integrity-specifications-1.0.0.json", "id": "ecommerce.l3.deferred-integrity-specifications", "version": "1.0.0", "includeRoles": ["guarantee"], "includeCheckGroups": ["restock-once"] },
+    { "path": "../packs/l3-scheduled-restocks-features-1.1.1.json", "id": "ecommerce.l3.scheduled-restocks-features", "version": "1.1.1", "includeRoles": ["feature"] },
+    { "path": "../packs/l3-server-time-specifications-1.0.0.json", "id": "ecommerce.l3.server-time-specifications", "version": "1.0.0", "includeRoles": ["guarantee"], "includeCheckGroups": ["not-early"] },
+    { "path": "../packs/progression-fulfilment-queue-1.0.1.json", "id": "ecommerce.progression.fulfilment-queue", "version": "1.0.1", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-operations-access-specifications-1.0.0.json", "id": "ecommerce.progression.operations-access-specifications", "version": "1.0.0", "includeRoles": ["guarantee"], "includeCheckGroups": ["operator-transfer-authorization", "operator-authorization-direct", "order-owner-direct"] },
+    { "path": "../packs/progression-cancellation-accounting-specifications-1.0.0.json", "id": "ecommerce.progression.cancellation-accounting-specifications", "version": "1.0.0", "includeRoles": ["guarantee"], "includeCheckGroups": ["cancellation-accounting"] },
+    { "path": "../packs/progression-catalog-management-1.0.3.json", "id": "ecommerce.progression.catalog-management", "version": "1.0.3", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-customer-profile-1.0.0.json", "id": "ecommerce.progression.customer-profile", "version": "1.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-faceted-search-1.0.1.json", "id": "ecommerce.progression.faceted-search", "version": "1.0.1", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-managed-support-1.0.0.json", "id": "ecommerce.progression.managed-support", "version": "1.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-notification-preferences-1.0.0.json", "id": "ecommerce.progression.notification-preferences", "version": "1.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-promotion-rules-1.0.1.json", "id": "ecommerce.progression.promotion-rules", "version": "1.0.1", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-review-access-specifications-1.0.0.json", "id": "ecommerce.progression.review-access-specifications", "version": "1.0.0", "includeRoles": ["guarantee"] },
+    { "path": "../packs/progression-staff-access-1.0.0.json", "id": "ecommerce.progression.staff-access", "version": "1.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-staff-roles-1.0.1.json", "id": "ecommerce.progression.staff-roles", "version": "1.0.1", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-stock-alerts-1.0.1.json", "id": "ecommerce.progression.stock-alerts", "version": "1.0.1", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-support-history-1.0.0.json", "id": "ecommerce.progression.support-history", "version": "1.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-support-privacy-specifications-1.0.0.json", "id": "ecommerce.progression.support-privacy-specifications", "version": "1.0.0", "includeRoles": ["guarantee"] },
+    { "path": "../packs/progression-support-intake-1.0.0.json", "id": "ecommerce.progression.support-intake", "version": "1.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/progression-support-triage-1.0.0.json", "id": "ecommerce.progression.support-triage", "version": "1.0.0", "includeRoles": ["feature"] },
+    { "path": "../packs/spec-access-control-2.0.1.json", "id": "ecommerce.spec.access-control", "version": "2.0.1", "includeRoles": ["guarantee"], "includeCheckGroups": ["cart-boundary", "customer-profile-privacy", "fulfilment-area-boundary", "managed-support-privacy", "notification-preferences-privacy", "order-ownership", "promotion-management-boundary", "purchase-attribution", "purchase-session", "review-eligibility", "signed-out-purchase", "staff-area-boundary", "staff-role-boundary", "stock-alert-privacy", "support-history-privacy", "warehouse-area-boundary", "warehouse-write-boundary"] },
+    { "path": "../packs/spec-concurrency-safety-2.0.1.json", "id": "ecommerce.spec.concurrency-safety", "version": "2.0.1", "includeRoles": ["guarantee"], "includeCheckGroups": ["duplicate-checkout", "last-unit", "restock-race"] },
+    { "path": "../packs/spec-external-data-sync-1.2.0.json", "id": "ecommerce.spec.external-data-sync", "version": "1.2.0", "includeRoles": ["guarantee"], "includeCheckGroups": ["external-live", "external-reload", "external-server-restart", "external-reconnect"] },
+    { "path": "../packs/spec-live-state-2.0.0.json", "id": "ecommerce.spec.live-state", "version": "2.0.0", "includeRoles": ["guarantee"], "includeCheckGroups": ["fulfilment-queue", "inventory-dashboard", "managed-support", "open-list", "purchase-stock", "ranking", "rating", "sales-dashboard", "shared-cart", "stock-transfers", "warehouse-stock"] },
+    { "path": "../packs/spec-state-durability-2.0.1.json", "id": "ecommerce.spec.state-durability", "version": "2.0.1", "includeRoles": ["guarantee"], "includeCheckGroups": ["account-state-reload", "account-state-reconnect", "cart-reload", "customer-profile-reload", "notification-preferences-reload", "session-reload", "staff-role-reload", "support-history-reload"] },
+    { "path": "../packs/spec-transactional-integrity-1.4.0.json", "id": "ecommerce.spec.transactional-integrity", "version": "1.4.0", "includeRoles": ["guarantee"], "includeCheckGroups": ["books-balance", "server-price", "stock-alert-deduplication", "stock-transfer-overdraw", "unique-review"] }
+  ],
+  "execution": "all-selected-sources",
+  "scoring": { "mode": "source-points" }
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/recipes/sequential-l1-2.5.0.json b/tools/stack-bench/tracks/ecommerce/composition/recipes/sequential-l1-2.5.0.json
new file mode 100644
index 00000000000..df084918479
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/recipes/sequential-l1-2.5.0.json
@@ -0,0 +1,368 @@
+{
+  "schemaVersion": 1,
+  "kind": "benchmark-recipe",
+  "id": "ecommerce.sequential-l1",
+  "version": "2.5.0",
+  "state": "draft",
+  "title": "Ecommerce sequential L1",
+  "track": "ecommerce",
+  "sequence": { "level": 1 },
+  "fixture": {
+    "path": "../fixtures/storefront-1.0.1.json",
+    "id": "ecommerce.storefront",
+    "version": "1.0.1"
+  },
+  "task": {
+    "mode": "fresh",
+    "framing": {
+      "requirements": [
+        {
+          "id": "ecommerce.sequential-l1.framing",
+          "path": "prompts/modular/l1-framing.md",
+          "order": 0,
+          "modes": [
+            "fresh"
+          ]
+        }
+      ],
+      "contracts": [
+        {
+          "id": "ecommerce.sequential-l1.interface",
+          "path": "prompts/modular/l1-hooks.md",
+          "order": 1900,
+          "from": "## Public application interface",
+          "until": "## Catalog controls",
+          "modes": [
+            "fresh"
+          ]
+        },
+        {
+          "id": "ecommerce.sequential-l1.purchase-action-input",
+          "path": "prompts/modular/l1-action-inputs-1.1.0.md",
+          "order": 2210,
+          "from": "## Purchase action input",
+          "until": "## Cart quantity action input",
+          "modes": [
+            "fresh"
+          ],
+          "requiresFeatures": [
+            "ecommerce.feature.purchasing"
+          ]
+        },
+        {
+          "id": "ecommerce.sequential-l1.cart-action-input",
+          "path": "prompts/modular/l1-action-inputs-1.1.0.md",
+          "order": 2410,
+          "from": "## Cart quantity action input",
+          "until": "## Restock action input",
+          "modes": [
+            "fresh"
+          ],
+          "requiresFeatures": [
+            "ecommerce.feature.cart-checkout"
+          ]
+        },
+        {
+          "id": "ecommerce.sequential-l1.restock-action-input",
+          "path": "prompts/modular/l1-action-inputs-1.1.0.md",
+          "order": 2510,
+          "from": "## Restock action input",
+          "modes": [
+            "fresh"
+          ],
+          "requiresFeatures": [
+            "ecommerce.feature.warehouse-admin"
+          ]
+        },
+        {
+          "id": "ecommerce.sequential-l1.startup-probe",
+          "path": "prompts/fragments/startup-probe-1.0.0.md",
+          "order": 2600,
+          "modes": [
+            "fresh"
+          ],
+          "requiresFeatures": [
+            "ecommerce.feature.catalog"
+          ]
+        }
+      ]
+    }
+  },
+  "packs": [
+    {
+      "path": "../packs/feature-accounts-1.1.0.json",
+      "id": "ecommerce.feature.accounts",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-catalog-1.1.0.json",
+      "id": "ecommerce.feature.catalog",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-purchasing-1.1.0.json",
+      "id": "ecommerce.feature.purchasing",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-cart-checkout-1.2.0.json",
+      "id": "ecommerce.feature.cart-checkout",
+      "version": "1.2.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-reviews-1.1.0.json",
+      "id": "ecommerce.feature.reviews",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-warehouse-admin-1.1.0.json",
+      "id": "ecommerce.feature.warehouse-admin",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/spec-access-control-1.2.0.json",
+      "id": "ecommerce.spec.access-control",
+      "version": "1.2.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-state-durability-1.1.0.json",
+      "id": "ecommerce.spec.state-durability",
+      "version": "1.1.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-live-state-1.2.0.json",
+      "id": "ecommerce.spec.live-state",
+      "version": "1.2.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-concurrency-safety-1.3.0.json",
+      "id": "ecommerce.spec.concurrency-safety",
+      "version": "1.3.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-transactional-integrity-1.3.0.json",
+      "id": "ecommerce.spec.transactional-integrity",
+      "version": "1.3.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-external-data-sync-1.1.0.json",
+      "id": "ecommerce.spec.external-data-sync",
+      "version": "1.1.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    }
+  ],
+  "execution": [
+    {
+      "id": "account-create",
+      "source": "scenarios/01-account-create-2.4.0.json"
+    },
+    {
+      "id": "account-duplicate",
+      "source": "scenarios/01-account-duplicate-2.4.0.json"
+    },
+    {
+      "id": "account-password",
+      "source": "scenarios/01-account-password-2.4.0.json"
+    },
+    {
+      "id": "account-signout",
+      "source": "scenarios/01-account-signout-2.4.0.json"
+    },
+    {
+      "id": "account-reload",
+      "source": "scenarios/01-account-reload-2.4.0.json"
+    },
+    {
+      "id": "catalog",
+      "source": "scenarios/01-core-2.4.0.json"
+    },
+    {
+      "id": "buying",
+      "source": "scenarios/01-buying-2.4.0.json"
+    },
+    {
+      "id": "cart",
+      "source": "scenarios/01-cart-2.4.0.json"
+    },
+    {
+      "id": "review-visibility",
+      "source": "scenarios/01-review-visibility-2.4.0.json"
+    },
+    {
+      "id": "review-uniqueness",
+      "source": "scenarios/01-review-uniqueness-2.4.0.json"
+    },
+    {
+      "id": "review-rating-live",
+      "source": "scenarios/01-review-rating-live-2.4.0.json"
+    },
+    {
+      "id": "warehouse-admin",
+      "source": "scenarios/01-warehouse-admin-2.4.0.json"
+    },
+    {
+      "id": "warehouse-stock-live",
+      "source": "scenarios/01-warehouse-stock-live-2.4.0.json"
+    },
+    {
+      "id": "purchase-session",
+      "source": "scenarios/01-purchase-session-2.4.0.json"
+    },
+    {
+      "id": "purchase-attribution",
+      "source": "scenarios/01-purchase-attribution-2.4.0.json"
+    },
+    {
+      "id": "admin-write",
+      "source": "scenarios/01-admin-write-2.4.0.json"
+    },
+    {
+      "id": "server-price",
+      "source": "scenarios/01-server-price-2.4.0.json"
+    },
+    {
+      "id": "account-state-reload",
+      "source": "scenarios/01-account-state-reload-2.4.0.json"
+    },
+    {
+      "id": "account-state-reconnect",
+      "source": "scenarios/01-account-state-reconnect-2.4.0.json"
+    },
+    {
+      "id": "order-ownership",
+      "source": "scenarios/01-order-ownership-2.4.0.json"
+    },
+    {
+      "id": "books-balance",
+      "source": "scenarios/01-books-balance-2.4.0.json"
+    },
+    {
+      "id": "review-eligibility",
+      "source": "scenarios/01-review-eligibility-2.4.0.json"
+    },
+    {
+      "id": "cart-boundary",
+      "source": "scenarios/01-cart-boundary-2.4.0.json"
+    },
+    {
+      "id": "last-unit",
+      "source": "scenarios/01-last-unit-2.3.0.json"
+    },
+    {
+      "id": "restock-race",
+      "source": "scenarios/01-restock-race-2.3.0.json"
+    },
+    {
+      "id": "duplicate-checkout",
+      "source": "scenarios/01-duplicate-checkout-2.3.0.json"
+    },
+    {
+      "id": "external-live",
+      "source": "scenarios/01-external-live-sync-1.1.0.json"
+    },
+    {
+      "id": "external-reload",
+      "source": "scenarios/01-external-reload-sync-1.1.0.json"
+    },
+    {
+      "id": "external-server-restart",
+      "source": "scenarios/01-external-server-restart-sync-1.1.0.json"
+    },
+    {
+      "id": "external-reconnect",
+      "source": "scenarios/01-external-reconnect-sync-1.1.0.json"
+    },
+    {
+      "id": "open-list-live",
+      "source": "scenarios/01-open-list-live-2.3.0.json"
+    }
+  ],
+  "scoring": {
+    "mode": "explicit",
+    "weights": {
+      "ecommerce.feature.accounts.accounts.1a": 1,
+      "ecommerce.feature.accounts.accounts.1b": 1,
+      "ecommerce.feature.accounts.accounts.1c": 1,
+      "ecommerce.feature.accounts.accounts.1d": 1,
+      "ecommerce.spec.state-durability.session-reload.1e": 1,
+      "ecommerce.feature.catalog.catalog.2a": 1,
+      "ecommerce.feature.catalog.catalog.2b": 1,
+      "ecommerce.spec.live-state.ranking.2c": 1,
+      "ecommerce.feature.catalog.catalog.2d": 1,
+      "ecommerce.spec.access-control.signed-out-purchase.3a": 1,
+      "ecommerce.spec.live-state.purchase-stock.3b": 2,
+      "ecommerce.feature.purchasing.purchase-order.3c": 1,
+      "ecommerce.spec.concurrency-safety.stock-limit.3d": 2,
+      "ecommerce.feature.cart-checkout.cart.4a": 1,
+      "ecommerce.spec.state-durability.cart-reload.4b": 1,
+      "ecommerce.spec.live-state.shared-cart.4c": 2,
+      "ecommerce.feature.cart-checkout.cart.4d": 2,
+      "ecommerce.feature.reviews.reviews.6a": 2,
+      "ecommerce.spec.transactional-integrity.unique-review.6b": 1,
+      "ecommerce.spec.live-state.rating.6c": 1,
+      "ecommerce.spec.access-control.admin-ui.7a": 1,
+      "ecommerce.feature.warehouse-admin.warehouse-view.7b": 1,
+      "ecommerce.spec.live-state.warehouse-stock.7c": 2,
+      "ecommerce.spec.access-control.purchase-session.101a": 2,
+      "ecommerce.spec.access-control.purchase-attribution.102a": 2,
+      "ecommerce.spec.access-control.admin-write.103a": 2,
+      "ecommerce.spec.transactional-integrity.server-price.104a": 2,
+      "ecommerce.spec.state-durability.account-state-recovery.105a": 1,
+      "ecommerce.spec.state-durability.account-state-recovery.105b": 1,
+      "ecommerce.spec.access-control.order-ownership.106a": 1,
+      "ecommerce.spec.transactional-integrity.books-balance.107a": 1,
+      "ecommerce.spec.transactional-integrity.books-balance.107b": 1,
+      "ecommerce.spec.access-control.review-eligibility.108a": 2,
+      "ecommerce.spec.access-control.review-eligibility.108b": 1,
+      "ecommerce.spec.access-control.cart-boundary.109a": 2,
+      "ecommerce.spec.access-control.cart-boundary.109b": 1,
+      "ecommerce.spec.concurrency-safety.last-unit.201a": 1,
+      "ecommerce.spec.concurrency-safety.last-unit.201b": 1,
+      "ecommerce.spec.concurrency-safety.last-unit.201c": 1,
+      "ecommerce.spec.concurrency-safety.restock-race.202-control": 0,
+      "ecommerce.spec.concurrency-safety.restock-race.202a": 1,
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203a": 1,
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203b": 1,
+      "ecommerce.spec.external-data-sync.external-stock.901a": 1,
+      "ecommerce.spec.external-data-sync.external-stock.901b": 0,
+      "ecommerce.spec.external-data-sync.external-stock.901c": 1,
+      "ecommerce.spec.external-data-sync.external-stock.901d": 1,
+      "ecommerce.spec.live-state.open-list.902a": 1
+    }
+  }
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/recipes/sequential-l2-1.6.0.json b/tools/stack-bench/tracks/ecommerce/composition/recipes/sequential-l2-1.6.0.json
new file mode 100644
index 00000000000..f80d9e56ec0
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/recipes/sequential-l2-1.6.0.json
@@ -0,0 +1,458 @@
+{
+  "schemaVersion": 1,
+  "kind": "benchmark-recipe",
+  "id": "ecommerce.sequential-l2",
+  "version": "1.6.0",
+  "state": "draft",
+  "title": "Ecommerce sequential L2",
+  "track": "ecommerce",
+  "sequence": { "level": 2 },
+  "fixture": {
+    "path": "../fixtures/operations-1.0.1.json",
+    "id": "ecommerce.operations",
+    "version": "1.0.1"
+  },
+  "task": {
+    "mode": "upgrade",
+    "baseRecipe": {
+      "path": "sequential-l1-2.5.0.json",
+      "id": "ecommerce.sequential-l1",
+      "version": "2.5.0"
+    },
+    "framing": {
+      "requirements": [
+        {
+          "id": "ecommerce.l2.introduction",
+          "path": "prompts/02-operations.md",
+          "order": 10,
+          "until": "## New: warehouse staff",
+          "modes": [
+            "upgrade"
+          ]
+        },
+        {
+          "id": "ecommerce.l2.starting-data",
+          "path": "prompts/02-operations.md",
+          "order": 70,
+          "from": "## Starting data",
+          "modes": [
+            "upgrade"
+          ]
+        }
+      ],
+      "contracts": [
+        {
+          "id": "ecommerce.l2.contract-heading",
+          "path": "contracts/appendix-02.md",
+          "order": 2000,
+          "until": "| `app-title`",
+          "modes": [
+            "upgrade"
+          ]
+        },
+        {
+          "id": "ecommerce.l2.contract-footer",
+          "path": "contracts/appendix-02.md",
+          "order": 2070,
+          "from": "Before declaring",
+          "modes": [
+            "upgrade"
+          ]
+        }
+      ]
+    }
+  },
+  "packs": [
+    {
+      "path": "../packs/feature-accounts-1.1.0.json",
+      "id": "ecommerce.feature.accounts",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-catalog-1.1.0.json",
+      "id": "ecommerce.feature.catalog",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-purchasing-1.1.0.json",
+      "id": "ecommerce.feature.purchasing",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-cart-checkout-1.2.0.json",
+      "id": "ecommerce.feature.cart-checkout",
+      "version": "1.2.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-reviews-1.1.0.json",
+      "id": "ecommerce.feature.reviews",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-warehouse-admin-1.1.0.json",
+      "id": "ecommerce.feature.warehouse-admin",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/spec-access-control-1.2.0.json",
+      "id": "ecommerce.spec.access-control",
+      "version": "1.2.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-state-durability-1.1.0.json",
+      "id": "ecommerce.spec.state-durability",
+      "version": "1.1.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-live-state-1.2.0.json",
+      "id": "ecommerce.spec.live-state",
+      "version": "1.2.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-concurrency-safety-1.3.0.json",
+      "id": "ecommerce.spec.concurrency-safety",
+      "version": "1.3.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-transactional-integrity-1.3.0.json",
+      "id": "ecommerce.spec.transactional-integrity",
+      "version": "1.3.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-external-data-sync-1.1.0.json",
+      "id": "ecommerce.spec.external-data-sync",
+      "version": "1.1.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/operations-access-features-1.0.0.json",
+      "id": "ecommerce.operations-access-features",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/operations-access-specifications-1.0.0.json",
+      "id": "ecommerce.operations-access-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/inventory-operations-features-1.2.0.json",
+      "id": "ecommerce.inventory-operations-features",
+      "version": "1.2.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/inventory-operations-specifications-1.0.0.json",
+      "id": "ecommerce.inventory-operations-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/returns-pricing-features-1.1.0.json",
+      "id": "ecommerce.returns-pricing-features",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/returns-pricing-specifications-1.0.0.json",
+      "id": "ecommerce.returns-pricing-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    }
+  ],
+  "execution": [
+    {
+      "id": "account-create@L1",
+      "source": "scenarios/01-account-create-2.4.0.json"
+    },
+    {
+      "id": "account-duplicate@L1",
+      "source": "scenarios/01-account-duplicate-2.4.0.json"
+    },
+    {
+      "id": "account-password@L1",
+      "source": "scenarios/01-account-password-2.4.0.json"
+    },
+    {
+      "id": "account-signout@L1",
+      "source": "scenarios/01-account-signout-2.4.0.json"
+    },
+    {
+      "id": "account-reload@L1",
+      "source": "scenarios/01-account-reload-2.4.0.json"
+    },
+    {
+      "id": "catalog@L1",
+      "source": "scenarios/01-core-2.4.0.json"
+    },
+    {
+      "id": "buying@L1",
+      "source": "scenarios/01-buying-2.4.0.json"
+    },
+    {
+      "id": "cart@L1",
+      "source": "scenarios/01-cart-2.4.0.json"
+    },
+    {
+      "id": "review-visibility@L1",
+      "source": "scenarios/01-review-visibility-2.4.0.json"
+    },
+    {
+      "id": "review-uniqueness@L1",
+      "source": "scenarios/01-review-uniqueness-2.4.0.json"
+    },
+    {
+      "id": "review-rating-live@L1",
+      "source": "scenarios/01-review-rating-live-2.4.0.json"
+    },
+    {
+      "id": "warehouse-admin@L1",
+      "source": "scenarios/01-warehouse-admin-2.4.0.json"
+    },
+    {
+      "id": "warehouse-stock-live@L1",
+      "source": "scenarios/01-warehouse-stock-live-2.4.0.json"
+    },
+    {
+      "id": "purchase-session@L1",
+      "source": "scenarios/01-purchase-session-2.4.0.json"
+    },
+    {
+      "id": "purchase-attribution@L1",
+      "source": "scenarios/01-purchase-attribution-2.4.0.json"
+    },
+    {
+      "id": "admin-write@L1",
+      "source": "scenarios/01-admin-write-2.4.0.json"
+    },
+    {
+      "id": "server-price@L1",
+      "source": "scenarios/01-server-price-2.4.0.json"
+    },
+    {
+      "id": "account-state-reload@L1",
+      "source": "scenarios/01-account-state-reload-2.4.0.json"
+    },
+    {
+      "id": "account-state-reconnect@L1",
+      "source": "scenarios/01-account-state-reconnect-2.4.0.json"
+    },
+    {
+      "id": "order-ownership@L1",
+      "source": "scenarios/01-order-ownership-2.4.0.json"
+    },
+    {
+      "id": "books-balance@L1",
+      "source": "scenarios/01-books-balance-2.4.0.json"
+    },
+    {
+      "id": "review-eligibility@L1",
+      "source": "scenarios/01-review-eligibility-2.4.0.json"
+    },
+    {
+      "id": "cart-boundary@L1",
+      "source": "scenarios/01-cart-boundary-2.4.0.json"
+    },
+    {
+      "id": "last-unit@L1",
+      "source": "scenarios/01-last-unit-2.3.0.json"
+    },
+    {
+      "id": "restock-race@L1",
+      "source": "scenarios/01-restock-race-2.3.0.json"
+    },
+    {
+      "id": "duplicate-checkout@L1",
+      "source": "scenarios/01-duplicate-checkout-2.3.0.json"
+    },
+    {
+      "id": "external-live@L1",
+      "source": "scenarios/01-external-live-sync-1.1.0.json"
+    },
+    {
+      "id": "external-reload@L1",
+      "source": "scenarios/01-external-reload-sync-1.1.0.json"
+    },
+    {
+      "id": "external-server-restart@L1",
+      "source": "scenarios/01-external-server-restart-sync-1.1.0.json"
+    },
+    {
+      "id": "external-reconnect@L1",
+      "source": "scenarios/01-external-reconnect-sync-1.1.0.json"
+    },
+    {
+      "id": "open-list-live@L1",
+      "source": "scenarios/01-open-list-live-2.3.0.json"
+    },
+    {
+      "id": "features-existing@L2",
+      "source": "scenarios/02-features.json"
+    },
+    {
+      "id": "low-stock@L2",
+      "source": "scenarios/02-low-stock-1.4.0.json"
+    },
+    {
+      "id": "invariants-existing@L2",
+      "source": "scenarios/02-invariants.json"
+    },
+    {
+      "id": "queue-warehouse@L2",
+      "source": "scenarios/02-queue-warehouse-1.4.0.json"
+    },
+    {
+      "id": "transfer-totals@L2",
+      "source": "scenarios/02-transfer-totals-1.4.0.json"
+    },
+    {
+      "id": "paid-price-history@L2",
+      "source": "scenarios/02-paid-price-history-1.4.0.json"
+    },
+    {
+      "id": "live-price@L2",
+      "source": "scenarios/02-live-price-1.4.0.json"
+    },
+    {
+      "id": "self-contained@L2",
+      "source": "scenarios/02-self-contained-1.4.0.json"
+    },
+    {
+      "id": "strengthened@L2",
+      "source": "scenarios/02-strengthened-1.4.0.json"
+    },
+    {
+      "id": "server-actions@L2",
+      "source": "scenarios/02-server-actions-1.1.0.json"
+    }
+  ],
+  "scoring": {
+    "mode": "explicit",
+    "weights": {
+      "ecommerce.feature.accounts.accounts.1a": 1,
+      "ecommerce.feature.accounts.accounts.1b": 1,
+      "ecommerce.feature.accounts.accounts.1c": 1,
+      "ecommerce.feature.accounts.accounts.1d": 1,
+      "ecommerce.spec.state-durability.session-reload.1e": 1,
+      "ecommerce.feature.catalog.catalog.2a": 1,
+      "ecommerce.feature.catalog.catalog.2b": 1,
+      "ecommerce.spec.live-state.ranking.2c": 1,
+      "ecommerce.feature.catalog.catalog.2d": 1,
+      "ecommerce.spec.access-control.signed-out-purchase.3a": 1,
+      "ecommerce.spec.live-state.purchase-stock.3b": 2,
+      "ecommerce.feature.purchasing.purchase-order.3c": 1,
+      "ecommerce.spec.concurrency-safety.stock-limit.3d": 2,
+      "ecommerce.feature.cart-checkout.cart.4a": 1,
+      "ecommerce.spec.state-durability.cart-reload.4b": 1,
+      "ecommerce.spec.live-state.shared-cart.4c": 2,
+      "ecommerce.feature.cart-checkout.cart.4d": 2,
+      "ecommerce.feature.reviews.reviews.6a": 2,
+      "ecommerce.spec.transactional-integrity.unique-review.6b": 1,
+      "ecommerce.spec.live-state.rating.6c": 1,
+      "ecommerce.spec.access-control.admin-ui.7a": 1,
+      "ecommerce.feature.warehouse-admin.warehouse-view.7b": 1,
+      "ecommerce.spec.live-state.warehouse-stock.7c": 2,
+      "ecommerce.spec.access-control.purchase-session.101a": 2,
+      "ecommerce.spec.access-control.purchase-attribution.102a": 2,
+      "ecommerce.spec.access-control.admin-write.103a": 2,
+      "ecommerce.spec.transactional-integrity.server-price.104a": 2,
+      "ecommerce.spec.state-durability.account-state-recovery.105a": 1,
+      "ecommerce.spec.state-durability.account-state-recovery.105b": 1,
+      "ecommerce.spec.access-control.order-ownership.106a": 1,
+      "ecommerce.spec.transactional-integrity.books-balance.107a": 1,
+      "ecommerce.spec.transactional-integrity.books-balance.107b": 1,
+      "ecommerce.spec.access-control.review-eligibility.108a": 2,
+      "ecommerce.spec.access-control.review-eligibility.108b": 1,
+      "ecommerce.spec.access-control.cart-boundary.109a": 2,
+      "ecommerce.spec.access-control.cart-boundary.109b": 1,
+      "ecommerce.spec.concurrency-safety.last-unit.201a": 1,
+      "ecommerce.spec.concurrency-safety.last-unit.201b": 1,
+      "ecommerce.spec.concurrency-safety.last-unit.201c": 1,
+      "ecommerce.spec.concurrency-safety.restock-race.202-control": 0,
+      "ecommerce.spec.concurrency-safety.restock-race.202a": 1,
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203a": 1,
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203b": 1,
+      "ecommerce.spec.external-data-sync.external-stock.901a": 1,
+      "ecommerce.spec.external-data-sync.external-stock.901b": 0,
+      "ecommerce.spec.external-data-sync.external-stock.901c": 1,
+      "ecommerce.spec.external-data-sync.external-stock.901d": 1,
+      "ecommerce.spec.live-state.open-list.902a": 1,
+      "ecommerce.operations-access.fulfilment-queue.1a": 2,
+      "ecommerce.operations-access.fulfilment-queue.1b": 1,
+      "ecommerce.operations-access.fulfilment-queue.1c": 2,
+      "ecommerce.operations-access.fulfilment-queue.1d": 1,
+      "ecommerce.operations-access.fulfilment-queue.1e": 2,
+      "ecommerce.inventory-operations.warehouse-transfer.2a": 3,
+      "ecommerce.inventory-operations.warehouse-transfer.2b": 2,
+      "ecommerce.inventory-operations.warehouse-transfer.2c": 2,
+      "ecommerce.returns-pricing.cancellation-and-return.3a": 3,
+      "ecommerce.returns-pricing.cancellation-and-return.3b": 1,
+      "ecommerce.returns-pricing.cancellation-and-return.3c": 3,
+      "ecommerce.returns-pricing.price-history.4a": 3,
+      "ecommerce.returns-pricing.price-history.4b": 2,
+      "ecommerce.returns-pricing.price-history.4c": 3,
+      "ecommerce.inventory-operations.operational-views.5a": 3,
+      "ecommerce.inventory-operations.operational-views.5b": 3,
+      "ecommerce.inventory-operations.operational-views.5c": 2,
+      "ecommerce.inventory-operations.operational-views.5d": 1,
+      "ecommerce.operations-access.operator-authorization.201a": 2,
+      "ecommerce.operations-access.operator-authorization.201b": 2,
+      "ecommerce.inventory-operations.stock-conservation.202a": 2,
+      "ecommerce.inventory-operations.stock-conservation.202b": 2,
+      "ecommerce.inventory-operations.stock-conservation.202c": 1,
+      "ecommerce.returns-pricing.refund-accounting.203a": 3,
+      "ecommerce.returns-pricing.refund-accounting.203b": 2,
+      "ecommerce.operations-access.operator-authorization.201c": 2,
+      "ecommerce.inventory-operations.stock-conservation.202d": 2,
+      "ecommerce.operations-access.order-owner.204a": 2
+    }
+  }
+}
diff --git a/tools/stack-bench/tracks/ecommerce/composition/recipes/sequential-l3-1.0.0.json b/tools/stack-bench/tracks/ecommerce/composition/recipes/sequential-l3-1.0.0.json
new file mode 100644
index 00000000000..25ffb17096e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/composition/recipes/sequential-l3-1.0.0.json
@@ -0,0 +1,557 @@
+{
+  "schemaVersion": 1,
+  "kind": "benchmark-recipe",
+  "id": "ecommerce.sequential-l3",
+  "version": "1.0.0",
+  "state": "draft",
+  "title": "Ecommerce sequential L3",
+  "track": "ecommerce",
+  "sequence": { "level": 3 },
+  "fixture": {
+    "path": "../fixtures/operations-1.0.1.json",
+    "id": "ecommerce.operations",
+    "version": "1.0.1"
+  },
+  "task": {
+    "mode": "upgrade",
+    "baseRecipe": {
+      "path": "sequential-l2-1.6.0.json",
+      "id": "ecommerce.sequential-l2",
+      "version": "1.6.0"
+    },
+    "framing": {
+      "requirements": [
+        {
+          "id": "ecommerce.l3.introduction",
+          "path": "prompts/03-scheduled.md",
+          "order": 10,
+          "until": "## Reservations that expire",
+          "modes": [
+            "upgrade"
+          ]
+        },
+        {
+          "id": "ecommerce.l3.starting-data",
+          "path": "prompts/03-scheduled.md",
+          "order": 3700,
+          "from": "## Starting data",
+          "modes": [
+            "upgrade"
+          ]
+        }
+      ],
+      "contracts": []
+    }
+  },
+  "packs": [
+    {
+      "path": "../packs/feature-accounts-1.1.0.json",
+      "id": "ecommerce.feature.accounts",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-catalog-1.1.0.json",
+      "id": "ecommerce.feature.catalog",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-purchasing-1.1.0.json",
+      "id": "ecommerce.feature.purchasing",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-cart-checkout-1.2.0.json",
+      "id": "ecommerce.feature.cart-checkout",
+      "version": "1.2.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-reviews-1.1.0.json",
+      "id": "ecommerce.feature.reviews",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/feature-warehouse-admin-1.1.0.json",
+      "id": "ecommerce.feature.warehouse-admin",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/spec-access-control-1.2.0.json",
+      "id": "ecommerce.spec.access-control",
+      "version": "1.2.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-state-durability-1.1.0.json",
+      "id": "ecommerce.spec.state-durability",
+      "version": "1.1.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-live-state-1.2.0.json",
+      "id": "ecommerce.spec.live-state",
+      "version": "1.2.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-concurrency-safety-1.3.0.json",
+      "id": "ecommerce.spec.concurrency-safety",
+      "version": "1.3.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-transactional-integrity-1.3.0.json",
+      "id": "ecommerce.spec.transactional-integrity",
+      "version": "1.3.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/spec-external-data-sync-1.1.0.json",
+      "id": "ecommerce.spec.external-data-sync",
+      "version": "1.1.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/operations-access-features-1.0.0.json",
+      "id": "ecommerce.operations-access-features",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/operations-access-specifications-1.0.0.json",
+      "id": "ecommerce.operations-access-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/inventory-operations-features-1.2.0.json",
+      "id": "ecommerce.inventory-operations-features",
+      "version": "1.2.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/inventory-operations-specifications-1.0.0.json",
+      "id": "ecommerce.inventory-operations-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/returns-pricing-features-1.1.0.json",
+      "id": "ecommerce.returns-pricing-features",
+      "version": "1.1.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/returns-pricing-specifications-1.0.0.json",
+      "id": "ecommerce.returns-pricing-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/l3-cart-expiration-features-1.0.0.json",
+      "id": "ecommerce.l3.cart-expiration-features",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l3-deferred-access-specifications-1.0.0.json",
+      "id": "ecommerce.l3.deferred-access-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/l3-deferred-durability-specifications-1.0.0.json",
+      "id": "ecommerce.l3.deferred-durability-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/l3-deferred-integrity-specifications-1.0.0.json",
+      "id": "ecommerce.l3.deferred-integrity-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    },
+    {
+      "path": "../packs/l3-order-delivery-features-1.0.0.json",
+      "id": "ecommerce.l3.order-delivery-features",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l3-reservations-features-1.0.0.json",
+      "id": "ecommerce.l3.reservations-features",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l3-scheduled-restocks-features-1.0.0.json",
+      "id": "ecommerce.l3.scheduled-restocks-features",
+      "version": "1.0.0",
+      "includeRoles": [
+        "feature"
+      ]
+    },
+    {
+      "path": "../packs/l3-server-time-specifications-1.0.0.json",
+      "id": "ecommerce.l3.server-time-specifications",
+      "version": "1.0.0",
+      "includeRoles": [
+        "guarantee"
+      ]
+    }
+  ],
+  "execution": [
+    {
+      "id": "account-create@L1",
+      "source": "scenarios/01-account-create-2.4.0.json"
+    },
+    {
+      "id": "account-duplicate@L1",
+      "source": "scenarios/01-account-duplicate-2.4.0.json"
+    },
+    {
+      "id": "account-password@L1",
+      "source": "scenarios/01-account-password-2.4.0.json"
+    },
+    {
+      "id": "account-signout@L1",
+      "source": "scenarios/01-account-signout-2.4.0.json"
+    },
+    {
+      "id": "account-reload@L1",
+      "source": "scenarios/01-account-reload-2.4.0.json"
+    },
+    {
+      "id": "catalog@L1",
+      "source": "scenarios/01-core-2.4.0.json"
+    },
+    {
+      "id": "buying@L1",
+      "source": "scenarios/01-buying-2.4.0.json"
+    },
+    {
+      "id": "cart@L1",
+      "source": "scenarios/01-cart-2.4.0.json"
+    },
+    {
+      "id": "review-visibility@L1",
+      "source": "scenarios/01-review-visibility-2.4.0.json"
+    },
+    {
+      "id": "review-uniqueness@L1",
+      "source": "scenarios/01-review-uniqueness-2.4.0.json"
+    },
+    {
+      "id": "review-rating-live@L1",
+      "source": "scenarios/01-review-rating-live-2.4.0.json"
+    },
+    {
+      "id": "warehouse-admin@L1",
+      "source": "scenarios/01-warehouse-admin-2.4.0.json"
+    },
+    {
+      "id": "warehouse-stock-live@L1",
+      "source": "scenarios/01-warehouse-stock-live-2.4.0.json"
+    },
+    {
+      "id": "purchase-session@L1",
+      "source": "scenarios/01-purchase-session-2.4.0.json"
+    },
+    {
+      "id": "purchase-attribution@L1",
+      "source": "scenarios/01-purchase-attribution-2.4.0.json"
+    },
+    {
+      "id": "admin-write@L1",
+      "source": "scenarios/01-admin-write-2.4.0.json"
+    },
+    {
+      "id": "server-price@L1",
+      "source": "scenarios/01-server-price-2.4.0.json"
+    },
+    {
+      "id": "account-state-reload@L1",
+      "source": "scenarios/01-account-state-reload-2.4.0.json"
+    },
+    {
+      "id": "account-state-reconnect@L1",
+      "source": "scenarios/01-account-state-reconnect-2.4.0.json"
+    },
+    {
+      "id": "order-ownership@L1",
+      "source": "scenarios/01-order-ownership-2.4.0.json"
+    },
+    {
+      "id": "books-balance@L1",
+      "source": "scenarios/01-books-balance-2.4.0.json"
+    },
+    {
+      "id": "review-eligibility@L1",
+      "source": "scenarios/01-review-eligibility-2.4.0.json"
+    },
+    {
+      "id": "cart-boundary@L1",
+      "source": "scenarios/01-cart-boundary-2.4.0.json"
+    },
+    {
+      "id": "last-unit@L1",
+      "source": "scenarios/01-last-unit-2.3.0.json"
+    },
+    {
+      "id": "restock-race@L1",
+      "source": "scenarios/01-restock-race-2.3.0.json"
+    },
+    {
+      "id": "duplicate-checkout@L1",
+      "source": "scenarios/01-duplicate-checkout-2.3.0.json"
+    },
+    {
+      "id": "external-live@L1",
+      "source": "scenarios/01-external-live-sync-1.1.0.json"
+    },
+    {
+      "id": "external-reload@L1",
+      "source": "scenarios/01-external-reload-sync-1.1.0.json"
+    },
+    {
+      "id": "external-server-restart@L1",
+      "source": "scenarios/01-external-server-restart-sync-1.1.0.json"
+    },
+    {
+      "id": "external-reconnect@L1",
+      "source": "scenarios/01-external-reconnect-sync-1.1.0.json"
+    },
+    {
+      "id": "open-list-live@L1",
+      "source": "scenarios/01-open-list-live-2.3.0.json"
+    },
+    {
+      "id": "features-existing@L2",
+      "source": "scenarios/02-features.json"
+    },
+    {
+      "id": "low-stock@L2",
+      "source": "scenarios/02-low-stock-1.4.0.json"
+    },
+    {
+      "id": "invariants-existing@L2",
+      "source": "scenarios/02-invariants.json"
+    },
+    {
+      "id": "queue-warehouse@L2",
+      "source": "scenarios/02-queue-warehouse-1.4.0.json"
+    },
+    {
+      "id": "transfer-totals@L2",
+      "source": "scenarios/02-transfer-totals-1.4.0.json"
+    },
+    {
+      "id": "paid-price-history@L2",
+      "source": "scenarios/02-paid-price-history-1.4.0.json"
+    },
+    {
+      "id": "live-price@L2",
+      "source": "scenarios/02-live-price-1.4.0.json"
+    },
+    {
+      "id": "self-contained@L2",
+      "source": "scenarios/02-self-contained-1.4.0.json"
+    },
+    {
+      "id": "strengthened@L2",
+      "source": "scenarios/02-strengthened-1.4.0.json"
+    },
+    {
+      "id": "server-actions@L2",
+      "source": "scenarios/02-server-actions-1.1.0.json"
+    },
+    {
+      "id": "cart-expiration@L3",
+      "source": "scenarios/03-cart-expiration-1.0.0.json"
+    },
+    {
+      "id": "deferred-access@L3",
+      "source": "scenarios/03-deferred-access-1.0.0.json"
+    },
+    {
+      "id": "deferred-durability@L3",
+      "source": "scenarios/03-deferred-durability-1.0.0.json"
+    },
+    {
+      "id": "deferred-integrity@L3",
+      "source": "scenarios/03-deferred-integrity-1.0.0.json"
+    },
+    {
+      "id": "order-delivery@L3",
+      "source": "scenarios/03-order-delivery-1.0.0.json"
+    },
+    {
+      "id": "reservations@L3",
+      "source": "scenarios/03-reservations-1.0.0.json"
+    },
+    {
+      "id": "scheduled-restocks@L3",
+      "source": "scenarios/03-scheduled-restocks-1.0.0.json"
+    },
+    {
+      "id": "server-time@L3",
+      "source": "scenarios/03-server-time-1.0.0.json"
+    }
+  ],
+  "scoring": {
+    "mode": "explicit",
+    "weights": {
+      "ecommerce.feature.accounts.accounts.1a": 1,
+      "ecommerce.feature.accounts.accounts.1b": 1,
+      "ecommerce.feature.accounts.accounts.1c": 1,
+      "ecommerce.feature.accounts.accounts.1d": 1,
+      "ecommerce.spec.state-durability.session-reload.1e": 1,
+      "ecommerce.feature.catalog.catalog.2a": 1,
+      "ecommerce.feature.catalog.catalog.2b": 1,
+      "ecommerce.spec.live-state.ranking.2c": 1,
+      "ecommerce.feature.catalog.catalog.2d": 1,
+      "ecommerce.spec.access-control.signed-out-purchase.3a": 1,
+      "ecommerce.spec.live-state.purchase-stock.3b": 2,
+      "ecommerce.feature.purchasing.purchase-order.3c": 1,
+      "ecommerce.spec.concurrency-safety.stock-limit.3d": 2,
+      "ecommerce.feature.cart-checkout.cart.4a": 1,
+      "ecommerce.spec.state-durability.cart-reload.4b": 1,
+      "ecommerce.spec.live-state.shared-cart.4c": 2,
+      "ecommerce.feature.cart-checkout.cart.4d": 2,
+      "ecommerce.feature.reviews.reviews.6a": 2,
+      "ecommerce.spec.transactional-integrity.unique-review.6b": 1,
+      "ecommerce.spec.live-state.rating.6c": 1,
+      "ecommerce.spec.access-control.admin-ui.7a": 1,
+      "ecommerce.feature.warehouse-admin.warehouse-view.7b": 1,
+      "ecommerce.spec.live-state.warehouse-stock.7c": 2,
+      "ecommerce.spec.access-control.purchase-session.101a": 2,
+      "ecommerce.spec.access-control.purchase-attribution.102a": 2,
+      "ecommerce.spec.access-control.admin-write.103a": 2,
+      "ecommerce.spec.transactional-integrity.server-price.104a": 2,
+      "ecommerce.spec.state-durability.account-state-recovery.105a": 1,
+      "ecommerce.spec.state-durability.account-state-recovery.105b": 1,
+      "ecommerce.spec.access-control.order-ownership.106a": 1,
+      "ecommerce.spec.transactional-integrity.books-balance.107a": 1,
+      "ecommerce.spec.transactional-integrity.books-balance.107b": 1,
+      "ecommerce.spec.access-control.review-eligibility.108a": 2,
+      "ecommerce.spec.access-control.review-eligibility.108b": 1,
+      "ecommerce.spec.access-control.cart-boundary.109a": 2,
+      "ecommerce.spec.access-control.cart-boundary.109b": 1,
+      "ecommerce.spec.concurrency-safety.last-unit.201a": 1,
+      "ecommerce.spec.concurrency-safety.last-unit.201b": 1,
+      "ecommerce.spec.concurrency-safety.last-unit.201c": 1,
+      "ecommerce.spec.concurrency-safety.restock-race.202-control": 0,
+      "ecommerce.spec.concurrency-safety.restock-race.202a": 1,
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203a": 1,
+      "ecommerce.spec.concurrency-safety.duplicate-checkout.203b": 1,
+      "ecommerce.spec.external-data-sync.external-stock.901a": 1,
+      "ecommerce.spec.external-data-sync.external-stock.901b": 0,
+      "ecommerce.spec.external-data-sync.external-stock.901c": 1,
+      "ecommerce.spec.external-data-sync.external-stock.901d": 1,
+      "ecommerce.spec.live-state.open-list.902a": 1,
+      "ecommerce.operations-access.fulfilment-queue.1a": 2,
+      "ecommerce.operations-access.fulfilment-queue.1b": 1,
+      "ecommerce.operations-access.fulfilment-queue.1c": 2,
+      "ecommerce.operations-access.fulfilment-queue.1d": 1,
+      "ecommerce.operations-access.fulfilment-queue.1e": 2,
+      "ecommerce.inventory-operations.warehouse-transfer.2a": 3,
+      "ecommerce.inventory-operations.warehouse-transfer.2b": 2,
+      "ecommerce.inventory-operations.warehouse-transfer.2c": 2,
+      "ecommerce.returns-pricing.cancellation-and-return.3a": 3,
+      "ecommerce.returns-pricing.cancellation-and-return.3b": 1,
+      "ecommerce.returns-pricing.cancellation-and-return.3c": 3,
+      "ecommerce.returns-pricing.price-history.4a": 3,
+      "ecommerce.returns-pricing.price-history.4b": 2,
+      "ecommerce.returns-pricing.price-history.4c": 3,
+      "ecommerce.inventory-operations.operational-views.5a": 3,
+      "ecommerce.inventory-operations.operational-views.5b": 3,
+      "ecommerce.inventory-operations.operational-views.5c": 2,
+      "ecommerce.inventory-operations.operational-views.5d": 1,
+      "ecommerce.operations-access.operator-authorization.201a": 2,
+      "ecommerce.operations-access.operator-authorization.201b": 2,
+      "ecommerce.inventory-operations.stock-conservation.202a": 2,
+      "ecommerce.inventory-operations.stock-conservation.202b": 2,
+      "ecommerce.inventory-operations.stock-conservation.202c": 1,
+      "ecommerce.returns-pricing.refund-accounting.203a": 3,
+      "ecommerce.returns-pricing.refund-accounting.203b": 2,
+      "ecommerce.operations-access.operator-authorization.201c": 2,
+      "ecommerce.inventory-operations.stock-conservation.202d": 2,
+      "ecommerce.operations-access.order-owner.204a": 2,
+      "ecommerce.l3.cart-expiration.cart-expiration.304a": 4,
+      "ecommerce.l3.deferred-access.scheduled-work-access.317a": 3,
+      "ecommerce.l3.deferred-durability.restart-survival.311a": 4,
+      "ecommerce.l3.deferred-durability.restart-survival.314a": 4,
+      "ecommerce.l3.deferred-durability.restart-survival.315a": 4,
+      "ecommerce.l3.deferred-durability.restart-survival.316a": 4,
+      "ecommerce.l3.deferred-integrity.exactly-once.311a": 3,
+      "ecommerce.l3.deferred-integrity.exactly-once.312a": 3,
+      "ecommerce.l3.deferred-integrity.stock-conservation.313a": 3,
+      "ecommerce.l3.deferred-integrity.stock-conservation.314a": 3,
+      "ecommerce.l3.order-delivery.order-delivery.303a": 3,
+      "ecommerce.l3.order-delivery.order-delivery.305a": 2,
+      "ecommerce.l3.reservations.reservations.301a": 2,
+      "ecommerce.l3.reservations.reservations.305a": 1,
+      "ecommerce.l3.reservations.reservations.306a": 2,
+      "ecommerce.l3.reservations.reservations.307a": 3,
+      "ecommerce.l3.reservations.reservations.308a": 2,
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.302a": 2,
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.305a": 3,
+      "ecommerce.l3.scheduled-restocks.scheduled-restocks.306a": 2,
+      "ecommerce.l3.server-time.server-time.312a": 3,
+      "ecommerce.l3.server-time.server-time.313a": 3
+    }
+  }
+}
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/accounts-1.2.md b/tools/stack-bench/tracks/ecommerce/contracts/accounts-1.2.md
new file mode 100644
index 00000000000..f673fa1d0f1
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/accounts-1.2.md
@@ -0,0 +1,28 @@
+# Account application interface
+
+Use these exact `id` attributes on the corresponding visible controls. They do not prescribe UI
+structure, data modeling, libraries, or implementation strategy.
+
+| Element ID | Observable element |
+|---|---|
+| `signup-username` | sign-up username input |
+| `signup-password` | sign-up password input |
+| `signup-submit` | sign-up submit control |
+| `signin-toggle` | control that reveals sign-in |
+| `signin-username` | sign-in username input |
+| `signin-password` | sign-in password input |
+| `signin-submit` | sign-in submit control |
+| `current-user` | active account name |
+| `signout` | sign-out control |
+| `auth-error` | visible account error |
+
+Expose the same account writes used by the UI.
+
+<!-- interface:http -->
+Use `POST /api/auth/signup` and `POST /api/auth/signin`. Both accept JSON with
+`username` and `password` fields.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Use the `signUp` and `signIn` reducers. Both take `username` and `password`, in that order.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/appendix-02.md b/tools/stack-bench/tracks/ecommerce/contracts/appendix-02.md
new file mode 100644
index 00000000000..006c91da1f3
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/appendix-02.md
@@ -0,0 +1,96 @@
+
+
+## Appendix: Application interface (required)
+
+Use each interface name below as an exact HTML attribute value. Use `id` for a
+one-off element. Use `data-role` when the same interface can appear more than
+once. These attributes must not change the design, architecture, or selected
+stack.
+
+Rules:
+- Values are exactly as listed in kebab-case.
+- An element that is hidden until a menu/toggle opens still counts, as long as it is in the DOM after its toggle is clicked.
+- Do not add element IDs beyond this list to elements that could be confused with these.
+
+| Element ID | Element |
+|---|---|
+| `app-title` | the app's visible title, `Storefront` |
+| `item-list` | the container holding the storefront's item cards |
+| `item-card` | one per item shown on the storefront; contains that item's name, price and stock |
+| `catalog-link` | control that returns to the storefront catalog |
+| `item-name` | the item's name, inside its card |
+| `item-price` | the item's price, inside its card |
+| `item-stock` | the item's current stock as a number, inside its card |
+| `search-input` | the search box, usable signed out |
+| `signup-username` | username input on the sign-up form |
+| `signup-password` | password input on the sign-up form |
+| `signup-submit` | button that submits the sign-up form |
+| `signin-toggle` | control that reveals the sign-in form; the sign-up form must remain usable after it is clicked |
+| `signin-username` | username input on the sign-in form |
+| `signin-password` | password input on the sign-in form |
+| `signin-submit` | button that submits the sign-in form |
+| `current-user` | the signed-in account's name, shown once signed in |
+| `signout` | control that signs the current account out |
+| `buy-now` | button on an item card that buys one unit immediately; shown only to signed-in customers |
+| `add-to-cart` | button on an item card that adds one unit to the cart; shown only to signed-in customers |
+| `cart-toggle` | control that opens the cart |
+| `cart-count` | the number of items currently in the cart |
+| `orders-toggle` | control that opens the customer's order history |
+| `search-results` | the container holding search results; its item cards use the same controls as the storefront's |
+| `item-detail` | the panel or page showing one item, opened from its card |
+| `review-rating` | the form control choosing a rating from 1 to 5 — an input or a select, so it can be driven by automation |
+| `review-input` | the text input for a new review's comment |
+| `review-submit` | button that submits the review |
+| `review-average` | the item's average rating as a number |
+| `review-item` | one per review on the item, containing its comment; appears without a reload once submitted |
+| `cart-panel` | the cart's container, opened by cart-toggle |
+| `cart-item` | one per line in the cart, containing that item's name |
+| `cart-quantity` | the quantity of a cart line, as a number |
+| `cart-total` | the cart's total price |
+| `checkout-submit` | button that turns the cart into an order |
+| `order-list` | the container holding the customer's orders, opened by orders-toggle |
+| `order-item` | one per order, containing the names of the items bought; set `data-entity-id` to that order's server identifier |
+| `order-total` | an order's total price |
+| `admin-panel` | the admin area's container; present only for an admin account |
+| `admin-item-row` | one per item in the admin item list, containing that item's name |
+| `admin-stock` | an item's total stock in the admin item list, as a number |
+| `admin-warehouse-item` | one per warehouse in the admin warehouse list, containing its name |
+| `admin-location-row` | one per item-in-warehouse holding, containing the item and warehouse it refers to |
+| `admin-location-qty` | the quantity held in one warehouse for one item, as a number |
+| `restock-input` | the input for how many units to add, inside the item-in-warehouse row it restocks — one per admin-location-row, so the row identifies both the item and the warehouse |
+| `restock-submit` | button that applies the restock, inside the same admin-location-row as its restock-input |
+| `admin-revenue` | total revenue across all orders, as a number |
+| `buy-error` | appears when buying an out-of-stock item, or checking out more than is available |
+| `auth-error` | appears on a taken username or a wrong password |
+| `review-error` | appears when reviewing an item the customer has never bought; also if a second review is rejected rather than updating the first |
+| `out-of-stock` | appears once an item's stock reaches zero, without a reload |
+| `empty-cart` | shown before anything is added, and again after checkout empties the cart |
+| `cart-remove` | checked with a populated cart by the application |
+| `admin-link` | present for an admin account and absent for a customer — required in both states |
+| `staff-link` | required in both states — present for staff, absent for a customer |
+| `fulfilment-panel` | the fulfilment area's container |
+| `queue-item` | one per order waiting to ship, oldest first, naming the items it contains |
+| `queue-warehouse` | the warehouse a queued order's item will ship from, inside its queue-item |
+| `queue-depth` | how many orders are waiting, as a number |
+| `ship-submit` | button on a queued order that marks it shipped |
+| `transfer-from` | the control choosing the warehouse a transfer takes stock from, inside the item's admin row |
+| `transfer-to` | the control choosing the warehouse a transfer sends stock to, inside the same row |
+| `transfer-qty` | how many units to transfer |
+| `transfer-submit` | button that performs the transfer |
+| `price-input` | the input for an item's new price, inside its admin row |
+| `price-submit` | button that applies the new price |
+| `low-stock-list` | the container listing items at or below ten units |
+| `low-stock-item` | appears and disappears live as stock crosses the threshold |
+| `warehouse-total` | the number of units a warehouse holds, inside its admin-warehouse-item |
+| `category-row` | one per category in the admin totals, naming the category |
+| `category-units` | units sold in that category, as a number, inside its category-row |
+| `category-revenue` | revenue earned by that category, as a number, inside its category-row |
+| `recommended-list` | the container holding a signed-in customer's recommendations |
+| `recommended-item` | appears once the customer has bought from a category; excludes items already in their cart |
+| `order-status` | an order's state — pending, shipped, cancelled — inside its order-item |
+| `cancel-order` | button on a pending order that cancels it |
+| `return-item` | only on orders that have shipped |
+| `order-error` | appears on a transfer that would overdraw a warehouse, or cancelling an order that already shipped |
+
+Before declaring DEPLOY_COMPLETE, verify the interface by running the contract
+linter (command provided in your build instructions) and fix any failures.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/application-interface-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/application-interface-1.0.md
new file mode 100644
index 00000000000..0406757869e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/application-interface-1.0.md
@@ -0,0 +1,6 @@
+# Application interface
+
+Use each interface name below as an exact HTML attribute value. Use `id` for
+a one-off element. Use `data-role` when the same interface can
+appear more than once. These attributes do not prescribe the layout, data
+model, libraries, or transport.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/cart-2.0.md b/tools/stack-bench/tracks/ecommerce/contracts/cart-2.0.md
new file mode 100644
index 00000000000..78e1720d6a9
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/cart-2.0.md
@@ -0,0 +1,25 @@
+# Cart application interface
+
+Use `catalog-link` to return to the catalog. Use `add-to-cart` inside an `item-card` to add one unit. Use `cart-toggle` to open the cart.
+Use `cart-count` for the total units, `cart-item` for each line, `cart-quantity` for its
+quantity, and `cart-total` for the numeric total. Use `cart-remove` to remove a line and
+`empty-cart` for an empty cart.
+
+Put `data-buy-input` on each `item-card`. Its value is a JSON object containing that item's
+server identifier, for example `{"itemId":42}`. Put `data-cart-input` on each `cart-item`.
+Its value contains the item identifier, for example `{"itemId":42}`.
+
+Expose the same add and quantity-update operations used by the cart controls.
+
+<!-- interface:http -->
+Use `POST /api/cart`. Put `itemId` in the JSON body.
+Use `PATCH /api/cart/:itemId`. Put `quantity` in the JSON body.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Use the `add_to_cart` reducer with the item identifier.
+Use the `update_cart_quantity` reducer with the item identifier and quantity.
+<!-- /interface -->
+
+Use `checkout-submit` to check out. Use `orders-toggle` to open order history and `order-item`
+for each order created by checkout.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/cart-expiration-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/cart-expiration-1.0.md
new file mode 100644
index 00000000000..8bffbeb1c3a
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/cart-expiration-1.0.md
@@ -0,0 +1,5 @@
+# Cart expiration application interface
+
+Use `cart-reservation-timer` inside a `cart-item` for the remaining reservation time in seconds.
+Use `cart-item-expired` inside an expired cart line and `cart-expired-notice` after cart
+expiration.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/catalog-discovery-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/catalog-discovery-1.0.md
new file mode 100644
index 00000000000..cd011cc0829
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/catalog-discovery-1.0.md
@@ -0,0 +1,9 @@
+# Catalog discovery application interface
+
+| Element ID | Required element |
+| --- | --- |
+| `item-list` | Contains the ranked public storefront items. |
+| `item-card` | Shows one storefront or search result. |
+| `item-name` | Shows the item name inside its `item-card`. |
+| `search-input` | Searches the full catalog. |
+| `search-results` | Contains matching `item-card` results. |
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/catalog-items-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/catalog-items-1.0.md
new file mode 100644
index 00000000000..e24c29db06c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/catalog-items-1.0.md
@@ -0,0 +1,10 @@
+# Catalog item application interface
+
+| Element ID | Required element |
+| --- | --- |
+| `item-list` | Contains the public catalog items. |
+| `item-card` | Shows one catalog item. |
+| `item-name` | Shows the item name inside its `item-card`. |
+| `item-price` | Shows the numeric item price inside its `item-card`. |
+| `item-stock` | Shows total stock inside its `item-card`. |
+| `item-detail` | Contains the selected item's details. |
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/catalog-management-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/catalog-management-1.0.md
new file mode 100644
index 00000000000..efd97f6e8e3
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/catalog-management-1.0.md
@@ -0,0 +1,5 @@
+# Catalog management application interface
+
+Use `catalog-name`, `catalog-category`, `catalog-price`, and `catalog-variants` for the product
+values. Use `catalog-save` to add the product. Use `item-variant` for each named variant shown
+to a visitor.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/checkout-2.0.md b/tools/stack-bench/tracks/ecommerce/contracts/checkout-2.0.md
new file mode 100644
index 00000000000..4fbd3ad8aef
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/checkout-2.0.md
@@ -0,0 +1,14 @@
+# Checkout application interface
+
+Use `checkout-submit` to check out and `buy-error` for a failed checkout. Use `orders-toggle`
+to open order history and `order-item` for each order created by checkout.
+
+Expose the same checkout used by `checkout-submit`.
+
+<!-- interface:http -->
+Use `POST /api/checkout`.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Use the `checkout` reducer.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/customer-profile-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/customer-profile-1.0.md
new file mode 100644
index 00000000000..9d325248545
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/customer-profile-1.0.md
@@ -0,0 +1,5 @@
+# Customer profile application interface
+
+Use `profile-link` to open the profile. Use `profile-name` and `profile-address` for the editable
+values. Use `profile-save` to save them. Show the saved address in
+`profile-address-summary`.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/delivery-notifications-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/delivery-notifications-1.0.md
new file mode 100644
index 00000000000..e83383743db
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/delivery-notifications-1.0.md
@@ -0,0 +1,4 @@
+# Delivery notification application interface
+
+Use `notifications-toggle` to open notifications. Use `notification-item` for each notification
+and `notification-unread-count` for the unread total.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/faceted-search-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/faceted-search-1.0.md
new file mode 100644
index 00000000000..1643b197bf9
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/faceted-search-1.0.md
@@ -0,0 +1,12 @@
+# Faceted search application interface
+
+| Element ID | Required element |
+| --- | --- |
+| `category-filter` | Sets the category filter. |
+| `minimum-price` | Sets the inclusive minimum price. |
+| `maximum-price` | Sets the inclusive maximum price. |
+| `in-stock-filter` | Toggles the in-stock-only filter. |
+| `search-results` | Contains the filtered page. |
+| `item-card` | Shows one result inside `search-results`. |
+| `search-next-page` | Opens the next page. |
+| `search-previous-page` | Opens the previous page. |
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/inventory-dashboard-2.0.md b/tools/stack-bench/tracks/ecommerce/contracts/inventory-dashboard-2.0.md
new file mode 100644
index 00000000000..191d748a3ba
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/inventory-dashboard-2.0.md
@@ -0,0 +1,4 @@
+# Inventory dashboard application interface
+
+Use `low-stock-list` for items with 10 units or fewer and `low-stock-item` for each item. Use
+`buy-now` inside an `item-card` to create sales that change available stock.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/l2-order-hooks-1.4.md b/tools/stack-bench/tracks/ecommerce/contracts/l2-order-hooks-1.4.md
new file mode 100644
index 00000000000..4a4219ec23e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/l2-order-hooks-1.4.md
@@ -0,0 +1,4 @@
+| `order-status` | an order's state — pending, shipped, or cancelled — inside its `order-item` |
+| `cancel-order` | button on a pending order that cancels it |
+| `return-item` | only on orders that have shipped |
+| `order-error` | appears on a transfer that would overdraw a warehouse, or cancelling an order that already shipped |
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/l3-hooks-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/l3-hooks-1.0.md
new file mode 100644
index 00000000000..b86b0e1b9c6
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/l3-hooks-1.0.md
@@ -0,0 +1,30 @@
+# Level 3 application interface
+
+## Reservation controls
+
+| Element ID | Element |
+|---|---|
+| `cart-reservation-timer` | remaining reservation time in seconds, inside `cart-item` |
+| `cart-item-expired` | expired marker inside `cart-item` |
+| `cart-expired-notice` | notice shown after cart expiration |
+
+## Scheduled restock controls
+
+| Element ID | Element |
+|---|---|
+| `schedule-restock-item` | item input |
+| `schedule-restock-warehouse` | warehouse input |
+| `schedule-restock-qty` | quantity input |
+| `schedule-restock-delay` | delay in seconds input |
+| `schedule-restock-submit` | schedule button; set `data-action-input` to a JSON object with `item`, `warehouse`, `quantity`, and `delaySeconds` |
+| `pending-restock-item` | pending row with `data-entity-id` |
+| `pending-restock-remaining` | remaining time in seconds inside the pending row |
+| `pending-restock-cancel` | cancel button inside the pending row |
+| `stock-ledger-entry` | completed stock movement row |
+
+## Order delivery controls
+
+| Element ID | Element |
+|---|---|
+| `completed-order-item` | completed order in the staff view |
+| `completed-order-status` | current state inside `completed-order-item` |
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/managed-support-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/managed-support-1.0.md
new file mode 100644
index 00000000000..a39008824f8
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/managed-support-1.0.md
@@ -0,0 +1,17 @@
+# Managed support application interface
+
+## Managed support controls
+
+Use `support-ticket` for each case and set `data-entity-id` to that case's server identifier.
+Within a case, use `support-status` for the current status, `support-reply` for the reply field,
+`support-reply-submit` to send a reply, and `support-reply-item` for each reply.
+
+Expose the same reply operation used by `support-reply-submit`.
+
+<!-- interface:http -->
+Use `POST /api/support/:id/replies`.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Use the `reply_support` reducer.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/notification-preferences-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/notification-preferences-1.0.md
new file mode 100644
index 00000000000..2263e451000
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/notification-preferences-1.0.md
@@ -0,0 +1,5 @@
+# Notification preference application interface
+
+Use `notification-settings` to open the settings. Use `notification-order` and
+`notification-stock` for the choices, and `notification-save` to save them. Each choice exposes
+its current state in `data-state` as `on` or `off`.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/operations-access-1.1.md b/tools/stack-bench/tracks/ecommerce/contracts/operations-access-1.1.md
new file mode 100644
index 00000000000..beb3c2636e8
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/operations-access-1.1.md
@@ -0,0 +1,32 @@
+# Fulfilment application interface
+
+| Element ID | Required element |
+| --- | --- |
+| `staff-link` | Opens the fulfilment area. |
+| `queue-depth` | Shows the number of pending orders. |
+| `queue-item` | Shows one pending order and names its items. |
+| `queue-warehouse` | Shows the selected warehouse inside its `queue-item`. |
+| `ship-submit` | Marks the order in its `queue-item` as shipped. |
+
+Each customer `order-item` must have these attributes:
+
+- `data-ship-input` contains a JSON object with exactly `orderId`.
+- `data-cancel-input` contains a JSON object with exactly `orderId`.
+
+Use the identifier representation required by the selected stack.
+
+<!-- interface:http -->
+Use `POST /api/fulfilment/ship` with `{ "orderId": ... }`.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Use the `ship_order` reducer.
+<!-- /interface -->
+
+<!-- interface:http -->
+Use `POST /api/orders/:id/cancel`.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Use the `cancel_order` reducer.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/order-cancellation-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/order-cancellation-1.0.md
new file mode 100644
index 00000000000..00b3f6bf8f6
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/order-cancellation-1.0.md
@@ -0,0 +1,12 @@
+# Order cancellation application interface
+
+Use `order-status` for an order's state inside its `order-item`. Use `cancel-order` on a pending
+order. Use `catalog-link` to return to the catalog.
+
+<!-- interface:http -->
+Use `POST /api/orders/:id/cancel`.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Use the `cancel_order` reducer.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/order-delivery-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/order-delivery-1.0.md
new file mode 100644
index 00000000000..367882b5d5c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/order-delivery-1.0.md
@@ -0,0 +1,4 @@
+# Order delivery application interface
+
+Use `completed-order-item` for each completed order in the staff view. Use
+`completed-order-status` inside it for the current state.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/order-returns-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/order-returns-1.0.md
new file mode 100644
index 00000000000..4edb48f429d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/order-returns-1.0.md
@@ -0,0 +1,7 @@
+# Order return application interface
+
+Use `return-item` inside an `order-item` for each item that can be returned. Do not show it for a
+pending order. After a return, the same `order-item` contains the word `returned`.
+
+The existing `orders-toggle`, `order-item`, `item-stock`, `admin-revenue`, and `catalog-link`
+interfaces expose the order, stock, and accounting results.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/order-support-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/order-support-1.0.md
new file mode 100644
index 00000000000..64eb31dcac4
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/order-support-1.0.md
@@ -0,0 +1,11 @@
+# Order-linked support application interface
+
+## Order-linked support controls
+
+Within a `support-ticket`, use `support-order-option` for each order that the customer can attach,
+`support-link-order` to attach the selected order, and `support-order` for the attached order. The
+link action must expose its input in `data-action-input` for the named
+`linkSupportOrder` application action.
+
+For HTTP stacks, `linkSupportOrder` is `POST /api/support/cases/{caseId}/order`. For reducer
+stacks, it is `link_support_order(caseId, orderId)`.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/payment-records-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/payment-records-1.0.md
new file mode 100644
index 00000000000..064d0e8ac8d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/payment-records-1.0.md
@@ -0,0 +1,3 @@
+# Payment record application interface
+
+Use `payment-record`, `payment-status`, and `payment-amount` inside the matching `order-item`.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/price-history-2.0.md b/tools/stack-bench/tracks/ecommerce/contracts/price-history-2.0.md
new file mode 100644
index 00000000000..363390aadeb
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/price-history-2.0.md
@@ -0,0 +1,16 @@
+# Price history application interface
+
+Put `price-input` and `price-submit` inside the applicable `admin-item-row`.
+
+Put a `data-price-input` attribute on each `admin-item-row`. Its value is a JSON object with
+`itemId` and numeric `price`. The Gaming Mouse row uses `1.00` as the price. Identifiers can be
+JSON numbers or strings.
+
+For direct authorization actions, server-based stacks expose `POST /api/admin/price` and
+SpacetimeDB exposes `admin_change_price`. These calls use the same authorization and price rules as
+the visible application.
+
+The price-history checks also use `add-to-cart` inside an `item-card`, `cart-toggle`, `cart-total`,
+and `checkout-submit`. Use `orders-toggle`, `order-item`, and `order-total` to inspect the order
+created at checkout. Use `buy-now` inside an `item-card` to create a paid order before a price
+change.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/progression-automatic-reorder-2.0.md b/tools/stack-bench/tracks/ecommerce/contracts/progression-automatic-reorder-2.0.md
new file mode 100644
index 00000000000..77b9b4c5e1e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/progression-automatic-reorder-2.0.md
@@ -0,0 +1,15 @@
+# Automatic reorder application interface
+
+Use these application interface names:
+
+- `reorder-link` opens the automatic reorder rules for warehouse staff.
+- `reorder-item`, `reorder-threshold`, and `reorder-quantity` identify the rule inputs.
+- `reorder-submit` saves the rule.
+- `reorder-rule-item` identifies each saved rule, sets `data-entity-id` to the rule's item
+  identifier, and contains its item name, threshold, quantity, and current state.
+
+Saving a rule is the named `saveReorderRule` application action. For HTTP stacks,
+`saveReorderRule` is `PUT /api/reorders/{itemId}` with `threshold` and `quantity` in the body.
+For reducer stacks, it is `save_reorder_rule(itemId, threshold, quantity)`.
+
+Use `buy-now` inside an `item-card` to create stock changes that evaluate a reorder rule.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/progression-cart-recovery-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/progression-cart-recovery-1.0.md
new file mode 100644
index 00000000000..4166d6b37b8
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/progression-cart-recovery-1.0.md
@@ -0,0 +1,9 @@
+# Cart recovery application interface
+
+Use these application interface names:
+
+- `expired-cart` identifies the expired cart.
+- `restore-cart` restores that cart.
+- `cart-restore-warning` lists the names of items that could not be restored.
+
+The existing `cart-item` control identifies each item restored to the active cart.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/progression-personalized-recommendations-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/progression-personalized-recommendations-1.0.md
new file mode 100644
index 00000000000..f0eb1c10b71
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/progression-personalized-recommendations-1.0.md
@@ -0,0 +1,5 @@
+# Personalized recommendation application interface
+
+Use `recommendations` for the ordered recommendation list. Use `recommended-item` for each
+item in that list. Each item contains its item name. Use `recommendation-rank` inside each item
+for its one-based position in the list.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/promotion-checkout-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/promotion-checkout-1.0.md
new file mode 100644
index 00000000000..82da5035970
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/promotion-checkout-1.0.md
@@ -0,0 +1,4 @@
+# Promotion checkout application interface
+
+Use `cart-promotion` for the code and `apply-promotion` to apply it. Use `promotion-error` when a
+code is refused. Expose the saved discount as `order-discount` inside its `order-item`.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/promotion-reporting-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/promotion-reporting-1.0.md
new file mode 100644
index 00000000000..6366246a68f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/promotion-reporting-1.0.md
@@ -0,0 +1,4 @@
+# Promotion reporting application interface
+
+Use `promotions-link` to open the staff view. Use `promotion-report` for each promotion and
+`promotion-redemptions` and `promotion-revenue` for its totals.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/promotion-rules-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/promotion-rules-1.0.md
new file mode 100644
index 00000000000..f1b2c7a4e7f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/promotion-rules-1.0.md
@@ -0,0 +1,15 @@
+# Promotion rule application interface
+
+Use `promotions-link` for promotion management. Use `promotion-code`, `promotion-discount`,
+`promotion-start`, `promotion-end`, `promotion-limit`, and `promotion-submit` to create a rule.
+List rules as `promotion-item` elements and expose the saved values with the matching field IDs.
+
+Expose the same rule creation used by `promotion-submit`.
+
+<!-- interface:http -->
+Use `POST /api/promotions`.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Use the `create_promotion` reducer.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/purchasing-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/purchasing-1.0.md
new file mode 100644
index 00000000000..fc7b334cadd
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/purchasing-1.0.md
@@ -0,0 +1,19 @@
+# Purchasing application interface
+
+Use `catalog-link` to return to the catalog. Use `buy-now` inside an `item-card` to buy one unit. Use `orders-toggle` to open order history.
+Use `order-item` for each order, `order-total` for its numeric total, and `order-status` for its
+current state. Use `buy-error` or `out-of-stock` for a failed purchase.
+
+Put `data-buy-input` on each `item-card`. Its value is a JSON object containing that item's
+server identifier, for example `{"itemId":42}`. Use the same identifier for the visible buy
+action.
+
+Expose the same purchase used by `buy-now`.
+
+<!-- interface:http -->
+Use `POST /api/items/:id/buy`, where `:id` is the item identifier.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Use the `buy_now` reducer with the item identifier.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/recommendation-feedback-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/recommendation-feedback-1.0.md
new file mode 100644
index 00000000000..0583f7d9e8a
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/recommendation-feedback-1.0.md
@@ -0,0 +1,3 @@
+# Recommendation feedback application interface
+
+Use `dismiss-recommendation` inside each `recommended-item`.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/recommendations-2.0.md b/tools/stack-bench/tracks/ecommerce/contracts/recommendations-2.0.md
new file mode 100644
index 00000000000..9e241369a91
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/recommendations-2.0.md
@@ -0,0 +1,4 @@
+# Recommendations application interface
+
+Use `recommended-list` for recommendations and `recommended-item` for each item in the list. Use
+`buy-now` inside an `item-card` to create customer purchase activity.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/reservations-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/reservations-1.0.md
new file mode 100644
index 00000000000..61f92d9986b
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/reservations-1.0.md
@@ -0,0 +1,5 @@
+# Reservation application interface
+
+Use `cart-reservation-timer` inside a `cart-item` for the remaining reservation time in seconds.
+Use `cart-item-expired` inside an expired cart line and `cart-expired-notice` after cart
+expiration.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/reviews-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/reviews-1.0.md
new file mode 100644
index 00000000000..96edd4d79a1
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/reviews-1.0.md
@@ -0,0 +1,5 @@
+# Review application interface
+
+Use `review-rating` for a one-to-five rating, `review-input` for the comment, and
+`review-submit` to submit it. Use `review-average` for the numeric average, `review-item` for
+each visible review, and `review-error` for a failed submission.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/reviews-1.1.md b/tools/stack-bench/tracks/ecommerce/contracts/reviews-1.1.md
new file mode 100644
index 00000000000..70a453ab33d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/reviews-1.1.md
@@ -0,0 +1,17 @@
+# Review application interface
+
+Use `review-rating` for a one-to-five rating, `review-input` for the comment, and
+`review-submit` to submit it. Put the item's numeric server identifier in
+`data-review-item-id` on `review-submit`. Use `review-average` for the numeric average,
+`review-item` for each visible review, and `review-error` for a failed submission.
+
+Expose the same review operation used by `review-submit`.
+
+<!-- interface:http -->
+Use `POST /api/items/:id/reviews`, where `:id` is the item identifier. Send `rating` and
+`comment` in the request body.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Use the `submit_review` reducer with the item identifier, rating, and comment.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/sales-dashboard-2.0.md b/tools/stack-bench/tracks/ecommerce/contracts/sales-dashboard-2.0.md
new file mode 100644
index 00000000000..03921ad5d07
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/sales-dashboard-2.0.md
@@ -0,0 +1,6 @@
+# Sales dashboard application interface
+
+Use `category-row` for each product category. Use `category-units` and `category-revenue` inside
+each row. Use `admin-link` to open administrator views. Use `recommended-list` for signed-out
+best sellers and `recommended-item` for each item. Use `buy-now` inside an `item-card` to create
+sales activity for the dashboard. Each best seller contains its one-based `recommendation-rank`.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/scheduled-restocks-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/scheduled-restocks-1.0.md
new file mode 100644
index 00000000000..373dd7b7f1e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/scheduled-restocks-1.0.md
@@ -0,0 +1,16 @@
+# Scheduled restock application interface
+
+Use `schedule-restock-item`, `schedule-restock-warehouse`, `schedule-restock-qty`, and
+`schedule-restock-delay` for the inputs. Use `schedule-restock-submit` to schedule the restock.
+Set its `data-action-input` to a JSON object with `item`, `warehouse`, `quantity`, and
+`delaySeconds`. Use `pending-restock-item` for each pending row,
+`pending-restock-remaining` for its remaining seconds, `pending-restock-cancel` to cancel it,
+and `stock-ledger-entry` for a completed stock movement.
+
+<!-- interface:http -->
+Expose `POST /api/admin/scheduled-restocks` and `DELETE /api/admin/scheduled-restocks/:id`.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Expose `schedule_restock` and `cancel_scheduled_restock`.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/staff-access-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/staff-access-1.0.md
new file mode 100644
index 00000000000..f82f4eaa7ff
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/staff-access-1.0.md
@@ -0,0 +1,10 @@
+## Staff access controls
+
+Use the existing account sign-in controls. Use `staff-link` for the staff area and `admin-link`
+for the administrator area.
+
+Use these provided accounts:
+
+- staff: `staff` / `stackbench-staff-2026`
+- administrator: `admin` / `stackbench-admin-2026`
+- customer: `customer` / `stackbench-customer-2026`
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/staff-activity-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/staff-activity-1.0.md
new file mode 100644
index 00000000000..8e65af6c6ba
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/staff-activity-1.0.md
@@ -0,0 +1,4 @@
+# Staff activity application interface
+
+Use `activity-link` to open staff activity history and `activity-entry` for each change. Inside
+each entry, use `activity-actor`, `activity-action`, `activity-subject`, and `activity-time`.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/staff-roles-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/staff-roles-1.0.md
new file mode 100644
index 00000000000..e95390503ac
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/staff-roles-1.0.md
@@ -0,0 +1,16 @@
+# Staff role application interface
+
+Use `staff-role-row` for each staff account and set `data-account-id` to that account's server
+identifier. Put `staff-role-select` and `staff-role-save` inside the row.
+
+The staff sign-in and staff-area controls come from the staff access feature.
+
+Expose the same role assignment used by `staff-role-save`.
+
+<!-- interface:http -->
+Use `PUT /api/staff/:id/role`.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Use the `assign_staff_role` reducer.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/stock-alerts-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/stock-alerts-1.0.md
new file mode 100644
index 00000000000..f874de0af67
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/stock-alerts-1.0.md
@@ -0,0 +1,4 @@
+# Stock alert application interface
+
+Use `stock-alert` inside an unavailable `item-card` to request an alert. Use
+`notifications-toggle` to open notifications and `notification-item` for each alert.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/stock-transfers-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/stock-transfers-1.0.md
new file mode 100644
index 00000000000..13b4c6c7d04
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/stock-transfers-1.0.md
@@ -0,0 +1,16 @@
+# Stock transfer application interface
+
+Put `transfer-from`, `transfer-to`, `transfer-qty`, and `transfer-submit` inside the applicable
+`admin-item-row`. Use `warehouse-total` inside each `admin-warehouse-item` for its numeric stock
+total. Show `order-error` when a transfer is refused.
+
+Put `data-transfer-input` on each `admin-item-row`. Its value is a JSON object with `itemId`,
+`fromWarehouseId`, and `toWarehouseId`. Identifiers can be JSON numbers or strings.
+
+<!-- interface:http -->
+Expose `POST /api/admin/transfer`.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Expose `admin_transfer_stock`.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/support-history-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/support-history-1.0.md
new file mode 100644
index 00000000000..df8082f9e04
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/support-history-1.0.md
@@ -0,0 +1,3 @@
+## Customer support history controls
+
+Use `support-link` to open support history and `support-ticket` for each visible ticket.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/support-intake-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/support-intake-1.0.md
new file mode 100644
index 00000000000..0ec345c52d0
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/support-intake-1.0.md
@@ -0,0 +1,5 @@
+## Support intake controls
+
+Use `support-link` to open support. Use `support-email`, `support-subject`, and
+`support-message` for the ticket fields. Use `support-submit` to submit the ticket and
+`support-reference` to show its reference.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/support-refunds-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/support-refunds-1.0.md
new file mode 100644
index 00000000000..91459fd2cdf
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/support-refunds-1.0.md
@@ -0,0 +1,12 @@
+# Support refund application interface
+
+## Support refund controls
+
+Within a `support-ticket`, use `support-refund` for the refund action and
+`support-refund-total` for the recorded refund amount. The refund action must expose its input in
+`data-action-input` for the named `supportRefund` application action. Within an `order-item`, use
+`order-refund-total` for the refunded amount and `refund-entry` for each refund record. Each
+`refund-entry` includes the order item name.
+
+For HTTP stacks, `supportRefund` is `POST /api/support/cases/{caseId}/refund`. For reducer stacks,
+it is `support_refund(caseId)`.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/support-triage-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/support-triage-1.0.md
new file mode 100644
index 00000000000..4d950935857
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/support-triage-1.0.md
@@ -0,0 +1,5 @@
+## Support triage controls
+
+Use `support-ticket` for each ticket in the staff view. Within a ticket, use
+`support-assignee`, `support-priority`, and `support-status-input` for the editable fields.
+Use `support-update` to apply the changes. Use `support-status` to show the current status.
diff --git a/tools/stack-bench/tracks/ecommerce/contracts/warehouse-administration-1.0.md b/tools/stack-bench/tracks/ecommerce/contracts/warehouse-administration-1.0.md
new file mode 100644
index 00000000000..4cec3c150e4
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/contracts/warehouse-administration-1.0.md
@@ -0,0 +1,28 @@
+# Warehouse administration application interface
+
+Use `admin-link` to open `admin-panel`. Use `admin-item-row` for each item and `admin-stock` for
+its numeric total stock. Use `admin-warehouse-item` for each warehouse. Use `admin-location-row`
+for each item and warehouse holding, with `admin-location-qty` for its quantity. Use
+`restock-input` and `restock-submit` inside that row. Use `admin-revenue` for numeric total
+revenue.
+
+Put a `data-restock-input` attribute on each `admin-location-row`. Its value is a JSON object
+with `itemId`, `warehouseId`, and a valid one-unit `quantity`. Identifiers can be JSON numbers or
+strings.
+
+The restock action uses the same administrator, stock, and warehouse rules as the visible
+application.
+
+## Stock data interface
+
+Other systems read and write stock directly in the database, without calling the application.
+Keep singular tables `item(id, name, price)`, `warehouse(id, name)`, and
+`stock(item_id, warehouse_id, quantity)` as the source of truth for that surface.
+
+<!-- interface:http -->
+Expose `POST /api/admin/restock`.
+<!-- /interface -->
+
+<!-- interface:reducer -->
+Expose `admin_restock`.
+<!-- /interface -->
diff --git a/tools/stack-bench/tracks/ecommerce/progression/ecommerce-2.0.2.json b/tools/stack-bench/tracks/ecommerce/progression/ecommerce-2.0.2.json
new file mode 100644
index 00000000000..69d18586caa
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/progression/ecommerce-2.0.2.json
@@ -0,0 +1,954 @@
+{
+  "schemaVersion": 2,
+  "kind": "progression-definition",
+  "id": "ecommerce.questlines",
+  "version": "2.0.2",
+  "state": "draft",
+  "title": "Ecommerce progression",
+  "nodes": [
+    {
+      "id": "accounts",
+      "title": "Accounts",
+      "questline": "identity-profiles",
+      "featureRefs": [
+        "ecommerce.feature.accounts@1.2.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.feature.accounts@1.2.0#account-create",
+        "ecommerce.feature.accounts@1.2.0#account-duplicate",
+        "ecommerce.feature.accounts@1.2.0#account-password",
+        "ecommerce.feature.accounts@1.2.0#account-signout",
+        "ecommerce.spec.state-durability@2.0.1#session-reload"
+      ],
+      "dependencies": []
+    },
+    {
+      "id": "catalog",
+      "title": "Catalog items",
+      "questline": "catalog-discovery",
+      "featureRefs": [
+        "ecommerce.feature.catalog-items@1.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.feature.catalog-items@1.0.0#values"
+      ],
+      "dependencies": []
+    },
+    {
+      "id": "catalog-discovery",
+      "title": "Catalog discovery",
+      "questline": "catalog-discovery",
+      "featureRefs": [
+        "ecommerce.feature.catalog-discovery@1.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.feature.catalog-discovery@1.0.0#ranking",
+        "ecommerce.feature.catalog-discovery@1.0.0#search"
+      ],
+      "dependencies": [
+        {
+          "id": "catalog",
+          "reason": "Discovery ranks and searches catalog items."
+        }
+      ]
+    },
+    {
+      "id": "customer-profile",
+      "title": "Customer profile",
+      "questline": "identity-profiles",
+      "featureRefs": [
+        "ecommerce.progression.customer-profile@1.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.customer-profile@1.0.0#profile",
+        "ecommerce.spec.access-control@2.0.1#customer-profile-privacy",
+        "ecommerce.spec.state-durability@2.0.1#customer-profile-reload"
+      ],
+      "dependencies": [
+        {
+          "id": "accounts",
+          "reason": "A profile belongs to a customer account."
+        }
+      ]
+    },
+    {
+      "id": "purchasing",
+      "title": "Purchasing and orders",
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.feature.purchasing@1.2.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.feature.purchasing@1.2.1#purchase-order",
+        "ecommerce.spec.access-control@2.0.1#order-ownership",
+        "ecommerce.spec.access-control@2.0.1#purchase-attribution",
+        "ecommerce.spec.access-control@2.0.1#purchase-session",
+        "ecommerce.spec.access-control@2.0.1#signed-out-purchase",
+        "ecommerce.spec.live-state@2.0.0#purchase-stock",
+        "ecommerce.spec.live-state@2.0.0#ranking",
+        "ecommerce.spec.transactional-integrity@1.4.0#server-price"
+      ],
+      "dependencies": [
+        {
+          "id": "accounts",
+          "reason": "A purchase needs a buyer."
+        },
+        {
+          "id": "catalog",
+          "reason": "A purchase needs an item."
+        }
+      ]
+    },
+    {
+      "id": "cart",
+      "title": "Cart",
+      "questline": "shopping-checkout",
+      "featureRefs": [
+        "ecommerce.feature.cart@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.feature.cart@2.0.0#cart",
+        "ecommerce.spec.access-control@2.0.1#cart-boundary",
+        "ecommerce.spec.live-state@2.0.0#shared-cart",
+        "ecommerce.spec.state-durability@2.0.1#cart-reload"
+      ],
+      "dependencies": [
+        {
+          "id": "accounts",
+          "reason": "An account cart belongs to a buyer."
+        },
+        {
+          "id": "catalog",
+          "reason": "A cart contains catalog items."
+        }
+      ]
+    },
+    {
+      "id": "checkout",
+      "title": "Checkout",
+      "questline": "shopping-checkout",
+      "featureRefs": [
+        "ecommerce.feature.checkout@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.feature.checkout@2.0.0#checkout",
+        "ecommerce.spec.concurrency-safety@2.0.1#duplicate-checkout",
+        "ecommerce.spec.state-durability@2.0.1#account-state-reload",
+        "ecommerce.spec.state-durability@2.0.1#account-state-reconnect"
+      ],
+      "dependencies": [
+        {
+          "id": "cart",
+          "reason": "Checkout turns a cart into an order."
+        }
+      ]
+    },
+    {
+      "id": "warehouse-admin",
+      "title": "Warehouse administration",
+      "questline": "inventory",
+      "featureRefs": [
+        "ecommerce.feature.warehouse-admin@1.2.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.feature.warehouse-admin@1.2.1#warehouse-view",
+        "ecommerce.feature.warehouse-admin@1.2.1#admin-write",
+        "ecommerce.spec.access-control@2.0.1#warehouse-area-boundary",
+        "ecommerce.spec.access-control@2.0.1#warehouse-write-boundary",
+        "ecommerce.spec.external-data-sync@1.2.0#external-live",
+        "ecommerce.spec.external-data-sync@1.2.0#external-reconnect",
+        "ecommerce.spec.external-data-sync@1.2.0#external-server-restart",
+        "ecommerce.spec.live-state@2.0.0#warehouse-stock"
+      ],
+      "dependencies": [
+        {
+          "id": "catalog",
+          "reason": "Warehouse stock belongs to catalog items."
+        },
+        {
+          "id": "staff-access",
+          "reason": "Warehouse changes require staff access."
+        }
+      ]
+    },
+    {
+      "id": "reviews",
+      "title": "Reviews",
+      "questline": "reviews",
+      "featureRefs": [
+        "ecommerce.feature.reviews@1.2.2"
+      ],
+      "gradingGroups": [
+        "ecommerce.feature.reviews@1.2.2#reviews",
+        "ecommerce.progression.review-access-specifications@1.0.0#review-eligibility-direct",
+        "ecommerce.spec.access-control@2.0.1#review-eligibility",
+        "ecommerce.spec.live-state@2.0.0#open-list",
+        "ecommerce.spec.live-state@2.0.0#rating",
+        "ecommerce.spec.transactional-integrity@1.4.0#unique-review"
+      ],
+      "dependencies": [
+        {
+          "id": "purchasing",
+          "reason": "A verified review needs a purchase."
+        }
+      ]
+    },
+    {
+      "id": "fulfilment-queue",
+      "title": "Fulfilment queue",
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.progression.fulfilment-queue@1.0.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.fulfilment-queue@1.0.1#fulfilment-ship",
+        "ecommerce.progression.fulfilment-queue@1.0.1#fulfilment-warehouse",
+        "ecommerce.progression.operations-access-specifications@1.0.0#operator-authorization-direct",
+        "ecommerce.spec.access-control@2.0.1#fulfilment-area-boundary",
+        "ecommerce.spec.concurrency-safety@2.0.1#last-unit",
+        "ecommerce.spec.concurrency-safety@2.0.1#restock-race",
+        "ecommerce.spec.live-state@2.0.0#fulfilment-queue"
+      ],
+      "dependencies": [
+        {
+          "id": "purchasing",
+          "reason": "Fulfilment needs orders."
+        },
+        {
+          "id": "warehouse-admin",
+          "reason": "Fulfilment needs warehouse stock."
+        }
+      ]
+    },
+    {
+      "id": "stock-transfers",
+      "title": "Stock transfers",
+      "questline": "inventory",
+      "featureRefs": [
+        "ecommerce.l2.stock-transfers-features@1.0.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.l2.stock-transfers-features@1.0.1#transfer",
+        "ecommerce.progression.inventory-conservation-specifications@1.0.0#stock-conservation-contention",
+        "ecommerce.progression.inventory-conservation-specifications@1.0.0#stock-conservation-directional",
+        "ecommerce.progression.operations-access-specifications@1.0.0#operator-transfer-authorization",
+        "ecommerce.spec.live-state@2.0.0#stock-transfers",
+        "ecommerce.spec.transactional-integrity@1.4.0#stock-transfer-overdraw"
+      ],
+      "dependencies": [
+        {
+          "id": "warehouse-admin",
+          "reason": "Transfers operate on warehouse stock."
+        }
+      ]
+    },
+    {
+      "id": "order-cancellation",
+      "title": "Order cancellation",
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.l2.order-cancellation-features@1.0.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.l2.order-cancellation-features@1.0.1#cancellation-core",
+        "ecommerce.l2.order-cancellation-features@1.0.1#cancellation-history",
+        "ecommerce.progression.inventory-conservation-specifications@1.0.0#stock-conservation-cancel",
+        "ecommerce.progression.inventory-conservation-specifications@1.0.0#stock-conservation-fresh-client",
+        "ecommerce.progression.cancellation-accounting-specifications@1.0.0#cancellation-accounting",
+        "ecommerce.progression.operations-access-specifications@1.0.0#order-owner-direct"
+      ],
+      "dependencies": [
+        {
+          "id": "purchasing",
+          "reason": "Cancellation needs an order."
+        },
+        {
+          "id": "warehouse-admin",
+          "reason": "Cancelled stock returns to its original warehouse."
+        }
+      ]
+    },
+    {
+      "id": "price-history",
+      "title": "Price history",
+      "questline": "catalog-discovery",
+      "featureRefs": [
+        "ecommerce.l2.price-history-features@2.0.2"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.operations-access-specifications@1.0.0#operator-price-authorization",
+        "ecommerce.l2.price-history-features@2.0.2#price-cart-checkout",
+        "ecommerce.l2.price-history-features@2.0.2#price-history-exact",
+        "ecommerce.l2.price-history-features@2.0.2#price-live-independent",
+        "ecommerce.progression.price-accounting-specifications@1.0.0#price-accounting"
+      ],
+      "dependencies": [
+        {
+          "id": "catalog-management",
+          "reason": "Price changes are a catalog management operation."
+        }
+      ]
+    },
+    {
+      "id": "inventory-dashboard",
+      "title": "Inventory dashboard",
+      "questline": "business-operations",
+      "featureRefs": [
+        "ecommerce.l2.inventory-dashboard@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.l2.inventory-dashboard@2.0.0#low-stock",
+        "ecommerce.spec.live-state@2.0.0#inventory-dashboard"
+      ],
+      "dependencies": [
+        {
+          "id": "warehouse-admin",
+          "reason": "The dashboard shows warehouse stock."
+        }
+      ]
+    },
+    {
+      "id": "sales-dashboard",
+      "title": "Sales dashboard",
+      "questline": "business-operations",
+      "featureRefs": [
+        "ecommerce.l2.sales-dashboard@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.l2.sales-dashboard@2.0.0#category-totals",
+        "ecommerce.l2.sales-dashboard@2.0.0#best-sellers",
+        "ecommerce.spec.live-state@2.0.0#sales-dashboard",
+        "ecommerce.spec.transactional-integrity@1.4.0#books-balance"
+      ],
+      "dependencies": [
+        {
+          "id": "purchasing",
+          "reason": "The dashboard summarizes sales."
+        }
+      ]
+    },
+    {
+      "id": "recommendations",
+      "title": "Recommendations",
+      "questline": "recommendations",
+      "featureRefs": [
+        "ecommerce.l2.recommendations@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.l2.recommendations@2.0.0#recommendations"
+      ],
+      "dependencies": [
+        {
+          "id": "cart",
+          "reason": "Recommendations exclude items already in the cart."
+        },
+        {
+          "id": "purchasing",
+          "reason": "Recommendations use customer purchase activity."
+        }
+      ]
+    },
+    {
+      "id": "reservations",
+      "title": "Reservations",
+      "questline": "shopping-checkout",
+      "featureRefs": [
+        "ecommerce.l3.reservations-features@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.l3.deferred-durability-specifications@1.0.0#reservation-restart",
+        "ecommerce.l3.deferred-integrity-specifications@1.0.0#reservation-stock",
+        "ecommerce.l3.deferred-integrity-specifications@1.0.0#reserved-checkout",
+        "ecommerce.l3.reservations-features@2.0.0#checkout",
+        "ecommerce.l3.reservations-features@2.0.0#countdown",
+        "ecommerce.l3.reservations-features@2.0.0#expiry",
+        "ecommerce.l3.reservations-features@2.0.0#renewal",
+        "ecommerce.l3.reservations-features@2.0.0#stock-hold",
+        "ecommerce.l3.server-time-specifications@1.0.0#no-browser"
+      ],
+      "dependencies": [
+        {
+          "id": "checkout",
+          "reason": "Reservations confirm checkout availability."
+        },
+        {
+          "id": "warehouse-admin",
+          "reason": "Reservations hold warehouse stock."
+        }
+      ]
+    },
+    {
+      "id": "order-delivery",
+      "title": "Order delivery",
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.l3.order-delivery-features@1.1.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.cancellation-queue-specifications@1.0.0#queue-removal",
+        "ecommerce.l3.deferred-durability-specifications@1.0.0#delivery-restart",
+        "ecommerce.l3.deferred-integrity-specifications@1.0.0#delivery-once",
+        "ecommerce.l3.order-delivery-features@1.1.1#automatic-delivery",
+        "ecommerce.l3.order-delivery-features@1.1.1#cancel-final"
+      ],
+      "dependencies": [
+        {
+          "id": "fulfilment-queue",
+          "reason": "Delivery follows fulfilment."
+        },
+        {
+          "id": "order-cancellation",
+          "reason": "Delivery must respect final cancellation state."
+        }
+      ]
+    },
+    {
+      "id": "order-returns",
+      "title": "Returns",
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.l3.order-returns-features@1.1.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.l3.order-returns-features@1.1.1#return-complete",
+        "ecommerce.l3.order-returns-features@1.1.1#return-before-shipping"
+      ],
+      "dependencies": [
+        {
+          "id": "order-delivery",
+          "reason": "Only a shipped or delivered item can be returned."
+        }
+      ]
+    },
+    {
+      "id": "scheduled-restocks",
+      "title": "Scheduled restocks",
+      "questline": "inventory",
+      "featureRefs": [
+        "ecommerce.l3.scheduled-restocks-features@1.1.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.l3.deferred-access-specifications@1.0.0#customer-refused",
+        "ecommerce.l3.deferred-durability-specifications@1.0.0#restock-restart",
+        "ecommerce.l3.deferred-integrity-specifications@1.0.0#restock-once",
+        "ecommerce.l3.scheduled-restocks-features@1.1.1#applies",
+        "ecommerce.l3.scheduled-restocks-features@1.1.1#cancels",
+        "ecommerce.l3.scheduled-restocks-features@1.1.1#pending",
+        "ecommerce.l3.server-time-specifications@1.0.0#not-early"
+      ],
+      "dependencies": [
+        {
+          "id": "warehouse-admin",
+          "reason": "Scheduled restocking changes warehouse stock."
+        }
+      ]
+    },
+    {
+      "id": "cart-expiration",
+      "title": "Cart expiration",
+      "questline": "shopping-checkout",
+      "featureRefs": [
+        "ecommerce.l3.cart-expiration-features@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.l3.cart-expiration-features@2.0.0#inactive-cart",
+        "ecommerce.l3.deferred-durability-specifications@1.0.0#cart-restart"
+      ],
+      "dependencies": [
+        {
+          "id": "reservations",
+          "reason": "Expiration releases existing reservations."
+        }
+      ]
+    },
+    {
+      "id": "staff-access",
+      "title": "Staff access",
+      "questline": "staff-access",
+      "featureRefs": [
+        "ecommerce.progression.staff-access@1.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.staff-access@1.0.0#staff-sign-in",
+        "ecommerce.spec.access-control@2.0.1#staff-area-boundary"
+      ],
+      "dependencies": []
+    },
+    {
+      "id": "staff-roles",
+      "title": "Staff roles",
+      "questline": "staff-access",
+      "featureRefs": [
+        "ecommerce.progression.staff-roles@1.0.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.staff-roles@1.0.1#assignment",
+        "ecommerce.spec.access-control@2.0.1#staff-role-boundary",
+        "ecommerce.spec.state-durability@2.0.1#staff-role-reload"
+      ],
+      "dependencies": [
+        {
+          "id": "staff-access",
+          "reason": "Roles apply to staff identities."
+        }
+      ]
+    },
+    {
+      "id": "catalog-management",
+      "title": "Catalog management",
+      "questline": "business-operations",
+      "featureRefs": [
+        "ecommerce.progression.catalog-management@1.0.3"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.catalog-management@1.0.3#products"
+      ],
+      "dependencies": [
+        {
+          "id": "catalog-discovery",
+          "reason": "Staff use catalog discovery to find managed products."
+        },
+        {
+          "id": "staff-roles",
+          "reason": "Catalog changes require an authorized staff role."
+        }
+      ]
+    },
+    {
+      "id": "support-intake",
+      "title": "Support intake",
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.support-intake@1.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.support-intake@1.0.0#ticket-create"
+      ],
+      "dependencies": []
+    },
+    {
+      "id": "support-triage",
+      "title": "Support triage",
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.support-triage@1.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.support-triage@1.0.0#assignment",
+        "ecommerce.progression.support-triage@1.0.0#priority",
+        "ecommerce.progression.support-triage@1.0.0#status"
+      ],
+      "dependencies": [
+        {
+          "id": "staff-access",
+          "reason": "Triage requires a staff member."
+        },
+        {
+          "id": "support-intake",
+          "reason": "Triage operates on submitted tickets."
+        }
+      ]
+    },
+    {
+      "id": "support-history",
+      "title": "Customer support history",
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.support-history@1.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.support-history@1.0.0#history",
+        "ecommerce.progression.support-privacy-specifications@1.0.0#private-message-delivery",
+        "ecommerce.spec.access-control@2.0.1#support-history-privacy",
+        "ecommerce.spec.state-durability@2.0.1#support-history-reload"
+      ],
+      "dependencies": [
+        {
+          "id": "accounts",
+          "reason": "Owned ticket history requires an account."
+        },
+        {
+          "id": "support-intake",
+          "reason": "History contains submitted tickets."
+        }
+      ]
+    },
+    {
+      "id": "promotion-rules",
+      "title": "Promotion rules",
+      "questline": "promotions",
+      "featureRefs": [
+        "ecommerce.progression.promotion-rules@1.0.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.promotion-rules@1.0.1#values",
+        "ecommerce.spec.access-control@2.0.1#promotion-management-boundary"
+      ],
+      "dependencies": [
+        {
+          "id": "catalog",
+          "reason": "Promotions apply to catalog sales."
+        },
+        {
+          "id": "staff-access",
+          "reason": "Promotion rules require staff access."
+        }
+      ]
+    },
+    {
+      "id": "notification-preferences",
+      "title": "Notification preferences",
+      "questline": "notifications",
+      "featureRefs": [
+        "ecommerce.progression.notification-preferences@1.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.notification-preferences@1.0.0#preferences",
+        "ecommerce.spec.access-control@2.0.1#notification-preferences-privacy",
+        "ecommerce.spec.state-durability@2.0.1#notification-preferences-reload"
+      ],
+      "dependencies": [
+        {
+          "id": "accounts",
+          "reason": "Preferences belong to an account."
+        }
+      ]
+    },
+    {
+      "id": "faceted-search",
+      "title": "Faceted search",
+      "questline": "catalog-discovery",
+      "featureRefs": [
+        "ecommerce.progression.faceted-search@1.0.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.faceted-search@1.0.1#filters",
+        "ecommerce.progression.faceted-search@1.0.1#pagination"
+      ],
+      "dependencies": [
+        {
+          "id": "catalog-discovery",
+          "reason": "Facets refine catalog discovery."
+        }
+      ]
+    },
+    {
+      "id": "payment-records",
+      "title": "Payment records",
+      "questline": "orders-fulfillment",
+      "featureRefs": [
+        "ecommerce.progression.payment-records@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.payment-records@2.0.0#payment",
+        "ecommerce.spec.concurrency-safety@2.0.1#stock-limit"
+      ],
+      "dependencies": [
+        {
+          "id": "checkout",
+          "reason": "Checkout creates a payment record."
+        },
+        {
+          "id": "purchasing",
+          "reason": "The payment belongs to an order."
+        }
+      ]
+    },
+    {
+      "id": "managed-support",
+      "title": "Managed support cases",
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.managed-support@1.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.managed-support@1.0.0#case-updates",
+        "ecommerce.spec.access-control@2.0.1#managed-support-privacy",
+        "ecommerce.spec.live-state@2.0.0#managed-support"
+      ],
+      "dependencies": [
+        {
+          "id": "support-history",
+          "reason": "Customers need an owned case history."
+        },
+        {
+          "id": "support-triage",
+          "reason": "Staff need an assigned ticket queue."
+        }
+      ]
+    },
+    {
+      "id": "promotion-checkout",
+      "title": "Promotion checkout",
+      "questline": "promotions",
+      "featureRefs": [
+        "ecommerce.progression.promotion-checkout@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.promotion-checkout@2.0.0#active",
+        "ecommerce.progression.promotion-checkout@2.0.0#expired",
+        "ecommerce.progression.promotion-checkout@2.0.0#exhausted"
+      ],
+      "dependencies": [
+        {
+          "id": "checkout",
+          "reason": "A promotion is applied at checkout."
+        },
+        {
+          "id": "promotion-rules",
+          "reason": "Checkout needs an active promotion rule."
+        }
+      ]
+    },
+    {
+      "id": "stock-alerts",
+      "title": "Stock alerts",
+      "questline": "notifications",
+      "featureRefs": [
+        "ecommerce.progression.stock-alerts@1.0.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.stock-alerts@1.0.1#delivery",
+        "ecommerce.spec.access-control@2.0.1#stock-alert-privacy",
+        "ecommerce.spec.transactional-integrity@1.4.0#stock-alert-deduplication"
+      ],
+      "dependencies": [
+        {
+          "id": "notification-preferences",
+          "reason": "The customer chooses whether to receive alerts."
+        },
+        {
+          "id": "warehouse-admin",
+          "reason": "Alerts respond to warehouse stock changes."
+        }
+      ]
+    },
+    {
+      "id": "personalized-recommendations",
+      "title": "Personalized recommendations",
+      "questline": "recommendations",
+      "featureRefs": [
+        "ecommerce.progression.personalized-recommendations@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.personalized-recommendations@2.0.0#ordering",
+        "ecommerce.progression.personalized-recommendations@2.0.0#isolation"
+      ],
+      "dependencies": [
+        {
+          "id": "recommendations",
+          "reason": "Personalization extends customer recommendations."
+        }
+      ]
+    },
+    {
+      "id": "staff-activity",
+      "title": "Staff activity history",
+      "questline": "business-operations",
+      "featureRefs": [
+        "ecommerce.progression.staff-activity@1.0.3"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.staff-activity@1.0.3#activity"
+      ],
+      "dependencies": [
+        {
+          "id": "catalog-management",
+          "reason": "Catalog changes provide attributable staff activity."
+        }
+      ]
+    },
+    {
+      "id": "order-support",
+      "title": "Order-linked support",
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.order-support@1.0.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.order-support@1.0.1#owned-order",
+        "ecommerce.progression.order-support@1.0.1#ownership-boundary"
+      ],
+      "dependencies": [
+        {
+          "id": "managed-support",
+          "reason": "The order is attached to an existing managed case."
+        },
+        {
+          "id": "purchasing",
+          "reason": "The linked order must exist."
+        }
+      ]
+    },
+    {
+      "id": "promotion-reporting",
+      "title": "Promotion reporting",
+      "questline": "promotions",
+      "featureRefs": [
+        "ecommerce.progression.promotion-reporting@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.promotion-reporting@2.0.0#redemptions",
+        "ecommerce.progression.promotion-reporting@2.0.0#revenue"
+      ],
+      "dependencies": [
+        {
+          "id": "promotion-checkout",
+          "reason": "Reports count promotion redemptions."
+        }
+      ]
+    },
+    {
+      "id": "automatic-reorder",
+      "title": "Automatic reorder rules",
+      "questline": "inventory",
+      "featureRefs": [
+        "ecommerce.progression.automatic-reorder@2.0.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.automatic-reorder@2.0.1#threshold",
+        "ecommerce.progression.automatic-reorder@2.0.1#access"
+      ],
+      "dependencies": [
+        {
+          "id": "scheduled-restocks",
+          "reason": "Rules create scheduled restocks."
+        },
+        {
+          "id": "staff-roles",
+          "reason": "Only warehouse staff can manage reorder rules."
+        }
+      ]
+    },
+    {
+      "id": "cart-recovery",
+      "title": "Cart recovery",
+      "questline": "shopping-checkout",
+      "featureRefs": [
+        "ecommerce.progression.cart-recovery@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.cart-recovery@2.0.0#available",
+        "ecommerce.progression.cart-recovery@2.0.0#partial"
+      ],
+      "dependencies": [
+        {
+          "id": "cart-expiration",
+          "reason": "Recovery restores an expired cart."
+        }
+      ]
+    },
+    {
+      "id": "delivery-notifications",
+      "title": "Delivery notifications",
+      "questline": "notifications",
+      "featureRefs": [
+        "ecommerce.progression.delivery-notifications@1.0.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.delivery-notifications@1.0.1#delivery",
+        "ecommerce.progression.delivery-notifications@1.0.1#privacy"
+      ],
+      "dependencies": [
+        {
+          "id": "notification-preferences",
+          "reason": "The customer chooses whether to receive delivery notices."
+        },
+        {
+          "id": "order-delivery",
+          "reason": "A notice follows a delivered order."
+        }
+      ]
+    },
+    {
+      "id": "recommendation-feedback",
+      "title": "Recommendation feedback",
+      "questline": "recommendations",
+      "featureRefs": [
+        "ecommerce.progression.recommendation-feedback@2.0.0"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.recommendation-feedback@2.0.0#dismissal"
+      ],
+      "dependencies": [
+        {
+          "id": "personalized-recommendations",
+          "reason": "Feedback applies to personal recommendations."
+        }
+      ]
+    },
+    {
+      "id": "support-refunds",
+      "title": "Support refunds",
+      "questline": "customer-support",
+      "featureRefs": [
+        "ecommerce.progression.support-refunds@1.0.1"
+      ],
+      "gradingGroups": [
+        "ecommerce.progression.support-refunds@1.0.1#resolution",
+        "ecommerce.progression.support-refunds@1.0.1#accounting",
+        "ecommerce.progression.support-refunds@1.0.1#access"
+      ],
+      "dependencies": [
+        {
+          "id": "order-cancellation",
+          "reason": "A support refund uses the established order refund path."
+        },
+        {
+          "id": "order-support",
+          "reason": "The refund resolves an order-linked case."
+        }
+      ]
+    }
+  ],
+  "questlines": [
+    {
+      "id": "identity-profiles",
+      "title": "Identity and profiles"
+    },
+    {
+      "id": "catalog-discovery",
+      "title": "Catalog and discovery"
+    },
+    {
+      "id": "shopping-checkout",
+      "title": "Shopping and checkout"
+    },
+    {
+      "id": "orders-fulfillment",
+      "title": "Orders and fulfilment"
+    },
+    {
+      "id": "inventory",
+      "title": "Inventory"
+    },
+    {
+      "id": "reviews",
+      "title": "Reviews"
+    },
+    {
+      "id": "recommendations",
+      "title": "Recommendations"
+    },
+    {
+      "id": "notifications",
+      "title": "Notifications"
+    },
+    {
+      "id": "staff-access",
+      "title": "Staff access"
+    },
+    {
+      "id": "business-operations",
+      "title": "Business operations"
+    },
+    {
+      "id": "promotions",
+      "title": "Promotions"
+    },
+    {
+      "id": "customer-support",
+      "title": "Customer support"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/02-operations.md b/tools/stack-bench/tracks/ecommerce/prompts/02-operations.md
new file mode 100644
index 00000000000..48dd52e8f88
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/02-operations.md
@@ -0,0 +1,120 @@
+# Level 2 — Running the business
+
+The store works. Now it has to be **operated**: stock moved between warehouses,
+orders fulfilled, prices changed, orders cancelled and returned — while everyone
+watching sees the consequences immediately.
+
+Everything below is ordinary retail work. What makes it demanding is that each
+action touches several different views of the same data, and every one of those
+views belongs to someone who is looking at it right now.
+
+## The people watching
+
+Four kinds of viewer, each seeing a different projection of the same store:
+
+- **A visitor**, signed out — the storefront
+- **A customer** — their cart, their orders, their recommendations
+- **Warehouse staff** — the fulfilment queue and where stock physically is
+- **An administrator** — every item, every warehouse, the money
+
+A change made by any of them must reach all of the others it affects, without a
+reload, every time. There is no acceptable action that updates some views and not
+others.
+
+## New: warehouse staff
+
+- A **staff** account signs in like anyone else but sees the fulfilment area
+  instead of the admin area
+- Staff accounts are seeded (below); sign-up still creates ordinary customers
+- Staff cannot change prices or create items; admins can do everything staff can
+
+## Features
+
+### Fulfilment
+
+- Every order is **pending** when placed, and appears in the **fulfilment queue**
+  in the order it was placed
+- Staff **mark an order shipped**. It leaves the queue for everyone watching the
+  queue, and the customer's order history shows it as shipped, live.
+- The queue shows, for each order, its items and which warehouse each will ship
+  from — the warehouse holding stock for that item, chosen the same way a purchase
+  drains it
+
+The Level 1 named-action rule also applies to shipping. Name the ordinary
+server write `ship`: server-based stacks expose `POST /api/fulfilment/ship`
+with `{ "orderId": ... }`, and SpacetimeDB exposes reducer `shipOrder`. The
+same authentication and staff-only authorization apply through this path.
+
+### Moving stock
+
+- An admin can **transfer** a number of units of an item from one warehouse to
+  another
+- A transfer **moves stock, it does not create or destroy it**: the item's total
+  is identical before and after, and the two warehouses' numbers change together.
+  A transfer that would leave a warehouse short is refused and changes nothing.
+- Transfers are visible immediately: the storefront total is unchanged, but the
+  per-warehouse numbers staff and admins see both move at once
+
+### Cancelling and returning
+
+- A customer can **cancel** an order that has not shipped. The stock goes back to
+  the warehouse it came from, the order leaves the fulfilment queue, and revenue
+  falls by that order's total.
+- A customer can **return** an item from an order that has shipped. The stock comes
+  back, revenue falls by what was paid for it, and the order shows the item as
+  returned.
+- A cancelled or returned order's items **stop counting as purchases** — the
+  best-seller ranking reflects what was actually kept
+
+### Prices
+
+- An admin can **change an item's price**
+- The storefront shows the new price immediately, to everyone
+- **Past orders keep the price that was paid.** Changing a price never alters the
+  history, the revenue already recorded, or a customer's receipt.
+- An item in someone's cart at the moment the price changes is charged the **new**
+  price at checkout, and the cart total they are looking at updates to match
+
+### Live operational views
+
+These exist so the people running the store can see its state. Each is derived
+from the same data as everything else, and each must be correct the instant any
+action above changes it:
+
+- **Low stock** — an admin list of every item whose total is at or below 10 units,
+  most urgent first. Items enter and leave this list as stock moves, sells, is
+  restocked, cancelled or returned.
+- **Warehouse utilisation** — for each warehouse, the total units it holds, live
+- **Category totals** — every item belongs to a category (below); for each
+  category, how many units have been sold and the revenue they earned, live
+- **Fulfilment queue depth** — how many orders are waiting, visible to staff and
+  admins, live
+- **Recommended for you** — for a signed-in customer, the items from categories
+  they have bought from, most-purchased first, excluding items already in their
+  cart. A signed-out visitor sees the best sellers on the storefront without opening another view.
+
+### What must stay true
+
+- An item's stock is always the sum of its warehouse rows, no matter which of the
+  actions above last touched it
+- Revenue always equals the sum of orders that are still standing — not cancelled,
+  minus what was returned
+- The best-seller ranking always reflects kept purchases
+- Every one of these numbers is the same for every person looking at it
+
+## Starting data
+
+Add to the level 1 catalogue, without disturbing it:
+
+**Categories** — every existing item gets one:
+
+| Category | Items |
+|---|---|
+| `Home` | Air Purifier, Desk Lamp, Induction Cooktop, Espresso Machine, Coffee Grinder, USB Cable |
+| `Audio` | Bluetooth Speaker, Headphones |
+| `Computing` | Gaming Mouse, Keyboard, Laptop Stand, Webcam |
+| `Photo` | Mirrorless Camera |
+
+**Staff account:** username `staff`, password `stackbench-staff-2026`.
+
+No orders, cancellations, returns or price changes exist at the start.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/03-scheduled.md b/tools/stack-bench/tracks/ecommerce/prompts/03-scheduled.md
new file mode 100644
index 00000000000..c951989d5e7
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/03-scheduled.md
@@ -0,0 +1,67 @@
+# Level 3 — Work that happens later
+
+The store is operated. Now it has to keep promises made about the **future**:
+holds that expire, restocks that arrive on a schedule, orders that advance on
+their own, carts that go stale. Nobody is watching when these happen — and they
+must happen anyway.
+
+This is the level where "the server was restarted" stops being an excuse.
+Deferred work that a running process was holding in memory is work that was
+never really scheduled.
+
+## Reservations that expire
+
+- Adding an item to the cart takes a **reservation** on one unit for **90
+  seconds**: storefront stock drops immediately, for everyone
+- If the customer checks out within the window, the reservation becomes a sale
+- If they do not, the reservation **expires on its own** and the unit returns to
+  storefront stock — visibly, without anyone reloading or clicking
+- A cart line whose reservation expired is marked expired, not silently removed
+- The cart line shows the reservation's remaining time, live, the way the
+  pending restocks list does
+- Extending is allowed: touching the quantity renews the 90 seconds
+
+## Scheduled restocks
+
+- An admin can schedule a restock: item, warehouse, quantity, and a delay in
+  seconds
+- The **pending restocks** list shows each one with its remaining time, live
+- When the delay elapses the restock applies itself — stock rises for every
+  viewer, the entry leaves the pending list, and it appears in the stock ledger
+- An admin can cancel a pending restock before it fires; cancelled restocks
+  never apply
+
+## Orders that advance themselves
+
+- Shipping remains the immediate staff action introduced at level 2
+- A shipped order moves to `delivered` **60 seconds** after shipping
+- Delivery is visible live in the customer's order history and the staff view
+- A cancelled order never advances
+
+## Abandoned carts
+
+- A cart untouched for **5 minutes** is abandoned: its reservations are released
+  and the customer is told the cart expired
+- An abandoned cart is empty, not hidden — a customer who returns sees an empty
+  cart, and the stock is back on the shelf
+
+## What must stay true
+
+- **Deferred work survives a restart.** Everything above must still happen if
+  the backend restarts between the scheduling and the firing. Work scheduled
+  before a restart fires after it, once, at the right time.
+- **Exactly once.** A backend restart must never double-apply a scheduled
+  restock or advance an order twice. If it fired, it fired once.
+- **Nothing fires early.** A restart must not cause pending work to run
+  immediately just because it is being re-read.
+- **The clock is the database's, not the browser's.** Countdowns shown in the UI
+  may be rendered client-side, but what actually expires is decided by the
+  server: a client with a wrong clock, or no client at all, changes nothing.
+- **Stock conservation still holds** across reservations, expiries, scheduled
+  restocks and cancellations: units are never created or destroyed by the
+  passage of time.
+
+## Starting data
+
+Everything from level 1 and level 2, unchanged. No pending restocks, no
+reservations and no abandoned carts exist at the start.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/fragments/named-actions-inventory-operations-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/fragments/named-actions-inventory-operations-1.0.0.md
new file mode 100644
index 00000000000..c92cb5331db
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/fragments/named-actions-inventory-operations-1.0.0.md
@@ -0,0 +1,12 @@
+### Named action for stock transfers
+
+The transfer write already appears in the requested features. Give it the exact
+named action shown here so the same request can be made without a browser. Use
+your stack's ordinary write path; do not add another transport for this action.
+
+| Action | MongoDB/PostgreSQL app | SpacetimeDB app |
+|---|---|---|
+| transfer stock between warehouses | `POST /api/admin/transfer` | reducer `adminTransferStock` |
+
+The rules do not change because a request arrived this way. Authentication,
+staff authorization, stock conservation, and every guarantee above still apply.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/fragments/named-actions-returns-pricing-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/fragments/named-actions-returns-pricing-1.0.0.md
new file mode 100644
index 00000000000..9f200f8c09c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/fragments/named-actions-returns-pricing-1.0.0.md
@@ -0,0 +1,14 @@
+### Named actions for pricing and cancellation
+
+Every write below already appears in the requested features. Give it the exact
+named action shown here so the same request can be made without a browser. Use
+your stack's ordinary write path; do not add another transport for this action.
+
+| Action | MongoDB/PostgreSQL app | SpacetimeDB app |
+|---|---|---|
+| change an item's price | `POST /api/admin/price` | reducer `adminChangePrice` |
+| cancel an order | `POST /api/orders/:id/cancel` | reducer `cancelOrder` |
+
+The rules do not change because a request arrived this way. Authentication,
+staff authorization, price integrity, ownership, and every guarantee above
+still apply.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/fragments/named-actions-scheduled-restocks-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/fragments/named-actions-scheduled-restocks-1.0.0.md
new file mode 100644
index 00000000000..c42e67c4e19
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/fragments/named-actions-scheduled-restocks-1.0.0.md
@@ -0,0 +1,13 @@
+### Named actions for scheduled restocks
+
+These writes already appear in the requested feature. Expose the exact named
+actions below through the stack's normal write path.
+
+| Action | MongoDB/PostgreSQL app | SpacetimeDB app |
+|---|---|---|
+| schedule a restock | `POST /api/admin/scheduled-restocks` | reducer `scheduleRestock` |
+| cancel a scheduled restock | `DELETE /api/admin/scheduled-restocks/:id` | reducer `cancelScheduledRestock` |
+
+The same authentication and authorization rules apply to these calls.
+Set `data-action-input` on `schedule-restock-submit` to the current JSON input
+for `scheduleRestock`: `item`, `warehouse`, `quantity`, and `delaySeconds`.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/fragments/startup-probe-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/fragments/startup-probe-1.0.0.md
new file mode 100644
index 00000000000..2cc3f5f662a
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/fragments/startup-probe-1.0.0.md
@@ -0,0 +1,6 @@
+## Catalogue readiness
+
+On server-based stacks (MongoDB/PostgreSQL), expose `GET /api/items`. Return
+HTTP 200 and a JSON object with an `items` array. This interface does not define
+how the app stores or restores its data. SpacetimeDB apps use the module and do
+not need this endpoint.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/l2-action-inputs.md b/tools/stack-bench/tracks/ecommerce/prompts/l2-action-inputs.md
new file mode 100644
index 00000000000..c7edd3fce9f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/l2-action-inputs.md
@@ -0,0 +1,22 @@
+## Operator action inputs
+
+Expose machine-readable inputs for the public application interface. These are inert HTML attributes; they do not prescribe the application framework, database API, or internal implementation.
+
+- Each `order-item` exposes `data-ship-input` containing a JSON object with exactly `orderId`.
+- Each `order-item` exposes `data-cancel-input` containing a JSON object with exactly `orderId`.
+Use the identifier representation expected by the stack's declared server operation. Do not put credentials or account identifiers in these attributes.
+
+## Price action input
+
+- Each `admin-item-row` exposes `data-price-input` containing a JSON object with exactly `itemId` and numeric `price`. The Gaming Mouse row uses `1.00` as the price so authorization can be checked that a non-admin is refused without relying on a visible button.
+
+Use the identifier representation expected by the stack's declared server operation. Do not put credentials or account identifiers in this attribute.
+
+## Inventory contention action inputs
+
+Expose machine-readable inputs for the public application interface. These are inert HTML attributes; they do not prescribe the application framework, database API, or internal implementation.
+
+- Each catalog `item-card` exposes `data-buy-input` containing a JSON object with exactly `itemId`.
+- The Headphones `admin-item-row` exposes `data-transfer-input` containing a JSON object with exactly `itemId`, `fromWarehouseId`, `toWarehouseId`, and `quantity`. It must describe a valid 25-unit transfer from East to West for that row.
+
+Use the identifier representation expected by the stack's declared server operation. Do not put credentials or account identifiers in these attributes.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/accounts-1.2.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/accounts-1.2.0.md
new file mode 100644
index 00000000000..0836bedb6d8
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/accounts-1.2.0.md
@@ -0,0 +1,5 @@
+## Accounts
+
+Visitors can create an account with a username and password. Returning users can sign in with
+those credentials, see which account is active, and sign out. Show a useful error for a taken
+username or an incorrect password.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/cancellation-conservation-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/cancellation-conservation-1.0.0.md
new file mode 100644
index 00000000000..e76c7f20b04
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/cancellation-conservation-1.0.0.md
@@ -0,0 +1,4 @@
+## Cancellation conservation
+
+Cancelling an order restores its stock to the warehouse that supplied it. The restored total is
+the same for current and newly opened clients.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/cancellation-queue-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/cancellation-queue-1.0.0.md
new file mode 100644
index 00000000000..d98b69a9e52
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/cancellation-queue-1.0.0.md
@@ -0,0 +1,4 @@
+## Fulfilment queue integration
+
+When fulfilment is available, cancelling a pending order also removes it from the fulfilment
+queue.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/cart-2.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/cart-2.0.0.md
new file mode 100644
index 00000000000..019841246fa
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/cart-2.0.0.md
@@ -0,0 +1,4 @@
+## Cart
+
+A signed-in customer has one cart. They can add an item, change its quantity, remove it, and
+see the total. Adding the same item again increases the existing line quantity.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/cart-expiration-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/cart-expiration-1.0.0.md
new file mode 100644
index 00000000000..c9f5fddfe22
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/cart-expiration-1.0.0.md
@@ -0,0 +1,4 @@
+## Cart expiration
+
+A cart with no activity for five minutes expires and releases its reservations. The customer
+sees an empty cart and an expiration notice.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/catalog-discovery-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/catalog-discovery-1.0.0.md
new file mode 100644
index 00000000000..984185ca62a
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/catalog-discovery-1.0.0.md
@@ -0,0 +1,4 @@
+## Catalog discovery
+
+Show the ten most-purchased items. Break ties by item name. Search matches any part of
+an item name, without regard to case, across the full catalog.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/catalog-items-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/catalog-items-1.0.0.md
new file mode 100644
index 00000000000..70e5776538a
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/catalog-items-1.0.0.md
@@ -0,0 +1,3 @@
+## Catalog items
+
+Show public catalog items. Each item shows its name, price, and total stock.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/catalog-management-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/catalog-management-1.0.0.md
new file mode 100644
index 00000000000..a0dcfce7534
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/catalog-management-1.0.0.md
@@ -0,0 +1,4 @@
+## Catalog management
+
+Authorized staff can add a product with named variants. The new product and its variants appear
+in the public catalog.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/checkout-2.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/checkout-2.0.0.md
new file mode 100644
index 00000000000..3aeddbf75b4
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/checkout-2.0.0.md
@@ -0,0 +1,4 @@
+## Checkout
+
+Checkout creates one order, reduces stock for every line, and empties the cart. Show an
+explanation if checkout fails.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/customer-profile-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/customer-profile-1.0.0.md
new file mode 100644
index 00000000000..022eff8b1cc
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/customer-profile-1.0.0.md
@@ -0,0 +1,3 @@
+## Customer profile
+
+A signed-in customer can save and view their name and shipping address.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/delivery-notifications-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/delivery-notifications-1.0.0.md
new file mode 100644
index 00000000000..957f0c02ef1
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/delivery-notifications-1.0.0.md
@@ -0,0 +1,4 @@
+## Delivery notifications
+
+A customer who enabled order notifications receives one private notification when their order
+is delivered.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/faceted-search-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/faceted-search-1.0.0.md
new file mode 100644
index 00000000000..b1fe45f52a4
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/faceted-search-1.0.0.md
@@ -0,0 +1,5 @@
+# Faceted search
+
+Let visitors filter the full catalog by category, minimum price, maximum price, and current availability. Apply all selected filters together.
+
+Order results by item name. Show ten results per page. Moving between pages must not omit or repeat an item.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/inventory-dashboard-2.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/inventory-dashboard-2.0.0.md
new file mode 100644
index 00000000000..03b8ce57636
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/inventory-dashboard-2.0.0.md
@@ -0,0 +1,3 @@
+## Inventory dashboard
+
+Give administrators a low-stock view. It lists items with 10 units or fewer, most urgent first.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-action-inputs-1.1.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-action-inputs-1.1.0.md
new file mode 100644
index 00000000000..8ca7da87092
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-action-inputs-1.1.0.md
@@ -0,0 +1,23 @@
+## Purchase action input
+
+Put a `data-buy-input` attribute on each `item-card`. Its value is a JSON
+object containing that card's server item identifier, for example
+`{"itemId":42}`. The identifier may be a JSON number or string. Use this value
+with the same ordinary buy operation as the visible button.
+
+## Cart quantity action input
+
+Put a `data-cart-input` attribute on each `cart-item`. Its value is a JSON
+object containing that line's server item identifier and the invalid quantity
+`-3`, for example `{"itemId":42,"quantity":-3}`. The identifier may be a
+JSON number or string. The ordinary cart-quantity operation must refuse the
+invalid quantity in this value.
+
+## Restock action input
+
+Put a `data-restock-input` attribute on each `admin-location-row`. Its value is
+a JSON object containing the row's server item and warehouse identifiers plus
+a valid one-unit restock, for example
+`{"itemId":42,"warehouseId":7,"quantity":1}`. Identifiers may be JSON numbers
+or strings. Use this value with the same ordinary restock operation as the
+visible control.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-features-1.1.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-features-1.1.0.md
new file mode 100644
index 00000000000..2bbdc640bfe
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-features-1.1.0.md
@@ -0,0 +1,57 @@
+## Accounts
+
+Visitors can create an account with a username and password. Returning users
+can sign in with those credentials, see which account is active, and sign out.
+Show a useful error for a taken username or incorrect password.
+
+Use these ordinary server write names for the same operations as the UI:
+`POST /api/auth/signup` and `POST /api/auth/signin` on
+server-based stacks, or reducers `signUp` and `signIn` on SpacetimeDB.
+
+## Catalog
+
+Show the ten most-purchased items, with alphabetical ordering as the tie-break.
+Each card shows name, price, and total stock. Search matches any part of an item
+name, case-insensitively, across the full catalog. An item detail view shows its
+description, reviews, and average rating.
+
+## Purchasing and orders
+
+A signed-in customer can buy one unit of an item. A purchase reduces stock,
+creates an order for that customer at the current price, and appears in their
+order history. Order history shows newest orders first with items, quantities,
+prices paid, and totals. Show a useful error when a purchase cannot be completed.
+Do not start with purchases or orders.
+
+Name the ordinary buy operation `POST /api/items/:id/buy` on server-based stacks
+or reducer `buyNow` on SpacetimeDB.
+
+## Cart and checkout
+
+A signed-in customer can add an item to a cart, change its quantity, remove it,
+and see the cart total. Adding the same item again raises the existing line's
+quantity. Checkout creates one order from the cart, reduces stock for its lines,
+and empties the cart. Explain why a checkout cannot be completed.
+
+Name the ordinary writes `POST /api/cart`, `PATCH /api/cart/:itemId` and
+`POST /api/checkout` on server-based stacks, or reducers `addToCart`,
+`updateCartQuantity` and `checkout` on SpacetimeDB.
+
+## Reviews
+
+A signed-in customer can rate an item from one to five and write a comment.
+Show reviews and the average rating on the item detail view, including to
+signed-out visitors. Show a useful error when a review cannot be submitted.
+Do not start with reviews.
+
+## Warehouse administration
+
+Provide an administration area that lists every item, both warehouses, and the
+quantity of each item held at each warehouse. It can add units to a selected
+item and warehouse and shows total revenue across orders.
+
+Create its administrator account with username `admin` and password
+`stackbench-admin-2026`.
+
+Name the ordinary restock operation `POST /api/admin/restock` on server-based
+stacks or reducer `adminRestock` on SpacetimeDB.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-features.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-features.md
new file mode 100644
index 00000000000..1ee134aec4b
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-features.md
@@ -0,0 +1,56 @@
+## Accounts
+
+Visitors can create an account with a username and password. Returning users
+can sign in with those credentials, see which account is active, and sign out.
+Show a useful error for a taken username or incorrect password.
+
+Use these ordinary server write names for the same operations as the UI:
+`POST /api/auth/signup` and `POST /api/auth/signin` on
+server-based stacks, or reducers `signUp` and `signIn` on SpacetimeDB.
+
+## Catalog
+
+Show the ten most-purchased items, with alphabetical ordering as the tie-break.
+Each card shows name, price, and total stock. Search matches any part of an item
+name, case-insensitively, across the full catalog. An item detail view shows its
+description, reviews, and average rating.
+
+## Purchasing and orders
+
+A signed-in customer can buy one unit of an item. A purchase reduces stock,
+creates an order for that customer at the current price, and appears in their
+order history. Order history shows newest orders first with items, quantities,
+prices paid, and totals. Show a useful error when a purchase cannot be completed.
+Do not start with purchases or orders.
+
+Name the ordinary buy operation `POST /api/items/:id/buy` on server-based stacks
+or reducer `buyNow` on SpacetimeDB.
+
+## Cart and checkout
+
+A signed-in customer can add an item to a cart, change its quantity, remove it,
+and see the cart total. Adding the same item again raises the existing line's
+quantity. Checkout creates one order from the cart, reduces stock for its lines,
+and empties the cart. Explain why a checkout cannot be completed.
+
+Name the ordinary writes `POST /api/cart` and `POST /api/checkout` on
+server-based stacks, or reducers `addToCart` and `checkout` on SpacetimeDB.
+
+## Reviews
+
+A signed-in customer can rate an item from one to five and write a comment.
+Show reviews and the average rating on the item detail view, including to
+signed-out visitors. Show a useful error when a review cannot be submitted.
+Do not start with reviews.
+
+## Warehouse administration
+
+Provide an administration area that lists every item, both warehouses, and the
+quantity of each item held at each warehouse. It can add units to a selected
+item and warehouse and shows total revenue across orders.
+
+Create its administrator account with username `admin` and password
+`stackbench-admin-2026`.
+
+Name the ordinary restock operation `POST /api/admin/restock` on server-based
+stacks or reducer `adminRestock` on SpacetimeDB.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-framing.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-framing.md
new file mode 100644
index 00000000000..98b4cacf649
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-framing.md
@@ -0,0 +1,24 @@
+# Ecommerce storefront
+
+Build a polished ecommerce web application using the selected stack and only
+the feature sections that follow. Use `Storefront` as the visible page title.
+Use a clear responsive layout, useful loading, empty, and error states, and
+ordinary keyboard support.
+
+Start with exactly two warehouses, `East` and `West`, and these items:
+
+| Item | Price | East | West |
+|---|---:|---:|---:|
+| Air Purifier | 189.00 | 60 | 40 |
+| Bluetooth Speaker | 79.50 | 50 | 50 |
+| Coffee Grinder | 64.00 | 70 | 30 |
+| Desk Lamp | 42.00 | 55 | 45 |
+| Espresso Machine | 449.00 | 80 | 20 |
+| Gaming Mouse | 59.00 | 50 | 50 |
+| Headphones | 199.00 | 60 | 40 |
+| Induction Cooktop | 329.00 | 50 | 50 |
+| Keyboard | 89.00 | 70 | 30 |
+| Laptop Stand | 29.00 | 90 | 10 |
+| Mirrorless Camera | 1299.00 | 2 | 1 |
+| USB Cable | 65.00 | 0 | 0 |
+| Webcam | 69.00 | 60 | 40 |
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-hooks.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-hooks.md
new file mode 100644
index 00000000000..60cbf8e4a70
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-hooks.md
@@ -0,0 +1,89 @@
+## Public application interface
+
+Use each interface name below as an exact HTML attribute value. Use `id` for a
+one-off element. Use `data-role` when the same interface can appear more than
+once. These attributes do not prescribe the layout, data model, libraries, or
+transport.
+
+## Catalog controls
+
+| Element ID | Observable element |
+|---|---|
+| `app-title` | visible application title, `Storefront` |
+| `item-list` | storefront item-card container |
+| `catalog-link` | control that returns to the storefront catalog |
+| `item-card` | one storefront or search-result item |
+| `item-name` | item name within a card |
+| `item-price` | numeric item price within a card |
+| `item-stock` | numeric total stock within a card |
+| `search-input` | catalog search input |
+| `search-results` | search-result item-card container |
+| `item-detail` | opened item detail view |
+| `out-of-stock` | visible out-of-stock state |
+
+## Account controls
+
+| Element ID | Observable element |
+|---|---|
+| `signup-username` | sign-up username input |
+| `signup-password` | sign-up password input |
+| `signup-submit` | sign-up submit control |
+| `signin-toggle` | control that reveals sign-in |
+| `signin-username` | sign-in username input |
+| `signin-password` | sign-in password input |
+| `signin-submit` | sign-in submit control |
+| `current-user` | active account name |
+| `signout` | sign-out control |
+| `auth-error` | visible account error |
+
+## Purchasing controls
+
+| Element ID | Observable element |
+|---|---|
+| `buy-now` | item-card control that buys one unit |
+| `orders-toggle` | control that opens order history |
+| `order-list` | order-history container |
+| `order-item` | one order containing its item names |
+| `order-total` | numeric order total |
+| `buy-error` | visible purchase or checkout error |
+
+## Cart controls
+
+| Element ID | Observable element |
+|---|---|
+| `add-to-cart` | item-card control that adds one unit |
+| `cart-toggle` | control that opens the cart |
+| `cart-count` | numeric count of units in the cart |
+| `cart-panel` | cart container |
+| `cart-item` | one cart line containing its item name |
+| `cart-quantity` | numeric quantity for a cart line |
+| `cart-total` | numeric cart total |
+| `cart-remove` | control that removes a cart line |
+| `checkout-submit` | checkout control |
+| `empty-cart` | visible empty-cart state |
+
+## Review controls
+
+| Element ID | Observable element |
+|---|---|
+| `review-rating` | rating input or select with values one through five |
+| `review-input` | review comment input |
+| `review-submit` | review submit control |
+| `review-average` | numeric average rating |
+| `review-item` | one visible review containing its comment |
+| `review-error` | visible review error |
+
+## Warehouse administration controls
+
+| Element ID | Observable element |
+|---|---|
+| `admin-link` | control that opens warehouse administration |
+| `admin-panel` | warehouse-administration container |
+| `admin-item-row` | one item row containing its name |
+| `admin-stock` | numeric total stock within an item row |
+| `admin-warehouse-item` | one warehouse entry containing its name |
+| `admin-location-row` | one item-and-warehouse holding row |
+| `admin-location-qty` | numeric quantity within a holding row |
+| `restock-input` | quantity input within a holding row |
+| `restock-submit` | restock control within the same holding row |
+| `admin-revenue` | numeric total revenue |
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-specifications-1.1.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-specifications-1.1.0.md
new file mode 100644
index 00000000000..b112d3e5ed7
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-specifications-1.1.0.md
@@ -0,0 +1,89 @@
+## Access control: purchasing
+
+Treat identity as server-enforced authority, not UI decoration. Unauthenticated
+callers cannot purchase, one account cannot place an order for another account,
+and order history is visible only to its owner. Knowing a username never grants
+access to that account.
+
+## Access control: warehouse administration
+
+Customer accounts cannot perform warehouse-administration writes. Enforce this
+on the server even if the corresponding controls are hidden in the UI.
+
+## Access control: reviews
+
+Only a customer who purchased an item may review it. Enforce this on the server
+instead of relying on whether the review form is visible.
+
+## Access control: cart
+
+One account cannot read or change another account's cart. Refuse a cart request
+whose quantity is zero or negative without changing state.
+
+## State durability: accounts
+
+A signed-in session survives a page reload as the same account.
+
+## State durability: account data
+
+The same account keeps its cart and orders across reload and connection loss.
+After reconnect it has current state without another sign-in. Restarting the
+application must not duplicate starting data or reset state users changed.
+
+## Live state: catalog and purchasing
+
+Stock and best-seller ranking update every affected open storefront without a
+reload, including signed-out storefronts.
+
+## Live state: cart
+
+The same account open in two clients sees one current cart; a change in either
+client reaches the other without a reload.
+
+## Live state: reviews
+
+Reviews and average ratings update affected open item views without a reload.
+A view opened while a review is submitted converges to the current review list.
+
+## Live state: warehouse administration
+
+Restocking updates warehouse quantities, total item stock, and open storefronts
+without a reload.
+
+## Concurrency safety: purchasing
+
+Stock never becomes negative and only one customer can receive the last unit.
+Do not rate-limit, debounce, or serialize unrelated customers merely to avoid
+races.
+
+## Concurrency safety: restocking
+
+Concurrent restocks and purchases preserve every accepted stock change.
+
+## Concurrency safety: checkout
+
+Repeating or racing checkout for the same cart creates only one order.
+
+## Transactional integrity: reviews
+
+A customer has at most one review per item. A later submission must not create
+a duplicate; it may update the existing review or be refused.
+
+## Transactional integrity: purchasing
+
+The server controls prices and order attribution rather than trusting client
+values. Historical order prices do not change.
+
+## Transactional integrity: warehouse accounting
+
+Every stock reduction caused by a sale has its matching order, revenue equals
+the orders' recorded totals, and fresh clients agree with those results.
+
+## External data synchronization
+
+Other systems may write stock directly without calling the application. Use
+singular tables `item(id, name, price)`, `warehouse(id, name)`, and
+`stock(item_id, warehouse_id, quantity)` as the source of truth for this
+interoperability surface. Open pages and newly loaded pages must converge to a
+direct stock correction, including a correction made while the application
+server is down.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-specifications-1.2.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-specifications-1.2.0.md
new file mode 100644
index 00000000000..91738661804
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-specifications-1.2.0.md
@@ -0,0 +1,85 @@
+## Access control: purchasing
+
+Treat identity as server-enforced authority, not UI decoration. Unauthenticated
+callers cannot purchase, one account cannot place an order for another account,
+and order history is visible only to its owner. Knowing a username never grants
+access to that account.
+
+## Access control: warehouse administration
+
+Customer accounts cannot perform warehouse-administration writes. Enforce this
+on the server even if the corresponding controls are hidden in the UI.
+
+## Access control: reviews
+
+Only a customer who purchased an item may review it. Enforce this on the server
+instead of relying on whether the review form is visible.
+
+## Access control: cart
+
+One account cannot read or change another account's cart. Refuse a cart request
+whose quantity is zero or negative without changing state.
+
+## State durability: accounts
+
+A signed-in session survives a page reload as the same account.
+
+## State durability: account data
+
+The same account keeps its cart and orders across reload and connection loss.
+After reconnect it has current state without another sign-in. Restarting the
+application must not duplicate starting data or reset state users changed.
+
+## Live state: catalog and purchasing
+
+Stock and best-seller ranking update every affected open storefront without a
+reload, including signed-out storefronts.
+
+## Live state: cart
+
+The same account open in two clients sees one current cart; a change in either
+client reaches the other without a reload.
+
+## Live state: reviews
+
+Reviews and average ratings update affected open item views without a reload.
+A view opened while a review is submitted converges to the current review list.
+
+## Live state: warehouse administration
+
+Restocking updates warehouse quantities, total item stock, and open storefronts
+without a reload.
+
+## Concurrency safety: purchasing
+
+Stock never becomes negative and only one customer can receive the last unit.
+Do not rate-limit, debounce, or serialize unrelated customers merely to avoid
+races.
+
+## Concurrency safety: restocking
+
+Concurrent restocks and purchases preserve every accepted stock change.
+
+## Concurrency safety: checkout
+
+Repeating or racing checkout for the same cart creates only one order.
+
+## Transactional integrity: reviews
+
+A customer has at most one review per item; another submission updates it.
+
+## Transactional integrity: purchasing
+
+The server controls prices and order attribution rather than trusting client
+values. Historical order prices do not change.
+
+## Transactional integrity: warehouse accounting
+
+Every stock reduction caused by a sale has its matching order, revenue equals
+the orders' recorded totals, and fresh clients agree with those results.
+
+## External data synchronization
+
+Other systems may write stock directly without calling the application. Open
+pages and newly loaded pages must converge to a direct stock correction,
+including a correction made while the application server is down.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-specifications.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-specifications.md
new file mode 100644
index 00000000000..289b75b6d97
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/l1-specifications.md
@@ -0,0 +1,88 @@
+## Access control: purchasing
+
+Treat identity as server-enforced authority, not UI decoration. Unauthenticated
+callers cannot purchase, one account cannot place an order for another account,
+and order history is visible only to its owner. Knowing a username never grants
+access to that account.
+
+## Access control: warehouse administration
+
+Customer accounts cannot perform warehouse-administration writes. Enforce this
+on the server even if the corresponding controls are hidden in the UI.
+
+## Access control: reviews
+
+Only a customer who purchased an item may review it. Enforce this on the server
+instead of relying on whether the review form is visible.
+
+## Access control: cart
+
+One account cannot read or change another account's cart. Refuse a cart request
+whose quantity is zero or negative without changing state.
+
+## State durability: accounts
+
+A signed-in session survives a page reload as the same account.
+
+## State durability: account data
+
+The same account keeps its cart and orders across reload and connection loss.
+After reconnect it has current state without another sign-in. Restarting the
+application must not duplicate starting data or reset state users changed.
+
+## Live state: catalog and purchasing
+
+Stock and best-seller ranking update every affected open storefront without a
+reload, including signed-out storefronts.
+
+## Live state: cart
+
+The same account open in two clients sees one current cart; a change in either
+client reaches the other without a reload.
+
+## Live state: reviews
+
+Reviews and average ratings update affected open item views without a reload.
+A view opened while a review is submitted converges to the current review list.
+
+## Live state: warehouse administration
+
+Restocking updates warehouse quantities, total item stock, and open storefronts
+without a reload.
+
+## Concurrency safety: purchasing
+
+Stock never becomes negative and only one customer can receive the last unit.
+Do not rate-limit, debounce, or serialize unrelated customers merely to avoid
+races.
+
+## Concurrency safety: restocking
+
+Concurrent restocks and purchases preserve every accepted stock change.
+
+## Concurrency safety: checkout
+
+Repeating or racing checkout for the same cart creates only one order.
+
+## Transactional integrity: reviews
+
+A customer has at most one review per item; another submission updates it.
+
+## Transactional integrity: purchasing
+
+The server controls prices and order attribution rather than trusting client
+values. Historical order prices do not change.
+
+## Transactional integrity: warehouse accounting
+
+Every stock reduction caused by a sale has its matching order, revenue equals
+the orders' recorded totals, and fresh clients agree with those results.
+
+## External data synchronization
+
+Other systems may write stock directly without calling the application. Use
+singular tables `item(id, name, price)`, `warehouse(id, name)`, and
+`stock(item_id, warehouse_id, quantity)` as the source of truth for this
+interoperability surface. Open pages and newly loaded pages must converge to a
+direct stock correction, including a correction made while the application
+server is down.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/l3-features-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/l3-features-1.0.0.md
new file mode 100644
index 00000000000..4c3b561896e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/l3-features-1.0.0.md
@@ -0,0 +1,26 @@
+# Level 3 product work
+
+## Reservations
+
+- Adding an item to a cart reserves its stock immediately for 90 seconds.
+- The cart shows the remaining reservation time.
+- Checkout converts a live reservation into a sale.
+- An expired reservation remains visible as expired.
+- Adding the item again renews the reservation.
+
+## Scheduled restocks
+
+- An admin can schedule and cancel a restock.
+- A pending restock shows its remaining time.
+- A due restock updates stock, leaves the pending list, and enters the stock ledger.
+
+## Order delivery
+
+- A shipped order becomes delivered 60 seconds after shipping.
+- Delivery appears live in the customer order history and the staff view.
+- A cancelled order never advances.
+
+## Cart expiration
+
+- A cart with no activity for five minutes expires and releases its reservations.
+- A returning customer sees the expired notice and an empty cart.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/l3-specifications-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/l3-specifications-1.0.0.md
new file mode 100644
index 00000000000..ca2bab9966f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/l3-specifications-1.0.0.md
@@ -0,0 +1,41 @@
+# Level 3 production behavior
+
+## Durable reservations
+
+Pending reservations survive a backend restart.
+
+## Durable restocks
+
+Pending restocks survive a backend restart.
+
+## Durable order delivery
+
+Pending order delivery survives a backend restart.
+
+## Durable cart expiration
+
+Pending cart expiration survives a backend restart.
+
+## Exactly-once restocks
+
+Restarting the backend cannot apply a restock more than once.
+
+## Exactly-once delivery
+
+Restarting the backend cannot apply an order transition more than once.
+
+## Server-timed restocks
+
+A pending restock does not run early after a restart.
+
+## Server-timed reservations
+
+A reservation expires without an open browser.
+
+## Deferred-work access
+
+Only an admin can schedule or cancel a restock.
+
+## Stock conservation
+
+Reservation expiry returns exactly the stock that the reservation took. Checkout does not take reserved stock twice.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/managed-support-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/managed-support-1.0.0.md
new file mode 100644
index 00000000000..a977b4bfbaa
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/managed-support-1.0.0.md
@@ -0,0 +1,3 @@
+## Managed support cases
+
+Customers and staff can exchange replies and update the status of a support case.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/notification-preferences-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/notification-preferences-1.0.0.md
new file mode 100644
index 00000000000..6dbefe203a9
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/notification-preferences-1.0.0.md
@@ -0,0 +1,3 @@
+## Notification preferences
+
+Signed-in customers can turn order and stock notifications on or off.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/operations-access-1.1.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/operations-access-1.1.0.md
new file mode 100644
index 00000000000..e00aa4457cd
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/operations-access-1.1.0.md
@@ -0,0 +1,5 @@
+# Fulfilment operations
+
+Add a fulfilment area for staff and administrators. Show pending orders, their items, and the
+warehouse that will ship them. Staff and administrators can mark an order as shipped. Show the
+new status in the fulfilment area and the customer's order history.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/order-accounting-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-accounting-1.0.0.md
new file mode 100644
index 00000000000..c91a8b726e1
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-accounting-1.0.0.md
@@ -0,0 +1,7 @@
+## Cancellation accounting
+
+Revenue equals the sum of orders that remain paid. Cancellation removes the cancelled amount.
+
+## Price accounting
+
+Later catalog price changes do not change the amount recorded on an existing order.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/order-cancellation-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-cancellation-1.0.0.md
new file mode 100644
index 00000000000..755d6b8e5c9
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-cancellation-1.0.0.md
@@ -0,0 +1,4 @@
+## Order cancellation
+
+A customer can cancel an order that has not shipped. Cancellation restores the stock to its
+original warehouse, updates revenue, and remains visible in the customer's order history.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/order-delivery-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-delivery-1.0.0.md
new file mode 100644
index 00000000000..ccc96878a5f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-delivery-1.0.0.md
@@ -0,0 +1,4 @@
+## Order delivery
+
+A shipped order becomes delivered 60 seconds after shipping. The change appears without a
+reload in the customer's order history and the staff view. A cancelled order never advances.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/order-ownership-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-ownership-1.0.0.md
new file mode 100644
index 00000000000..efccb83a174
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-ownership-1.0.0.md
@@ -0,0 +1,3 @@
+## Order ownership
+
+The server allows a customer to act only on that customer's own orders.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/order-returns-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-returns-1.0.0.md
new file mode 100644
index 00000000000..e7a96f14ef9
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-returns-1.0.0.md
@@ -0,0 +1,7 @@
+## Order returns
+
+A customer can return an item after the order ships. An item from a pending order cannot be
+returned.
+
+An accepted return marks the item as returned in the customer's order history. It restores the
+item's stock and reduces revenue by the price paid for that item.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/order-support-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-support-1.0.0.md
new file mode 100644
index 00000000000..3989da7f438
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/order-support-1.0.0.md
@@ -0,0 +1,4 @@
+## Order-linked support
+
+A customer can attach one of their orders to a support case. Authorized staff can inspect the
+linked order from the case. A customer cannot attach or inspect another customer's order.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/payment-records-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/payment-records-1.0.0.md
new file mode 100644
index 00000000000..d9a2cfee983
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/payment-records-1.0.0.md
@@ -0,0 +1,4 @@
+## Payment records
+
+Checkout records the amount paid on the order. Retrying the same checkout does not create a
+second payment.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/price-authorization-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/price-authorization-1.0.0.md
new file mode 100644
index 00000000000..b66fde8cb92
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/price-authorization-1.0.0.md
@@ -0,0 +1,3 @@
+## Price authorization
+
+The server allows only administrators to change catalog prices.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/price-history-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/price-history-1.0.0.md
new file mode 100644
index 00000000000..8f3c63468cb
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/price-history-1.0.0.md
@@ -0,0 +1,7 @@
+## Price history
+
+An administrator can change an item's price. The public catalog and every open cart show the new
+price without a reload. Checkout uses the current price.
+
+Completed orders keep the price paid at checkout. A later price change does not alter a receipt
+or revenue already recorded.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-automatic-reorder-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-automatic-reorder-1.0.0.md
new file mode 100644
index 00000000000..f95819b2f0d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-automatic-reorder-1.0.0.md
@@ -0,0 +1,6 @@
+# Automatic reorder rules
+
+Only warehouse staff can manage automatic reorder rules. A rule names an item, a stock
+threshold, and a restock quantity. When available stock falls from above the threshold to the
+threshold or below, schedule one restock. Do not schedule another restock for the same rule
+while one is pending.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-cart-recovery-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-cart-recovery-1.0.0.md
new file mode 100644
index 00000000000..77d03bcbb7d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-cart-recovery-1.0.0.md
@@ -0,0 +1,4 @@
+# Cart recovery
+
+Let a signed-in customer restore an expired cart. Reserve each item again only when its full
+quantity is available. Restore the available items and list each item that could not be restored.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-framing-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-framing-1.0.0.md
new file mode 100644
index 00000000000..c39bf7dbd68
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-framing-1.0.0.md
@@ -0,0 +1,9 @@
+## New application
+
+Build an ecommerce application from the product work below. Use `Storefront`
+as the visible page title. Use the application interface names where they are
+provided.
+
+## Existing application
+
+Add the current product work to the existing ecommerce application.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-personalized-recommendations-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-personalized-recommendations-1.0.0.md
new file mode 100644
index 00000000000..4dba4a2ceb8
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/progression-personalized-recommendations-1.0.0.md
@@ -0,0 +1,6 @@
+# Personalized recommendations
+
+Recommend items from categories in the signed-in customer's purchase history. Do not recommend
+items that customer already purchased. Order the remaining items by global units sold, highest
+first, then by item name. One customer's activity must not change another customer's purchase
+history or recommendations.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/promotion-checkout-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/promotion-checkout-1.0.0.md
new file mode 100644
index 00000000000..e3498d90b0c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/promotion-checkout-1.0.0.md
@@ -0,0 +1,4 @@
+## Promotion checkout
+
+Customers can apply an active promotion code to a cart. The final order records the applied
+discount. Expired and fully redeemed promotions are refused.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/promotion-reporting-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/promotion-reporting-1.0.0.md
new file mode 100644
index 00000000000..6aac50479b3
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/promotion-reporting-1.0.0.md
@@ -0,0 +1,4 @@
+## Promotion reporting
+
+Staff can see each promotion's redemption count and revenue after discounts. The totals match
+the orders that used that promotion.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/promotion-rules-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/promotion-rules-1.0.0.md
new file mode 100644
index 00000000000..b76d1333648
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/promotion-rules-1.0.0.md
@@ -0,0 +1,4 @@
+## Promotion rules
+
+Staff can create promotion codes with a percentage discount, a start date, an end date, and a
+redemption limit.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/purchasing-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/purchasing-1.0.0.md
new file mode 100644
index 00000000000..4c5d624f09a
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/purchasing-1.0.0.md
@@ -0,0 +1,5 @@
+## Purchasing and orders
+
+A signed-in customer can buy one unit of an available item. The purchase reduces stock and
+creates an order for that customer at the price paid. Their order history shows the newest
+orders first, including items, quantities, prices, and totals.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/recommendation-feedback-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/recommendation-feedback-1.0.0.md
new file mode 100644
index 00000000000..fa18cdfe2ed
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/recommendation-feedback-1.0.0.md
@@ -0,0 +1,4 @@
+## Recommendation feedback
+
+A customer can dismiss a recommendation. It stays dismissed for that customer while other
+customers remain unaffected.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/recommendations-2.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/recommendations-2.0.0.md
new file mode 100644
index 00000000000..e9acb129c2c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/recommendations-2.0.0.md
@@ -0,0 +1,4 @@
+## Recommendations
+
+Give customers a recommended-for-you view. It recommends items from categories the customer has
+bought from and excludes items already in the cart.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/reservations-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/reservations-1.0.0.md
new file mode 100644
index 00000000000..adfe4098d6a
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/reservations-1.0.0.md
@@ -0,0 +1,5 @@
+## Reservations
+
+Adding an item to a cart reserves its stock for 90 seconds. The cart shows the remaining time.
+Checkout consumes a live reservation. An expired reservation releases its stock and remains
+visible as expired. Adding the item again renews the reservation.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/review-access-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/review-access-1.0.0.md
new file mode 100644
index 00000000000..b0103c3de65
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/review-access-1.0.0.md
@@ -0,0 +1,3 @@
+## Review access
+
+Only a customer who bought an item can review it.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/reviews-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/reviews-1.0.0.md
new file mode 100644
index 00000000000..6e4ca9267cb
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/reviews-1.0.0.md
@@ -0,0 +1,4 @@
+## Reviews
+
+A signed-in customer can rate an item from one to five and add a comment. The item detail shows
+its reviews and average rating to signed-in and signed-out visitors.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/sales-dashboard-2.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/sales-dashboard-2.0.0.md
new file mode 100644
index 00000000000..7d16cac20a3
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/sales-dashboard-2.0.0.md
@@ -0,0 +1,4 @@
+## Sales dashboard
+
+Give customers and administrators sales views. Category totals show units sold and revenue for
+each category. Signed-out visitors see best sellers on the storefront.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/scheduled-restocks-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/scheduled-restocks-1.0.0.md
new file mode 100644
index 00000000000..44c369b051e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/scheduled-restocks-1.0.0.md
@@ -0,0 +1,5 @@
+## Scheduled restocks
+
+An admin can schedule and cancel a restock. A pending restock shows its remaining time. When it
+is due, it updates stock, leaves the pending list, and enters the stock ledger. A cancelled
+restock never changes stock.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/shipping-authorization-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/shipping-authorization-1.0.0.md
new file mode 100644
index 00000000000..cde076db312
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/shipping-authorization-1.0.0.md
@@ -0,0 +1,3 @@
+## Shipping authorization
+
+The server allows only staff and administrators to mark orders as shipped.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/staff-access-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/staff-access-1.0.0.md
new file mode 100644
index 00000000000..eb4f5715325
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/staff-access-1.0.0.md
@@ -0,0 +1,3 @@
+## Staff access
+
+Staff and administrators can sign in and use staff areas.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/staff-activity-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/staff-activity-1.0.0.md
new file mode 100644
index 00000000000..5cb779c26a7
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/staff-activity-1.0.0.md
@@ -0,0 +1,4 @@
+## Staff activity history
+
+Authorized staff can inspect a history of administrative changes. Each entry identifies the
+staff member, action, subject, and time. Customers cannot open this history.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/staff-roles-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/staff-roles-1.0.0.md
new file mode 100644
index 00000000000..6a16317cd87
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/staff-roles-1.0.0.md
@@ -0,0 +1,3 @@
+## Staff roles
+
+An administrator can assign a role to an existing staff account.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/stock-alerts-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/stock-alerts-1.0.0.md
new file mode 100644
index 00000000000..7a3f35808d1
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/stock-alerts-1.0.0.md
@@ -0,0 +1,4 @@
+## Stock alerts
+
+A signed-in customer can request an alert for an unavailable item. Show an alert when stock
+returns.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/stock-conservation-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/stock-conservation-1.0.0.md
new file mode 100644
index 00000000000..b68aaca3e26
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/stock-conservation-1.0.0.md
@@ -0,0 +1,4 @@
+## Stock conservation
+
+Stock moves between warehouses without changing the total. A refused transfer changes nothing.
+When a purchase and a transfer overlap, the final total reflects the sold units exactly once.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/stock-transfers-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/stock-transfers-1.0.0.md
new file mode 100644
index 00000000000..260f9abb1f3
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/stock-transfers-1.0.0.md
@@ -0,0 +1,5 @@
+## Stock transfers
+
+An administrator can move a positive whole number of units of one item from one warehouse to
+another. The source and destination quantities change together. The item's total stock does not
+change.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/support-history-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/support-history-1.0.0.md
new file mode 100644
index 00000000000..a578a2fda30
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/support-history-1.0.0.md
@@ -0,0 +1,3 @@
+## Customer support history
+
+Signed-in customers can see their support ticket history.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/support-intake-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/support-intake-1.0.0.md
new file mode 100644
index 00000000000..245e7052d9c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/support-intake-1.0.0.md
@@ -0,0 +1,4 @@
+## Support intake
+
+Anyone can open a support ticket with contact details, a subject, and a message. Return a
+reference that the visitor can use to identify the ticket.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/support-privacy-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/support-privacy-1.0.0.md
new file mode 100644
index 00000000000..d8d1ea8a200
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/support-privacy-1.0.0.md
@@ -0,0 +1,3 @@
+## Support privacy
+
+Do not send one customer's support messages to another customer.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/support-refunds-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/support-refunds-1.0.0.md
new file mode 100644
index 00000000000..832858eb90f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/support-refunds-1.0.0.md
@@ -0,0 +1,4 @@
+## Support refunds
+
+Authorized staff can refund an order from its support case. A successful refund resolves the
+case and updates the order. The recorded refund equals the amount paid and is applied only once.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/support-triage-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/support-triage-1.0.0.md
new file mode 100644
index 00000000000..32767f66133
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/support-triage-1.0.0.md
@@ -0,0 +1,3 @@
+## Support triage
+
+Staff can view new support tickets, assign a ticket, set its priority, and change its status.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/transfer-authorization-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/transfer-authorization-1.0.0.md
new file mode 100644
index 00000000000..897342d96c0
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/transfer-authorization-1.0.0.md
@@ -0,0 +1,3 @@
+## Transfer authorization
+
+The server allows only staff and administrators to transfer warehouse stock.
diff --git a/tools/stack-bench/tracks/ecommerce/prompts/modular/warehouse-administration-1.0.0.md b/tools/stack-bench/tracks/ecommerce/prompts/modular/warehouse-administration-1.0.0.md
new file mode 100644
index 00000000000..e89ba5c9440
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/prompts/modular/warehouse-administration-1.0.0.md
@@ -0,0 +1,5 @@
+## Warehouse administration
+
+Provide an administration area that lists every item, both warehouses, and the quantity held in
+each warehouse. An administrator can add units to a selected item and warehouse. The area also
+shows total revenue across orders.
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-account-create-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-create-2.4.0.json
new file mode 100644
index 00000000000..8dc3f1fc23d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-create-2.4.0.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Account creation",
+  "note": "Account creation is exercised inside its own scored check so a broken signup cannot invalidate unrelated account checks during setup.",
+  "features": [
+    {
+      "id": 1,
+      "name": "Accounts",
+      "actors": ["shopper"],
+      "setup": [],
+      "criteria": [
+        {
+          "id": "1a",
+          "desc": "a visitor can create an account and is signed in as it",
+          "points": 1,
+          "steps": [
+            {"do":"signUp","actor":"shopper","name":"ann"},
+            {"do":"expect","actor":"shopper","testid":"current-user","contains":"ann","within":6000}
+          ],
+          "statedBy": "a visitor can create an account with a username and password"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-account-duplicate-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-duplicate-2.4.0.json
new file mode 100644
index 00000000000..26677893ef3
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-duplicate-2.4.0.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Duplicate account refusal",
+  "features": [
+    {
+      "id": 1,
+      "name": "Accounts",
+      "actors": ["owner","impostor"],
+      "setup": [{"do":"signUp","actor":"owner","name":"ann"}],
+      "criteria": [
+        {
+          "id": "1b",
+          "desc": "a taken username is refused and does not sign the visitor in as the existing account",
+          "points": 1,
+          "steps": [
+            {"do":"signUp","actor":"impostor","name":"ann","password":"different-pw","expectFailure":true},
+            {"do":"expect","actor":"impostor","testid":"auth-error","within":6000},
+            {"do":"expect","actor":"impostor","testid":"current-user","absent":true}
+          ],
+          "statedBy": "signing up with a taken username fails with a visible error and must never sign the visitor in as the existing account"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-account-password-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-password-2.4.0.json
new file mode 100644
index 00000000000..f61b9fd2e2d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-password-2.4.0.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Password refusal",
+  "features": [
+    {
+      "id": 1,
+      "name": "Accounts",
+      "actors": ["owner","impostor"],
+      "setup": [{"do":"signUp","actor":"owner","name":"ann"}],
+      "criteria": [
+        {
+          "id": "1c",
+          "desc": "a wrong password is refused",
+          "points": 1,
+          "steps": [
+            {"do":"signIn","actor":"impostor","name":"ann","password":"wrong-pw","expectFailure":true},
+            {"do":"expect","actor":"impostor","testid":"auth-error","within":6000},
+            {"do":"expect","actor":"impostor","testid":"current-user","absent":true}
+          ],
+          "statedBy": "signing in with a wrong password fails with a visible error"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-account-reload-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-reload-2.4.0.json
new file mode 100644
index 00000000000..a93662dd6d4
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-reload-2.4.0.json
@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Session reload",
+  "features": [
+    {
+      "id": 1,
+      "name": "Accounts",
+      "actors": ["shopper"],
+      "setup": [{"do":"signUp","actor":"shopper","name":"ann"}],
+      "criteria": [
+        {
+          "id": "1e",
+          "desc": "the session survives a reload",
+          "points": 1,
+          "steps": [
+            {"do":"reload","actor":"shopper","settleMs":4000},
+            {"do":"expect","actor":"shopper","testid":"current-user","contains":"ann","within":6000}
+          ],
+          "statedBy": "a signed-in session persists across a page reload"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-account-signout-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-signout-2.4.0.json
new file mode 100644
index 00000000000..9014f0ada02
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-signout-2.4.0.json
@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Sign out and return",
+  "features": [
+    {
+      "id": 1,
+      "name": "Accounts",
+      "actors": ["shopper"],
+      "setup": [{"do":"signUp","actor":"shopper","name":"ann"}],
+      "criteria": [
+        {
+          "id": "1d",
+          "desc": "signing out and back in returns the same account",
+          "points": 1,
+          "steps": [
+            {"do":"click","actor":"shopper","testid":"signout"},
+            {"do":"expect","actor":"shopper","testid":"signup-username","within":6000},
+            {"do":"signIn","actor":"shopper","name":"ann"},
+            {"do":"expect","actor":"shopper","testid":"current-user","contains":"ann","within":6000}
+          ],
+          "statedBy": "a signed-in user can sign out, returning to the signed-out state"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-account-state-reconnect-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-state-reconnect-2.4.0.json
new file mode 100644
index 00000000000..2c9974e3026
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-state-reconnect-2.4.0.json
@@ -0,0 +1,48 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "An account keeps what belongs to it",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "Every criterion receives all state it relies on from its feature setup. Security assertions include a working positive path where an empty or broken view could otherwise look secure.",
+  "features": [
+    {
+      "id": 105,
+      "name": "An account keeps what belongs to it",
+      "actors": ["shopper", "peer"],
+      "setup": [
+        {"do":"signUp","actor":"shopper","name":"pat"},
+        {"do":"signIn","actor":"peer","name":"pat"},
+        {
+          "do": "click",
+          "actor": "shopper",
+          "testid": "add-to-cart",
+          "in": {"testid":"item-card","contains":"Keyboard"}
+        }
+      ],
+      "criteria": [
+        {
+          "id": "105b",
+          "desc": "the same account and cart survive the connection dropping and coming back",
+          "points": 1,
+          "steps": [
+            {"do":"setOffline","actor":"shopper","settleMs":3000},
+            {
+              "do": "click",
+              "actor": "peer",
+              "testid": "add-to-cart",
+              "in": {"testid":"item-card","contains":"Headphones"}
+            },
+            {"do":"setOffline","actor":"shopper","offline":false,"settleMs":6000},
+            {"do":"expect","actor":"shopper","testid":"current-user","contains":"pat"},
+            {"do":"click","actor":"shopper","testid":"cart-toggle"},
+            {"do":"expect","actor":"shopper","testid":"cart-item","contains":"Keyboard"},
+            {"do":"expect","actor":"shopper","testid":"cart-item","contains":"Headphones"}
+          ],
+          "statedBy": "the signed-in account and its current data remain available after reconnecting"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-account-state-reload-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-state-reload-2.4.0.json
new file mode 100644
index 00000000000..5f5dfba6d0d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-account-state-reload-2.4.0.json
@@ -0,0 +1,40 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "An account keeps what belongs to it",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "Every criterion receives all state it relies on from its feature setup. Security assertions include a working positive path where an empty or broken view could otherwise look secure.",
+  "features": [
+    {
+      "id": 105,
+      "name": "An account keeps what belongs to it",
+      "actors": ["shopper"],
+      "setup": [
+        {"do":"signUp","actor":"shopper","name":"pat"}
+      ],
+      "criteria": [
+        {
+          "id": "105a",
+          "desc": "cart and order history survive a reload as the same account",
+          "points": 1,
+          "steps": [
+            { "do": "click", "actor": "shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } },
+            { "do": "click", "actor": "shopper", "testid": "cart-toggle" },
+            { "do": "click", "actor": "shopper", "testid": "checkout-submit" },
+            { "do": "click", "actor": "shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Keyboard" } },
+            {"do":"reload","actor":"shopper","settleMs":4000},
+            {"do":"expect","actor":"shopper","testid":"current-user","contains":"pat"},
+            {"do":"click","actor":"shopper","testid":"cart-toggle"},
+            {"do":"expect","actor":"shopper","testid":"cart-item","contains":"Keyboard"},
+            {"do":"reload","actor":"shopper","settleMs":2500},
+            {"do":"click","actor":"shopper","testid":"orders-toggle"},
+            {"do":"expect","actor":"shopper","testid":"order-item","contains":"Headphones","count":1}
+          ],
+          "statedBy": "the signed-in account, cart, and orders persist across a page reload"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-admin-write-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-admin-write-2.4.0.json
new file mode 100644
index 00000000000..e1e6e2d4e08
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-admin-write-2.4.0.json
@@ -0,0 +1,99 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Only an administrator can restock",
+  "note": "Refusal checks first prove the same valid route and input with an authorized actor. A missing or malformed endpoint therefore cannot earn authorization credit merely by returning an error.",
+  "features": [
+    {
+      "id": 103,
+      "name": "Only an administrator can restock",
+      "actors": ["admin","customer"],
+      "setup": [
+        {"do":"signIn","actor":"admin","name":"admin","password":"stackbench-admin-2026","exact":true},
+        {"do":"signUp","actor":"customer","name":"ned"}
+      ],
+      "criteria": [
+        {
+          "id": "103a",
+          "desc": "a valid direct restock works for the administrator but is refused for a customer",
+          "points": 2,
+          "steps": [
+            {"do":"click","actor":"admin","testid":"admin-link"},
+            {
+              "do": "recordNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {"testid":"item-card","contains":"Air Purifier"},
+              "as": "purifier-before-control"
+            },
+            {
+              "do": "callAction",
+              "actor": "admin",
+              "action": "restock",
+              "namedAction": {
+                "id": "restock",
+                "path": "/api/admin/restock",
+                "reducer": "admin_restock",
+                "args": [0,0,1],
+                "params": [
+                  {"name":"itemId","in":"body","wireType":"u64"},
+                  {"name":"warehouseId","in":"body","wireType":"u64"},
+                  {"name":"quantity","in":"body"}
+                ]
+              },
+              "input": {"testid":"admin-location-row","contains":"Air Purifier","attribute":"data-restock-input"},
+              "settleMs": 2000
+            },
+            {"do":"expectActionOutcome","actor":"admin","outcome":"accepted"},
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {"testid":"item-card","contains":"Air Purifier"},
+              "relativeTo": "purifier-before-control",
+              "plus": 1
+            },
+            {
+              "do": "recordNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {"testid":"item-card","contains":"Air Purifier"},
+              "as": "purifier-after-control"
+            },
+            {
+              "do": "callAction",
+              "actor": "customer",
+              "from": "admin",
+              "action": "restock",
+              "namedAction": {
+                "id": "restock",
+                "path": "/api/admin/restock",
+                "reducer": "admin_restock",
+                "args": [0,0,1],
+                "params": [
+                  {"name":"itemId","in":"body","wireType":"u64"},
+                  {"name":"warehouseId","in":"body","wireType":"u64"},
+                  {"name":"quantity","in":"body"}
+                ]
+              },
+              "input": {"testid":"admin-location-row","contains":"Air Purifier","attribute":"data-restock-input"},
+              "settleMs": 2000
+            },
+            {"do":"expectActionOutcome","actor":"customer","outcome":"refused"},
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {"testid":"item-card","contains":"Air Purifier"},
+              "relativeTo": "purifier-after-control",
+              "plus": 0
+            }
+          ],
+          "statedBy": "the server refuses warehouse writes from a non-admin account"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-admin-write-staff-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-admin-write-staff-1.0.0.json
new file mode 100644
index 00000000000..8b5bfeec266
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-admin-write-staff-1.0.0.json
@@ -0,0 +1,103 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Only an administrator can restock through staff access",
+  "features": [
+    {
+      "id": 103,
+      "name": "Only an administrator can restock",
+      "actors": ["admin", "staff"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true }
+      ],
+      "criteria": [
+        {
+          "id": "103a",
+          "desc": "an administrator can restock a warehouse",
+          "points": 1,
+          "statedBy": "An administrator can add units to a selected item and warehouse.",
+          "steps": [
+            { "do": "click", "actor": "admin", "testid": "admin-link" },
+            { "do": "recordNumber", "actor": "staff", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "as": "purifier-before-control" },
+            {
+              "do": "callAction",
+              "actor": "admin",
+              "action": "restock",
+              "namedAction": {
+                "id": "restock",
+                "path": "/api/admin/restock",
+                "reducer": "admin_restock",
+                "args": [0, 0, 1],
+                "params": [
+                  { "name": "itemId", "in": "body", "wireType": "u64" },
+                  { "name": "warehouseId", "in": "body", "wireType": "u64" },
+                  { "name": "quantity", "in": "body" }
+                ]
+              },
+              "input": { "testid": "admin-location-row", "contains": "Air Purifier", "attribute": "data-restock-input" },
+              "settleMs": 2000
+            },
+            { "do": "expectActionOutcome", "actor": "admin", "outcome": "accepted" },
+            { "do": "reload", "actor": "staff", "settleMs": 2000 },
+            { "do": "expectNumber", "actor": "staff", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "relativeTo": "purifier-before-control", "plus": 1 }
+          ]
+        },
+        {
+          "id": "103b",
+          "desc": "the server refuses a warehouse write from staff",
+          "points": 2,
+          "statedBy": "Only administrators can change warehouse stock.",
+          "steps": [
+            { "do": "click", "actor": "admin", "testid": "admin-link" },
+            {
+              "do": "callAction",
+              "actor": "admin",
+              "action": "restock",
+              "namedAction": {
+                "id": "restock",
+                "path": "/api/admin/restock",
+                "reducer": "admin_restock",
+                "args": [0, 0, 1],
+                "params": [
+                  { "name": "itemId", "in": "body", "wireType": "u64" },
+                  { "name": "warehouseId", "in": "body", "wireType": "u64" },
+                  { "name": "quantity", "in": "body" }
+                ]
+              },
+              "input": { "testid": "admin-location-row", "contains": "Air Purifier", "attribute": "data-restock-input" },
+              "settleMs": 2000
+            },
+            { "do": "expectActionOutcome", "actor": "admin", "outcome": "accepted" },
+            { "do": "reload", "actor": "staff", "settleMs": 2000 },
+            { "do": "recordNumber", "actor": "staff", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "as": "purifier-before-refusal" },
+            {
+              "do": "callAction",
+              "actor": "staff",
+              "from": "admin",
+              "action": "restock",
+              "namedAction": {
+                "id": "restock",
+                "path": "/api/admin/restock",
+                "reducer": "admin_restock",
+                "args": [0, 0, 1],
+                "params": [
+                  { "name": "itemId", "in": "body", "wireType": "u64" },
+                  { "name": "warehouseId", "in": "body", "wireType": "u64" },
+                  { "name": "quantity", "in": "body" }
+                ]
+              },
+              "input": { "testid": "admin-location-row", "contains": "Air Purifier", "attribute": "data-restock-input" },
+              "settleMs": 2000
+            },
+            { "do": "expectActionOutcome", "actor": "staff", "outcome": "refused" },
+            { "do": "reload", "actor": "staff", "settleMs": 2000 },
+            { "do": "expectNumber", "actor": "staff", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "relativeTo": "purifier-before-refusal", "plus": 0 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-books-balance-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-books-balance-2.4.0.json
new file mode 100644
index 00000000000..0b9a16be8a7
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-books-balance-2.4.0.json
@@ -0,0 +1,86 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "The books balance",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "Every criterion receives all state it relies on from its feature setup. Security assertions include a working positive path where an empty or broken view could otherwise look secure.",
+  "features": [
+    {
+      "id": 107,
+      "name": "The books balance",
+      "actors": ["buyer","admin"],
+      "setup": [
+        {"do":"signUp","actor":"buyer","name":"sam"},
+        {"do":"signIn","actor":"admin","name":"admin","password":"stackbench-admin-2026","exact":true},
+        {"do":"click","actor":"admin","testid":"admin-link"},
+        {"do":"recordNumber","actor":"admin","testid":"admin-revenue","as":"revenue-before"},
+        {
+          "do": "recordNumber",
+          "actor": "admin",
+          "testid": "admin-stock",
+          "in": {"testid":"admin-item-row","contains":"Laptop Stand"},
+          "as": "stand-before"
+        },
+        {
+          "do": "click",
+          "actor": "buyer",
+          "testid": "buy-now",
+          "in": {"testid":"item-card","contains":"Laptop Stand"}
+        },
+        {"do":"wait","actor":"buyer","ms":1000},
+        {
+          "do": "click",
+          "actor": "buyer",
+          "testid": "buy-now",
+          "in": {"testid":"item-card","contains":"Laptop Stand"}
+        },
+        {"do":"wait","actor":"buyer","ms":2000}
+      ],
+      "criteria": [
+        {
+          "id": "107a",
+          "desc": "revenue rises by exactly what was bought",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "relativeTo": "revenue-before",
+              "plus": 58,
+              "within": 10000
+            }
+          ],
+          "statedBy": "total revenue equals the sum of order totals"
+        },
+        {
+          "id": "107b",
+          "desc": "what the store sold is what left the warehouses, and a fresh client agrees",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {"testid":"admin-item-row","contains":"Laptop Stand"},
+              "relativeTo": "stand-before",
+              "plus": -2
+            },
+            {"do":"freshClient","actor":"buyer"},
+            {
+              "do": "expectNumber",
+              "actor": "buyer-fresh",
+              "testid": "item-stock",
+              "in": {"testid":"item-card","contains":"Laptop Stand"},
+              "relativeTo": "stand-before",
+              "plus": -2
+            }
+          ],
+          "statedBy": "warehouse totals and a fresh storefront agree with completed sales"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-buying-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-buying-2.4.0.json
new file mode 100644
index 00000000000..9af40e75cf2
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-buying-2.4.0.json
@@ -0,0 +1,76 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Purchasing and orders",
+  "note": "Each purchase check owns its state. Checks inspect durable results after reload instead of requiring panels to close through a particular keyboard interaction.",
+  "features": [
+    {
+      "id": 3,
+      "name": "Buying",
+      "actors": ["buyer", "watcher", "visitor"],
+      "setup": [
+        { "do": "signUp", "actor": "buyer", "name": "eli" },
+        { "do": "signUp", "actor": "watcher", "name": "fay" }
+      ],
+      "criteria": [
+        {
+          "id": "3a",
+          "desc": "a signed-out visitor cannot use purchasing controls",
+          "points": 1,
+          "steps": [
+            { "do": "expectUnavailable", "actor": "visitor", "testid": "buy-now" },
+            { "do": "expectUnavailable", "actor": "visitor", "testid": "add-to-cart" }
+          ],
+          "statedBy": "buy and add-to-cart actions are unavailable while signed out"
+        },
+        {
+          "id": "3b",
+          "desc": "buying reduces the stock every other client sees, without a reload",
+          "points": 2,
+          "steps": [
+            { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Espresso Machine" }, "equals": 100 },
+            { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Espresso Machine" } },
+            { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Espresso Machine" }, "equals": 99 },
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Espresso Machine" }, "equals": 99 }
+          ],
+          "statedBy": "buying an item reduces its stock by one for everyone"
+        },
+        {
+          "id": "3c",
+          "desc": "the purchase is recorded in the buyer's order history at the price paid",
+          "points": 1,
+          "steps": [
+            { "do": "fill", "actor": "buyer", "testid": "search-input", "text": "Coffee Grinder", "enter": true, "settleMs": 1500 },
+            { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Coffee Grinder" } },
+            { "do": "click", "actor": "buyer", "testid": "orders-toggle" },
+            { "do": "expect", "actor": "buyer", "testid": "order-item", "contains": "Coffee Grinder" },
+            { "do": "expectNumber", "actor": "buyer", "testid": "order-total", "in": { "testid": "order-item", "contains": "Coffee Grinder" }, "equals": 64 }
+          ],
+          "statedBy": "it creates an order for the buyer, visible in their order history"
+        },
+        {
+          "id": "3d",
+          "desc": "the last unit sells and the next purchase is refused without changing stock",
+          "points": 2,
+          "steps": [
+            { "do": "fill", "actor": "buyer", "testid": "search-input", "text": "Mirrorless Camera", "enter": true, "settleMs": 1500 },
+            { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Mirrorless Camera" } },
+            { "do": "wait", "actor": "buyer", "ms": 800 },
+            { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Mirrorless Camera" } },
+            { "do": "wait", "actor": "buyer", "ms": 800 },
+            { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Mirrorless Camera" } },
+            { "do": "expectNumber", "actor": "buyer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Mirrorless Camera" }, "equals": 0 },
+            { "do": "expect", "actor": "buyer", "testid": "out-of-stock", "in": { "testid": "item-card", "contains": "Mirrorless Camera" } },
+            { "do": "callAction", "actor": "buyer", "action": "buy", "namedAction": { "id": "buy", "path": "/api/items/:id/buy", "reducer": "buy_now", "args": [0], "params": [{ "name": "itemId", "in": "path", "placeholder": ":id", "wireType": "u64" }] }, "input": { "testid": "item-card", "contains": "Mirrorless Camera", "attribute": "data-buy-input" }, "settleMs": 2000 },
+            { "do": "expectActionOutcome", "actor": "buyer", "outcome": "validation-refused" },
+            { "do": "reload", "actor": "buyer", "settleMs": 3000 },
+            { "do": "expectNumber", "actor": "buyer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Mirrorless Camera" }, "equals": 0 }
+          ],
+          "statedBy": "an item with zero stock cannot be bought"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-cart-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-cart-2.4.0.json
new file mode 100644
index 00000000000..6b0630bdcbc
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-cart-2.4.0.json
@@ -0,0 +1,79 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Cart and checkout",
+  "note": "Each check owns its account and cart state. Checkout is verified after reload through persistent cart count, stock, and order state, without requiring a particular panel lifecycle or Escape-key handler.",
+  "features": [
+    {
+      "id": 4,
+      "name": "Cart belongs to the account",
+      "actors": ["quantity", "reload", "live1", "live2", "checkout"],
+      "setup": [
+        { "do": "signUp", "actor": "quantity", "name": "nora" },
+        { "do": "signUp", "actor": "reload", "name": "omar" },
+        { "do": "signUp", "actor": "live1", "name": "pia" },
+        { "do": "signUp", "actor": "checkout", "name": "quinn" }
+      ],
+      "criteria": [
+        {
+          "id": "4a",
+          "desc": "adding the same item twice raises its quantity instead of adding a second line",
+          "points": 1,
+          "steps": [
+            { "do": "click", "actor": "quantity", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } },
+            { "do": "wait", "actor": "quantity", "ms": 800 },
+            { "do": "click", "actor": "quantity", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } },
+            { "do": "click", "actor": "quantity", "testid": "cart-toggle" },
+            { "do": "expect", "actor": "quantity", "testid": "cart-item", "contains": "Headphones", "count": 1 },
+            { "do": "expectNumber", "actor": "quantity", "testid": "cart-quantity", "in": { "testid": "cart-item", "contains": "Headphones" }, "equals": 2 }
+          ],
+          "statedBy": "adding an item that is already in the cart raises its quantity"
+        },
+        {
+          "id": "4b",
+          "desc": "the cart survives a reload",
+          "points": 1,
+          "steps": [
+            { "do": "click", "actor": "reload", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Laptop Stand" } },
+            { "do": "reload", "actor": "reload", "settleMs": 3000 },
+            { "do": "click", "actor": "reload", "testid": "cart-toggle" },
+            { "do": "expect", "actor": "reload", "testid": "cart-item", "contains": "Laptop Stand" }
+          ],
+          "statedBy": "the cart survives a reload"
+        },
+        {
+          "id": "4c",
+          "desc": "the same account signed in elsewhere sees one cart, live",
+          "points": 2,
+          "steps": [
+            { "do": "signIn", "actor": "live2", "name": "pia" },
+            { "do": "click", "actor": "live2", "testid": "cart-toggle" },
+            { "do": "click", "actor": "live1", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Induction Cooktop" } },
+            { "do": "expect", "actor": "live2", "testid": "cart-item", "contains": "Induction Cooktop", "within": 10000 }
+          ],
+          "statedBy": "the same account signed in twice sees one cart, and a change made in one place appears in the other without a reload"
+        },
+        {
+          "id": "4d",
+          "desc": "checkout creates one order, reduces stock and empties the cart",
+          "points": 2,
+          "steps": [
+            { "do": "expectNumber", "actor": "checkout", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "equals": 100 },
+            { "do": "click", "actor": "checkout", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } },
+            { "do": "expectNumber", "actor": "checkout", "testid": "cart-count", "equals": 1 },
+            { "do": "click", "actor": "checkout", "testid": "cart-toggle" },
+            { "do": "click", "actor": "checkout", "testid": "checkout-submit" },
+            { "do": "wait", "actor": "checkout", "ms": 1500 },
+            { "do": "expectNumber", "actor": "checkout", "testid": "cart-count", "equals": 0 },
+            { "do": "expectNumber", "actor": "checkout", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "equals": 99 },
+            { "do": "click", "actor": "checkout", "testid": "orders-toggle" },
+            { "do": "expect", "actor": "checkout", "testid": "order-item", "contains": "Headphones", "count": 1 }
+          ],
+          "statedBy": "checkout turns the cart into one order, reduces stock for every line, and empties the cart"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-cart-boundary-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-cart-boundary-2.4.0.json
new file mode 100644
index 00000000000..95c7180d20e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-cart-boundary-2.4.0.json
@@ -0,0 +1,121 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "A cart is nobody else's business",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "Every criterion receives all state it relies on from its feature setup. Security assertions include a working positive path where an empty or broken view could otherwise look secure.",
+  "features": [
+    {
+      "id": 109,
+      "name": "A cart is nobody else's business",
+      "actors": ["owner","stranger"],
+      "setup": [
+        {"do":"signUp","actor":"owner","name":"vic"},
+        {"do":"signUp","actor":"stranger","name":"wes"},
+        {
+          "do": "click",
+          "actor": "owner",
+          "testid": "add-to-cart",
+          "in": {"testid":"item-card","contains":"Coffee Grinder"}
+        },
+        {"do":"wait","actor":"owner","ms":1500},
+        {"do":"click","actor":"owner","testid":"cart-toggle"}
+      ],
+      "criteria": [
+        {
+          "id": "109a",
+          "desc": "the same cart action run by another customer changes only that customer's cart",
+          "points": 2,
+          "steps": [
+            {
+              "do": "callAction",
+              "actor": "stranger",
+              "from": "owner",
+              "action": "cart-add",
+              "namedAction": {
+                "id": "cart-add",
+                "path": "/api/cart",
+                "reducer": "add_to_cart",
+                "args": [0],
+                "params": [{"name":"itemId","in":"body","wireType":"u64"}]
+              },
+              "input": {"testid":"item-card","contains":"Coffee Grinder","attribute":"data-buy-input"},
+              "settleMs": 2000
+            },
+            {"do":"expectActionOutcome","actor":"stranger","outcome":"accepted"},
+            {"do":"expect","actor":"owner","testid":"cart-item","contains":"Coffee Grinder","count":1},
+            {
+              "do": "expectNumber",
+              "actor": "owner",
+              "testid": "cart-quantity",
+              "in": {"testid":"cart-item","contains":"Coffee Grinder"},
+              "equals": 1
+            },
+            {"do":"click","actor":"stranger","testid":"cart-toggle"},
+            {"do":"expect","actor":"stranger","testid":"cart-item","contains":"Coffee Grinder","count":1},
+            {
+              "do": "expectNumber",
+              "actor": "stranger",
+              "testid": "cart-quantity",
+              "in": {"testid":"cart-item","contains":"Coffee Grinder"},
+              "equals": 1
+            }
+          ],
+          "statedBy": "one customer cannot read or change another customer's cart"
+        },
+        {
+          "id": "109b",
+          "desc": "a quantity below one is refused and leaves the cart unchanged",
+          "points": 1,
+          "steps": [
+            {"do":"recordNumber","actor":"owner","testid":"cart-total","as":"cart-total-before-invalid"},
+            {
+              "do": "recordNumber",
+              "actor": "owner",
+              "testid": "cart-quantity",
+              "in": {"testid":"cart-item","contains":"Coffee Grinder"},
+              "as": "cart-quantity-before-invalid"
+            },
+            {
+              "do": "callAction",
+              "actor": "owner",
+              "action": "cart-set-quantity",
+              "namedAction": {
+                "id": "cart-set-quantity",
+                "path": "/api/cart/:itemId",
+                "method": "PATCH",
+                "reducer": "update_cart_quantity",
+                "args": [0,-3],
+                "params": [
+                  {"name":"itemId","in":"path","placeholder":":itemId","wireType":"u64"},
+                  {"name":"quantity","in":"body"}
+                ]
+              },
+              "input": {"testid":"cart-item","contains":"Coffee Grinder","attribute":"data-cart-input"},
+              "settleMs": 2000
+            },
+            {"do":"expectActionOutcome","actor":"owner","outcome":"validation-refused"},
+            {
+              "do": "expectNumber",
+              "actor": "owner",
+              "testid": "cart-total",
+              "relativeTo": "cart-total-before-invalid",
+              "plus": 0
+            },
+            {
+              "do": "expectNumber",
+              "actor": "owner",
+              "testid": "cart-quantity",
+              "in": {"testid":"cart-item","contains":"Coffee Grinder"},
+              "relativeTo": "cart-quantity-before-invalid",
+              "plus": 0
+            }
+          ],
+          "statedBy": "a request carrying zero or a negative quantity is refused and changes nothing"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-cart-boundary-2.4.1.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-cart-boundary-2.4.1.json
new file mode 100644
index 00000000000..7f6be04822c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-cart-boundary-2.4.1.json
@@ -0,0 +1,120 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "A cart is nobody else's business",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "Every criterion receives all state it relies on from its feature setup. Security assertions include a working positive path where an empty or broken view could otherwise look secure.",
+  "features": [
+    {
+      "id": 109,
+      "name": "A cart is nobody else's business",
+      "actors": ["owner","stranger"],
+      "setup": [
+        {"do":"signUp","actor":"owner","name":"vic"},
+        {"do":"signUp","actor":"stranger","name":"wes"},
+        {
+          "do": "click",
+          "actor": "owner",
+          "testid": "add-to-cart",
+          "in": {"testid":"item-card","contains":"Coffee Grinder"}
+        },
+        {"do":"wait","actor":"owner","ms":1500},
+        {"do":"click","actor":"owner","testid":"cart-toggle"}
+      ],
+      "criteria": [
+        {
+          "id": "109a",
+          "desc": "the same cart action run by another customer changes only that customer's cart",
+          "points": 2,
+          "steps": [
+            {
+              "do": "callAction",
+              "actor": "stranger",
+              "action": "cart-add",
+              "namedAction": {
+                "id": "cart-add",
+                "path": "/api/cart",
+                "reducer": "add_to_cart",
+                "args": [0],
+                "params": [{"name":"itemId","in":"body","wireType":"u64"}]
+              },
+              "input": {"testid":"item-card","contains":"Coffee Grinder","attribute":"data-buy-input"},
+              "settleMs": 2000
+            },
+            {"do":"expectActionOutcome","actor":"stranger","outcome":"accepted"},
+            {"do":"expect","actor":"owner","testid":"cart-item","contains":"Coffee Grinder","count":1},
+            {
+              "do": "expectNumber",
+              "actor": "owner",
+              "testid": "cart-quantity",
+              "in": {"testid":"cart-item","contains":"Coffee Grinder"},
+              "equals": 1
+            },
+            {"do":"click","actor":"stranger","testid":"cart-toggle"},
+            {"do":"expect","actor":"stranger","testid":"cart-item","contains":"Coffee Grinder","count":1},
+            {
+              "do": "expectNumber",
+              "actor": "stranger",
+              "testid": "cart-quantity",
+              "in": {"testid":"cart-item","contains":"Coffee Grinder"},
+              "equals": 1
+            }
+          ],
+          "statedBy": "one customer cannot read or change another customer's cart"
+        },
+        {
+          "id": "109b",
+          "desc": "a quantity below one is refused and leaves the cart unchanged",
+          "points": 1,
+          "steps": [
+            {"do":"recordNumber","actor":"owner","testid":"cart-total","as":"cart-total-before-invalid"},
+            {
+              "do": "recordNumber",
+              "actor": "owner",
+              "testid": "cart-quantity",
+              "in": {"testid":"cart-item","contains":"Coffee Grinder"},
+              "as": "cart-quantity-before-invalid"
+            },
+            {
+              "do": "callAction",
+              "actor": "owner",
+              "action": "cart-set-quantity",
+              "namedAction": {
+                "id": "cart-set-quantity",
+                "path": "/api/cart/:itemId",
+                "method": "PATCH",
+                "reducer": "update_cart_quantity",
+                "args": [0,-3],
+                "params": [
+                  {"name":"itemId","in":"path","placeholder":":itemId","wireType":"u64"},
+                  {"name":"quantity","in":"body"}
+                ]
+              },
+              "input": {"testid":"cart-item","contains":"Coffee Grinder","attribute":"data-cart-input"},
+              "settleMs": 2000
+            },
+            {"do":"expectActionOutcome","actor":"owner","outcome":"validation-refused"},
+            {
+              "do": "expectNumber",
+              "actor": "owner",
+              "testid": "cart-total",
+              "relativeTo": "cart-total-before-invalid",
+              "plus": 0
+            },
+            {
+              "do": "expectNumber",
+              "actor": "owner",
+              "testid": "cart-quantity",
+              "in": {"testid":"cart-item","contains":"Coffee Grinder"},
+              "relativeTo": "cart-quantity-before-invalid",
+              "plus": 0
+            }
+          ],
+          "statedBy": "a request carrying zero or a negative quantity is refused and changes nothing"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-catalog-ranking-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-catalog-ranking-1.0.0.json
new file mode 100644
index 00000000000..d7c412cdc82
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-catalog-ranking-1.0.0.json
@@ -0,0 +1,43 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Ecommerce L1 catalog ranking",
+  "note": "This scenario owns only the initial storefront ranking check.",
+  "features": [
+    {
+      "id": 2,
+      "name": "Public catalog ranking",
+      "actors": ["visitor"],
+      "setup": [],
+      "criteria": [
+        {
+          "id": "2b",
+          "desc": "the storefront shows the exact alphabetical top ten before any purchase",
+          "points": 1,
+          "statedBy": "Show the ten most-purchased items and break ties by item name",
+          "steps": [
+            {
+              "do": "expectSequence",
+              "actor": "visitor",
+              "testid": "item-name",
+              "in": { "testid": "item-list" },
+              "equals": [
+                "Air Purifier",
+                "Bluetooth Speaker",
+                "Coffee Grinder",
+                "Desk Lamp",
+                "Espresso Machine",
+                "Gaming Mouse",
+                "Headphones",
+                "Induction Cooktop",
+                "Keyboard",
+                "Laptop Stand"
+              ]
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-catalog-search-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-catalog-search-1.0.0.json
new file mode 100644
index 00000000000..51388a55f11
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-catalog-search-1.0.0.json
@@ -0,0 +1,27 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Ecommerce L1 catalog search",
+  "note": "This scenario owns only the full-catalog search check.",
+  "features": [
+    {
+      "id": 2,
+      "name": "Public catalog search",
+      "actors": ["visitor"],
+      "setup": [],
+      "criteria": [
+        {
+          "id": "2d",
+          "desc": "case-insensitive partial search finds an item outside the storefront top ten",
+          "points": 1,
+          "statedBy": "Search matches any part of an item name without regard to case across the full catalog",
+          "steps": [
+            { "do": "fill", "actor": "visitor", "testid": "search-input", "text": "mirrorLESS", "enter": true, "settleMs": 1500 },
+            { "do": "expect", "actor": "visitor", "testid": "item-card", "contains": "Mirrorless Camera", "in": { "testid": "search-results" } }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-catalog-values-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-catalog-values-1.0.0.json
new file mode 100644
index 00000000000..e3922997190
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-catalog-values-1.0.0.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Ecommerce L1 catalog values",
+  "note": "This scenario owns only the public catalog value check.",
+  "features": [
+    {
+      "id": 2,
+      "name": "Public catalog values",
+      "actors": ["visitor"],
+      "setup": [],
+      "criteria": [
+        {
+          "id": "2a",
+          "desc": "a signed-out visitor sees the seeded item name, price, and total stock",
+          "points": 1,
+          "statedBy": "Each item shows its name, price, and total stock",
+          "steps": [
+            { "do": "expect", "actor": "visitor", "testid": "item-card", "contains": "Air Purifier" },
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-price", "in": { "testid": "item-card", "contains": "Air Purifier" }, "equals": 189 },
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "equals": 100 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-contention.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-contention.json
new file mode 100644
index 00000000000..51abab1213a
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-contention.json
@@ -0,0 +1,595 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront and warehouse — contention (WITHHELD)",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "Candidate checks score zero until qualification proves the reference passes and the declared mutation fails only its own criterion. Setup failure, inconclusive evidence, a different failed criterion, or collateral regressions do not qualify.",
+  "features": [
+    {
+      "id": 201,
+      "name": "The last unit is sold once",
+      "actors": [
+        "a",
+        "b",
+        "c",
+        "d",
+        "e",
+        "f"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "a",
+          "name": "c1"
+        },
+        {
+          "do": "signUp",
+          "actor": "b",
+          "name": "c2"
+        },
+        {
+          "do": "signUp",
+          "actor": "c",
+          "name": "c3"
+        },
+        {
+          "do": "signUp",
+          "actor": "d",
+          "name": "c4"
+        },
+        {
+          "do": "signUp",
+          "actor": "e",
+          "name": "c5"
+        },
+        {
+          "do": "signUp",
+          "actor": "f",
+          "name": "c6"
+        },
+        {
+          "do": "fill",
+          "actor": "a",
+          "testid": "search-input",
+          "text": "Mirrorless Camera",
+          "enter": true,
+          "settleMs": 1200
+        },
+        {
+          "do": "fill",
+          "actor": "b",
+          "testid": "search-input",
+          "text": "Mirrorless Camera",
+          "enter": true,
+          "settleMs": 1200
+        },
+        {
+          "do": "fill",
+          "actor": "c",
+          "testid": "search-input",
+          "text": "Mirrorless Camera",
+          "enter": true,
+          "settleMs": 1200
+        },
+        {
+          "do": "fill",
+          "actor": "d",
+          "testid": "search-input",
+          "text": "Mirrorless Camera",
+          "enter": true,
+          "settleMs": 1200
+        },
+        {
+          "do": "fill",
+          "actor": "e",
+          "testid": "search-input",
+          "text": "Mirrorless Camera",
+          "enter": true,
+          "settleMs": 1200
+        },
+        {
+          "do": "fill",
+          "actor": "f",
+          "testid": "search-input",
+          "text": "Mirrorless Camera",
+          "enter": true,
+          "settleMs": 1200
+        }
+      ],
+      "criteria": [
+        {
+          "id": "201a",
+          "desc": "six customers buy the last three units at once: stock lands on exactly zero, never below",
+          "points": 1,
+          "steps": [
+            {
+              "do": "clickConcurrently",
+              "testid": "buy-now",
+              "actors": [
+                "a",
+                "b",
+                "c",
+                "d",
+                "e",
+                "f"
+              ],
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              },
+              "settleMs": 6000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "a",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              },
+              "equals": 0
+            },
+            {
+              "do": "expectAgreement",
+              "actors": [
+                "a",
+                "b",
+                "c",
+                "d",
+                "e",
+                "f"
+              ],
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              },
+              "numeric": true
+            }
+          ],
+          "provenBy": "Candidate backend-specific mutants are declared for this criterion and must pass the live Docker mutation gate before this oracle is called production-validated. PostgreSQL and MongoDB remove an explicit concurrency control; SpacetimeDB omits inventory reservation because reducer transactions make the equivalent interleaving defect inexpressible.",
+          "statedBy": "stock may never go negative, and two customers must never both get the last unit"
+        },
+        {
+          "id": "201b",
+          "desc": "exactly three of the six customers end up with an order, and none is charged twice",
+          "points": 0,
+          "steps": [
+            {
+              "do": "clickConcurrently",
+              "testid": "orders-toggle",
+              "actors": [
+                "a",
+                "b",
+                "c",
+                "d",
+                "e",
+                "f"
+              ],
+              "settleMs": 2500
+            },
+            {
+              "do": "expectActorsWith",
+              "actors": [
+                "a",
+                "b",
+                "c",
+                "d",
+                "e",
+                "f"
+              ],
+              "testid": "order-item",
+              "contains": "Mirrorless Camera",
+              "equals": 3,
+              "maxEach": 1
+            }
+          ],
+          "withheld": "rewritten to count the population instead of one participant: the old phrasing asked actor a for at most one order, which passes when nobody got one. Stays at 0 points until it kills a mutant on a real build.",
+          "statedBy": "two customers must never both get the last unit"
+        },
+        {
+          "id": "201c",
+          "desc": "revenue counts three sales, not six",
+          "points": 0,
+          "withheld": "needs an admin actor; wire once 201a has demonstrably failed somewhere",
+          "steps": [],
+          "statedBy": "stock must never leave a warehouse without a corresponding order"
+        }
+      ]
+    },
+    {
+      "id": 202,
+      "name": "A restock during a rush is not lost",
+      "actors": [
+        "admin",
+        "a",
+        "b",
+        "c"
+      ],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        {
+          "do": "signUp",
+          "actor": "a",
+          "name": "r1"
+        },
+        {
+          "do": "signUp",
+          "actor": "b",
+          "name": "r2"
+        },
+        {
+          "do": "signUp",
+          "actor": "c",
+          "name": "r3"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "202-control",
+          "points": 0,
+          "withheld": "diagnostic: establishes that a restock is applied and reaches the storefront",
+          "desc": "an uncontended restock of five is stored by the server and shows on the storefront",
+          "steps": [
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "admin-link"
+            },
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-location-qty",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Bluetooth Speaker"
+              },
+              "as": "warehouse-before"
+            },
+            {
+              "do": "recordNumber",
+              "actor": "a",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              },
+              "as": "storefront-before"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "restock-input",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Bluetooth Speaker"
+              },
+              "text": "5"
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "restock-submit",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Bluetooth Speaker"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "admin",
+              "ms": 4000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-location-qty",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Bluetooth Speaker"
+              },
+              "relativeTo": "warehouse-before",
+              "plus": 5,
+              "within": 8000
+            },
+            {
+              "do": "pressKey",
+              "actor": "a",
+              "key": "Escape",
+              "settleMs": 800
+            },
+            {
+              "do": "expectNumber",
+              "actor": "a",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              },
+              "relativeTo": "storefront-before",
+              "plus": 5,
+              "within": 8000
+            }
+          ]
+        },
+        {
+          "id": "202a",
+          "points": 0,
+          "withheld": "A candidate cross-feature mutation now omits purchase inventory reservation and directly makes this read start + 5 instead of start + 2. Keep at zero until that exact target passes the repeated live Docker mutation gate.",
+          "desc": "three purchases and a restock of five during the rush leave stock at start + 2",
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "a",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              },
+              "as": "rush-before"
+            },
+            {
+              "do": "clickConcurrently",
+              "actors": [
+                "a",
+                "b",
+                "c"
+              ],
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              },
+              "settleMs": 500
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "restock-input",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Bluetooth Speaker"
+              },
+              "text": "5"
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "restock-submit",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Bluetooth Speaker"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "admin",
+              "ms": 6000
+            },
+            {
+              "do": "pressKey",
+              "actor": "a",
+              "key": "Escape",
+              "settleMs": 800
+            },
+            {
+              "do": "expectNumber",
+              "actor": "a",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              },
+              "relativeTo": "rush-before",
+              "plus": 2,
+              "within": 10000
+            }
+          ],
+          "statedBy": "a restock in one warehouse raises the storefront number live"
+        }
+      ],
+      "note": "The rush assertion only means something if a restock works at all, so the control runs first and has to move the number. Without it a restock that never reached the server and a restock lost to a race look identical: both leave stock at start - purchases. The control also separates the two, by reading what the server stored (admin-location-qty) before what the buyer sees (item-stock). Totals are asserted as CHANGES rather than absolute values, because earlier features buy from the same catalogue."
+    },
+    {
+      "id": 203,
+      "name": "One cart, two tabs, one checkout",
+      "actors": [
+        "tab1",
+        "tab2",
+        "filler"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "tab1",
+          "name": "twin"
+        },
+        {
+          "do": "signIn",
+          "actor": "tab2",
+          "name": "twin"
+        },
+        {
+          "do": "signIn",
+          "actor": "filler",
+          "name": "twin"
+        },
+        {
+          "do": "fill",
+          "actor": "tab1",
+          "testid": "search-input",
+          "text": "Gaming Mouse",
+          "enter": true,
+          "settleMs": 1500
+        },
+        {
+          "do": "fill",
+          "actor": "tab2",
+          "testid": "search-input",
+          "text": "Gaming Mouse",
+          "enter": true,
+          "settleMs": 1500
+        }
+      ],
+      "criteria": [
+        {
+          "id": "203a",
+          "desc": "the same item added from two tabs at once becomes one line of two",
+          "points": 0,
+          "withheld": "runs clean (2/2) but no mutant has been attempted against it yet.",
+          "steps": [
+            {
+              "do": "clickConcurrently",
+              "testid": "add-to-cart",
+              "actors": [
+                "tab1",
+                "tab2"
+              ],
+              "in": {
+                "testid": "item-card",
+                "contains": "Gaming Mouse"
+              },
+              "settleMs": 4000
+            },
+            {
+              "do": "click",
+              "actor": "tab1",
+              "testid": "cart-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "tab1",
+              "testid": "cart-item",
+              "contains": "Gaming Mouse",
+              "count": 1
+            },
+            {
+              "do": "expectNumber",
+              "actor": "tab1",
+              "testid": "cart-quantity",
+              "in": {
+                "testid": "cart-item",
+                "contains": "Gaming Mouse"
+              },
+              "equals": 2
+            }
+          ],
+          "statedBy": "raises its quantity rather than adding a second line"
+        },
+        {
+          "id": "203b",
+          "desc": "checking the same cart out twice at once produces one order",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "tab1",
+              "testid": "checkout-submit"
+            },
+            {
+              "do": "wait",
+              "actor": "tab1",
+              "ms": 2500
+            },
+            {
+              "do": "fill",
+              "actor": "tab2",
+              "testid": "search-input",
+              "text": "Webcam",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "tab2",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Webcam"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "tab2",
+              "ms": 1200
+            },
+            {
+              "do": "click",
+              "actor": "tab2",
+              "testid": "cart-toggle"
+            },
+            {
+              "do": "click",
+              "actor": "tab2",
+              "testid": "checkout-submit"
+            },
+            {
+              "do": "wait",
+              "actor": "tab2",
+              "ms": 2500
+            },
+            {
+              "do": "fill",
+              "actor": "filler",
+              "testid": "search-input",
+              "text": "Keyboard",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "filler",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Keyboard"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "filler",
+              "ms": 2000
+            },
+            {
+              "do": "callConcurrently",
+              "actors": [
+                "tab1",
+                "tab2"
+              ],
+              "action": "checkout",
+              "settleMs": 5000
+            },
+            {
+              "do": "expectCallOutcomes",
+              "accepted": 1
+            },
+            {
+              "do": "click",
+              "actor": "filler",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "filler",
+              "testid": "order-item",
+              "contains": "Keyboard",
+              "count": 1
+            }
+          ],
+          "note": "replayConcurrently replays each actor's LAST POST, so a racing tab must not touch the cart after its checkout is captured — that would overwrite the captured request with an add-to-cart. A third session on the same account fills the cart instead, leaving tab1 and tab2 holding nothing but their checkouts. A checkout carries no JSON body, so it never lands in lastWrites — the replay must select it by URL with the match option, or it silently races the last add-to-cart instead.",
+          "provenBy": "checkout-not-idempotent (postgres-ecom-l1.json): stripping FOR UPDATE from the cart read at checkout made two replayed checkout requests each create an order — the criterion failed on its own assertion (expected exactly 1 order containing Keyboard, found 2). The unmutated app passes, refusing the second checkout with a 400.",
+          "withheld": "uses the spec's named `checkout` action so it can be issued on either stack. It previously replayed a captured HTTP write, which SpacetimeDB never produces — that client writes over WebSocket — so the criterion reported INCONCLUSIVE there and the two backends were scored out of different totals. Points retained: it has already failed a mutant on the stacks that could run it.",
+          "statedBy": "checking out twice must not produce two orders"
+        }
+      ],
+      "note": "Both tabs reach the item by search rather than trusting the storefront: earlier features in this suite buy things, which re-ranks the top ten. Each tab opens its OWN cart — panel state belongs to a browser context, not to the feature."
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-core-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-core-2.4.0.json
new file mode 100644
index 00000000000..8383a856d64
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-core-2.4.0.json
@@ -0,0 +1,62 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Catalog",
+  "note": "Catalog checks assert the exact seeded values and visible ranking order rather than treating mere presence as ordering evidence.",
+  "features": [
+    {
+      "id": 2,
+      "name": "Storefront is public and live",
+      "actors": ["buyer", "visitor", "inspector"],
+      "setup": [
+        { "do": "signUp", "actor": "buyer", "name": "dov" }
+      ],
+      "criteria": [
+        {
+          "id": "2a",
+          "desc": "a signed-out visitor sees the catalogue with the seeded prices and stock",
+          "points": 1,
+          "steps": [
+            { "do": "fill", "actor": "inspector", "testid": "search-input", "text": "Air Purifier", "enter": true, "settleMs": 1500 },
+            { "do": "expect", "actor": "inspector", "testid": "item-card", "contains": "Air Purifier", "in": { "testid": "search-results" } },
+            { "do": "expectNumber", "actor": "inspector", "testid": "item-price", "in": { "testid": "item-card", "contains": "Air Purifier" }, "equals": 189 },
+            { "do": "expectNumber", "actor": "inspector", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "equals": 100 }
+          ],
+          "statedBy": "each card shows its name, current price, and total stock"
+        },
+        {
+          "id": "2b",
+          "desc": "the storefront shows the exact alphabetical top ten while nothing has been bought",
+          "points": 1,
+          "steps": [
+            { "do": "expectSequence", "actor": "visitor", "testid": "item-name", "in": { "testid": "item-list" }, "equals": ["Air Purifier", "Bluetooth Speaker", "Coffee Grinder", "Desk Lamp", "Espresso Machine", "Gaming Mouse", "Headphones", "Induction Cooktop", "Keyboard", "Laptop Stand"] }
+          ],
+          "statedBy": "the storefront shows the ten most-purchased items, with alphabetical order breaking ties"
+        },
+        {
+          "id": "2c",
+          "desc": "a purchase moves the bought item to the front of the ranking, live",
+          "points": 1,
+          "steps": [
+            { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Coffee Grinder" } },
+            { "do": "expectSequence", "actor": "visitor", "testid": "item-name", "in": { "testid": "item-list" }, "within": 10000, "equals": ["Coffee Grinder", "Air Purifier", "Bluetooth Speaker", "Desk Lamp", "Espresso Machine", "Gaming Mouse", "Headphones", "Induction Cooktop", "Keyboard", "Laptop Stand"] },
+            { "do": "expectAgreement", "actors": ["buyer", "visitor"], "testid": "item-stock", "in": { "testid": "item-card", "contains": "Coffee Grinder" }, "numeric": true }
+          ],
+          "statedBy": "a purchase immediately changes the ranking for every open client"
+        },
+        {
+          "id": "2d",
+          "desc": "search finds an item that is not on the storefront",
+          "points": 1,
+          "steps": [
+            { "do": "fill", "actor": "visitor", "testid": "search-input", "text": "Mirrorless", "enter": true, "settleMs": 1500 },
+            { "do": "expect", "actor": "visitor", "testid": "item-card", "contains": "Mirrorless Camera", "in": { "testid": "search-results" } }
+          ],
+          "statedBy": "search matches any part of an item name across the full catalogue"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.0.json
new file mode 100644
index 00000000000..e1e481d11ba
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.0.json
@@ -0,0 +1,98 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront — duplicate checkout",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "This focused suite owns the shared cart preparation needed by both duplicate-cart and duplicate-checkout checks, so either check can run independently.",
+  "features": [
+    {
+      "id": 203,
+      "name": "One cart, two tabs, one checkout",
+      "actors": ["tab1", "tab2", "filler"],
+      "setup": [
+        { "do": "signUp", "actor": "tab1", "name": "twin" },
+        { "do": "signIn", "actor": "tab2", "name": "twin" },
+        { "do": "signIn", "actor": "filler", "name": "twin" },
+        {
+          "do": "clickConcurrently",
+          "testid": "add-to-cart",
+          "actors": ["tab1", "tab2"],
+          "in": { "testid": "item-card", "contains": "Gaming Mouse" },
+          "settleMs": 4000
+        },
+        { "do": "click", "actor": "tab1", "testid": "cart-toggle" }
+      ],
+      "criteria": [
+        {
+          "id": "203a",
+          "desc": "the same item added from two tabs at once becomes one line of two",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "tab1",
+              "testid": "cart-item",
+              "contains": "Gaming Mouse",
+              "count": 1
+            },
+            {
+              "do": "expectNumber",
+              "actor": "tab1",
+              "testid": "cart-quantity",
+              "in": { "testid": "cart-item", "contains": "Gaming Mouse" },
+              "equals": 2
+            }
+          ],
+          "statedBy": "raises its quantity rather than adding a second line"
+        },
+        {
+          "id": "203b",
+          "desc": "checking the same cart out twice at once produces one order",
+          "points": 1,
+          "steps": [
+            { "do": "click", "actor": "tab1", "testid": "checkout-submit" },
+            { "do": "wait", "actor": "tab1", "ms": 2500 },
+            {
+              "do": "click",
+              "actor": "tab2",
+              "testid": "add-to-cart",
+              "in": { "testid": "item-card", "contains": "Keyboard" }
+            },
+            { "do": "wait", "actor": "tab2", "ms": 1200 },
+            { "do": "click", "actor": "tab2", "testid": "cart-toggle" },
+            { "do": "click", "actor": "tab2", "testid": "checkout-submit" },
+            { "do": "wait", "actor": "tab2", "ms": 2500 },
+            {
+              "do": "click",
+              "actor": "filler",
+              "testid": "add-to-cart",
+              "in": { "testid": "item-card", "contains": "Keyboard" }
+            },
+            { "do": "wait", "actor": "filler", "ms": 2000 },
+            {
+              "do": "callConcurrently",
+              "actors": ["tab1", "tab2"],
+              "action": "checkout",
+              "settleMs": 5000
+            },
+            { "do": "expectCallOutcomes", "accepted": 1 },
+            { "do": "click", "actor": "filler", "testid": "orders-toggle" },
+            {
+              "do": "expect",
+              "actor": "filler",
+              "testid": "order-item",
+              "contains": "Keyboard",
+              "count": 1
+            }
+          ],
+          "note": "callConcurrently resolves the track's named checkout action through the selected backend adapter and issues it at the same time with tab1 and tab2's own session credentials. The filler session prepares the shared Keyboard cart without changing either caller's browser state. The check requires exactly one server-accepted call and exactly one resulting Keyboard order.",
+          "provenBy": "The L1 2.3 candidate set binds an exact 203b defect on every reference stack: MongoDB bypasses the atomic cart claim-and-clear, while PostgreSQL and SpacetimeDB leave checked-out cart lines behind. These defects let both named checkout calls reuse the same cart, which the call-outcome and final order assertions are designed to catch. Exact Docker mutation qualification remains the promotion gate.",
+          "withheld": "The named checkout action has an HTTP route for MongoDB and PostgreSQL and a reducer mapping for SpacetimeDB. The stack adapter issues the corresponding credentialed request for each actor, giving all three stacks the same one-cart, two-call expectation.",
+          "statedBy": "checking out twice must not produce two orders"
+        }
+      ],
+      "note": "Each tab opens its own cart. Cart panel state belongs to the browser context."
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.1.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.1.json
new file mode 100644
index 00000000000..2f1f5b9e47f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-duplicate-checkout-2.3.1.json
@@ -0,0 +1,88 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront — duplicate checkout",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "This focused suite owns the shared cart preparation needed by both duplicate-cart and duplicate-checkout checks, so either check can run independently.",
+  "features": [
+    {
+      "id": 203,
+      "name": "One cart, two tabs, one checkout",
+      "actors": ["tab1", "tab2", "filler"],
+      "setup": [
+        { "do": "signUp", "actor": "tab1", "name": "twin" },
+        { "do": "signIn", "actor": "tab2", "name": "twin" },
+        { "do": "signIn", "actor": "filler", "name": "twin" },
+        {
+          "do": "clickConcurrently",
+          "testid": "add-to-cart",
+          "actors": ["tab1", "tab2"],
+          "in": { "testid": "item-card", "contains": "Gaming Mouse" },
+          "settleMs": 4000
+        },
+        { "do": "click", "actor": "tab1", "testid": "cart-toggle" }
+      ],
+      "criteria": [
+        {
+          "id": "203a",
+          "desc": "the same item added from two tabs at once becomes one line of two",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "tab1",
+              "testid": "cart-item",
+              "contains": "Gaming Mouse",
+              "count": 1
+            },
+            {
+              "do": "expectNumber",
+              "actor": "tab1",
+              "testid": "cart-quantity",
+              "in": { "testid": "cart-item", "contains": "Gaming Mouse" },
+              "equals": 2
+            }
+          ],
+          "statedBy": "raises its quantity rather than adding a second line"
+        },
+        {
+          "id": "203b",
+          "desc": "checking the same cart out twice at once produces one order",
+          "points": 1,
+          "steps": [
+            { "do": "click", "actor": "tab1", "testid": "checkout-submit" },
+            { "do": "wait", "actor": "tab1", "ms": 2500 },
+            {
+              "do": "click",
+              "actor": "filler",
+              "testid": "add-to-cart",
+              "in": { "testid": "item-card", "contains": "Keyboard" }
+            },
+            { "do": "wait", "actor": "filler", "ms": 2000 },
+            {
+              "do": "callConcurrently",
+              "actors": ["tab1", "tab2"],
+              "action": "checkout",
+              "settleMs": 5000
+            },
+            { "do": "expectCallOutcomes", "accepted": 1 },
+            { "do": "click", "actor": "filler", "testid": "orders-toggle" },
+            {
+              "do": "expect",
+              "actor": "filler",
+              "testid": "order-item",
+              "contains": "Keyboard",
+              "count": 1
+            }
+          ],
+          "note": "callConcurrently resolves the track's named checkout action through the selected backend adapter and issues it at the same time with tab1 and tab2's own session credentials. The filler session prepares the shared Keyboard cart without changing either caller's browser state. The check requires exactly one server-accepted call and exactly one resulting Keyboard order.",
+          "provenBy": "The L1 2.3 candidate set binds an exact 203b defect on every reference stack: MongoDB bypasses the atomic cart claim-and-clear, while PostgreSQL and SpacetimeDB leave checked-out cart lines behind. These defects let both named checkout calls reuse the same cart, which the call-outcome and final order assertions are designed to catch. Exact Docker mutation qualification remains the promotion gate.",
+          "withheld": "The named checkout action has an HTTP route for MongoDB and PostgreSQL and a reducer mapping for SpacetimeDB. The stack adapter issues the corresponding credentialed request for each actor, giving all three stacks the same one-cart, two-call expectation.",
+          "statedBy": "checking out twice must not produce two orders"
+        }
+      ],
+      "note": "Each tab opens its own cart. Cart panel state belongs to the browser context."
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-external-live-sync-1.1.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-external-live-sync-1.1.0.json
new file mode 100644
index 00000000000..2d313edc9d2
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-external-live-sync-1.1.0.json
@@ -0,0 +1,51 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront and warehouse — external write live synchronization",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/stock|\\/warehouses",
+  "note": "A focused, independently runnable probe for an already-open storefront. The direct database writer is outside the application server, and this scenario measures only live propagation.",
+  "features": [
+    {
+      "id": 901,
+      "name": "An open storefront follows a direct database write",
+      "actors": ["viewer"],
+      "setup": [
+        {
+          "do": "expectNumber",
+          "actor": "viewer",
+          "testid": "item-stock",
+          "in": { "testid": "item-card", "contains": "Desk Lamp" },
+          "equals": 100,
+          "within": 10000
+        }
+      ],
+      "criteria": [
+        {
+          "id": "901a",
+          "desc": "a direct database write sets Desk Lamp's East stock to 5, and the already-open storefront updates from 100 to 50 without a reload or page action",
+          "points": 1,
+          "note": "This proposed score remains draft until the focused pristine and mutation controls are qualified.",
+          "steps": [
+            {
+              "do": "dbSetStock",
+              "item": "Desk Lamp",
+              "warehouse": "East",
+              "quantity": 5,
+              "settleMs": 4000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "viewer",
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Desk Lamp" },
+              "equals": 50,
+              "within": 10000
+            }
+          ],
+          "statedBy": "when data changes by a path its server never saw"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-external-reconnect-sync-1.1.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-external-reconnect-sync-1.1.0.json
new file mode 100644
index 00000000000..6b524ecc88f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-external-reconnect-sync-1.1.0.json
@@ -0,0 +1,53 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront and warehouse — client reconnect synchronization",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/stock|\\/warehouses",
+  "note": "A focused reconnect probe with a known seed. West remains 45, so changing East from 55 to 7 must produce 52. It does not inherit the West=10 state from the server-restart criterion.",
+  "features": [
+    {
+      "id": 901,
+      "name": "A reconnecting storefront catches up to an external write",
+      "actors": ["viewer"],
+      "setup": [
+        {
+          "do": "expectNumber",
+          "actor": "viewer",
+          "testid": "item-stock",
+          "in": { "testid": "item-card", "contains": "Desk Lamp" },
+          "equals": 100,
+          "within": 10000
+        }
+      ],
+      "criteria": [
+        {
+          "id": "901d",
+          "desc": "while the storefront is offline, a direct database write sets Desk Lamp's East stock to 7; after reconnecting, the same page catches up from 100 to the authoritative total of 52",
+          "points": 1,
+          "note": "This proposed score remains draft until the focused pristine and mutation controls are qualified.",
+          "steps": [
+            { "do": "setOffline", "actor": "viewer", "offline": true, "settleMs": 1000 },
+            {
+              "do": "dbSetStock",
+              "item": "Desk Lamp",
+              "warehouse": "East",
+              "quantity": 7,
+              "settleMs": 4000
+            },
+            { "do": "setOffline", "actor": "viewer", "offline": false, "settleMs": 1000 },
+            {
+              "do": "expectNumber",
+              "actor": "viewer",
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Desk Lamp" },
+              "equals": 52,
+              "within": 20000
+            }
+          ],
+          "statedBy": "when data changes by a path its server never saw"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-external-reload-sync-1.1.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-external-reload-sync-1.1.0.json
new file mode 100644
index 00000000000..7e11082bcff
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-external-reload-sync-1.1.0.json
@@ -0,0 +1,52 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront and warehouse — external write reload persistence",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/stock|\\/warehouses",
+  "note": "A self-contained supporting probe. It performs its own direct database write before reloading, so it can be selected or rerun without depending on the live-propagation check.",
+  "features": [
+    {
+      "id": 901,
+      "name": "A direct database write survives reload",
+      "actors": ["viewer"],
+      "setup": [
+        {
+          "do": "expectNumber",
+          "actor": "viewer",
+          "testid": "item-stock",
+          "in": { "testid": "item-card", "contains": "Desk Lamp" },
+          "equals": 100,
+          "within": 10000
+        }
+      ],
+      "criteria": [
+        {
+          "id": "901b",
+          "desc": "after a direct database write sets Desk Lamp's East stock to 5, a reload reads the persisted total of 50",
+          "points": 0,
+          "note": "Supporting evidence for 901a rather than a second score. It rules out a page-only patch but has no distinct calibrated failure mode.",
+          "steps": [
+            {
+              "do": "dbSetStock",
+              "item": "Desk Lamp",
+              "warehouse": "East",
+              "quantity": 5,
+              "settleMs": 1000
+            },
+            { "do": "reload", "actor": "viewer", "settleMs": 3000 },
+            {
+              "do": "expectNumber",
+              "actor": "viewer",
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Desk Lamp" },
+              "equals": 50,
+              "within": 10000
+            }
+          ],
+          "statedBy": "when data changes by a path its server never saw"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-external-server-restart-sync-1.1.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-external-server-restart-sync-1.1.0.json
new file mode 100644
index 00000000000..9c188dcbe6c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-external-server-restart-sync-1.1.0.json
@@ -0,0 +1,53 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront and warehouse — server restart synchronization",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/stock|\\/warehouses",
+  "note": "A self-contained preservation of the already-scored server-restart check. East remains 55, so changing West from 45 to 10 while the server is stopped must produce 65 after reconnect.",
+  "features": [
+    {
+      "id": 901,
+      "name": "An open storefront catches up after its server restarts",
+      "actors": ["viewer"],
+      "setup": [
+        {
+          "do": "expectNumber",
+          "actor": "viewer",
+          "testid": "item-stock",
+          "in": { "testid": "item-card", "contains": "Desk Lamp" },
+          "equals": 100,
+          "within": 10000
+        }
+      ],
+      "criteria": [
+        {
+          "id": "901c",
+          "desc": "a stock correction lands while the app server is stopped, and the already-open storefront shows the authoritative total of 65 after the server returns without a reload",
+          "points": 1,
+          "note": "Preserves the previously promoted score while removing its dependency on 901a changing East stock first.",
+          "steps": [
+            { "do": "stopAppServer" },
+            {
+              "do": "dbSetStock",
+              "item": "Desk Lamp",
+              "warehouse": "West",
+              "quantity": 10,
+              "settleMs": 4000
+            },
+            { "do": "startAppServer" },
+            {
+              "do": "expectNumber",
+              "actor": "viewer",
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Desk Lamp" },
+              "equals": 65,
+              "within": 20000
+            }
+          ],
+          "statedBy": "a restart must end up showing the current numbers once the server is back"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-features.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-features.json
new file mode 100644
index 00000000000..93938efab16
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-features.json
@@ -0,0 +1,1180 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront and warehouse — features",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "Each feature is given its own seeded items where it mutates stock, because features share one database and a purchase in one would otherwise move another's numbers. Items reserved per feature: F2 Coffee Grinder, F3 Espresso Machine + Mirrorless Camera, F4 Headphones + Laptop Stand, F6 Induction Cooktop, F7 Gaming Mouse. Panels are closed after use and items are reached via search, because the storefront shows only the top ten and earlier features change that ranking.",
+  "features": [
+    {
+      "id": 1,
+      "name": "Accounts",
+      "actors": [
+        "shopper",
+        "impostor"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "shopper",
+          "name": "ann"
+        }
+      ],
+      "note": "The refusals are attempted by a second, signed-out actor: a client that is already signed in has no sign-up form to submit, so re-using one actor would test nothing.",
+      "criteria": [
+        {
+          "id": "1a",
+          "desc": "a visitor can create an account and is signed in as it",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "shopper",
+              "testid": "current-user",
+              "contains": "ann",
+              "within": 6000
+            }
+          ],
+          "statedBy": "a visitor can create an account with a username and password"
+        },
+        {
+          "id": "1b",
+          "desc": "a taken username is refused and does not sign the visitor in as the existing account",
+          "points": 1,
+          "steps": [
+            {
+              "do": "signUp",
+              "actor": "impostor",
+              "name": "ann",
+              "password": "different-pw",
+              "expectFailure": true
+            },
+            {
+              "do": "expect",
+              "actor": "impostor",
+              "testid": "auth-error",
+              "within": 6000
+            },
+            {
+              "do": "expect",
+              "actor": "impostor",
+              "testid": "current-user",
+              "absent": true
+            }
+          ],
+          "statedBy": "signing up with a taken username fails with a visible error and\nmust never sign the visitor in as the existing account"
+        },
+        {
+          "id": "1c",
+          "desc": "a wrong password is refused",
+          "points": 1,
+          "steps": [
+            {
+              "do": "signIn",
+              "actor": "impostor",
+              "name": "ann",
+              "password": "wrong-pw",
+              "expectFailure": true
+            },
+            {
+              "do": "expect",
+              "actor": "impostor",
+              "testid": "auth-error",
+              "within": 6000
+            },
+            {
+              "do": "expect",
+              "actor": "impostor",
+              "testid": "current-user",
+              "absent": true
+            }
+          ],
+          "statedBy": "signing in with a wrong password fails with a visible error"
+        },
+        {
+          "id": "1d",
+          "desc": "signing out and back in returns the same account",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "shopper",
+              "testid": "signout"
+            },
+            {
+              "do": "expect",
+              "actor": "shopper",
+              "testid": "signup-username",
+              "within": 6000
+            },
+            {
+              "do": "signIn",
+              "actor": "shopper",
+              "name": "ann"
+            },
+            {
+              "do": "expect",
+              "actor": "shopper",
+              "testid": "current-user",
+              "contains": "ann",
+              "within": 6000
+            }
+          ],
+          "statedBy": "a signed-in user can sign out, returning to the signed-out state"
+        },
+        {
+          "id": "1e",
+          "desc": "the session survives a reload",
+          "points": 1,
+          "steps": [
+            {
+              "do": "reload",
+              "actor": "shopper",
+              "settleMs": 4000
+            },
+            {
+              "do": "expect",
+              "actor": "shopper",
+              "testid": "current-user",
+              "contains": "ann",
+              "within": 6000
+            }
+          ],
+          "statedBy": "a signed-in session persists across a page reload"
+        }
+      ]
+    },
+    {
+      "id": 2,
+      "name": "Storefront is public and live",
+      "actors": [
+        "buyer",
+        "visitor"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "buyer",
+          "name": "dov"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "2a",
+          "desc": "a signed-out visitor sees the catalogue with prices and stock",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "item-card",
+              "contains": "Air Purifier"
+            },
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "item-price",
+              "in": {
+                "testid": "item-card",
+                "contains": "Air Purifier"
+              }
+            },
+            {
+              "do": "expectNumber",
+              "actor": "visitor",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Air Purifier"
+              },
+              "atLeast": 1
+            }
+          ],
+          "statedBy": "every item shows its name, price and current stock"
+        },
+        {
+          "id": "2b",
+          "desc": "the storefront shows ten items, alphabetically while nothing has been bought",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "item-card",
+              "count": 10
+            },
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "item-card",
+              "contains": "Air Purifier"
+            },
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "item-card",
+              "contains": "Laptop Stand"
+            },
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "item-card",
+              "contains": "Mirrorless Camera",
+              "absent": true
+            }
+          ],
+          "statedBy": "the storefront shows the 10 most-purchased items"
+        },
+        {
+          "id": "2c",
+          "desc": "a purchase moves the bought item to the front of the ranking, live",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Coffee Grinder"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "visitor",
+              "ms": 2500
+            },
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "item-name",
+              "in": {
+                "testid": "item-list"
+              },
+              "contains": "Coffee Grinder"
+            },
+            {
+              "do": "expectAgreement",
+              "actors": [
+                "buyer",
+                "visitor"
+              ],
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Coffee Grinder"
+              },
+              "numeric": true
+            }
+          ],
+          "statedBy": "when anyone buys something, every\nvisitor's storefront updates without a reload"
+        },
+        {
+          "id": "2d",
+          "desc": "search finds an item that is not on the storefront",
+          "points": 1,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "visitor",
+              "testid": "search-input",
+              "text": "Mirrorless",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "item-card",
+              "contains": "Mirrorless Camera",
+              "in": {
+                "testid": "search-results"
+              }
+            }
+          ],
+          "statedBy": "search covers the whole catalogue, not just the items currently on the storefront"
+        }
+      ]
+    },
+    {
+      "id": 3,
+      "name": "Buying",
+      "actors": [
+        "buyer",
+        "watcher",
+        "visitor"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "buyer",
+          "name": "eli"
+        },
+        {
+          "do": "signUp",
+          "actor": "watcher",
+          "name": "fay"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "3a",
+          "desc": "a signed-out visitor is offered no way to buy",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "buy-now",
+              "absent": true
+            },
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "add-to-cart",
+              "absent": true
+            }
+          ],
+          "statedBy": "a signed-out visitor sees no buy or\nadd-to-cart action"
+        },
+        {
+          "id": "3b",
+          "desc": "buying reduces the stock every other client sees, without a reload",
+          "points": 2,
+          "steps": [
+            {
+              "do": "expectNumber",
+              "actor": "watcher",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Espresso Machine"
+              },
+              "equals": 100
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Espresso Machine"
+              }
+            },
+            {
+              "do": "expectNumber",
+              "actor": "watcher",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Espresso Machine"
+              },
+              "equals": 99
+            },
+            {
+              "do": "expectNumber",
+              "actor": "visitor",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Espresso Machine"
+              },
+              "equals": 99
+            }
+          ],
+          "statedBy": "buying an item reduces its stock by one for everyone"
+        },
+        {
+          "id": "3c",
+          "desc": "the purchase is recorded in the buyer's order history at the price paid",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Espresso Machine"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "buyer",
+              "testid": "order-item",
+              "contains": "Espresso Machine"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "buyer",
+              "testid": "order-total",
+              "in": {
+                "testid": "order-item",
+                "contains": "Espresso Machine"
+              },
+              "atLeast": 449
+            },
+            {
+              "do": "pressKey",
+              "actor": "buyer",
+              "key": "Escape",
+              "settleMs": 800
+            }
+          ],
+          "statedBy": "it creates an order for the buyer,\nvisible in their order history"
+        },
+        {
+          "id": "3d",
+          "desc": "an item sells out visibly, and a checkout exceeding stock is refused and changes nothing",
+          "points": 2,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "buyer",
+              "testid": "search-input",
+              "text": "Mirrorless Camera",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "buyer",
+              "ms": 800
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "buyer",
+              "ms": 800
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "buyer",
+              "ms": 800
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "buyer",
+              "ms": 800
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              }
+            },
+            {
+              "do": "expectNumber",
+              "actor": "buyer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              },
+              "equals": 0
+            },
+            {
+              "do": "expect",
+              "actor": "buyer",
+              "testid": "out-of-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "cart-toggle"
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "checkout-submit"
+            },
+            {
+              "do": "expect",
+              "actor": "buyer",
+              "testid": "buy-error",
+              "within": 6000
+            },
+            {
+              "do": "expect",
+              "actor": "buyer",
+              "testid": "cart-item",
+              "contains": "Mirrorless Camera"
+            },
+            {
+              "do": "pressKey",
+              "actor": "buyer",
+              "key": "Escape",
+              "settleMs": 800
+            },
+            {
+              "do": "expectNumber",
+              "actor": "buyer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              },
+              "equals": 0
+            }
+          ],
+          "statedBy": "an item with zero stock cannot be bought"
+        }
+      ]
+    },
+    {
+      "id": 4,
+      "name": "Cart belongs to the account",
+      "actors": [
+        "tab1",
+        "tab2"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "tab1",
+          "name": "gus"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "4a",
+          "desc": "adding the same item twice raises its quantity instead of adding a second line",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "tab1",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "tab1",
+              "ms": 800
+            },
+            {
+              "do": "click",
+              "actor": "tab1",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "tab1",
+              "testid": "cart-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "tab1",
+              "testid": "cart-item",
+              "contains": "Headphones",
+              "count": 1
+            },
+            {
+              "do": "expectNumber",
+              "actor": "tab1",
+              "testid": "cart-quantity",
+              "in": {
+                "testid": "cart-item",
+                "contains": "Headphones"
+              },
+              "equals": 2
+            },
+            {
+              "do": "pressKey",
+              "actor": "tab1",
+              "key": "Escape",
+              "settleMs": 800
+            }
+          ],
+          "statedBy": "adding an item that is already in the cart raises its quantity"
+        },
+        {
+          "id": "4b",
+          "desc": "the cart survives a reload",
+          "points": 1,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "tab1",
+              "testid": "search-input",
+              "text": "Laptop Stand",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "tab1",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Laptop Stand"
+              }
+            },
+            {
+              "do": "reload",
+              "actor": "tab1",
+              "settleMs": 4000
+            },
+            {
+              "do": "click",
+              "actor": "tab1",
+              "testid": "cart-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "tab1",
+              "testid": "cart-item",
+              "contains": "Laptop Stand"
+            },
+            {
+              "do": "pressKey",
+              "actor": "tab1",
+              "key": "Escape",
+              "settleMs": 800
+            }
+          ],
+          "statedBy": "the cart survives a reload"
+        },
+        {
+          "id": "4c",
+          "desc": "the same account signed in elsewhere sees one cart, live",
+          "points": 2,
+          "steps": [
+            {
+              "do": "signIn",
+              "actor": "tab2",
+              "name": "gus"
+            },
+            {
+              "do": "click",
+              "actor": "tab2",
+              "testid": "cart-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "tab2",
+              "testid": "cart-item",
+              "contains": "Laptop Stand"
+            },
+            {
+              "do": "fill",
+              "actor": "tab1",
+              "testid": "search-input",
+              "text": "Induction Cooktop",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "tab1",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Induction Cooktop"
+              }
+            },
+            {
+              "do": "expect",
+              "actor": "tab2",
+              "testid": "cart-item",
+              "contains": "Induction Cooktop",
+              "within": 10000
+            }
+          ],
+          "statedBy": "the same account signed\nin twice sees one cart, and a change made in one place appears in the other without a\nreload"
+        },
+        {
+          "id": "4d",
+          "desc": "checkout creates one order, reduces stock and empties the cart",
+          "points": 2,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "tab1",
+              "testid": "cart-toggle"
+            },
+            {
+              "do": "click",
+              "actor": "tab1",
+              "testid": "checkout-submit"
+            },
+            {
+              "do": "wait",
+              "actor": "tab1",
+              "ms": 2000
+            },
+            {
+              "do": "expect",
+              "actor": "tab1",
+              "testid": "empty-cart"
+            },
+            {
+              "do": "pressKey",
+              "actor": "tab1",
+              "key": "Escape",
+              "settleMs": 800
+            },
+            {
+              "do": "fill",
+              "actor": "tab1",
+              "testid": "search-input",
+              "text": "",
+              "enter": true,
+              "settleMs": 1200
+            },
+            {
+              "do": "expectNumber",
+              "actor": "tab1",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Headphones"
+              },
+              "equals": 98
+            },
+            {
+              "do": "click",
+              "actor": "tab1",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "tab1",
+              "testid": "order-item",
+              "contains": "Headphones"
+            }
+          ],
+          "statedBy": "checkout turns the cart into one order, reduces stock for every line, and\nempties the cart"
+        }
+      ]
+    },
+    {
+      "id": 6,
+      "name": "Reviews",
+      "actors": [
+        "author",
+        "other",
+        "visitor"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "author",
+          "name": "hal"
+        },
+        {
+          "do": "signUp",
+          "actor": "other",
+          "name": "ivy"
+        },
+        {
+          "do": "click",
+          "actor": "author",
+          "testid": "buy-now",
+          "in": {
+            "testid": "item-card",
+            "contains": "Induction Cooktop"
+          }
+        },
+        {
+          "do": "wait",
+          "actor": "author",
+          "ms": 800
+        },
+        {
+          "do": "click",
+          "actor": "other",
+          "testid": "buy-now",
+          "in": {
+            "testid": "item-card",
+            "contains": "Induction Cooktop"
+          }
+        },
+        {
+          "do": "wait",
+          "actor": "other",
+          "ms": 800
+        }
+      ],
+      "criteria": [
+        {
+          "id": "6a",
+          "desc": "a customer can review an item and everyone sees it, signed out included",
+          "points": 2,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "author",
+              "testid": "search-input",
+              "text": "Induction Cooktop",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "author",
+              "testid": "item-name",
+              "in": {
+                "testid": "item-card",
+                "contains": "Induction Cooktop"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "author",
+              "testid": "review-rating",
+              "text": "4"
+            },
+            {
+              "do": "fill",
+              "actor": "author",
+              "testid": "review-input",
+              "text": "solid mold"
+            },
+            {
+              "do": "click",
+              "actor": "author",
+              "testid": "review-submit"
+            },
+            {
+              "do": "expect",
+              "actor": "author",
+              "testid": "review-item",
+              "contains": "solid mold"
+            },
+            {
+              "do": "click",
+              "actor": "visitor",
+              "testid": "item-name",
+              "in": {
+                "testid": "item-card",
+                "contains": "Induction Cooktop"
+              }
+            },
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "review-item",
+              "contains": "solid mold",
+              "within": 10000
+            }
+          ],
+          "statedBy": "reviews are visible to everyone, including signed-out visitors"
+        },
+        {
+          "id": "6b",
+          "desc": "one review per customer per item — a second does not add a duplicate",
+          "points": 1,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "author",
+              "testid": "review-rating",
+              "text": "2"
+            },
+            {
+              "do": "fill",
+              "actor": "author",
+              "testid": "review-input",
+              "text": "changed my mind"
+            },
+            {
+              "do": "click",
+              "actor": "author",
+              "testid": "review-submit"
+            },
+            {
+              "do": "wait",
+              "actor": "author",
+              "ms": 2000
+            },
+            {
+              "do": "expect",
+              "actor": "author",
+              "testid": "review-item",
+              "contains": "solid mold",
+              "absent": true
+            }
+          ],
+          "statedBy": "one review per customer per item"
+        },
+        {
+          "id": "6c",
+          "desc": "the average rating reflects both reviewers, live",
+          "points": 1,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "other",
+              "testid": "search-input",
+              "text": "Induction Cooktop",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "other",
+              "testid": "item-name",
+              "in": {
+                "testid": "item-card",
+                "contains": "Induction Cooktop"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "other",
+              "testid": "review-rating",
+              "text": "4"
+            },
+            {
+              "do": "fill",
+              "actor": "other",
+              "testid": "review-input",
+              "text": "does the job"
+            },
+            {
+              "do": "click",
+              "actor": "other",
+              "testid": "review-submit"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "other",
+              "testid": "review-average",
+              "equals": 3,
+              "within": 10000
+            },
+            {
+              "do": "expectAgreement",
+              "actors": [
+                "author",
+                "other"
+              ],
+              "testid": "review-average",
+              "numeric": true
+            }
+          ],
+          "statedBy": "each item shows its average rating, which updates live as reviews arrive"
+        }
+      ],
+      "note": "Both reviewers buy the item in setup: reviews are gated on a purchase, so an unpurchased reviewer would be refused by a compliant app."
+    },
+    {
+      "id": 7,
+      "name": "Admin and warehouses",
+      "actors": [
+        "admin",
+        "customer",
+        "visitor"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "customer",
+          "name": "jon"
+        },
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        }
+      ],
+      "criteria": [
+        {
+          "id": "7a",
+          "desc": "the admin area is for admins only",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "admin-link"
+            },
+            {
+              "do": "expect",
+              "actor": "customer",
+              "testid": "admin-link",
+              "absent": true
+            },
+            {
+              "do": "expect",
+              "actor": "customer",
+              "testid": "admin-panel",
+              "absent": true
+            }
+          ],
+          "statedBy": "admin accounts see an admin area; customers do not"
+        },
+        {
+          "id": "7b",
+          "desc": "admin lists every item, every warehouse, and what each warehouse holds",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "admin-link"
+            },
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "admin-item-row",
+              "count": 13
+            },
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "admin-warehouse-item",
+              "contains": "East"
+            },
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "admin-warehouse-item",
+              "contains": "West"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Gaming Mouse"
+              },
+              "equals": 100
+            }
+          ],
+          "statedBy": "admin lists every item with its stock, every warehouse, and the stock of\neach item in each warehouse"
+        },
+        {
+          "id": "7c",
+          "desc": "the storefront stock is the sum across warehouses, and a restock raises it live",
+          "points": 2,
+          "steps": [
+            {
+              "do": "pressKey",
+              "actor": "visitor",
+              "key": "Escape",
+              "settleMs": 800
+            },
+            {
+              "do": "fill",
+              "actor": "visitor",
+              "testid": "search-input",
+              "text": "Gaming Mouse",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "expectNumber",
+              "actor": "visitor",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Gaming Mouse"
+              },
+              "equals": 100
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "restock-input",
+              "text": "25",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Gaming Mouse"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "restock-submit",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Gaming Mouse"
+              }
+            },
+            {
+              "do": "expectNumber",
+              "actor": "visitor",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Gaming Mouse"
+              },
+              "equals": 125,
+              "within": 10000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Gaming Mouse"
+              },
+              "equals": 125
+            }
+          ],
+          "statedBy": "an item's stock on the storefront is the sum of that item's units across all\nwarehouses"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-invariants.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-invariants.json
new file mode 100644
index 00000000000..44cb792b09e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-invariants.json
@@ -0,0 +1,851 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront and warehouse — invariants",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "Cross-cutting properties, scored separately from features because an app can implement every feature and still let anyone spend anyone else's money. Each is stated as an outcome a customer would recognise, not as a protocol detail — a backend must not lose points for being harder to inspect, nor gain them for it. 108 and 109 cover what a customer may assert about things that are not theirs: a rating is a claim about a purchase, and a cart belongs to exactly one account.",
+  "features": [
+    {
+      "id": 101,
+      "name": "Purchase requires an account",
+      "actors": [
+        "buyer",
+        "guest"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "buyer",
+          "name": "kim"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "101a",
+          "desc": "a purchase request replayed without a session creates no order and moves no stock",
+          "points": 2,
+          "steps": [
+            {
+              "do": "expectNumber",
+              "actor": "buyer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              },
+              "equals": 100
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "buyer",
+              "ms": 1500
+            },
+            {
+              "do": "replayAs",
+              "actor": "guest",
+              "from": "buyer",
+              "match": "buy",
+              "settleMs": 2500
+            },
+            {
+              "do": "expectReplayRejected",
+              "actor": "guest"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "buyer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              },
+              "equals": 99
+            }
+          ],
+          "statedBy": "the server must refuse a purchase request that arrives without a valid session"
+        }
+      ]
+    },
+    {
+      "id": 102,
+      "name": "Purchases are attributed to whoever made them",
+      "actors": [
+        "victim",
+        "attacker"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "victim",
+          "name": "lee"
+        },
+        {
+          "do": "signUp",
+          "actor": "attacker",
+          "name": "mel"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "102a",
+          "desc": "an order cannot be placed in someone else's name by editing the request",
+          "points": 2,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "attacker",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Desk Lamp"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "attacker",
+              "ms": 1500
+            },
+            {
+              "do": "forgeWrite",
+              "actor": "attacker",
+              "fromActor": "victim",
+              "settleMs": 2500
+            },
+            {
+              "do": "expectForgeryRejected",
+              "actor": "attacker"
+            },
+            {
+              "do": "click",
+              "actor": "victim",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "victim",
+              "testid": "order-item",
+              "contains": "Desk Lamp",
+              "absent": true
+            }
+          ],
+          "statedBy": "knowing someone's username must never grant access to it"
+        }
+      ]
+    },
+    {
+      "id": 103,
+      "name": "Stock is administered by admins only",
+      "actors": [
+        "admin",
+        "customer"
+      ],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        {
+          "do": "signUp",
+          "actor": "customer",
+          "name": "ned"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "103a",
+          "desc": "a restock replayed by a customer is refused and changes no stock",
+          "points": 2,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "admin-link"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "restock-input",
+              "text": "10",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Air Purifier"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "restock-submit",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Air Purifier"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "admin",
+              "ms": 2000
+            },
+            {
+              "do": "pressKey",
+              "actor": "customer",
+              "key": "Escape",
+              "settleMs": 800
+            },
+            {
+              "do": "recordNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Air Purifier"
+              },
+              "as": "purifier-after-admin-restock"
+            },
+            {
+              "do": "replayAs",
+              "actor": "customer",
+              "from": "admin",
+              "match": "restock",
+              "settleMs": 2500
+            },
+            {
+              "do": "expectReplayRejected",
+              "actor": "customer"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Air Purifier"
+              },
+              "relativeTo": "purifier-after-admin-restock",
+              "plus": 0
+            }
+          ],
+          "statedBy": "the server must refuse admin actions from a non-admin account"
+        }
+      ]
+    },
+    {
+      "id": 104,
+      "name": "The price is the store's to set",
+      "actors": [
+        "buyer"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "buyer",
+          "name": "oli"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "104a",
+          "desc": "a purchase request with the price edited does not sell the item for less",
+          "points": 2,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Espresso Machine"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "buyer",
+              "ms": 1500
+            },
+            {
+              "do": "replayAs",
+              "actor": "buyer",
+              "from": "buyer",
+              "match": "buy",
+              "swap": {
+                "find": "449",
+                "with": "1"
+              },
+              "settleMs": 2500
+            },
+            {
+              "do": "expectReplayRejected",
+              "actor": "buyer"
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "buyer",
+              "testid": "order-total",
+              "in": {
+                "testid": "order-item",
+                "contains": "Espresso Machine"
+              },
+              "atLeast": 449
+            }
+          ],
+          "statedBy": "the price at the time of purchase"
+        }
+      ]
+    },
+    {
+      "id": 105,
+      "name": "An account keeps what belongs to it",
+      "actors": [
+        "shopper"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "shopper",
+          "name": "pat"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "105a",
+          "desc": "cart and order history survive a reload as the same account",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "shopper",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Keyboard"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "shopper",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "reload",
+              "actor": "shopper",
+              "settleMs": 4000
+            },
+            {
+              "do": "expect",
+              "actor": "shopper",
+              "testid": "current-user",
+              "contains": "pat"
+            },
+            {
+              "do": "click",
+              "actor": "shopper",
+              "testid": "cart-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "shopper",
+              "testid": "cart-item",
+              "contains": "Keyboard"
+            },
+            {
+              "do": "click",
+              "actor": "shopper",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "shopper",
+              "testid": "order-item",
+              "contains": "Headphones"
+            }
+          ],
+          "statedBy": "persists across a page reload"
+        },
+        {
+          "id": "105b",
+          "desc": "the same account survives the connection dropping and coming back",
+          "points": 1,
+          "steps": [
+            {
+              "do": "setOffline",
+              "actor": "shopper",
+              "settleMs": 3000
+            },
+            {
+              "do": "setOffline",
+              "actor": "shopper",
+              "offline": false,
+              "settleMs": 6000
+            },
+            {
+              "do": "expect",
+              "actor": "shopper",
+              "testid": "current-user",
+              "contains": "pat"
+            },
+            {
+              "do": "click",
+              "actor": "shopper",
+              "testid": "cart-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "shopper",
+              "testid": "cart-item",
+              "contains": "Keyboard"
+            }
+          ],
+          "statedBy": "across the connection dropping and re-establishing"
+        }
+      ]
+    },
+    {
+      "id": 106,
+      "name": "One customer's orders are not another's",
+      "actors": [
+        "one",
+        "two"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "one",
+          "name": "quin"
+        },
+        {
+          "do": "signUp",
+          "actor": "two",
+          "name": "ros"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "106a",
+          "desc": "a customer's order history contains only their own orders",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "one",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Coffee Grinder"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "one",
+              "ms": 2000
+            },
+            {
+              "do": "click",
+              "actor": "two",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "two",
+              "testid": "order-item",
+              "contains": "Coffee Grinder",
+              "absent": true
+            }
+          ],
+          "statedBy": "a customer sees only their own orders"
+        }
+      ]
+    },
+    {
+      "id": 107,
+      "name": "The books balance",
+      "actors": [
+        "buyer",
+        "admin"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "buyer",
+          "name": "sam"
+        },
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        }
+      ],
+      "criteria": [
+        {
+          "id": "107a",
+          "desc": "revenue rises by exactly what was bought",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "admin-link"
+            },
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "as": "revenue-before"
+            },
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Laptop Stand"
+              },
+              "as": "brick-before"
+            },
+            {
+              "do": "pressKey",
+              "actor": "buyer",
+              "key": "Escape",
+              "settleMs": 800
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Laptop Stand"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "buyer",
+              "ms": 1000
+            },
+            {
+              "do": "click",
+              "actor": "buyer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Laptop Stand"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "buyer",
+              "ms": 2000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "relativeTo": "revenue-before",
+              "plus": 58,
+              "within": 10000
+            }
+          ],
+          "statedBy": "the sum of all order totals"
+        },
+        {
+          "id": "107b",
+          "desc": "what the store sold is what left the warehouses, and a fresh client agrees",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Laptop Stand"
+              },
+              "relativeTo": "brick-before",
+              "plus": -2
+            },
+            {
+              "do": "freshClient",
+              "actor": "buyer"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "buyer-fresh",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Laptop Stand"
+              },
+              "relativeTo": "brick-before",
+              "plus": -2
+            }
+          ],
+          "statedBy": "must always equal what the orders themselves add up to"
+        }
+      ]
+    },
+    {
+      "id": 108,
+      "name": "A review is a claim about a purchase",
+      "actors": [
+        "owner",
+        "stranger"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "owner",
+          "name": "tam"
+        },
+        {
+          "do": "signUp",
+          "actor": "stranger",
+          "name": "uma"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "108a",
+          "desc": "someone who never bought the item cannot review it",
+          "points": 2,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "stranger",
+              "testid": "search-input",
+              "text": "Webcam",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "stranger",
+              "testid": "item-name",
+              "in": {
+                "testid": "item-card",
+                "contains": "Webcam"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "stranger",
+              "testid": "review-rating",
+              "text": "5"
+            },
+            {
+              "do": "fill",
+              "actor": "stranger",
+              "testid": "review-input",
+              "text": "never bought this"
+            },
+            {
+              "do": "click",
+              "actor": "stranger",
+              "testid": "review-submit"
+            },
+            {
+              "do": "expect",
+              "actor": "stranger",
+              "testid": "review-error",
+              "within": 6000
+            },
+            {
+              "do": "expect",
+              "actor": "stranger",
+              "testid": "review-item",
+              "contains": "never bought this",
+              "absent": true
+            }
+          ],
+          "statedBy": "refuses a review from someone who has never ordered the item"
+        },
+        {
+          "id": "108b",
+          "desc": "buying the item earns the right to review it",
+          "points": 1,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "owner",
+              "testid": "search-input",
+              "text": "Webcam",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "owner",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Webcam"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "owner",
+              "ms": 2000
+            },
+            {
+              "do": "click",
+              "actor": "owner",
+              "testid": "item-name",
+              "in": {
+                "testid": "item-card",
+                "contains": "Webcam"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "owner",
+              "testid": "review-rating",
+              "text": "4"
+            },
+            {
+              "do": "fill",
+              "actor": "owner",
+              "testid": "review-input",
+              "text": "bought and used it"
+            },
+            {
+              "do": "click",
+              "actor": "owner",
+              "testid": "review-submit"
+            },
+            {
+              "do": "expect",
+              "actor": "owner",
+              "testid": "review-item",
+              "contains": "bought and used it",
+              "within": 8000
+            }
+          ],
+          "statedBy": "a review of an item they have bought"
+        }
+      ]
+    },
+    {
+      "id": 109,
+      "name": "A cart is nobody else’s business",
+      "actors": [
+        "owner",
+        "stranger"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "owner",
+          "name": "vic"
+        },
+        {
+          "do": "signUp",
+          "actor": "stranger",
+          "name": "wes"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "109a",
+          "desc": "one customer’s cart request replayed by another leaves the owner’s cart untouched",
+          "points": 2,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "owner",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Coffee Grinder"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "owner",
+              "ms": 1500
+            },
+            {
+              "do": "replayAs",
+              "actor": "stranger",
+              "from": "owner",
+              "match": "cart",
+              "settleMs": 2500
+            },
+            {
+              "do": "click",
+              "actor": "owner",
+              "testid": "cart-toggle"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "owner",
+              "testid": "cart-quantity",
+              "in": {
+                "testid": "cart-item",
+                "contains": "Coffee Grinder"
+              },
+              "equals": 1
+            }
+          ],
+          "note": "A cart add request that contains only an item and quantity is legitimately reusable by another authenticated customer: the server applies it to the caller's own cart. The ownership assertion below is the security boundary; requiring every replay to return non-2xx incorrectly rejects identity-derived APIs.",
+          "statedBy": "nobody else can read or change it"
+        },
+        {
+          "id": "109b",
+          "desc": "a quantity below one is refused rather than credited",
+          "points": 1,
+          "steps": [
+            {
+              "do": "replayAs",
+              "actor": "owner",
+              "from": "owner",
+              "match": "cart",
+              "swap": {
+                "find": "\"quantity\":1",
+                "with": "\"quantity\":-3"
+              },
+              "settleMs": 2500
+            },
+            {
+              "do": "expectNumber",
+              "actor": "owner",
+              "testid": "cart-total",
+              "atLeast": 0
+            },
+            {
+              "do": "expectNumber",
+              "actor": "owner",
+              "testid": "cart-quantity",
+              "in": {
+                "testid": "cart-item",
+                "contains": "Coffee Grinder"
+              },
+              "atLeast": 1
+            }
+          ],
+          "statedBy": "a request carrying zero or a negative quantity is refused and changes nothing"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-last-unit-2.3.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-last-unit-2.3.0.json
new file mode 100644
index 00000000000..0e5bfb5b037
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-last-unit-2.3.0.json
@@ -0,0 +1,116 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront and warehouse — last-unit accounting",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "This focused suite keeps the stock, order-count, and revenue consequences of one purchase race together. The revenue baseline is recorded before the race, so prior benchmark activity cannot change the expected result.",
+  "features": [
+    {
+      "id": 201,
+      "name": "The last unit is sold once",
+      "actors": ["admin", "a", "b", "c", "d", "e", "f"],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        {
+          "do": "recordNumber",
+          "actor": "admin",
+          "testid": "admin-revenue",
+          "as": "revenue-before-last-unit"
+        },
+        { "do": "dbSetStock", "item": "Air Purifier", "warehouse": "East", "quantity": 2, "settleMs": 250 },
+        { "do": "dbSetStock", "item": "Air Purifier", "warehouse": "West", "quantity": 1, "settleMs": 250 },
+        { "do": "signUp", "actor": "a", "name": "c1" },
+        { "do": "signUp", "actor": "b", "name": "c2" },
+        { "do": "signUp", "actor": "c", "name": "c3" },
+        { "do": "signUp", "actor": "d", "name": "c4" },
+        { "do": "signUp", "actor": "e", "name": "c5" },
+        { "do": "signUp", "actor": "f", "name": "c6" },
+        { "do": "reload", "actor": "a", "settleMs": 1000 },
+        { "do": "reload", "actor": "b", "settleMs": 1000 },
+        { "do": "reload", "actor": "c", "settleMs": 1000 },
+        { "do": "reload", "actor": "d", "settleMs": 1000 },
+        { "do": "reload", "actor": "e", "settleMs": 1000 },
+        { "do": "reload", "actor": "f", "settleMs": 1000 },
+        {
+          "do": "clickConcurrently",
+          "testid": "buy-now",
+          "actors": ["a", "b", "c", "d", "e", "f"],
+          "in": { "testid": "item-card", "contains": "Air Purifier" },
+          "settleMs": 6000
+        }
+      ],
+      "criteria": [
+        {
+          "id": "201a",
+          "desc": "six customers buy the last three units at once: stock lands on exactly zero, never below",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expectNumber",
+              "actor": "a",
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Air Purifier" },
+              "equals": 0
+            },
+            {
+              "do": "expectAgreement",
+              "actors": ["a", "b", "c", "d", "e", "f"],
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Air Purifier" },
+              "numeric": true
+            }
+          ],
+          "provenBy": "The existing three-stack L1 qualification catches the declared oversell or missing-reservation defect at this assertion. The new focused suite must pass its own repeated Docker qualification before promotion.",
+          "statedBy": "stock may never go negative, and two customers must never both get the last unit"
+        },
+        {
+          "id": "201b",
+          "desc": "exactly three of the six customers end up with an order, and none is charged twice",
+          "points": 1,
+          "steps": [
+            {
+              "do": "clickConcurrently",
+              "testid": "orders-toggle",
+              "actors": ["a", "b", "c", "d", "e", "f"],
+              "settleMs": 2500
+            },
+            {
+              "do": "expectActorsWith",
+              "actors": ["a", "b", "c", "d", "e", "f"],
+              "testid": "order-item",
+              "contains": "Air Purifier",
+              "equals": 3,
+              "maxEach": 1
+            }
+          ],
+          "provenBy": "Qualified L1 mutation evidence already catches this exact assertion on MongoDB, PostgreSQL, and SpacetimeDB. The candidate reruns that gate against this focused suite before promotion.",
+          "statedBy": "two customers must never both get the last unit"
+        },
+        {
+          "id": "201c",
+          "desc": "revenue increases by exactly three sales, not six",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "relativeTo": "revenue-before-last-unit",
+              "plus": 567,
+              "within": 10000
+            }
+          ],
+          "statedBy": "stock must never leave a warehouse without a corresponding order"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-last-unit-2.3.1.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-last-unit-2.3.1.json
new file mode 100644
index 00000000000..9ef69d48d0e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-last-unit-2.3.1.json
@@ -0,0 +1,110 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront and warehouse — last-unit accounting",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "This focused suite keeps the stock, order-count, and revenue consequences of one purchase race together. The revenue baseline is recorded before the race, so prior benchmark activity cannot change the expected result.",
+  "features": [
+    {
+      "id": 201,
+      "name": "The last unit is sold once",
+      "actors": ["admin", "a", "b", "c", "d", "e", "f"],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        {
+          "do": "recordNumber",
+          "actor": "admin",
+          "testid": "admin-revenue",
+          "as": "revenue-before-last-unit"
+        },
+        { "do": "dbSetStock", "item": "Air Purifier", "warehouse": "East", "quantity": 2, "settleMs": 250 },
+        { "do": "dbSetStock", "item": "Air Purifier", "warehouse": "West", "quantity": 1, "settleMs": 250 },
+        { "do": "signUp", "actor": "a", "name": "c1" },
+        { "do": "signUp", "actor": "b", "name": "c2" },
+        { "do": "signUp", "actor": "c", "name": "c3" },
+        { "do": "signUp", "actor": "d", "name": "c4" },
+        { "do": "signUp", "actor": "e", "name": "c5" },
+        { "do": "signUp", "actor": "f", "name": "c6" },
+        {
+          "do": "clickConcurrently",
+          "testid": "buy-now",
+          "actors": ["a", "b", "c", "d", "e", "f"],
+          "in": { "testid": "item-card", "contains": "Air Purifier" },
+          "settleMs": 6000
+        }
+      ],
+      "criteria": [
+        {
+          "id": "201a",
+          "desc": "six customers buy the last three units at once: stock lands on exactly zero, never below",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expectNumber",
+              "actor": "a",
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Air Purifier" },
+              "equals": 0
+            },
+            {
+              "do": "expectAgreement",
+              "actors": ["a", "b", "c", "d", "e", "f"],
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Air Purifier" },
+              "numeric": true
+            }
+          ],
+          "provenBy": "The existing three-stack L1 qualification catches the declared oversell or missing-reservation defect at this assertion. The new focused suite must pass its own repeated Docker qualification before promotion.",
+          "statedBy": "stock may never go negative, and two customers must never both get the last unit"
+        },
+        {
+          "id": "201b",
+          "desc": "exactly three of the six customers end up with an order, and none is charged twice",
+          "points": 1,
+          "steps": [
+            {
+              "do": "clickConcurrently",
+              "testid": "orders-toggle",
+              "actors": ["a", "b", "c", "d", "e", "f"],
+              "settleMs": 2500
+            },
+            {
+              "do": "expectActorsWith",
+              "actors": ["a", "b", "c", "d", "e", "f"],
+              "testid": "order-item",
+              "contains": "Air Purifier",
+              "equals": 3,
+              "maxEach": 1
+            }
+          ],
+          "provenBy": "Qualified L1 mutation evidence already catches this exact assertion on MongoDB, PostgreSQL, and SpacetimeDB. The candidate reruns that gate against this focused suite before promotion.",
+          "statedBy": "two customers must never both get the last unit"
+        },
+        {
+          "id": "201c",
+          "desc": "revenue increases by exactly three sales, not six",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "relativeTo": "revenue-before-last-unit",
+              "plus": 567,
+              "within": 10000
+            }
+          ],
+          "statedBy": "stock must never leave a warehouse without a corresponding order"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-open-list-live-2.3.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-open-list-live-2.3.0.json
new file mode 100644
index 00000000000..8887294fc17
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-open-list-live-2.3.0.json
@@ -0,0 +1,84 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront — an open review list stays current",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "This focused candidate checks one mechanism-neutral product behavior: the reader opens the review list first, the reviewer then commits a review, and the reader's already-open list must show it exactly once. The writer's assertion proves the review committed before the reader is graded. A stronger simultaneous snapshot-and-update stress test remains separate future coverage because it cannot be forced across arbitrary app architectures without prescribing their data transport.",
+  "features": [
+    {
+      "id": 902,
+      "name": "An open list stays current",
+      "actors": ["reader", "reviewer"],
+      "setup": [
+        { "do": "signUp", "actor": "reviewer", "name": "raceR" },
+        { "do": "signUp", "actor": "reader", "name": "raceL" },
+        {
+          "do": "recordNumber",
+          "actor": "reviewer",
+          "testid": "item-stock",
+          "in": { "testid": "item-card", "contains": "Keyboard" },
+          "as": "keyboard-before-review-purchase"
+        },
+        {
+          "do": "click",
+          "actor": "reviewer",
+          "testid": "buy-now",
+          "in": { "testid": "item-card", "contains": "Keyboard" }
+        },
+        {
+          "do": "expectNumber",
+          "actor": "reviewer",
+          "testid": "item-stock",
+          "in": { "testid": "item-card", "contains": "Keyboard" },
+          "relativeTo": "keyboard-before-review-purchase",
+          "plus": -1,
+          "within": 10000
+        },
+        {
+          "do": "click",
+          "actor": "reviewer",
+          "testid": "item-name",
+          "in": { "testid": "item-card", "contains": "Keyboard" }
+        },
+        { "do": "expect", "actor": "reviewer", "testid": "item-detail", "within": 10000 },
+        { "do": "fill", "actor": "reviewer", "testid": "review-rating", "text": "5" }
+      ],
+      "criteria": [
+        {
+          "id": "902a",
+          "desc": "one customer has the Keyboard's reviews open before another posts one; the already-open view shows that review exactly once",
+          "points": 1,
+          "note": "Candidate until the exact reference and mutation matrix is run. This deterministic check covers live list contents and exact-once rendering without assuming HTTP, WebSockets, subscriptions, or any project layout.",
+          "steps": [
+            {
+              "do": "click",
+              "actor": "reader",
+              "testid": "item-name",
+              "in": { "testid": "item-card", "contains": "Keyboard" }
+            },
+            { "do": "expect", "actor": "reader", "testid": "item-detail", "within": 10000 },
+            { "do": "fill", "actor": "reviewer", "testid": "review-input", "text": "live-review-kbd" },
+            { "do": "click", "actor": "reviewer", "testid": "review-submit" },
+            {
+              "do": "expectElementCount",
+              "actor": "reviewer",
+              "testid": "review-item",
+              "contains": "live-review-kbd",
+              "equals": 1,
+              "within": 10000
+            },
+            {
+              "do": "expectElementCount",
+              "actor": "reader",
+              "testid": "review-item",
+              "contains": "live-review-kbd",
+              "equals": 1,
+              "within": 10000
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-order-ownership-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-order-ownership-2.4.0.json
new file mode 100644
index 00000000000..f3a010f96ea
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-order-ownership-2.4.0.json
@@ -0,0 +1,38 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "One customer's orders are not another's",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "Every criterion receives all state it relies on from its feature setup. Security assertions include a working positive path where an empty or broken view could otherwise look secure.",
+  "features": [
+    {
+      "id": 106,
+      "name": "One customer's orders are not another's",
+      "actors": ["one","two"],
+      "setup": [{"do":"signUp","actor":"one","name":"quin"},{"do":"signUp","actor":"two","name":"ros"}],
+      "criteria": [
+        {
+          "id": "106a",
+          "desc": "a working order history contains the customer's own order and not another customer's order",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "one",
+              "testid": "buy-now",
+              "in": {"testid":"item-card","contains":"Coffee Grinder"}
+            },
+            {"do":"click","actor":"two","testid":"buy-now","in":{"testid":"item-card","contains":"Desk Lamp"}},
+            {"do":"wait","actor":"two","ms":2000},
+            {"do":"click","actor":"two","testid":"orders-toggle"},
+            {"do":"expect","actor":"two","testid":"order-item","contains":"Desk Lamp","count":1},
+            {"do":"expect","actor":"two","testid":"order-item","contains":"Coffee Grinder","absent":true}
+          ],
+          "statedBy": "a customer sees only their own orders"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-purchase-attribution-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-purchase-attribution-2.4.0.json
new file mode 100644
index 00000000000..6d732a6fd48
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-purchase-attribution-2.4.0.json
@@ -0,0 +1,45 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Purchases are attributed to whoever made them",
+  "note": "Refusal checks first prove the same valid route and input with an authorized actor. A missing or malformed endpoint therefore cannot earn authorization credit merely by returning an error.",
+  "features": [
+    {
+      "id": 102,
+      "name": "Purchases are attributed to whoever made them",
+      "actors": ["victim","attacker"],
+      "setup": [{"do":"signUp","actor":"victim","name":"lee"},{"do":"signUp","actor":"attacker","name":"mel"}],
+      "criteria": [
+        {
+          "id": "102a",
+          "desc": "a direct purchase is attributed to the authenticated caller, not another account",
+          "points": 2,
+          "steps": [
+            {
+              "do": "callAction",
+              "actor": "attacker",
+              "action": "buy",
+              "namedAction": {
+                "id": "buy",
+                "path": "/api/items/:id/buy",
+                "reducer": "buy_now",
+                "args": [0],
+                "params": [{"name":"itemId","in":"path","placeholder":":id","wireType":"u64"}]
+              },
+              "input": {"testid":"item-card","contains":"Desk Lamp","attribute":"data-buy-input"},
+              "settleMs": 2000
+            },
+            {"do":"expectActionOutcome","actor":"attacker","outcome":"accepted"},
+            {"do":"click","actor":"victim","testid":"orders-toggle"},
+            {"do":"expect","actor":"victim","testid":"order-item","contains":"Desk Lamp","absent":true},
+            {"do":"click","actor":"attacker","testid":"orders-toggle"},
+            {"do":"expect","actor":"attacker","testid":"order-item","contains":"Desk Lamp","count":1}
+          ],
+          "statedBy": "the authenticated caller, not a client-supplied identity, owns the order"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-purchase-session-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-purchase-session-2.4.0.json
new file mode 100644
index 00000000000..5e3e6cf61b0
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-purchase-session-2.4.0.json
@@ -0,0 +1,81 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Purchase requires an account",
+  "note": "Refusal checks first prove the same valid route and input with an authorized actor. A missing or malformed endpoint therefore cannot earn authorization credit merely by returning an error.",
+  "features": [
+    {
+      "id": 101,
+      "name": "Purchase requires an account",
+      "actors": ["buyer","guest"],
+      "setup": [{"do":"signUp","actor":"buyer","name":"kim"}],
+      "criteria": [
+        {
+          "id": "101a",
+          "desc": "a valid direct purchase works for the buyer but is refused without a session",
+          "points": 2,
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "buyer",
+              "testid": "item-stock",
+              "in": {"testid":"item-card","contains":"Bluetooth Speaker"},
+              "as": "speaker-before-control"
+            },
+            {
+              "do": "callAction",
+              "actor": "buyer",
+              "action": "buy",
+              "namedAction": {
+                "id": "buy",
+                "path": "/api/items/:id/buy",
+                "reducer": "buy_now",
+                "args": [0],
+                "params": [{"name":"itemId","in":"path","placeholder":":id","wireType":"u64"}]
+              },
+              "input": {"testid":"item-card","contains":"Bluetooth Speaker","attribute":"data-buy-input"},
+              "settleMs": 2000
+            },
+            {"do":"expectActionOutcome","actor":"buyer","outcome":"accepted"},
+            {
+              "do": "expectNumber",
+              "actor": "buyer",
+              "testid": "item-stock",
+              "in": {"testid":"item-card","contains":"Bluetooth Speaker"},
+              "relativeTo": "speaker-before-control",
+              "plus": -1
+            },
+            {
+              "do": "callAction",
+              "actor": "guest",
+              "from": "buyer",
+              "action": "buy",
+              "namedAction": {
+                "id": "buy",
+                "path": "/api/items/:id/buy",
+                "reducer": "buy_now",
+                "args": [0],
+                "params": [{"name":"itemId","in":"path","placeholder":":id","wireType":"u64"}]
+              },
+              "input": {"testid":"item-card","contains":"Bluetooth Speaker","attribute":"data-buy-input"},
+              "authentication": "none",
+              "settleMs": 2000
+            },
+            {"do":"expectActionOutcome","actor":"guest","outcome":"refused"},
+            {
+              "do": "expectNumber",
+              "actor": "buyer",
+              "testid": "item-stock",
+              "in": {"testid":"item-card","contains":"Bluetooth Speaker"},
+              "relativeTo": "speaker-before-control",
+              "plus": -1
+            }
+          ],
+          "statedBy": "the server refuses a purchase without an authenticated customer"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-restock-race-2.3.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-restock-race-2.3.0.json
new file mode 100644
index 00000000000..daa5d1188e0
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-restock-race-2.3.0.json
@@ -0,0 +1,138 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront and warehouse — restock during purchases",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "The control proves that ordinary restocking works before the race. It remains a non-scoring precondition so the benchmark does not award the same restock behavior twice. The scored race starts three purchases and one restock together, then checks their exact net effect.",
+  "features": [
+    {
+      "id": 202,
+      "name": "A restock during a rush is not lost",
+      "actors": ["admin", "a", "b", "c"],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "signUp", "actor": "a", "name": "r1" },
+        { "do": "signUp", "actor": "b", "name": "r2" },
+        { "do": "signUp", "actor": "c", "name": "r3" }
+      ],
+      "criteria": [
+        {
+          "id": "202-control",
+          "points": 0,
+          "withheld": "A measured precondition for interpreting the race, not an additional product score. Candidate qualification includes an exact omitted-restock defect for every reference stack.",
+          "desc": "an uncontended restock of five is stored by the server and shows on the storefront",
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-location-qty",
+              "in": { "testid": "admin-location-row", "contains": "Bluetooth Speaker" },
+              "as": "warehouse-before"
+            },
+            {
+              "do": "recordNumber",
+              "actor": "a",
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Bluetooth Speaker" },
+              "as": "storefront-before"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "restock-input",
+              "in": { "testid": "admin-location-row", "contains": "Bluetooth Speaker" },
+              "text": "5"
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "restock-submit",
+              "in": { "testid": "admin-location-row", "contains": "Bluetooth Speaker" }
+            },
+            { "do": "wait", "actor": "admin", "ms": 4000 },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-location-qty",
+              "in": { "testid": "admin-location-row", "contains": "Bluetooth Speaker" },
+              "relativeTo": "warehouse-before",
+              "plus": 5,
+              "within": 8000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "a",
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Bluetooth Speaker" },
+              "relativeTo": "storefront-before",
+              "plus": 5,
+              "within": 8000
+            }
+          ]
+        },
+        {
+          "id": "202a",
+          "points": 1,
+          "desc": "three purchases and a restock of five during the rush leave stock at start + 2",
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "a",
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Bluetooth Speaker" },
+              "as": "rush-before"
+            },
+            {
+              "do": "race",
+              "branches": [
+                [
+                  {
+                    "do": "clickConcurrently",
+                    "actors": ["a", "b", "c"],
+                    "testid": "buy-now",
+                    "in": { "testid": "item-card", "contains": "Bluetooth Speaker" },
+                    "settleMs": 500
+                  }
+                ],
+                [
+                  {
+                    "do": "fill",
+                    "actor": "admin",
+                    "testid": "restock-input",
+                    "in": { "testid": "admin-location-row", "contains": "Bluetooth Speaker" },
+                    "text": "5"
+                  },
+                  {
+                    "do": "click",
+                    "actor": "admin",
+                    "testid": "restock-submit",
+                    "in": { "testid": "admin-location-row", "contains": "Bluetooth Speaker" }
+                  }
+                ]
+              ],
+              "settleMs": 6000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "a",
+              "testid": "item-stock",
+              "in": { "testid": "item-card", "contains": "Bluetooth Speaker" },
+              "relativeTo": "rush-before",
+              "plus": 2,
+              "within": 10000
+            }
+          ],
+          "statedBy": "a restock in one warehouse raises the storefront number live"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-review-eligibility-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-review-eligibility-2.4.0.json
new file mode 100644
index 00000000000..8a5a19e959a
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-review-eligibility-2.4.0.json
@@ -0,0 +1,70 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "A review is a claim about a purchase",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "Every criterion receives all state it relies on from its feature setup. Security assertions include a working positive path where an empty or broken view could otherwise look secure.",
+  "features": [
+    {
+      "id": 108,
+      "name": "A review is a claim about a purchase",
+      "actors": ["owner","stranger"],
+      "setup": [{"do":"signUp","actor":"owner","name":"tam"},{"do":"signUp","actor":"stranger","name":"uma"}],
+      "criteria": [
+        {
+          "id": "108a",
+          "desc": "someone who never bought the item cannot review it",
+          "points": 2,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "stranger",
+              "testid": "item-name",
+              "in": {"testid":"item-card","contains":"Keyboard"}
+            },
+            {"do":"fill","actor":"stranger","testid":"review-rating","text":"5"},
+            {"do":"fill","actor":"stranger","testid":"review-input","text":"never bought this"},
+            {"do":"click","actor":"stranger","testid":"review-submit"},
+            {"do":"expect","actor":"stranger","testid":"review-error","within":6000},
+            {
+              "do": "expect",
+              "actor": "stranger",
+              "testid": "review-item",
+              "contains": "never bought this",
+              "absent": true
+            }
+          ],
+          "statedBy": "the server refuses a review from someone who has never ordered the item"
+        },
+        {
+          "id": "108b",
+          "desc": "buying the item earns the right to review it",
+          "points": 1,
+          "steps": [
+            {"do":"click","actor":"owner","testid":"buy-now","in":{"testid":"item-card","contains":"Keyboard"}},
+            {"do":"wait","actor":"owner","ms":2000},
+            {
+              "do": "click",
+              "actor": "owner",
+              "testid": "item-name",
+              "in": {"testid":"item-card","contains":"Keyboard"}
+            },
+            {"do":"fill","actor":"owner","testid":"review-rating","text":"4"},
+            {"do":"fill","actor":"owner","testid":"review-input","text":"bought and used it"},
+            {"do":"click","actor":"owner","testid":"review-submit"},
+            {
+              "do": "expect",
+              "actor": "owner",
+              "testid": "review-item",
+              "contains": "bought and used it",
+              "within": 8000
+            }
+          ],
+          "statedBy": "a customer can review an item they bought"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-review-rating-live-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-review-rating-live-2.4.0.json
new file mode 100644
index 00000000000..13b8457764c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-review-rating-live-2.4.0.json
@@ -0,0 +1,48 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Live review rating",
+  "note": "This scenario uses two different customers and does not depend on the outcome of the separate repeat-submission check.",
+  "features": [
+    {
+      "id": 6,
+      "name": "Reviews",
+      "actors": ["author", "other"],
+      "setup": [
+        { "do": "signUp", "actor": "author", "name": "leon" },
+        { "do": "signUp", "actor": "other", "name": "maya" },
+        { "do": "click", "actor": "author", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Gaming Mouse" } },
+        { "do": "click", "actor": "author", "testid": "orders-toggle" },
+        { "do": "expect", "actor": "author", "testid": "order-item", "contains": "Gaming Mouse", "within": 10000 },
+        { "do": "click", "actor": "author", "testid": "catalog-link" },
+        { "do": "click", "actor": "author", "testid": "item-name", "in": { "testid": "item-card", "contains": "Gaming Mouse" } },
+        { "do": "fill", "actor": "author", "testid": "review-rating", "text": "2" },
+        { "do": "fill", "actor": "author", "testid": "review-input", "text": "works for travel" },
+        { "do": "click", "actor": "author", "testid": "review-submit" },
+        { "do": "expect", "actor": "author", "testid": "review-item", "contains": "works for travel" },
+        { "do": "click", "actor": "other", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Gaming Mouse" } },
+        { "do": "click", "actor": "other", "testid": "orders-toggle" },
+        { "do": "expect", "actor": "other", "testid": "order-item", "contains": "Gaming Mouse", "within": 10000 },
+        { "do": "click", "actor": "other", "testid": "catalog-link" }
+      ],
+      "criteria": [
+        {
+          "id": "6c",
+          "desc": "the average rating reflects both reviewers and updates live",
+          "points": 1,
+          "steps": [
+            { "do": "click", "actor": "other", "testid": "item-name", "in": { "testid": "item-card", "contains": "Gaming Mouse" } },
+            { "do": "fill", "actor": "other", "testid": "review-rating", "text": "4" },
+            { "do": "fill", "actor": "other", "testid": "review-input", "text": "does the job" },
+            { "do": "click", "actor": "other", "testid": "review-submit" },
+            { "do": "expectNumber", "actor": "other", "testid": "review-average", "equals": 3, "within": 10000 },
+            { "do": "expectAgreement", "actors": ["author", "other"], "testid": "review-average", "numeric": true, "within": 10000 }
+          ],
+          "statedBy": "each item shows its average rating, which updates live as reviews arrive"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-review-uniqueness-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-review-uniqueness-2.4.0.json
new file mode 100644
index 00000000000..4de3e40bd4e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-review-uniqueness-2.4.0.json
@@ -0,0 +1,42 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Review uniqueness",
+  "note": "The check measures the product invariant only: a later submission may replace the review or be refused, but it must not create a second review.",
+  "features": [
+    {
+      "id": 6,
+      "name": "Reviews",
+      "actors": ["author"],
+      "setup": [
+        { "do": "signUp", "actor": "author", "name": "kira" },
+        { "do": "click", "actor": "author", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Air Purifier" } },
+        { "do": "wait", "actor": "author", "ms": 800 },
+        { "do": "click", "actor": "author", "testid": "item-name", "in": { "testid": "item-card", "contains": "Air Purifier" } },
+        { "do": "fill", "actor": "author", "testid": "review-rating", "text": "4" },
+        { "do": "fill", "actor": "author", "testid": "review-input", "text": "quiet and effective" },
+        { "do": "click", "actor": "author", "testid": "review-submit" },
+        { "do": "expect", "actor": "author", "testid": "review-item", "contains": "quiet and effective" }
+      ],
+      "criteria": [
+        {
+          "id": "6b",
+          "desc": "a later review submission does not create a duplicate for the same customer and item",
+          "points": 1,
+          "steps": [
+            { "do": "fill", "actor": "author", "testid": "review-rating", "text": "2" },
+            { "do": "fill", "actor": "author", "testid": "review-input", "text": "changed my mind" },
+            { "do": "click", "actor": "author", "testid": "review-submit" },
+            { "do": "wait", "actor": "author", "ms": 1000 },
+            { "do": "reload", "actor": "author", "settleMs": 2500 },
+            { "do": "click", "actor": "author", "testid": "item-name", "in": { "testid": "item-card", "contains": "Air Purifier" } },
+            { "do": "expect", "actor": "author", "testid": "review-item", "count": 1, "within": 10000 }
+          ],
+          "statedBy": "one customer has at most one review per item"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-review-visibility-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-review-visibility-2.4.0.json
new file mode 100644
index 00000000000..125b11cbd85
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-review-visibility-2.4.0.json
@@ -0,0 +1,37 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Review visibility",
+  "note": "This scenario owns the complete purchase, submission, and signed-out observation needed by 6a, so it is independent of the uniqueness and average-rating checks.",
+  "features": [
+    {
+      "id": 6,
+      "name": "Reviews",
+      "actors": ["author", "visitor"],
+      "setup": [
+        { "do": "signUp", "actor": "author", "name": "hal" },
+        { "do": "click", "actor": "author", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Induction Cooktop" } },
+        { "do": "wait", "actor": "author", "ms": 800 }
+      ],
+      "criteria": [
+        {
+          "id": "6a",
+          "desc": "a customer can review an item and everyone sees it, signed out included",
+          "points": 2,
+          "steps": [
+            { "do": "click", "actor": "author", "testid": "item-name", "in": { "testid": "item-card", "contains": "Induction Cooktop" } },
+            { "do": "fill", "actor": "author", "testid": "review-rating", "text": "4" },
+            { "do": "fill", "actor": "author", "testid": "review-input", "text": "solid mold" },
+            { "do": "click", "actor": "author", "testid": "review-submit" },
+            { "do": "expect", "actor": "author", "testid": "review-item", "contains": "solid mold" },
+            { "do": "click", "actor": "visitor", "testid": "item-name", "in": { "testid": "item-card", "contains": "Induction Cooktop" } },
+            { "do": "expect", "actor": "visitor", "testid": "review-item", "contains": "solid mold", "within": 10000 }
+          ],
+          "statedBy": "reviews are visible to everyone, including signed-out visitors"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-server-price-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-server-price-2.4.0.json
new file mode 100644
index 00000000000..16114381e42
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-server-price-2.4.0.json
@@ -0,0 +1,50 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "The price is the store's to set",
+  "note": "Refusal checks first prove the same valid route and input with an authorized actor. A missing or malformed endpoint therefore cannot earn authorization credit merely by returning an error.",
+  "features": [
+    {
+      "id": 104,
+      "name": "The price is the store's to set",
+      "actors": ["buyer"],
+      "setup": [{"do":"signUp","actor":"buyer","name":"oli"}],
+      "criteria": [
+        {
+          "id": "104a",
+          "desc": "the direct purchase operation creates exactly one order at the store's current price",
+          "points": 2,
+          "steps": [
+            {
+              "do": "callAction",
+              "actor": "buyer",
+              "action": "buy",
+              "namedAction": {
+                "id": "buy",
+                "path": "/api/items/:id/buy",
+                "reducer": "buy_now",
+                "args": [0],
+                "params": [{"name":"itemId","in":"path","placeholder":":id","wireType":"u64"}]
+              },
+              "input": {"testid":"item-card","contains":"Espresso Machine","attribute":"data-buy-input"},
+              "settleMs": 2000
+            },
+            {"do":"expectActionOutcome","actor":"buyer","outcome":"accepted"},
+            {"do":"click","actor":"buyer","testid":"orders-toggle"},
+            {"do":"expect","actor":"buyer","testid":"order-item","contains":"Espresso Machine","count":1},
+            {
+              "do": "expectNumber",
+              "actor": "buyer",
+              "testid": "order-total",
+              "in": {"testid":"order-item","contains":"Espresso Machine"},
+              "equals": 449
+            }
+          ],
+          "statedBy": "the server uses the current stored price when it creates an order"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-systems.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-systems.json
new file mode 100644
index 00000000000..26c23e9284c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-systems.json
@@ -0,0 +1,251 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "track": "ecommerce",
+  "name": "Storefront and warehouse — systems",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses",
+  "note": "Properties of the system, not of any one feature: what happens when the database changes underneath the app, and when two things happen at the same time. These are the failures that appear in production and never in a demo — a broadcast layer only announces writes that went through it, and a fetch-then-merge list drops or duplicates whatever moved while it was fetching. Every criterion is withheld at 0 points until it demonstrably fails a real build AND its mutant is CAUGHT, the same promotion rule as contention.",
+  "features": [
+    {
+      "id": 901,
+      "name": "A write from outside the app is visible without reload",
+      "actors": [
+        "viewer"
+      ],
+      "setup": [
+        {
+          "do": "expectNumber",
+          "actor": "viewer",
+          "testid": "item-stock",
+          "in": {
+            "testid": "item-card",
+            "contains": "Desk Lamp"
+          },
+          "equals": 100
+        }
+      ],
+      "criteria": [
+        {
+          "id": "901a",
+          "desc": "a back-office script sets Desk Lamp's East stock to 5, directly in the database; an anonymous viewer with the storefront already open sees 50 without touching the page",
+          "points": 0,
+          "note": "WITHHELD until proven against a mutant (backoffice-writes-via-server) and a real failing build. The script is the app's own scripts/backoffice.mjs, required by the spec to write to the database without the web server's help — the way a cron job or another team's service would.",
+          "steps": [
+            {
+              "do": "dbSetStock",
+              "item": "Desk Lamp",
+              "warehouse": "East",
+              "quantity": 5,
+              "settleMs": 4000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "viewer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Desk Lamp"
+              },
+              "equals": 50,
+              "within": 10000
+            }
+          ],
+          "statedBy": "when data changes by a path its server never saw"
+        },
+        {
+          "id": "901b",
+          "desc": "the out-of-band change survives a reload — the page did not merely patch its own memory",
+          "points": 0,
+          "note": "WITHHELD — promoted together with 901a.",
+          "steps": [
+            {
+              "do": "reload",
+              "actor": "viewer",
+              "settleMs": 3000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "viewer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Desk Lamp"
+              },
+              "equals": 50,
+              "within": 10000
+            }
+          ],
+          "statedBy": "the app must remain correct - and its open pages current"
+        },
+        {
+          "id": "901c",
+          "desc": "a stock correction that lands while the app server is down shows on an open storefront once the server returns: East 5 + West 10 = 15, no reload",
+          "points": 1,
+          "note": "WITHHELD — same promotion rule, plus this is the anti-cheat phase: a script that talks to the app server fails here outright. Fire-and-forget event relays (NOTIFY) also fail unless the app refetches on reconnect.",
+          "steps": [
+            {
+              "do": "stopAppServer"
+            },
+            {
+              "do": "dbSetStock",
+              "item": "Desk Lamp",
+              "warehouse": "West",
+              "quantity": 10,
+              "settleMs": 4000
+            },
+            {
+              "do": "startAppServer"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "viewer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Desk Lamp"
+              },
+              "equals": 15,
+              "within": 20000
+            }
+          ],
+          "provenBy": "PROMOTED 2026-08-09 on evidence from two real builds rather than a mutant, which is stronger: it FAILED postgres-ecom-run0 (a one-shot build that scored 50/50 on features and invariants) and PASSED spacetime-ecom-run0 the same day. The postgres app calls pg_notify from its route handlers, so a correction written directly to the database while the server was down was never announced and nothing reconciled on reconnect: the database read 15 and the storefront read 50. SpacetimeDB re-reads committed state on resubscribe and showed 15. 901a and 901b pass on both stacks and stay at 0 — a criterion nothing has ever failed has not yet shown it can discriminate.",
+          "statedBy": "a page that was open across a restart must end up showing the current numbers"
+        },
+        {
+          "id": "901d",
+          "desc": "the client, not the server, misses the window: a correction lands while this browser is disconnected, and the page is current again once it reconnects",
+          "points": 0,
+          "steps": [
+            {
+              "do": "setOffline",
+              "actor": "viewer",
+              "offline": true
+            },
+            {
+              "do": "dbSetStock",
+              "item": "Desk Lamp",
+              "warehouse": "East",
+              "quantity": 7,
+              "settleMs": 4000
+            },
+            {
+              "do": "setOffline",
+              "actor": "viewer",
+              "offline": false
+            },
+            {
+              "do": "expectNumber",
+              "actor": "viewer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Desk Lamp"
+              },
+              "equals": 17,
+              "within": 20000
+            }
+          ],
+          "withheld": "WITHHELD until it has failed one real build and passed another, the same gate 901c cleared. Distinct from 901c: there the SERVER was down, so nothing was listening at all. Here the server stays up and sees the write; it is this CLIENT that was disconnected. An app that resumes its stream on reconnect without asking for current state stays wrong, and a dropped connection is far more common than a deploy — a closed laptop, a tunnel, a flaky phone."
+        }
+      ]
+    },
+    {
+      "id": 902,
+      "name": "A list being opened while its contents change",
+      "actors": [
+        "reader",
+        "reviewer"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "reviewer",
+          "name": "raceR"
+        },
+        {
+          "do": "signUp",
+          "actor": "reader",
+          "name": "raceL"
+        },
+        {
+          "do": "click",
+          "actor": "reviewer",
+          "testid": "buy-now",
+          "in": {
+            "testid": "item-card",
+            "contains": "Keyboard"
+          }
+        },
+        {
+          "do": "wait",
+          "actor": "reviewer",
+          "ms": 800
+        },
+        {
+          "do": "click",
+          "actor": "reviewer",
+          "testid": "item-name",
+          "in": {
+            "testid": "item-card",
+            "contains": "Keyboard"
+          },
+          "settleMs": 1200
+        },
+        {
+          "do": "fill",
+          "actor": "reviewer",
+          "testid": "review-rating",
+          "text": "5"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "902a",
+          "desc": "one customer opens the Keyboard's reviews at the same moment another posts one: the opener ends with that review exactly once — not zero (stale fetch), not twice (fetch merged with its own live echo)",
+          "points": 0,
+          "note": "WITHHELD until proven against a mutant (fetch-then-append-dupe) and a real failing build. The race window is real and the criterion may need repetition to be reliable; INCONCLUSIVE on a missed race, never a false FAIL.",
+          "steps": [
+            {
+              "do": "race",
+              "branches": [
+                [
+                  {
+                    "do": "click",
+                    "actor": "reader",
+                    "testid": "item-name",
+                    "in": {
+                      "testid": "item-card",
+                      "contains": "Keyboard"
+                    }
+                  }
+                ],
+                [
+                  {
+                    "do": "fill",
+                    "actor": "reviewer",
+                    "testid": "review-input",
+                    "text": "race-review-kbd"
+                  },
+                  {
+                    "do": "click",
+                    "actor": "reviewer",
+                    "testid": "review-submit"
+                  }
+                ]
+              ],
+              "settleMs": 4000
+            },
+            {
+              "do": "expectElementCount",
+              "actor": "reader",
+              "testid": "review-item",
+              "contains": "race-review-kbd",
+              "equals": 1,
+              "within": 10000
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
\ No newline at end of file
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-admin-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-admin-2.4.0.json
new file mode 100644
index 00000000000..d102e31d794
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-admin-2.4.0.json
@@ -0,0 +1,46 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Warehouse administration",
+  "note": "Access and inventory coverage share one browser safely: the access check only observes the closed state, then the inventory check opens the admin view.",
+  "features": [
+    {
+      "id": 7,
+      "name": "Admin and warehouses",
+      "actors": ["admin", "customer", "visitor"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "jon" },
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true }
+      ],
+      "criteria": [
+        {
+          "id": "7a",
+          "desc": "the admin area is for admins only",
+          "points": 1,
+          "steps": [
+            { "do": "expect", "actor": "admin", "testid": "admin-link" },
+            { "do": "expectUnavailable", "actor": "customer", "testid": "admin-link" },
+            { "do": "expect", "actor": "customer", "testid": "admin-panel", "absent": true }
+          ],
+          "statedBy": "admin accounts see an admin area; customers do not"
+        },
+        {
+          "id": "7b",
+          "desc": "admin lists every item, every warehouse, and what each warehouse holds",
+          "points": 1,
+          "steps": [
+            { "do": "click", "actor": "admin", "testid": "admin-link" },
+            { "do": "expect", "actor": "admin", "testid": "admin-item-row", "count": 13 },
+            { "do": "expect", "actor": "admin", "testid": "admin-location-row", "count": 26 },
+            { "do": "expect", "actor": "admin", "testid": "admin-warehouse-item", "contains": "East" },
+            { "do": "expect", "actor": "admin", "testid": "admin-warehouse-item", "contains": "West" },
+            { "do": "expectNumber", "actor": "admin", "testid": "admin-stock", "in": { "testid": "admin-item-row", "contains": "Gaming Mouse" }, "equals": 100 }
+          ],
+          "statedBy": "admin lists every item with its stock, every warehouse, and the stock of each item in each warehouse"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-admin-staff-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-admin-staff-1.0.0.json
new file mode 100644
index 00000000000..15d27a03896
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-admin-staff-1.0.0.json
@@ -0,0 +1,45 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Warehouse administration through staff access",
+  "features": [
+    {
+      "id": 7,
+      "name": "Admin and warehouses",
+      "actors": ["admin", "staff"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true }
+      ],
+      "criteria": [
+        {
+          "id": "7a",
+          "desc": "the admin area is for administrators only",
+          "points": 1,
+          "statedBy": "administrators can open the administration area; other staff cannot",
+          "steps": [
+            { "do": "expect", "actor": "admin", "testid": "admin-link" },
+            { "do": "expectUnavailable", "actor": "staff", "testid": "admin-link" },
+            { "do": "expect", "actor": "staff", "testid": "admin-panel", "absent": true }
+          ]
+        },
+        {
+          "id": "7b",
+          "desc": "admin lists every item, every warehouse, and what each warehouse holds",
+          "points": 1,
+          "statedBy": "admin lists every item with its stock, every warehouse, and the stock of each item in each warehouse",
+          "steps": [
+            { "do": "click", "actor": "admin", "testid": "admin-link" },
+            { "do": "expect", "actor": "admin", "testid": "admin-item-row", "count": 13 },
+            { "do": "expect", "actor": "admin", "testid": "admin-location-row", "count": 26 },
+            { "do": "expect", "actor": "admin", "testid": "admin-warehouse-item", "contains": "East" },
+            { "do": "expect", "actor": "admin", "testid": "admin-warehouse-item", "contains": "West" },
+            { "do": "expectNumber", "actor": "admin", "testid": "admin-stock", "in": { "testid": "admin-item-row", "contains": "Gaming Mouse" }, "equals": 100 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-stock-live-2.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-stock-live-2.4.0.json
new file mode 100644
index 00000000000..39a345c17fd
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-stock-live-2.4.0.json
@@ -0,0 +1,35 @@
+{
+  "schemaVersion": 1,
+  "status": "candidate",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Warehouse restock reaches the storefront",
+  "note": "The live-restock check has its own browser state so opening a toggle cannot depend on, or undo, another check's interaction.",
+  "features": [
+    {
+      "id": 7,
+      "name": "Warehouse stock stays live",
+      "actors": ["admin", "visitor"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "fill", "actor": "visitor", "testid": "search-input", "text": "Gaming Mouse", "enter": true, "settleMs": 1500 },
+        { "do": "expectNumber", "actor": "visitor", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Gaming Mouse" }, "equals": 100 }
+      ],
+      "criteria": [
+        {
+          "id": "7c",
+          "desc": "the storefront stock is the sum across warehouses, and a restock raises it live",
+          "points": 2,
+          "steps": [
+            { "do": "fill", "actor": "admin", "testid": "restock-input", "text": "25", "in": { "testid": "admin-location-row", "contains": "Gaming Mouse" } },
+            { "do": "click", "actor": "admin", "testid": "restock-submit", "in": { "testid": "admin-location-row", "contains": "Gaming Mouse" } },
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Gaming Mouse" }, "equals": 125, "within": 10000 },
+            { "do": "expectNumber", "actor": "admin", "testid": "admin-stock", "in": { "testid": "admin-item-row", "contains": "Gaming Mouse" }, "equals": 125 }
+          ],
+          "statedBy": "an item's stock on the storefront is the sum of that item's units across all warehouses"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-stock-live-staff-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-stock-live-staff-1.0.0.json
new file mode 100644
index 00000000000..49f4a4d6538
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/01-warehouse-stock-live-staff-1.0.0.json
@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Warehouse restock reaches the storefront through staff access",
+  "features": [
+    {
+      "id": 7,
+      "name": "Warehouse stock stays live",
+      "actors": ["admin", "visitor"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "expectNumber", "actor": "visitor", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Gaming Mouse" }, "equals": 100 }
+      ],
+      "criteria": [
+        {
+          "id": "7c",
+          "desc": "the storefront stock is the sum across warehouses, and a restock raises it live",
+          "points": 2,
+          "statedBy": "an item's stock on the storefront is the sum of that item's units across all warehouses",
+          "steps": [
+            { "do": "fill", "actor": "admin", "testid": "restock-input", "text": "25", "in": { "testid": "admin-location-row", "contains": "Gaming Mouse" } },
+            { "do": "click", "actor": "admin", "testid": "restock-submit", "in": { "testid": "admin-location-row", "contains": "Gaming Mouse" } },
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Gaming Mouse" }, "equals": 125, "within": 10000 },
+            { "do": "expectNumber", "actor": "admin", "testid": "admin-stock", "in": { "testid": "admin-item-row", "contains": "Gaming Mouse" }, "equals": 125 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-cancellation-queue-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-cancellation-queue-1.0.0.json
new file mode 100644
index 00000000000..de307bfc533
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-cancellation-queue-1.0.0.json
@@ -0,0 +1,34 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Cancellation leaves the fulfilment queue",
+  "features": [
+    {
+      "id": 3,
+      "name": "Cancellation and fulfilment",
+      "actors": ["customer", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "cancel-queue" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "3d",
+          "desc": "cancelling a pending order removes it from the fulfilment queue",
+          "points": 1,
+          "statedBy": "the order leaves the fulfilment queue",
+          "steps": [
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Coffee Grinder" } },
+            { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Coffee Grinder", "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+            { "do": "click", "actor": "customer", "testid": "cancel-order", "in": { "testid": "order-item", "contains": "Coffee Grinder" } },
+            { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Coffee Grinder", "absent": true, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-features.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-features.json
new file mode 100644
index 00000000000..0c667971d3e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-features.json
@@ -0,0 +1,1199 @@
+{
+  "schemaVersion": 1,
+  "level": 2,
+  "track": "ecommerce",
+  "name": "Running the business — features",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses|\\/transfer|\\/cancel|\\/return|\\/ship|\\/price|\\/fulfil",
+  "note": "The level's thesis is that eight actions each touch several of ten live views. These features are therefore written as ONE action watched by SEVERAL viewers at once, not as one action checked once — a backend that updates the view the actor is looking at and forgets the others fails on the watcher, not on the actor. Items are reached by search because earlier features re-rank the storefront. Panels are closed with Escape, which the spec requires, rather than by clicking an opener again.",
+  "features": [
+    {
+      "id": 1,
+      "name": "Fulfilment queue",
+      "actors": [
+        "customer",
+        "staff",
+        "admin"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "customer",
+          "name": "fq"
+        },
+        {
+          "do": "signIn",
+          "actor": "staff",
+          "name": "staff",
+          "password": "stackbench-staff-2026",
+          "exact": true
+        },
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        }
+      ],
+      "criteria": [
+        {
+          "id": "1a",
+          "desc": "an order placed by a customer appears in the staff queue without a reload",
+          "points": 2,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "staff",
+              "testid": "staff-link"
+            },
+            {
+              "do": "recordNumber",
+              "actor": "staff",
+              "testid": "queue-depth",
+              "as": "depth-before"
+            },
+            {
+              "do": "fill",
+              "actor": "customer",
+              "testid": "search-input",
+              "text": "Desk Lamp",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Desk Lamp"
+              }
+            },
+            {
+              "do": "expect",
+              "actor": "staff",
+              "testid": "queue-item",
+              "contains": "Desk Lamp",
+              "within": 10000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "staff",
+              "testid": "queue-depth",
+              "relativeTo": "depth-before",
+              "plus": 1
+            }
+          ],
+          "statedBy": "appears in the fulfilment queue in the order it was placed"
+        },
+        {
+          "id": "1b",
+          "desc": "the queue names the warehouse the order will ship from",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "staff",
+              "testid": "queue-warehouse",
+              "in": {
+                "testid": "queue-item",
+                "contains": "Desk Lamp"
+              }
+            }
+          ],
+          "statedBy": "which warehouse each will ship from"
+        },
+        {
+          "id": "1c",
+          "desc": "shipping removes the order from the queue for staff and marks it shipped for the customer, live",
+          "points": 2,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "staff",
+              "testid": "ship-submit",
+              "in": {
+                "testid": "queue-item",
+                "contains": "Desk Lamp"
+              }
+            },
+            {
+              "do": "expect",
+              "actor": "staff",
+              "testid": "queue-item",
+              "contains": "Desk Lamp",
+              "absent": true,
+              "within": 10000
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "customer",
+              "testid": "order-status",
+              "in": {
+                "testid": "order-item",
+                "contains": "Desk Lamp"
+              },
+              "contains": "hipped",
+              "within": 10000
+            }
+          ],
+          "statedBy": "it leaves the queue for everyone watching the queue, and the customer's order history shows it as shipped, live"
+        },
+        {
+          "id": "1d",
+          "desc": "the fulfilment area is for staff and admins, not customers",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "staff-link"
+            },
+            {
+              "do": "expect",
+              "actor": "customer",
+              "testid": "staff-link",
+              "absent": true
+            }
+          ],
+          "statedBy": "a staff account signs in like anyone else but sees the fulfilment area instead of the admin area"
+        },
+        {
+          "id": "1e",
+          "desc": "the server refuses a ship request from a customer, not just the button",
+          "points": 2,
+          "statedBy": "staff cannot change prices or create items; admins can do everything staff can",
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "customer",
+              "testid": "search-input",
+              "text": "Webcam",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Webcam"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "replayAs",
+              "actor": "customer",
+              "from": "staff",
+              "match": "ship",
+              "namedAction": {
+                "id": "ship",
+                "path": "/api/fulfilment/ship",
+                "reducer": "ship_order",
+                "args": [0]
+              },
+              "namedTarget": {
+                "testid": "order-item",
+                "contains": "Webcam",
+                "attribute": "data-entity-id",
+                "valueType": "number"
+              },
+              "swap": {
+                "find": "Desk Lamp",
+                "with": "Webcam"
+              },
+              "settleMs": 2500
+            },
+            {
+              "do": "expectReplayRejected",
+              "actor": "customer"
+            },
+            {
+              "do": "expect",
+              "actor": "customer",
+              "testid": "order-status",
+              "in": {
+                "testid": "order-item",
+                "contains": "Webcam"
+              },
+              "notContains": "hipped"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 2,
+      "name": "Moving stock between warehouses",
+      "actors": [
+        "admin",
+        "staff",
+        "visitor"
+      ],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        {
+          "do": "signIn",
+          "actor": "staff",
+          "name": "staff",
+          "password": "stackbench-staff-2026",
+          "exact": true
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "admin-link"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "2a",
+          "desc": "a transfer moves stock without creating or destroying any",
+          "points": 3,
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "visitor",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Headphones"
+              },
+              "as": "total-before"
+            },
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-location-qty",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Headphones"
+              },
+              "as": "east-before"
+            },
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "warehouse-total",
+              "in": {
+                "testid": "admin-warehouse-item",
+                "contains": "West"
+              },
+              "as": "west-before"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-from",
+              "text": "East",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-to",
+              "text": "West",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-qty",
+              "text": "10",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "transfer-submit",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "admin",
+              "ms": 2500
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-location-qty",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Headphones"
+              },
+              "relativeTo": "east-before",
+              "plus": -10
+            },
+            {
+              "do": "expectNumber",
+              "actor": "visitor",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Headphones"
+              },
+              "relativeTo": "total-before",
+              "plus": 0
+            }
+          ],
+          "statedBy": "a transfer moves stock, it does not create or destroy it"
+        },
+        {
+          "id": "2b",
+          "desc": "the warehouse totals move live as stock is transferred",
+          "points": 2,
+          "steps": [
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "warehouse-total",
+              "in": {
+                "testid": "admin-warehouse-item",
+                "contains": "West"
+              },
+              "relativeTo": "west-before",
+              "plus": 10,
+              "within": 10000
+            }
+          ],
+          "statedBy": "the per-warehouse numbers staff and admins see both move at once"
+        },
+        {
+          "id": "2c",
+          "desc": "a transfer that would overdraw a warehouse is refused and changes nothing",
+          "points": 2,
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              },
+              "as": "total-guard"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-from",
+              "text": "East",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-to",
+              "text": "West",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-qty",
+              "text": "99999",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "transfer-submit",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "order-error",
+              "within": 6000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              },
+              "relativeTo": "total-guard",
+              "plus": 0
+            }
+          ],
+          "statedBy": "a transfer that would leave a warehouse short is refused and changes nothing"
+        }
+      ]
+    },
+    {
+      "id": 3,
+      "name": "Cancelling and returning",
+      "actors": [
+        "customer",
+        "staff",
+        "admin"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "customer",
+          "name": "cr"
+        },
+        {
+          "do": "signIn",
+          "actor": "staff",
+          "name": "staff",
+          "password": "stackbench-staff-2026",
+          "exact": true
+        },
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "admin-link"
+        },
+        {
+          "do": "click",
+          "actor": "staff",
+          "testid": "staff-link"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "3a",
+          "desc": "cancelling a pending order returns its stock, empties it from the queue and lowers revenue",
+          "points": 3,
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "as": "rev-before"
+            },
+            {
+              "do": "fill",
+              "actor": "customer",
+              "testid": "search-input",
+              "text": "Coffee Grinder",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "recordNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Coffee Grinder"
+              },
+              "as": "stock-before"
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Coffee Grinder"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "cancel-order",
+              "in": {
+                "testid": "order-item",
+                "contains": "Coffee Grinder"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2500
+            },
+            {
+              "do": "expect",
+              "actor": "staff",
+              "testid": "queue-item",
+              "contains": "Coffee Grinder",
+              "absent": true,
+              "within": 10000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "relativeTo": "rev-before",
+              "plus": 0,
+              "within": 10000
+            },
+            {
+              "do": "pressKey",
+              "actor": "customer",
+              "key": "Escape"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Coffee Grinder"
+              },
+              "relativeTo": "stock-before",
+              "plus": 0
+            }
+          ],
+          "statedBy": "the stock goes back to the warehouse it came from, the order leaves the fulfilment queue, and revenue falls"
+        },
+        {
+          "id": "3b",
+          "desc": "a cancelled order is shown as cancelled in the customer’s history",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "orders-toggle",
+              "settleMs": 1200
+            },
+            {
+              "do": "expect",
+              "actor": "customer",
+              "testid": "order-status",
+              "in": {
+                "testid": "order-item",
+                "contains": "Coffee Grinder"
+              },
+              "contains": "ancel",
+              "within": 8000
+            }
+          ],
+          "statedBy": "a customer can cancel an order that has not shipped"
+        },
+        {
+          "id": "3c",
+          "desc": "returning an item from a shipped order brings the stock back and lowers revenue",
+          "points": 3,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "customer",
+              "testid": "search-input",
+              "text": "Keyboard",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "recordNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Keyboard"
+              },
+              "as": "kb-before"
+            },
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "as": "rev2-before"
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Keyboard"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2500
+            },
+            {
+              "do": "click",
+              "actor": "staff",
+              "testid": "ship-submit",
+              "in": {
+                "testid": "queue-item",
+                "contains": "Keyboard"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "staff",
+              "ms": 2500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "return-item",
+              "in": {
+                "testid": "order-item",
+                "contains": "Keyboard"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2500
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "relativeTo": "rev2-before",
+              "plus": 0,
+              "within": 10000
+            },
+            {
+              "do": "pressKey",
+              "actor": "customer",
+              "key": "Escape"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Keyboard"
+              },
+              "relativeTo": "kb-before",
+              "plus": 0
+            }
+          ],
+          "statedBy": "the stock comes back, revenue falls by what was paid for it, and the order shows the item as returned"
+        }
+      ]
+    },
+    {
+      "id": 4,
+      "name": "Prices change, history does not",
+      "actors": [
+        "admin",
+        "customer",
+        "visitor"
+      ],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        {
+          "do": "signUp",
+          "actor": "customer",
+          "name": "pr"
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "admin-link"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "4a",
+          "desc": "a customer's receipt keeps the price that was paid after the price changes",
+          "points": 3,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "customer",
+              "testid": "search-input",
+              "text": "Air Purifier",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Air Purifier"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2500
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "price-input",
+              "text": "1.00",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Air Purifier"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "price-submit",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Air Purifier"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "admin",
+              "ms": 2500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "order-total",
+              "in": {
+                "testid": "order-item",
+                "contains": "Air Purifier"
+              },
+              "atLeast": 189
+            }
+          ],
+          "statedBy": "past orders keep the price that was paid"
+        },
+        {
+          "id": "4b",
+          "desc": "the new price reaches a signed-out visitor without a reload",
+          "points": 2,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "visitor",
+              "testid": "search-input",
+              "text": "Air Purifier",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "expectNumber",
+              "actor": "visitor",
+              "testid": "item-price",
+              "in": {
+                "testid": "item-card",
+                "contains": "Air Purifier"
+              },
+              "equals": 1,
+              "within": 10000
+            }
+          ],
+          "statedBy": "the storefront shows the new price immediately, to everyone"
+        },
+        {
+          "id": "4c",
+          "desc": "a price change updates an open cart and checkout charges the new price",
+          "points": 3,
+          "steps": [
+            {
+              "do": "pressKey",
+              "actor": "customer",
+              "key": "Escape"
+            },
+            {
+              "do": "fill",
+              "actor": "customer",
+              "testid": "search-input",
+              "text": "Desk Lamp",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Desk Lamp"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "cart-toggle"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "cart-total",
+              "equals": 42
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "price-input",
+              "text": "52.00",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Desk Lamp"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "price-submit",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Desk Lamp"
+              }
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "cart-total",
+              "equals": 52,
+              "within": 10000
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "checkout-submit"
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "orders-toggle",
+              "settleMs": 1500
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "order-total",
+              "in": {
+                "testid": "order-item",
+                "contains": "Desk Lamp"
+              },
+              "equals": 52
+            }
+          ],
+          "statedBy": "an item in someone's cart at the moment the price changes is charged the new price at checkout, and the cart total they are looking at updates to match"
+        }
+      ]
+    },
+    {
+      "id": 5,
+      "name": "The operational views",
+      "actors": [
+        "admin",
+        "customer",
+        "visitor"
+      ],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        {
+          "do": "signUp",
+          "actor": "customer",
+          "name": "ops"
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "admin-link"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "5a",
+          "desc": "an item falling to ten units or fewer joins the low-stock list, live",
+          "points": 3,
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "low-stock-item",
+              "contains": "Mirrorless Camera",
+              "within": 8000
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "restock-input",
+              "text": "8",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Mirrorless Camera"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "restock-submit",
+              "in": {
+                "testid": "admin-location-row",
+                "contains": "Mirrorless Camera"
+              }
+            },
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "low-stock-item",
+              "contains": "Mirrorless Camera",
+              "absent": true,
+              "within": 10000
+            },
+            {
+              "do": "fill",
+              "actor": "customer",
+              "testid": "search-input",
+              "text": "Mirrorless Camera",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Mirrorless Camera"
+              }
+            },
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "low-stock-item",
+              "contains": "Mirrorless Camera",
+              "within": 10000
+            }
+          ],
+          "statedBy": "items enter and leave this list as stock moves, sells, is restocked, cancelled or returned"
+        },
+        {
+          "id": "5b",
+          "desc": "a purchase moves that category's units and revenue, live",
+          "points": 3,
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "category-units",
+              "in": {
+                "testid": "category-row",
+                "contains": "Audio"
+              },
+              "as": "audio-units"
+            },
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "category-revenue",
+              "in": {
+                "testid": "category-row",
+                "contains": "Audio"
+              },
+              "as": "audio-rev"
+            },
+            {
+              "do": "fill",
+              "actor": "customer",
+              "testid": "search-input",
+              "text": "Bluetooth Speaker",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              }
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "category-units",
+              "in": {
+                "testid": "category-row",
+                "contains": "Audio"
+              },
+              "relativeTo": "audio-units",
+              "plus": 1,
+              "within": 10000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "category-revenue",
+              "in": {
+                "testid": "category-row",
+                "contains": "Audio"
+              },
+              "relativeTo": "audio-rev",
+              "plus": 79.5,
+              "within": 10000
+            }
+          ],
+          "statedBy": "for each\ncategory, how many units have been sold and the revenue they earned, live"
+        },
+        {
+          "id": "5c",
+          "desc": "buying from a category makes that category's other items recommended",
+          "points": 2,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "customer",
+              "testid": "search-input",
+              "text": "Bluetooth Speaker",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              }
+            },
+            {
+              "do": "pressKey",
+              "actor": "customer",
+              "key": "Escape"
+            },
+            {
+              "do": "expect",
+              "actor": "customer",
+              "testid": "recommended-item",
+              "contains": "Headphones",
+              "within": 10000
+            },
+            {
+              "do": "fill",
+              "actor": "customer",
+              "testid": "search-input",
+              "text": "Headphones",
+              "enter": true,
+              "settleMs": 1500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Headphones"
+              }
+            },
+            {
+              "do": "pressKey",
+              "actor": "customer",
+              "key": "Escape"
+            },
+            {
+              "do": "expect",
+              "actor": "customer",
+              "testid": "recommended-item",
+              "contains": "Headphones",
+              "absent": true,
+              "within": 10000
+            }
+          ],
+          "statedBy": "the items from categories\nthey have bought from, most-purchased first, excluding items already in\ntheir cart"
+        },
+        {
+          "id": "5d",
+          "desc": "a signed-out visitor sees best sellers in the recommendations slot",
+          "points": 1,
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "visitor",
+              "testid": "recommended-item",
+              "contains": "Bluetooth Speaker",
+              "within": 10000
+            }
+          ],
+          "statedBy": "for a signed-out visitor this is simply the best sellers"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-fulfilment-access-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-fulfilment-access-1.0.0.json
new file mode 100644
index 00000000000..5ed9f633b50
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-fulfilment-access-1.0.0.json
@@ -0,0 +1,32 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 fulfilment access",
+  "note": "This scenario owns only the visible fulfilment access boundary.",
+  "features": [
+    {
+      "id": 1,
+      "name": "Fulfilment area access",
+      "actors": ["customer", "staff", "admin"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "fq-customer" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true }
+      ],
+      "criteria": [
+        {
+          "id": "1d",
+          "desc": "staff and administrators can open fulfilment while customers cannot",
+          "points": 1,
+          "statedBy": "Customers cannot open the fulfilment area",
+          "steps": [
+            { "do": "expect", "actor": "staff", "testid": "staff-link" },
+            { "do": "expect", "actor": "admin", "testid": "staff-link" },
+            { "do": "expect", "actor": "customer", "testid": "staff-link", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-fulfilment-live-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-fulfilment-live-1.0.0.json
new file mode 100644
index 00000000000..cbb60e1d111
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-fulfilment-live-1.0.0.json
@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 live fulfilment queue",
+  "note": "This scenario owns only the live queue check.",
+  "features": [
+    {
+      "id": 1,
+      "name": "Live fulfilment queue",
+      "actors": ["customer", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "fq-live" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "1a",
+          "desc": "an order placed by a customer appears in the staff queue without a reload",
+          "points": 2,
+          "statedBy": "New orders appear in the queue without a reload",
+          "steps": [
+            { "do": "recordNumber", "actor": "staff", "testid": "queue-depth", "as": "depth-before" },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Desk Lamp", "within": 10000 },
+            { "do": "expectNumber", "actor": "staff", "testid": "queue-depth", "relativeTo": "depth-before", "plus": 1 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-fulfilment-ship-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-fulfilment-ship-1.0.0.json
new file mode 100644
index 00000000000..b6e39067529
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-fulfilment-ship-1.0.0.json
@@ -0,0 +1,38 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 fulfilment shipping",
+  "note": "This scenario owns only the shipping result check.",
+  "features": [
+    {
+      "id": 1,
+      "name": "Ship a pending order",
+      "actors": ["customer", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "fq-ship" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "1c",
+          "desc": "shipping removes the order from the queue and updates the customer order status live",
+          "points": 2,
+          "statedBy": "Remove a shipped order from every open queue and update the customer's order history without a reload",
+          "steps": [
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } },
+            { "do": "reload", "actor": "staff", "settleMs": 2000 },
+            { "do": "click", "actor": "staff", "testid": "staff-link" },
+            { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Keyboard", "within": 10000 },
+            { "do": "click", "actor": "staff", "testid": "ship-submit", "in": { "testid": "queue-item", "contains": "Keyboard" } },
+            { "do": "waitUntilAbsent", "actor": "staff", "testid": "queue-item", "contains": "Keyboard", "within": 10000 },
+            { "do": "reload", "actor": "customer", "settleMs": 2000 },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+            { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "contains": "hipped", "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-invariants.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-invariants.json
new file mode 100644
index 00000000000..1baafaafa16
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-invariants.json
@@ -0,0 +1,764 @@
+{
+  "schemaVersion": 1,
+  "level": 2,
+  "track": "ecommerce",
+  "name": "Running the business — invariants",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses|\\/transfer|\\/cancel|\\/return|\\/ship|\\/price|\\/fulfil",
+  "note": "Properties that must survive the new operations regardless of which feature works. Level 2 adds two roles and six ways to move stock or money, so the questions are: can someone do an operator's job without being an operator, does conservation still hold once stock can flow backwards, and does anything a customer sends decide what the store charges. Stated as outcomes a person would recognise, and scored so a backend is never penalised for a check the harness could not run against it.",
+  "features": [
+    {
+      "id": 201,
+      "name": "Operating the store requires being an operator",
+      "actors": [
+        "admin",
+        "customer"
+      ],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        {
+          "do": "signUp",
+          "actor": "customer",
+          "name": "notstaff"
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "admin-link"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "201a",
+          "desc": "a customer replaying an admin's transfer moves no stock",
+          "points": 2,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-from",
+              "text": "East",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Gaming Mouse"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-to",
+              "text": "West",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Gaming Mouse"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-qty",
+              "text": "5",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Gaming Mouse"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "transfer-submit",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Gaming Mouse"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "admin",
+              "ms": 2500
+            },
+            {
+              "do": "recordNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Gaming Mouse"
+              },
+              "as": "after-admin-move"
+            },
+            {
+              "do": "replayAs",
+              "actor": "customer",
+              "from": "admin",
+              "match": "transfer",
+              "settleMs": 2500
+            },
+            {
+              "do": "expectReplayRejected",
+              "actor": "customer"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Gaming Mouse"
+              },
+              "relativeTo": "after-admin-move",
+              "plus": 0
+            }
+          ],
+          "statedBy": "an admin can transfer a number of units of an item from one warehouse to another"
+        },
+        {
+          "id": "201b",
+          "desc": "a customer cannot set a price by replaying an admin's change",
+          "points": 2,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "price-input",
+              "text": "77.00",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Gaming Mouse"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "price-submit",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Gaming Mouse"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "admin",
+              "ms": 2500
+            },
+            {
+              "do": "replayAs",
+              "actor": "customer",
+              "from": "admin",
+              "match": "price",
+              "swap": {
+                "find": "77",
+                "with": "1"
+              },
+              "settleMs": 2500
+            },
+            {
+              "do": "expectReplayRejected",
+              "actor": "customer"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "item-price",
+              "in": {
+                "testid": "item-card",
+                "contains": "Gaming Mouse"
+              },
+              "atLeast": 77
+            }
+          ],
+          "statedBy": "an admin can change an item's price"
+        },
+        {
+          "id": "201c",
+          "desc": "a customer cannot ship their own order",
+          "points": 0,
+          "steps": [
+            {
+              "do": "pressKey",
+              "actor": "customer",
+              "key": "Escape"
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Laptop Stand"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2500
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "customer",
+              "testid": "ship-submit",
+              "absent": true
+            },
+            {
+              "do": "expect",
+              "actor": "customer",
+              "testid": "order-status",
+              "in": {
+                "testid": "order-item",
+                "contains": "Laptop Stand"
+              },
+              "notContains": "hipped"
+            }
+          ],
+          "statedBy": "staff cannot change prices or create items; admins can do everything staff can",
+          "note": "DOM diagnostic: checks the ship control is absent for a customer. The SERVER-side refusal of a customer's ship request is now criterion 1e, which replays a real ship as the customer and requires the server to reject it. Kept at 0 points so hiding the button is never mistaken for enforcement."
+        }
+      ]
+    },
+    {
+      "id": 202,
+      "name": "Stock is conserved however it moves",
+      "actors": [
+        "admin",
+        "customer"
+      ],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        {
+          "do": "signUp",
+          "actor": "customer",
+          "name": "conserve"
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "admin-link"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "202a",
+          "desc": "a transfer changes where stock is, never how much there is",
+          "points": 2,
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Espresso Machine"
+              },
+              "as": "espresso-total"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-from",
+              "text": "East",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Espresso Machine"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-to",
+              "text": "West",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Espresso Machine"
+              }
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "transfer-qty",
+              "text": "17",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Espresso Machine"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "transfer-submit",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Espresso Machine"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "admin",
+              "ms": 3000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Espresso Machine"
+              },
+              "relativeTo": "espresso-total",
+              "plus": 0
+            }
+          ],
+          "statedBy": "a transfer moves stock, it does not create or destroy it"
+        },
+        {
+          "id": "202b",
+          "desc": "a sale and its cancellation leave the shelf exactly as they found it",
+          "points": 2,
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Induction Cooktop"
+              },
+              "as": "cooktop-before"
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Induction Cooktop"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Induction Cooktop"
+              },
+              "relativeTo": "cooktop-before",
+              "plus": -1
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "cancel-order",
+              "in": {
+                "testid": "order-item",
+                "contains": "Induction Cooktop"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2500
+            },
+            {
+              "do": "pressKey",
+              "actor": "customer",
+              "key": "Escape"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Induction Cooktop"
+              },
+              "relativeTo": "cooktop-before",
+              "plus": 0
+            }
+          ],
+          "statedBy": "the stock goes back to the warehouse it came from"
+        },
+        {
+          "id": "202c",
+          "desc": "a fresh client sees the same totals, so nothing was only corrected in one browser",
+          "points": 1,
+          "steps": [
+            {
+              "do": "freshClient",
+              "actor": "customer"
+            },
+            {
+              "do": "expectNumber",
+              "actor": "customer-fresh",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Induction Cooktop"
+              },
+              "relativeTo": "cooktop-before",
+              "plus": 0
+            }
+          ],
+          "statedBy": "every one of these numbers is the same for every person looking at it"
+        },
+        {
+          "id": "202d",
+          "desc": "a transfer racing a purchase loses no unit between the rows: total = before − sold, exactly, however the two interleave",
+          "points": 0,
+          "note": "WITHHELD until proven against a mutant (transfer-read-modify-write) and a real failing build. A non-transactional transfer reads both rows, computes, writes both — a purchase landing between the read and the write is erased. Sequential tests cannot see this; 202a passes either way.",
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              },
+              "as": "hp-before"
+            },
+            {
+              "do": "race",
+              "branches": [
+                [
+                  {
+                    "do": "fill",
+                    "actor": "admin",
+                    "testid": "transfer-from",
+                    "text": "East",
+                    "in": {
+                      "testid": "admin-item-row",
+                      "contains": "Headphones"
+                    }
+                  },
+                  {
+                    "do": "fill",
+                    "actor": "admin",
+                    "testid": "transfer-to",
+                    "text": "West",
+                    "in": {
+                      "testid": "admin-item-row",
+                      "contains": "Headphones"
+                    }
+                  },
+                  {
+                    "do": "fill",
+                    "actor": "admin",
+                    "testid": "transfer-qty",
+                    "text": "25",
+                    "in": {
+                      "testid": "admin-item-row",
+                      "contains": "Headphones"
+                    }
+                  },
+                  {
+                    "do": "click",
+                    "actor": "admin",
+                    "testid": "transfer-submit",
+                    "in": {
+                      "testid": "admin-item-row",
+                      "contains": "Headphones"
+                    }
+                  }
+                ],
+                [
+                  {
+                    "do": "click",
+                    "actor": "customer",
+                    "testid": "buy-now",
+                    "in": {
+                      "testid": "item-card",
+                      "contains": "Headphones"
+                    }
+                  }
+                ]
+              ],
+              "settleMs": 5000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Headphones"
+              },
+              "relativeTo": "hp-before",
+              "plus": -1,
+              "within": 12000
+            }
+          ],
+          "statedBy": "a transfer moves stock, it does not create or destroy it"
+        }
+      ]
+    },
+    {
+      "id": 203,
+      "name": "The books still balance once money can flow backwards",
+      "actors": [
+        "admin",
+        "customer"
+      ],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        {
+          "do": "signUp",
+          "actor": "customer",
+          "name": "books"
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "admin-link"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "203a",
+          "desc": "revenue rises by what was bought and falls by what was cancelled",
+          "points": 3,
+          "steps": [
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "as": "rev-start"
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Desk Lamp"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2500
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "relativeTo": "rev-start",
+              "plus": 42,
+              "within": 10000
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "cancel-order",
+              "in": {
+                "testid": "order-item",
+                "contains": "Desk Lamp"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2500
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "relativeTo": "rev-start",
+              "plus": 0,
+              "within": 10000
+            }
+          ],
+          "statedBy": "revenue always equals the sum of orders that are still standing"
+        },
+        {
+          "id": "203b",
+          "desc": "a price change does not rewrite revenue already earned",
+          "points": 2,
+          "steps": [
+            {
+              "do": "pressKey",
+              "actor": "customer",
+              "key": "Escape"
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "customer",
+              "ms": 2500
+            },
+            {
+              "do": "recordNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "as": "rev-after-sale"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "price-input",
+              "text": "5.00",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Bluetooth Speaker"
+              }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "price-submit",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Bluetooth Speaker"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "admin",
+              "ms": 3000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-revenue",
+              "relativeTo": "rev-after-sale",
+              "plus": 0
+            }
+          ],
+          "statedBy": "changing a price never alters the history, the revenue already recorded"
+        }
+      ]
+    },
+    {
+      "id": 204,
+      "name": "An order belongs to the person who placed it",
+      "actors": [
+        "one",
+        "two"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "one",
+          "name": "owner"
+        },
+        {
+          "do": "signUp",
+          "actor": "two",
+          "name": "other"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "204a",
+          "desc": "one customer cannot cancel another's order",
+          "points": 0,
+          "note": "WITHHELD: the current replay happens after the owner's cancellation, so a state-only rejection can masquerade as an ownership check. Restore points only after the harness can replay a captured cancellation against a still-pending order and a cross-account authorization mutant is caught.",
+          "steps": [
+            {
+              "do": "click",
+              "actor": "one",
+              "testid": "buy-now",
+              "in": {
+                "testid": "item-card",
+                "contains": "Laptop Stand"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "one",
+              "ms": 2500
+            },
+            {
+              "do": "click",
+              "actor": "one",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "click",
+              "actor": "one",
+              "testid": "cancel-order",
+              "in": {
+                "testid": "order-item",
+                "contains": "Laptop Stand"
+              }
+            },
+            {
+              "do": "wait",
+              "actor": "one",
+              "ms": 2000
+            },
+            {
+              "do": "replayAs",
+              "actor": "two",
+              "from": "one",
+              "match": "cancel",
+              "settleMs": 2500
+            },
+            {
+              "do": "expectReplayRejected",
+              "actor": "two"
+            },
+            {
+              "do": "click",
+              "actor": "two",
+              "testid": "orders-toggle"
+            },
+            {
+              "do": "expect",
+              "actor": "two",
+              "testid": "order-item",
+              "contains": "Laptop Stand",
+              "absent": true
+            }
+          ],
+          "statedBy": "a customer can cancel an order that has not shipped"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-live-price-1.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-live-price-1.4.0.json
new file mode 100644
index 00000000000..1da6f90c496
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-live-price-1.4.0.json
@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 live catalog price",
+  "note": "The signed-out live-price check owns its catalog state and does not share a mutation grade with unrelated workflows.",
+  "features": [
+    {
+      "id": 4,
+      "name": "Live catalog price",
+      "actors": ["admin", "visitor"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "fill", "actor": "visitor", "testid": "search-input", "text": "Air Purifier", "enter": true, "settleMs": 1500 }
+      ],
+      "criteria": [
+        {
+          "id": "4b",
+          "desc": "the new price reaches a signed-out visitor without a reload",
+          "points": 2,
+          "statedBy": "the storefront shows the new price immediately, to everyone",
+          "steps": [
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-price", "in": { "testid": "item-card", "contains": "Air Purifier" }, "atLeast": 2 },
+            { "do": "fill", "actor": "admin", "testid": "price-input", "text": "1.00", "in": { "testid": "admin-item-row", "contains": "Air Purifier" } },
+            { "do": "click", "actor": "admin", "testid": "price-submit", "in": { "testid": "admin-item-row", "contains": "Air Purifier" } },
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-price", "in": { "testid": "item-card", "contains": "Air Purifier" }, "equals": 1, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-low-stock-1.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-low-stock-1.4.0.json
new file mode 100644
index 00000000000..d5d1746a9e5
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-low-stock-1.4.0.json
@@ -0,0 +1,88 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 low-stock boundary",
+  "note": "This scenario owns only the low-stock boundary check so a failure cannot prevent unrelated operational-view checks from running.",
+  "features": [
+    {
+      "id": 5,
+      "name": "The low-stock view",
+      "actors": ["admin", "customer"],
+      "setup": [
+        { "do": "dbSetStock", "item": "Air Purifier", "warehouse": "East", "quantity": 2, "settleMs": 250 },
+        { "do": "dbSetStock", "item": "Air Purifier", "warehouse": "West", "quantity": 1, "settleMs": 250 },
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "password": "stackbench-admin-2026",
+          "exact": true
+        },
+        { "do": "signUp", "actor": "customer", "name": "low-stock-focused" },
+        { "do": "reload", "actor": "admin", "settleMs": 1000 },
+        { "do": "reload", "actor": "customer", "settleMs": 1000 },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "5e",
+          "desc": "the dashboard lists a current low-stock item",
+          "points": 1,
+          "statedBy": "It lists items with 10 units or fewer, most urgent first.",
+          "steps": [
+            { "do": "expect", "actor": "admin", "testid": "low-stock-item", "contains": "Air Purifier", "within": 8000 }
+          ]
+        },
+        {
+          "id": "5a",
+          "desc": "an item falling to ten units or fewer joins the low-stock list, live",
+          "points": 3,
+          "statedBy": "items enter and leave this list as stock moves, sells, is restocked, cancelled or returned",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "low-stock-item",
+              "contains": "Air Purifier",
+              "within": 8000
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "restock-input",
+              "text": "8",
+              "in": { "testid": "admin-location-row", "contains": "Air Purifier" }
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "restock-submit",
+              "in": { "testid": "admin-location-row", "contains": "Air Purifier" }
+            },
+            {
+              "do": "waitUntilAbsent",
+              "actor": "admin",
+              "testid": "low-stock-item",
+              "contains": "Air Purifier",
+              "within": 10000
+            },
+            {
+              "do": "click",
+              "actor": "customer",
+              "testid": "buy-now",
+              "in": { "testid": "item-card", "contains": "Air Purifier" }
+            },
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "low-stock-item",
+              "contains": "Air Purifier",
+              "within": 10000
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-operational-best-sellers-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-operational-best-sellers-1.0.0.json
new file mode 100644
index 00000000000..e42ddec24c9
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-operational-best-sellers-1.0.0.json
@@ -0,0 +1,32 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 signed-out best sellers",
+  "note": "This scenario owns only the signed-out recommendation check.",
+  "features": [
+    {
+      "id": 5,
+      "name": "Signed-out best sellers",
+      "actors": ["buyer", "visitor"],
+      "setup": [
+        { "do": "signUp", "actor": "buyer", "name": "best-seller-buyer" },
+        { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Gaming Mouse" } },
+        { "do": "click", "actor": "buyer", "testid": "orders-toggle" },
+        { "do": "expect", "actor": "buyer", "testid": "order-item", "contains": "Gaming Mouse", "within": 10000 }
+      ],
+      "criteria": [
+        {
+          "id": "5d",
+          "desc": "a signed-out visitor sees a best seller in the recommendations list",
+          "points": 1,
+          "statedBy": "Signed-out visitors see best sellers",
+          "steps": [
+            { "do": "reload", "actor": "visitor", "settleMs": 2500 },
+            { "do": "expectNumber", "actor": "visitor", "testid": "recommendation-rank", "in": { "testid": "recommended-item", "contains": "Gaming Mouse" }, "equals": 1, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-operational-category-totals-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-operational-category-totals-1.0.0.json
new file mode 100644
index 00000000000..aca5cd0fde9
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-operational-category-totals-1.0.0.json
@@ -0,0 +1,49 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 category totals",
+  "note": "This scenario owns only the category sales totals check.",
+  "features": [
+    {
+      "id": 5,
+      "name": "Category sales totals",
+      "actors": ["admin", "customer"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "signUp", "actor": "customer", "name": "category-totals" },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "5f",
+          "desc": "the dashboard shows category units and revenue",
+          "points": 1,
+          "statedBy": "Category totals show units sold and revenue for each category.",
+          "steps": [
+            { "do": "recordNumber", "actor": "admin", "testid": "category-units", "in": { "testid": "category-row", "contains": "Audio" }, "as": "audio-core-units" },
+            { "do": "recordNumber", "actor": "admin", "testid": "category-revenue", "in": { "testid": "category-row", "contains": "Audio" }, "as": "audio-core-revenue" },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" } },
+            { "do": "reload", "actor": "admin", "settleMs": 2000 },
+            { "do": "click", "actor": "admin", "testid": "admin-link" },
+            { "do": "expectNumber", "actor": "admin", "testid": "category-units", "in": { "testid": "category-row", "contains": "Audio" }, "relativeTo": "audio-core-units", "plus": 1 },
+            { "do": "expectNumber", "actor": "admin", "testid": "category-revenue", "in": { "testid": "category-row", "contains": "Audio" }, "relativeTo": "audio-core-revenue", "plus": 79.5 }
+          ]
+        },
+        {
+          "id": "5b",
+          "desc": "a purchase updates that category's units and revenue live",
+          "points": 3,
+          "statedBy": "Category totals show units sold and revenue for each category",
+          "steps": [
+            { "do": "recordNumber", "actor": "admin", "testid": "category-units", "in": { "testid": "category-row", "contains": "Audio" }, "as": "audio-units" },
+            { "do": "recordNumber", "actor": "admin", "testid": "category-revenue", "in": { "testid": "category-row", "contains": "Audio" }, "as": "audio-revenue" },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" } },
+            { "do": "expectNumber", "actor": "admin", "testid": "category-units", "in": { "testid": "category-row", "contains": "Audio" }, "relativeTo": "audio-units", "plus": 1, "within": 10000 },
+            { "do": "expectNumber", "actor": "admin", "testid": "category-revenue", "in": { "testid": "category-row", "contains": "Audio" }, "relativeTo": "audio-revenue", "plus": 79.5, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-operational-recommendations-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-operational-recommendations-1.0.0.json
new file mode 100644
index 00000000000..cb64f32ed2e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-operational-recommendations-1.0.0.json
@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 recommendations",
+  "note": "This scenario owns only the signed-in recommendation check.",
+  "features": [
+    {
+      "id": 5,
+      "name": "Customer recommendations",
+      "actors": ["customer"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "recommendations" }
+      ],
+      "criteria": [
+        {
+          "id": "5c",
+          "desc": "a purchase recommends another item from that category and excludes an item in the cart",
+          "points": 2,
+          "statedBy": "Recommend items from categories the customer bought from and exclude items already in the cart",
+          "steps": [
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" } },
+            { "do": "expect", "actor": "customer", "testid": "recommended-item", "contains": "Headphones", "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } },
+            { "do": "expect", "actor": "customer", "testid": "recommended-item", "contains": "Headphones", "absent": true, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-order-cancellation-core-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-order-cancellation-core-1.0.0.json
new file mode 100644
index 00000000000..e92b9a02617
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-order-cancellation-core-1.0.0.json
@@ -0,0 +1,37 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Order cancellation",
+  "features": [
+    {
+      "id": 3,
+      "name": "Cancel a pending order",
+      "actors": ["customer", "admin"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "cancel-core" },
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "3a",
+          "desc": "cancelling a pending order restores its stock and revenue",
+          "points": 2,
+          "statedBy": "the stock goes back to the warehouse it came from and revenue falls",
+          "steps": [
+            { "do": "recordNumber", "actor": "admin", "testid": "admin-revenue", "as": "revenue-before" },
+            { "do": "recordNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Coffee Grinder" }, "as": "stock-before" },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Coffee Grinder" } },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle", "settleMs": 2000 },
+            { "do": "click", "actor": "customer", "testid": "cancel-order", "in": { "testid": "order-item", "contains": "Coffee Grinder" } },
+            { "do": "expectNumber", "actor": "admin", "testid": "admin-revenue", "relativeTo": "revenue-before", "plus": 0, "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "catalog-link" },
+            { "do": "expectNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Coffee Grinder" }, "relativeTo": "stock-before", "plus": 0, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-order-cancellation-history-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-order-cancellation-history-1.0.0.json
new file mode 100644
index 00000000000..f8acc126547
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-order-cancellation-history-1.0.0.json
@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Order cancellation history",
+  "features": [
+    {
+      "id": 3,
+      "name": "Cancellation history",
+      "actors": ["customer"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "cancel-focused" }
+      ],
+      "criteria": [
+        {
+          "id": "3b",
+          "desc": "a cancelled order is shown as cancelled in the customer's history",
+          "points": 1,
+          "statedBy": "a customer can cancel an order that has not shipped",
+          "steps": [
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Coffee Grinder" }, "settleMs": 2000 },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+            { "do": "click", "actor": "customer", "testid": "cancel-order", "in": { "testid": "order-item", "contains": "Coffee Grinder" } },
+            { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Coffee Grinder" }, "contains": "ancel", "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-paid-price-history-1.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-paid-price-history-1.4.0.json
new file mode 100644
index 00000000000..5f3ef9cc1a3
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-paid-price-history-1.4.0.json
@@ -0,0 +1,39 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 paid price history",
+  "note": "The receipt check reloads the customer before reading history, proving persisted order data rather than a stale in-memory response.",
+  "features": [
+    {
+      "id": 4,
+      "name": "Prices change, history does not",
+      "actors": ["admin", "customer", "visitor"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "signUp", "actor": "customer", "name": "history-persisted" },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "4a",
+          "desc": "a price change updates the live catalog but leaves the customer's exact paid price unchanged",
+          "points": 3,
+          "statedBy": "past orders keep the price that was paid",
+          "steps": [
+            { "do": "fill", "actor": "customer", "testid": "search-input", "text": "Air Purifier", "enter": true, "settleMs": 1500 },
+            { "do": "recordNumber", "actor": "customer", "testid": "item-price", "in": { "testid": "item-card", "contains": "Air Purifier" }, "as": "air-purifier-paid" },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Air Purifier" }, "settleMs": 2000 },
+            { "do": "fill", "actor": "visitor", "testid": "search-input", "text": "Air Purifier", "enter": true, "settleMs": 1500 },
+            { "do": "fill", "actor": "admin", "testid": "price-input", "text": "1.00", "in": { "testid": "admin-item-row", "contains": "Air Purifier" } },
+            { "do": "click", "actor": "admin", "testid": "price-submit", "in": { "testid": "admin-item-row", "contains": "Air Purifier" } },
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-price", "in": { "testid": "item-card", "contains": "Air Purifier" }, "equals": 1, "within": 10000 },
+            { "do": "reload", "actor": "customer", "settleMs": 2000 },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+            { "do": "expectNumber", "actor": "customer", "testid": "order-total", "in": { "testid": "order-item", "contains": "Air Purifier" }, "relativeTo": "air-purifier-paid", "plus": 0 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-queue-warehouse-1.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-queue-warehouse-1.4.0.json
new file mode 100644
index 00000000000..88c2472b7ee
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-queue-warehouse-1.4.0.json
@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 fulfilment warehouse",
+  "note": "The warehouse-label check owns its order and queue state so another fulfilment check cannot affect its evidence.",
+  "features": [
+    {
+      "id": 1,
+      "name": "Fulfilment queue",
+      "actors": ["customer", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "fq-warehouse" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "1b",
+          "desc": "the queue names the warehouse the order will ship from",
+          "points": 1,
+          "statedBy": "which warehouse each will ship from",
+          "steps": [
+            { "do": "dbSetStock", "item": "Desk Lamp", "warehouse": "West", "quantity": 0, "settleMs": 2000 },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Desk Lamp", "within": 10000 },
+            { "do": "expect", "actor": "staff", "testid": "queue-warehouse", "in": { "testid": "queue-item", "contains": "Desk Lamp" }, "contains": "East" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-self-contained-1.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-self-contained-1.4.0.json
new file mode 100644
index 00000000000..3dbe6ea7ade
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-self-contained-1.4.0.json
@@ -0,0 +1,180 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 independently selectable checks",
+  "note": "Each criterion establishes every state and recorded value that it later observes, so it remains valid when selected by itself.",
+  "features": [
+    {
+      "id": 1,
+      "name": "Fulfilment queue",
+      "actors": ["customer", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "fq-focused" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "1b",
+          "desc": "the queue names the warehouse the order will ship from",
+          "points": 1,
+          "statedBy": "which warehouse each will ship from",
+          "steps": [
+            { "do": "dbSetStock", "item": "Desk Lamp", "warehouse": "West", "quantity": 0, "settleMs": 2000 },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Desk Lamp", "within": 10000 },
+            { "do": "expect", "actor": "staff", "testid": "queue-warehouse", "in": { "testid": "queue-item", "contains": "Desk Lamp" }, "contains": "East" }
+          ]
+        },
+        {
+          "id": "1c",
+          "desc": "shipping removes the order from the queue for staff and marks it shipped for the customer, live",
+          "points": 2,
+          "statedBy": "it leaves the queue for everyone watching the queue, and the customer's order history shows it as shipped, live",
+          "steps": [
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } },
+            { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Keyboard", "within": 10000 },
+            { "do": "click", "actor": "staff", "testid": "ship-submit", "in": { "testid": "queue-item", "contains": "Keyboard" } },
+            { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Keyboard", "absent": true, "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+            { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "contains": "hipped", "within": 10000 }
+          ]
+        },
+        {
+          "id": "1e",
+          "desc": "the server refuses a customer's direct attempt to ship their own order",
+          "points": 2,
+          "statedBy": "Staff mark an order shipped",
+          "steps": [
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" }, "settleMs": 2000 },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+            {
+              "do": "callAction",
+              "actor": "customer",
+              "action": "ship",
+              "namedAction": {
+                "id": "ship",
+                "path": "/api/fulfilment/ship",
+                "reducer": "ship_order",
+                "args": [0],
+                "params": [{ "name": "orderId", "in": "body", "wireType": "u64" }]
+              },
+              "input": { "testid": "order-item", "contains": "Keyboard", "attribute": "data-ship-input" },
+              "settleMs": 2000
+            },
+            { "do": "expectActionOutcome", "actor": "customer", "outcome": "refused" },
+            { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "notContains": "hipped" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 2,
+      "name": "Warehouse totals",
+      "actors": ["admin"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "2b",
+          "desc": "both warehouse totals move live and in opposite directions as stock is transferred",
+          "points": 2,
+          "statedBy": "the per-warehouse numbers staff and admins see both move at once",
+          "steps": [
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "as": "warehouse-east-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "as": "warehouse-west-before" },
+            { "do": "fill", "actor": "admin", "testid": "transfer-from", "text": "East", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "fill", "actor": "admin", "testid": "transfer-to", "text": "West", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "fill", "actor": "admin", "testid": "transfer-qty", "text": "10", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "click", "actor": "admin", "testid": "transfer-submit", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "relativeTo": "warehouse-east-before", "plus": -10, "within": 10000 },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "relativeTo": "warehouse-west-before", "plus": 10, "within": 10000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 3,
+      "name": "Cancellation history",
+      "actors": ["customer"],
+      "setup": [{ "do": "signUp", "actor": "customer", "name": "cancel-focused" }],
+      "criteria": [
+        {
+          "id": "3b",
+          "desc": "a cancelled order is shown as cancelled in the customer's history",
+          "points": 1,
+          "statedBy": "a customer can cancel an order that has not shipped",
+          "steps": [
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Coffee Grinder" }, "settleMs": 2000 },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+            { "do": "click", "actor": "customer", "testid": "cancel-order", "in": { "testid": "order-item", "contains": "Coffee Grinder" } },
+            { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Coffee Grinder" }, "contains": "ancel", "within": 10000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 4,
+      "name": "Live catalog price",
+      "actors": ["admin", "visitor"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "4b",
+          "desc": "the new price reaches a signed-out visitor without a reload",
+          "points": 2,
+          "statedBy": "the storefront shows the new price immediately, to everyone",
+          "steps": [
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-price", "in": { "testid": "item-card", "contains": "Air Purifier" }, "atLeast": 2 },
+            { "do": "fill", "actor": "admin", "testid": "price-input", "text": "1.00", "in": { "testid": "admin-item-row", "contains": "Air Purifier" } },
+            { "do": "click", "actor": "admin", "testid": "price-submit", "in": { "testid": "admin-item-row", "contains": "Air Purifier" } },
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-price", "in": { "testid": "item-card", "contains": "Air Purifier" }, "equals": 1, "within": 10000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 202,
+      "name": "Stock recovery is durable across clients",
+      "actors": ["customer"],
+      "setup": [{ "do": "signUp", "actor": "customer", "name": "fresh-stock" }],
+      "criteria": [
+        {
+          "id": "202b",
+          "desc": "a sale and its cancellation leave the shelf exactly as they found it",
+          "points": 2,
+          "statedBy": "the stock goes back to the warehouse it came from",
+          "steps": [
+            { "do": "recordNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Induction Cooktop" }, "as": "cancel-stock-before" },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Induction Cooktop" }, "settleMs": 2000 },
+            { "do": "expectNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Induction Cooktop" }, "relativeTo": "cancel-stock-before", "plus": -1 },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+            { "do": "click", "actor": "customer", "testid": "cancel-order", "in": { "testid": "order-item", "contains": "Induction Cooktop" }, "settleMs": 2000 },
+            { "do": "click", "actor": "customer", "testid": "catalog-link" },
+            { "do": "expectNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Induction Cooktop" }, "relativeTo": "cancel-stock-before", "plus": 0 }
+          ]
+        },
+        {
+          "id": "202c",
+          "desc": "a fresh client sees the restored total after a sale is cancelled",
+          "points": 1,
+          "statedBy": "every one of these numbers is the same for every person looking at it",
+          "steps": [
+            { "do": "recordNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "as": "fresh-stock-before" },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Headphones" }, "settleMs": 2000 },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+            { "do": "click", "actor": "customer", "testid": "cancel-order", "in": { "testid": "order-item", "contains": "Headphones" }, "settleMs": 2000 },
+            { "do": "freshClient", "actor": "customer" },
+            { "do": "expectNumber", "actor": "customer-fresh", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "relativeTo": "fresh-stock-before", "plus": 0 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-server-actions-1.1.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-server-actions-1.1.0.json
new file mode 100644
index 00000000000..1aed8f3015e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-server-actions-1.1.0.json
@@ -0,0 +1,136 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 direct server checks",
+  "note": "Cross-stack direct actions prove server authorization and exact conservation without relying on whether a client renders a button.",
+  "features": [
+    {
+      "id": 201,
+      "name": "Shipping requires an operator",
+      "actors": ["customer"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "direct-notstaff" },
+        { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Laptop Stand" }, "settleMs": 2000 },
+        { "do": "click", "actor": "customer", "testid": "orders-toggle" }
+      ],
+      "criteria": [
+        {
+          "id": "201c",
+          "desc": "the server refuses a customer's direct attempt to ship their own pending order",
+          "points": 2,
+          "statedBy": "Staff mark an order shipped",
+          "steps": [
+            {
+              "do": "callAction", "actor": "customer", "action": "ship",
+              "namedAction": {
+                "id": "ship", "path": "/api/fulfilment/ship", "reducer": "ship_order", "args": [0],
+                "params": [{ "name": "orderId", "in": "body", "wireType": "u64" }]
+              },
+              "input": { "testid": "order-item", "contains": "Laptop Stand", "attribute": "data-ship-input" },
+              "settleMs": 2000
+            },
+            { "do": "expectActionOutcome", "actor": "customer", "outcome": "refused" },
+            { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Laptop Stand" }, "notContains": "hipped" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 202,
+      "name": "Stock is conserved while operations overlap",
+      "actors": ["admin", "customer"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "signUp", "actor": "customer", "name": "direct-conserve" },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "202d",
+          "desc": "a direct transfer racing a direct purchase leaves the exact starting total minus the sold unit",
+          "points": 2,
+          "statedBy": "a transfer moves stock, it does not create or destroy it",
+          "steps": [
+            { "do": "recordNumber", "actor": "admin", "testid": "admin-stock", "in": { "testid": "admin-item-row", "contains": "Headphones" }, "as": "direct-race-admin-before" },
+            { "do": "recordNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "as": "direct-race-customer-before" },
+            {
+              "do": "race",
+              "settleMs": 5000,
+              "branches": [
+                [{
+                  "do": "callAction", "actor": "admin", "action": "transfer",
+                  "namedAction": {
+                    "id": "transfer", "path": "/api/admin/transfer", "reducer": "admin_transfer_stock", "args": [0, 0, 0, 25],
+                    "params": [
+                      { "name": "itemId", "in": "body", "wireType": "u64" },
+                      { "name": "fromWarehouseId", "in": "body", "wireType": "u64" },
+                      { "name": "toWarehouseId", "in": "body", "wireType": "u64" },
+                      { "name": "quantity", "in": "body" }
+                    ]
+                  },
+                  "input": { "testid": "admin-item-row", "contains": "Headphones", "attribute": "data-transfer-input" }
+                }],
+                [{
+                  "do": "callAction", "actor": "customer", "action": "buy",
+                  "namedAction": {
+                    "id": "buy", "path": "/api/items/:id/buy", "reducer": "buy_now", "args": [0],
+                    "params": [{ "name": "itemId", "in": "path", "placeholder": ":id", "wireType": "u64" }]
+                  },
+                  "input": { "testid": "item-card", "contains": "Headphones", "attribute": "data-buy-input" }
+                }]
+              ]
+            },
+            { "do": "expectActionOutcome", "actor": "admin", "outcome": "accepted" },
+            { "do": "expectActionOutcome", "actor": "customer", "outcome": "accepted" },
+            { "do": "expectNumber", "actor": "admin", "testid": "admin-stock", "in": { "testid": "admin-item-row", "contains": "Headphones" }, "relativeTo": "direct-race-admin-before", "plus": -1, "within": 12000 },
+            { "do": "expectNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "relativeTo": "direct-race-customer-before", "plus": -1, "within": 12000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 204,
+      "name": "An order belongs to the person who placed it",
+      "actors": ["owner", "other"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "direct-owner" },
+        { "do": "signUp", "actor": "other", "name": "direct-other" },
+        { "do": "click", "actor": "owner", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "settleMs": 1500 },
+        { "do": "click", "actor": "owner", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" }, "settleMs": 1500 },
+        { "do": "click", "actor": "owner", "testid": "orders-toggle" }
+      ],
+      "criteria": [
+        {
+          "id": "204a",
+          "desc": "the server refuses one customer trying to cancel another customer's still-pending order",
+          "points": 2,
+          "statedBy": "A customer can cancel an order that has not shipped",
+          "steps": [
+            {
+              "do": "callAction", "actor": "owner", "action": "cancel",
+              "namedAction": {
+                "id": "cancel", "path": "/api/orders/:id/cancel", "reducer": "cancel_order", "args": [0],
+                "params": [{ "name": "orderId", "in": "path", "placeholder": ":id", "wireType": "u64" }]
+              },
+              "input": { "testid": "order-item", "contains": "Desk Lamp", "attribute": "data-cancel-input" },
+              "settleMs": 2000
+            },
+            { "do": "expectActionOutcome", "actor": "owner", "outcome": "accepted" },
+            {
+              "do": "callAction", "actor": "other", "from": "owner", "action": "cancel",
+              "namedAction": {
+                "id": "cancel", "path": "/api/orders/:id/cancel", "reducer": "cancel_order", "args": [0],
+                "params": [{ "name": "orderId", "in": "path", "placeholder": ":id", "wireType": "u64" }]
+              },
+              "input": { "testid": "order-item", "contains": "Keyboard", "attribute": "data-cancel-input" },
+              "settleMs": 2000
+            },
+            { "do": "expectActionOutcome", "actor": "other", "outcome": "refused", "routeProvenBy": "owner" },
+            { "do": "expect", "actor": "owner", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "notContains": "ancelled" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-strengthened-1.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-strengthened-1.4.0.json
new file mode 100644
index 00000000000..77aac53cbd7
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-strengthened-1.4.0.json
@@ -0,0 +1,265 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 strengthened observations",
+  "note": "Corrected L2 criteria assert both sides of state transitions and the user-visible outcomes required by the product brief.",
+  "features": [
+    {
+      "id": 2,
+      "name": "Moving stock between warehouses",
+      "actors": ["admin", "visitor"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "2a",
+          "desc": "a transfer decreases the source, increases the destination, and preserves the item's exact total",
+          "points": 3,
+          "statedBy": "a transfer moves stock, it does not create or destroy it",
+          "steps": [
+            { "do": "recordNumber", "actor": "visitor", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "as": "transfer-item-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "as": "transfer-east-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "as": "transfer-west-before" },
+            { "do": "fill", "actor": "admin", "testid": "transfer-from", "text": "East", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "fill", "actor": "admin", "testid": "transfer-to", "text": "West", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "fill", "actor": "admin", "testid": "transfer-qty", "text": "10", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "click", "actor": "admin", "testid": "transfer-submit", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "relativeTo": "transfer-east-before", "plus": -10, "within": 10000 },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "relativeTo": "transfer-west-before", "plus": 10, "within": 10000 },
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "relativeTo": "transfer-item-before", "plus": 0, "within": 10000 }
+          ]
+        },
+        {
+          "id": "2c",
+          "desc": "a transfer that would overdraw a warehouse is refused and changes neither warehouse nor the item total",
+          "points": 2,
+          "statedBy": "a transfer that would leave a warehouse short is refused and changes nothing",
+          "steps": [
+            { "do": "recordNumber", "actor": "visitor", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "as": "overdraw-item-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "as": "overdraw-east-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "as": "overdraw-west-before" },
+            { "do": "fill", "actor": "admin", "testid": "transfer-from", "text": "East", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "fill", "actor": "admin", "testid": "transfer-to", "text": "West", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "fill", "actor": "admin", "testid": "transfer-qty", "text": "99999", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "click", "actor": "admin", "testid": "transfer-submit", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "expect", "actor": "admin", "testid": "order-error", "within": 6000 },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "relativeTo": "overdraw-east-before", "plus": 0 },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "relativeTo": "overdraw-west-before", "plus": 0 },
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "relativeTo": "overdraw-item-before", "plus": 0 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 3,
+      "name": "Returning a shipped item",
+      "actors": ["customer", "staff", "admin"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "return-focused" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "3c",
+          "desc": "returning a shipped item restores stock and revenue and visibly marks the item returned",
+          "points": 3,
+          "statedBy": "the stock comes back, revenue falls by what was paid for it, and the order shows the item as returned",
+          "steps": [
+            { "do": "recordNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Keyboard" }, "as": "return-stock-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "admin-revenue", "as": "return-revenue-before" },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } },
+            { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Keyboard", "within": 10000 },
+            { "do": "click", "actor": "staff", "testid": "ship-submit", "in": { "testid": "queue-item", "contains": "Keyboard" } },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle", "settleMs": 1500 },
+            { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "contains": "hipped", "within": 10000 },
+            { "do": "expectElementCount", "actor": "customer", "testid": "order-item", "contains": "Keyboard", "equals": 1, "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "return-item", "in": { "testid": "order-item", "contains": "Keyboard" } },
+            { "do": "expect", "actor": "customer", "testid": "order-item", "contains": "eturned", "within": 10000 },
+            { "do": "expectNumber", "actor": "admin", "testid": "admin-revenue", "relativeTo": "return-revenue-before", "plus": 0, "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "catalog-link" },
+            { "do": "expectNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Keyboard" }, "relativeTo": "return-stock-before", "plus": 0 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 4,
+      "name": "Prices change, history does not",
+      "actors": ["admin", "customer", "visitor"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "signUp", "actor": "customer", "name": "history-focused" },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "4a",
+          "desc": "a price change updates the live catalog but leaves the customer's exact paid price unchanged",
+          "points": 3,
+          "statedBy": "past orders keep the price that was paid",
+          "steps": [
+            { "do": "recordNumber", "actor": "customer", "testid": "item-price", "in": { "testid": "item-card", "contains": "Air Purifier" }, "as": "air-purifier-paid" },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Air Purifier" }, "settleMs": 2000 },
+            { "do": "fill", "actor": "admin", "testid": "price-input", "text": "1.00", "in": { "testid": "admin-item-row", "contains": "Air Purifier" } },
+            { "do": "click", "actor": "admin", "testid": "price-submit", "in": { "testid": "admin-item-row", "contains": "Air Purifier" } },
+            { "do": "expectNumber", "actor": "visitor", "testid": "item-price", "in": { "testid": "item-card", "contains": "Air Purifier" }, "equals": 1, "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+            { "do": "expectNumber", "actor": "customer", "testid": "order-total", "in": { "testid": "order-item", "contains": "Air Purifier" }, "relativeTo": "air-purifier-paid", "plus": 0 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 5,
+      "name": "Best sellers count only kept purchases",
+      "actors": ["customer", "staff", "visitor"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "best-seller-focused" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "5d",
+          "desc": "signed-out best sellers include kept purchases and exclude purchases that are cancelled or returned",
+          "points": 1,
+          "statedBy": "A cancelled or returned order's items stop counting as purchases",
+          "steps": [
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "expect", "actor": "visitor", "testid": "recommended-item", "contains": "Desk Lamp", "within": 10000 },
+
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" } },
+            { "do": "expect", "actor": "visitor", "testid": "recommended-item", "contains": "Bluetooth Speaker", "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+            { "do": "click", "actor": "customer", "testid": "cancel-order", "in": { "testid": "order-item", "contains": "Bluetooth Speaker" } },
+            { "do": "expect", "actor": "visitor", "testid": "recommended-item", "contains": "Bluetooth Speaker", "absent": true, "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "catalog-link" },
+
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Coffee Grinder" } },
+            { "do": "expect", "actor": "visitor", "testid": "recommended-item", "contains": "Coffee Grinder", "within": 10000 },
+            { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Coffee Grinder", "within": 10000 },
+            { "do": "click", "actor": "staff", "testid": "ship-submit", "in": { "testid": "queue-item", "contains": "Coffee Grinder" } },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle", "settleMs": 1500 },
+            { "do": "click", "actor": "customer", "testid": "return-item", "in": { "testid": "order-item", "contains": "Coffee Grinder" } },
+            { "do": "expect", "actor": "visitor", "testid": "recommended-item", "contains": "Coffee Grinder", "absent": true, "within": 10000 },
+            { "do": "expect", "actor": "visitor", "testid": "recommended-item", "contains": "Desk Lamp", "within": 10000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 201,
+      "name": "Operating the store requires authorization",
+      "actors": ["admin", "customer"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "signUp", "actor": "customer", "name": "not-operator" },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "201a",
+          "desc": "the server refuses a customer's direct transfer and neither warehouse nor the item total changes",
+          "points": 2,
+          "statedBy": "An admin can transfer a number of units of an item from one warehouse to another",
+          "steps": [
+            { "do": "recordNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "as": "unauthorized-item-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "as": "unauthorized-east-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "as": "unauthorized-west-before" },
+            {
+              "do": "callAction",
+              "actor": "customer",
+              "from": "admin",
+              "action": "transfer",
+              "namedAction": {
+                "id": "transfer",
+                "path": "/api/admin/transfer",
+                "reducer": "admin_transfer_stock",
+                "args": [0, 0, 0, 25],
+                "params": [
+                  { "name": "itemId", "in": "body", "wireType": "u64" },
+                  { "name": "fromWarehouseId", "in": "body", "wireType": "u64" },
+                  { "name": "toWarehouseId", "in": "body", "wireType": "u64" },
+                  { "name": "quantity", "in": "body" }
+                ]
+              },
+              "input": { "testid": "admin-item-row", "contains": "Headphones", "attribute": "data-transfer-input" },
+              "settleMs": 2000
+            },
+            { "do": "expectActionOutcome", "actor": "customer", "outcome": "refused" },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "relativeTo": "unauthorized-east-before", "plus": 0 },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "relativeTo": "unauthorized-west-before", "plus": 0 },
+            { "do": "expectNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "relativeTo": "unauthorized-item-before", "plus": 0 }
+          ]
+        },
+        {
+          "id": "201b",
+          "desc": "the server refuses a customer's direct price change and the last accepted price remains exact",
+          "points": 2,
+          "statedBy": "an admin can change an item's price",
+          "steps": [
+            { "do": "fill", "actor": "admin", "testid": "price-input", "text": "77.00", "in": { "testid": "admin-item-row", "contains": "Gaming Mouse" } },
+            { "do": "click", "actor": "admin", "testid": "price-submit", "in": { "testid": "admin-item-row", "contains": "Gaming Mouse" } },
+            { "do": "expectNumber", "actor": "customer", "testid": "item-price", "in": { "testid": "item-card", "contains": "Gaming Mouse" }, "equals": 77, "within": 10000 },
+            {
+              "do": "callAction",
+              "actor": "customer",
+              "from": "admin",
+              "action": "price",
+              "namedAction": {
+                "id": "price",
+                "path": "/api/admin/price",
+                "reducer": "admin_change_price",
+                "args": [0, 1],
+                "params": [
+                  { "name": "itemId", "in": "body", "wireType": "u64" },
+                  { "name": "price", "in": "body" }
+                ]
+              },
+              "input": { "testid": "admin-item-row", "contains": "Gaming Mouse", "attribute": "data-price-input" },
+              "settleMs": 2000
+            },
+            { "do": "expectActionOutcome", "actor": "customer", "outcome": "refused" },
+            { "do": "expectNumber", "actor": "customer", "testid": "item-price", "in": { "testid": "item-card", "contains": "Gaming Mouse" }, "equals": 77, "within": 10000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 202,
+      "name": "Stock is conserved however it moves",
+      "actors": ["admin", "customer"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "signUp", "actor": "customer", "name": "directional-stock" },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "202a",
+          "desc": "a transfer decreases East, increases West, and leaves the item's exact total unchanged",
+          "points": 2,
+          "statedBy": "a transfer moves stock, it does not create or destroy it",
+          "steps": [
+            { "do": "recordNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Espresso Machine" }, "as": "conservation-item-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "as": "conservation-east-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "as": "conservation-west-before" },
+            { "do": "fill", "actor": "admin", "testid": "transfer-from", "text": "East", "in": { "testid": "admin-item-row", "contains": "Espresso Machine" } },
+            { "do": "fill", "actor": "admin", "testid": "transfer-to", "text": "West", "in": { "testid": "admin-item-row", "contains": "Espresso Machine" } },
+            { "do": "fill", "actor": "admin", "testid": "transfer-qty", "text": "17", "in": { "testid": "admin-item-row", "contains": "Espresso Machine" } },
+            { "do": "click", "actor": "admin", "testid": "transfer-submit", "in": { "testid": "admin-item-row", "contains": "Espresso Machine" } },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "relativeTo": "conservation-east-before", "plus": -17, "within": 10000 },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "relativeTo": "conservation-west-before", "plus": 17, "within": 10000 },
+            { "do": "expectNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Espresso Machine" }, "relativeTo": "conservation-item-before", "plus": 0, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/02-transfer-totals-1.4.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/02-transfer-totals-1.4.0.json
new file mode 100644
index 00000000000..aea790bf69a
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/02-transfer-totals-1.4.0.json
@@ -0,0 +1,36 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Ecommerce L2 warehouse transfer totals",
+  "note": "The live warehouse-total check runs in its own state so transfer evidence cannot leak into later checks.",
+  "features": [
+    {
+      "id": 2,
+      "name": "Warehouse totals",
+      "actors": ["admin"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "2b",
+          "desc": "both warehouse totals move live and in opposite directions as stock is transferred",
+          "points": 2,
+          "statedBy": "the per-warehouse numbers staff and admins see both move at once",
+          "steps": [
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "as": "warehouse-east-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "as": "warehouse-west-before" },
+            { "do": "fill", "actor": "admin", "testid": "transfer-from", "text": "East", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "fill", "actor": "admin", "testid": "transfer-to", "text": "West", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "fill", "actor": "admin", "testid": "transfer-qty", "text": "10", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "click", "actor": "admin", "testid": "transfer-submit", "in": { "testid": "admin-item-row", "contains": "Headphones" } },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "East" }, "relativeTo": "warehouse-east-before", "plus": -10, "within": 10000 },
+            { "do": "expectNumber", "actor": "admin", "testid": "warehouse-total", "in": { "testid": "admin-warehouse-item", "contains": "West" }, "relativeTo": "warehouse-west-before", "plus": 10, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/03-cart-expiration-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/03-cart-expiration-1.0.0.json
new file mode 100644
index 00000000000..0e2e76b9673
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/03-cart-expiration-1.0.0.json
@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Cart expiration",
+  "note": "The browser stays closed while the cart expires.",
+  "features": [{
+    "id": 304,
+    "name": "An inactive cart expires",
+    "actors": ["customer", "watcher"],
+    "setup": [
+      { "do": "signUp", "actor": "customer", "name": "cart-expiry" },
+      { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "as": "before" },
+      { "do": "click", "actor": "customer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Air Purifier" } },
+      { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "relativeTo": "before", "plus": -1, "within": 10000 },
+      { "do": "closeClient", "actor": "customer" }
+    ],
+    "criteria": [{
+      "id": "304a",
+      "desc": "an inactive cart expires without a browser, releases stock, and returns empty",
+      "points": 4,
+      "statedBy": "A cart with no activity for five minutes expires and releases its reservations.",
+      "steps": [
+        { "do": "wait", "actor": "watcher", "ms": 310000 },
+        { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "relativeTo": "before", "plus": 0, "within": 30000 },
+        { "do": "openClient", "actor": "customer", "settleMs": 3000 },
+        { "do": "expect", "actor": "customer", "testid": "cart-expired-notice", "within": 10000 },
+        { "do": "expectNumber", "actor": "customer", "testid": "cart-count", "equals": 0 }
+      ]
+    }]
+  }]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/03-deferred-access-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/03-deferred-access-1.0.0.json
new file mode 100644
index 00000000000..706f998689d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/03-deferred-access-1.0.0.json
@@ -0,0 +1,33 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Scheduled-work access",
+  "note": "The customer sends a direct cancellation for an admin-created pending restock.",
+  "features": [{
+    "id": 317,
+    "name": "Customers cannot manage scheduled restocks",
+    "actors": ["admin", "customer"],
+    "setup": [
+      { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true }, { "do": "click", "actor": "admin", "testid": "admin-link" }, { "do": "signUp", "actor": "customer", "name": "restock-outsider" },
+      { "do": "fill", "actor": "admin", "testid": "schedule-restock-item", "text": "Webcam" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-warehouse", "text": "West" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-qty", "text": "3" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-delay", "text": "180" }, { "do": "click", "actor": "admin", "testid": "schedule-restock-submit" },
+      { "do": "expect", "actor": "admin", "testid": "pending-restock-item", "contains": "Webcam" }
+    ],
+    "criteria": [{
+      "id": "317a",
+      "desc": "the server refuses a customer cancellation of a scheduled restock",
+      "points": 3,
+      "statedBy": "Only an admin can schedule or cancel a restock.",
+      "steps": [
+        { "do": "expect", "actor": "customer", "testid": "admin-link", "absent": true },
+        { "do": "callAction", "actor": "customer", "from": "admin", "action": "scheduleRestock", "authentication": "actor", "input": { "testid": "schedule-restock-submit", "attribute": "data-action-input" }, "namedAction": { "id": "scheduleRestock", "path": "/api/admin/scheduled-restocks", "method": "POST", "reducer": "schedule_restock", "args": ["", "", 0, 0], "params": [{ "name": "item", "in": "body" }, { "name": "warehouse", "in": "body" }, { "name": "quantity", "in": "body" }, { "name": "delaySeconds", "in": "body" }] }, "settleMs": 2000 },
+        { "do": "expectActionOutcome", "actor": "customer", "outcome": "refused" },
+        { "do": "replayAs", "actor": "customer", "from": "admin", "match": "DELETE", "namedAction": { "id": "cancelScheduledRestock", "path": "/api/admin/scheduled-restocks/{restockId}", "method": "DELETE", "reducer": "cancel_scheduled_restock", "args": [0], "params": [{ "name": "restockId", "in": "path", "placeholder": "{restockId}", "wireType": "u64" }] }, "namedTarget": { "testid": "pending-restock-item", "contains": "Webcam", "attribute": "data-entity-id", "valueType": "string" }, "settleMs": 2000 },
+        { "do": "expectReplayRejected", "actor": "customer" },
+        { "do": "expect", "actor": "admin", "testid": "pending-restock-item", "contains": "Webcam" },
+        { "do": "click", "actor": "admin", "testid": "pending-restock-cancel", "in": { "testid": "pending-restock-item", "contains": "Webcam" } }
+      ]
+    }]
+  }]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/03-deferred-durability-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/03-deferred-durability-1.0.0.json
new file mode 100644
index 00000000000..2f634e49dd6
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/03-deferred-durability-1.0.0.json
@@ -0,0 +1,56 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Deferred-work durability",
+  "note": "Each check restarts the backend while one kind of work is pending.",
+  "features": [
+    {
+      "id": 311,
+      "name": "A scheduled restock survives restart",
+      "actors": ["admin", "watcher"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true }, { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "as": "before" },
+        { "do": "fill", "actor": "admin", "testid": "schedule-restock-item", "text": "Air Purifier" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-warehouse", "text": "East" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-qty", "text": "5" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-delay", "text": "45" }, { "do": "click", "actor": "admin", "testid": "schedule-restock-submit" },
+        { "do": "expect", "actor": "admin", "testid": "pending-restock-item", "contains": "Air Purifier", "within": 10000 },
+        { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "relativeTo": "before", "plus": 0 },
+        { "do": "restartBackend", "settleMs": 15000 }, { "do": "reload", "actor": "watcher", "settleMs": 3000 }
+      ],
+      "criteria": [{ "id": "311a", "desc": "a restock scheduled before restart still applies", "points": 4, "statedBy": "Pending restocks survive a backend restart.", "steps": [{ "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "relativeTo": "before", "plus": 5, "within": 70000 }, { "do": "reload", "actor": "admin", "settleMs": 2000 }, { "do": "expect", "actor": "admin", "testid": "pending-restock-item", "contains": "Air Purifier", "absent": true }] }]
+    },
+    {
+      "id": 314,
+      "name": "A reservation survives restart",
+      "actors": ["customer", "watcher"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "durable-reservation" }, { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "as": "before" },
+        { "do": "click", "actor": "customer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Desk Lamp" } }, { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "relativeTo": "before", "plus": -1, "within": 10000 }, { "do": "wait", "actor": "customer", "ms": 30000 }, { "do": "restartBackend", "settleMs": 15000 }, { "do": "reload", "actor": "watcher", "settleMs": 3000 }
+      ],
+      "criteria": [{ "id": "314a", "desc": "a reservation pending before restart still expires and returns stock", "points": 4, "statedBy": "Pending reservations survive a backend restart.", "steps": [{ "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "relativeTo": "before", "plus": 0, "within": 85000 }] }]
+    },
+    {
+      "id": 315,
+      "name": "An order transition survives restart",
+      "actors": ["customer", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "durable-delivery" }, { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true }, { "do": "click", "actor": "staff", "testid": "staff-link" },
+        { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } }, { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Keyboard", "within": 10000 }, { "do": "click", "actor": "staff", "testid": "ship-submit", "in": { "testid": "queue-item", "contains": "Keyboard" } },
+        { "do": "click", "actor": "customer", "testid": "orders-toggle" }, { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "contains": "hipped", "within": 10000 },
+        { "do": "wait", "actor": "customer", "ms": 20000 }, { "do": "restartBackend", "settleMs": 15000 }, { "do": "reload", "actor": "customer", "settleMs": 3000 }, { "do": "click", "actor": "customer", "testid": "orders-toggle" }
+      ],
+      "criteria": [{ "id": "315a", "desc": "an order shipped before restart still becomes delivered", "points": 4, "statedBy": "Pending order delivery survives a backend restart.", "steps": [{ "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "contains": "elivered", "within": 65000 }] }]
+    },
+    {
+      "id": 316,
+      "name": "Cart expiration survives restart",
+      "actors": ["customer", "watcher"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "durable-cart" }, { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" }, "as": "before" }, { "do": "click", "actor": "customer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" } }, { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" }, "relativeTo": "before", "plus": -1, "within": 10000 },
+        { "do": "wait", "actor": "customer", "ms": 120000 }, { "do": "restartBackend", "settleMs": 15000 }, { "do": "reload", "actor": "watcher", "settleMs": 3000 }
+      ],
+      "criteria": [{ "id": "316a", "desc": "a cart inactive before restart still expires at five minutes", "points": 4, "statedBy": "Pending cart expiration survives a backend restart.", "steps": [{ "do": "reload", "actor": "customer", "settleMs": 3000 }, { "do": "click", "actor": "customer", "testid": "cart-toggle" }, { "do": "expectNumber", "actor": "customer", "testid": "cart-count", "equals": 0, "within": 220000 }, { "do": "expect", "actor": "customer", "testid": "cart-expired-notice", "within": 10000 }, { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" }, "relativeTo": "before", "plus": 0, "within": 10000 }] }]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json
new file mode 100644
index 00000000000..646d95c0af2
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/03-deferred-integrity-1.0.0.json
@@ -0,0 +1,43 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Deferred-work integrity",
+  "note": "Each check owns all state used by its exact-once or stock assertion.",
+  "features": [
+    {
+      "id": 311,
+      "name": "A restock applies once",
+      "actors": ["admin", "watcher"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true }, { "do": "click", "actor": "admin", "testid": "admin-link" }, { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "as": "before" },
+        { "do": "fill", "actor": "admin", "testid": "schedule-restock-item", "text": "Air Purifier" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-warehouse", "text": "East" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-qty", "text": "5" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-delay", "text": "20" }, { "do": "click", "actor": "admin", "testid": "schedule-restock-submit" },
+        { "do": "expect", "actor": "admin", "testid": "pending-restock-item", "contains": "Air Purifier", "within": 10000 }, { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "relativeTo": "before", "plus": 0 },
+        { "do": "restartBackend", "settleMs": 15000 }, { "do": "reload", "actor": "watcher", "settleMs": 3000 }
+      ],
+      "criteria": [{ "id": "311a", "desc": "restart cannot replay a completed restock", "points": 3, "statedBy": "Restarting the backend cannot apply a restock more than once.", "steps": [{ "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "relativeTo": "before", "plus": 5, "within": 45000 }, { "do": "restartBackend", "settleMs": 15000 }, { "do": "reload", "actor": "watcher", "settleMs": 3000 }, { "do": "wait", "actor": "watcher", "ms": 15000 }, { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "relativeTo": "before", "plus": 5 }] }]
+    },
+    {
+      "id": 312,
+      "name": "Delivery applies once",
+      "actors": ["customer", "staff"],
+      "setup": [{ "do": "signUp", "actor": "customer", "name": "once-delivery" }, { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true }, { "do": "click", "actor": "staff", "testid": "staff-link" }, { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } }, { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Desk Lamp", "within": 10000 }, { "do": "click", "actor": "staff", "testid": "ship-submit", "in": { "testid": "queue-item", "contains": "Desk Lamp" } }, { "do": "click", "actor": "customer", "testid": "orders-toggle" }, { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Desk Lamp" }, "contains": "hipped", "within": 10000 }, { "do": "wait", "actor": "customer", "ms": 70000 }, { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Desk Lamp" }, "contains": "elivered", "within": 15000 }, { "do": "restartBackend", "settleMs": 15000 }, { "do": "reload", "actor": "staff", "settleMs": 3000 }],
+      "criteria": [{ "id": "312a", "desc": "restart cannot duplicate a delivered order", "points": 3, "statedBy": "Restarting the backend cannot apply an order transition more than once.", "steps": [{ "do": "expect", "actor": "staff", "testid": "completed-order-item", "contains": "Desk Lamp", "count": 1 }, { "do": "expect", "actor": "staff", "testid": "completed-order-status", "in": { "testid": "completed-order-item", "contains": "Desk Lamp" }, "contains": "elivered" }] }]
+    },
+    {
+      "id": 313,
+      "name": "Reservation expiry conserves stock",
+      "actors": ["customer", "watcher"],
+      "setup": [{ "do": "signUp", "actor": "customer", "name": "conserve-expiry" }, { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Keyboard" }, "as": "before" }, { "do": "click", "actor": "customer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Keyboard" } }],
+      "criteria": [{ "id": "313a", "desc": "expiry returns exactly the unit reserved", "points": 3, "statedBy": "Reservation expiry returns exactly the stock that the reservation took.", "steps": [{ "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Keyboard" }, "relativeTo": "before", "plus": -1, "within": 10000 }, { "do": "wait", "actor": "watcher", "ms": 100000 }, { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Keyboard" }, "relativeTo": "before", "plus": 0, "within": 30000 }] }]
+    },
+    {
+      "id": 314,
+      "name": "Checkout conserves reserved stock",
+      "actors": ["customer", "watcher"],
+      "setup": [{ "do": "signUp", "actor": "customer", "name": "conserve-checkout" }, { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "as": "before" }, { "do": "click", "actor": "customer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } }, { "do": "click", "actor": "customer", "testid": "cart-toggle" }],
+      "criteria": [{ "id": "314a", "desc": "checkout does not decrement stock after the reservation already did", "points": 3, "statedBy": "Checkout does not take reserved stock twice.", "steps": [{ "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "relativeTo": "before", "plus": -1, "within": 10000 }, { "do": "click", "actor": "customer", "testid": "checkout-submit" }, { "do": "expectNumber", "actor": "customer", "testid": "cart-count", "equals": 0, "within": 10000 }, { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Headphones" }, "relativeTo": "before", "plus": -1, "within": 10000 }] }]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/03-features.json b/tools/stack-bench/tracks/ecommerce/scenarios/03-features.json
new file mode 100644
index 00000000000..fc32b8da362
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/03-features.json
@@ -0,0 +1,336 @@
+{
+  "schemaVersion": 1,
+  "level": 3,
+  "track": "ecommerce",
+  "name": "Work that happens later — features",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses|\\/schedule",
+  "note": "Deferred work observed from the outside: a reservation that releases itself, a restock that fires on a timer, an order that advances with nobody watching. Every wait here is real time — these criteria are slow by nature and the timings come from the spec (90s reservation, 60s transitions), not from guesses about implementation.",
+  "features": [
+    {
+      "id": 301,
+      "name": "A reservation holds stock and then releases it",
+      "actors": [
+        "shopper",
+        "watcher"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "shopper",
+          "name": "resa"
+        },
+        {
+          "do": "recordNumber",
+          "actor": "watcher",
+          "testid": "item-stock",
+          "in": {
+            "testid": "item-card",
+            "contains": "Desk Lamp"
+          },
+          "as": "lamp-before"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "301a",
+          "desc": "adding to the cart takes a unit off the shelf immediately, for a signed-out viewer who never touched the page",
+          "points": 2,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "shopper",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Desk Lamp"
+              },
+              "settleMs": 1500
+            },
+            {
+              "do": "expectNumber",
+              "actor": "watcher",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Desk Lamp"
+              },
+              "relativeTo": "lamp-before",
+              "plus": -1,
+              "within": 10000
+            }
+          ],
+          "statedBy": "storefront stock drops immediately, for everyone"
+        },
+        {
+          "id": "301b",
+          "desc": "the cart line shows the reservation counting down",
+          "points": 1,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "shopper",
+              "testid": "cart-toggle",
+              "settleMs": 1200
+            },
+            {
+              "do": "expect",
+              "actor": "shopper",
+              "testid": "cart-reservation-timer",
+              "in": {
+                "testid": "cart-item",
+                "contains": "Desk Lamp"
+              },
+              "within": 8000
+            }
+          ],
+          "statedBy": "the cart line shows the reservation's remaining time, live"
+        },
+        {
+          "id": "301c",
+          "desc": "left alone, the reservation expires on its own: the unit returns to the shelf for the watcher without a reload, and the line is marked expired rather than vanishing",
+          "points": 3,
+          "note": "waits out the spec's 90-second window plus slack; slow by nature.",
+          "steps": [
+            {
+              "do": "wait",
+              "actor": "shopper",
+              "ms": 100000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "watcher",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Desk Lamp"
+              },
+              "relativeTo": "lamp-before",
+              "plus": 0,
+              "within": 30000
+            },
+            {
+              "do": "expect",
+              "actor": "shopper",
+              "testid": "cart-item-expired",
+              "in": {
+                "testid": "cart-item",
+                "contains": "Desk Lamp"
+              },
+              "within": 15000
+            }
+          ],
+          "statedBy": "the reservation expires on its own and the unit returns to\nstorefront stock - visibly, without anyone reloading"
+        }
+      ]
+    },
+    {
+      "id": 302,
+      "name": "A restock scheduled for later applies itself",
+      "actors": [
+        "admin",
+        "watcher"
+      ],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "exact": true,
+          "password": "stackbench-admin-2026"
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "admin-link",
+          "settleMs": 1500
+        },
+        {
+          "do": "recordNumber",
+          "actor": "watcher",
+          "testid": "item-stock",
+          "in": {
+            "testid": "item-card",
+            "contains": "Webcam"
+          },
+          "as": "webcam-before"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "302a",
+          "desc": "a scheduled restock appears as pending with time remaining, and has not yet changed stock",
+          "points": 2,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "schedule-restock-item",
+              "text": "Webcam"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "schedule-restock-warehouse",
+              "text": "East"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "schedule-restock-qty",
+              "text": "7"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "schedule-restock-delay",
+              "text": "45"
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "schedule-restock-submit",
+              "settleMs": 2000
+            },
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "pending-restock-item",
+              "contains": "Webcam",
+              "within": 8000
+            },
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "pending-restock-remaining",
+              "in": {
+                "testid": "pending-restock-item",
+                "contains": "Webcam"
+              },
+              "within": 8000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "watcher",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Webcam"
+              },
+              "relativeTo": "webcam-before",
+              "plus": 0
+            }
+          ],
+          "statedBy": "the pending restocks list shows each one with its remaining time, live"
+        },
+        {
+          "id": "302b",
+          "desc": "when the delay elapses it applies itself: stock rises for a viewer who did nothing, and it leaves the pending list",
+          "points": 3,
+          "steps": [
+            {
+              "do": "wait",
+              "actor": "admin",
+              "ms": 55000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "watcher",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Webcam"
+              },
+              "relativeTo": "webcam-before",
+              "plus": 7,
+              "within": 30000
+            },
+            {
+              "do": "expect",
+              "actor": "admin",
+              "testid": "pending-restock-item",
+              "contains": "Webcam",
+              "absent": true,
+              "within": 15000
+            }
+          ],
+          "statedBy": "the entry leaves the pending list, and it appears in the stock ledger"
+        },
+        {
+          "id": "302c",
+          "desc": "a cancelled restock never applies",
+          "points": 2,
+          "steps": [
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "schedule-restock-item",
+              "text": "Keyboard"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "schedule-restock-warehouse",
+              "text": "West"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "schedule-restock-qty",
+              "text": "9"
+            },
+            {
+              "do": "fill",
+              "actor": "admin",
+              "testid": "schedule-restock-delay",
+              "text": "40"
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "schedule-restock-submit",
+              "settleMs": 2000
+            },
+            {
+              "do": "recordNumber",
+              "actor": "watcher",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Keyboard"
+              },
+              "as": "kbd-before"
+            },
+            {
+              "do": "click",
+              "actor": "admin",
+              "testid": "pending-restock-cancel",
+              "in": {
+                "testid": "pending-restock-item",
+                "contains": "Keyboard"
+              },
+              "settleMs": 2000
+            },
+            {
+              "do": "wait",
+              "actor": "admin",
+              "ms": 50000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "watcher",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Keyboard"
+              },
+              "relativeTo": "kbd-before",
+              "plus": 0,
+              "within": 10000
+            }
+          ],
+          "statedBy": "an admin can cancel a pending restock before it fires; cancelled restocks\nnever apply"
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/03-invariants.json b/tools/stack-bench/tracks/ecommerce/scenarios/03-invariants.json
new file mode 100644
index 00000000000..0416bd7623b
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/03-invariants.json
@@ -0,0 +1,313 @@
+{
+  "schemaVersion": 1,
+  "level": 3,
+  "track": "ecommerce",
+  "name": "Work that happens later — invariants",
+  "writeUrlPattern": "\\/api\\/|\\/items|\\/cart|\\/orders|\\/checkout|\\/buy|\\/reviews|\\/stock|\\/restock|\\/warehouses|\\/schedule",
+  "note": "What must hold about deferred work regardless of how it is implemented: it survives a restart, it fires once, it does not fire early, and time never creates or destroys stock. This is the level where in-memory timers stop being an implementation detail and become a defect.",
+  "features": [
+    {
+      "id": 311,
+      "name": "Scheduled work survives a restart",
+      "actors": [
+        "admin",
+        "watcher"
+      ],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "exact": true,
+          "password": "stackbench-admin-2026"
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "admin-link",
+          "settleMs": 1500
+        },
+        {
+          "do": "recordNumber",
+          "actor": "watcher",
+          "testid": "item-stock",
+          "in": {
+            "testid": "item-card",
+            "contains": "Air Purifier"
+          },
+          "as": "air-before"
+        },
+        {
+          "do": "fill",
+          "actor": "admin",
+          "testid": "schedule-restock-item",
+          "text": "Air Purifier"
+        },
+        {
+          "do": "fill",
+          "actor": "admin",
+          "testid": "schedule-restock-warehouse",
+          "text": "East"
+        },
+        {
+          "do": "fill",
+          "actor": "admin",
+          "testid": "schedule-restock-qty",
+          "text": "5"
+        },
+        {
+          "do": "fill",
+          "actor": "admin",
+          "testid": "schedule-restock-delay",
+          "text": "70"
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "schedule-restock-submit",
+          "settleMs": 2000
+        }
+      ],
+      "criteria": [
+        {
+          "id": "311a",
+          "desc": "a restock scheduled before a restart still fires after it, once, at its own time — an in-memory timer does not survive and must not be how this was built",
+          "points": 4,
+          "steps": [
+            {
+              "do": "restartBackend",
+              "settleMs": 15000
+            },
+            {
+              "do": "reload",
+              "actor": "watcher",
+              "settleMs": 5000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "watcher",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Air Purifier"
+              },
+              "relativeTo": "air-before",
+              "plus": 5,
+              "within": 90000
+            }
+          ],
+          "statedBy": "work scheduled\nbefore a restart fires after it, once, at the right time"
+        },
+        {
+          "id": "311b",
+          "desc": "it fired exactly once — the restart did not replay it",
+          "points": 3,
+          "steps": [
+            {
+              "do": "wait",
+              "actor": "watcher",
+              "ms": 20000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "watcher",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Air Purifier"
+              },
+              "relativeTo": "air-before",
+              "plus": 5
+            }
+          ],
+          "statedBy": "must never double-apply\na scheduled restock or advance an order twice"
+        }
+      ]
+    },
+    {
+      "id": 312,
+      "name": "A restart does not make pending work fire early",
+      "actors": [
+        "admin",
+        "watcher"
+      ],
+      "setup": [
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "exact": true,
+          "password": "stackbench-admin-2026"
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "admin-link",
+          "settleMs": 1500
+        },
+        {
+          "do": "recordNumber",
+          "actor": "watcher",
+          "testid": "item-stock",
+          "in": {
+            "testid": "item-card",
+            "contains": "Espresso Machine"
+          },
+          "as": "esp-before"
+        },
+        {
+          "do": "fill",
+          "actor": "admin",
+          "testid": "schedule-restock-item",
+          "text": "Espresso Machine"
+        },
+        {
+          "do": "fill",
+          "actor": "admin",
+          "testid": "schedule-restock-warehouse",
+          "text": "West"
+        },
+        {
+          "do": "fill",
+          "actor": "admin",
+          "testid": "schedule-restock-qty",
+          "text": "4"
+        },
+        {
+          "do": "fill",
+          "actor": "admin",
+          "testid": "schedule-restock-delay",
+          "text": "180"
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "schedule-restock-submit",
+          "settleMs": 2000
+        }
+      ],
+      "criteria": [
+        {
+          "id": "312a",
+          "desc": "a restock due in three minutes has not applied thirty seconds after a restart — re-reading pending work must not run it",
+          "points": 3,
+          "steps": [
+            {
+              "do": "restartBackend",
+              "settleMs": 15000
+            },
+            {
+              "do": "reload",
+              "actor": "watcher",
+              "settleMs": 5000
+            },
+            {
+              "do": "wait",
+              "actor": "watcher",
+              "ms": 25000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "watcher",
+              "testid": "item-stock",
+              "in": {
+                "testid": "item-card",
+                "contains": "Espresso Machine"
+              },
+              "relativeTo": "esp-before",
+              "plus": 0
+            }
+          ],
+          "statedBy": "a restart must not cause pending work to run\nimmediately"
+        }
+      ]
+    },
+    {
+      "id": 313,
+      "name": "Time does not create or destroy stock",
+      "actors": [
+        "shopper",
+        "admin"
+      ],
+      "setup": [
+        {
+          "do": "signUp",
+          "actor": "shopper",
+          "name": "consv"
+        },
+        {
+          "do": "signIn",
+          "actor": "admin",
+          "name": "admin",
+          "exact": true,
+          "password": "stackbench-admin-2026"
+        },
+        {
+          "do": "click",
+          "actor": "admin",
+          "testid": "admin-link",
+          "settleMs": 1500
+        },
+        {
+          "do": "recordNumber",
+          "actor": "admin",
+          "testid": "admin-stock",
+          "in": {
+            "testid": "admin-item-row",
+            "contains": "Bluetooth Speaker"
+          },
+          "as": "spk-before"
+        }
+      ],
+      "criteria": [
+        {
+          "id": "313a",
+          "desc": "a reservation taken and left to expire returns exactly what it took, counted in the admin's own totals",
+          "points": 3,
+          "steps": [
+            {
+              "do": "click",
+              "actor": "shopper",
+              "testid": "add-to-cart",
+              "in": {
+                "testid": "item-card",
+                "contains": "Bluetooth Speaker"
+              },
+              "settleMs": 1500
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Bluetooth Speaker"
+              },
+              "relativeTo": "spk-before",
+              "plus": -1,
+              "within": 10000
+            },
+            {
+              "do": "wait",
+              "actor": "shopper",
+              "ms": 100000
+            },
+            {
+              "do": "expectNumber",
+              "actor": "admin",
+              "testid": "admin-stock",
+              "in": {
+                "testid": "admin-item-row",
+                "contains": "Bluetooth Speaker"
+              },
+              "relativeTo": "spk-before",
+              "plus": 0,
+              "within": 30000
+            }
+          ],
+          "statedBy": "units are never created or destroyed by the\npassage of time"
+        }
+      ]
+    }
+  ]
+}
\ No newline at end of file
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/03-order-delivery-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/03-order-delivery-1.0.0.json
new file mode 100644
index 00000000000..798343dbea0
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/03-order-delivery-1.0.0.json
@@ -0,0 +1,59 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Order delivery",
+  "note": "L2 shipping remains immediate. L3 adds automatic delivery after shipping.",
+  "features": [
+    {
+      "id": 303,
+      "name": "A shipped order becomes delivered",
+      "actors": ["customer", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "delivery-live" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" },
+        { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Gaming Mouse" } },
+        { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Gaming Mouse", "within": 10000 },
+        { "do": "click", "actor": "staff", "testid": "ship-submit", "in": { "testid": "queue-item", "contains": "Gaming Mouse" } },
+        { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+        { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Gaming Mouse" }, "contains": "hipped", "within": 10000 }
+      ],
+      "criteria": [{
+        "id": "303a",
+        "desc": "a shipped order becomes delivered for the customer and staff without a reload",
+        "points": 3,
+        "statedBy": "A shipped order becomes delivered after 60 seconds.",
+        "steps": [
+          { "do": "wait", "actor": "customer", "ms": 70000 },
+          { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Gaming Mouse" }, "contains": "elivered", "within": 15000 },
+          { "do": "expect", "actor": "staff", "testid": "completed-order-status", "in": { "testid": "completed-order-item", "contains": "Gaming Mouse" }, "contains": "elivered", "within": 15000 }
+        ]
+      }]
+    },
+    {
+      "id": 305,
+      "name": "Cancellation is final",
+      "actors": ["customer"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "delivery-cancel" },
+        { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } },
+        { "do": "click", "actor": "customer", "testid": "orders-toggle" },
+        { "do": "click", "actor": "customer", "testid": "cancel-order", "in": { "testid": "order-item", "contains": "Keyboard" } },
+        { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "contains": "ancelled", "within": 10000 }
+      ],
+      "criteria": [{
+        "id": "305a",
+        "desc": "a cancelled order does not advance later",
+        "points": 2,
+        "statedBy": "A cancelled order never advances.",
+        "steps": [
+          { "do": "wait", "actor": "customer", "ms": 70000 },
+          { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "contains": "ancelled" },
+          { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "notContains": "elivered" }
+        ]
+      }]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/03-reservations-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/03-reservations-1.0.0.json
new file mode 100644
index 00000000000..c75e64eba2c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/03-reservations-1.0.0.json
@@ -0,0 +1,115 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Reservations",
+  "note": "Each check creates its own account and reservation.",
+  "features": [
+    {
+      "id": 301,
+      "name": "A cart reserves stock",
+      "actors": ["shopper", "watcher"],
+      "setup": [
+        { "do": "signUp", "actor": "shopper", "name": "reserve-stock" },
+        { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "as": "before" }
+      ],
+      "criteria": [{
+        "id": "301a",
+        "desc": "adding an item reserves one unit for every open viewer",
+        "points": 2,
+        "statedBy": "Adding an item to a cart reserves its stock immediately for 90 seconds.",
+        "steps": [
+          { "do": "click", "actor": "shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+          { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "relativeTo": "before", "plus": -1, "within": 10000 }
+        ]
+      }]
+    },
+    {
+      "id": 305,
+      "name": "Reservation time is visible",
+      "actors": ["shopper"],
+      "setup": [
+        { "do": "signUp", "actor": "shopper", "name": "reserve-clock" },
+        { "do": "click", "actor": "shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Gaming Mouse" } },
+        { "do": "click", "actor": "shopper", "testid": "cart-toggle" }
+      ],
+      "criteria": [{
+        "id": "305a",
+        "desc": "the reservation timer decreases",
+        "points": 1,
+        "statedBy": "The cart shows the remaining reservation time.",
+        "steps": [
+          { "do": "expectNumber", "actor": "shopper", "testid": "cart-reservation-timer", "in": { "testid": "cart-item", "contains": "Gaming Mouse" }, "atLeast": 80 },
+          { "do": "wait", "actor": "shopper", "ms": 15000 },
+          { "do": "expectNumber", "actor": "shopper", "testid": "cart-reservation-timer", "in": { "testid": "cart-item", "contains": "Gaming Mouse" }, "atMost": 75 }
+        ]
+      }]
+    },
+    {
+      "id": 306,
+      "name": "Checkout consumes a reservation",
+      "actors": ["shopper"],
+      "setup": [
+        { "do": "signUp", "actor": "shopper", "name": "reserve-checkout" },
+        { "do": "click", "actor": "shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Keyboard" } },
+        { "do": "click", "actor": "shopper", "testid": "cart-toggle" }
+      ],
+      "criteria": [{
+        "id": "306a",
+        "desc": "checkout converts the reservation into an order and empties the cart",
+        "points": 2,
+        "statedBy": "Checkout converts a live reservation into a sale.",
+        "steps": [
+          { "do": "click", "actor": "shopper", "testid": "checkout-submit" },
+          { "do": "expectNumber", "actor": "shopper", "testid": "cart-count", "equals": 0, "within": 10000 },
+          { "do": "click", "actor": "shopper", "testid": "orders-toggle" },
+          { "do": "expect", "actor": "shopper", "testid": "order-item", "contains": "Keyboard", "count": 1 }
+        ]
+      }]
+    },
+    {
+      "id": 307,
+      "name": "A reservation expires",
+      "actors": ["shopper"],
+      "setup": [
+        { "do": "signUp", "actor": "shopper", "name": "reserve-expiry" },
+        { "do": "click", "actor": "shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" } },
+        { "do": "click", "actor": "shopper", "testid": "cart-toggle" }
+      ],
+      "criteria": [{
+        "id": "307a",
+        "desc": "an expired reservation marks its cart line",
+        "points": 3,
+        "statedBy": "An expired reservation remains visible as expired.",
+        "steps": [
+          { "do": "wait", "actor": "shopper", "ms": 100000 },
+          { "do": "expect", "actor": "shopper", "testid": "cart-item-expired", "in": { "testid": "cart-item", "contains": "Bluetooth Speaker" }, "within": 15000 }
+        ]
+      }]
+    },
+    {
+      "id": 308,
+      "name": "Changing quantity renews a reservation",
+      "actors": ["shopper"],
+      "setup": [
+        { "do": "signUp", "actor": "shopper", "name": "reserve-renew" },
+        { "do": "click", "actor": "shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } },
+        { "do": "wait", "actor": "shopper", "ms": 60000 },
+        { "do": "click", "actor": "shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } },
+        { "do": "click", "actor": "shopper", "testid": "cart-toggle" }
+      ],
+      "criteria": [{
+        "id": "308a",
+        "desc": "raising quantity starts a new reservation window",
+        "points": 2,
+        "statedBy": "Adding the item again renews the reservation.",
+        "steps": [
+          { "do": "wait", "actor": "shopper", "ms": 40000 },
+          { "do": "expectNumber", "actor": "shopper", "testid": "cart-reservation-timer", "in": { "testid": "cart-item", "contains": "Headphones" }, "atLeast": 35 },
+          { "do": "expect", "actor": "shopper", "testid": "cart-item-expired", "in": { "testid": "cart-item", "contains": "Headphones" }, "absent": true }
+        ]
+      }]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json
new file mode 100644
index 00000000000..7ae9647adc0
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/03-scheduled-restocks-1.0.0.json
@@ -0,0 +1,67 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Scheduled restocks",
+  "note": "Each check schedules its own restock.",
+  "features": [
+    {
+      "id": 302,
+      "name": "A restock is pending before it is due",
+      "actors": ["admin"],
+      "setup": [{ "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true }, { "do": "click", "actor": "admin", "testid": "admin-link" }],
+      "criteria": [{
+        "id": "302a",
+        "desc": "a scheduled restock is pending and its remaining time decreases",
+        "points": 2,
+        "statedBy": "A pending restock shows its remaining time.",
+        "steps": [
+          { "do": "fill", "actor": "admin", "testid": "schedule-restock-item", "text": "Webcam" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-warehouse", "text": "East" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-qty", "text": "7" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-delay", "text": "90" }, { "do": "click", "actor": "admin", "testid": "schedule-restock-submit" },
+          { "do": "expect", "actor": "admin", "testid": "pending-restock-item", "contains": "Webcam", "within": 10000 },
+          { "do": "expectNumber", "actor": "admin", "testid": "pending-restock-remaining", "in": { "testid": "pending-restock-item", "contains": "Webcam" }, "atLeast": 80 },
+          { "do": "wait", "actor": "admin", "ms": 15000 },
+          { "do": "expectNumber", "actor": "admin", "testid": "pending-restock-remaining", "in": { "testid": "pending-restock-item", "contains": "Webcam" }, "atMost": 75 },
+          { "do": "click", "actor": "admin", "testid": "pending-restock-cancel", "in": { "testid": "pending-restock-item", "contains": "Webcam" } }
+        ]
+      }]
+    },
+    {
+      "id": 305,
+      "name": "A due restock applies",
+      "actors": ["admin", "watcher"],
+      "setup": [{ "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true }, { "do": "click", "actor": "admin", "testid": "admin-link" }, { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Keyboard" }, "as": "before" }],
+      "criteria": [{
+        "id": "305a",
+        "desc": "a due restock updates stock and moves to the ledger",
+        "points": 3,
+        "statedBy": "A due restock updates stock, leaves the pending list, and enters the stock ledger.",
+        "steps": [
+          { "do": "fill", "actor": "admin", "testid": "schedule-restock-item", "text": "Keyboard" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-warehouse", "text": "West" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-qty", "text": "7" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-delay", "text": "15" }, { "do": "click", "actor": "admin", "testid": "schedule-restock-submit" },
+          { "do": "wait", "actor": "admin", "ms": 25000 },
+          { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Keyboard" }, "relativeTo": "before", "plus": 7, "within": 15000 },
+          { "do": "expect", "actor": "admin", "testid": "pending-restock-item", "contains": "Keyboard", "absent": true },
+          { "do": "expect", "actor": "admin", "testid": "stock-ledger-entry", "contains": "Keyboard" }
+        ]
+      }]
+    },
+    {
+      "id": 306,
+      "name": "A scheduled restock can be cancelled",
+      "actors": ["admin", "watcher"],
+      "setup": [{ "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true }, { "do": "click", "actor": "admin", "testid": "admin-link" }, { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "as": "before" }],
+      "criteria": [{
+        "id": "306a",
+        "desc": "a cancelled restock never applies",
+        "points": 2,
+        "statedBy": "An admin can schedule and cancel a restock.",
+        "steps": [
+          { "do": "fill", "actor": "admin", "testid": "schedule-restock-item", "text": "Desk Lamp" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-warehouse", "text": "East" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-qty", "text": "9" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-delay", "text": "15" }, { "do": "click", "actor": "admin", "testid": "schedule-restock-submit" },
+          { "do": "click", "actor": "admin", "testid": "pending-restock-cancel", "in": { "testid": "pending-restock-item", "contains": "Desk Lamp" } },
+          { "do": "wait", "actor": "admin", "ms": 25000 },
+          { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "relativeTo": "before", "plus": 0 }
+        ]
+      }]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/03-server-time-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/03-server-time-1.0.0.json
new file mode 100644
index 00000000000..765dae4d816
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/03-server-time-1.0.0.json
@@ -0,0 +1,30 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Server-controlled time",
+  "note": "These checks distinguish server work from browser timers and restart-time replay.",
+  "features": [
+    {
+      "id": 312,
+      "name": "Restart does not run work early",
+      "actors": ["admin", "watcher"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true }, { "do": "click", "actor": "admin", "testid": "admin-link" }, { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Espresso Machine" }, "as": "before" },
+        { "do": "fill", "actor": "admin", "testid": "schedule-restock-item", "text": "Espresso Machine" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-warehouse", "text": "West" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-qty", "text": "4" }, { "do": "fill", "actor": "admin", "testid": "schedule-restock-delay", "text": "120" }, { "do": "click", "actor": "admin", "testid": "schedule-restock-submit" },
+        { "do": "expect", "actor": "admin", "testid": "pending-restock-item", "contains": "Espresso Machine", "within": 10000 },
+        { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Espresso Machine" }, "relativeTo": "before", "plus": 0 },
+        { "do": "restartBackend", "settleMs": 15000 }, { "do": "reload", "actor": "watcher", "settleMs": 3000 }, { "do": "reload", "actor": "admin", "settleMs": 3000 }
+      ],
+      "criteria": [{ "id": "312a", "desc": "restart preserves the due time and the work later completes", "points": 3, "statedBy": "A pending restock does not run early after a restart.", "steps": [{ "do": "wait", "actor": "watcher", "ms": 30000 }, { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Espresso Machine" }, "relativeTo": "before", "plus": 0 }, { "do": "expect", "actor": "admin", "testid": "pending-restock-item", "contains": "Espresso Machine" }, { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Espresso Machine" }, "relativeTo": "before", "plus": 4, "within": 75000 }, { "do": "reload", "actor": "admin", "settleMs": 2000 }, { "do": "expect", "actor": "admin", "testid": "pending-restock-item", "contains": "Espresso Machine", "absent": true }] }]
+    },
+    {
+      "id": 313,
+      "name": "A browser is not the clock",
+      "actors": ["customer", "watcher"],
+      "setup": [{ "do": "signUp", "actor": "customer", "name": "server-clock" }, { "do": "recordNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "as": "before" }, { "do": "click", "actor": "customer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Air Purifier" } }, { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "relativeTo": "before", "plus": -1, "within": 10000 }, { "do": "closeClient", "actor": "customer" }],
+      "criteria": [{ "id": "313a", "desc": "a reservation expires while its browser is closed", "points": 3, "statedBy": "A reservation expires without an open browser.", "steps": [{ "do": "wait", "actor": "watcher", "ms": 100000 }, { "do": "expectNumber", "actor": "watcher", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Air Purifier" }, "relativeTo": "before", "plus": 0, "within": 30000 }] }]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-account-state-reconnect-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-account-state-reconnect-1.0.0.json
new file mode 100644
index 00000000000..bae633b1e29
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-account-state-reconnect-1.0.0.json
@@ -0,0 +1,36 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Progression account state after reconnect",
+  "features": [
+    {
+      "id": 105,
+      "name": "An account keeps what belongs to it",
+      "actors": ["shopper", "peer"],
+      "setup": [
+        { "do": "signUp", "actor": "shopper", "name": "pat" },
+        { "do": "signIn", "actor": "peer", "name": "pat" },
+        { "do": "click", "actor": "shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Keyboard" } }
+      ],
+      "criteria": [
+        {
+          "id": "105b",
+          "desc": "the same account and cart survive the connection dropping and coming back",
+          "points": 1,
+          "statedBy": "the signed-in account and its current data remain available after reconnecting",
+          "steps": [
+            { "do": "setOffline", "actor": "shopper", "settleMs": 3000 },
+            { "do": "click", "actor": "peer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } },
+            { "do": "setOffline", "actor": "shopper", "offline": false, "settleMs": 6000 },
+            { "do": "expect", "actor": "shopper", "testid": "current-user", "contains": "pat" },
+            { "do": "click", "actor": "shopper", "testid": "cart-toggle" },
+            { "do": "expect", "actor": "shopper", "testid": "cart-item", "contains": "Keyboard" },
+            { "do": "expect", "actor": "shopper", "testid": "cart-item", "contains": "Headphones" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-account-state-reload-1.0.1.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-account-state-reload-1.0.1.json
new file mode 100644
index 00000000000..0bb22dd4e44
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-account-state-reload-1.0.1.json
@@ -0,0 +1,39 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Progression account state after reload",
+  "features": [
+    {
+      "id": 105,
+      "name": "An account keeps what belongs to it",
+      "actors": ["shopper"],
+      "setup": [
+        { "do": "signUp", "actor": "shopper", "name": "pat" }
+      ],
+      "criteria": [
+        {
+          "id": "105a",
+          "desc": "cart and order history survive a reload as the same account",
+          "points": 1,
+          "statedBy": "the signed-in account, cart, and orders persist across a page reload",
+          "steps": [
+            { "do": "click", "actor": "shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } },
+            { "do": "click", "actor": "shopper", "testid": "cart-toggle" },
+            { "do": "click", "actor": "shopper", "testid": "checkout-submit" },
+            { "do": "click", "actor": "shopper", "testid": "catalog-link", "settleMs": 2500 },
+            { "do": "click", "actor": "shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Keyboard" } },
+            { "do": "reload", "actor": "shopper", "settleMs": 4000 },
+            { "do": "expect", "actor": "shopper", "testid": "current-user", "contains": "pat" },
+            { "do": "click", "actor": "shopper", "testid": "cart-toggle" },
+            { "do": "expect", "actor": "shopper", "testid": "cart-item", "contains": "Keyboard" },
+            { "do": "reload", "actor": "shopper", "settleMs": 2500 },
+            { "do": "click", "actor": "shopper", "testid": "orders-toggle" },
+            { "do": "expect", "actor": "shopper", "testid": "order-item", "contains": "Headphones", "count": 1 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-automatic-reorder-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-automatic-reorder-1.0.0.json
new file mode 100644
index 00000000000..8e463ffe19b
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-automatic-reorder-1.0.0.json
@@ -0,0 +1,67 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Automatic reorder rules",
+  "features": [
+    {
+      "id": 502,
+      "name": "Warehouse staff manage automatic reorder rules",
+      "actors": ["staff", "admin", "customer", "buyer-a", "buyer-b", "buyer-c"],
+      "setup": [
+        { "do": "dbSetStock", "item": "Desk Lamp", "warehouse": "East", "quantity": 2, "settleMs": 2000 },
+        { "do": "dbSetStock", "item": "Desk Lamp", "warehouse": "West", "quantity": 1, "settleMs": 2000 },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "expect", "actor": "staff", "testid": "reorder-link", "within": 6000 },
+        { "do": "click", "actor": "staff", "testid": "reorder-link" },
+        { "do": "fill", "actor": "staff", "testid": "reorder-item", "text": "Desk Lamp" },
+        { "do": "fill", "actor": "staff", "testid": "reorder-threshold", "text": "2" },
+        { "do": "fill", "actor": "staff", "testid": "reorder-quantity", "text": "5" },
+        { "do": "click", "actor": "staff", "testid": "reorder-submit" },
+        { "do": "expectElementCount", "actor": "staff", "testid": "reorder-rule-item", "contains": "Desk Lamp", "equals": 1, "within": 10000 },
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "signUp", "actor": "customer", "name": "reorder-customer" },
+        { "do": "signUp", "actor": "buyer-a", "name": "reorder-a" },
+        { "do": "signUp", "actor": "buyer-b", "name": "reorder-b" },
+        { "do": "signUp", "actor": "buyer-c", "name": "reorder-c" }
+      ],
+      "criteria": [
+        {
+          "id": "502a",
+          "desc": "crossing the threshold creates one pending restock",
+          "points": 3,
+          "statedBy": "Crossing a reorder threshold schedules a restock.",
+          "steps": [
+            { "do": "click", "actor": "buyer-a", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "click", "actor": "buyer-b", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "expectElementCount", "actor": "admin", "testid": "pending-restock-item", "contains": "Desk Lamp", "equals": 1, "within": 10000 }
+          ]
+        },
+        {
+          "id": "502b",
+          "desc": "more sales do not duplicate a pending restock",
+          "points": 2,
+          "statedBy": "A pending automatic restock is not scheduled twice.",
+          "steps": [
+            { "do": "click", "actor": "buyer-c", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "expectElementCount", "actor": "admin", "testid": "pending-restock-item", "contains": "Desk Lamp", "equals": 1, "within": 10000 }
+          ]
+        },
+        {
+          "id": "502c",
+          "desc": "a customer cannot see or replay automatic reorder management",
+          "points": 2,
+          "statedBy": "Only warehouse staff can manage automatic reorder rules.",
+          "steps": [
+            { "do": "expect", "actor": "customer", "testid": "reorder-link", "absent": true },
+            { "do": "replayAs", "actor": "customer", "from": "staff", "match": "reorder", "namedAction": { "id": "saveReorderRule", "path": "/api/reorders/{itemId}", "method": "PUT", "reducer": "save_reorder_rule", "args": [0, 2, 5], "params": [{ "name": "itemId", "in": "path", "placeholder": "{itemId}", "wireType": "u64" }, { "name": "threshold", "in": "body" }, { "name": "quantity", "in": "body" }] }, "namedTarget": { "testid": "reorder-rule-item", "contains": "Desk Lamp", "attribute": "data-entity-id", "valueType": "number" }, "settleMs": 1500 },
+            { "do": "expectReplayRejected", "actor": "customer" },
+            { "do": "expectElementCount", "actor": "staff", "testid": "reorder-rule-item", "contains": "Desk Lamp", "equals": 1, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-books-balance-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-books-balance-1.0.0.json
new file mode 100644
index 00000000000..167cd4a3903
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-books-balance-1.0.0.json
@@ -0,0 +1,47 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Progression books balance",
+  "features": [
+    {
+      "id": 107,
+      "name": "The books balance",
+      "actors": ["buyer", "admin"],
+      "setup": [
+        { "do": "signUp", "actor": "buyer", "name": "sam" },
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "recordNumber", "actor": "admin", "testid": "admin-revenue", "as": "revenue-before" },
+        { "do": "recordNumber", "actor": "admin", "testid": "admin-stock", "in": { "testid": "admin-item-row", "contains": "Laptop Stand" }, "as": "stand-before" },
+        { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Laptop Stand" } },
+        { "do": "wait", "actor": "buyer", "ms": 1000 },
+        { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Laptop Stand" } },
+        { "do": "wait", "actor": "buyer", "ms": 2000 }
+      ],
+      "criteria": [
+        {
+          "id": "107a",
+          "desc": "revenue rises by exactly what was bought",
+          "points": 1,
+          "statedBy": "total revenue equals the sum of order totals",
+          "steps": [
+            { "do": "expectNumber", "actor": "admin", "testid": "admin-revenue", "relativeTo": "revenue-before", "plus": 58, "within": 10000 }
+          ]
+        },
+        {
+          "id": "107b",
+          "desc": "what the store sold is what left the warehouses, and a fresh client agrees",
+          "points": 1,
+          "statedBy": "warehouse totals and a fresh storefront agree with completed sales",
+          "steps": [
+            { "do": "expectNumber", "actor": "admin", "testid": "admin-stock", "in": { "testid": "admin-item-row", "contains": "Laptop Stand" }, "relativeTo": "stand-before", "plus": -2 },
+            { "do": "freshClient", "actor": "buyer" },
+            { "do": "expectNumber", "actor": "buyer-fresh", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Laptop Stand" }, "relativeTo": "stand-before", "plus": -2 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-cart-checkout-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-cart-checkout-1.0.0.json
new file mode 100644
index 00000000000..9c01c680c39
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-cart-checkout-1.0.0.json
@@ -0,0 +1,52 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Cart and checkout",
+  "features": [
+    {
+      "id": 4,
+      "name": "Account cart and checkout",
+      "actors": ["quantity", "checkout"],
+      "setup": [
+        { "do": "signUp", "actor": "quantity", "name": "cart-quantity" },
+        { "do": "signUp", "actor": "checkout", "name": "cart-checkout" }
+      ],
+      "criteria": [
+        {
+          "id": "4a",
+          "desc": "adding the same item twice raises its quantity instead of adding a second line",
+          "points": 1,
+          "statedBy": "Adding an existing cart item increases its quantity.",
+          "steps": [
+            { "do": "click", "actor": "quantity", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } },
+            { "do": "wait", "actor": "quantity", "ms": 800 },
+            { "do": "click", "actor": "quantity", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Headphones" } },
+            { "do": "click", "actor": "quantity", "testid": "cart-toggle" },
+            { "do": "expect", "actor": "quantity", "testid": "cart-item", "contains": "Headphones", "count": 1 },
+            { "do": "expectNumber", "actor": "quantity", "testid": "cart-quantity", "in": { "testid": "cart-item", "contains": "Headphones" }, "equals": 2 }
+          ]
+        },
+        {
+          "id": "4d",
+          "desc": "checkout creates one order, reduces stock, and empties the cart",
+          "points": 2,
+          "statedBy": "Checkout creates one order, reduces stock, and empties the cart.",
+          "steps": [
+            { "do": "expectNumber", "actor": "checkout", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "equals": 100 },
+            { "do": "click", "actor": "checkout", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "expectNumber", "actor": "checkout", "testid": "cart-count", "equals": 1 },
+            { "do": "click", "actor": "checkout", "testid": "cart-toggle" },
+            { "do": "click", "actor": "checkout", "testid": "checkout-submit" },
+            { "do": "wait", "actor": "checkout", "ms": 1500 },
+            { "do": "expectNumber", "actor": "checkout", "testid": "cart-count", "equals": 0 },
+            { "do": "expectNumber", "actor": "checkout", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "equals": 99 },
+            { "do": "click", "actor": "checkout", "testid": "orders-toggle" },
+            { "do": "expect", "actor": "checkout", "testid": "order-item", "contains": "Desk Lamp", "count": 1 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-cart-recovery-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-cart-recovery-1.0.0.json
new file mode 100644
index 00000000000..9648125253e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-cart-recovery-1.0.0.json
@@ -0,0 +1,51 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Cart recovery",
+  "features": [
+    {
+      "id": 503,
+      "name": "Expired carts restore only available items",
+      "actors": ["available-shopper", "partial-shopper"],
+      "setup": [
+        { "do": "signUp", "actor": "available-shopper", "name": "cart-recovery-available" },
+        { "do": "click", "actor": "available-shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Keyboard" } },
+        { "do": "signUp", "actor": "partial-shopper", "name": "cart-recovery-partial" },
+        { "do": "click", "actor": "partial-shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Gaming Mouse" } },
+        { "do": "click", "actor": "partial-shopper", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+        { "do": "wait", "actor": "available-shopper", "ms": 310000 }
+      ],
+      "criteria": [
+        {
+          "id": "503a",
+          "desc": "restoring an expired cart reserves available items again",
+          "points": 3,
+          "statedBy": "A customer can restore the available items from an expired cart.",
+          "steps": [
+            { "do": "click", "actor": "available-shopper", "testid": "restore-cart", "in": { "testid": "expired-cart" } },
+            { "do": "click", "actor": "available-shopper", "testid": "cart-toggle" },
+            { "do": "expect", "actor": "available-shopper", "testid": "cart-item", "contains": "Keyboard" },
+            { "do": "expect", "actor": "available-shopper", "testid": "cart-restore-warning", "absent": true }
+          ]
+        },
+        {
+          "id": "503b",
+          "desc": "a partial restore keeps available items and names each unavailable item",
+          "points": 3,
+          "statedBy": "Restore the available items and list each item that could not be restored.",
+          "steps": [
+            { "do": "dbSetStock", "item": "Desk Lamp", "warehouse": "East", "quantity": 0, "settleMs": 2000 },
+            { "do": "dbSetStock", "item": "Desk Lamp", "warehouse": "West", "quantity": 0, "settleMs": 2000 },
+            { "do": "click", "actor": "partial-shopper", "testid": "restore-cart", "in": { "testid": "expired-cart" } },
+            { "do": "click", "actor": "partial-shopper", "testid": "cart-toggle" },
+            { "do": "expect", "actor": "partial-shopper", "testid": "cart-item", "contains": "Gaming Mouse" },
+            { "do": "expect", "actor": "partial-shopper", "testid": "cart-item", "contains": "Desk Lamp", "absent": true },
+            { "do": "expect", "actor": "partial-shopper", "testid": "cart-restore-warning", "contains": "Desk Lamp" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-catalog-management-1.0.1.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-catalog-management-1.0.1.json
new file mode 100644
index 00000000000..352f9589b17
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-catalog-management-1.0.1.json
@@ -0,0 +1,46 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Catalog management",
+  "features": [
+    {
+      "id": 622,
+      "name": "Catalog management",
+      "actors": ["admin", "visitor"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-name", "text": "Travel Mug" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-category", "text": "Kitchen" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-price", "text": "24.00" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-variants", "text": "Black, Silver" },
+        { "do": "click", "actor": "admin", "testid": "catalog-save" },
+        { "do": "reload", "actor": "visitor", "settleMs": 2500 },
+        { "do": "fill", "actor": "visitor", "testid": "search-input", "text": "Travel Mug", "enter": true }
+      ],
+      "criteria": [
+        {
+          "id": "622a",
+          "desc": "a new product reaches the public catalog",
+          "points": 2,
+          "statedBy": "Authorized staff can add products.",
+          "steps": [
+            { "do": "expect", "actor": "visitor", "testid": "item-card", "contains": "Travel Mug", "within": 10000 }
+          ]
+        },
+        {
+          "id": "622b",
+          "desc": "the product exposes its named variants",
+          "points": 2,
+          "statedBy": "Products can have named variants.",
+          "steps": [
+            { "do": "expectElementCount", "actor": "visitor", "testid": "item-variant", "contains": "Black", "equals": 1, "within": 10000 },
+            { "do": "expectElementCount", "actor": "visitor", "testid": "item-variant", "contains": "Silver", "equals": 1, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-core-business-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-core-business-1.0.0.json
new file mode 100644
index 00000000000..e0bbe3d3658
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-core-business-1.0.0.json
@@ -0,0 +1,201 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Core business features",
+  "features": [
+    {
+      "id": 620,
+      "name": "Customer profile",
+      "actors": ["owner", "other"],
+      "setup": [],
+      "criteria": [
+        {
+          "id": "620a",
+          "desc": "the owner sees the saved profile after reload",
+          "points": 2,
+          "statedBy": "A customer profile persists.",
+          "steps": [
+            { "do": "signUp", "actor": "owner", "name": "profile-owner" },
+            { "do": "click", "actor": "owner", "testid": "profile-link" },
+            { "do": "fill", "actor": "owner", "testid": "profile-name", "text": "Avery Stone" },
+            { "do": "fill", "actor": "owner", "testid": "profile-address", "text": "14 Market Street" },
+            { "do": "click", "actor": "owner", "testid": "profile-save" },
+            { "do": "reload", "actor": "owner", "settleMs": 2500 },
+            { "do": "click", "actor": "owner", "testid": "profile-link" },
+            { "do": "expect", "actor": "owner", "testid": "profile-address-summary", "contains": "14 Market Street" }
+          ]
+        },
+        {
+          "id": "620b",
+          "desc": "another customer cannot see the owner's profile",
+          "points": 2,
+          "statedBy": "Customer profiles are private.",
+          "steps": [
+            { "do": "signUp", "actor": "owner", "name": "profile-private-owner" },
+            { "do": "click", "actor": "owner", "testid": "profile-link" },
+            { "do": "fill", "actor": "owner", "testid": "profile-name", "text": "Avery Stone" },
+            { "do": "fill", "actor": "owner", "testid": "profile-address", "text": "14 Market Street" },
+            { "do": "click", "actor": "owner", "testid": "profile-save" },
+            { "do": "signUp", "actor": "other", "name": "profile-other" },
+            { "do": "click", "actor": "other", "testid": "profile-link" },
+            { "do": "expect", "actor": "other", "testid": "profile-address-summary", "contains": "14 Market Street", "absent": true }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 621,
+      "name": "Staff roles",
+      "actors": ["admin", "staff"],
+      "setup": [],
+      "criteria": [
+        {
+          "id": "621a",
+          "desc": "an administrator can assign a staff role",
+          "points": 2,
+          "statedBy": "Administrators can assign staff roles.",
+          "steps": [
+            { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+            { "do": "expect", "actor": "admin", "testid": "staff-link", "within": 6000 },
+            { "do": "click", "actor": "admin", "testid": "staff-link" },
+            { "do": "fill", "actor": "admin", "testid": "staff-role-select", "in": { "testid": "staff-role-row", "contains": "staff" }, "text": "inventory" },
+            { "do": "click", "actor": "admin", "testid": "staff-role-save", "in": { "testid": "staff-role-row", "contains": "staff" } },
+            { "do": "expect", "actor": "admin", "testid": "staff-role-row", "contains": "inventory", "within": 10000 }
+          ]
+        },
+        {
+          "id": "621b",
+          "desc": "a staff member cannot assign roles through the UI or a replayed request",
+          "points": 2,
+          "statedBy": "Staff members cannot assign roles.",
+          "steps": [
+            { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+            { "do": "expect", "actor": "admin", "testid": "staff-link", "within": 6000 },
+            { "do": "click", "actor": "admin", "testid": "staff-link" },
+            { "do": "fill", "actor": "admin", "testid": "staff-role-select", "in": { "testid": "staff-role-row", "contains": "staff" }, "text": "inventory" },
+            { "do": "click", "actor": "admin", "testid": "staff-role-save", "in": { "testid": "staff-role-row", "contains": "staff" } },
+            { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+            { "do": "click", "actor": "staff", "testid": "staff-link" },
+            { "do": "expect", "actor": "staff", "testid": "staff-role-save", "absent": true },
+            { "do": "replayAs", "actor": "staff", "from": "admin", "match": "role", "settleMs": 1500 },
+            { "do": "expectReplayRejected", "actor": "staff" }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 622,
+      "name": "Catalog management",
+      "actors": ["admin", "visitor"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-name", "text": "Travel Mug" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-category", "text": "Kitchen" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-price", "text": "24.00" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-variants", "text": "Black, Silver" },
+        { "do": "click", "actor": "admin", "testid": "catalog-save" },
+        { "do": "reload", "actor": "visitor", "settleMs": 2500 }
+      ],
+      "criteria": [
+        {
+          "id": "622a",
+          "desc": "a new product reaches the public catalog",
+          "points": 2,
+          "statedBy": "Authorized staff can add products.",
+          "steps": [
+            { "do": "expect", "actor": "visitor", "testid": "item-card", "contains": "Travel Mug", "within": 10000 }
+          ]
+        },
+        {
+          "id": "622b",
+          "desc": "the product exposes its named variants",
+          "points": 2,
+          "statedBy": "Products can have named variants.",
+          "steps": [
+            { "do": "expectElementCount", "actor": "visitor", "testid": "item-variant", "contains": "Black", "equals": 1, "within": 10000 },
+            { "do": "expectElementCount", "actor": "visitor", "testid": "item-variant", "contains": "Silver", "equals": 1, "within": 10000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 623,
+      "name": "Payment records",
+      "actors": ["tab1", "tab2", "owner"],
+      "setup": [
+        { "do": "signUp", "actor": "tab1", "name": "payment-record" },
+        { "do": "signIn", "actor": "tab2", "name": "payment-record" },
+        { "do": "signIn", "actor": "owner", "name": "payment-record" },
+        { "do": "click", "actor": "owner", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+        { "do": "click", "actor": "owner", "testid": "cart-toggle" },
+        { "do": "recordNumber", "actor": "owner", "testid": "cart-total", "as": "payment-total" },
+        { "do": "callConcurrently", "actors": ["tab1", "tab2"], "action": "checkout", "settleMs": 5000 },
+        { "do": "expectCallOutcomes", "accepted": 1 },
+        { "do": "click", "actor": "owner", "testid": "orders-toggle" }
+      ],
+      "criteria": [
+        {
+          "id": "623a",
+          "desc": "checkout records the exact paid amount",
+          "points": 3,
+          "statedBy": "Checkout records the amount paid on the order.",
+          "steps": [
+            { "do": "expect", "actor": "owner", "testid": "payment-status", "in": { "testid": "order-item", "contains": "Desk Lamp" }, "contains": "paid", "within": 10000 },
+            { "do": "expectNumber", "actor": "owner", "testid": "payment-amount", "in": { "testid": "order-item", "contains": "Desk Lamp" }, "relativeTo": "payment-total", "plus": 0 }
+          ]
+        },
+        {
+          "id": "623b",
+          "desc": "one checkout has one payment record",
+          "points": 2,
+          "statedBy": "A checkout does not create duplicate payments.",
+          "steps": [
+            { "do": "expectElementCount", "actor": "owner", "testid": "payment-record", "in": { "testid": "order-item", "contains": "Desk Lamp" }, "equals": 1, "within": 10000 }
+          ]
+        }
+      ]
+    },
+    {
+      "id": 624,
+      "name": "Staff activity history",
+      "actors": ["admin", "staff", "customer"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "signIn", "actor": "customer", "name": "customer", "password": "stackbench-customer-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-name", "text": "Activity Mug" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-category", "text": "Kitchen" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-price", "text": "43.00" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-variants", "text": "Green" },
+        { "do": "click", "actor": "admin", "testid": "catalog-save" }
+      ],
+      "criteria": [
+        {
+          "id": "624a",
+          "desc": "an administrative change records its actor and subject",
+          "points": 3,
+          "statedBy": "Administrative changes have an activity history.",
+          "steps": [
+            { "do": "click", "actor": "staff", "testid": "staff-link" },
+            { "do": "click", "actor": "staff", "testid": "activity-link" },
+            { "do": "expect", "actor": "staff", "testid": "activity-entry", "contains": "Activity Mug", "within": 10000 },
+            { "do": "expect", "actor": "staff", "testid": "activity-actor", "in": { "testid": "activity-entry", "contains": "Activity Mug" }, "contains": "admin", "within": 10000 }
+          ]
+        },
+        {
+          "id": "624b",
+          "desc": "customers cannot open staff activity history",
+          "points": 2,
+          "statedBy": "Staff activity history is not available to customers.",
+          "steps": [
+            { "do": "expect", "actor": "customer", "testid": "activity-link", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-customer-profile-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-customer-profile-1.0.0.json
new file mode 100644
index 00000000000..5602e576491
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-customer-profile-1.0.0.json
@@ -0,0 +1,59 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Customer profile",
+  "features": [
+    {
+      "id": 620,
+      "name": "Customer profile",
+      "actors": ["owner", "privateOwner", "other"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "profile-owner" },
+        { "do": "click", "actor": "owner", "testid": "profile-link" },
+        { "do": "fill", "actor": "owner", "testid": "profile-name", "text": "Avery Stone" },
+        { "do": "fill", "actor": "owner", "testid": "profile-address", "text": "14 Market Street" },
+        { "do": "click", "actor": "owner", "testid": "profile-save" }
+      ],
+      "criteria": [
+        {
+          "id": "620c",
+          "desc": "the owner can save and view a customer profile",
+          "points": 1,
+          "statedBy": "A signed-in customer can save and view their name and shipping address.",
+          "steps": [
+            { "do": "expect", "actor": "owner", "testid": "profile-address-summary", "contains": "14 Market Street" }
+          ]
+        },
+        {
+          "id": "620a",
+          "desc": "the owner sees the saved profile after reload",
+          "points": 2,
+          "statedBy": "The saved profile remains after a reload.",
+          "steps": [
+            { "do": "reload", "actor": "owner", "settleMs": 2500 },
+            { "do": "click", "actor": "owner", "testid": "profile-link" },
+            { "do": "expect", "actor": "owner", "testid": "profile-address-summary", "contains": "14 Market Street" }
+          ]
+        },
+        {
+          "id": "620b",
+          "desc": "another customer cannot see the owner's profile",
+          "points": 2,
+          "statedBy": "Each customer can see only their own profile.",
+          "steps": [
+            { "do": "signUp", "actor": "privateOwner", "name": "profile-private-owner" },
+            { "do": "click", "actor": "privateOwner", "testid": "profile-link" },
+            { "do": "fill", "actor": "privateOwner", "testid": "profile-name", "text": "Avery Stone" },
+            { "do": "fill", "actor": "privateOwner", "testid": "profile-address", "text": "14 Market Street" },
+            { "do": "click", "actor": "privateOwner", "testid": "profile-save" },
+            { "do": "signUp", "actor": "other", "name": "profile-other" },
+            { "do": "click", "actor": "other", "testid": "profile-link" },
+            { "do": "expect", "actor": "other", "testid": "profile-address-summary", "contains": "14 Market Street", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-delivery-notifications-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-delivery-notifications-1.0.0.json
new file mode 100644
index 00000000000..4d74d0e4b4e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-delivery-notifications-1.0.0.json
@@ -0,0 +1,48 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Delivery notifications",
+  "features": [
+    {
+      "id": 501,
+      "name": "Delivery creates one private notification",
+      "actors": ["owner", "other", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "delivery-owner" },
+        { "do": "signUp", "actor": "other", "name": "delivery-other" },
+        { "do": "click", "actor": "owner", "testid": "notification-settings" },
+        { "do": "click", "actor": "owner", "testid": "notification-order" },
+        { "do": "click", "actor": "owner", "testid": "notification-save" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "owner", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+        { "do": "click", "actor": "staff", "testid": "staff-link" },
+        { "do": "click", "actor": "staff", "testid": "ship-submit", "in": { "testid": "queue-item", "contains": "Desk Lamp" } },
+        { "do": "wait", "actor": "owner", "ms": 70000 }
+      ],
+      "criteria": [
+        {
+          "id": "501a",
+          "desc": "the order owner receives one delivery notification",
+          "points": 3,
+          "statedBy": "A delivered order creates one notification for its owner.",
+          "steps": [
+            { "do": "click", "actor": "owner", "testid": "notifications-toggle" },
+            { "do": "expectElementCount", "actor": "owner", "testid": "notification-item", "contains": "Desk Lamp", "equals": 1, "within": 10000 }
+          ]
+        },
+        {
+          "id": "501b",
+          "desc": "another customer cannot see the delivery notification",
+          "points": 2,
+          "statedBy": "Delivery notifications are private to the order owner.",
+          "steps": [
+            { "do": "click", "actor": "other", "testid": "notifications-toggle" },
+            { "do": "expect", "actor": "other", "testid": "notification-item", "contains": "Desk Lamp", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-faceted-filters-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-faceted-filters-1.0.0.json
new file mode 100644
index 00000000000..31033d6239d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-faceted-filters-1.0.0.json
@@ -0,0 +1,36 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Faceted search filters",
+  "features": [
+    {
+      "id": 401,
+      "name": "Filters compose",
+      "actors": ["visitor"],
+      "setup": [
+        { "do": "fill", "actor": "visitor", "testid": "category-filter", "text": "Home" },
+        { "do": "fill", "actor": "visitor", "testid": "minimum-price", "text": "50" },
+        { "do": "fill", "actor": "visitor", "testid": "maximum-price", "text": "200" },
+        { "do": "click", "actor": "visitor", "testid": "in-stock-filter" }
+      ],
+      "criteria": [
+        {
+          "id": "401a",
+          "desc": "category, price, and availability filters apply together",
+          "points": 3,
+          "statedBy": "Apply all selected filters together",
+          "steps": [
+            { "do": "expectElementCount", "actor": "visitor", "testid": "item-card", "in": { "testid": "search-results" }, "contains": "Coffee Grinder", "equals": 1, "within": 10000 },
+            { "do": "expectElementCount", "actor": "visitor", "testid": "item-card", "in": { "testid": "search-results" }, "contains": "Air Purifier", "equals": 1 },
+            { "do": "expect", "actor": "visitor", "testid": "item-card", "in": { "testid": "search-results" }, "contains": "USB Cable", "absent": true },
+            { "do": "expect", "actor": "visitor", "testid": "item-card", "in": { "testid": "search-results" }, "contains": "Desk Lamp", "absent": true },
+            { "do": "expect", "actor": "visitor", "testid": "item-card", "in": { "testid": "search-results" }, "contains": "Espresso Machine", "absent": true },
+            { "do": "expect", "actor": "visitor", "testid": "item-card", "in": { "testid": "search-results" }, "contains": "Gaming Mouse", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-faceted-pagination-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-faceted-pagination-1.0.0.json
new file mode 100644
index 00000000000..cf6d614b916
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-faceted-pagination-1.0.0.json
@@ -0,0 +1,30 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Faceted search pagination",
+  "features": [
+    {
+      "id": 402,
+      "name": "Pages are stable",
+      "actors": ["visitor"],
+      "setup": [],
+      "criteria": [
+        {
+          "id": "402a",
+          "desc": "moving between pages returns the same ordered items without duplicates",
+          "points": 3,
+          "statedBy": "Moving between pages must not omit or repeat an item",
+          "steps": [
+            { "do": "expectSequence", "actor": "visitor", "testid": "item-name", "in": { "testid": "search-results" }, "equals": ["Air Purifier", "Bluetooth Speaker", "Coffee Grinder", "Desk Lamp", "Espresso Machine", "Gaming Mouse", "Headphones", "Induction Cooktop", "Keyboard", "Laptop Stand"] },
+            { "do": "click", "actor": "visitor", "testid": "search-next-page" },
+            { "do": "expectSequence", "actor": "visitor", "testid": "item-name", "in": { "testid": "search-results" }, "equals": ["Mirrorless Camera", "USB Cable", "Webcam"] },
+            { "do": "click", "actor": "visitor", "testid": "search-previous-page" },
+            { "do": "expectSequence", "actor": "visitor", "testid": "item-name", "in": { "testid": "search-results" }, "equals": ["Air Purifier", "Bluetooth Speaker", "Coffee Grinder", "Desk Lamp", "Espresso Machine", "Gaming Mouse", "Headphones", "Induction Cooktop", "Keyboard", "Laptop Stand"] }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-managed-support-privacy-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-managed-support-privacy-1.0.0.json
new file mode 100644
index 00000000000..c95959757b2
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-managed-support-privacy-1.0.0.json
@@ -0,0 +1,43 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Managed support privacy",
+  "features": [
+    {
+      "id": 613,
+      "name": "Managed support privacy",
+      "actors": ["owner", "other", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "managed-private-owner" },
+        { "do": "click", "actor": "owner", "testid": "support-link" },
+        { "do": "fill", "actor": "owner", "testid": "support-email", "text": "managed-private@example.com" },
+        { "do": "fill", "actor": "owner", "testid": "support-subject", "text": "Private managed case" },
+        { "do": "fill", "actor": "owner", "testid": "support-message", "text": "Private case details." },
+        { "do": "click", "actor": "owner", "testid": "support-submit" },
+        { "do": "expect", "actor": "owner", "testid": "support-reference", "nonEmpty": true },
+        { "do": "signUp", "actor": "other", "name": "managed-private-other" },
+        { "do": "click", "actor": "other", "testid": "support-link" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "613b",
+          "desc": "another customer cannot read or reply to the managed case",
+          "points": 1,
+          "statedBy": "A customer can access only cases that belong to their account.",
+          "steps": [
+            { "do": "expect", "actor": "other", "testid": "support-ticket", "contains": "Private managed case", "absent": true },
+            { "do": "fill", "actor": "owner", "testid": "support-reply", "in": { "testid": "support-ticket", "contains": "Private managed case" }, "text": "Owner-only update" },
+            { "do": "click", "actor": "owner", "testid": "support-reply-submit", "in": { "testid": "support-ticket", "contains": "Private managed case" } },
+            { "do": "replayAs", "actor": "other", "from": "owner", "match": "Owner-only update", "namedAction": { "id": "replySupport", "path": "/api/support/:id/replies", "method": "POST", "reducer": "reply_support", "args": [0, "Owner-only update"], "params": [{ "name": "ticketId", "in": "path", "placeholder": ":id", "wireType": "u64" }, { "name": "body", "in": "body" }] }, "namedTarget": { "testid": "support-ticket", "contains": "Private managed case", "attribute": "data-entity-id", "valueType": "number" }, "settleMs": 1500 },
+            { "do": "expectReplayRejected", "actor": "other", "allowNotFound": true },
+            { "do": "expectElementCount", "actor": "staff", "testid": "support-reply-item", "contains": "Owner-only update", "equals": 1, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-managed-support-shared-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-managed-support-shared-1.0.0.json
new file mode 100644
index 00000000000..935ffe5f6af
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-managed-support-shared-1.0.0.json
@@ -0,0 +1,65 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Shared managed support case",
+  "features": [
+    {
+      "id": 613,
+      "name": "Shared managed support case",
+      "actors": ["owner", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "managed-shared-owner" },
+        { "do": "click", "actor": "owner", "testid": "support-link" },
+        { "do": "fill", "actor": "owner", "testid": "support-email", "text": "managed-shared@example.com" },
+        { "do": "fill", "actor": "owner", "testid": "support-subject", "text": "Shared managed case" },
+        { "do": "fill", "actor": "owner", "testid": "support-message", "text": "Please investigate this case." },
+        { "do": "click", "actor": "owner", "testid": "support-submit" },
+        { "do": "expect", "actor": "owner", "testid": "support-reference", "nonEmpty": true },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "613c",
+          "desc": "staff can update a support case and the customer can reply",
+          "points": 1,
+          "statedBy": "Customers and staff can exchange replies and update the status of a support case.",
+          "steps": [
+            { "do": "fill", "actor": "staff", "testid": "support-status-input", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "text": "in progress" },
+            { "do": "click", "actor": "staff", "testid": "support-update", "in": { "testid": "support-ticket", "contains": "Shared managed case" } },
+            { "do": "fill", "actor": "staff", "testid": "support-reply", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "text": "Case received." },
+            { "do": "click", "actor": "staff", "testid": "support-reply-submit", "in": { "testid": "support-ticket", "contains": "Shared managed case" } },
+            { "do": "reload", "actor": "owner", "settleMs": 2000 },
+            { "do": "click", "actor": "owner", "testid": "support-link" },
+            { "do": "expect", "actor": "owner", "testid": "support-status", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "contains": "in progress" },
+            { "do": "expect", "actor": "owner", "testid": "support-reply-item", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "contains": "Case received." },
+            { "do": "fill", "actor": "owner", "testid": "support-reply", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "text": "Thank you." },
+            { "do": "click", "actor": "owner", "testid": "support-reply-submit", "in": { "testid": "support-ticket", "contains": "Shared managed case" } },
+            { "do": "reload", "actor": "staff", "settleMs": 2000 },
+            { "do": "click", "actor": "staff", "testid": "staff-link" },
+            { "do": "expect", "actor": "staff", "testid": "support-reply-item", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "contains": "Thank you." }
+          ]
+        },
+        {
+          "id": "613a",
+          "desc": "the customer and staff see the same replies and status live",
+          "points": 2,
+          "statedBy": "Customers and authorized staff use one shared support case.",
+          "steps": [
+            { "do": "fill", "actor": "staff", "testid": "support-status-input", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "text": "in progress" },
+            { "do": "click", "actor": "staff", "testid": "support-update", "in": { "testid": "support-ticket", "contains": "Shared managed case" } },
+            { "do": "fill", "actor": "staff", "testid": "support-reply", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "text": "We are investigating." },
+            { "do": "click", "actor": "staff", "testid": "support-reply-submit", "in": { "testid": "support-ticket", "contains": "Shared managed case" } },
+            { "do": "expect", "actor": "owner", "testid": "support-status", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "contains": "in progress", "within": 10000 },
+            { "do": "expect", "actor": "owner", "testid": "support-reply-item", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "contains": "We are investigating.", "within": 10000 },
+            { "do": "fill", "actor": "owner", "testid": "support-reply", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "text": "Thank you for the update." },
+            { "do": "click", "actor": "owner", "testid": "support-reply-submit", "in": { "testid": "support-ticket", "contains": "Shared managed case" } },
+            { "do": "expect", "actor": "staff", "testid": "support-reply-item", "in": { "testid": "support-ticket", "contains": "Shared managed case" }, "contains": "Thank you for the update.", "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-notification-preferences-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-notification-preferences-1.0.0.json
new file mode 100644
index 00000000000..d090b6c156c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-notification-preferences-1.0.0.json
@@ -0,0 +1,53 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Notification preferences",
+  "features": [
+    {
+      "id": 630,
+      "name": "Account notification preferences",
+      "actors": ["owner", "other"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "notification-owner" },
+        { "do": "signUp", "actor": "other", "name": "notification-other" },
+        { "do": "click", "actor": "owner", "testid": "notification-settings" },
+        { "do": "click", "actor": "owner", "testid": "notification-order" },
+        { "do": "click", "actor": "owner", "testid": "notification-save" }
+      ],
+      "criteria": [
+        {
+          "id": "630c",
+          "desc": "the customer can save a notification choice",
+          "points": 1,
+          "statedBy": "Signed-in customers can turn order and stock notifications on or off.",
+          "steps": [
+            { "do": "expect", "actor": "owner", "testid": "notification-order", "attribute": "data-state", "value": "on" }
+          ]
+        },
+        {
+          "id": "630a",
+          "desc": "the owner's notification choice survives a reload",
+          "points": 2,
+          "statedBy": "Notification choices persist for the account.",
+          "steps": [
+            { "do": "reload", "actor": "owner", "settleMs": 3000 },
+            { "do": "click", "actor": "owner", "testid": "notification-settings" },
+            { "do": "expect", "actor": "owner", "testid": "notification-order", "attribute": "data-state", "value": "on" }
+          ]
+        },
+        {
+          "id": "630b",
+          "desc": "the owner's choice does not change another account",
+          "points": 2,
+          "statedBy": "One customer's notification choices do not affect another customer.",
+          "steps": [
+            { "do": "click", "actor": "other", "testid": "notification-settings" },
+            { "do": "expect", "actor": "other", "testid": "notification-order", "attribute": "data-state", "value": "off" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-open-list-live-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-open-list-live-1.0.0.json
new file mode 100644
index 00000000000..3682a8c4cde
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-open-list-live-1.0.0.json
@@ -0,0 +1,40 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Progression open review list",
+  "features": [
+    {
+      "id": 902,
+      "name": "An open list stays current",
+      "actors": ["reader", "reviewer"],
+      "setup": [
+        { "do": "signUp", "actor": "reviewer", "name": "raceR" },
+        { "do": "signUp", "actor": "reader", "name": "raceL" },
+        { "do": "recordNumber", "actor": "reviewer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Keyboard" }, "as": "keyboard-before-review-purchase" },
+        { "do": "click", "actor": "reviewer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } },
+        { "do": "expectNumber", "actor": "reviewer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Keyboard" }, "relativeTo": "keyboard-before-review-purchase", "plus": -1, "within": 10000 },
+        { "do": "click", "actor": "reviewer", "testid": "item-name", "in": { "testid": "item-card", "contains": "Keyboard" } },
+        { "do": "expect", "actor": "reviewer", "testid": "item-detail", "within": 10000 },
+        { "do": "fill", "actor": "reviewer", "testid": "review-rating", "text": "5" }
+      ],
+      "criteria": [
+        {
+          "id": "902a",
+          "desc": "one customer has the Keyboard's reviews open before another posts one; the already-open view shows that review exactly once",
+          "points": 1,
+          "statedBy": "A view opened while a review is submitted converges to the current review list.",
+          "steps": [
+            { "do": "click", "actor": "reader", "testid": "item-name", "in": { "testid": "item-card", "contains": "Keyboard" } },
+            { "do": "expect", "actor": "reader", "testid": "item-detail", "within": 10000 },
+            { "do": "fill", "actor": "reviewer", "testid": "review-input", "text": "live-review-kbd" },
+            { "do": "click", "actor": "reviewer", "testid": "review-submit" },
+            { "do": "expectElementCount", "actor": "reviewer", "testid": "review-item", "contains": "live-review-kbd", "equals": 1, "within": 10000 },
+            { "do": "expectElementCount", "actor": "reader", "testid": "review-item", "contains": "live-review-kbd", "equals": 1, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-return-boundary-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-return-boundary-1.0.0.json
new file mode 100644
index 00000000000..df508fc3f84
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-return-boundary-1.0.0.json
@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Pending order return boundary",
+  "features": [
+    {
+      "id": 331,
+      "name": "Pending order return boundary",
+      "actors": ["customer"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "return-boundary" }
+      ],
+      "criteria": [
+        {
+          "id": "3e",
+          "desc": "an item from a pending order cannot be returned",
+          "points": 1,
+          "statedBy": "An item from a pending order cannot be returned.",
+          "steps": [
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle", "settleMs": 1500 },
+            { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Desk Lamp" }, "contains": "ending", "within": 10000 },
+            { "do": "expect", "actor": "customer", "testid": "return-item", "in": { "testid": "order-item", "contains": "Desk Lamp" }, "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-return-complete-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-return-complete-1.0.0.json
new file mode 100644
index 00000000000..bc3a317bc70
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-return-complete-1.0.0.json
@@ -0,0 +1,43 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Completed order return",
+  "features": [
+    {
+      "id": 330,
+      "name": "Completed order return",
+      "actors": ["customer", "staff", "admin"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "return-complete" },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "3c",
+          "desc": "returning a shipped item restores stock and revenue and marks the item returned",
+          "points": 3,
+          "statedBy": "An accepted return marks the item as returned, restores stock, and reduces revenue by the price paid.",
+          "steps": [
+            { "do": "recordNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Keyboard" }, "as": "return-stock-before" },
+            { "do": "recordNumber", "actor": "admin", "testid": "admin-revenue", "as": "return-revenue-before" },
+            { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } },
+            { "do": "expect", "actor": "staff", "testid": "queue-item", "contains": "Keyboard", "within": 10000 },
+            { "do": "click", "actor": "staff", "testid": "ship-submit", "in": { "testid": "queue-item", "contains": "Keyboard" } },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle", "settleMs": 1500 },
+            { "do": "expect", "actor": "customer", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "contains": "hipped", "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "return-item", "in": { "testid": "order-item", "contains": "Keyboard" } },
+            { "do": "expect", "actor": "customer", "testid": "order-item", "contains": "eturned", "within": 10000 },
+            { "do": "expectNumber", "actor": "admin", "testid": "admin-revenue", "relativeTo": "return-revenue-before", "plus": 0, "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "catalog-link" },
+            { "do": "expectNumber", "actor": "customer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Keyboard" }, "relativeTo": "return-stock-before", "plus": 0 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-support-boundary-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-support-boundary-1.0.0.json
new file mode 100644
index 00000000000..626d62458d4
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-support-boundary-1.0.0.json
@@ -0,0 +1,64 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 4,
+  "name": "Order support ownership boundary",
+  "features": [
+    {
+      "id": 614,
+      "name": "Order support ownership boundary",
+      "actors": ["owner", "other"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "order-boundary-owner" },
+        { "do": "click", "actor": "owner", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+        { "do": "click", "actor": "owner", "testid": "support-link" },
+        { "do": "fill", "actor": "owner", "testid": "support-subject", "text": "Owner order case" },
+        { "do": "fill", "actor": "owner", "testid": "support-message", "text": "This case belongs to the order owner." },
+        { "do": "click", "actor": "owner", "testid": "support-submit" },
+        { "do": "click", "actor": "owner", "testid": "support-order-option", "contains": "Desk Lamp", "in": { "testid": "support-ticket", "contains": "Owner order case" } },
+        { "do": "signUp", "actor": "other", "name": "order-boundary-other" },
+        { "do": "click", "actor": "other", "testid": "support-link" },
+        { "do": "fill", "actor": "other", "testid": "support-subject", "text": "Other order case" },
+        { "do": "fill", "actor": "other", "testid": "support-message", "text": "This is a separate case." },
+        { "do": "click", "actor": "other", "testid": "support-submit" }
+      ],
+      "criteria": [
+        {
+          "id": "614b",
+          "desc": "another customer cannot attach or inspect the owner's order",
+          "points": 2,
+          "statedBy": "A customer cannot attach or inspect another customer's order.",
+          "steps": [
+            { "do": "expect", "actor": "other", "testid": "support-order-option", "contains": "Desk Lamp", "absent": true },
+            {
+              "do": "callAction",
+              "actor": "other",
+              "from": "owner",
+              "action": "linkSupportOrder",
+              "authentication": "actor",
+              "input": { "testid": "support-link-order", "attribute": "data-action-input" },
+              "namedAction": {
+                "id": "linkSupportOrder",
+                "path": "/api/support/cases/{caseId}/order",
+                "method": "POST",
+                "reducer": "link_support_order",
+                "args": [0, 0],
+                "params": [
+                  { "name": "caseId", "in": "path", "placeholder": "{caseId}", "wireType": "u64" },
+                  { "name": "orderId", "in": "body", "wireType": "u64" }
+                ]
+              },
+              "settleMs": 1500
+            },
+            { "do": "expectActionOutcome", "actor": "other", "outcome": "refused" },
+            { "do": "expect", "actor": "other", "testid": "support-order", "in": { "testid": "support-ticket", "contains": "Other order case" }, "contains": "Desk Lamp", "absent": true },
+            { "do": "click", "actor": "owner", "testid": "support-order-option", "contains": "Desk Lamp", "in": { "testid": "support-ticket", "contains": "Owner order case" } },
+            { "do": "click", "actor": "owner", "testid": "support-link-order", "in": { "testid": "support-ticket", "contains": "Owner order case" } },
+            { "do": "expectElementCount", "actor": "owner", "testid": "support-order", "contains": "Desk Lamp", "equals": 1, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-support-owned-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-support-owned-1.0.0.json
new file mode 100644
index 00000000000..bdacfeceb7d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-order-support-owned-1.0.0.json
@@ -0,0 +1,37 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 4,
+  "name": "Owned order support link",
+  "features": [
+    {
+      "id": 614,
+      "name": "Owned order support link",
+      "actors": ["owner", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "order-support-owner" },
+        { "do": "click", "actor": "owner", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+        { "do": "click", "actor": "owner", "testid": "support-link" },
+        { "do": "fill", "actor": "owner", "testid": "support-subject", "text": "Owned order case" },
+        { "do": "fill", "actor": "owner", "testid": "support-message", "text": "Question about my Desk Lamp order." },
+        { "do": "click", "actor": "owner", "testid": "support-submit" }
+      ],
+      "criteria": [
+        {
+          "id": "614a",
+          "desc": "the customer can link their order and staff can inspect it",
+          "points": 3,
+          "statedBy": "A customer can attach one of their orders to a support case.",
+          "steps": [
+            { "do": "click", "actor": "owner", "testid": "support-order-option", "contains": "Desk Lamp", "in": { "testid": "support-ticket", "contains": "Owned order case" } },
+            { "do": "click", "actor": "owner", "testid": "support-link-order", "in": { "testid": "support-ticket", "contains": "Owned order case" } },
+            { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+            { "do": "click", "actor": "staff", "testid": "staff-link" },
+            { "do": "expect", "actor": "staff", "testid": "support-order", "in": { "testid": "support-ticket", "contains": "Owned order case" }, "contains": "Desk Lamp", "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-personalized-recommendations-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-personalized-recommendations-1.0.0.json
new file mode 100644
index 00000000000..ab709a40eb9
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-personalized-recommendations-1.0.0.json
@@ -0,0 +1,51 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 4,
+  "name": "Personalized recommendations",
+  "features": [
+    {
+      "id": 403,
+      "name": "Recommendations use customer activity",
+      "actors": ["sales-helper", "audio-customer", "home-customer", "computing-customer"],
+      "setup": [
+        { "do": "signUp", "actor": "sales-helper", "name": "recommend-sales" },
+        { "do": "click", "actor": "sales-helper", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "settleMs": 500 },
+        { "do": "click", "actor": "sales-helper", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "settleMs": 500 },
+        { "do": "click", "actor": "sales-helper", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "settleMs": 500 },
+        { "do": "signUp", "actor": "audio-customer", "name": "recommend-audio" },
+        { "do": "click", "actor": "audio-customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" } },
+        { "do": "signUp", "actor": "home-customer", "name": "recommend-home" },
+        { "do": "click", "actor": "home-customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Coffee Grinder" } },
+        { "do": "signUp", "actor": "computing-customer", "name": "recommend-computing" },
+        { "do": "click", "actor": "computing-customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } }
+      ],
+      "criteria": [
+        {
+          "id": "403a",
+          "desc": "recommendations follow the customer's categories, global sales, and name tie-break",
+          "points": 4,
+          "statedBy": "Order the remaining items by global units sold, highest first, then by item name.",
+          "steps": [
+            { "do": "expect", "actor": "audio-customer", "testid": "recommended-item", "in": { "testid": "recommendations" }, "contains": "Headphones" },
+            { "do": "expectNumber", "actor": "home-customer", "testid": "recommendation-rank", "in": { "testid": "recommended-item", "contains": "Desk Lamp" }, "equals": 1, "within": 10000 },
+            { "do": "expectSequence", "actor": "computing-customer", "testid": "recommended-item", "in": { "testid": "recommendations" }, "equals": ["Gaming Mouse", "Laptop Stand", "Webcam"], "within": 10000 }
+          ]
+        },
+        {
+          "id": "403b",
+          "desc": "one customer's activity does not replace another customer's recommendations",
+          "points": 2,
+          "statedBy": "Customer recommendation profiles are isolated.",
+          "steps": [
+            { "do": "click", "actor": "audio-customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Headphones" } },
+            { "do": "expect", "actor": "audio-customer", "testid": "recommended-item", "in": { "testid": "recommendations" }, "contains": "Headphones", "absent": true },
+            { "do": "expectNumber", "actor": "home-customer", "testid": "recommendation-rank", "in": { "testid": "recommended-item", "contains": "Desk Lamp" }, "equals": 1, "within": 10000 },
+            { "do": "expectSequence", "actor": "computing-customer", "testid": "recommended-item", "in": { "testid": "recommendations" }, "equals": ["Gaming Mouse", "Laptop Stand", "Webcam"], "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-price-cart-checkout-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-price-cart-checkout-1.0.0.json
new file mode 100644
index 00000000000..0910f5cd0ee
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-price-cart-checkout-1.0.0.json
@@ -0,0 +1,39 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Open cart price changes",
+  "features": [
+    {
+      "id": 420,
+      "name": "Open cart price changes",
+      "actors": ["admin", "customer"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "signUp", "actor": "customer", "name": "price-cart" },
+        { "do": "click", "actor": "admin", "testid": "admin-link" }
+      ],
+      "criteria": [
+        {
+          "id": "4c",
+          "desc": "a price change updates an open cart and checkout charges the new price",
+          "points": 3,
+          "statedBy": "The public catalog and every open cart show the new price without a reload. Checkout uses the current price.",
+          "steps": [
+            { "do": "fill", "actor": "customer", "testid": "search-input", "text": "Desk Lamp", "enter": true, "settleMs": 1500 },
+            { "do": "click", "actor": "customer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "click", "actor": "customer", "testid": "cart-toggle" },
+            { "do": "expectNumber", "actor": "customer", "testid": "cart-total", "equals": 42 },
+            { "do": "fill", "actor": "admin", "testid": "price-input", "text": "52.00", "in": { "testid": "admin-item-row", "contains": "Desk Lamp" } },
+            { "do": "click", "actor": "admin", "testid": "price-submit", "in": { "testid": "admin-item-row", "contains": "Desk Lamp" } },
+            { "do": "expectNumber", "actor": "customer", "testid": "cart-total", "equals": 52, "within": 10000 },
+            { "do": "click", "actor": "customer", "testid": "checkout-submit" },
+            { "do": "click", "actor": "customer", "testid": "orders-toggle", "settleMs": 1500 },
+            { "do": "expectNumber", "actor": "customer", "testid": "order-total", "in": { "testid": "order-item", "contains": "Desk Lamp" }, "equals": 52 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-promotion-checkout-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-promotion-checkout-1.0.0.json
new file mode 100644
index 00000000000..09a8946daf6
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-promotion-checkout-1.0.0.json
@@ -0,0 +1,88 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Promotion checkout",
+  "features": [
+    {
+      "id": 621,
+      "name": "Bounded promotions at checkout",
+      "actors": ["staff", "activeBuyer", "expiredBuyer", "firstBuyer", "secondBuyer"],
+      "setup": [
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "promotions-link" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-code", "text": "LIVE10" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-discount", "text": "10" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-start", "text": "2020-01-01" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-end", "text": "2099-12-31" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-limit", "text": "10" },
+        { "do": "click", "actor": "staff", "testid": "promotion-submit" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-code", "text": "OLD10" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-discount", "text": "10" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-start", "text": "2000-01-01" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-end", "text": "2000-12-31" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-limit", "text": "10" },
+        { "do": "click", "actor": "staff", "testid": "promotion-submit" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-code", "text": "ONCE10" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-discount", "text": "10" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-start", "text": "2020-01-01" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-end", "text": "2099-12-31" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-limit", "text": "1" },
+        { "do": "click", "actor": "staff", "testid": "promotion-submit" },
+        { "do": "signUp", "actor": "activeBuyer", "name": "promotion-active" },
+        { "do": "signUp", "actor": "expiredBuyer", "name": "promotion-expired" },
+        { "do": "signUp", "actor": "firstBuyer", "name": "promotion-first" },
+        { "do": "signUp", "actor": "secondBuyer", "name": "promotion-second" }
+      ],
+      "criteria": [
+        {
+          "id": "621a",
+          "desc": "an active promotion changes checkout and is recorded on the order",
+          "points": 3,
+          "statedBy": "An active promotion applies to the cart and the order records its discount.",
+          "steps": [
+            { "do": "click", "actor": "activeBuyer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Keyboard" } },
+            { "do": "click", "actor": "activeBuyer", "testid": "cart-toggle" },
+            { "do": "fill", "actor": "activeBuyer", "testid": "cart-promotion", "text": "LIVE10" },
+            { "do": "click", "actor": "activeBuyer", "testid": "apply-promotion" },
+            { "do": "click", "actor": "activeBuyer", "testid": "checkout-submit" },
+            { "do": "click", "actor": "activeBuyer", "testid": "orders-toggle" },
+            { "do": "expectNumber", "actor": "activeBuyer", "testid": "order-discount", "in": { "testid": "order-item", "contains": "Keyboard" }, "equals": 8.9 }
+          ]
+        },
+        {
+          "id": "621b",
+          "desc": "an expired promotion is refused",
+          "points": 2,
+          "statedBy": "Expired promotions cannot be applied.",
+          "steps": [
+            { "do": "click", "actor": "expiredBuyer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Keyboard" } },
+            { "do": "click", "actor": "expiredBuyer", "testid": "cart-toggle" },
+            { "do": "fill", "actor": "expiredBuyer", "testid": "cart-promotion", "text": "OLD10" },
+            { "do": "click", "actor": "expiredBuyer", "testid": "apply-promotion" },
+            { "do": "expect", "actor": "expiredBuyer", "testid": "promotion-error" }
+          ]
+        },
+        {
+          "id": "621c",
+          "desc": "a fully redeemed promotion is refused",
+          "points": 2,
+          "statedBy": "A promotion cannot be used after its redemption limit is reached.",
+          "steps": [
+            { "do": "click", "actor": "firstBuyer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Keyboard" } },
+            { "do": "click", "actor": "firstBuyer", "testid": "cart-toggle" },
+            { "do": "fill", "actor": "firstBuyer", "testid": "cart-promotion", "text": "ONCE10" },
+            { "do": "click", "actor": "firstBuyer", "testid": "apply-promotion" },
+            { "do": "click", "actor": "firstBuyer", "testid": "checkout-submit" },
+            { "do": "click", "actor": "secondBuyer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Keyboard" } },
+            { "do": "click", "actor": "secondBuyer", "testid": "cart-toggle" },
+            { "do": "fill", "actor": "secondBuyer", "testid": "cart-promotion", "text": "ONCE10" },
+            { "do": "click", "actor": "secondBuyer", "testid": "apply-promotion" },
+            { "do": "expect", "actor": "secondBuyer", "testid": "promotion-error" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-promotion-reporting-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-promotion-reporting-1.0.0.json
new file mode 100644
index 00000000000..91e44a332af
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-promotion-reporting-1.0.0.json
@@ -0,0 +1,50 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Promotion reporting",
+  "features": [
+    {
+      "id": 622,
+      "name": "Exact promotion totals",
+      "actors": ["staff", "buyer"],
+      "setup": [
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "promotions-link" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-code", "text": "REPORT10" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-discount", "text": "10" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-start", "text": "2020-01-01" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-end", "text": "2099-12-31" },
+        { "do": "fill", "actor": "staff", "testid": "promotion-limit", "text": "2" },
+        { "do": "click", "actor": "staff", "testid": "promotion-submit" },
+        { "do": "signUp", "actor": "buyer", "name": "promotion-report-buyer" },
+        { "do": "click", "actor": "buyer", "testid": "add-to-cart", "in": { "testid": "item-card", "contains": "Keyboard" } },
+        { "do": "click", "actor": "buyer", "testid": "cart-toggle" },
+        { "do": "fill", "actor": "buyer", "testid": "cart-promotion", "text": "REPORT10" },
+        { "do": "click", "actor": "buyer", "testid": "apply-promotion" },
+        { "do": "click", "actor": "buyer", "testid": "checkout-submit" }
+      ],
+      "criteria": [
+        {
+          "id": "622a",
+          "desc": "the promotion report has the exact redemption count",
+          "points": 1,
+          "statedBy": "Promotion redemption counts match orders that used the promotion.",
+          "steps": [
+            { "do": "expectNumber", "actor": "staff", "testid": "promotion-redemptions", "in": { "testid": "promotion-report", "contains": "REPORT10" }, "equals": 1 }
+          ]
+        },
+        {
+          "id": "622b",
+          "desc": "the promotion report has the exact discounted revenue",
+          "points": 2,
+          "statedBy": "Promotion revenue after discounts matches orders that used the promotion.",
+          "steps": [
+            { "do": "expectNumber", "actor": "staff", "testid": "promotion-revenue", "in": { "testid": "promotion-report", "contains": "REPORT10" }, "equals": 80.1 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-promotion-rules-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-promotion-rules-1.0.0.json
new file mode 100644
index 00000000000..057ca91e8e0
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-promotion-rules-1.0.0.json
@@ -0,0 +1,51 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Promotion rules",
+  "features": [
+    {
+      "id": 620,
+      "name": "Staff-managed promotion rules",
+      "actors": ["staff", "customer"],
+      "setup": [
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "signUp", "actor": "customer", "name": "promotion-customer" }
+      ],
+      "criteria": [
+        {
+          "id": "620a",
+          "desc": "staff can save every bounded promotion value",
+          "points": 2,
+          "statedBy": "Staff can create a promotion code with a discount, active period, and redemption limit.",
+          "steps": [
+            { "do": "click", "actor": "staff", "testid": "promotions-link" },
+            { "do": "fill", "actor": "staff", "testid": "promotion-code", "text": "SAVE10" },
+            { "do": "fill", "actor": "staff", "testid": "promotion-discount", "text": "10" },
+            { "do": "fill", "actor": "staff", "testid": "promotion-start", "text": "2099-01-01T00:00" },
+            { "do": "fill", "actor": "staff", "testid": "promotion-end", "text": "2099-12-31T23:59" },
+            { "do": "fill", "actor": "staff", "testid": "promotion-limit", "text": "2" },
+            { "do": "click", "actor": "staff", "testid": "promotion-submit" },
+            { "do": "expectNumber", "actor": "staff", "testid": "promotion-discount", "in": { "testid": "promotion-item", "contains": "SAVE10" }, "equals": 10 },
+            { "do": "expect", "actor": "staff", "testid": "promotion-start", "in": { "testid": "promotion-item", "contains": "SAVE10" }, "contains": "2099-01-01" },
+            { "do": "expect", "actor": "staff", "testid": "promotion-end", "in": { "testid": "promotion-item", "contains": "SAVE10" }, "contains": "2099-12-31" },
+            { "do": "expectNumber", "actor": "staff", "testid": "promotion-limit", "in": { "testid": "promotion-item", "contains": "SAVE10" }, "equals": 2 }
+          ]
+        },
+        {
+          "id": "620b",
+          "desc": "customers cannot open promotion management",
+          "points": 2,
+          "statedBy": "Customers cannot manage promotion rules.",
+          "steps": [
+            { "do": "expect", "actor": "customer", "testid": "promotions-link", "absent": true },
+            { "do": "replayAs", "actor": "customer", "from": "staff", "match": "SAVE10", "swap": { "find": "SAVE10", "with": "HACK10" }, "namedAction": { "id": "createPromotion", "path": "/api/promotions", "reducer": "create_promotion", "args": ["SAVE10", 10, 4070908800000000, 4102444740000000, 2], "params": [{ "name": "code", "in": "body" }, { "name": "discountPercent", "in": "body" }, { "name": "startMicros", "in": "body" }, { "name": "endMicros", "in": "body" }, { "name": "usageLimit", "in": "body" }] }, "settleMs": 1500 },
+            { "do": "expectReplayRejected", "actor": "customer" },
+            { "do": "expect", "actor": "staff", "testid": "promotion-item", "contains": "HACK10", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-purchasing-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-purchasing-1.0.0.json
new file mode 100644
index 00000000000..144fb45ce9d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-purchasing-1.0.0.json
@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Purchasing and orders",
+  "features": [
+    {
+      "id": 3,
+      "name": "Purchase order history",
+      "actors": ["buyer"],
+      "setup": [
+        { "do": "signUp", "actor": "buyer", "name": "purchase-buyer" }
+      ],
+      "criteria": [
+        {
+          "id": "3c",
+          "desc": "the purchase is recorded in the buyer's order history at the price paid",
+          "points": 1,
+          "statedBy": "A purchase creates an order for the customer at the price paid.",
+          "steps": [
+            { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Coffee Grinder" } },
+            { "do": "click", "actor": "buyer", "testid": "orders-toggle" },
+            { "do": "expect", "actor": "buyer", "testid": "order-item", "contains": "Coffee Grinder" },
+            { "do": "expectNumber", "actor": "buyer", "testid": "order-total", "in": { "testid": "order-item", "contains": "Coffee Grinder" }, "equals": 64 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-recommendation-feedback-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-recommendation-feedback-1.0.0.json
new file mode 100644
index 00000000000..eea6d4d2687
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-recommendation-feedback-1.0.0.json
@@ -0,0 +1,42 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Recommendation feedback",
+  "features": [
+    {
+      "id": 504,
+      "name": "Dismissal is durable and private",
+      "actors": ["customer", "other"],
+      "setup": [
+        { "do": "signUp", "actor": "customer", "name": "feedback-owner" },
+        { "do": "click", "actor": "customer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" } },
+        { "do": "signUp", "actor": "other", "name": "feedback-other" },
+        { "do": "click", "actor": "other", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Bluetooth Speaker" } }
+      ],
+      "criteria": [
+        {
+          "id": "504a",
+          "desc": "a dismissed recommendation stays absent after reload",
+          "points": 2,
+          "statedBy": "A dismissed recommendation stays dismissed for that customer.",
+          "steps": [
+            { "do": "click", "actor": "customer", "testid": "dismiss-recommendation", "in": { "testid": "recommended-item", "contains": "Headphones" } },
+            { "do": "reload", "actor": "customer", "settleMs": 3000 },
+            { "do": "expect", "actor": "customer", "testid": "recommended-item", "contains": "Headphones", "absent": true }
+          ]
+        },
+        {
+          "id": "504b",
+          "desc": "one customer's dismissal does not hide another customer's result",
+          "points": 2,
+          "statedBy": "Recommendation feedback belongs to one customer.",
+          "steps": [
+            { "do": "expect", "actor": "other", "testid": "recommended-item", "contains": "Headphones" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-review-access-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-review-access-1.0.0.json
new file mode 100644
index 00000000000..3728af1d77f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-review-access-1.0.0.json
@@ -0,0 +1,55 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 3,
+  "name": "Review access",
+  "features": [
+    {
+      "id": 618,
+      "name": "Review access",
+      "actors": ["owner", "stranger"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "review-owner" },
+        { "do": "signUp", "actor": "stranger", "name": "review-stranger" },
+        { "do": "click", "actor": "owner", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } },
+        { "do": "click", "actor": "owner", "testid": "item-name", "in": { "testid": "item-card", "contains": "Keyboard" } }
+      ],
+      "criteria": [
+        {
+          "id": "618a",
+          "desc": "the server refuses a review from a customer who did not buy the item",
+          "points": 2,
+          "statedBy": "Only a customer who bought an item can review it.",
+          "steps": [
+            {
+              "do": "replayAs",
+              "actor": "stranger",
+              "from": "owner",
+              "match": "never bought this",
+              "namedAction": {
+                "id": "submitReview",
+                "path": "/api/items/:id/reviews",
+                "method": "POST",
+                "reducer": "submit_review",
+                "args": [0, 5, "never bought this"],
+                "params": [
+                  { "name": "itemId", "in": "path", "placeholder": ":id", "wireType": "u64" },
+                  { "name": "rating", "in": "body" },
+                  { "name": "comment", "in": "body" }
+                ]
+              },
+              "namedTarget": {
+                "testid": "review-submit",
+                "attribute": "data-review-item-id",
+                "valueType": "number"
+              },
+              "settleMs": 1500
+            },
+            { "do": "expectReplayRejected", "actor": "stranger" },
+            { "do": "expect", "actor": "owner", "testid": "review-item", "contains": "never bought this", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-signed-out-purchase-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-signed-out-purchase-1.0.0.json
new file mode 100644
index 00000000000..d9c315e16d5
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-signed-out-purchase-1.0.0.json
@@ -0,0 +1,28 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Progression signed-out purchase access",
+  "features": [
+    {
+      "id": 3,
+      "name": "Buying",
+      "actors": ["visitor"],
+      "setup": [
+        { "do": "expect", "actor": "visitor", "testid": "item-card", "contains": "Keyboard" }
+      ],
+      "criteria": [
+        {
+          "id": "3a",
+          "desc": "a signed-out visitor cannot buy an item",
+          "points": 1,
+          "statedBy": "buy actions are unavailable while signed out",
+          "steps": [
+            { "do": "expectUnavailable", "actor": "visitor", "testid": "buy-now" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-access-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-access-1.0.0.json
new file mode 100644
index 00000000000..38d2723e21e
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-access-1.0.0.json
@@ -0,0 +1,40 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Staff access",
+  "features": [
+    {
+      "id": 601,
+      "name": "Staff access",
+      "actors": ["customer", "staff", "admin"],
+      "setup": [],
+      "criteria": [
+        {
+          "id": "601a",
+          "desc": "staff and administrators can sign in and open staff tools",
+          "points": 2,
+          "statedBy": "Staff and administrators can sign in and use staff areas.",
+          "steps": [
+            { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+            { "do": "expect", "actor": "staff", "testid": "staff-link", "within": 6000 },
+            { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+            { "do": "expect", "actor": "admin", "testid": "staff-link", "within": 6000 }
+          ]
+        },
+        {
+          "id": "601b",
+          "desc": "customers cannot open staff tools",
+          "points": 2,
+          "statedBy": "Customers cannot open staff tools.",
+          "steps": [
+            { "do": "signIn", "actor": "customer", "name": "customer", "password": "stackbench-customer-2026", "exact": true },
+            { "do": "expect", "actor": "customer", "testid": "staff-link", "absent": true },
+            { "do": "expect", "actor": "customer", "testid": "admin-link", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-activity-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-activity-1.0.0.json
new file mode 100644
index 00000000000..372badceb6c
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-activity-1.0.0.json
@@ -0,0 +1,51 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Staff activity history",
+  "features": [
+    {
+      "id": 624,
+      "name": "Attributable staff activity",
+      "actors": ["admin", "staff", "customer"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "signIn", "actor": "customer", "name": "customer", "password": "stackbench-customer-2026", "exact": true },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-name", "text": "Activity Mug" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-category", "text": "Kitchen" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-price", "text": "43.00" },
+        { "do": "fill", "actor": "admin", "testid": "catalog-variants", "text": "Green" },
+        { "do": "click", "actor": "admin", "testid": "catalog-save" }
+      ],
+      "criteria": [
+        {
+          "id": "624a",
+          "desc": "an administrative change records its actor, action, subject, and time",
+          "points": 3,
+          "statedBy": "Each administrative change identifies its actor, action, subject, and time.",
+          "steps": [
+            { "do": "click", "actor": "staff", "testid": "staff-link" },
+            { "do": "click", "actor": "staff", "testid": "activity-link" },
+            { "do": "expect", "actor": "staff", "testid": "activity-entry", "contains": "Activity Mug", "within": 10000 },
+            { "do": "expect", "actor": "staff", "testid": "activity-actor", "in": { "testid": "activity-entry", "contains": "Activity Mug" }, "contains": "admin" },
+            { "do": "expect", "actor": "staff", "testid": "activity-action", "in": { "testid": "activity-entry", "contains": "Activity Mug" }, "contains": "creat" },
+            { "do": "expect", "actor": "staff", "testid": "activity-subject", "in": { "testid": "activity-entry", "contains": "Activity Mug" }, "contains": "Activity Mug" },
+            { "do": "expect", "actor": "staff", "testid": "activity-time", "in": { "testid": "activity-entry", "contains": "Activity Mug" } }
+          ]
+        },
+        {
+          "id": "624b",
+          "desc": "customers cannot open staff activity history",
+          "points": 2,
+          "statedBy": "Customers cannot open staff activity history.",
+          "steps": [
+            { "do": "expect", "actor": "customer", "testid": "activity-link", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-roles-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-roles-1.0.0.json
new file mode 100644
index 00000000000..69cad1afd53
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-roles-1.0.0.json
@@ -0,0 +1,52 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Staff roles",
+  "features": [
+    {
+      "id": 621,
+      "name": "Staff roles",
+      "actors": ["admin", "replayAdmin", "staff"],
+      "setup": [],
+      "criteria": [
+        {
+          "id": "621a",
+          "desc": "an administrator can assign a staff role",
+          "points": 2,
+          "statedBy": "An administrator can assign a role to an existing staff account.",
+          "steps": [
+            { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+            { "do": "expect", "actor": "admin", "testid": "staff-link", "within": 6000 },
+            { "do": "click", "actor": "admin", "testid": "staff-link" },
+            { "do": "fill", "actor": "admin", "testid": "staff-role-select", "in": { "testid": "staff-role-row", "contains": "staff" }, "text": "inventory" },
+            { "do": "click", "actor": "admin", "testid": "staff-role-save", "in": { "testid": "staff-role-row", "contains": "staff" } },
+            { "do": "reload", "actor": "admin", "settleMs": 2500 },
+            { "do": "expect", "actor": "admin", "testid": "staff-link", "within": 6000 },
+            { "do": "click", "actor": "admin", "testid": "staff-link" },
+            { "do": "expect", "actor": "admin", "testid": "staff-role-select", "in": { "testid": "staff-role-row", "contains": "staff" }, "value": "inventory", "within": 10000 }
+          ]
+        },
+        {
+          "id": "621b",
+          "desc": "a staff member cannot assign roles through the UI or a replayed request",
+          "points": 2,
+          "statedBy": "A staff member cannot assign or change roles.",
+          "steps": [
+            { "do": "signIn", "actor": "replayAdmin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+            { "do": "expect", "actor": "replayAdmin", "testid": "staff-link", "within": 6000 },
+            { "do": "click", "actor": "replayAdmin", "testid": "staff-link" },
+            { "do": "fill", "actor": "replayAdmin", "testid": "staff-role-select", "in": { "testid": "staff-role-row", "contains": "staff" }, "text": "inventory" },
+            { "do": "click", "actor": "replayAdmin", "testid": "staff-role-save", "in": { "testid": "staff-role-row", "contains": "staff" } },
+            { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+            { "do": "click", "actor": "staff", "testid": "staff-link" },
+            { "do": "expect", "actor": "staff", "testid": "staff-role-save", "absent": true },
+            { "do": "replayAs", "actor": "staff", "from": "replayAdmin", "match": "role", "namedAction": { "id": "assignStaffRole", "path": "/api/staff/:id/role", "method": "PUT", "reducer": "assign_staff_role", "args": [0, "inventory"], "params": [{ "name": "accountId", "in": "path", "placeholder": ":id", "wireType": "u64" }, { "name": "role", "in": "body" }] }, "namedTarget": { "testid": "staff-role-row", "contains": "staff", "attribute": "data-account-id", "valueType": "number" }, "settleMs": 1500 },
+            { "do": "expectReplayRejected", "actor": "staff" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-roles-1.0.1.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-roles-1.0.1.json
new file mode 100644
index 00000000000..92ab6d67cea
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-staff-roles-1.0.1.json
@@ -0,0 +1,62 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Staff roles",
+  "features": [
+    {
+      "id": 621,
+      "name": "Staff roles",
+      "actors": ["admin", "replayAdmin", "staff"],
+      "setup": [
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "expect", "actor": "admin", "testid": "admin-link", "within": 6000 },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "fill", "actor": "admin", "testid": "staff-role-select", "in": { "testid": "staff-role-row", "contains": "staff" }, "text": "inventory" },
+        { "do": "click", "actor": "admin", "testid": "staff-role-save", "in": { "testid": "staff-role-row", "contains": "staff" } }
+      ],
+      "criteria": [
+        {
+          "id": "621c",
+          "desc": "an administrator can assign a staff role",
+          "points": 1,
+          "statedBy": "An administrator can assign a role to an existing staff account.",
+          "steps": [
+            { "do": "expect", "actor": "admin", "testid": "staff-role-select", "in": { "testid": "staff-role-row", "contains": "staff" }, "value": "inventory", "within": 10000 }
+          ]
+        },
+        {
+          "id": "621a",
+          "desc": "an assigned staff role survives a reload",
+          "points": 2,
+          "statedBy": "Assigned staff roles persist.",
+          "steps": [
+            { "do": "reload", "actor": "admin", "settleMs": 2500 },
+            { "do": "expect", "actor": "admin", "testid": "admin-link", "within": 6000 },
+            { "do": "click", "actor": "admin", "testid": "admin-link" },
+            { "do": "expect", "actor": "admin", "testid": "staff-role-select", "in": { "testid": "staff-role-row", "contains": "staff" }, "value": "inventory", "within": 10000 }
+          ]
+        },
+        {
+          "id": "621b",
+          "desc": "a staff member cannot assign roles through the UI or a replayed request",
+          "points": 2,
+          "statedBy": "A staff member cannot assign or change roles.",
+          "steps": [
+            { "do": "signIn", "actor": "replayAdmin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+            { "do": "expect", "actor": "replayAdmin", "testid": "admin-link", "within": 6000 },
+            { "do": "click", "actor": "replayAdmin", "testid": "admin-link" },
+            { "do": "fill", "actor": "replayAdmin", "testid": "staff-role-select", "in": { "testid": "staff-role-row", "contains": "staff" }, "text": "inventory" },
+            { "do": "click", "actor": "replayAdmin", "testid": "staff-role-save", "in": { "testid": "staff-role-row", "contains": "staff" } },
+            { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+            { "do": "click", "actor": "staff", "testid": "staff-link" },
+            { "do": "expect", "actor": "staff", "testid": "staff-role-save", "absent": true },
+            { "do": "replayAs", "actor": "staff", "from": "replayAdmin", "match": "role", "namedAction": { "id": "assignStaffRole", "path": "/api/staff/:id/role", "method": "PUT", "reducer": "assign_staff_role", "args": [0, "inventory"], "params": [{ "name": "accountId", "in": "path", "placeholder": ":id", "wireType": "u64" }, { "name": "role", "in": "body" }] }, "namedTarget": { "testid": "staff-role-row", "contains": "staff", "attribute": "data-account-id", "valueType": "number" }, "settleMs": 1500 },
+            { "do": "expectReplayRejected", "actor": "staff" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-stock-alerts-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-stock-alerts-1.0.0.json
new file mode 100644
index 00000000000..15ddde4611f
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-stock-alerts-1.0.0.json
@@ -0,0 +1,62 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Stock alerts",
+  "features": [
+    {
+      "id": 631,
+      "name": "Private one-time stock alerts",
+      "actors": ["subscriber", "other", "admin"],
+      "setup": [
+        { "do": "signUp", "actor": "subscriber", "name": "stock-subscriber" },
+        { "do": "signUp", "actor": "other", "name": "stock-other" },
+        { "do": "signIn", "actor": "admin", "name": "admin", "password": "stackbench-admin-2026", "exact": true },
+        { "do": "dbSetStock", "item": "Air Purifier", "warehouse": "East", "quantity": 0, "settleMs": 1000 },
+        { "do": "dbSetStock", "item": "Air Purifier", "warehouse": "West", "quantity": 0, "settleMs": 1000 },
+        { "do": "reload", "actor": "subscriber", "settleMs": 1000 },
+        { "do": "click", "actor": "subscriber", "testid": "stock-alert", "in": { "testid": "item-card", "contains": "Air Purifier" } },
+        { "do": "click", "actor": "admin", "testid": "admin-link" },
+        { "do": "fill", "actor": "admin", "testid": "restock-input", "text": "5", "in": { "testid": "admin-location-row", "containsAll": ["Air Purifier", "East"] } },
+        { "do": "click", "actor": "admin", "testid": "restock-submit", "in": { "testid": "admin-location-row", "containsAll": ["Air Purifier", "East"] } }
+      ],
+      "criteria": [
+        {
+          "id": "631c",
+          "desc": "restored stock sends the requested alert",
+          "points": 1,
+          "statedBy": "Show an alert when stock returns.",
+          "steps": [
+            { "do": "click", "actor": "subscriber", "testid": "notifications-toggle" },
+            { "do": "expect", "actor": "subscriber", "testid": "notification-item", "contains": "Air Purifier", "within": 10000 },
+            { "do": "click", "actor": "subscriber", "testid": "notifications-toggle" }
+          ]
+        },
+        {
+          "id": "631a",
+          "desc": "restored stock sends one alert and later restocks do not duplicate it",
+          "points": 2,
+          "statedBy": "A stock request creates one alert when stock returns.",
+          "steps": [
+            { "do": "click", "actor": "subscriber", "testid": "notifications-toggle" },
+            { "do": "expectElementCount", "actor": "subscriber", "testid": "notification-item", "contains": "Air Purifier", "equals": 1, "within": 10000 },
+            { "do": "fill", "actor": "admin", "testid": "restock-input", "text": "5", "in": { "testid": "admin-location-row", "containsAll": ["Air Purifier", "East"] } },
+            { "do": "click", "actor": "admin", "testid": "restock-submit", "in": { "testid": "admin-location-row", "containsAll": ["Air Purifier", "East"] }, "settleMs": 1500 },
+            { "do": "expectElementCount", "actor": "subscriber", "testid": "notification-item", "contains": "Air Purifier", "equals": 1, "within": 10000 }
+          ]
+        },
+        {
+          "id": "631b",
+          "desc": "a customer who did not request the alert cannot see it",
+          "points": 1,
+          "statedBy": "Stock alerts are private to the requesting customer.",
+          "steps": [
+            { "do": "click", "actor": "other", "testid": "notifications-toggle" },
+            { "do": "expect", "actor": "other", "testid": "notification-item", "contains": "Air Purifier", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-stock-limit-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-stock-limit-1.0.0.json
new file mode 100644
index 00000000000..cfa21ec219d
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-stock-limit-1.0.0.json
@@ -0,0 +1,41 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Progression stock limit",
+  "features": [
+    {
+      "id": 3,
+      "name": "Buying",
+      "actors": ["buyer", "watcher", "visitor"],
+      "setup": [
+        { "do": "dbSetStock", "item": "Desk Lamp", "warehouse": "East", "quantity": 2, "settleMs": 2000 },
+        { "do": "dbSetStock", "item": "Desk Lamp", "warehouse": "West", "quantity": 1, "settleMs": 2000 },
+        { "do": "signUp", "actor": "buyer", "name": "eli" },
+        { "do": "signUp", "actor": "watcher", "name": "fay" }
+      ],
+      "criteria": [
+        {
+          "id": "3d",
+          "desc": "an item sells out visibly, and a checkout exceeding stock is refused and changes nothing",
+          "points": 2,
+          "statedBy": "an item with zero stock cannot be bought",
+          "steps": [
+            { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "wait", "actor": "buyer", "ms": 800 },
+            { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "wait", "actor": "buyer", "ms": 800 },
+            { "do": "click", "actor": "buyer", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "expectNumber", "actor": "buyer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "equals": 0 },
+            { "do": "expect", "actor": "buyer", "testid": "out-of-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" } },
+            { "do": "callAction", "actor": "buyer", "action": "buy", "namedAction": { "id": "buy", "path": "/api/items/:id/buy", "reducer": "buy_now", "args": [0], "params": [{ "name": "itemId", "in": "path", "placeholder": ":id", "wireType": "u64" }] }, "input": { "testid": "item-card", "contains": "Desk Lamp", "attribute": "data-buy-input" }, "settleMs": 2000 },
+            { "do": "expectActionOutcome", "actor": "buyer", "outcome": "validation-refused" },
+            { "do": "reload", "actor": "buyer", "settleMs": 3000 },
+            { "do": "expectNumber", "actor": "buyer", "testid": "item-stock", "in": { "testid": "item-card", "contains": "Desk Lamp" }, "equals": 0 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-history-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-history-1.0.0.json
new file mode 100644
index 00000000000..ca98e9cdd38
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-history-1.0.0.json
@@ -0,0 +1,57 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Customer support history",
+  "features": [
+    {
+      "id": 612,
+      "name": "Customer support history",
+      "actors": ["owner", "other"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "support-owner" },
+        { "do": "click", "actor": "owner", "testid": "support-link" },
+        { "do": "fill", "actor": "owner", "testid": "support-email", "text": "owner@example.com" },
+        { "do": "fill", "actor": "owner", "testid": "support-subject", "text": "Owner ticket" },
+        { "do": "fill", "actor": "owner", "testid": "support-message", "text": "Private account issue." },
+        { "do": "click", "actor": "owner", "testid": "support-submit" },
+        { "do": "expect", "actor": "owner", "testid": "support-reference", "nonEmpty": true },
+        { "do": "signUp", "actor": "other", "name": "support-other" }
+      ],
+      "criteria": [
+        {
+          "id": "612c",
+          "desc": "the customer can view their support ticket history",
+          "points": 1,
+          "statedBy": "Signed-in customers can see their support ticket history.",
+          "steps": [
+            { "do": "click", "actor": "owner", "testid": "support-link" },
+            { "do": "expect", "actor": "owner", "testid": "support-ticket", "contains": "Owner ticket" }
+          ]
+        },
+        {
+          "id": "612a",
+          "desc": "the owner sees the ticket after reload",
+          "points": 2,
+          "statedBy": "A customer's support history persists.",
+          "steps": [
+            { "do": "reload", "actor": "owner", "settleMs": 3000 },
+            { "do": "click", "actor": "owner", "testid": "support-link" },
+            { "do": "expect", "actor": "owner", "testid": "support-ticket", "contains": "Owner ticket" }
+          ]
+        },
+        {
+          "id": "612b",
+          "desc": "another customer cannot see the ticket",
+          "points": 2,
+          "statedBy": "Customers cannot see another customer's support tickets.",
+          "steps": [
+            { "do": "click", "actor": "other", "testid": "support-link" },
+            { "do": "expect", "actor": "other", "testid": "support-ticket", "contains": "Owner ticket", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-intake-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-intake-1.0.0.json
new file mode 100644
index 00000000000..6dda169a1f8
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-intake-1.0.0.json
@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 1,
+  "name": "Support intake",
+  "features": [
+    {
+      "id": 610,
+      "name": "Support intake",
+      "actors": ["visitor"],
+      "setup": [],
+      "criteria": [
+        {
+          "id": "610a",
+          "desc": "a visitor can submit a support ticket and receives a reference",
+          "points": 2,
+          "statedBy": "Anyone can open a support ticket and receives a reference.",
+          "steps": [
+            { "do": "click", "actor": "visitor", "testid": "support-link" },
+            { "do": "fill", "actor": "visitor", "testid": "support-email", "text": "visitor@example.com" },
+            { "do": "fill", "actor": "visitor", "testid": "support-subject", "text": "Damaged package" },
+            { "do": "fill", "actor": "visitor", "testid": "support-message", "text": "The package arrived damaged." },
+            { "do": "click", "actor": "visitor", "testid": "support-submit" },
+            { "do": "expect", "actor": "visitor", "testid": "support-reference", "nonEmpty": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-read-privacy-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-read-privacy-1.0.0.json
new file mode 100644
index 00000000000..842ea261945
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-read-privacy-1.0.0.json
@@ -0,0 +1,36 @@
+{
+  "schemaVersion": 1,
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Support message privacy",
+  "features": [
+    {
+      "id": 619,
+      "name": "Support message privacy",
+      "actors": ["owner", "other"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "private-support-owner" },
+        { "do": "click", "actor": "owner", "testid": "support-link" },
+        { "do": "fill", "actor": "owner", "testid": "support-email", "text": "private@example.com" },
+        { "do": "fill", "actor": "owner", "testid": "support-subject", "text": "Private support case" },
+        { "do": "fill", "actor": "owner", "testid": "support-message", "text": "support-secret-619" },
+        { "do": "click", "actor": "owner", "testid": "support-submit" },
+        { "do": "expect", "actor": "owner", "testid": "support-reference", "nonEmpty": true },
+        { "do": "signUp", "actor": "other", "name": "private-support-other" },
+        { "do": "click", "actor": "other", "testid": "support-link" }
+      ],
+      "criteria": [
+        {
+          "id": "619a",
+          "desc": "a customer's support message is not sent to another customer",
+          "points": 2,
+          "statedBy": "Do not send one customer's support messages to another customer.",
+          "steps": [
+            { "do": "expectReceived", "actor": "owner", "contains": "support-secret-619", "within": 5000 },
+            { "do": "expectNotReceived", "actor": "other", "contains": "support-secret-619", "within": 3000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-refunds-access-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-refunds-access-1.0.0.json
new file mode 100644
index 00000000000..1d553635016
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-refunds-access-1.0.0.json
@@ -0,0 +1,59 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Support refund access",
+  "features": [
+    {
+      "id": 615,
+      "name": "Support refund access",
+      "actors": ["owner", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "refund-access-owner" },
+        { "do": "click", "actor": "owner", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } },
+        { "do": "click", "actor": "owner", "testid": "support-link" },
+        { "do": "fill", "actor": "owner", "testid": "support-subject", "text": "Access refund case" },
+        { "do": "fill", "actor": "owner", "testid": "support-message", "text": "This refund requires staff approval." },
+        { "do": "click", "actor": "owner", "testid": "support-submit" },
+        { "do": "click", "actor": "owner", "testid": "support-order-option", "contains": "Keyboard", "in": { "testid": "support-ticket", "contains": "Access refund case" } },
+        { "do": "click", "actor": "owner", "testid": "support-link-order", "in": { "testid": "support-ticket", "contains": "Access refund case" } },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "615c",
+          "desc": "a customer cannot issue a refund or change its records",
+          "points": 1,
+          "statedBy": "Only authorized staff can refund an order from a support case.",
+          "steps": [
+            { "do": "expect", "actor": "owner", "testid": "support-refund", "absent": true },
+            {
+              "do": "callAction",
+              "actor": "owner",
+              "from": "staff",
+              "action": "supportRefund",
+              "authentication": "actor",
+              "input": { "testid": "support-refund", "attribute": "data-action-input" },
+              "namedAction": {
+                "id": "supportRefund",
+                "path": "/api/support/cases/{caseId}/refund",
+                "method": "POST",
+                "reducer": "support_refund",
+                "args": [0],
+                "params": [{ "name": "caseId", "in": "path", "placeholder": "{caseId}", "wireType": "u64" }]
+              },
+              "settleMs": 1500
+            },
+            { "do": "expectActionOutcome", "actor": "owner", "outcome": "refused" },
+            { "do": "expect", "actor": "owner", "testid": "support-status", "in": { "testid": "support-ticket", "contains": "Access refund case" }, "notContains": "resolved" },
+            { "do": "click", "actor": "owner", "testid": "orders-toggle" },
+            { "do": "expect", "actor": "owner", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "notContains": "refunded" },
+            { "do": "expect", "actor": "owner", "testid": "refund-entry", "contains": "Keyboard", "absent": true }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-refunds-accounting-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-refunds-accounting-1.0.0.json
new file mode 100644
index 00000000000..e24e93bb931
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-refunds-accounting-1.0.0.json
@@ -0,0 +1,46 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Support refund accounting",
+  "features": [
+    {
+      "id": 615,
+      "name": "Support refund accounting",
+      "actors": ["owner", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "refund-accounting-owner" },
+        { "do": "click", "actor": "owner", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } },
+        { "do": "click", "actor": "owner", "testid": "orders-toggle" },
+        { "do": "recordNumber", "actor": "owner", "testid": "order-total", "in": { "testid": "order-item", "contains": "Keyboard" }, "as": "paid-total" },
+        { "do": "click", "actor": "owner", "testid": "support-link" },
+        { "do": "fill", "actor": "owner", "testid": "support-subject", "text": "Accounting refund case" },
+        { "do": "fill", "actor": "owner", "testid": "support-message", "text": "Refund the exact amount paid." },
+        { "do": "click", "actor": "owner", "testid": "support-submit" },
+        { "do": "click", "actor": "owner", "testid": "support-order-option", "contains": "Keyboard", "in": { "testid": "support-ticket", "contains": "Accounting refund case" } },
+        { "do": "click", "actor": "owner", "testid": "support-link-order", "in": { "testid": "support-ticket", "contains": "Accounting refund case" } },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "615b",
+          "desc": "the refund equals the paid total and cannot be applied twice",
+          "points": 1,
+          "statedBy": "The recorded refund equals the amount paid and is applied only once.",
+          "steps": [
+            { "do": "click", "actor": "staff", "testid": "support-refund", "in": { "testid": "support-ticket", "contains": "Accounting refund case" } },
+            { "do": "expectNumber", "actor": "owner", "testid": "support-refund-total", "in": { "testid": "support-ticket", "contains": "Accounting refund case" }, "relativeTo": "paid-total", "plus": 0, "within": 10000 },
+            { "do": "click", "actor": "owner", "testid": "orders-toggle" },
+            { "do": "expectNumber", "actor": "owner", "testid": "order-refund-total", "in": { "testid": "order-item", "contains": "Keyboard" }, "relativeTo": "paid-total", "plus": 0, "within": 10000 },
+            { "do": "expectElementCount", "actor": "owner", "testid": "refund-entry", "contains": "Keyboard", "equals": 1, "within": 10000 },
+            { "do": "replayAs", "actor": "staff", "from": "staff", "match": "refund", "namedAction": { "id": "supportRefund", "path": "/api/support/cases/{caseId}/refund", "method": "POST", "reducer": "support_refund", "args": [0], "params": [{ "name": "caseId", "in": "path", "placeholder": "{caseId}", "wireType": "u64" }] }, "namedTarget": { "testid": "support-ticket", "contains": "Accounting refund case", "attribute": "data-entity-id", "valueType": "number" }, "settleMs": 1500 },
+            { "do": "expectReplayRejected", "actor": "staff" },
+            { "do": "expectElementCount", "actor": "owner", "testid": "refund-entry", "contains": "Keyboard", "equals": 1, "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-refunds-resolution-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-refunds-resolution-1.0.0.json
new file mode 100644
index 00000000000..ec169007bdb
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-refunds-resolution-1.0.0.json
@@ -0,0 +1,40 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 5,
+  "name": "Support refund resolution",
+  "features": [
+    {
+      "id": 615,
+      "name": "Support refund resolution",
+      "actors": ["owner", "staff"],
+      "setup": [
+        { "do": "signUp", "actor": "owner", "name": "refund-resolution-owner" },
+        { "do": "click", "actor": "owner", "testid": "buy-now", "in": { "testid": "item-card", "contains": "Keyboard" } },
+        { "do": "click", "actor": "owner", "testid": "support-link" },
+        { "do": "fill", "actor": "owner", "testid": "support-subject", "text": "Resolution refund case" },
+        { "do": "fill", "actor": "owner", "testid": "support-message", "text": "Please refund my Keyboard order." },
+        { "do": "click", "actor": "owner", "testid": "support-submit" },
+        { "do": "click", "actor": "owner", "testid": "support-order-option", "contains": "Keyboard", "in": { "testid": "support-ticket", "contains": "Resolution refund case" } },
+        { "do": "click", "actor": "owner", "testid": "support-link-order", "in": { "testid": "support-ticket", "contains": "Resolution refund case" } },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "615a",
+          "desc": "an authorized refund resolves the case and updates the order",
+          "points": 2,
+          "statedBy": "Authorized staff can refund an order from its support case.",
+          "steps": [
+            { "do": "click", "actor": "staff", "testid": "support-refund", "in": { "testid": "support-ticket", "contains": "Resolution refund case" } },
+            { "do": "expect", "actor": "owner", "testid": "support-status", "in": { "testid": "support-ticket", "contains": "Resolution refund case" }, "contains": "resolved", "within": 10000 },
+            { "do": "click", "actor": "owner", "testid": "orders-toggle" },
+            { "do": "expect", "actor": "owner", "testid": "order-status", "in": { "testid": "order-item", "contains": "Keyboard" }, "contains": "refunded", "within": 10000 }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-triage-1.0.0.json b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-triage-1.0.0.json
new file mode 100644
index 00000000000..cf679bedf76
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/scenarios/progression-support-triage-1.0.0.json
@@ -0,0 +1,61 @@
+{
+  "schemaVersion": 1,
+  "status": "draft",
+  "track": "ecommerce",
+  "level": 2,
+  "name": "Support triage",
+  "features": [
+    {
+      "id": 611,
+      "name": "Support triage",
+      "actors": ["visitor", "staff"],
+      "setup": [
+        { "do": "click", "actor": "visitor", "testid": "support-link" },
+        { "do": "fill", "actor": "visitor", "testid": "support-email", "text": "triage@example.com" },
+        { "do": "fill", "actor": "visitor", "testid": "support-subject", "text": "Missing item" },
+        { "do": "fill", "actor": "visitor", "testid": "support-message", "text": "One item is missing." },
+        { "do": "click", "actor": "visitor", "testid": "support-submit" },
+        { "do": "expect", "actor": "visitor", "testid": "support-reference", "nonEmpty": true },
+        { "do": "signIn", "actor": "staff", "name": "staff", "password": "stackbench-staff-2026", "exact": true },
+        { "do": "click", "actor": "staff", "testid": "staff-link" }
+      ],
+      "criteria": [
+        {
+          "id": "611a",
+          "desc": "staff can assign a new ticket",
+          "points": 1,
+          "statedBy": "Staff can assign support tickets.",
+          "steps": [
+            { "do": "fill", "actor": "staff", "testid": "support-assignee", "in": { "testid": "support-ticket", "contains": "Missing item" }, "text": "staff" },
+            { "do": "click", "actor": "staff", "testid": "support-update", "in": { "testid": "support-ticket", "contains": "Missing item" } },
+            { "do": "reload", "actor": "staff", "settleMs": 2500 },
+            { "do": "expect", "actor": "staff", "testid": "support-assignee", "in": { "testid": "support-ticket", "contains": "Missing item" }, "value": "staff" }
+          ]
+        },
+        {
+          "id": "611b",
+          "desc": "staff can set a ticket priority",
+          "points": 1,
+          "statedBy": "Staff can set support ticket priority.",
+          "steps": [
+            { "do": "fill", "actor": "staff", "testid": "support-priority", "in": { "testid": "support-ticket", "contains": "Missing item" }, "text": "high" },
+            { "do": "click", "actor": "staff", "testid": "support-update", "in": { "testid": "support-ticket", "contains": "Missing item" } },
+            { "do": "reload", "actor": "staff", "settleMs": 2500 },
+            { "do": "expect", "actor": "staff", "testid": "support-priority", "in": { "testid": "support-ticket", "contains": "Missing item" }, "value": "high" }
+          ]
+        },
+        {
+          "id": "611c",
+          "desc": "staff can change a ticket status",
+          "points": 1,
+          "statedBy": "Staff can change support ticket status.",
+          "steps": [
+            { "do": "fill", "actor": "staff", "testid": "support-status-input", "in": { "testid": "support-ticket", "contains": "Missing item" }, "text": "in progress" },
+            { "do": "click", "actor": "staff", "testid": "support-update", "in": { "testid": "support-ticket", "contains": "Missing item" } },
+            { "do": "expect", "actor": "staff", "testid": "support-status", "in": { "testid": "support-ticket", "contains": "Missing item" }, "contains": "in progress" }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/track.json b/tools/stack-bench/tracks/ecommerce/track.json
new file mode 100644
index 00000000000..0483af13dfb
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/track.json
@@ -0,0 +1,139 @@
+{
+  "schemaVersion": 1,
+  "title": "Shop",
+  "slug": "ecom",
+  "validatedThrough": 0,
+  "plannedThrough": 6,
+  "portOffset": 300,
+  "restartProbe": "/api/items",
+  "reseedOnReset": true,
+  "databaseProvenance": {
+    "action": "signUp",
+    "markerParameter": "username",
+    "body": {
+      "username": "",
+      "password": "stack-bench-provenance-password"
+    }
+  },
+  "suites": {
+    "1": [
+      {
+        "id": "features",
+        "inherit": "none",
+        "spec": "scenarios/01-features.json"
+      },
+      {
+        "id": "invariants",
+        "inherit": "all-higher-levels",
+        "spec": "scenarios/01-invariants.json"
+      },
+      {
+        "id": "contention",
+        "inherit": "all-higher-levels",
+        "spec": "scenarios/01-contention.json"
+      },
+      {
+        "id": "systems",
+        "inherit": "all-higher-levels",
+        "spec": "scenarios/01-systems.json"
+      }
+    ],
+    "2": [
+      {
+        "id": "features",
+        "inherit": "none",
+        "spec": "scenarios/02-features.json"
+      },
+      {
+        "id": "invariants",
+        "inherit": "all-higher-levels",
+        "spec": "scenarios/02-invariants.json"
+      },
+      {
+        "id": "contention",
+        "inherit": "all-higher-levels",
+        "spec": "scenarios/01-contention.json"
+      }
+    ],
+    "3": [
+      {
+        "id": "features",
+        "inherit": "none",
+        "spec": "scenarios/03-features.json"
+      },
+      {
+        "id": "invariants",
+        "inherit": "all-higher-levels",
+        "spec": "scenarios/03-invariants.json"
+      },
+      {
+        "id": "systems",
+        "inherit": "all-higher-levels",
+        "spec": "scenarios/01-systems.json"
+      }
+    ]
+  },
+  "actions": [
+    {
+      "id": "buy",
+      "path": "/api/items/00000000-0000-0000-0000-000000000000/buy",
+      "reducer": "buy_now",
+      "args": [
+        0
+      ]
+    },
+    {
+      "id": "addToCart",
+      "path": "/api/cart",
+      "reducer": "add_to_cart",
+      "args": [
+        0,
+        1
+      ]
+    },
+    {
+      "id": "checkout",
+      "path": "/api/checkout",
+      "reducer": "checkout",
+      "args": []
+    },
+    {
+      "id": "restock",
+      "path": "/api/admin/restock",
+      "reducer": "admin_restock",
+      "args": [
+        0,
+        0,
+        1
+      ]
+    },
+    {
+      "id": "signUp",
+      "path": "/api/auth/signup",
+      "reducer": "sign_up",
+      "args": [
+        "",
+        ""
+      ],
+      "params": [
+        {
+          "name": "username",
+          "in": "body"
+        },
+        {
+          "name": "password",
+          "in": "body"
+        }
+      ]
+    },
+    {
+      "id": "signIn",
+      "path": "/api/auth/signin",
+      "reducer": "sign_in",
+      "args": [
+        "",
+        ""
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/ecommerce/walk.ts b/tools/stack-bench/tracks/ecommerce/walk.ts
new file mode 100644
index 00000000000..820e7330c06
--- /dev/null
+++ b/tools/stack-bench/tracks/ecommerce/walk.ts
@@ -0,0 +1,199 @@
+// This contract walk uses one browser and one customer; scenarios own multi-actor behavior.
+
+import { applyCredentialAliases } from '../../src/composition/credential-aliases.js';
+import type { Locator } from 'playwright';
+import type { LintHook, LintWalkContext } from '../../linter/lint.js';
+
+const ADMIN_USER = 'admin';
+const ADMIN_PASS = 'stackbench-admin-2026';
+
+export const seededAdminPassword = (credentialAliases: unknown): string =>
+  applyCredentialAliases(ADMIN_PASS, credentialAliases);
+
+// SEARCH_ONLY is outside the opening list so search must cover the full catalog.
+const CART_ITEM = 'Headphones';
+const REVIEW_ITEM = 'Air Purifier';
+const SEARCH_ONLY = 'Webcam';
+
+export async function walk({ page, args, byStage, blocked, checkHook, results, uniq, tid, CHECK_TIMEOUT }: LintWalkContext): Promise<void> {
+  const fail = (h: LintHook, detail: string): void => { results.push({ id: h.id, status: 'FAIL', detail }); };
+  const pass = (h: LintHook): void => { results.push({ id: h.id, status: 'PASS' }); };
+  const click = async (locator: Locator, label: string): Promise<void> => {
+    try {
+      await locator.click({ timeout: CHECK_TIMEOUT });
+    } catch {
+      // A live UI can replace a button while state arrives. Resolve the locator
+      // again once before declaring that the product cannot perform the action.
+      await page.waitForTimeout(200);
+      try {
+        await locator.click({ timeout: CHECK_TIMEOUT });
+      } catch (error: unknown) {
+        throw new Error(`${label}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+      }
+    }
+  };
+
+  await page.goto(args.url ?? '', { waitUntil: 'domcontentloaded', timeout: 15000 });
+  const hasStage = (...stages: string[]): boolean => stages.some(stage => byStage(stage).length > 0);
+
+  // Stage: landing — the storefront and its prices are public, so everything
+  // here must resolve before anyone signs in.
+  let ok = true;
+  for (const h of byStage('landing')) ok = (await checkHook(page, h, results)) && ok;
+
+  if (ok && hasStage('storefront', 'item', 'item-after-review', 'cart',
+    'after-checkout', 'admin', 'operations', 'fulfilment')) {
+    // Use alphanumeric credentials because username character rules are not part of the contract.
+    await page.locator(tid('signup-username')).first().fill(`lint${uniq}`);
+    await page.locator(tid('signup-password')).first().fill(`pwlint${uniq}`);
+    await click(page.locator(tid('signup-submit')).first(), 'submit sign-up');
+  }
+
+  // Stage: storefront — signing up turns the buying controls on.
+  if (ok && byStage('storefront').length) {
+    for (const h of byStage('storefront')) ok = (await checkHook(page, h, results)) && ok;
+  } else blocked('storefront');
+
+  // Reviews are gated on having bought the item, so the walk earns the right
+  // before it exercises the form — otherwise a spec-compliant refusal would
+  // read as a missing hook.
+  if (ok && byStage('item-after-review').length) {
+    await click(page.locator(tid('item-card'), { hasText: REVIEW_ITEM }).first()
+      .locator(tid('buy-now')).first(), `buy ${REVIEW_ITEM}`);
+    await page.waitForTimeout(1200);
+  }
+
+  // Stage: search-results — search for an item the storefront is not showing.
+  if (ok && byStage('search-results').length) {
+    const search = page.locator(tid('search-input')).first();
+    await search.fill(SEARCH_ONLY);
+    await search.press('Enter').catch(() => {});
+    for (const h of byStage('search-results')) {
+      if (h.id === 'search-results') {
+        const hit = page.locator(tid('search-results')).first();
+        try {
+          await hit.waitFor({ state: 'attached', timeout: CHECK_TIMEOUT });
+          const card = hit.locator(tid('item-card'), { hasText: SEARCH_ONLY }).first();
+          await card.waitFor({ state: 'visible', timeout: CHECK_TIMEOUT });
+          pass(h);
+        } catch {
+          fail(h, `searched for "${SEARCH_ONLY}" but no ${tid('item-card')} containing it appeared inside ${tid(h.id)} — search must cover the whole catalogue, not just the items on the storefront`);
+          ok = false;
+        }
+      } else ok = (await checkHook(page, h, results)) && ok;
+    }
+    await search.fill('');
+    await search.press('Enter').catch(() => {});
+  } else blocked('search-results');
+
+  // Stage: item — open one item's detail view from its card.
+  if (ok && byStage('item').length) {
+    const card = page.locator(tid('item-card'), { hasText: REVIEW_ITEM }).first();
+    try {
+      await card.waitFor({ state: 'visible', timeout: CHECK_TIMEOUT });
+      await card.locator(tid('item-name')).first().click();
+    } catch {
+      await card.click().catch(() => {});
+    }
+    for (const h of byStage('item')) ok = (await checkHook(page, h, results)) && ok;
+  } else blocked('item');
+
+  // Stage: item-after-review — the review must arrive without a reload.
+  const probe = `lint review ${uniq}`;
+  if (ok && byStage('item-after-review').length) {
+    const rating = page.locator(tid('review-rating')).first();
+    // A rating control can be a select, a number input or a row of buttons.
+    await rating.selectOption('5')
+      .catch(async () => { await rating.fill('5').catch(async () => { await rating.click().catch(() => {}); }); });
+    await page.locator(tid('review-input')).first().fill(probe);
+    await click(page.locator(tid('review-submit')).first(), 'submit review');
+    for (const h of byStage('item-after-review')) {
+      const loc = page.locator(tid(h.id), { hasText: probe }).first();
+      try {
+        await loc.waitFor({ state: 'visible', timeout: CHECK_TIMEOUT });
+        pass(h);
+      } catch {
+        fail(h, `submitted review "${probe}" but no ${tid(h.id)} containing it appeared without a reload — expected: ${h.element}`);
+        ok = false;
+      }
+    }
+  } else blocked('item-after-review');
+
+  // Stage: cart — add a known item, then open the cart.
+  if (ok && byStage('cart').length) {
+    // Search reaches the product regardless of ranking or page size.
+    const search = page.locator(tid('search-input')).first();
+    await search.fill(CART_ITEM);
+    await search.press('Enter').catch(() => {});
+    const card = page.locator(tid('search-results')).first()
+      .locator(tid('item-card'), { hasText: CART_ITEM }).first();
+    await card.waitFor({ state: 'visible', timeout: CHECK_TIMEOUT });
+    await click(card.locator(tid('add-to-cart')).first(), `add ${CART_ITEM} to cart`);
+    await search.fill('');
+    await search.press('Enter').catch(() => {});
+    await click(page.locator(tid('cart-toggle')).first(), 'open cart');
+    for (const h of byStage('cart')) ok = (await checkHook(page, h, results)) && ok;
+  } else blocked('cart');
+
+  // Stage: after-checkout — the order must show the item that was bought.
+  if (ok && byStage('after-checkout').length) {
+    await click(page.locator(tid('checkout-submit')).first(), 'submit checkout');
+    await page.waitForTimeout(1500);
+    const orders = page.locator(tid('orders-toggle')).first();
+    if (await orders.isVisible().catch(() => false)) await orders.click();
+    for (const h of byStage('after-checkout')) {
+      if (h.id === 'order-item') {
+        const loc = page.locator(tid(h.id), { hasText: CART_ITEM }).first();
+        try {
+          await loc.waitFor({ state: 'visible', timeout: CHECK_TIMEOUT });
+          pass(h);
+        } catch {
+          fail(h, `checked out a cart containing "${CART_ITEM}" but no ${tid(h.id)} naming it appeared — expected: ${h.element}`);
+          ok = false;
+        }
+      } else ok = (await checkHook(page, h, results)) && ok;
+    }
+  } else blocked('after-checkout');
+
+  // Stage: admin — a separate account with its own area. Signing out and back
+  // in as the seeded admin is the only way to reach it.
+  if (ok && hasStage('admin', 'operations', 'fulfilment')) {
+    await click(page.locator(tid('signout')).first(), 'sign out');
+    await page.waitForTimeout(1000);
+    const toggle = page.locator(tid('signin-toggle')).first();
+    if (await toggle.count()) await toggle.click().catch(() => {});
+    await page.locator(tid('signin-username')).first().fill(ADMIN_USER);
+    await page.locator(tid('signin-password')).first().fill(
+      seededAdminPassword(args.credentialAliases));
+    await click(page.locator(tid('signin-submit')).first(), 'submit sign-in');
+    await page.waitForTimeout(1500);
+    const link = page.locator(tid('admin-link')).first();
+    if (await link.isVisible().catch(() => false)) await link.click();
+    for (const h of byStage('admin')) await checkHook(page, h, results); // check all, non-blocking
+
+    // L2 adds controls to the admin panel itself. Check all of them before
+    // navigating to fulfilment so a missing control cannot be hidden by the
+    // later page transition.
+    for (const h of byStage('operations')) await checkHook(page, h, results);
+
+    // The pending order makes fulfillment controls observable.
+    const fulfilmentHooks = byStage('fulfilment');
+    if (fulfilmentHooks.length) {
+      const staffLink = page.locator(tid('staff-link')).first();
+      if (await staffLink.isVisible().catch(() => false)) {
+        await staffLink.click();
+        for (const h of fulfilmentHooks) await checkHook(page, h, results);
+      } else {
+        blocked('fulfilment');
+      }
+    }
+  } else {
+    blocked('admin');
+    blocked('operations');
+    blocked('fulfilment');
+  }
+
+  for (const h of byStage('scenario')) {
+    results.push({ id: h.id, status: 'SCENARIO', detail: h.note });
+  }
+}
diff --git a/tools/stack-bench/tracks/loop/contracts/01-loop.json b/tools/stack-bench/tracks/loop/contracts/01-loop.json
new file mode 100644
index 00000000000..231aa09452d
--- /dev/null
+++ b/tools/stack-bench/tracks/loop/contracts/01-loop.json
@@ -0,0 +1,11 @@
+{
+  "level": 1,
+  "hooks": [
+    {
+      "id": "app-title",
+      "element": "the visible application title",
+      "stage": "landing",
+      "check": "visible"
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/loop/prompts/01-loop.md b/tools/stack-bench/tracks/loop/prompts/01-loop.md
new file mode 100644
index 00000000000..43ad76d91a5
--- /dev/null
+++ b/tools/stack-bench/tracks/loop/prompts/01-loop.md
@@ -0,0 +1,4 @@
+# Loop fixture
+
+Expose a visible heading with `id="app-title"` whose text is
+`Fixture Chat`.
diff --git a/tools/stack-bench/tracks/loop/scenarios/01-loop.json b/tools/stack-bench/tracks/loop/scenarios/01-loop.json
new file mode 100644
index 00000000000..855ced9f9a4
--- /dev/null
+++ b/tools/stack-bench/tracks/loop/scenarios/01-loop.json
@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "level": 1,
+  "features": [
+    {
+      "id": 1,
+      "name": "Application title",
+      "actors": ["viewer"],
+      "setup": [],
+      "criteria": [
+        {
+          "id": "title-visible",
+          "desc": "The application title is visible",
+          "points": 1,
+          "statedBy": "Fixture Chat",
+          "steps": [
+            {
+              "do": "expect",
+              "actor": "viewer",
+              "testid": "app-title",
+              "contains": "Fixture Chat",
+              "within": 1000
+            }
+          ]
+        }
+      ]
+    }
+  ]
+}
diff --git a/tools/stack-bench/tracks/loop/track.json b/tools/stack-bench/tracks/loop/track.json
new file mode 100644
index 00000000000..d51e37f4080
--- /dev/null
+++ b/tools/stack-bench/tracks/loop/track.json
@@ -0,0 +1,19 @@
+{
+  "schemaVersion": 1,
+  "title": "Loop Fixture",
+  "slug": "loop",
+  "internal": true,
+  "validatedThrough": 1,
+  "plannedThrough": 1,
+  "portOffset": 600,
+  "restartProbe": "/",
+  "suites": {
+    "1": [
+      {
+        "id": "features",
+        "inherit": "none",
+        "spec": "scenarios/01-loop.json"
+      }
+    ]
+  }
+}
diff --git a/tools/stack-bench/tracks/loop/walk.ts b/tools/stack-bench/tracks/loop/walk.ts
new file mode 100644
index 00000000000..8972ece9b76
--- /dev/null
+++ b/tools/stack-bench/tracks/loop/walk.ts
@@ -0,0 +1,6 @@
+import type { LintWalkContext } from '../../linter/lint.js';
+
+export async function walk({ page, args, byStage, checkHook, results }: LintWalkContext): Promise<void> {
+  await page.goto(args.url ?? '');
+  for (const hook of byStage('landing')) await checkHook(page, hook, results);
+}
diff --git a/tools/stack-bench/tsconfig.build.json b/tools/stack-bench/tsconfig.build.json
new file mode 100644
index 00000000000..182363d1fbb
--- /dev/null
+++ b/tools/stack-bench/tsconfig.build.json
@@ -0,0 +1,10 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "noEmit": false,
+    "rootDir": ".",
+    "outDir": "dist",
+    "sourceMap": true,
+    "noEmitOnError": true
+  }
+}
diff --git a/tools/stack-bench/tsconfig.json b/tools/stack-bench/tsconfig.json
new file mode 100644
index 00000000000..28321a6f1e6
--- /dev/null
+++ b/tools/stack-bench/tsconfig.json
@@ -0,0 +1,32 @@
+{
+  "compilerOptions": {
+    "target": "ES2023",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "lib": ["ES2023"],
+    "types": ["node"],
+    "strict": true,
+    "noUncheckedIndexedAccess": true,
+    "noUnusedLocals": true,
+    "noUnusedParameters": true,
+    "forceConsistentCasingInFileNames": true,
+    "verbatimModuleSyntax": true,
+    "skipLibCheck": false,
+    "noEmit": true
+  },
+  "include": [
+    "appliance/**/*.ts",
+    "commands/**/*.ts",
+    "container/**/*.ts",
+    "dashboard/**/*.ts",
+    "grader/**/*.ts",
+    "linter/**/*.ts",
+    "scripts/**/*.ts",
+    "src/**/*.ts",
+    "tests/**/*.ts",
+    "tracks/**/*.ts"
+  ],
+  "exclude": [
+    "tests/fixtures/spacetime-module/**"
+  ]
+}