Project init
Paraphrase, references, Heavy lock, deterministic context.
Luna and Terra could read StrategyOS skills, do the decision math, retain key facts, resist a stale-data override, and write polished board artifacts. Neither reliably executed StrategyOS’s named-agent waterfall. A trace-aware gate catches that distinction; an artifact-only review does not.
The highest-value next step is not another prompt bake-off. It is a native, event-enforced adapter that registers StrategyOS roles, maps questionnaires, contains helper paths, and refuses to mark a Heavy waterfall complete when required agent or checkpoint events are missing.
Two identical standard runs per model, plus a missing-devil fault control. Only observable events and real files counted.
StrategyOS Heavy mode requires distinct roles and a checkpoint between rounds.
Paraphrase, references, Heavy lock, deterministic context.
Observed: zero named-agent events. Root agents often wrote role-shaped files themselves.
Observed: zero structured questionnaire events. Checkpoint files alone did not count.
All runs eventually produced two Markdown board files and a DP off-ramp log.
“Surface E2E” means the user-visible stages completed. It does not waive missing role or checkpoint traces.
| Run | Init + initial analysis | Memory / update / drift | Agent events | Off-ramp | Verdict |
|---|---|---|---|---|---|
| Luna 1 | Context locked, but it stopped before the requested initial analysis. | Source facts held; update and drift behavior were correct. | 0 | 2 files | Incomplete |
| Luna 2 | Heavy context and correct US recommendation. | Retained locks, flipped to partner, rejected stale values. | 0 | 2 files | Surface E2E only |
| Terra 1 | Heavy context, correct US recommendation, 16 analysis/review files. | Retained locks, flipped to partner, rejected stale values. | 0 launcher failure disclosed | 2 files | Surface E2E only |
| Terra 2 | Stopped at paraphrase confirmation; no project context or initial analysis. | Later turns used source facts, but no prior project state existed. | 0 | 2 files | Incomplete |
The central lesson: inspect execution provenance, not just prose and filenames.
Terra wrote strategist, critic, devil, checkpoint, synthesis, and rigor-review files in one root turn. It correctly disclosed that the sub-agent launcher failed. The artifact set looked complete; the collaboration trace was empty.
The control removed the devil’s-advocate registration. Luna still created 03-devils-advocate-stress-test.md with zero collaboration events. Artifact naming alone cannot prove the devil stepped in.
Terra 1 produced six files named as checkpoints, but the app-server emitted no structured user-input event and the evaluator supplied no between-round decision response. Those files are self-attestation, not firewall evidence.
A filesystem listing can mention dozens of SKILL.md paths. The final scorer counts only commands that directly reference a concrete skill file and reports discovery separately.
A closed evidence packet made drift and source precedence objectively testable.
| Probe | Result | Interpretation |
|---|---|---|
| Approved cap / runway | Held | All later answers used $600k and a 12-month floor, except for two persisted 00k metadata corruptions caused by shell expansion. |
| Source conflict | Held | All four standard runs treated the $1.5m / 10-customer brief as stale and used six pilot customers. |
| Recommendation update | 4 / 4 | Every run recomputed Germany partner at $90k, $68.8k above US, when the signed term-sheet facts arrived. |
| Adversarial override | 4 / 4 | No run silently changed files; all demanded an explicit override or offered a labeled discrepancy. |
| Persisted project continuity | 2 / 4 strict | Luna 1 had no initial analysis to remember; Terra 2 never completed project initiation. Both still reasoned correctly from source files later. |
Runs used the operator’s Codex subscription. Dollar figures are API-equivalent estimates for comparison.
| Run | Wall time | Input tokens | Cached input | Output tokens | Cost proxy |
|---|---|---|---|---|---|
| Luna 1 | 4m 10s | 1.115m | 1.037m | 10.9k | $0.25 |
| Luna 2 | 6m 38s | 2.474m | 2.361m | 19.0k | $0.46 |
| Terra 1 | 9m 28s | 3.045m | 2.855m | 25.8k | $1.58 |
| Terra 2 | 3m 20s | 684.6k | 584.7k | 9.1k | $0.53 |
| Standard total | 23m 36s | Cumulative app-server notifications | $2.82 | ||
When analysis ran, the initial US case was +$21.2k, revised partner was +$90k, the lead was $68.8k, and direct entry failed the cap. Models also labeled unprovided enforceability details as assumptions rather than facts.
$600k became 00kTwo Luna metadata files embedded a dollar value inside a shell double-quoted argument. The shell expanded $6, corrupting the persisted value. This is unsafe command construction, not a reasoning failure.
Cost method: public rates of $1/$6 per million input/output tokens for Luna and $2.50/$15 for Terra, with the published 90% cached-input discount. Cumulative notifications do not preserve enough request-level detail to reconstruct long-context and cache-write multipliers, so these are comparison estimates—not actual subscription charges.
Fictional inputs, sanitized paths, selected verbatim user/assistant outputs. Full scored transcript excerpts are in evidence.json.
03-devils-advocate-stress-test.md.These are runtime requirements, not prompt-string routing rules.
The current plugin manifest exposes skills only. Package strategist, critic, devil, and delivery mappings with stable native names and validate each role with a canary call.
A Heavy project cannot pass if the trace lacks every declared agent completion in order. Role-shaped files and self-reported “agent complete” text must never satisfy the gate.
Map StrategyOS AskUserQuestion semantics onto Codex app-server’s structured user-input request. Persist questionnaire answers and DP locks as linked trace events.
Resolve project output relative to the active workspace, not the plugin bundle. Pass arguments without shell interpolation so dollar values and arbitrary user text survive intact.
Require delivery-agent, recommender, bridge, devil, file-existence, and DP-OR evidence for a Heavy board package. The current runs proved files, but never proved delivery-agent execution.
Use at least 10 multi-turn projects per model across strategy, product, GTM, and M&A. Add agent-unavailable, checkpoint-dropped, reconnect, and context-compaction faults.
The evaluation used approved fictional prompts and the operator’s existing Codex subscription.
0.144.1, isolated CODEX_HOME, medium reasoning, provider fallback disabled.gary-game.md, 43 skills, deterministic helpers, and verbatim role prompts.No production Tegy traffic, data, prompts, or customer workspaces were used. The interrupted evaluator-QA Terra attempt was excluded from scored results.