RoT DTD GOAL - a /goal engine where completion is earned by re-running real acceptance criteria, not declared by the model. Simultaneous verification, clock-free flake scoping, a fenced trust boundary, a dependency-ordered goal queue, and a Lean 4 specification the kernel re-verifies.
A /goal engine whose completion is EARNED, not announced. Acceptance criteria are real shell commands; the Stop hook re-runs every one of them and only exits 0 lets a goal finish. Verification defends itself: a sealed integrity ledger re-hashes each criterion before the gate trusts it, a negative-control red team…
Reads the cross-goal record. Invoke when the same kind of goal keeps stalling, exhausting its budget, or escalating — reconstructs the recurring pattern from history.tsv and past journals across many goals, without predicting the next one will succeed.
Audits the trust contract against the code. Invoke after changing anything the engine prints, adding a record field, or adding an agent — finds strings the engine says that the contract never declared.
Breaks stalls. Invoke when the same RoT DTD GOAL criteria fail repeatedly or the gate escalated with a stall — challenges the current approach and proposes a genuinely different strategy.
Reads the record. Invoke when a goal escalated, stalled, or completed in a way nobody understands — reconstructs what actually happened from the journal, ledger, timings and seal generations, without guessing.
Decomposes a user goal into 3-10 machine-checkable acceptance criteria with real single-line shell verify commands. Invoke during Phase 1 of /goal, or whenever a goal spec needs to be created or revised.
Decomposes a large goal into a dependency-ordered queue of smaller goals. Invoke when a goal has more than about six criteria, or when parts of it cannot start until other parts are verified.
Attacks an acceptance criterion. Invoke when a criterion looks too easy, survived the empty-directory control, or passed while its files were damaged — finds the input that makes it fail, or proves it cannot.
Read-only auditor that runs the RoT DTD GOAL verification suite and diagnoses failures without modifying anything. Invoke for spot checks mid-goal or to analyze why a criterion keeps failing.
Fan out ALL the DTD-declared agents (or an agents= subset) on one thing at once — a workflow when the harness has one, parallel dispatches otherwise — model and effort selectable.