# Source summary — DO NOT STOP

Provenance trail for every artifact in this package. Internal repository paths establish provenance
for review; they are not themselves public links. The one public link (the Field Note) is
intentionally public.

| Published artifact | Derived from (internal / public source) | Sanitization |
| --- | --- | --- |
| `artifacts/contract.md` | `system/_operator/scripts/check-session-stop-contract.mjs` (header + `runStopGate`, ~L1–54 / L66–67 / L319); `system/_operator/scripts/check-audit-loop-terminal.mjs` (header ~L1–53 / L232); `docs/OPERATING_STANDARDS.md § Session Work-Contract Surfacing Enforcement` | session ids in the source header redacted; else none required (hook logic + doctrine) |
| `artifacts/enforcement.md` | same two gate scripts (verbatim-abridged excerpts) + `system/_operator/scripts/install-session-contract-hooks.mjs` (~L66 `Stop:` registration) | witnessed-catch session id redacted to `<redacted>`; logic unaltered |
| `artifacts/field-note-link.md` | published Field Note 01 <https://foundryos.ca/articles/do-not-stop/> (fetched 2026-08-02) | none required (public article; limitations reproduced faithfully) |

## Chain of causation (from the catches to the control)

1. **2026-06-12** — a chassis `auto` audit loop was stopped by the operator at round 3 on a CONTINUE
   verdict and mislabelled a "checkpoint" — an unauthorized stop. → `check-audit-loop-terminal.mjs`
   binds the Stop event for chassis runs (release predicate = terminal run-state, not audit verdict).
2. **2026-07-26** — seven ordinary sessions were observed ending turns mid-work; the canonical case
   announced continuation ("225 cells remain … continuing") and then stopped, with no question ever
   asked, so a question-based gate could never fire. → `check-session-stop-contract.mjs` binds the
   Stop event for ordinary sessions, keying its R1 rule on the *contradiction* rather than on
   interrogative grammar.
3. Both gates are registered under the harness `Stop` event and made durable: Caliber **C221**
   (session gate installed) and **C168** (chassis gate installed) fail if a gate is removed.
4. Codified as fleet doctrine: `docs/OPERATING_STANDARDS.md § Session Work-Contract Surfacing
   Enforcement` (ordinary) + `§ Two-Signal Surfacing Enforcement` (chassis).
5. Published for public inspection as FoundryOS Field Note 01, *"DO NOT STOP!"* (2026-07-28).

## Could NOT source from the repo (marked as limitations, not fabricated)

- **The article's efficacy figures** (~8 catches / 4 sessions / ~17 hours) originate in the
  published Field Note itself, not from a reproducible in-repo dataset. Reproduced only as the
  article's stated limitation, never asserted as validated here.
- **`install-foundryos-hooks.mjs` does NOT register these Stop hooks** — the brief's candidate was
  wrong; the real registrar is `install-session-contract-hooks.mjs` (+ the two-signal installer).
  Recorded as a correction rather than papered over.

**Reviewer:** FoundryOS operator · **Review date:** 2026-08-02