config-keys.json

{
  "_meta": {
    "purpose": "Machine-readable inventory of every setting autopilot reads: config.json keys, AUTOPILOT_* environment variables, the Claude Code settings it depends on, and project-level DI files. Checked in both directions by scripts/check-config-docs.js; the human reference for audience=user entries is docs/settings-reference.md.",
    "fields": {
      "name": "dotted path for a config key, the variable name for env/cc_setting, .claude/<file> for project_di",
      "kind": "config_key | env | cc_setting | project_di",
      "audience": "user | internal",
      "class": "internal only: test_seam | path_seam | plumbing | experiment_flag | probe_toggle | band_source_switch",
      "default": "null when there is no default",
      "readers": "files that read it; each must contain the needle",
      "needle": "optional literal the reader must contain (default: env name or prefix, last dotted segment, template basename)",
      "prefix": "env family: any token starting with it is covered",
      "relates": "settings that depend on or override this one",
      "group": "user only: section of docs/settings-reference.md",
      "template": "project_di only",
      "doc": "where it is explained",
      "type": "config_key only: boolean | number | string | array | object | enum, joined with | for alternatives; read by scripts/lib/config-audit.js",
      "allowed": "config_key, type enum: the accepted values",
      "invalid_effect": "config_key: what an out-of-range value does, quoted in the config-audit finding",
      "changed_in": "config_key: list of {schema, from, to, note}. schema = the config_schema_version at which a default changed. Append one when you change a documented default; config-audit lists entries whose schema is above the user's config_schema_version (up to the current one). Bump CURRENT_SCHEMA in scripts/lib/config-audit.js when you add a schema number."
    },
    "audience_rule": "user = a human sets it to change what autopilot does (a documented knob with an effect they can observe). internal = autopilot sets it for its own child processes, it only redirects a path or injects a fault or clock for tests, or it is a maintainer/diagnostic switch. By name pattern, internal: AUTOPILOT_TEST_*, *_TEST_HOOK, *_FIXTURE, *_CRASH_AT, *_KILL_AFTER*, *_RACE_PATH, *_SEAMS, FAULT_INJECT*, *_NOW(_MS), *_SESSION_ID, *_RUN_ID, and path/binary overrides ending in _DIR/_FILE/_PATH/_BIN/_SH/_SCRIPT/_RESOLVER/_LEDGER/_RECEIPT/_INPUT/_ENV. Everything else is classified by hand and a user entry must appear in docs/settings-reference.md.",
    "scan_rules": "env: AUTOPILOT_[A-Z0-9_]+ in .js .ts .tsx .mjs .sh .py under bin/ hooks/ scripts/ src/ mods/, excluding tests/ dirs, *.test.*, test-*, run-tests.sh, fixtures/, node_modules/ and the platforms/ and .opencode mirrors. config: property reads with a snake_case key in files that mention config-path / AUTOPILOT_CONFIG_FILE / .autopilot/config.json (best effort; keys without an underscore are only checked in the reverse direction). di: every file in project-config-template/."
  },
  "ignore": {
    "env": {
      "AUTOPILOT_HARNESS_ATTENTION": "output sentinel printed by src/harness/capabilities.js, not an environment variable",
      "AUTOPILOT_HARNESS_OK": "output sentinel printed by src/harness/capabilities.js, not an environment variable",
      "AUTOPILOT_REVIEW_LEDGER_COPY_TEST_DELAY_MS": "test-only delay seam in scripts/lib/review-ledger-copy.js; not a user knob. Honoured only with AUTOPILOT_TEST_ALLOW_REVIEW_LEDGER_COPY_DELAY=1",
      "AUTOPILOT_TEST_ALLOW_REVIEW_LEDGER_COPY_DELAY": "test-only gate for the review-ledger copy delay. Exactly 1 enables AUTOPILOT_REVIEW_LEDGER_COPY_TEST_DELAY_MS; not a user knob",
      "AUTOPILOT_TEST_ALLOW_REVIEW_LEDGER_ARCHIVE_NOW": "test-only gate for the review-ledger rotate clock. Exactly 1 enables AUTOPILOT_TEST_NOW; not a user knob",
      "AUTOPILOT_TEST_ALLOW_REVIEW_LEDGER_ARCHIVE_PRUNE_TARGET": "test-only gate for review-ledger prune --target. Exactly 1 enables the hidden flag; not a user knob",
      "AUTOPILOT_TEST_ALLOW_REVIEW_LEDGER_ARCHIVE_PRUNE_PAUSE": "test-only gate for the review-ledger prune pause between validation and delete. Exactly 1 enables the ready/release files; not a user knob",
      "AUTOPILOT_REVIEW_LEDGER_ARCHIVE_PRUNE_READY_FILE": "test-only path the prune pause writes when it is waiting. Honoured only with AUTOPILOT_TEST_ALLOW_REVIEW_LEDGER_ARCHIVE_PRUNE_PAUSE=1",
      "AUTOPILOT_REVIEW_LEDGER_ARCHIVE_PRUNE_RELEASE_FILE": "test-only path the prune pause waits for before deleting. Honoured only with AUTOPILOT_TEST_ALLOW_REVIEW_LEDGER_ARCHIVE_PRUNE_PAUSE=1",
      "AUTOPILOT_TEST_NOW": "test-only ISO date for review-ledger rotate and status. Honoured only with AUTOPILOT_TEST_ALLOW_REVIEW_LEDGER_ARCHIVE_NOW=1"
    },
    "config": {
      "artifact_type": "field of a qualification feed document, not an operator config key",
      "baseline_event_id": "field of a scorecard event, not an operator config key",
      "event_id": "field of a scorecard/feed event, not an operator config key",
      "local_is_official_default": "field of a qualification feed row, not an operator config key",
      "transcript_hash": "field of a qualification feed row, not an operator config key"
    },
    "templates": {
      "hooks.json": "placeholder template: nothing in the repo reads a project-level .claude/hooks.json, so there is no setting to register"
    }
  },
  "entries": [
    {
      "name": "autoCompactEnabled",
      "kind": "cc_setting",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "scripts/lib/autocompact-window.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "autoCompactWindow"
      ],
      "summary": "Claude Code setting (settings.json, else ~/.claude.json): false turns auto-compact off."
    },
    {
      "name": "autoCompactWindow",
      "kind": "cc_setting",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "scripts/lib/autocompact-window.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "context_budget.t2",
        "context_budget.gap"
      ],
      "summary": "Claude Code setting (user/project/local/policy settings.json; also modelSettings.<model>.autoCompactWindow): token window after which Claude Code compacts, at window minus a 33k buffer. Set via /autocompact or in settings.json."
    },
    {
      "name": "CLAUDE_CODE_AUTO_COMPACT_WINDOW",
      "kind": "cc_setting",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "scripts/lib/autocompact-window.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "context_budget.t2",
        "context_budget.gap"
      ],
      "summary": "Claude Code environment variable: auto-compact window in tokens (clamped to 100000-1000000). Beats every settings file."
    },
    {
      "name": "DISABLE_AUTO_COMPACT",
      "kind": "cc_setting",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "scripts/lib/autocompact-window.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "autoCompactWindow"
      ],
      "summary": "Claude Code environment variable: 1, true, yes or on turns auto-compact off."
    },
    {
      "name": "DISABLE_COMPACT",
      "kind": "cc_setting",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "scripts/lib/autocompact-window.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "autoCompactWindow"
      ],
      "summary": "Claude Code environment variable: 1, true, yes or on turns all compaction off."
    },
    {
      "name": "<ENV_NAME>",
      "kind": "config_key",
      "audience": "internal",
      "class": "band_source_switch",
      "needle": "knobIsOff",
      "default": null,
      "readers": [
        "src/status/sources-manifest.js"
      ],
      "doc": null,
      "relates": [],
      "note": "config.json may carry {\"<ENV_NAME>\": \"off\"} for the knobs of the live band sources; only the band source manifest reads these, the hooks themselves honor the environment variable and their own keys."
    },
    {
      "name": "advisory_bridge.<hook>",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "needle": "advisory_bridge",
      "default": null,
      "readers": [
        "hooks/_shared/advisory-sink.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_ADVISORY_BRIDGE_<HOOK>"
      ],
      "summary": "Per-hook override of advisory_bridge.mode; <hook> is cost_tracker, version_drift, context_budget or suggest_compact.",
      "type": "enum",
      "allowed": [
        "sink",
        "inject"
      ]
    },
    {
      "name": "advisory_bridge.mode",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "needle": "advisory_bridge",
      "default": "sink",
      "readers": [
        "hooks/_shared/advisory-sink.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_ADVISORY_BRIDGE",
        "advisory_bridge.<hook>"
      ],
      "summary": "Where hook advisories go: \"sink\" shows them as a band toast (default); \"inject\" puts them in the model context as before.",
      "type": "enum",
      "allowed": [
        "sink",
        "inject"
      ]
    },
    {
      "name": "context_budget.gap",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "default": 50000,
      "readers": [
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_CONTEXT_BUDGET_GAP",
        "context_budget.t2",
        "autoCompactWindow"
      ],
      "summary": "Tokens between the T2 reminder and the point where Claude Code compacts; used by the SessionStart check that T2 can fire before compaction.",
      "type": "number"
    },
    {
      "name": "context_budget.live_write",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "default": true,
      "readers": [
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_CONTEXT_BUDGET_LIVE_WRITE"
      ],
      "summary": "false stops the hook writing the live context file the status band reads (the reminders keep firing).",
      "type": "boolean"
    },
    {
      "name": "context_budget.mode",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "default": "warn",
      "readers": [
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_CONTEXT_BUDGET_MODE"
      ],
      "summary": "\"off\" silences the context-budget reminders and the SessionStart window check; \"warn\" keeps them; \"once\" keeps them but each tier (T1, T2) speaks at most once per session.",
      "type": "enum",
      "allowed": [
        "off",
        "warn",
        "once"
      ],
      "invalid_effect": "anything but off, warn or once is ignored, so the reminders stay on"
    },
    {
      "name": "context_budget.per_model",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "context_budget.t1",
        "context_budget.t2",
        "AUTOPILOT_CONTEXT_BUDGET_T1",
        "AUTOPILOT_CONTEXT_BUDGET_T2"
      ],
      "summary": "Per-model t1/t2 keyed by a model-id glob (matched against the statusline live file's model.id; the pattern with the most literal characters wins; no match uses the top-level tiers).",
      "type": "object",
      "invalid_effect": "keys other than t1 and t2, and values that are not positive integers, are ignored with a one-line warning"
    },
    {
      "name": "context_budget.post_compact_warn",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "default": 100000,
      "readers": [
        "hooks/context-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_CONTEXT_BUDGET_POST_COMPACT_WARN"
      ],
      "summary": "After compaction, one advisory when the live context still exceeds this many tokens. 0 disables. A value that is not an integer >= 0 is ignored, so with nothing valid set the threshold stays 100000. Advisory only.",
      "type": "number",
      "invalid_effect": "a value that is not an integer >= 0 is ignored, so with nothing valid set the threshold stays 100000"
    },
    {
      "name": "context_budget.seat",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "default": "session",
      "readers": [
        "hooks/context-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_CONTEXT_BUDGET_SEAT"
      ],
      "summary": "session (default) keeps the T2 handoff wording. resident tells a fixed-address seat to update its state file and keep only that path and the unfinished items after compaction. Anything else is ignored.",
      "type": "enum",
      "allowed": [
        "session",
        "resident"
      ],
      "invalid_effect": "anything but session or resident is ignored, so the seat stays session"
    },
    {
      "name": "context_budget.step",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "default": 50000,
      "readers": [
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_CONTEXT_BUDGET_STEP"
      ],
      "summary": "A tier repeats its reminder only after the context grew by this many tokens since it last fired; 0 reminds on every call past the threshold.",
      "type": "number"
    },
    {
      "name": "context_budget.t1",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "needle": "t1",
      "default": 100000,
      "readers": [
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_CONTEXT_BUDGET_T1",
        "context_budget.t2"
      ],
      "summary": "Context size (tokens) at which the first reminder fires: plan a checkpoint and avoid loading large files inline.",
      "type": "number"
    },
    {
      "name": "context_budget.t2",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "needle": "t2",
      "default": 150000,
      "readers": [
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_CONTEXT_BUDGET_T2",
        "context_budget.gap",
        "autoCompactWindow"
      ],
      "summary": "Context size (tokens) of the second, stronger reminder: write a handoff. With auto-compact configured it is only a reminder; without it the hook tells you to stop and /clear.",
      "type": "number"
    },
    {
      "name": "cost_fuse.daily_usd_brain",
      "kind": "config_key",
      "audience": "user",
      "group": "cost",
      "default": 150,
      "readers": [
        "scripts/lib/brain-spend.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_COST_FUSE_DAILY_USD",
        "cost_fuse.tiers"
      ],
      "summary": "Daily USD cap on top-tier (brain) model spend, summed per UTC day from the cost ledger.",
      "type": "number"
    },
    {
      "name": "cost_fuse.mode",
      "kind": "config_key",
      "audience": "user",
      "group": "cost",
      "default": "warn",
      "readers": [
        "scripts/lib/brain-spend.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_COST_FUSE_MODE",
        "cost_fuse.daily_usd_brain"
      ],
      "summary": "What the daily brain-spend fuse does at the cap: \"warn\" (default), \"block\" or \"off\".",
      "type": "enum",
      "allowed": [
        "warn",
        "block",
        "off"
      ]
    },
    {
      "name": "cost_fuse.tiers",
      "kind": "config_key",
      "audience": "user",
      "group": "cost",
      "default": [
        "brain"
      ],
      "readers": [
        "scripts/lib/brain-spend.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "cost_fuse.daily_usd_brain"
      ],
      "summary": "Which model tiers count toward the cap.",
      "type": "array"
    },
    {
      "name": "cost_tracker.cache_read_warn_tokens",
      "kind": "config_key",
      "audience": "user",
      "group": "cost",
      "default": 50000000,
      "readers": [
        "hooks/cost-tracker.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_COST_TRACKER_CACHE_READ_WARN"
      ],
      "summary": "Cumulative cache-read tokens in one session at which the tracker prints its first warning (then at each doubling).",
      "type": "number"
    },
    {
      "name": "cost_tracker.context_clear_pct",
      "kind": "config_key",
      "audience": "user",
      "group": "cost",
      "default": 50,
      "readers": [
        "hooks/cost-tracker.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_COST_TRACKER_CLEAR_PCT"
      ],
      "summary": "Window fill (percent) at or above which the cost warning recommends a handoff and /clear.",
      "type": "number"
    },
    {
      "name": "depth0_delegate_gate.guarded_models",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": [
        "fable",
        "opus"
      ],
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Model families the gate applies to.",
      "type": "array"
    },
    {
      "name": "depth0_delegate_gate.mode",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": "warn",
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_DEPTH0_DELEGATE_GATE_MODE"
      ],
      "summary": "Reminder when the top-level session fires many read-class calls in a row: \"off\", \"warn\" or \"block\".",
      "type": "enum",
      "allowed": [
        "off",
        "warn",
        "block"
      ]
    },
    {
      "name": "depth0_delegate_gate.pkill_self_match",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": "deny",
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_BASH_GUARD_PKILL_MODE"
      ],
      "summary": "What to do with a pkill/pgrep -f pattern that would match its own command line: \"deny\", \"warn\" or \"off\".",
      "type": "enum",
      "allowed": [
        "deny",
        "warn",
        "off"
      ]
    },
    {
      "name": "depth0_delegate_gate.bare_ls",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": "deny",
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_BASH_GUARD_LS_MODE"
      ],
      "summary": "What to do with a bare ls in command position of a Bash call (an alias or function wrapper can hang it): \"deny\", \"warn\" or \"off\".",
      "type": "enum",
      "allowed": [
        "deny",
        "warn",
        "off"
      ]
    },
    {
      "name": "depth0_delegate_gate.threshold",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 8,
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Consecutive read-class calls before the delegate reminder.",
      "type": "number"
    },
    {
      "name": "depth0_delegate_gate.wait_advice_every",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 5,
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_DEPTH0_WAIT_ADVICE_EVERY"
      ],
      "summary": "Repeat interval of the foreground-wait advice.",
      "type": "number"
    },
    {
      "name": "dirty_tree_reminder",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": "on",
      "readers": [
        "hooks/dirty-protected-paths.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_DIRTY_TREE_REMINDER"
      ],
      "summary": "false switches the dirty-working-tree reminder off; an object sets min_files, min_lines and interval_minutes.",
      "type": "boolean|object"
    },
    {
      "name": "dirty_tree_reminder.interval_minutes",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 30,
      "readers": [
        "hooks/dirty-protected-paths.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_DIRTY_TREE_INTERVAL_MINUTES"
      ],
      "summary": "Minimum minutes between two reminders per repo and session; 0 reminds every turn.",
      "type": "number"
    },
    {
      "name": "dirty_tree_reminder.min_files",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 3,
      "readers": [
        "hooks/dirty-protected-paths.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_DIRTY_TREE_MIN_FILES"
      ],
      "summary": "Changed files that trigger the reminder.",
      "type": "number"
    },
    {
      "name": "dirty_tree_reminder.min_lines",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 150,
      "readers": [
        "hooks/dirty-protected-paths.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_DIRTY_TREE_MIN_LINES"
      ],
      "summary": "Changed lines that trigger the reminder.",
      "type": "number"
    },
    {
      "name": "owner_question_guard",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": "on",
      "readers": [
        "hooks/owner-question-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_OWNER_QUESTION_GUARD"
      ],
      "summary": "false switches off the Stop guard that blocks a reply waiting for the owner without a decision card id.",
      "type": "boolean"
    },
    {
      "name": "per_turn_gate.verifier",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/per-turn-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "hooks.<stem>"
      ],
      "summary": "Command the opt-in per-turn-gate Stop hook runs at turn end as `<command> --turn <n> --repo <cwd> --json` (exit 0 clean, 1 violations, anything else an error). Empty or missing: the hook never blocks.",
      "type": "string"
    },
    {
      "name": "per_turn_gate.mode",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": "violations",
      "readers": [
        "hooks/per-turn-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "hooks.<stem>"
      ],
      "summary": "What per-turn-gate may block on: \"violations\" (verifier exit 1 only) or \"violations+features\" (also exit 0 with a non-empty feature_gaps list; the trigger and retry text are unevaluated until the BL-0055 phase 2 evaluation passes).",
      "type": "enum",
      "allowed": [
        "violations",
        "violations+features"
      ],
      "invalid_effect": "an unknown mode is treated as \"violations\""
    },
    {
      "name": "per_turn_gate.max_blocks",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 2,
      "readers": [
        "hooks/per-turn-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "hooks.<stem>"
      ],
      "summary": "Blocks per-turn-gate may give in one turn before it lets the stop through.",
      "type": "number"
    },
    {
      "name": "per_turn_gate.timeout_ms",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 30000,
      "readers": [
        "hooks/per-turn-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "hooks.<stem>"
      ],
      "summary": "Hard timeout of the per-turn-gate verifier in milliseconds; a timeout allows the stop.",
      "type": "number"
    },
    {
      "name": "per_turn_gate.state_retention_days",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 7,
      "readers": [
        "hooks/per-turn-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "hooks.<stem>"
      ],
      "summary": "Days after which per-turn-gate deletes its untouched counter, turn and lock files from the live-state directory (log files are kept).",
      "type": "number"
    },
    {
      "name": "per_turn_gate.session_arming",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": true,
      "readers": [
        "hooks/per-turn-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "hooks.<stem>"
      ],
      "summary": "Whether per-turn-gate honours a worker-bound gate file written by scripts/per-turn-gate-arm.js. Missing or true: a valid gate file arms the gate for that one session even when the global knob is off. Only an explicit false ignores gate files (no lookup at all).",
      "type": "boolean"
    },
    {
      "name": "subagent_budget.mode",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": "remind",
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_SUBAGENT_BUDGET_MODE"
      ],
      "summary": "Subagent budget gate on Agent dispatch: \"remind\" (deny at a ceiling), \"warn\" (note, never deny) or \"off\".",
      "type": "enum",
      "allowed": [
        "remind",
        "warn",
        "off"
      ]
    },
    {
      "name": "subagent_budget.lane_dispatch_max",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 4,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_SUBAGENT_BUDGET_LANE_DISPATCH_MAX"
      ],
      "summary": "Dispatches one lane may already have before the next is denied (reviewers excluded).",
      "type": "number"
    },
    {
      "name": "subagent_budget.lane_turns_max",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 300,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_SUBAGENT_BUDGET_LANE_TURNS_MAX"
      ],
      "summary": "Subagent turns one lane may already have used before the next dispatch is denied.",
      "type": "number"
    },
    {
      "name": "subagent_budget.root_turns_per_hour_max",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 400,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_SUBAGENT_BUDGET_ROOT_TURNS_PER_HOUR_MAX"
      ],
      "summary": "Subagent turns of the whole session in the last 60 minutes before the next dispatch is denied.",
      "type": "number"
    },
    {
      "name": "subagent_budget.concurrent_advise_max",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 3,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_SUBAGENT_BUDGET_CONCURRENT_ADVISE_MAX"
      ],
      "summary": "Running subagents at or above this number add one advisory line on Agent dispatch. 0 disables the line. The hook never denies on this count.",
      "type": "number"
    },
    {
      "name": "foreman_guard.advisory_every",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 40,
      "readers": [
        "hooks/foreman-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_FOREMAN_GUARD_ADVISORY_EVERY"
      ],
      "summary": "Repeat interval of the non-denying advisory for other Engine-header subagents.",
      "type": "number"
    },
    {
      "name": "foreman_guard.bash_cap",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 40,
      "readers": [
        "hooks/foreman-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_FOREMAN_GUARD_BASH_CAP"
      ],
      "summary": "Bash calls a foreman may make before it is told to hand off.",
      "type": "number"
    },
    {
      "name": "foreman_guard.mode",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": "block",
      "readers": [
        "hooks/foreman-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_FOREMAN_GUARD_MODE"
      ],
      "summary": "Foreman guard (Bash cap, no-polling, no-Monitor for l4-l6 subagents): \"block\", \"warn\" or \"off\".",
      "type": "enum",
      "allowed": [
        "block",
        "warn",
        "off"
      ]
    },
    {
      "name": "foreman_guard.reserve_calls",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": 8,
      "readers": [
        "hooks/foreman-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_FOREMAN_GUARD_RESERVE_CALLS"
      ],
      "summary": "Calls held back after the cap for the closing handoff (git status, add, commit, ...).",
      "type": "number"
    },
    {
      "name": "foreman_guard.role_caps",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/foreman-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_FOREMAN_GUARD_ROLE_CAPS"
      ],
      "summary": "Per-role Bash caps: an object with foreman, worker and reviewer integers (worker and reviewer default to 120).",
      "type": "object"
    },
    {
      "name": "handoff_inject",
      "kind": "config_key",
      "audience": "user",
      "group": "context",
      "default": false,
      "readers": [
        "hooks/session-start.js",
        "hooks/session-handoff.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_HANDOFF_INJECT"
      ],
      "summary": "true restores the machine session snapshot after /clear (session-handoff + session-start hooks).",
      "type": "boolean"
    },
    {
      "name": "hooks.<stem>",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "needle": "hooks",
      "default": "opt-in hooks off, default-on hooks on",
      "readers": [
        "hooks/_shared/opt-in.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_HOOK_<STEM>"
      ],
      "summary": "Per-hook switch. true enables an opt-in hook; false disables a default-on hook that honors it (residue-auto-reap).",
      "type": "boolean",
      "changed_in": [
        {
          "schema": 1,
          "from": "off",
          "to": "on (default-on hooks: context-budget, dispatch-model-guard, cost-tracker, foreman-guard; v2.35.15)",
          "note": "These hooks used to be opt-in. A hook you never enabled now runs; the exit knob is in the Hook switches section of docs/settings-reference.md."
        }
      ]
    },
    {
      "name": "orchestrator_edit_gate.mode",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": "warn",
      "readers": [
        "hooks/orchestrator-edit-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_ORCH_EDIT_GATE_MODE",
        "hooks.<stem>"
      ],
      "summary": "What the (opt-in) orchestrator-edit-gate does when the top-level session edits files itself: \"warn\", \"block\" or \"off\".",
      "type": "enum",
      "allowed": [
        "warn",
        "block",
        "off"
      ]
    },
    {
      "name": "qualification_feed.url",
      "kind": "config_key",
      "audience": "user",
      "group": "dispatch",
      "default": null,
      "readers": [
        "scripts/adopt-qualification-defaults.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Default feed URL for adopt-qualification-defaults.js --from; it never fetches by itself.",
      "type": "string"
    },
    {
      "name": "qualification_feed.trust",
      "kind": "config_key",
      "audience": "user",
      "group": "dispatch",
      "default": "auto",
      "readers": [
        "scripts/lib/qualification-trust.js",
        "scripts/lib/qualification-confirm.js",
        "scripts/qualification-feed-trust.js",
        "scripts/engine-scorecard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "How a gate-passed qualification feed is used: auto (default), confirm, or off. An unrecognised value is off.",
      "type": "enum",
      "allowed": [
        "auto",
        "confirm",
        "off"
      ]
    },
    {
      "name": "qualification_outbox.enqueue",
      "kind": "config_key",
      "audience": "user",
      "group": "dispatch",
      "needle": "enqueue",
      "default": false,
      "readers": [
        "scripts/qualification-send-queue.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "When true, a completed engine-scorecard record is also queued in the registry outbox (~/.autopilot/qualification-outbox). The local scorecard write is unchanged; nothing is sent until flush runs with a transport.",
      "type": "boolean"
    },
    {
      "name": "qualification_outbox.transport",
      "kind": "config_key",
      "audience": "user",
      "group": "dispatch",
      "needle": "transport",
      "default": "off",
      "readers": [
        "scripts/qualification-send-queue.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "How qualification-send-queue.js flush sends: off (nothing is sent) or git (bot branch + pull request in the registry clone; the owner merges, the merge is the ack).",
      "type": "enum",
      "allowed": [
        "off",
        "git"
      ],
      "invalid_effect": "any other value is treated as off"
    },
    {
      "name": "qualification_outbox.registry_repo",
      "kind": "config_key",
      "audience": "user",
      "group": "dispatch",
      "needle": "registry_repo",
      "default": null,
      "readers": [
        "scripts/qualification-send-queue.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Path of the dedicated bot clone of the registry repo (llm-playground) used by the git transport. Required when transport is git.",
      "type": "string"
    },
    {
      "name": "qualification_outbox.workspace",
      "kind": "config_key",
      "audience": "user",
      "group": "dispatch",
      "needle": "workspace",
      "default": "cookys",
      "readers": [
        "scripts/qualification-send-queue.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Registry workspace (benchmarks/qualification/<workspace>) the outbox sends into.",
      "type": "string"
    },
    {
      "name": "residue.archive_branch_days",
      "kind": "config_key",
      "audience": "user",
      "group": "residue",
      "default": 14,
      "readers": [
        "scripts/lib/residue-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_RESIDUE_ARCHIVE_BRANCH_DAYS"
      ],
      "summary": "Days before an archive branch is cleaned up.",
      "type": "number"
    },
    {
      "name": "residue.archive_remind_days",
      "kind": "config_key",
      "audience": "user",
      "group": "residue",
      "default": 90,
      "readers": [
        "scripts/lib/residue-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_RESIDUE_ARCHIVE_REMIND_DAYS"
      ],
      "summary": "Age in days after which an old archive ref is only listed as needing a human, never deleted.",
      "type": "number"
    },
    {
      "name": "residue.auto_reap",
      "kind": "config_key",
      "audience": "user",
      "group": "residue",
      "default": true,
      "readers": [
        "scripts/lib/residue-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_RESIDUE_AUTO_REAP",
        "hooks.<stem>"
      ],
      "summary": "Automatic reaping of finished dispatch worktrees and branches.",
      "type": "boolean"
    },
    {
      "name": "residue.branch_prefixes",
      "kind": "config_key",
      "audience": "user",
      "group": "residue",
      "default": [],
      "readers": [
        "scripts/lib/residue-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Extra branch prefixes the reaper treats as dispatch branches (letters, digits, . _ - and an optional trailing /).",
      "type": "array"
    },
    {
      "name": "run_ledger.max_rotations",
      "kind": "config_key",
      "audience": "user",
      "group": "residue",
      "default": 4,
      "readers": [
        "scripts/lib/run-ledger-config.js",
        "scripts/run-ledger.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "How many rotated run-ledger segments are kept (default 4). Readers follow segments .N down to .1 then the live ledger. At 0 the campaign CLI and run-ledger.sh read only the live ledger, but the seat-store, work-order and engine readers fall back to 4; the writer still moves the live ledger to .1 on rotation even at 0. Each reader keeps its own rule for odd values: work-order and engine accept only integers 1 to 64 (else 4); seat-store and the campaign CLI cut 1.5 down to 1, use 4 for negatives and keep values above 64; the shell script uses the number as given. Config only: the RUN_LEDGER_MAX_ROTATIONS environment variable is not read.",
      "type": "number"
    },
    {
      "name": "residue.lease_hours",
      "kind": "config_key",
      "audience": "user",
      "group": "residue",
      "default": 72,
      "readers": [
        "scripts/lib/residue-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_RESIDUE_LEASE_HOURS"
      ],
      "summary": "Hours a dispatch worktree is kept before it may be reaped.",
      "type": "number"
    },
    {
      "name": "residue.tmp_prune",
      "kind": "config_key",
      "audience": "user",
      "group": "residue",
      "default": true,
      "readers": [
        "scripts/lib/residue-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_RESIDUE_TMP_PRUNE"
      ],
      "summary": "Daily host-wide prune of autopilot temp roots, riding on the automatic reap.",
      "type": "boolean"
    },
    {
      "name": "review_ledger_archive.dir",
      "kind": "config_key",
      "audience": "user",
      "group": "review-ledger",
      "default": null,
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": "docs/settings-reference.md",
      "relates": ["AUTOPILOT_REVIEW_LEDGER_ARCHIVE_DIR"],
      "summary": "Directory for the opt-in review-ledger archive. Unset or empty means off: it writes nothing. The config file is still read to learn whether the key is set. The environment variable wins.",
      "type": "string",
      "invalid_effect": "a non-string is an error at copy time; empty string means off"
    },
    {
      "name": "review_ledger_archive.include_diff",
      "kind": "config_key",
      "audience": "user",
      "group": "review-ledger",
      "default": false,
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": "docs/settings-reference.md",
      "relates": ["AUTOPILOT_REVIEW_LEDGER_ARCHIVE_INCLUDE_DIFF"],
      "summary": "When true, the archive copy also stores diff.txt. Default false.",
      "type": "boolean",
      "invalid_effect": "anything but a boolean (or env true/false/1/0/yes/no) is ignored, so diff.txt stays out"
    },
    {
      "name": "review_ledger_archive.warn_mb",
      "kind": "config_key",
      "audience": "user",
      "group": "review-ledger",
      "default": 500,
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": "docs/settings-reference.md",
      "relates": ["AUTOPILOT_REVIEW_LEDGER_ARCHIVE_WARN_MB"],
      "summary": "status warns when the archive is larger than this many mebibytes. Never blocks.",
      "type": "number",
      "invalid_effect": "a value that is not a number >= 0 is ignored, so the threshold stays 500"
    },
    {
      "name": "review_ledger_archive.rotate_after_months",
      "kind": "config_key",
      "audience": "user",
      "group": "review-ledger",
      "default": 2,
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": "docs/settings-reference.md",
      "relates": ["AUTOPILOT_REVIEW_LEDGER_ARCHIVE_ROTATE_AFTER_MONTHS"],
      "summary": "rotate compresses complete month directories strictly older than this many calendar months. The current month is never compressed.",
      "type": "number",
      "invalid_effect": "a value that is not a positive integer is ignored, so the age stays 2"
    },
    {
      "name": "review_ledger_archive.rotate_remove_source",
      "kind": "config_key",
      "audience": "user",
      "group": "review-ledger",
      "default": false,
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": "docs/settings-reference.md",
      "relates": ["AUTOPILOT_REVIEW_LEDGER_ARCHIVE_ROTATE_REMOVE_SOURCE"],
      "summary": "When true, rotate deletes the month directory after the tar listing matches. Default false keeps the directory.",
      "type": "boolean",
      "invalid_effect": "anything but a boolean (or env true/false/1/0/yes/no) is ignored, so the source stays"
    },
    {
      "name": "AUTOPILOT_TEST_DURATIONS_FILE",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": ["scripts/affected-suites.js", "hooks/tests/run.sh"],
      "doc": null,
      "relates": [],
      "note": "Path of the per-suite durations tsv (rel TAB seconds). Default ${XDG_CACHE_HOME:-~/.cache}/autopilot/test-durations.tsv. affected-suites --run writes it for the real repo only, or for any root when this is set (tests point it at a temp file)."
    },
    {
      "name": "AUTOPILOT_TEST_TIMING_FACTOR",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": ["scripts/affected-suites.js", "hooks/tests/run.sh"],
      "doc": null,
      "relates": [],
      "note": "Multiplier suites apply to upper-bound timing assertions. run.sh --parallel N and affected-suites --jobs N default it to N for pooled suites and 1 for the serial part; a value already in the environment wins."
    },
    {
      "name": "AUTOPILOT_GATE_FILE",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": ["scripts/gate-verify.js"],
      "doc": null,
      "relates": [],
      "note": "Path of the per-turn gate file gate-verify.js reads when --gate-file is absent. The hook sets it (P2); not wired yet."
    },
    {
      "name": "AUTOPILOT_GATE_REPO",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": ["scripts/gate-verify.js"],
      "doc": null,
      "relates": [],
      "note": "Set by gate-verify.js for a registered check: the worker repo it should inspect. The check itself runs in an exported temp dir."
    },
    {
      "name": "AUTOPILOT_REVIEW_LEDGER_ARCHIVE_DIR",
      "kind": "env",
      "audience": "user",
      "group": "review-ledger",
      "default": null,
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": "docs/settings-reference.md",
      "relates": ["review_ledger_archive.dir"],
      "summary": "Overrides review_ledger_archive.dir. Empty string means off."
    },
    {
      "name": "AUTOPILOT_REVIEW_LEDGER_ARCHIVE_INCLUDE_DIFF",
      "kind": "env",
      "audience": "user",
      "group": "review-ledger",
      "default": null,
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": "docs/settings-reference.md",
      "relates": ["review_ledger_archive.include_diff"],
      "summary": "Overrides review_ledger_archive.include_diff. true, 1, or yes copies diff.txt."
    },
    {
      "name": "AUTOPILOT_REVIEW_LEDGER_ARCHIVE_WARN_MB",
      "kind": "env",
      "audience": "user",
      "group": "review-ledger",
      "default": null,
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": "docs/settings-reference.md",
      "relates": ["review_ledger_archive.warn_mb"],
      "summary": "Overrides review_ledger_archive.warn_mb."
    },
    {
      "name": "AUTOPILOT_REVIEW_LEDGER_ARCHIVE_ROTATE_AFTER_MONTHS",
      "kind": "env",
      "audience": "user",
      "group": "review-ledger",
      "default": null,
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": "docs/settings-reference.md",
      "relates": ["review_ledger_archive.rotate_after_months"],
      "summary": "Overrides review_ledger_archive.rotate_after_months. A non positive integer is ignored."
    },
    {
      "name": "AUTOPILOT_REVIEW_LEDGER_ARCHIVE_ROTATE_REMOVE_SOURCE",
      "kind": "env",
      "audience": "user",
      "group": "review-ledger",
      "default": null,
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": "docs/settings-reference.md",
      "relates": ["review_ledger_archive.rotate_remove_source"],
      "summary": "Overrides review_ledger_archive.rotate_remove_source. true, 1, or yes deletes the month directory after a matched listing."
    },
    {
      "name": "AUTOPILOT_REVIEW_LEDGER_LOCK_STALE_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": "30000",
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": null,
      "relates": [],
      "note": "Positive number replaces the 30000ms ledger-lock stale threshold. Tests only. Unset, zero, and non-numeric values keep 30000."
    },
    {
      "name": "AUTOPILOT_REVIEW_LEDGER_REPO_ROOT",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": ["scripts/lib/review-ledger-copy.js"],
      "doc": null,
      "relates": [],
      "note": "Points a temp copy of review-ledger-copy.js at the repo. Tests only."
    },
    {
      "name": "review.port",
      "kind": "config_key",
      "audience": "user",
      "group": "ui",
      "default": 8787,
      "readers": [
        "src/status/review-server.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_REVIEW_SERVER_AUTOSTART"
      ],
      "summary": "Port of the local review page server (bound to 127.0.0.1 only). A busy port is reported, never replaced.",
      "type": "number"
    },
    {
      "name": "run_approval.mode",
      "kind": "config_key",
      "audience": "user",
      "group": "hooks",
      "default": "off",
      "readers": [
        "hooks/run-approval-gate.js",
        "scripts/run-approval.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_RUN_APPROVAL_MODE"
      ],
      "summary": "Human approval gate on dispatches: \"off\" or \"ask-once\". An unattended (claude -p) run must keep it off.",
      "type": "enum",
      "allowed": [
        "off",
        "ask-once"
      ]
    },
    {
      "name": "implementer_claude_native.confirmed_at",
      "kind": "config_key",
      "audience": "user",
      "group": "dispatch",
      "default": null,
      "readers": [
        "scripts/run-approval.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "run_approval.mode"
      ],
      "summary": "ISO timestamp of the owner's one-time confirmation that dispatch-hetero may use the first-party claude-native implementer runner. Written only by `node scripts/run-approval.js confirm-claude-native`; without it the runner is refused.",
      "type": "string"
    },
    {
      "name": "topology.exclude_seats",
      "kind": "config_key",
      "audience": "user",
      "group": "dispatch",
      "default": [],
      "readers": [
        "scripts/resolve-dispatch-topology.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_TOPOLOGY_FILE"
      ],
      "summary": "Seats (engine/effort@runner, or a bare engine) never offered by the dispatch ladders and review panel; unioned with --exclude-seats.",
      "type": "array"
    },
    {
      "name": "ui.locale",
      "kind": "config_key",
      "audience": "user",
      "group": "ui",
      "default": "auto",
      "readers": [
        "mods/live/i18n.ts",
        "mods/viewer/show.ts"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_LOCALE"
      ],
      "summary": "Language of the live band and pane: \"en\", \"zh-TW\" or \"auto\" (follow Claude Code).",
      "type": "enum",
      "allowed": [
        "en",
        "zh-TW",
        "auto"
      ]
    },
    {
      "name": "onboard_hint",
      "kind": "config_key",
      "audience": "user",
      "group": "update",
      "default": true,
      "readers": [
        "hooks/session-start.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_ONBOARD_HINT"
      ],
      "summary": "false stops the startup line that suggests autopilot:onboard in a repo with .claude/ but no onboard-written config.",
      "type": "boolean"
    },
    {
      "name": "update_check",
      "kind": "config_key",
      "audience": "user",
      "group": "update",
      "default": true,
      "readers": [
        "hooks/session-start.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_UPDATE_CHECK"
      ],
      "summary": "false stops the \"Autopilot updated\" notice at session start.",
      "type": "boolean"
    },
    {
      "name": "prices_fetch",
      "kind": "config_key",
      "audience": "user",
      "group": "dispatch",
      "default": true,
      "readers": [
        "hooks/session-start.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_PRICES_FETCH"
      ],
      "summary": "false stops the SessionStart refresh of the seat price cache (scripts/qualification-prices.js fetch).",
      "type": "boolean"
    },
    {
      "name": "AUTOPILOT_ADAPTIVE_INTERVENTION",
      "kind": "env",
      "audience": "internal",
      "class": "experiment_flag",
      "default": null,
      "readers": [
        "scripts/run-ledger.sh"
      ],
      "doc": null,
      "relates": [],
      "note": "run-ledger.sh adaptive-intervention flag, default off; no operator documentation exists."
    },
    {
      "name": "AUTOPILOT_RESIDUE_PROC_ROOT",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/repo-residue-sweep.js"
      ],
      "doc": null,
      "relates": [],
      "note": "Directory read in place of /proc when asking whether a process uses a worktree; tests point it at a missing directory to prove an unreadable process table counts as in use."
    },
    {
      "name": "AUTOPILOT_RESIDUE_RECENT_HOURS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/repo-residue-sweep.js"
      ],
      "doc": null,
      "relates": [],
      "note": "Hours of recent on-disk activity that keep a clean worktree out of every removal path (default 24); 0 turns it off for fixtures that age nothing."
    },
    {
      "name": "AUTOPILOT_AGY_STDIN_MAX_BYTES",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/lib/agy-stream-json.js"
      ],
      "doc": "references/hetero-dispatch.md",
      "relates": [],
      "note": "Fail-closed ceiling on the encoded agy stdin line (default 170000 bytes, BL-0021: agy's silent stdin wall is a deployment property). Raise only on a host where the tail-nonce probe was measured."
    },
    {
      "name": "AUTOPILOT_AGY_INPUT_TOKEN_CEILING",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/lib/agy-stream-json.js"
      ],
      "doc": "references/hetero-dispatch.md",
      "relates": [
        "AUTOPILOT_AGY_STDIN_MAX_BYTES"
      ],
      "note": "Response-side fail-closed ceiling on result.usage.input_tokens (default 95000; a non-positive-integer value falls back to the default). agy 1.4.6 silently drops the prompt tail near 97.6k input tokens (BL-0021), so a SUCCESS at or over it is refused as agy_input_truncated."
    },
    {
      "name": "AUTOPILOT_AUTHOR_CHROME_MAX_BYTES",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-author.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_AUTHOR_CHROME_MAX_LINES",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-author.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_BASH_GUARD_SHELL",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_BLIND_DISCOVERY",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh",
        "src/runners/review.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_BRAIN_SEAT_IDENTITY",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/resolve-review-loop.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CAPABILITY_STATE",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/lib/context-window.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CHAIN_LOCK_STALE_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/hetero-review-loop.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CHAIN_LOCK_TIMEOUT_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/hetero-review-loop.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CHECK_REDISPATCH_PROMPT_SCRIPT",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/hetero-review-loop.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CHILD_SESSION_ID",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-author.sh",
        "scripts/dispatch-foreman.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh",
        "scripts/lib/repo-identity.sh",
        "scripts/probe-engine-capability.sh",
        "scripts/session-mode.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CLEANROOM_AGY_CRED_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CLEANROOM_BWRAP",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh",
        "scripts/lib/cleanroom-launch.sh",
        "src/engine/campaign-intake.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CLEANROOM_CODEX_AUTH",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CLEANROOM_EXPECTED_VERSION",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh",
        "src/runners/review.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CLEANROOM_KIMI_CRED_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CLEANROOM_KIMI_NODE_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CLEANROOM_LAUNCHER",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh",
        "src/engine/campaign-intake.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CODEX_CGROUP",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/lib/dispatch-author-codex-transport.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CODEX_LIFECYCLE_ADAPTER_V1",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/measure-profile-context.js",
        "scripts/sync-codex-plugin-skills.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CODEX_PROBE_LOG",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/probe-codex-enforcement.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CODEX_PROBE_TARGET",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/probe-codex-enforcement.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_COMPACTION_POINTS_FILE",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/compaction-handoff.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CONSULT_CORPUS_FILE",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/qualification-applicability-scope.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CONTEXT",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "src/hooks/handlers/session-start.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CONTEXT_BUDGET_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "hooks/context-budget.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CONTINUATION_CHECKPOINT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh",
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CONTINUATION_DURABLE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh",
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CONTINUATION_NARRATIVE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh",
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CONTINUATION_STRICT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh",
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CONTROLLER_PID",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/compaction-rehydrate.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_COST_FUSE_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "hooks/cost-fuse.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_COSTS_FILE",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "hooks/cost-fuse.js",
        "scripts/cost-digest.js",
        "scripts/lib/brain-spend.js",
        "src/status/runs-watch.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_CURSOR_MODEL_SH",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/cursor-model.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_D3_PTY_TRANSPORT_READY_V1",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/probe-codex-postcompact-production.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DEPTH0_GATE_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DEV_SETUP_ACTIVE_CLI_CHECKS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dev-setup.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/run-eval-batch.sh",
        "scripts/run-skill-opt.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISCUSS_CORPUS_FILE",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/qualification-applicability-scope.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISPATCH_AUTHOR_BIN",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-consult.sh",
        "scripts/dispatch-discuss.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISPATCH_BRANCH_LEDGER_SH",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/dispatch-branch-ledger.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISPATCH_DEPTH",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-author.sh",
        "scripts/dispatch-foreman.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh",
        "scripts/run-grok-implementer-ab.sh",
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISPATCH_MANIFEST",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-author.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh",
        "scripts/lib/plan-review-panel.js",
        "scripts/lib/repo-identity.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISPATCH_REVIEW_SCRIPT",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/hetero-review-loop.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISPATCH_ROLE",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-author.sh",
        "scripts/dispatch-plan-review.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISPATCH_RUNS_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/runtime-paths.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISPATCH_SIBLING_PATH_PREFIX",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/lib/main-checkout-boundary.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISPATCH_SIBLING_REF_PREFIX",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-foreman.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/lib/main-checkout-boundary.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISTILL_PACK_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/distill-consolidate.sh",
        "scripts/distill-sync-setup.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_DISTILL_STOPWORDS",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/distill-consolidate.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_EFFECT_RESERVATION_ID",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_EMPTY_GRACE_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/lib/output-quiescence.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_ENDPOINTS_LOADED",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/load-endpoints-env.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_FAULT_INJECT_LIFECYCLE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_FOREMAN_ASSET_ROOT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/engine-qualify.js"
      ],
      "doc": null,
      "relates": [],
      "summary": "Test mode only (honoured when AUTOPILOT_QUALIFY_SEED is set). Points verifyPinnedForemanEvaluationAssets at a fixture tree instead of the repo evals pins. A non-test run that finds this key set exits 2; it is never silently ignored and does not redirect the exam."
    },
    {
      "name": "AUTOPILOT_FOREMAN_GUARD_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "hooks/foreman-guard.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_GITCONFIG_CONTAINMENT_SH",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/gitconfig-containment.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_GROK_AB_BASE_SHA",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/run-grok-implementer-ab.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_GROK_AB_CANDIDATE_SHA",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/run-grok-implementer-ab.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_GROK_AB_DISPATCH_BIN",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/run-grok-implementer-ab.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_GROK_AB_SCRATCH",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/run-grok-implementer-ab.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_GROK_AB_TIMEOUT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/run-grok-implementer-ab.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_GROK_EFFORT_PROBE",
      "kind": "env",
      "audience": "internal",
      "class": "probe_toggle",
      "default": null,
      "readers": [
        "scripts/lib/grok-effort.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_GROK_EFFORT_PROBE_TIMEOUT",
      "kind": "env",
      "audience": "internal",
      "class": "probe_toggle",
      "default": null,
      "readers": [
        "scripts/lib/grok-effort.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_GROK_EFFORT_SH",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/grok-effort.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_HARNESS_CAPABILITY_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "src/harness/capabilities.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_HARNESS_NOW",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "src/harness/capabilities.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_JSON_EMIT_SH",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/json-emit.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_JSON_FIELDS_SH",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/json-fields.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_KIMI_ARGV_LIMIT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_KIMI_PART_BYTES",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_LADDER_LEDGER",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/probe-unknown.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_LEDGER_PATH",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_LEVEL",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "bin/autopilot.js",
        "scripts/dispatch-hetero.sh",
        "scripts/run-grok-implementer-ab.sh",
        "scripts/scaffold-mission.js",
        "src/engine/autopilot-engine.js",
        "src/engine/campaign-intake.js",
        "src/status/cli.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_LIFECYCLE_LOCK_FD",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/reap-dispatch-branches.sh",
        "scripts/reap-dispatch-worktrees.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_LIVE_GROK_AB",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/run-grok-implementer-ab.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_LIVE_OPENCODE_MODEL",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/tests/opencode-deny-all-live.test.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_LIVE_OPENCODE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/tests/opencode-deny-all-live.test.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_LOAD_SOURCE_TRUST_ENV",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "hooks/runs-watch-autostart.js",
        "src/status/load-source.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_LOADED_ACC",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/load-endpoints-env.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_LOCAL_LEASE_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "src/engine/local-deployment.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_LOOP_ID",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_MANAGED_SETTINGS_FILE",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/autocompact-window.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_MERGE_CRASH_AFTER_EDGE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "src/merge/cli.js"
      ],
      "doc": null,
      "relates": [],
      "summary": "Test-only fault seam for merge crash simulation, honoured only when AUTOPILOT_TEST_SEAMS=1."
    },
    {
      "name": "AUTOPILOT_MISSION_BLOCK_FIXTURE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/probe-codex-enforcement.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_MISSION_LOCK_STALE_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "src/mission/runtime.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_MISSION_LOCK_TIMEOUT_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "src/mission/runtime.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_MISSION_PATH",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_MISSION_ROOT_RUN_ID",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh",
        "scripts/run-grok-implementer-ab.sh",
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_MODEL_HANDOFF_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/compaction-handoff.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_NO_CANARY",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/transcript-reader-lib.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_OPENCODE_ALLOW_VERSION_MISMATCH",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/install-opencode.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_ORPHAN_STATE_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_PARENT_RUN_ID",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-author.sh",
        "scripts/dispatch-foreman.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh",
        "scripts/run-grok-implementer-ab.sh",
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_PARENT_SESSION_ID",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-author.sh",
        "scripts/dispatch-explore.sh",
        "scripts/dispatch-foreman.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh",
        "scripts/lib/repo-identity.sh",
        "scripts/probe-engine-capability.sh",
        "scripts/session-mode.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_PLAN_REVIEW_*",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "prefix": "AUTOPILOT_PLAN_REVIEW_",
      "default": null,
      "readers": [
        "scripts/dispatch-plan-review.js",
        "src/status/review-input.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_PLATFORM_CAPABILITY_RECEIPT",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_PROBE_CHALLENGE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/probe-skill-frontmatter-portability.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_PROFILE_RUNTIME",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "src/engine/profile-runtime.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_PROFILE_TEST_RUNNER",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "src/engine/profile-runtime.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_PROXY_DECISION_LEDGER",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_QUALIFY_NOW",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/engine-qualify.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_QUALIFY_SEED",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/engine-qualify.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REAP_TEST_HOOK_AFTER_ACK_WRITE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/reap-dispatch-branches.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REAP_TEST_HOOK_AFTER_CHECK_EVALUATION",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/reap-dispatch-branches.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REAP_TEST_HOOK_AFTER_DELETE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/reap-dispatch-branches.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REAP_TEST_HOOK_BEFORE_DELETE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/reap-dispatch-branches.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_RECONCILE_RECEIPT",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh",
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_RENDER_TASK_STATUS_BIN",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/render-review-page.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REPO_OVERRIDE",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/install-antigravity.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_RESIDUE_AUTO_SWEEP",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/residue-auto-reap.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_RESOLVE_CONFIG_SH",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/resolve-config.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_RESOLVE_REVIEW_LOOP_BIN",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-discuss.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_RESOLVED_LIVE",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-author.sh",
        "scripts/dispatch-hetero.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REVIEW_CHROME_MAX_BYTES",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REVIEW_CHROME_MAX_LINES",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REVIEW_FAIL_AT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/render-review-page.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REVIEW_HOLD_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/render-review-page.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REVIEW_LOOP_RESOLVER",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/check-phase-review-receipt.js",
        "scripts/hetero-review-loop.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REVIEW_NOW",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/render-review-page.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REVIEW_PACKET_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh",
        "src/runners/review.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REVIEW_PACKET_HASH",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "src/runners/review.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REVIEW_RETRY_NOTE",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_REVIEW_RETAIN_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/render-review-page.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_ROOT_RUN_ID",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/decision-ledger.js",
        "scripts/dispatch-author.sh",
        "scripts/dispatch-foreman.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh",
        "scripts/mission-routing-admission.js",
        "scripts/next-pick.js",
        "scripts/open-decision.js",
        "scripts/run-grok-implementer-ab.sh",
        "scripts/scaffold-mission.js",
        "scripts/session-mode.js",
        "src/engine/autopilot-engine.js",
        "src/status/decisions-sidecar.js",
        "src/status/sources-manifest.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_RRP_PAYLOAD",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/render-review-page.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_RUN_APPROVAL_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "hooks/run-approval-gate.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_RUNS_WATCH_LOCKED",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "src/status/runs-watch.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_WATCHER_LAUNCH_ID",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "src/status/runs-watch.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_WATCHER_RESULT_PATH",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "src/status/runs-watch.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_SESSION_ID",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "hooks/cost-fuse.js",
        "hooks/foreman-guard.js",
        "hooks/run-approval-gate.js",
        "scripts/dispatch-author.sh",
        "scripts/dispatch-explore.sh",
        "scripts/dispatch-foreman.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh",
        "scripts/lib/dispatch-branch-ledger.sh",
        "scripts/lib/repo-identity.sh",
        "scripts/open-decision.js",
        "scripts/run-grok-implementer-ab.sh",
        "scripts/scaffold-mission.js",
        "scripts/session-mode.js",
        "scripts/stage-advance.js",
        "scripts/task-card.js",
        "src/engine/autopilot-engine.js",
        "src/engine/profile-runtime.js",
        "src/status/runs-watch.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_SESSION_MODE_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "hooks/dispatch-model-guard.js",
        "hooks/runs-watch-autostart.js",
        "scripts/dispatch-author.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh",
        "scripts/dispatch-tree.js",
        "scripts/lib/repo-identity.sh",
        "scripts/lib/workflow-snapshot.js",
        "scripts/run-grok-implementer-ab.sh",
        "scripts/session-mode.js",
        "scripts/stage-advance.js",
        "src/status/live-pointer.js",
        "src/status/runs-watch.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_SESSION_MODE_LOCK_TIMEOUT_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/session-mode.js",
        "scripts/stage-advance.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_SETTLE_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-author.sh",
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_SKILL_CHALLENGE_*",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "prefix": "AUTOPILOT_SKILL_CHALLENGE_",
      "default": null,
      "readers": [
        "scripts/probe-skill-frontmatter-portability.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_SKIP_SLASH_PROBE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/preflight-release.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_SLASH_PROBE_RELEASE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/preflight-release.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_SLASH_PROBE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/preflight-release.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_STABLE_POLLS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/lib/output-quiescence.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_STAGE_ADVANCE_BIN",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/stage-write.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_STAGE_ADVANCE_CLASSIFY",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/stage-advance.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_STAGE_ADVANCE_RESOLVE",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/stage-advance.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_STATE_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/risk-counter.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_STEP",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/probe-skill-frontmatter-portability.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_STRIKE_WRITER",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_SUGGEST_COMPACT_STDIN",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/suggest-compact.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TAIL_WINDOW_BYTES",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/transcript-reader-lib.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TASK_CARD_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/workflow-snapshot.js",
        "scripts/task-card.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TASK_STATUS_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/write-task-status-input.js",
        "src/status/task-runtime.js",
        "src/status/task-status-input.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TASK_STATUS_INPUT",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "src/engine/autopilot-engine.js",
        "src/status/sources-manifest.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TERMINAL_RECEIPT",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh",
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_ALLOW_HETERO_SEAMS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_ALLOW_MISSION_RUNTIME_SEAMS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "src/mission/runtime.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_ALLOW_PLAN_REVIEW_SEAMS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-plan-review.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_LIFECYCLE_KILL_AFTER_AUTHORITY",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/reap-dispatch-worktrees.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_LIFECYCLE_KILL_AFTER_MIRROR",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/reap-dispatch-worktrees.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_MODE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/reap-dispatch-worktrees.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_PLAN_REVIEW_CRASH_AT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-plan-review.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_REAL_HOME_OVERRIDE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/engine-capability-state.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_RUN_GUARD",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/engine-capability-state.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_SEAMS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "src/merge/cli.js"
      ],
      "doc": null,
      "relates": [],
      "summary": "Master switch for all test-only seams."
    },
    {
      "name": "AUTOPILOT_TEST_TIMEOUT_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "src/endpoints/cli.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_WORKTREE_CRASH_AT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_WORKTREE_REAP_LOCK_RACE_PATH",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/reap-dispatch-worktrees.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_WORKTREE_REAP_MARKER_RACE_PATH",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/reap-dispatch-worktrees.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_TEST_WORKTREE_REAP_RACE_PATH",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/reap-dispatch-worktrees.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_WATCH_NOW_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/watch-foreman.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_WORKTREE_ROOT_RUN_ID",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/dispatch-foreman.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/lib/worktree-reap.sh",
        "scripts/run-grok-implementer-ab.sh",
        "src/engine/autopilot-engine.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_ADVISORY_BRIDGE",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "hooks/_shared/advisory-sink.js",
        "hooks/context-budget.js",
        "hooks/cost-tracker.js",
        "hooks/suggest-compact.js",
        "hooks/version-drift-check.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "advisory_bridge.mode"
      ],
      "summary": "inject or sink for all four advisory hooks at once."
    },
    {
      "name": "AUTOPILOT_ADVISORY_BRIDGE_<HOOK>",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "prefix": "AUTOPILOT_ADVISORY_BRIDGE_",
      "default": null,
      "readers": [
        "hooks/_shared/advisory-sink.js",
        "hooks/context-budget.js",
        "hooks/cost-tracker.js",
        "hooks/suggest-compact.js",
        "hooks/version-drift-check.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "advisory_bridge.<hook>"
      ],
      "summary": "inject or sink for one hook; <HOOK> is COST_TRACKER, VERSION_DRIFT, CONTEXT_BUDGET or SUGGEST_COMPACT. Beats the global variable."
    },
    {
      "name": "AUTOPILOT_ADVISORY_RELAY",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": "on",
      "readers": [
        "hooks/advisory-relay.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"off\" to stop the UserPromptSubmit hook that drains queued advisories into the next prompt."
    },
    {
      "name": "AUTOPILOT_DECIDE_REPLY_CLOSE",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": "on",
      "readers": [
        "hooks/advisory-relay.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"off\" to stop a live-panel reply whose first line is [待決回覆] from closing the decision cards it names."
    },
    {
      "name": "AUTOPILOT_AGENT_ACTIVITY",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "on",
      "readers": [
        "hooks/audit-log.js",
        "hooks/awaiting-owner.js",
        "hooks/live-session-lib.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"off\" to stop the subagent activity stamps."
    },
    {
      "name": "AUTOPILOT_ALLOW_REAL_STORE_WITH_BIN_OVERRIDE",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"1\" to let a dispatch whose --*-bin override is not the PATH binary write the real capability store. Otherwise the strike writer and passive capture skip that write unless ENGINE_CAPABILITY_DIR, ENGINE_CAPABILITY_FILE, or --store isolates it."
    },
    {
      "name": "AUTOPILOT_ASK_DECISION",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "on",
      "readers": [
        "hooks/ask-decision.js",
        "hooks/audit-log.js",
        "hooks/awaiting-owner.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"off\" to stop recording AskUserQuestion prompts as decisions."
    },
    {
      "name": "AUTOPILOT_AUTHOR_KILL_GRACE_SECS",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": 30,
      "readers": [
        "scripts/dispatch-author.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Seconds the agy author runner is given after the outer timeout before it is killed. A positive integer; zero, negatives and non-numbers fall back to 30."
    },
    {
      "name": "AUTOPILOT_AUTHOR_MAX_TOKENS",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": 30000,
      "readers": [
        "scripts/dispatch-author.sh",
        "src/readiness/live-probe.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Response cap of an authoring dispatch."
    },
    {
      "name": "AUTOPILOT_AWAITING_OWNER",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "on",
      "readers": [
        "hooks/advisory-relay.js",
        "hooks/audit-log.js",
        "hooks/awaiting-owner.js",
        "src/status/sources-manifest.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"off\" to stop the awaiting-owner attention records the band shows."
    },
    {
      "name": "AUTOPILOT_BASH_GUARD_PKILL_MODE",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "depth0_delegate_gate.pkill_self_match"
      ],
      "summary": "Environment override of depth0_delegate_gate.pkill_self_match; a garbage value maps to deny."
    },
    {
      "name": "AUTOPILOT_BASH_GUARD_LS_MODE",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "depth0_delegate_gate.bare_ls"
      ],
      "summary": "Environment override of depth0_delegate_gate.bare_ls; a garbage value maps to deny."
    },
    {
      "name": "AUTOPILOT_CAPTURE_PAYLOAD",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "off",
      "readers": [
        "hooks/capture-payload.js",
        "scripts/toggle-payload-capture.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"1\" to write hook payloads to disk for debugging (scripts/toggle-payload-capture.js)."
    },
    {
      "name": "AUTOPILOT_CONFIG_FILE",
      "kind": "env",
      "audience": "user",
      "group": "config",
      "default": "~/.autopilot/config.json",
      "readers": [
        "scripts/check-config-docs.js",
        "scripts/dispatch-foreman.sh",
        "scripts/lib/config-path.js",
        "scripts/resolve-dispatch-topology.js",
        "src/status/review-server.js",
        "src/status/sources-manifest.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Use this file instead of ~/.autopilot/config.json as the operator config."
    },
    {
      "name": "AUTOPILOT_CONSULT_TIMEOUT",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": "5m",
      "readers": [
        "scripts/dispatch-consult.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Timeout of a consult dispatch."
    },
    {
      "name": "AUTOPILOT_CONTEXT_BUDGET_GAP",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "context_budget.gap"
      ],
      "summary": "Environment override of context_budget.gap (number >= 0; beats the config)."
    },
    {
      "name": "AUTOPILOT_CONTEXT_BUDGET_LIVE_WRITE",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "scripts/lib/config-path.js",
        "src/status/sources-manifest.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "context_budget.live_write"
      ],
      "summary": "off, 0 or false stops the live context file write."
    },
    {
      "name": "AUTOPILOT_CONTEXT_BUDGET_MODE",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "hooks/context-budget.js",
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "context_budget.mode"
      ],
      "summary": "Set to \"off\" to silence context-budget. Any other value is ignored (the config accepts \"off\" and \"warn\")."
    },
    {
      "name": "AUTOPILOT_CONTEXT_BUDGET_POST_COMPACT_WARN",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "hooks/context-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "context_budget.post_compact_warn"
      ],
      "summary": "Environment override of context_budget.post_compact_warn (integer >= 0; 0 disables; beats the config). Any other value is ignored, so with nothing valid set the threshold stays 100000."
    },
    {
      "name": "AUTOPILOT_CONTEXT_BUDGET_SEAT",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "hooks/context-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "context_budget.seat"
      ],
      "summary": "Environment override of context_budget.seat (session or resident; beats the config). Any other value is ignored."
    },
    {
      "name": "AUTOPILOT_CONTEXT_BUDGET_STEP",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "hooks/context-budget.js",
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "context_budget.step"
      ],
      "summary": "Environment override of context_budget.step (number >= 0; beats the config)."
    },
    {
      "name": "AUTOPILOT_CONTEXT_BUDGET_T1",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "hooks/context-budget.js",
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "context_budget.t1"
      ],
      "summary": "Environment override of context_budget.t1 (positive number; beats the config)."
    },
    {
      "name": "AUTOPILOT_CONTEXT_BUDGET_T2",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "scripts/lib/config-path.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "context_budget.t2",
        "autoCompactWindow"
      ],
      "summary": "Environment override of context_budget.t2 (positive number; beats the config)."
    },
    {
      "name": "AUTOPILOT_CONTEXT_WINDOW_GATE",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": "block",
      "readers": [
        "scripts/dispatch-author.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh",
        "scripts/lib/context-window.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "off, warn or block: what a dispatch does when its prompt would not fit the engine context window."
    },
    {
      "name": "AUTOPILOT_COST_FUSE_DAILY_USD",
      "kind": "env",
      "audience": "user",
      "group": "cost",
      "default": null,
      "readers": [
        "hooks/cost-fuse.js",
        "scripts/lib/brain-spend.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "cost_fuse.daily_usd_brain"
      ],
      "summary": "Environment override of cost_fuse.daily_usd_brain (positive number)."
    },
    {
      "name": "AUTOPILOT_COST_FUSE_MODE",
      "kind": "env",
      "audience": "user",
      "group": "cost",
      "default": null,
      "readers": [
        "hooks/cost-fuse.js",
        "mods/live/register.ts",
        "scripts/lib/brain-spend.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "cost_fuse.mode"
      ],
      "summary": "Environment override of cost_fuse.mode (block, warn or off)."
    },
    {
      "name": "AUTOPILOT_COST_TRACKER",
      "kind": "env",
      "audience": "user",
      "group": "cost",
      "default": "on",
      "readers": [
        "hooks/cost-tracker.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"false\" to switch the cost tracker off."
    },
    {
      "name": "AUTOPILOT_COST_TRACKER_CACHE_READ_WARN",
      "kind": "env",
      "audience": "user",
      "group": "cost",
      "default": null,
      "readers": [
        "hooks/cost-tracker.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "cost_tracker.cache_read_warn_tokens"
      ],
      "summary": "Environment override of cost_tracker.cache_read_warn_tokens."
    },
    {
      "name": "AUTOPILOT_COST_TRACKER_CLEAR_PCT",
      "kind": "env",
      "audience": "user",
      "group": "cost",
      "default": null,
      "readers": [
        "hooks/cost-tracker.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "cost_tracker.context_clear_pct"
      ],
      "summary": "Environment override of cost_tracker.context_clear_pct."
    },
    {
      "name": "AUTOPILOT_DEPTH0_DELEGATE_GATE_MODE",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "depth0_delegate_gate.mode"
      ],
      "summary": "Environment override of depth0_delegate_gate.mode; a garbage value maps to warn."
    },
    {
      "name": "AUTOPILOT_DEPTH0_WAIT_ADVICE_EVERY",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/depth0-delegate-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "depth0_delegate_gate.wait_advice_every"
      ],
      "summary": "Environment override of depth0_delegate_gate.wait_advice_every."
    },
    {
      "name": "AUTOPILOT_DIRTY_TREE_INTERVAL_MINUTES",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/dirty-protected-paths.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "dirty_tree_reminder.interval_minutes"
      ],
      "summary": "Environment override of dirty_tree_reminder.interval_minutes."
    },
    {
      "name": "AUTOPILOT_DIRTY_TREE_MIN_FILES",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/dirty-protected-paths.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "dirty_tree_reminder.min_files"
      ],
      "summary": "Environment override of dirty_tree_reminder.min_files."
    },
    {
      "name": "AUTOPILOT_DIRTY_TREE_MIN_LINES",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/dirty-protected-paths.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "dirty_tree_reminder.min_lines"
      ],
      "summary": "Environment override of dirty_tree_reminder.min_lines."
    },
    {
      "name": "AUTOPILOT_DIRTY_TREE_REMINDER",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "on",
      "readers": [
        "hooks/dirty-protected-paths.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "dirty_tree_reminder"
      ],
      "summary": "Set to false, 0, off or no to disable the dirty-tree reminder."
    },
    {
      "name": "AUTOPILOT_OWNER_QUESTION_GUARD",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "on",
      "readers": [
        "hooks/owner-question-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "owner_question_guard"
      ],
      "summary": "Set to off, false, 0 or no to disable the owner-question guard."
    },
    {
      "name": "AUTOPILOT_SUBAGENT_BUDGET_MODE",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "subagent_budget.mode"
      ],
      "summary": "Environment override of subagent_budget.mode."
    },
    {
      "name": "AUTOPILOT_SUBAGENT_BUDGET_LANE_DISPATCH_MAX",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "subagent_budget.lane_dispatch_max"
      ],
      "summary": "Environment override of subagent_budget.lane_dispatch_max."
    },
    {
      "name": "AUTOPILOT_SUBAGENT_BUDGET_LANE_TURNS_MAX",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "subagent_budget.lane_turns_max"
      ],
      "summary": "Environment override of subagent_budget.lane_turns_max."
    },
    {
      "name": "AUTOPILOT_SUBAGENT_BUDGET_ROOT_TURNS_PER_HOUR_MAX",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "subagent_budget.root_turns_per_hour_max"
      ],
      "summary": "Environment override of subagent_budget.root_turns_per_hour_max."
    },
    {
      "name": "AUTOPILOT_SUBAGENT_BUDGET_CONCURRENT_ADVISE_MAX",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "subagent_budget.concurrent_advise_max"
      ],
      "summary": "Environment override of subagent_budget.concurrent_advise_max. 0 disables the advisory."
    },
    {
      "name": "AUTOPILOT_SUBAGENT_BUDGET_NOW_MS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": null,
      "relates": [],
      "note": "Epoch-ms clock for hooks/subagent-budget.js; the hook suite injects it so the 60-minute window is deterministic. Honoured only when AUTOPILOT_TEST_ALLOW_SUBAGENT_BUDGET_CLOCK=1 is also set."
    },
    {
      "name": "AUTOPILOT_TEST_ALLOW_SUBAGENT_BUDGET_CLOCK",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": null,
      "relates": [
        "AUTOPILOT_SUBAGENT_BUDGET_NOW_MS"
      ],
      "note": "Set to 1 to let hooks/subagent-budget.js honour AUTOPILOT_SUBAGENT_BUDGET_NOW_MS; any other value (or unset) keeps the real clock."
    },
    {
      "name": "AUTOPILOT_TEST_SUBAGENT_BUDGET_MUTANT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": null,
      "relates": [
        "AUTOPILOT_TEST_ALLOW_SUBAGENT_BUDGET_MUTANT"
      ],
      "note": "Row name for the subagent-budget concurrency mutant oracle. Ignored unless AUTOPILOT_TEST_ALLOW_SUBAGENT_BUDGET_MUTANT is exactly 1. Not a user knob."
    },
    {
      "name": "AUTOPILOT_TEST_ALLOW_SUBAGENT_BUDGET_MUTANT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/subagent-budget.js"
      ],
      "doc": null,
      "relates": [
        "AUTOPILOT_TEST_SUBAGENT_BUDGET_MUTANT"
      ],
      "note": "Set to exactly 1 before hooks/subagent-budget.js will honour AUTOPILOT_TEST_SUBAGENT_BUDGET_MUTANT. Any other value ignores the mutant name."
    },
    {
      "name": "AUTOPILOT_DISCUSS_TIMEOUT",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": "5m",
      "readers": [
        "scripts/dispatch-discuss.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Timeout of a discuss dispatch."
    },
    {
      "name": "AUTOPILOT_DISPATCH_MODEL_GUARD_MODE",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "remind",
      "readers": [
        "hooks/dispatch-model-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"off\" to silence the reminder that a subagent dispatch must name a model and an Engine header."
    },
    {
      "name": "AUTOPILOT_ENDPOINT_<NAME>_URL",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "prefix": "AUTOPILOT_ENDPOINT_",
      "default": null,
      "readers": [
        "scripts/dispatch-author.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh",
        "scripts/lib/load-endpoints-env.js",
        "scripts/load-endpoints-env.sh",
        "scripts/resolve-dispatch-topology.js",
        "scripts/resolve-endpoint.sh",
        "src/endpoints/cli.js",
        "src/engine/autopilot-engine.js",
        "src/engine/local-deployment.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "AUTOPILOT_ENDPOINTS_ENV"
      ],
      "summary": "Per-endpoint settings loaded from the endpoints env file: AUTOPILOT_ENDPOINT_<NAME>_URL and AUTOPILOT_ENDPOINT_<NAME>_TOKEN. An HTTP seat appears in the topology only when its URL is set."
    },
    {
      "name": "AUTOPILOT_ENDPOINTS_ENV",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": "~/.autopilot/endpoints.env",
      "readers": [
        "scripts/lib/load-endpoints-env.js",
        "scripts/load-endpoints-env.sh",
        "src/endpoints/cli.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Path of the endpoints env file (mode 600) that load-endpoints-env.sh reads."
    },
    {
      "name": "AUTOPILOT_FOREMAN_GUARD_ADVISORY_EVERY",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/foreman-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "foreman_guard.advisory_every"
      ],
      "summary": "Environment override of foreman_guard.advisory_every."
    },
    {
      "name": "AUTOPILOT_FOREMAN_GUARD_BASH_CAP",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/foreman-guard.js",
        "scripts/dispatch-foreman.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "foreman_guard.bash_cap"
      ],
      "summary": "Environment override of foreman_guard.bash_cap."
    },
    {
      "name": "AUTOPILOT_FOREMAN_GUARD_MODE",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/foreman-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "foreman_guard.mode"
      ],
      "summary": "Environment override of foreman_guard.mode."
    },
    {
      "name": "AUTOPILOT_FOREMAN_GUARD_RESERVE_CALLS",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/foreman-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "foreman_guard.reserve_calls"
      ],
      "summary": "Environment override of foreman_guard.reserve_calls."
    },
    {
      "name": "AUTOPILOT_FOREMAN_GUARD_ROLE_CAPS",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/foreman-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "foreman_guard.role_caps"
      ],
      "summary": "Environment override of foreman_guard.role_caps as \"foreman=40,worker=120,reviewer=120\"."
    },
    {
      "name": "AUTOPILOT_HANDOFF_INJECT",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": null,
      "readers": [
        "hooks/session-handoff.js",
        "hooks/session-start.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "handoff_inject"
      ],
      "summary": "Set to \"1\" to enable the session snapshot injection (same as handoff_inject: true; either source enables it)."
    },
    {
      "name": "AUTOPILOT_HANDOFF_MIN_TOOL_CALLS",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": 12,
      "readers": [
        "hooks/session-handoff.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "handoff_inject"
      ],
      "summary": "A session needs at least this many tool calls before a snapshot is written."
    },
    {
      "name": "AUTOPILOT_HANDOFF_MIN_USER_TURNS",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": 3,
      "readers": [
        "hooks/session-handoff.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "handoff_inject"
      ],
      "summary": "A session needs at least this many user turns before a snapshot is written."
    },
    {
      "name": "AUTOPILOT_HANDOFF_TRANSCRIPT_CAP",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": 16777216,
      "readers": [
        "hooks/session-handoff.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "handoff_inject"
      ],
      "summary": "Maximum transcript bytes the snapshot writer reads (16 MiB)."
    },
    {
      "name": "AUTOPILOT_HOOK_<STEM>",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "prefix": "AUTOPILOT_HOOK_",
      "default": null,
      "readers": [
        "hooks/_shared/opt-in.js",
        "hooks/exec-boundary.js",
        "hooks/opt-in-multiplexer.js",
        "hooks/orchestrator-edit-gate.js",
        "hooks/residue-auto-reap-lib.js",
        "hooks/residue-auto-reap.js",
        "scripts/benchmark-hook-multiplexer.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "hooks.<stem>"
      ],
      "summary": "Per-hook switch from the environment; <STEM> is the hook file stem upper-cased with dashes as underscores (AUTOPILOT_HOOK_BRANCH_PROTECTION=1)."
    },
    {
      "name": "AUTOPILOT_HOOK_RESIDUE_AUTO_REAP",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "on",
      "readers": [
        "hooks/residue-auto-reap-lib.js",
        "hooks/residue-auto-reap.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "hooks.<stem>",
        "residue.auto_reap"
      ],
      "summary": "Set to 0, false, off or no to disable the automatic residue sweep hook."
    },
    {
      "name": "AUTOPILOT_INTENT_CAPTURE",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "on",
      "readers": [
        "hooks/intent-capture.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"false\" to stop the per-directory intent capture used for cross-session resume hints."
    },
    {
      "name": "AUTOPILOT_LIVE_DIR",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": "auto (tmpfs)",
      "readers": [
        "hooks/live-session-lib.js",
        "hooks/runs-watch-autostart.js",
        "scripts/lib/live-state-dir.js",
        "src/status/load-source.js",
        "src/status/runs-watch.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Overrides the directory for the live status files; an explicit value is an isolation request and is never replaced by a fallback."
    },
    {
      "name": "AUTOPILOT_LOCALE",
      "kind": "env",
      "audience": "user",
      "group": "ui",
      "default": null,
      "readers": [
        "mods/live/i18n.ts",
        "mods/live/register.ts",
        "mods/viewer/show.ts"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "ui.locale"
      ],
      "summary": "en or zh-TW; used when ui.locale is auto or absent."
    },
    {
      "name": "AUTOPILOT_MERGE_TASK_STATUS",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "on",
      "readers": [
        "hooks/audit-log.js",
        "hooks/merge-task-status-lib.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"off\" to stop merging task-status input into the band."
    },
    {
      "name": "AUTOPILOT_MIN_REVIEWED_SEATS",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": "all seats",
      "readers": [
        "scripts/check-phase-review-receipt.js",
        "scripts/hetero-review-loop.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Minimum seats that must have reviewed before a review loop or phase receipt passes (same grammar as --min-reviewed-seats)."
    },
    {
      "name": "AUTOPILOT_MINIMAX_BASE_URL",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": null,
      "readers": [
        "scripts/dispatch-anthropic-review.js",
        "scripts/dispatch-author.sh",
        "scripts/dispatch-review.sh",
        "scripts/lib/load-endpoints-env.js",
        "scripts/load-endpoints-env.sh",
        "scripts/resolve-endpoint.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Base URL for the provider-native MiniMax endpoint."
    },
    {
      "name": "AUTOPILOT_ORCH_EDIT_GATE_MODE",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/orchestrator-edit-gate.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "orchestrator_edit_gate.mode"
      ],
      "summary": "Environment override of orchestrator_edit_gate.mode."
    },
    {
      "name": "AUTOPILOT_PRECOMPACT_STDOUT",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": "on",
      "readers": [
        "hooks/state-checkpoint.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"0\" to stop the PreCompact hook printing its guidance text for the summarizer."
    },
    {
      "name": "AUTOPILOT_PROTECTED_BRANCHES",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "^(main|master)$",
      "readers": [
        "hooks/branch-protection.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "hooks.<stem>"
      ],
      "summary": "Branch-name pattern the opt-in branch-protection hook guards."
    },
    {
      "name": "AUTOPILOT_QC_OUTCOME",
      "kind": "env",
      "audience": "user",
      "group": "project",
      "default": "off",
      "readers": [
        "scripts/resolve-qc-gate.sh",
        ".githooks/pre-push"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        ".claude/qc-gate-config.md"
      ],
      "summary": "Overrides outcome in qc-gate-config.md (off, warn, or block). off skips the outcome stage only."
    },
    {
      "name": "AUTOPILOT_QUALIFICATION_OVERRIDE",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh",
        "scripts/resolve-review-loop.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "A matching, unexpired override that lets a dispatch use a seat whose qualification would otherwise refuse it."
    },
    {
      "name": "AUTOPILOT_RESIDUE_ARCHIVE_BRANCH_DAYS",
      "kind": "env",
      "audience": "user",
      "group": "residue",
      "default": null,
      "readers": [
        "scripts/lib/residue-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "residue.archive_branch_days"
      ],
      "summary": "Positive number; environment override of residue.archive_branch_days."
    },
    {
      "name": "AUTOPILOT_RESIDUE_ARCHIVE_REMIND_DAYS",
      "kind": "env",
      "audience": "user",
      "group": "residue",
      "default": null,
      "readers": [
        "scripts/lib/residue-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "residue.archive_remind_days"
      ],
      "summary": "Positive number; environment override of residue.archive_remind_days."
    },
    {
      "name": "AUTOPILOT_RESIDUE_AUTO_REAP",
      "kind": "env",
      "audience": "user",
      "group": "residue",
      "default": null,
      "readers": [
        "hooks/residue-auto-reap-lib.js",
        "hooks/residue-auto-reap.js",
        "scripts/lib/residue-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "residue.auto_reap"
      ],
      "summary": "0 or 1; environment override of residue.auto_reap."
    },
    {
      "name": "AUTOPILOT_RESIDUE_LEASE_HOURS",
      "kind": "env",
      "audience": "user",
      "group": "residue",
      "default": null,
      "readers": [
        "scripts/lib/residue-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "residue.lease_hours"
      ],
      "summary": "Positive number; environment override of residue.lease_hours."
    },
    {
      "name": "AUTOPILOT_RESIDUE_TMP_PRUNE",
      "kind": "env",
      "audience": "user",
      "group": "residue",
      "default": null,
      "readers": [
        "scripts/lib/residue-config.js",
        "scripts/repo-residue-sweep.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "residue.tmp_prune"
      ],
      "summary": "0 or 1; environment override of residue.tmp_prune."
    },
    {
      "name": "AUTOPILOT_REVIEW_SERVER_AUTOSTART",
      "kind": "env",
      "audience": "user",
      "group": "ui",
      "default": "on",
      "readers": [
        "src/status/runs-watch.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "review.port"
      ],
      "summary": "Set to \"0\" to stop the runs watcher from starting the review page server."
    },
    {
      "name": "AUTOPILOT_REVIEW_MAX_CONCURRENCY",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": "unlimited",
      "readers": [
        "scripts/lib/review-fanout.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Most review seats that run at once in a review fan-out (qc panel, final panel); the rest queue in order and each seat's timeout starts when it actually starts. Unset, 0 or not a whole number means all seats at once."
    },
    {
      "name": "AUTOPILOT_REVIEW_IDLE_TIMEOUT",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": "unset (off)",
      "readers": [
        "scripts/dispatch-review.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Idle cap for a review seat: no growth of its output files for this long (seconds, or Ns / Nm) kills the seat and reports no_verdict seat_idle_timeout so the seat can be swapped. Same as dispatch-review --idle-timeout, which wins. Unset or 0 means off."
    },
    {
      "name": "AUTOPILOT_IDLE_WATCH_SCRIPT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/dispatch-review.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_IDLE_WATCH_WHOLE_SECONDS",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/lib/idle-watch.sh"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_RUN_APPROVAL_MODE",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": null,
      "readers": [
        "hooks/run-approval-gate.js",
        "scripts/run-approval.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "run_approval.mode"
      ],
      "summary": "Environment override of run_approval.mode; an unrecognised value means off."
    },
    {
      "name": "AUTOPILOT_RUNS_WATCH_AUTOSTART",
      "kind": "env",
      "audience": "user",
      "group": "ui",
      "default": "on",
      "readers": [
        "hooks/advisory-relay.js",
        "hooks/awaiting-owner.js",
        "hooks/runs-watch-autostart.js",
        "scripts/session-mode.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"0\" to stop sessions from starting the live runs watcher."
    },
    {
      "name": "AUTOPILOT_RUNS_WATCH_IDLE_EXIT_S",
      "kind": "env",
      "audience": "user",
      "group": "ui",
      "default": null,
      "readers": [
        "hooks/runs-watch-autostart.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Seconds of idleness before the runs watcher exits (positive integer)."
    },
    {
      "name": "AUTOPILOT_RUNS_WATCH_INTERVAL_S",
      "kind": "env",
      "audience": "user",
      "group": "ui",
      "default": null,
      "readers": [
        "hooks/runs-watch-autostart.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Seconds between runs watcher polls (positive integer)."
    },
    {
      "name": "AUTOPILOT_SESSION_TASKS",
      "kind": "env",
      "audience": "user",
      "group": "hooks",
      "default": "on",
      "readers": [
        "hooks/session-tasks.js",
        "src/status/sources-manifest.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"off\" to stop folding task-tool events into the live band."
    },
    {
      "name": "AUTOPILOT_STRIKE_ENFORCEMENT",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": "enforce",
      "readers": [
        "scripts/engine-scorecard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"enforce\" to arm strike-based requalification; otherwise strikes are only recorded."
    },
    {
      "name": "AUTOPILOT_SUGGEST_COMPACT",
      "kind": "env",
      "audience": "user",
      "group": "context",
      "default": "on",
      "readers": [
        "hooks/suggest-compact.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Set to \"false\" to turn off the tool-call-count compaction nudge (suggest-compact hook)."
    },
    {
      "name": "AUTOPILOT_TMP_LOG_RETENTION_DAYS",
      "kind": "env",
      "audience": "user",
      "group": "residue",
      "default": 3,
      "readers": [
        "scripts/dispatch-author.sh",
        "scripts/dispatch-explore.sh",
        "scripts/dispatch-hetero.sh",
        "scripts/dispatch-review.sh",
        "scripts/lib/prune-tmp-residue.sh",
        "scripts/lib/tmp-residue.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Days dispatch scripts keep their temp logs; 0 disables the prune."
    },
    {
      "name": "AUTOPILOT_TOPOLOGY_FILE",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": "~/.autopilot/topology.json",
      "readers": [
        "scripts/dispatch-plan-review.js",
        "scripts/hetero-review-loop.js",
        "scripts/resolve-dispatch-topology.js",
        "scripts/resolve-review-loop.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "topology.exclude_seats"
      ],
      "summary": "Where the derived dispatch topology is written and read."
    },
    {
      "name": "AUTOPILOT_ONBOARD_HINT",
      "kind": "env",
      "audience": "user",
      "group": "update",
      "default": "on",
      "readers": [
        "hooks/session-start.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "onboard_hint"
      ],
      "summary": "Set to \"0\" to stop the startup onboard suggestion (either this or onboard_hint: false switches it off)."
    },
    {
      "name": "AUTOPILOT_UPDATE_CHECK",
      "kind": "env",
      "audience": "user",
      "group": "update",
      "default": "on",
      "readers": [
        "hooks/session-start.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "update_check"
      ],
      "summary": "Set to \"0\" to stop the update notice (either this or update_check: false switches it off)."
    },
    {
      "name": "AUTOPILOT_CONFIG_PAIR_CHECK",
      "kind": "env",
      "audience": "user",
      "group": "update",
      "default": "on",
      "readers": [
        "hooks/session-start.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "update_check",
        "AUTOPILOT_UPDATE_CHECK"
      ],
      "summary": "Set to \"0\" to stop the ordinary-session reminder when context_budget.t2 plus gap is above autoCompactWindow minus 33000."
    },
    {
      "name": "AUTOPILOT_PRICES_FETCH",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": "on",
      "readers": [
        "hooks/session-start.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "prices_fetch"
      ],
      "summary": "Set to \"0\" to stop the SessionStart refresh of the seat price cache (either this or prices_fetch: false switches it off)."
    },
    {
      "name": "AUTOPILOT_PRICES_CACHE_DIR",
      "kind": "env",
      "audience": "user",
      "group": "dispatch",
      "default": "~/.autopilot/qualification-prices",
      "readers": [
        "scripts/lib/qualification-prices.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Where the seat price cache lives (never inside a git work tree); tests point it at a temp dir."
    },
    {
      "name": ".claude/backlog-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/backlog-config.md",
      "default": null,
      "readers": [
        "skills/onboard/SKILL.md",
        "scripts/resolve-project-paths.sh",
        "scripts/scaffold-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Backlog entry schema options and pointer rule."
    },
    {
      "name": ".claude/debug-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/debug-config.md",
      "default": null,
      "readers": [
        "skills/debug/SKILL.md",
        "skills/dev-flow/SKILL.md"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Project-specific debug tools and log paths."
    },
    {
      "name": ".claude/dev-flow-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/dev-flow-config.md",
      "default": null,
      "readers": [
        "skills/dev-flow/SKILL.md",
        "scripts/resolve-project-paths.sh",
        "scripts/scaffold-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Size rules, quality gates, build commands, special rules."
    },
    {
      "name": ".claude/dispatch-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/dispatch-config.md",
      "default": null,
      "readers": [
        "skills/ceo-agent/SKILL.md",
        "skills/debug/SKILL.md",
        "skills/dev-flow/SKILL.md"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Which dispatcher, reviewer and methodology autopilot delegates to when other plugins are installed."
    },
    {
      "name": ".claude/dispatch-guard-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/dispatch-guard-config.md",
      "default": null,
      "readers": [
        "hooks/README.md",
        "hooks/dispatch-model-guard.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Per-project gate on expensive-model dispatch (dispatch-model-guard)."
    },
    {
      "name": ".claude/doa-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/doa-config.md",
      "default": null,
      "readers": [
        "skills/dev-flow/references/model-routing.md",
        "skills/quality-pipeline/references/model-routing.md",
        "skills/survey/references/model-routing.md"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Delegated Operations Authority presets for subagent dispatch."
    },
    {
      "name": ".claude/doc-drift-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/doc-drift-config.md",
      "default": null,
      "readers": [
        "skills/dev-flow/references/post-feature-doc-sync.md",
        "skills/doc-sync/SKILL.md",
        "skills/onboard/SKILL.md"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Doc-to-code domains the doc-sync skill audits."
    },
    {
      "name": ".claude/execution-boundary-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/execution-boundary-config.md",
      "default": null,
      "readers": [
        "hooks/README.md",
        "hooks/exec-boundary.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "sanctioned_roots, protected refs and allow_sql for the opt-in exec-boundary hook."
    },
    {
      "name": ".claude/finish-flow-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/finish-flow-config.md",
      "default": null,
      "readers": [
        "skills/finish-flow/SKILL.md"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Closing-sequence overrides (merge target, archive procedure, per-size quality gate)."
    },
    {
      "name": ".claude/knowledge-routing-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/knowledge-routing-config.md",
      "default": null,
      "readers": [
        "scripts/resolve-knowledge-routing.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Where durable knowledge lands (handoff, learn, distill)."
    },
    {
      "name": ".claude/loop.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/loop.md",
      "default": null,
      "readers": [
        "skills/ceo-agent/SKILL.md",
        "skills/ceo-agent/references/level-front-door.md",
        "skills/dev-flow/SKILL.md"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Default prompt for a bare /loop."
    },
    {
      "name": ".claude/model-routing-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/model-routing-config.md",
      "default": null,
      "readers": [
        "skills/dev-flow/SKILL.md",
        "skills/dev-flow/references/model-routing.md",
        "skills/quality-pipeline/SKILL.md"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Subagent model and mode per role."
    },
    {
      "name": ".claude/next-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/next-config.md",
      "default": null,
      "readers": [
        "skills/next/SKILL.md",
        "scripts/resolve-project-paths.sh",
        "scripts/scaffold-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Work source paths for the next skill."
    },
    {
      "name": ".claude/owner-kernel-governance.json",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "needle": "owner-kernel-governance.json",
      "template": "project-config-template/governance-config.md",
      "default": null,
      "readers": [
        "scripts/dispatch-hetero.sh",
        "scripts/lib/repo-layout.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Project governance: mission-convergence enforcement and budgets, guidance defaults, red lines, rosters (the file name is historical; the file is live)."
    },
    {
      "name": ".claude/profiling-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/profiling-config.md",
      "default": null,
      "readers": [
        "skills/dev-flow/SKILL.md",
        "skills/profiling/SKILL.md"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Profiling tools and metrics collection."
    },
    {
      "name": ".claude/project-lifecycle-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/project-lifecycle-config.md",
      "default": null,
      "readers": [
        "skills/project-lifecycle/SKILL.md",
        "scripts/resolve-project-paths.sh",
        "scripts/scaffold-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Project paths and bootstrap/archive scripts."
    },
    {
      "name": ".claude/qc-gate-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/qc-gate-config.md",
      "default": null,
      "readers": [
        "skills/finish-flow/SKILL.md",
        "scripts/install-hooks.sh",
        "scripts/resolve-qc-gate.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Strength of the QC forcing function at push and finish-flow."
    },
    {
      "name": ".claude/quality-gate-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/quality-gate-config.md",
      "default": null,
      "readers": [
        "skills/onboard/SKILL.md",
        "skills/quality-pipeline/SKILL.md"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Test, scan and review commands."
    },
    {
      "name": ".claude/review-loop-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/review-loop-config.md",
      "default": null,
      "readers": [
        "skills/ceo-agent/SKILL.md",
        "skills/ceo-agent/references/depth0-control-loop.md",
        "skills/ceo-agent/references/level-front-door.md"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Engine roster and loop policy of the heterogeneous review pipeline."
    },
    {
      "name": ".claude/skill-routing.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/skill-routing.md",
      "default": null,
      "readers": [
        "skills/dev-flow/SKILL.md",
        "skills/onboard/SKILL.md",
        "scripts/scaffold-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Maps keywords to your project domain skills."
    },
    {
      "name": ".claude/task-class-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/task-class-config.md",
      "default": null,
      "readers": [
        "skills/ceo-agent/references/level-front-door.md",
        "scripts/scaffold-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Autonomous front-door routing and next-pick weighting."
    },
    {
      "name": ".claude/team-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/team-config.md",
      "default": null,
      "readers": [
        "skills/dev-flow/SKILL.md",
        "skills/team/SKILL.md"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Team role templates for your tech stack."
    },
    {
      "name": ".claude/test-integrity-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/test-integrity-config.md",
      "default": null,
      "readers": [
        "skills/quality-pipeline/references/test-integrity-gate.md",
        "scripts/check-test-integrity.sh",
        "scripts/lib/test-integrity-l1.py"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Mode and rules of the test-integrity gate."
    },
    {
      "name": ".claude/test-strategy-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/test-strategy-config.md",
      "default": null,
      "readers": [
        "skills/dev-flow/SKILL.md",
        "skills/test-strategy/SKILL.md",
        "scripts/scaffold-config.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Test commands, pyramid ratios, coverage thresholds."
    },
    {
      "name": ".claude/worktree-teardown-config.md",
      "kind": "project_di",
      "audience": "user",
      "group": "project",
      "template": "project-config-template/worktree-teardown-config.md",
      "default": null,
      "readers": [
        "scripts/resolve-worktree-teardown.sh"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [],
      "summary": "Per-project cleanup seam for hetero worktrees."
    },
    {
      "name": "config_schema_version",
      "kind": "config_key",
      "audience": "user",
      "group": "update",
      "type": "number",
      "default": 0,
      "readers": [
        "scripts/lib/config-audit.js"
      ],
      "doc": "docs/settings-reference.md",
      "relates": [
        "update_check"
      ],
      "summary": "The config.json format version you last reviewed (current: 1). Missing counts as 0. Autopilot never writes it; set it to the current number after reading the upgrade check, which then stops listing changes up to that number."
    },
    {
      "name": "AUTOPILOT_OUTBOX_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/qualification-send-queue.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "AUTOPILOT_OUTBOX_FAILPOINT",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "scripts/qualification-send-queue.js"
      ],
      "doc": null,
      "relates": []
    },
    {
      "name": "T14_GATE_WRITE_EVIDENCE",
      "kind": "env",
      "audience": "internal",
      "class": "test_seam",
      "default": null,
      "readers": [
        "hooks/tests/t14-turn-verifier.test.sh",
        "hooks/tests/orchestration-eval-gate.test.sh",
        "hooks/tests/t14-gate-batch.test.sh"
      ],
      "doc": null,
      "relates": [],
      "note": "When set to 1, the t14 gate tests refresh docs/plans/evidence/2026-10-19-t14-gate-experiment/s*-red.txt. Default is unset, and the tests leave those files alone. Paths written into the transcripts use the placeholder /tmp/ORCH-GATE-TEST-TMP."
    },
    {
      "name": "AUTOPILOT_ROOMS_DIR",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": null,
      "readers": [
        "scripts/lib/room-log.js",
        "scripts/roundtable-window.js",
        "mods/roundtable/register.ts"
      ],
      "doc": "docs/plans/2026-09-19-roundtable.md",
      "relates": [],
      "note": "Parent of per-room directories. Unset means $HOME/.autopilot/rooms. Read by scripts/lib/room-log.js."
    },
    {
      "name": "FLEET_LIFETIME",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/lib/repo-identity.sh"
      ],
      "doc": "docs/fleet-child-contract.md",
      "relates": [],
      "note": "Exported by child_session_mint to every claude child a rail launches. Always ephemeral; an inherited value is overridden, a child is never promoted to durable."
    },
    {
      "name": "FLEET_PARENT",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/lib/repo-identity.sh"
      ],
      "doc": "docs/fleet-child-contract.md",
      "relates": [],
      "note": "Exported by child_session_mint. An inherited FLEET_PARENT is kept, else the launching Claude Code session id."
    },
    {
      "name": "FLEET_ROLE",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/lib/repo-identity.sh"
      ],
      "doc": "docs/fleet-child-contract.md",
      "relates": [],
      "note": "Exported by child_session_mint, display only for fleet. review-seat for dispatch-review, hand for dispatch-author and dispatch-hetero, child when the caller gives none."
    },
    {
      "name": "ROUNDTABLE_FLEET_BIN",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": "fleet",
      "readers": [
        "scripts/roundtable-window.js"
      ],
      "doc": "docs/plans/2026-09-19-roundtable.md",
      "relates": [],
      "note": "Executable used for fleet send. Tests point it at a fake. Default is fleet."
    },
    {
      "name": "ROUNDTABLE_TMUX_BIN",
      "kind": "env",
      "audience": "internal",
      "class": "path_seam",
      "default": "tmux",
      "readers": [
        "scripts/roundtable-window.js"
      ],
      "doc": "docs/plans/2026-09-19-roundtable.md",
      "relates": [],
      "note": "tmux binary for open. Tests inject a fake. Default is tmux."
    },
    {
      "name": "ROUNDTABLE_SEATS",
      "kind": "env",
      "audience": "internal",
      "class": "plumbing",
      "default": null,
      "readers": [
        "scripts/roundtable-window.js"
      ],
      "doc": "docs/plans/2026-09-19-roundtable.md",
      "relates": [],
      "note": "Comma-separated courier handles used when --seats is omitted. Else say-row senders other than owner and moderator."
    }
  ]
}