A listener finds, K assigned fixers land in parallel, and every widening re-enters the gate

[Shashankss1205]

Phase 1 of the agents-as-nodes plan: autonomous agents as graph nodes, with the admission gate deciding every round. Five commits, each PR-sized with its own failure-mode gate tests; the full suite is green after each one (2,025 passed at HEAD).

What lands

• grapharc.registries.fix_issues — the listener/fixer job under the full RegistryBundle contract: scan_issues appends one issue per entry, the planner proposes one fix_one instance per outstanding issue (all edged from the same predecessor, so they execute in one superstep, concurrently), then verify_fixes and report. A round may carry a continuing scan and fixers for already-found issues — pipeline overlap with zero new mechanism, and every widening re-enters admission. The scripted rehearsal runs the refusal story against the default policy: round 1's eager fixer is rejected edge_denied and never executes, and the final report says out loud how to enable fixing.
• Args under admission (closes ROADMAP §5.6 minimally) — NodeSpec.args_schema puts a proposal's args under a sixth check, one rejection per failing field with the remedy naming the schema; the Materializer forwards the validated dump and re-validates on build, so an edited proposal or a swapped registry refuses to build. The slim parse path gains args/note so a small model's fixer does not arrive argless. fix_one requires its FixAssignment — the fingerprint an approval binds now includes who was assigned what.
• Write leases — a harness pre-hook: the first writer holds a path, the second is refused with the holder named, and the refusal lands in the loser's report as data. Reads are never gated; the lease dies with its node.
• The delegated tier ladder — the default for Claude-CLI-backed agent nodes changes from bypassPermissions to an allowlist mapped from the node's own tools (read_file→Read, … run_command→Bash), so one operator declaration governs both tiers; bypass is reachable only by name and stamped on every trace event. Two adjacent defects fixed: --max-tokens under claude-cli was accepted and silently unapplied (now refused with the reason), and a timed-out delegate orphaned Claude Code's own shells (the CLI now runs in its own session and the deadline kills the whole group).
• The V1 gate task — bench fix_all_issues: three planted defects under src/, each file's docstring stating the invariant its code violates, graded per fix (files_contain; half done is not a success), config/ protected. ROADMAP V1 stays mechanism done, gate not run and now names precisely which recorded live-model run flips it.

Verified

• 30 new gate tests across test_fix_issues_gate.py, test_admission.py, test_slim_proposal.py, test_leases.py, test_delegate_tiers.py, test_agent_delegate.py — each pinning a refusal, not a happy path.
• The scripted rehearsal end-to-end through the real CLI: grapharc plan "fix the issues in this repo" --registry grapharc.registries.fix_issues:build_registry --scripted --go → rejected, admitted, admitted, goal_met, honest report.
• All four bench grading states (unfixed / half-fixed / fixed / protected-dir tampered) behave correctly.
• Docs moved with the code: admission's six-check table, the governance cookbook's byte-verified transcripts, README and deep-dive Limits, both architecture diagrams, ROADMAP §5.6 and the V1 row.

🤖 Generated with Claude Code