01The Orchestrator assigns the work, logs each non-obvious choice in decisions.md, and does no primary reading.
02Each file has an owner and a separate second reader. When they disagree, the Integrator / Architect settles it by evidence strength, never by vote.
03Every claim carries exactly one evidence label, which is Observed, Read, or Inferred.
04Each phase ends with an exit gate. The QA Auditor records it as PASS, PASS WITH EXCEPTIONS, or FAIL, and links every unmet item to an unknown or contradiction.
05The coverage ledger accounts for every line of every tracked file. Gaps go to the unknowns and contradictions lists and never count as covered. Roles send entries through inbox/, and only the Orchestrator merges them.
06A fresh Cold Reader answers questions from the spec alone and never sees the source. The QA Auditor scores the answers and writes the final self-audit.